From 0dbb6f44c538490323268542dded3fd4d8fc426c Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 3 Mar 2026 13:39:00 +0100
Subject: [PATCH 001/244] Add specific error for failed posix_fallocate call.

This clarifies failed header initialization on filesystems
with not enough space.

Fixes: #978.
---
 lib/utils_device.c | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/lib/utils_device.c b/lib/utils_device.c
index 1cdbcc653..c40818ead 100644
--- a/lib/utils_device.c
+++ b/lib/utils_device.c
@@ -676,7 +676,7 @@ int device_fallocate(struct device *device, uint64_t size)
 		return -EINVAL;
 
 	if (!fstat(devfd, &st) && S_ISREG(st.st_mode) &&
-	    ((uint64_t)st.st_size >= size || !posix_fallocate(devfd, 0, size))) {
+	    ((uint64_t)st.st_size >= size || !(r = posix_fallocate(devfd, 0, size)))) {
 		r = 0;
 		if (device->file_path && crypt_loop_resize(device->path))
 			r = -EINVAL;
@@ -690,6 +690,7 @@ int device_check_size(struct crypt_device *cd,
 		      struct device *device,
 		      uint64_t req_offset, int falloc)
 {
+	int r;
 	uint64_t dev_size;
 
 	if (device_size(device, &dev_size)) {
@@ -701,8 +702,17 @@ int device_check_size(struct crypt_device *cd,
 
 	if (req_offset > dev_size) {
 		/* If it is header file, increase its size */
-		if (falloc && !device_fallocate(device, req_offset))
-			return 0;
+		if (falloc) {
+			if (!(r = device_fallocate(device, req_offset)))
+				return 0;
+
+			/* posix_fallocate returns positive errno on error */
+			if (r > 0) {
+				log_err(cd, _("Cannot grow %s to %" PRIu64 " bytes (%s)."),
+					device_path(device), req_offset, strerror(r));
+				return -EINVAL;
+			}
+		}
 
 		log_err(cd, _("Device %s is too small. Need at least %" PRIu64 " bytes."),
 			device_path(device), req_offset);

From f632a158b02e9002612ba570fa4dc3d446bf0a44 Mon Sep 17 00:00:00 2001
From: Kristina Hanicova <khanicov@redhat.com>
Date: Thu, 12 Mar 2026 16:19:43 +0100
Subject: [PATCH 002/244] ci: Temporarily remove failing WD disk

---
 .gitlab/ci/fedora-opal.yml | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/.gitlab/ci/fedora-opal.yml b/.gitlab/ci/fedora-opal.yml
index 16cfcf816..be5f78f2e 100644
--- a/.gitlab/ci/fedora-opal.yml
+++ b/.gitlab/ci/fedora-opal.yml
@@ -118,21 +118,21 @@ test-rawhide-samsung980pro:
     PCI_PASSTHROUGH_DEVICE_ID: "a80a"
 
 # WD PC SN740 SDDQMQD-256G-1001 (on trantor machine)
-test-rawhide-wdSN740:
-  rules:
-    - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup"
-      when: never
-    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH || $CI_COMMIT_BRANCH =~ /v2\..\.x$/
-    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
-  extends:
-    - .opal-template-fedora
-  tags:
-    - trantor
-  resource_group: wdSN740-on-trantor
-  interruptible: false
-  variables:
-    PCI_PASSTHROUGH_VENDOR_ID: "15b7"
-    PCI_PASSTHROUGH_DEVICE_ID: "5016"
+# test-rawhide-wdSN740:
+#   rules:
+#     - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup"
+#       when: never
+#     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH || $CI_COMMIT_BRANCH =~ /v2\..\.x$/
+#     - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+#   extends:
+#     - .opal-template-fedora
+#   tags:
+#     - trantor
+#   resource_group: wdSN740-on-trantor
+#   interruptible: false
+#   variables:
+#     PCI_PASSTHROUGH_VENDOR_ID: "15b7"
+#     PCI_PASSTHROUGH_DEVICE_ID: "5016"
 
 # # UMIS RPETJ256MGE2MDQ (on tiber machine)
 # test-commit-rawhide-umis:

From ce0bb25bab1411ea03f2ceee70f1f55d4ae3e6a5 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 13 Mar 2026 13:30:59 +0100
Subject: [PATCH 003/244] Minor code cleanup in
 crypt_resume_by_keyslot_context.

---
 lib/setup.c | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/lib/setup.c b/lib/setup.c
index 93c7ef5f8..acdd80970 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -4544,12 +4544,9 @@ int crypt_resume_by_keyslot_context(struct crypt_device *cd,
 		goto out;
 
 	r = resume_by_volume_key(cd, vk, name);
-
-	crypt_free_volume_key(vk);
-	return r < 0 ? r : unlocked_keyslot;
 out:
 	crypt_free_volume_key(vk);
-	return r;
+	return r < 0 ? r : unlocked_keyslot;
 }
 
 int crypt_resume_by_passphrase(struct crypt_device *cd,

From 593b806109f9c60f2dec217cb4f20536cb64381b Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 13 Mar 2026 13:25:59 +0100
Subject: [PATCH 004/244] Check UUID of resumed device matches UUID stored in
 metadata.

Adds check for matching active device UUID. Otherwise it is possible
to resume device with invalid context, eventually resulting in
data corruption (different VK gets loaded).

Fixes: #849.
---
 lib/setup.c        | 14 ++++++++++++++
 tests/api-test-2.c | 32 ++++++++++++++++++++++++++++++++
 tests/api-test.c   | 32 ++++++++++++++++++++++++++++++++
 3 files changed, 78 insertions(+)

diff --git a/lib/setup.c b/lib/setup.c
index acdd80970..afc9d8c10 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -4504,6 +4504,7 @@ int crypt_resume_by_keyslot_context(struct crypt_device *cd,
 	int r;
 	struct volume_key *vk = NULL;
 	int unlocked_keyslot = -EINVAL;
+	struct crypt_dm_active_device dmd = {};
 
 	if (!name)
 		return -EINVAL;
@@ -4522,6 +4523,17 @@ int crypt_resume_by_keyslot_context(struct crypt_device *cd,
 		return -EINVAL;
 	}
 
+	r = dm_query_device(cd, name, DM_ACTIVE_UUID, &dmd);
+	if (r < 0)
+		return r;
+
+	r = dm_uuid_cmp(dmd.uuid, LUKS_UUID(cd));
+	if (r < 0) {
+		log_dbg(cd, "LUKS device header uuid: %s mismatches DM returned uuid %s",
+			LUKS_UUID(cd), dmd.uuid);
+		goto out;
+	}
+
 	if (isLUKS1(cd->type) && kc->get_luks1_volume_key)
 		r = kc->get_luks1_volume_key(cd, kc, keyslot, &vk);
 	else if (isLUKS2(cd->type) && kc->get_luks2_volume_key)
@@ -4546,6 +4558,8 @@ int crypt_resume_by_keyslot_context(struct crypt_device *cd,
 	r = resume_by_volume_key(cd, vk, name);
 out:
 	crypt_free_volume_key(vk);
+	free(CONST_CAST(void*)dmd.uuid);
+
 	return r < 0 ? r : unlocked_keyslot;
 }
 
diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index b188e5f53..3cf28e187 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -32,6 +32,7 @@ typedef int32_t key_serial_t;
 #include "libcryptsetup.h"
 
 #define DEVICE_1_UUID "28632274-8c8a-493f-835b-da802e1c576b"
+#define DEVICE_2_UUID "a8632274-8c8a-493f-835b-da802e1c576b"
 #define DEVICE_EMPTY_name "crypt_zero"
 #define DEVICE_EMPTY DMDIR DEVICE_EMPTY_name
 #define DEVICE_ERROR_name "crypt_error"
@@ -829,6 +830,37 @@ static void SuspendDevice(void)
 	OK_(crypt_deactivate(cd, CDEVICE_1));
 	CRYPT_FREE(cd);
 
+	OK_(crypt_init(&cd, DEVICE_1));
+	OK_(crypt_load(cd, CRYPT_LUKS2, NULL));
+
+	/* Create identical device except the UUID and VK */
+	OK_(crypt_init(&cd2, DMDIR L_DEVICE_OK));
+	OK_(set_fast_pbkdf(cd2));
+	key[0] = ~key[0];
+	OK_(crypt_format(cd2, CRYPT_LUKS2, crypt_get_cipher(cd), crypt_get_cipher_mode(cd), DEVICE_2_UUID, key, key_size, NULL));
+	EQ_(0, crypt_keyslot_add_by_volume_key(cd2, 0, NULL, key_size, PASSPHRASE, strlen(PASSPHRASE)));
+
+	/* Activate and suspend both devices */
+	OK_(crypt_activate_by_passphrase(cd, CDEVICE_1, CRYPT_ANY_SLOT, KEY1, strlen(KEY1), 0));
+	OK_(crypt_suspend(cd, CDEVICE_1));
+	OK_(crypt_activate_by_volume_key(cd2, CDEVICE_2, NULL, key_size, 0));
+	OK_(crypt_suspend(cd2, CDEVICE_2));
+
+	/* Switch context for resume (mismatching UUIDs) */
+	FAIL_(crypt_resume_by_passphrase(cd, CDEVICE_2, 0, KEY1, strlen(KEY1)), "Mismatching UUID.");
+	OK_(crypt_get_active_device(cd2, CDEVICE_2, &cad));
+	EQ_(CRYPT_ACTIVATE_SUSPENDED, cad.flags & CRYPT_ACTIVATE_SUSPENDED);
+	FAIL_(crypt_resume_by_passphrase(cd2, CDEVICE_1, 0, PASSPHRASE, strlen(PASSPHRASE)), "Mismatching UUID.");
+	OK_(crypt_get_active_device(cd, CDEVICE_1, &cad));
+	EQ_(CRYPT_ACTIVATE_SUSPENDED, cad.flags & CRYPT_ACTIVATE_SUSPENDED);
+
+	OK_(crypt_resume_by_passphrase(cd, CDEVICE_1, 0, KEY1, strlen(KEY1)));
+	OK_(crypt_resume_by_passphrase(cd2, CDEVICE_2, 0, PASSPHRASE, strlen(PASSPHRASE)));
+	OK_(crypt_deactivate(cd, CDEVICE_1));
+	OK_(crypt_deactivate(cd2, CDEVICE_2));
+	CRYPT_FREE(cd);
+	CRYPT_FREE(cd2);
+
 	_remove_keyfiles();
 	_cleanup_dmdevices();
 }
diff --git a/tests/api-test.c b/tests/api-test.c
index 5fd07aea4..9b31c286a 100644
--- a/tests/api-test.c
+++ b/tests/api-test.c
@@ -22,6 +22,7 @@
 #include "libcryptsetup.h"
 
 #define DEVICE_1_UUID "28632274-8c8a-493f-835b-da802e1c576b"
+#define DEVICE_2_UUID "a8632274-8c8a-493f-835b-da802e1c576b"
 #define DEVICE_EMPTY_name "crypt_zero"
 #define DEVICE_EMPTY DMDIR DEVICE_EMPTY_name
 #define DEVICE_ERROR_name "crypt_error"
@@ -785,6 +786,37 @@ static void SuspendDevice(void)
 	OK_(crypt_deactivate(cd, CDEVICE_1));
 	CRYPT_FREE(cd);
 
+	OK_(crypt_init(&cd, DEVICE_1));
+	OK_(crypt_load(cd, CRYPT_LUKS1, NULL));
+
+	/* Create identical device except the UUID and VK */
+	OK_(crypt_init(&cd2, DMDIR L_DEVICE_OK));
+	OK_(crypt_set_pbkdf_type(cd2, &fast_pbkdf));
+	key[0] = ~key[0];
+	OK_(crypt_format(cd2, CRYPT_LUKS1, crypt_get_cipher(cd), crypt_get_cipher_mode(cd), DEVICE_2_UUID, key, key_size, NULL));
+	EQ_(0, crypt_keyslot_add_by_volume_key(cd2, 0, NULL, key_size, PASSPHRASE, strlen(PASSPHRASE)));
+
+	/* Activate and suspend both devices */
+	OK_(crypt_activate_by_passphrase(cd, CDEVICE_1, CRYPT_ANY_SLOT, KEY1, strlen(KEY1), 0));
+	OK_(crypt_suspend(cd, CDEVICE_1));
+	OK_(crypt_activate_by_volume_key(cd2, CDEVICE_2, NULL, key_size, 0));
+	OK_(crypt_suspend(cd2, CDEVICE_2));
+
+	/* Switch context for resume (mismatching UUIDs) */
+	FAIL_(crypt_resume_by_passphrase(cd, CDEVICE_2, 0, KEY1, strlen(KEY1)), "Mismatching UUID.");
+	OK_(crypt_get_active_device(cd2, CDEVICE_2, &cad));
+	EQ_(CRYPT_ACTIVATE_SUSPENDED, cad.flags & CRYPT_ACTIVATE_SUSPENDED);
+	FAIL_(crypt_resume_by_passphrase(cd2, CDEVICE_1, 0, PASSPHRASE, strlen(PASSPHRASE)), "Mismatching UUID.");
+	OK_(crypt_get_active_device(cd, CDEVICE_1, &cad));
+	EQ_(CRYPT_ACTIVATE_SUSPENDED, cad.flags & CRYPT_ACTIVATE_SUSPENDED);
+
+	OK_(crypt_resume_by_passphrase(cd, CDEVICE_1, 0, KEY1, strlen(KEY1)));
+	OK_(crypt_resume_by_passphrase(cd2, CDEVICE_2, 0, PASSPHRASE, strlen(PASSPHRASE)));
+	OK_(crypt_deactivate(cd, CDEVICE_1));
+	OK_(crypt_deactivate(cd2, CDEVICE_2));
+	CRYPT_FREE(cd);
+	CRYPT_FREE(cd2);
+
 	_remove_keyfiles();
 	_cleanup_dmdevices();
 }

From 30a8e463e6d6208b7343fee3a09e84a71b85fd3b Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 31 Jul 2025 13:59:26 +0200
Subject: [PATCH 005/244] opal: add support for SUM OPAL2 feature.

For devices supporting SUM (Single User Mode) OPAL2 feature
this patch enables the SUM feature by default on OPAL2
activation during luksFormat.

SUM aims to improve isolation and tightens access to specific
Locking Range user data (hw-opal data segment) by limiting access
to Lock/Unlock and Enable/Disable permissions only to User authority
associated with the locking range.

For example Admin1 authority can no longer unlock/disable SUM locking
range and access plaintext data stored in it. It can only erase it
via Erase method.
---
 lib/libcryptsetup.h         |   2 +
 lib/luks2/hw_opal/hw_opal.c | 579 +++++++++++++++++++++++++++++++++---
 lib/luks2/hw_opal/hw_opal.h |   3 +-
 lib/setup.c                 |   3 +-
 man/common_options.adoc     |   9 +-
 src/cryptsetup.c            |  20 +-
 src/cryptsetup_arg_list.h   |   2 +
 src/cryptsetup_args.h       |   1 +
 src/utils_arg_names.h       |   1 +
 9 files changed, 573 insertions(+), 47 deletions(-)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index e972acd9a..4040187b5 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -747,6 +747,8 @@ uint32_t crypt_get_compatibility(struct crypt_device *cd);
 #define CRYPT_COMPAT_LEGACY_INTEGRITY_HMAC (UINT32_C(1) << 1)
 /** dm-integrity allow recalculating of volumes with HMAC keys (old kernels) */
 #define CRYPT_COMPAT_LEGACY_INTEGRITY_RECALC (UINT32_C(1) << 2)
+/** disable SUM (Single User Mode) when formatting LUKS2 device w/ HW encryption (OPAL2) */
+#define CRYPT_COMPAT_DISABLE_HW_OPAL_SUM (UINT32_C(1) << 3)
 
 /**
  * Convert to new type for already existing device.
diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index fd57b1647..f32c9cb7f 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -31,6 +31,44 @@
 #include <linux/sed-opal.h>
 #include <linux/fs.h>
 
+#ifndef IOC_OPAL_REACTIVATE_LSP
+
+/*
+ * Use following ioctl parameters and ioctl numbers
+ * from kernel sed-opal interface where the SUM extensions
+ * are implemented. If the current kernel (headers) does not
+ * have these extensions we can detect it runtime and turn off
+ * the SUM support. See kernel_opal_sum_supported() below.
+ */
+
+struct opal_lr_react {
+	struct opal_key key;
+	struct opal_key new_admin_key; /* Set new Admin1 PIN if key_len is > 0 */
+	__u8 num_lrs; /*
+		       * Configure selected ranges (from lr[]) in SUM.
+		       * If num_lrs > 0 the 'entire_table' must be 0
+		       */
+	__u8 lr[OPAL_MAX_LRS];
+	__u8 range_policy; /* Set RangePolicy parameter */
+	__u8 entire_table; /* Set all locking objects in SUM */
+	__u8 align[4]; /* Align to 8 byte boundary */
+};
+
+struct opal_sum_ranges {
+	struct opal_key key;
+	__u8 num_lrs;
+	__u8 lr[OPAL_MAX_LRS];
+	__u8 range_policy;
+	__u8 align[5]; /* Align to 8 byte boundary */
+};
+
+#define IOC_OPAL_REACTIVATE_LSP     _IOW('p', 242, struct opal_lr_react)
+#define IOC_OPAL_LR_SET_START_LEN   _IOW('p', 243, struct opal_user_lr_setup)
+#define IOC_OPAL_ENABLE_DISABLE_LR  _IOW('p', 244, struct opal_user_lr_setup)
+#define IOC_OPAL_GET_SUM_STATUS     _IOW('p', 245, struct opal_sum_ranges)
+
+#endif
+
 /* Error codes are defined in the specification:
  * TCG_Storage_Architecture_Core_Spec_v2.01_r1.00
  * Section 5.1.5: Method Status Codes
@@ -118,6 +156,10 @@ static const char *opal_ioctl_to_string(unsigned long rq)
 	case IOC_OPAL_LOCK_UNLOCK:     return "LOCK_UNLOCK";
 	case IOC_OPAL_SAVE:            return "SAVE";
 	case IOC_OPAL_PSID_REVERT_TPR: return "PSID_REVERT_TPR";
+	case IOC_OPAL_REACTIVATE_LSP:    return "REACTIVATE_LSP";
+	case IOC_OPAL_LR_SET_START_LEN:  return "LR_SETUP_START_LENGTH";
+	case IOC_OPAL_ENABLE_DISABLE_LR: return "LR_ENABLE_DISABLE";
+	case IOC_OPAL_GET_SUM_STATUS:    return "GET_SUM_STATUS";
 	}
 
 	assert(false && "unknown OPAL ioctl");
@@ -157,6 +199,15 @@ static void opal_ioctl_debug(struct crypt_device *cd,
 			lrs->range_start, lrs->range_length, lrs->RLE, lrs->WLE, lrs->l_state);
 		};
 		break;
+	case IOC_OPAL_GET_SUM_STATUS: { /* OUT */
+		struct opal_sum_ranges *sr = args;
+		log_dbg(cd, "OPAL %s: lr_plcy: %" PRIu8 ", num_lrs:%" PRIu8 ", lr:"
+			"%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8,
+			cmd, sr->range_policy, sr->num_lrs,
+			sr->lr[0], sr->lr[1], sr->lr[2], sr->lr[3], sr->lr[4],
+			sr->lr[5], sr->lr[6], sr->lr[7], sr->lr[8]);
+		};
+		break;
 	} else switch (rq) {
 	case IOC_OPAL_TAKE_OWNERSHIP: { /* IN */
 		log_dbg(cd, "OPAL %s", cmd);
@@ -233,6 +284,36 @@ static void opal_ioctl_debug(struct crypt_device *cd,
 			cmd, key->lr);
 		};
 		break;
+	case IOC_OPAL_REACTIVATE_LSP: { /* IN */
+		struct opal_lr_react *act = args;
+		log_dbg(cd, "OPAL %s: new_admin_key:%" PRIu8 ", lck_table:%" PRIu8 ", lr_plcy:%" PRIu8
+			", num_lrs:%" PRIu8 ", lr:"
+			"%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8"|%"PRIu8,
+			cmd, act->new_admin_key.key_len != 0, act->entire_table, act->range_policy,
+			act->num_lrs, act->lr[0], act->lr[1], act->lr[2], act->lr[3], act->lr[4],
+			act->lr[5], act->lr[6], act->lr[7], act->lr[8]);
+		};
+		break;
+	case IOC_OPAL_LR_SET_START_LEN: { /* IN */
+		struct opal_user_lr_setup *lrs = args;
+		log_dbg(cd, "OPAL %s: sum:%" PRIu32 ", who:%" PRIu32 ", lr:%" PRIu8
+			", start:%" PRIu64 ", length:%" PRIu64,
+			cmd, lrs->session.sum, lrs->session.who, lrs->session.opal_key.lr,
+			lrs->range_start, lrs->range_length);
+		};
+		break;
+	case IOC_OPAL_ENABLE_DISABLE_LR: { /* IN */
+		struct opal_user_lr_setup *lrs = args;
+		log_dbg(cd, "OPAL %s: sum:%" PRIu32 ", who:%" PRIu32 ", lr:%" PRIu8
+			", rle:%" PRIu32 ", rwe:%" PRIu32,
+			cmd, lrs->session.sum, lrs->session.who, lrs->session.opal_key.lr,
+			lrs->RLE, lrs->WLE);
+		};
+		break;
+	case IOC_OPAL_GET_SUM_STATUS: { /* IN */
+		log_dbg(cd, "OPAL %s", cmd);
+		};
+		break;
 	}
 }
 
@@ -382,10 +463,17 @@ static int opal_range_check_attributes_fd(struct crypt_device *cd,
 	return r;
 }
 
-static int opal_query_status(struct crypt_device *cd, struct device *dev, unsigned expected)
+static int opal_query_status_fd(struct crypt_device *cd, int fd, unsigned expected)
 {
 	struct opal_status st = { };
-	int fd, r;
+	int r = opal_ioctl(cd, fd, IOC_OPAL_GET_STATUS, &st);
+
+	return r < 0 ? -EINVAL : (st.flags & expected) ? 1 : 0;
+}
+
+static int opal_query_status(struct crypt_device *cd, struct device *dev, unsigned expected)
+{
+	int fd;
 
 	assert(cd);
 	assert(dev);
@@ -394,9 +482,7 @@ static int opal_query_status(struct crypt_device *cd, struct device *dev, unsign
 	if (fd < 0)
 		return -EIO;
 
-	r = opal_ioctl(cd, fd, IOC_OPAL_GET_STATUS, &st);
-
-	return r < 0 ? -EINVAL : (st.flags & expected) ? 1 : 0;
+	return opal_query_status_fd(cd, fd, expected);
 }
 
 static int opal_enabled(struct crypt_device *cd, struct device *dev)
@@ -404,11 +490,275 @@ static int opal_enabled(struct crypt_device *cd, struct device *dev)
 	return opal_query_status(cd, dev, OPAL_FL_LOCKING_ENABLED);
 }
 
-static int opal_activate_lsp(struct crypt_device *cd, int fd,
-			     const void *admin_key, size_t admin_key_len)
+/* fd contains open descriptor for a device with SUM support advertised */
+static int kernel_opal_sum_supported(struct crypt_device *cd, int fd)
+{
+	static int kernel_sum_supported = 0;
+	static bool checked = false;
+
+	int r;
+	struct opal_sum_ranges sum_ranges_anybody = {};
+
+	if (!checked) {
+		/*
+		 * Check only if kernel recognizes IOC_OPAL_GET_SUM_STATUS ioctl number.
+		 * Irrelevant what OPAL2 sub-system eventually returned.
+		 */
+		r = opal_ioctl(cd, fd, IOC_OPAL_GET_SUM_STATUS, &sum_ranges_anybody);
+		if (r >= 0)
+			kernel_sum_supported = 1;
+
+		checked = true;
+	}
+
+	return kernel_sum_supported;
+}
+
+static int opal_sum_supported(struct crypt_device *cd, struct device *dev)
+{
+	int r, fd;
+
+	fd = device_open(cd, dev, O_RDONLY);
+	if (fd < 0)
+		return -EIO;
+
+	/* check if kernel recognizes the device as SUM capable */
+	r = opal_query_status_fd(cd, fd, OPAL_FL_SUM_SUPPORTED);
+	if (r < 0)
+		return r;
+
+	if (r) {
+		/* device declared SUM support, now check if kernel supports necessary
+		 * ioctl numbers/structures added post original sed-opal interface */
+		r = kernel_opal_sum_supported(cd, fd);
+	}
+
+	return r;
+}
+
+static int opal_get_sum_ranges_anybody(struct crypt_device *cd, int fd, struct opal_sum_ranges *r_sum_ranges)
+{
+	int r;
+
+	assert(r_sum_ranges);
+
+	r = opal_ioctl(cd, fd, IOC_OPAL_GET_SUM_STATUS, r_sum_ranges);
+	if (r < 0)
+		return -EINVAL;
+	if (r == OPAL_STATUS_NOT_AUTHORIZED) {
+		log_dbg(cd, "Can not read Locking table info as Anybody authority. Retry with Admin1");
+		return -EPERM;
+	}
+	if (r != OPAL_STATUS_SUCCESS) {
+		log_dbg(cd, "Failed to get SUM ranges status on OPAL device '%s': %s",
+			crypt_get_device_name(cd), opal_status_to_string(r));
+		return -EINVAL;
+	}
+
+	return 0;
+}
+
+static int opal_verify_sum_deactivated(struct crypt_device *cd, int fd)
+{
+	int r;
+	struct opal_sum_ranges sum_ranges = {};
+
+	r = opal_get_sum_ranges_anybody(cd, fd, &sum_ranges);
+	if (r)
+		return r;
+
+	return sum_ranges.num_lrs != 0;
+}
+
+static int opal_verify_sum_activated(struct crypt_device *cd, int fd, bool admin_range_policy)
+{
+	int i, j, r;
+	struct opal_sum_ranges sum_ranges = {};
+
+	r = opal_get_sum_ranges_anybody(cd, fd, &sum_ranges);
+	if (r)
+		return r;
+
+	if (admin_range_policy != (sum_ranges.range_policy > 0)) {
+		log_dbg(cd, "OPAL device did not set range policy flag correctly.");
+		return 1;
+	}
+
+	if (sum_ranges.num_lrs != 8) {
+		log_dbg(cd, "OPAL device reports unexpected SUM ranges count.");
+		return 1;
+	}
+
+	for (i = 1; i < 9; i++) {
+		for (j = 0; j < sum_ranges.num_lrs; j++) {
+			if (i == sum_ranges.lr[j])
+				break;
+		}
+		if (j >= sum_ranges.num_lrs) {
+			log_dbg(cd, "Locking range %u not set for SUM.", i);
+			return 1;
+		}
+	}
+
+	return 0;
+}
+
+/* Returns:
+ * 	- zero on success
+ * 	- negative errno on unrecoverable error
+ * 	- value > 0 if device did not conform with requested operation (i.e.: did not
+ * 	  set range policy correctly)
+ */
+static int opal_sum_reactivate(struct crypt_device *cd, int fd, struct opal_lr_react *reactivate)
+{
+	int r;
+
+	assert(reactivate);
+
+	r = opal_ioctl(cd, fd, IOC_OPAL_REACTIVATE_LSP, reactivate);
+	if (r < 0)
+		return -EINVAL;
+	if (r == OPAL_STATUS_FAIL)
+		log_dbg(cd, "Failed to reactivate in SUM. There is at least one locking range enabled.");
+	if (r != OPAL_STATUS_SUCCESS) {
+		log_dbg(cd, "Failed to reactivate OPAL device '%s': %s",
+			crypt_get_device_name(cd), opal_status_to_string(r));
+		return -EINVAL;
+	}
+
+	if (reactivate->num_lrs) {
+		r = opal_verify_sum_activated(cd, fd, reactivate->range_policy > 0);
+		if (r < 0) {
+			/*
+			 * GET_SUM_STATUS ioctl failed with unexpected error after successful
+			 * REACTIVATE invocation. There nothing we can do about it.
+			 */
+			log_err(cd, _("The device declared support for OPAL Single User Mode (SUM) but behaved unexpectedly."));
+			log_err(cd, _("Revert device to factory settings and try to format with --disable-sum option."));
+		}
+		return r;
+	}
+
+	return opal_verify_sum_deactivated(cd, fd);
+}
+
+static int opal_sum_setup(struct crypt_device *cd, int fd, const void *admin_key,
+			  size_t admin_key_len)
+{
+	int r;
+	struct opal_lr_react *reactivate = crypt_safe_alloc(sizeof(*reactivate));
+
+	if (!reactivate)
+		return -ENOMEM;
+
+	*reactivate = (struct opal_lr_react) {
+		.key = {
+			.key_len = admin_key_len,
+		},
+		.num_lrs = 8,
+		.lr = { 1, 2, 3, 4, 5, 6, 7, 8 },
+		.range_policy = 1,
+	};
+	crypt_safe_memcpy(reactivate->key.key, admin_key, admin_key_len);
+
+	/*
+	 * By default we Reactivate device with SUM enabled and RangeStartLengthPolicy
+	 * flag set to 1. But some devices do not conform with SUM feature standard
+	 * and do not set attributes in accord with the request...
+	 */
+	r = opal_sum_reactivate(cd, fd, reactivate);
+	if (r > 0) {
+		/* ... so, retry again with range RangeStartLengthPolicy disabled... */
+		reactivate->range_policy = 0;
+		r = opal_sum_reactivate(cd, fd, reactivate);
+	}
+	if (r > 0) {
+		/* ... or disable SUM completely */
+		reactivate->num_lrs = 0;
+		memset(reactivate->lr, 0, sizeof(reactivate->lr));
+		r = opal_sum_reactivate(cd, fd, reactivate);
+	}
+
+	crypt_safe_free(reactivate);
+
+	return r > 0 ? -EINVAL : r;
+}
+
+static int opal_get_sum_status_anybody(struct crypt_device *cd, int fd, uint32_t segment_number,
+				       uint8_t *r_policy, uint8_t *r_segment_in_sum)
+{
+	int i, r;
+	struct opal_sum_ranges sum_ranges = {};
+
+	r = opal_get_sum_ranges_anybody(cd, fd, &sum_ranges);
+	if (r < 0)
+		return r;
+
+	if (r_segment_in_sum) {
+		*r_segment_in_sum = 0;
+		for (i = 0; i < sum_ranges.num_lrs ; i++) {
+			if (sum_ranges.lr[i] == segment_number) {
+				*r_segment_in_sum = 1;
+				break;
+			}
+		}
+	}
+
+	if (r_policy)
+		*r_policy = sum_ranges.range_policy;
+
+	return 0;
+}
+
+static int opal_sum_range_start_length(struct crypt_device *cd, int fd,
+				       struct opal_user_lr_setup *setup)
+{
+	int r;
+
+	assert(setup);
+
+	r = opal_ioctl(cd, fd, IOC_OPAL_LR_SET_START_LEN, setup);
+	if (r < 0)
+		return -EINVAL;
+	if (r != OPAL_STATUS_SUCCESS) {
+		log_dbg(cd, "Failed to setup locking range of length %llu at offset %llu on OPAL device '%s': %s",
+			setup->range_length, setup->range_start, crypt_get_device_name(cd),
+			opal_status_to_string(r));
+		r = -EINVAL;
+	}
+
+	return r;
+}
+
+static int opal_sum_range_enable(struct crypt_device *cd, int fd,
+				 struct opal_user_lr_setup *setup)
+{
+	int r;
+
+	assert(setup);
+
+	r = opal_ioctl(cd, fd, IOC_OPAL_ENABLE_DISABLE_LR, setup);
+	if (r < 0)
+		return -EINVAL;
+	if (r != OPAL_STATUS_SUCCESS) {
+		log_dbg(cd, "Failed to enable locking range on OPAL device '%s': %s",
+			crypt_get_device_name(cd), opal_status_to_string(r));
+		r = -EINVAL;
+	}
+
+	return r;
+}
+
+static int opal_activate_lsp(struct crypt_device *cd, int fd, uint32_t sum,
+			     const void *admin_key, size_t admin_key_len,
+			     uint8_t *r_range_policy, uint8_t *r_segment_in_sum)
 {
 	int r;
 	struct opal_lr_act *activate = crypt_safe_alloc(sizeof(*activate));
+	uint8_t range_policy = 0, segment_in_sum = 0;
+
+	assert(r_range_policy);
+	assert(r_segment_in_sum);
 
 	if (!activate)
 		return -ENOMEM;
@@ -448,20 +798,48 @@ static int opal_activate_lsp(struct crypt_device *cd, int fd,
 		log_dbg(cd, "Failed to activate OPAL device '%s': %s",
 			crypt_get_device_name(cd), opal_status_to_string(r));
 		r = -EINVAL;
+		goto out;
+	}
+
+	/*
+	 * We can not activate LSP directly in SUM since kernel does
+	 * not support setting range policy in 'Activate' directly
+	 * in sed-opal iface.
+	 *
+	 * Some devices does not support SUM correctly. We have to
+	 * check if the device has set SUM parameters accordingly.
+	 *
+	 * If not we drop the RangePolicy flag first. If it does not
+	 * help we disable the SUM via Reactivate completely.
+	 */
+	if (sum) {
+		r = opal_sum_setup(cd, fd, admin_key, admin_key_len);
+		if (!r) /* check the actual SUM state */
+			r = opal_get_sum_status_anybody(cd, fd, 1, &range_policy, &segment_in_sum);
+		if (r < 0)
+			goto out;
 	}
+
+	*r_range_policy = range_policy;
+	*r_segment_in_sum = segment_in_sum;
 out:
 	crypt_safe_free(activate);
 
 	return r;
 }
 
-static int opal_reuse_active_lsp(struct crypt_device *cd, int fd,
+static int opal_reuse_active_lsp(struct crypt_device *cd, int fd, uint32_t sum,
 			   uint32_t segment_number,
-			   const void *admin_key, size_t admin_key_len)
+			   const void *admin_key, size_t admin_key_len,
+			   uint8_t *r_range_policy, uint8_t *r_segment_in_sum)
 {
 	int r;
+	uint8_t range_policy = 0, segment_in_sum = 0;
 	struct opal_session_info *user_session = crypt_safe_alloc(sizeof(*user_session));
 
+	assert(r_range_policy);
+	assert(r_segment_in_sum);
+
 	if (!user_session)
 		return -ENOMEM;
 
@@ -473,26 +851,47 @@ static int opal_reuse_active_lsp(struct crypt_device *cd, int fd,
 		},
 	};
 
+	if (sum) {
+		/* If device supports SUM let's get list of SUM enabled LRs */
+		r = opal_get_sum_status_anybody(cd, fd, segment_number, &range_policy, &segment_in_sum);
+		if (r < 0)
+			return r;
+	}
+
 	/* If it is already enabled, wipe the locking range first */
 	crypt_safe_memcpy(user_session->opal_key.key, admin_key, admin_key_len);
 
-	r = opal_ioctl(cd, fd, IOC_OPAL_SECURE_ERASE_LR, user_session);
-	if (r < 0)
-		goto out;
+	if (segment_in_sum) {
+		/* If segment is already in SUM we need to call Erase method */
+		r = opal_ioctl(cd, fd, IOC_OPAL_ERASE_LR, user_session);
+		if (r > OPAL_STATUS_SUCCESS)
+			log_dbg(cd, "Failed to erase SUM OPAL locking range %u on device '%s': %s",
+				segment_number, crypt_get_device_name(cd), opal_status_to_string(r));
+	} else {
+		r = opal_ioctl(cd, fd, IOC_OPAL_SECURE_ERASE_LR, user_session);
+		if (r > OPAL_STATUS_SUCCESS)
+			log_dbg(cd, "Failed to reset (secure erase) OPAL locking range %u on device '%s': %s",
+				segment_number, crypt_get_device_name(cd), opal_status_to_string(r));
+	}
+
 	if (r != OPAL_STATUS_SUCCESS) {
-		log_dbg(cd, "Failed to reset (secure erase) OPAL locking range %u on device '%s': %s",
-			segment_number, crypt_get_device_name(cd), opal_status_to_string(r));
 		r = -EINVAL;
+		goto out;
 	}
+
+	*r_range_policy = range_policy;
+	*r_segment_in_sum = segment_in_sum;
 out:
 	crypt_safe_free(user_session);
 
 	return r;
 }
 
-static int opal_setup_range(struct crypt_device *cd, int fd, uint32_t segment_number,
+static int opal_setup_range(struct crypt_device *cd, int fd, uint32_t segment_in_sum,
+			    uint32_t range_policy, uint32_t segment_number,
 			    uint64_t range_start_blocks, uint64_t range_length_blocks,
-			    const void *admin_key, size_t admin_key_len)
+			    const struct volume_key *user_vk, const void *admin_key,
+			    size_t admin_key_len)
 {
 	int r;
 	struct opal_user_lr_setup *setup = crypt_safe_alloc(sizeof(*setup));
@@ -517,16 +916,58 @@ static int opal_setup_range(struct crypt_device *cd, int fd, uint32_t segment_nu
 			},
 		},
 	};
+
 	crypt_safe_memcpy(setup->session.opal_key.key, admin_key, admin_key_len);
 
-	r = opal_ioctl(cd, fd, IOC_OPAL_LR_SETUP, setup);
-	if (r < 0)
-		goto out;
-	if (r != OPAL_STATUS_SUCCESS) {
-		log_dbg(cd, "Failed to setup locking range of length %llu at offset %llu on OPAL device '%s': %s",
-			setup->range_length, setup->range_start, crypt_get_device_name(cd),
-			opal_status_to_string(r));
-		r = -EINVAL;
+	/*
+	 * In SUM if PolicyRange is set to 1, Admin1 authority remains
+	 * in control of each individual locking range offset and length attributes.
+	 * But the User authority associated with the locking range is still
+	 * the sole owner of RLE, WLE and Lock/Unlock permissions. Therefore,
+	 * the Admin1 credentials are used to setup Offset and Length
+	 * only and User credentias are used for enabling RLE and WLE
+	 * fields.
+	 */
+	if (segment_in_sum && range_policy) {
+		r = opal_sum_range_start_length(cd, fd, setup);
+		if (r < 0) {
+			/*
+			 * Device advertises PolicyRange flag but does not allow Admin1 to
+			 * setup SUM locking range offset and length. It's broken.
+			 */
+			log_err(cd, _("The device declared support for OPAL Single User Mode (SUM) but behaved unexpectedly."));
+			log_err(cd, _("Revert device to factory settings and try to format with --disable-sum option."));
+			goto out;
+		}
+	}
+
+	if (segment_in_sum) {
+		/* Switch to User credentials for the remaining method calls*/
+		setup->session = (struct opal_session_info) {
+			.sum = 1,
+			.opal_key = {
+				.key_len = crypt_volume_key_length(user_vk),
+				.lr = segment_number
+			}
+		};
+		crypt_safe_memcpy(setup->session.opal_key.key, crypt_volume_key_get_key(user_vk),
+				  crypt_volume_key_length(user_vk));
+	}
+
+	if (segment_in_sum && range_policy) {
+		/* Enable the Locking Range in SUM */
+		r = opal_sum_range_enable(cd, fd, setup);
+	} else {
+		/* Set the LR in single step since the RangePolicy flag is not set */
+		r = opal_ioctl(cd, fd, IOC_OPAL_LR_SETUP, setup);
+		if (r < 0)
+			goto out;
+		if (r != OPAL_STATUS_SUCCESS) {
+			log_dbg(cd, "Failed to setup locking range of length %llu at offset %llu on OPAL device '%s': %s",
+				setup->range_length, setup->range_start, crypt_get_device_name(cd),
+				opal_status_to_string(r));
+			r = -EINVAL;
+		}
 	}
 out:
 	crypt_safe_free(setup);
@@ -601,11 +1042,13 @@ int opal_setup_ranges(struct crypt_device *cd,
 		      uint32_t opal_block_bytes,
 		      uint32_t segment_number,
 		      const void *admin_key,
-		      size_t admin_key_len)
+		      size_t admin_key_len,
+		      bool disable_sum)
 {
 	struct opal_lock_unlock *lock = NULL;
 	struct opal_new_pw *new_pw = NULL;
 	int r, fd;
+	uint8_t sum_supported, range_policy = 0, segment_in_sum = 0;
 
 	assert(cd);
 	assert(dev);
@@ -625,33 +1068,59 @@ int opal_setup_ranges(struct crypt_device *cd,
 	if (fd < 0)
 		return -EIO;
 
+	/* Not all drivers support Single User Mode, so query and adjust the setup accordingly */
+	r = opal_sum_supported(cd, dev);
+	if (r < 0)
+		return r;
+	/* sum supported */
+	sum_supported = !!r;
+
 	r = opal_enabled(cd, dev);
 	if (r < 0)
 		return r;
 
+	/* If device was already activated with SUM we do not plan to disable it */
+	if (r && sum_supported && disable_sum)
+		log_err(cd, _("Device %s already activated for HW OPAL. Flag --disable-sum ignored."),
+			crypt_get_device_name(cd));
+
 	/* If OPAL has never been enabled, we need to take ownership and do basic setup first */
 	if (r == 0)
-		r = opal_activate_lsp(cd, fd, admin_key, admin_key_len);
+		r = opal_activate_lsp(cd, fd, sum_supported && !disable_sum, admin_key, admin_key_len,
+				      &range_policy, &segment_in_sum);
 	else
-		r = opal_reuse_active_lsp(cd, fd, segment_number, admin_key, admin_key_len);
+		r = opal_reuse_active_lsp(cd, fd, sum_supported, segment_number, admin_key,
+					  admin_key_len, &range_policy, &segment_in_sum);
 	if (r < 0)
 		goto out;
 
-	r = opal_setup_user(cd, fd, segment_number, admin_key, admin_key_len);
-	if (r < 0)
-		goto out;
+	/* In SUM, user is already active and properly assigned to LR */
+	if (!segment_in_sum) {
+		r = opal_setup_user(cd, fd, segment_number, admin_key, admin_key_len);
+		if (r < 0)
+			goto out;
+	}
 
 	new_pw = crypt_safe_alloc(sizeof(struct opal_new_pw));
 	if (!new_pw) {
 		r = -ENOMEM;
 		goto out;
 	}
+
+	/*
+	 * In SUM we have to authenticate using the User authority (associated with the locking
+	 * range) even though it was just created and it has empty passhrase (per OPAL2 SUM std.).
+	 *
+	 * Admin authority can not change User authority passphrase. It would defeat the purpose
+	 * of the SUM extension.
+	 */
 	*new_pw = (struct opal_new_pw) {
 		.session = {
-			.who = OPAL_ADMIN1,
+			.sum = segment_in_sum,
+			.who = segment_in_sum ? segment_number + 1 : OPAL_ADMIN1,
 			.opal_key = {
 				.lr = segment_number,
-				.key_len = admin_key_len,
+				.key_len = segment_in_sum ? 0 : admin_key_len,
 			},
 		},
 		.new_user_pw = {
@@ -664,7 +1133,8 @@ int opal_setup_ranges(struct crypt_device *cd,
 	};
 	crypt_safe_memcpy(new_pw->new_user_pw.opal_key.key, crypt_volume_key_get_key(vk),
 			  crypt_volume_key_length(vk));
-	crypt_safe_memcpy(new_pw->session.opal_key.key, admin_key, admin_key_len);
+	if (!segment_in_sum)
+		crypt_safe_memcpy(new_pw->session.opal_key.key, admin_key, admin_key_len);
 
 	r = opal_ioctl(cd, fd, IOC_OPAL_SET_PW, new_pw);
 	if (r < 0)
@@ -676,8 +1146,8 @@ int opal_setup_ranges(struct crypt_device *cd,
 		goto out;
 	}
 
-	r = opal_setup_range(cd, fd, segment_number, range_start_blocks, range_length_blocks,
-			     admin_key, admin_key_len);
+	r = opal_setup_range(cd, fd, segment_in_sum, range_policy, segment_number,
+			     range_start_blocks, range_length_blocks, vk, admin_key, admin_key_len);
 	if (r < 0)
 		goto out;
 
@@ -885,9 +1355,11 @@ int opal_reset_segment(struct crypt_device *cd,
 		       const char *password,
 		       size_t password_len)
 {
+	int r, fd;
 	struct opal_session_info *user_session = NULL;
 	struct opal_user_lr_setup *setup = NULL;
-	int r, fd;
+	uint32_t sum_supported;
+	uint8_t segment_in_sum = 0;
 
 	assert(cd);
 	assert(dev);
@@ -899,6 +1371,18 @@ int opal_reset_segment(struct crypt_device *cd,
 	if (opal_enabled(cd, dev) <= 0)
 		return -EINVAL;
 
+	/* Not all drivers support Single User Mode, so query and adjust the setup accordingly */
+	r = opal_sum_supported(cd, dev);
+	if (r < 0)
+		return r;
+	sum_supported = !!r;
+
+	fd = device_open(cd, dev, O_RDONLY);
+	if (fd < 0) {
+		r = -EIO;
+		goto out;
+	}
+
 	user_session = crypt_safe_alloc(sizeof(struct opal_session_info));
 	if (!user_session)
 		return -ENOMEM;
@@ -911,9 +1395,21 @@ int opal_reset_segment(struct crypt_device *cd,
 	};
 	crypt_safe_memcpy(user_session->opal_key.key, password, password_len);
 
-	fd = device_open(cd, dev, O_RDONLY);
-	if (fd < 0) {
-		r = -EIO;
+	if (sum_supported) {
+		r = opal_get_sum_status_anybody(cd, fd, segment_number, NULL, &segment_in_sum);
+		if (r < 0)
+			goto out;
+	}
+
+	if (segment_in_sum) {
+		r = opal_ioctl(cd, fd, IOC_OPAL_ERASE_LR, user_session);
+		if (r != OPAL_STATUS_SUCCESS) {
+			log_dbg(cd, "Failed to erase SUM OPAL locking range %u on device '%s': %s",
+				segment_number, crypt_get_device_name(cd), opal_status_to_string(r));
+			r = -EINVAL;
+		}
+
+		/* Locking range in SUM is properly disabled after 'Erase' method. Exit early. */
 		goto out;
 	}
 
@@ -934,8 +1430,6 @@ int opal_reset_segment(struct crypt_device *cd,
 		goto out;
 	}
 	*setup = (struct opal_user_lr_setup) {
-		.range_start = 0,
-		.range_length = 0,
 		.session = {
 			.who = OPAL_ADMIN1,
 			.opal_key = user_session->opal_key,
@@ -1071,7 +1565,8 @@ int opal_setup_ranges(struct crypt_device *cd,
 		      uint32_t opal_block_bytes,
 		      uint32_t segment_number,
 		      const void *admin_key,
-		      size_t admin_key_len)
+		      size_t admin_key_len,
+		      bool disable_sum)
 {
 	return -ENOTSUP;
 }
diff --git a/lib/luks2/hw_opal/hw_opal.h b/lib/luks2/hw_opal/hw_opal.h
index f0058a597..135b5a3e5 100644
--- a/lib/luks2/hw_opal/hw_opal.h
+++ b/lib/luks2/hw_opal/hw_opal.h
@@ -22,7 +22,8 @@ int opal_setup_ranges(struct crypt_device *cd,
 		      uint32_t opal_block_bytes,
 		      uint32_t segment_number,
 		      const void *admin_key,
-		      size_t admin_key_len);
+		      size_t admin_key_len,
+		      bool disable_sum);
 int opal_lock(struct crypt_device *cd, struct device *dev, uint32_t segment_number);
 int opal_unlock(struct crypt_device *cd,
 		struct device *dev,
diff --git a/lib/setup.c b/lib/setup.c
index afc9d8c10..cfc78e500 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -2532,7 +2532,8 @@ int crypt_format_luks2_opal(struct crypt_device *cd,
 	r = opal_setup_ranges(cd, crypt_data_device(cd), user_key ?: cd->volume_key,
 					range_offset_blocks, range_size_bytes / opal_block_bytes,
 					opal_block_bytes, opal_segment_number,
-					opal_params->admin_key, opal_params->admin_key_size);
+					opal_params->admin_key, opal_params->admin_key_size,
+					!!(cd->compatibility & CRYPT_COMPAT_DISABLE_HW_OPAL_SUM));
 	if (r < 0) {
 		if (r == -EPERM)
 			log_err(cd, _("Incorrect OPAL Admin key."));
diff --git a/man/common_options.adoc b/man/common_options.adoc
index 31ca962af..0b00cb6e9 100644
--- a/man/common_options.adoc
+++ b/man/common_options.adoc
@@ -156,6 +156,14 @@ endif::[]
 *WARNING:* Do not use this option unless you run cryptsetup in a restricted environment where locking is impossible to perform (where /run directory cannot be used).
 endif::[]
 
+ifdef::ACTION_LUKSFORMAT[]
+*--disable-sum*::
+Disable SUM (Single User Mode) OPAL2 extension during luksFormat with HW encryption profile (OPAL2).
+The option affects only devices not yet enabled for OPAL2 encryption (in factory settings). For devices
+with already activated OPAL2 HW encryption profile the option is ignored. The option must be combined
+with --hw-opal or --hw-opal-only options.
+endif::[]
+
 ifdef::ACTION_OPEN,ACTION_TCRYPTDUMP[]
 *--disable-veracrypt*::
 This option can be used to disable VeraCrypt compatible mode (only TrueCrypt devices are recognized).
@@ -335,7 +343,6 @@ LUKS2 format only manages the locking range unlock key.
 This option enables HW-based data encryption managed by the SED OPAL drive only.
 +
 Please note that with OPAL-only (--hw-opal-only) encryption, the configured OPAL administrator PIN (passphrase) allows unlocking all configured locking ranges without LUKS keyslot decryption (without knowledge of LUKS passphrase).
-Because of many observed problems with compatibility, cryptsetup currently DOES NOT use OPAL single-user mode, which would allow such decoupling of OPAL admin PIN access.
 endif::[]
 
 ifdef::ACTION_REENCRYPT[]
diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index b06cf1cd4..2aa24ec9a 100644
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -12,6 +12,7 @@
 
 #include "cryptsetup.h"
 #include "cryptsetup_args.h"
+#include "libcryptsetup.h"
 #include "utils_luks.h"
 
 static char *keyfiles[MAX_KEYFILES];
@@ -1446,6 +1447,19 @@ static int strcmp_or_null(const char *str, const char *expected)
 	return !str ? 0 : strcmp(str, expected);
 }
 
+static void set_compatibility_flags(struct crypt_device *cd)
+{
+	uint32_t flags = 0;
+
+	if (ARG_SET(OPT_INTEGRITY_LEGACY_PADDING_ID))
+		flags = CRYPT_COMPAT_LEGACY_INTEGRITY_PADDING;
+	if (ARG_SET(OPT_DISABLE_SUM_ID))
+		flags |= CRYPT_COMPAT_DISABLE_HW_OPAL_SUM;
+
+	if (flags)
+		crypt_set_compatibility(cd, flags);
+}
+
 int luksFormat(struct crypt_device **r_cd, struct crypt_keyslot_context **r_kc)
 {
 	bool wipe_signatures = false;
@@ -1661,8 +1675,7 @@ int luksFormat(struct crypt_device **r_cd, struct crypt_keyslot_context **r_kc)
 	    ((r = tools_wipe_all_signatures(header_device, true, false)) < 0))
 		goto out;
 
-	if (ARG_SET(OPT_INTEGRITY_LEGACY_PADDING_ID))
-		crypt_set_compatibility(cd, CRYPT_COMPAT_LEGACY_INTEGRITY_PADDING);
+	set_compatibility_flags(cd);
 
 	if (ARG_SET(OPT_HW_OPAL_ID) || ARG_SET(OPT_HW_OPAL_ONLY_ID))
 		r = crypt_format_luks2_opal(cd,
@@ -3418,6 +3431,9 @@ static const char *verify_format(void)
 	if (ARG_SET(OPT_USE_RANDOM_ID) && ARG_SET(OPT_USE_URANDOM_ID))
 		return  _("Only one of --use-[u]random options is allowed.");
 
+	if (ARG_SET(OPT_DISABLE_SUM_ID) && !ARG_SET(OPT_HW_OPAL_ID) && !ARG_SET(OPT_HW_OPAL_ONLY_ID))
+		return  _("Option --disable-sum must be used with --hw-opal or --hw-opal-only");
+
 	return NULL;
 }
 
diff --git a/src/cryptsetup_arg_list.h b/src/cryptsetup_arg_list.h
index eebe749ee..674d37475 100644
--- a/src/cryptsetup_arg_list.h
+++ b/src/cryptsetup_arg_list.h
@@ -38,6 +38,8 @@ ARG(OPT_DISABLE_KEYRING, '\0', POPT_ARG_NONE, N_("Disable loading volume keys vi
 
 ARG(OPT_DISABLE_LOCKS, '\0', POPT_ARG_NONE, N_("Disable locking of on-disk metadata"), NULL, CRYPT_ARG_BOOL, {}, {})
 
+ARG(OPT_DISABLE_SUM, '\0', POPT_ARG_NONE, N_("Disable OPAL2 SUM (Single User Mode)"), NULL, CRYPT_ARG_BOOL, {}, OPT_DISABLE_SUM_ACTIONS)
+
 ARG(OPT_DISABLE_VERACRYPT, '\0', POPT_ARG_NONE, N_("Do not scan for VeraCrypt compatible device"), NULL, CRYPT_ARG_BOOL, {}, OPT_DISABLE_VERACRYPT_ACTIONS)
 
 ARG(OPT_DUMP_JSON, '\0', POPT_ARG_NONE, N_("Dump info in JSON format (LUKS2 only)"), NULL, CRYPT_ARG_BOOL, {}, {})
diff --git a/src/cryptsetup_args.h b/src/cryptsetup_args.h
index 43926f997..2009e24f3 100644
--- a/src/cryptsetup_args.h
+++ b/src/cryptsetup_args.h
@@ -46,6 +46,7 @@
 #define OPT_DEFERRED_ACTIONS			{ CLOSE_ACTION }
 #define OPT_DEVICE_SIZE_ACTIONS			{ OPEN_ACTION, RESIZE_ACTION, REENCRYPT_ACTION }
 #define OPT_DISABLE_BLKID_ACTIONS		{ FORMAT_ACTION, REENCRYPT_ACTION }
+#define OPT_DISABLE_SUM_ACTIONS			{ FORMAT_ACTION }
 #define OPT_DISABLE_VERACRYPT_ACTIONS		{ OPEN_ACTION, TCRYPTDUMP_ACTION }
 #define OPT_ERASE_ACTIONS			{ ERASE_ACTION }
 #define OPT_EXTERNAL_TOKENS_PATH_ACTIONS	{ RESIZE_ACTION, OPEN_ACTION, ADDKEY_ACTION, LUKSDUMP_ACTION, RESUME_ACTION, TOKEN_ACTION }
diff --git a/src/utils_arg_names.h b/src/utils_arg_names.h
index a01419d31..89d8b75df 100644
--- a/src/utils_arg_names.h
+++ b/src/utils_arg_names.h
@@ -32,6 +32,7 @@
 #define OPT_DISABLE_EXTERNAL_TOKENS	"disable-external-tokens"
 #define OPT_DISABLE_KEYRING		"disable-keyring"
 #define OPT_DISABLE_LOCKS		"disable-locks"
+#define OPT_DISABLE_SUM			"disable-sum"
 #define OPT_DISABLE_VERACRYPT		"disable-veracrypt"
 #define OPT_DUMP_JSON			"dump-json-metadata"
 #define OPT_DUMP_MASTER_KEY		"dump-master-key"

From d6a995ee22e2d369dc2f32d98286c1530c1cfa84 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Mon, 24 Nov 2025 13:36:12 +0100
Subject: [PATCH 006/244] opal: Add OPAL SUM specific requirement flag.

Block older cryptsetup releases from managing
LUKS2 devices configured for OPAL segments in SUM.
---
 lib/luks2/hw_opal/hw_opal.c     | 14 ++++++++++++--
 lib/luks2/hw_opal/hw_opal.h     |  3 ++-
 lib/luks2/luks2_json_metadata.c |  1 +
 lib/setup.c                     | 15 +++++++++------
 4 files changed, 24 insertions(+), 9 deletions(-)

diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index f32c9cb7f..e79e8481f 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -69,6 +69,10 @@ struct opal_sum_ranges {
 
 #endif
 
+/* supported opal requirement versions */
+#define LUKS2_OPAL_BASE_REQ_VERSION         UINT8_C(1)
+#define LUKS2_OPAL_SUM_REQ_VERSION          UINT8_C(2) /* Device is configured with SUM */
+
 /* Error codes are defined in the specification:
  * TCG_Storage_Architecture_Core_Spec_v2.01_r1.00
  * Section 5.1.5: Method Status Codes
@@ -1043,7 +1047,8 @@ int opal_setup_ranges(struct crypt_device *cd,
 		      uint32_t segment_number,
 		      const void *admin_key,
 		      size_t admin_key_len,
-		      bool disable_sum)
+		      bool disable_sum,
+		      uint8_t *r_opal_req_version)
 {
 	struct opal_lock_unlock *lock = NULL;
 	struct opal_new_pw *new_pw = NULL;
@@ -1056,6 +1061,7 @@ int opal_setup_ranges(struct crypt_device *cd,
 	assert(admin_key);
 	assert(crypt_volume_key_length(vk) <= OPAL_KEY_MAX);
 	assert(opal_block_bytes >= SECTOR_SIZE);
+	assert(r_opal_req_version);
 
 	if (admin_key_len > OPAL_KEY_MAX)
 		return -EINVAL;
@@ -1186,6 +1192,9 @@ int opal_setup_ranges(struct crypt_device *cd,
 					   &(uint64_t) {range_start_blocks * opal_block_bytes / SECTOR_SIZE},
 					   &(uint64_t) {range_length_blocks * opal_block_bytes / SECTOR_SIZE},
 					   &(bool) {true}, &(bool){true}, NULL, NULL);
+
+	/* Only if SUM was configured successfully add explicit SUM LUKS2 requirement flag */
+	*r_opal_req_version = segment_in_sum ? LUKS2_OPAL_SUM_REQ_VERSION : LUKS2_OPAL_BASE_REQ_VERSION;
 out:
 	crypt_safe_free(new_pw);
 	crypt_safe_free(lock);
@@ -1566,7 +1575,8 @@ int opal_setup_ranges(struct crypt_device *cd,
 		      uint32_t segment_number,
 		      const void *admin_key,
 		      size_t admin_key_len,
-		      bool disable_sum)
+		      bool disable_sum,
+		      uint8_t *r_opal_req_version)
 {
 	return -ENOTSUP;
 }
diff --git a/lib/luks2/hw_opal/hw_opal.h b/lib/luks2/hw_opal/hw_opal.h
index 135b5a3e5..427c598c9 100644
--- a/lib/luks2/hw_opal/hw_opal.h
+++ b/lib/luks2/hw_opal/hw_opal.h
@@ -23,7 +23,8 @@ int opal_setup_ranges(struct crypt_device *cd,
 		      uint32_t segment_number,
 		      const void *admin_key,
 		      size_t admin_key_len,
-		      bool disable_sum);
+		      bool disable_sum,
+		      uint8_t *r_opal_req_version);
 int opal_lock(struct crypt_device *cd, struct device *dev, uint32_t segment_number);
 int opal_unlock(struct crypt_device *cd,
 		struct device *dev,
diff --git a/lib/luks2/luks2_json_metadata.c b/lib/luks2/luks2_json_metadata.c
index 66a49fd44..9e35a8d46 100644
--- a/lib/luks2/luks2_json_metadata.c
+++ b/lib/luks2/luks2_json_metadata.c
@@ -1647,6 +1647,7 @@ static const struct requirement_flag requirements_flags[] = {
 	{ CRYPT_REQUIREMENT_ONLINE_REENCRYPT, 3, "online-reencrypt-v3" },
 	{ CRYPT_REQUIREMENT_ONLINE_REENCRYPT, 1, "online-reencrypt" },
 	{ CRYPT_REQUIREMENT_INLINE_HW_TAGS,   1, "inline-hw-tags" },
+	{ CRYPT_REQUIREMENT_OPAL,	      2, "opal-v2" },
 	{ CRYPT_REQUIREMENT_OPAL,	      1, "opal" },
 	{ 0, 0, NULL }
 };
diff --git a/lib/setup.c b/lib/setup.c
index cfc78e500..e3bd48a1c 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -2295,6 +2295,7 @@ int crypt_format_luks2_opal(struct crypt_device *cd,
 	const char *integrity = params ? params->integrity : NULL;
 	size_t integrity_key_size = 0; /* only for independent, separate key in HMAC */
 	struct volume_key *integrity_key = NULL;
+	uint8_t opal_requirement_version;
 	uint32_t sector_size, opal_block_bytes, opal_segment_number = 1; /* We'll use the partition number if available later */
 	uint64_t alignment_offset_bytes, data_offset_bytes, device_size_bytes, opal_alignment_granularity_blocks,
 		 partition_offset_sectors, range_offset_blocks, range_size_bytes,
@@ -2498,11 +2499,6 @@ int crypt_format_luks2_opal(struct crypt_device *cd,
 	if (r < 0)
 		goto out;
 
-	log_dbg(cd, "Adding LUKS2 OPAL requirement flag.");
-	r = LUKS2_config_set_requirement_version(cd, &cd->u.luks2.hdr, CRYPT_REQUIREMENT_OPAL, 1, false);
-	if (r < 0)
-		goto out;
-
 	if (params->label || params->subsystem) {
 		r = LUKS2_hdr_labels(cd, &cd->u.luks2.hdr,
 				     params->label, params->subsystem, 0);
@@ -2533,7 +2529,8 @@ int crypt_format_luks2_opal(struct crypt_device *cd,
 					range_offset_blocks, range_size_bytes / opal_block_bytes,
 					opal_block_bytes, opal_segment_number,
 					opal_params->admin_key, opal_params->admin_key_size,
-					!!(cd->compatibility & CRYPT_COMPAT_DISABLE_HW_OPAL_SUM));
+					!!(cd->compatibility & CRYPT_COMPAT_DISABLE_HW_OPAL_SUM),
+					&opal_requirement_version);
 	if (r < 0) {
 		if (r == -EPERM)
 			log_err(cd, _("Incorrect OPAL Admin key."));
@@ -2544,6 +2541,12 @@ int crypt_format_luks2_opal(struct crypt_device *cd,
 
 	opal_range_reset = true;
 
+	log_dbg(cd, "Adding LUKS2 OPAL requirement flag (version: %u).", opal_requirement_version);
+	r = LUKS2_config_set_requirement_version(cd, &cd->u.luks2.hdr, CRYPT_REQUIREMENT_OPAL,
+						 opal_requirement_version, false);
+	if (r < 0)
+		goto out;
+
 	/* integrity metadata goes in unlocked OPAL locking range */
 	if (crypt_get_integrity_tag_size(cd)) {
 		r = opal_unlock(cd, crypt_data_device(cd), opal_segment_number, user_key ?: cd->volume_key);

From 648e0e0c77fd57184b1a3735e395c14ed20ec81a Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 28 Nov 2025 10:49:56 +0100
Subject: [PATCH 007/244] tests: print info about OPAL2 SUM support.

---
 tests/compat-test-opal | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/tests/compat-test-opal b/tests/compat-test-opal
index de44addbb..d410b7b09 100755
--- a/tests/compat-test-opal
+++ b/tests/compat-test-opal
@@ -215,7 +215,7 @@ load_key()
 }
 
 setup_luks2_env() {
-	echo $PWD1 | $CRYPTSETUP luksFormat --type luks2 $FAST_PBKDF_OPT $OPAL2_DEV || fail
+	echo -e "$PWD1\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP luksFormat --type luks2 --hw-opal $FAST_PBKDF_OPT $OPAL2_DEV || fail
 	$CRYPTSETUP luksDump $OPAL2_DEV >/dev/null || fail
 	echo $PWD1 | $CRYPTSETUP open $OPAL2_DEV $DEV_NAME || fail
 	HAVE_KEYRING=$($CRYPTSETUP status $DEV_NAME | grep "keyring")
@@ -230,6 +230,12 @@ setup_luks2_env() {
 		HAVE_BLKID=0
 	fi
 	$CRYPTSETUP close $DEV_NAME || fail
+	HAVE_SUM=$($CRYPTSETUP luksDump $OPAL2_DEV | grep "opal-v2")
+	if [ -n "$HAVE_SUM" ]; then
+		HAVE_SUM=1
+	else
+		HAVE_SUM=0
+	fi
 }
 
 # $1 key name
@@ -490,6 +496,8 @@ export LANG=C
 prepare "[0] Detect LUKS2 environment" reset
 setup_luks2_env
 
+test $HAVE_SUM -eq 1 && echo "Device $OPAL2_DEV is SUM compatible in LUKS2"
+
 [ -n "$VALG" ] && valgrind_setup && CRYPTSETUP=valgrind_run
 
 prepare "[1] Data offset"

From 609bef4edb10f70fa75e012f6578f0d744742ec1 Mon Sep 17 00:00:00 2001
From: Liang Bo <liangbo@uniontech.com>
Date: Sun, 15 Mar 2026 21:49:17 +0800
Subject: [PATCH 008/244] openssl: Support sm4

SM4 is formed with <name>-<mode>, different from aes, etc. which is <name>-<key_bits>-<mode>.
See 'openssl list --cipher-algorithms' under new version 3.5.X e.g.
---
 lib/crypto_backend/crypto_openssl.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index 660a6225f..8272eec7b 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -694,7 +694,10 @@ static int _cipher_init(EVP_CIPHER_CTX **hd_enc, EVP_CIPHER_CTX **hd_dec, const
 	if (!strcmp(mode, "xts"))
 		key_bits /= 2;
 
-	r = snprintf(cipher_name, sizeof(cipher_name), "%s-%d-%s", name, key_bits, mode);
+	if ((!strcmp(name, "sm4")) && key_bits == 128)
+		r = snprintf(cipher_name, sizeof(cipher_name), "%s-%s", name, mode);
+	else
+		r = snprintf(cipher_name, sizeof(cipher_name), "%s-%d-%s", name, key_bits, mode);
 	if (r < 0 || (size_t)r >= sizeof(cipher_name))
 		return -EINVAL;
 

From 9976654fb9f63640879815996c25aba22bc9f8a0 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 20 Mar 2026 10:57:25 +0100
Subject: [PATCH 009/244] Fix reading from wrong image offset

If two subsequent crypt_load() calls are done, the Filevault
header scan can read data from wrong offset, as it does not
reset the file pointer.

Fix it by using lseek variant of read call.

Also fix test read for similar issue so it always reads
the first sector of device.
---
 lib/fvault2/fvault2.c | 4 ++--
 lib/utils_device.c    | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/lib/fvault2/fvault2.c b/lib/fvault2/fvault2.c
index 59f4570fe..f84db2949 100644
--- a/lib/fvault2/fvault2.c
+++ b/lib/fvault2/fvault2.c
@@ -524,9 +524,9 @@ static int _read_volume_header(
 	}
 
 	log_dbg(cd, "Reading FVAULT2 volume header of size %u bytes.", FVAULT2_VOL_HEADER_SIZE);
-	if (read_blockwise(devfd, device_block_size(cd, dev),
+	if (read_lseek_blockwise(devfd, device_block_size(cd, dev),
 			device_alignment(dev), vol_header,
-			FVAULT2_VOL_HEADER_SIZE) != FVAULT2_VOL_HEADER_SIZE) {
+			FVAULT2_VOL_HEADER_SIZE, 0) != FVAULT2_VOL_HEADER_SIZE) {
 		log_err(cd, _("Could not read %u bytes of volume header."), FVAULT2_VOL_HEADER_SIZE);
 		r = -EIO;
 		goto out;
diff --git a/lib/utils_device.c b/lib/utils_device.c
index c40818ead..9186c39b0 100644
--- a/lib/utils_device.c
+++ b/lib/utils_device.c
@@ -153,7 +153,7 @@ static int device_read_test(struct crypt_device *cd, int devfd)
 	if (minsize > sizeof(buffer))
 		minsize = sizeof(buffer);
 
-	if (read_blockwise(devfd, blocksize, alignment, buffer, minsize) == (ssize_t)minsize) {
+	if (read_lseek_blockwise(devfd, blocksize, alignment, buffer, minsize, 0) == (ssize_t)minsize) {
 		log_dbg(cd, "Direct-io read works.");
 		r = 0;
 	} else {

From e3a008f13a9e1681e5aeb63474a130b555931d12 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 13:38:58 +0100
Subject: [PATCH 010/244] fvault2: Fix offset check inside metadata block

The size check for the fvault2 metadata block can overflow
for crafted values, leading to code reading data outside
the allocated buffer.
This could cause a crash in the crypt_load() operation.

Fix it by using a proper check to avoid integer overflow.

Thanks to David Pokora (Trail of Bits, in collaboration
with Anthropic) for reporting and proposing the patch.
---
 lib/fvault2/fvault2.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/lib/fvault2/fvault2.c b/lib/fvault2/fvault2.c
index f84db2949..11198e889 100644
--- a/lib/fvault2/fvault2.c
+++ b/lib/fvault2/fvault2.c
@@ -371,7 +371,8 @@ static int _parse_metadata_block_0x0019(
 	uint32_t xml_off = le32_to_cpu(md_block->xml_off);
 	uint32_t xml_size = le32_to_cpu(md_block->xml_size);
 
-	if (xml_off + xml_size > FVAULT2_MD_BLOCK_SIZE)
+	if (xml_off >= FVAULT2_MD_BLOCK_SIZE ||
+	    xml_size > FVAULT2_MD_BLOCK_SIZE - xml_off)
 		return -EINVAL;
 
 	xml = strndup((const char *)md_block + xml_off, xml_size);
@@ -451,7 +452,8 @@ static int _parse_metadata_block_0x001a(
 	uint32_t xml_off = le32_to_cpu(md_block->xml_off);
 	uint32_t xml_size = le32_to_cpu(md_block->xml_size);
 
-	if (xml_off + xml_size > FVAULT2_MD_BLOCK_SIZE)
+	if (xml_off >= FVAULT2_MD_BLOCK_SIZE ||
+	    xml_size > FVAULT2_MD_BLOCK_SIZE - xml_off)
 		return -EINVAL;
 
 	xml = strndup((const char *)md_block + xml_off, xml_size);

From e2f8767f95b4933a74c9da9fccf29893abbc1e50 Mon Sep 17 00:00:00 2001
From: Kristina Hanicova <khanicov@redhat.com>
Date: Thu, 26 Mar 2026 13:49:43 +0100
Subject: [PATCH 011/244] meson: Fix mode variable to be a string

This way we do not risk it being converted into decimal 448 or
octal 700 without the leading zero.

Fixes: #983.
---
 meson.build       | 3 ++-
 meson_options.txt | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/meson.build b/meson.build
index e2503072e..531309fc0 100644
--- a/meson.build
+++ b/meson.build
@@ -48,7 +48,6 @@ default_int_options = [
     'default-luks1-keybits',
     'default-luks2-iter-time',
     'default-luks2-keyslot-keybits',
-    'default-luks2-lock-dir-perms',
     'default-luks2-memory-kb',
     'default-luks2-parallel-threads',
     'default-passphrase-size-max',
@@ -67,6 +66,8 @@ foreach default_option : (default_int_options)
     conf.set(default_option.underscorify().to_upper(), get_option(default_option))
 endforeach
 
+conf.set('DEFAULT_LUKS2_LOCK_DIR_PERMS', get_option('default-luks2-lock-dir-perms'))
+
 sanitizer = get_option('b_sanitize')
 sanitizer_enabled = sanitizer != '' and sanitizer != 'none'
 
diff --git a/meson_options.txt b/meson_options.txt
index dba7f6ee3..0fb0622f9 100644
--- a/meson_options.txt
+++ b/meson_options.txt
@@ -15,7 +15,7 @@ option('default-luks1-mode', type : 'string', description : 'cipher mode for LUK
 option('default-luks2-iter-time', type : 'integer', description : 'Argon2 PBKDF iteration time for LUKS2 (in ms)', value : 2000)
 option('default-luks2-keyslot-cipher', type : 'string', description : 'fallback cipher for LUKS2 keyslot (if data encryption is incompatible)', value : 'aes-xts-plain64')
 option('default-luks2-keyslot-keybits', type : 'integer', description : 'fallback key size for LUKS2 keyslot (if data encryption is incompatible)', value : 512)
-option('default-luks2-lock-dir-perms', type : 'integer', description : 'default luks2 locking directory permissions', value : 0o700)
+option('default-luks2-lock-dir-perms', type : 'string', description : 'default LUKS2 locking directory permissions', value : '0700')
 option('default-luks2-lock-path', type : 'string', description : 'path to directory for LUKSv2 locks', value : '/run/cryptsetup')
 option('default-luks2-memory-kb', type : 'integer', description : 'Argon2 PBKDF memory cost for LUKS2 (in kB)', value : 1048576)
 option('default-luks2-parallel-threads', type : 'integer', description : 'Argon2 PBKDF max parallel cost for LUKS2 (if CPUs available)', value : 4)

From 91154e15f16d809a36e34ec4ea1126c966f98e6e Mon Sep 17 00:00:00 2001
From: Kristina Hanicova <khanicov@redhat.com>
Date: Thu, 26 Mar 2026 13:53:42 +0100
Subject: [PATCH 012/244] meson: introduce unquoted variable for path

We need two different variables for the path, one quoted for
config.h and the other unquoted for cryptsetup.conf.

Fixes: #980.
---
 meson.build                | 1 +
 scripts/cryptsetup.conf.in | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/meson.build b/meson.build
index 531309fc0..ed314632e 100644
--- a/meson.build
+++ b/meson.build
@@ -67,6 +67,7 @@ foreach default_option : (default_int_options)
 endforeach
 
 conf.set('DEFAULT_LUKS2_LOCK_DIR_PERMS', get_option('default-luks2-lock-dir-perms'))
+conf.set('DEFAULT_LUKS2_LOCK_PATH_UNQUOTED', get_option('default-luks2-lock-path'))
 
 sanitizer = get_option('b_sanitize')
 sanitizer_enabled = sanitizer != '' and sanitizer != 'none'
diff --git a/scripts/cryptsetup.conf.in b/scripts/cryptsetup.conf.in
index 8bbc5af9d..1348ccd15 100644
--- a/scripts/cryptsetup.conf.in
+++ b/scripts/cryptsetup.conf.in
@@ -1 +1 @@
-d @DEFAULT_LUKS2_LOCK_PATH@ @DEFAULT_LUKS2_LOCK_DIR_PERMS@ root root -
+d @DEFAULT_LUKS2_LOCK_PATH_UNQUOTED@ @DEFAULT_LUKS2_LOCK_DIR_PERMS@ root root -

From 5997f7efb3c8c2313ebc464da6f8226c8bf600d8 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:10:00 +0100
Subject: [PATCH 013/244] Fix LUKS2_reencrypt_lock_by_dm_uuid

Using LUKS2-reencryption-(null) resource name seems
too quirky to me:-)
---
 lib/luks2/luks2_reencrypt.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index 5f7297521..5d999dde8 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -3370,6 +3370,8 @@ static int reencrypt_lock_internal(struct crypt_device *cd, const char *uuid, st
 	int r;
 	char *lock_resource;
 
+	assert(uuid);
+
 	if (!crypt_metadata_locking_enabled()) {
 		*reencrypt_lock = NULL;
 		return 0;
@@ -3406,6 +3408,7 @@ int LUKS2_reencrypt_lock_by_dm_uuid(struct crypt_device *cd, const char *dm_uuid
 			 dm_uuid + 6, dm_uuid + 14, dm_uuid + 18, dm_uuid + 22, dm_uuid + 26);
 		if (r < 0 || (size_t)r != (sizeof(hdr_uuid) - 1))
 			return -EINVAL;
+		uuid = hdr_uuid;
 	} else if (dm_uuid_cmp(dm_uuid, uuid))
 		return -EINVAL;
 

From 016d78824b04cf25fb30bc043e6f62927561cec1 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:12:06 +0100
Subject: [PATCH 014/244] Fix negative return value in
 reencrypt_recover_segment()

---
 lib/luks2/luks2_reencrypt.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index 5d999dde8..0931045f2 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -1635,12 +1635,12 @@ static int reencrypt_recover_segment(struct crypt_device *cd,
 		for (s = 0; s < count; s++) {
 			if (crypt_hash_write(rp->p.csum.ch, data_buffer + (s * rp->p.csum.block_size), rp->p.csum.block_size)) {
 				log_dbg(cd, "Failed to write hash.");
-				r = EINVAL;
+				r = -EINVAL;
 				goto out;
 			}
 			if (crypt_hash_final(rp->p.csum.ch, checksum_tmp, rp->p.csum.hash_size)) {
 				log_dbg(cd, "Failed to finalize hash.");
-				r = EINVAL;
+				r = -EINVAL;
 				goto out;
 			}
 			if (!memcmp(checksum_tmp, (char *)rp->p.csum.checksums + (s * rp->p.csum.hash_size), rp->p.csum.hash_size)) {

From a973a413168b251e8f46770ff4a4e90a9fca35cd Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:15:02 +0100
Subject: [PATCH 015/244] Fix LUKS2_reencrypt_data_offset() return value.

Offset is always uin64_t.
---
 lib/luks2/luks2_internal.h  | 2 +-
 lib/luks2/luks2_reencrypt.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/luks2/luks2_internal.h b/lib/luks2/luks2_internal.h
index adaea91a2..1cdc1d236 100644
--- a/lib/luks2/luks2_internal.h
+++ b/lib/luks2/luks2_internal.h
@@ -367,7 +367,7 @@ int LUKS2_reencrypt_digest_new(struct luks2_hdr *hdr);
 int LUKS2_reencrypt_digest_old(struct luks2_hdr *hdr);
 int LUKS2_reencrypt_segment_new(struct luks2_hdr *hdr);
 int LUKS2_reencrypt_segment_old(struct luks2_hdr *hdr);
-int LUKS2_reencrypt_data_offset(struct luks2_hdr *hdr, bool blockwise);
+uint64_t LUKS2_reencrypt_data_offset(struct luks2_hdr *hdr, bool blockwise);
 
 int LUKS2_reencrypt_max_hotzone_size(struct crypt_device *cd,
 	struct luks2_hdr *hdr,
diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index 0931045f2..96749f7d3 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -4450,7 +4450,7 @@ int crypt_reencrypt(
  * use only for calculation of minimal data device size.
  * The real data offset is taken directly from segments!
  */
-int LUKS2_reencrypt_data_offset(struct luks2_hdr *hdr, bool blockwise)
+uint64_t LUKS2_reencrypt_data_offset(struct luks2_hdr *hdr, bool blockwise)
 {
 	crypt_reencrypt_info ri = LUKS2_reencrypt_status(hdr);
 	uint64_t data_offset = LUKS2_get_data_offset(hdr);

From e3a8ba028e03c6562fd0861b1d359730c7e3dffd Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:18:46 +0100
Subject: [PATCH 016/244] Fix crypt_resize() to not leak data on error path

---
 lib/setup.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/setup.c b/lib/setup.c
index e3bd48a1c..2ef58edd8 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -3831,7 +3831,7 @@ int crypt_resize(struct crypt_device *cd, const char *name, uint64_t new_size)
 		r = INTEGRITY_data_sectors(cd, crypt_metadata_device(cd),
 					   crypt_get_data_offset(cd) * SECTOR_SIZE, &old_size);
 		if (r < 0)
-			return r;
+			goto out;
 
 		dmd.size = dmdq.size;
 		dmd.flags = dmdq.flags | CRYPT_ACTIVATE_REFRESH | CRYPT_ACTIVATE_PRIVATE;
@@ -3855,7 +3855,7 @@ int crypt_resize(struct crypt_device *cd, const char *name, uint64_t new_size)
 		r = INTEGRITY_data_sectors(cd, crypt_metadata_device(cd),
 				crypt_get_data_offset(cd) * SECTOR_SIZE, &new_size);
 		if (r < 0)
-			return r;
+			goto out;
 		log_dbg(cd, "Maximum integrity device size from kernel %" PRIu64, new_size);
 
 		if (old_size == new_size && new_size == dmdq.size &&

From a012bc99092c9d471c6b3ef4b32730d973e19d19 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:21:01 +0100
Subject: [PATCH 017/244] Fix wiping of larger Veracrypt password pool

---
 lib/tcrypt/tcrypt.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/tcrypt/tcrypt.c b/lib/tcrypt/tcrypt.c
index 8fbe65149..fdfa37e86 100644
--- a/lib/tcrypt/tcrypt.c
+++ b/lib/tcrypt/tcrypt.c
@@ -626,7 +626,7 @@ static int TCRYPT_init_hdr(struct crypt_device *cd,
 			params->cipher, params->mode, params->key_size);
 	}
 out:
-	crypt_safe_memzero(pwd, TCRYPT_KEY_POOL_LEN);
+	crypt_safe_memzero(pwd, VCRYPT_KEY_POOL_LEN);
 	if (key)
 		crypt_safe_memzero(key, TCRYPT_HDR_KEY_LEN);
 	free(key);

From 937373d6097494f8aafe60cdf44f6e620e5cde18 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:22:44 +0100
Subject: [PATCH 018/244] Fix opal_reuse_active_lsp() to not leak data on error
 path

---
 lib/luks2/hw_opal/hw_opal.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index e79e8481f..b14601479 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -859,7 +859,7 @@ static int opal_reuse_active_lsp(struct crypt_device *cd, int fd, uint32_t sum,
 		/* If device supports SUM let's get list of SUM enabled LRs */
 		r = opal_get_sum_status_anybody(cd, fd, segment_number, &range_policy, &segment_in_sum);
 		if (r < 0)
-			return r;
+			goto out;
 	}
 
 	/* If it is already enabled, wipe the locking range first */

From 3e62ca72a3789b0998103a0706393f09f1e9fe8d Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:24:45 +0100
Subject: [PATCH 019/244] Fix crypt_capi_to_cipher() to properly check "capi:"
 prefix

---
 lib/utils_crypt.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/utils_crypt.c b/lib/utils_crypt.c
index a5eca18a7..76bcfac2b 100644
--- a/lib/utils_crypt.c
+++ b/lib/utils_crypt.c
@@ -298,7 +298,7 @@ int crypt_capi_to_cipher(char **org_c, char **org_i, const char *c_dm, const cha
 		return -EINVAL;
 
 	/* legacy mode */
-	if (strncmp(c_dm, "capi:", 4)) {
+	if (strncmp(c_dm, "capi:", 5)) {
 		if (!(*org_c = strdup(c_dm)))
 			return -ENOMEM;
 		if (i_dm) {

From 24e3f1646914f150f08b4677591024fcbf2e44c3 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:26:46 +0100
Subject: [PATCH 020/244] Fix kernel crypto backend sa.salg_type snprintf check

---
 lib/crypto_backend/crypto_cipher_kernel.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/crypto_backend/crypto_cipher_kernel.c b/lib/crypto_backend/crypto_cipher_kernel.c
index 72918eb35..fd4635a74 100644
--- a/lib/crypto_backend/crypto_cipher_kernel.c
+++ b/lib/crypto_backend/crypto_cipher_kernel.c
@@ -240,7 +240,7 @@ int crypt_cipher_check_kernel(const char *name, const char *mode,
 
 	salg_type = aead ? "aead" : "skcipher";
 	r = snprintf((char *)sa.salg_type, sizeof(sa.salg_type), "%s", salg_type);
-	if (r < 0 || (size_t)r >= sizeof(sa.salg_name))
+	if (r < 0 || (size_t)r >= sizeof(sa.salg_type))
 		return -EINVAL;
 
 	memset(tmp_salg_name, 0, sizeof(tmp_salg_name));

From 2e0a45f6cfd5c05a88e56b637bf7198d236d9068 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:31:05 +0100
Subject: [PATCH 021/244] OpenSSL crypto bakcend: check for possible CTX_dup
 failure

---
 lib/crypto_backend/crypto_openssl.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index 8272eec7b..f9ce25a0b 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -443,6 +443,12 @@ int crypt_hmac_init(struct crypt_hmac **ctx, const char *name,
 
 	h->hash_len = EVP_MAC_CTX_get_mac_size(h->md);
 	h->md_org = EVP_MAC_CTX_dup(h->md);
+	if (!h->md_org) {
+		EVP_MAC_CTX_free(h->md);
+		EVP_MAC_free(h->mac);
+		free(h);
+		return -EINVAL;
+	}
 #else
 	h = malloc(sizeof(*h));
 	if (!h)

From 0e0a9dc71676b905719f50f1a66585ef7e66e256 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:34:35 +0100
Subject: [PATCH 022/244] Fix device_alignment for NULL device

Return 0 if device is NULL, it makes no sense anyway.
---
 lib/utils_device.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/utils_device.c b/lib/utils_device.c
index 9186c39b0..c24cf0a6c 100644
--- a/lib/utils_device.c
+++ b/lib/utils_device.c
@@ -1047,7 +1047,7 @@ size_t device_alignment(struct device *device)
 	int devfd;
 
 	if (!device)
-		return -EINVAL;
+		return 0;
 
 	if (!device->alignment) {
 		devfd = open(device_path(device), O_RDONLY);

From 07b8dc497ce6f2cfea72da0a940a4563e9ffa6ba Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:38:41 +0100
Subject: [PATCH 023/244] Fix wrong union access in _reload_device() if tgs is
 DM_INTEGRITY

---
 lib/setup.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/setup.c b/lib/setup.c
index 2ef58edd8..5b14924c3 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -3564,7 +3564,7 @@ static int _reload_device(struct crypt_device *cd, const char *name,
 	r = dm_reload_device(cd, name, &tdmd, dmflags, 1);
 out:
 	/* otherwise dm_targets_free would free src key */
-	if (src->u.crypt.vk == tgt->u.crypt.vk)
+	if (tgt->type == DM_CRYPT && src->u.crypt.vk == tgt->u.crypt.vk)
 		tgt->u.crypt.vk = NULL;
 
 	dm_targets_free(cd, &tdmd);

From ed77657d4d6a4b180f7e2a6de712acde5102ff8d Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:50:00 +0100
Subject: [PATCH 024/244] Define properly sized objects arrays in reencrypt
 helper

---
 lib/libcryptsetup_macros.h | 4 ++++
 lib/luks2/luks2.h          | 7 ++++---
 src/utils_reencrypt.c      | 6 +++---
 3 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/lib/libcryptsetup_macros.h b/lib/libcryptsetup_macros.h
index 657c48f8f..4c1bc1bdd 100644
--- a/lib/libcryptsetup_macros.h
+++ b/lib/libcryptsetup_macros.h
@@ -62,4 +62,8 @@
 # define LUKS_STRIPES 4000
 #endif
 
+#ifndef LUKS2_OBJECTS_MAX
+# define LUKS2_OBJECTS_MAX 32
+#endif
+
 #endif /* _LIBCRYPTSETUP_MACROS_H */
diff --git a/lib/luks2/luks2.h b/lib/luks2/luks2.h
index 30568dbba..703185a41 100644
--- a/lib/luks2/luks2.h
+++ b/lib/luks2/luks2.h
@@ -24,9 +24,10 @@
 #define LUKS2_CHECKSUM_ALG_L 32
 #define LUKS2_CHECKSUM_L 64
 
-#define LUKS2_KEYSLOTS_MAX       32
-#define LUKS2_TOKENS_MAX         32
-#define LUKS2_SEGMENT_MAX        32
+#define LUKS2_OBJECTS_MAX  32
+#define LUKS2_KEYSLOTS_MAX LUKS2_OBJECTS_MAX
+#define LUKS2_TOKENS_MAX   LUKS2_OBJECTS_MAX
+#define LUKS2_SEGMENT_MAX  LUKS2_OBJECTS_MAX
 
 #define LUKS2_BUILTIN_TOKEN_PREFIX "luks2-"
 #define LUKS2_BUILTIN_TOKEN_PREFIX_LEN 6
diff --git a/src/utils_reencrypt.c b/src/utils_reencrypt.c
index c80c27c58..b42a1d258 100644
--- a/src/utils_reencrypt.c
+++ b/src/utils_reencrypt.c
@@ -1082,11 +1082,11 @@ struct unlocked_keyslot {
 };
 
 struct keyslot_contexts {
-	struct unlocked_keyslot ks[16];
-	struct unlocked_token tkns[16];
+	struct unlocked_keyslot ks[LUKS2_OBJECTS_MAX / 2];
+	struct unlocked_token tkns[LUKS2_OBJECTS_MAX / 2];
 
 	/* available unlock methods linked in keyslot struct */
-	struct crypt_keyslot_context *kc[16];
+	struct crypt_keyslot_context *kc[LUKS2_OBJECTS_MAX / 2];
 
 	/* contains pointer to context unlocking existing volume key */
 	struct crypt_keyslot_context *p_old_kc;

From 8e26a933a2a09e173f45bd74f69e313c7e837593 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 21:57:10 +0100
Subject: [PATCH 025/244] Document non-standard behaviour of safe_realloc

---
 lib/libcryptsetup.h | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index 4040187b5..987fc45e6 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -3188,6 +3188,8 @@ void crypt_safe_free(void *data);
  * @param size new size of memory in bytes
  *
  * @return pointer to allocated memory or @e NULL.
+ *
+ * @note On memory failure, original memory safely wiped and deallocated.
  */
 void *crypt_safe_realloc(void *data, size_t size);
 

From 941c45ad8b3b0c64961591c1758fc62cc14fc775 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 22:05:45 +0100
Subject: [PATCH 026/244] Increase buffer for keyring name in DM table and
 properly check its size

---
 lib/libdevmapper.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index 13ec03174..c2ac9f36a 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -2056,7 +2056,7 @@ static int _dm_target_query_crypt(struct crypt_device *cd, uint64_t get_flags,
 				  uint32_t *act_flags)
 {
 	uint64_t val64;
-	char *rcipher, *rintegrity, *key_, *rdevice, *endp, buffer[3], *arg, *key_desc, keyring[16];
+	char *rcipher, *rintegrity, *key_, *rdevice, *endp, buffer[3], *arg, *key_desc, keyring[64];
 	unsigned int i, val;
 	int r;
 	size_t key_size;
@@ -2189,7 +2189,7 @@ static int _dm_target_query_crypt(struct crypt_device *cd, uint64_t get_flags,
 				if (!endp)
 					goto err;
 				key_desc = strpbrk(endp + 1, ":");
-				if (!key_desc)
+				if (!key_desc || (size_t)(key_desc - endp) > sizeof(keyring))
 					goto err;
 				memcpy(keyring, endp + 1, key_desc - endp - 1);
 				keyring[key_desc - endp - 1] = '\0';

From 476e5f8f1bac81409dbccdd37a0252e91129399a Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 22:08:26 +0100
Subject: [PATCH 027/244] Fix flags initialization to not read unitialized
 value if dm_flags() fails

---
 lib/verity/verity.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/verity/verity.c b/lib/verity/verity.c
index 65f5f4ed6..ce19dac05 100644
--- a/lib/verity/verity.c
+++ b/lib/verity/verity.c
@@ -301,7 +301,7 @@ int VERITY_activate(struct crypt_device *cd,
 		     struct crypt_params_verity *verity_hdr,
 		     uint32_t activation_flags)
 {
-	uint64_t dmv_flags;
+	uint64_t dmv_flags = 0;
 	int r;
 	key_serial_t kid = 0;
 	char *description = NULL;

From 93df8cb268c44fa15c1b5df534ce386edcf1445a Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 22:16:03 +0100
Subject: [PATCH 028/244] Avoid integrity sector size overflow (read from disk)

---
 lib/integrity/integrity.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/lib/integrity/integrity.c b/lib/integrity/integrity.c
index a10050d17..d92d97976 100644
--- a/lib/integrity/integrity.c
+++ b/lib/integrity/integrity.c
@@ -51,6 +51,10 @@ static int INTEGRITY_read_superblock(struct crypt_device *cd,
 			sb->version, device_path(device));
 		r = -EINVAL;
 	} else {
+		if ((int)sb->log2_sectors_per_block + SECTOR_SHIFT >= 32) {
+			log_dbg(cd, "dm-integrity log2_sectors_per_block overflow");
+			return -EINVAL;
+		}
 		sb->integrity_tag_size = le16toh(sb->integrity_tag_size);
 		sb->journal_sections = le32toh(sb->journal_sections);
 		sb->provided_data_sectors = le64toh(sb->provided_data_sectors);

From 2506c841162efdb055554ddf861953e3d57347e2 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 22:31:00 +0100
Subject: [PATCH 029/244] Check for strtoll() failure

---
 lib/utils_blkid.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/lib/utils_blkid.c b/lib/utils_blkid.c
index 44e501b05..c65d51ffa 100644
--- a/lib/utils_blkid.c
+++ b/lib/utils_blkid.c
@@ -217,6 +217,7 @@ int blk_do_wipe(struct blkid_handle *h)
 	return blkid_do_wipe(h->pr, 0);
 #else
 	const char *offset;
+	char *end;
 	off_t offset_val;
 	void *buf;
 	ssize_t ret;
@@ -244,7 +245,11 @@ int blk_do_wipe(struct blkid_handle *h)
 		return -EINVAL;
 	memset(buf, 0, len);
 
-	offset_val = strtoll(offset, NULL, 10);
+	offset_val = strtoll(offset, &end, 10);
+	if (*end || !*offset || errno == ERANGE) {
+		free(buf);
+		return -EINVAL;
+	}
 
 	/* TODO: missing crypt_wipe_fd() */
 	ret = write_lseek_blockwise(h->fd, bsize, alignment, buf, len, offset_val);

From 6695c57225a9fa34c1c87fff7d0f56903640327b Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 22:33:47 +0100
Subject: [PATCH 030/244] fvault2: Use safe_alloc for key unwrapping

---
 lib/fvault2/fvault2.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/lib/fvault2/fvault2.c b/lib/fvault2/fvault2.c
index 11198e889..4eff7b3c7 100644
--- a/lib/fvault2/fvault2.c
+++ b/lib/fvault2/fvault2.c
@@ -229,13 +229,13 @@ static int _unwrap_key(
 	if (r < 0)
 		goto out;
 
-	cipher_in = malloc(16);
+	cipher_in = crypt_safe_alloc(16);
 	if (cipher_in == NULL) {
 		r = -ENOMEM;
 		goto out;
 	}
 
-	cipher_out = malloc(16);
+	cipher_out = crypt_safe_alloc(16);
 	if (cipher_out == NULL) {
 		r = -ENOMEM;
 		goto out;
@@ -283,8 +283,8 @@ static int _unwrap_key(
 	((uint64_t *)key_buf)[0] = r2;
 	((uint64_t *)key_buf)[1] = r3;
 out:
-	free(cipher_in);
-	free(cipher_out);
+	crypt_safe_free(cipher_in);
+	crypt_safe_free(cipher_out);
 	if (cipher != NULL)
 		crypt_cipher_destroy(cipher);
 	return r;

From 961d74ebd4783d73335e4a2bfa878e4607036408 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 22:43:51 +0100
Subject: [PATCH 031/244] OpenSSL crypto backend: check for maximal RAND_bytes
 buffer size

---
 lib/crypto_backend/crypto_openssl.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index f9ce25a0b..56273e64c 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -546,6 +546,9 @@ void crypt_hmac_destroy(struct crypt_hmac *ctx)
 int crypt_backend_rng(char *buffer, size_t length,
 	int quality __attribute__((unused)), int fips __attribute__((unused)))
 {
+	if (length > INT_MAX)
+		return -EINVAL;
+
 	if (RAND_bytes((unsigned char *)buffer, length) != 1)
 		return -EINVAL;
 

From 99d3eddbc3bf181212b8831645374d3d477050e5 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 22:53:36 +0100
Subject: [PATCH 032/244] Use parentheses for macros with multiplication

---
 lib/bitlk/bitlk.c     | 4 ++--
 lib/fvault2/fvault2.c | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/lib/bitlk/bitlk.c b/lib/bitlk/bitlk.c
index 3b4a40bfa..34ae0b554 100644
--- a/lib/bitlk/bitlk.c
+++ b/lib/bitlk/bitlk.c
@@ -29,7 +29,7 @@
 #define BITLK_FVE_METADATA_HEADERS_LEN BITLK_FVE_METADATA_BLOCK_HEADER_LEN + BITLK_FVE_METADATA_HEADER_LEN
 
 /* total size of the FVE area (64 KiB) */
-#define BITLK_FVE_METADATA_SIZE 64 * 1024
+#define BITLK_FVE_METADATA_SIZE (64 * 1024)
 
 #define BITLK_ENTRY_HEADER_LEN 8
 #define BITLK_VMK_HEADER_LEN 28
@@ -55,7 +55,7 @@
 
 /* not available in older version of libuuid */
 #ifndef UUID_STR_LEN
-#define UUID_STR_LEN	37
+#define UUID_STR_LEN 37
 #endif
 
 /* known types of GUIDs from the BITLK superblock */
diff --git a/lib/fvault2/fvault2.c b/lib/fvault2/fvault2.c
index 4eff7b3c7..2e068e7eb 100644
--- a/lib/fvault2/fvault2.c
+++ b/lib/fvault2/fvault2.c
@@ -23,7 +23,7 @@
 #define FVAULT2_MD_BLOCK_SIZE 8192
 
 /* maximal offset to read metadata block */
-#define FVAULT2_MAX_OFF 1024*1024*1024
+#define FVAULT2_MAX_OFF (1024 * 1024 * 1024)
 
 /* encrypted metadata parsing progress flags (see _read_encrypted_metadata) */
 #define FVAULT2_ENC_MD_PARSED_0x0019 0b001

From 2dfab55e4aa8a8eaaadb336f50ea6c0e9c5116aa Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 23 Mar 2026 23:07:21 +0100
Subject: [PATCH 033/244] Make offset in loop device helper uint64_t

It is actually never used other than for 0, but
it should be correct.
---
 lib/utils_loop.c   | 2 +-
 lib/utils_loop.h   | 4 +++-
 tests/api_test.h   | 2 +-
 tests/test_utils.c | 2 +-
 4 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/lib/utils_loop.c b/lib/utils_loop.c
index ec8567899..4e5d8e0f4 100644
--- a/lib/utils_loop.c
+++ b/lib/utils_loop.c
@@ -102,7 +102,7 @@ static char *crypt_loop_get_device(void)
 	return strdup(dev);
 }
 
-int crypt_loop_attach(char **loop, const char *file, int offset,
+int crypt_loop_attach(char **loop, const char *file, uint64_t offset,
 		      int autoclear, int *readonly, size_t blocksize)
 {
 	struct loop_config config = {0};
diff --git a/lib/utils_loop.h b/lib/utils_loop.h
index 4edeff3ae..a966a02cd 100644
--- a/lib/utils_loop.h
+++ b/lib/utils_loop.h
@@ -9,11 +9,13 @@
 #ifndef _UTILS_LOOP_H
 #define _UTILS_LOOP_H
 
+#include <stdint.h>
+
 /* loopback device helpers */
 
 char *crypt_loop_backing_file(const char *loop);
 int crypt_loop_device(const char *loop);
-int crypt_loop_attach(char **loop, const char *file, int offset,
+int crypt_loop_attach(char **loop, const char *file, uint64_t offset,
 		      int autoclear, int *readonly, size_t blocksize);
 int crypt_loop_detach(const char *loop);
 int crypt_loop_resize(const char *loop);
diff --git a/tests/api_test.h b/tests/api_test.h
index e317967df..afaae22e1 100644
--- a/tests/api_test.h
+++ b/tests/api_test.h
@@ -139,7 +139,7 @@ void xlog(const char *msg, const char *tst, const char *func, int line, const ch
 
 /* loop helpers */
 int loop_device(const char *loop);
-int loop_attach(char **loop, const char *file, int offset,
+int loop_attach(char **loop, const char *file, uint64_t offset,
 		      int autoclear, int *readonly);
 int loop_detach(const char *loop);
 
diff --git a/tests/test_utils.c b/tests/test_utils.c
index 56aebb7e7..a9a730960 100644
--- a/tests/test_utils.c
+++ b/tests/test_utils.c
@@ -776,7 +776,7 @@ static char *crypt_loop_get_device(void)
 	return strdup(dev);
 }
 
-int loop_attach(char **loop, const char *file, int offset,
+int loop_attach(char **loop, const char *file, uint64_t offset,
 		      int autoclear, int *readonly)
 {
 	struct loop_config config = {0};

From 846d85c5e0a9143f5cc48bfe5ddd6f84dbedbc52 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 27 Mar 2026 09:31:19 +0100
Subject: [PATCH 034/244] integritysetup: remove superfluous return line

---
 src/integritysetup.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/integritysetup.c b/src/integritysetup.c
index 4ce1de63d..037fe7116 100644
--- a/src/integritysetup.c
+++ b/src/integritysetup.c
@@ -522,7 +522,6 @@ static int action_status(void)
 	if (r == -ENOTSUP)
 		r = 0;
 	return r;
-	return -EINVAL;
 }
 
 static int action_dump(void)

From 45105319561e9a0fddeee179f2a688a7aaee41e0 Mon Sep 17 00:00:00 2001
From: Daniel Golle <daniel@makrotopia.org>
Date: Wed, 25 Feb 2026 02:06:52 +0000
Subject: [PATCH 035/244] meson: propagate crypto backend library dependency to
 all targets

When building libcryptsetup as a static library, the crypto backend
(e.g. LibreSSL's libcrypto) must be linked into every final executable.
The crypto_backend_library dependency was only listed for
libcrypto_backend (a static lib), but meson does not transitively
propagate static library dependencies to consumers via link_with.

Add crypto_backend_library to libcryptsetup_deps so it is propagated
to all tools and tests that link against libcryptsetup.
---
 lib/meson.build | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/meson.build b/lib/meson.build
index 9f503b6bf..39efd36eb 100644
--- a/lib/meson.build
+++ b/lib/meson.build
@@ -9,6 +9,7 @@ libutils_io = static_library('utils_io',
 libcryptsetup_sym_path = join_paths(meson.current_source_dir(), 'libcryptsetup.sym')
 
 libcryptsetup_deps = [
+    crypto_backend_library,
     uuid,
     devmapper,
     libargon2_external,

From 8dba475ef33585d7874e7e50c2152f470f609204 Mon Sep 17 00:00:00 2001
From: Daniel Golle <daniel@makrotopia.org>
Date: Wed, 25 Feb 2026 02:46:10 +0000
Subject: [PATCH 036/244] meson: allow external tokens without dlvsym (musl)

dlvsym is a glibc extension that some libc implementations (notably
musl) do not provide. The C code already handles this gracefully since
commit 5f2c751d ("Use dlsym() for token load if dlvsym() is not
available"), falling back to dlsym when HAVE_DLVSYM is not set.

However, the meson build had an assert requiring HAVE_DLVSYM for
external-tokens, making it impossible to build with external token
support on musl.

Remove the assert and always set HAVE_DLVSYM via conf.set10() so that
config.h gets the correct value, matching the autotools behaviour.
---
 meson.build | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/meson.build b/meson.build
index ed314632e..d460943e4 100644
--- a/meson.build
+++ b/meson.build
@@ -203,14 +203,14 @@ if not cc.has_function('dlsym',
         error('dlsym not found')
     endif
 endif
-if cc.has_function('dlvsym',
+have_dlvsym = cc.has_function('dlvsym',
         dependencies: dl)
-    conf.set10('HAVE_DLVSYM', true)
+conf.set10('HAVE_DLVSYM', have_dlvsym)
+if not have_dlvsym
+    warning('dlvsym not found, external token plugins will use dlsym as fallback.')
 endif
 
 if get_option('external-tokens')
-    assert(conf.has('HAVE_DLVSYM') and conf.get('HAVE_DLVSYM') == 1,
-        'dl library has no dlvsym function')
     conf.set10('USE_EXTERNAL_TOKENS', true,
         description: 'Use external tokens')
 endif

From af3357d570e03d3e019a6491ab3a29473bd041ae Mon Sep 17 00:00:00 2001
From: Daniel Golle <daniel@makrotopia.org>
Date: Wed, 25 Feb 2026 04:25:22 +0000
Subject: [PATCH 037/244] meson: fix argp detection with argp-standalone
 (static-only)

argp-standalone only ships a static library (libargp.a). The
find_library call passed 'static: enable_static', which when false
caused meson to look exclusively for a shared library and fail.

Drop the static: parameter so meson accepts whichever variant is
available, matching the autotools AC_SEARCH_LIBS behaviour.
---
 meson.build | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/meson.build b/meson.build
index d460943e4..7920a9955 100644
--- a/meson.build
+++ b/meson.build
@@ -425,8 +425,7 @@ if get_option('ssh-token')
     argp = []
 
     if not cc.has_function('argp_parse', prefix: '#include <argp.h>', dependencies: argp)
-        argp = cc.find_library('argp',
-            static: enable_static)
+        argp = cc.find_library('argp')
     endif
 
     libssh = dependency('libssh')

From 7e27bedf121b9106c4c3ecb080afe1d57ea83119 Mon Sep 17 00:00:00 2001
From: Daniel Golle <daniel@makrotopia.org>
Date: Tue, 24 Feb 2026 22:26:14 +0000
Subject: [PATCH 038/244] meson: fix uuid header path in function check

The has_function check for uuid_clear used '#include <uuid.h>' but
all source files include '<uuid/uuid.h>'.  On macOS the header only
exists at the uuid/uuid.h path, so the function check failed even
though the uuid dependency was found.  Use the correct header path.
---
 meson.build | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meson.build b/meson.build
index 7920a9955..3707ba998 100644
--- a/meson.build
+++ b/meson.build
@@ -155,7 +155,7 @@ endif
 uuid = dependency('uuid',
     static: enable_static)
 assert(cc.has_function('uuid_clear',
-        prefix: '#include <uuid.h>', dependencies: uuid),
+        prefix: '#include <uuid/uuid.h>', dependencies: uuid),
     'You need the uuid library.')
 
 # ==========================================================================

From 86b9a3fc57dd20ba8a2db3fda29cb43564ce7f09 Mon Sep 17 00:00:00 2001
From: Daniel Golle <daniel@makrotopia.org>
Date: Tue, 24 Feb 2026 22:29:37 +0000
Subject: [PATCH 039/244] meson: use pkg-config to find popt library

cc.find_library('popt') only searches default linker paths and
misses libraries installed in non-standard locations such as
Homebrew's /opt/homebrew prefix on macOS.  Use dependency() which
queries pkg-config first (where popt is properly registered),
falling back to cc.find_library() if pkg-config is unavailable.

[patch modified by Kristina Hanicova]
---
 meson.build | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/meson.build b/meson.build
index 3707ba998..82d80cede 100644
--- a/meson.build
+++ b/meson.build
@@ -227,10 +227,16 @@ endif
 
 # ==========================================================================
 
-popt = cc.find_library('popt',
-    static: enable_static)
+popt = dependency('popt',
+    static: enable_static,
+    required: false)
+if not popt.found()
+    popt = cc.find_library('popt',
+        static: enable_static,
+        required: true)
+endif
 assert(cc.has_function('poptConfigFileToString',
-        dependencies: popt),
+        prefix: '#include <popt.h>', dependencies: popt),
     'You need popt 1.7 or newer to compile.')
 
 # ==========================================================================

From c5e15b88a27feac7ccd85c0840cfe8b277447a4c Mon Sep 17 00:00:00 2001
From: Daniel Golle <daniel@makrotopia.org>
Date: Wed, 25 Feb 2026 02:02:41 +0000
Subject: [PATCH 040/244] lib: fix OpenSSL crypto backend build with LibreSSL

LibreSSL defines OPENSSL_VERSION_MAJOR >= 3 for compatibility and
provides openssl/core_names.h with OSSL_KDF_PARAM_ARGON2_VERSION,
but does not implement the OpenSSL 3.x provider/KDF API (EVP_KDF,
OSSL_PARAM, etc).

Add an OPENSSL3_API compile-time guard that excludes LibreSSL via
LIBRESSL_VERSION_NUMBER, and use it for all OpenSSL 3.x-specific code
paths. Also strengthen the meson detection to check for EVP_KDF_fetch
in addition to the header symbol, so HAVE_DECL_OSSL_KDF_PARAM_ARGON2_VERSION
is correctly set to 0 on LibreSSL.
---
 lib/crypto_backend/crypto_openssl.c | 49 ++++++++++++++++++-----------
 meson.build                         |  9 ++++--
 2 files changed, 37 insertions(+), 21 deletions(-)

diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index 56273e64c..d1a1422ad 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -15,7 +15,18 @@
 #include <openssl/hmac.h>
 #include <openssl/rand.h>
 #include "crypto_backend_internal.h"
-#if OPENSSL_VERSION_MAJOR >= 3
+
+/*
+ * LibreSSL defines OPENSSL_VERSION_MAJOR >= 3 for compatibility but does not
+ * implement the OpenSSL 3.x provider/KDF API. Use this macro instead.
+ */
+#if OPENSSL_VERSION_MAJOR >= 3 && !defined(LIBRESSL_VERSION_NUMBER)
+#define OPENSSL3_API 1
+#else
+#define OPENSSL3_API 0
+#endif
+
+#if OPENSSL3_API
 #include <openssl/provider.h>
 #include <openssl/kdf.h>
 #include <openssl/core_names.h>
@@ -48,7 +59,7 @@ struct crypt_hash {
 };
 
 struct crypt_hmac {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	EVP_MAC *mac;
 	EVP_MAC_CTX *md;
 	EVP_MAC_CTX *md_org;
@@ -132,7 +143,7 @@ static void HMAC_CTX_free(HMAC_CTX *md)
 #else
 static void openssl_backend_exit(void)
 {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	if (ossl_legacy)
 		OSSL_PROVIDER_unload(ossl_legacy);
 	if (ossl_default)
@@ -151,7 +162,7 @@ static int openssl_backend_init(bool fips)
 /*
  * OpenSSL >= 3.0.0 provides some algorithms in legacy provider
  */
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	int r;
 	bool ossl_threads = false;
 
@@ -197,7 +208,7 @@ static int openssl_backend_init(bool fips)
 
 static const char *openssl_backend_version(void)
 {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	return backend_version;
 #else
 	return OpenSSL_version(OPENSSL_VERSION);
@@ -233,10 +244,10 @@ void crypt_backend_destroy(void)
 uint32_t crypt_backend_flags(void)
 {
 	uint32_t flags = 0;
-#if OPENSSL_VERSION_MAJOR < 3
+#if !OPENSSL3_API
 	flags |= CRYPT_BACKEND_PBKDF2_INT;
 #endif
-#if HAVE_DECL_OSSL_KDF_PARAM_ARGON2_VERSION
+#if OPENSSL3_API && HAVE_DECL_OSSL_KDF_PARAM_ARGON2_VERSION
 	flags |= CRYPT_BACKEND_ARGON2;
 #endif
 	return flags;
@@ -273,7 +284,7 @@ static const char *crypt_hash_compat_name(const char *name)
 
 static const EVP_MD *hash_id_get(const char *name)
 {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	return EVP_MD_fetch(ossl_ctx, crypt_hash_compat_name(name), NULL);
 #else
 	return EVP_get_digestbyname(crypt_hash_compat_name(name));
@@ -282,7 +293,7 @@ static const EVP_MD *hash_id_get(const char *name)
 
 static void hash_id_free(const EVP_MD *hash_id)
 {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	EVP_MD_free(CONST_CAST(EVP_MD*)hash_id);
 #else
 	UNUSED(hash_id);
@@ -291,7 +302,7 @@ static void hash_id_free(const EVP_MD *hash_id)
 
 static const EVP_CIPHER *cipher_type_get(const char *name)
 {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	return EVP_CIPHER_fetch(ossl_ctx, name, NULL);
 #else
 	return EVP_get_cipherbyname(name);
@@ -300,7 +311,7 @@ static const EVP_CIPHER *cipher_type_get(const char *name)
 
 static void cipher_type_free(const EVP_CIPHER *cipher_type)
 {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	EVP_CIPHER_free(CONST_CAST(EVP_CIPHER*)cipher_type);
 #else
 	UNUSED(cipher_type);
@@ -411,7 +422,7 @@ int crypt_hmac_init(struct crypt_hmac **ctx, const char *name,
 		    const void *key, size_t key_length)
 {
 	struct crypt_hmac *h;
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	OSSL_PARAM params[] = {
 		OSSL_PARAM_utf8_string(OSSL_MAC_PARAM_DIGEST, CONST_CAST(void*)name, 0),
 		OSSL_PARAM_END
@@ -477,7 +488,7 @@ int crypt_hmac_init(struct crypt_hmac **ctx, const char *name,
 
 static int crypt_hmac_restart(struct crypt_hmac *ctx)
 {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	EVP_MAC_CTX_free(ctx->md);
 	ctx->md = EVP_MAC_CTX_dup(ctx->md_org);
 	if (!ctx->md)
@@ -490,7 +501,7 @@ static int crypt_hmac_restart(struct crypt_hmac *ctx)
 
 int crypt_hmac_write(struct crypt_hmac *ctx, const char *buffer, size_t length)
 {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	return EVP_MAC_update(ctx->md, (const unsigned char *)buffer, length) == 1 ? 0 : -EINVAL;
 #else
 	HMAC_Update(ctx->md, (const unsigned char *)buffer, length);
@@ -501,7 +512,7 @@ int crypt_hmac_write(struct crypt_hmac *ctx, const char *buffer, size_t length)
 int crypt_hmac_final(struct crypt_hmac *ctx, char *buffer, size_t length)
 {
 	unsigned char tmp[EVP_MAX_MD_SIZE];
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	size_t tmp_len = 0;
 
 	if (length > (size_t)ctx->hash_len)
@@ -531,7 +542,7 @@ int crypt_hmac_final(struct crypt_hmac *ctx, char *buffer, size_t length)
 
 void crypt_hmac_destroy(struct crypt_hmac *ctx)
 {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	EVP_MAC_CTX_free(ctx->md);
 	EVP_MAC_CTX_free(ctx->md_org);
 	EVP_MAC_free(ctx->mac);
@@ -560,7 +571,7 @@ static int openssl_pbkdf2(const char *password, size_t password_length,
 	const char *hash, char *key, size_t key_length)
 {
 	int r;
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	EVP_KDF_CTX *ctx;
 	EVP_KDF *pbkdf2;
 	OSSL_PARAM params[] = {
@@ -607,7 +618,7 @@ static int openssl_argon2(const char *type, const char *password, size_t passwor
 	const char *salt, size_t salt_length, char *key, size_t key_length,
 	uint32_t iterations, uint32_t memory, uint32_t parallel)
 {
-#if HAVE_DECL_OSSL_KDF_PARAM_ARGON2_VERSION
+#if OPENSSL3_API && HAVE_DECL_OSSL_KDF_PARAM_ARGON2_VERSION
 	EVP_KDF_CTX *ctx;
 	EVP_KDF *argon2;
 	unsigned int threads = parallel;
@@ -893,7 +904,7 @@ bool crypt_fips_mode(void) { return false; }
 #else
 static bool openssl_fips_mode(void)
 {
-#if OPENSSL_VERSION_MAJOR >= 3
+#if OPENSSL3_API
 	return EVP_default_properties_is_fips_enabled(NULL);
 #else
 	return FIPS_mode();
diff --git a/meson.build b/meson.build
index 82d80cede..d7cd6ac3e 100644
--- a/meson.build
+++ b/meson.build
@@ -516,10 +516,15 @@ elif get_option('crypto-backend') == 'openssl'
     conf.set10('HAVE_DECL_OSSL_GET_MAX_THREADS',
         cc.has_header_symbol('openssl/thread.h', 'OSSL_get_max_threads',
             dependencies: crypto_backend_library))
-    conf.set10('HAVE_DECL_OSSL_KDF_PARAM_ARGON2_VERSION',
+    # LibreSSL defines OSSL_KDF_PARAM_ARGON2_VERSION in core_names.h but does
+    # not implement the EVP_KDF API. Check for both the symbol and the function.
+    _have_ossl_argon2 = (
         cc.has_header_symbol('openssl/core_names.h', 'OSSL_KDF_PARAM_ARGON2_VERSION',
+            dependencies: crypto_backend_library) and
+        cc.has_function('EVP_KDF_fetch',
             dependencies: crypto_backend_library))
-    if conf.get('HAVE_DECL_OSSL_KDF_PARAM_ARGON2_VERSION') == 1
+    conf.set10('HAVE_DECL_OSSL_KDF_PARAM_ARGON2_VERSION', _have_ossl_argon2)
+    if _have_ossl_argon2
         use_internal_argon2 = false
     endif
 elif get_option('crypto-backend') == 'nss'

From 902602defd27c8fa7dd6444c271c50cde2ee1328 Mon Sep 17 00:00:00 2001
From: Daniel Golle <daniel@makrotopia.org>
Date: Tue, 24 Feb 2026 16:26:03 +0000
Subject: [PATCH 041/244] lib: guard uname() behind HAVE_SYS_UTSNAME_H

Add sys/utsname.h to header detection in both meson.build and
configure.ac. Guard the include and uname() call in lib/setup.c so
the library builds on systems without <sys/utsname.h>.
---
 configure.ac | 2 +-
 lib/setup.c  | 6 ++++++
 meson.build  | 1 +
 3 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 2059dd4d0..01ac27b76 100644
--- a/configure.ac
+++ b/configure.ac
@@ -80,7 +80,7 @@ AC_C_RESTRICT
 
 AC_HEADER_DIRENT
 AC_CHECK_HEADERS(fcntl.h malloc.h inttypes.h uchar.h sys/ioctl.h sys/mman.h \
-	sys/sysmacros.h sys/statvfs.h ctype.h unistd.h locale.h byteswap.h endian.h stdint.h)
+	sys/sysmacros.h sys/statvfs.h sys/utsname.h ctype.h unistd.h locale.h byteswap.h endian.h stdint.h)
 AC_CHECK_DECLS([O_CLOEXEC],,[AC_DEFINE([O_CLOEXEC],[0], [Defined to 0 if not provided])],
 [[
 #ifdef HAVE_FCNTL_H
diff --git a/lib/setup.c b/lib/setup.c
index 5b14924c3..f7d21c2d4 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -12,7 +12,9 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdarg.h>
+#if HAVE_SYS_UTSNAME_H
 #include <sys/utsname.h>
+#endif
 #include <errno.h>
 
 #include "libcryptsetup.h"
@@ -258,7 +260,9 @@ int crypt_opal_supported(struct crypt_device *cd, struct device *opal_device)
 
 int init_crypto(struct crypt_device *ctx)
 {
+#if HAVE_SYS_UTSNAME_H
 	struct utsname uts;
+#endif
 	int r;
 
 	r = crypt_random_init(ctx);
@@ -275,9 +279,11 @@ int init_crypto(struct crypt_device *ctx)
 		log_dbg(ctx, "Crypto backend (%s%s) initialized in cryptsetup library version %s.",
 			crypt_backend_version(), crypt_argon2_version(), PACKAGE_VERSION);
 
+#if HAVE_SYS_UTSNAME_H
 		if (!uname(&uts))
 			log_dbg(ctx, "Detected kernel %s %s %s.",
 				uts.sysname, uts.release, uts.machine);
+#endif
 		_crypto_logged = 1;
 	}
 
diff --git a/meson.build b/meson.build
index d7cd6ac3e..66623e4f1 100644
--- a/meson.build
+++ b/meson.build
@@ -104,6 +104,7 @@ required_headers = [
     'sys/mman.h',
     'sys/statvfs.h',
     'sys/sysmacros.h',
+    'sys/utsname.h',
     'uchar.h',
     'unistd.h',
 ]

From e6dc638b4c99fe0ee32b5e63f1cf715f2f37a02c Mon Sep 17 00:00:00 2001
From: Daniel Golle <daniel@makrotopia.org>
Date: Tue, 24 Feb 2026 22:32:03 +0000
Subject: [PATCH 042/244] lib: use portable bitops.h instead of Linux endian.h
 in utf8.c

utf8.c included <endian.h> directly, which does not exist on macOS.
The project already has lib/bitops.h which portably handles endian
detection (endian.h vs sys/endian.h) with full fallback definitions
for htole16 and friends.  Use that instead.
---
 lib/crypto_backend/utf8.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/crypto_backend/utf8.c b/lib/crypto_backend/utf8.c
index c68d1b7db..1a4079afb 100644
--- a/lib/crypto_backend/utf8.c
+++ b/lib/crypto_backend/utf8.c
@@ -16,9 +16,9 @@
  */
 
 #include <errno.h>
-#include <endian.h>
 
 #include "crypto_backend.h"
+#include "bitops.h"
 
 static inline bool utf16_is_surrogate(char16_t c)
 {

From ffbac162394272c192a6cbf0bcf837299c09a53c Mon Sep 17 00:00:00 2001
From: Daniel Golle <daniel@makrotopia.org>
Date: Tue, 24 Feb 2026 23:16:08 +0000
Subject: [PATCH 043/244] lib: flush hash file between verity tree levels

On macOS (and other BSDs), writes to a FILE* are not immediately
visible to a separate FILE* opened on the same path because each
handle maintains its own userspace buffer and there is no unified
page cache like Linux.

The verity hash tree computation writes level N to hash_file, then
opens hash_file_2 to read it back for computing level N+1.  Without
an explicit fflush() between the write and the re-open, hash_file_2
reads stale (zero) data on macOS, producing an incorrect root hash.

Add fflush(hash_file) before opening hash_file_2 to ensure all
buffered data is written to disk.  This is a no-op on Linux where
the page cache already provides coherent views.
---
 lib/verity/verity_hash.c | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/lib/verity/verity_hash.c b/lib/verity/verity_hash.c
index 02333def5..2949afdde 100644
--- a/lib/verity/verity_hash.c
+++ b/lib/verity/verity_hash.c
@@ -336,6 +336,15 @@ static int VERITY_create_or_verify_hash(struct crypt_device *cd, bool verify,
 			if (r)
 				goto out;
 		} else {
+			/*
+			 * Flush the write buffer before re-reading the hash
+			 * device through a second file handle.  On Linux the
+			 * unified page cache makes this optional; on macOS
+			 * and other BSDs, unflushed data is invisible to a
+			 * separate FILE* opened on the same path.
+			 */
+			fflush(hash_file);
+
 			hash_file_2 = fopen(device_path(crypt_metadata_device(cd)), "r");
 			if (!hash_file_2) {
 				log_err(cd, _("Cannot open device %s."),

From 5061919478112671684568812a7c40d3d786898b Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 27 Mar 2026 10:48:19 +0100
Subject: [PATCH 044/244] ci: Update GitHub actions

These will be soon deprecated, update versions.
---
 .github/workflows/cibuild.yml  | 2 +-
 .github/workflows/codeql.yml   | 4 ++--
 .github/workflows/coverity.yml | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/cibuild.yml b/.github/workflows/cibuild.yml
index c805da154..7db6754ac 100644
--- a/.github/workflows/cibuild.yml
+++ b/.github/workflows/cibuild.yml
@@ -20,7 +20,7 @@ jobs:
     env: ${{ matrix.env }}
     steps:
       - name: Repository checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Ubuntu setup
         run: sudo -E .github/workflows/cibuild-setup-ubuntu.sh
       - name: Configure & Make
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e8cb69957..eb0babd47 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -29,10 +29,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           queries: +security-extended,security-and-quality
diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml
index 6b34dbef8..b7d872ed3 100644
--- a/.github/workflows/coverity.yml
+++ b/.github/workflows/coverity.yml
@@ -12,7 +12,7 @@ jobs:
     if: github.repository == 'mbroz/cryptsetup'
     steps:
       - name: Repository checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Ubuntu setup
         run: sudo -E .github/workflows/cibuild-setup-ubuntu.sh
         env:

From e6ae22829bd3e2ee62b5f3fe373714a5edf90dae Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 27 Mar 2026 17:28:38 +0100
Subject: [PATCH 045/244] ci: Update CodeQL action versions

---
 .github/workflows/codeql.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index eb0babd47..901d791f8 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -47,7 +47,7 @@ jobs:
         env: { COMPILER: "gcc", COMPILER_VERSION: "14",  RUN_SSH_PLUGIN_TEST: "1" }
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

From 2c7a99683fccbf1fe61b9adae08d455ed7b28d66 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 27 Mar 2026 17:35:31 +0100
Subject: [PATCH 046/244] ci: Do not install GOST crypto in GitHub CodeQL

---
 .github/workflows/cibuild-setup-ubuntu.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/cibuild-setup-ubuntu.sh b/.github/workflows/cibuild-setup-ubuntu.sh
index be3f5567f..7f7c03bdc 100755
--- a/.github/workflows/cibuild-setup-ubuntu.sh
+++ b/.github/workflows/cibuild-setup-ubuntu.sh
@@ -21,8 +21,8 @@ bash -c "echo 'deb-src http://archive.ubuntu.com/ubuntu/ $RELEASE main restricte
 add-apt-repository -y ppa:ubuntu-toolchain-r/test
 PACKAGES+=(gcc-$COMPILER_VERSION)
 
-# scsi_debug, gost crypto
-PACKAGES+=(dkms linux-headers-$(uname -r) linux-modules-extra-$(uname -r) gost-crypto-dkms)
+# scsi_debug
+PACKAGES+=(dkms linux-headers-$(uname -r) linux-modules-extra-$(uname -r))
 
 apt-get -y update --fix-missing
 apt-get -y install "${PACKAGES[@]}"

From 3912f140c93dc4bd94fe8f647f50b2030e785bf5 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 28 Mar 2026 10:13:00 +0100
Subject: [PATCH 047/244] ci: Add version info to valgrind test

---
 tests/Makefile.am | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/Makefile.am b/tests/Makefile.am
index 861cfd0f4..9e4cd35a4 100644
--- a/tests/Makefile.am
+++ b/tests/Makefile.am
@@ -178,6 +178,7 @@ compatimage.img:
 	@xz -k -d compatimage.img.xz
 
 valgrind-check: api-test api-test-2 differ
+	./00modules-test
 	@VALG=1 ./compat-args-test
 	@VALG=1 ./compat-test
 	@VALG=1 ./compat-test2

From 81240151b4174b5aed1cc690bfe2792396eec1e2 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 30 Mar 2026 13:12:04 +0200
Subject: [PATCH 048/244] OpenSSL backend: Increase number of allowed threads

If there are multiple crypto contexts in use, the 8 threads limit
could cause that systems running Argon2 KDF could wait otr even deadlock.

While this is not a final fix, it increases limit for most common
situations for now. The real fix is either fix OpenSSL Argon2 or use
separate libarary contexts.

See for example
https://github.com/storaged-project/udisks/issues/1489
---
 lib/crypto_backend/crypto_openssl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index d1a1422ad..229698997 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -36,7 +36,7 @@ static OSSL_PROVIDER *ossl_default = NULL;
 static OSSL_LIB_CTX  *ossl_ctx = NULL;
 static char backend_version[256] = "OpenSSL";
 
-#define MAX_THREADS 8
+#define MAX_THREADS 64
 #if !HAVE_DECL_OSSL_GET_MAX_THREADS
 static int OSSL_set_max_threads(OSSL_LIB_CTX *ctx __attribute__((unused)),
 				uint64_t max_threads __attribute__((unused))) { return 0; }

From bf3f5df4f9ad9a7a8291932e5c53f9ee720b85f2 Mon Sep 17 00:00:00 2001
From: Josef Andersson <janderssonse@proton.me>
Date: Mon, 30 Mar 2026 14:23:14 +0200
Subject: [PATCH 049/244] po: update sv.po (from translationproject.org)

---
 po/sv.po | 2225 ++++++++++++++++++++++++++++++------------------------
 1 file changed, 1230 insertions(+), 995 deletions(-)

diff --git a/po/sv.po b/po/sv.po
index 2d4861f0e..90d61f0dd 100644
--- a/po/sv.po
+++ b/po/sv.po
@@ -3,13 +3,13 @@
 # This file is distributed under the same license as the cryptsetup package.
 #
 # Daniel Nylander <po@danielnylander.se>, 2009.
-# Josef Andersson <janderssonse@proton.me>, 2016-2025.
+# Josef Andersson <janderssonse@proton.me>, 2016-2026.
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.7.3-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.2-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2024-06-06 22:11+0200\n"
-"PO-Revision-Date: 2025-04-18 09:55+0200\n"
+"POT-Creation-Date: 2025-12-12 18:51+0100\n"
+"PO-Revision-Date: 2026-02-21 18:52+0100\n"
 "Last-Translator: Josef Andersson <janderssonse@proton.me>\n"
 "Language-Team: Swedish <tp-sv@listor.tp-sv.se>\n"
 "Language: sv\n"
@@ -20,70 +20,78 @@ msgstr ""
 "X-Generator: Poedit 3.4.2\n"
 "X-Bugs: Report translation errors to the Language-Team address.\n"
 
-#: lib/libdevmapper.c:406
+#: lib/libdevmapper.c:419
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "Det går inte att initiera device-mapper, kör som icke-root-användare."
 
-#: lib/libdevmapper.c:409
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "Det går inte att initiera device-mapper. Är kärnmodulen dm_mod inläst?"
 
-#: lib/libdevmapper.c:1090
+#: lib/libdevmapper.c:1125
 msgid "Requested deferred flag is not supported."
 msgstr "Begärd flagga deferred stöds inte."
 
-#: lib/libdevmapper.c:1159
+#: lib/libdevmapper.c:1194
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "DM-UUID för enheten %s förkortades."
 
-#: lib/libdevmapper.c:1497
+#: lib/libdevmapper.c:1598
 msgid "Unknown dm target type."
 msgstr "Okänd måltyp dm."
 
-#: lib/libdevmapper.c:1616 lib/libdevmapper.c:1622 lib/libdevmapper.c:1725
-#: lib/libdevmapper.c:1728
+#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
+#: lib/libdevmapper.c:1853
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "Begärd flagga för dm-crypt-prestanda stöds inte."
 
-#: lib/libdevmapper.c:1631 lib/libdevmapper.c:1643
+#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "Begärd flagga för dm-verity-dataintegritet stöds inte."
 
-#: lib/libdevmapper.c:1637
+#: lib/libdevmapper.c:1752
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "Begärd flagga dm-verity tasklets stöds inte."
 
-#: lib/libdevmapper.c:1649
+#: lib/libdevmapper.c:1764
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "Begärd flagga dm-verity FEC stöds inte."
 
-#: lib/libdevmapper.c:1655
+#: lib/libdevmapper.c:1770
 msgid "Requested data integrity options are not supported."
 msgstr "Begärd flagga för dataintegritet stöds inte."
 
-#: lib/libdevmapper.c:1659
+#: lib/libdevmapper.c:1774
 msgid "Requested sector_size option is not supported."
 msgstr "Begärd flagga sector_size stöds inte."
 
-#: lib/libdevmapper.c:1664
+#: lib/libdevmapper.c:1779
 msgid "The device size is not multiple of the requested sector size."
 msgstr "Storleken på enheten är inte en multipel av begärd sektorstorlek."
 
-#: lib/libdevmapper.c:1671 lib/libdevmapper.c:1677
+#: lib/libdevmapper.c:1783
+msgid "Requested integrity_key_size option is not supported."
+msgstr "Begärd flagga integrity_key_size stöds inte."
+
+#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Begärd automatisk beräkning av integritetstaggar stöds inte."
 
-#: lib/libdevmapper.c:1683 lib/libdevmapper.c:1731 lib/libdevmapper.c:1734
-#: lib/luks2/luks2_json_metadata.c:2741
+#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
+#: lib/luks2/luks2_json_metadata.c:2781
 msgid "Discard/TRIM is not supported."
 msgstr "Discard/TRIM stöds inte."
 
-#: lib/libdevmapper.c:1689
+#: lib/libdevmapper.c:1808
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "Begärt dm-integrity bitmap-läge stöds inte."
 
-#: lib/libdevmapper.c:2725
+#: lib/libdevmapper.c:1814
+msgid "Requested dm-integrity inline mode is not supported."
+msgstr "Begärt dm-integrity inline-läge stöds inte."
+
+#: lib/libdevmapper.c:2870
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "Misslyckades med att läsa dm-%s-segment."
@@ -99,7 +107,7 @@ msgstr ""
 #: lib/random.c:64
 #, c-format
 msgid "Generating key (%d%% done).\n"
-msgstr "Genererar nyckel (%d%% done).\n"
+msgstr "Genererar nyckel (%d%% klart).\n"
 
 #: lib/random.c:150
 msgid "Running in FIPS mode."
@@ -117,747 +125,777 @@ msgstr "Okänd RNG-kvalitet begärd."
 msgid "Error reading from RNG."
 msgstr "Fel vid läsning från RNG."
 
-#: lib/setup.c:249
+#: lib/setup.c:248
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "OPAL-stöd är inaktiverat i libcryptsetup."
 
-#: lib/setup.c:251
+#: lib/setup.c:250
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "Kärnan eller enheten %s stöder inte OPAL-kryptering."
 
-#: lib/setup.c:267
+#: lib/setup.c:266
 msgid "Cannot initialize crypto RNG backend."
 msgstr "Det går inte att initiera RNG-krypteringsbakände."
 
-#: lib/setup.c:273
+#: lib/setup.c:272
 msgid "Cannot initialize crypto backend."
 msgstr "Det går inte att initiera krypteringsbakände."
 
-#: lib/setup.c:305 lib/setup.c:2786 lib/verity/verity.c:109
+#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Hashalgoritmen %s stöds inte."
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:77
+#: lib/setup.c:308 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "Fel vid nyckelbearbetning (använder hash %s)."
 
-#: lib/setup.c:379 lib/setup.c:416
+#: lib/setup.c:389 lib/setup.c:426
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Det går inte att avgöra enhetstyp. Inkompatibel aktivering av enhet?"
 
-#: lib/setup.c:385 lib/setup.c:3981
+#: lib/setup.c:395 lib/setup.c:4160
 msgid "This operation is supported only for LUKS device."
 msgstr "Denna åtgärd stöds endast av LUKS-enheter."
 
-#: lib/setup.c:422
+#: lib/setup.c:432
 msgid "This operation is supported only for LUKS2 device."
 msgstr "Denna åtgärd stöds endast av LUKS2-enheter."
 
-#: lib/setup.c:479 lib/luks2/luks2_reencrypt.c:3058
+#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
 msgid "All key slots full."
 msgstr "Alla nyckelplatser är upptagna."
 
-#: lib/setup.c:490
+#: lib/setup.c:500
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "Nyckelplats %d är ogiltig. Välj mellan 0 och %d."
 
-#: lib/setup.c:496
+#: lib/setup.c:506
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "Nyckelplats %d är full. Välj en annan."
 
-#: lib/setup.c:607 lib/setup.c:3681
+#: lib/setup.c:531 lib/setup.c:3875
 msgid "Device size is not aligned to device logical block size."
 msgstr "Storlek på enhet är inte justerad till enhetens logiska blockstorlek."
 
-#: lib/setup.c:705
+#: lib/setup.c:628
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "Huvud identifierat men enheten %s är för liten."
 
-#: lib/setup.c:746 lib/setup.c:3572 lib/setup.c:5360 lib/setup.c:5380
-#: lib/luks2/luks2_reencrypt.c:3850 lib/luks2/luks2_reencrypt.c:4307
+#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
+#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
 msgid "This operation is not supported for this device type."
 msgstr "Denna åtgärd stöds inte för denna enhetstyp."
 
-#: lib/setup.c:751
+#: lib/setup.c:674
 msgid "Illegal operation with reencryption in-progress."
 msgstr "Ogiltig åtgärd under pågående omkryptering."
 
-#: lib/setup.c:883
+#: lib/setup.c:806
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Misslyckades med att återställa LUKS2-metadata i minnet."
 
-#: lib/setup.c:970 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1361 src/cryptsetup.c:1874
-#: src/cryptsetup.c:2055 src/cryptsetup.c:2110 src/cryptsetup.c:2315
-#: src/cryptsetup.c:2485 src/cryptsetup.c:2766 src/cryptsetup.c:3073
-#: src/cryptsetup.c:3141 src/utils_reencrypt.c:1485
-#: src/utils_reencrypt_luks1.c:1139 tokens/ssh/cryptsetup-ssh.c:72
+#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
+#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
+#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
+#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Enheten %s är inte en giltig LUKS-enhet."
 
-#: lib/setup.c:973 lib/luks1/keymanage.c:517
+#: lib/setup.c:896 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "LUKS-versionen %d stöds inte."
 
-#: lib/setup.c:1346
+#: lib/setup.c:1270
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Inget känt chifferspecifikationsmönster kunde identifieras för den aktiva enheten %s."
 
-#: lib/setup.c:1592 lib/setup.c:3326 lib/setup.c:3408 lib/setup.c:3420
-#: lib/setup.c:3590 lib/setup.c:6004
+#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
+#: lib/setup.c:3783 lib/setup.c:5805
 #, c-format
 msgid "Device %s is not active."
 msgstr "Enheten %s är inte aktiv."
 
-#: lib/setup.c:1609
+#: lib/setup.c:1532
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Underliggande enhet för krypteringsenhet %s försvann."
 
-#: lib/setup.c:1691
+#: lib/setup.c:1614
 msgid "Invalid plain crypt parameters."
 msgstr "Ogiltiga parametrar för plain-kryptering."
 
-#: lib/setup.c:1696 lib/setup.c:2689
+#: lib/setup.c:1619 lib/setup.c:2669
 msgid "Invalid key size."
 msgstr "Ogiltig nyckelstorlek."
 
-#: lib/setup.c:1701 lib/setup.c:2694 lib/setup.c:2897
+#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID stöds inte för denna krypteringstyp."
 
-#: lib/setup.c:1706 lib/setup.c:2699
+#: lib/setup.c:1629 lib/setup.c:2679
 msgid "Detached metadata device is not supported for this crypt type."
-msgstr "Frånkopplad metadataenhet stöds ej av denna crypt-typ."
+msgstr "Frånkopplad metadataenhet stöds inte av denna crypt-typ."
 
-#: lib/setup.c:1716 lib/setup.c:1957 lib/luks2/luks2_reencrypt.c:3014
-#: src/cryptsetup.c:1471 src/cryptsetup.c:3842
+#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
+#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
 msgid "Unsupported encryption sector size."
 msgstr "Stöder inte sektorstorleken för kryptering."
 
-#: lib/setup.c:1724 lib/setup.c:1986 lib/setup.c:3675
+#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
 msgid "Device size is not aligned to requested sector size."
 msgstr "Storlek på enhet är inte justerad till begärd sektorstorlek."
 
-#: lib/setup.c:1776 lib/setup.c:2019 lib/setup.c:2365
+#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
 msgid "Can't format LUKS without device."
 msgstr "Det går inte att formatera LUKS utan enhet."
 
-#: lib/setup.c:1781 lib/setup.c:2024
+#: lib/setup.c:1704 lib/setup.c:1956
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
-msgstr "Zoned-enheten %s kan inte användas för LUKS2-huvud."
+msgstr "Det går inte att använda zoned-enheten %s för LUKS2-huvud."
 
-#: lib/setup.c:1788 lib/setup.c:2031 lib/setup.c:2371
+#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
 msgid "Requested data alignment is not compatible with data offset."
-msgstr "Begärd datajustering är inte kompatibel med dataoffset."
+msgstr "Begärd datajustering är inte kompatibel med dataförskjutningen."
 
-#: lib/setup.c:1828 lib/setup.c:2049
+#: lib/setup.c:1751 lib/setup.c:1981
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "VARNING: DAX-enheten kan korrumpera data eftersom den inte garanterar atomiska sektoruppdateringar.\n"
 
-#: lib/setup.c:1866 lib/setup.c:2144 lib/setup.c:2165 lib/setup.c:2549
-#: lib/setup.c:2596 lib/setup.c:2909
+#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
+#: lib/setup.c:2564 lib/setup.c:2896
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Det går inte att rensa huvudet på enheten %s."
 
-#: lib/setup.c:1879 lib/setup.c:2204
+#: lib/setup.c:1802 lib/setup.c:2161
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Enheten %s är för liten för aktivering, det finns inget utrymme kvar för data.\n"
 
-#: lib/setup.c:1919
+#: lib/setup.c:1843
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Volymnyckeln är för liten för kryptering med integritetstillägg."
 
-#: lib/setup.c:1928
+#: lib/setup.c:1847
+msgid "Integrity key size is too small."
+msgstr "Integritetsnyckelstorleken är för liten."
+
+#: lib/setup.c:1856
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Chiffret %s-%s (nyckelstorlek %zd bitar) är inte tillgängligt."
 
-#: lib/setup.c:1967
+#: lib/setup.c:1897
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "VARNING: Enhetsaktiveringen kommer att misslyckas, dm-crypt saknar stöd för begärd krypteringsektorstorlek.\n"
 
-#: lib/setup.c:2147 lib/setup.c:2492 lib/setup.c:2552 lib/utils_device.c:904
-#: lib/luks1/keyencryption.c:242 lib/luks2/luks2_reencrypt.c:3082
-#: lib/luks2/luks2_reencrypt.c:4367
+#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
+#: lib/luks2/luks2_reencrypt.c:4494
 #, c-format
 msgid "Device %s is too small."
 msgstr "Enheten %s är för liten."
 
-#: lib/setup.c:2158 lib/setup.c:2184 lib/setup.c:2589 lib/setup.c:2635
+#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Det går inte att formatera enheten %s då den används."
 
-#: lib/setup.c:2161 lib/setup.c:2187 lib/setup.c:2592 lib/setup.c:2638
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Det går inte att formatera enheten %s, behörighet nekad."
 
-#: lib/setup.c:2173 lib/setup.c:2609 lib/setup.c:2969
+#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Det går inte att formatera integritet för enheten %s."
 
-#: lib/setup.c:2191 lib/setup.c:2646
+#: lib/setup.c:2148 lib/setup.c:2626
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Det går inte att formatera enheten %s."
 
-#: lib/setup.c:2234
+#: lib/setup.c:2191
 msgid "Cannot get OPAL alignment parameters."
-msgstr "Kan inte hämta OPAL-inriktningsparametrar."
+msgstr "Det går inte att hämta OPAL-inriktningsparametrar."
 
-#: lib/setup.c:2246
+#: lib/setup.c:2203
 msgid "Bogus OPAL logical block size."
 msgstr "Felaktig logisk blockstorlek i OPAL."
 
-#: lib/setup.c:2251 lib/luks2/hw_opal/hw_opal.c:299
+#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Felaktig OPAL logisk blockstorlek skiljer sig från enhetens blockstorlek."
 
-#: lib/setup.c:2257
+#: lib/setup.c:2214
 msgid "Requested data offset is not compatible with OPAL block size."
-msgstr "Begärd data-offset är inte kompatibel med OPAL-blockstorlek."
+msgstr "Begärd dataförskjutning är inte kompatibel med OPAL-blockstorleken."
 
-#: lib/setup.c:2264
+#: lib/setup.c:2221
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Begärd datajustering är inte kompatibel med OPAL-justering."
 
-#: lib/setup.c:2284
+#: lib/setup.c:2241
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Dataförskjutningen uppfyller inte OPAL:s krav på anpassning."
 
-#: lib/setup.c:2297
+#: lib/setup.c:2254
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
-msgstr "Begärd datajustering är inte kompatibel med locking range-justeringskraven."
+msgstr "Begärd datajustering uppfyller inte justeringskraven för låsområde."
 
-#: lib/setup.c:2502
+#: lib/setup.c:2468
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Kompenserar enhetens storlek med %<PRIu64> sektorer för att anpassa den till OPAL:s anpassningsgranularitet."
 
-#: lib/setup.c:2560 lib/setup.c:4078 lib/setup.c:4261 lib/utils_wipe.c:355
-#: lib/luks2/luks2_json_metadata.c:2690 lib/luks2/luks2_json_metadata.c:2942
+#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Misslyckades med att erhålla OPAL-lås på enheten %s."
 
-#: lib/setup.c:2570
+#: lib/setup.c:2538
 msgid "Incorrect OPAL Admin key."
 msgstr "Felaktig OPAL Admin-nyckel."
 
-#: lib/setup.c:2572
+#: lib/setup.c:2540
 msgid "Cannot setup OPAL segment."
 msgstr "Det går inte att konfigurera OPAL-segmentet."
 
-#: lib/setup.c:2642
+#: lib/setup.c:2622
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Det går inte att formatera enheten %s, OPAL-enheten verkar skrivskyddad nu."
 
-#: lib/setup.c:2644
+#: lib/setup.c:2624
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Detta är kanske en bugg i den fasta programvaran. Kör OPAL PSID reset och återanslut för återhämtning."
 
-#: lib/setup.c:2664
+#: lib/setup.c:2644
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Misslyckades med återställning av locking range %d på enheten %s."
 
-#: lib/setup.c:2684
+#: lib/setup.c:2664
 msgid "Can't format LOOPAES without device."
-msgstr "Kan inte formatera LOOPAES utan enhet."
+msgstr "Det går inte att formatera LOOPAES utan enhet."
 
-#: lib/setup.c:2729
+#: lib/setup.c:2709
 msgid "Can't format VERITY without device."
 msgstr "Det går inte att formatera VERITY utan enhet."
 
-#: lib/setup.c:2740 lib/verity/verity.c:88
+#: lib/setup.c:2720 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "VERITY-hashtyp %d stöds inte."
 
-#: lib/setup.c:2746 lib/verity/verity.c:96
+#: lib/setup.c:2726 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "VERITY-blockstorlek som inte stöds."
 
-#: lib/setup.c:2751 lib/verity/verity.c:61
+#: lib/setup.c:2731 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
-msgstr "VERITY-hashoffset som inte stöds."
+msgstr "VERITY-hashförskjutning som inte stöds."
 
-#: lib/setup.c:2756
+#: lib/setup.c:2736
 msgid "Unsupported VERITY FEC offset."
-msgstr "VERITY-FEC-offset som inte stöds."
+msgstr "VERITY-FEC-förskjutning som inte stöds."
 
-#: lib/setup.c:2780
+#: lib/setup.c:2760
 msgid "Data area overlaps with hash area."
 msgstr "Dataområde spiller över på hashområdet."
 
-#: lib/setup.c:2805
+#: lib/setup.c:2785
 msgid "Hash area overlaps with FEC area."
-msgstr "Hashområde spiller över på FEC-mrådet."
+msgstr "Hashområde spiller över på FEC-området."
 
-#: lib/setup.c:2812
+#: lib/setup.c:2792
 msgid "Data area overlaps with FEC area."
-msgstr "Dataområde spiller över på FEC-mrådet."
+msgstr "Dataområde spiller över på FEC-området."
+
+#: lib/setup.c:2884
+msgid "Integrity key size mismatch."
+msgstr "Integritetsnyckelstorleken stämmer inte."
 
-#: lib/setup.c:2948
+#: lib/setup.c:2935
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "VARNING: Begärd taggstorlek på %d byte skiljer sig från %s utdatastorlek (%d byte).\n"
 
-#: lib/setup.c:3027
+#: lib/setup.c:3048 lib/setup.c:3150
 #, c-format
-msgid "Unknown crypt device type %s requested."
-msgstr "Okänd typ av krypteringsenhet %s begärd."
+msgid "Unknown or unsupported device type %s requested."
+msgstr "Okänd eller inte stödd typ av krypteringsenhet %s begärd."
 
-#: lib/setup.c:3334 lib/setup.c:3413 lib/setup.c:3426
+#: lib/setup.c:3064
+#, c-format
+msgid "Device %s does not provide inline integrity data fields."
+msgstr "Enheten %s tillhandahåller inte inline-integritetsdatafält."
+
+#: lib/setup.c:3070
+#, c-format
+msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
+msgstr "Storleken på inline-taggen %<PRIu32> [byte] är större än %<PRIu32> som tillhandahålls av enheten %s."
+
+#: lib/setup.c:3085
+#, c-format
+msgid "Sector must be the same as device hardware sector (%zu bytes)."
+msgstr "Sektorn måste vara samma som enhetens hårdvarusektor (%zu byte)."
+
+#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Parametrar som inte stöds på enheten %s."
 
-#: lib/setup.c:3340 lib/setup.c:3433 lib/luks2/luks2_reencrypt.c:2910
-#: lib/luks2/luks2_reencrypt.c:3147 lib/luks2/luks2_reencrypt.c:3542
+#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
+#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
 #, c-format
 msgid "Mismatching parameters on device %s."
-msgstr "Kan inte rensa huvudet på enheten %s."
+msgstr "Parametrarna på enheten %s stämmer inte överens."
 
-#: lib/setup.c:3457
+#: lib/setup.c:3647
 msgid "Crypt devices mismatch."
 msgstr "Krypteringsenheter har matchningsfel."
 
-#: lib/setup.c:3494 lib/setup.c:3499 lib/luks2/luks2_reencrypt.c:2392
-#: lib/luks2/luks2_reencrypt.c:2926 lib/luks2/luks2_reencrypt.c:4111
+#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
+#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Misslyckades med att läsa om enhet %s."
 
-#: lib/setup.c:3505 lib/setup.c:3511 lib/luks2/luks2_reencrypt.c:2363
-#: lib/luks2/luks2_reencrypt.c:2370 lib/luks2/luks2_reencrypt.c:2940
+#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
+#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Misslyckades med att försätta enhet %s i vänteläge."
 
-#: lib/setup.c:3517 lib/luks2/luks2_reencrypt.c:2377
-#: lib/luks2/luks2_reencrypt.c:2961 lib/luks2/luks2_reencrypt.c:4024
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
+#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
+#: lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Misslyckades med att återuppta enhet %s."
 
-#: lib/setup.c:3532
+#: lib/setup.c:3717
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Ödesdigert fel vid omläsning av enhet %s (ovanpå enhet %s)."
 
-#: lib/setup.c:3535 lib/setup.c:3537
+#: lib/setup.c:3720 lib/setup.c:3722
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Misslyckades med att växla enhet %s till dm-error."
 
-#: lib/setup.c:3577
+#: lib/setup.c:3765
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Det går inte att ändra storlek på LUKS2-enhet med statisk storlek."
 
-#: lib/setup.c:3622
+#: lib/setup.c:3770
+msgid "Resize of LUKS2 device with integrity protection is not supported."
+msgstr "Storleksändring av LUKS2-enhet med integritetsskydd stöds inte."
+
+#: lib/setup.c:3816
 msgid "Cannot resize loop device."
 msgstr "Det går inte att ändra storlek på loop-enhet."
 
-#: lib/setup.c:3666
+#: lib/setup.c:3860
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "VARNING: Maximal storlek redan satt eller så stöder inte kärnan storleksändring.\n"
 
-#: lib/setup.c:3732
+#: lib/setup.c:3926
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Misslyckades med storleksändring, kärnan stöder inte detta."
 
-#: lib/setup.c:3764
+#: lib/setup.c:3958
 msgid "Do you really want to change UUID of device?"
 msgstr "Vill du verkligen ändra UUID för en enhet?"
 
-#: lib/setup.c:3856
+#: lib/setup.c:4050
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Säkerhetskopian för huvud innehåller inte något giltigt LUKS-huvud."
 
-#: lib/setup.c:3966
+#: lib/setup.c:4143
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Volymen %s är inte aktiv."
 
-#: lib/setup.c:4032
+#: lib/setup.c:4198
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Volymen %s är redan i vänteläge."
 
-#: lib/setup.c:4060
+#: lib/setup.c:4224
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Vänteläge stöds inte för enhet %s."
 
-#: lib/setup.c:4062 lib/setup.c:4070
+#: lib/setup.c:4226 lib/setup.c:4234
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Fel då enheten %s försattes i vänteläge."
 
-#: lib/setup.c:4084
+#: lib/setup.c:4249
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
-msgstr "Enheten %s var suspenderad men hårdvaran OPAL-enheten kan inte låsas."
+msgstr "Enheten %s var suspenderad men det går inte att låsa OPAL-hårdvaruenheten."
 
-#: lib/setup.c:4116 lib/setup.c:4288
+#: lib/setup.c:4280 lib/setup.c:4457
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Att återuppta stöds inte för enhet %s."
 
-#: lib/setup.c:4118 lib/setup.c:4279 lib/setup.c:4290
+#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Fel då enheten %s återupptogs."
 
-#: lib/setup.c:4137
+#: lib/setup.c:4301
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Misslyckades med att avlänka volymnyckeln från användarspecificerad nyckelring."
 
-#: lib/setup.c:4252 lib/setup.c:4974 lib/setup.c:5796
+#: lib/setup.c:4423 lib/setup.c:5592
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Misslyckades med att sammankoppla volymnyckeln i den användardefinierade nyckelringen."
 
-#: lib/setup.c:4353 src/cryptsetup.c:2848
+#: lib/setup.c:4521 src/cryptsetup.c:2723
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Volymen %s är inte i vänteläge."
 
-#: lib/setup.c:4454 lib/setup.c:5114 lib/setup.c:5532 lib/setup.c:5551
-#: lib/setup.c:7425 lib/setup.c:7447 lib/setup.c:7496 src/cryptsetup.c:2358
+#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
+#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
+#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Volymnyckeln stämmer inte överens med volymen."
 
-#: lib/setup.c:4608
+#: lib/setup.c:4776
 msgid "Failed to swap new key slot."
 msgstr "Misslyckades med att byta ny nyckelplats."
 
-#: lib/setup.c:4706
+#: lib/setup.c:4874
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Nyckelplats %d är ogiltig."
 
-#: lib/setup.c:4712 src/cryptsetup.c:2068 src/cryptsetup.c:2560
-#: src/cryptsetup.c:3241 src/cryptsetup.c:3301
+#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
+#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Nyckelplats %d är inte aktiv."
 
-#: lib/setup.c:4731
+#: lib/setup.c:4899
 msgid "Device header overlaps with data area."
 msgstr "Dataområde spiller över på hashområdet."
 
-#: lib/setup.c:5084 lib/setup.c:5184
+#: lib/setup.c:5120
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Omkryptering pågår. Det går inte att aktivera enheten."
 
-#: lib/setup.c:5086 lib/setup.c:5186 lib/luks2/luks2_json_metadata.c:2848
-#: lib/luks2/luks2_reencrypt.c:3648
+#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
+#: lib/luks2/luks2_reencrypt.c:3722
 msgid "Failed to get reencryption lock."
 msgstr "Misslyckades med att erhålla omkrypteringslås."
 
-#: lib/setup.c:5098
+#: lib/setup.c:5144
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Misslyckades med återställning av LUKS2-omkryptering med volymnyckel/ar."
 
-#: lib/setup.c:5150 lib/setup.c:5240
-msgid "Failed to link volume keys in user defined keyring."
-msgstr "Misslyckades med att sammankoppla volymnycklar i den användardefinierade nyckelringen."
-
-#: lib/setup.c:5199 lib/luks2/luks2_reencrypt.c:3667
-msgid "LUKS2 reencryption recovery failed."
-msgstr "Misslyckades med återhämtning av LUKS2-omkryptering."
-
-#: lib/setup.c:5448 lib/setup.c:5562 lib/setup.c:5619
-msgid "Device type is not properly initialized."
-msgstr "Enhetstypen är inte korrekt initierad."
-
-#: lib/setup.c:5503
+#: lib/setup.c:5280
 #, c-format
 msgid "Device %s already exists."
 msgstr "Enheten %s finns redan."
 
-#: lib/setup.c:5510
+#: lib/setup.c:5287
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Det går inte att använda enheten %s som fortfarande används eller har ett ogiltigt namn."
 
-#: lib/setup.c:5528
+#: lib/setup.c:5299
+msgid "Reencryption volume keys do not match the volume."
+msgstr "Nycklarna för omkrypteringsvolymen stämmer inte överens med volymen."
+
+#: lib/setup.c:5316
 msgid "Incorrect volume key specified for plain device."
 msgstr "Felaktig volymnyckel för plain-enhet."
 
-#: lib/setup.c:5542
-msgid "Reencryption volume keys do not match the volume."
-msgstr "Nycklarna för omkrypteringsvolymen stämmer inte överens med volymen."
+#: lib/setup.c:5342 lib/setup.c:5403
+msgid "Device type is not properly initialized."
+msgstr "Enhetstypen är ej korrekt initierad."
 
-#: lib/setup.c:5655
+#: lib/setup.c:5441
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Kärnans nyckelring stöds inte av kärnan."
 
-#: lib/setup.c:5659
+#: lib/setup.c:5445
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Kärnans nyckelring saknas: krävs för att skicka signatur till kärnan."
 
-#: lib/setup.c:5917
+#: lib/setup.c:5500
+#, c-format
+msgid "Cannot use keyring key %s."
+msgstr "Det går inte att använda nyckelringens nyckel %s."
+
+#: lib/setup.c:5713
 msgid "Incorrect root hash specified for verity device."
 msgstr "Felaktig rothash angiven för verity-enhet."
 
-#: lib/setup.c:5960
+#: lib/setup.c:5754 lib/setup.c:5779
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL stöder inte fördröjd inaktivering."
 
-#: lib/setup.c:5976
-#, c-format
-msgid "Could not cancel deferred remove from device %s."
-msgstr "Misslyckades med att avbryta fördröjd borttagning från enheten %s."
-
-#: lib/setup.c:5983 lib/setup.c:5999 lib/luks2/luks2_json_metadata.c:2902
-#: src/utils_reencrypt.c:103
+#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Enheten %s används fortfarande."
 
-#: lib/setup.c:6008
+#: lib/setup.c:5787
+#, c-format
+msgid "Could not cancel deferred remove from device %s."
+msgstr "Misslyckades med att avbryta fördröjd borttagning från enheten %s."
+
+#: lib/setup.c:5809
 #, c-format
 msgid "Invalid device %s."
 msgstr "Ogiltig enhet %s."
 
-#: lib/setup.c:6148
+#: lib/setup.c:5956
 msgid "Volume key buffer too small."
 msgstr "Buffert för volymnyckelen är för liten."
 
-#: lib/setup.c:6165
+#: lib/setup.c:5967
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Det går inte att hämta volymnyckel för LUKS2-enhet."
 
-#: lib/setup.c:6174
+#: lib/setup.c:5976
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Det går inte att hämta volymnyckel för LUKS1-enhet."
 
-#: lib/setup.c:6184
+#: lib/setup.c:5990
 msgid "Cannot retrieve volume key for plain device."
-msgstr "Kan inte hämta volymnyckel för plain-enhet."
+msgstr "Det går inte att hämta volymnyckel för plain-enhet."
 
-#: lib/setup.c:6192
+#: lib/setup.c:5998
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Det går inte att hämta root-hash för verity-enhet."
 
-#: lib/setup.c:6199
+#: lib/setup.c:6007
 msgid "Cannot retrieve volume key for BITLK device."
-msgstr "Det går inte hämta volymnyckel för BITLK-enhet."
+msgstr "Det går inte att hämta volymnyckel för BITLK-enhet."
 
-#: lib/setup.c:6204
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Det går inte att hämta volymnyckel för FVAULT2-enhet."
 
-#: lib/setup.c:6206
+#: lib/setup.c:6014
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Denna åtgärd stöds inte för krypteringsenheter av typen %s."
 
-#: lib/setup.c:6390 lib/setup.c:6401
+#: lib/setup.c:6199 lib/setup.c:6210
 msgid "Dump operation is not supported for this device type."
 msgstr "Utskriftsåtgärden stöds inte för denna enhetstyp."
 
-#: lib/setup.c:6760
+#: lib/setup.c:6590
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Dataförskjutning är inte en multipel av %u byte."
 
-#: lib/setup.c:7068
+#: lib/setup.c:6898
 #, c-format
 msgid "Cannot convert device %s which is still in use."
-msgstr "Det går inte konvertera enheten %s som fortfarande används."
+msgstr "Det går inte att konvertera enheten %s som fortfarande används."
 
-#: lib/setup.c:7366 lib/setup.c:7505
+#: lib/setup.c:7206 lib/setup.c:7350
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Misslyckades med att tilldela nyckelplats %u som ny volymnyckel."
 
-#: lib/setup.c:7390
+#: lib/setup.c:7230
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Misslyckades med att initiera standardnyckelplats för LUKS2-parametrar."
 
-#: lib/setup.c:7396
+#: lib/setup.c:7236
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Misslyckades med att tilldela nyckelplats %d till kontrollsummor."
 
-#: lib/setup.c:7621
+#: lib/setup.c:7467
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Det går inte att lägga till nyckelplats. Alla platser är inaktiverade och ingen volymnyckel har angivits."
 
-#: lib/setup.c:7690 lib/verity/verity.c:330
+#: lib/setup.c:7540 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Misslyckades med att öppna nyckelringen för kärnan."
 
-#: lib/setup.c:7808
-msgid "Failed to unlink volume key from thread keyring."
-msgstr "Misslyckades med frånkoppla nyckelringen för trådnyckelringen."
-
-#: lib/setup.c:7852
+#: lib/setup.c:7731
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
-msgstr "Kunde inte hitta nyckelringen som beskrivs av \"%s\"."
+msgstr "Det gick inte att hitta nyckelringen som beskrivs av \"%s\"."
 
-#: lib/setup.c:7917
+#: lib/setup.c:7796
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Misslyckades med att inhämta globalt minneshårt serialiseringslås."
 
-#: lib/utils.c:202 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
 msgid "Failed to open key file."
 msgstr "Misslyckades med att öppna nyckelfilen."
 
-#: lib/utils.c:207
+#: lib/utils.c:212
 msgid "Cannot read keyfile from a terminal."
-msgstr "Det går inte läsa nyckelfilen från en terminal."
+msgstr "Det går inte att läsa nyckelfilen från en terminal."
 
-#: lib/utils.c:223
+#: lib/utils.c:228
 msgid "Failed to stat key file."
 msgstr "Misslyckades med att ta stat på nyckelfilen."
 
-#: lib/utils.c:231 lib/utils.c:252
+#: lib/utils.c:236 lib/utils.c:257
 msgid "Cannot seek to requested keyfile offset."
-msgstr "Det går inte att söka till begärd nyckelfilsoffset."
+msgstr "Det går inte att söka till begärd nyckelfilsförskjutning."
 
-#: lib/utils.c:246 lib/utils.c:261 src/utils_password.c:216
-#: src/utils_password.c:228
+#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "Slut på minne vid läsning av lösenfras."
 
-#: lib/utils.c:281
+#: lib/utils.c:286
 msgid "Error reading passphrase."
 msgstr "Fel vid läsning av lösenfras."
 
-#: lib/utils.c:298
+#: lib/utils.c:303
 msgid "Nothing to read on input."
 msgstr "Ingenting att läsa vid inmating."
 
-#: lib/utils.c:305
+#: lib/utils.c:310
 msgid "Maximum keyfile size exceeded."
 msgstr "Högsta nyckelfilsstorlek överskriden."
 
-#: lib/utils.c:310
+#: lib/utils.c:315
 msgid "Cannot read requested amount of data."
-msgstr "Det går inte läsa begärd mängd data."
+msgstr "Det går inte att läsa begärd mängd data."
 
-#: lib/utils_device.c:200 lib/utils_storage_wrappers.c:97
-#: lib/luks1/keyencryption.c:78 src/utils_reencrypt.c:1458
+#: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Enheten %s finns inte eller åtkomst nekas."
 
-#: lib/utils_device.c:210
+#: lib/utils_device.c:217
 #, c-format
 msgid "Device %s is not compatible."
-msgstr "Enheten %s är inte aktiv."
+msgstr "Enheten %s är inte kompatibel."
 
-#: lib/utils_device.c:554
+#: lib/utils_device.c:546
 #, c-format
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "Ignorerar falsk optimal-io-storlek för dataenheten (%u byte)."
 
-#: lib/utils_device.c:715
+#: lib/utils_device.c:707
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "Enhet %s är för liten. Behöver minst %<PRIu64> byte."
 
-#: lib/utils_device.c:796
+#: lib/utils_device.c:788
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "Det går inte att använda enheten %s som redan används (redan mappad eller monterad)."
 
-#: lib/utils_device.c:800
+#: lib/utils_device.c:792
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "Det går inte att använda enhet %s, behörighet nekad."
 
-#: lib/utils_device.c:803
+#: lib/utils_device.c:795
 #, c-format
 msgid "Cannot get info about device %s."
-msgstr "Kan inte hämta information om enheten %s."
+msgstr "Det går inte att hämta information om enheten %s."
 
-#: lib/utils_device.c:826
+#: lib/utils_device.c:818
 msgid "Cannot use a loopback device, running as non-root user."
-msgstr "Kan inte använda en loopback-enhet, kör som icke-root-användare."
+msgstr "Det går inte att använda en loopback-enhet, kör som icke-root-användare."
 
-#: lib/utils_device.c:837
+#: lib/utils_device.c:829
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "Misslyckades med att fästa loopback-enhet (kräver loop-enhet med flaggan autoclear)."
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:877
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
-msgstr "Begärd offset är bortom faktiska enhetsstorleken för %s."
+msgstr "Begärd förskjutning är bortom faktiska enhetsstorleken för %s."
 
-#: lib/utils_device.c:893
+#: lib/utils_device.c:885
 #, c-format
 msgid "Device %s has zero size."
 msgstr "Enheten %s har noll storlek."
 
-#: lib/utils_pbkdf.c:103
+#: lib/utils_pbkdf.c:105
 msgid "Requested PBKDF target time cannot be zero."
-msgstr "Begärd måltid för PBKDF kan inte vara noll."
+msgstr "Det går inte att ha begärd måltid för PBKDF som noll."
 
-#: lib/utils_pbkdf.c:109
+#: lib/utils_pbkdf.c:111
 #, c-format
 msgid "Unknown PBKDF type %s."
 msgstr "Okänd PBKDF-typ %s."
 
-#: lib/utils_pbkdf.c:114
+#: lib/utils_pbkdf.c:116
 #, c-format
 msgid "Requested hash %s is not supported."
 msgstr "Begärd hash %s stöds inte."
 
-#: lib/utils_pbkdf.c:125
+#: lib/utils_pbkdf.c:127
 msgid "Requested PBKDF type is not supported for LUKS1."
 msgstr "Begärd PBKDF-typ stöds inte för LUKS1."
 
-#: lib/utils_pbkdf.c:131
+#: lib/utils_pbkdf.c:133
 msgid "PBKDF max memory or parallel threads must not be set with pbkdf2."
 msgstr "Högsta minne för PBKDF eller parallella trådar får inte sättas med pbkdf2."
 
-#: lib/utils_pbkdf.c:136 lib/utils_pbkdf.c:146
+#: lib/utils_pbkdf.c:138 lib/utils_pbkdf.c:148
 #, c-format
 msgid "Forced iteration count is too low for %s (minimum is %u)."
 msgstr "Tvingad iterationsuppräkning är för liten för %s (minsta är %u)."
 
-#: lib/utils_pbkdf.c:151
+#: lib/utils_pbkdf.c:153
 #, c-format
 msgid "Forced memory cost is too low for %s (minimum is %u kilobytes)."
 msgstr "Tvingad minneskostnad är för låg för %s (minimum är %u kilobyte)."
 
-#: lib/utils_pbkdf.c:158
+#: lib/utils_pbkdf.c:160
 #, c-format
 msgid "Requested maximum PBKDF memory cost is too high (maximum is %d kilobytes)."
 msgstr "Kostnaden för det begärda högsta minnet för PBKDF är för högt (maximum är %d kilobyte)."
 
-#: lib/utils_pbkdf.c:163
+#: lib/utils_pbkdf.c:165
+msgid "Requested maximum PBKDF memory cost is too high (limited by the integer maximal size)."
+msgstr "Kostnaden för det begärda högsta minnet för PBKDF är för högt (begränsas av heltalets maximala storlek)."
+
+#: lib/utils_pbkdf.c:169
 msgid "Requested maximum PBKDF memory cannot be zero."
-msgstr "Högst begärt minne för PBKDF kan inte vara noll."
+msgstr "Det går inte att ha högst begärt minne för PBKDF som noll."
+
+#: lib/utils_pbkdf.c:173
+#, c-format
+msgid "Requested maximum PBKDF parallel cost is too high (maximum is %d)."
+msgstr "Begärd maximal PBKDF-parallellkostnad är för hög (max är %d)."
 
-#: lib/utils_pbkdf.c:167
+#: lib/utils_pbkdf.c:178
 msgid "Requested PBKDF parallel threads cannot be zero."
-msgstr "Begärda parallella trådar för PBKDF kan inte vara noll."
+msgstr "Det går inte att ha begärda parallella trådar för PBKDF som noll."
 
-#: lib/utils_pbkdf.c:187
+#: lib/utils_pbkdf.c:198
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "Stöder endast PBKDF2 i FIPS-läge."
 
@@ -884,25 +922,25 @@ msgstr "Låsningen avbruten. Låsningsökvägen %s/%s oanvändbar (inte en katal
 msgid "Locking aborted. The locking path %s/%s is unusable (%s is not a directory)."
 msgstr "Låsningen avbruten. Låsningsökvägen %s/%s oanvändbar (%s är inte en katalog)."
 
-#: lib/utils_wipe.c:143 lib/utils_wipe.c:214 src/utils_reencrypt_luks1.c:702
-#: src/utils_reencrypt_luks1.c:795
+#: lib/utils_wipe.c:143 lib/utils_wipe.c:218 src/utils_reencrypt_luks1.c:700
+#: src/utils_reencrypt_luks1.c:793
 msgid "Cannot seek to device offset."
-msgstr "Det går inte att söka till enhetsoffset."
+msgstr "Det går inte att söka till enhetsförskjutning."
 
-#: lib/utils_wipe.c:236
+#: lib/utils_wipe.c:240
 #, c-format
 msgid "Device wipe error, offset %<PRIu64>."
 msgstr "Fel vid radering av enhet, förskjutning %<PRIu64>."
 
-#: lib/utils_wipe.c:331
+#: lib/utils_wipe.c:332
 msgid "Incorrect OPAL PSID."
 msgstr "Felaktig OPAL PSID."
 
-#: lib/utils_wipe.c:333
+#: lib/utils_wipe.c:334
 msgid "Cannot erase OPAL device."
 msgstr "Det går inte att radera OPAL-enhet."
 
-#: lib/luks1/keyencryption.c:26
+#: lib/luks1/keyencryption.c:27
 #, c-format
 msgid ""
 "Failed to setup dm-crypt key mapping for device %s.\n"
@@ -911,47 +949,47 @@ msgstr ""
 "Misslyckades med att konfigurera nyckelmappning för dm-crypt för enheten %s. \n"
 "Kontrollera att kärnan har stöd för chiffret %s (kontrollera syslog för mer information)."
 
-#: lib/luks1/keyencryption.c:31
+#: lib/luks1/keyencryption.c:32
 msgid "Key size in XTS mode must be 256 or 512 bits."
 msgstr "Nyckelstorlek i XTS-läge måste vara en multipel av 256 eller 512 bitar."
 
-#: lib/luks1/keyencryption.c:33
+#: lib/luks1/keyencryption.c:34
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Chifferspecifikation ska vara i formatet [chiffer] - [läge] - [iv]."
 
-#: lib/luks1/keyencryption.c:84 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1119
-#: lib/luks2/luks2_json_metadata.c:1515 lib/luks2/luks2_keyslot.c:709
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
+#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
-msgstr "Kan inte skriva till enhet %s, behörighet nekad."
+msgstr "Det går inte att skriva till enhet %s, behörighet nekad."
 
-#: lib/luks1/keyencryption.c:107
+#: lib/luks1/keyencryption.c:108
 msgid "Failed to open temporary keystore device."
 msgstr "Misslyckades med att öppna temporär nyckellagringsenhet."
 
-#: lib/luks1/keyencryption.c:114
+#: lib/luks1/keyencryption.c:115
 msgid "Failed to access temporary keystore device."
 msgstr "Misslyckades med att komma åt temporär nyckellagringsenhet."
 
-#: lib/luks1/keyencryption.c:187 lib/luks2/luks2_keyslot_luks2.c:49
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
 #: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "In-/utfel vid kryptering av nyckelplats."
 
-#: lib/luks1/keyencryption.c:233 lib/luks1/keymanage.c:356
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
 #: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:864 lib/verity/verity.c:67 lib/verity/verity.c:183
-#: lib/verity/verity_hash.c:307 lib/verity/verity_hash.c:316
-#: lib/verity/verity_hash.c:336 lib/verity/verity_fec.c:247
+#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
+#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1518 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
 msgstr "Det går inte att öppna enheten %s."
 
-#: lib/luks1/keyencryption.c:244 lib/luks2/luks2_keyslot_luks2.c:126
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
 msgid "IO error while decrypting keyslot."
 msgstr "In-/utfel vid dekryptering av nyckelplats."
 
@@ -967,32 +1005,32 @@ msgstr "Enhet %s är för liten. (LUKS1 kräver minst %<PRIu64> byte.)"
 msgid "LUKS keyslot %u is invalid."
 msgstr "LUKS-nyckelplats %u är ogiltig."
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1378
+#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "Begärd säkerhetskopia %s av huvud finns redan."
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1380
+#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "Det går inte att skapa säkerhetskopia för huvud %s."
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1387
+#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
-msgstr "Det går inte skriva säkerhetskopia för huvud %s."
+msgstr "Det går inte att skriva säkerhetskopia för huvud %s."
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1424
+#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
 msgid "Backup file does not contain valid LUKS header."
 msgstr "Säkerhetskopian innehåller inte något giltigt LUKS-huvud."
 
 #: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1445
+#: lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "Det går inte att öppna säkerhetskopia för huvud %s."
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1453
+#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "Det går inte att läsa säkerhetskopia för huvud %s."
@@ -1014,7 +1052,7 @@ msgstr "innehåller inget LUKS-huvud. Ersättning av huvud kan förstöra data p
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "innehåller redan LUKS-huvud. Ersättningen av huvud kommer att förstöra befintliga nyckelplatser."
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1041,7 +1079,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Chifferhash reparerad till gemener (%s)."
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:779
+#: lib/luks1/keymanage.c:777
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Begärd LUKS-hash %s stöds inte."
@@ -1053,7 +1091,7 @@ msgstr "Reparerar nyckelplatser."
 #: lib/luks1/keymanage.c:450
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
-msgstr "Nyckelplats %i: reparerad offset (%u -> %u)."
+msgstr "Nyckelplats %i: reparerad förskjutning (%u -> %u)."
 
 #: lib/luks1/keymanage.c:458
 #, c-format
@@ -1088,7 +1126,7 @@ msgstr "LUKS-chifferläge %s är ogiltigt."
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS-hash %s är ogiltig."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1356
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
 msgid "No known problems detected for LUKS header."
 msgstr "Inga kända problem identifierade för LUKS-huvud."
 
@@ -1102,67 +1140,67 @@ msgstr "Fel vid uppdatering av LUKS-huvud på enheten %s."
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Fel vid omläsning av LUKS-huvud efter uppdatering på enheten %s."
 
-#: lib/luks1/keymanage.c:773
+#: lib/luks1/keymanage.c:771
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
-msgstr "Data-offset för fristående LUKS-huvud måste vara antingen 0 eller större än huvudstorleken."
+msgstr "Dataförskjutning för fristående LUKS-huvud måste vara antingen 0 eller större än huvudstorleken."
 
-#: lib/luks1/keymanage.c:784 lib/luks1/keymanage.c:853
-#: lib/luks2/luks2_json_format.c:230 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:541
+#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: src/utils_reencrypt.c:701
 msgid "Wrong LUKS UUID format provided."
 msgstr "Felaktigt LUKS-UUID-format angavs."
 
-#: lib/luks1/keymanage.c:806
+#: lib/luks1/keymanage.c:804
 msgid "Cannot create LUKS header: reading random salt failed."
-msgstr "Kan inte skapa LUKS-huvud: läsning av slumpmässigt salt misslyckades."
+msgstr "Det går inte att skapa LUKS-huvud: läsning av slumpmässigt salt misslyckades."
 
 #: lib/luks1/keymanage.c:832
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
-msgstr "Kan inte skapa LUKS-huvud: kontrollsumma för huvud misslyckades (använder hashen %s)."
+msgstr "Det går inte att skapa LUKS-huvud: kontrollsumma för huvud misslyckades (använder hashen %s)."
 
-#: lib/luks1/keymanage.c:876
+#: lib/luks1/keymanage.c:877
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Nyckelplats %d är aktiv, rensa först."
 
-#: lib/luks1/keymanage.c:882
+#: lib/luks1/keymanage.c:883
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Nyckelplats %d material inkluderar för få remsor. Har huvudet manipulerats?"
 
-#: lib/luks1/keymanage.c:918 lib/luks2/luks2_keyslot_luks2.c:257
+#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
 msgid "PBKDF2 iteration value overflow."
 msgstr "PBKDF2-iterationsvärde spillde över."
 
-#: lib/luks1/keymanage.c:1027
+#: lib/luks1/keymanage.c:1040
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
-msgstr "Det går inte att öppna nyckeplats (använder hash %s)."
+msgstr "Det går inte att öppna nyckelplats (använder hash %s)."
 
-#: lib/luks1/keymanage.c:1105
+#: lib/luks1/keymanage.c:1136
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Nyckelplats %d är ogiltig. Välj en nyckelplats mellan 0 och %d."
 
-#: lib/luks1/keymanage.c:1123 lib/luks2/luks2_keyslot.c:713
+#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
-msgstr "Kan inte rensa enheten %s."
+msgstr "Det går inte att rensa enheten %s."
 
-#: lib/loopaes/loopaes.c:133
+#: lib/loopaes/loopaes.c:140
 msgid "Detected not yet supported GPG encrypted keyfile."
 msgstr "Identifierade en GPG-krypterad nyckelfil som ännu inte stöds."
 
-#: lib/loopaes/loopaes.c:134
+#: lib/loopaes/loopaes.c:141
 msgid "Please use gpg --decrypt <KEYFILE> | cryptsetup --keyfile=- ...\n"
 msgstr "Använd gpg --decrypt <KEYFILE> | cryptsetup --keyfile=- …\n"
 
-#: lib/loopaes/loopaes.c:155 lib/loopaes/loopaes.c:175
+#: lib/loopaes/loopaes.c:162 lib/loopaes/loopaes.c:182
 msgid "Incompatible loop-AES keyfile detected."
 msgstr "Identifierade inkompatibel loop-AES-nyckelfil."
 
-#: lib/loopaes/loopaes.c:232
+#: lib/loopaes/loopaes.c:238
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "Kärnan stöder inte loop-AES-kompatibel mappning."
 
@@ -1179,170 +1217,199 @@ msgstr "Högsta TCRYPT-lösenfraslängd (%zu) överskriden."
 #: lib/tcrypt/tcrypt.c:589
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
-msgstr "PBKDF2-hashalgoritm %s ej tillgänglig, hoppar över."
+msgstr "PBKDF2-hashalgoritm %s inte tillgänglig, hoppar över."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1231
+#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
 msgid "Required kernel crypto interface not available."
 msgstr "Begärt kryptogränssnitt för kärnan inte tillgängligt."
 
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1233
+#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
 msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr "Försäkra dig om att kärnmodulen algif_skcipher är inläst."
 
-#: lib/tcrypt/tcrypt.c:751
+#: lib/tcrypt/tcrypt.c:752
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "Aktivering stöds inte för sektorstorlek %d."
 
-#: lib/tcrypt/tcrypt.c:757
+#: lib/tcrypt/tcrypt.c:758
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "Kärnan stöder inte aktivering för detta föråldrade TCRYPT-läge."
 
-#: lib/tcrypt/tcrypt.c:788
+#: lib/tcrypt/tcrypt.c:813
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "Aktiverar TCRYPT-systemkryptering för partition %s."
 
-#: lib/tcrypt/tcrypt.c:871
+#: lib/tcrypt/tcrypt.c:828
+msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
+msgstr "Det går inte att avgöra TCRYPT-systempartitionens förskjutning, aktiverar hela det krypterade området."
+
+#: lib/tcrypt/tcrypt.c:837
+msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
+msgstr "Det går inte att avgöra TCRYPT-systempartitionens förskjutning, aktiverar enheten som systempartition."
+
+#: lib/tcrypt/tcrypt.c:917
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "Kärnan stöder inte TCRYPT-kompatibel mappning."
 
-#: lib/tcrypt/tcrypt.c:1090
+#: lib/tcrypt/tcrypt.c:1146
 msgid "This function is not supported without TCRYPT header load."
 msgstr "Denna funktion stöds inte utan inläsning av TCRYPT-huvud."
 
-#: lib/bitlk/bitlk.c:265
+#: lib/bitlk/bitlk.c:293
 #, c-format
 msgid "Unexpected metadata entry type '%u' found when parsing supported Volume Master Key."
 msgstr "Oväntad metadatapost av typ ”%u” funnen vid tolkning av volymhuvudnyckel."
 
-#: lib/bitlk/bitlk.c:327
+#: lib/bitlk/bitlk.c:351
 msgid "Invalid string found when parsing Volume Master Key."
 msgstr "Ogiltig sträng funnen vid tolkning av volymhuvudnyckel."
 
-#: lib/bitlk/bitlk.c:331
+#: lib/bitlk/bitlk.c:355
 #, c-format
 msgid "Unexpected string ('%s') found when parsing supported Volume Master Key."
 msgstr "Oväntad sträng (”%s”) funnen vid tolkning av volymhuvudnycklar som stöds."
 
-#: lib/bitlk/bitlk.c:351
+#: lib/bitlk/bitlk.c:375
 #, c-format
 msgid "Unexpected metadata entry value '%u' found when parsing supported Volume Master Key."
 msgstr "Oväntad metadatapostvärde av typ ”%u” funnen vid tolkning av volymhuvudnycklar som stöds."
 
-#: lib/bitlk/bitlk.c:453
+#: lib/bitlk/bitlk.c:528
 msgid "BITLK version 1 is currently not supported."
-msgstr "BITLK version 1 stöds ej för närvarande."
+msgstr "BITLK version 1 stöds inte för närvarande."
 
-#: lib/bitlk/bitlk.c:459
+#: lib/bitlk/bitlk.c:534
 msgid "Invalid or unknown boot signature for BITLK device."
 msgstr "Ogiltig eller okänd boot-signatur för BITLK-enhet."
 
-#: lib/bitlk/bitlk.c:471
+#: lib/bitlk/bitlk.c:546
 #, c-format
 msgid "Unsupported sector size %<PRIu16>."
 msgstr "Stöder inte sektorstorleken %<PRIu16>."
 
-#: lib/bitlk/bitlk.c:479
+#: lib/bitlk/bitlk.c:554
 #, c-format
 msgid "Failed to read BITLK header from %s."
 msgstr "Misslyckades med att läsa BITLK-huvud från %s."
 
-#: lib/bitlk/bitlk.c:504
+#: lib/bitlk/bitlk.c:593
+#, c-format
+msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
+msgstr "Misslyckades med att läsa eller validera BITLK FVE-metadata-kopia #%d från %s."
+
+#: lib/bitlk/bitlk.c:603
+#, c-format
+msgid "Failed to read and validate BITLK FVE metadata from %s."
+msgstr "Misslyckades med att läsa och validera BITLK FVE-metadata från %s."
+
+#: lib/bitlk/bitlk.c:610
+#, c-format
+msgid "Failed to validate the location of BITLK FVE metadata from %s."
+msgstr "Misslyckades med att validera platsen för BITLK FVE-metadata från %s."
+
+#: lib/bitlk/bitlk.c:621
+#, c-format
+msgid "BITLK FVE metadata changed between reads from %s."
+msgstr "BITLK FVE-metadata ändrades mellan läsningar från %s."
+
+#: lib/bitlk/bitlk.c:628
 #, c-format
-msgid "Failed to read BITLK FVE metadata from %s."
-msgstr "Misslyckades med att läsa BITLK FVE-metadata från %s."
+msgid "Failed to hash BITLK FVE metadata read from %s."
+msgstr "Misslyckades med att hasha BITLK FVE-metadata som lästes från %s."
 
-#: lib/bitlk/bitlk.c:555
+#: lib/bitlk/bitlk.c:644
+#, c-format
+msgid "Failed to parse BITLK FVE validation metadata from %s."
+msgstr "Misslyckades med att tolka BITLK FVE-valideringsmetadata från %s."
+
+#: lib/bitlk/bitlk.c:695
 msgid "Unknown or unsupported encryption type."
-msgstr "Krypteringstypen är okänd eller stöds ej."
+msgstr "Krypteringstypen är okänd eller stöds inte."
 
-#: lib/bitlk/bitlk.c:595
+#: lib/bitlk/bitlk.c:733
 #, c-format
-msgid "Failed to read BITLK metadata entries from %s."
-msgstr "Misslyckades med att läsa BITLK -metadataposter från %s."
+msgid "Failed to check BITLK metadata entries previously read from %s."
+msgstr "Misslyckades med att kontrollera BITLK-metadataposter som tidigare lästes från %s."
 
-#: lib/bitlk/bitlk.c:712
+#: lib/bitlk/bitlk.c:853
 msgid "Failed to convert BITLK volume description"
 msgstr "Misslyckades med att konvertera BITLK-volymbeskrivning"
 
-#: lib/bitlk/bitlk.c:877
+#: lib/bitlk/bitlk.c:1018
 #, c-format
 msgid "Unexpected metadata entry type '%u' found when parsing external key."
 msgstr "Oväntad metadatapost av typ ”%u” funnen vid tolkning av extern nyckel."
 
-#: lib/bitlk/bitlk.c:900
+#: lib/bitlk/bitlk.c:1041
 #, c-format
 msgid "BEK file GUID '%s' does not match GUID of the volume."
 msgstr "BEK-filens GUID '%s' stämmer inte överens med GUID för volymen."
 
-#: lib/bitlk/bitlk.c:904
+#: lib/bitlk/bitlk.c:1045
 #, c-format
 msgid "Unexpected metadata entry value '%u' found when parsing external key."
 msgstr "Oväntad metadatapostvärde av typ ”%u” funnen vid tolkning av extern nyckel."
 
-#: lib/bitlk/bitlk.c:943
+#: lib/bitlk/bitlk.c:1084
 #, c-format
 msgid "Unsupported BEK metadata version %<PRIu32>"
 msgstr "Inget stöd för BEK metadata-version %<PRIu32>"
 
-#: lib/bitlk/bitlk.c:948
+#: lib/bitlk/bitlk.c:1089
 #, c-format
 msgid "Unexpected BEK metadata size %<PRIu32> does not match BEK file length"
 msgstr "Oväntad BEK-metadatastorlek %<PRIu32> matchar inte BEK-fillängd"
 
-#: lib/bitlk/bitlk.c:974
+#: lib/bitlk/bitlk.c:1115
 msgid "Unexpected metadata entry found when parsing startup key."
 msgstr "Oväntad metadatapost av typ ”%u” funnen vid tolkning av uppstartsnyckel."
 
-#: lib/bitlk/bitlk.c:1069
+#: lib/bitlk/bitlk.c:1218
 msgid "This operation is not supported."
-msgstr "Denna åtgärd stöds ej."
+msgstr "Denna åtgärd stöds inte."
 
-#: lib/bitlk/bitlk.c:1077
+#: lib/bitlk/bitlk.c:1226
 msgid "Unexpected key data size."
 msgstr "Oväntad nyckeldatastorlek."
 
-#: lib/bitlk/bitlk.c:1203
+#: lib/bitlk/bitlk.c:1431
 msgid "This BITLK device is in an unsupported state and cannot be activated."
-msgstr "Denna BITLK-enhet är i tillstånd som inte stöds och kan inte aktiveras."
+msgstr "Denna BITLK-enhet är i ett tillstånd som inte stöds och går inte att aktivera."
 
-#: lib/bitlk/bitlk.c:1208
+#: lib/bitlk/bitlk.c:1436
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Det går inte att aktivera BITLK-enheter av typen ”%s”."
 
-#: lib/bitlk/bitlk.c:1215
-msgid "Activation of partially decrypted BITLK device is not supported."
-msgstr "Aktivering av delvis avkrypterade BITLK-enheter stöds ej."
-
-#: lib/bitlk/bitlk.c:1256
+#: lib/bitlk/bitlk.c:1475
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "VARNING: BitLocker-volymstorlek %<PRIu64> överensstämmer inte med underliggande enhetstorlek %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1383
+#: lib/bitlk/bitlk.c:1602
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Det går inte att aktivera enheten, kärnan dm-crypt saknar stöd för BITLK IV."
 
-#: lib/bitlk/bitlk.c:1387
+#: lib/bitlk/bitlk.c:1606
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Det går inte att aktivera enheten, kärnan dm-crypt saknar stöd för BITLK Elephant diffuser."
 
-#: lib/bitlk/bitlk.c:1391
+#: lib/bitlk/bitlk.c:1610
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Det går inte att aktivera enheten, kärnan dm-crypt saknar stöd för stor sektorstorlek."
 
-#: lib/bitlk/bitlk.c:1395
+#: lib/bitlk/bitlk.c:1614
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Det går inte att aktivera enheten, kärnmodulen dm-zero saknas."
 
-#: lib/fvault2/fvault2.c:529
+#: lib/fvault2/fvault2.c:530
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "Det går inte att läsa %u byte från volymhuvudet."
 
-#: lib/fvault2/fvault2.c:541
+#: lib/fvault2/fvault2.c:542
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "Stöder inte FVAULT2-version %<PRIu16>."
@@ -1379,26 +1446,26 @@ msgstr "Begärd hashsignaturverifiering %s stöds inte."
 msgid "Root hash signature required."
 msgstr "Root-hashsignatur krävs."
 
-#: lib/verity/verity.c:281
+#: lib/verity/verity.c:282
 msgid "Errors cannot be repaired with FEC device."
-msgstr "Det går inte reparera fel med FEC-enhet."
+msgstr "Det går inte att reparera fel med FEC-enhet."
 
-#: lib/verity/verity.c:283
+#: lib/verity/verity.c:284
 #, c-format
 msgid "Found %u repairable errors with FEC device."
-msgstr "Fann %u reparerbara fel med FEC-enhet."
+msgstr "Hittade %u reparerbara fel med FEC-enhet."
 
-#: lib/verity/verity.c:364
+#: lib/verity/verity.c:368
 msgid "Kernel does not support dm-verity mapping."
 msgstr "Kärnan stöder inte dm-verity-mappning."
 
-#: lib/verity/verity.c:368
+#: lib/verity/verity.c:372
 msgid "Kernel does not support dm-verity signature option."
 msgstr "Kärnan stöder inte flaggan för dm-verity-signatur."
 
-#: lib/verity/verity.c:379
+#: lib/verity/verity.c:383
 msgid "Verity device detected corruption after activation."
-msgstr "Verity-enhet identifierades som skadad efter aktivering."
+msgstr "Verity-enheten upptäckte korruption efter aktivering."
 
 #: lib/verity/verity_hash.c:53
 #, c-format
@@ -1408,7 +1475,7 @@ msgstr "Ledigt utrymme är inte nollställt vid position %<PRIu64>."
 #: lib/verity/verity_hash.c:154 lib/verity/verity_hash.c:287
 #: lib/verity/verity_hash.c:298
 msgid "Device offset overflow."
-msgstr "Enhets-offset spillde över."
+msgstr "Enhetsförskjutning överskred gränsen."
 
 #: lib/verity/verity_hash.c:205
 #, c-format
@@ -1419,26 +1486,26 @@ msgstr "Verifiering misslyckades vid %<PRIu64>."
 msgid "Hash area overflow."
 msgstr "Hash-området spillde över."
 
-#: lib/verity/verity_hash.c:367
+#: lib/verity/verity_hash.c:372
 msgid "Verification of data area failed."
 msgstr "Misslyckades med verifiering av dataområde."
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:377
 msgid "Verification of root hash failed."
 msgstr "Misslyckades med verifiering av rot-hash."
 
-#: lib/verity/verity_hash.c:378
+#: lib/verity/verity_hash.c:383
 msgid "Input/output error while creating hash area."
-msgstr "In-/utdatafel vid skapandet av hashområde."
+msgstr "In-/utdatafel vid skapandet av hashområdet."
 
-#: lib/verity/verity_hash.c:380
+#: lib/verity/verity_hash.c:385
 msgid "Creation of hash area failed."
-msgstr "Misslyckades med skapandet av hashområde."
+msgstr "Misslyckades med att skapa hashområdet."
 
-#: lib/verity/verity_hash.c:415
+#: lib/verity/verity_hash.c:420
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
-msgstr "VARNING: Kärnan kan inte aktivera enhet om datablockstorleken överskrider sidstorlek (%u)."
+msgstr "VARNING: Det går inte att aktivera enheten om datablockstorleken överskrider sidstorleken (%u)."
 
 #: lib/verity/verity_fec.c:118
 msgid "Failed to allocate RS context."
@@ -1451,22 +1518,22 @@ msgstr "Misslyckades med att allokera buffert."
 #: lib/verity/verity_fec.c:146
 #, c-format
 msgid "Failed to read RS block %<PRIu64> byte %d."
-msgstr "Misslyckades med att läsa RS block %<PRIu64> byte %d."
+msgstr "Misslyckades med att läsa RS-block %<PRIu64> byte %d."
 
 #: lib/verity/verity_fec.c:159
 #, c-format
 msgid "Failed to read parity for RS block %<PRIu64>."
-msgstr "Misslyckades med att skriva paritet för RS block %<PRIu64>."
+msgstr "Misslyckades med att läsa paritet för RS-block %<PRIu64>."
 
 #: lib/verity/verity_fec.c:167
 #, c-format
 msgid "Failed to repair parity for block %<PRIu64>."
-msgstr "Misslyckades med att skriva paritet för RS block %<PRIu64>."
+msgstr "Misslyckades med att reparera paritet för block %<PRIu64>."
 
 #: lib/verity/verity_fec.c:179
 #, c-format
 msgid "Failed to write parity for RS block %<PRIu64>."
-msgstr "Misslyckades med att skriva paritet för RS block %<PRIu64>."
+msgstr "Misslyckades med att skriva paritet för RS-block %<PRIu64>."
 
 #: lib/verity/verity_fec.c:195
 msgid "Block sizes must match for FEC."
@@ -1485,34 +1552,38 @@ msgstr "Ogiltig FEC-segmentlängd."
 msgid "Failed to determine size for device %s."
 msgstr "Misslyckades med att bestämma storlek för enhet %s."
 
-#: lib/integrity/integrity.c:44
+#: lib/integrity/integrity.c:50
 #, c-format
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Inkompatibel kärnmetadata dm-integrity (version %u) identifierad på %s."
 
-#: lib/integrity/integrity.c:264 lib/integrity/integrity.c:441
+#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Kärnan stöder inte dm-integrity-mappning."
 
-#: lib/integrity/integrity.c:270
+#: lib/integrity/integrity.c:310
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Kärnan stöder inte fast metadataförskjutning för dm-integrity."
 
-#: lib/integrity/integrity.c:279
+#: lib/integrity/integrity.c:319
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Kärnan tillåter inte att den osäkra flaggan recalculate aktiveras (se föråldrade aktiveringsflaggor för att åsidosätta)."
 
-#: lib/luks2/luks2_disk_metadata.c:379 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1507
+#: lib/integrity/integrity.c:325
+msgid "Kernel does not support dm-integrity inline mode."
+msgstr "Kärnan stöder inte dm-integrity inline-läge."
+
+#: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
+#: lib/luks2/luks2_json_metadata.c:1510
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "Misslyckades med att få skrivlås på enheten %s."
 
-#: lib/luks2/luks2_disk_metadata.c:388
+#: lib/luks2/luks2_disk_metadata.c:391
 msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation."
 msgstr "Identifierade samtidiga försök att uppdatera LUKS2-metadata. Avbryter åtgärden."
 
-#: lib/luks2/luks2_disk_metadata.c:697 lib/luks2/luks2_disk_metadata.c:718
+#: lib/luks2/luks2_disk_metadata.c:726 lib/luks2/luks2_disk_metadata.c:747
 msgid ""
 "Device contains ambiguous signatures, cannot auto-recover LUKS2.\n"
 "Please run \"cryptsetup repair\" for recovery."
@@ -1520,183 +1591,187 @@ msgstr ""
 "Enheten innehåller tvetydiga signaturer, det går inte att automatiskt återhämta LUKS2.\n"
 "Kör ”cryptsetup repair” för återhämtning."
 
-#: lib/luks2/luks2_json_format.c:218
+#: lib/luks2/luks2_json_format.c:219
 #, c-format
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "VARNING: nyckelplatsområdet (%<PRIu64> byte) är väldigt liten, tillgängligt LUKS2-nyckelplatsantal är väldigt begränsat.\n"
 
-#: lib/luks2/luks2_json_format.c:417
+#: lib/luks2/luks2_json_format.c:418
 msgid "Requested data offset is too small."
-msgstr "Begärd dataoff för liten."
+msgstr "Begärd dataförskjutning är för liten."
 
-#: lib/luks2/luks2_json_format.c:458
+#: lib/luks2/luks2_json_format.c:459
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "VARNING: storlek på LUKS2-metadata ändrades till %<PRIu64> byte.\n"
 
-#: lib/luks2/luks2_json_format.c:462
+#: lib/luks2/luks2_json_format.c:463
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "VARNING: storlek på LUKS2-nyckelplatsområde ändrades till %<PRIu64> byte.\n"
 
-#: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1353
-#: lib/luks2/luks2_json_metadata.c:1413 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:103
+#: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
+#: lib/luks2/luks2_keyslot_luks2.c:105
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Misslyckades med att erhålla läslås på enheten %s."
 
-#: lib/luks2/luks2_json_metadata.c:1430
+#: lib/luks2/luks2_json_metadata.c:1277
+msgid "Label is too long."
+msgstr "Etiketten är för lång."
+
+#: lib/luks2/luks2_json_metadata.c:1435
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "Förbjudna LUKS2-krav identifierade i säkerhetskopian %s."
 
-#: lib/luks2/luks2_json_metadata.c:1471
+#: lib/luks2/luks2_json_metadata.c:1474
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "Dataoffset skiljer sig på enhet och säkerhetskopia. Återställningen misslyckades."
 
-#: lib/luks2/luks2_json_metadata.c:1477
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "Binärhuvud med nyckelstorlek skiljer sig på enhet och säkerhetskopia. Återställningen misslyckades."
 
-#: lib/luks2/luks2_json_metadata.c:1484
+#: lib/luks2/luks2_json_metadata.c:1487
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "Enhet %s %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1485
+#: lib/luks2/luks2_json_metadata.c:1488
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "innehåller inget LUKS2-huvud. Ersättning av huvud kan förstöra data på enheten."
 
-#: lib/luks2/luks2_json_metadata.c:1486
+#: lib/luks2/luks2_json_metadata.c:1489
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "innehåller redan LUKS2-huvud. Ersättningen av huvud kommer att förstöra befintliga nyckelplatser."
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1491
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
 "Replacing header with backup may corrupt the data on that device!"
 msgstr ""
 "\n"
-"VARNING:okända LUKS2-krav identifierade i huvudet för riktig enhet!\n"
+"VARNING: okända LUKS2-krav identifierade i huvudet för den riktiga enheten!\n"
 "Att ersätta huvudet med en säkerhetskopia kan göra data korrupt på enheten!"
 
-#: lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks2/luks2_json_metadata.c:1493
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
 "Replacing header with backup may corrupt data."
 msgstr ""
 "\n"
-"VARNING:Oavslutad frånkopplade kryptering identifierad på enheten!\n"
+"VARNING: oavslutad frånkopplad omkryptering identifierad på enheten!\n"
 "Att ersätta huvudet med en säkerhetskopia kan orsaka korrupt data."
 
-#: lib/luks2/luks2_json_metadata.c:1587
+#: lib/luks2/luks2_json_metadata.c:1591
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "Ignorerade okänd flagga %s."
 
-#: lib/luks2/luks2_json_metadata.c:2512 lib/luks2/luks2_reencrypt.c:2092
+#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Saknar nyckel för dm-crypt-segmentet %u"
 
-#: lib/luks2/luks2_json_metadata.c:2524 lib/luks2/luks2_reencrypt.c:2106
+#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
 msgid "Failed to set dm-crypt segment."
 msgstr "Misslyckades med att läsa dm-crypt-segment."
 
-#: lib/luks2/luks2_json_metadata.c:2530 lib/luks2/luks2_reencrypt.c:2112
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
 msgid "Failed to set dm-linear segment."
 msgstr "Misslyckades med att läsa dm-linear-segment."
 
-#: lib/luks2/luks2_json_metadata.c:2649 src/utils_reencrypt.c:420
+#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Inget känt chifferspecifikationsmönster kunde identifieras i LUKS2-huvudet."
 
-#: lib/luks2/luks2_json_metadata.c:2657
+#: lib/luks2/luks2_json_metadata.c:2691
 msgid "OPAL device must have static device size."
 msgstr "OPAL-enheten måste ha en statisk enhetsstorlek."
 
-#: lib/luks2/luks2_json_metadata.c:2677
+#: lib/luks2/luks2_json_metadata.c:2711
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Krypterad OPAL-enhet med integritet måste vara mindre än låsområdet."
 
-#: lib/luks2/luks2_json_metadata.c:2682
+#: lib/luks2/luks2_json_metadata.c:2716
 msgid "OPAL device must have same size as locking range."
 msgstr "OPAL-enheten måste ha samma storlek som låsområdet."
 
-#: lib/luks2/luks2_json_metadata.c:2702
+#: lib/luks2/luks2_json_metadata.c:2736
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "OPAL-enheten %s är redan upplåst.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2735
+#: lib/luks2/luks2_json_metadata.c:2775
 msgid "Unsupported device integrity configuration."
-msgstr "Integritetskonfiguration som ej stöds på enheten."
+msgstr "Integritetskonfiguration som inte stöds på enheten."
 
-#: lib/luks2/luks2_json_metadata.c:2751
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Underliggande dm-integrity-enhet med oväntade tillhandahållna datasektorer."
 
-#: lib/luks2/luks2_json_metadata.c:2846
+#: lib/luks2/luks2_json_metadata.c:2886
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Omkryptering pågår. Det går inte att inaktivera enhet."
 
-#: lib/luks2/luks2_json_metadata.c:2857 lib/luks2/luks2_reencrypt.c:4161
+#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Misslyckades med att ersätta inaktiverad enhet %s med målet dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:2926 lib/luks2/luks2_json_metadata.c:2948
+#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
-msgstr "Enheten %s avaktiverades men hårdvaran OPAL-enheten kan inte låsas."
-
-#: lib/luks2/luks2_json_metadata.c:2967
-msgid "Failed to read LUKS2 requirements."
-msgstr "Misslyckades med att läsa LUKS2-krav."
+msgstr "Enheten %s avaktiverades men det går inte att låsa OPAL-hårdvaruenheten."
 
-#: lib/luks2/luks2_json_metadata.c:2974
+#: lib/luks2/luks2_json_metadata.c:3020
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Ej uppfyllt LUKS2-krav identifierat."
 
-#: lib/luks2/luks2_json_metadata.c:2982
+#: lib/luks2/luks2_json_metadata.c:3028
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Åtgärden inkompatibel med enhet markerad för föråldrad omkryptering. Avbryter."
 
-#: lib/luks2/luks2_json_metadata.c:2984
+#: lib/luks2/luks2_json_metadata.c:3030
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Åtgärden inkompatibel med enhet markerad för LUKS2-omkryptering. Avbryter."
 
-#: lib/luks2/luks2_json_metadata.c:2986
+#: lib/luks2/luks2_json_metadata.c:3032
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Åtgärden inkompatibel med enhet som använder OPAL. Avbryter."
 
-#: lib/luks2/luks2_keyslot.c:560 lib/luks2/luks2_keyslot.c:599
+#: lib/luks2/luks2_json_metadata.c:3034
+msgid "Operation incompatible with device using inline HW tags. Aborting."
+msgstr "Åtgärden inkompatibel med enhet som använder inline-hårdvarutaggar. Avbryter."
+
+#: lib/luks2/luks2_keyslot.c:543 lib/luks2/luks2_keyslot.c:601
 msgid "Not enough available memory to open a keyslot."
 msgstr "Inte nog med minne för att öppna en nyckelplats."
 
-#: lib/luks2/luks2_keyslot.c:562 lib/luks2/luks2_keyslot.c:601
+#: lib/luks2/luks2_keyslot.c:545 lib/luks2/luks2_keyslot.c:603
 msgid "Keyslot open failed."
 msgstr "Misslyckades med att öppna nyckelplats."
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:97
+#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
 #, c-format
 msgid "Cannot use %s-%s cipher for keyslot encryption."
 msgstr "Det går inte att använda %s-%s-chiffer för nyckelplatskryptering."
 
-#: lib/luks2/luks2_keyslot_luks2.c:272 lib/luks2/luks2_keyslot_luks2.c:391
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2716
+#: lib/luks2/luks2_keyslot_luks2.c:262
+msgid "Not enough memory for keyslot key derivation."
+msgstr "Inte nog med minne för nyckelplatsens nyckelhärledning."
+
+#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "Hashalgoritm %s är inte tillgänglig."
 
-#: lib/luks2/luks2_keyslot_luks2.c:358
-msgid "Warning: keyslot operation could fail as it requires more than available memory.\n"
-msgstr "Varning: keyslot-operationen kan misslyckas eftersom den kräver mer än tillgängligt minne.\n"
-
-#: lib/luks2/luks2_keyslot_luks2.c:507
+#: lib/luks2/luks2_keyslot_luks2.c:522
 msgid "No space for new keyslot."
 msgstr "Inget utrymme för ny nyckelplats."
 
@@ -1707,443 +1782,453 @@ msgstr "Begärde ogiltigt återhämtningsläge för omkryptering."
 #: lib/luks2/luks2_keyslot_reenc.c:704
 #, c-format
 msgid "Can not update resilience type. New type only provides %<PRIu64> bytes, required space is: %<PRIu64> bytes."
-msgstr "Det går inte att uppdatera återhämtningstup. Ny typ tillhandahåller %<PRIu64> byte,  begärt utrymme är: %<PRIu64> byte."
+msgstr "Det går inte att uppdatera återhämtningstypen. Ny typ tillhandahåller %<PRIu64> byte, begärt utrymme är: %<PRIu64> byte."
 
 #: lib/luks2/luks2_keyslot_reenc.c:714
 msgid "Failed to refresh reencryption verification digest."
-msgstr "Misslyckades med att sammandrag för omkrypteringsverifikation."
+msgstr "Misslyckades med att uppdatera sammandraget för omkrypteringsverifikation."
 
 #: lib/luks2/luks2_luks1_convert.c:532
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
-msgstr "Det går inte kontrollera status för enheten med uuid: %s."
+msgstr "Det går inte att kontrollera status för enheten med uuid: %s."
 
 #: lib/luks2/luks2_luks1_convert.c:558
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Det går inte att konvertera huvud med ytterligare metadata för LUKSMETA."
 
-#: lib/luks2/luks2_luks1_convert.c:589 lib/luks2/luks2_reencrypt.c:3797
+#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Det går inte att använda chiffer-spefikationen %s-%s för LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:604
+#: lib/luks2/luks2_luks1_convert.c:599
+#, c-format
+msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
+msgstr "Det går inte att använda chiffer-specifikationen %s-%s för LUKS2-nyckelplats."
+
+#: lib/luks2/luks2_luks1_convert.c:614
 msgid "Unable to move keyslot area. Not enough space."
-msgstr "Kunde inte flytta nyckelplatsområde. Inte nog med utrymme."
+msgstr "Det gick inte att flytta nyckelplatsområde. Inte nog med utrymme."
 
-#: lib/luks2/luks2_luks1_convert.c:643
+#: lib/luks2/luks2_luks1_convert.c:653
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Det går inte att konvertera till LUKS2-format - ogiltig metadata."
 
-#: lib/luks2/luks2_luks1_convert.c:660
+#: lib/luks2/luks2_luks1_convert.c:670
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
-msgstr "Kunde inte flytta nyckelplatsområde. Området för LUKS2-nyckelplatser är för litet."
+msgstr "Det gick inte att flytta nyckelplatsområde. Området för LUKS2-nyckelplatser är för litet."
 
-#: lib/luks2/luks2_luks1_convert.c:666 lib/luks2/luks2_luks1_convert.c:960
+#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
 msgid "Unable to move keyslot area."
-msgstr "Kunde inte flytta nyckelplatsområde."
+msgstr "Det gick inte att flytta nyckelplatsområde."
 
-#: lib/luks2/luks2_luks1_convert.c:756
+#: lib/luks2/luks2_luks1_convert.c:791
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Det går inte att konvertera till LUKS1-format - standardkrypteringstorleken är inte 512 byte."
 
-#: lib/luks2/luks2_luks1_convert.c:764
+#: lib/luks2/luks2_luks1_convert.c:799
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Det går inte att konvertera till LUKS1-format - kontrollsummor för nyckelplatser är inte LUKS1-kompatibla."
 
-#: lib/luks2/luks2_luks1_convert.c:776
+#: lib/luks2/luks2_luks1_convert.c:813
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Det går inte att konvertera till LUKS1-format - enheterna använder inbäddat nyckelchiffer %s."
 
-#: lib/luks2/luks2_luks1_convert.c:781
+#: lib/luks2/luks2_luks1_convert.c:818
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Det går inte att konvertera till LUKS1-format - enheten använder flera segment."
 
-#: lib/luks2/luks2_luks1_convert.c:789
+#: lib/luks2/luks2_luks1_convert.c:826
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Det går inte att konvertera till LUKS1-format - LUKS2-huvud innehåller %u token."
 
-#: lib/luks2/luks2_luks1_convert.c:803
+#: lib/luks2/luks2_luks1_convert.c:832
+msgid "Cannot convert to LUKS1 format - there are no active keyslots."
+msgstr "Det går inte att konvertera till LUKS1-format - det finns inga aktiva nyckelplatser."
+
+#: lib/luks2/luks2_luks1_convert.c:844
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Det går inte att konvertera till LUKS1-format - nyckelplats %u är i ogiltigt tillstånd."
 
-#: lib/luks2/luks2_luks1_convert.c:808
+#: lib/luks2/luks2_luks1_convert.c:849
+#, c-format
+msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
+msgstr "Det går inte att konvertera till LUKS1-format - nyckelplats %u är obunden."
+
+#: lib/luks2/luks2_luks1_convert.c:854
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Det går inte att konvertera till LUKS1-format - plats %u (av maximalt antal platser) är fortfarande aktiv."
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:859
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Det går inte att konvertera till LUKS1-format - nyckelplats %u är inte LUKS1-kompatibel."
 
-#: lib/luks2/luks2_reencrypt.c:1183
+#: lib/luks2/luks2_reencrypt.c:1198
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
-msgstr "Hotzone-storleken måste vara en multipel av beräknad zonjustering (%zu-byte)."
+msgstr "Varmzonens storlek måste vara en multipel av beräknad zonjustering (%zu byte)."
 
-#: lib/luks2/luks2_reencrypt.c:1188
+#: lib/luks2/luks2_reencrypt.c:1203
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Enhetsstorleken måste vara en multipel av beräknad zonstorlek (%zu byte)."
 
-#: lib/luks2/luks2_reencrypt.c:1395 lib/luks2/luks2_reencrypt.c:1582
-#: lib/luks2/luks2_reencrypt.c:1665 lib/luks2/luks2_reencrypt.c:1707
-#: lib/luks2/luks2_reencrypt.c:3956
+#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
+#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
+#: lib/luks2/luks2_reencrypt.c:4077
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Misslyckades med att initiera gammal segmentlagringsinbäddning."
 
-#: lib/luks2/luks2_reencrypt.c:1409 lib/luks2/luks2_reencrypt.c:1560
+#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Misslyckades med att initiera ny segmentlagringsinbäddning."
 
-#: lib/luks2/luks2_reencrypt.c:1536 lib/luks2/luks2_reencrypt.c:3968
+#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
 msgid "Failed to initialize hotzone protection."
-msgstr "Misslyckades med att initiera skydd av hotzone."
+msgstr "Misslyckades med att initiera skydd av varmzon."
 
-#: lib/luks2/luks2_reencrypt.c:1609
+#: lib/luks2/luks2_reencrypt.c:1623
 msgid "Failed to read checksums for current hotzone."
-msgstr "Misslyckades med att läsa kontrollsummor från aktuell varm zon."
+msgstr "Misslyckades med att läsa kontrollsummor från aktuell varmzon."
 
-#: lib/luks2/luks2_reencrypt.c:1616 lib/luks2/luks2_reencrypt.c:3982
+#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
-msgstr "Misslyckades med att läsa område för varm zon med början %<PRIu64>."
+msgstr "Misslyckades med att läsa område för varmzon med början %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:1635
+#: lib/luks2/luks2_reencrypt.c:1649
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "Misslyckades med att dekryptera sektor %zu."
 
-#: lib/luks2/luks2_reencrypt.c:1641
+#: lib/luks2/luks2_reencrypt.c:1655
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "Misslyckades med återhämta sektor %zu."
 
-#: lib/luks2/luks2_reencrypt.c:2205
+#: lib/luks2/luks2_reencrypt.c:2208
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "Käll- och målenhetstorlekar stämmer inte överens. Källa %<PRIu64>, mål: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2303
+#: lib/luks2/luks2_reencrypt.c:2310
 #, c-format
 msgid "Failed to activate hotzone device %s."
-msgstr "Misslyckades med att aktivera varm zon-enhet %s."
+msgstr "Misslyckades med att aktivera varmzon-enhet %s."
 
-#: lib/luks2/luks2_reencrypt.c:2320
+#: lib/luks2/luks2_reencrypt.c:2322
+#, c-format
+msgid "Failed to allocate hotzone device %s."
+msgstr "Misslyckades med att allokera varmzon-enhet %s."
+
+#: lib/luks2/luks2_reencrypt.c:2339
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "Misslyckades med att aktivera överlagringsenheten %s med aktuell ursprungstabell."
 
-#: lib/luks2/luks2_reencrypt.c:2327
+#: lib/luks2/luks2_reencrypt.c:2346
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "Misslyckades med att läsa in ny mappning för enhet %s."
 
-#: lib/luks2/luks2_reencrypt.c:2398
+#: lib/luks2/luks2_reencrypt.c:2418
 msgid "Failed to refresh reencryption devices stack."
 msgstr "Misslyckades med att uppdatera listan över omkrypteringsenheter."
 
-#: lib/luks2/luks2_reencrypt.c:2598
+#: lib/luks2/luks2_reencrypt.c:2615
 msgid "Failed to set new keyslots area size."
 msgstr "Misslyckades med att sätta en ny storlek på nyckelplatsområdet."
 
-#: lib/luks2/luks2_reencrypt.c:2734
+#: lib/luks2/luks2_reencrypt.c:2751
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Dataskiftning är inte justerad till krypteringssektorstorlek (%<PRIu32> byte)."
 
-#: lib/luks2/luks2_reencrypt.c:2771 src/utils_reencrypt.c:176
+#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "Stöder inte motståndsläge %s"
 
-#: lib/luks2/luks2_reencrypt.c:2808
+#: lib/luks2/luks2_reencrypt.c:2824
 msgid "Moved segment size can not be greater than data shift value."
-msgstr "Flyttat segmentstorlek kan inte vara större än dataskift-värdet."
+msgstr "Det går inte att ha en flyttad segmentstorlek som är större än dataskiftvärdet."
 
-#: lib/luks2/luks2_reencrypt.c:2850
+#: lib/luks2/luks2_reencrypt.c:2866
 msgid "Invalid reencryption resilience parameters."
 msgstr "Ogiltiga parametrar för omkrypteringsmotstånd."
 
-#: lib/luks2/luks2_reencrypt.c:2872
+#: lib/luks2/luks2_reencrypt.c:2888
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "Flyttat segment för stor. Begärd storlek %<PRIu64>, tillgänglig storlek för: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2959
+#: lib/luks2/luks2_reencrypt.c:2977
 msgid "Failed to clear table."
 msgstr "Misslyckades med att rensa tabellen."
 
-#: lib/luks2/luks2_reencrypt.c:3045
+#: lib/luks2/luks2_reencrypt.c:3063
+#, c-format
+msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
+msgstr "Dataskiftning (%<PRIu64> sektorer) är mindre än framtida dataförskjutning (%<PRIu64> sektorer)."
+
+#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
 msgid "Reduced data size is larger than real device size."
 msgstr "Minskad datastorlek är större än den riktiga enhetsstorleken."
 
-#: lib/luks2/luks2_reencrypt.c:3052
+#: lib/luks2/luks2_reencrypt.c:3095
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Dataenhet är inte justerad till krypteringssektorstorlek (%<PRIu32> byte)."
 
-#: lib/luks2/luks2_reencrypt.c:3086
-#, c-format
-msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
-msgstr "Dataskiftning (%<PRIu64> sektorer) är mindre än framtida dataförskjutning (%<PRIu64> sektorer)."
-
-#: lib/luks2/luks2_reencrypt.c:3093 lib/luks2/luks2_reencrypt.c:3591
-#: lib/luks2/luks2_reencrypt.c:3612
+#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
+#: lib/luks2/luks2_reencrypt.c:3661
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Misslyckades med att öppna %s i exklusivt läge (redan mappad eller monterad)."
 
-#: lib/luks2/luks2_reencrypt.c:3282
+#: lib/luks2/luks2_reencrypt.c:3332
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Enheten är inte markerad för LUKS2-omkryptering."
 
-#: lib/luks2/luks2_reencrypt.c:3299 lib/luks2/luks2_reencrypt.c:4273
+#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Misslyckades med att läsa in LUKS2-omkrypteringskontext."
 
-#: lib/luks2/luks2_reencrypt.c:3389
-msgid "Failed to get reencryption state."
-msgstr "Misslyckades med att erhålla status för omkryptering."
-
-#: lib/luks2/luks2_reencrypt.c:3393 lib/luks2/luks2_reencrypt.c:3707
+#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
 msgid "Device is not in reencryption."
 msgstr "Enheten är inte i omkryptering."
 
-#: lib/luks2/luks2_reencrypt.c:3400 lib/luks2/luks2_reencrypt.c:3714
+#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
 msgid "Reencryption process is already running."
 msgstr "Omkrypteringsprocessen pågår redan."
 
-#: lib/luks2/luks2_reencrypt.c:3402 lib/luks2/luks2_reencrypt.c:3716
+#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
 msgid "Failed to acquire reencryption lock."
 msgstr "Misslyckades med att erhålla skrivlås för omkryptering."
 
-#: lib/luks2/luks2_reencrypt.c:3420
+#: lib/luks2/luks2_reencrypt.c:3468
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Det går inte att fortsätta med omkryptering. Kör återställning av omkryptering först."
 
-#: lib/luks2/luks2_reencrypt.c:3555
+#: lib/luks2/luks2_reencrypt.c:3604
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Aktiv enhetsstorlek och begärd omkrypteringsstorlek skiljer sig åt."
 
-#: lib/luks2/luks2_reencrypt.c:3569
+#: lib/luks2/luks2_reencrypt.c:3618
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "Ogiltig enhetsstorlek begärd i omkrypteringsparametrarna."
 
-#: lib/luks2/luks2_reencrypt.c:3646
+#: lib/luks2/luks2_reencrypt.c:3720
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Omkryptering pågår redan. Det går inte att utföra återhämtning."
 
-#: lib/luks2/luks2_reencrypt.c:3814
+#: lib/luks2/luks2_reencrypt.c:3741
+msgid "LUKS2 reencryption recovery failed."
+msgstr "Misslyckades med återhämtning av LUKS2-omkryptering."
+
+#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+msgid "Failed to initialize reencryption device stack."
+msgstr "Misslyckades med att initiera listan för omkrypteringsenheter."
+
+#: lib/luks2/luks2_reencrypt.c:3907
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "LUKS2-omkryptering är redan initierad i metadata."
 
-#: lib/luks2/luks2_reencrypt.c:3821
+#: lib/luks2/luks2_reencrypt.c:3915
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Misslyckades med att initiera LUKS2-omkryptering i metadata."
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:3909
+#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
+#: lib/luks2/luks2_reencrypt.c:4030
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Omkryptering stöds inte för DAX-enheter (persistent minne)."
 
-#: lib/luks2/luks2_reencrypt.c:3881
-msgid "Failed to read passphrase from keyring."
-msgstr "Misslyckades med att läsa lösenfras från nyckelring."
-
-#: lib/luks2/luks2_reencrypt.c:3938
+#: lib/luks2/luks2_reencrypt.c:4059
 msgid "Failed to set device segments for next reencryption hotzone."
-msgstr "Misslyckades med sätta enhetssegment för nästa varm zon-omkryptering."
+msgstr "Misslyckades med att sätta enhetssegment för nästa varmzon-omkryptering."
 
-#: lib/luks2/luks2_reencrypt.c:3990
+#: lib/luks2/luks2_reencrypt.c:4112
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Misslyckades med att skriva motståndsmetadata för omkryptering."
 
-#: lib/luks2/luks2_reencrypt.c:3997
+#: lib/luks2/luks2_reencrypt.c:4119
 msgid "Decryption failed."
 msgstr "Avkryptering misslyckades."
 
-#: lib/luks2/luks2_reencrypt.c:4002
+#: lib/luks2/luks2_reencrypt.c:4124
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
-msgstr "Misslyckades med att skriva område för varm zon med början vid %<PRIu64>."
+msgstr "Misslyckades med att skriva område för varmzon med början vid %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4007
+#: lib/luks2/luks2_reencrypt.c:4129
 msgid "Failed to sync data."
 msgstr "Misslyckades med att synkronisera data."
 
-#: lib/luks2/luks2_reencrypt.c:4015
+#: lib/luks2/luks2_reencrypt.c:4137
 msgid "Failed to update metadata after current reencryption hotzone completed."
-msgstr "Misslyckades med att uppdatera metadata efter aktuell varm zon för omkrypteringär färdigställd."
+msgstr "Misslyckades med att uppdatera metadata efter att aktuell varmzon för omkryptering är färdigställd."
 
-#: lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:4226
 msgid "Failed to write LUKS2 metadata."
 msgstr "Misslyckades med att skriva LUKS2-metadata."
 
-#: lib/luks2/luks2_reencrypt.c:4127
+#: lib/luks2/luks2_reencrypt.c:4249
 msgid "Failed to wipe unused data device area."
 msgstr "Misslyckades med att radera oanvänt område på dataenheten."
 
-#: lib/luks2/luks2_reencrypt.c:4133
+#: lib/luks2/luks2_reencrypt.c:4255
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Misslyckades med att ta bort oanvänd (obunden) nyckelplats %d."
 
-#: lib/luks2/luks2_reencrypt.c:4143
+#: lib/luks2/luks2_reencrypt.c:4265
 msgid "Failed to remove reencryption keyslot."
 msgstr "Misslyckades med att ta bort nyckelplats för omkryptering."
 
-#: lib/luks2/luks2_reencrypt.c:4153
+#: lib/luks2/luks2_reencrypt.c:4275
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Ödesdigert fel vid omkrypteringschunk med start vid %<PRIu64>, %<PRIu64> sektorer lång."
 
-#: lib/luks2/luks2_reencrypt.c:4157
+#: lib/luks2/luks2_reencrypt.c:4279
 msgid "Online reencryption failed."
 msgstr "Misslyckades med omkryptering."
 
-#: lib/luks2/luks2_reencrypt.c:4162
+#: lib/luks2/luks2_reencrypt.c:4284
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Återuppta inte enheten om inte den ersatts med felmål manuellt."
 
-#: lib/luks2/luks2_reencrypt.c:4214
+#: lib/luks2/luks2_reencrypt.c:4336
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Det går inte att fortsätta med omkryptering. Oväntat omkrypteringsläge."
 
-#: lib/luks2/luks2_reencrypt.c:4220
+#: lib/luks2/luks2_reencrypt.c:4342
 msgid "Missing or invalid reencrypt context."
 msgstr "Saknat eller ogiltigt omkrypteringskontext."
 
-#: lib/luks2/luks2_reencrypt.c:4227
-msgid "Failed to initialize reencryption device stack."
-msgstr "Misslyckades med att initiera listan för omkrypteringsenheter."
-
-#: lib/luks2/luks2_reencrypt.c:4249 lib/luks2/luks2_reencrypt.c:4286
+#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
 msgid "Failed to update reencryption context."
 msgstr "Misslyckades med att uppdatera omkrypteringskontext."
 
-#: lib/luks2/luks2_reencrypt_digest.c:408
+#: lib/luks2/luks2_reencrypt_digest.c:401
 msgid "Reencryption metadata is invalid."
 msgstr "Omkryperingsmetadata är ogiltigt."
 
-#: lib/luks2/hw_opal/hw_opal.c:328
+#: lib/luks2/hw_opal/hw_opal.c:335
 #, c-format
 msgid "OPAL range %d offset %<PRIu64> does not match expected values %<PRIu64>."
 msgstr "OPAL-omfång %d förskjutning %<PRIu64> överensstämmer inte förväntade värden %<PRIu64>."
 
-#: lib/luks2/hw_opal/hw_opal.c:335
+#: lib/luks2/hw_opal/hw_opal.c:342
 #, c-format
 msgid "OPAL range %d length %<PRIu64> does not match device length %<PRIu64>."
 msgstr "OPAL-omfång %d längd %<PRIu64> överensstämmer inte med underliggande enhetslängd %<PRIu64>."
 
-#: lib/luks2/hw_opal/hw_opal.c:341
+#: lib/luks2/hw_opal/hw_opal.c:348
 #, c-format
 msgid "OPAL range %d locking is disabled."
-msgstr "OPAL range %d låsning är inaktiverad."
+msgstr "Låsning för OPAL-område %d är inaktiverad."
 
-#: lib/luks2/hw_opal/hw_opal.c:351 lib/luks2/hw_opal/hw_opal.c:358
+#: lib/luks2/hw_opal/hw_opal.c:358 lib/luks2/hw_opal/hw_opal.c:365
 #, c-format
 msgid "Unexpected OPAL range %d lock state."
 msgstr "Oväntat låsstatus för OPAL-område %d."
 
-#: src/cryptsetup.c:80
+#: src/cryptsetup.c:87
 msgid "Keyslot encryption parameters can be set only for LUKS2 device."
 msgstr "Krypteringsparametrar för nyckelplatser stöds endast av LUKS2-enheter."
 
-#: src/cryptsetup.c:123 src/cryptsetup.c:2238
-#, c-format
-msgid "Enter token PIN: "
-msgstr "Ange token-PIN: "
-
-#: src/cryptsetup.c:125 src/cryptsetup.c:2240
-#, c-format
-msgid "Enter token %d PIN: "
-msgstr "Ange token-PIN %d : "
+#: src/cryptsetup.c:93
+msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
+msgstr "Krypteringsparametrar för nyckelplatser är inte kompatibla med LUKS2-nyckelplatskryptering."
 
-#: src/cryptsetup.c:183 src/cryptsetup.c:1169 src/cryptsetup.c:1519
-#: src/utils_reencrypt.c:1133 src/utils_reencrypt_luks1.c:504
-#: src/utils_reencrypt_luks1.c:567
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
+#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Inget känt chifferspecifikationsmönster kunde identifieras."
 
-#: src/cryptsetup.c:193
+#: src/cryptsetup.c:160
 #, c-format
 msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions."
 msgstr "VARNING: Använder standardalternativ för chiffer (%s-%s, nyckelstorlek %u bitar) som kan vara inkompatibla med äldre versioner."
 
-#: src/cryptsetup.c:198
+#: src/cryptsetup.c:165
 #, c-format
 msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions."
 msgstr "VARNING: Använder standardalternativ för hash (%s) som kan vara inkompatibla med äldre versioner."
 
-#: src/cryptsetup.c:202
-msgid "For plain mode, always use options --cipher, --key-size and if no keyfile is used, then also --hash."
-msgstr "I vanligt läge ska du alltid använda alternativen --cipher, --key-size och om ingen nyckelfil används, även --hash."
+#: src/cryptsetup.c:169
+msgid "For plain mode, always use options --cipher, --key-size and if no keyfile or keyring is used, then also --hash."
+msgstr "I vanligt läge ska du alltid använda alternativen --cipher, --key-size och om ingen nyckelfil eller nyckelring används, även --hash."
 
-#: src/cryptsetup.c:208
+#: src/cryptsetup.c:175
 msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n"
 msgstr "VARNING: parametern --hash ignoreras i plain-läge med specificerad nyckelfil.\n"
 
-#: src/cryptsetup.c:216
+#: src/cryptsetup.c:189
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "VARNING: flaggan --keyfile-size ignoreras, lässtorleken är densamma som storleken för krypteringsnyckeln.\n"
 
-#: src/cryptsetup.c:253 src/cryptsetup.c:1364 src/cryptsetup.c:1562
-#: src/integritysetup.c:184 src/utils_reencrypt.c:1342
+#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
+#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Blkid-sökning misslyckades för %s."
 
-#: src/cryptsetup.c:259
+#: src/cryptsetup.c:232
 #, c-format
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Identfierar enhetssignatur(er) på %s. Att fortsätta kan skada befintlig data."
 
-#: src/cryptsetup.c:265 src/cryptsetup.c:1252 src/cryptsetup.c:1300
-#: src/cryptsetup.c:1371 src/cryptsetup.c:1496 src/cryptsetup.c:1574
-#: src/cryptsetup.c:2618 src/cryptsetup.c:3044 src/integritysetup.c:174
-#: src/utils_reencrypt.c:125 src/utils_reencrypt.c:301
-#: src/utils_reencrypt.c:759
+#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
+#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
+#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
+#: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
 msgstr "Åtgärd avbruten.\n"
 
-#: src/cryptsetup.c:338
+#: src/cryptsetup.c:323
 msgid "Option --key-file is required."
 msgstr "Flaggan --key-file krävs."
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:377
 msgid "Enter VeraCrypt PIM: "
 msgstr "Ange VeraCrypt PIM: "
 
-#: src/cryptsetup.c:398
+#: src/cryptsetup.c:386
 msgid "Invalid PIM value: parse error."
 msgstr "Ogiltigt PIM-värde:tolkningsfel."
 
-#: src/cryptsetup.c:401
+#: src/cryptsetup.c:389
 msgid "Invalid PIM value: 0."
 msgstr "Ogiltigt PIM-värde: 0."
 
-#: src/cryptsetup.c:404
+#: src/cryptsetup.c:392
 msgid "Invalid PIM value: outside of range."
 msgstr "Ogiltigt PIM-värde:utanför intervallet."
 
-#: src/cryptsetup.c:427
+#: src/cryptsetup.c:415
 msgid "No device header detected with this passphrase."
 msgstr "Inget enhetshuvud finns tillgängligt med denna lösenfras."
 
-#: src/cryptsetup.c:500 src/cryptsetup.c:676
+#: src/cryptsetup.c:492 src/cryptsetup.c:677
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "Enheten %s är inte en giltig BITLK-enhet."
 
-#: src/cryptsetup.c:508
+#: src/cryptsetup.c:500
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "Det går inte att avgöra volymens nyckelstorlek för BTLK, använd flaggan --key-size."
 
-#: src/cryptsetup.c:550
+#: src/cryptsetup.c:546
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2153,7 +2238,7 @@ msgstr ""
 "som tillåter åtkomst till krypterad partition utan lösenfras.\n"
 "Denna utskrift bör alltid lagras krypterad på ett säkert ställe."
 
-#: src/cryptsetup.c:617 src/cryptsetup.c:698 src/cryptsetup.c:2643
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2163,112 +2248,112 @@ msgstr ""
 "som tillåter åtkomst till krypterad partition utan lösenfras.\n"
 "Denna utskrift bör alltid lagras krypterad på ett säkert ställe."
 
-#: src/cryptsetup.c:753 src/cryptsetup.c:783
+#: src/cryptsetup.c:754 src/cryptsetup.c:786
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "Enheten %s är inte en giltig FVULT2-enhet."
 
-#: src/cryptsetup.c:791
+#: src/cryptsetup.c:794
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Det går inte att avgöra volymens nyckelstorlek för FAVULT2, använd flaggan --key-size."
 
-#: src/cryptsetup.c:845 src/veritysetup.c:310 src/integritysetup.c:396
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Enheten %s är fortfarande aktiv och schemalagd för uppskjuten borttagning.\n"
 
-#: src/cryptsetup.c:879 src/cryptsetup.c:1899 src/cryptsetup.c:2173
-#: src/cryptsetup.c:2327 src/cryptsetup.c:2774 src/cryptsetup.c:2856
-#: src/cryptsetup.c:3382
+#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
+#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
+#: src/cryptsetup.c:3264
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Misslyckades med att sätta extern sökväg till tokens %s."
 
-#: src/cryptsetup.c:888
+#: src/cryptsetup.c:890
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Att ändra storlek på aktiv enhet kräver volymnyckel i nyckelringen, men -flaggan --disable-keyring är angiven."
 
-#: src/cryptsetup.c:1048
+#: src/cryptsetup.c:1059
 msgid "Benchmark interrupted."
 msgstr "Prestandamätning avbruten."
 
-#: src/cryptsetup.c:1069
+#: src/cryptsetup.c:1080
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     N/A\n"
 
-#: src/cryptsetup.c:1071
+#: src/cryptsetup.c:1082
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u iterationer per sekund för %zu-bitnyckel\n"
 
-#: src/cryptsetup.c:1085
+#: src/cryptsetup.c:1096
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s N/A\n"
 
-#: src/cryptsetup.c:1087
+#: src/cryptsetup.c:1098
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u iterationer, %5u minne, %1u parallella trådar (CPU:er) för %zu-bitnyckelplats (begärde %u ms)\n"
 
-#: src/cryptsetup.c:1111
+#: src/cryptsetup.c:1122
 msgid "Result of benchmark is not reliable."
 msgstr "Resultat från prestandamätningen är inte pålitligt."
 
-#: src/cryptsetup.c:1161
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Tester är ungefärliga och använder endast minne (ingen lagrings-IO).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1186
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algoritm |       Nyckel |      Kryptering |      Avkryptering\n"
 
-#: src/cryptsetup.c:1194
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Chiffret %s (med nyckel av %i bitar) är inte tillgängligt."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1213
+#: src/cryptsetup.c:1224
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algoritm |       Nyckel |      Kryptering |      AVkryptering\n"
 
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1235
 msgid "N/A"
 msgstr "N/A"
 
-#: src/cryptsetup.c:1249
+#: src/cryptsetup.c:1260
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
 msgstr ""
-"Oskyddad LUKS2-omkryperingsmetadata identiferad. Vänligen verifiera att  omkryperingsåtgärden behövs (se luksDump-utdata)\n"
-"och fortsätt (uppgradera metadata) endast om du anser åtgärden som behövd."
+"Oskyddad LUKS2-omkrypteringsmetadata identifierad. Vänligen verifiera att omkrypteringsåtgärden behövs (se luksDump-utdata)\n"
+"och fortsätt (uppgradera metadata) endast om du anser åtgärden behövd."
 
-#: src/cryptsetup.c:1255
+#: src/cryptsetup.c:1266
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Ange lösenfras för att skydda och uppgradera omkrypteringmetadata: "
 
-#: src/cryptsetup.c:1299
+#: src/cryptsetup.c:1310
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Vill du verkligen fortsätta med LUKS2-omkrypteringsåterställning?"
 
-#: src/cryptsetup.c:1308
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Ange lösenfras för att verifiera sammandrag för metadata-omkryp: "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1321
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Ange lösenfras för omkrypteringsåterhämtning: "
 
-#: src/cryptsetup.c:1370
+#: src/cryptsetup.c:1383
 msgid "Really try to repair LUKS device header?"
 msgstr "Vill du verkligen försöka att reparera LUKS-enhetshuvud?"
 
-#: src/cryptsetup.c:1394 src/integritysetup.c:76 src/integritysetup.c:234
+#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2276,164 +2361,175 @@ msgstr ""
 "\n"
 "Skrivning avbruten."
 
-#: src/cryptsetup.c:1399 src/integritysetup.c:81 src/integritysetup.c:271
+#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
 msgstr ""
 "Rensar enheten för att initialisera kontrollsumma för integritet.\n"
-"Du kan avbryta detta genom att trycka ned CTRL+c (resten av den ej rensade enheten kommer att innehålla en ogiltigt kontrollsumma).\n"
+"Du kan avbryta detta genom att trycka ned CTRL+c (resten av den inte rensade enheten kommer att innehålla en ogiltigt kontrollsumma).\n"
 
-#: src/cryptsetup.c:1421 src/integritysetup.c:103
+#: src/cryptsetup.c:1438 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Det går inte att inaktivera temporär enhet %s."
 
-#: src/cryptsetup.c:1476
+#: src/cryptsetup.c:1486
+msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
+msgstr "OPAL hw-only-kryptering stöder inte --cipher och --key-size, flaggorna ignoreras."
+
+#: src/cryptsetup.c:1499
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Flaggan för integritet kan endast användas för formatet LUKS2."
 
-#: src/cryptsetup.c:1481 src/cryptsetup.c:1546
+#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Flaggorna för storlekar på LUKS2-metadata stöds inte."
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1509
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL stöds endast för formatet LUKS2."
 
-#: src/cryptsetup.c:1495
+#: src/cryptsetup.c:1514
+msgid "Inline hw tags are supported only for LUKS2 format."
+msgstr "Inline-hårdvarutaggar stöds endast för formatet LUKS2."
+
+#: src/cryptsetup.c:1523
 msgid "Header file does not exist, do you want to create it?"
-msgstr "Deklarationsfilen existerar inte, vill du skapa den?"
+msgstr "Huvudfilen finns inte, vill du skapa den?"
 
-#: src/cryptsetup.c:1503
+#: src/cryptsetup.c:1531
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Det går inte att skapa huvudfil %s."
 
-#: src/cryptsetup.c:1526 src/integritysetup.c:131 src/integritysetup.c:139
-#: src/integritysetup.c:148 src/integritysetup.c:311 src/integritysetup.c:319
-#: src/integritysetup.c:329
+#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
+#: src/integritysetup.c:340
 msgid "No known integrity specification pattern detected."
 msgstr "Inga kända integritetspecifikationsmönster identifierat."
 
-#: src/cryptsetup.c:1539
+#: src/cryptsetup.c:1559
+msgid "Cannot use specified integrity key size."
+msgstr "Det går inte att använda angiven integritetsnyckelstorlek."
+
+#: src/cryptsetup.c:1577
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Det går inte att använda %s som diskhuvud."
 
-#: src/cryptsetup.c:1568 src/integritysetup.c:168
+#: src/cryptsetup.c:1606 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Detta kommer att skriva över data på %s och går inte att ångra."
 
-#: src/cryptsetup.c:1605
+#: src/cryptsetup.c:1643
 msgid "OPAL Admin password cannot be empty."
-msgstr "OPAL Admin-lösenordet kan inte vara tomt."
+msgstr "Det går inte att ha ett tomt OPAL Admin-lösenord."
 
-#: src/cryptsetup.c:1619 src/cryptsetup.c:2190 src/cryptsetup.c:2340
-#: src/cryptsetup.c:2500 src/cryptsetup.c:2566 src/utils_reencrypt_luks1.c:430
+#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
+#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Misslyckades med att sätta pbkdf-parametrar."
 
-#: src/cryptsetup.c:1751
-msgid "Type specification in --link-vk-to-keyring keyring specification is ignored."
-msgstr "Typspecifikationen i --link-vk-to-keyring keyring-specifikationen ignoreras."
-
-#: src/cryptsetup.c:1816
-msgid "Key types have to be the same for both volume keys."
-msgstr "Tangenttyperna måste vara desamma för båda volymknapparna."
-
-#: src/cryptsetup.c:1821
-msgid "Both volume keys have to be linked to the same keyring."
-msgstr "Båda volymnycklarna måste vara kopplade till samma nyckelring."
-
-#: src/cryptsetup.c:1831
-msgid "You need to supply more key names."
-msgstr "Du måste ange fler nyckelnamn."
-
-#: src/cryptsetup.c:1835
-msgid "Invalid --link-vk-to-keyring value."
-msgstr "Ogiltigt värde för --link-vk-to-keyring."
-
-#: src/cryptsetup.c:1880
+#: src/cryptsetup.c:1788
 msgid "Reduced data offset is allowed only for detached LUKS header."
-msgstr "Förminskad dataoffset endast tillåtet för fristående LUKS-huvuden."
+msgstr "Förminskad dataförskjutning är endast tillåten för fristående LUKS-huvuden."
 
-#: src/cryptsetup.c:1887
+#: src/cryptsetup.c:1795
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
-msgstr "LUKS file container %s är för liten för att kunna aktiveras, det finns inget kvarvarande utrymme för data."
+msgstr "LUKS-filcontainern %s är för liten för att kunna aktiveras, det finns inget kvarvarande utrymme för data."
 
-#: src/cryptsetup.c:1914 src/cryptsetup.c:2346
+#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
+#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Det går inte att avgöra volymens nyckelstorlek för LUKS utan nyckelplatser, använd flaggen --key-size."
 
-#: src/cryptsetup.c:1981
+#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+msgid "Device requires two volume keys."
+msgstr "Enheten kräver två volymnycklar."
+
+#: src/cryptsetup.c:1891
+msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
+msgstr "Vissa angivna aktiveringsparametrar ignorerades med OPAL hw-only-kryptering."
+
+#: src/cryptsetup.c:1896
 msgid "Device activated but cannot make flags persistent."
-msgstr "Enheten aktiverad men kan inte spara undan flaggorna."
+msgstr "Enheten aktiverades men det går inte att spara undan flaggorna."
 
-#: src/cryptsetup.c:2065 src/cryptsetup.c:2133
+#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Nyckelplats %d markerad för borttagning."
 
-#: src/cryptsetup.c:2077 src/cryptsetup.c:2137
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Detta är sista nyckelplatsen. Enheten kommer att bli oanvändbar efter att denna nyckel tagits bort."
 
-#: src/cryptsetup.c:2078
+#: src/cryptsetup.c:1989
 msgid "Enter any remaining passphrase: "
 msgstr "Ange eventuell återstående lösenfras: "
 
-#: src/cryptsetup.c:2079 src/cryptsetup.c:2139
+#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Åtgärden avbröts, nyckelplatsen raderades INTE.\n"
 
-#: src/cryptsetup.c:2115
+#: src/cryptsetup.c:2026
 msgid "Enter passphrase to be deleted: "
 msgstr "Ange lösenfras att ta bort: "
 
-#: src/cryptsetup.c:2165 src/cryptsetup.c:2549 src/cryptsetup.c:3206
-#: src/cryptsetup.c:3373
+#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
+#: src/cryptsetup.c:3255
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Enheten %s är inte en giltig LUKS2-enhet."
 
-#: src/cryptsetup.c:2204 src/cryptsetup.c:2423
+#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
 msgid "Enter new passphrase for key slot: "
 msgstr "Ange ny lösenfras för nyckelplats: "
 
-#: src/cryptsetup.c:2306
+#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#, c-format
+msgid "Enter token PIN: "
+msgstr "Ange token-PIN: "
+
+#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#, c-format
+msgid "Enter token %d PIN: "
+msgstr "Ange token-PIN %d: "
+
+#: src/cryptsetup.c:2210
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
-msgstr "VARNING: parametern --key-slot används för nytt nyckelplatstal.\n"
+msgstr "VARNING: parametern --key-slot används för nytt nyckelplatsnummer.\n"
 
-#: src/cryptsetup.c:2379 src/utils_reencrypt_luks1.c:1096
+#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Ange valfri existerande lösenfras: "
 
-#: src/cryptsetup.c:2504
+#: src/cryptsetup.c:2383
 msgid "Enter passphrase to be changed: "
 msgstr "Ange lösenfras att ändra: "
 
-#: src/cryptsetup.c:2520 src/utils_reencrypt_luks1.c:1082
+#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Ange ny lösenfras: "
 
-#: src/cryptsetup.c:2570
+#: src/cryptsetup.c:2449
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Ange lösenfras för nyckelplats att konvertera: "
 
-#: src/cryptsetup.c:2594
+#: src/cryptsetup.c:2473
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Endast ett enhetsargument för operationen isLuks stöds."
 
-#: src/cryptsetup.c:2702
+#: src/cryptsetup.c:2578
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Nyckelplats %d innehåller inte obunden nyckel."
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2583
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2441,52 +2537,52 @@ msgstr ""
 "Utskrift av huvudet med obunden nyckel är känslig information.\n"
 "Denna utskrift bör alltid lagras krypterad på ett säkert ställe."
 
-#: src/cryptsetup.c:2802 src/cryptsetup.c:2839
+#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s är inte ett aktivt %s-enhetsnamn."
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2709
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s är inte ett aktivt LUKS-enhetsnamn eller så saknas deklaration."
 
-#: src/cryptsetup.c:2912 src/cryptsetup.c:2931
+#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
 msgid "Option --header-backup-file is required."
 msgstr "Flaggan --header-backup-file krävs."
 
-#: src/cryptsetup.c:2962
+#: src/cryptsetup.c:2836
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s är inte en cryptsetup-hanterad enhet."
 
-#: src/cryptsetup.c:2973
+#: src/cryptsetup.c:2847
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Att uppdatera stöds inte för enhetstypen %s"
 
-#: src/cryptsetup.c:3023
+#: src/cryptsetup.c:2897
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Okänd metadata för enhetstypen %s."
 
-#: src/cryptsetup.c:3025
+#: src/cryptsetup.c:2899
 msgid "Command requires device and mapped name as arguments."
 msgstr "Kommandot kräver enhet och mappat namn som argument."
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:2917
 msgid "Enter OPAL PSID: "
 msgstr "Ange OPAL PSID: "
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:2917
 msgid "Enter OPAL Admin password: "
 msgstr "Ange lösenord för OPAL Admin: "
 
-#: src/cryptsetup.c:3043
+#: src/cryptsetup.c:2925
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "VARNING: HELA disken kommer att fabriksåterställas och alla data kommer att gå förlorade! Fortsätta?"
 
-#: src/cryptsetup.c:3086
+#: src/cryptsetup.c:2968
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2495,351 +2591,363 @@ msgstr ""
 "Denna åtgärd kommer att ta bort alla nyckelplatser på enhet %s.\n"
 "Enheten kommer att bli oanvändbar efter denna åtgärd."
 
-#: src/cryptsetup.c:3093
+#: src/cryptsetup.c:2975
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Åtgärden avbryten, nyckelplatser raderades EJ.\n"
 
-#: src/cryptsetup.c:3132
+#: src/cryptsetup.c:3014
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Ogiltig LUKS-typ, endast luks1 och luks2 stöds."
 
-#: src/cryptsetup.c:3148
+#: src/cryptsetup.c:3030
 #, c-format
 msgid "Device is already %s type."
 msgstr "Enheten är redan av %s-typ."
 
-#: src/cryptsetup.c:3155
+#: src/cryptsetup.c:3037
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Denna åtgärd kommer att konvertera %s till %s-format.\n"
 
-#: src/cryptsetup.c:3158
+#: src/cryptsetup.c:3040
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Åtgärden avbröts, enheten konverterades INTE.\n"
 
-#: src/cryptsetup.c:3198
+#: src/cryptsetup.c:3080
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Saknar flaggan --priority, --label eller --subsystem."
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3272 src/cryptsetup.c:3292
+#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d är ogiltig."
 
-#: src/cryptsetup.c:3235 src/cryptsetup.c:3295
+#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d används."
 
-#: src/cryptsetup.c:3247
+#: src/cryptsetup.c:3129
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Misslyckades med att lägga till luks2-nyckelringsstoken %d."
 
-#: src/cryptsetup.c:3258 src/cryptsetup.c:3321
+#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Misslyckades med att tilldela token %d till nyckelplats %d."
 
-#: src/cryptsetup.c:3275
+#: src/cryptsetup.c:3157
 #, c-format
 msgid "Token %d is not in use."
-msgstr "Token %d används ej."
+msgstr "Token %d används inte."
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3194
 msgid "Failed to import token from file."
 msgstr "Misslyckades med att importera token från fil."
 
-#: src/cryptsetup.c:3337
+#: src/cryptsetup.c:3219
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Misslyckades med att hämta token %d för export."
 
-#: src/cryptsetup.c:3350
+#: src/cryptsetup.c:3232
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d är inte tilldelad till nyckelplats %d."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3359
+#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Misslyckades med att ta bort tilldelningen av token %d från nyckelplats %d."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3300
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Flaggorna --tcrypt-hidden, --tcrypt-system eller --tcrypt-backup stöds endast på TCRYPT-enhet."
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3303
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Flaggan --veracrypt eller --disable-veracrypt stöds endast för TCRYPT-enhetstyper."
 
-#: src/cryptsetup.c:3424
+#: src/cryptsetup.c:3306
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Flaggan --veracrypt-pim stöds endast för VeraCrypt-kompatibla enheter."
 
-#: src/cryptsetup.c:3428
+#: src/cryptsetup.c:3310
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Flaggan --veracrypt-query-pim stöds endast för VeraCrypt-kompatibla enheter."
 
-#: src/cryptsetup.c:3430
+#: src/cryptsetup.c:3312
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Flaggorna --veracrypt-pim och --veracrypt-query-pim är ömsesidigt uteslutande."
 
-#: src/cryptsetup.c:3439
+#: src/cryptsetup.c:3321
 msgid "Option --persistent is not allowed with --test-passphrase."
-msgstr "Flaggan --persistent är ej tillåtet med --test-passphrase."
+msgstr "Flaggan --persistent är inte tillåtet med --test-passphrase."
 
-#: src/cryptsetup.c:3442
+#: src/cryptsetup.c:3324
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Flaggorna --refresh och --test-passphrase är ömsesidigt uteslutande."
 
-#: src/cryptsetup.c:3445
+#: src/cryptsetup.c:3327
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Flaggan --shared är endast tillåten för öppning av plain-enhet."
 
-#: src/cryptsetup.c:3448
+#: src/cryptsetup.c:3330
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Flaggan --skip stöds endast för öppning av plain-enheter och loopaes-enheter."
 
-#: src/cryptsetup.c:3451
+#: src/cryptsetup.c:3333
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Flaggan --offset med åtgärden öppna stöds endast för öppning av plain-enheter och loopaes-enheter."
 
-#: src/cryptsetup.c:3454
+#: src/cryptsetup.c:3336
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
-msgstr "Flaggan --tcrypt-hidden kan inte kombineras med --allow-discards."
+msgstr "Flaggan --error-as-corruption måste användas med --panic-on-corruption eller --restart-on-corruption."
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3340
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Flaggan för sektorstorlek med åtgärden öppna stöds endast för plain-enheter."
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3344
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Flaggan för stora IV-sektorer stöds endast för att öppna enheter av plain-typ med sektorstorlek större än 512 byte."
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3349
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Flaggan --test-passphrase är endast tillåten för open för LUKS-, TCRYPT-, BITLK- och FVAULT2-enheter."
 
-#: src/cryptsetup.c:3470 src/cryptsetup.c:3493
+#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
 msgid "Options --device-size and --size cannot be combined."
-msgstr "Flaggan  --device-size och --size kan inte kombineras."
+msgstr "Det går inte att kombinera flaggorna --device-size och --size."
 
-#: src/cryptsetup.c:3473
+#: src/cryptsetup.c:3355
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Flaggan --unbound är endast tillåten för öppning av luks-enhet."
 
-#: src/cryptsetup.c:3476
+#: src/cryptsetup.c:3358
 msgid "Option --unbound cannot be used without --test-passphrase."
-msgstr "Flaggan --unbound kan inte användas utan --test-passphrase."
+msgstr "Det går inte att använda flaggan --unbound utan --test-passphrase."
+
+#: src/cryptsetup.c:3362
+msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
+msgstr "Det går inte att kombinera flaggan --volume-key-keyring med --hash eller --volume-key-file."
+
+#: src/cryptsetup.c:3365
+msgid "Both --volume-key-file options must be paired with respective --key-size options."
+msgstr "Båda --volume-key-file-flaggorna måste paras med motsvarande --key-size-flaggor."
 
-#: src/cryptsetup.c:3485 src/veritysetup.c:658 src/integritysetup.c:754
+#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Flaggorna --cancel-deferred och --deferred går inte att använda samtidigt."
 
-#: src/cryptsetup.c:3501
-msgid "Options --reduce-device-size and --device-size cannot be combined."
-msgstr "Flaggan --reduce-device-size och --data-size kan inte kombineras."
-
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3390
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Flaggan --active-name kan endast anges för LUKS2-enheter."
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3393
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
-msgstr "Flaggan --active-name och --force-offline-reencrypt kan inte kombineras."
+msgstr "Det går inte att kombinera flaggorna --active-name och --force-offline-reencrypt."
 
-#: src/cryptsetup.c:3515 src/cryptsetup.c:3545
+#: src/cryptsetup.c:3396
+msgid "Options --new-volume-key-file and --keep-key cannot be combined."
+msgstr "Det går inte att kombinera flaggorna --new-volume-key-file och --keep-key."
+
+#: src/cryptsetup.c:3399
+msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
+msgstr "Det går inte att kombinera flaggorna --new-volume-key-keyring och --keep-key."
+
+#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
 msgid "Keyslot specification is required."
 msgstr "Specifikation för nyckelplats krävs."
 
-#: src/cryptsetup.c:3523
+#: src/cryptsetup.c:3415
 msgid "Options --align-payload and --offset cannot be combined."
-msgstr "Flaggan --align-payload och --offset kan inte kombineras."
+msgstr "Det går inte att kombinera flaggorna --align-payload och --offset."
 
-#: src/cryptsetup.c:3526
+#: src/cryptsetup.c:3418
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Flaggan --integrity-no-wipe kan endast användas för åtgärden formatera med integritetsutökningar."
 
-#: src/cryptsetup.c:3529
+#: src/cryptsetup.c:3421
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Endast en av flaggorna --use-[u]random är tillåten."
 
-#: src/cryptsetup.c:3537
+#: src/cryptsetup.c:3429
 msgid "Key size is required with --unbound option."
 msgstr "Nyckelstorlek krävs med flaggan --unbound."
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3449
 msgid "Invalid token action."
 msgstr "Ogiltig tokenåtgärd."
 
-#: src/cryptsetup.c:3560
+#: src/cryptsetup.c:3452
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "parametern --key-description krävs för åtgärden lägg till token."
 
-#: src/cryptsetup.c:3564 src/cryptsetup.c:3577
+#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Åtgärden kräver specifik token. Använd parametern --token-id."
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3460
 msgid "Option --unbound is valid only with token add action."
 msgstr "Flaggan --unbound kan endast användas tillsammans med åtgärden att lägga till token."
 
-#: src/cryptsetup.c:3570
+#: src/cryptsetup.c:3462
 msgid "Options --key-slot and --unbound cannot be combined."
-msgstr "Flaggan --key-slot och --unbound kan inte kombineras."
+msgstr "Det går inte att kombinera flaggorna --key-slot och --unbound."
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3467
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Åtgärden kräver specifik nyckelplats. Använd parametern --key-slot."
 
-#: src/cryptsetup.c:3591
+#: src/cryptsetup.c:3483
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<enhet> [--type <typ>] [<namn>]"
 
-#: src/cryptsetup.c:3591 src/veritysetup.c:478 src/integritysetup.c:531
+#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
 msgid "open device as <name>"
 msgstr "öppna enhet som <namn>"
 
-#: src/cryptsetup.c:3592 src/cryptsetup.c:3593 src/cryptsetup.c:3594
-#: src/veritysetup.c:479 src/veritysetup.c:480 src/integritysetup.c:532
-#: src/integritysetup.c:533 src/integritysetup.c:535
+#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
+#: src/integritysetup.c:553 src/integritysetup.c:555
 msgid "<name>"
 msgstr "<namn>"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:479 src/integritysetup.c:532
+#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
 msgid "close device (remove mapping)"
 msgstr "stäng enhet (ta bort mappning)"
 
-#: src/cryptsetup.c:3593 src/integritysetup.c:535
+#: src/cryptsetup.c:3485 src/integritysetup.c:555
 msgid "resize active device"
 msgstr "ändra storlek på aktiv enhet"
 
-#: src/cryptsetup.c:3594
+#: src/cryptsetup.c:3486
 msgid "show device status"
 msgstr "visa enhetsstatus"
 
-#: src/cryptsetup.c:3595
+#: src/cryptsetup.c:3487
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <chiffer>]"
 
-#: src/cryptsetup.c:3595
+#: src/cryptsetup.c:3487
 msgid "benchmark cipher"
 msgstr "prestandamät chiffer"
 
-#: src/cryptsetup.c:3596 src/cryptsetup.c:3597 src/cryptsetup.c:3598
-#: src/cryptsetup.c:3599 src/cryptsetup.c:3600 src/cryptsetup.c:3607
-#: src/cryptsetup.c:3608 src/cryptsetup.c:3609 src/cryptsetup.c:3610
-#: src/cryptsetup.c:3611 src/cryptsetup.c:3612 src/cryptsetup.c:3613
-#: src/cryptsetup.c:3614 src/cryptsetup.c:3615 src/cryptsetup.c:3616
+#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
+#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
 msgid "<device>"
 msgstr "<enhet>"
 
-#: src/cryptsetup.c:3596
+#: src/cryptsetup.c:3488
 msgid "try to repair on-disk metadata"
 msgstr "försök att reparera metadata på disken"
 
-#: src/cryptsetup.c:3597
+#: src/cryptsetup.c:3489
 msgid "reencrypt LUKS2 device"
 msgstr "omkryptering av LUKS2-enhet"
 
-#: src/cryptsetup.c:3598
+#: src/cryptsetup.c:3490
 msgid "erase all keyslots (remove encryption key)"
 msgstr "ta bort alla nyckelplatser (ta bort krypteringsnyckeln)"
 
-#: src/cryptsetup.c:3599
+#: src/cryptsetup.c:3491
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "konvertera LUKS från/till LUKS2-format"
 
-#: src/cryptsetup.c:3600
+#: src/cryptsetup.c:3492
 msgid "set permanent configuration options for LUKS2"
 msgstr "ange permanenta konfigurationsflaggor för LUKS2"
 
-#: src/cryptsetup.c:3601 src/cryptsetup.c:3602
+#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
 msgid "<device> [<new key file>]"
 msgstr "<enhet> [<ny nyckelfil>]"
 
-#: src/cryptsetup.c:3601
+#: src/cryptsetup.c:3493
 msgid "formats a LUKS device"
 msgstr "formaterar en LUKS-enhet"
 
-#: src/cryptsetup.c:3602
+#: src/cryptsetup.c:3494
 msgid "add key to LUKS device"
 msgstr "lägg till nyckel till LUKS-enhet"
 
-#: src/cryptsetup.c:3603 src/cryptsetup.c:3604 src/cryptsetup.c:3605
+#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
 msgid "<device> [<key file>]"
 msgstr "<enhet> [<nyckelfil>]"
 
-#: src/cryptsetup.c:3603
+#: src/cryptsetup.c:3495
 msgid "removes supplied key or key file from LUKS device"
 msgstr "tar bort angiven nyckel eller nyckelfil från LUKS-enhet"
 
-#: src/cryptsetup.c:3604
+#: src/cryptsetup.c:3496
 msgid "changes supplied key or key file of LUKS device"
 msgstr "ändrar angiven nyckel eller nyckelfil för LUKS-enhet"
 
-#: src/cryptsetup.c:3605
+#: src/cryptsetup.c:3497
 msgid "converts a key to new pbkdf parameters"
 msgstr "konverterar en nyckel till nya pbkdf-parametrar"
 
-#: src/cryptsetup.c:3606
+#: src/cryptsetup.c:3498
 msgid "<device> <key slot>"
 msgstr "<enhet> <nyckelplats>"
 
-#: src/cryptsetup.c:3606
+#: src/cryptsetup.c:3498
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "rensar nyckeln med nummer <nyckelplats> från LUKS-enhet"
 
-#: src/cryptsetup.c:3607
+#: src/cryptsetup.c:3499
 msgid "print UUID of LUKS device"
 msgstr "skriv ut UUID för LUKS-enhet"
 
-#: src/cryptsetup.c:3608
+#: src/cryptsetup.c:3500
 msgid "tests <device> for LUKS partition header"
 msgstr "testar <enhet> för LUKS-partitionshuvud"
 
-#: src/cryptsetup.c:3609
+#: src/cryptsetup.c:3501
 msgid "dump LUKS partition information"
 msgstr "skriver ut information om LUKS-partition"
 
-#: src/cryptsetup.c:3610
+#: src/cryptsetup.c:3502
 msgid "dump TCRYPT device information"
 msgstr "skriver ut information om TCRYPT-partition"
 
-#: src/cryptsetup.c:3611
+#: src/cryptsetup.c:3503
 msgid "dump BITLK device information"
 msgstr "skriv ut BITLK-enhetsinformation"
 
-#: src/cryptsetup.c:3612
+#: src/cryptsetup.c:3504
 msgid "dump FVAULT2 device information"
 msgstr "skriv ut FVAULT2-enhetsinformation"
 
-#: src/cryptsetup.c:3613
+#: src/cryptsetup.c:3505
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Försätt LUKS-enhet i vänteläge och rensa nyckel (alla in-/ut-åtgärder är frusna)"
 
-#: src/cryptsetup.c:3614
+#: src/cryptsetup.c:3506
 msgid "Resume suspended LUKS device"
 msgstr "Återuppta LUKS-enhet i vänteläge"
 
-#: src/cryptsetup.c:3615
+#: src/cryptsetup.c:3507
 msgid "Backup LUKS device header and keyslots"
 msgstr "Säkerhetskopiera huvud och nyckelplatser från LUKS-enhet"
 
-#: src/cryptsetup.c:3616
+#: src/cryptsetup.c:3508
 msgid "Restore LUKS device header and keyslots"
 msgstr "Återställ huvud och nyckelplatser för LUKS-enhet"
 
-#: src/cryptsetup.c:3617
+#: src/cryptsetup.c:3509
 msgid "<add|remove|import|export> <device>"
 msgstr "<läggtill|tabort|importera|exportera> <enhet>"
 
-#: src/cryptsetup.c:3617
+#: src/cryptsetup.c:3509
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipulera LUKS2-token"
 
-#: src/cryptsetup.c:3636 src/veritysetup.c:496 src/integritysetup.c:550
+#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2847,7 +2955,7 @@ msgstr ""
 "\n"
 "<åtgärd> är en av:\n"
 
-#: src/cryptsetup.c:3642
+#: src/cryptsetup.c:3534
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2859,7 +2967,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkOpen\n"
 
-#: src/cryptsetup.c:3646
+#: src/cryptsetup.c:3538
 #, c-format
 msgid ""
 "\n"
@@ -2874,7 +2982,7 @@ msgstr ""
 "<nyckelplats> är numret för LUKS-nyckelplatsen att ändra\n"
 "<nyckelfil> valfri nyckelfil för den nya nyckeln för luksAddKey-åtgärden\n"
 
-#: src/cryptsetup.c:3653
+#: src/cryptsetup.c:3545
 #, c-format
 msgid ""
 "\n"
@@ -2883,7 +2991,7 @@ msgstr ""
 "\n"
 "Inkompilerat standardmetadataformat är %s (för luksFormat-åtgärd).\n"
 
-#: src/cryptsetup.c:3658
+#: src/cryptsetup.c:3550
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -2891,12 +2999,12 @@ msgstr ""
 "\n"
 "Stödet för externa LUKS2-insticksmoduler är aktiverat.\n"
 
-#: src/cryptsetup.c:3659
+#: src/cryptsetup.c:3551
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Sökväg för externa LUKS2-insticksmoduler är %s.\n"
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3553
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -2904,7 +3012,7 @@ msgstr ""
 "\n"
 "Stödet för externa LUKS2-insticksmoduler är inaktiverat.\n"
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3557
 #, c-format
 msgid ""
 "\n"
@@ -2921,7 +3029,7 @@ msgstr ""
 "Standard-PBKDF för LUKS2: %s\n"
 "\tIterationstid: %d, Minne: %dkB, Parallella trådar: %d\n"
 
-#: src/cryptsetup.c:3676
+#: src/cryptsetup.c:3568
 #, c-format
 msgid ""
 "\n"
@@ -2936,110 +3044,122 @@ msgstr ""
 "\tplain: %s, Nyckel: %d bitar, Lösenordshashning: %s\n"
 "\tLUKS1: %s, Nyckel: %d bitar, LUKS-huvudhashning %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3685
+#: src/cryptsetup.c:3577
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Standardnyckelstorlek med XTS-läge (två interna nycklar) kommer att dubbleras.\n"
 
-#: src/cryptsetup.c:3703 src/veritysetup.c:638 src/integritysetup.c:710
+#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: kräver %s som argument"
 
-#: src/cryptsetup.c:3743 src/utils_reencrypt_luks1.c:1145
+#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Nyckelplatsen är ogiltig."
 
-#: src/cryptsetup.c:3771
+#: src/cryptsetup.c:3663
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Enhetsstorlek måste vara en multipel av sektor på 512-byte."
 
-#: src/cryptsetup.c:3776
+#: src/cryptsetup.c:3668
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Ogiltig högsta storlekspecifikation för varm zon-omkryptering."
 
-#: src/cryptsetup.c:3790 src/cryptsetup.c:3802
+#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Nyckelstorlek måste vara en multipel av 8 bitar"
 
-#: src/cryptsetup.c:3809
+#: src/cryptsetup.c:3689
+msgid "At most 2 key size specifications can be supplied."
+msgstr "Högst 2 specifikationer för nyckelstorlek kan anges."
+
+#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Högst %d specifikationer för volymnycklar kan anges."
 
-#: src/cryptsetup.c:3821
+#: src/cryptsetup.c:3741
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Högst %d specifikationer för nyckelringslänkar kan anges."
 
-#: src/cryptsetup.c:3830
+#: src/cryptsetup.c:3750
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Högsta förminskningsstorlek för enhet är 1 GiB."
 
-#: src/cryptsetup.c:3833
+#: src/cryptsetup.c:3753
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Minskningsstorlek måste vara en multipel av 512-bytesektor."
 
-#: src/cryptsetup.c:3850
+#: src/cryptsetup.c:3770
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Flaggan --priority kan endast vara ignore/normal/prefer."
 
-#: src/cryptsetup.c:3869 src/veritysetup.c:559 src/integritysetup.c:630
+#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
 msgid "Show this help message"
 msgstr "Visa detta hjälpmeddelande"
 
-#: src/cryptsetup.c:3870 src/veritysetup.c:560 src/integritysetup.c:631
+#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
 msgid "Display brief usage"
 msgstr "Visa kort information om användning"
 
-#: src/cryptsetup.c:3871 src/veritysetup.c:561 src/integritysetup.c:632
+#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
 msgid "Print package version"
 msgstr "Skriv ut paketversion"
 
-#: src/cryptsetup.c:3882 src/veritysetup.c:572 src/integritysetup.c:643
+#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
 msgid "Help options:"
 msgstr "Hjälpflaggor:"
 
-#: src/cryptsetup.c:3905 src/veritysetup.c:593 src/integritysetup.c:663
+#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[FLAGGA…] <åtgärd> <åtgärdsspecifik>"
 
-#: src/cryptsetup.c:3914 src/veritysetup.c:602 src/integritysetup.c:674
+#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
 msgid "Argument <action> missing."
 msgstr "Argumentet <åtgärd> saknas."
 
-#: src/cryptsetup.c:3993 src/veritysetup.c:633 src/integritysetup.c:705
+#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
 msgid "Unknown action."
 msgstr "Okänd åtgärd."
 
-#: src/cryptsetup.c:4011
+#: src/cryptsetup.c:3931
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Flaggan --key-file åsidosätter specificerade nyckelfilsargument."
 
-#: src/cryptsetup.c:4017
+#: src/cryptsetup.c:3937
 msgid "Only one --key-file argument is allowed."
 msgstr "Endast ett argument för --key-file är tillåtet."
 
-#: src/cryptsetup.c:4022
+#: src/cryptsetup.c:3942
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Password-based key derivation function (PBKDF) kan endast vara pbkdf2 eller argon2i/argon2id."
 
-#: src/cryptsetup.c:4027
+#: src/cryptsetup.c:3947
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Tvingade PBKDF-iterationer går inte att kombinera med flaggan iteration time."
 
-#: src/cryptsetup.c:4032
+#: src/cryptsetup.c:3952
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Det går inte att länka volymnyckeln till en nyckelring när nyckelringen är inaktiverad."
 
-#: src/cryptsetup.c:4043
+#: src/cryptsetup.c:3957
+msgid "Cannot use keyring key description when keyring is disabled."
+msgstr "Det går inte att använda nyckelringsnyckelbeskrivning när nyckelringen är inaktiverad."
+
+#: src/cryptsetup.c:3962
+msgid "Inline integrity must be used together with --integrity option."
+msgstr "Inline-integritet måste användas tillsammans med flaggan --integrity."
+
+#: src/cryptsetup.c:3973
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Flaggorna --keyslot-cipher och --keyslot-key-size måste användas tillsammans."
 
-#: src/cryptsetup.c:4051
+#: src/cryptsetup.c:3981
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Ingen åtgärd utfördes. Startades med flaggan --test-args\n"
 
-#: src/cryptsetup.c:4064
+#: src/cryptsetup.c:3994
 msgid "Cannot disable metadata locking."
 msgstr "Det går inte att inaktivera metadatalås."
 
@@ -3050,7 +3170,7 @@ msgstr "Angav ogiltig saltsträng."
 #: src/veritysetup.c:74
 #, c-format
 msgid "Cannot create hash image %s for writing."
-msgstr "Kan inte skapa hashavbild %s för skrivning."
+msgstr "Det går inte att skapa hashavbild %s för skrivning."
 
 #: src/veritysetup.c:84
 #, c-format
@@ -3060,79 +3180,79 @@ msgstr "Det går inte att skapa FEC-avbild %s för skrivning."
 #: src/veritysetup.c:123
 #, c-format
 msgid "Cannot create root hash file %s for writing."
-msgstr "Kan inte skapa root-hashfil %s för skrivning."
+msgstr "Det går inte att skapa root-hashfil %s för skrivning."
 
 #: src/veritysetup.c:130
 #, c-format
 msgid "Cannot write to root hash file %s."
 msgstr "Det går inte att skriva till root-hash-filen %s."
 
-#: src/veritysetup.c:185 src/veritysetup.c:463
+#: src/veritysetup.c:189 src/veritysetup.c:472
 #, c-format
 msgid "Device %s is not a valid VERITY device."
 msgstr "Enheten %s är inte en giltig VERITY-enhet."
 
-#: src/veritysetup.c:202 src/veritysetup.c:219
+#: src/veritysetup.c:206 src/veritysetup.c:223
 #, c-format
 msgid "Cannot read root hash file %s."
 msgstr "Det går inte att läsa rot-hash-filen %s."
 
-#: src/veritysetup.c:207
+#: src/veritysetup.c:211
 #, c-format
 msgid "Invalid root hash file %s."
 msgstr "Ogiltig rothashsträng %s."
 
-#: src/veritysetup.c:228
+#: src/veritysetup.c:232
 msgid "Invalid root hash string specified."
 msgstr "Angav ogiltig rothashsträng."
 
-#: src/veritysetup.c:236
+#: src/veritysetup.c:240
 #, c-format
 msgid "Invalid signature file %s."
 msgstr "Ogiltig signaturfil %s."
 
-#: src/veritysetup.c:243
+#: src/veritysetup.c:247
 #, c-format
 msgid "Cannot read signature file %s."
 msgstr "Det går inte att läsa signaturfilen %s."
 
-#: src/veritysetup.c:266 src/veritysetup.c:280
+#: src/veritysetup.c:270 src/veritysetup.c:287
 msgid "Command requires <root_hash> or --root-hash-file option as argument."
 msgstr "Kommandot kräver <root-hash> eller flaggan --root-hash-file som argument."
 
-#: src/veritysetup.c:476
+#: src/veritysetup.c:485
 msgid "<data_device> <hash_device>"
 msgstr "<dataenhet> <hashenhet>"
 
-#: src/veritysetup.c:476 src/integritysetup.c:530
+#: src/veritysetup.c:485 src/integritysetup.c:550
 msgid "format device"
 msgstr "formatera enhet"
 
-#: src/veritysetup.c:477
+#: src/veritysetup.c:486
 msgid "<data_device> <hash_device> [<root_hash>]"
 msgstr "<dataenhet> <hashenhet> <root_hash>"
 
-#: src/veritysetup.c:477
+#: src/veritysetup.c:486
 msgid "verify device"
 msgstr "verifiera enhet"
 
-#: src/veritysetup.c:478
+#: src/veritysetup.c:487
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<dataenhet> <namn> <hashenhet> [<root_hash>]"
 
-#: src/veritysetup.c:480 src/integritysetup.c:533
+#: src/veritysetup.c:489 src/integritysetup.c:553
 msgid "show active device status"
 msgstr "visa statistik för aktiv enhet"
 
-#: src/veritysetup.c:481
+#: src/veritysetup.c:490
 msgid "<hash_device>"
 msgstr "<hash_enhet>"
 
-#: src/veritysetup.c:481 src/integritysetup.c:534
+#: src/veritysetup.c:490 src/integritysetup.c:554
 msgid "show on-disk information"
 msgstr "visa information från disk"
 
-#: src/veritysetup.c:500
+#: src/veritysetup.c:509
 #, c-format
 msgid ""
 "\n"
@@ -3147,7 +3267,7 @@ msgstr ""
 "<hashenhet> är enheten som innehåller verifieringsdata\n"
 "<rothash> hash för rotnoden på <hashenhet>\n"
 
-#: src/veritysetup.c:507
+#: src/veritysetup.c:516
 #, c-format
 msgid ""
 "\n"
@@ -3158,46 +3278,54 @@ msgstr ""
 "Inkompilerade standardparametrar för dm-verity:\n"
 "\tHash: %s, Datablock (byte): %u, Hashblock (byte): %u, Saltstorlek: %u, Hashformat: %u\n"
 
-#: src/veritysetup.c:648
+#: src/veritysetup.c:657
 msgid "Option --ignore-corruption and --restart-on-corruption cannot be used together."
-msgstr "Flaggorna --ignore-corruption och --restart-on-corruption kan inte användas tillsammans."
+msgstr "Det går inte att använda flaggorna --ignore-corruption och --restart-on-corruption tillsammans."
 
-#: src/veritysetup.c:653
+#: src/veritysetup.c:662
 msgid "Option --panic-on-corruption and --restart-on-corruption cannot be used together."
 msgstr "Det går inte att använda flaggorna --panic-on-corruption och --restart-on-corruption tillsammans."
 
-#: src/integritysetup.c:164
+#: src/veritysetup.c:668
+msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
+msgstr "Det går inte att använda flaggorna --panic-on-corruption och --restart-on-corruption tillsammans."
+
+#: src/integritysetup.c:168
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
 "To preserve data device use --no-wipe option (and then activate with --integrity-recalculate)."
 msgstr ""
-"Det här kommer oåterkalligen tatt skriva över data på %s och %s.\n"
+"Det här kommer oåterkalleligt att skriva över data på %s och %s.\n"
 "För att bevara dataenheten använd flaggan --no-wipe (och aktivera sedan med --integrity-recalculate)."
 
-#: src/integritysetup.c:204
+#: src/integritysetup.c:213
 #, c-format
-msgid "Formatted with tag size %u, internal integrity %s.\n"
-msgstr "Formaterad med taggstorlek %u, intern integritet %s.\n"
+msgid "Formatted with tag size %u%s, internal integrity %s.\n"
+msgstr "Formaterad med taggstorlek %u%s, intern integritet %s.\n"
+
+#: src/integritysetup.c:214
+msgid " (inline hw tags)"
+msgstr " (inline-hårdvarutaggar)"
 
-#: src/integritysetup.c:285
+#: src/integritysetup.c:297
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
-msgstr "Att sätta flaggan för att räkna om stöds ej, överväg att använda --wipe istället."
+msgstr "Att sätta flaggan för att räkna om stöds inte, överväg att använda --wipe istället."
 
-#: src/integritysetup.c:360 src/integritysetup.c:517
+#: src/integritysetup.c:374 src/integritysetup.c:537
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Enheten %s är inte en giltig INTEGRITY-enhet."
 
-#: src/integritysetup.c:530 src/integritysetup.c:534
+#: src/integritysetup.c:550 src/integritysetup.c:554
 msgid "<integrity_device>"
 msgstr "<integrity_enhet>"
 
-#: src/integritysetup.c:531
+#: src/integritysetup.c:551
 msgid "<integrity_device> <name>"
 msgstr "<integritet_enhet> <namn>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:574
 #, c-format
 msgid ""
 "\n"
@@ -3208,7 +3336,7 @@ msgstr ""
 "<namn> är enheten att skapa under %s\n"
 "<integritetsenhet> är enheten som innehåller data med integritetstaggar\n"
 
-#: src/integritysetup.c:559
+#: src/integritysetup.c:579
 #, c-format
 msgid ""
 "\n"
@@ -3222,42 +3350,50 @@ msgstr ""
 "\tMaximal nyckelfilstorlek: %dkB\n"
 "\n"
 
-#: src/integritysetup.c:616
+#: src/integritysetup.c:636
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Ogiltig --%s-storlek. Maximal storlek är %u byte."
 
-#: src/integritysetup.c:719
+#: src/integritysetup.c:739
 msgid "Both key file and key size options must be specified."
-msgstr "Både flaggor för nyckelfil och nyckelstorlek måste specifiiceras."
+msgstr "Både flaggor för nyckelfil och nyckelstorlek måste specificeras."
 
-#: src/integritysetup.c:723
+#: src/integritysetup.c:743
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Både flaggor för nyckelfil för journalintegritet och nyckelstorlek måste specificeras."
 
-#: src/integritysetup.c:726
+#: src/integritysetup.c:746
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Integritetsalgoritm för journal måste anges om integritetsnyckel för journal används."
 
-#: src/integritysetup.c:730
+#: src/integritysetup.c:750
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Både flaggor för nyckelfil för journalkryptering och nyckelstorlek måste specificeras."
 
-#: src/integritysetup.c:733
+#: src/integritysetup.c:753
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Krypteringsalgoritm för journal måste anges om integritetsnyckel för journal används."
 
-#: src/integritysetup.c:737
+#: src/integritysetup.c:757
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Flaggorna för återställning- och bitmap-läge är ömsesidigt uteslutande."
 
-#: src/integritysetup.c:744
+#: src/integritysetup.c:764
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Det går inte att använda journalflaggor i bitmap-läge."
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:769
 msgid "Bitmap options can be used only in bitmap mode."
-msgstr "Flaggan för integritet kan endast användas i bitmap-läge."
+msgstr "Bitmap-flaggor kan endast användas i bitmap-läge."
+
+#: src/integritysetup.c:775
+msgid "Inline mode cannot be combined with journal or bitmap options."
+msgstr "Det går inte att kombinera inline-läge med journal- eller bitmap-flaggor."
+
+#: src/integritysetup.c:779
+msgid "Inline mode cannot be combined with separate data device."
+msgstr "Det går inte att kombinera inline-läge med separat dataenhet."
 
 #: src/utils_tools.c:105
 msgid ""
@@ -3360,12 +3496,12 @@ msgstr "Token (type %s) kräver PIN."
 #: src/utils_tools.c:275
 #, c-format
 msgid "Token %i cannot unlock assigned keyslot(s) (wrong keyslot passphrase)."
-msgstr "Token %i kan inte låsa upp tilldelade nyckelplatser (felaktigt lösenord)."
+msgstr "Det går inte att låsa upp tilldelade nyckelplatser med token %i (felaktigt lösenord)."
 
 #: src/utils_tools.c:277
 #, c-format
 msgid "Token (type %s) cannot unlock assigned keyslot(s) (wrong keyslot passphrase)."
-msgstr "Token (typ %s) kan inte låsa upp tilldelade nyckelplatser (felaktigt lösenord)."
+msgstr "Det går inte att låsa upp tilldelade nyckelplatser med token (typ %s) (felaktigt lösenord)."
 
 #: src/utils_tools.c:280
 #, c-format
@@ -3406,6 +3542,14 @@ msgstr "Det går inte att öppna nyckelfilen %s för skrivning."
 msgid "Cannot write to keyfile %s."
 msgstr "Det går inte att skriva till nyckelfilen %s."
 
+#: src/utils_tools.c:468
+msgid "Name is too long."
+msgstr "Namnet är för långt."
+
+#: src/utils_tools.c:471
+msgid "Name must not contain '/' character."
+msgstr "Namnet får inte innehålla tecknet '/'."
+
 #: src/utils_progress.c:61
 #, c-format
 msgid "%02<PRIu64>m%02<PRIu64>s"
@@ -3467,58 +3611,62 @@ msgstr ""
 msgid "Password quality check failed: Bad passphrase (%s)"
 msgstr "Misslyckades med kvalitetskontroll av lösenord: Dålig lösenfras (%s)"
 
-#: src/utils_password.c:221 src/utils_password.c:235
+#: src/utils_password.c:197
+msgid "Read stopped at maximal interactive input length, passphrase can be trimmed."
+msgstr "Läsningen stoppades vid maximal interaktiv inmatningslängd, lösenfrasen kan kortas av."
+
+#: src/utils_password.c:224 src/utils_password.c:238
 msgid "Error reading passphrase from terminal."
 msgstr "Fel vid läsning av lösenfras från terminal."
 
-#: src/utils_password.c:233
+#: src/utils_password.c:236
 msgid "Verify passphrase: "
 msgstr "Verifiera lösenfras: "
 
-#: src/utils_password.c:240
+#: src/utils_password.c:243
 msgid "Passphrases do not match."
 msgstr "Lösenfraserna stämmer inte överens."
 
-#: src/utils_password.c:278
+#: src/utils_password.c:281
 msgid "Cannot use offset with terminal input."
-msgstr "Det går inte att använda offset med terminalinmatning."
+msgstr "Det går inte att använda förskjutning med terminalinmatning."
 
-#: src/utils_password.c:282
+#: src/utils_password.c:285
 #, c-format
 msgid "Enter passphrase: "
 msgstr "Ange lösenfras: "
 
-#: src/utils_password.c:285
+#: src/utils_password.c:288
 #, c-format
 msgid "Enter passphrase for %s: "
 msgstr "Ange lösenfras för %s: "
 
-#: src/utils_password.c:319
+#: src/utils_password.c:322
 msgid "No key available with this passphrase."
 msgstr "Ingen nyckel finns tillgänglig med denna lösenfras."
 
-#: src/utils_password.c:321
+#: src/utils_password.c:324
 msgid "No usable keyslot is available."
 msgstr "Ingen tillgänglig användbar nyckelplats."
 
 #: src/utils_luks.c:55
 msgid "Can't do passphrase verification on non-tty inputs."
-msgstr "Kan inte verifiera lösenfras på icke-tty-ingångar."
+msgstr "Det går inte att verifiera lösenfras på icke-tty-ingångar."
 
-#: src/utils_luks.c:173
+#: src/utils_luks.c:179
 #, c-format
 msgid "Failed to open file %s in read-only mode."
 msgstr "Misslyckades med att öppna filen %s i skrivskyddat läge."
 
-#: src/utils_luks.c:186
+#: src/utils_luks.c:193
 msgid "Provide valid LUKS2 token JSON:\n"
 msgstr "Tillhandahåll giltig JSON för LUKS2-token:\n"
 
-#: src/utils_luks.c:193
+#: src/utils_luks.c:200
 msgid "Failed to read JSON file."
 msgstr "Misslyckades med att läsa in JSON-filen."
 
-#: src/utils_luks.c:198
+#: src/utils_luks.c:205
 msgid ""
 "\n"
 "Read interrupted."
@@ -3526,12 +3674,12 @@ msgstr ""
 "\n"
 "Läsning avbryten."
 
-#: src/utils_luks.c:239
+#: src/utils_luks.c:246
 #, c-format
 msgid "Failed to open file %s in write mode."
 msgstr "Misslyckades med att öppna filen %s in skrivläge."
 
-#: src/utils_luks.c:248
+#: src/utils_luks.c:255
 msgid ""
 "\n"
 "Write interrupted."
@@ -3539,26 +3687,26 @@ msgstr ""
 "\n"
 "Skrivning avbruten."
 
-#: src/utils_luks.c:252
+#: src/utils_luks.c:259
 msgid "Failed to write JSON file."
 msgstr "Misslyckades med att skriva JSON-fil."
 
-#: src/utils_reencrypt.c:107
+#: src/utils_reencrypt.c:93
 #, c-format
 msgid "Auto-detected active dm device '%s' for data device %s.\n"
 msgstr "Auto-identifierade aktiv dm-enhet ”%s” för dataenheten %s.\n"
 
-#: src/utils_reencrypt.c:111
+#: src/utils_reencrypt.c:97
 #, c-format
 msgid "Failed to auto-detect device %s holders."
 msgstr "Misslyckades med att identifiera kopplingarna till enhet %s."
 
-#: src/utils_reencrypt.c:117
+#: src/utils_reencrypt.c:103
 #, c-format
 msgid "Device %s is not a block device.\n"
 msgstr "Enheten %s är inte en giltig blockenhet.\n"
 
-#: src/utils_reencrypt.c:119
+#: src/utils_reencrypt.c:105
 #, c-format
 msgid ""
 "Unable to decide if device %s is activated or not.\n"
@@ -3566,173 +3714,184 @@ msgid ""
 "It may lead to data corruption if the device is actually activated.\n"
 "To run reencryption in online mode, use --active-name parameter instead.\n"
 msgstr ""
-"Det går inte att avgöra om enheten %s är aktiverade eller ej.\n"
+"Det går inte att avgöra om enheten %s är aktiverade eller inte.\n"
 "Är du säker på att du vill fortsätta kryptera om i frånkopplat läge?\n"
 "Det kan leda till datakorruption om enheten är aktiverad.\n"
 "För att kryptera om i uppkopplat läge, använd istället flaggan --active-name.\n"
 
-#: src/utils_reencrypt.c:128 src/utils_reencrypt.c:261
+#: src/utils_reencrypt.c:114 src/utils_reencrypt.c:247
 #, c-format
 msgid ""
 "Device %s is not a block device. Can not auto-detect if it is active or not.\n"
 "Use --force-offline-reencrypt to bypass the check and run in offline mode (dangerous!)."
 msgstr ""
-"Enheten %s är inte en blockenhet. Kan inte automatiskt upptäcka om den är aktiv eller inte.\n"
+"Enheten %s är inte en blockenhet. Det går inte att automatiskt upptäcka om den är aktiv eller inte.\n"
 "Använd --force-offline-reencrypt för att kringgå kontrollen och köra i offline-läge (farligt!)."
 
-#: src/utils_reencrypt.c:165 src/utils_reencrypt.c:208
-#: src/utils_reencrypt.c:218
+#: src/utils_reencrypt.c:151 src/utils_reencrypt.c:194
+#: src/utils_reencrypt.c:204
 msgid "Requested --resilience option cannot be applied to current reencryption operation."
-msgstr "Begärd flagga --resilience kan inte tillämpas på aktuell omkrypteringsåtgärd."
+msgstr "Det går inte att tillämpa begärd flagga --resilience på aktuell omkrypteringsåtgärd."
 
-#: src/utils_reencrypt.c:190
+#: src/utils_reencrypt.c:176
 msgid "Device is not in LUKS2 encryption. Conflicting option --encrypt."
 msgstr "Enheten är inte under LUKS2-omkryptering.  Motsägelsefull flagga --encrypt."
 
-#: src/utils_reencrypt.c:195
+#: src/utils_reencrypt.c:181
 msgid "Device is not in LUKS2 decryption. Conflicting option --decrypt."
 msgstr "Enheten är inte i LUKS2-dekryptering. Motsägelsefull flagga --decrypt."
 
-#: src/utils_reencrypt.c:202
+#: src/utils_reencrypt.c:188
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
-msgstr "Enheten är under omkryptering med dataskiftåterhämtning. Begärd flagga --resillence kan inte tillämpas."
+msgstr "Enheten är under omkryptering med dataskiftåterhämtning. Det går inte att tillämpa begärd flagga --resilience."
+
+#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
+msgstr "Det går inte att avgöra volymens nyckelstorlek för LUKS utan nyckelplatser, använd flaggen --new-key-size."
 
-#: src/utils_reencrypt.c:280
+#: src/utils_reencrypt.c:436
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "Enheten kräver omkrypteringsåterställning. Starta repair först."
 
-#: src/utils_reencrypt.c:294
+#: src/utils_reencrypt.c:450
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
-msgstr "Enheten %s är redan under LUKS2-omkryptering. Vill du återuppta tidigare  intierad åtgärd?"
+msgstr "Enheten %s är redan under LUKS2-omkryptering. Vill du återuppta tidigare initierad åtgärd?"
 
-#: src/utils_reencrypt.c:403
+#: src/utils_reencrypt.c:561
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "Stöder inte längre föråldrad LUKS2-omkryptering."
 
-#: src/utils_reencrypt.c:408
+#: src/utils_reencrypt.c:566
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
-msgstr "Kan inte återkryptera LUKS2-enhet som konfigurerats för att använda OPAL."
+msgstr "Det går inte att återkryptera LUKS2-enhet som konfigurerats för att använda OPAL."
 
-#: src/utils_reencrypt.c:414
+#: src/utils_reencrypt.c:572
 msgid "Reencryption of device with integrity profile is not supported."
-msgstr "Kryptering för enhet med integritetsprofil stöds ej."
+msgstr "Kryptering för enhet med integritetsprofil stöds inte."
 
-#: src/utils_reencrypt.c:451
+#: src/utils_reencrypt.c:609
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
 "(block size: %<PRIu32> bytes) detected on device %s."
 msgstr ""
-"Begärde --sector-size %<PRIu32> är inkompatibel med superblock %s\n"
+"Begärd --sector-size %<PRIu32> är inkompatibel med superblock %s\n"
 "(blockstorlek: %<PRIu32> byte) identifierad på enheten %s."
 
-#: src/utils_reencrypt.c:520 src/utils_reencrypt.c:1408
+#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Kryptering utan frånkopplat huvud (--header) är inte möjligt utan att minska datastorleken på enheten (--reduce-device-size)."
 
-#: src/utils_reencrypt.c:527
+#: src/utils_reencrypt.c:687
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
-msgstr "Begärd dataförskjutning måste vara mindre än, eller lika med halva av parametern --reduce-device-size."
+msgstr "Begärd dataförskjutning måste vara mindre än eller lika med hälften av parametern --reduce-device-size."
 
-#: src/utils_reencrypt.c:537
+#: src/utils_reencrypt.c:697
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
-msgstr "Justera värdet av --reduce-device-size-värdet till dubbla --offset %<PRIu64> (sektorer).\n"
+msgstr "Justerar --reduce-device-size-värdet till dubbla --offset %<PRIu64> (sektorer).\n"
 
-#: src/utils_reencrypt.c:567
+#: src/utils_reencrypt.c:727
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "Tillfällig huvudfil %s finns redan. Avbryter."
 
-#: src/utils_reencrypt.c:569 src/utils_reencrypt.c:576
+#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "Det går inte att skapa tillfällig huvudfil %s."
 
-#: src/utils_reencrypt.c:601
+#: src/utils_reencrypt.c:761
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "LUKS2-metadatastorleken är större än dataskift-värdet."
 
-#: src/utils_reencrypt.c:638
+#: src/utils_reencrypt.c:800
 #, c-format
 msgid "Failed to place new header at head of device %s."
-msgstr "Misslyckades med att placera ny header i början på enheten %s."
+msgstr "Misslyckades med att placera nytt huvud i början på enheten %s."
 
-#: src/utils_reencrypt.c:648
+#: src/utils_reencrypt.c:813
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s är nu aktiv och redo för uppkopplad kryptering.\n"
 
-#: src/utils_reencrypt.c:684
+#: src/utils_reencrypt.c:850
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "Aktiva enheten: %s är inte LUKS2."
 
-#: src/utils_reencrypt.c:712
+#: src/utils_reencrypt.c:878
 msgid "Restoring original LUKS2 header."
 msgstr "Återställer ursprungligt LUKS2-huvud."
 
-#: src/utils_reencrypt.c:720
+#: src/utils_reencrypt.c:886
 msgid "Original LUKS2 header restore failed."
 msgstr "Misslyckades med återställning av ursprungligt LUKS2-huvud."
 
-#: src/utils_reencrypt.c:752
+#: src/utils_reencrypt.c:918
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
-msgstr "Header-filen %s finns inte. Vill du initiera LUKS2-dekryptering av enheten %s och exportera LUKS2-huvudet till filen %s?"
+msgstr "Huvudfilen %s finns inte. Vill du initiera LUKS2-dekryptering av enheten %s och exportera LUKS2-huvudet till filen %s?"
 
-#: src/utils_reencrypt.c:802
+#: src/utils_reencrypt.c:961
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "Misslyckades med att läsa/skriva behörighetsflaggor till exporterad huvudfil."
 
-#: src/utils_reencrypt.c:856
+#: src/utils_reencrypt.c:1015
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "Misslyckades med initiering av omkryptering. Säkerhetskopian av huvudet är tillgänglig i %s."
 
-#: src/utils_reencrypt.c:884
+#: src/utils_reencrypt.c:1043
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
-msgstr "LUKS2-dekryptering stöds endast för enheter med fristående header (med data-offset satt till 0)."
+msgstr "LUKS2-dekryptering stöds endast för enheter med fristående huvud (med dataförskjutning satt till 0)."
 
-#: src/utils_reencrypt.c:1019 src/utils_reencrypt.c:1028
+#: src/utils_reencrypt.c:1487
+msgid "No token could unlock the device."
+msgstr "Ingen token kunde låsa upp enheten."
+
+#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
 msgid "Not enough free keyslots for reencryption."
 msgstr "Inte nog med fria nyckelplatser för omkryptering."
 
-#: src/utils_reencrypt.c:1049 src/utils_reencrypt_luks1.c:1047
-msgid "Key file can be used only with --key-slot or with exactly one key slot active."
-msgstr "Nyckelfil kan endast användas med --key-slot eller precis en aktiv nyckelplats."
+#: src/utils_reencrypt.c:1559
+msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
+msgstr "Nyckelfil eller nyckelringsnyckelbeskrivning kan endast användas med --key-slot eller precis en aktiv nyckelplats."
 
-#: src/utils_reencrypt.c:1058 src/utils_reencrypt_luks1.c:1094
-#: src/utils_reencrypt_luks1.c:1105
+#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Ange lösenfras för nyckelplats %d: "
 
-#: src/utils_reencrypt.c:1070
-#, c-format
-msgid "Enter passphrase for key slot %u: "
-msgstr "Ange lösenfras för nyckelplats %u: "
-
-#: src/utils_reencrypt.c:1122
+#: src/utils_reencrypt.c:1876
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Byter krypteringschiffer till %s.\n"
 
-#: src/utils_reencrypt.c:1176
+#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
+msgstr "Använd --force-no-keyslots för att omkryptera enheten med aktiva nyckelplatser genom att ange volymnycklar direkt."
+
+#: src/utils_reencrypt.c:1993
+msgid "Option --new-volume-key-file must be paired with --new-key-size"
+msgstr "Flaggan --new-volume-key-file måste kombineras med --new-key-size"
+
+#: src/utils_reencrypt.c:2035
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Inga parametrar för datasegment ändrades. Omkryptering avbruten."
 
-#: src/utils_reencrypt.c:1278
+#: src/utils_reencrypt.c:2072
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
 msgstr ""
-"Ökning av sektorstorlek för kryptering på en frånkopplad enhet stöds ej.\n"
+"Ökning av sektorstorlek för kryptering på en frånkopplad enhet stöds inte.\n"
 "Aktivera enheten för eller använd flaggan --force-offline-reencrypt  (farligt!)."
 
-#: src/utils_reencrypt.c:1318 src/utils_reencrypt_luks1.c:690
-#: src/utils_reencrypt_luks1.c:761
+#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
 "Reencryption interrupted."
@@ -3740,67 +3899,67 @@ msgstr ""
 "\n"
 "Omkryptering avbryten."
 
-#: src/utils_reencrypt.c:1323
+#: src/utils_reencrypt.c:2119
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Återupptar LUKS-omkryptering i tvingat frånkopplat läge.\n"
 
-#: src/utils_reencrypt.c:1346
+#: src/utils_reencrypt.c:2142
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Enheten %s innehåller felaktig LUKS-metadata. Avbryter åtgärden."
 
-#: src/utils_reencrypt.c:1362 src/utils_reencrypt.c:1384
+#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Enheten %s är redan en LUKS-enhet. Avbryter åtgärd."
 
-#: src/utils_reencrypt.c:1390
+#: src/utils_reencrypt.c:2186
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Enheten %s är redan i LUKS-omkryptering. Avbryter åtgärd."
 
-#: src/utils_reencrypt.c:1473
+#: src/utils_reencrypt.c:2269
 msgid "LUKS2 decryption requires --header option."
 msgstr "LUKS2-dekryptering kräver flaggan --header."
 
-#: src/utils_reencrypt.c:1521
+#: src/utils_reencrypt.c:2317
 msgid "Command requires device as argument."
 msgstr "Kommandot kräver en enhet som argument."
 
-#: src/utils_reencrypt.c:1534
+#: src/utils_reencrypt.c:2330
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Versionskonflikt. Enheten %s är LUKS1."
 
-#: src/utils_reencrypt.c:1540
+#: src/utils_reencrypt.c:2336
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Versionskonflikt. Enheten %s är under LUKS2-omkryptering."
 
-#: src/utils_reencrypt.c:1546
+#: src/utils_reencrypt.c:2342
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Versionskonflikt. Enheten %s är LUKS2."
 
-#: src/utils_reencrypt.c:1552
+#: src/utils_reencrypt.c:2348
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Versionskonflikt: Enheten %s är under LUKS2-omkryptering."
 
-#: src/utils_reencrypt.c:1558
+#: src/utils_reencrypt.c:2354
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "LUKS2-omkryptering är redan initierad. Avbryter åtgärd."
 
-#: src/utils_reencrypt.c:1565
+#: src/utils_reencrypt.c:2361
 msgid "Device reencryption not in progress."
-msgstr "Enhetsomkryptering pågår ej."
+msgstr "Enhetsomkryptering pågår inte."
 
-#: src/utils_reencrypt_luks1.c:116 src/utils_blockdev.c:282
+#: src/utils_reencrypt_luks1.c:116 src/utils_blockdev.c:285
 #, c-format
 msgid "Cannot exclusively open %s, device in use."
-msgstr "Kan inte öppna %s exklusivt, enheten används."
+msgstr "Det går inte att öppna %s exklusivt, enheten används."
 
-#: src/utils_reencrypt_luks1.c:130 src/utils_reencrypt_luks1.c:885
+#: src/utils_reencrypt_luks1.c:130 src/utils_reencrypt_luks1.c:883
 msgid "Allocation of aligned memory failed."
 msgstr "Misslyckades med allokering av justerat minne."
 
@@ -3823,11 +3982,11 @@ msgstr "Det går inte att skriva till enheten %s."
 msgid "Cannot write reencryption log file."
 msgstr "Det går inte att skriva loggfil för omkryptering."
 
-#: src/utils_reencrypt_luks1.c:269
+#: src/utils_reencrypt_luks1.c:268
 msgid "Cannot read reencryption log file."
 msgstr "Det går inte att läsa loggfil för omkryptering."
 
-#: src/utils_reencrypt_luks1.c:280
+#: src/utils_reencrypt_luks1.c:279
 msgid "Wrong log format."
 msgstr "Fel loggformat."
 
@@ -3836,130 +3995,134 @@ msgstr "Fel loggformat."
 msgid "Log file %s exists, resuming reencryption.\n"
 msgstr "Loggfilen %s existerar, återupptar kryptering.\n"
 
-#: src/utils_reencrypt_luks1.c:356
+#: src/utils_reencrypt_luks1.c:354
 msgid "Activating temporary device using old LUKS header."
 msgstr "Aktiverar temporär enhet användandes gammalt LUKS-huvud."
 
-#: src/utils_reencrypt_luks1.c:366
+#: src/utils_reencrypt_luks1.c:364
 msgid "Activating temporary device using new LUKS header."
 msgstr "Aktiverar temporär enhet användandes nytt LUKS-huvud."
 
-#: src/utils_reencrypt_luks1.c:376
+#: src/utils_reencrypt_luks1.c:374
 msgid "Activation of temporary devices failed."
 msgstr "Aktivering av temporära enheter misslyckades."
 
-#: src/utils_reencrypt_luks1.c:436
+#: src/utils_reencrypt_luks1.c:434
 msgid "Failed to set data offset."
-msgstr "Misslyckades med att sätta dataoffset."
+msgstr "Misslyckades med att sätta dataförskjutning."
 
-#: src/utils_reencrypt_luks1.c:442
+#: src/utils_reencrypt_luks1.c:440
 msgid "Failed to set metadata size."
 msgstr "Misslyckades med att sätta metadatastorlek."
 
-#: src/utils_reencrypt_luks1.c:450
+#: src/utils_reencrypt_luks1.c:448
 #, c-format
 msgid "New LUKS header for device %s created."
 msgstr "Skapade nytt LUKS-huvud för enhet %s."
 
-#: src/utils_reencrypt_luks1.c:487
+#: src/utils_reencrypt_luks1.c:485
 #, c-format
 msgid "%s header backup of device %s created."
 msgstr "Skapade säkerhetskopia av %s-huvud på enhet %s."
 
-#: src/utils_reencrypt_luks1.c:543
+#: src/utils_reencrypt_luks1.c:541
 msgid "Creation of LUKS backup headers failed."
 msgstr "Misslyckades med att skapa en säkerhetskopia av LUKS-huvuden."
 
-#: src/utils_reencrypt_luks1.c:672
+#: src/utils_reencrypt_luks1.c:670
 #, c-format
 msgid "Cannot restore %s header on device %s."
-msgstr "Det går inte återställa %s-huvudet på enheten %s."
+msgstr "Det går inte att återställa %s-huvudet på enheten %s."
 
-#: src/utils_reencrypt_luks1.c:674
+#: src/utils_reencrypt_luks1.c:672
 #, c-format
 msgid "%s header on device %s restored."
 msgstr "Återställde %s-huvudet på enheten %s."
 
-#: src/utils_reencrypt_luks1.c:857 src/utils_reencrypt_luks1.c:863
+#: src/utils_reencrypt_luks1.c:855 src/utils_reencrypt_luks1.c:861
 msgid "Cannot open temporary LUKS device."
 msgstr "Misslyckades med att öppna temporär LUKS-enhet."
 
-#: src/utils_reencrypt_luks1.c:868 src/utils_reencrypt_luks1.c:873
+#: src/utils_reencrypt_luks1.c:866 src/utils_reencrypt_luks1.c:871
 msgid "Cannot get device size."
 msgstr "Det går inte att hämta enhetsstorlek."
 
-#: src/utils_reencrypt_luks1.c:915
+#: src/utils_reencrypt_luks1.c:913
 msgid "IO error during reencryption."
 msgstr "In-/utfel under återkryptering."
 
-#: src/utils_reencrypt_luks1.c:945
+#: src/utils_reencrypt_luks1.c:943
 msgid "Provided UUID is invalid."
 msgstr "Angivet UUID är ogiltigt."
 
-#: src/utils_reencrypt_luks1.c:1171
+#: src/utils_reencrypt_luks1.c:1045
+msgid "Key file can be used only with --key-slot or with exactly one key slot active."
+msgstr "Nyckelfil kan endast användas med --key-slot eller precis en aktiv nyckelplats."
+
+#: src/utils_reencrypt_luks1.c:1169
 msgid "Cannot open reencryption log file."
 msgstr "Det går inte att öppna loggfilen för omkryptering."
 
-#: src/utils_reencrypt_luks1.c:1177
+#: src/utils_reencrypt_luks1.c:1175
 msgid "No decryption in progress, provided UUID can be used only to resume suspended decryption process."
 msgstr "Ingen dekryptering pågår, givet UUID kan endast användas för att återuppta vilande dekrypteringsprocess."
 
-#: src/utils_reencrypt_luks1.c:1233
+#: src/utils_reencrypt_luks1.c:1231
 #, c-format
 msgid "Reencryption will change: %s%s%s%s%s%s."
 msgstr "Omkryptering kommer att ändra: %s%s%s%s%s%s."
 
-#: src/utils_reencrypt_luks1.c:1234
+#: src/utils_reencrypt_luks1.c:1232
 msgid "volume key"
 msgstr "volymnyckeln"
 
-#: src/utils_reencrypt_luks1.c:1236
+#: src/utils_reencrypt_luks1.c:1234
 msgid "set hash to "
 msgstr "sätt hash till "
 
-#: src/utils_reencrypt_luks1.c:1237
+#: src/utils_reencrypt_luks1.c:1235
 msgid ", set cipher to "
 msgstr ", sätt chiffer till "
 
-#: src/utils_blockdev.c:176
+#: src/utils_blockdev.c:179
 #, c-format
 msgid "WARNING: Device %s already contains a '%s' partition signature.\n"
 msgstr "VARNING: Enheten %s innehåller redan en ”%s”-partitionssignatur.\n"
 
-#: src/utils_blockdev.c:184
+#: src/utils_blockdev.c:187
 #, c-format
 msgid "WARNING: Device %s already contains a '%s' superblock signature.\n"
 msgstr "VARNING: Enheten %s innehåller redan en ”%s”-superblocksignatur.\n"
 
-#: src/utils_blockdev.c:206 src/utils_blockdev.c:289 src/utils_blockdev.c:341
+#: src/utils_blockdev.c:209 src/utils_blockdev.c:292 src/utils_blockdev.c:344
 msgid "Failed to initialize device signature probes."
 msgstr "Misslyckades med att initiera identifiering av enhetssignatur."
 
-#: src/utils_blockdev.c:269
+#: src/utils_blockdev.c:272
 #, c-format
 msgid "Failed to stat device %s."
 msgstr "Misslyckades med att ta status på enhet %s."
 
-#: src/utils_blockdev.c:284
+#: src/utils_blockdev.c:287
 #, c-format
 msgid "Failed to open file %s in read/write mode."
 msgstr "Misslyckades med att öppna filen %s i läs-/skrivläge."
 
-#: src/utils_blockdev.c:304
+#: src/utils_blockdev.c:307
 #, c-format
 msgid "Existing '%s' partition signature on device %s will be wiped."
 msgstr "Kommer att rensa befintlig ”%s” på enheten %s."
 
-#: src/utils_blockdev.c:307
+#: src/utils_blockdev.c:310
 #, c-format
 msgid "Existing '%s' superblock signature on device %s will be wiped."
 msgstr "Kommer att rensa befintlig ”%s” på enheten %s."
 
-#: src/utils_blockdev.c:310
+#: src/utils_blockdev.c:313
 msgid "Failed to wipe device signature."
 msgstr "Misslyckades med att radera enhetssignatur."
 
-#: src/utils_blockdev.c:317
+#: src/utils_blockdev.c:320
 #, c-format
 msgid "Failed to probe device %s for a signature."
 msgstr "Misslyckades med söka av enheten %s efter en signatur."
@@ -3974,6 +4137,50 @@ msgstr "Ogiltig datastorlekspecifikation i flaggan --%s."
 msgid "Option --%s is not allowed with %s action."
 msgstr "Flaggan --%s tillåts inte med åtgärden --%s."
 
+#: src/utils_key_description.c:66
+msgid "Type specification in --link-vk-to-keyring keyring specification is ignored."
+msgstr "Typspecifikationen i --link-vk-to-keyring keyring-specifikationen ignoreras."
+
+#: src/utils_key_description.c:131
+msgid "Key types have to be the same for both volume keys."
+msgstr "Tangenttyperna måste vara desamma för båda volymknapparna."
+
+#: src/utils_key_description.c:136
+msgid "Both volume keys have to be linked to the same keyring."
+msgstr "Båda volymnycklarna måste vara kopplade till samma nyckelring."
+
+#: src/utils_key_description.c:146
+msgid "You need to supply more key names."
+msgstr "Du måste ange fler nyckelnamn."
+
+#: src/utils_key_description.c:150
+msgid "Invalid --link-vk-to-keyring value."
+msgstr "Ogiltigt värde för --link-vk-to-keyring."
+
+#: src/utils_keyslot_check.c:114
+#, c-format
+msgid "Keyslot %d binary data could be corrupted.\n"
+msgstr "Binärdata för nyckelplats %d kan vara skadad.\n"
+
+#: src/utils_keyslot_check.c:124
+#, c-format
+msgid "  Suspected offset: 0x%<PRIx64>\n"
+msgstr "  Misstänkt förskjutning: 0x%<PRIx64>\n"
+
+#: src/utils_keyslot_check.c:127
+msgid "  Subsequent suspected offsets are suppressed.\n"
+msgstr "  Efterföljande misstänkta förskjutningar undertrycks.\n"
+
+#: src/utils_keyslot_check.c:178 src/utils_keyslot_check.c:183
+#, c-format
+msgid "Keyslot %d cannot be read from the device."
+msgstr "Det går inte att läsa nyckelplats %d från enheten."
+
+#: src/utils_keyslot_check.c:194
+#, c-format
+msgid "You can use hexdump -v -C -n 128 -s <offset_0xXXXX> \"%s\" to inspect the data.\n"
+msgstr "Du kan använda hexdump -v -C -n 128 -s <offset_0xXXXX> \"%s\" för att inspektera data.\n"
+
 #: tokens/ssh/cryptsetup-ssh.c:110
 msgid "Failed to write ssh token json."
 msgstr "Misslyckades med att skriva ssh-token i json."
@@ -3990,9 +4197,9 @@ msgstr ""
 "Experimentell cryptsetup-insticksmodul för att låsa upp LUKS2-enheter med token ansluten via SSH-server.\vDen tillåter för närvarande endast att lägga till en token till en existerande nyckelplats.\n"
 "\n"
 "Angiven SSH-server måste innehålla en nyckelfil på den angivna sökvägen med ett lösenord för en befintlig nyckelplats på enheten.\n"
-"Inloggningsuppgifter kommer att användas av cryptsetup för att att hämta lösenordet genom att använda token när enheten öppnas.\n"
+"Inloggningsuppgifter kommer att användas av cryptsetup för att hämta lösenordet genom att använda token när enheten öppnas.\n"
 "\n"
-"Observera: Information som anges när token läggs till (SSH-serverns, adress, användare och sökvägar) kommer att lagras i LUKS2-headern i klartext."
+"Observera: Information som anges när token läggs till (SSH-serverns, adress, användare och sökvägar) kommer att lagras i LUKS2-huvudet i klartext."
 
 #: tokens/ssh/cryptsetup-ssh.c:138
 msgid "<action> <device>"
@@ -4024,7 +4231,7 @@ msgstr "Sökväg till katalog som innehåller libcryptsetup external tokens"
 
 #: tokens/ssh/cryptsetup-ssh.c:148
 msgid "Keyslot to assign the token to. If not specified, token will be assigned to the first keyslot matching provided passphrase."
-msgstr "Nyckelplats att ange token till. Om ej angiven så kommer token att tilldelas till den första nyckelplats som matchar angivet lösenfras."
+msgstr "Nyckelplats att ange token till. Om den inte anges kommer token att tilldelas den första nyckelplats som matchar angiven lösenfras."
 
 #: tokens/ssh/cryptsetup-ssh.c:150
 msgid "Generic options:"
@@ -4115,7 +4322,7 @@ msgstr "Det går inte att öppna sftp-sessionen: "
 
 #: tokens/ssh/ssh-utils.c:53
 msgid "Cannot stat sftp file: "
-msgstr "Det går inte att stat sftp-filen: "
+msgstr "Det går inte att ta stat på sftp-filen: "
 
 #: tokens/ssh/ssh-utils.c:61
 msgid "Not enough memory.\n"
@@ -4140,3 +4347,31 @@ msgstr "Den öppna nyckelns auth-metod tills inte på värddatorn.\n"
 #: tokens/ssh/ssh-utils.c:158
 msgid "Public key authentication error: "
 msgstr "Autentiseringsfel för öppen nyckel: "
+
+#~ msgid "Failed to link volume keys in user defined keyring."
+#~ msgstr "Misslyckades med att sammankoppla volymnycklar i den användardefinierade nyckelringen."
+
+#~ msgid "Failed to unlink volume key from thread keyring."
+#~ msgstr "Misslyckades med frånkoppla nyckelringen för trådnyckelringen."
+
+#~ msgid "Activation of partially decrypted BITLK device is not supported."
+#~ msgstr "Aktivering av delvis avkrypterade BITLK-enheter stöds inte."
+
+#~ msgid "Failed to read LUKS2 requirements."
+#~ msgstr "Misslyckades med att läsa LUKS2-krav."
+
+#~ msgid "Warning: keyslot operation could fail as it requires more than available memory.\n"
+#~ msgstr "Varning: keyslot-operationen kan misslyckas eftersom den kräver mer än tillgängligt minne.\n"
+
+#~ msgid "Failed to get reencryption state."
+#~ msgstr "Misslyckades med att erhålla status för omkryptering."
+
+#~ msgid "Failed to read passphrase from keyring."
+#~ msgstr "Misslyckades med att läsa lösenfras från nyckelring."
+
+#~ msgid "Options --reduce-device-size and --device-size cannot be combined."
+#~ msgstr "Flaggan --reduce-device-size och --data-size det går inte att kombineras."
+
+#, c-format
+#~ msgid "Enter passphrase for key slot %u: "
+#~ msgstr "Ange lösenfras för nyckelplats %u: "

From d2af00d051acc25ad3efeaa0c3dd049b5025af8a Mon Sep 17 00:00:00 2001
From: Petr Pisar <petr.pisar@atlas.cz>
Date: Tue, 31 Mar 2026 11:31:32 +0200
Subject: [PATCH 050/244] po: update cs.po (from translationproject.org)

---
 po/cs.po | 735 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 370 insertions(+), 365 deletions(-)

diff --git a/po/cs.po b/po/cs.po
index 6c9183288..2c10d4391 100644
--- a/po/cs.po
+++ b/po/cs.po
@@ -4,7 +4,7 @@
 # Milan Broz <mbroz@redhat.com>, 2010.
 # Petr Pisar <petr.pisar@atlas.cz>, 2010, 2011, 2012, 2013, 2014, 2015, 2016.
 # Petr Pisar <petr.pisar@atlas.cz>, 2017, 2018, 2019, 2020, 2021, 2022, 2023.
-# Petr Pisar <petr.pisar@atlas.cz>, 2024, 2025.
+# Petr Pisar <petr.pisar@atlas.cz>, 2024, 2025, 2026.
 #
 # See `LUKS On-Disk Format Specification' document to clarify some terms.
 #
@@ -33,10 +33,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.2-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-12-12 18:51+0100\n"
-"PO-Revision-Date: 2025-12-21 14:40+01:00\n"
+"POT-Creation-Date: 2026-03-30 14:18+0200\n"
+"PO-Revision-Date: 2026-03-30 17:35+02:00\n"
 "Last-Translator: Petr Pisar <petr.pisar@atlas.cz>\n"
 "Language-Team: Czech <translation-team-cs@lists.sourceforge.net>\n"
 "Language: cs\n"
@@ -214,8 +214,8 @@ msgstr "Velikost zařízení není zarovnaná na velikost logického sektoru za
 msgid "Header detected but device %s is too small."
 msgstr "Nalezena hlavička, ale zařízení %s je příliš malé."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
-#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
+#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
+#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
 msgid "This operation is not supported for this device type."
 msgstr "Tato operace není na zařízení tohoto typu podporována."
 
@@ -228,10 +228,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nahrání původních metadat LUKS2 do paměti selhalo."
 
 #: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
-#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
-#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
-#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
+#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -248,7 +248,7 @@ msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Na aktivním zařízení %s nebyl nalezen žádný známý vzorek určující šifrování."
 
 #: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5805
+#: lib/setup.c:3783 lib/setup.c:5816
 #, c-format
 msgid "Device %s is not active."
 msgstr "Zařízení %s není aktivní."
@@ -275,7 +275,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Zařízení s oddělenými metadaty není na šifře tohoto typu podporováno."
 
 #: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
 msgid "Unsupported encryption sector size."
 msgstr "Nepodporovaná velikost šifrovaného sektoru."
 
@@ -328,9 +328,9 @@ msgstr "Šifra %s-%s (velikost klíče %zd bitů) není dostupná."
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "POZOR: Aktivace zařízení selže, dm-crypt nepodporuje požadovanou velikost šifrovaného sektoru.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
+#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4494
+#: lib/luks2/luks2_reencrypt.c:4497
 #, c-format
 msgid "Device %s is too small."
 msgstr "Zařízení %s je příliš malé."
@@ -490,7 +490,7 @@ msgid "Unsupported parameters on device %s."
 msgstr "Nepodporované parametry na zařízení %s."
 
 #: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
+#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Neodpovídající parametry na zařízení %s."
@@ -500,7 +500,7 @@ msgid "Crypt devices mismatch."
 msgstr "Zařízení dmcryptu si neodpovídají."
 
 #: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
+#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Zařízení %s nebylo možné znovu zavést."
@@ -512,8 +512,8 @@ msgid "Failed to suspend device %s."
 msgstr "Zařízení %s nebylo možné pozastavit."
 
 #: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
-#: lib/luks2/luks2_reencrypt.c:4237
+#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
+#: lib/luks2/luks2_reencrypt.c:4240
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Zařízení %s nebylo možné probudit."
@@ -597,187 +597,187 @@ msgstr "Chyba při probouzení zařízení %s."
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Z klíčenky zadané uživatelem se nepodařilo odpojit klíč svazku."
 
-#: lib/setup.c:4423 lib/setup.c:5592
+#: lib/setup.c:4423 lib/setup.c:5603
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Do uživatelem zadané klíčenky se nepodařilo přidat klíč svazku."
 
-#: lib/setup.c:4521 src/cryptsetup.c:2723
+#: lib/setup.c:4522 src/cryptsetup.c:2721
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Svazek %s není uspán."
 
-#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
-#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
+#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
+#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
 #: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Heslo svazku neodpovídá svazku."
 
-#: lib/setup.c:4776
+#: lib/setup.c:4787
 msgid "Failed to swap new key slot."
 msgstr "Záměna novou pozicí klíče se nezdařila."
 
-#: lib/setup.c:4874
+#: lib/setup.c:4885
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Pozice klíče %d je neplatná."
 
-#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
-#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
+#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Pozice klíče %d není aktivní."
 
-#: lib/setup.c:4899
+#: lib/setup.c:4910
 msgid "Device header overlaps with data area."
 msgstr "Hlavička zařízení se překrývá s datovou oblastí."
 
-#: lib/setup.c:5120
+#: lib/setup.c:5131
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Přešifrování již probíhá. Zařízení nelze aktivovat."
 
-#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3722
+#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
+#: lib/luks2/luks2_reencrypt.c:3725
 msgid "Failed to get reencryption lock."
 msgstr "Získání zámku pro přešifrování selhalo."
 
-#: lib/setup.c:5144
+#: lib/setup.c:5155
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Obnova přešifrování LUKS2 pomocí klíčů svazku selhala."
 
-#: lib/setup.c:5280
+#: lib/setup.c:5291
 #, c-format
 msgid "Device %s already exists."
 msgstr "Zařízení %s již existuje."
 
-#: lib/setup.c:5287
+#: lib/setup.c:5298
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Zařízení %s nelze použít. Název není platný nebo zařízení se stále používá."
 
-#: lib/setup.c:5299
+#: lib/setup.c:5310
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Klíče pro přešifrování svazku neodpovídají svazku."
 
-#: lib/setup.c:5316
+#: lib/setup.c:5327
 msgid "Incorrect volume key specified for plain device."
 msgstr "Byl zadán neplatný klíč svazku."
 
-#: lib/setup.c:5342 lib/setup.c:5403
+#: lib/setup.c:5353 lib/setup.c:5414
 msgid "Device type is not properly initialized."
 msgstr "Typ zařízení není řádně inicializován."
 
-#: lib/setup.c:5441
+#: lib/setup.c:5452
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Jaderná klíčenka není jádrem podporována."
 
-#: lib/setup.c:5445
+#: lib/setup.c:5456
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Jaderná klíčenka chybí: je potřeba pro předání podpisu do jádra."
 
-#: lib/setup.c:5500
+#: lib/setup.c:5511
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Klíčem klíčenky %s nelze použít."
 
-#: lib/setup.c:5713
+#: lib/setup.c:5724
 msgid "Incorrect root hash specified for verity device."
 msgstr "K zařízení VERITY byl zadán neplatný kořenový haš."
 
-#: lib/setup.c:5754 lib/setup.c:5779
+#: lib/setup.c:5765 lib/setup.c:5790
 msgid "OPAL does not support deferred deactivation."
 msgstr "Opal nepodporuje odloženou deaktivaci."
 
-#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Zařízení %s se stále používá."
 
-#: lib/setup.c:5787
+#: lib/setup.c:5798
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Odložené odebrání zařízení %s nebylo možné zrušit."
 
-#: lib/setup.c:5809
+#: lib/setup.c:5820
 #, c-format
 msgid "Invalid device %s."
 msgstr "Neplatné zařízení %s."
 
-#: lib/setup.c:5956
+#: lib/setup.c:5967
 msgid "Volume key buffer too small."
 msgstr "Vyhrazená paměť pro klíč svazku je příliš malá."
 
-#: lib/setup.c:5967
+#: lib/setup.c:5978
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nelze získat klíč svazku pro zařízení LUKS2."
 
-#: lib/setup.c:5976
+#: lib/setup.c:5987
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nelze získat klíč svazku pro zařízení LUKS1."
 
-#: lib/setup.c:5990
+#: lib/setup.c:6001
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nelze získat klíč svazku pro otevřené zařízení."
 
-#: lib/setup.c:5998
+#: lib/setup.c:6009
 msgid "Cannot retrieve root hash for verity device."
 msgstr "K zařízení VERITY nelze získat kořenový otisk."
 
-#: lib/setup.c:6007
+#: lib/setup.c:6018
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nelze získat klíč svazku pro zařízení BITLK."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6023
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nelze získat klíč svazku pro zařízení FVAULT2."
 
-#: lib/setup.c:6014
+#: lib/setup.c:6025
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Na šifrovaném zařízení %s není tato operace podporována."
 
-#: lib/setup.c:6199 lib/setup.c:6210
+#: lib/setup.c:6210 lib/setup.c:6221
 msgid "Dump operation is not supported for this device type."
 msgstr "Operace výpisu není na zařízení tohoto typu podporována."
 
-#: lib/setup.c:6590
+#: lib/setup.c:6601
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Počátek dat není násobkem %u bajtů."
 
-#: lib/setup.c:6898
+#: lib/setup.c:6909
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Zařízení %s, které se stále používá, nelze konvertovat."
 
-#: lib/setup.c:7206 lib/setup.c:7350
+#: lib/setup.c:7217 lib/setup.c:7361
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Přiřazení pozice klíče %u jakožto nového klíče svazku se nezdařilo."
 
-#: lib/setup.c:7230
+#: lib/setup.c:7241
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Inicializace parametrů výchozí pozice klíče LUKS2 selhala."
 
-#: lib/setup.c:7236
+#: lib/setup.c:7247
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Přiřazení pozice klíče %d k otisku se nezdařilo."
 
-#: lib/setup.c:7467
+#: lib/setup.c:7478
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nelze přidat pozici klíče, všechny pozice jsou zakázány a klíč svazku nebyl poskytnut."
 
-#: lib/setup.c:7540 lib/verity/verity.c:333
+#: lib/setup.c:7551 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Klíč se nepodařilo přidat do jaderné klíčenky."
 
-#: lib/setup.c:7731
+#: lib/setup.c:7742
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Klíčenku zadanou jako „%s“ nebylo možné nalézt."
 
-#: lib/setup.c:7796
+#: lib/setup.c:7807
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Získání zámku pro tvrdý přístup do globální paměti selhalo."
 
@@ -835,40 +835,46 @@ msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "U zařízení s daty se ignoruje chybná optimální velikost I/O (%u bajtů)."
 
 # TODO: Pluralize
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "%s nelze zvětšit na %<PRIu64> bajtů (%s)."
+
+# TODO: Pluralize
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "Zařízení %s je příliš malé. Je třeba alespoň %<PRIu64> bajtů."
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "Zařízení %s nelze použít, protože se již používá (již namapováno nebo připojeno)."
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "Zařízení %s nelze použít, povolení zamítnuto."
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "O zařízení %s nelze získat údaje."
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "Zařízení typu loopback nelze použít, nespuštěno superuživatelem."
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "Připojení zařízení zpětné smyčky selhalo (požadováno zařízení s příznakem autoclear)."
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "Požadovaná poloha je za hranicí skutečné velikosti zařízení %s."
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "Zařízení %s má nulovou velikost."
@@ -1011,9 +1017,9 @@ msgstr "Chyba vstupu/výstupu při šifrování pozice klíče."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
 #: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
 #: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
@@ -1158,7 +1164,7 @@ msgstr "Režim LUKS šifry %s není platný."
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS haš %s není platný."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "V hlavičce LUKS nenalezen žádný známý problém."
 
@@ -1252,11 +1258,11 @@ msgstr "Překročena maximální délka hesla TCRYPT (%zu)."
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "Hašovací algoritmus PBKDF2 %s není podporován, přeskakuje se."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
+#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
 msgid "Required kernel crypto interface not available."
 msgstr "Požadované kryptografické rozhraní jádra není dostupné."
 
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
+#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
 msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr "Ujistěte se, že jaderný modul algif_skcipher je zaveden."
 
@@ -1327,11 +1333,6 @@ msgstr "Nepodporovaná velikost sektoru %<PRIu16>."
 msgid "Failed to read BITLK header from %s."
 msgstr "Z %s nebylo možné načíst hlavičku BITLK."
 
-#: lib/bitlk/bitlk.c:593
-#, c-format
-msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
-msgstr "Z %2$s nebylo možné přečíst nebo ověřit kopii č. %1$d metadat BITLK FVE."
-
 #: lib/bitlk/bitlk.c:603
 #, c-format
 msgid "Failed to read and validate BITLK FVE metadata from %s."
@@ -1407,43 +1408,43 @@ msgstr "Tato operace není podporována."
 msgid "Unexpected key data size."
 msgstr "Nečekaná velikost údajů o klíči."
 
-#: lib/bitlk/bitlk.c:1431
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Toto zařízení BITLK je v nepodporovaném stavu a nelze jej aktivovat."
 
-#: lib/bitlk/bitlk.c:1436
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Zařízení BITLK s typem „%s“ nelze aktivovat."
 
-#: lib/bitlk/bitlk.c:1475
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "POZOR: Velikost svazku BitLockeru %<PRIu64> neodpovídá velikosti zařízení ve zpod %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1602
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Zařízení nelze aktivovat. Jaderný dm-crypt postrádá podporu inicializačního vektoru BITLK."
 
-#: lib/bitlk/bitlk.c:1606
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Zařízení nelze aktivovat. Jaderný dm-crypt postrádá podporu difuzéru Elephant BITLK."
 
-#: lib/bitlk/bitlk.c:1610
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Zařízení nelze aktivovat. Jaderný dm-crypt postrádá podporu velikostí velkých sektorů."
 
-#: lib/bitlk/bitlk.c:1614
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Zařízení nelze aktivovat. Chybí jaderný modul dm-zero."
 
 # FIXME: Pluralize
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "Z hlavičky svazku nebylo možné přečíst %u bajtů."
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "Nepodporovaná verze FVAULT2 %<PRIu16>."
@@ -1521,23 +1522,23 @@ msgstr "Ověření na pozici %<PRIu64> selhalo."
 msgid "Hash area overflow."
 msgstr "Přetečení oblasti haše."
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "Ověření datové oblasti selhalo."
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "Ověření kořenového haše selhalo."
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "Při vytváření oblasti haší došlo k chybě na vstupu/výstupu."
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "Oblast haší se nepodařilo vytvořit."
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "POZOR: Jádro nemůže aktivovat zařízení, pokud velikost datového bloku přesahuje velikost stránky (%u)."
@@ -1592,21 +1593,21 @@ msgstr "Velikost zařízení %s se nepodařilo určit."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Neslučitelná metadata jaderného dm-integrity (verze %u) byla nalezena na %s."
 
-#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Jádro nepodporuje mapování dm-integrity."
 
 # Fixed metadata means fix_padding attribute of dm-integrity target
 # documented as "use a smaller padding".
-#: lib/integrity/integrity.c:310
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Jádro nepodporuje drobné zarovnání metadat dm-integrity."
 
-#: lib/integrity/integrity.c:319
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Jádro odmítá aktivovat volbu nebezpečného přepočtu (pro přebití vizte zastaralé volby aktivace)"
 
-#: lib/integrity/integrity.c:325
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Jádro nepodporuje mapování dm-integrity s inline režimem."
 
@@ -1756,7 +1757,7 @@ msgstr "Dm-integrity zařízení nižší úrovně poskytlo nečekané datové s
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Probíhá přešifrování. Zařízení nelze deaktivovat."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
+#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Výměna pozastaveného zařízení %s za cíl dm-error selhala."
@@ -1835,7 +1836,7 @@ msgstr "Nelze zjistit stav zařízení s UUID: %s."
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Hlavičky s dodatečnými metadaty LUKSMETA nelze převést."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
+#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "LUKS2 neumožňuje použít šifru zadanou jako %s-%s."
@@ -1920,7 +1921,7 @@ msgstr "Velikost zařízení musí být násobek vypočteného zarovnání zóny
 
 #: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
 #: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4077
+#: lib/luks2/luks2_reencrypt.c:4080
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Obálku pro starou část úložiště se nepodařilo inicializovat."
 
@@ -1928,7 +1929,7 @@ msgstr "Obálku pro starou část úložiště se nepodařilo inicializovat."
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Obálku pro novou část úložiště se nepodařilo inicializovat."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
+#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
 msgid "Failed to initialize hotzone protection."
 msgstr "Ochranu horké zóny se nepodařilo inicializovat."
 
@@ -1936,7 +1937,7 @@ msgstr "Ochranu horké zóny se nepodařilo inicializovat."
 msgid "Failed to read checksums for current hotzone."
 msgstr "Kontrolní součty pro aktuální horkou zónu se nepodařilo přečíst."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Čtení oblasti s horkou zónou počínaje na %<PRIu64> selhalo."
@@ -2025,8 +2026,8 @@ msgstr "Zmenšená velikost dat je větší než velikost skutečného zařízen
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Zařízení s daty není zarovnáno na velikost šifrovaného sektoru (%<PRIu32> bajtů)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
-#: lib/luks2/luks2_reencrypt.c:3661
+#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
+#: lib/luks2/luks2_reencrypt.c:3664
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Zařízení %s nebylo možné otevřít ve výlučném režimu (již namapováno nebo připojeno)."
@@ -2035,123 +2036,123 @@ msgstr "Zařízení %s nebylo možné otevřít ve výlučném režimu (již nam
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Zařízení není označeno pro přešifrování LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
+#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Načtení kontextu přešifrování LUKS2 selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
+#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
 msgid "Device is not in reencryption."
 msgstr "Zařízení se nepřešifrovává."
 
-#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
+#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
 msgid "Reencryption process is already running."
 msgstr "Proces přešifrování již běží."
 
-#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
+#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
 msgid "Failed to acquire reencryption lock."
 msgstr "Získání zámku pro přešifrování selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:3468
+#: lib/luks2/luks2_reencrypt.c:3471
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "V přešifrování nelze pokračovat. Spusťte nejprve obnovu přešifrování."
 
-#: lib/luks2/luks2_reencrypt.c:3604
+#: lib/luks2/luks2_reencrypt.c:3607
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Aktivní velikost zařízení a velikost požadovaná k přešifrování si neodpovídají."
 
-#: lib/luks2/luks2_reencrypt.c:3618
+#: lib/luks2/luks2_reencrypt.c:3621
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "V parametrech přešifrování je požadována zakázaná velikost zařízení."
 
-#: lib/luks2/luks2_reencrypt.c:3720
+#: lib/luks2/luks2_reencrypt.c:3723
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Probíhá přešifrování. Obnovu nelze provést."
 
-#: lib/luks2/luks2_reencrypt.c:3741
+#: lib/luks2/luks2_reencrypt.c:3744
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Obnova přešifrování LUKS2 selhala."
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
 msgid "Failed to initialize reencryption device stack."
 msgstr "Zásobník zařízení k přešifrování se nepodařilo inicializovat."
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3910
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "V metadatech je přešifrování LUKS2 již inicializováno."
 
-#: lib/luks2/luks2_reencrypt.c:3915
+#: lib/luks2/luks2_reencrypt.c:3918
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Inicializace přešifrování LUKS2 v metadatech selhala."
 
-#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
-#: lib/luks2/luks2_reencrypt.c:4030
+#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
+#: lib/luks2/luks2_reencrypt.c:4033
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Na zařízeních DAX (trvalá paměť) není přešifrování podporováno."
 
-#: lib/luks2/luks2_reencrypt.c:4059
+#: lib/luks2/luks2_reencrypt.c:4062
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Nastavení segmentů zařízení pro další horkou zónu přešifrování selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4112
+#: lib/luks2/luks2_reencrypt.c:4115
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Metadata pro odolnost při přešifrování se nepodařilo zapsat."
 
-#: lib/luks2/luks2_reencrypt.c:4119
+#: lib/luks2/luks2_reencrypt.c:4122
 msgid "Decryption failed."
 msgstr "Rozšifrování selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4124
+#: lib/luks2/luks2_reencrypt.c:4127
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Zápis oblasti s horkou zónou počínaje na %<PRIu64> selhal."
 
-#: lib/luks2/luks2_reencrypt.c:4129
+#: lib/luks2/luks2_reencrypt.c:4132
 msgid "Failed to sync data."
 msgstr "Synchronizace dat selhala."
 
-#: lib/luks2/luks2_reencrypt.c:4137
+#: lib/luks2/luks2_reencrypt.c:4140
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Po dokončení přešifrování aktuální horké zóny se nepodařilo aktualizovat metadata."
 
-#: lib/luks2/luks2_reencrypt.c:4226
+#: lib/luks2/luks2_reencrypt.c:4229
 msgid "Failed to write LUKS2 metadata."
 msgstr "Zápis metadat LUKS2 selhal."
 
-#: lib/luks2/luks2_reencrypt.c:4249
+#: lib/luks2/luks2_reencrypt.c:4252
 msgid "Failed to wipe unused data device area."
 msgstr "Vyčištění oblasti zařízení s nepoužívanými daty selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4255
+#: lib/luks2/luks2_reencrypt.c:4258
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Odstranění nepoužívané (nepřiřazené) pozice s klíčem %d selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4265
+#: lib/luks2/luks2_reencrypt.c:4268
 msgid "Failed to remove reencryption keyslot."
 msgstr "Odstranění pozice s klíčem přešifrování selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4275
+#: lib/luks2/luks2_reencrypt.c:4278
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Nepřekonatelná chyba při přešifrování bloku na pozici %<PRIu64> dlouhého %<PRIu64> sektorů."
 
-#: lib/luks2/luks2_reencrypt.c:4279
+#: lib/luks2/luks2_reencrypt.c:4282
 msgid "Online reencryption failed."
 msgstr "Přešifrování za běhu selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4284
+#: lib/luks2/luks2_reencrypt.c:4287
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Zařízení neprobouzejte, dokud jej ručně nenahradíte chybovým cílem."
 
-#: lib/luks2/luks2_reencrypt.c:4336
+#: lib/luks2/luks2_reencrypt.c:4339
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "V přešifrování nelze pokračovat. Přešifrování se nachází v nečekaném stavu."
 
-#: lib/luks2/luks2_reencrypt.c:4342
+#: lib/luks2/luks2_reencrypt.c:4345
 msgid "Missing or invalid reencrypt context."
 msgstr "Chybějící nebo neplatný kontext přešifrování."
 
-#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
+#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
 msgid "Failed to update reencryption context."
 msgstr "Kontext přešifrování se nepodařilo aktualizovat."
 
@@ -2187,7 +2188,7 @@ msgstr "Parametry pro šifrování pozice s klíčem lze nastavit jen u zaří
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametry pro šifrování pozice s klíčem se neslučují s šifrováním pozice s klíčem LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
+#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2215,7 +2216,7 @@ msgstr "POZOR: Jedná-li se o režim plain a je-li určen soubor s klíčem, p
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "POZOR: Přepínač --keyfile-size se ignoruje, velikost pro čtení je stejná jako velikosti šifrovacího klíče.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2226,9 +2227,9 @@ msgstr "Prohledávání blkid selhalo u %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Na %s byla nalezen vzorec zařízení. Pokračování může poškodit existující data."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
-#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
-#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2277,7 +2278,7 @@ msgstr ""
 "který umožňuje přístup k šifrovanému oddílu bez znalosti hesla.\n"
 "Tento výpis by měl být vždy uložen na bezpečném místě a v zašifrované podobě."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2296,14 +2297,14 @@ msgstr "Zařízení %s není platným zařízením FVAULT2."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nelze určit velikost klíče svazku pro FVAULT2. Prosím, použijte přepínač --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Zařízení %s je stále aktivní a naplánováno pro odložené odstranění.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
-#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
-#: src/cryptsetup.c:3264
+#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
+#: src/cryptsetup.c:3262
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Cestu k externím tokenům %s se nepodařilo nastavit."
@@ -2312,60 +2313,60 @@ msgstr "Cestu k externím tokenům %s se nepodařilo nastavit."
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Změna velikosti aktivního zařízení vyžaduje klíč svazku v klíčence. Byl však použit přepínač --disable-keyring."
 
-#: src/cryptsetup.c:1059
+#: src/cryptsetup.c:1057
 msgid "Benchmark interrupted."
 msgstr "Hodnocení výkonu přerušeno."
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1078
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     –\n"
 
-#: src/cryptsetup.c:1082
+#: src/cryptsetup.c:1080
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u iterací za sekundu pro %zubitový klíč\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1094
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s –\n"
 
-#: src/cryptsetup.c:1098
+#: src/cryptsetup.c:1096
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u iterací, %5u paměti, %1u souběžných vláken (procesorů) pro %zubitový klíč (požadován čas %u ms)\n"
 
-#: src/cryptsetup.c:1122
+#: src/cryptsetup.c:1120
 msgid "Result of benchmark is not reliable."
 msgstr "Výsledek hodnocení výkonu není spolehlivý."
 
 # ???: are aproximated?
-#: src/cryptsetup.c:1172
+#: src/cryptsetup.c:1170
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testy jsou počítány jen z práce s pamětí (žádné I/O úložiště).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1197
+#: src/cryptsetup.c:1195
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*sAlgoritmus |      Klíč |       Šifrování |     Dešifrování\n"
 
-#: src/cryptsetup.c:1205
+#: src/cryptsetup.c:1203
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Šifra %s (s %ibitovým klíčem) není dostupná."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1222
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#    Algoritmus |      Klíč |       Šifrování |     Dešifrování\n"
 
-#: src/cryptsetup.c:1235
+#: src/cryptsetup.c:1233
 msgid "N/A"
 msgstr "–"
 
-#: src/cryptsetup.c:1260
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2374,27 +2375,27 @@ msgstr ""
 "přešifrování je žádoucí (vizte výstup luksDump) a pokračujte (zvýšení verze\n"
 "metadat) pouze, když poznáte, že operace je chtěná."
 
-#: src/cryptsetup.c:1266
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Zadejte heslo pro ochránění metadat o přešifrování a pro zvýšení jejich verze: "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Opravdu pokračovat s obnovou přešifrování LUKS2?"
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Zadejte heslo pro ověření otisku metadat o přešifrování: "
 
-#: src/cryptsetup.c:1321
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Zadejte heslo pro obnovení přešifrování: "
 
-#: src/cryptsetup.c:1383
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Opravdu se pokusit opravit hlavičku zařízení LUKS?"
 
-#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2402,7 +2403,7 @@ msgstr ""
 "\n"
 "Výmaz přerušen."
 
-#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2411,169 +2412,169 @@ msgstr ""
 "Lze přerušit pomocí Ctrl+C (zbytek nesmazaného zařízení bude obsahovat\n"
 "neplatné součty).\n"
 
-#: src/cryptsetup.c:1438 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Dočasné zařízení %s nelze deaktivovat."
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Čistě hardwarové šifrování Opal nepodporuje --cipher a --key-size. Přepínače se ignorují."
 
-#: src/cryptsetup.c:1499
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Volby integrity lze použít jen při formátu LUKS2."
 
-#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nepodporované volby velikosti metadat LUKS2."
 
-#: src/cryptsetup.c:1509
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "Opal je podporován jen s formátem LUKS2."
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Inline hardwarové značky jsou podporovány jen s formátem LUKS2."
 
-#: src/cryptsetup.c:1523
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Soubor s hlavičkou neexistuje. Chcete jej vytvořit?"
 
-#: src/cryptsetup.c:1531
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Soubor s hlavičkou %s nelze vytvořit."
 
-#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Nelze najít žádný známý vzorek se specifikací integrity."
 
-#: src/cryptsetup.c:1559
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Zadanou velikost klíče integrity nelze použít."
 
-#: src/cryptsetup.c:1577
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "%s nelze použít pro hlavičku uvnitř disku."
 
-#: src/cryptsetup.c:1606 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Toto nevratně přepíše data na %s."
 
-#: src/cryptsetup.c:1643
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Heslo správce Opal nemůže být prázdné."
 
-#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
-#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Nastavení parametrů PBKDF selhalo."
 
-#: src/cryptsetup.c:1788
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Zmenšená poloha dat je dovolena jen u oddělené hlavičky LUKS."
 
-#: src/cryptsetup.c:1795
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Souborový kontejner LUKS %s je na aktivaci příliš malý. Nezbývá žádné místo pro data."
 
-#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Bez pozic pro klíče nelze určit velikost LUKS klíče svazku. Prosím, použijte přepínač --key-size."
 
-#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Zařízení vyžaduje dva klíče svazku."
 
-#: src/cryptsetup.c:1891
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Některé zadané aktivační parametry byly při čistě hardwarovém šifrování Opal ignorovány."
 
-#: src/cryptsetup.c:1896
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Zařízení aktivováno, ale příznaky nelze učinit trvalými."
 
-#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Ke smazání vybrán klíč na pozici %d."
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr ""
 "Toto je poslední pozice klíče. Smazáním tohoto klíče přijdete o možnost\n"
 "zařízení použít."
 
-#: src/cryptsetup.c:1989
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Zadejte jakékoliv jiné heslo: "
 
-#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operace zrušena, pozice klíče NEBYLA vymazána.\n"
 
-#: src/cryptsetup.c:2026
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Zadejte heslo, které se má smazat: "
 
-#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
+#: src/cryptsetup.c:3253
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Zařízení %s není platným zařízením LUKS2."
 
-#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Zadejte nové heslo pro pozici klíče: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Zadejte PIN k tokenu: "
 
-#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Zadejte PIN k tokenu %d: "
 
-#: src/cryptsetup.c:2210
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "POZOR: Parametr --key-slot se použije pro číslo nové pozice klíče.\n"
 
-#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Zadejte jakékoliv existující heslo: "
 
-#: src/cryptsetup.c:2383
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Zadejte heslo, které má být změněno: "
 
-#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Zadejte nové heslo: "
 
-#: src/cryptsetup.c:2449
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Zadejte heslo pro pozici klíče, který má být převeden: "
 
-#: src/cryptsetup.c:2473
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "U operace isLuks je podporován pouze jeden argument se zařízením."
 
-#: src/cryptsetup.c:2578
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Pozice klíče %d neobsahuje nepřiřazený klíč."
 
-#: src/cryptsetup.c:2583
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2581,52 +2582,52 @@ msgstr ""
 "Výpis hlavičky s nepřiřazeným klíčem je citlivý údaj.\n"
 "Tento výpis by měl být uložen na bezpečném místě a v zašifrované podobě."
 
-#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s není název aktivního zařízení %s."
 
-#: src/cryptsetup.c:2709
+#: src/cryptsetup.c:2707
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s není název aktivního zařízení LUKS nebo mu chybí hlavička."
 
-#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
+#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
 msgid "Option --header-backup-file is required."
 msgstr "Je vyžadován přepínač --header-backup-file."
 
-#: src/cryptsetup.c:2836
+#: src/cryptsetup.c:2834
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s není zařízení spravované nástrojem cryptsetup."
 
-#: src/cryptsetup.c:2847
+#: src/cryptsetup.c:2845
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Reaktivace není na zařízení typu %s podporována"
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2895
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Nerozpoznaná metadata druhu zařízení %s."
 
-#: src/cryptsetup.c:2899
+#: src/cryptsetup.c:2897
 msgid "Command requires device and mapped name as arguments."
 msgstr "Příkaz vyžaduje jako argumenty zařízení a mapovaný název."
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL PSID: "
 msgstr "Zadejte Opal PSID: "
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL Admin password: "
 msgstr "Zadejte heslo správce Opal: "
 
-#: src/cryptsetup.c:2925
+#: src/cryptsetup.c:2923
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "POZOR: CELÝ disk bude uveden do továrního nastavení a všechna data budou ztracena! Pokračovat?"
 
-#: src/cryptsetup.c:2968
+#: src/cryptsetup.c:2966
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2635,368 +2636,368 @@ msgstr ""
 "Tento úkon smaže všechny pozice s klíči na zařízení %s.\n"
 "Po jeho dokončení zařízení bude nepoužitelné."
 
-#: src/cryptsetup.c:2975
+#: src/cryptsetup.c:2973
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operace zrušena, pozice s klíči NEBYLY smazány.\n"
 
-#: src/cryptsetup.c:3014
+#: src/cryptsetup.c:3012
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Neplatný druh formátu LUKS. Podporován je pouze LUKS1 a LUKS2."
 
-#: src/cryptsetup.c:3030
+#: src/cryptsetup.c:3028
 #, c-format
 msgid "Device is already %s type."
 msgstr "Zařízení je již druhu %s."
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3035
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Tato operace převede formát %s na %s.\n"
 
-#: src/cryptsetup.c:3040
+#: src/cryptsetup.c:3038
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operace zrušena, zařízení NEBYLO převedeno.\n"
 
-#: src/cryptsetup.c:3080
+#: src/cryptsetup.c:3078
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Chybí přepínač --priority, --label nebo --subsystem."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d je neplatný."
 
-#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
+#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d se používá."
 
-#: src/cryptsetup.c:3129
+#: src/cryptsetup.c:3127
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Přidání tokenu %d klíčenky LUKS2 selhalo."
 
-#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
+#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Přiřazení tokenu %d do pozice s klíčem %d selhalo."
 
-#: src/cryptsetup.c:3157
+#: src/cryptsetup.c:3155
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d se nepoužívá."
 
-#: src/cryptsetup.c:3194
+#: src/cryptsetup.c:3192
 msgid "Failed to import token from file."
 msgstr "Import tokenu ze souboru selhal."
 
-#: src/cryptsetup.c:3219
+#: src/cryptsetup.c:3217
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Získání tokenu %d za účelem exportu selhalo."
 
-#: src/cryptsetup.c:3232
+#: src/cryptsetup.c:3230
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d není přiřazen pozici s klíčem %d."
 
-#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
+#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Zrušení přiřazení tokenu %d k pozici s klíčem %d selhalo."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3298
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Přepínač --tcrypt-hidden, --tcrypt-system nebo --tcrypt-backup je podporován jen u zařízení TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3301
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Přepínače --veracrypt a --disable-veracrypt jsou podporovány jen u typu zařízení TCRYPT."
 
-#: src/cryptsetup.c:3306
+#: src/cryptsetup.c:3304
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Přepínač --veracrypt-pim je podporován jen u zařízení kompatibilním s VeraCrypt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3308
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Přepínač --veracrypt-query-pim je podporován jen u zařízení kompatibilním s VeraCrypt."
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3310
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Přepínače --veracrypt-pim a --veracrypt-query-pim se vzájemně vylučují."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3319
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Přepínač --persistent není dovolen současně s --test-passphrase."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3322
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Přepínače --refresh a --test-passphrase se vzájemně vylučují."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3325
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Přepínač --shared je dovolen jen při úkonu otevírání zařízení plain."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3328
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Přepínač --skip je podporován jen při otevírání zařízení plain a loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3331
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Při otevírání je přepínač --offset podporován jen u zařízení plain a loopaes."
 
-#: src/cryptsetup.c:3336
+#: src/cryptsetup.c:3334
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Přepínač --tcrypt-hidden nelze použít s přepínačem --allow-discards."
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3338
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Otevírání s přepínačem velikosti sektoru je podporován jen u zařízení plain."
 
 # FIXME: "Large IV sectors" should read "IV large sectors".
-#: src/cryptsetup.c:3344
+#: src/cryptsetup.c:3342
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Volba inicializačního vektoru s velkými sektory je podporována jen při otevírání zařízení typu plain s velikostí sektoru větší než 512 bajtů."
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3347
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Přepínač --test-passphrase je dovolen pouze při otevírání zařízení LUKS, TCRYPT, BITLK a FVAULT2."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
+#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Přepínače --device-size a --size nelze kombinovat."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3353
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Přepínač --unbound je dovolen jen při otevírání zařízení LUKS."
 
-#: src/cryptsetup.c:3358
+#: src/cryptsetup.c:3356
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Přepínač --unbound není dovolen současně s --test-passphrase."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3360
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Přepínač --volume-key-keyring nelze použít s přepínači --hash a --volume-key-file."
 
-#: src/cryptsetup.c:3365
+#: src/cryptsetup.c:3363
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Oba přepínače --volume-key-file musí být ve dvojici s odpovídajícími přepínači --key-size."
 
-#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Přepínače --cancel-deferred a --deferred se vzájemně vylučují."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3388
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Přepínač --active-name lze použít jen u zařízení LUKS2."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3391
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Přepínače --active-name a --force-offline-reencrypt nelze kombinovat."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3394
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Přepínače --new-volume-key-file a --keep-key nelze kombinovat."
 
-#: src/cryptsetup.c:3399
+#: src/cryptsetup.c:3397
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Přepínače --new-volume-key-keyring a --keep-key nelze kombinovat."
 
-#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
+#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
 msgid "Keyslot specification is required."
 msgstr "Je nutné určit pozici s klíčem."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3413
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Přepínače --align-payload a --offset nelze kombinovat."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3416
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Přepínač --integrity-no-wipe smí být použit jen při formátování s rozšířením integrity."
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3419
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Je dovolen pouze jeden z přepínačů --use-[u]random."
 
-#: src/cryptsetup.c:3429
+#: src/cryptsetup.c:3427
 msgid "Key size is required with --unbound option."
 msgstr "Přepínač --unbound vyžaduje velikost klíče."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3447
 msgid "Invalid token action."
 msgstr "Neplatná operace tokenu."
 
-#: src/cryptsetup.c:3452
+#: src/cryptsetup.c:3450
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parametr --key-description je při přidávání tokenu povinný."
 
-#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
+#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Akce vyžaduje určitý token. Použijte parametr --token-id."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3458
 msgid "Option --unbound is valid only with token add action."
 msgstr "Přepínač --unbound lze použít pouze s akcí přidání."
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3460
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Přepínače --key-slot a --unbound nelze kombinovat."
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3465
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Akce vyžaduje určitou pozici klíče. Použijte parametr --key-slot."
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3481
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<zařízení> [--type <druh>] [<název>]"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "otevře zařízení jako <název>"
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<název>"
 
-#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "zavře zařízení (odstraní mapování)"
 
-#: src/cryptsetup.c:3485 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "změní velikost aktivního zařízení"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3484
 msgid "show device status"
 msgstr "zobrazí stav zařízení"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <šifra>]"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "benchmark cipher"
 msgstr "zhodnotí výkon šifry"
 
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
-#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
+#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
+#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
+#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
+#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
 msgid "<device>"
 msgstr "<zařízení>"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3486
 msgid "try to repair on-disk metadata"
 msgstr "pokusí se opravit metadata uložená na disku"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3487
 msgid "reencrypt LUKS2 device"
 msgstr "přešifruje zařízení LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3488
 msgid "erase all keyslots (remove encryption key)"
 msgstr "smaže všechny pozice s klíči (odstraní šifrovací klíč)"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3489
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "převede formát LUKS do/z formátu LUKS2"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490
 msgid "set permanent configuration options for LUKS2"
 msgstr "nastaví trvalé volby konfigurace pro LUKS2"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
 msgid "<device> [<new key file>]"
 msgstr "<zařízení> [<soubor_s_novým_klíčem>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3491
 msgid "formats a LUKS device"
 msgstr "naformátuje zařízení LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3492
 msgid "add key to LUKS device"
 msgstr "do zařízení LUKS přidá klíč"
 
-#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
 msgid "<device> [<key file>]"
 msgstr "<zařízení> [<soubor_s_klíčem>]"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3493
 msgid "removes supplied key or key file from LUKS device"
 msgstr "odstraní zadaný klíč nebo soubor s klíčem ze zařízení LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3494
 msgid "changes supplied key or key file of LUKS device"
 msgstr "změní zadaný klíč nebo soubor s klíčem u zařízení LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3495
 msgid "converts a key to new pbkdf parameters"
 msgstr "převede klíč do nových parametrů PBKDF"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "<device> <key slot>"
 msgstr "<zařízení> <pozice_klíče>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "smaže klíč s číslem <pozice_klíče> ze zařízení LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3497
 msgid "print UUID of LUKS device"
 msgstr "zobrazí UUID zařízení LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3498
 msgid "tests <device> for LUKS partition header"
 msgstr "otestuje <zařízení> na hlavičku oddílu LUKS"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3499
 msgid "dump LUKS partition information"
 msgstr "vypíše údaje o oddílu LUKS"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3500
 msgid "dump TCRYPT device information"
 msgstr "vypíše údaje o oddílu TCRYPT"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3501
 msgid "dump BITLK device information"
 msgstr "vypíše údaje o zařízení BITLK"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3502
 msgid "dump FVAULT2 device information"
 msgstr "vypíše údaje o zařízení FVAULT2"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3503
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Uspí zařízení LUKS a smaže klíč (všechny operace budou zmrazeny)"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3504
 msgid "Resume suspended LUKS device"
 msgstr "Probudí uspané zařízení LUKS"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3505
 msgid "Backup LUKS device header and keyslots"
 msgstr "Zálohuje hlavičku zařízení LUKS a jeho pozice s klíči"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3508
+#: src/cryptsetup.c:3506
 msgid "Restore LUKS device header and keyslots"
 msgstr "Obnoví hlavičku zařízení LUKS a jeho pozice s klíči"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <zařízení>"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "Manipulate LUKS2 tokens"
 msgstr "Zachází s tokeny LUKS2"
 
-#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3004,7 +3005,7 @@ msgstr ""
 "\n"
 "<akce> je jedna z:\n"
 
-#: src/cryptsetup.c:3534
+#: src/cryptsetup.c:3532
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -3016,7 +3017,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3538
+#: src/cryptsetup.c:3536
 #, c-format
 msgid ""
 "\n"
@@ -3031,7 +3032,7 @@ msgstr ""
 "<pozice_klíče> je číslo pozice klíče LUKS, který se má upravit\n"
 "<soubor_s_klíčem> je volitelný soubor s novým klíčem pro akci luksAddKey\n"
 
-#: src/cryptsetup.c:3545
+#: src/cryptsetup.c:3543
 #, c-format
 msgid ""
 "\n"
@@ -3040,7 +3041,7 @@ msgstr ""
 "\n"
 "Výchozí zakompilovaný formát metadat (pro akci luksFormat) je %s.\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3548
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3048,12 +3049,12 @@ msgstr ""
 "\n"
 "Podpora pro zásuvný modul externího tokenu LUKS2 je zapnuta.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3549
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Cesta k zásuvnému modulu externího tokenu LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3553
+#: src/cryptsetup.c:3551
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3061,7 +3062,7 @@ msgstr ""
 "\n"
 "Podpora pro zásuvný modul externího tokenu LUKS2 je vypnuta.\n"
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3555
 #, c-format
 msgid ""
 "\n"
@@ -3078,7 +3079,7 @@ msgstr ""
 "Výchozí PBKDF pro LUKS2: %s\n"
 "\tDoba iterací: %d, nutná paměť: %d kB, souběžná vlákna: %d\n"
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3566
 #, c-format
 msgid ""
 "\n"
@@ -3093,123 +3094,123 @@ msgstr ""
 "\tplain: %s, Klíč: %d bitů, Haš hesla: %s\n"
 "\tLUKS: %s, Klíč: %d bitů, Haš hlavičky LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3577
+#: src/cryptsetup.c:3575
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: V režimu XTS (dva vnitřní klíče) bude výchozí velikost klíče zdvojnásobena.\n"
 
-#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: vyžaduje %s jako argumenty"
 
-#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Pozice klíče není platná."
 
-#: src/cryptsetup.c:3663
+#: src/cryptsetup.c:3661
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Velikost zařízení musí být násobkem 512bajtových sektorů."
 
-#: src/cryptsetup.c:3668
+#: src/cryptsetup.c:3666
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Zadána neplatná maximální velikost horké zóny při přešifrování."
 
-#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
+#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Velikost klíče musí být násobkem 8 bitů."
 
-#: src/cryptsetup.c:3689
+#: src/cryptsetup.c:3687
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Zadat lze nejvíce 2 velikosti klíče."
 
 # TODO: Pluralize
-#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
+#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Zadat lze nejvíce %d klíčů svazku."
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3739
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Zadat lze nejvíce %d klíčenek."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3748
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Maximální velikost zmenšení zařízení je 1 GiB."
 
-#: src/cryptsetup.c:3753
+#: src/cryptsetup.c:3751
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Velikost zmenšení musí být násobkem 512bajtových sektorů."
 
-#: src/cryptsetup.c:3770
+#: src/cryptsetup.c:3768
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Přepínač --priority smí mít pouze argument ignore, normal a prefer."
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Zobrazí tuto nápovědu"
 
-#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Zobrazí stručný návod na použití"
 
-#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Vypíše verzi balíku"
 
-#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Přepínače nápovědy:"
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[PŘEPÍNAČ…] <akce> <přepínače_akce>"
 
-#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Chybí argument <akce>."
 
-#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Neznámá akce."
 
-#: src/cryptsetup.c:3931
+#: src/cryptsetup.c:3929
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Přepínač --key-file má přednost před zadaným argumentem souboru s klíčem."
 
-#: src/cryptsetup.c:3937
+#: src/cryptsetup.c:3935
 msgid "Only one --key-file argument is allowed."
 msgstr "Je dovolen pouze jeden argument přepínače --key-file."
 
-#: src/cryptsetup.c:3942
+#: src/cryptsetup.c:3940
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funkce pro odvození klíče na základě hesla (PBKDF) smí být pouze pbkdf2 nebo argon2i/argon2id."
 
-#: src/cryptsetup.c:3947
+#: src/cryptsetup.c:3945
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Vynucené iterace PBKDF nelze kombinovat s volnou doby iterací."
 
-#: src/cryptsetup.c:3952
+#: src/cryptsetup.c:3950
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Je-li klíčenka vypnuta, klíč svazku nelze do klíčenky přidat."
 
-#: src/cryptsetup.c:3957
+#: src/cryptsetup.c:3955
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Je-li klíčenka vypnuta, popis klíče z klíčenky nelze použít."
 
-#: src/cryptsetup.c:3962
+#: src/cryptsetup.c:3960
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Inline integrita musí být použita spolu s přepínačem --integrity."
 
-#: src/cryptsetup.c:3973
+#: src/cryptsetup.c:3971
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Přepínače --keyslot-cipher a --keyslot-key-size musí být použity spolu."
 
-#: src/cryptsetup.c:3981
+#: src/cryptsetup.c:3979
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Žádný úkon nebude proveden. Zavoláno s přepínačem --test-args.\n"
 
-#: src/cryptsetup.c:3994
+#: src/cryptsetup.c:3992
 msgid "Cannot disable metadata locking."
 msgstr "Zamykání metadata nelze vypnout."
 
@@ -3274,7 +3275,7 @@ msgstr "Příkaz vyžaduje argument <kořenový_haš> nebo přepínač --root-ha
 msgid "<data_device> <hash_device>"
 msgstr "<zařízení_dat> <zařízení_hašů>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:485 src/integritysetup.c:553
 msgid "format device"
 msgstr "naformátuje zařízení"
 
@@ -3290,7 +3291,7 @@ msgstr "ověří zařízení"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<zařízení_dat> <název> <zařízení_hašů> [<kořenový_haš>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:489 src/integritysetup.c:556
 msgid "show active device status"
 msgstr "zobrazí stav aktivního zařízení"
 
@@ -3298,7 +3299,7 @@ msgstr "zobrazí stav aktivního zařízení"
 msgid "<hash_device>"
 msgstr "<zařízení_hašů>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:490 src/integritysetup.c:557
 msgid "show on-disk information"
 msgstr "zobrazí údaje z disku"
 
@@ -3359,24 +3360,24 @@ msgstr "Formátováno s velikostí značky %u%s, vnitřní integrita %s.\n"
 msgid " (inline hw tags)"
 msgstr " (inline hardwarové značky)"
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:303
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Nastavení příznaku přepočtu není podporováno, místo toho zvažte použití --wipe."
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:380 src/integritysetup.c:540
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Zařízení %s není platným zařízením INTEGRITY."
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:553 src/integritysetup.c:557
 msgid "<integrity_device>"
 msgstr "<zařízení_s_daty_integrity>"
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:554
 msgid "<integrity_device> <name>"
 msgstr "<zařízení_s_daty_integrity> <název>"
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:577
 #, c-format
 msgid ""
 "\n"
@@ -3387,7 +3388,7 @@ msgstr ""
 "<název> je zařízení, které bude vytvořeno pod %s\n"
 "<zařízení_s_daty_integrity> je zařízení obsahující data se značkami integrity\n"
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:582
 #, c-format
 msgid ""
 "\n"
@@ -3401,48 +3402,48 @@ msgstr ""
 "\tMaximální velikost souboru s klíčem: %d kB\n"
 
 # TODO: Pluralize
-#: src/integritysetup.c:636
+#: src/integritysetup.c:639
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Neplatná velikost --%s. Maximální je %u bajtů."
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:742
 msgid "Both key file and key size options must be specified."
 msgstr "Musí být zadány oba přepínače pro soubor s klíčem a velikostí klíče."
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:746
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Musí být zadány oba přepínače pro soubor s klíčem žurnálu a velikostí klíče."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:749
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Je-li použit klíč integrity žurnálu, musí být zadán algoritmus integrity žurnálu."
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:753
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Musí být zadány oba přepínače pro soubor s šifrovacím klíčem žurnálu a velikostí klíče."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:756
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Je-li použit šifrovací klíč žurnálu, musí být zadán algoritmus šifrování žurnálu."
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:760
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Přepínače režimu bitmapy a obnovení se vzájemně vylučují."
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:767
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Přepínače žurnálu nelze použití spolu s režimem bitmapy."
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:772
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Přepínače bitmapy lze použít jen při režimu bitmapy."
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:778
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Režim inline nelze kombinovat s možnostmi žurnálu a bitmapy."
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:782
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Režim inline nelze kombinovat se odděleným zařízením pro data."
 
@@ -4403,6 +4404,10 @@ msgstr "Na stroji není povolena autentizace veřejným klíčem.\n"
 msgid "Public key authentication error: "
 msgstr "Chyba při autentizaci veřejným klíčem: "
 
+#, c-format
+#~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
+#~ msgstr "Z %2$s nebylo možné přečíst nebo ověřit kopii č. %1$d metadat BITLK FVE."
+
 #~ msgid "Activation of BITLK device with clear key protection is not supported."
 #~ msgstr "Aktivace zařízení BITLK s ochranou pomocí nešifrovaného klíče není podporována."
 

From 22540e88d1fac8e37480021053719fe70156e745 Mon Sep 17 00:00:00 2001
From: Roland Illig <roland.illig@gmx.de>
Date: Tue, 31 Mar 2026 11:31:32 +0200
Subject: [PATCH 051/244] po: update de.po (from translationproject.org)

---
 po/de.po | 736 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 370 insertions(+), 366 deletions(-)

diff --git a/po/de.po b/po/de.po
index ad7727c36..1355c6983 100644
--- a/po/de.po
+++ b/po/de.po
@@ -1,14 +1,14 @@
 # German translation for the cryptsetup package.
 # Copyright (C) 2010 Free Software Foundation, Inc.
 # This file is distributed under the same license as the cryptsetup package.
-# Roland Illig <roland.illig@gmx.de>, 2010-2025.
+# Roland Illig <roland.illig@gmx.de>, 2010-2026.
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.2-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-12-12 18:51+0100\n"
-"PO-Revision-Date: 2025-12-14 15:42+0100\n"
+"POT-Creation-Date: 2026-03-30 14:18+0200\n"
+"PO-Revision-Date: 2026-03-30 21:37+0200\n"
 "Last-Translator: Roland Illig <roland.illig@gmx.de>\n"
 "Language-Team: German <translation-team-de@lists.sourceforge.net>\n"
 "Language: de\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 "X-Bugs: Report translation errors to the Language-Team address.\n"
-"X-Generator: Poedit 3.7\n"
+"X-Generator: Poedit 3.9\n"
 
 #: lib/libdevmapper.c:419
 msgid "Cannot initialize device-mapper, running as non-root user."
@@ -186,8 +186,8 @@ msgstr "Gerätegröße ist nicht an logischer Sektorgröße ausgerichtet."
 msgid "Header detected but device %s is too small."
 msgstr "Header gefunden, aber Gerät »%s« ist zu klein."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
-#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
+#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
+#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
 msgid "This operation is not supported for this device type."
 msgstr "Diese Operation wird für diese Geräteart nicht unterstützt."
 
@@ -200,10 +200,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Fehler beim Rückabwickeln der LUKS2-Metadaten im Speicher."
 
 #: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
-#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
-#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
-#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
+#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -220,7 +220,7 @@ msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Kein bekanntes Verschlüsselungsmuster für aktives Gerät »%s« entdeckt."
 
 #: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5805
+#: lib/setup.c:3783 lib/setup.c:5816
 #, c-format
 msgid "Device %s is not active."
 msgstr "Gerät »%s« ist nicht aktiv."
@@ -247,7 +247,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Gerät für separierte Metadaten wird für diese Verschlüsselungsart nicht unterstützt."
 
 #: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
 msgid "Unsupported encryption sector size."
 msgstr "Nicht unterstützte Sektorengröße für Verschlüsselung."
 
@@ -300,9 +300,9 @@ msgstr "Verschlüsselung »%s-%s« (Schlüsselgröße %zd Bits) ist nicht verfü
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "WARNUNG: Die Geräteaktivierung wird fehlschlagen, dm-crypt fehlt die Unterstützung für die angeforderte Verschlüsselungsgröße.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
+#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4494
+#: lib/luks2/luks2_reencrypt.c:4497
 #, c-format
 msgid "Device %s is too small."
 msgstr "Gerät »%s« ist zu klein."
@@ -460,7 +460,7 @@ msgid "Unsupported parameters on device %s."
 msgstr "Nicht unterstützte Parameter für Gerät %s."
 
 #: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
+#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Parameter für Gerät %s sind durcheinander."
@@ -470,7 +470,7 @@ msgid "Crypt devices mismatch."
 msgstr "Verschlüsselungsgeräte passen nicht zusammen."
 
 #: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
+#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Gerät »%s« konnte nicht neugeladen werden."
@@ -482,8 +482,8 @@ msgid "Failed to suspend device %s."
 msgstr "Gerät »%s« konnte nicht stillgelegt werden."
 
 #: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
-#: lib/luks2/luks2_reencrypt.c:4237
+#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
+#: lib/luks2/luks2_reencrypt.c:4240
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Gerät »%s« konnte nicht fortgesetzt werden."
@@ -565,187 +565,187 @@ msgstr "Fehler beim Aufwecken von Gerät »%s« aus dem Ruhezustand."
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Fehler beim Ablösen des Laufwerkschlüssels vom benutzerspezifischen Schlüsselbund."
 
-#: lib/setup.c:4423 lib/setup.c:5592
+#: lib/setup.c:4423 lib/setup.c:5603
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Fehler beim Verknüpfen des Laufwerkschlüssels im benutzerspezifischen Schlüsselbund."
 
-#: lib/setup.c:4521 src/cryptsetup.c:2723
+#: lib/setup.c:4522 src/cryptsetup.c:2721
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Laufwerk »%s« ist nicht im Ruhezustand."
 
-#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
-#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
+#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
+#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
 #: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Der Laufwerksschlüssel passt nicht zum Laufwerk."
 
-#: lib/setup.c:4776
+#: lib/setup.c:4787
 msgid "Failed to swap new key slot."
 msgstr "Neues Schlüsselfach konnte nicht ausgewechselt werden."
 
-#: lib/setup.c:4874
+#: lib/setup.c:4885
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Schlüsselfach %d ist ungültig."
 
-#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
-#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
+#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Schlüsselfach %d ist nicht aktiv."
 
-#: lib/setup.c:4899
+#: lib/setup.c:4910
 msgid "Device header overlaps with data area."
 msgstr "Geräteheader und Datenbereich überlappen sich."
 
-#: lib/setup.c:5120
+#: lib/setup.c:5131
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Wiederverschlüsselung läuft bereits. Das Gerät kann nicht aktiviert werden."
 
-#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3722
+#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
+#: lib/luks2/luks2_reencrypt.c:3725
 msgid "Failed to get reencryption lock."
 msgstr "Fehler beim Zugriff auf die Sperre zur Wiederverschlüsselung."
 
-#: lib/setup.c:5144
+#: lib/setup.c:5155
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Fehler beim Wiederherstellen der LUKS2-Wiederverschlüsselung mittels Laufwerksschlüssel(n)."
 
-#: lib/setup.c:5280
+#: lib/setup.c:5291
 #, c-format
 msgid "Device %s already exists."
 msgstr "Das Gerät »%s« existiert bereits."
 
-#: lib/setup.c:5287
+#: lib/setup.c:5298
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Gerät »%s« kann nicht verwendet werden, da es gerade benutzt wird oder der Name ungültig ist."
 
-#: lib/setup.c:5299
+#: lib/setup.c:5310
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Die Laufwerksschlüssel für die Wiederverschlüsselung passen nicht zum Laufwerk."
 
-#: lib/setup.c:5316
+#: lib/setup.c:5327
 msgid "Incorrect volume key specified for plain device."
 msgstr "Falscher Laufwerksschlüssel für Plain-Gerät angegeben."
 
-#: lib/setup.c:5342 lib/setup.c:5403
+#: lib/setup.c:5353 lib/setup.c:5414
 msgid "Device type is not properly initialized."
 msgstr "Geräteart ist nicht richtig initialisiert."
 
-#: lib/setup.c:5441
+#: lib/setup.c:5452
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Der Kernel-Schlüsselbund wird vom Kernel nicht unterstützt."
 
-#: lib/setup.c:5445
+#: lib/setup.c:5456
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Der Kernel-Schlüsselbund fehlt. Wird benötigt, um die Signatur zum Kernel zu übergeben."
 
-#: lib/setup.c:5500
+#: lib/setup.c:5511
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Schlüsselringschlüssel »%s« kann nicht verwendet werden."
 
-#: lib/setup.c:5713
+#: lib/setup.c:5724
 msgid "Incorrect root hash specified for verity device."
 msgstr "Falscher Root-Hash-Schlüssel für VERITY-Gerät angegeben."
 
-#: lib/setup.c:5754 lib/setup.c:5779
+#: lib/setup.c:5765 lib/setup.c:5790
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL unterstützt verzögertes Deaktivieren nicht."
 
-#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Gerät »%s« wird gerade benutzt."
 
-#: lib/setup.c:5787
+#: lib/setup.c:5798
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Fehler beim Abbrechen des verzögerten Löschens von Gerät »%s«."
 
-#: lib/setup.c:5809
+#: lib/setup.c:5820
 #, c-format
 msgid "Invalid device %s."
 msgstr "Ungültiges Gerät »%s«."
 
-#: lib/setup.c:5956
+#: lib/setup.c:5967
 msgid "Volume key buffer too small."
 msgstr "Laufwerks-Schlüsselpuffer zu klein."
 
-#: lib/setup.c:5967
+#: lib/setup.c:5978
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für LUKS2-Gerät."
 
-#: lib/setup.c:5976
+#: lib/setup.c:5987
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für LUKS1-Gerät."
 
-#: lib/setup.c:5990
+#: lib/setup.c:6001
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für Plain-Gerät."
 
-#: lib/setup.c:5998
+#: lib/setup.c:6009
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Root-Hash für Verity-Gerät kann nicht ermittelt werden."
 
-#: lib/setup.c:6007
+#: lib/setup.c:6018
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für BITLK-Gerät."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6023
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für FVAULT2-Gerät."
 
-#: lib/setup.c:6014
+#: lib/setup.c:6025
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Diese Operation wird für Kryptogerät »%s« nicht unterstützt."
 
-#: lib/setup.c:6199 lib/setup.c:6210
+#: lib/setup.c:6210 lib/setup.c:6221
 msgid "Dump operation is not supported for this device type."
 msgstr "Die Dump-Operation wird für diese Geräteart nicht unterstützt."
 
-#: lib/setup.c:6590
+#: lib/setup.c:6601
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Datenoffset ist kein Vielfaches von %u Bytes."
 
-#: lib/setup.c:6898
+#: lib/setup.c:6909
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Gerät »%s« kann nicht konvertiert werden, da es gerade benutzt wird."
 
-#: lib/setup.c:7206 lib/setup.c:7350
+#: lib/setup.c:7217 lib/setup.c:7361
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Schlüsselfach %u konnte nicht dem Laufwerksschlüssel zugeordnet werden."
 
-#: lib/setup.c:7230
+#: lib/setup.c:7241
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Fehler beim Initialisieren der LUKS2-Schlüsselfach-Parameter."
 
-#: lib/setup.c:7236
+#: lib/setup.c:7247
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Schlüsselfach %d konnte nicht dem Digest zugeordnet werden."
 
-#: lib/setup.c:7467
+#: lib/setup.c:7478
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Schlüsselfach kann nicht hinzugefügt werden, da alle Fächer deaktiviert sind und kein Laufwerksschlüssel angegeben wurde."
 
-#: lib/setup.c:7540 lib/verity/verity.c:333
+#: lib/setup.c:7551 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Fehler beim Laden des Schlüssels im Kernel-Schlüsselbund."
 
-#: lib/setup.c:7731
+#: lib/setup.c:7742
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Schlüsselbund mit der Beschreibung »%s« nicht gefunden."
 
-#: lib/setup.c:7796
+#: lib/setup.c:7807
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Globale Speicherzugriffsserialisierungssperre konnte nicht angefordert werden."
 
@@ -802,40 +802,45 @@ msgstr "Gerät »%s« ist nicht kompatibel."
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "Merkwürdige Optimale-Datenübertragungs-Größe für Datengerät (%u Bytes) wird ignoriert."
 
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "Fehler beim Vergrößern von %s auf %<PRIu64> Bytes (%s)."
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "Gerät »%s« ist zu klein. Mindestens %<PRIu64> Bytes erforderlich."
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "Gerät »%s« kann nicht benutzt werden, da es bereits anderweitig benutzt wird."
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "Gerät »%s« kann nicht verwendet werden, Zugriff verweigert."
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "Fehler beim Abrufen der Infos über Gerät »%s«."
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "Das Loopback-Gerät kann nicht benutzt werden, da das Programm nicht mit Root-Rechten läuft."
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "Anklemmen des Loopback-Geräts fehlgeschlagen (das Loopback-Gerät benötigt den »autoclear«-Schalter)."
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "Der angeforderte Offset ist jenseits der wirklichen Größe des Geräts »%s«."
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "Gerät »%s« hat die Größe 0."
@@ -979,9 +984,9 @@ msgstr "E/A-Fehler beim Verschlüsseln des Schlüsselfachs."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
 #: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
 #: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
@@ -1127,7 +1132,7 @@ msgstr "LUKS-Verschlüsselungsmodus %s ist ungültig."
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS-Hash %s ist ungültig."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Keine bekannten Probleme im LUKS-Header erkannt."
 
@@ -1221,11 +1226,11 @@ msgstr "Maximale Länge der TCRYPT-Passphrase (%zu) überschritten."
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "Der Hash-Algorithmus »%s« für PBKDF2 wird nicht unterstützt, überspringe diesen Teil."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
+#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
 msgid "Required kernel crypto interface not available."
 msgstr "Die benötigte Crypto-Kernel-Schnittstelle ist nicht verfügbar."
 
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
+#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
 msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr "Stellen Sie sicher, dass das Kernelmodul »algif_skcipher« geladen ist."
 
@@ -1296,11 +1301,6 @@ msgstr "Nicht unterstützte Sektorengröße %<PRIu16>."
 msgid "Failed to read BITLK header from %s."
 msgstr "Fehler beim Lesen des BITLK-Headers von »%s«."
 
-#: lib/bitlk/bitlk.c:593
-#, c-format
-msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
-msgstr "Fehler beim Lesen oder Validieren der BITLK-FVE-Metadaten-Kopie Nummer %d von »%s«."
-
 #: lib/bitlk/bitlk.c:603
 #, c-format
 msgid "Failed to read and validate BITLK FVE metadata from %s."
@@ -1376,42 +1376,42 @@ msgstr "Diese Operation wird nicht unterstützt."
 msgid "Unexpected key data size."
 msgstr "Unerwartete Größe des Datenschlüssels."
 
-#: lib/bitlk/bitlk.c:1431
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Dieses BITLK-Gerät ist in einem nicht unterstützten Zustand und kann daher nicht aktiviert werden."
 
-#: lib/bitlk/bitlk.c:1436
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "BITLK-Geräte der Art »%s« können nicht aktiviert werden."
 
-#: lib/bitlk/bitlk.c:1475
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "WARNUNG: BitLocker-Datenträgergröße %<PRIu64> stimmt nicht mit der zugrunde liegenden Gerätegröße %<PRIu64> überein"
 
-#: lib/bitlk/bitlk.c:1602
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Gerät kann nicht aktiviert werden, dem Kernelmodul dm-crypt fehlt die Unterstützung für BITLK-IV."
 
-#: lib/bitlk/bitlk.c:1606
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Gerät kann nicht aktiviert werden, da dem Kernelmodul dm-crypt die Unterstützung für BITLK-Elephant-Verschleierer fehlt."
 
-#: lib/bitlk/bitlk.c:1610
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Gerät kann nicht aktiviert werden, dem Kernelmodul dm-crypt fehlt die Unterstützung für große Sektoren."
 
-#: lib/bitlk/bitlk.c:1614
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Gerät kann nicht aktiviert werden, das Kernelmodul dm-crypt existiert nicht."
 
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "Fehler beim Einlesen von %u Bytes aus dem Laufwerks-Kopfbereich."
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "Nicht unterstützte VFAULT2-Version %<PRIu16>."
@@ -1488,23 +1488,23 @@ msgstr "Fehler beim Verifizieren an Position %<PRIu64>."
 msgid "Hash area overflow."
 msgstr "Überlauf des Hashbereichs."
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "Fehler beim Verifizieren des Datenbereichs."
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "Fehler beim Verifizieren des Root-Hashes."
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "E/A-Fehler beim Anlegen des Hash-Bereiches."
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "Fehler beim Anlegen des Hash-Bereiches."
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "WARNUNG: Kernel kann das Gerät nicht aktivieren, wenn die Datenblockgröße die Seitengröße (%u) übersteigt."
@@ -1559,19 +1559,19 @@ msgstr "Fehler beim Ermitteln der Größe von Gerät »%s«."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Inkompatible Metadaten des Kernelmoduls dm-integrity (Version %u) auf %s entdeckt."
 
-#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Kernel unterstützt dm-integrity-Zuordnung nicht."
 
-#: lib/integrity/integrity.c:310
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Kernel unterstützt feste Ausrichtung der Metadaten für dm-integrity nicht."
 
-#: lib/integrity/integrity.c:319
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Der Kernel weigert sich, die unsichere Neuberechnungs-Option zu aktivieren. Um dies zu übersteuern, können Sie die veralteten Aktivierungsoptionen nutzen."
 
-#: lib/integrity/integrity.c:325
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Kernel unterstützt dm-integrity-Inlinemodus nicht."
 
@@ -1720,7 +1720,7 @@ msgstr "Das zugrundeliegende dm-integrity-Gerät hat unerwartete Datensektoren b
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Wiederverschlüsselung läuft gerade. Das Gerät kann nicht deaktiviert werden."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
+#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Das stillgelegte Gerät »%s« mit dm-error-Ziel konnte nicht in den Fehlerzustand gesetzt werden."
@@ -1799,7 +1799,7 @@ msgstr "Fehler beim Prüfen des Zustands von Gerät mit der UUID %s."
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Fehler beim Konvertieren des Headers mit zusätzlichen LUKSMETA-Metadaten."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
+#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Die Chiffrierspezifikation %s-%s kann für LUKS2 nicht verwendet werden."
@@ -1883,7 +1883,7 @@ msgstr "Gerätegröße muss ein Vielfaches der berechneten Zonenausrichtung (%zu
 
 #: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
 #: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4077
+#: lib/luks2/luks2_reencrypt.c:4080
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Fehler beim Initialisieren der Umverpackung für den Speicher alter Segmente."
 
@@ -1891,7 +1891,7 @@ msgstr "Fehler beim Initialisieren der Umverpackung für den Speicher alter Segm
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Fehler beim Initialisieren der Umverpackung für den Speicher neuer Segmente."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
+#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
 msgid "Failed to initialize hotzone protection."
 msgstr "Fehler beim Initialisieren des Hotzone-Schutzes."
 
@@ -1899,7 +1899,7 @@ msgstr "Fehler beim Initialisieren des Hotzone-Schutzes."
 msgid "Failed to read checksums for current hotzone."
 msgstr "Fehler beim Lesen der Prüfsummen für die aktuelle Hotzone."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Fehler beim Lesen des Hotzone-Bereichs, der bei %<PRIu64> beginnt."
@@ -1988,8 +1988,8 @@ msgstr "Die reduzierte Datengröße ist größer als die tatsächliche Gerätegr
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Datengerät ist nicht an der angeforderten Verschlüsselungs-Sektorgröße (%<PRIu32> Bytes) ausgerichtet."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
-#: lib/luks2/luks2_reencrypt.c:3661
+#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
+#: lib/luks2/luks2_reencrypt.c:3664
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Fehler beim exklusiven Öffnen von »%s« (wird bereits anderweitig benutzt)."
@@ -1998,123 +1998,123 @@ msgstr "Fehler beim exklusiven Öffnen von »%s« (wird bereits anderweitig benu
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Das Gerät ist nicht für LUKS2-Wiederverschlüsselung markiert."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
+#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Fehler beim Laden des LUKS2-Wiederverschlüsselungs-Kontextes."
 
-#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
+#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
 msgid "Device is not in reencryption."
 msgstr "Das Gerät befindet sich nicht in der Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
+#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
 msgid "Reencryption process is already running."
 msgstr "Der Wiederverschlüsselungs-Vorgang läuft bereits."
 
-#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
+#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
 msgid "Failed to acquire reencryption lock."
 msgstr "Fehler beim Zugriff auf die Schreibsperre für die Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:3468
+#: lib/luks2/luks2_reencrypt.c:3471
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Wiederverschlüsselung kann nicht fortgesetzt werden. Führen Sie zuerst die Wiederverschlüsselungs-Wiederherstellung durch."
 
-#: lib/luks2/luks2_reencrypt.c:3604
+#: lib/luks2/luks2_reencrypt.c:3607
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Aktive Gerätegröße und angeforderte Wiederverschlüsselungsgröße passen nicht zusammen."
 
-#: lib/luks2/luks2_reencrypt.c:3618
+#: lib/luks2/luks2_reencrypt.c:3621
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "Ungültige Gerätegröße wurde in den Wiederverschlüsselungsparametern angefordert."
 
-#: lib/luks2/luks2_reencrypt.c:3720
+#: lib/luks2/luks2_reencrypt.c:3723
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Wiederverschlüsselung läuft bereits. Wiederherstellung ist nicht möglich."
 
-#: lib/luks2/luks2_reencrypt.c:3741
+#: lib/luks2/luks2_reencrypt.c:3744
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Fehler beim Wiederherstellen der LUKS2-Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
 msgid "Failed to initialize reencryption device stack."
 msgstr "Fehler beim Initialisieren des Gerätestapels für Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3910
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "LUKS2-Wiederverschlüsselung ist in den Metadaten bereits initialisiert."
 
-#: lib/luks2/luks2_reencrypt.c:3915
+#: lib/luks2/luks2_reencrypt.c:3918
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "LUKS2-Wiederverschlüsselung konnte in den Metadaten nicht initialisiert werden."
 
-#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
-#: lib/luks2/luks2_reencrypt.c:4030
+#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
+#: lib/luks2/luks2_reencrypt.c:4033
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Wiederverschlüsselung wird für DAX-Geräte (persistenten Speicher) nicht unterstützt."
 
-#: lib/luks2/luks2_reencrypt.c:4059
+#: lib/luks2/luks2_reencrypt.c:4062
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Fehler beim Festlegen der Gerätesegmente für die nächste Wiederverschlüsselungs-Hotzone."
 
-#: lib/luks2/luks2_reencrypt.c:4112
+#: lib/luks2/luks2_reencrypt.c:4115
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Fehler beim Schreiben der Metadaten für robuste Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:4119
+#: lib/luks2/luks2_reencrypt.c:4122
 msgid "Decryption failed."
 msgstr "Fehler beim Entschlüsseln."
 
-#: lib/luks2/luks2_reencrypt.c:4124
+#: lib/luks2/luks2_reencrypt.c:4127
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Fehler beim Schreiben des Hotzone-Bereichs, der bei %<PRIu64> beginnt."
 
-#: lib/luks2/luks2_reencrypt.c:4129
+#: lib/luks2/luks2_reencrypt.c:4132
 msgid "Failed to sync data."
 msgstr "Fehler beim Synchronisieren von Daten."
 
-#: lib/luks2/luks2_reencrypt.c:4137
+#: lib/luks2/luks2_reencrypt.c:4140
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Fehler beim Aktualisieren der Metadaten, nachdem die aktuelle Wiederverschlüsselungs-Hotzone beendet wurde."
 
-#: lib/luks2/luks2_reencrypt.c:4226
+#: lib/luks2/luks2_reencrypt.c:4229
 msgid "Failed to write LUKS2 metadata."
 msgstr "Fehler beim Schreiben der LUKS2-Metadaten."
 
-#: lib/luks2/luks2_reencrypt.c:4249
+#: lib/luks2/luks2_reencrypt.c:4252
 msgid "Failed to wipe unused data device area."
 msgstr "Fehler beim gründlichen Löschen des ungenutzten Bereichs auf dem Gerät."
 
-#: lib/luks2/luks2_reencrypt.c:4255
+#: lib/luks2/luks2_reencrypt.c:4258
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Fehler beim Entfernen des ungenutzten (ungebundenen) Schlüsselfachs %d."
 
-#: lib/luks2/luks2_reencrypt.c:4265
+#: lib/luks2/luks2_reencrypt.c:4268
 msgid "Failed to remove reencryption keyslot."
 msgstr "Fehler beim Entfernen des Schlüsselfachs zur Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:4275
+#: lib/luks2/luks2_reencrypt.c:4278
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Schwerwiegender Fehler beim Wiederverschlüsseln des Blocks bei %<PRIu64>, %<PRIu64> Sektoren lang."
 
-#: lib/luks2/luks2_reencrypt.c:4279
+#: lib/luks2/luks2_reencrypt.c:4282
 msgid "Online reencryption failed."
 msgstr "Fehler bei Online-Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:4284
+#: lib/luks2/luks2_reencrypt.c:4287
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Das Gerät nicht fortsetzen, außer es wird manuell durch das Fehlerziel ersetzt."
 
-#: lib/luks2/luks2_reencrypt.c:4336
+#: lib/luks2/luks2_reencrypt.c:4339
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Wiederverschlüsselung kann nicht fortgesetzt werden. Unerwarteter Zustand der Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:4342
+#: lib/luks2/luks2_reencrypt.c:4345
 msgid "Missing or invalid reencrypt context."
 msgstr "Fehlender oder ungültiger Wiederverschlüsselungs-Kontext."
 
-#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
+#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
 msgid "Failed to update reencryption context."
 msgstr "Fehler beim Aktualisieren des Wiederverschlüsselungskontexts."
 
@@ -2150,7 +2150,7 @@ msgstr "Verschlüsselungsparameter für Schlüsselfach wird nur für LUKS2-Gerä
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Verschlüsselungsparameter für Schlüsselfach sind nicht mit LUKS2-Schlüsselfach-Verschlüsselung kompatibel."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
+#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2178,7 +2178,7 @@ msgstr "WARNUNG: Der Parameter --hash wird im Plain-Modus ignoriert, wenn eine S
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "WARNUNG: Die Option --keyfile-size wird ignoriert, da die Lesegröße die gleiche ist wie die Verschlüsselungsschlüsselgröße ist.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2189,9 +2189,9 @@ msgstr "Fehler beim Blkid-Scan für %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Gerätesignaturen auf »%s« erkannt. Wenn Sie fortfahren, könnte das bestehende Daten beschädigen."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
-#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
-#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2242,7 +2242,7 @@ msgstr ""
 "daher ausschließlich an einem sicheren Ort und verschlüsselt\n"
 "aufbewahrt werden."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2263,15 +2263,15 @@ msgstr "Gerät »%s« ist kein gültiges FVAULT2-Gerät."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Die Größe des Laufwerksschlüssels für FVAULT2 kann nicht ermittelt werden, bitte nutzen Sie die Option »--key-size«."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Gerät »%s« ist noch aktiv und zum verzögerten Entfernen eingeplant.\n"
 
 # upstream: period missing
-#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
-#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
-#: src/cryptsetup.c:3264
+#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
+#: src/cryptsetup.c:3262
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Fehler beim Festlegen des externen Tokenpfads »%s«."
@@ -2280,47 +2280,47 @@ msgstr "Fehler beim Festlegen des externen Tokenpfads »%s«."
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Um die Größe von aktiven Geräten zu öndern, muss der Laufwerksschlüssel im Schlüsselbund sein, aber die Option --disable-keyring wurde angegeben."
 
-#: src/cryptsetup.c:1059
+#: src/cryptsetup.c:1057
 msgid "Benchmark interrupted."
 msgstr "Benchmark unterbrochen."
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1078
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     (nicht zutreffend)\n"
 
-#: src/cryptsetup.c:1082
+#: src/cryptsetup.c:1080
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u Iterationen pro Sekunde für %zu-Bit-Schlüssel\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1094
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s (nicht zutreffend)\n"
 
-#: src/cryptsetup.c:1098
+#: src/cryptsetup.c:1096
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u Iterationen, %5u Speicher, %1u parallele Threads (CPUs) für %zu-Bit-Schlüssel (Zieldauer %u Millisekunden)\n"
 
-#: src/cryptsetup.c:1122
+#: src/cryptsetup.c:1120
 msgid "Result of benchmark is not reliable."
 msgstr "Das Ergebnis des Benchmarks ist nicht zuverlässig."
 
-#: src/cryptsetup.c:1172
+#: src/cryptsetup.c:1170
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Die Tests sind nur annähernd genau, da sie nicht auf den Datenträger zugreifen.\n"
 
 # upstream: the following line should also be translated. This is because the long word "Schlüssel" for "Key" will break the layout, as well as "Verschlüsselung" for "Encryption".
 # To help the translators, you should provide an example for what goes into the %x placeholders, since I had to make an educated guess that the second %s would be exactly 4 characters long. This is an unnecessary burden for the translators.
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1197
+#: src/cryptsetup.c:1195
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s   Algorithmus | Schlüssel | Verschlüsselung | Entschlüsselung\n"
 
-#: src/cryptsetup.c:1205
+#: src/cryptsetup.c:1203
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Verschlüsselung »%s« (mit Schlüsselgröße %i Bits) ist nicht verfügbar."
@@ -2328,15 +2328,15 @@ msgstr "Verschlüsselung »%s« (mit Schlüsselgröße %i Bits) ist nicht verfü
 # upstream: the following line should also be translated. This is because the long word "Schlüssel" for "Key" will break the layout, as well as "Verschlüsselung" for "Encryption".
 # To help the translators, you should provide an example for what goes into the %x placeholders, since I had to make an educated guess that the second %s would be exactly 4 characters long. This is an unnecessary burden for the translators.
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1222
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#   Algorithmus | Schlüssel | Verschlüsselung | Entschlüsselung\n"
 
-#: src/cryptsetup.c:1235
+#: src/cryptsetup.c:1233
 msgid "N/A"
 msgstr "N/A"
 
-#: src/cryptsetup.c:1260
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2344,27 +2344,27 @@ msgstr ""
 "Ungeschützte LUKS2-Metadaten für die Wiederverschlüsselung entdeckt. Bitte überprüfen Sie, ob die Wiederverschlüsselungsoperation erwünscht ist (siehe luksDump-Ausgabe)\n"
 "und fahren Sie nur fort (Upgrade der Metadaten), wenn Sie den Vorgang als echt anerkennen."
 
-#: src/cryptsetup.c:1266
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Geben Sie die Passphrase für den Schutz und das Aktualisieren der Metadaten für die Wiederverschlüsselung ein: "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Wirklich mit der Wiederherstellung der LUKS2-Wiederverschlüsselung fortfahren?"
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Geben Sie die Passphrase für das Prüfen der Metadaten für die Wiederverschlüsselung ein: "
 
-#: src/cryptsetup.c:1321
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Geben Sie die Passphrase für die Wiederherstellung der Wiederverschlüsselung ein: "
 
-#: src/cryptsetup.c:1383
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Wirklich versuchen, den LUKS-Geräteheader wiederherzustellen?"
 
-#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2372,7 +2372,7 @@ msgstr ""
 "\n"
 "Gründlich löschen unterbrochen."
 
-#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2381,167 +2381,167 @@ msgstr ""
 "Sie können diesen Vorgang mit Strg+C unterbrechen (der nicht gesäuberte Bereich des Geräts wird dann ungültige Prüfsummen haben).\n"
 
 # upstream: it is boring that I have to translate the newline at the end of each of these messages. Translating strings without newlines is much easier and faster. Since it is redundant anyway (all calls to log_err have a trailing newline), this newline should be written implicitly.
-#: src/cryptsetup.c:1438 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Fehler beim Deaktivieren des temporären Geräts »%s«."
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "OPAL hw-only Verschlüsselung unterstützt nicht --cipher und --key-size, die Optionen werden ignoriert."
 
-#: src/cryptsetup.c:1499
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Die Integritätsoption kann nur für das LUKS2-Format verwendet werden."
 
-#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nicht unterstützte Optionen für Größe der LUKS-Metadaten."
 
-#: src/cryptsetup.c:1509
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL wird nur für das LUKS2-Format unterstützt."
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Inline-Hardware-Tokens werden nur für das LUKS2-Format unterstützt."
 
-#: src/cryptsetup.c:1523
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Die Headerdatei existiert nicht, soll sie angelegt werden?"
 
-#: src/cryptsetup.c:1531
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Fehler beim Anlegen der Headerdatei »%s«."
 
-#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Kein bekanntes Integritätsspezifikationsmuster entdeckt."
 
-#: src/cryptsetup.c:1559
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Die angegebene Integritätsschlüsselgröße kann nicht verwendet werden."
 
-#: src/cryptsetup.c:1577
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Das Gerät »%s« kann nicht als Datenträger-Header benutzt werden."
 
-#: src/cryptsetup.c:1606 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Hiermit werden die Daten auf »%s« unwiderruflich überschrieben."
 
-#: src/cryptsetup.c:1643
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Das OPAL-Admin-Passwort darf nicht leer sein."
 
-#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
-#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Fehler beim Festlegen der PBKDF-Parameter."
 
-#: src/cryptsetup.c:1788
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Verringerter Datenoffset ist nur für separaten LUKS-Header erlaubt."
 
-#: src/cryptsetup.c:1795
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "LUKS-Datei-Container %s ist zu klein für die Aktivierung, es ist kein Platz mehr für Daten vorhanden."
 
-#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Die Größe des Laufwerksschlüssels erfordert Schlüsselfächer, bitte nutzen Sie dazu die Option »--key-size«."
 
-#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Das Gerät benötigt zwei Laufwerksschlüssel."
 
-#: src/cryptsetup.c:1891
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Einige angegebene Aktivierungsparameter wurden bei der OPAL-nur-Hardware-Verschlüsselung ignoriert."
 
-#: src/cryptsetup.c:1896
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Gerät aktiviert, aber die Schalter können nicht dauerhaft gespeichert werden."
 
-#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Schlüsselfach %d zum Löschen ausgewählt."
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Dies ist das letzte Schlüsselfach. Wenn Sie diesen Schlüssel löschen, wird das Gerät unbrauchbar."
 
-#: src/cryptsetup.c:1989
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Geben Sie irgendeine verbleibende Passphrase ein: "
 
-#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Vorgang abgebrochen, das Schlüsselfach wurde NICHT gesäubert.\n"
 
-#: src/cryptsetup.c:2026
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Geben Sie die zu löschende Passphrase ein: "
 
-#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
+#: src/cryptsetup.c:3253
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Gerät »%s« ist kein gültiges LUKS2-Gerät."
 
-#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Geben Sie die neue Passphrase für das Schlüsselfach ein: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Geben Sie die PIN des Tokens ein: "
 
-#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Geben Sie die PIN des Tokens %d ein: "
 
-#: src/cryptsetup.c:2210
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "WARNUNG: Der Parameter --key-slot wird für die neue Nummer des Schlüsselfachs verwendet.\n"
 
-#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Geben Sie irgendeine bestehende Passphrase ein: "
 
-#: src/cryptsetup.c:2383
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Geben Sie die zu ändernde Passphrase ein: "
 
-#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Geben Sie die neue Passphrase ein: "
 
-#: src/cryptsetup.c:2449
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Geben Sie die Passphrase für das umzuwandelnde Schlüsselfach ein: "
 
-#: src/cryptsetup.c:2473
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Die Operation »isLuks« unterstützt nur genau ein Geräte-Argument."
 
-#: src/cryptsetup.c:2578
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Schlüsselfach %d enthält keinen unverbundenen Schlüssel."
 
-#: src/cryptsetup.c:2583
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2550,52 +2550,52 @@ msgstr ""
 "Dieser Dump sollte daher ausschließlich an einem sicheren Ort und\n"
 "verschlüsselt aufbewahrt werden."
 
-#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s ist kein aktives %s-Gerät."
 
-#: src/cryptsetup.c:2709
+#: src/cryptsetup.c:2707
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s ist kein aktives LUKS-Gerät, oder der Header fehlt."
 
-#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
+#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
 msgid "Option --header-backup-file is required."
 msgstr "Option »--header-backup-file« muss angegeben werden."
 
-#: src/cryptsetup.c:2836
+#: src/cryptsetup.c:2834
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s ist kein von cryptsetup verwaltetes Gerät."
 
-#: src/cryptsetup.c:2847
+#: src/cryptsetup.c:2845
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Die Geräteart »%s« kann nicht aufgefrischt werden"
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2895
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Unbekannte Art »%s« des Metadaten-Geräts."
 
-#: src/cryptsetup.c:2899
+#: src/cryptsetup.c:2897
 msgid "Command requires device and mapped name as arguments."
 msgstr "Dieser Befehl benötigt den Gerätenamen und den zugeordneten Namen als Argumente."
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL PSID: "
 msgstr "Geben Sie die OPAL-PSID ein: "
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL Admin password: "
 msgstr "Geben Sie das OPAL-Admin-Passwort ein: "
 
-#: src/cryptsetup.c:2925
+#: src/cryptsetup.c:2923
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "Warnung: Der GESAMTE Datenträger wird auf die Werkseinstellungen zurückgesetzt, und alle Daten gehen verloren. Fortsetzen?"
 
-#: src/cryptsetup.c:2968
+#: src/cryptsetup.c:2966
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2604,363 +2604,363 @@ msgstr ""
 "Diese Operation wird alle Schlüsselfächer auf Gerät »%s« löschen.\n"
 "Dadurch wird das Gerät unbrauchbar."
 
-#: src/cryptsetup.c:2975
+#: src/cryptsetup.c:2973
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Vorgang abgebrochen, die Schlüsselfächer wurden NICHT gesäubert.\n"
 
-#: src/cryptsetup.c:3014
+#: src/cryptsetup.c:3012
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Invalid LUKS type, only luks1 and luks2 are supported."
 
-#: src/cryptsetup.c:3030
+#: src/cryptsetup.c:3028
 #, c-format
 msgid "Device is already %s type."
 msgstr "Das Gerät hat bereits den Typ »%s«."
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3035
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Diese Operation wird für »%s« ins Format »%s« umwandeln.\n"
 
-#: src/cryptsetup.c:3040
+#: src/cryptsetup.c:3038
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Vorgang abgebrochen, das Gerät wurde NICHT konvertiert.\n"
 
-#: src/cryptsetup.c:3080
+#: src/cryptsetup.c:3078
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Die Option --priority, --label oder --subsystem fehlt."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d ist ungültig."
 
-#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
+#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d ist in Benutzung."
 
-#: src/cryptsetup.c:3129
+#: src/cryptsetup.c:3127
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Fehler beim Hinzufügen des LUKS2-Schlüsselring-Tokens %d."
 
-#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
+#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Token %d kann nicht dem Schlüsselfach %d zugeordnet werden."
 
-#: src/cryptsetup.c:3157
+#: src/cryptsetup.c:3155
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d wird gerade nicht verwendet."
 
-#: src/cryptsetup.c:3194
+#: src/cryptsetup.c:3192
 msgid "Failed to import token from file."
 msgstr "Token konnte nicht aus der Datei importiert werden."
 
-#: src/cryptsetup.c:3219
+#: src/cryptsetup.c:3217
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Auf Token %d kann nicht für den Export zugegriffen werden."
 
-#: src/cryptsetup.c:3232
+#: src/cryptsetup.c:3230
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d ist nicht dem Schlüsselfach %d zugeordnet."
 
-#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
+#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Token %d kann nicht vom Schlüsselfach %d losgelöst werden."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3298
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Die Optionen --tcrypt-hidden, --tcrypt-system und --tcrypt-backup sind nur zusammen mit einem TCRYPT-Gerät erlaubt."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3301
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Die Optionen --veracrypt und --disable-veracrypt werden nur für TCRYPT-kompatible Geräte unterstützt."
 
-#: src/cryptsetup.c:3306
+#: src/cryptsetup.c:3304
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Die Option --veracrypt-pim wird nur für VeraCrypt-kompatible Geräte unterstützt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3308
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Die Option --veracrypt-query-pim wird nur für VeraCrypt-kompatible Geräte unterstützt."
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3310
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Die Optionen --veracrypt-pim und --veracrypt-query-pim schließen sich gegenseitig aus."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3319
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Die Option --persistent ist nicht mit --test-passphrase kombinierbar."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3322
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Die Optionen --refresh und --test-passphrase schließen sich gegenseitig aus."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3325
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Die Option --shared ist nur beim beim »open«-Befehl eines Plain-Gerätes erlaubt."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3328
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Die Option --skip ist nur beim Öffnen von plain- und loopaes-Geräten erlaubt."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3331
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Die Option --offset mit der Aktion Öffnen wird nur für einfache und loopaes-Geräte unterstützt."
 
-#: src/cryptsetup.c:3336
+#: src/cryptsetup.c:3334
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Die Option --tcrypt-hidden kann nicht mit --allow-discards kombiniert werden."
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3338
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Die Option \"Sektorgröße\" mit der Aktion \"Öffnen\" wird nur für einfache Geräte unterstützt."
 
-#: src/cryptsetup.c:3344
+#: src/cryptsetup.c:3342
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Die Option für große IV-Sektoren wird nur unterstützt, wenn das geöffnete Gerät Sektoren größer als 512 Bytes hat."
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3347
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Die Option --test-passphrase ist nur beim Öffnen von LUKS-, TCRYPT-, BITLK- und FVAULT2-Geräten erlaubt."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
+#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Die Optionen --device-size und --size können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3353
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Die Option »--unbound« ist nur beim »open«-Befehl eines LUKS-Gerätes erlaubt."
 
-#: src/cryptsetup.c:3358
+#: src/cryptsetup.c:3356
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Die Option »--unbound« kann nur in Kombination mit »--test-passphrase« verwendet werden."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3360
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Die Option --volume-key-keyring kann nicht mit --hash oder --volume-key-file kombiniert werden."
 
-#: src/cryptsetup.c:3365
+#: src/cryptsetup.c:3363
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Beide --volume-key-file-Optionen müssen mit den entsprechenden --key-size-Optionen paarweise auftreten."
 
-#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Die Optionen --cancel-deferred und --deferred können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3388
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Die Option »--active-name« ist nur auf LUKS2-Geräte anwendbar."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3391
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Die Optionen »--active-name« und »--force-offline-reencrypt« können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3394
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Die Optionen --new-volume-key-file und --keep-key können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3399
+#: src/cryptsetup.c:3397
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Die Optionen --new-volume-key-keyring und --keep-key können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
+#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
 msgid "Keyslot specification is required."
 msgstr "Das Schlüsselfach muss angegeben werden."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3413
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Die Optionen --align-payload und --offset können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3416
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Die Option --integrity-no-wipe ist nur für die »format«-Aktion mit Integritätserweiterung erlaubt."
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3419
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Nur eine der Optionen --use-[u]random ist erlaubt."
 
-#: src/cryptsetup.c:3429
+#: src/cryptsetup.c:3427
 msgid "Key size is required with --unbound option."
 msgstr "Die Option »--unbound« erfordert die Schlüsselgröße."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3447
 msgid "Invalid token action."
 msgstr "Ungültige Token-Aktion."
 
-#: src/cryptsetup.c:3452
+#: src/cryptsetup.c:3450
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Der Parameter --key-description ist Pflicht für die Aktion »token add«."
 
-#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
+#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Die Aktion erfordert ein bestimmtes Token. Verwenden Sie den Parameter --token-id."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3458
 msgid "Option --unbound is valid only with token add action."
 msgstr "Die Option »--unbound« kann nur zusammen mit der Aktion zum Hinzufügen eines Tokens verwendet werden."
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3460
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Die Optionen --key-slot und --unbound können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3465
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Die Aktion erfordert ein bestimmtes Schlüsselfach. Verwenden Sie den Parameter --key-slot."
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3481
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<Gerät> [--type <Art>] [<Name>]"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "Gerät als <Name> öffnen"
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<Name>"
 
-#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "Gerät schließen (Zuordnung entfernen)"
 
-#: src/cryptsetup.c:3485 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "Größe des aktiven Geräts ändern"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3484
 msgid "show device status"
 msgstr "Gerätestatus anzeigen"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <Algorithmus>]"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "benchmark cipher"
 msgstr "Verschlüsselungsalgorithmus benchmarken"
 
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
-#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
+#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
+#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
+#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
+#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
 msgid "<device>"
 msgstr "<Gerät>"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3486
 msgid "try to repair on-disk metadata"
 msgstr "Versuchen, die Metadaten auf dem Datenträger zu reparieren"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3487
 msgid "reencrypt LUKS2 device"
 msgstr "LUKS2-Gerät wiederverschlüsseln"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3488
 msgid "erase all keyslots (remove encryption key)"
 msgstr "Alle Schlüsselfächer löschen (Verschlüsselungsschlüssel entfernen)"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3489
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "Zwischen den Formaten LUKS und LUKS2 umwandeln"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490
 msgid "set permanent configuration options for LUKS2"
 msgstr "Permanente Konfigurationsoptionen für LUKS2 festlegen"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
 msgid "<device> [<new key file>]"
 msgstr "<Gerät> [<neue Schlüsseldatei>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3491
 msgid "formats a LUKS device"
 msgstr "Ein LUKS-Gerät formatieren"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3492
 msgid "add key to LUKS device"
 msgstr "Schlüssel zu LUKS-Gerät hinzufügen"
 
-#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
 msgid "<device> [<key file>]"
 msgstr "<Gerät> [<Schlüsseldatei>]"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3493
 msgid "removes supplied key or key file from LUKS device"
 msgstr "Entfernt bereitgestellten Schlüssel oder Schlüsseldatei vom LUKS-Gerät"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3494
 msgid "changes supplied key or key file of LUKS device"
 msgstr "Ändert den angegebenen Schlüssel oder die Schlüsseldatei des LUKS-Geräts"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3495
 msgid "converts a key to new pbkdf parameters"
 msgstr "Wandelt einen Schlüssel in neue PBKDF-Parameter um"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "<device> <key slot>"
 msgstr "<Gerät> <Schlüsselfach>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "Löscht Schlüssel mit Nummer <Schlüsselfach> vom LUKS-Gerät"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3497
 msgid "print UUID of LUKS device"
 msgstr "UUID des LUKS-Geräts ausgeben"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3498
 msgid "tests <device> for LUKS partition header"
 msgstr "Testet <Gerät> auf Header einer LUKS-Partition"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3499
 msgid "dump LUKS partition information"
 msgstr "LUKS-Partitionsinformationen ausgeben"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3500
 msgid "dump TCRYPT device information"
 msgstr "TCRYPT-Geräteinformationen ausgeben"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3501
 msgid "dump BITLK device information"
 msgstr "BITLK-Geräteinformationen ausgeben"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3502
 msgid "dump FVAULT2 device information"
 msgstr "VFAULT2-Geräteinformationen ausgeben"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3503
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "LUKS-Gerät in Ruhezustand versetzen und alle Schlüssel auslöschen (alle IOs werden eingefroren)"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3504
 msgid "Resume suspended LUKS device"
 msgstr "LUKS-Gerät aus dem Ruhezustand aufwecken"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3505
 msgid "Backup LUKS device header and keyslots"
 msgstr "Header und Schlüsselfächer eines LUKS-Geräts sichern"
 
-#: src/cryptsetup.c:3508
+#: src/cryptsetup.c:3506
 msgid "Restore LUKS device header and keyslots"
 msgstr "Header und Schlüsselfächer eines LUKS-Geräts wiederherstellen"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <Gerät>"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "Manipulate LUKS2 tokens"
 msgstr "LUKS2-Token manipulieren"
 
-#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2968,7 +2968,7 @@ msgstr ""
 "\n"
 "<Aktion> ist eine von:\n"
 
-#: src/cryptsetup.c:3534
+#: src/cryptsetup.c:3532
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2980,7 +2980,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3538
+#: src/cryptsetup.c:3536
 #, c-format
 msgid ""
 "\n"
@@ -2995,7 +2995,7 @@ msgstr ""
 "<Schlüsselfach> ist die Nummer des zu verändernden LUKS-Schlüsselfachs\n"
 "<Schlüsseldatei> optionale Schlüsseldatei für den neuen Schlüssel der »luksAddKey«-Aktion\n"
 
-#: src/cryptsetup.c:3545
+#: src/cryptsetup.c:3543
 #, c-format
 msgid ""
 "\n"
@@ -3004,7 +3004,7 @@ msgstr ""
 "\n"
 "Vorgegebenes festeingebautes Metadatenformat ist %s (für luksFormat-Aktion).\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3548
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3012,12 +3012,12 @@ msgstr ""
 "\n"
 "Die Plugin-Unterstützung für externe LUKS2-Tokens ist aktiviert.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3549
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Pfad des Plugins für externe LUKS2-Token: %s.\n"
 
-#: src/cryptsetup.c:3553
+#: src/cryptsetup.c:3551
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3025,7 +3025,7 @@ msgstr ""
 "\n"
 "Die Plugin-Unterstützung für externe LUKS2-Tokens ist deaktiviert.\n"
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3555
 #, c-format
 msgid ""
 "\n"
@@ -3042,7 +3042,7 @@ msgstr ""
 "Vorgabe-PBKDF für LUKS2: %s\n"
 "\tIterationszeit: %d, benötigter Speicher: %d kB, parallele Threads: %d\n"
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3566
 #, c-format
 msgid ""
 "\n"
@@ -3057,122 +3057,122 @@ msgstr ""
 "\tplain: %s, Schlüssel: %d Bits, Passphrase-Hashen: %s\n"
 "\tLUKS: %s, Schlüssel: %d Bits, LUKS-Header-Hashen: %s, Zufallszahlengenerator: %s\n"
 
-#: src/cryptsetup.c:3577
+#: src/cryptsetup.c:3575
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Standard-Schlüsselgröße mit XTS-Modus (zwei interne Schlüssel) wird verdoppelt.\n"
 
-#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: Benötigt %s als Argumente"
 
-#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Schlüsselfach ist ungültig."
 
-#: src/cryptsetup.c:3663
+#: src/cryptsetup.c:3661
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Die Gerätegröße muss ein Vielfaches von 512-Byte-Sektoren sein."
 
-#: src/cryptsetup.c:3668
+#: src/cryptsetup.c:3666
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Ungültige Angabe der Maximalgröße für die Wiederverschlüsselungs-Hotzone."
 
-#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
+#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Schlüsselgröße muss ein Vielfaches von 8 Bit sein"
 
-#: src/cryptsetup.c:3689
+#: src/cryptsetup.c:3687
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Es können maximal 2 Schlüsselgrößen angegeben werden."
 
-#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
+#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Es können maximal %d Laufwerksschlüssel-Angaben verarbeitet werden."
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3739
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Es können maximal %d Schlüsselbund-Verknüpfungsangaben verarbeitet werden."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3748
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Die maximale Verkleinerungsgröße ist 1 GiB."
 
-#: src/cryptsetup.c:3753
+#: src/cryptsetup.c:3751
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Die verkleinerte Größe muss ein Vielfaches von 512-Byte-Sektoren sein."
 
-#: src/cryptsetup.c:3770
+#: src/cryptsetup.c:3768
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Die Option --priority kann nur »ignore/normal/prefer« sein."
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Diese Hilfe anzeigen"
 
-#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Kurze Aufrufsyntax anzeigen"
 
-#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Paketversion ausgeben"
 
-#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Hilfe-Optionen:"
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPTION...] <Aktion> <aktionsabhängig>"
 
-#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Argument <Aktion> fehlt."
 
-#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Unbekannte Aktion."
 
-#: src/cryptsetup.c:3931
+#: src/cryptsetup.c:3929
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Die Option --key-file wirkt stärker als das angegebene Schlüsseldatei-Argument."
 
-#: src/cryptsetup.c:3937
+#: src/cryptsetup.c:3935
 msgid "Only one --key-file argument is allowed."
 msgstr "Die Option --key-file ist nur einmal erlaubt."
 
-#: src/cryptsetup.c:3942
+#: src/cryptsetup.c:3940
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Passwortbasierte Schlüsselableitungsfunktion (PBKDF) kann nur »pbkdf2« oder »argon2i/argon2id« sein."
 
-#: src/cryptsetup.c:3947
+#: src/cryptsetup.c:3945
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Bei PBKDF darf nur entweder die Anzahl der Durchläufe oder die Zeitbegrenzung angegeben werden."
 
-#: src/cryptsetup.c:3952
+#: src/cryptsetup.c:3950
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Laufwerkschlüssel kann nicht mit einem Schlüsselbund verbunden werden, solange der Schlüsselbund deaktiviert ist."
 
-#: src/cryptsetup.c:3957
+#: src/cryptsetup.c:3955
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Die Beschreibung des Schlüsselbundes kann nicht verwendet werden, wenn der Schlüsselbund deaktiviert ist."
 
-#: src/cryptsetup.c:3962
+#: src/cryptsetup.c:3960
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Inline-Integrität muss zusammen mit der Option »--integrity« benutzt werden."
 
-#: src/cryptsetup.c:3973
+#: src/cryptsetup.c:3971
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Die Optionen --keyslot-cipher und --keyslot-keysize können nur zusammen benutzt werden."
 
-#: src/cryptsetup.c:3981
+#: src/cryptsetup.c:3979
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Es wird keine Aktion ausgeführt. Aufgerufen mit der Option --test-args.\n"
 
-#: src/cryptsetup.c:3994
+#: src/cryptsetup.c:3992
 msgid "Cannot disable metadata locking."
 msgstr "Fehler beim Deaktivieren der Metadaten-Dateisperre."
 
@@ -3237,7 +3237,7 @@ msgstr "Der Befehl erfordert die Option <root_hash> oder --root-hash-file als Ar
 msgid "<data_device> <hash_device>"
 msgstr "<Datengerät> <Hash-Gerät>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:485 src/integritysetup.c:553
 msgid "format device"
 msgstr "Gerät formatieren"
 
@@ -3253,7 +3253,7 @@ msgstr "Gerät verifizieren"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<Datengerät> <Name> <Hash-Gerät> [<Wurzel-Hash>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:489 src/integritysetup.c:556
 msgid "show active device status"
 msgstr "Status der aktiven Geräte anzeigen"
 
@@ -3261,7 +3261,7 @@ msgstr "Status der aktiven Geräte anzeigen"
 msgid "<hash_device>"
 msgstr "<Hash-Gerät>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:490 src/integritysetup.c:557
 msgid "show on-disk information"
 msgstr "Auf dem Datenträger gespeicherte Informationen anzeigen"
 
@@ -3321,24 +3321,24 @@ msgstr "Formatiert mit Etikettgröße %u%s und interner Integrität %s.\n"
 msgid " (inline hw tags)"
 msgstr " (Inline-Hardware-Etiketten)"
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:303
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Das Setzen der Option »recalculate« wird nicht unterstützt, Sie können stattdessen »--wipe« erwägen."
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:380 src/integritysetup.c:540
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Gerät »%s« ist kein gültiges INTEGRITY-Gerät."
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:553 src/integritysetup.c:557
 msgid "<integrity_device>"
 msgstr "<Integritätsgerät>"
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:554
 msgid "<integrity_device> <name>"
 msgstr "<Integritätsgerät> <Name>"
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:577
 #, c-format
 msgid ""
 "\n"
@@ -3349,7 +3349,7 @@ msgstr ""
 "<Name> ist das Gerät, das unter »%s« angelegt werden soll\n"
 "<Integritätsgerät> ist das Gerät, das die Daten mit Integritätsangaben enthält\n"
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:582
 #, c-format
 msgid ""
 "\n"
@@ -3362,48 +3362,48 @@ msgstr ""
 "\tPrüfalgorithmus: %s\n"
 "\tMaximalgröße der Schlüsseldatei: %d kB\n"
 
-#: src/integritysetup.c:636
+#: src/integritysetup.c:639
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Ungültige Größe für --%s. Maximum ist %u Bytes."
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:742
 msgid "Both key file and key size options must be specified."
 msgstr "Sowohl die Schlüsseldatei als auch die Schlüsselgröße müssen angegeben werden."
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:746
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Sowohl die Schlüsseldatei als auch die Schlüsselgröße müssen für die Journalintegrität angegeben werden."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:749
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Wenn ein Integritätsschlüssel für das Journal verwendet wird, muss auch der Integritätsalgorithmus angegeben werden."
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:753
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Sowohl der Verschlüsselungsschlüssel als auch die Schlüsselgröße müssen für die Journalverschlüsselung angegeben werden."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:756
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Wenn ein Verschlüsselungsschlüssel für das Journal verwendet wird, muss auch der Verschlüsselungsalgorithmus angegeben werden."
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:760
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Die Modi Wiederherstellung und Bitmap schließen sich gegenseitig aus."
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:767
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Die Journal-Optionen können nicht im Bitmap-Modus verwendet werden."
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:772
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Die Bitmapoptionen können nur im Bitmapmodus verwendet werden."
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:778
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Der Inline-Modus kann nicht mit den Optionen Journal oder Bitmap kombiniert werden."
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:782
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Der Inline-Modus kann nicht mit einem separaten Datengerät kombiniert werden."
 
@@ -4361,6 +4361,10 @@ msgstr "Authentifizierung mit öffentlichem Schlüssel ist auf dem Host nicht er
 msgid "Public key authentication error: "
 msgstr "Fehler bei der Authentifizierung mit öffentlichem Schlüssel: "
 
+#, c-format
+#~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
+#~ msgstr "Fehler beim Lesen oder Validieren der BITLK-FVE-Metadaten-Kopie Nummer %d von »%s«."
+
 #~ msgid "Activation of BITLK device with clear key protection is not supported."
 #~ msgstr "Die Aktivierung eines BITLK-Geräts mit klarem Schlüsselschutz wird nicht unterstützt."
 

From 5f002a4f6e5ae3e035ef0d954953f20633955e46 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20Marchal?= <fmarchal@perso.be>
Date: Tue, 31 Mar 2026 11:31:32 +0200
Subject: [PATCH 052/244] po: update fr.po (from translationproject.org)

---
 po/fr.po | 736 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 370 insertions(+), 366 deletions(-)

diff --git a/po/fr.po b/po/fr.po
index c01f09f12..5b7cadf6b 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -1,16 +1,16 @@
 # Messages français pour cryptsetup.
-# Copyright (C) 2025 Free Software Foundation, Inc.
+# Copyright (C) 2026 Free Software Foundation, Inc.
 # This file is put in the public domain.
 #
 # Solveig <perso@solveig.org>, 2009.
 # Nicolas Provost <nprovost@quadriv.com>, 2011.
-# Frédéric Marchal <fmarchal@perso.be>, 2025.
+# Frédéric Marchal <fmarchal@perso.be>, 2026.
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.2-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-12-12 18:51+0100\n"
-"PO-Revision-Date: 2025-12-13 14:51+0100\n"
+"POT-Creation-Date: 2026-03-30 14:18+0200\n"
+"PO-Revision-Date: 2026-03-30 17:19+0200\n"
 "Last-Translator: Frédéric Marchal <fmarchal@perso.be>\n"
 "Language-Team: French <traduc@traduc.org>\n"
 "Language: fr\n"
@@ -187,8 +187,8 @@ msgstr "La taille du périphérique n'est pas alignée avec la taille d'un bloc
 msgid "Header detected but device %s is too small."
 msgstr "En-tête détecté mais le périphérique %s est trop petit."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
-#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
+#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
+#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
 msgid "This operation is not supported for this device type."
 msgstr "Cette opération n'est pas supportée pour ce type de périphérique."
 
@@ -201,10 +201,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Échec lors du retour en arrière des métadonnées LUKS2 en mémoire."
 
 #: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
-#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
-#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
-#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
+#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -221,7 +221,7 @@ msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Aucun motif connu d'algorithme de chiffrement n'a été détecté pour le périphérique actif %s."
 
 #: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5805
+#: lib/setup.c:3783 lib/setup.c:5816
 #, c-format
 msgid "Device %s is not active."
 msgstr "Le périphérique %s n'est pas activé."
@@ -248,7 +248,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Un périphérique avec des métadonnées détachées n'est pas supporté avec ce type de chiffrement."
 
 #: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
 msgid "Unsupported encryption sector size."
 msgstr "Taille de secteur de chiffrement non supportée."
 
@@ -301,9 +301,9 @@ msgstr "Le chiffrement %s-%s (clé de %zd bits) n'est pas disponible."
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "AVERTISSEMENT: L'activation du périphérique va échouer, dm-crypt ne supporte pas la taille de secteur de chiffrement demandée.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
+#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4494
+#: lib/luks2/luks2_reencrypt.c:4497
 #, c-format
 msgid "Device %s is too small."
 msgstr "Le périphérique %s est trop petit."
@@ -461,7 +461,7 @@ msgid "Unsupported parameters on device %s."
 msgstr "Paramètres non supportés sur le périphérique %s."
 
 #: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
+#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Paramètres non concordants sur le périphérique %s."
@@ -471,7 +471,7 @@ msgid "Crypt devices mismatch."
 msgstr "Désaccord entre les périphériques crypt."
 
 #: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
+#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Impossible de recharger le périphérique %s."
@@ -483,8 +483,8 @@ msgid "Failed to suspend device %s."
 msgstr "Impossible de suspendre le périphérique %s."
 
 #: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
-#: lib/luks2/luks2_reencrypt.c:4237
+#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
+#: lib/luks2/luks2_reencrypt.c:4240
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Impossible de redémarrer le périphérique %s."
@@ -566,187 +566,187 @@ msgstr "Erreur lors de la remise en service du périphérique %s."
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Impossible de délier la clé du porte-clé utilisateur spécifié."
 
-#: lib/setup.c:4423 lib/setup.c:5592
+#: lib/setup.c:4423 lib/setup.c:5603
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Impossible de lier la clé de volume dans le porte-clé utilisateur."
 
-#: lib/setup.c:4521 src/cryptsetup.c:2723
+#: lib/setup.c:4522 src/cryptsetup.c:2721
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Le volume %s n'est pas suspendu."
 
-#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
-#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
+#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
+#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
 #: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Ceci n'est pas la clé du volume."
 
-#: lib/setup.c:4776
+#: lib/setup.c:4787
 msgid "Failed to swap new key slot."
 msgstr "Nouvel emplacement de clé impossible à échanger."
 
-#: lib/setup.c:4874
+#: lib/setup.c:4885
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "L'emplacement de clé %d n'est pas valide."
 
-#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
-#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
+#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "L'emplacement de clé %d n'est pas actif."
 
-#: lib/setup.c:4899
+#: lib/setup.c:4910
 msgid "Device header overlaps with data area."
 msgstr "L'en-tête du périphérique recouvre la zone de données."
 
-#: lib/setup.c:5120
+#: lib/setup.c:5131
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Re-chiffrement en cours. Impossible d'activer le périphérique."
 
-#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3722
+#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
+#: lib/luks2/luks2_reencrypt.c:3725
 msgid "Failed to get reencryption lock."
 msgstr "Impossible d'obtenir le verrou de re-chiffrement."
 
-#: lib/setup.c:5144
+#: lib/setup.c:5155
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "La récupération du rechiffrement LUKS2 avec la/les clé(s) de volume a échoué."
 
-#: lib/setup.c:5280
+#: lib/setup.c:5291
 #, c-format
 msgid "Device %s already exists."
 msgstr "Le périphérique %s existe déjà."
 
-#: lib/setup.c:5287
+#: lib/setup.c:5298
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Impossible d'utiliser le périphérique %s, le nom est invalide ou est toujours utilisé."
 
-#: lib/setup.c:5299
+#: lib/setup.c:5310
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Les clés de rechiffrement du volume ne correspondent pas au volume."
 
-#: lib/setup.c:5316
+#: lib/setup.c:5327
 msgid "Incorrect volume key specified for plain device."
 msgstr "Clé de volume incorrecte pour le périphérique en clair."
 
-#: lib/setup.c:5342 lib/setup.c:5403
+#: lib/setup.c:5353 lib/setup.c:5414
 msgid "Device type is not properly initialized."
 msgstr "Type de périphérique improprement initialisé."
 
-#: lib/setup.c:5441
+#: lib/setup.c:5452
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Le porte-clé du noyau n'est pas supporté par ce noyau."
 
-#: lib/setup.c:5445
+#: lib/setup.c:5456
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Le porte-clé du noyau est manquant : il est requis pour passer une signature au noyau."
 
-#: lib/setup.c:5500
+#: lib/setup.c:5511
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Impossible d'utiliser la clé %s du porte clé."
 
-#: lib/setup.c:5713
+#: lib/setup.c:5724
 msgid "Incorrect root hash specified for verity device."
 msgstr "Hachage racine incorrect spécifié pour le périphérique verity."
 
-#: lib/setup.c:5754 lib/setup.c:5779
+#: lib/setup.c:5765 lib/setup.c:5790
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL ne supporte pas la désactivation différée."
 
-#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Le périphérique %s est toujours occupé."
 
-#: lib/setup.c:5787
+#: lib/setup.c:5798
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Impossible d'annuler la suppression différée du périphérique %s."
 
-#: lib/setup.c:5809
+#: lib/setup.c:5820
 #, c-format
 msgid "Invalid device %s."
 msgstr "Le périphérique %s n'est pas valide."
 
-#: lib/setup.c:5956
+#: lib/setup.c:5967
 msgid "Volume key buffer too small."
 msgstr "Le tampon de la clé du volume est trop petit."
 
-#: lib/setup.c:5967
+#: lib/setup.c:5978
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique LUKS2."
 
-#: lib/setup.c:5976
+#: lib/setup.c:5987
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique LUKS1."
 
-#: lib/setup.c:5990
+#: lib/setup.c:6001
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Impossible de récupérer la clé du volume pour ce périphérique de type « plain »."
 
-#: lib/setup.c:5998
+#: lib/setup.c:6009
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Impossible de récupérer le hachage racine pour le périphérique verity."
 
-#: lib/setup.c:6007
+#: lib/setup.c:6018
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique BITLK."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6023
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique FVAULT2."
 
-#: lib/setup.c:6014
+#: lib/setup.c:6025
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Cette opération n'est pas possible pour le périphérique chiffré %s."
 
-#: lib/setup.c:6199 lib/setup.c:6210
+#: lib/setup.c:6210 lib/setup.c:6221
 msgid "Dump operation is not supported for this device type."
 msgstr "L'opération de vidage n'est pas supportée pour ce type de périphérique."
 
-#: lib/setup.c:6590
+#: lib/setup.c:6601
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Le décalage des données n'est pas un multiple de %u octets."
 
-#: lib/setup.c:6898
+#: lib/setup.c:6909
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Impossible de convertir le périphérique %s qui est toujours en cours d'utilisation."
 
-#: lib/setup.c:7206 lib/setup.c:7350
+#: lib/setup.c:7217 lib/setup.c:7361
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Échec de l'affectation de l'emplacement de clé %u pour la nouvelle clé de volume."
 
-#: lib/setup.c:7230
+#: lib/setup.c:7241
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Échec de l'initialisation des paramètres par défaut des emplacement de clé LUKS2."
 
-#: lib/setup.c:7236
+#: lib/setup.c:7247
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Échec de l'affectation de l'emplacement de clé %d aux résumé."
 
-#: lib/setup.c:7467
+#: lib/setup.c:7478
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Impossible d'ajouter un emplacement de clé, tous les emplacements sont désactivés et aucune clé n'a été fournie pour ce volume."
 
-#: lib/setup.c:7540 lib/verity/verity.c:333
+#: lib/setup.c:7551 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Impossible de charger la clé dans le porte-clé du noyau."
 
-#: lib/setup.c:7731
+#: lib/setup.c:7742
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Impossible de trouver le porte-clé décrit par « %s »."
 
-#: lib/setup.c:7796
+#: lib/setup.c:7807
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Erreur lors de l'acquisition du verrou global de sérialisation des accès strictes à la mémoire"
 
@@ -803,40 +803,45 @@ msgstr "Le périphérique %s n'est pas compatible."
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "La mauvaise taille de optimal-io est ignorée pour le périphérique de données (%u octets)."
 
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "Impossible d'agrandir %s à %<PRIu64> octets (%s)."
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "Le périphérique %s est trop petit. Il a besoin d'au moins %<PRIu64> octets."
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "Impossible d'utiliser le périphérique %s actuellement utilisé (déjà mappé ou monté)."
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "Impossible d'utiliser le périphérique %s, permission refusée."
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "Impossible d'obtenir des informations au sujet du périphérique %s."
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "Impossible d'utiliser un périphérique loopback. Fonctionne comme un utilisateur non-root."
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "Impossible d'associer le périphérique loopback (le drapeau « autoclear » est requis)."
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "Le décalage demandé est au delà de la taille réelle du périphérique %s."
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "Le périphérique %s a une taille nulle."
@@ -980,9 +985,9 @@ msgstr "Erreur E/S pendant le chiffrement de l'emplacement de clé."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
 #: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
 #: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
@@ -1127,7 +1132,7 @@ msgstr "Le mode de chiffrement LUKS %s n'est pas valide."
 msgid "LUKS hash %s is invalid."
 msgstr "La valeur hachée LUKS %s n'est pas valide."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Aucun problème connu détecté pour l'en-tête LUKS."
 
@@ -1220,11 +1225,11 @@ msgstr "Longueur maximum de la phrase secrète TCRYPT (%zu) dépassée."
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "L'algorithme de hachage PBKDF2 %s n'est pas supporté, ignoré."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
+#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
 msgid "Required kernel crypto interface not available."
 msgstr "L'interface du noyau requise pour le chiffrement n'est pas disponible."
 
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
+#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
 msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr "Vérifiez que le module du noyau algif_skcipher est chargé."
 
@@ -1295,11 +1300,6 @@ msgstr "Taille de secteur %<PRIu16> non supportée."
 msgid "Failed to read BITLK header from %s."
 msgstr "Impossible de lire l'en-tête BITLK depuis %s."
 
-#: lib/bitlk/bitlk.c:593
-#, c-format
-msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
-msgstr "Impossible de lire ou de valider la copie des méta-données BITLK FVE #%d depuis %s."
-
 #: lib/bitlk/bitlk.c:603
 #, c-format
 msgid "Failed to read and validate BITLK FVE metadata from %s."
@@ -1375,42 +1375,42 @@ msgstr "Cette opération n'est pas supportée."
 msgid "Unexpected key data size."
 msgstr "Taille inattendue pour les données de la clé."
 
-#: lib/bitlk/bitlk.c:1431
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Ce périphérique BITLK est dans un état non supporté et ne peut pas être activé."
 
-#: lib/bitlk/bitlk.c:1436
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Les périphériques BITLK avec le type « %s » ne peuvent pas être activés."
 
-#: lib/bitlk/bitlk.c:1475
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "AVERTISSEMENT: La taille %<PRIu64> du volume BitLocker ne correspond pas à la taille %<PRIu64> du périphérique sous-jacent"
 
-#: lib/bitlk/bitlk.c:1602
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Impossible d'activer le périphérique car dm-crypt dans le noyau ne supporte pas BITLK IV."
 
-#: lib/bitlk/bitlk.c:1606
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Impossible d'activer le périphérique car dm-crypt dans le noyau ne supporte pas le diffuseur BITLK Elephant."
 
-#: lib/bitlk/bitlk.c:1610
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Impossible d'activer le périphérique car dm-crypt dans le noyau ne supporte pas une grande taille de secteur."
 
-#: lib/bitlk/bitlk.c:1614
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Impossible d'activer le périphérique car le module dm-zero est manquant dans le noyau."
 
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "Échec à la lecture de %u octets dans l'en-tête du volume."
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "Version FVAULT2 %<PRIu16> non supportée."
@@ -1487,23 +1487,23 @@ msgstr "La vérification a échoué à la position %<PRIu64>."
 msgid "Hash area overflow."
 msgstr "Débordement de la zone de hachage."
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "La vérification de la zone de données a échoué."
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "La vérification du hachage de la racine a échoué."
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "Erreur d'entrée/sortie lors de la création de la zone de hachage."
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "La création de la zone de hachage a échoué."
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "ATTENTION : Le kernel ne peut pas activer le périphérique si la taille des blocs de données dépasse la taille d'une page (%u)."
@@ -1558,19 +1558,19 @@ msgstr "Impossible de déterminer la taille du périphérique %s."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Métadonnées dm-integrity du noyau incompatible (version %u) détectée sur %s."
 
-#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Le noyau ne supporte pas les associations de type dm-integrity."
 
-#: lib/integrity/integrity.c:310
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Le noyau ne supporte pas les alignements de méta-données fixés de dm-integrity."
 
-#: lib/integrity/integrity.c:319
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Le noyau refuse d'activer l'option de recalcul non sûre (voyez les options d'activation historique pour outrepasser)."
 
-#: lib/integrity/integrity.c:325
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Le noyau ne supporte pas le mode en ligne de dm-integrity."
 
@@ -1719,7 +1719,7 @@ msgstr "Les secteurs de données fournis sont inattendus pour le périphérique
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Re-chiffrement en cours. Le périphérique ne peut être désactivé."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
+#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Échec du remplacement du périphérique suspendu %s avec la cible dm-error."
@@ -1798,7 +1798,7 @@ msgstr "Ne peut vérifier le statut du périphérique avec le uuid : %s."
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Impossible de convertir un en-tête avec des métadonnées LUKSMETA supplémentaires."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
+#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Impossible d'utiliser la spécification de chiffrement %s-%s pour LUKS2."
@@ -1882,7 +1882,7 @@ msgstr "La taille du périphérique doit être un multiple de l'alignement de zo
 
 #: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
 #: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4077
+#: lib/luks2/luks2_reencrypt.c:4080
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Impossible d'initialiser l'encapsulation pour le stockage de l'ancien segment."
 
@@ -1890,7 +1890,7 @@ msgstr "Impossible d'initialiser l'encapsulation pour le stockage de l'ancien se
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Impossible d'initialiser l'encapsulation pour le stockage du nouveau segment."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
+#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
 msgid "Failed to initialize hotzone protection."
 msgstr "Impossible d'initialiser la protection des zones chaudes."
 
@@ -1898,7 +1898,7 @@ msgstr "Impossible d'initialiser la protection des zones chaudes."
 msgid "Failed to read checksums for current hotzone."
 msgstr "Impossible de lire les sommes de contrôle pour la zone chaude actuelle."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Échec de la lecture de la zone chaude démarrant à %<PRIu64>."
@@ -1987,8 +1987,8 @@ msgstr "La taille des données réduites est plus grande que la taille réelle d
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Le périphérique de données n'est pas aligné sur la taille de secteur de chiffrement (%<PRIu32> octets)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
-#: lib/luks2/luks2_reencrypt.c:3661
+#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
+#: lib/luks2/luks2_reencrypt.c:3664
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Erreur lors de l'ouverture de %s en mode exclusif (déjà mappé ou monté)."
@@ -1997,124 +1997,124 @@ msgstr "Erreur lors de l'ouverture de %s en mode exclusif (déjà mappé ou mont
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Le périphérique n'est pas marqué pour le rechiffrement LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
+#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Échec du chargement du contexte de rechiffrement LUKS2"
 
-#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
+#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
 msgid "Device is not in reencryption."
 msgstr "Le périphérique n'est pas en rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
+#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
 msgid "Reencryption process is already running."
 msgstr "Le rechiffrement est déjà en cours."
 
-#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
+#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
 msgid "Failed to acquire reencryption lock."
 msgstr "Impossible d'acquérir le verrou de rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:3468
+#: lib/luks2/luks2_reencrypt.c:3471
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Impossible de réaliser le rechiffrement. Exécutez d'abord la récupération du rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:3604
+#: lib/luks2/luks2_reencrypt.c:3607
 msgid "Active device size and requested reencryption size don't match."
 msgstr "La taille du périphérique actif et la taille de rechiffrement demandée ne correspondent pas."
 
-#: lib/luks2/luks2_reencrypt.c:3618
+#: lib/luks2/luks2_reencrypt.c:3621
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "Taille de périphérique illégale demandée dans les paramètres de rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:3720
+#: lib/luks2/luks2_reencrypt.c:3723
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Rechiffrement en cours. La récupération ne peut pas être réalisée."
 
-#: lib/luks2/luks2_reencrypt.c:3741
+#: lib/luks2/luks2_reencrypt.c:3744
 msgid "LUKS2 reencryption recovery failed."
 msgstr "La récupération du rechiffrement LUKS2 a échoué."
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
 msgid "Failed to initialize reencryption device stack."
 msgstr "Impossible d'initialiser la pile du périphérique de rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3910
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "Rechiffrement LUKS2 déjà initialisé dans les métadonnées."
 
-#: lib/luks2/luks2_reencrypt.c:3915
+#: lib/luks2/luks2_reencrypt.c:3918
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Échec de l'initialisation du rechiffrement LUKS2 dans les métadonnées."
 
-#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
-#: lib/luks2/luks2_reencrypt.c:4030
+#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
+#: lib/luks2/luks2_reencrypt.c:4033
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Le rechiffrement n'est pas supporté avec les périphériques DAX (mémoire persistante)."
 
-#: lib/luks2/luks2_reencrypt.c:4059
+#: lib/luks2/luks2_reencrypt.c:4062
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Impossible de définir les segments du périphérique pour le rechiffrement suivant de la zone chaude."
 
-#: lib/luks2/luks2_reencrypt.c:4112
+#: lib/luks2/luks2_reencrypt.c:4115
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Échec lors de l'écriture des métadonnées de la résilience du rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:4119
+#: lib/luks2/luks2_reencrypt.c:4122
 msgid "Decryption failed."
 msgstr "Échec du déchiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:4124
+#: lib/luks2/luks2_reencrypt.c:4127
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Échec de l'écriture de la zone chaude démarrant à %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4129
+#: lib/luks2/luks2_reencrypt.c:4132
 msgid "Failed to sync data."
 msgstr "Erreur lors de la synchronisation des données."
 
-#: lib/luks2/luks2_reencrypt.c:4137
+#: lib/luks2/luks2_reencrypt.c:4140
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Échec de la mise à jour des métadonnées après la fin du rechiffrement de la zone chaude courante."
 
-#: lib/luks2/luks2_reencrypt.c:4226
+#: lib/luks2/luks2_reencrypt.c:4229
 msgid "Failed to write LUKS2 metadata."
 msgstr "Échec lors de l'écriture des métadonnées LUKS2"
 
-#: lib/luks2/luks2_reencrypt.c:4249
+#: lib/luks2/luks2_reencrypt.c:4252
 msgid "Failed to wipe unused data device area."
 msgstr "Impossible d'effacer la zone du périphérique contenant les données inutilisées."
 
-#: lib/luks2/luks2_reencrypt.c:4255
+#: lib/luks2/luks2_reencrypt.c:4258
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Erreur lors de la suppression de l'emplacement de clé inutilisé (unbound) %d."
 
-#: lib/luks2/luks2_reencrypt.c:4265
+#: lib/luks2/luks2_reencrypt.c:4268
 msgid "Failed to remove reencryption keyslot."
 msgstr "Erreur lors de la suppression de l'emplacement de clé de re-chiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:4275
+#: lib/luks2/luks2_reencrypt.c:4278
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Erreur fatale en rechiffrant le morceau commençant à %<PRIu64> d'une longueur de %<PRIu64> secteurs."
 
-#: lib/luks2/luks2_reencrypt.c:4279
+#: lib/luks2/luks2_reencrypt.c:4282
 msgid "Online reencryption failed."
 msgstr "Échec du rechiffrement en-ligne."
 
 # Frédéric: Je n'ai pas la moindre idée de ce que le développeur a voulu écrire. Qu'est-ce que "error target" dans ce contexte ?
-#: lib/luks2/luks2_reencrypt.c:4284
+#: lib/luks2/luks2_reencrypt.c:4287
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Ne pas redémarrer le périphérique à moins qu'il ait été remplacé manuellement par la cible en erreur."
 
-#: lib/luks2/luks2_reencrypt.c:4336
+#: lib/luks2/luks2_reencrypt.c:4339
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Impossible de réaliser le rechiffrement. Statut de rechiffrement inattendu."
 
-#: lib/luks2/luks2_reencrypt.c:4342
+#: lib/luks2/luks2_reencrypt.c:4345
 msgid "Missing or invalid reencrypt context."
 msgstr "Contexte de rechiffrement manquant ou invalide."
 
-#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
+#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
 msgid "Failed to update reencryption context."
 msgstr "Échec de la mise à jour du contexte de rechiffrement."
 
@@ -2150,7 +2150,7 @@ msgstr "Les paramètres de chiffrement des emplacement de clés peuvent uniqueme
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Les paramètres de chiffrement des emplacement de clés ne sont pas compatibles avec le chiffrement des emplacements de LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
+#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2178,7 +2178,7 @@ msgstr "ATTENTION: Le paramètre --hash est ignoré en mode non chiffré quand l
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "ATTENTION: L'option --keyfile-size est ignorée. La taille de lecture est la même que la taille de la clé de chiffrement.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2189,9 +2189,9 @@ msgstr "L'analyse de blkid a échouée pour %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Signature(s) de périphérique détectée(s) sur %s. Continuer risque d'endommager les données existantes."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
-#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
-#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2240,7 +2240,7 @@ msgstr ""
 "sensible qui permet d'accéder à la partition chiffrée sans mot de passe.\n"
 "Ce contenu devrait toujours être stocké, chiffré, en lieu sûr."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2259,14 +2259,14 @@ msgstr "Le périphérique %s n'est pas un périphérique FVAULT2 valide."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Impossible de déterminer la taille de la clé de volume pour FVAULT2, veuillez utiliser l'option --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Le périphérique %s est toujours actif et prévu pour une suppression différée.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
-#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
-#: src/cryptsetup.c:3264
+#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
+#: src/cryptsetup.c:3262
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Échec en essayant de définir le chemin %s pour les jetons externes."
@@ -2275,59 +2275,59 @@ msgstr "Échec en essayant de définir le chemin %s pour les jetons externes."
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Le redimensionnement d'un périphérique actif requiert que la clé du volume soit dans le porte-clé mais l'option --disable-keyring est définie."
 
-#: src/cryptsetup.c:1059
+#: src/cryptsetup.c:1057
 msgid "Benchmark interrupted."
 msgstr "Test de performance interrompu."
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1078
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     N/A\n"
 
-#: src/cryptsetup.c:1082
+#: src/cryptsetup.c:1080
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u itérations par seconde pour une clé de %zu bits\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1094
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s N/A\n"
 
-#: src/cryptsetup.c:1098
+#: src/cryptsetup.c:1096
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u itérations, %5u mémoire, %1u threads parallèles (CPUs) pour une clé de %zu bits (temps de %u ms demandé)\n"
 
-#: src/cryptsetup.c:1122
+#: src/cryptsetup.c:1120
 msgid "Result of benchmark is not reliable."
 msgstr "Le résultat de l'évaluation de performance n'est pas fiable."
 
-#: src/cryptsetup.c:1172
+#: src/cryptsetup.c:1170
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Tests approximatifs en utilisant uniquement la mémoire (pas de stockage E/S).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1197
+#: src/cryptsetup.c:1195
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algorithme |       Clé |     Chiffrement |    Déchiffrement\n"
 
-#: src/cryptsetup.c:1205
+#: src/cryptsetup.c:1203
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Le chiffrement %s (avec une clé de %i bits) n'est pas disponible."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1222
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#    Algorithme |       Clé |     Chiffrement |    Déchiffrement\n"
 
-#: src/cryptsetup.c:1235
+#: src/cryptsetup.c:1233
 msgid "N/A"
 msgstr "N/D"
 
-#: src/cryptsetup.c:1260
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2336,27 +2336,27 @@ msgstr ""
 "désirable (consultez la sortie de luksDump) et continuez (mise à niveau des métadonnées) uniquement si vous constatez que\n"
 "l'opération est légitime."
 
-#: src/cryptsetup.c:1266
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Entrez la phrase secrète pour protéger et mettre à niveau les métadonnées de rechiffrement : "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Réellement procéder à la récupération du rechiffrement LUKS2 ?"
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Entrez la phrase secrète pour vérifier le résumé des métadonnées du rechiffrement : "
 
-#: src/cryptsetup.c:1321
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Entrez la phrase secrète pour la récupération du rechiffrement : "
 
-#: src/cryptsetup.c:1383
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Réellement essayer de réparer l'en-tête du périphérique LUKS ?"
 
-#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2364,7 +2364,7 @@ msgstr ""
 "\n"
 "Effacement interrompu."
 
-#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2372,167 +2372,167 @@ msgstr ""
 "Effacement du périphérique pour initialiser les sommes de contrôle d'intégrité.\n"
 "Vous pouvez interrompre ceci en appuyant sur CTRL+c (le reste du périphérique effacé contiendra toujours des sommes de contrôle invalides).\n"
 
-#: src/cryptsetup.c:1438 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Impossible de désactiver le périphérique temporaire %s."
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Un chiffrement utilisant uniquement OPAL hw ne supporte pas --cipher et --key-size, les options sont ignorées."
 
-#: src/cryptsetup.c:1499
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "L'option d'intégrité peut uniquement être utilisée avec le format LUKS2."
 
-#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Options de taille des métadonnées LUKS2 non supportées."
 
-#: src/cryptsetup.c:1509
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL est uniquement supporté avec le format LUKS2."
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Les étiquettes hw en ligne sont uniquement supportées avec le format LUKS2."
 
-#: src/cryptsetup.c:1523
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Le fichier d'en-tête n'existe pas, voulez-vous le créer ?"
 
-#: src/cryptsetup.c:1531
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Impossible de créer le fichier d'en-tête %s."
 
-#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Aucun motif connu de spécification d'intégrité n'a été détecté."
 
-#: src/cryptsetup.c:1559
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Impossible d'utiliser la taille de clé d'intégrité spécifiée."
 
-#: src/cryptsetup.c:1577
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Ne peut utiliser %s comme en-tête sur disque."
 
-#: src/cryptsetup.c:1606 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Cette action écrasera définitivement les données sur %s."
 
-#: src/cryptsetup.c:1643
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Le mot de passe Admin de OPAL ne peut pas être vide."
 
-#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
-#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Impossible de définir les paramètres pbkdf."
 
-#: src/cryptsetup.c:1788
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Décalage réduit de données est uniquement permis dans un en-tête LUKS détaché."
 
-#: src/cryptsetup.c:1795
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Le container %s du fichier LUKS est trop petit pour l'activation, il ne reste pas d'espace pour les données."
 
-#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Impossible de déterminer la taille de la clé de volume pour LUKS sans emplacement de clé, veuillez utiliser l'option --key-size."
 
-#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Le périphérique requiert deux clés de volume."
 
-#: src/cryptsetup.c:1891
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Certains paramètres d'activation spécifiés ont été ignorés avec le chiffrement utilisant uniquement OPAL hw."
 
-#: src/cryptsetup.c:1896
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Le périphérique a été activé mais les fanions ne peuvent pas être rendus permanents."
 
-#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Emplacement de clé %d sélectionné pour suppression."
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Ceci est le dernier emplacement de clé. Le périphérique sera inutilisable après la suppression de cette clé."
 
-#: src/cryptsetup.c:1989
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Entrez toute phrase secrète restante : "
 
-#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Opération interrompue, l'emplacement de clé n'a PAS été effacé.\n"
 
-#: src/cryptsetup.c:2026
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Entrez la phrase secrète à effacer : "
 
-#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
+#: src/cryptsetup.c:3253
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "%s n'est pas un périphérique LUKS2 valide."
 
-#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Entrez une nouvelle phrase secrète pour l'emplacement de clé : "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Entrez le code PIN du jeton : "
 
-#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Entrez le code PIN du jeton %d : "
 
-#: src/cryptsetup.c:2210
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "ATTENTION: Le paramètre --key-slot est utilisé pour le nouveau numéro de l'emplacement de clé.\n"
 
-#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Entrez une phrase secrète existante : "
 
-#: src/cryptsetup.c:2383
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Entrez la phrase secrète à changer : "
 
-#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Entrez la nouvelle phrase secrète : "
 
-#: src/cryptsetup.c:2449
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Entrez la phrase secrète pour l'emplacement de clé à convertir: "
 
-#: src/cryptsetup.c:2473
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "L'opération isLuks supporte seulement un périphérique en argument."
 
-#: src/cryptsetup.c:2578
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "L'emplacement de clé %d ne contient pas de clé non liée."
 
-#: src/cryptsetup.c:2583
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2540,52 +2540,52 @@ msgstr ""
 "Le contenu de l'en-tête avec une clé non liée est une information sensible.\n"
 "Ce contenu devrait être stocké, chiffré, en lieu sûr."
 
-#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s n'est pas un nom de périphérique %s actif."
 
-#: src/cryptsetup.c:2709
+#: src/cryptsetup.c:2707
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s n'est pas un nom de périphérique LUKS actif ou l'en-tête est manquant."
 
-#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
+#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
 msgid "Option --header-backup-file is required."
 msgstr "L'option --header-backup-file est requise."
 
-#: src/cryptsetup.c:2836
+#: src/cryptsetup.c:2834
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s n'est pas un périphérique géré par cryptsetup."
 
-#: src/cryptsetup.c:2847
+#: src/cryptsetup.c:2845
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Le rafraîchissement n'est pas supporté pour un périphérique de type %s"
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2895
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Type de métadonnée du périphérique %s non reconnu."
 
-#: src/cryptsetup.c:2899
+#: src/cryptsetup.c:2897
 msgid "Command requires device and mapped name as arguments."
 msgstr "La commande exige un périphérique et un nom de correspondance comme arguments."
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL PSID: "
 msgstr "Entrez le PSID OPAL : "
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL Admin password: "
 msgstr "Entrez le mot de passe Admin de OPAL : "
 
-#: src/cryptsetup.c:2925
+#: src/cryptsetup.c:2923
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "ATTENTION : Le disque ENTIER sera réinitialisé d'usine et toutes les données seront perdues ! Continuer ?"
 
-#: src/cryptsetup.c:2968
+#: src/cryptsetup.c:2966
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2594,363 +2594,363 @@ msgstr ""
 "Cette opération va supprimer tous les emplacements de clés du périphérique %s.\n"
 "Le périphérique sera inutilisable après cette opération."
 
-#: src/cryptsetup.c:2975
+#: src/cryptsetup.c:2973
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Opération interrompue, les emplacements de clés n'ont PAS été effacés.\n"
 
-#: src/cryptsetup.c:3014
+#: src/cryptsetup.c:3012
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Type LUKS invalide, seuls luks1 et luks2 sont supportés."
 
-#: src/cryptsetup.c:3030
+#: src/cryptsetup.c:3028
 #, c-format
 msgid "Device is already %s type."
 msgstr "Le périphérique est déjà du type %s."
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3035
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Cette opération va convertir %s au format %s.\n"
 
-#: src/cryptsetup.c:3040
+#: src/cryptsetup.c:3038
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Opération interrompue, le périphérique n'a PAS été converti.\n"
 
-#: src/cryptsetup.c:3080
+#: src/cryptsetup.c:3078
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "L'option --priority, --label ou --subsystem est manquante."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Le jeton %d est invalide."
 
-#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
+#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
 #, c-format
 msgid "Token %d in use."
 msgstr "Le jeton %d est utilisé."
 
-#: src/cryptsetup.c:3129
+#: src/cryptsetup.c:3127
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Échec lors de l'ajout du jeton %d au porte-clé luks2."
 
-#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
+#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Échec lors de l'affectation du jeton %d à l'emplacement de clé %d."
 
-#: src/cryptsetup.c:3157
+#: src/cryptsetup.c:3155
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Le jeton %d n'est pas utilisé."
 
-#: src/cryptsetup.c:3194
+#: src/cryptsetup.c:3192
 msgid "Failed to import token from file."
 msgstr "Impossible d'importer le jeton depuis le fichier."
 
-#: src/cryptsetup.c:3219
+#: src/cryptsetup.c:3217
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Impossible d'obtenir le jeton %d pour l'export."
 
-#: src/cryptsetup.c:3232
+#: src/cryptsetup.c:3230
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Le jeton %d n'est pas assigné à l'emplacement de clé %d."
 
-#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
+#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Impossible de dissocier le jeton %d de l'emplacement de clé %d."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3298
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Les options --tcrypt-hidden, --tcrypt-system ou --tcrypt-backup sont supportées seulement pour un périphérique TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3301
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "L'option --veracrypt ou --disable-veracrypt est uniquement supportée pour un périphérique de type TCRYPT."
 
-#: src/cryptsetup.c:3306
+#: src/cryptsetup.c:3304
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "L'option --veracrypt-pim est uniquement supportée pour un périphérique compatible avec VeraCrypt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3308
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "L'option --veracrypt-query-pim est uniquement supportée pour un périphérique compatible avec VeraCrypt."
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3310
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Les options --veracrypt-pim et --veracrypt-query-pim sont mutuellement exclusives."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3319
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "L'option --persistent n'est pas permise avec --test-passphrase."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3322
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Les options --refresh et --test-passphrase sont mutuellement exclusives."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3325
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "L'option --shared est permise uniquement pour ouvrir un périphérique ordinaire."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3328
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "L'option --skip est supportée uniquement pour ouvrir des périphériques ordinaires et loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3331
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "L'option --offset avec l'action d'ouverture est supportée uniquement pour des périphériques ordinaires et loopaes."
 
-#: src/cryptsetup.c:3336
+#: src/cryptsetup.c:3334
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "L'option --tcrypt-hidden ne peut pas être combinée avec --allow-discards."
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3338
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "L'option de taille de secteur avec l'action d'ouverture est uniquement supportée pour des périphérique ordinaires."
 
-#: src/cryptsetup.c:3344
+#: src/cryptsetup.c:3342
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "L'option des secteurs IV (vecteur d'initialisation) de grande taille est supportée uniquement à l'ouverture de périphériques de type simple avec une taille de secteur supérieure à 512 octets."
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3347
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "L'option --test-passphrase est autorisée uniquement pour ouvrir des périphériques LUKS, TCRYPT, BITLK et FVAULT2."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
+#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Les options --device-size et --size ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3353
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "L'option --unbound est permise uniquement pour ouvrir un périphérique luks."
 
-#: src/cryptsetup.c:3358
+#: src/cryptsetup.c:3356
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "L'option --unbound ne peut pas être utilisée sans --test-passphrase."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3360
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "L'option --volume-key-keyring ne peut pas être combinée avec --hash ou --volume-key-file."
 
-#: src/cryptsetup.c:3365
+#: src/cryptsetup.c:3363
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Les deux options --volume-key-file doivent être appariées avec les options --key-size respectives."
 
-#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Les options --cancel-deferred et --deferred ne peuvent pas être utilisées en même temps."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3388
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "L'option --active-name peut uniquement être définie pour un périphérique LUKS2."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3391
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Les options --active-name et --force-offline-reencrypt ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3394
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Les options --new-volume-key et --keep-key ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3399
+#: src/cryptsetup.c:3397
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Les options --new-volume-key-keyring et --keep-key ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
+#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
 msgid "Keyslot specification is required."
 msgstr "Une spécification d'emplacement de clé est requise."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3413
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Les options --align-payload et --offset ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3416
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "L'option --integrity-no-wipe peut uniquement être utilisée pour une action de formatage avec l'extension d'intégrité."
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3419
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Seule une des deux possibilités --use-[u]random est autorisée."
 
-#: src/cryptsetup.c:3429
+#: src/cryptsetup.c:3427
 msgid "Key size is required with --unbound option."
 msgstr "La taille de clé est requise avec l'option --unbound."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3447
 msgid "Invalid token action."
 msgstr "L'action de jeton est invalide."
 
-#: src/cryptsetup.c:3452
+#: src/cryptsetup.c:3450
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Le paramètre --key-description est requis pour l'action d'ajout d'un jeton."
 
-#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
+#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "L'action requiert un jeton spécifique. Utilisez le paramètre --token-id."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3458
 msgid "Option --unbound is valid only with token add action."
 msgstr "L'option --unbound est uniquement valable avec l'action d'ajout d'un jeton."
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3460
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Les options --key-slot et --unbound ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3465
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "L'action requiert un jeton spécifique. Utilisez le paramètre --key-slot."
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3481
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<périphérique> [--type <type>] [<nom>]"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "ouvrir le périphérique comme <nom>"
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<nom>"
 
-#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "fermeture du périphérique (supprime le « mapping »)"
 
-#: src/cryptsetup.c:3485 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "redimensionner le périphérique actif"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3484
 msgid "show device status"
 msgstr "afficher le statut du périphérique"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <chiffrement>]"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "benchmark cipher"
 msgstr "chiffrement pour test de performance"
 
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
-#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
+#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
+#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
+#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
+#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
 msgid "<device>"
 msgstr "<périphérique>"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3486
 msgid "try to repair on-disk metadata"
 msgstr "essayer de réparer les métadonnées sur le disque"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3487
 msgid "reencrypt LUKS2 device"
 msgstr "rechiffrer le périphérique LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3488
 msgid "erase all keyslots (remove encryption key)"
 msgstr "supprimer tous les emplacements de clés (supprime la clé de chiffrement)"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3489
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "convertir LUKS depuis/vers le format LUKS2"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490
 msgid "set permanent configuration options for LUKS2"
 msgstr "définir les options de configuration permanentes pour LUKS2"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
 msgid "<device> [<new key file>]"
 msgstr "<périphérique> [<fichier de la nouvelle clé>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3491
 msgid "formats a LUKS device"
 msgstr "formater un périphérique LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3492
 msgid "add key to LUKS device"
 msgstr "ajouter une clé au périphérique LUKS"
 
-#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
 msgid "<device> [<key file>]"
 msgstr "<périphérique> [<fichier de clé>]"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3493
 msgid "removes supplied key or key file from LUKS device"
 msgstr "retire du périphérique LUKS la clé ou le fichier de clé fourni"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3494
 msgid "changes supplied key or key file of LUKS device"
 msgstr "modifie la clé ou le fichier de clé fourni pour le périphérique LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3495
 msgid "converts a key to new pbkdf parameters"
 msgstr "converti une clé vers les nouveaux paramètres pbkdf"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "<device> <key slot>"
 msgstr "<périphérique> <emplacement de clé>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "efface de façon sécurisée la clé avec le numéro <emplacement de clé> du périphérique LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3497
 msgid "print UUID of LUKS device"
 msgstr "afficher l'UUID du périphérique LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3498
 msgid "tests <device> for LUKS partition header"
 msgstr "teste si <périphérique> a un en-tête de partition LUKS"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3499
 msgid "dump LUKS partition information"
 msgstr "affiche les informations LUKS de la partition"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3500
 msgid "dump TCRYPT device information"
 msgstr "affiche les informations du périphérique TCRYPT"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3501
 msgid "dump BITLK device information"
 msgstr "affiche les informations du périphérique BITLK"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3502
 msgid "dump FVAULT2 device information"
 msgstr "affiche les informations du périphérique FVAULT2"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3503
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Suspendre le périphérique LUKS et effacer de façon sécurisée la clé (toutes les entrées/sorties sont suspendues)"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3504
 msgid "Resume suspended LUKS device"
 msgstr "Remettre en service le périphérique LUKS suspendu"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3505
 msgid "Backup LUKS device header and keyslots"
 msgstr "Sauvegarder l'en-tête et les emplacements de clés du périphérique LUKS"
 
-#: src/cryptsetup.c:3508
+#: src/cryptsetup.c:3506
 msgid "Restore LUKS device header and keyslots"
 msgstr "Restaurer l'en-tête et les emplacements de clés du périphérique LUKS"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <périphérique>"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipuler les jetons LUKS2"
 
-#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2958,7 +2958,7 @@ msgstr ""
 "\n"
 "<action> est l'une de :\n"
 
-#: src/cryptsetup.c:3534
+#: src/cryptsetup.c:3532
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2970,7 +2970,7 @@ msgstr ""
 "\touvrir : create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tfermer : remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3538
+#: src/cryptsetup.c:3536
 #, c-format
 msgid ""
 "\n"
@@ -2985,7 +2985,7 @@ msgstr ""
 "<emplacement> est le numéro de l'emplacement de clé LUKS à modifier\n"
 "<fichier de clé> est un fichier optionnel contenant la nouvelle clé pour l'action luksAddKey\n"
 
-#: src/cryptsetup.c:3545
+#: src/cryptsetup.c:3543
 #, c-format
 msgid ""
 "\n"
@@ -2994,7 +2994,7 @@ msgstr ""
 "\n"
 "Le format de métadonnées compilé par défaut est %s (pour l'action luksFormat).\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3548
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3002,12 +3002,12 @@ msgstr ""
 "\n"
 "Le support du greffon de jeton externe LUKS2 est enabled.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3549
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Chemin du greffon de jeton externe LUKS2 : %s.\n"
 
-#: src/cryptsetup.c:3553
+#: src/cryptsetup.c:3551
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3015,7 +3015,7 @@ msgstr ""
 "\n"
 "Le support du greffon de jeton externe LUKS2 est désactivé.\n"
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3555
 #, c-format
 msgid ""
 "\n"
@@ -3032,7 +3032,7 @@ msgstr ""
 "PBKDF par défaut pour LUKS2 : %s\n"
 "\tTemps d'itération: %d, Mémoire requise: %d ko, Threads parallèles: %d\n"
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3566
 #, c-format
 msgid ""
 "\n"
@@ -3047,122 +3047,122 @@ msgstr ""
 "\tplain: %s, Clé: %d bits, Hachage mot de passe: %s\n"
 "\tLUKS: %s, Clé: %d bits, Hachage en-tête LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3577
+#: src/cryptsetup.c:3575
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: La taille de clé par défaut en mode XTS (deux clés internes) sera doublée.\n"
 
-#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s : exige %s comme arguments."
 
-#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Emplacement de clé non valide."
 
-#: src/cryptsetup.c:3663
+#: src/cryptsetup.c:3661
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "La taille du périphérique doit être un multiple d'un secteur de 512 octets."
 
-#: src/cryptsetup.c:3668
+#: src/cryptsetup.c:3666
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "La spécification de la taille maximale de la zone chaude de rechiffrement est invalide."
 
-#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
+#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
 msgid "Key size must be a multiple of 8 bits"
 msgstr "La taille de la clé doit être un multiple de 8 bits"
 
-#: src/cryptsetup.c:3689
+#: src/cryptsetup.c:3687
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Au plus 2 spécifications de taille de clé peuvent être fournies."
 
-#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
+#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Au plus %d spécifications de clés de volume peuvent être fournies."
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3739
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Au plus %d spécifications de liaison de porte-clé peuvent être fournies."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3748
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "La taille maximum réduite pour le périphérique est 1 GiB."
 
-#: src/cryptsetup.c:3753
+#: src/cryptsetup.c:3751
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "La taille réduite doit être un multiple d'un secteur de 512 octets."
 
-#: src/cryptsetup.c:3770
+#: src/cryptsetup.c:3768
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "L'option --priority peut uniquement être ignore/normal/prefer."
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Afficher ce message d'aide"
 
-#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Afficher, en résumé, la syntaxe d'invocation"
 
-#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Afficher la version du paquet"
 
-#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Options d'aide :"
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPTION...] <action> <paramètres de l'action>"
 
-#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Il manque l'argument <action>."
 
-#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Action inconnue."
 
-#: src/cryptsetup.c:3931
+#: src/cryptsetup.c:3929
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "L'option --key-file est prioritaire par rapport à un fichier de clé spécifié en argument."
 
-#: src/cryptsetup.c:3937
+#: src/cryptsetup.c:3935
 msgid "Only one --key-file argument is allowed."
 msgstr "Un seul argument --key-file est autorisé."
 
-#: src/cryptsetup.c:3942
+#: src/cryptsetup.c:3940
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "La fonction de dérivation d'une clé basée sur un mot de passe (PBKDF = Password-Based Key Derivation Function) peut uniquement être pbkdf2 ou argon2i/argon2id."
 
-#: src/cryptsetup.c:3947
+#: src/cryptsetup.c:3945
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Les itérations forcées de PBKDF ne peuvent pas être combinées avec l'option de temps d'itération."
 
-#: src/cryptsetup.c:3952
+#: src/cryptsetup.c:3950
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Impossible de lier une clé de volume à un porte-clé quand le porte-clé est désactivé."
 
-#: src/cryptsetup.c:3957
+#: src/cryptsetup.c:3955
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Impossible d'utiliser la description de clé de porte-clé quand le porte-clé est désactivé."
 
-#: src/cryptsetup.c:3962
+#: src/cryptsetup.c:3960
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "L'intégrité en ligne doit être utilisée avec l'option --integrity."
 
-#: src/cryptsetup.c:3973
+#: src/cryptsetup.c:3971
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Les options --keyslot-cipher et --keyslot-key-size doivent être utilisées ensembles."
 
-#: src/cryptsetup.c:3981
+#: src/cryptsetup.c:3979
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Aucune action réalisée. Invoqué avec l'option --test-args.\n"
 
-#: src/cryptsetup.c:3994
+#: src/cryptsetup.c:3992
 msgid "Cannot disable metadata locking."
 msgstr "Impossible de désactiver le verrouillage des métadonnées."
 
@@ -3227,7 +3227,7 @@ msgstr "La commande exige <hachage_racine> ou l'option --root-hash-file comme ar
 msgid "<data_device> <hash_device>"
 msgstr "<périph_données> <périph_hachage>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:485 src/integritysetup.c:553
 msgid "format device"
 msgstr "formater le périphérique"
 
@@ -3243,7 +3243,7 @@ msgstr "vérifier le périphérique"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<périph_données> <nom> <périph_hachage> [<hachage_racine>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:489 src/integritysetup.c:556
 msgid "show active device status"
 msgstr "afficher le statut du périphérique actif"
 
@@ -3251,7 +3251,7 @@ msgstr "afficher le statut du périphérique actif"
 msgid "<hash_device>"
 msgstr "<périph_hachage>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:490 src/integritysetup.c:557
 msgid "show on-disk information"
 msgstr "afficher les informations sur le disque"
 
@@ -3311,24 +3311,24 @@ msgstr "Formaté avec une taille de balise de %u%s, intégrité interne %s.\n"
 msgid " (inline hw tags)"
 msgstr " (étiquettes HW en ligne)"
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:303
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Définir le fanion pour le recalcul n'est pas supporté, envisagez plutôt d'utiliser --wipe."
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:380 src/integritysetup.c:540
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Le périphérique %s n'est pas un périphérique INTEGRITY valable."
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:553 src/integritysetup.c:557
 msgid "<integrity_device>"
 msgstr "<périph_intégrité>"
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:554
 msgid "<integrity_device> <name>"
 msgstr "<périph_intégrigé> <nom>"
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:577
 #, c-format
 msgid ""
 "\n"
@@ -3339,7 +3339,7 @@ msgstr ""
 "<nom> est le périphérique à créer sous %s\n"
 "<périph_intégrité> est le périphérique contenant les données avec les balises d'intégrité\n"
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:582
 #, c-format
 msgid ""
 "\n"
@@ -3352,48 +3352,48 @@ msgstr ""
 "\tAlgorithme de somme de contrôle : %s\n"
 "\tTaille maximale du fichier de clé : %dko\n"
 
-#: src/integritysetup.c:636
+#: src/integritysetup.c:639
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "La taille --%s n'est pas valide. Le maximum est %u octets."
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:742
 msgid "Both key file and key size options must be specified."
 msgstr "Les options du fichier de clé et de la taille de la clé doivent être spécifiées toutes les deux."
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:746
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Les options du fichier de clé de l'intégrité du journal et de la taille de la clé doivent être spécifiées toutes les deux."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:749
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "L'algorithme d'intégrité du journal doit être spécifié si la clé d'intégrité du journal est utilisée."
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:753
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Les options du fichier de clé de chiffrement du journal et de la taille de la clé doivent être spécifiées toutes les deux."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:756
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "L'algorithme de chiffrement du journal doit être spécifié si la clé de chiffrement du journal est utilisée."
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:760
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Les options de mode récupération et champ de bits sont mutuellement exclusives."
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:767
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Les options de journal ne peuvent pas être utilisées en mode champ de bits."
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:772
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Les options de champ de bits peuvent uniquement être utilisées en mode champ de bits."
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:778
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Le mode en ligne ne peut pas être combiné avec les options de journal ou de carte de bits."
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:782
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Le mode en ligne ne peut pas être combiné avec un périphérique qui a des données séparées."
 
@@ -4350,6 +4350,10 @@ msgstr "La méthode d'authentification par clé publique n'est pas permise sur l
 msgid "Public key authentication error: "
 msgstr "Erreur durant l'authentification par clé publique : "
 
+#, c-format
+#~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
+#~ msgstr "Impossible de lire ou de valider la copie des méta-données BITLK FVE #%d depuis %s."
+
 #~ msgid "Activation of BITLK device with clear key protection is not supported."
 #~ msgstr "L'activation d'un périphérique BITLK avec une protection par une clé en clair n'est pas supporté."
 

From bc05da72492301d2a895b43aa85fbd5165b63644 Mon Sep 17 00:00:00 2001
From: Hiroshi Takekawa <sian@big.or.jp>
Date: Tue, 31 Mar 2026 11:31:32 +0200
Subject: [PATCH 053/244] po: update ja.po (from translationproject.org)

---
 po/ja.po | 728 +++++++++++++++++++++++++++----------------------------
 1 file changed, 364 insertions(+), 364 deletions(-)

diff --git a/po/ja.po b/po/ja.po
index 30f4fa038..47d33e0e1 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -5,10 +5,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.2-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-12-12 18:51+0100\n"
-"PO-Revision-Date: 2025-12-13 21:11+0900\n"
+"POT-Creation-Date: 2026-03-30 14:18+0200\n"
+"PO-Revision-Date: 2026-03-31 09:15+0900\n"
 "Last-Translator: Hiroshi Takekawa <sian@big.or.jp>\n"
 "Language-Team: Japanese <translation-team-ja@lists.sourceforge.net>\n"
 "Language: ja\n"
@@ -184,8 +184,8 @@ msgstr "デバイスサイズが論理ブロックサイズのアライメント
 msgid "Header detected but device %s is too small."
 msgstr "ヘッダが検出されましたがデバイス %s が小さすぎます。"
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
-#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
+#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
+#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
 msgid "This operation is not supported for this device type."
 msgstr "この操作はこのデバイスタイプではサポートされていません。"
 
@@ -198,10 +198,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "メモリ上の LUKS2 メタデータのロールバックに失敗しました。"
 
 #: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
-#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
-#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
-#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
+#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -218,7 +218,7 @@ msgid "No known cipher specification pattern detected for active device %s."
 msgstr "アクティブなデバイス %s に既知の暗号スペックパターンが検出されませんでした。"
 
 #: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5805
+#: lib/setup.c:3783 lib/setup.c:5816
 #, c-format
 msgid "Device %s is not active."
 msgstr "デバイス %s はアクティブではありません。"
@@ -245,7 +245,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "分離したメタデータデバイスはこの暗号タイプではサポートされていません。"
 
 #: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
 msgid "Unsupported encryption sector size."
 msgstr "サポートされていない暗号化セクタサイズです。"
 
@@ -298,9 +298,9 @@ msgstr "暗号 %s-%s (キーサイズ %zd ビット) は利用できません。
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "警告: デバイスアクティベーションが失敗しました。dm-crypt が要求された暗号セクタサイズをサポートしていません。\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
+#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4494
+#: lib/luks2/luks2_reencrypt.c:4497
 #, c-format
 msgid "Device %s is too small."
 msgstr "デバイス %s のサイズが小さすぎます。"
@@ -458,7 +458,7 @@ msgid "Unsupported parameters on device %s."
 msgstr "デバイス %s のパラメータはサポートしていません。"
 
 #: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
+#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "デバイス %s のパラメータがミスマッチしています。"
@@ -468,7 +468,7 @@ msgid "Crypt devices mismatch."
 msgstr "Crypt デバイスが一致しません。"
 
 #: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
+#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "デバイス %s のリロードに失敗しました。"
@@ -480,8 +480,8 @@ msgid "Failed to suspend device %s."
 msgstr "デバイス %s のサスペンドに失敗しました。"
 
 #: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
-#: lib/luks2/luks2_reencrypt.c:4237
+#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
+#: lib/luks2/luks2_reencrypt.c:4240
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "デバイス %s のリジュームに失敗しました。"
@@ -563,187 +563,187 @@ msgstr "デバイス %s の再開中にエラー。"
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "ボリュームキーを指定されたキーリングからアンリンクできません。"
 
-#: lib/setup.c:4423 lib/setup.c:5592
+#: lib/setup.c:4423 lib/setup.c:5603
 msgid "Failed to link volume key in user defined keyring."
 msgstr "ボリュームキーを指定されたキーリングにリンクできません。"
 
-#: lib/setup.c:4521 src/cryptsetup.c:2723
+#: lib/setup.c:4522 src/cryptsetup.c:2721
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "ボリューム %s は停止されていません。"
 
-#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
-#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
+#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
+#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
 #: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "ボリュームキーがボリュームに合いません。"
 
-#: lib/setup.c:4776
+#: lib/setup.c:4787
 msgid "Failed to swap new key slot."
 msgstr "新しいキースロットを交換できませんでした。"
 
-#: lib/setup.c:4874
+#: lib/setup.c:4885
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "キースロット %d は不正です。"
 
-#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
-#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
+#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "キースロット %d は非アクティブです。"
 
-#: lib/setup.c:4899
+#: lib/setup.c:4910
 msgid "Device header overlaps with data area."
 msgstr "デバイスヘッダがデータ領域に重なっています。"
 
-#: lib/setup.c:5120
+#: lib/setup.c:5131
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "既に再暗号化中です。デバイスをアクティベートできません。"
 
-#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3722
+#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
+#: lib/luks2/luks2_reencrypt.c:3725
 msgid "Failed to get reencryption lock."
 msgstr "再暗号化ロックを取得できません。"
 
-#: lib/setup.c:5144
+#: lib/setup.c:5155
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "ボリュームキーを使った LUKS2 の再暗号化のリカバリに失敗しました。"
 
-#: lib/setup.c:5280
+#: lib/setup.c:5291
 #, c-format
 msgid "Device %s already exists."
 msgstr "デバイス %s は既に存在します。"
 
-#: lib/setup.c:5287
+#: lib/setup.c:5298
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "デバイス %s を使えません。名前が不正か使用中です。"
 
-#: lib/setup.c:5299
+#: lib/setup.c:5310
 msgid "Reencryption volume keys do not match the volume."
 msgstr "再暗号化ボリュームキーがボリュームに合いません。"
 
-#: lib/setup.c:5316
+#: lib/setup.c:5327
 msgid "Incorrect volume key specified for plain device."
 msgstr "正しくないボリュームキーがプレーンデバイスに指定されました。"
 
-#: lib/setup.c:5342 lib/setup.c:5403
+#: lib/setup.c:5353 lib/setup.c:5414
 msgid "Device type is not properly initialized."
 msgstr "デバイスタイプが正しく初期化されていません。"
 
-#: lib/setup.c:5441
+#: lib/setup.c:5452
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "カーネルがカーネルキーリングをサポートしていません。"
 
-#: lib/setup.c:5445
+#: lib/setup.c:5456
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "署名をカーネルに渡すのに必要なカーネルキーリングをカーネルがサポートしていません。"
 
-#: lib/setup.c:5500
+#: lib/setup.c:5511
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "キーリングキー %s が使えません。"
 
-#: lib/setup.c:5713
+#: lib/setup.c:5724
 msgid "Incorrect root hash specified for verity device."
 msgstr "正しくないルートハッシュが verity デバイスに指定されました。"
 
-#: lib/setup.c:5754 lib/setup.c:5779
+#: lib/setup.c:5765 lib/setup.c:5790
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL は遅延デアクティベーションをサポートしていません。"
 
-#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "デバイス %s は使用中です。"
 
-#: lib/setup.c:5787
+#: lib/setup.c:5798
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "デバイス %s からの遅延削除をキャンセルできませんでした。"
 
-#: lib/setup.c:5809
+#: lib/setup.c:5820
 #, c-format
 msgid "Invalid device %s."
 msgstr "デバイス %s は不正です。"
 
-#: lib/setup.c:5956
+#: lib/setup.c:5967
 msgid "Volume key buffer too small."
 msgstr "ボリュームキーのバッファが小さすぎます。"
 
-#: lib/setup.c:5967
+#: lib/setup.c:5978
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "LUKS2 デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:5976
+#: lib/setup.c:5987
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "LUKS1 デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:5990
+#: lib/setup.c:6001
 msgid "Cannot retrieve volume key for plain device."
 msgstr "プレーンデバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:5998
+#: lib/setup.c:6009
 msgid "Cannot retrieve root hash for verity device."
 msgstr "verity デバイスのルートハッシュが読み出せません。"
 
-#: lib/setup.c:6007
+#: lib/setup.c:6018
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "BITLK デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6012
+#: lib/setup.c:6023
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "FVAULT2 デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6014
+#: lib/setup.c:6025
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "この操作は %s 暗号化デバイスではサポートされていません。"
 
-#: lib/setup.c:6199 lib/setup.c:6210
+#: lib/setup.c:6210 lib/setup.c:6221
 msgid "Dump operation is not supported for this device type."
 msgstr "このデバイスタイプはダンプ操作をサポートしていません。"
 
-#: lib/setup.c:6590
+#: lib/setup.c:6601
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "データオフセットが %u バイトの倍数である必要があります。"
 
-#: lib/setup.c:6898
+#: lib/setup.c:6909
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "使用中のデバイス %s を変換できません。"
 
-#: lib/setup.c:7206 lib/setup.c:7350
+#: lib/setup.c:7217 lib/setup.c:7361
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "新しいボリュームキー向けのキースロット %u を確保できません。"
 
-#: lib/setup.c:7230
+#: lib/setup.c:7241
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "デフォルト LUKS2 キースロットパラメータを初期化できません。"
 
-#: lib/setup.c:7236
+#: lib/setup.c:7247
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "ダイジェストするためのキースロット %d が確保できません。"
 
-#: lib/setup.c:7467
+#: lib/setup.c:7478
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "キースロットを追加できません。全てのスロットが無効でボリュームキーが渡されませんでした。"
 
-#: lib/setup.c:7540 lib/verity/verity.c:333
+#: lib/setup.c:7551 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "キーをカーネルキーリングにロードできません。"
 
-#: lib/setup.c:7731
+#: lib/setup.c:7742
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "キーリング \"%s\" が見つかりませんでした。"
 
-#: lib/setup.c:7796
+#: lib/setup.c:7807
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "グローバル memory-hard アクセス直列化ロックが取れません。"
 
@@ -800,40 +800,45 @@ msgstr "デバイス %s は互換性がありません。"
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "データデバイスのおかしな(bogus) optimal-io サイズ (%u バイト) は無視します。"
 
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "%s を %<PRIu64> バイトまで拡げられませんでした (%s)。"
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "デバイス %s が小さすぎます。少なくとも %<PRIu64> バイト必要です。"
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "デバイス %s は使用中で使えません (既にマップされているかマウントされています)。"
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "デバイス %s が使えません、拒否されました。"
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "デバイス %s についての情報が取得できません。"
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "ループバックデバイスが使えません、非 root ユーザで実行していませんか。"
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "ループデバイスのアタッチできません (autoclear 付きのループデバイスが必要です)。"
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "指定されたオフセットはデバイス %s の実際のサイズを超えています。"
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "デバイス %s のサイズが 0 です。"
@@ -976,9 +981,9 @@ msgstr "キースロットを暗号化中にI/Oエラーが発生しました。
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
 #: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
 #: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
@@ -1123,7 +1128,7 @@ msgstr "LUKS 暗号モード %s は不正です。"
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS ハッシュ %s は不正です。"
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "LUKS ヘッダに既知の不具合は検出されませんでした。"
 
@@ -1216,11 +1221,11 @@ msgstr "TCRYPT パスフレーズの最大長 (%zu) を超えました。"
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "PBKDF2 ハッシュアルゴリズム %s が利用できないのでスキップします。"
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
+#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
 msgid "Required kernel crypto interface not available."
 msgstr "必要なカーネル crypto インターフェースが使用できません。"
 
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
+#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
 msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr "algif_skcipher カーネルモジュールをロードしてください。"
 
@@ -1291,11 +1296,6 @@ msgstr "サポートされていないセクタサイズ %<PRIu16> です。"
 msgid "Failed to read BITLK header from %s."
 msgstr "%s から BITLK ヘッダを読み出すのに失敗しました。"
 
-#: lib/bitlk/bitlk.c:593
-#, c-format
-msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
-msgstr "BITLK FVE メタデータコピー #%d の %s からの読み込み、もしくは検証ができませんでした。"
-
 #: lib/bitlk/bitlk.c:603
 #, c-format
 msgid "Failed to read and validate BITLK FVE metadata from %s."
@@ -1371,42 +1371,42 @@ msgstr "この操作はサポートされていません。"
 msgid "Unexpected key data size."
 msgstr "予期しないキーデータサイズです。"
 
-#: lib/bitlk/bitlk.c:1431
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "この BITLK デバイスはサポートされてない状態にあるためアクティベートできません。"
 
-#: lib/bitlk/bitlk.c:1436
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "タイプ '%s' の BITLK デバイスはアクティベートできません。"
 
-#: lib/bitlk/bitlk.c:1475
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "警告: BitLocker ボリュームサイズ %<PRIu64> がデバイスサイズ %<PRIu64> と一致しません"
 
-#: lib/bitlk/bitlk.c:1602
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "カーネルの dm-crypt が BITLK IV をサポートしていないためデバイスをアクティベートできません。"
 
-#: lib/bitlk/bitlk.c:1606
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "カーネルの dm-crypt が BITLK Elephant diffuser をサポートしていないためデバイスをアクティベートできません。"
 
-#: lib/bitlk/bitlk.c:1610
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "カーネルの dm-crypt がラージセクタサイズをサポートしていないためデバイスをアクティベートできません。"
 
-#: lib/bitlk/bitlk.c:1614
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "カーネルの dm-zero モジュールがないためデバイスをアクティベートできません。"
 
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "ボリュームヘッダの %u バイトを読みこめませんでした。"
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "FVAULT2 のバージョン %<PRIu16> はサポートされていません。"
@@ -1483,23 +1483,23 @@ msgstr "検証がポジション %<PRIu64> で失敗しました。"
 msgid "Hash area overflow."
 msgstr "ハッシュ領域がオーバーフロー。"
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "データ領域の検証に失敗しました。"
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "ルートハッシュの検証に失敗しました。"
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "ハッシュ領域を生成中に I/O エラー。"
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "ハッシュ領域の作成に失敗しました。"
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "警告: カーネルはデータブロックサイズがページサイズ (%u) を超えているとアクティベートできません。"
@@ -1554,19 +1554,19 @@ msgstr "デバイス %s のサイズが不明です。"
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "互換性のないカーネルの dm-integrity のメタデータ (バージョン %u) が %s に検出されました。"
 
-#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "カーネルが dm-integrity マッピングをサポートしていません。"
 
-#: lib/integrity/integrity.c:310
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "カーネルが dm-integrity 固定メタデータアラインメントをサポートしていません。"
 
-#: lib/integrity/integrity.c:319
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "カーネルが安全でない再計算オプションを拒否しました (レガジーアクティベーションオプションでオーバーライドできます)。"
 
-#: lib/integrity/integrity.c:325
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "カーネルが dm-integrity インラインモードをサポートしていません。"
 
@@ -1715,7 +1715,7 @@ msgstr "dm-integrity デバイスがデータセクタに対して期待通り
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "再暗号化が実行中なのでデバイスのデアクティベートできません。. Cannot deactivate device."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
+#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "サスペンドされたデバイス %s を dm-error ターゲットで置き換えられません。"
@@ -1794,7 +1794,7 @@ msgstr "UUID が %s のデバイスの状態が確認できません。"
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "LUKSMETA メタデータ付きのヘッダは変換できません。"
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
+#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "暗号スペック %s-%s は LUKS2 に使えません。"
@@ -1878,7 +1878,7 @@ msgstr "デバイスサイズが計算ゾーンアライメント (%zu バイト
 
 #: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
 #: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4077
+#: lib/luks2/luks2_reencrypt.c:4080
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "古いセグメントのストレージラッパの初期化に失敗しました。"
 
@@ -1886,7 +1886,7 @@ msgstr "古いセグメントのストレージラッパの初期化に失敗し
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "新しいセグメントのストレージラッパの初期化に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
+#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
 msgid "Failed to initialize hotzone protection."
 msgstr "ホットゾーン保護の初期化に失敗しました。"
 
@@ -1894,7 +1894,7 @@ msgstr "ホットゾーン保護の初期化に失敗しました。"
 msgid "Failed to read checksums for current hotzone."
 msgstr "現在のホットゾーンのチェックサムを読み込めません。"
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "%<PRIu64> から始めるホットゾーンエリアを読み込めません。"
@@ -1983,8 +1983,8 @@ msgstr "小さくしたデータサイズが実際のデバイスサイズより
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "データデバイスが暗号化セクタサイズにアラインされていません(%<PRIu32> バイト)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
-#: lib/luks2/luks2_reencrypt.c:3661
+#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
+#: lib/luks2/luks2_reencrypt.c:3664
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "デバイス %s を排他モードでオープンでません (既にマップされているかマウントされています)。"
@@ -1993,123 +1993,123 @@ msgstr "デバイス %s を排他モードでオープンでません (既にマ
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "デバイスは LUKS2 再暗号化向けにマークされていません。"
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
+#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "LUKS2 再暗号化コンテキストをロードできません。"
 
-#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
+#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
 msgid "Device is not in reencryption."
 msgstr "デバイス %s は再暗号化中ではありません。"
 
-#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
+#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
 msgid "Reencryption process is already running."
 msgstr "既に再暗号化中です。"
 
-#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
+#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
 msgid "Failed to acquire reencryption lock."
 msgstr "再暗号化ロックを取得できません。"
 
-#: lib/luks2/luks2_reencrypt.c:3468
+#: lib/luks2/luks2_reencrypt.c:3471
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "再暗号化を開始できません。再暗号化のリカバリを先にしてください。"
 
-#: lib/luks2/luks2_reencrypt.c:3604
+#: lib/luks2/luks2_reencrypt.c:3607
 msgid "Active device size and requested reencryption size don't match."
 msgstr "実際のデバイスサイズと要求された再暗号化サイズが一致しません。"
 
-#: lib/luks2/luks2_reencrypt.c:3618
+#: lib/luks2/luks2_reencrypt.c:3621
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "再暗号化のパラメータとして不正なデバイスサイズが要求されました。"
 
-#: lib/luks2/luks2_reencrypt.c:3720
+#: lib/luks2/luks2_reencrypt.c:3723
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "既に再暗号化中です。復元を実行できません。"
 
-#: lib/luks2/luks2_reencrypt.c:3741
+#: lib/luks2/luks2_reencrypt.c:3744
 msgid "LUKS2 reencryption recovery failed."
 msgstr "LUKS2 の再暗号化は既に初期化されました。"
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
 msgid "Failed to initialize reencryption device stack."
 msgstr "再暗号化デバイススタックの初期化に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3910
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "メタデータの LUKS2 の再暗号化は既に初期化されました。"
 
-#: lib/luks2/luks2_reencrypt.c:3915
+#: lib/luks2/luks2_reencrypt.c:3918
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "メタデータの LUKS2 再暗号化に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
-#: lib/luks2/luks2_reencrypt.c:4030
+#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
+#: lib/luks2/luks2_reencrypt.c:4033
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "再暗号化は DAX デバイスではサポートされていません。"
 
-#: lib/luks2/luks2_reencrypt.c:4059
+#: lib/luks2/luks2_reencrypt.c:4062
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "デバイスセグメントの次の再暗号化ホットゾーンの設定に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:4112
+#: lib/luks2/luks2_reencrypt.c:4115
 msgid "Failed to write reencryption resilience metadata."
 msgstr "再暗号化した耐性用メタデータを書き込めません。"
 
-#: lib/luks2/luks2_reencrypt.c:4119
+#: lib/luks2/luks2_reencrypt.c:4122
 msgid "Decryption failed."
 msgstr "復号に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:4124
+#: lib/luks2/luks2_reencrypt.c:4127
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "%<PRIu64> から始まるホットゾーンエリアに書き込めません。"
 
-#: lib/luks2/luks2_reencrypt.c:4129
+#: lib/luks2/luks2_reencrypt.c:4132
 msgid "Failed to sync data."
 msgstr "データを sync できません。"
 
-#: lib/luks2/luks2_reencrypt.c:4137
+#: lib/luks2/luks2_reencrypt.c:4140
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "現在のホットゾーンの再暗号化完了後にメタデータが更新できません。"
 
-#: lib/luks2/luks2_reencrypt.c:4226
+#: lib/luks2/luks2_reencrypt.c:4229
 msgid "Failed to write LUKS2 metadata."
 msgstr "LUKS2 メタデータが書き込めません。"
 
-#: lib/luks2/luks2_reencrypt.c:4249
+#: lib/luks2/luks2_reencrypt.c:4252
 msgid "Failed to wipe unused data device area."
 msgstr "未使用データデバイス領域を消せません。"
 
-#: lib/luks2/luks2_reencrypt.c:4255
+#: lib/luks2/luks2_reencrypt.c:4258
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "未使用のキースロット %d を削除できませんでした。"
 
-#: lib/luks2/luks2_reencrypt.c:4265
+#: lib/luks2/luks2_reencrypt.c:4268
 msgid "Failed to remove reencryption keyslot."
 msgstr "再暗号化キースロットが削除できません。"
 
-#: lib/luks2/luks2_reencrypt.c:4275
+#: lib/luks2/luks2_reencrypt.c:4278
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "%<PRIu64> から %<PRIu64> セクタのチャンクの再暗号化中に致命的なエラー。"
 
-#: lib/luks2/luks2_reencrypt.c:4279
+#: lib/luks2/luks2_reencrypt.c:4282
 msgid "Online reencryption failed."
 msgstr "オンライン再暗号化に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:4284
+#: lib/luks2/luks2_reencrypt.c:4287
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "手動でエラーターゲットに置き換えた場合以外はデバイスのレジュームをしないでください。"
 
-#: lib/luks2/luks2_reencrypt.c:4336
+#: lib/luks2/luks2_reencrypt.c:4339
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "再暗号化を開始できません。予期しない再暗号化状態です。"
 
-#: lib/luks2/luks2_reencrypt.c:4342
+#: lib/luks2/luks2_reencrypt.c:4345
 msgid "Missing or invalid reencrypt context."
 msgstr "ないか不正な再暗号化コンテキストです。"
 
-#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
+#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
 msgid "Failed to update reencryption context."
 msgstr "再暗号化コンテキストが更新できません。"
 
@@ -2145,7 +2145,7 @@ msgstr "キースロットの暗号化パラメータは LUKS2 デバイスで
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "キースロットの暗号化パラメータは LUKS2 キースロット暗号化と互換性がありません。"
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
+#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2173,7 +2173,7 @@ msgstr "警告: --hash パラメータは plain モードでキーファイル
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "警告: --keyfile-size オプションは無視されて、読み込みサイズは暗号鍵のサイズと同じになります。\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2184,9 +2184,9 @@ msgstr "%s の Blkid スキャンが失敗しました。"
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "%s にデバイス署名が検出されました。既にあるデータを破壊しかねません。"
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
-#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
-#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2235,7 +2235,7 @@ msgstr ""
 "暗号化されたパーティションにパスフレーズなしでアクセス可能にます。\n"
 "このダンプは暗号化された安全な所に保存してください。"
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2254,14 +2254,14 @@ msgstr "デバイス %s は有効な FVAULT2 デバイスではありません
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "FVAULT2 のボリュームキーサイズが決定できないので、--key-size を使ってください。"
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "デバイス %s はまたアクティブで後から削除される予定になっています。.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
-#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
-#: src/cryptsetup.c:3264
+#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
+#: src/cryptsetup.c:3262
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "外部トークンパス %s の設定に失敗しました。"
@@ -2270,59 +2270,59 @@ msgstr "外部トークンパス %s の設定に失敗しました。"
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "アクティブなデバイスをリサイズするにはボリュームキーがキーリングに必要ですが、--disable-keyring が指定されています。"
 
-#: src/cryptsetup.c:1059
+#: src/cryptsetup.c:1057
 msgid "Benchmark interrupted."
 msgstr "ベンチマークが中止されました。"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1078
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     計測値なし\n"
 
-#: src/cryptsetup.c:1082
+#: src/cryptsetup.c:1080
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u 回/秒 (%zu ビットの鍵)\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1094
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s 計測値なし\n"
 
-#: src/cryptsetup.c:1098
+#: src/cryptsetup.c:1096
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u 回, %5u KB使用, %1u スレッド (%zu のビットの鍵) (%u ms 計測)\n"
 
-#: src/cryptsetup.c:1122
+#: src/cryptsetup.c:1120
 msgid "Result of benchmark is not reliable."
 msgstr "ベンチマークの結果は信頼できません。"
 
-#: src/cryptsetup.c:1172
+#: src/cryptsetup.c:1170
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# テストはストレージI/Oがなくメモリ上のもののため目安です。\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1197
+#: src/cryptsetup.c:1195
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algorithm |      キー |          暗号化 |           復号化\n"
 
-#: src/cryptsetup.c:1205
+#: src/cryptsetup.c:1203
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "暗号 %s (キーサイズ %i ビット) は利用できません。"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1222
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algorithm |      キー |          暗号化 |           復号化\n"
 
-#: src/cryptsetup.c:1235
+#: src/cryptsetup.c:1233
 msgid "N/A"
 msgstr "計測値なし"
 
-#: src/cryptsetup.c:1260
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2330,27 +2330,27 @@ msgstr ""
 "保護されていない LUKS2 再暗号化メタデータが検出されました。再暗号化操作が望ましいものか確認してください。(luksDump の出力を見てください)\n"
 "そのうえで、この操作が問題ないと確認できたら継続(メタデータのアップグレード)してください。"
 
-#: src/cryptsetup.c:1266
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "再暗号化メタデータの保護とアップグレードのためのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "本当に LUKS2 再暗号化リカバリを行いますか？"
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "再暗号化メタデータダイジェストを検証するためのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1321
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "再暗号化のリカバリのためのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1383
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "本当に LUKS デバイスヘッダの復元を試みていいですか？"
 
-#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2358,7 +2358,7 @@ msgstr ""
 "\n"
 "ワイプが中断されました。"
 
-#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2366,167 +2366,167 @@ msgstr ""
 "整合性チェックサムの初期化のためにデバイスのデータを消去しています。\n"
 "CTRL+c で中止できます (初期化されなかったデバイスのチェックサムは正しくなくなります)。\n"
 
-#: src/cryptsetup.c:1438 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "一時的デバイス %s を非アクティブにできません。"
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "OPAL hw-only 暗号化は --cipher や --key-size をサポートしないため、無視されました。"
 
-#: src/cryptsetup.c:1499
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "整合性オプションは LUKS2 形式でしか使えません。"
 
-#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "サポートされていない LUKS2 メタデータのサイズオプションです。"
 
-#: src/cryptsetup.c:1509
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL は LUKS2 フォーマットでしかサポートされていません。"
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "インライン hw タグは LUKS2 フォーマットでしかサポートされていません。"
 
-#: src/cryptsetup.c:1523
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "ヘッダファイルがありません。作成しますか？"
 
-#: src/cryptsetup.c:1531
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "ヘッダファイル %s を作成できません。"
 
-#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "サポートしている整合性方式が検出されませんでした。"
 
-#: src/cryptsetup.c:1559
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "指定されたジャーナル整合性キーのサイズが使えません。"
 
-#: src/cryptsetup.c:1577
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "%s を on-disk ヘッダとして使えません。"
 
-#: src/cryptsetup.c:1606 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "%s のデータを上書きします。戻せません。"
 
-#: src/cryptsetup.c:1643
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "OPAL 管理者パスワードは空ではいけません。"
 
-#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
-#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "pbkdf パラメータを設定できません。"
 
-#: src/cryptsetup.c:1788
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "分離された LUKS ヘッダでのみ少ないデータオフセットが使えます。"
 
-#: src/cryptsetup.c:1795
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "LUKS ファイルコンテナ %s がアクティベートするには小さすぎます。データ用の領域に空きがありません。"
 
-#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "キースロットのない LUKS のボリュームキーサイズが決定できないので、--key-size を使ってください。"
 
-#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "デバイスには2つのボリュームキーが必要です。"
 
-#: src/cryptsetup.c:1891
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "いくつかの指定されたアクティベーションパラメータは OPAL hw-only 暗号化では無視されました。"
 
-#: src/cryptsetup.c:1896
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "デバイスはアクティベートされましたが、フラグを恒常的なものにできません。"
 
-#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "キースロット %d は削除対象として選択されました。"
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "これは最後のキースロットです。このキーがなくなるとデバイスは使用不能になります。"
 
-#: src/cryptsetup.c:1989
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "残っているパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "操作は中止されました。キースロットは消去されていません。\n"
 
-#: src/cryptsetup.c:2026
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "削除するキーのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
+#: src/cryptsetup.c:3253
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "デバイス %s は有効な LUKS2 デバイスではありません。"
 
-#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "キースロットの新しいパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "トークンPINを入力してください: "
 
-#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "トークン %d PINを入力してください: "
 
-#: src/cryptsetup.c:2210
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "警告: --key-slot パラメータは新しいキースロット番号に使われます。\n"
 
-#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "有効なパスフレーズをどれか入力してください: "
 
-#: src/cryptsetup.c:2383
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "変更するキーのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "新しいキーのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2449
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "変換されるキースロットのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2473
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "isLuks は一つのデバイス引数しかサポートしていません。"
 
-#: src/cryptsetup.c:2578
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "キースロット %d は unbound キーを含んでいません。"
 
-#: src/cryptsetup.c:2583
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2534,52 +2534,52 @@ msgstr ""
 "unbound キーを使ったヘッダダンプは取り扱いに注意すべき情報です。\n"
 "このダンプは暗号化された安全な所に保存してください。"
 
-#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s はアクティブな %s デバイスではありません。"
 
-#: src/cryptsetup.c:2709
+#: src/cryptsetup.c:2707
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s はアクティブな LUKS デバイス名ではないか、ヘッダがありません。"
 
-#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
+#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
 msgid "Option --header-backup-file is required."
 msgstr "オプション --header-backup-file が必要です。"
 
-#: src/cryptsetup.c:2836
+#: src/cryptsetup.c:2834
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s は cryptsetup で管理されているデバイスではありません。"
 
-#: src/cryptsetup.c:2847
+#: src/cryptsetup.c:2845
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "リフレッシュはデバイスタイプ %s ではサポートされていません。"
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2895
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "%s は認識できないメタデータデータタイプです。"
 
-#: src/cryptsetup.c:2899
+#: src/cryptsetup.c:2897
 msgid "Command requires device and mapped name as arguments."
 msgstr "コマンドはデバイスとマップされた名前を引数として必要とします。"
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL PSID: "
 msgstr "OPAL PSID を入力してください: "
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL Admin password: "
 msgstr "OPAL 管理者パスワードを入力してください: "
 
-#: src/cryptsetup.c:2925
+#: src/cryptsetup.c:2923
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "警告: ディスク「全体」が出荷状態にリセットされ、データは全て消失します！続けますか？"
 
-#: src/cryptsetup.c:2968
+#: src/cryptsetup.c:2966
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2588,363 +2588,363 @@ msgstr ""
 "この処理はデバイス %s の全てのキースロットを消去します。\n"
 "デバイスのデータは使用できなくなります。"
 
-#: src/cryptsetup.c:2975
+#: src/cryptsetup.c:2973
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "処理は中止されました。キースロットは消去されません。\n"
 
-#: src/cryptsetup.c:3014
+#: src/cryptsetup.c:3012
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "不正な LUKS タイプです。luks1 と luks2 しかサポートしていません。"
 
-#: src/cryptsetup.c:3030
+#: src/cryptsetup.c:3028
 #, c-format
 msgid "Device is already %s type."
 msgstr "デバイスは既にタイプ %s です。"
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3035
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "この処理は %s から %s フォーマットに変換します。\n"
 
-#: src/cryptsetup.c:3040
+#: src/cryptsetup.c:3038
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "処理は中止されました。デバイスは変換されませんでした。\n"
 
-#: src/cryptsetup.c:3080
+#: src/cryptsetup.c:3078
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "オプション --priority, --label か --subsystem がありません。"
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
 #, c-format
 msgid "Token %d is invalid."
 msgstr "トークン %d は不正です。"
 
-#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
+#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
 #, c-format
 msgid "Token %d in use."
 msgstr "トークン %d は使用中です。"
 
-#: src/cryptsetup.c:3129
+#: src/cryptsetup.c:3127
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "luks2-キーリングトークン %d を追加できませんでした。"
 
-#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
+#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "トークン %d をキースロット %d に割りあてられませんでした。"
 
-#: src/cryptsetup.c:3157
+#: src/cryptsetup.c:3155
 #, c-format
 msgid "Token %d is not in use."
 msgstr "トークン %d は使われていません。"
 
-#: src/cryptsetup.c:3194
+#: src/cryptsetup.c:3192
 msgid "Failed to import token from file."
 msgstr "ファイルからトークンをインポートできません。"
 
-#: src/cryptsetup.c:3219
+#: src/cryptsetup.c:3217
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "トークン %d をエクスポートのために取得できませんでした。"
 
-#: src/cryptsetup.c:3232
+#: src/cryptsetup.c:3230
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "トークン %d をキースロット %d に割りあてられませんでした。"
 
-#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
+#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "トークン %d をキースロット %d の割り当てから解除できませんでした。"
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3298
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "--tcrypt-hidden と --tcrypt-system と --tcrypt-backup は TCRYPT デバイスしか使えません。"
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3301
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "--veracrypt や --disable-veracrypt は TCRYPT デバイスでしか使えません。"
 
-#: src/cryptsetup.c:3306
+#: src/cryptsetup.c:3304
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "--veracrypt-pim は VeraCrypt 互換デバイスにしか使えません。"
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3308
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "--veracrypt-query-pim は VeraCrypt 互換デバイスにしか使えません。"
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3310
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "--veracrypt-pim と --veracrypt-query-pim はどちらかしか使えません。"
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3319
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "--persistent は --test-passphrase と一緒には使えません。"
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3322
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "--refresh と --test-passphrase は同時には使えません。"
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3325
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "--shared は plain デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3328
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "--skip は plain か loopaes デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3331
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "--offset は plain か loopaes デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3336
+#: src/cryptsetup.c:3334
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "--tcrypt-hidden は --allow-discards と一緒に使えません。"
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3338
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "オープン時のセクタサイズオプションは plain デバイスでしかサポートされていません。"
 
-#: src/cryptsetup.c:3344
+#: src/cryptsetup.c:3342
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "大きな IV セクタオプションは plain タイプでセクタサイズが 512 バイトより大きいものをオープンする時しかサポートしていません。"
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3347
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "--test-passphrase は LUKS か TCRYPT か BITLK か FVAULT2 デバイスの open にしか使えません。."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
+#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
 msgid "Options --device-size and --size cannot be combined."
 msgstr "--device-size と --size は一緒に使えません。"
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3353
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "オプション --unbound は luks デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3358
+#: src/cryptsetup.c:3356
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "オプション --unbound は --test-passphrase がないと使えません。"
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3360
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "--volume-key-keyring オプションは --hash や --volume-key-file と一緒には使えません。"
 
-#: src/cryptsetup.c:3365
+#: src/cryptsetup.c:3363
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "--volume-key-file オプションは対応する --key-size オプションとペアになる必要があります。"
 
-#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "オプション --cancel-deferred と --deferred は同時に使えません。"
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3388
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "オプション --active-nameは LUKS2 デバイスでしか設定できません。"
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3391
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "オプション --active-name と --force-offline-reencrypt は一緒に使えません。"
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3394
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "--new-volume-key-file オプションと --keep-key は一緒に使えません。"
 
-#: src/cryptsetup.c:3399
+#: src/cryptsetup.c:3397
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "--new-volume-key-keyring オプションと --keep-key は一緒に使えません。"
 
-#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
+#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
 msgid "Keyslot specification is required."
 msgstr "キースロットの指定が必要です。"
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3413
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "--align-payload と --offset は一緒に使えません。"
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3416
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "--integrity-no-wipe は format で整合性拡張付きの時しか使えません。"
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3419
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "--use-[u]random は一つしか使えません。"
 
-#: src/cryptsetup.c:3429
+#: src/cryptsetup.c:3427
 msgid "Key size is required with --unbound option."
 msgstr "--unbound にはキーサイズが必要です。"
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3447
 msgid "Invalid token action."
 msgstr "不正なトークンアクションです。"
 
-#: src/cryptsetup.c:3452
+#: src/cryptsetup.c:3450
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "--key-description はトークン追加には必須です。"
 
-#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
+#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "トークンを必要としています。--token-id を使用してください。"
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3458
 msgid "Option --unbound is valid only with token add action."
 msgstr "オプション --unbound はトークンの追加にしか使えません。"
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3460
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "--key-slot と --unbound は一緒に使えません。"
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3465
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "特定のキースロットを必要としています。--key-slot を使用してください。"
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3481
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<デバイス> [--type <タイプ>] [<名前>]"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "デバイスを <名前> としてオープン"
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<名前>"
 
-#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "デバイスをクローズします (マッピングを削除します)"
 
-#: src/cryptsetup.c:3485 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "アクティブデバイスをリサイズ"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3484
 msgid "show device status"
 msgstr "デバイスステータスを表示"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <暗号>]"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "benchmark cipher"
 msgstr "暗号ベンチマーク"
 
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
-#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
+#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
+#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
+#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
+#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
 msgid "<device>"
 msgstr "<デバイス>"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3486
 msgid "try to repair on-disk metadata"
 msgstr "on-disk メタデータを修復しようとしています"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3487
 msgid "reencrypt LUKS2 device"
 msgstr "LUKS2 デバイスを再暗号化"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3488
 msgid "erase all keyslots (remove encryption key)"
 msgstr "全てのキースロットを消去します (暗号鍵も削除します)"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3489
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "LUKS2 から LUKS もしくは LUKS から LUKS2 形式に変換します"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490
 msgid "set permanent configuration options for LUKS2"
 msgstr "LUKS2 の permanent configuration オプションを設定します"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
 msgid "<device> [<new key file>]"
 msgstr "<デバイス> [<新しいキーファイル>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3491
 msgid "formats a LUKS device"
 msgstr "LUKS デバイスをフォーマットします"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3492
 msgid "add key to LUKS device"
 msgstr "LUKS デバイスにキーを追加します"
 
-#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
 msgid "<device> [<key file>]"
 msgstr "<デバイス> [<キーファイル>]"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3493
 msgid "removes supplied key or key file from LUKS device"
 msgstr "与えられたキーかキーファイルを LUKS デバイスから削除します。"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3494
 msgid "changes supplied key or key file of LUKS device"
 msgstr "与えられた LUKS デバイスのキーかキーファイルを変更します"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3495
 msgid "converts a key to new pbkdf parameters"
 msgstr "キーを新しい pbkdf パラメータに変換します"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "<device> <key slot>"
 msgstr "<デバイス> <キースロット>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "<キースロット>のキーを LUKS デバイスから削除します"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3497
 msgid "print UUID of LUKS device"
 msgstr "LUKS デバイスの UUID を表示"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3498
 msgid "tests <device> for LUKS partition header"
 msgstr "<デバイス> の LUKS パーティションヘッダをテストします"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3499
 msgid "dump LUKS partition information"
 msgstr "LUKS パーティション情報をダンプします"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3500
 msgid "dump TCRYPT device information"
 msgstr "TCRYPT デバイス情報をダンプします"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3501
 msgid "dump BITLK device information"
 msgstr "BITLK デバイス情報をダンプします"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3502
 msgid "dump FVAULT2 device information"
 msgstr "FVAULT2 デバイス情報をダンプします"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3503
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "LUKS デバイスを停止してキーを削除します (全てのI/Oは停止します)"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3504
 msgid "Resume suspended LUKS device"
 msgstr "停止していた LUKS デバイスを再開します"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3505
 msgid "Backup LUKS device header and keyslots"
 msgstr "LUKS デバイスヘッダとキースロットをバックアップします"
 
-#: src/cryptsetup.c:3508
+#: src/cryptsetup.c:3506
 msgid "Restore LUKS device header and keyslots"
 msgstr "LUKS デバイスヘッダとキースロットをリストアします"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <デバイス>"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "Manipulate LUKS2 tokens"
 msgstr "LUKS2 トークンを操作します"
 
-#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2952,7 +2952,7 @@ msgstr ""
 "\n"
 "<action> は以下のうちの一つです:\n"
 
-#: src/cryptsetup.c:3534
+#: src/cryptsetup.c:3532
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2964,7 +2964,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3538
+#: src/cryptsetup.c:3536
 #, c-format
 msgid ""
 "\n"
@@ -2979,7 +2979,7 @@ msgstr ""
 "<キースロット> は変更する LUKS キースロット番号\n"
 "<キーファイル> は luskAddKey でオプションで与えられる新しいキーのキーファイル\n"
 
-#: src/cryptsetup.c:3545
+#: src/cryptsetup.c:3543
 #, c-format
 msgid ""
 "\n"
@@ -2988,7 +2988,7 @@ msgstr ""
 "\n"
 "デフォルトのコンパイル時に決められたメタデータ形式は %s です(luksFormat で使われます)。\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3548
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -2996,12 +2996,12 @@ msgstr ""
 "\n"
 "LUKS2 外部トークンプラグインサポートは有効です。\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3549
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "LUKS2 外部トークンプラグインパス: %s.\n"
 
-#: src/cryptsetup.c:3553
+#: src/cryptsetup.c:3551
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3009,7 +3009,7 @@ msgstr ""
 "\n"
 "LUKS2 外部トークンプラグインサポートは無効です。\n"
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3555
 #, c-format
 msgid ""
 "\n"
@@ -3026,7 +3026,7 @@ msgstr ""
 "デフォルト LUKS2 向け PBKDF: %s\n"
 "\t繰り返す時間: %d, 使うメモリ: %dkB, 並列スレッド: %d\n"
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3566
 #, c-format
 msgid ""
 "\n"
@@ -3041,122 +3041,122 @@ msgstr ""
 "\tplain: %s, キー: %d ビット, パスワードハッシュ: %s\n"
 "\tLUKS: %s, キー: %d ビット, LUKS ヘッダハッシュ: %s, 乱数生成: %s\n"
 
-#: src/cryptsetup.c:3577
+#: src/cryptsetup.c:3575
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: XTS モードのデフォルトキーサイズは (2つの内部キーがあるため) 倍になります。\n"
 
-#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: は %s を引数で与える必要があります"
 
-#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "キースロットは不正です。"
 
-#: src/cryptsetup.c:3663
+#: src/cryptsetup.c:3661
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "デバイスサイズは 512 バイトセクタの倍数である必要があります。"
 
-#: src/cryptsetup.c:3668
+#: src/cryptsetup.c:3666
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "再暗号化ホットゾーン最大サイズの指定が不正です。"
 
-#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
+#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
 msgid "Key size must be a multiple of 8 bits"
 msgstr "キーサイズは 8bit の倍数でなければなりません"
 
-#: src/cryptsetup.c:3689
+#: src/cryptsetup.c:3687
 msgid "At most 2 key size specifications can be supplied."
 msgstr "多くても2つのキーサイズ設定しか指定できません。"
 
-#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
+#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "多くても %d 個のボリュームキーしか指定できません。"
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3739
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "多くても %d 個のキーリングリンクしか指定できません。"
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3748
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "デバイスを減らせる最大値は 1 GiB です。"
 
-#: src/cryptsetup.c:3753
+#: src/cryptsetup.c:3751
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "減らすサイズは 512 バイトセクタの倍数である必要があります。"
 
-#: src/cryptsetup.c:3770
+#: src/cryptsetup.c:3768
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "--priority の引数は ignore/normal/prefer のいずれかのみです。"
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "このヘルプを表示します"
 
-#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "コンパクトな使用法表示をします"
 
-#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "パッケージのバージョンを表示"
 
-#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "ヘルプオプション:"
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[オプション...] <アクション> <アクション特有>"
 
-#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "<アクション> がありません。"
 
-#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "未知のアクションです。"
 
-#: src/cryptsetup.c:3931
+#: src/cryptsetup.c:3929
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "--key-file は他で指定されたキーファイルを上書きします。"
 
-#: src/cryptsetup.c:3937
+#: src/cryptsetup.c:3935
 msgid "Only one --key-file argument is allowed."
 msgstr "--key-file は一つしか使えません。"
 
-#: src/cryptsetup.c:3942
+#: src/cryptsetup.c:3940
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "パスワードからキーを作る関数 (PBKDF) は pbkdf2 argon2i argon2id のいずれかのみです。"
 
-#: src/cryptsetup.c:3947
+#: src/cryptsetup.c:3945
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "PBKDF の繰り返し回数の強制と繰り返し時間指定オプションは共存できません。"
 
-#: src/cryptsetup.c:3952
+#: src/cryptsetup.c:3950
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "キーリングが無効化されているためボリュームキーをキーリングにリンクできません。"
 
-#: src/cryptsetup.c:3957
+#: src/cryptsetup.c:3955
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "キーリングが無効化されているためキーリングキー記述を使えません。"
 
-#: src/cryptsetup.c:3962
+#: src/cryptsetup.c:3960
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "インライン整合性拡張は --integrity オプション付きの時しか使えません。"
 
-#: src/cryptsetup.c:3973
+#: src/cryptsetup.c:3971
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "--keyslot-cipher と --keyslot-key-size は同時に使う必要があります。"
 
-#: src/cryptsetup.c:3981
+#: src/cryptsetup.c:3979
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "--test-args オプションつきだったため、何もしません。\n"
 
-#: src/cryptsetup.c:3994
+#: src/cryptsetup.c:3992
 msgid "Cannot disable metadata locking."
 msgstr "メタデータロックを禁止できません。"
 
@@ -3221,7 +3221,7 @@ msgstr "コマンドは <root_hash> か --root-hash-file オプションを引
 msgid "<data_device> <hash_device>"
 msgstr "<データデバイス> <ハッシュデバイス>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:485 src/integritysetup.c:553
 msgid "format device"
 msgstr "デバイスをフォーマット"
 
@@ -3237,7 +3237,7 @@ msgstr "デバイスを検証"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<データデバイス> <名前> <ハッシュデバイス> [<ルートハッシュ>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:489 src/integritysetup.c:556
 msgid "show active device status"
 msgstr "アクティブデバイスのステータスを表示"
 
@@ -3245,7 +3245,7 @@ msgstr "アクティブデバイスのステータスを表示"
 msgid "<hash_device>"
 msgstr "<ハッシュデバイス>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:490 src/integritysetup.c:557
 msgid "show on-disk information"
 msgstr "ディスク上の情報を表示"
 
@@ -3305,24 +3305,24 @@ msgstr "タグサイズ %u%s、内部整合性は %s でフォーマットされ
 msgid " (inline hw tags)"
 msgstr " (インラインHWタグ)"
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:303
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "再計算フラグの設定はサポートされていません。代わりに --wipe を使うことを検討してください。"
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:380 src/integritysetup.c:540
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "デバイス %s が有効な INTEGRITY デバイスではありません。"
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:553 src/integritysetup.c:557
 msgid "<integrity_device>"
 msgstr "<整合性デバイス>"
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:554
 msgid "<integrity_device> <name>"
 msgstr "<整合性デバイス> <名前>"
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:577
 #, c-format
 msgid ""
 "\n"
@@ -3333,7 +3333,7 @@ msgstr ""
 "<名前> は %s に作られるデバイス\n"
 "<整合性デバイス> は整合性タグを格納するデバイス\n"
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:582
 #, c-format
 msgid ""
 "\n"
@@ -3346,48 +3346,48 @@ msgstr ""
 "\tチェックサムアルゴリズム: %s\n"
 "        最大キーファイルサイズ: %dkB\n"
 
-#: src/integritysetup.c:636
+#: src/integritysetup.c:639
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "不正な --%s サイズです。最大は %u バイトです。"
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:742
 msgid "Both key file and key size options must be specified."
 msgstr "キーファイルとキーサイズの両方の指定が必要です。"
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:746
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "ジャーナル整合性キーファイルとキーサイズの両方の指定が必要です。"
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:749
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "ジャーナル整合性キーを使う場合はアルゴリズムの指定が必要です。"
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:753
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "ジャーナル暗号キーファイルとキーサイズの両方の指定が必要です。"
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:756
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "ジャーナル暗号キーを使う場合はアルゴリズムの指定が必要です。"
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:760
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "リカバリと bitmap モードオプションは同時には使えません。"
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:767
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "ジャーナルオプションは bitmap モードでは使えません。"
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:772
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "bitmap オプションは bitmap モードでしか使えません。"
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:778
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "インラインモードは journal や bitmap オプションと一緒に使えません。"
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:782
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "インラインモードは分離データデバイスと一緒には使えません。"
 

From b0eeab0cf544686f98adfe603ca43b701550ed83 Mon Sep 17 00:00:00 2001
From: Jakub Bogusz <qboosh@pld-linux.org>
Date: Tue, 31 Mar 2026 11:31:32 +0200
Subject: [PATCH 054/244] po: update pl.po (from translationproject.org)

---
 po/pl.po | 730 +++++++++++++++++++++++++++----------------------------
 1 file changed, 365 insertions(+), 365 deletions(-)

diff --git a/po/pl.po b/po/pl.po
index 6356d6369..c72e7c39b 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -1,14 +1,14 @@
 # Polish translation for cryptsetup.
 # Copyright (C) 2010 Free Software Foundation, Inc.
 # This file is put in the public domain.
-# Jakub Bogusz <qboosh@pld-linux.org>, 2010-2025.
+# Jakub Bogusz <qboosh@pld-linux.org>, 2010-2026.
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.2-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-12-12 18:51+0100\n"
-"PO-Revision-Date: 2025-12-13 15:15+0100\n"
+"POT-Creation-Date: 2026-03-30 14:18+0200\n"
+"PO-Revision-Date: 2026-03-30 17:31+0200\n"
 "Last-Translator: Jakub Bogusz <qboosh@pld-linux.org>\n"
 "Language-Team: Polish <translation-team-pl@lists.sourceforge.net>\n"
 "Language: pl\n"
@@ -185,8 +185,8 @@ msgstr "Rozmiar urządzenia nie jest wyrównany do rozmiaru bloku logicznego urz
 msgid "Header detected but device %s is too small."
 msgstr "Wykryto nagłówek, ale urządzenie %s jest zbyt małe."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
-#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
+#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
+#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
 msgid "This operation is not supported for this device type."
 msgstr "Ta operacja nie jest obsługiwana dla tego rodzaju urządzenia."
 
@@ -199,10 +199,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nie udało się wycofać zmian w metadanych LUKS2 w pamięci."
 
 #: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
-#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
-#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
-#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
+#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -219,7 +219,7 @@ msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Nie wykryto znanego wzorca określającego szyfr dla aktywnego urządzenia %s."
 
 #: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5805
+#: lib/setup.c:3783 lib/setup.c:5816
 #, c-format
 msgid "Device %s is not active."
 msgstr "Urządzenie %s nie jest aktywne."
@@ -246,7 +246,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Osobne urządzenie metadanych nie jest obsługiwane dla tego rodzaju szyfrowania."
 
 #: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
 msgid "Unsupported encryption sector size."
 msgstr "Nieobsługiwany rozmiar sektora szyfrowania."
 
@@ -299,9 +299,9 @@ msgstr "Szyfr %s-%s (rozmiar klucza w bitach: %zd) nie jest dostępny."
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "UWAGA: uaktywnienie urządzenia się nie powiedzie, dm-crypt nie ma obsługi żądanego rozmiaru sektora szyfrowania.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
+#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4494
+#: lib/luks2/luks2_reencrypt.c:4497
 #, c-format
 msgid "Device %s is too small."
 msgstr "Urządzenie %s jest zbyt małe."
@@ -459,7 +459,7 @@ msgid "Unsupported parameters on device %s."
 msgstr "Nieobsługiwane parametry urządzenia %s."
 
 #: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
+#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Niezgodne parametry dla urządzenia %s."
@@ -469,7 +469,7 @@ msgid "Crypt devices mismatch."
 msgstr "Urządzenia szyfrowane nie zgadzają się."
 
 #: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
+#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Nie udało się przeładować urządzenia %s."
@@ -481,8 +481,8 @@ msgid "Failed to suspend device %s."
 msgstr "Nie udało się wstrzymać urządzenia %s."
 
 #: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
-#: lib/luks2/luks2_reencrypt.c:4237
+#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
+#: lib/luks2/luks2_reencrypt.c:4240
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Nie udało wznowić urządzenia %s."
@@ -564,187 +564,187 @@ msgstr "Błąd podczas wznawiania urządzenia %s."
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Nie udało się odłączyć klucza wolumenu z pęku kluczy podanego przez użytkownika."
 
-#: lib/setup.c:4423 lib/setup.c:5592
+#: lib/setup.c:4423 lib/setup.c:5603
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Nie udało się dołączuć klucza wolumenu do pęku kluczy zdefiniowanego przez użytkownika."
 
-#: lib/setup.c:4521 src/cryptsetup.c:2723
+#: lib/setup.c:4522 src/cryptsetup.c:2721
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Wolumen %s nie jest wstrzymany."
 
-#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
-#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
+#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
+#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
 #: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Klucz wolumenu nie pasuje do wolumenu."
 
-#: lib/setup.c:4776
+#: lib/setup.c:4787
 msgid "Failed to swap new key slot."
 msgstr "Nie udało się podstawić nowego klucza."
 
-#: lib/setup.c:4874
+#: lib/setup.c:4885
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Numer klucza %d jest nieprawidłowy."
 
-#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
-#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
+#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Klucz %d nie jest aktywny."
 
-#: lib/setup.c:4899
+#: lib/setup.c:4910
 msgid "Device header overlaps with data area."
 msgstr "Nagłówek urządzenia zachodzi na obszar danych."
 
-#: lib/setup.c:5120
+#: lib/setup.c:5131
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Ponowne szyfrowanie trwa. Nie można uaktywnić urządzenia."
 
-#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3722
+#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
+#: lib/luks2/luks2_reencrypt.c:3725
 msgid "Failed to get reencryption lock."
 msgstr "Nie udało się uzyskać blokady ponownego szyfrowania."
 
-#: lib/setup.c:5144
+#: lib/setup.c:5155
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Odtwarzanie ponownego szyfrowania LUKS2 przy użyciu kluczy wolumenu nie powiodło się."
 
-#: lib/setup.c:5280
+#: lib/setup.c:5291
 #, c-format
 msgid "Device %s already exists."
 msgstr "Urządzenie %s już istnieje."
 
-#: lib/setup.c:5287
+#: lib/setup.c:5298
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Nie można użyć urządzenia %s, nazwa jest nieprawidłowa lub nadal w użyciu."
 
-#: lib/setup.c:5299
+#: lib/setup.c:5310
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Klucze ponownego szyfrowania wolumenu nie pasują do wolumenu."
 
-#: lib/setup.c:5316
+#: lib/setup.c:5327
 msgid "Incorrect volume key specified for plain device."
 msgstr "Podano niewłaściwy klucz wolumenu dla zwykłego urządzenia."
 
-#: lib/setup.c:5342 lib/setup.c:5403
+#: lib/setup.c:5353 lib/setup.c:5414
 msgid "Device type is not properly initialized."
 msgstr "Typ urządzenia nie został właściwie zainicjalizowany."
 
-#: lib/setup.c:5441
+#: lib/setup.c:5452
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Pęk kluczy w jądrze nie jest obsługiwany przez jądro."
 
-#: lib/setup.c:5445
+#: lib/setup.c:5456
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Brak pęku kluczy w jądrze: wymagany do przekazania podpisu do jądra."
 
-#: lib/setup.c:5500
+#: lib/setup.c:5511
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Nie można użyć klucza pęku kluczy %s."
 
-#: lib/setup.c:5713
+#: lib/setup.c:5724
 msgid "Incorrect root hash specified for verity device."
 msgstr "Podano niewłaściwy hasz główny dla urządzenia VERITY."
 
-#: lib/setup.c:5754 lib/setup.c:5779
+#: lib/setup.c:5765 lib/setup.c:5790
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL nie obsługuje odroczonej dezaktywacji."
 
-#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Urządzenie %s jest nadal w użyciu."
 
-#: lib/setup.c:5787
+#: lib/setup.c:5798
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Nie udało się anulować opóźnionego usuwania z urządzenia %s."
 
-#: lib/setup.c:5809
+#: lib/setup.c:5820
 #, c-format
 msgid "Invalid device %s."
 msgstr "Błędne urządzenie %s."
 
-#: lib/setup.c:5956
+#: lib/setup.c:5967
 msgid "Volume key buffer too small."
 msgstr "Bufor klucza wolumenu zbyt mały."
 
-#: lib/setup.c:5967
+#: lib/setup.c:5978
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia LUKS2."
 
-#: lib/setup.c:5976
+#: lib/setup.c:5987
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia LUKS1."
 
-#: lib/setup.c:5990
+#: lib/setup.c:6001
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nie można odtworzyć klucza wolumenu dla zwykłego urządzenia."
 
-#: lib/setup.c:5998
+#: lib/setup.c:6009
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Nie można odtworzyć hasza głównego dla urządzenia VERITY."
 
-#: lib/setup.c:6007
+#: lib/setup.c:6018
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia BITLK."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6023
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia FVAULT2."
 
-#: lib/setup.c:6014
+#: lib/setup.c:6025
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Ta operacja nie jest obsługiwana dla urządzenia szyfrującego %s."
 
-#: lib/setup.c:6199 lib/setup.c:6210
+#: lib/setup.c:6210 lib/setup.c:6221
 msgid "Dump operation is not supported for this device type."
 msgstr "Operacja zrzutu nie jest obsługiwana dla tego rodzaju urządzenia."
 
-#: lib/setup.c:6590
+#: lib/setup.c:6601
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Offset danych nie jest wielokrotnością liczby bajtów %u."
 
-#: lib/setup.c:6898
+#: lib/setup.c:6909
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Nie można przekonwertować urządzenia %s, które jest nadal w użyciu."
 
-#: lib/setup.c:7206 lib/setup.c:7350
+#: lib/setup.c:7217 lib/setup.c:7361
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Nie udało się przypisać klucza %u jako nowego klucza wolumenu."
 
-#: lib/setup.c:7230
+#: lib/setup.c:7241
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Nie udało się zainicjować domyślnych parametrów klucza LUKS2."
 
-#: lib/setup.c:7236
+#: lib/setup.c:7247
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Nie udało się przypisać klucza %d do skrótu."
 
-#: lib/setup.c:7467
+#: lib/setup.c:7478
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nie można dodać klucza, wszystkie miejsca na klucze wyłączone i nie podano klucza wolumenu."
 
-#: lib/setup.c:7540 lib/verity/verity.c:333
+#: lib/setup.c:7551 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Nie udało się załadować klucza do pęku kluczy w jądrze."
 
-#: lib/setup.c:7731
+#: lib/setup.c:7742
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Nie udało się odnaleźć pęku kluczy opisanego przez \"%s\"."
 
-#: lib/setup.c:7796
+#: lib/setup.c:7807
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Nie udało się uzyskać globalnej blokady serializacji dostępu ciężkiego pamięciowo."
 
@@ -801,40 +801,45 @@ msgstr "Urządzenie %s nie jest zgodne."
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "Zignorowano niewłaściwy rozmiar optimal-io dla urządzenia danych (%u bajtów)."
 
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "Nie można powiększyć %s do %<PRIu64> bajtów (%s)."
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "Urządzenie %s jest zbyt małe. Wymagane przynajmniej %<PRIu64> bajtów."
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "Nie można użyć urządzenia %s, które jest w użyciu (już podmapowane lub zamontowane)."
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "Nie można użyć urządzenia %s, brak uprawnień."
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "Nie można uzyskać informacji o urządzeniu %s."
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "Nie można użyć urządzenia loopback w czasie działania jako nie-root."
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "Nie udało się podłączyć urządzenia loopback (wymagane urządzenie loop z flagą autoclear)."
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "Żądany offset jest poza rzeczywistym rozmiarem urządzenia %s."
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "Urządzenie %s ma zerowy rozmiar."
@@ -977,9 +982,9 @@ msgstr "Błąd we/wy podczas szyfrowania klucza."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
 #: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
 #: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
@@ -1124,7 +1129,7 @@ msgstr "Tryb szyfru LUKS %s jest nieprawidłowy."
 msgid "LUKS hash %s is invalid."
 msgstr "Skrót LUKS %s jest nieprawidłowy."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "W nagłówku LUKS nie wykryto żadnych znanych problemów."
 
@@ -1217,11 +1222,11 @@ msgstr "Przekroczono maksymalną długość hasła TCRYPT (%zu)."
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "Algorytm skrótu PBKDF2 %s nie jest dostępny, pominięto."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
+#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
 msgid "Required kernel crypto interface not available."
 msgstr "Wymagany interfejs kryptograficzny jądra nie jest dostępny."
 
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
+#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
 msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr "Proszę upewnić się, że moduł jądra algif_skcipher został załadowany."
 
@@ -1292,11 +1297,6 @@ msgstr "Nieobsługiwany rozmiar sektora %<PRIu16>."
 msgid "Failed to read BITLK header from %s."
 msgstr "Nie udało się odczytać nagłówka BITLK z %s."
 
-#: lib/bitlk/bitlk.c:593
-#, c-format
-msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
-msgstr "Nie udało się odczytać lub sprawdzić poprawności kopii #%d metadanych BITLK FVE z %s."
-
 #: lib/bitlk/bitlk.c:603
 #, c-format
 msgid "Failed to read and validate BITLK FVE metadata from %s."
@@ -1372,42 +1372,42 @@ msgstr "Ta operacja nie jest obsługiwana."
 msgid "Unexpected key data size."
 msgstr "Nieoczekiwany rozmiar danych klucza."
 
-#: lib/bitlk/bitlk.c:1431
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "To urządzenie BITLK jest w nieobsługiwanym stanie i może być uaktywnione."
 
-#: lib/bitlk/bitlk.c:1436
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Urządzenia BITLK o typie '%s' nie mogą być uaktywnione."
 
-#: lib/bitlk/bitlk.c:1475
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "UWAGA: rozmiar wolumenu BitLockera %<PRIu64> nie zgadza się z rozmiarem urządzenia %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1602
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Nie można uaktywnić urządzenia, brak obsługi BITLK IV w module dm-crypt jądra."
 
-#: lib/bitlk/bitlk.c:1606
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Nie można uaktywnić urządzenia, brak obsługi dyfuzora BITLK Elephant w module dm-crypt jądra."
 
-#: lib/bitlk/bitlk.c:1610
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Nie można uaktywnić urządzenia, brak obsługi dużego rozmiaru sektora w module dm-crypt jądra."
 
-#: lib/bitlk/bitlk.c:1614
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Nie można uaktywnić urządzenia, brak modułu jądra dm-zero."
 
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "Nie można odczytać %u bajtów nagłówka wolumenu."
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "Nieobsługiwana wersja FVAULT2 %<PRIu16>."
@@ -1484,23 +1484,23 @@ msgstr "Weryfikacja nie powiodła się na pozycji %<PRIu64>."
 msgid "Hash area overflow."
 msgstr "Przepełnienie obszaru skrótu."
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "Weryfikacja obszaru danych nie powiodła się."
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "Weryfikacja głównego hasza nie powiodła się."
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "Błąd wejścia/wyjścia podczas tworzenia obszaru haszy."
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "Tworzenie obszaru haszy nie powiodło się."
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "UWAGA: Jądro nie może uaktywnić urządzenia, jeśli rozmiar bloku danych przekracza rozmiar strony (%u)."
@@ -1555,19 +1555,19 @@ msgstr "Nie udało się określić rozmiaru urządzenia %s."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Wykryto niezgodne metadane dm-integrity jądra (wersja %u) na %s."
 
-#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Jądro nie obsługuje odwzorowań dm-integrity."
 
-#: lib/integrity/integrity.c:310
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Jądro nie obsługuje stałego wyrównania metadanych dm-integrity."
 
-#: lib/integrity/integrity.c:319
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Jądro odmawia uaktywnienia niebezpiecznej opcji przeliczenia (p. stare opcje aktywacji, aby wymusić)."
 
-#: lib/integrity/integrity.c:325
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Jądro nie obsługuje trybu wbudowanego dm-integrity."
 
@@ -1716,7 +1716,7 @@ msgstr "Urządzenie dm-integrity stojące poniżej o nieoczekiwanych sektorach d
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Podobne szyfrowanie trwa. Nie można dezaktywować urządzenia."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
+#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Nie udało się zastąpić wstrzymanego urządzenia %s celem dm-error."
@@ -1795,7 +1795,7 @@ msgstr "Nie można sprawdzić stanu urządzenia mającego UUID: %s."
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Nie można przekonwertować nagłówka z dodatkowymi metadanymi LUKSMETA."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
+#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Nie można użyć określenia szyfru %s-%s dla LUKS2."
@@ -1879,7 +1879,7 @@ msgstr "Rozmiar urządzenia musi być wielokrotnością wyliczonego wyrównania
 
 #: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
 #: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4077
+#: lib/luks2/luks2_reencrypt.c:4080
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Nie udało się zainicjować obudowania przestrzeni starego segmentu."
 
@@ -1887,7 +1887,7 @@ msgstr "Nie udało się zainicjować obudowania przestrzeni starego segmentu."
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Nie udało się zainicjować obudowania przestrzeni nowego segmentu."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
+#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
 msgid "Failed to initialize hotzone protection."
 msgstr "Nie udało się zainicjować ochrony strefy gorącej."
 
@@ -1895,7 +1895,7 @@ msgstr "Nie udało się zainicjować ochrony strefy gorącej."
 msgid "Failed to read checksums for current hotzone."
 msgstr "Nie udało się odczytać sum kontrolnych dla aktualnej strefy gorącej."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Nie udało się odczytać obszaru strefy gorącej zaczynającego się od %<PRIu64>."
@@ -1984,8 +1984,8 @@ msgstr "Zmniejszony rozmiar danych jest większy niż rzeczywisty rozmiar urząd
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Urzędzenie danych nie jest wyrównane do rozmiaru sektora szyfrowania (%<PRIu32> B)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
-#: lib/luks2/luks2_reencrypt.c:3661
+#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
+#: lib/luks2/luks2_reencrypt.c:3664
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Nie udało się otworzyć %s w trybie wyłączności (już odwzorowano lub zamontowano)."
@@ -1994,123 +1994,123 @@ msgstr "Nie udało się otworzyć %s w trybie wyłączności (już odwzorowano l
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Urządzenie nie jest oznaczone do ponownego szyfrowania LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
+#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Nie udało się załadować kontekstu ponownego szyfrowania LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
+#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
 msgid "Device is not in reencryption."
 msgstr "Urządzenie nie jest w trakcie ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
+#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
 msgid "Reencryption process is already running."
 msgstr "Proces ponownego szyfrowania już trwa."
 
-#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
+#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
 msgid "Failed to acquire reencryption lock."
 msgstr "Nie udało się uzyskać blokady dla ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:3468
+#: lib/luks2/luks2_reencrypt.c:3471
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Nie można kontynuować ponownego szyfrowania. Należy najpierw uruchomić odtworzenie ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:3604
+#: lib/luks2/luks2_reencrypt.c:3607
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Rozmiar urządzenia aktywnego oraz żądany rozmiar ponownego szyfrowania różnią się."
 
-#: lib/luks2/luks2_reencrypt.c:3618
+#: lib/luks2/luks2_reencrypt.c:3621
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "W parametrach ponownego szyfrowania zażądano niedozwolonego rozmiaru urządzenia."
 
-#: lib/luks2/luks2_reencrypt.c:3720
+#: lib/luks2/luks2_reencrypt.c:3723
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Ponowne szyfrowanie trwa. Nie można wykonać odzyskiwania."
 
-#: lib/luks2/luks2_reencrypt.c:3741
+#: lib/luks2/luks2_reencrypt.c:3744
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Odtwarzanie ponownego szyfrowania LUKS2 nie powiodło się."
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
 msgid "Failed to initialize reencryption device stack."
 msgstr "Nie udało się zainicjować stosu urządzenia ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3910
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "Ponowne szyfrowanie LUKS2 jest już zainicjowane w metadanych."
 
-#: lib/luks2/luks2_reencrypt.c:3915
+#: lib/luks2/luks2_reencrypt.c:3918
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Nie udało się zainicjować ponownego szyfrowania LUKS2 w metadanych."
 
-#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
-#: lib/luks2/luks2_reencrypt.c:4030
+#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
+#: lib/luks2/luks2_reencrypt.c:4033
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Ponowne szyfrowanie nie jest obsługiwane dla urządzeń DAX (pamięci trwałej)."
 
-#: lib/luks2/luks2_reencrypt.c:4059
+#: lib/luks2/luks2_reencrypt.c:4062
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Nie udało się ustawić segmentów urządzeń dla następnej strefy gorącej ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4112
+#: lib/luks2/luks2_reencrypt.c:4115
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Nie udało się zapisać metadanych odporności ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4119
+#: lib/luks2/luks2_reencrypt.c:4122
 msgid "Decryption failed."
 msgstr "Odszyfrowanie nie powiodło się."
 
-#: lib/luks2/luks2_reencrypt.c:4124
+#: lib/luks2/luks2_reencrypt.c:4127
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Nie udało się zapisać obszaru strefy gorącej zaczynającego się od %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4129
+#: lib/luks2/luks2_reencrypt.c:4132
 msgid "Failed to sync data."
 msgstr "Nie udało się zsynchronizować danych."
 
-#: lib/luks2/luks2_reencrypt.c:4137
+#: lib/luks2/luks2_reencrypt.c:4140
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Nie udało się uaktualnić metadanych po zakończeniu aktualnej strefy gorącej ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4226
+#: lib/luks2/luks2_reencrypt.c:4229
 msgid "Failed to write LUKS2 metadata."
 msgstr "Nie udało się zapisać metadanych LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:4249
+#: lib/luks2/luks2_reencrypt.c:4252
 msgid "Failed to wipe unused data device area."
 msgstr "Nie udało się wymazać nieużywanego obszaru urządzenia danych."
 
-#: lib/luks2/luks2_reencrypt.c:4255
+#: lib/luks2/luks2_reencrypt.c:4258
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Nie udało się usunąć nieużywanego (nieprzypisanego) obszaru klucza %d."
 
-#: lib/luks2/luks2_reencrypt.c:4265
+#: lib/luks2/luks2_reencrypt.c:4268
 msgid "Failed to remove reencryption keyslot."
 msgstr "Nie udało się usunąć obszaru klucza ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4275
+#: lib/luks2/luks2_reencrypt.c:4278
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Błąd krytyczny podczas ponownego szyfrowania fragmentu zaczynającego się od %<PRIu64> o długości w sektorach %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4279
+#: lib/luks2/luks2_reencrypt.c:4282
 msgid "Online reencryption failed."
 msgstr "Ponowne szyfrowanie online nie powiodło się."
 
-#: lib/luks2/luks2_reencrypt.c:4284
+#: lib/luks2/luks2_reencrypt.c:4287
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Proszę nie wznawiać urządzenia dopóki nie zostanie zastąpione celem błędnym ręcznie."
 
-#: lib/luks2/luks2_reencrypt.c:4336
+#: lib/luks2/luks2_reencrypt.c:4339
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Nie można kontynuować ponownego szyfrowania. Nieoczekiwany stan ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4342
+#: lib/luks2/luks2_reencrypt.c:4345
 msgid "Missing or invalid reencrypt context."
 msgstr "Brak lub błędny kontekst ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
+#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
 msgid "Failed to update reencryption context."
 msgstr "Nie udało się uaktualnić kontekstu ponownego szyfrowania."
 
@@ -2146,7 +2146,7 @@ msgstr "Parametry szyfrowania kluczy mogą być ustawione tylko dla urządzeń L
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametry szyfrowania kluczy nie są zgodne z szyfrowaniem kluczy LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
+#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2174,7 +2174,7 @@ msgstr "UWAGA: Parametr --hash jest ignorowany w trybie zwykłym z podanym pliki
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "UWAGA: Opcja --keyfile-size jest ignorowana, rozmiar odczytu jest taki sam, jak rozmiar klucza szyfrującego.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2185,9 +2185,9 @@ msgstr "Skanowanie blkid dla %s nie powiodło się."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Wykryto sygnatury urządzeń na %s. Dalsze operacje mogą uszkodzić istniejące dane."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
-#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
-#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2237,7 +2237,7 @@ msgstr ""
 "Zrzut ten powinien być zawsze zapisywany w postaci zaszyfrowanej\n"
 "w bezpiecznym miejscu."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2257,14 +2257,14 @@ msgstr "Urządzenie %s nie jest prawidłowym urządzeniem FVAULT2."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nie można określić rozmiaru klucza wolumenu dla FVAULT2, proszę użyć opcji --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Urządzenie %s jest nadal aktywne i zaplanowane do odroczonego usunięcia.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
-#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
-#: src/cryptsetup.c:3264
+#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
+#: src/cryptsetup.c:3262
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Nie udało się ustawić ścieżki tokenów zewnętrznych %s."
@@ -2273,59 +2273,59 @@ msgstr "Nie udało się ustawić ścieżki tokenów zewnętrznych %s."
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Zmiana rozmiaru aktywnego urządzenia wymaga klucza wolumenu w pęku, ale ustawiono opcję --disable-keyring."
 
-#: src/cryptsetup.c:1059
+#: src/cryptsetup.c:1057
 msgid "Benchmark interrupted."
 msgstr "Test szybkości przerwany."
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1078
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     N/D\n"
 
-#: src/cryptsetup.c:1082
+#: src/cryptsetup.c:1080
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u iteracji/sekundę dla klucza %zu-bitowego\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1094
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s N/D\n"
 
-#: src/cryptsetup.c:1098
+#: src/cryptsetup.c:1096
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u iteracji, pamięć: %5u, równoległe wątki (CPU): %1u dla klucza %zu-bitowego (żądany czas %u ms)\n"
 
-#: src/cryptsetup.c:1122
+#: src/cryptsetup.c:1120
 msgid "Result of benchmark is not reliable."
 msgstr "Wynik testu wydajności nie jest wiarygodny."
 
-#: src/cryptsetup.c:1172
+#: src/cryptsetup.c:1170
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testy są przybliżone tylko z użyciem pamięci (bez we/wy na dysk).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1197
+#: src/cryptsetup.c:1195
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s  Algorytm |     Klucz |     Szyfrowanie | Odszyfrowywanie\n"
 
-#: src/cryptsetup.c:1205
+#: src/cryptsetup.c:1203
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Szyfr %s (rozmiar klucza w bitach: %i) nie jest dostępny."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1222
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#      Algorytm |     Klucz |     Szyfrowanie | Odszyfrowywanie\n"
 
-#: src/cryptsetup.c:1235
+#: src/cryptsetup.c:1233
 msgid "N/A"
 msgstr "N/D"
 
-#: src/cryptsetup.c:1260
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2333,27 +2333,27 @@ msgstr ""
 "Wybryto niezabezpieczone metadane ponownego szyfrowania LUKS2. Proszę sprawdzić, czy operacja ponownego szyfrowania jest pożądana (p. wyjście luksDump)\n"
 "i kontynuować (uaktualnić metadane) tylko jeśli ta operacja ma być faktycznie wykonana."
 
-#: src/cryptsetup.c:1266
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Hasło do zabezpieczenia i uaktualnienia metadanych ponownego szyfrowania: "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Naprawdę kontynuować odtwarzanie ponownego szyfrowania LUKS2?"
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Hasło do weryfikacji skrótu metadanych ponownego szyfrowania: "
 
-#: src/cryptsetup.c:1321
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Hasło do odtwarzania ponownego szyfrowania: "
 
-#: src/cryptsetup.c:1383
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Naprawdę próbować naprawić nagłówek urządzenia LUKS?"
 
-#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2361,7 +2361,7 @@ msgstr ""
 "\n"
 "Wymazywanie przerwane."
 
-#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2369,167 +2369,167 @@ msgstr ""
 "Czyszczenie urządzenia w celu zainicjowania sumy kontrolnej integralności.\n"
 "Można przerwać ten proces wciskając Ctrl+C (reszta niewymazanego urządzenia będzie zawierać błędną sumę kontrolną).\n"
 
-#: src/cryptsetup.c:1438 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Nie można dezaktywować urządzenia tymczasowego %s."
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Szyfrowanie wyłącznie sprzętowe OPAL nie obsługuje --cipher i --key-size, opcje zignorowano."
 
-#: src/cryptsetup.c:1499
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Opcja integralności może być używana tylko dla formatu LUKS2."
 
-#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nieobsługiwane opcje rozmiaru metadanych LUKS2."
 
-#: src/cryptsetup.c:1509
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL jest obsługiwany tylko dla formatu LUKS2."
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Znaczniki hw wbudowane są obsługiwane tylko dla formatu LUKS2."
 
-#: src/cryptsetup.c:1523
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Plik nagłówka nie istnieje, czy utworzyć go?"
 
-#: src/cryptsetup.c:1531
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Nie można utworzyć pliku nagłówka %s."
 
-#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Nie wykryto znanego wzorca określającego integralność."
 
-#: src/cryptsetup.c:1559
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Nie można użyć podanego rozmiaru klucza integralności."
 
-#: src/cryptsetup.c:1577
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Nie można użyć %s jako nagłówka na dysku."
 
-#: src/cryptsetup.c:1606 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "To nieodwołalnie nadpisze dane na %s."
 
-#: src/cryptsetup.c:1643
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Hasło administratora OPAL nie może być puste."
 
-#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
-#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Nie udało się ustawić parametrów PBKDF."
 
-#: src/cryptsetup.c:1788
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Offset zmniejszonych danych jest dozwolony tylko dla odłączonego nagłówka LUKS."
 
-#: src/cryptsetup.c:1795
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Kontener plikowy LUKS %s jest zbyt mały do uaktywnienia, nie ma miejsca pozostałego na dane."
 
-#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nie można określić rozmiaru klucza wolumenu dla LUKS bez kluczy, proszę użyć opcji --key-size."
 
-#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Urządzenie wymaga dwóch kluczy wolumenu."
 
-#: src/cryptsetup.c:1891
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Niektóre podane parametry aktywacji zostały zignorowane przy szyforwaniu wyłącznie sprzętowym OPAL."
 
-#: src/cryptsetup.c:1896
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Urządzenie uaktywnione, ale nie można uczynić flag trwałymi."
 
-#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Klucz %d jest wybrany do usunięcia."
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "To jest ostatni klucz. Urządzenie stanie się bezużyteczne po usunięciu tego klucza."
 
-#: src/cryptsetup.c:1989
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Dowolne pozostałe hasło: "
 
-#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operacja przerwana, klucz NIE został wymazany.\n"
 
-#: src/cryptsetup.c:2026
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Hasło do usunięcia: "
 
-#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
+#: src/cryptsetup.c:3253
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Urządzenie %s nie jest prawidłowym urządzeniem LUKS2."
 
-#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Nowe hasło dla klucza: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Proszę wprowadzić PIN: "
 
-#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Proszę wprowadzić PIN tokenu %d: "
 
-#: src/cryptsetup.c:2210
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "UWAGA: Parametr --key-slot jest używany do numeru nowego klucza.\n"
 
-#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Dowolne istniejące hasło: "
 
-#: src/cryptsetup.c:2383
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Hasło, które ma być zmienione: "
 
-#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Nowe hasło: "
 
-#: src/cryptsetup.c:2449
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Hasło dla klucza do konwersji: "
 
-#: src/cryptsetup.c:2473
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Dla operacji isLuks obsługiwany jest tylko jeden argument będący urządzeniem."
 
-#: src/cryptsetup.c:2578
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Miejsce %d nie zawiera niepowiązanego klucza."
 
-#: src/cryptsetup.c:2583
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2538,52 +2538,52 @@ msgstr ""
 "Zrzut ten powinien być zawsze zapisywany w postaci zaszyfrowanej\n"
 "w bezpiecznym miejscu."
 
-#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s nie jest nazwą aktywnego urządzenia %s."
 
-#: src/cryptsetup.c:2709
+#: src/cryptsetup.c:2707
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s nie jest nazwą aktywnego urządzenia LUKS lub brak nagłówka."
 
-#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
+#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
 msgid "Option --header-backup-file is required."
 msgstr "Wymagana jest opcja --header-backup-file."
 
-#: src/cryptsetup.c:2836
+#: src/cryptsetup.c:2834
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s nie jest urządzeniem zarządzanym przez cryptsetup."
 
-#: src/cryptsetup.c:2847
+#: src/cryptsetup.c:2845
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Odświeżanie nie jest obsługiwane dla typu urządzenia %s"
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2895
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Nierozpoznany typ urządzenia metadanych %s."
 
-#: src/cryptsetup.c:2899
+#: src/cryptsetup.c:2897
 msgid "Command requires device and mapped name as arguments."
 msgstr "Polecenie wymaga urządzenia i nazwy odwzorowywanej jako argumentów."
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL PSID: "
 msgstr "Proszę wprowadzić PSID OPAL: "
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL Admin password: "
 msgstr "Hasło administratora OPAL: "
 
-#: src/cryptsetup.c:2925
+#: src/cryptsetup.c:2923
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "UWAGA: CAŁY dysk będzie przywrócony do stanu fabrycznego i wszystkie dane zostaną utracone! Kontynuować?"
 
-#: src/cryptsetup.c:2968
+#: src/cryptsetup.c:2966
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2592,363 +2592,363 @@ msgstr ""
 "Ta operacja usunię wszystkie klucze na urządzeniu %s.\n"
 "Urządzenie po tej operacji stanie się bezużyteczne."
 
-#: src/cryptsetup.c:2975
+#: src/cryptsetup.c:2973
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operacja przerwana, klucze NIE zostały wymazane.\n"
 
-#: src/cryptsetup.c:3014
+#: src/cryptsetup.c:3012
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Błędny typ LUKS, obsługiwane są tylko luks1 i luks2."
 
-#: src/cryptsetup.c:3030
+#: src/cryptsetup.c:3028
 #, c-format
 msgid "Device is already %s type."
 msgstr "Urządzenie już ma typ %s."
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3035
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Ta operacja przekonwertuje %s do formatu %s.\n"
 
-#: src/cryptsetup.c:3040
+#: src/cryptsetup.c:3038
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operacja przerwana, urządzenie NIE zostało skonwertowane.\n"
 
-#: src/cryptsetup.c:3080
+#: src/cryptsetup.c:3078
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Brak opcji --priority, --label lub --subsystem."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d jest błędny."
 
-#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
+#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d jest w użyciu."
 
-#: src/cryptsetup.c:3129
+#: src/cryptsetup.c:3127
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Nie udało się dodać tokenu %d do pęku kluczy luks2."
 
-#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
+#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Nie udało się przypisać tokenu %d do klucza %d."
 
-#: src/cryptsetup.c:3157
+#: src/cryptsetup.c:3155
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d nie jest w użyciu."
 
-#: src/cryptsetup.c:3194
+#: src/cryptsetup.c:3192
 msgid "Failed to import token from file."
 msgstr "Nie udało się zaimportować tokenu z pliku."
 
-#: src/cryptsetup.c:3219
+#: src/cryptsetup.c:3217
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Nie udało się pobrać tokenu %d do eksportu."
 
-#: src/cryptsetup.c:3232
+#: src/cryptsetup.c:3230
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d nie jest przypisany do klucza %d."
 
-#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
+#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Nie udało się usunąć przypisania tokenu %d do klucza %d."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3298
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Opcje --tcrypt-hidden, --tcrypt-system i --tcrypt-backup są obsługiwane tylko dla urządzeń TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3301
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Opcje --veracrypt i --disable-veracrypt są obsługiwane tylko dla typu urządzeń TCRYPT."
 
-#: src/cryptsetup.c:3306
+#: src/cryptsetup.c:3304
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opcja --veracrypt-pim jest obsługiwana tylko dla urządzeń zgodnych z VeraCryptem."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3308
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opcja --veracrypt-query-pim jest obsługiwana tylko dla urządzeń zgodnych z VeraCryptem."
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3310
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Opcje --veracrypt-pim i --veracrypt-query-pim wykluczają się wzajemnie."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3319
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Opcja --persistent nie jest dozwolona z --test-passphrase."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3322
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Opcje --refresh i --test-passphrase wykluczają się wzajemnie."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3325
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Opcja --shared jest dozwolona tylko dla operacji otwarcia zwykłego urządzenia."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3328
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Opcja --skip jest obsługiwana tylko przy otwieraniu urządzeń plain i loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3331
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Opcja --offset z akcją open jest obsługiwana tylko dla urządzeń plain i loopaes."
 
-#: src/cryptsetup.c:3336
+#: src/cryptsetup.c:3334
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Opcji --tcrypt-hidden nie można łączyć z --allow-discards."
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3338
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Opcja rozmiaru sektora z akcją open jest obsługiwana tylko dla urządzeń plain."
 
-#: src/cryptsetup.c:3344
+#: src/cryptsetup.c:3342
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Opcja dużych rozmiarów sektorów IV jest obsługiwana tylko przy otwieraniu urządzeń typu plain z sektorem większym niż 512 bajtów."
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3347
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Opcja --test-passphrase jest dozwolona tylko przy otwieraniu urządzeń LUKS, TRCYPT, BITLK i FVAULT2."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
+#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Opcji --device-size i --size nie można łączyć."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3353
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Opcja --unbound jest dozwolona tylko dla operacji otwarcia urządzenia LUKS."
 
-#: src/cryptsetup.c:3358
+#: src/cryptsetup.c:3356
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Opcja --unbound nie może być użyta bez --test-passphrase."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3360
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Opcji --volume-key-keyring nie można łączyć z --hash ani --volume-key-file."
 
-#: src/cryptsetup.c:3365
+#: src/cryptsetup.c:3363
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Obie opcje --volume-key-file muszą być sparowane z odpowiednimi opcjami --key-size."
 
-#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Opcje --cancel-deferred i --deferred nie mogą być użyte naraz."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3388
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Opcja --active-name może być ustawiona tylko dla urządzenia LUKS2."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3391
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Opcji --active-name i --force-offline-reencrypt nie można łączyć."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3394
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Opcji --new-volume-key-file i --keep-key nie można łączyć."
 
-#: src/cryptsetup.c:3399
+#: src/cryptsetup.c:3397
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Opcji --new-volume-key-keyring i --keep-key nie można łączyć."
 
-#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
+#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
 msgid "Keyslot specification is required."
 msgstr "Wymagane jest określenie klucza."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3413
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Opcji --align-payload i --offset nie można łączyć."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3416
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Opcja --integrity-no-wipe może być użyta tylko do akcji formatowania z rozszerzeniem integralności."
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3419
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Dozwolona jest tylko jedna z opcji --use-[u]random."
 
-#: src/cryptsetup.c:3429
+#: src/cryptsetup.c:3427
 msgid "Key size is required with --unbound option."
 msgstr "Przy opcji --unbound wymagany jest rozmiar klucza."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3447
 msgid "Invalid token action."
 msgstr "Błędna akcja token."
 
-#: src/cryptsetup.c:3452
+#: src/cryptsetup.c:3450
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parametr --key-description jest wymagany do akcji dodania tokenu."
 
-#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
+#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Akcja wymaga określonego tokenu. Należy użyć parametru --token-id."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3458
 msgid "Option --unbound is valid only with token add action."
 msgstr "Opcja --unbound jest dozwolona tylko dla operacji dodania tokenu."
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3460
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Opcji --key-slot i --unbound nie można łączyć."
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3465
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Akcja wymaga określonego klucza. Należy użyć parametru --key-slot."
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3481
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<uządzenie> [--type <typ>] [<nazwa>]"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "otwarcie urządzenia jako <nazwa>"
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<nazwa>"
 
-#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "zamknięcie urządzenia (usunięcie odwzorowania)"
 
-#: src/cryptsetup.c:3485 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "zmiana rozmiaru aktywnego urządzenia"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3484
 msgid "show device status"
 msgstr "pokazanie stanu urządzenia"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <szyfr>]"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "benchmark cipher"
 msgstr "test szybkości szyfru"
 
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
-#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
+#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
+#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
+#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
+#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
 msgid "<device>"
 msgstr "<urządzenie>"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3486
 msgid "try to repair on-disk metadata"
 msgstr "próba naprawy metadanych na dysku"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3487
 msgid "reencrypt LUKS2 device"
 msgstr "ponowne szyfrowanie urządzenia LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3488
 msgid "erase all keyslots (remove encryption key)"
 msgstr "usunięcie wszystkich kluczy (usunięcie klucza szyfrującego)"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3489
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "przekonwertowanie formatu LUKS z/do LUKS2"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490
 msgid "set permanent configuration options for LUKS2"
 msgstr "ustawienie opcji trwałej konfiguracji dla LUKS2"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
 msgid "<device> [<new key file>]"
 msgstr "<urządzenie> [<nowy plik klucza>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3491
 msgid "formats a LUKS device"
 msgstr "sformatowanie urządzenia LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3492
 msgid "add key to LUKS device"
 msgstr "dodanie klucza do urządzenia LUKS"
 
-#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
 msgid "<device> [<key file>]"
 msgstr "<urządzenie> [<plik klucza>]"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3493
 msgid "removes supplied key or key file from LUKS device"
 msgstr "usunięcie podanego klucza lub pliku klucza z urządzenia LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3494
 msgid "changes supplied key or key file of LUKS device"
 msgstr "zmiana podanego klucza lub pliku klucza urządzenia LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3495
 msgid "converts a key to new pbkdf parameters"
 msgstr "konwersja klucza na nowe parametry pbkdf"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "<device> <key slot>"
 msgstr "<urządzenie> <numer klucza>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "wymazanie klucza o numerze <numer klucza> z urządzenia LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3497
 msgid "print UUID of LUKS device"
 msgstr "wypisanie UUID-a urządzenia LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3498
 msgid "tests <device> for LUKS partition header"
 msgstr "sprawdzenie <urządzenia> pod kątem nagłówka partycji LUKS"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3499
 msgid "dump LUKS partition information"
 msgstr "zrzut informacji o partycji LUKS"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3500
 msgid "dump TCRYPT device information"
 msgstr "zrzut informacji o urządzeniu TCRYPT"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3501
 msgid "dump BITLK device information"
 msgstr "zrzut informacji o urządzeniu BITLK"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3502
 msgid "dump FVAULT2 device information"
 msgstr "zrzut informacji o urządzeniu FVAULT2"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3503
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Wstrzymanie urządzenia LUKS i wymazanie klucza (zamraża wszystkie operacje we/wy)"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3504
 msgid "Resume suspended LUKS device"
 msgstr "Wznowienie zatrzymanego urządzenia LUKS"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3505
 msgid "Backup LUKS device header and keyslots"
 msgstr "Kopia zapasowa nagłówka i kluczy urządzenia LUKS"
 
-#: src/cryptsetup.c:3508
+#: src/cryptsetup.c:3506
 msgid "Restore LUKS device header and keyslots"
 msgstr "Odtworzenie nagłówka i kluczy urządzenia LUKS z kopii zapasowej"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <urządzenie>"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "Manipulate LUKS2 tokens"
 msgstr "Operacja na tokenach LUKS2"
 
-#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2956,7 +2956,7 @@ msgstr ""
 "\n"
 "<akcja> to jedno z:\n"
 
-#: src/cryptsetup.c:3534
+#: src/cryptsetup.c:3532
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2968,7 +2968,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3538
+#: src/cryptsetup.c:3536
 #, c-format
 msgid ""
 "\n"
@@ -2983,7 +2983,7 @@ msgstr ""
 "<numer klucza> to numer klucza LUKS do zmiany\n"
 "<plik klucza> to opcjonalny plik nowego klucza dla akcji luksAddKey\n"
 
-#: src/cryptsetup.c:3545
+#: src/cryptsetup.c:3543
 #, c-format
 msgid ""
 "\n"
@@ -2992,7 +2992,7 @@ msgstr ""
 "\n"
 "Domyślny wkompilowany format metadanych to %s (dla akcji luksFormat).\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3548
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3000,12 +3000,12 @@ msgstr ""
 "\n"
 "Obsługa zewnętrznych wtyczek tokenów LUKS2 jest włączona.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3549
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Ścieżka zewnętrznych wtyczek tokenów LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3553
+#: src/cryptsetup.c:3551
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3013,7 +3013,7 @@ msgstr ""
 "\n"
 "Obsługa zewnętrznych wtyczek tokenów LUKS2 jest wyłączona.\n"
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3555
 #, c-format
 msgid ""
 "\n"
@@ -3030,7 +3030,7 @@ msgstr ""
 "Domyślny PBKDF dla LUKS2: %s\n"
 "\tCzas iteracji: %d, wymagana pamięć: %dkB, liczba wątków: %d\n"
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3566
 #, c-format
 msgid ""
 "\n"
@@ -3045,122 +3045,122 @@ msgstr ""
 "\tplain: %s, bitów klucza: %d, skrót hasła: %s\n"
 "\tLUKS: %s, bitów klucza: %d, skrót nagłówka LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3577
+#: src/cryptsetup.c:3575
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Domyślny rozmiar klucza z trybem XTS (dwa klucze wewnętrzne) będzie podwojony.\n"
 
-#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: wymaga %s jako argumentów"
 
-#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Numer klucza jest nieprawidłowy."
 
-#: src/cryptsetup.c:3663
+#: src/cryptsetup.c:3661
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Rozmiar urządzenia musi być wielokrotnością 512-bajtowego sektora."
 
-#: src/cryptsetup.c:3668
+#: src/cryptsetup.c:3666
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Błędne określenie maksymalnego rozmiaru strefy gorącej ponownego szyfrowania."
 
-#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
+#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Rozmiar klucza musi być wielokrotnością 8 bitów"
 
-#: src/cryptsetup.c:3689
+#: src/cryptsetup.c:3687
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Można podać najwyżej 2 określenia rozmiarów kluczy."
 
-#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
+#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Określono za dużo kluczy wolumenu, można podać najwyżej %d."
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3739
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Określono za dużo dołączeń pęków kluczy, można podać najwyżej %d."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3748
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Maksymalna wartość ograniczenia rozmiaru urządzenia to 1GiB."
 
-#: src/cryptsetup.c:3753
+#: src/cryptsetup.c:3751
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Rozmiar ograniczenia musi być wielokrotnością 512-bajtowego sektora."
 
-#: src/cryptsetup.c:3770
+#: src/cryptsetup.c:3768
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Opcja --priority może mieć wartości tylko ignore/normal/prefer."
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Wyświetlenie tego opisu"
 
-#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Wyświetlenie krótkiej informacji o składni"
 
-#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Wypisanie wersji pakietu"
 
-#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Opcje pomocnicze:"
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPCJA...] <akcja> <parametry-akcji>"
 
-#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Brak argumentu <akcja>."
 
-#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Nieznana akcja."
 
-#: src/cryptsetup.c:3931
+#: src/cryptsetup.c:3929
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Opcja --key-file ma priorytet nad podanym argumentem pliku klucza."
 
-#: src/cryptsetup.c:3937
+#: src/cryptsetup.c:3935
 msgid "Only one --key-file argument is allowed."
 msgstr "Dozwolony jest tylko jeden argument --key-file."
 
-#: src/cryptsetup.c:3942
+#: src/cryptsetup.c:3940
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funkcja pochodna klucza oparta na haśle (PBKDF) może być tylko pbkdf2 lub argon2i/argon2id."
 
-#: src/cryptsetup.c:3947
+#: src/cryptsetup.c:3945
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Wymuszonych iteracji PBKDF nie można łączyć z opcją czasu iteracji."
 
-#: src/cryptsetup.c:3952
+#: src/cryptsetup.c:3950
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Nie można dołączyć klucza wolumenu do pęku kluczy, kiedy pęk kluczy jest wyłączony."
 
-#: src/cryptsetup.c:3957
+#: src/cryptsetup.c:3955
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Nie można użyć opisu klucza pęku kluczy, kiedy pęk kluczy jest wyłączony."
 
-#: src/cryptsetup.c:3962
+#: src/cryptsetup.c:3960
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Integralności wbudowanej należy używać wraz z opcją --integrity."
 
-#: src/cryptsetup.c:3973
+#: src/cryptsetup.c:3971
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Opcje --keyslot-cipher i --keyslot-key-size muszą być użyte łącznie."
 
-#: src/cryptsetup.c:3981
+#: src/cryptsetup.c:3979
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Nie wykonano akcji. Wywołano z opcją --test-args.\n"
 
-#: src/cryptsetup.c:3994
+#: src/cryptsetup.c:3992
 msgid "Cannot disable metadata locking."
 msgstr "Nie można wyłączyć blokowania metadanych."
 
@@ -3225,7 +3225,7 @@ msgstr "Polecenie wymaga <głównego_hasza> lub opcji --root-hash-file jako argu
 msgid "<data_device> <hash_device>"
 msgstr "<urządzenie_danych> <urządzenie_haszy>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:485 src/integritysetup.c:553
 msgid "format device"
 msgstr "sformatowanie urządzenia"
 
@@ -3241,7 +3241,7 @@ msgstr "weryfikacja urządzenia"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<urządzenie_danych> <nazwa> <urządzenie_haszy> [<główny_hasz>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:489 src/integritysetup.c:556
 msgid "show active device status"
 msgstr "pokazanie stanu aktywnego urządzenia"
 
@@ -3249,7 +3249,7 @@ msgstr "pokazanie stanu aktywnego urządzenia"
 msgid "<hash_device>"
 msgstr "<urządzenie_haszy>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:490 src/integritysetup.c:557
 msgid "show on-disk information"
 msgstr "wyświetlenie informacji z dysku"
 
@@ -3309,24 +3309,24 @@ msgstr "Sformatowano z rozmiarem znacznika %u%s, wewnętrzna integralność %s.\
 msgid " (inline hw tags)"
 msgstr " (wbudowane znaczniki hw)"
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:303
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Ustawianie flagi recalculate nie jest obsługiwane, zamiast tego można rozważyć użycie --wipe."
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:380 src/integritysetup.c:540
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Urządzenie %s nie jest prawidłowym urządzeniem INTEGRITY."
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:553 src/integritysetup.c:557
 msgid "<integrity_device>"
 msgstr "<urządzenie_integralności>"
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:554
 msgid "<integrity_device> <name>"
 msgstr "<urządzenie_integralności> <nazwa>"
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:577
 #, c-format
 msgid ""
 "\n"
@@ -3337,7 +3337,7 @@ msgstr ""
 "<nazwa> to urządzenie do utworzenia pod %s\n"
 "<urządzenie_integralności> to urządzenie zawierające dane ze znacznikami integralności\n"
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:582
 #, c-format
 msgid ""
 "\n"
@@ -3350,48 +3350,48 @@ msgstr ""
 "\tAlgorytm sumy kontrolnej: %s\n"
 "\tMaksymalny rozmiar pliku klucza: %dkB\n"
 
-#: src/integritysetup.c:636
+#: src/integritysetup.c:639
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Błędny rozmiar --%s. Maksimum w bajtach to %u."
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:742
 msgid "Both key file and key size options must be specified."
 msgstr "Muszą być podane obie opcje: pliku klucza i rozmiaru klucza."
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:746
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Muszą być podane obie opcje: pliku klucza integralności i rozmiaru klucza."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:749
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Algorytm integralności kroniki musi być podany, jeśli używany jest klucz integralności kroniki."
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:753
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Muszą być podane obie opcje: pliku szyfrowania kroniki i rozmiaru klucza."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:756
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Algorytm szyfrowania kroniki musi być podany, jeśli używany jest klucz szyfrowania kroniki."
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:760
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Opcje trybu odtwarzania i bitmapy wykluczają się wzajemnie."
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:767
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Opcji kroniki nie można używać w trybie bitmapy."
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:772
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Opcje bitmapy mogą być używane tylko w trybie bitmapy."
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:778
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Tryb wbudowany nie może być łączony z opcjami kroniki ani bitmapy."
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:782
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Tryb wbudowany nie może być łączony z osobnym urządzeniem danych."
 

From 51b03ae925495c96df12d1fd3bedd4bd301d40e0 Mon Sep 17 00:00:00 2001
From: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>
Date: Tue, 31 Mar 2026 11:31:32 +0200
Subject: [PATCH 055/244] po: update ro.po (from translationproject.org)

---
 po/ro.po | 739 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 372 insertions(+), 367 deletions(-)

diff --git a/po/ro.po b/po/ro.po
index de84ba46d..308eb325a 100644
--- a/po/ro.po
+++ b/po/ro.po
@@ -1,10 +1,10 @@
 # Romanian translation for cryptsetup.
 # Mesajele în limba română pentru pachetul cryptsetup.
-# Copyright © 2023, 2024, 2025 Free Software Foundation, Inc.
+# Copyright © 2023, 2024, 2025, 2026 Free Software Foundation, Inc.
 # This file is put in the public domain.
 # This file is distributed under the same license as the cryptsetup package.
 #
-# Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>, 2023, 2024, 2025.
+# Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>, 2023 - 2026.
 #
 # Cronologia traducerii fișierului „cryptsetup”:
 # Traducerea inițială, făcută de R-GC, pentru versiunea cryptsetup 2.6.0-rc1.
@@ -17,14 +17,15 @@
 # Actualizare a traducerii pentru versiunea 2.8.0-rc1, făcută de R-GC, iun-2025.
 # Actualizare a traducerii pentru versiunea 2.8.1-rc0, făcută de R-GC, aug-2025.
 # Actualizare a traducerii pentru versiunea 2.8.2-rc0, făcută de R-GC, dec-2025.
+# Actualizare a traducerii pentru versiunea 2.8.5-rc0, făcută de R-GC, mar-2026.
 # Actualizare a traducerii pentru versiunea Y, făcută de X, Y(luna-anul).
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.2-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-12-12 18:51+0100\n"
-"PO-Revision-Date: 2025-12-13 14:14+0100\n"
+"POT-Creation-Date: 2026-03-30 14:18+0200\n"
+"PO-Revision-Date: 2026-03-30 19:37+0200\n"
 "Last-Translator: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>\n"
 "Language-Team: Romanian <translation-team-ro@lists.sourceforge.net>\n"
 "Language: ro\n"
@@ -33,7 +34,7 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=(n==1 ? 0 : (n==0 || ((n%100) > 0 && (n%100) < 20)) ? 1 : 2);\n"
 "X-Bugs: Report translation errors to the Language-Team address.\n"
-"X-Generator: Poedit 3.6\n"
+"X-Generator: Poedit 3.8\n"
 
 #: lib/libdevmapper.c:419
 msgid "Cannot initialize device-mapper, running as non-root user."
@@ -202,8 +203,8 @@ msgstr "Dimensiunea dispozitivului nu este aliniată la dimensiunea blocului log
 msgid "Header detected but device %s is too small."
 msgstr "Antet detectat, dar dispozitivul %s este prea mic."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
-#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
+#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
+#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
 msgid "This operation is not supported for this device type."
 msgstr "Această operație nu este suportată pentru acest tip de dispozitiv."
 
@@ -216,10 +217,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nu s-au putut reîncărca metadatele LUKS2 în memorie."
 
 #: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
-#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
-#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
-#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
+#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -236,7 +237,7 @@ msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Nu a fost detectat niciun model cunoscut de specificație de cifrare pentru dispozitivul activ %s."
 
 #: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5805
+#: lib/setup.c:3783 lib/setup.c:5816
 #, c-format
 msgid "Device %s is not active."
 msgstr "Dispozitivul %s nu este activ."
@@ -263,7 +264,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Dispozitivul cu metadate detașate nu este acceptat pentru acest tip de criptare."
 
 #: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
 msgid "Unsupported encryption sector size."
 msgstr "Dimensiunea sectorului de criptare nu este acceptată."
 
@@ -316,9 +317,9 @@ msgstr "Cifrul %s-%s (dimensiunea cheii %zd biți) nu este disponibil."
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "AVERTISMENT: Activarea dispozitivului va eșua, dm-crypt nu are suport pentru dimensiunea sectorului de criptare solicitată.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
+#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4494
+#: lib/luks2/luks2_reencrypt.c:4497
 #, c-format
 msgid "Device %s is too small."
 msgstr "Dispozitivul %s este prea mic."
@@ -476,7 +477,7 @@ msgid "Unsupported parameters on device %s."
 msgstr "Parametri neacceptați pentru dispozitivul %s."
 
 #: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
+#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Parametrii nepotriviți în dispozitivul %s."
@@ -486,7 +487,7 @@ msgid "Crypt devices mismatch."
 msgstr "Dispozitivele de criptare nu se potrivesc."
 
 #: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
+#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Nu s-a putut reîncărca dispozitivul %s."
@@ -498,8 +499,8 @@ msgid "Failed to suspend device %s."
 msgstr "Nu s-a putut suspenda dispozitivul %s."
 
 #: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
-#: lib/luks2/luks2_reencrypt.c:4237
+#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
+#: lib/luks2/luks2_reencrypt.c:4240
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Nu s-a putut reîncărca dispozitivul %s."
@@ -581,187 +582,187 @@ msgstr "Eroare la reluarea activității dispozitivului %s."
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Nu s-a putut dezlega cheia de volum de la inelul de chei specificat de utilizator."
 
-#: lib/setup.c:4423 lib/setup.c:5592
+#: lib/setup.c:4423 lib/setup.c:5603
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Nu s-a putut leg cheia de volum la inelul de chei specificat de utilizator."
 
-#: lib/setup.c:4521 src/cryptsetup.c:2723
+#: lib/setup.c:4522 src/cryptsetup.c:2721
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Volumul %s nu este suspendat."
 
-#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
-#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
+#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
+#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
 #: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Cheia de volum nu se potrivește cu volumul."
 
-#: lib/setup.c:4776
+#: lib/setup.c:4787
 msgid "Failed to swap new key slot."
 msgstr "Nu s-a putut efectua interschimbarea cu noul slot pentru cheie."
 
-#: lib/setup.c:4874
+#: lib/setup.c:4885
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Slotul de cheie %d nu este valid."
 
-#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
-#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
+#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Slotul de cheie %d nu este activ."
 
-#: lib/setup.c:4899
+#: lib/setup.c:4910
 msgid "Device header overlaps with data area."
 msgstr "Antetul dispozitivului se suprapune cu zona de date."
 
-#: lib/setup.c:5120
+#: lib/setup.c:5131
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Recriptare în curs. Nu se poate activa dispozitivul."
 
-#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3722
+#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
+#: lib/luks2/luks2_reencrypt.c:3725
 msgid "Failed to get reencryption lock."
 msgstr "Nu s-a putut obține blocarea pentru recriptare."
 
-#: lib/setup.c:5144
+#: lib/setup.c:5155
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Recuperarea recriptării LUKS2 utilizând cheia (cheile) de volum a eșuat."
 
-#: lib/setup.c:5280
+#: lib/setup.c:5291
 #, c-format
 msgid "Device %s already exists."
 msgstr "Dispozitivul %s există deja."
 
-#: lib/setup.c:5287
+#: lib/setup.c:5298
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Nu se poate folosi dispozitivul %s, numele este nevalid sau este încă în uz."
 
-#: lib/setup.c:5299
+#: lib/setup.c:5310
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Cheile de recriptare a volumului nu se potrivesc cu volumul."
 
-#: lib/setup.c:5316
+#: lib/setup.c:5327
 msgid "Incorrect volume key specified for plain device."
 msgstr "Este specificată o cheie de volum incorectă pentru un dispozitiv cu criptare normală."
 
-#: lib/setup.c:5342 lib/setup.c:5403
+#: lib/setup.c:5353 lib/setup.c:5414
 msgid "Device type is not properly initialized."
 msgstr "Tipul de dispozitiv nu este inițializat corect."
 
-#: lib/setup.c:5441
+#: lib/setup.c:5452
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Inelul de chei pentru nucleu nu este acceptat de nucleu actual."
 
-#: lib/setup.c:5445
+#: lib/setup.c:5456
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Lipsește inelul de chei pentru nucleu: este necesar pentru transmiterea semnăturii către nucleu."
 
-#: lib/setup.c:5500
+#: lib/setup.c:5511
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Nu se poate utiliza cheia inelului de chei %s."
 
-#: lib/setup.c:5713
+#: lib/setup.c:5724
 msgid "Incorrect root hash specified for verity device."
 msgstr "Sumă de control rădăcină incorectă specificată pentru dispozitivul verity."
 
-#: lib/setup.c:5754 lib/setup.c:5779
+#: lib/setup.c:5765 lib/setup.c:5790
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL nu acceptă dezactivarea amânată."
 
-#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Dispozitivul %s este încă în uz."
 
-#: lib/setup.c:5787
+#: lib/setup.c:5798
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Nu s-a putut anula eliminarea întârziată din dispozitivul %s."
 
-#: lib/setup.c:5809
+#: lib/setup.c:5820
 #, c-format
 msgid "Invalid device %s."
 msgstr "Dispozitiv nevalid %s."
 
-#: lib/setup.c:5956
+#: lib/setup.c:5967
 msgid "Volume key buffer too small."
 msgstr "Memoria tampon a cheii de volum este prea mică."
 
-#: lib/setup.c:5967
+#: lib/setup.c:5978
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul LUKS2."
 
-#: lib/setup.c:5976
+#: lib/setup.c:5987
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul LUKS1."
 
-#: lib/setup.c:5990
+#: lib/setup.c:6001
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nu se poate recupera tasta de volum pentru dispozitivul normal."
 
-#: lib/setup.c:5998
+#: lib/setup.c:6009
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Nu se poate recupera suma de control rădăcină pentru dispozitivul verity."
 
-#: lib/setup.c:6007
+#: lib/setup.c:6018
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul BITLK."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6023
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul FVAULT2."
 
-#: lib/setup.c:6014
+#: lib/setup.c:6025
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Această operație nu este acceptată pentru dispozitivul criptat %s."
 
-#: lib/setup.c:6199 lib/setup.c:6210
+#: lib/setup.c:6210 lib/setup.c:6221
 msgid "Dump operation is not supported for this device type."
 msgstr "Operația de descărcare nu este acceptată pentru acest tip de dispozitiv."
 
-#: lib/setup.c:6590
+#: lib/setup.c:6601
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Decalajul datelor nu este multiplu de %u octeți."
 
-#: lib/setup.c:6898
+#: lib/setup.c:6909
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Nu se poate converti dispozitivul %s care este încă în uz."
 
-#: lib/setup.c:7206 lib/setup.c:7350
+#: lib/setup.c:7217 lib/setup.c:7361
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Nu s-a putut atribui slotul %u ca nouă cheie de volum."
 
-#: lib/setup.c:7230
+#: lib/setup.c:7241
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Nu s-au putut inițializa parametrii impliciți pentru slotul de cheie LUKS2."
 
-#: lib/setup.c:7236
+#: lib/setup.c:7247
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Nu s-a putut aloca slotul de cheie %d pentru a digera."
 
-#: lib/setup.c:7467
+#: lib/setup.c:7478
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nu se poate adăuga slotul pentru cheie, toate sloturile sunt dezactivate și nu este furnizată nicio cheie pentru volum."
 
-#: lib/setup.c:7540 lib/verity/verity.c:333
+#: lib/setup.c:7551 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Nu s-a putut încărca cheia în inelul de chei al nucleului."
 
-#: lib/setup.c:7731
+#: lib/setup.c:7742
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Nu s-a putut găsi inelul de chei descris de „%s”."
 
-#: lib/setup.c:7796
+#: lib/setup.c:7807
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Nu s-a putut obține blocarea de serializare a accesului la memoria-hardwarw globală."
 
@@ -818,40 +819,45 @@ msgstr "Dispozitivul %s nu este compatibil."
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "Se ignoră dimensiunea optimă de transfer de date falsă pentru dispozitivul de date (%u octeți)."
 
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "Nu se poate mări %s la %<PRIu64> octeți (%s)."
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "Dispozitivul %s este prea mic. Aveți nevoie de cel puțin %<PRIu64> octeți."
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "Nu se poate utiliza dispozitivul %s care este în uz (deja cartografiat sau montat)."
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "Nu se poate utiliza dispozitivul %s, permisiune refuzată."
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "Nu se pot obține informații despre dispozitivul %s."
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "Nu se poate utiliza un dispozitiv loopback, deoarece programul nu rulează cu privilegii de root."
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "Atașarea dispozitivului de loopback a eșuat (este necesar un dispozitiv de buclă cu fanion de ștergere automată)."
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "Decalajul solicitat depășește dimensiunea reală a dispozitivului %s."
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "Dispozitivul %s are dimensiune zero."
@@ -994,9 +1000,9 @@ msgstr "Eroare de In/Ieș în timpul criptării slotului de cheie."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
 #: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
 #: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
@@ -1141,7 +1147,7 @@ msgstr "Modul de cifrare LUKS %s este nevalid."
 msgid "LUKS hash %s is invalid."
 msgstr "Suma de control(hash) LUKS %s nu este validă."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Nu s-a detectat nicio problemă cunoscută pentru antetul LUKS."
 
@@ -1234,11 +1240,11 @@ msgstr "Lungimea maximă a frazei de acces TCRYPT (%zu) a fost depășită."
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "Algoritmul sumei de control(hash) PBKDF2 %s nu este disponibil, se omite."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
+#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
 msgid "Required kernel crypto interface not available."
 msgstr "Interfața necesară de criptare a nucleului nu este disponibilă."
 
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
+#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
 msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr "Asigurați-vă că aveți modulul nucleului «algif_skcipher», încărcat."
 
@@ -1309,11 +1315,6 @@ msgstr "Dimensiunea sectorului neacceptată, %<PRIu16>."
 msgid "Failed to read BITLK header from %s."
 msgstr "Nu s-a putut citi antetul BITLK de la %s."
 
-#: lib/bitlk/bitlk.c:593
-#, c-format
-msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
-msgstr "Nu s-a putut citi sau valida copia metadatelor BITLK FVE #%d din %s."
-
 #: lib/bitlk/bitlk.c:603
 #, c-format
 msgid "Failed to read and validate BITLK FVE metadata from %s."
@@ -1389,42 +1390,42 @@ msgstr "Această operație nu este acceptată."
 msgid "Unexpected key data size."
 msgstr "Dimensiune neașteptată a datelor cheii."
 
-#: lib/bitlk/bitlk.c:1431
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Acest dispozitiv BITLK este într-o stare neacceptată și nu poate fi activat."
 
-#: lib/bitlk/bitlk.c:1436
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Dispozitivele BITLK de tip „%s” nu pot fi activate."
 
-#: lib/bitlk/bitlk.c:1475
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "AVERTISMENT: dimensiunea volumului BitLocker %<PRIu64> nu se potrivește cu dimensiunea dispozitivului subiacent %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1602
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Nu se poate activa dispozitivul, modulul nucleului «dm-crypt» nu are suport pentru BITLK IV."
 
-#: lib/bitlk/bitlk.c:1606
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Dispozitivul nu poate fi activat, modulul nucleului «dm-crypt» nu are suport pentru difuzorul BITLK Elephant."
 
-#: lib/bitlk/bitlk.c:1610
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Dispozitivul nu poate fi activat, nucleul dm-crypt nu are suport pentru dimensiune mare a sectorului."
 
-#: lib/bitlk/bitlk.c:1614
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Dispozitivul nu se poate activa, modulul nucleului, «dm-zero», lipsește."
 
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "Nu s-au putut citi %u octeți din antetul volumului."
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "Versiune FVAULT2 neacceptată %<PRIu16>."
@@ -1501,23 +1502,23 @@ msgstr "Verificarea a eșuat la poziția %<PRIu64>."
 msgid "Hash area overflow."
 msgstr "Debordare a zonei sumei de control(hash)."
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "Verificarea zonei de date a eșuat."
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "Verificarea sumei de control(hash) rădăcină a eșuat."
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "Eroare de intrare/ieșire la crearea zonei de sumă de control(hash)."
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "Crearea zonei de sumă de control(hash) a eșuat."
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "AVERTISMENT: Nucleul nu poate activa dispozitivul dacă dimensiunea blocului de date depășește dimensiunea paginii (%u)."
@@ -1572,19 +1573,19 @@ msgstr "Nu s-a putut determina dimensiunea pentru dispozitivul %s."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Metadate incompatibile cu modulul nucleului «dm-integrity» (versiunea %u) detectate pe %s."
 
-#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Nucleul nu acceptă asocierea dm-integrity."
 
-#: lib/integrity/integrity.c:310
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Nucleul nu acceptă alinierea metadatelor fixe dm-integrity."
 
-#: lib/integrity/integrity.c:319
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Nucleul refuză să activeze opțiunea de recalculare nesigură (consultați opțiunile de activare vechi pentru a le înlocui)."
 
-#: lib/integrity/integrity.c:325
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Nucleul nu acceptă modul în linie „inline” dm-integrity."
 
@@ -1733,7 +1734,7 @@ msgstr "Dispozitiv dm-integrity subiacent cu sectoare de date neașteptate furni
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Recriptare în curs. Nu se poate dezactiva dispozitivul."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
+#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Nu s-a putut înlocui dispozitivul suspendat %s cu ținta dm-error."
@@ -1812,7 +1813,7 @@ msgstr "Nu se poate verifica starea dispozitivului cu uuid: %s."
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Nu s-a putut converti antetul cu metadate suplimentare LUKSMETA."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
+#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Nu se poate utiliza specificația de cifrare %s-%s pentru LUKS2."
@@ -1896,7 +1897,7 @@ msgstr "Dimensiunea dispozitivului trebuie să fie multiplu al alinierii zonei c
 
 #: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
 #: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4077
+#: lib/luks2/luks2_reencrypt.c:4080
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Nu s-a putut inițializa vechea încapsulare de stocare a segmentului."
 
@@ -1904,7 +1905,7 @@ msgstr "Nu s-a putut inițializa vechea încapsulare de stocare a segmentului."
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Nu s-a putut inițializa noua încapsulare de stocare a segmentului."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
+#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
 msgid "Failed to initialize hotzone protection."
 msgstr "Nu s-a putut inițializa protecția zonei „fierbinți” (active)."
 
@@ -1912,7 +1913,7 @@ msgstr "Nu s-a putut inițializa protecția zonei „fierbinți” (active)."
 msgid "Failed to read checksums for current hotzone."
 msgstr "Nu s-au putut citii sumele de control pentru zona „fierbinte” (activă) actuală."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Nu s-a putut citi zona „fierbinte” (activă) începând cu %<PRIu64>."
@@ -2001,8 +2002,8 @@ msgstr "Dimensiunea redusă a datelor este mai mare decât dimensiunea dispoziti
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Dispozitivul de date nu este aliniat la dimensiunea sectorului de criptare (%<PRIu32> octeți)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
-#: lib/luks2/luks2_reencrypt.c:3661
+#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
+#: lib/luks2/luks2_reencrypt.c:3664
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Nu s-a putut deschide %s în modul exclusiv (deja cartografiat sau montat)."
@@ -2011,123 +2012,123 @@ msgstr "Nu s-a putut deschide %s în modul exclusiv (deja cartografiat sau monta
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Dispozitivul nu este marcat pentru recriptarea LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
+#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Nu s-a putut încărca contextul de recriptare LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
+#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
 msgid "Device is not in reencryption."
 msgstr "Dispozitivul nu se află în recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
+#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
 msgid "Reencryption process is already running."
 msgstr "Procesul de recriptare rulează deja."
 
-#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
+#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
 msgid "Failed to acquire reencryption lock."
 msgstr "Nu s-a putut obține blocarea pentru recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:3468
+#: lib/luks2/luks2_reencrypt.c:3471
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Nu se poate continua cu recriptarea. Rulați mai întâi recuperarea recriptării."
 
-#: lib/luks2/luks2_reencrypt.c:3604
+#: lib/luks2/luks2_reencrypt.c:3607
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Dimensiunea dispozitivului activ și dimensiunea de recriptare solicitată nu se potrivesc."
 
-#: lib/luks2/luks2_reencrypt.c:3618
+#: lib/luks2/luks2_reencrypt.c:3621
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "Dimensiunea dispozitivului solicitată în parametrii de recriptare este incorectă."
 
-#: lib/luks2/luks2_reencrypt.c:3720
+#: lib/luks2/luks2_reencrypt.c:3723
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Recriptare în curs. Nu se poate efectua recuperarea."
 
-#: lib/luks2/luks2_reencrypt.c:3741
+#: lib/luks2/luks2_reencrypt.c:3744
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Recuperarea recriptării LUKS2 a eșuat."
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
 msgid "Failed to initialize reencryption device stack."
 msgstr "Nu s-a putut inițializa stiva dispozitivului de recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3910
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "Recriptare LUKS2 deja inițializată în metadate."
 
-#: lib/luks2/luks2_reencrypt.c:3915
+#: lib/luks2/luks2_reencrypt.c:3918
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Nu s-a putut inițializa recriptarea LUKS2 în metadate."
 
-#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
-#: lib/luks2/luks2_reencrypt.c:4030
+#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
+#: lib/luks2/luks2_reencrypt.c:4033
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Recriptarea nu este acceptată pentru dispozitivele DAX (memorie persistentă)."
 
-#: lib/luks2/luks2_reencrypt.c:4059
+#: lib/luks2/luks2_reencrypt.c:4062
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Nu s-au putut definii segmentele dispozitivului pentru următoarea zonă „fierbinte” (activă) de recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:4112
+#: lib/luks2/luks2_reencrypt.c:4115
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Nu s-au putut scrie metadatele adaptabilității recriptării."
 
-#: lib/luks2/luks2_reencrypt.c:4119
+#: lib/luks2/luks2_reencrypt.c:4122
 msgid "Decryption failed."
 msgstr "Decriptarea a eșuat."
 
-#: lib/luks2/luks2_reencrypt.c:4124
+#: lib/luks2/luks2_reencrypt.c:4127
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Nu s-a putut scrie zona „fierbinte” (activă) începând de la %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4129
+#: lib/luks2/luks2_reencrypt.c:4132
 msgid "Failed to sync data."
 msgstr "Nu s-au putut sincroniza datele."
 
-#: lib/luks2/luks2_reencrypt.c:4137
+#: lib/luks2/luks2_reencrypt.c:4140
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Nu s-au putut actualiza metadatele după finalizarea zonei „fierbinți” (active) de recriptare actuală."
 
-#: lib/luks2/luks2_reencrypt.c:4226
+#: lib/luks2/luks2_reencrypt.c:4229
 msgid "Failed to write LUKS2 metadata."
 msgstr "Nu s-au putut scrie metadatele LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:4249
+#: lib/luks2/luks2_reencrypt.c:4252
 msgid "Failed to wipe unused data device area."
 msgstr "Nu s-a putut șterge zona nefolosită a dispozitivului de date."
 
-#: lib/luks2/luks2_reencrypt.c:4255
+#: lib/luks2/luks2_reencrypt.c:4258
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Nu s-a putut elimina slotul de cheie neutilizat (neasociat) %d."
 
-#: lib/luks2/luks2_reencrypt.c:4265
+#: lib/luks2/luks2_reencrypt.c:4268
 msgid "Failed to remove reencryption keyslot."
 msgstr "Nu s-a putut elimina slotul de cheie de recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:4275
+#: lib/luks2/luks2_reencrypt.c:4278
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Eroare fatală la recriptarea porțiunii începând de la %<PRIu64>, %<PRIu64> sectoare lungi."
 
-#: lib/luks2/luks2_reencrypt.c:4279
+#: lib/luks2/luks2_reencrypt.c:4282
 msgid "Online reencryption failed."
 msgstr "Recriptarea «online» a eșuat."
 
-#: lib/luks2/luks2_reencrypt.c:4284
+#: lib/luks2/luks2_reencrypt.c:4287
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Nu reluați dispozitivul decât dacă este înlocuit manual cu ținta erorii."
 
-#: lib/luks2/luks2_reencrypt.c:4336
+#: lib/luks2/luks2_reencrypt.c:4339
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Nu se poate continua cu recriptarea. Stare neașteptată a recriptării."
 
-#: lib/luks2/luks2_reencrypt.c:4342
+#: lib/luks2/luks2_reencrypt.c:4345
 msgid "Missing or invalid reencrypt context."
 msgstr "Context de recriptare lipsă sau nevalid."
 
-#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
+#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
 msgid "Failed to update reencryption context."
 msgstr "Nu s-a putut actualiza contextul de recriptare."
 
@@ -2163,7 +2164,7 @@ msgstr "Parametrii de criptare a slotului de cheie pot fi stabiliți numai pentr
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametrii de criptare a slotului de chei nu sunt compatibili cu criptarea slotului de chei LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
+#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2191,7 +2192,7 @@ msgstr "AVERTISMENT: Parametrul „--hash” este ignorat în modul simplu, cu f
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "AVERTISMENT: Opțiunea „--keyfile-size” este ignorată, dimensiunea de citire este aceeași cu dimensiunea cheii de criptare.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2202,9 +2203,9 @@ msgstr "Scanarea «blkid» a eșuat pentru %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "S-au detectat semnături de dispozitiv pe %s. Continuarea operației, riscă să deterioreze datele existente."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
-#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
-#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2253,7 +2254,7 @@ msgstr ""
 "care permite accesul la partiția criptată fără fraza de acces.\n"
 "Acest conținut ar trebui să fie întotdeauna stocat criptat într-un loc sigur."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2272,14 +2273,14 @@ msgstr "Dispozitivul %s nu este un dispozitiv FVAULT2 valid."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nu se poate determina dimensiunea cheii de volum pentru FVAULT2; utilizați opțiunea „--key-size” pentru a o furniza."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Dispozitivul %s este încă activ și programat pentru eliminare temporizată.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
-#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
-#: src/cryptsetup.c:3264
+#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
+#: src/cryptsetup.c:3262
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Nu s-a putut definii ruta jetoanelor(tokens) externe %s."
@@ -2288,85 +2289,85 @@ msgstr "Nu s-a putut definii ruta jetoanelor(tokens) externe %s."
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Redimensionarea dispozitivului activ necesită cheia de volum în inelul de chei, dar opțiunea „--disable-keyring” este furnizată."
 
-#: src/cryptsetup.c:1059
+#: src/cryptsetup.c:1057
 msgid "Benchmark interrupted."
 msgstr "Testarea pentru evaluarea performanței a fost întreruptă."
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1078
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     (neaplicabil)\n"
 
-#: src/cryptsetup.c:1082
+#: src/cryptsetup.c:1080
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u iterații pe secundă pentru cheia %zu-bit\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1094
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s (neaplicabil)\n"
 
-#: src/cryptsetup.c:1098
+#: src/cryptsetup.c:1096
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u iterații, %5u memorie, %1u fire paralele (CPU-uri) pentru cheia %zu-bit (timpul necesitat %u ms)\n"
 
-#: src/cryptsetup.c:1122
+#: src/cryptsetup.c:1120
 msgid "Result of benchmark is not reliable."
 msgstr "Rezultatul testului de evaluare a performanței nu este fiabil."
 
-#: src/cryptsetup.c:1172
+#: src/cryptsetup.c:1170
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testele sunt aproximative folosind doar memoria (fără In/Ieș de stocare).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1197
+#: src/cryptsetup.c:1195
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algoritm |     Cheie |        Criptare |      Decriptare\n"
 
-#: src/cryptsetup.c:1205
+#: src/cryptsetup.c:1203
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Cifrarea %s (cu cheie de %i biți) nu este disponibilă."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1222
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algoritm |     Cheie |        Criptare |      Decriptare\n"
 
-#: src/cryptsetup.c:1235
+#: src/cryptsetup.c:1233
 msgid "N/A"
 msgstr "nedisponibil"
 
-#: src/cryptsetup.c:1260
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
 msgstr "Au fost detectate metadate neprotejate de recriptare LUKS2. Verificați că operațiunea de recriptare este de dorit (consultați ieșirea luksDump) și continuați (să actualizați metadatele) numai dacă recunoașteți operația ca fiind autentică."
 
-#: src/cryptsetup.c:1266
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Introduceți fraza de acces pentru a proteja și actualiza metadatele de recriptare: "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Continuați cu adevărat cu recuperarea recriptării LUKS2?"
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Introduceți fraza de acces pentru a verifica calcularea sumele de control a metadatelor de recriptare: "
 
-#: src/cryptsetup.c:1321
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Introduceți fraza de acces pentru recuperarea recriptării: "
 
-#: src/cryptsetup.c:1383
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Încercați cu adevărat să reparați antetul dispozitivului LUKS?"
 
-#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2374,7 +2375,7 @@ msgstr ""
 "\n"
 "Ștergere întreruptă."
 
-#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2382,167 +2383,167 @@ msgstr ""
 "Se șterge dispozitivul pentru a inițializa calcularea sumei de control a integrității.\n"
 "Puteți întrerupe acest lucru apăsând CTRL+c (restul dispozitivului care nu este șters va conține o sumă de control nevalidă).\n"
 
-#: src/cryptsetup.c:1438 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Nu se poate dezactiva dispozitivul temporar %s."
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Criptarea OPAL hw-only nu acceptă „--cipher” și „--key-size”, opțiunile sunt ignorate."
 
-#: src/cryptsetup.c:1499
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Opțiunea de integritate poate fi utilizată numai pentru formatul LUKS2."
 
-#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Opțiuni de dimensiune a metadatelor LUKS2 neacceptate."
 
-#: src/cryptsetup.c:1509
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL este acceptat numai pentru formatul LUKS2."
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Etichetele hw în linie „inline” sunt acceptate numai pentru formatul LUKS2."
 
-#: src/cryptsetup.c:1523
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Fișierul antet nu există, doriți să îl creați?"
 
-#: src/cryptsetup.c:1531
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Nu se poate crea fișierul antet %s."
 
-#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Nu a fost detectat niciun model de specificație de integritate cunoscut."
 
-#: src/cryptsetup.c:1559
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Nu se poate utiliza dimensiunea specificată a cheii de integritate."
 
-#: src/cryptsetup.c:1577
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Nu se poate folosi %s ca antet pe disc."
 
-#: src/cryptsetup.c:1606 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Acest lucru va suprascrie datele de pe %s în mod irevocabil."
 
-#: src/cryptsetup.c:1643
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Parola de administrator OPAL nu poate fi goală."
 
-#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
-#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Nu s-au putut definii parametrii pbkdf."
 
-#: src/cryptsetup.c:1788
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Decalajul redus de date este permis numai pentru antetul LUKS detașat."
 
-#: src/cryptsetup.c:1795
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Containerul de fișiere LUKS %s este prea mic pentru activare, nu mai rămâne spațiu pentru date."
 
-#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nu se poate determina dimensiunea cheii de volum pentru LUKS fără sloturi de chei; folosiți opțiunea „--key-size” pentru a furniza aceste date."
 
-#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Dispozitivul necesită două chei de volum."
 
-#: src/cryptsetup.c:1891
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Unii parametri de activare specificați au fost ignorați cu criptarea OPAL hw-only."
 
-#: src/cryptsetup.c:1896
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Dispozitivul a fost activat, dar nu se poate face ca fanioanele să fie persistente."
 
-#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Slotul de cheie %d este selectat pentru ștergere."
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Acesta este ultimul slot de cheie. Dispozitivul va deveni inutilizabil după eliminarea acestei chei."
 
-#: src/cryptsetup.c:1989
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Introduceți orice frază de acces rămasă: "
 
-#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operația a fost întreruptă, slotul de cheie NU a fost șters.\n"
 
-#: src/cryptsetup.c:2026
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Introduceți fraza de acces pentru a fi ștearsă: "
 
-#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
+#: src/cryptsetup.c:3253
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Dispozitivul %s nu este un dispozitiv LUKS2 valid."
 
-#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Introduceți noua frază de acces pentru slotul de cheie: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Introduceți codul PIN al jetonului: "
 
-#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Introduceți codul PIN al jetonului(token) %d: "
 
-#: src/cryptsetup.c:2210
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "AVERTISMENT: Parametrul „--key-slot” este utilizat pentru noul număr de slot de cheie.\n"
 
-#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Introduceți orice frază de acces existentă: "
 
-#: src/cryptsetup.c:2383
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Introduceți fraza de acces pentru a fi schimbată: "
 
-#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Introduceți nouă frază de acces: "
 
-#: src/cryptsetup.c:2449
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Introduceți fraza de acces pentru slotul de cheie care urmează să fie convertit: "
 
-#: src/cryptsetup.c:2473
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Doar un singur dispozitiv este admis ca argument pentru operația isLuks."
 
-#: src/cryptsetup.c:2578
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Slotul de cheie %d nu conține o cheie neasociată."
 
-#: src/cryptsetup.c:2583
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2550,52 +2551,52 @@ msgstr ""
 "Conținutul antetului cu cheia neasociată este o informație sensibilă.\n"
 "Acest conținut ar trebui să fie stocat criptat într-un loc sigur."
 
-#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s nu este numele dispozitivului activ %s."
 
-#: src/cryptsetup.c:2709
+#: src/cryptsetup.c:2707
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s nu este numele unui dispozitiv LUKS activ sau antetul lipsește."
 
-#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
+#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
 msgid "Option --header-backup-file is required."
 msgstr "Este necesară opțiunea „--header-backup-file”."
 
-#: src/cryptsetup.c:2836
+#: src/cryptsetup.c:2834
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s nu este un dispozitiv gestionat de «cryptsetup»."
 
-#: src/cryptsetup.c:2847
+#: src/cryptsetup.c:2845
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Reîmprospătarea nu este disponibilă pentru tipul de dispozitiv %s"
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2895
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Tip de dispozitiv de metadate nerecunoscut %s."
 
-#: src/cryptsetup.c:2899
+#: src/cryptsetup.c:2897
 msgid "Command requires device and mapped name as arguments."
 msgstr "Comanda necesită un dispozitiv și numele asociat acestuia ca argumente."
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL PSID: "
 msgstr "Introduceți PSID OPAL: "
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL Admin password: "
 msgstr "Introduceți parola de administrator OPAL: "
 
-#: src/cryptsetup.c:2925
+#: src/cryptsetup.c:2923
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "AVERTISMENT: ÎNTREGUL disc va fi reinițializat la valorile din fabrică și toate datele se vor pierde! Continuați?"
 
-#: src/cryptsetup.c:2968
+#: src/cryptsetup.c:2966
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2604,363 +2605,363 @@ msgstr ""
 "Această operație va șterge toate sloturile de chei de pe dispozitivul %s.\n"
 "Dispozitivul va deveni inutilizabil după această operație."
 
-#: src/cryptsetup.c:2975
+#: src/cryptsetup.c:2973
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operația a fost întreruptă, sloturile de chei NU au fost șterse.\n"
 
-#: src/cryptsetup.c:3014
+#: src/cryptsetup.c:3012
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Tip LUKS nevalid, numai luks1 și luks2 sunt acceptate."
 
-#: src/cryptsetup.c:3030
+#: src/cryptsetup.c:3028
 #, c-format
 msgid "Device is already %s type."
 msgstr "Dispozitivul este deja de tip %s."
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3035
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Această operație va converti %s în formatul %s.\n"
 
-#: src/cryptsetup.c:3040
+#: src/cryptsetup.c:3038
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operația a fost întreruptă, dispozitivul NU a fost convertit.\n"
 
-#: src/cryptsetup.c:3080
+#: src/cryptsetup.c:3078
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Opțiunea „--priority”, „--label” sau „--subsystem” lipsește."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Jetonul(token) %d nu este valid."
 
-#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
+#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
 #, c-format
 msgid "Token %d in use."
 msgstr "Jetonul(token) %d este în uz."
 
-#: src/cryptsetup.c:3129
+#: src/cryptsetup.c:3127
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Nu s-a putut adăuga jetonul(token) %d la inelul de chei luks2."
 
-#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
+#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Nu s-a putut atribui jetonul(token) %d slotului pentru cheie %d."
 
-#: src/cryptsetup.c:3157
+#: src/cryptsetup.c:3155
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Jetonul %d nu este în uz."
 
-#: src/cryptsetup.c:3194
+#: src/cryptsetup.c:3192
 msgid "Failed to import token from file."
 msgstr "Nu s-a putut importa jetonul din fișier."
 
-#: src/cryptsetup.c:3219
+#: src/cryptsetup.c:3217
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Nu s-a putut obține jetonul %d pentru export."
 
-#: src/cryptsetup.c:3232
+#: src/cryptsetup.c:3230
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Jetonul %d nu este alocat slotului de cheie %d."
 
-#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
+#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Nu s-a putut anula atribuirea jetonului %d din slotul de cheie %d."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3298
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Opțiunea „--tcrypt-hidden”, „--tcrypt-system” sau „--tcrypt-backup” este acceptată doar pentru dispozitivele TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3301
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Opțiunea „--veracrypt” sau „--disable-veracrypt” este acceptată numai pentru tipul de dispozitiv TCRYPT."
 
-#: src/cryptsetup.c:3306
+#: src/cryptsetup.c:3304
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opțiunea „--veracrypt-pim” este acceptată numai pentru dispozitivele compatibile cu VeraCrypt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3308
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opțiunea „--veracrypt-query-pim” este acceptată numai pentru dispozitivele compatibile cu VeraCrypt."
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3310
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Opțiunile „--veracrypt-pim” și „--veracrypt-query-pim” se exclud reciproc."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3319
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Opțiunea „--persistent” nu este permisă cu opțiunea „--test-passphrase”."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3322
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Opțiunile „--refresh” și „--test-passphrase” se exclud reciproc."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3325
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Opțiunea „--shared” este permisă numai pentru deschiderea unui dispozitiv simplu."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3328
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Opțiunea „--skip” este acceptată numai pentru deschiderea dispozitivelor simple și a dispozitivelor loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3331
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Opțiunea „--offset” cu acțiune de deschidere este acceptată numai pentru dispozitivele simple și dispozitivele loopaes."
 
-#: src/cryptsetup.c:3336
+#: src/cryptsetup.c:3334
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Opțiunea „--tcrypt-hidden” nu poate fi combinată cu opțiunea „--allow-discards”."
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3338
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Opțiunea de dimensiune a sectorului cu acțiune de deschidere este acceptată numai pentru dispozitivele simple."
 
-#: src/cryptsetup.c:3344
+#: src/cryptsetup.c:3342
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Opțiunea sectoare IV (vector de inițializare) mari este acceptată numai pentru deschiderea dispozitivelor de tip simplu, cu dimensiunea sectorului mai mare de 512 de octeți."
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3347
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Opțiunea „--test-passphrase” este permisă numai pentru deschiderea dispozitivelor LUKS, TCRYPT, BITLK și FVAULT2."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
+#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Opțiunile „--device-size” și „--size” nu pot fi combinate."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3353
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Opțiunea „--unbound” este permisă numai pentru deschiderea dispozitivelor luks."
 
-#: src/cryptsetup.c:3358
+#: src/cryptsetup.c:3356
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Opțiunea „--unbound” nu poate fi utilizată fără opțiunea „--test-passphrase”."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3360
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Opțiunea „--volume-key-keyring” nu poate fi combinată cu opțiunea „--hash” sau cu opțiunea „--volume-key-file”."
 
-#: src/cryptsetup.c:3365
+#: src/cryptsetup.c:3363
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Ambele opțiuni „--volume-key-file” trebuie să fie asociate cu opțiunile „--key-size” respective."
 
-#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Opțiunile „--cancel-deferred” și „--deferred” nu pot fi utilizate în același timp."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3388
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Opțiunea „--active-name” poate fi utilizată numai pentru dispozitivele LUKS2."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3391
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Opțiunile „--active-name” și „--force-offline-reencrypt” nu pot fi combinate."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3394
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Opțiunile „--new-volume-key-file” și „--keep-key” nu pot fi combinate."
 
-#: src/cryptsetup.c:3399
+#: src/cryptsetup.c:3397
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Opțiunile „--new-volume-key-keyring” și „--keep-key” nu pot fi combinate."
 
-#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
+#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
 msgid "Keyslot specification is required."
 msgstr "Este necesară specificarea slotului de cheie."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3413
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Opțiunile „--align-payload” și „--offset” nu pot fi combinate."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3416
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Opțiunea „--integrity-no-wipe” poate fi utilizată numai pentru acțiuni de formatare cu extensie de integritate."
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3419
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Numai una dintre opțiunile „--use-[u]random” este permisă."
 
-#: src/cryptsetup.c:3429
+#: src/cryptsetup.c:3427
 msgid "Key size is required with --unbound option."
 msgstr "Dimensiunea cheii este necesară cu opțiunea „--unbound”."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3447
 msgid "Invalid token action."
 msgstr "Operație cu jeton(token) nevalidă."
 
-#: src/cryptsetup.c:3452
+#: src/cryptsetup.c:3450
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parametrul „--key-description” este obligatoriu pentru acțiunea de adăugare a jetonului."
 
-#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
+#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Acțiunea necesită un jeton(token)l specific. Utilizați parametrul „--token-id”."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3458
 msgid "Option --unbound is valid only with token add action."
 msgstr "Opțiunea „--unbound” este validă numai cu acțiunea de adăugare a jetonului."
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3460
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Opțiunile „--key-slot” și „--unbound” nu pot fi combinate."
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3465
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Acțiunea necesită un slot de cheie specific. Utilizați parametrul „--key-slot”."
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3481
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<dispozitiv> [--type <tip>] [<nume>]"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "deschide dispozitivul ca <nume>"
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<nume>"
 
-#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "închide dispozitivul (elimină asocierea)"
 
-#: src/cryptsetup.c:3485 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "redimensionează dispozitivul activ"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3484
 msgid "show device status"
 msgstr "afișează starea dispozitivului"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <cifrarea>]"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "benchmark cipher"
 msgstr "evaluează performanța cifrului"
 
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
-#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
+#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
+#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
+#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
+#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
 msgid "<device>"
 msgstr "<dispozitiv>"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3486
 msgid "try to repair on-disk metadata"
 msgstr "încearcă să repare metadatele de pe disc"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3487
 msgid "reencrypt LUKS2 device"
 msgstr "recriptează dispozitivul LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3488
 msgid "erase all keyslots (remove encryption key)"
 msgstr "șterge toate sloturile de chei (elimină cheia de criptare)"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3489
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "convertește LUKS din/în formatul LUKS2"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490
 msgid "set permanent configuration options for LUKS2"
 msgstr "definește opțiunile permanente de configurare pentru LUKS2"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
 msgid "<device> [<new key file>]"
 msgstr "<dispozitiv> [<fișier cheie nou>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3491
 msgid "formats a LUKS device"
 msgstr "formatează un dispozitiv LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3492
 msgid "add key to LUKS device"
 msgstr "adaugă o cheie la dispozitivul LUKS"
 
-#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
 msgid "<device> [<key file>]"
 msgstr "<dispozitiv> [<fișier cheie>]"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3493
 msgid "removes supplied key or key file from LUKS device"
 msgstr "elimină cheia sau fișierul cheie furnizat de pe dispozitivul LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3494
 msgid "changes supplied key or key file of LUKS device"
 msgstr "modifică cheia furnizată sau fișierul cheie al dispozitivului LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3495
 msgid "converts a key to new pbkdf parameters"
 msgstr "convertește o cheie în noii parametri pbkdf"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "<device> <key slot>"
 msgstr "<dispozitiv> <slot cheie>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "șterge cheia cu numărul <slot cheie> de pe dispozitivul LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3497
 msgid "print UUID of LUKS device"
 msgstr "afișează UUID-ul dispozitivului LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3498
 msgid "tests <device> for LUKS partition header"
 msgstr "testează <dispozitivul> pentru antetul partiției LUKS"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3499
 msgid "dump LUKS partition information"
 msgstr "afișează informațiile despre partiția LUKS"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3500
 msgid "dump TCRYPT device information"
 msgstr "afișează informațiile despre dispozitivul TCRYPT"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3501
 msgid "dump BITLK device information"
 msgstr "afișează informațiile despre dispozitivul BITLK"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3502
 msgid "dump FVAULT2 device information"
 msgstr "afișează informațiile despre dispozitivul FVAULT2"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3503
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Suspendă dispozitivul LUKS și șterge cheia (toate In/Ieșirile sunt înghețate)"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3504
 msgid "Resume suspended LUKS device"
 msgstr "Repune în funcțiune dispozitivul LUKS suspendat"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3505
 msgid "Backup LUKS device header and keyslots"
 msgstr "Face copie de rezervă pentru antetul dispozitivului LUKS și pentru sloturile de chei"
 
-#: src/cryptsetup.c:3508
+#: src/cryptsetup.c:3506
 msgid "Restore LUKS device header and keyslots"
 msgstr "Restaurează antetul dispozitivului LUKS și sloturile de chei"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <dispozitiv>"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipulează jetoanele LUKS2"
 
-#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2975,7 +2976,7 @@ msgstr ""
 # nume, sau alias pentru primele.
 # A se vedea ieșirea comenzii:
 # «cryptsetup -?|--help»
-#: src/cryptsetup.c:3534
+#: src/cryptsetup.c:3532
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2987,7 +2988,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3538
+#: src/cryptsetup.c:3536
 #, c-format
 msgid ""
 "\n"
@@ -3002,7 +3003,7 @@ msgstr ""
 "<slot cheie> este numărul slotului de cheie LUKS de modificat\n"
 "<fișier cheie> fișier cheie opțional pentru noua cheie pentru acțiunea luksAddKey\n"
 
-#: src/cryptsetup.c:3545
+#: src/cryptsetup.c:3543
 #, c-format
 msgid ""
 "\n"
@@ -3011,7 +3012,7 @@ msgstr ""
 "\n"
 "Formatul implicit de metadate compilate este %s (pentru acțiunea luksFormat).\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3548
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3019,12 +3020,12 @@ msgstr ""
 "\n"
 "Suportul pentru modulul de jeton(token) extern LUKS2 este activat.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3549
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Ruta modulului pentru jetonul(token) extern LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3553
+#: src/cryptsetup.c:3551
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3032,7 +3033,7 @@ msgstr ""
 "\n"
 "Suportul pentru modulul de jeton(token) extern LUKS2 este dezactivat.\n"
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3555
 #, c-format
 msgid ""
 "\n"
@@ -3049,7 +3050,7 @@ msgstr ""
 "PBKDF implicit pentru LUKS2: %s\n"
 "\tTimp de iterare: %d, Memorie necesară: %dko, Fire de execuție paralele: %d\n"
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3566
 #, c-format
 msgid ""
 "\n"
@@ -3064,122 +3065,122 @@ msgstr ""
 "\tsimplu: %s, Cheie: %d biți, Suma de control a parolei: %s\n"
 "\tLUKS: %s, Cheie: %d biți, Suma de control a antetului LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3577
+#: src/cryptsetup.c:3575
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Dimensiunea implicită a cheii cu modul XTS (două chei interne) va fi dublată.\n"
 
-#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: necesită %s ca argumente"
 
-#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Slotul de cheie nu este valid."
 
-#: src/cryptsetup.c:3663
+#: src/cryptsetup.c:3661
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Dimensiunea dispozitivului trebuie să fie multiplu al sectorului de 512 octeți."
 
-#: src/cryptsetup.c:3668
+#: src/cryptsetup.c:3666
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Specificația pentru dimensiunea zonei fierbinți(active) pentru recriptare maximă nu este validă."
 
-#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
+#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Dimensiunea cheii trebuie să fie multiplu de 8 biți"
 
-#: src/cryptsetup.c:3689
+#: src/cryptsetup.c:3687
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Pot fi furnizate cel mult 2 specificații privind dimensiunea cheii."
 
-#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
+#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Pot fi furnizate cel mult %d specificații ale cheilor de volum."
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3739
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Pot fi furnizate cel mult %d specificații de legătură a inelului de chei."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3748
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Dimensiunea maximă de reducere a dispozitivului este de 1 GiB."
 
-#: src/cryptsetup.c:3753
+#: src/cryptsetup.c:3751
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Dimensiunea redusă trebuie să fie multiplu al sectorului de 512 octeți."
 
-#: src/cryptsetup.c:3770
+#: src/cryptsetup.c:3768
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Argumentul opțiuni „--priority” poate fi doar «ignore/normal/prefer»."
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Afișează acest mesaj de ajutor"
 
-#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Afișează modul de utilizare pe scurt"
 
-#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Afișează versiunea pachetului"
 
-#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Opțiuni de ajutor:"
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPȚIUNE...] <acțiune> <parametri_acțiune>"
 
-#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Argumentul <acțiune> lipsește."
 
-#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Acțiune necunoscută."
 
-#: src/cryptsetup.c:3931
+#: src/cryptsetup.c:3929
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Opțiunea „--key-file” are prioritate față de argumentul specificat pentru fișierul cheie."
 
-#: src/cryptsetup.c:3937
+#: src/cryptsetup.c:3935
 msgid "Only one --key-file argument is allowed."
 msgstr "Numai un argument „--key-file” este permis."
 
-#: src/cryptsetup.c:3942
+#: src/cryptsetup.c:3940
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funcția de derivare a unei chei bazată pe parolă (PBKDF=Password-Based Key Derivation Function) poate fi doar pbkdf2 sau argon2i/argon2id."
 
-#: src/cryptsetup.c:3947
+#: src/cryptsetup.c:3945
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Iterațiile forțate PBKDF nu pot fi combinate cu opțiunea de timp de iterație."
 
-#: src/cryptsetup.c:3952
+#: src/cryptsetup.c:3950
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Nu se poate lega cheia de volum la un inel de chei când este dezactivat."
 
-#: src/cryptsetup.c:3957
+#: src/cryptsetup.c:3955
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Nu se poate utiliza descrierea cheii pentru inelul de chei atunci când inelul de chei este dezactivat."
 
-#: src/cryptsetup.c:3962
+#: src/cryptsetup.c:3960
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Integritatea în linie trebuie utilizată împreună cu opțiunea „--integrity”."
 
-#: src/cryptsetup.c:3973
+#: src/cryptsetup.c:3971
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Opțiunile „--keyslot-cipher” și „--keyslot-key-size” trebuie să fie folosite împreună."
 
-#: src/cryptsetup.c:3981
+#: src/cryptsetup.c:3979
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Nu s-a executat nicio acțiune. Programul a fost invocat cu opțiunea „--test-args”.\n"
 
-#: src/cryptsetup.c:3994
+#: src/cryptsetup.c:3992
 msgid "Cannot disable metadata locking."
 msgstr "Nu se poate dezactiva blocarea metadatelor."
 
@@ -3244,7 +3245,7 @@ msgstr "Comanda necesită ca argument opțiunea <suma-de-control(hash)_rădăcin
 msgid "<data_device> <hash_device>"
 msgstr "<dispozitiv_date> <dispozitiv_sumă-de-control(hash)>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:485 src/integritysetup.c:553
 msgid "format device"
 msgstr "formatează dispozitivul"
 
@@ -3260,7 +3261,7 @@ msgstr "verifică dispozitivul"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<dispozitiv_date> <nume> <dispozitiv_sumă-de-control(hash)> [<sumă-de-control(hash)_rădăcină>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:489 src/integritysetup.c:556
 msgid "show active device status"
 msgstr "afișează starea dispozitivului activ"
 
@@ -3268,7 +3269,7 @@ msgstr "afișează starea dispozitivului activ"
 msgid "<hash_device>"
 msgstr "<dispozitiv_sumă-de-control(hash)>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:490 src/integritysetup.c:557
 msgid "show on-disk information"
 msgstr "afișează informațiile de pe disc"
 
@@ -3329,24 +3330,24 @@ msgstr "Formatat cu dimensiunea etichetei %u%s, integritate internă %s.\n"
 msgid " (inline hw tags)"
 msgstr " (etichete hw în linie „inline”)"
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:303
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Utilizarea fanionului pentru recalculare(...-recalculate) nu este acceptată, luați în considerare utilizarea opțiunii „--wipe” în schimb."
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:380 src/integritysetup.c:540
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Dispozitivul %s nu este un dispozitiv INTEGRITY valid."
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:553 src/integritysetup.c:557
 msgid "<integrity_device>"
 msgstr "<dispozitiv_integritate>"
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:554
 msgid "<integrity_device> <name>"
 msgstr "<dispozitiv_integritate> <nume>"
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:577
 #, c-format
 msgid ""
 "\n"
@@ -3357,7 +3358,7 @@ msgstr ""
 "<nume> este dispozitivul de creat sub %s\n"
 "<dispozitiv_integritate> este dispozitivul care conține date cu etichete de integritate\n"
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:582
 #, c-format
 msgid ""
 "\n"
@@ -3370,48 +3371,48 @@ msgstr ""
 "\tAlgoritmul sumei de control: %s\n"
 "\tDimensiunea maximă a fișierului cheie: %dko\n"
 
-#: src/integritysetup.c:636
+#: src/integritysetup.c:639
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Dimensiune nevalidă --%s. Maximul este de %u octeți."
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:742
 msgid "Both key file and key size options must be specified."
 msgstr "Trebuie specificată atât opțiunea pentru fișierul cheie, cât și opțiunea pentru dimensiunea cheii."
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:746
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Trebuie specificată atât opțiunea pentru fișierul cheii de integritate a jurnalului, cât și opțiunea pentru dimensiunea cheii."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:749
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Algoritmul de integritate a jurnalului trebuie să fie specificat dacă este utilizată cheia de integritate a jurnalului."
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:753
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Trebuie specificată atât opțiunea pentru fișierul cheii de criptare a jurnalului, cât și opțiunea pentru dimensiunea cheii."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:756
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Algoritmul de criptare a jurnalului trebuie să fie specificat dacă este utilizată cheia de criptare a jurnalului."
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:760
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Opțiunile de recuperare și modul de hartă de biți(bitmap) se exclud reciproc."
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:767
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Opțiunile jurnalului nu pot fi utilizate în modul de hartă de biți(bitmap)."
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:772
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Opțiunile de hartă de biți(bitmap) pot fi utilizate numai în modul de hartă de biți(bitmap)."
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:778
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Modul în linie nu poate fi combinat cu opțiunile de jurnal sau de hartă de biți."
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:782
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Modul în linie nu poate fi combinat cu un dispozitiv de date separat."
 
@@ -4377,6 +4378,10 @@ msgstr "Metoda de autentificare cu cheie publică nu este permisă pe gazdă.\n"
 msgid "Public key authentication error: "
 msgstr "Eroare la autentificarea cu cheia publică: "
 
+#, c-format
+#~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
+#~ msgstr "Nu s-a putut citi sau valida copia metadatelor BITLK FVE #%d din %s."
+
 #~ msgid "Activation of BITLK device with clear key protection is not supported."
 #~ msgstr "Activarea dispozitivului BITLK cu protecție de cheie în clar nu este acceptată."
 

From addd73df83123a372aa4df352fab3f62e56db529 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mari=C3=A1n=20Haburaj?= <hajkomajko5@gmail.com>
Date: Tue, 31 Mar 2026 11:31:32 +0200
Subject: [PATCH 056/244] po: update sk.po (from translationproject.org)

---
 po/sk.po | 738 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 371 insertions(+), 367 deletions(-)

diff --git a/po/sk.po b/po/sk.po
index b27260c50..1887b99f7 100644
--- a/po/sk.po
+++ b/po/sk.po
@@ -1,7 +1,7 @@
 # Slovak translation of cryptsetup
-# Copyright (C) 2025 Free Software Foundation, Inc.
+# Copyright (C) 2026 Free Software Foundation, Inc.
 # This file is put in the public domain.
-# Marián Haburaj <hajkomajko5@gmail.com>, 2025.
+# Marián Haburaj <hajkomajko5@gmail.com>, 2025, 2026.
 #
 # hash - hash
 # inline - inline
@@ -16,10 +16,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.2-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-12-12 18:51+0100\n"
-"PO-Revision-Date: 2025-12-14 22:18+0100\n"
+"POT-Creation-Date: 2026-03-30 14:18+0200\n"
+"PO-Revision-Date: 2026-03-30 22:37+0200\n"
 "Last-Translator: Marián Haburaj <hajkomajko5@gmail.com>\n"
 "Language-Team: Slovak <sk-i18n@lists.linux.sk>\n"
 "Language: sk\n"
@@ -27,7 +27,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "X-Bugs: Report translation errors to the Language-Team address.\n"
-"X-Generator: Poedit 3.8\n"
+"X-Generator: Poedit 3.9\n"
 
 #: lib/libdevmapper.c:419
 msgid "Cannot initialize device-mapper, running as non-root user."
@@ -196,8 +196,8 @@ msgstr "Veľkosť zariadenia nie je zarovnaná na veľkosť logického bloku zar
 msgid "Header detected but device %s is too small."
 msgstr "Hlavička bola nájdená, ale zariadenie %s je veľmi malé."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
-#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
+#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
+#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
 msgid "This operation is not supported for this device type."
 msgstr "Táto operácie nie je podporovaná pre tento typ zariadenia."
 
@@ -210,10 +210,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nahradenie pôvodných LUKS2 metadát v pamäti zlyhalo."
 
 #: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
-#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
-#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
-#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
+#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -230,7 +230,7 @@ msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Žiadna známa špecifikácia šifry nebola nájdená pre aktívne zariadenie %s."
 
 #: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5805
+#: lib/setup.c:3783 lib/setup.c:5816
 #, c-format
 msgid "Device %s is not active."
 msgstr "Zariadenie %s nie je aktívne."
@@ -257,7 +257,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Zariadenie s oddelenými metadátami nie je podporované pre tento typ šifrovania."
 
 #: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
 msgid "Unsupported encryption sector size."
 msgstr "Nepodporovaná veľkosť šifrovaného sektoru."
 
@@ -310,9 +310,9 @@ msgstr "Šifra %s-%s (veľkosť kľúča %zd bitov) nie je dostupná."
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "VAROVANIE: Aktivácia zariadenia zlyhá, dm-crypt nepodporuje vyžadovanú veľkosť šifrovaného sektoru.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
+#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4494
+#: lib/luks2/luks2_reencrypt.c:4497
 #, c-format
 msgid "Device %s is too small."
 msgstr "Zariadenie %s je príliš malé."
@@ -470,7 +470,7 @@ msgid "Unsupported parameters on device %s."
 msgstr "Nepodporované parametre na zariadení %s."
 
 #: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
+#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Neodpovedajúce parametre na zariadení %s."
@@ -480,7 +480,7 @@ msgid "Crypt devices mismatch."
 msgstr "Nesúlad v šifrovaných zariadeniach."
 
 #: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
+#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Nepodarilo sa znovu načítať zariadenie %s."
@@ -492,8 +492,8 @@ msgid "Failed to suspend device %s."
 msgstr "Zlyhalo pozastavenie zariadenia %s."
 
 #: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
-#: lib/luks2/luks2_reencrypt.c:4237
+#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
+#: lib/luks2/luks2_reencrypt.c:4240
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Zlyhalo prebudenie zariadenia %s."
@@ -575,187 +575,187 @@ msgstr "Chyba počas prebúdzania zariadenia %s."
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Zlyhalo odpojenie kľúča zväzku od používateľom zadaného zväzku kľúčov."
 
-#: lib/setup.c:4423 lib/setup.c:5592
+#: lib/setup.c:4423 lib/setup.c:5603
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Zlyhalo pripojenie kľúča zväzku do používateľom zadaného zväzku kľúčov."
 
-#: lib/setup.c:4521 src/cryptsetup.c:2723
+#: lib/setup.c:4522 src/cryptsetup.c:2721
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Zväzok %s nie je pozastavený."
 
-#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
-#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
+#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
+#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
 #: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Kľúč zväzku nezodpovedá zväzku."
 
-#: lib/setup.c:4776
+#: lib/setup.c:4787
 msgid "Failed to swap new key slot."
 msgstr "Zlyhala výmena nového miesta pre kľúč."
 
-#: lib/setup.c:4874
+#: lib/setup.c:4885
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Miesto pre kľúč %d je neplatné."
 
-#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
-#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
+#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Miesto pre kľúč %d nie je aktívne."
 
-#: lib/setup.c:4899
+#: lib/setup.c:4910
 msgid "Device header overlaps with data area."
 msgstr "Hlavička zariadenia zasahuje do oblasti údajov."
 
-#: lib/setup.c:5120
+#: lib/setup.c:5131
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Prebieha prešifrovanie. Nie je možné aktivovať zariadenie."
 
-#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3722
+#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
+#: lib/luks2/luks2_reencrypt.c:3725
 msgid "Failed to get reencryption lock."
 msgstr "Zlyhalo získanie zámku pre prešifrovanie."
 
-#: lib/setup.c:5144
+#: lib/setup.c:5155
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Obnova prešifrovaním LUKS2 s použitím kľúču(ov) zväzku zlyhala."
 
-#: lib/setup.c:5280
+#: lib/setup.c:5291
 #, c-format
 msgid "Device %s already exists."
 msgstr "Zariadenie %s už existuje."
 
-#: lib/setup.c:5287
+#: lib/setup.c:5298
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Nie je možné použiť zariadenie %s, názov je neplatný alebo sa stále používa."
 
-#: lib/setup.c:5299
+#: lib/setup.c:5310
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Kľúče zväzku na prešifrovanie sa líšia od zväzku."
 
-#: lib/setup.c:5316
+#: lib/setup.c:5327
 msgid "Incorrect volume key specified for plain device."
 msgstr "Zadaný nesprávny kľúč zväzku pre plain zariadenie."
 
-#: lib/setup.c:5342 lib/setup.c:5403
+#: lib/setup.c:5353 lib/setup.c:5414
 msgid "Device type is not properly initialized."
 msgstr "Typ zariadenia nie je riadne inicializovaný."
 
-#: lib/setup.c:5441
+#: lib/setup.c:5452
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Zväzok kľúčov jadra nie je jadrom podporovaný."
 
-#: lib/setup.c:5445
+#: lib/setup.c:5456
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Zväzok kľúčov jadra chýba: vyžadované pre odovzdanie podpisu jadru."
 
-#: lib/setup.c:5500
+#: lib/setup.c:5511
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Nedá sa použiť kľúč %s zo zväzku kľúčov."
 
-#: lib/setup.c:5713
+#: lib/setup.c:5724
 msgid "Incorrect root hash specified for verity device."
 msgstr "Nesprávny koreňový hash zadaný pre verity zariadenie."
 
-#: lib/setup.c:5754 lib/setup.c:5779
+#: lib/setup.c:5765 lib/setup.c:5790
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL nepodporuje odloženú deaktiváciu."
 
-#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Zariadenie %s sa stále používa."
 
-#: lib/setup.c:5787
+#: lib/setup.c:5798
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Nedá sa zrušiť odložené odstránenie zo zariadenia %s."
 
-#: lib/setup.c:5809
+#: lib/setup.c:5820
 #, c-format
 msgid "Invalid device %s."
 msgstr "Neplatné zariadenie %s."
 
-#: lib/setup.c:5956
+#: lib/setup.c:5967
 msgid "Volume key buffer too small."
 msgstr "Vyhradená pamäť pre kľúč zväzku je príliš malá."
 
-#: lib/setup.c:5967
+#: lib/setup.c:5978
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nedá sa získať kľúč zväzku pre LUKS2 zariadenie."
 
-#: lib/setup.c:5976
+#: lib/setup.c:5987
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nedá sa získať kľúč zväzku pre LUKS1 zariadenie."
 
-#: lib/setup.c:5990
+#: lib/setup.c:6001
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nedá sa získať kľúč zväzku pre plain zariadenie."
 
-#: lib/setup.c:5998
+#: lib/setup.c:6009
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Nedá sa získať koreňový hash pre verity zariadenie."
 
-#: lib/setup.c:6007
+#: lib/setup.c:6018
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nedá sa získať kľúč zväzku pre BITLK zariadenie."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6023
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nedá sa získať kľúč zväzku pre FVAULT2 zariadenie."
 
-#: lib/setup.c:6014
+#: lib/setup.c:6025
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Táto operácia nie je podporovaná pre %s šifrované zariadenie."
 
-#: lib/setup.c:6199 lib/setup.c:6210
+#: lib/setup.c:6210 lib/setup.c:6221
 msgid "Dump operation is not supported for this device type."
 msgstr "Operácia výpisu nie je podporovaná pre tento typ zariadenia."
 
-#: lib/setup.c:6590
+#: lib/setup.c:6601
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Odsadenie údajov nie je násobkom %u bajtov."
 
-#: lib/setup.c:6898
+#: lib/setup.c:6909
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Nedá sa konvertovať zariadenie %s, ktoré sa stále používa."
 
-#: lib/setup.c:7206 lib/setup.c:7350
+#: lib/setup.c:7217 lib/setup.c:7361
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Za nový kľúč zväzku sa nepodarilo priradiť miesto s kľúčom %u."
 
-#: lib/setup.c:7230
+#: lib/setup.c:7241
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Zlyhala inicializácia predvolených parametrov LUKS2 miesta na kľúč."
 
-#: lib/setup.c:7236
+#: lib/setup.c:7247
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Zlyhalo priradenie miesta pre kľúč %d k otlačku (digest)."
 
-#: lib/setup.c:7467
+#: lib/setup.c:7478
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nedá sa pridať miesto pre kľúč, všetky miesta sú vypnuté a nie je poskytnutý žiaden kľúč zväzku."
 
-#: lib/setup.c:7540 lib/verity/verity.c:333
+#: lib/setup.c:7551 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Zlyhalo načítanie kľúča zo zväzku kľúčov jadra."
 
-#: lib/setup.c:7731
+#: lib/setup.c:7742
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Nedá sa nájsť zväzok kľúčov opísaný podľa \"%s\"."
 
-#: lib/setup.c:7796
+#: lib/setup.c:7807
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Zlyhalo získanie zámku pre tvrdý prístup ku globálnej pamäti."
 
@@ -812,40 +812,45 @@ msgstr "Zariadenie %s nie je kompatibilné."
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "Ignoruje sa chybná optimálna I/O veľkosť pre zariadenie s údajmi (%u bajtov)."
 
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "Nedá sa zväčšiť %s na %<PRIu64> bajtov (%s)."
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "Zariadenie %s je príliš malé. Potrebuje aspoň %<PRIu64> bajtov."
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "Nedá sa použiť zariadenie %s, ktoré sa používa (už je namapované alebo pripojené)."
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "Nedá sa použiť zariadenie %s, prístup odmietnutý."
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "Nedajú sa získať informácie o zariadení %s."
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "Nedá sa použiť zariadenie spätnej slučky, nebežím ako administrátor."
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "Pripájanie zariadenia spätnej slučky zlyhalo (je požadované zariadenie slučky s príznakom autoclear)."
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "Požadovaná pozícia je za hranicami reálnej veľkosti zariadenia %s."
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "Zariadenie %s má nulovú veľkosť."
@@ -988,9 +993,9 @@ msgstr "Chyba vstupu/výstupu počas šifrovania miesta pre kľúč."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
 #: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
 #: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
@@ -1135,7 +1140,7 @@ msgstr "LUKS šifrovací režim %s je neplatný."
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS hash %s je neplatný."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Žiadne známe problémy neboli zistené pre hlavičku LUKS."
 
@@ -1228,11 +1233,11 @@ msgstr "Maximálna dĺžka TCRYPT hesla (%zu) bola prekročená."
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "PBKDF2 hash algoritmus %s nie je dostupný, vynecháva sa."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
+#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
 msgid "Required kernel crypto interface not available."
 msgstr "Vyžadované kryptografické rozhranie jadra nie je dostupné."
 
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
+#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
 msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr "Uistite sa, že máte načítaný modul jadra algif_skcipher."
 
@@ -1303,11 +1308,6 @@ msgstr "Nepodporovaná veľkosť sektora %<PRIu16>."
 msgid "Failed to read BITLK header from %s."
 msgstr "Zlyhalo čítanie hlavičky BITLK z %s."
 
-#: lib/bitlk/bitlk.c:593
-#, c-format
-msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
-msgstr "Zlyhalo čítanie alebo overenie kópie metadát BITLK FVE #%d z %s."
-
 #: lib/bitlk/bitlk.c:603
 #, c-format
 msgid "Failed to read and validate BITLK FVE metadata from %s."
@@ -1383,42 +1383,42 @@ msgstr "Táto operácia nie je podporovaná."
 msgid "Unexpected key data size."
 msgstr "Neočakávaná veľkosť údajov o kľúči."
 
-#: lib/bitlk/bitlk.c:1431
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Toto zariadenie BITLK je v nepodporovanom stave a nemôže byť aktivované."
 
-#: lib/bitlk/bitlk.c:1436
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Zariadenie BITLK s typom \"%s\" nemôže byť aktivované."
 
-#: lib/bitlk/bitlk.c:1475
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "VAROVANIE: Veľkosť zväzku BitLocker %<PRIu64> sa nezhoduje s veľkosťou prislúchajúceho zariadenia %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1602
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Nedá sa aktivovať zariadenie, jadru dm-crypt chýba podpora pre BITLK IV."
 
-#: lib/bitlk/bitlk.c:1606
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Nedá sa aktivovať zariadenie, jadru dm-crypt chýba podpora pre difuzér BITLK Elephant."
 
-#: lib/bitlk/bitlk.c:1610
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Nedá sa aktivovať zariadenie, jadru dm-crypt chýba podpora pre veľké veľkosti sektorov."
 
-#: lib/bitlk/bitlk.c:1614
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Nedá sa aktivovať zariadenie, modul jadra dm-zero chýba."
 
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "Nedá sa prečítať %u bajtov z hlavičky zväzku."
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "Nepodporovaná FVAULT2 verzia %<PRIu16>."
@@ -1495,23 +1495,23 @@ msgstr "Overovanie zlyhalo na pozícií %<PRIu64>."
 msgid "Hash area overflow."
 msgstr "Pretečenie hash oblasti."
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "Overovanie oblasti údajov zlyhalo."
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "Overovanie koreňového hashu zlyhalo."
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "Chyba na vstupe/výstupe počas vytvárania hash oblasti."
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "Vytvorenie hash oblasti zlyhalo."
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "VAROVANIE: Jadro nemôže aktivovať zariadenie, keď veľkosť bloku údajov prekračuje veľkosť stránky (%u)."
@@ -1566,19 +1566,19 @@ msgstr "Zlyhalo určenie veľkosti zariadenia %s."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Nekompatibilné metadáta (verzia %u) jadra dm-integrity zachytené na %s."
 
-#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Jadro nepodporuje mapovanie dm-integrity."
 
-#: lib/integrity/integrity.c:310
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Jadro nepodporuje pevné zarovnanie metadát dm-integrity."
 
-#: lib/integrity/integrity.c:319
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Jadro odmieta aktivovať nezabezpečenú možnosť prepočtu (na prepnutie pozri zastaralé možnosti aktivácie)."
 
-#: lib/integrity/integrity.c:325
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Jadro nepodporuje dm-integrity režim inline."
 
@@ -1727,7 +1727,7 @@ msgstr "Prislúchajúce zariadenie dm-integrity neočakávane poskytlo sektory s
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Prebieha opätovné šifrovanie. Nedá sa deaktivovať zariadenie."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
+#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Zlyhala výmena pozastaveného zariadenia %s za cieľ dm-error."
@@ -1806,7 +1806,7 @@ msgstr "Nedá sa skontrolovať stav zariadenia s uuid: %s."
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Nedá sa zmeniť hlavička s dodatočnými metadátami LUKSMETA."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
+#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Nedá sa použiť špecifikácia šifry %s-%s pre LUKS2."
@@ -1890,7 +1890,7 @@ msgstr "Veľkosť zariadenia musí byť násobkom vypočítaného zarovnania zó
 
 #: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
 #: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4077
+#: lib/luks2/luks2_reencrypt.c:4080
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Zlyhala inicializácia obalu úložiska pre staré segmenty."
 
@@ -1898,7 +1898,7 @@ msgstr "Zlyhala inicializácia obalu úložiska pre staré segmenty."
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Zlyhala inicializácia obalu úložiska pre nové segmenty."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
+#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
 msgid "Failed to initialize hotzone protection."
 msgstr "Zlyhala inicializácia ochrany horúcej zóny."
 
@@ -1906,7 +1906,7 @@ msgstr "Zlyhala inicializácia ochrany horúcej zóny."
 msgid "Failed to read checksums for current hotzone."
 msgstr "Zlyhalo čítanie kontrolných súčtov pre aktuálnu horúcu zónu."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Zlyhalo čítanie oblasti horúcej zóny začínajúcej na %<PRIu64>."
@@ -1995,8 +1995,8 @@ msgstr "Zmenšená veľkosť údajov je väčšia ako skutočná veľkosť zaria
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Zariadenie s údajmi nie je zarovnané k veľkosti šifrovaného sektoru (%<PRIu32> bajtov)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
-#: lib/luks2/luks2_reencrypt.c:3661
+#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
+#: lib/luks2/luks2_reencrypt.c:3664
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Zlyhalo otvorenie %s vo výlučnom režime (už mapované alebo pripojené)."
@@ -2005,123 +2005,123 @@ msgstr "Zlyhalo otvorenie %s vo výlučnom režime (už mapované alebo pripojen
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Zariadenie nie je označené pre LUKS2 prešifrovanie."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
+#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Zlyhalo načítanie kontextu LUKS2 prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
+#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
 msgid "Device is not in reencryption."
 msgstr "Zariadenie nie je opätovne šifrované."
 
-#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
+#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
 msgid "Reencryption process is already running."
 msgstr "Proces prešifrovania už beží."
 
-#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
+#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
 msgid "Failed to acquire reencryption lock."
 msgstr "Zlyhalo získanie zámku prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:3468
+#: lib/luks2/luks2_reencrypt.c:3471
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Nedá sa pokračovať v prešifrovaní. Spustite najprv obnovu prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:3604
+#: lib/luks2/luks2_reencrypt.c:3607
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Veľkosť aktívneho zariadenia a požadovaná veľkosť prešifrovania sa nezhoduje."
 
-#: lib/luks2/luks2_reencrypt.c:3618
+#: lib/luks2/luks2_reencrypt.c:3621
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "V parametroch prešifrovania je požadovaná nedovolená veľkosť zariadenia."
 
-#: lib/luks2/luks2_reencrypt.c:3720
+#: lib/luks2/luks2_reencrypt.c:3723
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Prebieha prešifrovanie. Nedá sa vykonať obnova."
 
-#: lib/luks2/luks2_reencrypt.c:3741
+#: lib/luks2/luks2_reencrypt.c:3744
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Obnova prešifrovaním LUKS2 zlyhala."
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
 msgid "Failed to initialize reencryption device stack."
 msgstr "Zlyhala inicializácia zásobníka zariadenia k prešifrovaniu."
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3910
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "LUKS2 prešifrovanie je už inicializované v metadátach."
 
-#: lib/luks2/luks2_reencrypt.c:3915
+#: lib/luks2/luks2_reencrypt.c:3918
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Zlyhala inicializácia LUKS2 prešifrovania v metadátach."
 
-#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
-#: lib/luks2/luks2_reencrypt.c:4030
+#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
+#: lib/luks2/luks2_reencrypt.c:4033
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Prešifrovanie nie je podporované na DAX (trvalá pamäť) zariadeniach."
 
-#: lib/luks2/luks2_reencrypt.c:4059
+#: lib/luks2/luks2_reencrypt.c:4062
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Zlyhalo nastavenie segmentov zariadenia pre ďalšiu horúcu zónu prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4112
+#: lib/luks2/luks2_reencrypt.c:4115
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Zlyhal zápis odolných metadát prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4119
+#: lib/luks2/luks2_reencrypt.c:4122
 msgid "Decryption failed."
 msgstr "Dešifrovanie zlyhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4124
+#: lib/luks2/luks2_reencrypt.c:4127
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Zlyhal zápis oblasti s horúcou zónou začínajúci na %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4129
+#: lib/luks2/luks2_reencrypt.c:4132
 msgid "Failed to sync data."
 msgstr "Zlyhala synchronizácia údajov."
 
-#: lib/luks2/luks2_reencrypt.c:4137
+#: lib/luks2/luks2_reencrypt.c:4140
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Zlyhalo aktualizovanie metadát po dokončení aktuálnej horúcej zóny prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4226
+#: lib/luks2/luks2_reencrypt.c:4229
 msgid "Failed to write LUKS2 metadata."
 msgstr "Zlyhal zápis LUKS2 metadát."
 
-#: lib/luks2/luks2_reencrypt.c:4249
+#: lib/luks2/luks2_reencrypt.c:4252
 msgid "Failed to wipe unused data device area."
 msgstr "Zlyhalo vymazanie oblasti zariadenia s nepoužívanými údajmi."
 
-#: lib/luks2/luks2_reencrypt.c:4255
+#: lib/luks2/luks2_reencrypt.c:4258
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Zlyhalo odstránenie nepoužívaného (neviazaného) miesta pre kľúč %d."
 
-#: lib/luks2/luks2_reencrypt.c:4265
+#: lib/luks2/luks2_reencrypt.c:4268
 msgid "Failed to remove reencryption keyslot."
 msgstr "Zlyhalo odstránenie miesta pre kľúč prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4275
+#: lib/luks2/luks2_reencrypt.c:4278
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Fatálna chyba počas prešifrovania časti začínajúcej na %<PRIu64>, dlhej %<PRIu64> sektorov."
 
-#: lib/luks2/luks2_reencrypt.c:4279
+#: lib/luks2/luks2_reencrypt.c:4282
 msgid "Online reencryption failed."
 msgstr "Zlyhalo prešifrovanie za behu."
 
-#: lib/luks2/luks2_reencrypt.c:4284
+#: lib/luks2/luks2_reencrypt.c:4287
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Zariadenie neprebuďte pokiaľ ho manuálne nenahradíte s chybovým cieľom."
 
-#: lib/luks2/luks2_reencrypt.c:4336
+#: lib/luks2/luks2_reencrypt.c:4339
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Nedá sa pokračovať v prešifrovaní. Neočakávaný stav prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4342
+#: lib/luks2/luks2_reencrypt.c:4345
 msgid "Missing or invalid reencrypt context."
 msgstr "Chýbajúci alebo neplatný kontext prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
+#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
 msgid "Failed to update reencryption context."
 msgstr "Zlyhala aktualizácia kontextu prešifrovania."
 
@@ -2157,7 +2157,7 @@ msgstr "Parametre šifrovania miesta pre kľúč môžu byť nastavené len pre
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametre šifrovania miesta pre kľúč nie sú kompatibilné so šifrovaním miesta pre kľúč LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
+#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2185,7 +2185,7 @@ msgstr "VAROVANIE: Parameter --hash je ignorovaný v režime plain so zadaným s
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "VAROVANIE: Možnosť --keyfile-size je ignorovaná, veľkosť čítania je rovnaká ako veľkosť kľúča šifrovania.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2196,9 +2196,9 @@ msgstr "Skenovanie blkid zlyhalo pre %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Zaznamenané podpis(y) zariadenia na %s. Pokračovanie ďalej môže poškodiť existujúce údaje."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
-#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
-#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2247,7 +2247,7 @@ msgstr ""
 "ktorý povoľuje prístup k zašifrovaným oddielom bez hesla.\n"
 "Tento výpis by mal byť vždy uložený zašifrovaný na bezpečnom mieste."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2266,14 +2266,14 @@ msgstr "Zariadenie %s nie je platné FVAULT2 zariadenie."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nedá sa určiť veľkosť kľúča zväzku pre FVAULT2, prosím použite možnosť --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Zariadenie %s je stále aktívne a naplánované pre odložené odstránenie.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
-#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
-#: src/cryptsetup.c:3264
+#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
+#: src/cryptsetup.c:3262
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Zlyhalo nastavenie cesty k externým tokenom %s."
@@ -2282,59 +2282,59 @@ msgstr "Zlyhalo nastavenie cesty k externým tokenom %s."
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Zmena veľkosti aktívneho zariadenia vyžaduje kľúč zväzku vo zväzku kľúčov, ale možnosť --disable-keyring je nastavená."
 
-#: src/cryptsetup.c:1059
+#: src/cryptsetup.c:1057
 msgid "Benchmark interrupted."
 msgstr "Hodnotenie výkonu prerušené."
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1078
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     –\n"
 
-#: src/cryptsetup.c:1082
+#: src/cryptsetup.c:1080
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u iterácií za sekundu pre %zu-bitový kľúč\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1094
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s –\n"
 
-#: src/cryptsetup.c:1098
+#: src/cryptsetup.c:1096
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u iterácií, %5u pamäte, %1u paralelných vlákien (CPU) pre %zu-bitový kľúč (vyžadovaný čas %u ms)\n"
 
-#: src/cryptsetup.c:1122
+#: src/cryptsetup.c:1120
 msgid "Result of benchmark is not reliable."
 msgstr "Výsledok hodnotenia výkonu nie je spoľahlivý."
 
-#: src/cryptsetup.c:1172
+#: src/cryptsetup.c:1170
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testy sú len približné a používajú iba pamäť (žiadne vstupno-výstupné úložisko).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1197
+#: src/cryptsetup.c:1195
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algoritmus|      Kľúč |      Šifrovanie |    Dešifrovanie\n"
 
-#: src/cryptsetup.c:1205
+#: src/cryptsetup.c:1203
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Šifra %s (s %i bitovým kľúčom) nie je dostupná."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1222
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algoritmus|      Kľúč |      Šifrovanie |    Dešifrovanie\n"
 
-#: src/cryptsetup.c:1235
+#: src/cryptsetup.c:1233
 msgid "N/A"
 msgstr "–"
 
-#: src/cryptsetup.c:1260
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2342,27 +2342,27 @@ msgstr ""
 "Zaznamenané nechránené metadáta LUKS2 prešifrovania. Prosím overte, či je operácia prešifrovania žiadúca (pozri výstup luksDump)\n"
 "a pokračujte (aktualizujte metadáta) iba keď operáciu uznáte za žiadúcu."
 
-#: src/cryptsetup.c:1266
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Zadajte heslo na ochránenie a aktualizáciu metadát prešifrovania: "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Naozaj pokračovať s obnovou LUKS2 prešifrovania?"
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Zadajte heslo na overenie otlačku (digest) metadát prešifrovania: "
 
-#: src/cryptsetup.c:1321
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Zadajte heslo pre obnovu prešifrovania: "
 
-#: src/cryptsetup.c:1383
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Naozaj sa pokúsiť opraviť hlavičku LUKS zariadenia?"
 
-#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2370,7 +2370,7 @@ msgstr ""
 "\n"
 "Mazanie prerušené."
 
-#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2378,167 +2378,167 @@ msgstr ""
 "Mazanie zariadenia na inicializáciu kontrolného súčtu integrity.\n"
 "Môžete to prerušiť stlačením CTRL+c (zvyšok nevymazaného zariadenia bude obsahovať neplatný kontrolný súčet).\n"
 
-#: src/cryptsetup.c:1438 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Nedá sa deaktivovať dočasné zariadenie %s."
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Iba hardvérové šifrovanie OPAL nepodporuje --cipher a --key-size, možnosti sa ignorujú."
 
-#: src/cryptsetup.c:1499
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Možnosti integrity môžu byť použité len pre formát LUKS2."
 
-#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nepodporovaná možnosť veľkosti LUKS2 metadát."
 
-#: src/cryptsetup.c:1509
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL je podporovaný len pre formát LUKS2."
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Hardvérové inline príznaky sú podporované len pre LUKS2 formát."
 
-#: src/cryptsetup.c:1523
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Súbor s hlavičkou neexistuje, chcete ho vytvoriť?"
 
-#: src/cryptsetup.c:1531
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Nedá sa vytvoriť súbor s hlavičkou %s."
 
-#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Nebol rozpoznaný žiaden známy vzor špecifikácie integrity."
 
-#: src/cryptsetup.c:1559
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Nedá sa použiť zadaná veľkosť kľúča integrity."
 
-#: src/cryptsetup.c:1577
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Nedá sa použiť %s ako hlavička na disku."
 
-#: src/cryptsetup.c:1606 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Toto prepíše údaje na %s nenávratne."
 
-#: src/cryptsetup.c:1643
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "OPAL heslo administrátora nemôže byť prázdne."
 
-#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
-#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Zlyhalo nastavenie pbkdf parametrov."
 
-#: src/cryptsetup.c:1788
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Znížené odsadenie údajov je povolené len pre oddelenú hlavičku LUKS."
 
-#: src/cryptsetup.c:1795
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Kontajnerový súbor LUKS %s je príliš malý na aktiváciu, nie je tam žiadne zvyšné miesto pre údaje."
 
-#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nedá sa zistiť veľkosť kľúču zväzku pre LUKS bez miest pre kľúče, prosím použite voľbu --key-size."
 
-#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Zariadenie vyžaduje dve kľúče zväzku."
 
-#: src/cryptsetup.c:1891
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Niektoré zadané aktivačné parametre boli ignorované s len hardvérovým šifrovaním OPAL."
 
-#: src/cryptsetup.c:1896
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Zariadenie aktivované, ale nedajú sa urobiť príznaky trvalými."
 
-#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Miesto pre kľúč %d je vybrané pre vymazanie."
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Toto je posledné miesto pre kľúč. Zariadenie sa stane nepoužiteľné po odstránení tohto kľúča."
 
-#: src/cryptsetup.c:1989
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Zadajte akékoľvek zvyšné heslo: "
 
-#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operácia zrušená, miesto pre kľúč NEBOLO zmazané.\n"
 
-#: src/cryptsetup.c:2026
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Zadajte heslo, ktoré má byť vymazané: "
 
-#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
+#: src/cryptsetup.c:3253
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Zariadenie %s nie je platné LUKS2 zariadenie."
 
-#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Zadajte nové heslo k miestu pre kľúč: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Zadaj PIN k tokenu: "
 
-#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Zadaj PIN k tokenu %d: "
 
-#: src/cryptsetup.c:2210
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "VAROVANIE: Parameter --key-slot je použitý pre nové číslo miesta pre kľúč.\n"
 
-#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Zadajte akékoľvek existujúce heslo: "
 
-#: src/cryptsetup.c:2383
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Zadajte heslo, ktoré sa má zmeniť: "
 
-#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Zadajte nové heslo: "
 
-#: src/cryptsetup.c:2449
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Zadajte heslo k miestu pre kľúč, ktoré má byť konvertované: "
 
-#: src/cryptsetup.c:2473
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Iba jeden argument so zariadením pre operáciu isLuks je podporovaný."
 
-#: src/cryptsetup.c:2578
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Miesto pre kľúč %d neobsahuje neviazaný kľúč."
 
-#: src/cryptsetup.c:2583
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2546,52 +2546,52 @@ msgstr ""
 "Výpis hlavičky s neviazaným kľúčom je citlivý údaj.\n"
 "Tento výpis by mal byť uložený šifrovaný na bezpečnom mieste."
 
-#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s nie je názov aktívneho zariadenia %s."
 
-#: src/cryptsetup.c:2709
+#: src/cryptsetup.c:2707
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s nie je názov aktívneho LUKS zariadenia alebo chýba hlavička."
 
-#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
+#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
 msgid "Option --header-backup-file is required."
 msgstr "Možnosť --header-backup-file je vyžadovaná."
 
-#: src/cryptsetup.c:2836
+#: src/cryptsetup.c:2834
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s nie je zariadenie spravované cryptsetup-om."
 
-#: src/cryptsetup.c:2847
+#: src/cryptsetup.c:2845
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Obnovenie nie je podporované pre typ zariadenia %s"
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2895
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Nerozpoznaný typ zariadenia %s v metadátach."
 
-#: src/cryptsetup.c:2899
+#: src/cryptsetup.c:2897
 msgid "Command requires device and mapped name as arguments."
 msgstr "Príkaz požaduje zariadenie a mapovaný názov ako argumenty."
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL PSID: "
 msgstr "Zadajte OPAL PSID: "
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL Admin password: "
 msgstr "Zadajte OPAL heslo administrátora: "
 
-#: src/cryptsetup.c:2925
+#: src/cryptsetup.c:2923
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "VAROVANIE: CELÝ disk bude obnovený do továrenských nastavení a všetky údaje budú stratené! Pokračovať?"
 
-#: src/cryptsetup.c:2968
+#: src/cryptsetup.c:2966
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2600,363 +2600,363 @@ msgstr ""
 "Táto operácia vymaže všetky miesta s kľúčmi na zariadení %s.\n"
 "Zariadenie sa stane nepoužiteľné po tejto operácií."
 
-#: src/cryptsetup.c:2975
+#: src/cryptsetup.c:2973
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operácia zrušená, miesta s kľúčmi NEBOLI vymazané.\n"
 
-#: src/cryptsetup.c:3014
+#: src/cryptsetup.c:3012
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Neplatný typ LUKS, iba luks1 a luks2 sú podporované."
 
-#: src/cryptsetup.c:3030
+#: src/cryptsetup.c:3028
 #, c-format
 msgid "Device is already %s type."
 msgstr "Zariadenie je už typom %s."
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3035
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Táto operácia premení %s na formát %s.\n"
 
-#: src/cryptsetup.c:3040
+#: src/cryptsetup.c:3038
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operácia zrušená, zariadenie NEBOLO premenené.\n"
 
-#: src/cryptsetup.c:3080
+#: src/cryptsetup.c:3078
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Možnosť --priority, --label alebo --subsystem chýba."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d je neplatný."
 
-#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
+#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d je používaný."
 
-#: src/cryptsetup.c:3129
+#: src/cryptsetup.c:3127
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Zlyhalo pridanie tokenu luks2-keyring %d."
 
-#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
+#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Zlyhalo priradenie tokenu %d k miestu pre kľúč %d."
 
-#: src/cryptsetup.c:3157
+#: src/cryptsetup.c:3155
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d sa nepoužíva."
 
-#: src/cryptsetup.c:3194
+#: src/cryptsetup.c:3192
 msgid "Failed to import token from file."
 msgstr "Zlyhalo importovanie tokenu zo súboru."
 
-#: src/cryptsetup.c:3219
+#: src/cryptsetup.c:3217
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Zlyhalo získanie tokenu %d pre export."
 
-#: src/cryptsetup.c:3232
+#: src/cryptsetup.c:3230
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d nie je priradený k miestu pre kľúč %d."
 
-#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
+#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Zlyhalo zrušenie priradenia tokenu %d z miesta pre kľúč %d."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3298
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Možnosť --tcrypt-hidden, --tcrypt-system alebo --tcrypt-backup je podporovaná len pre TCRYPT zariadenie."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3301
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Možnosť --veracrypt alebo --disable-veracrypt je podporovaná len pre zariadenie typu TCRYPT."
 
-#: src/cryptsetup.c:3306
+#: src/cryptsetup.c:3304
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Možnosť --veracrypt-pim je podporovaná len pre zariadenia kompatibilné s VeraCrypt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3308
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Možnosť --veracrypt-query-pim je podporovaná len pre zariadenia kompatibilné s VeraCrypt."
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3310
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Možnosti --veracrypt-pim a --veracrypt-query-pim sa vzájomne vylučujú."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3319
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Možnosť --persistent nie je povolené s --test-passphrase."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3322
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Možnosti --refresh a --test-passphrase sa navzájom vylučujú."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3325
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Možnosť --shared je povolená len pre otvorenie zariadenia plain."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3328
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Možnosť --skip je podporovaná len pre otvorenie zariadení plain a loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3331
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Možnosť --offset s akciou otvorenia je podporovaná len pre zariadenia plain a loopaes."
 
-#: src/cryptsetup.c:3336
+#: src/cryptsetup.c:3334
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Možnosť --tcrypt-hidden nemôže byť kombinovaná s --allow-discards."
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3338
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Možnosť veľkosti sektora s akciou otvorenia je podporovaná len pre zariadenia plain."
 
-#: src/cryptsetup.c:3344
+#: src/cryptsetup.c:3342
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Možnosť veľkých IV sektorov je podporovaná len pre otváranie zariadenia typu plain s veľkosťou sektora väčšou než 512 bajtov."
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3347
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Možnosť --test-passphrase je povolená len pre otvorenie LUKS, TCRYPT, BITLK a FVAULT2 zariadení."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
+#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Možnosť --device-size a --size nemôžu byť kombinované."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3353
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Možnosť --unbound je povolená len pre otvorenie zariadení luks."
 
-#: src/cryptsetup.c:3358
+#: src/cryptsetup.c:3356
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Možnosť --unbound nemôže byť použitá bez --test-passphrase."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3360
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Možnosť --volume-key-keyring nemôže byť kombinovaná s --hash alebo --volume-key-file."
 
-#: src/cryptsetup.c:3365
+#: src/cryptsetup.c:3363
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Obe možnosti --volume-key-file musia byť zadané spolu s príslušnými možnosťami --key-size."
 
-#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Možnosti --cancal-deferred a --deferred nemôžu byť použité naraz."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3388
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Možnosť --active-name možno nastaviť len pre zariadenie LUKS2."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3391
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Možnosti --active-name a --force-offline-reencrypt nemožno kombinovať."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3394
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Možnosti --new-volume-key-file a --keep-key nemožno kombinovať."
 
-#: src/cryptsetup.c:3399
+#: src/cryptsetup.c:3397
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Možnosti --new-volume-key-keyring a --keep-key nemožno kombinovať."
 
-#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
+#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
 msgid "Keyslot specification is required."
 msgstr "Vyžaduje sa zadanie miesta pre kľúč."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3413
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Možnosti --align-payload a --offset nemožno kombinovať."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3416
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Možnosť --integrity-no-wipe môže byť použitá len pre formátovanie s rozšírením integrity."
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3419
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Iba jedna z možností --use-[u]random je povolená."
 
-#: src/cryptsetup.c:3429
+#: src/cryptsetup.c:3427
 msgid "Key size is required with --unbound option."
 msgstr "Veľkosť kľúča sa vyžaduje s možnosťou --unbound."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3447
 msgid "Invalid token action."
 msgstr "Neplatná operácia s tokenom."
 
-#: src/cryptsetup.c:3452
+#: src/cryptsetup.c:3450
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parameter --key-description je povinný pre pridanie tokenu."
 
-#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
+#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Akcia vyžaduje špecifický token. Použite --token-id parameter."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3458
 msgid "Option --unbound is valid only with token add action."
 msgstr "Možnosť --unbound je platná len pri pridávaní tokenu."
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3460
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Možnosti --key-slot a --unbound nemožno kombinovať."
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3465
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Akcia vyžaduje špecifický token. Použite --key-slot parameter."
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3481
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<zariadenie> [--type <typ>] [<názov>]"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "otvorí zariadenie ako <názov>"
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<názov>"
 
-#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "zatvorí zariadenie (odstráni mapovanie)"
 
-#: src/cryptsetup.c:3485 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "zmení veľkosť aktívneho zariadenia"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3484
 msgid "show device status"
 msgstr "zobrazí stav zariadenia"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <šifra>]"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "benchmark cipher"
 msgstr "zhodnotí výkon šifry"
 
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
-#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
+#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
+#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
+#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
+#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
 msgid "<device>"
 msgstr "<zariadenie>"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3486
 msgid "try to repair on-disk metadata"
 msgstr "pokúsi sa opraviť metadáta uložené na disku"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3487
 msgid "reencrypt LUKS2 device"
 msgstr "prešifruje zariadenie LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3488
 msgid "erase all keyslots (remove encryption key)"
 msgstr "vymaže všetky miesta s kľúčmi (odstráni šifrovací kľúč)"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3489
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "prevedie LUKS z/na LUKS2 formát(u)"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490
 msgid "set permanent configuration options for LUKS2"
 msgstr "nastaví trvalé možnosti konfigurácie pre LUKS2"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
 msgid "<device> [<new key file>]"
 msgstr "<zariadenie> [<nový súbor s kľúčom>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3491
 msgid "formats a LUKS device"
 msgstr "naformátuje zariadenie LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3492
 msgid "add key to LUKS device"
 msgstr "pridá kľúč do zariadenia LUKS"
 
-#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
 msgid "<device> [<key file>]"
 msgstr "<zariadenie> [<súbor s kľúčom>]"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3493
 msgid "removes supplied key or key file from LUKS device"
 msgstr "odstráni poskytnutý kľúč alebo súbor s kľúčom zo zariadenia LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3494
 msgid "changes supplied key or key file of LUKS device"
 msgstr "zmení poskytnutý kľúč alebo súbor s kľúčom na zariadení LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3495
 msgid "converts a key to new pbkdf parameters"
 msgstr "prevedie kľúč na nové parametre pbkdf"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "<device> <key slot>"
 msgstr "<zariadenie> <miesto pre kľúč>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "vymaže kľúč s číslom <miesto pre kľúč> zo zariadenia LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3497
 msgid "print UUID of LUKS device"
 msgstr "vypíše UUID zariadení LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3498
 msgid "tests <device> for LUKS partition header"
 msgstr "otestuje <zariadenie> na hlavičku diskového oddielu LUKS"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3499
 msgid "dump LUKS partition information"
 msgstr "vypíše informácie o oddiely LUKS"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3500
 msgid "dump TCRYPT device information"
 msgstr "vypíše informácie o zariadení TCRYPT"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3501
 msgid "dump BITLK device information"
 msgstr "vypíše informácie o zariadení BITLK"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3502
 msgid "dump FVAULT2 device information"
 msgstr "vypíše informácie o zariadení FVAULT2"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3503
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Pozastaví zariadenie LUKS a vymaže kľúč (všetky vstupno-výstupné operácie budú zmrazené)"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3504
 msgid "Resume suspended LUKS device"
 msgstr "Prebudí pozastavené zariadenie LUKS"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3505
 msgid "Backup LUKS device header and keyslots"
 msgstr "Zálohuje hlavičku a miesta s kľúčmi zariadenia LUKS"
 
-#: src/cryptsetup.c:3508
+#: src/cryptsetup.c:3506
 msgid "Restore LUKS device header and keyslots"
 msgstr "Obnoví hlavičku a miesta s kľúčmi zariadenia LUKS"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <zariadenie>"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipuluje s tokenmi LUKS2"
 
-#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2964,7 +2964,7 @@ msgstr ""
 "\n"
 "<akcia> je jedna z:\n"
 
-#: src/cryptsetup.c:3534
+#: src/cryptsetup.c:3532
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2976,7 +2976,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3538
+#: src/cryptsetup.c:3536
 #, c-format
 msgid ""
 "\n"
@@ -2991,7 +2991,7 @@ msgstr ""
 "<miesto pre kľúč> je číslo miesta pre kľúč LUKS na upravovanie\n"
 "<súbor s kľúčom> je voliteľný súbor s kľúčom pre nový kľúč pre akciu luksAddKey\n"
 
-#: src/cryptsetup.c:3545
+#: src/cryptsetup.c:3543
 #, c-format
 msgid ""
 "\n"
@@ -3000,7 +3000,7 @@ msgstr ""
 "\n"
 "Predvolené zakompilovaný formát metadát je %s (pre akciu luksFormat).\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3548
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3008,12 +3008,12 @@ msgstr ""
 "\n"
 "LUKS2 podpora zásuvného modulu externého tokenu je zapnutá.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3549
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Cesta k zásuvnému modulu externého tokenu LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3553
+#: src/cryptsetup.c:3551
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3021,7 +3021,7 @@ msgstr ""
 "\n"
 "LUKS2 podpora zásuvného modulu externého tokenu je vypnutá.\n"
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3555
 #, c-format
 msgid ""
 "\n"
@@ -3038,7 +3038,7 @@ msgstr ""
 "Predvolené PBKDF pre LUKS2: %s\n"
 "\tČas iterácie: %d, Pamäť potrebná: %d kB, Paralelné vlákna: %d\n"
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3566
 #, c-format
 msgid ""
 "\n"
@@ -3053,122 +3053,122 @@ msgstr ""
 "\tplain: %s, Kľúč: %d bitov, Hashovanie hesla: %s\n"
 "\tLUKS: %s, Kľúč: %d bitov, Hashovanie LUKS hlavičky: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3577
+#: src/cryptsetup.c:3575
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Predvolená veľkosť kľúča s režimom XTS (dva interné kľúče) bude zdvojnásobená.\n"
 
-#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: požaduje %s ako argumenty"
 
-#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Miesto pre kľúč je neplatné."
 
-#: src/cryptsetup.c:3663
+#: src/cryptsetup.c:3661
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Veľkosť zariadenie musí byť násobkom 512-bajtového sektora."
 
-#: src/cryptsetup.c:3668
+#: src/cryptsetup.c:3666
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Zadaná neplatná maximálna veľkosť horúcej zóny prešifrovania."
 
-#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
+#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Veľkosť kľúča musí byť násobkom 8 bitov"
 
-#: src/cryptsetup.c:3689
+#: src/cryptsetup.c:3687
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Najviac dve veľkosti kľúčov môžu byť zadané."
 
-#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
+#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Najviac %d špecifikácií kľúča zväzku môže byť zadaných."
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3739
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Najviac %d zväzkov kľúčov môže byť zadaných."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3748
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Maximálna veľkosť zmenšenia zariadenia je 1 GiB."
 
-#: src/cryptsetup.c:3753
+#: src/cryptsetup.c:3751
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Veľkosť zmenšenia musí byť násobkom 512-bajtového sektora."
 
-#: src/cryptsetup.c:3770
+#: src/cryptsetup.c:3768
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Možnosť --priority môže byť len ignore/normal/prefer."
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Zobrazí túto pomocnú správu"
 
-#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Zobrazí stručný návod na použitie"
 
-#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Vypíše verziu balíka"
 
-#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Možnosti pomoci:"
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[MOŽNOSŤ...] <akcia> <špecifikácia akcie>"
 
-#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Chýba argument <akcia>."
 
-#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Neznáma akcia."
 
-#: src/cryptsetup.c:3931
+#: src/cryptsetup.c:3929
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Možnosť --key-file má prednosť pred zadaným argumentom súboru s kľúčom."
 
-#: src/cryptsetup.c:3937
+#: src/cryptsetup.c:3935
 msgid "Only one --key-file argument is allowed."
 msgstr "Iba jeden argument --key-file je dovolený."
 
-#: src/cryptsetup.c:3942
+#: src/cryptsetup.c:3940
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funkcia na odvodenie kľúča na základe hesla (PBKDF) môže byť iba pbkdf2 alebo argon2i/argon2id."
 
-#: src/cryptsetup.c:3947
+#: src/cryptsetup.c:3945
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Vynútené iterácie PBKDF nemôžu byť kombinované s možnosťou času iterácie."
 
-#: src/cryptsetup.c:3952
+#: src/cryptsetup.c:3950
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Nedá sa prepojiť kľúč zväzku na zväzok kľúčov, keď je zväzok kľúčov vypnutý."
 
-#: src/cryptsetup.c:3957
+#: src/cryptsetup.c:3955
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Nedá sa použiť popis kľúča zo zväzku kľúčov, keď je zväzok kľúčov vypnutý."
 
-#: src/cryptsetup.c:3962
+#: src/cryptsetup.c:3960
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Inline integrita musí byť použitá spolu s možnosťou --integrity."
 
-#: src/cryptsetup.c:3973
+#: src/cryptsetup.c:3971
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Možnosti --keyslot-cipher a --keyslot-key-size musia byť použité spolu."
 
-#: src/cryptsetup.c:3981
+#: src/cryptsetup.c:3979
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Žiadna akcia sa nevykonala. Zavolané s možnosťou --test-args.\n"
 
-#: src/cryptsetup.c:3994
+#: src/cryptsetup.c:3992
 msgid "Cannot disable metadata locking."
 msgstr "Nedá sa vypnúť zamykanie metadát."
 
@@ -3233,7 +3233,7 @@ msgstr "Príkaz vyžaduje <koreňový_hash> alebo možnosť --root-hash-file ako
 msgid "<data_device> <hash_device>"
 msgstr "<zariadenie_s_údajmi> <hash_zariadenie>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:485 src/integritysetup.c:553
 msgid "format device"
 msgstr "formátuje zariadenie"
 
@@ -3249,7 +3249,7 @@ msgstr "overí zariadenie"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<zariadenie_s_údajmi> <názov> <hash_zariadenie> [<koreňový_hash>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:489 src/integritysetup.c:556
 msgid "show active device status"
 msgstr "zobrazí stav aktívneho zariadenia"
 
@@ -3257,7 +3257,7 @@ msgstr "zobrazí stav aktívneho zariadenia"
 msgid "<hash_device>"
 msgstr "<hash_zariadenie>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:490 src/integritysetup.c:557
 msgid "show on-disk information"
 msgstr "zobrazí informácie na disku"
 
@@ -3317,24 +3317,24 @@ msgstr "Naformátované s veľkosťou príznaku %u %s, interná integrita %s.\n"
 msgid " (inline hw tags)"
 msgstr " (hardvérové inline príznaky)"
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:303
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Nastavenie príznaku prepočítania nie je podporované, môžete zvážiť použitie --wipe namiesto toho."
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:380 src/integritysetup.c:540
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Zariadenie %s nie je platné INTEGRITY zariadenie."
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:553 src/integritysetup.c:557
 msgid "<integrity_device>"
 msgstr "<zariadenie_integrity>"
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:554
 msgid "<integrity_device> <name>"
 msgstr "<zariadenie_integrity> <názov>"
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:577
 #, c-format
 msgid ""
 "\n"
@@ -3345,7 +3345,7 @@ msgstr ""
 "<názov> je zariadenie na vytvorenie pod %s\n"
 "<zariadenie_integrity> je zariadenie obsahujúce údaje s príznakmi integrity\n"
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:582
 #, c-format
 msgid ""
 "\n"
@@ -3358,48 +3358,48 @@ msgstr ""
 "\tAlgoritmus kontrolného súčtu: %s\n"
 "\tMaximálna veľkosť súboru s kľúčom: %d kB\n"
 
-#: src/integritysetup.c:636
+#: src/integritysetup.c:639
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Neplatná veľkosť --%s. Maximum je %u bajtov."
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:742
 msgid "Both key file and key size options must be specified."
 msgstr "Obe možnosti musia byť zadané, súbor s kľúčom aj veľkosť kľúča."
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:746
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Obe možnosti musia byť zadané, súbor s kľúčom pre integritu denníka aj veľkosť kľúča."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:749
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Algoritmus integrity denníka musí byť zadaný, keď sa používa kľúč pre integritu denníka."
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:753
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Obe možnosti musia byť zadané, súbor s kľúčom na šifrovanie denníka aj veľkosť kľúča."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:756
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Algoritmus šifrovania denníka musí byť zadaný, keď sa používa kľúč na šifrovanie denníka."
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:760
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Možnosti režimu obnovenia a bitmapy sa vzájomne vylučujú."
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:767
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Možnosti denníka nemôžu byť použité v bitmapovom režime."
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:772
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Možnosti bitmapy môžu byť použité len v bitmapovom režime."
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:778
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Režim inline nemôže byť kombinovaný s možnosťami režimu denníka alebo bitmapy."
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:782
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Režim inline nemôže byť kombinovaný s oddeleným zariadením s údajmi."
 
@@ -4356,6 +4356,10 @@ msgstr "Pre hostiteľa nie je povolená autentifikačný metóda s verejným kľ
 msgid "Public key authentication error: "
 msgstr "Chyba autentifikácie s verejným kľúčom: "
 
+#, c-format
+#~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
+#~ msgstr "Zlyhalo čítanie alebo overenie kópie metadát BITLK FVE #%d z %s."
+
 #~ msgid "Activation of BITLK device with clear key protection is not supported."
 #~ msgstr "Aktivácia zariadenia BITLK s ochranou čistého kľúča nie je podporovaná."
 

From f5b28f43d5a4da756275f64cc7f46eb804f88bbd Mon Sep 17 00:00:00 2001
From: Yuri Chornoivan <yurchor@ukr.net>
Date: Tue, 31 Mar 2026 11:31:32 +0200
Subject: [PATCH 057/244] po: update uk.po (from translationproject.org)

---
 po/uk.po | 734 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 369 insertions(+), 365 deletions(-)

diff --git a/po/uk.po b/po/uk.po
index 66918f767..59e284406 100644
--- a/po/uk.po
+++ b/po/uk.po
@@ -2,13 +2,13 @@
 # Copyright (C) 2012 Free Software Foundation, Inc.
 # This file is put in the public domain.
 #
-# Yuri Chornoivan <yurchor@ukr.net>, 2012-2023, 2024, 2025.
+# Yuri Chornoivan <yurchor@ukr.net>, 2012-2023, 2024, 2025, 2026.
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.2-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-12-12 18:51+0100\n"
-"PO-Revision-Date: 2025-12-13 14:52+0200\n"
+"POT-Creation-Date: 2026-03-30 14:18+0200\n"
+"PO-Revision-Date: 2026-03-30 18:18+0300\n"
 "Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
 "Language-Team: Ukrainian <trans-uk@lists.fedoraproject.org>\n"
 "Language: uk\n"
@@ -186,8 +186,8 @@ msgstr "Розмір пристрою не вирівняно за розмір
 msgid "Header detected but device %s is too small."
 msgstr "Виявлено заголовок, але об’єм пристрою %s є надто малим."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
-#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
+#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
+#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
 msgid "This operation is not supported for this device type."
 msgstr "Підтримки цієї дії для цього типу пристроїв не передбачено."
 
@@ -200,10 +200,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Не вдалося відкотити метадані LUKS2 у пам'яті."
 
 #: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
-#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
-#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
-#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
+#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -220,7 +220,7 @@ msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Не виявлено жодного відомого зразка специфікації шифрування для активного пристрою %s."
 
 #: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5805
+#: lib/setup.c:3783 lib/setup.c:5816
 #, c-format
 msgid "Device %s is not active."
 msgstr "Пристрій %s є неактивним."
@@ -247,7 +247,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Підтримки пристрою від'єднаних метаданих для цього типу шифрування не передбачено."
 
 #: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
 msgid "Unsupported encryption sector size."
 msgstr "Непідтримуваний розмір сектора шифрування."
 
@@ -300,9 +300,9 @@ msgstr "Шифрування  %s-%s (розмір ключа — %zd бітів)
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "Увага: спроба активувати пристрій завершиться невдало, у dm-crypt не передбачено підтримки для вказаного розміру сектора шифрування.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
+#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4494
+#: lib/luks2/luks2_reencrypt.c:4497
 #, c-format
 msgid "Device %s is too small."
 msgstr "Об’єм пристрою %s є надто малим."
@@ -460,7 +460,7 @@ msgid "Unsupported parameters on device %s."
 msgstr "Непідтримувані параметри на пристрої %s."
 
 #: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
+#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Невідповідність параметрів на пристрої %s."
@@ -470,7 +470,7 @@ msgid "Crypt devices mismatch."
 msgstr "Невідповідність пристроїв шифрування."
 
 #: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
+#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Не вдалося перезавантажити пристрій %s."
@@ -482,8 +482,8 @@ msgid "Failed to suspend device %s."
 msgstr "Не вдалося приспати пристрій %s."
 
 #: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
-#: lib/luks2/luks2_reencrypt.c:4237
+#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
+#: lib/luks2/luks2_reencrypt.c:4240
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Не вдалося відновити роботу пристрою %s."
@@ -565,187 +565,187 @@ msgstr "Помилка під час спроби пробудити прист
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Не вдалося скасувати прив'язку ключа тому до вказаного користувачем сховища ключів."
 
-#: lib/setup.c:4423 lib/setup.c:5592
+#: lib/setup.c:4423 lib/setup.c:5603
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Не вдалося пов'язати ключ тому із визначеним користувачем сховищем ключів."
 
-#: lib/setup.c:4521 src/cryptsetup.c:2723
+#: lib/setup.c:4522 src/cryptsetup.c:2721
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Том %s не приспано."
 
-#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
-#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
+#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
+#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
 #: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Ключ тому не відповідає тому."
 
-#: lib/setup.c:4776
+#: lib/setup.c:4787
 msgid "Failed to swap new key slot."
 msgstr "Не вдалося зарезервувати новий слот ключа."
 
-#: lib/setup.c:4874
+#: lib/setup.c:4885
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Слот ключа %d є некоректним."
 
-#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
-#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
+#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Слот ключа %d не є активним."
 
-#: lib/setup.c:4899
+#: lib/setup.c:4910
 msgid "Device header overlaps with data area."
 msgstr "Заголовок пристрою перекривається із областю даних."
 
-#: lib/setup.c:5120
+#: lib/setup.c:5131
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Виконуємо повторне шифрування. Не можна активувати пристрій."
 
-#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3722
+#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
+#: lib/luks2/luks2_reencrypt.c:3725
 msgid "Failed to get reencryption lock."
 msgstr "Не вдалося отримати стан блокування для повторного шифрування."
 
-#: lib/setup.c:5144
+#: lib/setup.c:5155
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Не вдалося виконати відновлення даних повторного шифрування LUKS2 з використанням ключів тому."
 
-#: lib/setup.c:5280
+#: lib/setup.c:5291
 #, c-format
 msgid "Device %s already exists."
 msgstr "Пристрій %s вже існує."
 
-#: lib/setup.c:5287
+#: lib/setup.c:5298
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Неможливо скористатися пристроєм %s, некоректна назва або пристрій усе ще використовується."
 
-#: lib/setup.c:5299
+#: lib/setup.c:5310
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Ключі повторного шифрування тому не відповідають тому."
 
-#: lib/setup.c:5316
+#: lib/setup.c:5327
 msgid "Incorrect volume key specified for plain device."
 msgstr "Для пристрою зі звичайним шифруванням вказано помилковий ключ тому."
 
-#: lib/setup.c:5342 lib/setup.c:5403
+#: lib/setup.c:5353 lib/setup.c:5414
 msgid "Device type is not properly initialized."
 msgstr "Тип пристрою не ініціалізовано належним чином."
 
-#: lib/setup.c:5441
+#: lib/setup.c:5452
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "У ядрі не передбачено підтримки сховища ключів ядра."
 
-#: lib/setup.c:5445
+#: lib/setup.c:5456
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Немає сховища ключів ядра: це сховище потрібне для передавання підпису ядру."
 
-#: lib/setup.c:5500
+#: lib/setup.c:5511
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Не можна використовувати ключ сховища ключів %s."
 
-#: lib/setup.c:5713
+#: lib/setup.c:5724
 msgid "Incorrect root hash specified for verity device."
 msgstr "Для пристрою перевірки вказано помилковий кореневий хеш."
 
-#: lib/setup.c:5754 lib/setup.c:5779
+#: lib/setup.c:5765 lib/setup.c:5790
 msgid "OPAL does not support deferred deactivation."
 msgstr "В OPAL не передбачено підтримки відкладеної деактивації."
 
-#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Пристрій %s все ще використовується."
 
-#: lib/setup.c:5787
+#: lib/setup.c:5798
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Не вдалося скасувати відкладене вилучення з пристрою %s."
 
-#: lib/setup.c:5809
+#: lib/setup.c:5820
 #, c-format
 msgid "Invalid device %s."
 msgstr "Некоректний пристрій %s."
 
-#: lib/setup.c:5956
+#: lib/setup.c:5967
 msgid "Volume key buffer too small."
 msgstr "Буфер ключів тому є занадто малим."
 
-#: lib/setup.c:5967
+#: lib/setup.c:5978
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Неможливо отримати ключ тому для пристрою із шифруванням LUKS2."
 
-#: lib/setup.c:5976
+#: lib/setup.c:5987
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Неможливо отримати ключ тому для пристрою із шифруванням LUKS1."
 
-#: lib/setup.c:5990
+#: lib/setup.c:6001
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Неможливо отримати ключ тому для пристрою зі звичайним шифруванням."
 
-#: lib/setup.c:5998
+#: lib/setup.c:6009
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Не вдалося отримати кореневий хеш для пристрою VERITY."
 
-#: lib/setup.c:6007
+#: lib/setup.c:6018
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Неможливо отримати ключ тому для пристрою BITLK."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6023
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Неможливо отримати ключ тому для пристрою FVAULT2."
 
-#: lib/setup.c:6014
+#: lib/setup.c:6025
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Підтримки цієї дії для шифрованого пристрою %s не передбачено."
 
-#: lib/setup.c:6199 lib/setup.c:6210
+#: lib/setup.c:6210 lib/setup.c:6221
 msgid "Dump operation is not supported for this device type."
 msgstr "Підтримки дії зі створення дампу для цього типу пристроїв не передбачено."
 
-#: lib/setup.c:6590
+#: lib/setup.c:6601
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Зсув у даних не є кратним до %u байтів."
 
-#: lib/setup.c:6898
+#: lib/setup.c:6909
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Не можна перетворити пристрій %s, який перебуває у користуванні."
 
-#: lib/setup.c:7206 lib/setup.c:7350
+#: lib/setup.c:7217 lib/setup.c:7361
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Не вдалося прив'язати слот ключа %u як новий ключ тому."
 
-#: lib/setup.c:7230
+#: lib/setup.c:7241
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Не вдалося ініціалізувати типові параметри слоту ключів LUKS2."
 
-#: lib/setup.c:7236
+#: lib/setup.c:7247
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Не вдалося прив'язати слот ключа %d до контрольної суми."
 
-#: lib/setup.c:7467
+#: lib/setup.c:7478
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Не вдалося додати слот ключа, всі слоти вимкнено і не вказано ключа тому."
 
-#: lib/setup.c:7540 lib/verity/verity.c:333
+#: lib/setup.c:7551 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Не вдалося завантажити ключ до сховища ключів ядра."
 
-#: lib/setup.c:7731
+#: lib/setup.c:7742
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Не вдалося знайти сховище ключів, яке описано «%s»."
 
-#: lib/setup.c:7796
+#: lib/setup.c:7807
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Не вдалося створити загальне блокування серіалізації доступу до пам'яті."
 
@@ -802,40 +802,45 @@ msgstr "Пристрій %s є сумісним."
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "Ігноруємо фіктивний розмір optimal-io для пристрою даних (%u байтів)."
 
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "Не можна наростити %s до %<PRIu64> байтів (%s)."
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "Обсяг пристрою %s є надто малим. Потрібно принаймні %<PRIu64> байтів."
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "Не можна використовувати пристрій %s, оскільки його вже використано (призначено або змонтовано)."
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "Не можна скористатися пристроєм %s, недостатні права доступу."
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "Не вдалося отримати дані щодо пристрою %s."
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "Не можна використовувати петльовий пристрій, програму запущено не від імені адміністративного користувача (root)."
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "Спроба долучення петльового пристрою зазнала невдачі (потрібен петльовий пристрій з встановленим прапорцем автоматичного спорожнення)."
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "Бажана точка відступу перебуває за межами об’єму пристрою %s."
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "Об’єм пристрою %s є нульовим."
@@ -978,9 +983,9 @@ msgstr "Помилка введення-виведення під час шиф
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
 #: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
 #: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
@@ -1125,7 +1130,7 @@ msgstr "Режим шифрування LUKS %s є некоректним."
 msgid "LUKS hash %s is invalid."
 msgstr "Хеш-сума LUKS %s є некоректною."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "У заголовку LUKS не виявлено жодних проблем."
 
@@ -1218,11 +1223,11 @@ msgstr "Перевищено максимальну можливу довжин
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "Засіб створення хешів PBKDF2 за алгоритмом %s недоступний, пропускаємо."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
+#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
 msgid "Required kernel crypto interface not available."
 msgstr "Потрібний для роботи інтерфейс ядра для шифрування недоступний."
 
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
+#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
 msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr "Переконайтеся, що завантажено модуль ядра algif_skcipher."
 
@@ -1293,11 +1298,6 @@ msgstr "Непідтримуваний розмір сектора %<PRIu16>."
 msgid "Failed to read BITLK header from %s."
 msgstr "Не вдалося прочитати заголовок BITLK з %s."
 
-#: lib/bitlk/bitlk.c:593
-#, c-format
-msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
-msgstr "Не вдалося прочитати або перевірити копію метаданих FVE BITLK %d з %s."
-
 #: lib/bitlk/bitlk.c:603
 #, c-format
 msgid "Failed to read and validate BITLK FVE metadata from %s."
@@ -1373,42 +1373,42 @@ msgstr "Підтримки цієї дії не передбачено."
 msgid "Unexpected key data size."
 msgstr "Неочікуваний розмір даних ключа."
 
-#: lib/bitlk/bitlk.c:1431
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Цей пристрій BITLK перебуває у непідтримуваному стані — його неможливо активувати."
 
-#: lib/bitlk/bitlk.c:1436
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Пристрої BITLK типу «%s» неможливо активувати."
 
-#: lib/bitlk/bitlk.c:1475
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "УВАГА: розмір тому BitLocker %<PRIu64> не відповідає розміру базового пристрою %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1602
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Не вдалося активувати пристрій — у dm-crypt ядра немає підтримки BITLK IV."
 
-#: lib/bitlk/bitlk.c:1606
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Не вдалося активувати пристрій — у dm-crypt ядра немає підтримки дифузера Elephant BITLK."
 
-#: lib/bitlk/bitlk.c:1610
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Не вдалося активувати пристрій — у dm-crypt ядра немає підтримки великого розміру секторів."
 
-#: lib/bitlk/bitlk.c:1614
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Не вдалося активувати пристрій — немає модуля ядра dm-zero."
 
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "Не вдалося прочитати %u байтів заголовка тому."
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "Непідтримувана версія FVAULT2 %<PRIu16>."
@@ -1485,23 +1485,23 @@ msgstr "Помилка під час перевірки за позицією %<
 msgid "Hash area overflow."
 msgstr "Переповнення області хешу."
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "Не вдалося перевірити область даних."
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "Не вдалося перевірити кореневий хеш."
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "Під час створення області хешу сталася помилка введення або виведення даних."
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "Не вдалося створити область хешу."
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "Попередження: ядро не зможе задіяти пристрій, якщо розмір блоку перевищуватиме розмір сторінки (%u)."
@@ -1556,19 +1556,19 @@ msgstr "Не вдалося визначити розмір для пристр
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Виявлено несумісні метадані dm-integrity ядра (версія %u) у %s."
 
-#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "У ядрі не передбачено підтримки прив'язки dm-integrity."
 
-#: lib/integrity/integrity.c:310
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "У ядрі не передбачено підтримки вирівнювання фіксованих метаданих dm-integrity."
 
-#: lib/integrity/integrity.c:319
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Ядром відмовлено у активації небезпечного параметра повторного обчислення (див. застарілі параметри активації, щоб скористатися обчисленням попри це)."
 
-#: lib/integrity/integrity.c:325
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "У ядрі не передбачено підтримки вбудованого режиму dm-integrity."
 
@@ -1717,7 +1717,7 @@ msgstr "Базовий пристрій dm-integrity із неочікувани
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Виконуємо повторне шифрування. Не можна деактивувати пристрій."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
+#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Не вдалося замінити пристрій %s, роботу якого призупинено, ціллю dm-error."
@@ -1796,7 +1796,7 @@ msgstr "Не вдалося перевірити стан пристрою з uu
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Не вдалося перетворити заголовок з додатковими метаданими LUKSMETA."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
+#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Не вдалося використати специфікацію шифрування %s-%s для LUKS2."
@@ -1880,7 +1880,7 @@ msgstr "Розмір пристрою має бути кратним до обч
 
 #: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
 #: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4077
+#: lib/luks2/luks2_reencrypt.c:4080
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Не вдалося ініціалізувати обгортку старого сховища сегментів."
 
@@ -1888,7 +1888,7 @@ msgstr "Не вдалося ініціалізувати обгортку ста
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Не вдалося ініціалізувати обгортку нового сховища сегментів."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
+#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
 msgid "Failed to initialize hotzone protection."
 msgstr "Не вдалося ініціалізувати захист «гарячої» зони"
 
@@ -1896,7 +1896,7 @@ msgstr "Не вдалося ініціалізувати захист «гаря
 msgid "Failed to read checksums for current hotzone."
 msgstr "Не вдалося прочитати контрольні суми для поточної «гарячої» ділянки."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Не вдалося прочитати «гарячу» ділянку, починаючи з %<PRIu64>."
@@ -1985,8 +1985,8 @@ msgstr "Зменшений розмір даних перевищує справ
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Пристрій зберігання даних не вирівняно до розміру сектора для шифрування (%<PRIu32> байтів)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
-#: lib/luks2/luks2_reencrypt.c:3661
+#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
+#: lib/luks2/luks2_reencrypt.c:3664
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Не вдалося відкрити %s в ексклюзивному режимі (вже пов'язано або змонтовано)."
@@ -1995,123 +1995,123 @@ msgstr "Не вдалося відкрити %s в ексклюзивному р
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Пристрій не позначено для повторного шифрування LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
+#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Не вдалося завантажити контекст повторного шифрування LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
+#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
 msgid "Device is not in reencryption."
 msgstr "Пристрій не перебуває у повторному шифруванні."
 
-#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
+#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
 msgid "Reencryption process is already running."
 msgstr "Процес повторного шифрування вже виконується."
 
-#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
+#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
 msgid "Failed to acquire reencryption lock."
 msgstr "Не вдалося створити блокування для повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:3468
+#: lib/luks2/luks2_reencrypt.c:3471
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Продовження повторного шифрування неможливе. Спочатку слід виконати відновлення повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:3604
+#: lib/luks2/luks2_reencrypt.c:3607
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Не збігаються розмір активного пристрою і запитаний розмір повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:3618
+#: lib/luks2/luks2_reencrypt.c:3621
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "У параметрах повторного шифрування вказано некоректний розмір пристрою."
 
-#: lib/luks2/luks2_reencrypt.c:3720
+#: lib/luks2/luks2_reencrypt.c:3723
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Виконується повторне шифрування. Неможливо виконати відновлення."
 
-#: lib/luks2/luks2_reencrypt.c:3741
+#: lib/luks2/luks2_reencrypt.c:3744
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Не вдалося виконати відновлення даних повторного шифрування LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
 msgid "Failed to initialize reencryption device stack."
 msgstr "Не вдалося ініціалізувати стос пристроїв повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3910
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "Повторне шифрування LUKS2 вже ініційовано у метаданих."
 
-#: lib/luks2/luks2_reencrypt.c:3915
+#: lib/luks2/luks2_reencrypt.c:3918
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Не вдалося ініціалізувати повторне шифрування LUKS2 лише у метаданих."
 
-#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
-#: lib/luks2/luks2_reencrypt.c:4030
+#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
+#: lib/luks2/luks2_reencrypt.c:4033
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Для пристроїв DAX (сталої пам'яті) не передбачено підтримки повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4059
+#: lib/luks2/luks2_reencrypt.c:4062
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Не вдалося встановити сегменти пристрою для наступної «гарячої» ділянки повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4112
+#: lib/luks2/luks2_reencrypt.c:4115
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Не вдалося записати метадані стійкості для повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4119
+#: lib/luks2/luks2_reencrypt.c:4122
 msgid "Decryption failed."
 msgstr "Помилка розшифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4124
+#: lib/luks2/luks2_reencrypt.c:4127
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Не вдалося записати «гарячу» ділянку, починаючи з %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4129
+#: lib/luks2/luks2_reencrypt.c:4132
 msgid "Failed to sync data."
 msgstr "Не вдалося синхронізувати дані."
 
-#: lib/luks2/luks2_reencrypt.c:4137
+#: lib/luks2/luks2_reencrypt.c:4140
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Не вдалося оновити метадані після завершення обробки поточної «гарячої» зони повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4226
+#: lib/luks2/luks2_reencrypt.c:4229
 msgid "Failed to write LUKS2 metadata."
 msgstr "Не вдалося записати метадані LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:4249
+#: lib/luks2/luks2_reencrypt.c:4252
 msgid "Failed to wipe unused data device area."
 msgstr "Не вдалося витерти область невикористаних даних пристрою."
 
-#: lib/luks2/luks2_reencrypt.c:4255
+#: lib/luks2/luks2_reencrypt.c:4258
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Не вдалося вилучити невикористаний (непов'язаний) слот ключа %d."
 
-#: lib/luks2/luks2_reencrypt.c:4265
+#: lib/luks2/luks2_reencrypt.c:4268
 msgid "Failed to remove reencryption keyslot."
 msgstr "Не вдалося вилучити слот ключа для повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4275
+#: lib/luks2/luks2_reencrypt.c:4278
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Критична помилка під час повторного шифрування фрагмента, починаючи з %<PRIu64>, довжиною у %<PRIu64> секторів."
 
-#: lib/luks2/luks2_reencrypt.c:4279
+#: lib/luks2/luks2_reencrypt.c:4282
 msgid "Online reencryption failed."
 msgstr "Не вдалося виконати інтерактивне повторне шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4284
+#: lib/luks2/luks2_reencrypt.c:4287
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Не відновлюйте пристрій, якщо не заміните вручну пристрій призначення для помилок."
 
-#: lib/luks2/luks2_reencrypt.c:4336
+#: lib/luks2/luks2_reencrypt.c:4339
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Не вдалося виконати повторне шифрування. Неочікуваний стан засобу повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4342
+#: lib/luks2/luks2_reencrypt.c:4345
 msgid "Missing or invalid reencrypt context."
 msgstr "Не вказано контекст повторного шифрування або вказано некоректний контекст."
 
-#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
+#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
 msgid "Failed to update reencryption context."
 msgstr "Не вдалося оновити контекст повторного шифрування."
 
@@ -2147,7 +2147,7 @@ msgstr "Параметри шифрування слоту ключів можн
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Параметри шифрування слоту ключів є несумісними із шифруванням слотів ключів LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
+#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2175,7 +2175,7 @@ msgstr "Попередження: параметр --hash у простому р
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "Попередження: параметр --keyfile-size проігноровано, розмір прочитаних даних збігається із розміром ключа шифрування.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2186,9 +2186,9 @@ msgstr "Помилка сканування Blkid для %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "На %s виявлено підписи пристроїв. Подальша обробка може пошкодити наявні дані."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
-#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
-#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2238,7 +2238,7 @@ msgstr ""
 "без пароля. Цей дамп слід зберігати у зашифрованому форматі\n"
 "у безпечному місці."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2258,14 +2258,14 @@ msgstr "Пристрій %s не є коректним пристроєм FVAULT
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Неможливо визначити розмір ключа тому для FVAULT2. Будь ласка, скористайтеся параметром --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Пристрій %s усе ще є активним, його заплановано для відкладеного вилучення.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
-#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
-#: src/cryptsetup.c:3264
+#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
+#: src/cryptsetup.c:3262
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Не вдалося встановити шлях до зовнішніх жетонів %s."
@@ -2274,59 +2274,59 @@ msgstr "Не вдалося встановити шлях до зовнішні
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Зміна розмірів активного пристрою потребує наявності ключа тому у сховищі ключів, але вказано параметр --disable-keyring."
 
-#: src/cryptsetup.c:1059
+#: src/cryptsetup.c:1057
 msgid "Benchmark interrupted."
 msgstr "Тестування перервано."
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1078
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     н/д\n"
 
-#: src/cryptsetup.c:1082
+#: src/cryptsetup.c:1080
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u ітерацій за секунду для %zu-бітового ключа\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1094
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s н/д\n"
 
-#: src/cryptsetup.c:1098
+#: src/cryptsetup.c:1096
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u ітерацій, пам'ять: %5u, %1u паралельних потоків (процесорів) для %zu-бітового ключа (запит на %u мс часу)\n"
 
-#: src/cryptsetup.c:1122
+#: src/cryptsetup.c:1120
 msgid "Result of benchmark is not reliable."
 msgstr "Результат тестування є ненадійним."
 
-#: src/cryptsetup.c:1172
+#: src/cryptsetup.c:1170
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Наближені значення під час перевірки визначаються лише за допомогою оперативної пам’яті (без запису на диск).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1197
+#: src/cryptsetup.c:1195
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "№%*s Алгоритм |      Ключ |      Шифрування |   Розшифрування\n"
 
-#: src/cryptsetup.c:1205
+#: src/cryptsetup.c:1203
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Шифрування  %s (розмір ключа — %i бітів) є недоступним."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1222
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "№      Алгоритм |      Ключ |      Шифрування |   Розшифрування\n"
 
-#: src/cryptsetup.c:1235
+#: src/cryptsetup.c:1233
 msgid "N/A"
 msgstr "н/д"
 
-#: src/cryptsetup.c:1260
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2334,27 +2334,27 @@ msgstr ""
 "Виявлено незахищені метадані повторного шифрування LUKS2. Будь ласка, перевірте, чи бажаною є дія з повторного шифрування\n"
 "(див. виведення luksDump), і продовжуйте (оновлення метаданих), лише якщо впевнені, що дія є бажаною."
 
-#: src/cryptsetup.c:1266
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Вкажіть пароль для захисту і оновлення метаданих повторного шифрування: "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Ви справді хочете продовжити процедуру відновлення повторного шифрування LUKS2?"
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Вкажіть пароль для перевірки контрольної суми метаданих повторного шифрування: "
 
-#: src/cryptsetup.c:1321
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Вкажіть пароль для відновлення повторного шифрування: "
 
-#: src/cryptsetup.c:1383
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Спробувати відновити заголовок пристрою LUKS?"
 
-#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2362,7 +2362,7 @@ msgstr ""
 "\n"
 "Витирання перервано."
 
-#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2370,167 +2370,167 @@ msgstr ""
 "Витираємо пристрій для ініціалізації контрольних сум для цілісності.\n"
 "Ви можете перервати цей процес натисканням комбінації клавіш CTRL+C (решта невитертого пристрою міститиме некоректну контрольну суму).\n"
 
-#: src/cryptsetup.c:1438 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Не можна скасувати активацію тимчасового пристрою %s."
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "У апаратному шифрування OPAL не передбачено підтримки параметрів --cipher і --key-size, параметри проігноровано."
 
-#: src/cryptsetup.c:1499
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Параметр цілісності може бути використано лише для формату LUKS2."
 
-#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Непідтримувані параметри розміру метаданих LUKS2."
 
-#: src/cryptsetup.c:1509
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "Підтримку OPAL передбачено лише для формату LUKS2."
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Підтримку вбудованих апаратних міток передбачено лише для формату LUKS2."
 
-#: src/cryptsetup.c:1523
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Файла заголовка не існує. Хочете його створити?"
 
-#: src/cryptsetup.c:1531
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Не вдалося створити файл заголовка %s."
 
-#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Не виявлено жодного відомого зразка специфікації цілісності."
 
-#: src/cryptsetup.c:1559
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Не можна використовувати вказаний розмір ключа цілісності."
 
-#: src/cryptsetup.c:1577
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Не можна використовувати %s як заголовок на диску."
 
-#: src/cryptsetup.c:1606 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Дані на %s буде перезаписано без можливості відновлення."
 
-#: src/cryptsetup.c:1643
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Пароль адміністратора OPAL не може бути порожнім."
 
-#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
-#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Не вдалося встановити параметри pbkdf."
 
-#: src/cryptsetup.c:1788
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Зменшений відступ даних можна використовувати лише для від’єднаних заголовків LUKS."
 
-#: src/cryptsetup.c:1795
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Контейнер файлів LUKS %s є надто малим для активації, на ньому не лишиться місця для даних."
 
-#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Неможливо визначити розмір ключа тому для LUKS без слотів ключів. Будь ласка, скористайтеся параметром --key-size."
 
-#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Для пристрою потрібні два ключі тому."
 
-#: src/cryptsetup.c:1891
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Деякі із вказаних параметрів активації було проігноровано через апаратне шифрування OPAL."
 
-#: src/cryptsetup.c:1896
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Пристрій задіяно, але не вдалося зробити прапорці сталими."
 
-#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Слот ключа %d позначено для вилучення."
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Це останній слот ключа. Пристрій стане непридатним для використання після спорожнення цього ключа."
 
-#: src/cryptsetup.c:1989
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Введіть будь-який інший пароль: "
 
-#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Дію перервано, слот ключів НЕ витерто.\n"
 
-#: src/cryptsetup.c:2026
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Введіть пароль, який слід вилучити: "
 
-#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
+#: src/cryptsetup.c:3253
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Пристрій %s не є коректним пристроєм LUKS2."
 
-#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Введіть новий пароль для слота ключа: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Введіть пінкод жетона: "
 
-#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Введіть пінкод жетона %d: "
 
-#: src/cryptsetup.c:2210
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "Попередження: параметр --key-slot використано для нового числа слоту ключа.\n"
 
-#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Введіть будь-який пароль: "
 
-#: src/cryptsetup.c:2383
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Введіть пароль, який слід змінити: "
 
-#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Введіть новий пароль: "
 
-#: src/cryptsetup.c:2449
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Вкажіть пароль для слоту ключа, який буде перетворено: "
 
-#: src/cryptsetup.c:2473
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "У команді isLuks можна використовувати лише один аргумент назви пристрою."
 
-#: src/cryptsetup.c:2578
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Слот ключа %d не містить непов'язаного ключа."
 
-#: src/cryptsetup.c:2583
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2538,52 +2538,52 @@ msgstr ""
 "Дамп заголовка з непов'язаним ключем є конфіденційними даними.\n"
 "Цей дамп слід зберігати у зашифрованому форматі у безпечному місці."
 
-#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s не є назвою активного пристрою %s."
 
-#: src/cryptsetup.c:2709
+#: src/cryptsetup.c:2707
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s не є назвою активного пристрою LUKS або пропущено заголовок."
 
-#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
+#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
 msgid "Option --header-backup-file is required."
 msgstr "Слід вказати параметр --header-backup-file."
 
-#: src/cryptsetup.c:2836
+#: src/cryptsetup.c:2834
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s не є керованим cryptsetup пристроєм."
 
-#: src/cryptsetup.c:2847
+#: src/cryptsetup.c:2845
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Підтримки дії з оновлення для пристрою типу %s не передбачено."
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2895
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Нерозпізнаний тип пристрою метаданих, %s."
 
-#: src/cryptsetup.c:2899
+#: src/cryptsetup.c:2897
 msgid "Command requires device and mapped name as arguments."
 msgstr "Аргументами команди мають бути назва пристрою та призначена до нього назва."
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL PSID: "
 msgstr "Введіть PSID OPAL: "
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL Admin password: "
 msgstr "Введіть пароль адміністратора OPAL: "
 
-#: src/cryptsetup.c:2925
+#: src/cryptsetup.c:2923
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "УВАГА: УВЕСЬ диск буде повернуто до початкових параметрів, а усі дані на ньому буде втрачено! Виконати дію?"
 
-#: src/cryptsetup.c:2968
+#: src/cryptsetup.c:2966
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2592,363 +2592,363 @@ msgstr ""
 "У результаті виконання цієї операції буде витерто усі слоти ключів на пристрої %s.\n"
 "Після виконання цієї дії пристроєм не можна буде скористатися."
 
-#: src/cryptsetup.c:2975
+#: src/cryptsetup.c:2973
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Дію перервано, слоти ключів НЕ витерто.\n"
 
-#: src/cryptsetup.c:3014
+#: src/cryptsetup.c:3012
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Некоректний тип LUKS. Передбачено підтримку лише luks1 і luks2."
 
-#: src/cryptsetup.c:3030
+#: src/cryptsetup.c:3028
 #, c-format
 msgid "Device is already %s type."
 msgstr "Пристрій вже належить до типу %s."
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3035
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Ця дія перетворить %s до формату %s.\n"
 
-#: src/cryptsetup.c:3040
+#: src/cryptsetup.c:3038
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Дію перервано, дані пристрою НЕ перетворено.\n"
 
-#: src/cryptsetup.c:3080
+#: src/cryptsetup.c:3078
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Пропущено параметр --priority, --label або --subsystem."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Жетон %d є некоректним."
 
-#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
+#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
 #, c-format
 msgid "Token %d in use."
 msgstr "Жетон %d використовується."
 
-#: src/cryptsetup.c:3129
+#: src/cryptsetup.c:3127
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Не вдалося додати жетон %d зі сховища ключів luks2."
 
-#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
+#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Не вдалося прив'язати жетон %d до слоту ключа %d."
 
-#: src/cryptsetup.c:3157
+#: src/cryptsetup.c:3155
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Жетон %d не використовується."
 
-#: src/cryptsetup.c:3194
+#: src/cryptsetup.c:3192
 msgid "Failed to import token from file."
 msgstr "Не вдалося імпортувати жетон з файла."
 
-#: src/cryptsetup.c:3219
+#: src/cryptsetup.c:3217
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Не вдалося отримати жетон %d для експортування."
 
-#: src/cryptsetup.c:3232
+#: src/cryptsetup.c:3230
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Жетон %d не пов'язано зі слотом ключа %d."
 
-#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
+#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Не вдалося відв'язати жетон %d від слоту ключа %d."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3298
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Підтримку параметрів --tcrypt-hidden, --tcrypt-system і --tcrypt-backup передбачено лише для пристроїв TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3301
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Підтримку параметра --veracrypt або --disable-veracrypt передбачено лише для пристроїв TCRYPT."
 
-#: src/cryptsetup.c:3306
+#: src/cryptsetup.c:3304
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Параметр --veracrypt-pim можна використовувати лише для сумісних із VeraCrypt пристроїв."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3308
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Параметр --veracrypt-query-pim можна використовувати лише для сумісних із VeraCrypt пристроїв."
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3310
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Не можна поєднувати параметри --veracrypt-pim і --veracrypt-query-pim."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3319
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Параметр --persistent не можна використовувати разом із --test-passphrase."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3322
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Не можна поєднувати параметри --refresh і --test-passphrase."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3325
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Параметр --shared можна використовувати лише для відкриття незашифрованого пристрою."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3328
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Підтримку параметра --skip передбачено лише для відкриття незашифрованих пристроїв та пристроїв loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3331
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Підтримку параметра --offset разом із дією з відкриття передбачено лише для незашифрованих пристроїв та пристроїв loopaes."
 
-#: src/cryptsetup.c:3336
+#: src/cryptsetup.c:3334
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Параметр --tcrypt-hidden не можна поєднувати з --allow-discards."
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3338
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Підтримку параметра розміру сектора разом із дією з відкриття передбачено лише для незашифрованих пристроїв."
 
-#: src/cryptsetup.c:3344
+#: src/cryptsetup.c:3342
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Підтримку можливості використання великих секторів IV передбачено лише для відкриття пристроїв простого типу з розміром сектора, який перевищує 512 байтів."
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3347
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Параметр --test-passphrase можна використовувати лише для відкриття пристроїв LUKS, TCRYPT, BITLK та FVAULT2."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
+#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Не можна одночасно використовувати параметри --device-size і --size."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3353
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Параметр --sunbound можна використовувати лише для відкриття пристрою LUKS."
 
-#: src/cryptsetup.c:3358
+#: src/cryptsetup.c:3356
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Параметр --unbound не можна використовувати без --test-passphrase."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3360
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Параметр --volume-key-keyring не можна поєднувати з --hash і --volume-key-file."
 
-#: src/cryptsetup.c:3365
+#: src/cryptsetup.c:3363
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Обидва параметри --volume-key-file має бути поєднано із відповідними параметрами --key-size."
 
-#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Не можна одночасно використовувати параметр --cancel-deferred і --deferred."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3388
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Параметр --active-name можна встановлювати лише для пристроїв LUKS2."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3391
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Не можна одночасно використовувати параметри ---active-name і --force-offline-reencrypt."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3394
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Не можна поєднувати параметри --new-volume-key-file і --keep-key."
 
-#: src/cryptsetup.c:3399
+#: src/cryptsetup.c:3397
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Не можна поєднувати параметри --new-volume-key-keyring і --keep-key."
 
-#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
+#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
 msgid "Keyslot specification is required."
 msgstr "Слід вказати специфікація слотів ключів."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3413
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Не можна одночасно використовувати параметри --align-payload і --offset."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3416
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Параметром --integrity-no-wipe можна користуватися лише для дії з форматування із розширенням забезпечення цілісності."
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3419
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Можна використовувати лише один з параметрів --use-[u]random."
 
-#: src/cryptsetup.c:3429
+#: src/cryptsetup.c:3427
 msgid "Key size is required with --unbound option."
 msgstr "Разом із параметром --unbound слід вказувати розмір ключа."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3447
 msgid "Invalid token action."
 msgstr "Некоректна дія з жетоном."
 
-#: src/cryptsetup.c:3452
+#: src/cryptsetup.c:3450
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Параметр --key-description є обов'язковим для дій із додавання жетонів."
 
-#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
+#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Для виконання дії потрібен специфічний жетон. Скористайтеся параметром --token-id."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3458
 msgid "Option --unbound is valid only with token add action."
 msgstr "Параметр --unbound можна використовувати лише разом із дією з додавання жетона."
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3460
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Не можна поєднувати параметри --key-slot і --unbound."
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3465
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Дія потребує зазначення слоту ключа. Скористайтеся параметром --key-slot."
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3481
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<пристрій> [--type <тип>] [<назва>]"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "відкрити пристрій як <назва>"
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<назва>"
 
-#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "закрити пристрій (вилучити призначення)"
 
-#: src/cryptsetup.c:3485 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "змінити розмір активного пристрою"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3484
 msgid "show device status"
 msgstr "показати стан пристрою"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <шифр>]"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "benchmark cipher"
 msgstr "перевірити швидкодію шифрування"
 
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
-#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
+#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
+#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
+#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
+#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
 msgid "<device>"
 msgstr "<пристрій>"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3486
 msgid "try to repair on-disk metadata"
 msgstr "спробувати виправити метадані на диску"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3487
 msgid "reencrypt LUKS2 device"
 msgstr "повторно зашифрувати пристрій LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3488
 msgid "erase all keyslots (remove encryption key)"
 msgstr "витерти усі слоти ключів (вилучити ключ шифрування)"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3489
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "перетворити LUKS із формату LUKS2 або навпаки"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490
 msgid "set permanent configuration options for LUKS2"
 msgstr "встановити сталі параметри налаштування для LUKS2"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
 msgid "<device> [<new key file>]"
 msgstr "<пристрій> [<новий файл ключа>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3491
 msgid "formats a LUKS device"
 msgstr "форматує пристрій LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3492
 msgid "add key to LUKS device"
 msgstr "додати ключ до пристрою LUKS"
 
-#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
 msgid "<device> [<key file>]"
 msgstr "<пристрій> [<файл ключа>]"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3493
 msgid "removes supplied key or key file from LUKS device"
 msgstr "вилучає наданий ключ або файл ключа з пристрою LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3494
 msgid "changes supplied key or key file of LUKS device"
 msgstr "змінює наданий ключ або файл ключа пристрою LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3495
 msgid "converts a key to new pbkdf parameters"
 msgstr "перетворює ключ до нових параметрів pbkdf"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "<device> <key slot>"
 msgstr "<пристрій> <слот ключа>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "вилучає ключ з номером <слот ключа> з пристрою LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3497
 msgid "print UUID of LUKS device"
 msgstr "вивести UUID пристрою LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3498
 msgid "tests <device> for LUKS partition header"
 msgstr "виконати спробу виявлення заголовка розділу LUKS на пристрої <пристрій>"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3499
 msgid "dump LUKS partition information"
 msgstr "створити дамп даних щодо розділу LUKS"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3500
 msgid "dump TCRYPT device information"
 msgstr "створити дамп даних пристрою TCRYPT"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3501
 msgid "dump BITLK device information"
 msgstr "створити дамп даних пристрою BITLK"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3502
 msgid "dump FVAULT2 device information"
 msgstr "створити дамп даних пристрою FVAULT2"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3503
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Приспати пристрій LUKS і витерти ключ (роботу всіх каналів введення-виведення буде заморожено)"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3504
 msgid "Resume suspended LUKS device"
 msgstr "Відновити роботу приспаного пристрою LUKS"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3505
 msgid "Backup LUKS device header and keyslots"
 msgstr "Створити резервну копію заголовка пристрою LUKS і слотів ключів"
 
-#: src/cryptsetup.c:3508
+#: src/cryptsetup.c:3506
 msgid "Restore LUKS device header and keyslots"
 msgstr "Відновити заголовок пристрою LUKS і слоти ключів"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <пристрій>"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "Manipulate LUKS2 tokens"
 msgstr "Керування жетонами LUKS2"
 
-#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2956,7 +2956,7 @@ msgstr ""
 "\n"
 "<дія> є однією з таких:\n"
 
-#: src/cryptsetup.c:3534
+#: src/cryptsetup.c:3532
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2969,7 +2969,7 @@ msgstr ""
 "\tвідкрити: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tзакрити: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3538
+#: src/cryptsetup.c:3536
 #, c-format
 msgid ""
 "\n"
@@ -2984,7 +2984,7 @@ msgstr ""
 "<слот ключа> — номер слота ключа LUKS, який слід змінити\n"
 "<файл ключа> — необов’язковий файл ключа для нового ключа для дії luksAddKey\n"
 
-#: src/cryptsetup.c:3545
+#: src/cryptsetup.c:3543
 #, c-format
 msgid ""
 "\n"
@@ -2993,7 +2993,7 @@ msgstr ""
 "\n"
 "Типовий укомпільований формат метаданих — %s (для дії luksFormat).\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3548
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3001,12 +3001,12 @@ msgstr ""
 "\n"
 "Підтримку додатків зовнішніх жетонів LUKS2 увімкнено.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3549
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Шлях до теки додатків зовнішніх жетонів LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3553
+#: src/cryptsetup.c:3551
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3014,7 +3014,7 @@ msgstr ""
 "\n"
 "Підтримку додатків зовнішніх жетонів LUKS2 вимкнено.\n"
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3555
 #, c-format
 msgid ""
 "\n"
@@ -3031,7 +3031,7 @@ msgstr ""
 "Типовий PBKDF для LUKS2: %s\n"
 "\tЧас ітерації: %d, потрібний обсяг пам'яті: %d кБ, паралельних потоків: %d\n"
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3566
 #, c-format
 msgid ""
 "\n"
@@ -3046,122 +3046,122 @@ msgstr ""
 "\tзвичайне: %s, ключ: %d-бітовий, хешування пароля: %s\n"
 "\tLUKS: %s, ключ: %d-бітовий, хешування заголовка LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3577
+#: src/cryptsetup.c:3575
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: типовий розмір ключа у режимі XTS (два вбудованих ключа) буде подвоєно.\n"
 
-#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: слід вказати у параметрах %s"
 
-#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Некоректний слот ключа."
 
-#: src/cryptsetup.c:3663
+#: src/cryptsetup.c:3661
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Розмір пристрою має бути кратним до 512-байтового сектора."
 
-#: src/cryptsetup.c:3668
+#: src/cryptsetup.c:3666
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Некоректна специфікація розміру «гарячої» ділянки повторного шифрування."
 
-#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
+#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Розмір ключа має бути кратним 8 бітам"
 
-#: src/cryptsetup.c:3689
+#: src/cryptsetup.c:3687
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Можна надати не більше 2 специфікацій розмірів ключів."
 
-#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
+#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Можна надати не більше %d специфікацій ключів томів."
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3739
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Можна надати не більше %d специфікацій посилань на сховище ключів."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3748
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Максимальний розмір зменшення розміру пристрою дорівнює 1 ГіБ."
 
-#: src/cryptsetup.c:3753
+#: src/cryptsetup.c:3751
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Розмір зменшення має бути кратним до 512-байтового сектора."
 
-#: src/cryptsetup.c:3770
+#: src/cryptsetup.c:3768
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Значенням для параметра --priority може бути лише один з таких рядків: ignore, normal або prefer."
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Показати цю довідку"
 
-#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Показати короткі настанови щодо користування"
 
-#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Вивести дані щодо версії пакунка"
 
-#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Пункти довідки:"
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[ПАРАМЕТР...] <дія> <параметри_дії>"
 
-#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Не вказано аргумент <дія>."
 
-#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Невідома дія."
 
-#: src/cryptsetup.c:3931
+#: src/cryptsetup.c:3929
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Параметр --key-file має пріоритет над вказаним параметром файла ключа."
 
-#: src/cryptsetup.c:3937
+#: src/cryptsetup.c:3935
 msgid "Only one --key-file argument is allowed."
 msgstr "Можна використовувати лише один аргумент --key-file."
 
-#: src/cryptsetup.c:3942
+#: src/cryptsetup.c:3940
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Функцією отримання ключа на основі пароля (PBKDF) може бути лише pbkdf2 або argon2i/argon2id."
 
-#: src/cryptsetup.c:3947
+#: src/cryptsetup.c:3945
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Примусові ітерації PBKDF не можна поєднувати із параметром тривалості ітерацій."
 
-#: src/cryptsetup.c:3952
+#: src/cryptsetup.c:3950
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Неможливо пов'язати ключ тому зі сховищем ключів, якщо сховище ключів вимкнено."
 
-#: src/cryptsetup.c:3957
+#: src/cryptsetup.c:3955
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Не можна скористатися описом ключа сховища ключів, якщо сховище ключів вимкнено."
 
-#: src/cryptsetup.c:3962
+#: src/cryptsetup.c:3960
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Вбудовану цілісність має бути використано разом із параметром --integrity."
 
-#: src/cryptsetup.c:3973
+#: src/cryptsetup.c:3971
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Параметри --keyslot-cipher і --keyslot-key-size має бути використано разом."
 
-#: src/cryptsetup.c:3981
+#: src/cryptsetup.c:3979
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Дій не виконано. Викликано із параметром --test-args.\n"
 
-#: src/cryptsetup.c:3994
+#: src/cryptsetup.c:3992
 msgid "Cannot disable metadata locking."
 msgstr "Не вдалося вимкнути блокування метаданих."
 
@@ -3226,7 +3226,7 @@ msgstr "Для виконання команди потрібен <корене
 msgid "<data_device> <hash_device>"
 msgstr "<пристрій_даних> <пристрій_хешу>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:485 src/integritysetup.c:553
 msgid "format device"
 msgstr "форматувати пристрій"
 
@@ -3242,7 +3242,7 @@ msgstr "перевірити пристрій"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<пристрій_даних> <назва> <пристрій_хешу> [<кореневий_хеш>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:489 src/integritysetup.c:556
 msgid "show active device status"
 msgstr "показати стан активного пристрою"
 
@@ -3250,7 +3250,7 @@ msgstr "показати стан активного пристрою"
 msgid "<hash_device>"
 msgstr "<пристрій_хешу>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:490 src/integritysetup.c:557
 msgid "show on-disk information"
 msgstr "показати вбудовані дані"
 
@@ -3310,24 +3310,24 @@ msgstr "Форматовано із розміром мітки %u%s, внутр
 msgid " (inline hw tags)"
 msgstr " (вбудовані апаратні мітки)"
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:303
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Підтримки встановлення прапорця повторного обчислення не передбачено. Вам варто розглянути можливість використання --wipe."
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:380 src/integritysetup.c:540
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Пристрій %s не є коректним пристроєм INTEGRITY."
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:553 src/integritysetup.c:557
 msgid "<integrity_device>"
 msgstr "<пристрій_цілісності>"
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:554
 msgid "<integrity_device> <name>"
 msgstr "<пристрій_цілісності> <назва>"
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:577
 #, c-format
 msgid ""
 "\n"
@@ -3338,7 +3338,7 @@ msgstr ""
 "<назва> є пристроєм, який слід створити у %s\n"
 "<пристрій_цілісності> є пристроєм, на якому зберігаються дані із мітками цілісності\n"
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:582
 #, c-format
 msgid ""
 "\n"
@@ -3351,48 +3351,48 @@ msgstr ""
 "\tАлгоритм обчислення контрольної суми: %s\n"
 "\tМаксимальний розмір файла ключа: %d кБ\n"
 
-#: src/integritysetup.c:636
+#: src/integritysetup.c:639
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Некоректний розмір --%s. Максимальний розмір дорівнює %u байтів."
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:742
 msgid "Both key file and key size options must be specified."
 msgstr "Не можна одночасно вказувати параметри файла ключа і розміру ключа."
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:746
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Не можна одночасно вказувати параметри файла ключа цілісності журналу і розміру ключа."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:749
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Якщо використано ключ цілісності журналу, має бути вказано алгоритм забезпечення цілісності журналу."
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:753
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Не можна одночасно вказувати параметри файла ключа шифрування журналу і розміру ключа."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:756
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Якщо використано ключ шифрування журналу, має бути вказано алгоритм забезпечення шифрування журналу."
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:760
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Не можна поєднувати параметри відновлення і бітової карти."
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:767
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Параметри журналу у режимі бітової карти використовувати не можна."
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:772
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Параметри бітової карти можна використовувати лише у режимі бітового карти."
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:778
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Вбудований режим не може бути поєднано із параметрами журналу або бітової карти."
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:782
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Вбудований режим не можна поєднувати із окремим пристроєм даних."
 
@@ -4349,6 +4349,10 @@ msgstr "На вузлі заборонено спосіб розпізнаван
 msgid "Public key authentication error: "
 msgstr "Помилка розпізнавання за відкритим ключем: "
 
+#, c-format
+#~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
+#~ msgstr "Не вдалося прочитати або перевірити копію метаданих FVE BITLK %d з %s."
+
 #~ msgid "Activation of BITLK device with clear key protection is not supported."
 #~ msgstr "Підтримки активації пристрою BITLK із прозорим захистом ключем не передбачено."
 

From 20132698516449826460f51745bbde91889fa0e1 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Wed, 1 Apr 2026 20:46:12 +0200
Subject: [PATCH 058/244] Add Release notes for stable 2.8.5 version.

---
 docs/v2.8.5-ReleaseNotes | 73 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 73 insertions(+)
 create mode 100644 docs/v2.8.5-ReleaseNotes

diff --git a/docs/v2.8.5-ReleaseNotes b/docs/v2.8.5-ReleaseNotes
new file mode 100644
index 000000000..7ed5ccc6c
--- /dev/null
+++ b/docs/v2.8.5-ReleaseNotes
@@ -0,0 +1,73 @@
+Cryptsetup 2.8.5 Release Notes
+==============================
+Stable bug-fix release.
+
+All users of cryptsetup 2.8.x must upgrade to this version.
+
+Changes since version 2.8.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Fix FileVault (fvault2) metadata parsing.
+  With a specially crafted image, it is possible to cause a crash during the loading
+  of the FileVault-compatible disk encryption format. It is caused by the metadata block size
+  not being fully validated during the crypt_load() API call.
+
+  Thanks to David Pokora (Trail of Bits, in collaboration with Anthropic) for reporting
+  and proposing the patch.
+
+* Fix reading FileVault image metadata from incorrect image offset.
+  If two subsequent crypt_load() API calls are made, the second call to load FileVault metadata
+  uses an incorrect offset.  Subsequently, the correct FileVault metadata is not recognized.
+  This is caused by a missing seek to the device's beginning. No other formats are affected.
+
+* OpenSSL backend: Increase the number of allowed threads to 64.
+  If there are multiple crypto contexts in use, the 8-thread limit could cause parallel Argon2
+  PBKDF to wait or even deadlock. This is a workaround; the real fix probably needs changes
+  in the OpenSSL Argon2 thread allocation.
+
+* Fix LUKS2 reencryption lock name.
+  If the device is in the reencryption process, it must use the metadata lock to protect
+  the reencryption metadata. In some very specific situations, the lock did not contain
+  the proper UUID of the reencrypted device.
+
+* Check the UUID of the resumed device to match the UUID stored in metadata.
+  It is possible to resume the device with an invalid context, with possible data corruption
+  (a different encryption key is loaded).
+
+* Add a specific error for failed detached header allocation.
+  If there wasn't enough space on the filesystem, the error message was confusing.
+
+* Fix tests not to use aes-generic kernel cipher name.
+  Since Linux kernel 7.0, the crypto library has been used, and the old generic alias for kernel
+  crypto no longer works. As it was never supposed to be used from userspace, tests were fixed
+  to pass even with Linux kernel 7.0.
+
+* Fix OpenSSL crypto backend if built with LibreSSL.
+  LibreSSL provides some definitions that it does not actually support.
+  This confused the logic of the configuration scripts.
+
+* Several compatibility fixes to the alternative Meson configuration system:
+  * using pkg-config to find the popt library,
+  * fix the UUID header path in the function check,
+  * fix argp detection with the static argp-standalone library,
+  * allow external tokens without dlvsym (with musl library),
+  * propagate the crypto backend library dependency to all targets in the static build, and
+  * fix the defined locking directory path..
+  These changes align it with Autoconf logic.
+
+* Various code fixes based on AI-assisted reviews:
+  * fix memory wiping of the larger Veracrypt password pool,
+  * remove superfluous return line in integritysetup,
+  * OpenSSL crypto backend: check for maximal RAND_bytes buffer size,
+  * FileVault fomrat:: use safe_alloc for key unwrapping,
+  * check for strtoll() failure,
+  * avoid integrity sector size overflow (when reading from disk),
+  * fix device-mapper flags initialization in the error path,
+  * increase buffer for keyring name in the device-mapper table to not truncate it,
+  * document non-standard behavior of safe_realloc,
+  * fix wrong union access for dm-integrity reload,
+  * check for possible CTX_dup failure in OpenSSL crypto backend,
+  * fix kernel crypto backend snprintf check,
+  * fix prefix "capi:" check not to ignore colon,
+  * fix device resize not to leak data on error path, and
+  * fix return value in reencryption segment helper.

From db3d43fd7ae049f4c796c4d7a1e7ced113b6a96d Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Thu, 2 Apr 2026 15:59:16 +0200
Subject: [PATCH 059/244] Update spec version.

---
 misc/fedora/cryptsetup.spec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/misc/fedora/cryptsetup.spec b/misc/fedora/cryptsetup.spec
index 57d452bf9..f01636923 100644
--- a/misc/fedora/cryptsetup.spec
+++ b/misc/fedora/cryptsetup.spec
@@ -2,7 +2,7 @@
 
 Summary: Utility for setting up encrypted disks
 Name: cryptsetup
-Version: 2.8.1
+Version: 2.9.0
 Release: 1%{?dist}
 License: GPL-2.0-or-later WITH cryptsetup-OpenSSL-exception AND LGPL-2.1-or-later WITH cryptsetup-OpenSSL-exception
 URL: https://gitlab.com/cryptsetup/cryptsetup

From a78a6b78fb154584a50b88e8be93554c2bc44909 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Thu, 2 Apr 2026 15:59:34 +0200
Subject: [PATCH 060/244] Update Readme for 2.8.5.

---
 README.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index f41bc5738..c93b694c7 100644
--- a/README.md
+++ b/README.md
@@ -39,11 +39,11 @@ Download
 Release notes and tarballs are available at
 [kernel.org](https://cdn.kernel.org/pub/linux/utils/cryptsetup/).
 
-**The latest stable cryptsetup release version is 2.8.4**
-  * [cryptsetup-2.8.4.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.4.tar.xz)
-  * Signature [cryptsetup-2.8.4.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.4.tar.sign)
+**The latest stable cryptsetup release version is 2.8.5**
+  * [cryptsetup-2.8.5.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.5.tar.xz)
+  * Signature [cryptsetup-2.8.5.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.5.tar.sign)
     _(You need to decompress file first to check signature.)_
-  * [Cryptsetup 2.8.4 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.4-ReleaseNotes).
+  * [Cryptsetup 2.8.5 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.5-ReleaseNotes).
 
 [Previous versions](https://cdn.kernel.org/pub/linux/utils/cryptsetup)
 

From fd35f78762f7146aeb17ce3d233dca3d0da90463 Mon Sep 17 00:00:00 2001
From: Kristina Hanicova <khanicov@redhat.com>
Date: Thu, 2 Apr 2026 17:43:13 +0200
Subject: [PATCH 061/244] autotools: Fix variable
 @DEFAULT_LUKS2_LOCK_PATH_UNQUOTED@

Commit 1658a702 introduced a new unquoted variable for path in
meson without introducing it in autotools as well.

Fixes: #984.
---
 configure.ac | 1 +
 1 file changed, 1 insertion(+)

diff --git a/configure.ac b/configure.ac
index 01ac27b76..52ddf11b3 100644
--- a/configure.ac
+++ b/configure.ac
@@ -838,6 +838,7 @@ test -z "$with_luks2_lock_path" && with_luks2_lock_path=/run/cryptsetup
 CS_ABSPATH([${with_luks2_lock_path}],[with-luks2-lock-path])
 DEFAULT_LUKS2_LOCK_PATH=$with_luks2_lock_path
 AC_SUBST(DEFAULT_LUKS2_LOCK_PATH)
+AC_SUBST([DEFAULT_LUKS2_LOCK_PATH_UNQUOTED], [$DEFAULT_LUKS2_LOCK_PATH])
 
 CS_NUM_WITH([luks2-lock-dir-perms], [default luks2 locking directory permissions], [0700])
 test -z "$with_luks2_lock_dir_perms" && with_luks2_lock_dir_perms=0700

From c69c6049789a6f3b3588bd0e09fb4ce17060e196 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Thu, 2 Apr 2026 17:58:41 +0200
Subject: [PATCH 062/244] Add Release notes for 2.8.6.

---
 docs/v2.8.5-ReleaseNotes |  2 +-
 docs/v2.8.6-ReleaseNotes | 77 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 78 insertions(+), 1 deletion(-)
 create mode 100644 docs/v2.8.6-ReleaseNotes

diff --git a/docs/v2.8.5-ReleaseNotes b/docs/v2.8.5-ReleaseNotes
index 7ed5ccc6c..3db0d4f92 100644
--- a/docs/v2.8.5-ReleaseNotes
+++ b/docs/v2.8.5-ReleaseNotes
@@ -59,7 +59,7 @@ Changes since version 2.8.4
   * fix memory wiping of the larger Veracrypt password pool,
   * remove superfluous return line in integritysetup,
   * OpenSSL crypto backend: check for maximal RAND_bytes buffer size,
-  * FileVault fomrat:: use safe_alloc for key unwrapping,
+  * FileVault format: use safe_alloc for key unwrapping,
   * check for strtoll() failure,
   * avoid integrity sector size overflow (when reading from disk),
   * fix device-mapper flags initialization in the error path,
diff --git a/docs/v2.8.6-ReleaseNotes b/docs/v2.8.6-ReleaseNotes
new file mode 100644
index 000000000..9edeba20f
--- /dev/null
+++ b/docs/v2.8.6-ReleaseNotes
@@ -0,0 +1,77 @@
+Cryptsetup 2.8.6 Release Notes
+==============================
+Stable bug-fix release.
+
+All users of cryptsetup 2.8.x must upgrade to this version.
+
+Changes since version 2.8.5
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+* Fixes an autotools regression in 2.8.5 in the locking tmpfiles.d directory configuration.
+
+Changes since version 2.8.4
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Fix FileVault (fvault2) metadata parsing.
+  With a specially crafted image, it is possible to cause a crash during the loading
+  of the FileVault-compatible disk encryption format. It is caused by the metadata block size
+  not being fully validated during the crypt_load() API call.
+
+  Thanks to David Pokora (Trail of Bits, in collaboration with Anthropic) for reporting
+  and proposing the patch.
+
+* Fix reading FileVault image metadata from incorrect image offset.
+  If two subsequent crypt_load() API calls are made, the second call to load FileVault metadata
+  uses an incorrect offset.  Subsequently, the correct FileVault metadata is not recognized.
+  This is caused by a missing seek to the device's beginning. No other formats are affected.
+
+* OpenSSL backend: Increase the number of allowed threads to 64.
+  If there are multiple crypto contexts in use, the 8-thread limit could cause parallel Argon2
+  PBKDF to wait or even deadlock. This is a workaround; the real fix probably needs changes
+  in the OpenSSL Argon2 thread allocation.
+
+* Fix LUKS2 reencryption lock name.
+  If the device is in the reencryption process, it must use the metadata lock to protect
+  the reencryption metadata. In some very specific situations, the lock did not contain
+  the proper UUID of the reencrypted device.
+
+* Check the UUID of the resumed device to match the UUID stored in metadata.
+  It is possible to resume the device with an invalid context, with possible data corruption
+  (a different encryption key is loaded).
+
+* Add a specific error for failed detached header allocation.
+  If there wasn't enough space on the filesystem, the error message was confusing.
+
+* Fix tests not to use aes-generic kernel cipher name.
+  Since Linux kernel 7.0, the crypto library has been used, and the old generic alias for kernel
+  crypto no longer works. As it was never supposed to be used from userspace, tests were fixed
+  to pass even with Linux kernel 7.0.
+
+* Fix OpenSSL crypto backend if built with LibreSSL.
+  LibreSSL provides some definitions that it does not actually support.
+  This confused the logic of the configuration scripts.
+
+* Several compatibility fixes to the alternative Meson configuration system:
+  * using pkg-config to find the popt library,
+  * fix the UUID header path in the function check,
+  * fix argp detection with the static argp-standalone library,
+  * allow external tokens without dlvsym (with musl library),
+  * propagate the crypto backend library dependency to all targets in the static build, and
+  * fix the defined locking directory path..
+  These changes align it with Autoconf logic.
+
+* Various code fixes based on AI-assisted reviews:
+  * fix memory wiping of the larger Veracrypt password pool,
+  * remove superfluous return line in integritysetup,
+  * OpenSSL crypto backend: check for maximal RAND_bytes buffer size,
+  * FileVault format: use safe_alloc for key unwrapping,
+  * check for strtoll() failure,
+  * avoid integrity sector size overflow (when reading from disk),
+  * fix device-mapper flags initialization in the error path,
+  * increase buffer for keyring name in the device-mapper table to not truncate it,
+  * document non-standard behavior of safe_realloc,
+  * fix wrong union access for dm-integrity reload,
+  * check for possible CTX_dup failure in OpenSSL crypto backend,
+  * fix kernel crypto backend snprintf check,
+  * fix prefix "capi:" check not to ignore colon,
+  * fix device resize not to leak data on error path, and
+  * fix return value in reencryption segment helper.

From 8f112facc0814c3712e66b3b28955c31464e4c6e Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Thu, 2 Apr 2026 18:55:55 +0200
Subject: [PATCH 063/244] Update Readme for 2.8.6.

---
 README.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index c93b694c7..385efdd9b 100644
--- a/README.md
+++ b/README.md
@@ -39,11 +39,11 @@ Download
 Release notes and tarballs are available at
 [kernel.org](https://cdn.kernel.org/pub/linux/utils/cryptsetup/).
 
-**The latest stable cryptsetup release version is 2.8.5**
-  * [cryptsetup-2.8.5.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.5.tar.xz)
-  * Signature [cryptsetup-2.8.5.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.5.tar.sign)
+**The latest stable cryptsetup release version is 2.8.6**
+  * [cryptsetup-2.8.6.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.6.tar.xz)
+  * Signature [cryptsetup-2.8.6.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.6.tar.sign)
     _(You need to decompress file first to check signature.)_
-  * [Cryptsetup 2.8.5 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.5-ReleaseNotes).
+  * [Cryptsetup 2.8.6 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.6-ReleaseNotes).
 
 [Previous versions](https://cdn.kernel.org/pub/linux/utils/cryptsetup)
 

From df809fe3802b5cf51ab3a1d9efcf989ee8a7b744 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 14 Apr 2026 13:23:17 +0200
Subject: [PATCH 064/244] tests: catch unlikely failures in
 reencrypt-reformat-device helper.

---
 tests/luks2-reencryption-test | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/tests/luks2-reencryption-test b/tests/luks2-reencryption-test
index 58288e5d1..d1d30c33d 100755
--- a/tests/luks2-reencryption-test
+++ b/tests/luks2-reencryption-test
@@ -893,10 +893,10 @@ reformat_reencrypt_device() {
 		echo -e "$PWD1\n$PWD6" | $CRYPTSETUP -q luksAddKey -S10 $FAST_PBKDF_ARGON $DEV || fail
 		echo -e "$PWD1\n$PWD7" | $CRYPTSETUP -q luksAddKey -S12 $FAST_PBKDF_ARGON $DEV || fail
 
-		$CRYPTSETUP token add $DEV --token-id 1 --key-description $KEY_NAME3 -S6
-		$CRYPTSETUP token add $DEV --token-id 2 --key-description $KEY_NAME4 -S8
-		$CRYPTSETUP token add $DEV --token-id 3 --key-description $KEY_NAME5 -S10
-		echo -e "{\"type\":\"luks2-keyring\",\"keyslots\":[\"4\", \"12\"],\"key_description\":\"$KEY_NAME6\"}" | $CRYPTSETUP token import $DEV --token-id 4 --json-file -
+		$CRYPTSETUP token add $DEV --token-id 1 --key-description $KEY_NAME3 -S6 || fail
+		$CRYPTSETUP token add $DEV --token-id 2 --key-description $KEY_NAME4 -S8 || fail
+		$CRYPTSETUP token add $DEV --token-id 3 --key-description $KEY_NAME5 -S10 || fail
+		echo -e "{\"type\":\"luks2-keyring\",\"keyslots\":[\"4\", \"12\"],\"key_description\":\"$KEY_NAME6\"}" | $CRYPTSETUP token import $DEV --token-id 4 --json-file - || fail
 
 		$CRYPTSETUP -q luksHeaderBackup --header-backup-file $BACKUP_FILE $DEV || fail
 	else

From c13bc01b2bdd96770e05751bf47426b72f806b54 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 15 Apr 2026 16:39:15 +0200
Subject: [PATCH 065/244] tests: Do not link user keyring in session keyring.

Some tests used to link @user keyring in the @session
keyring even though it's not necessary for tests to work
properly.

It was probably done because keys (even transitively) linked
in @session keyring are possesed by all processes running in the
same session.

Use custom test keyring linked in @session keyring instead. It can
be easily removed (unlinked) on the test teardown and it's less
intrusive for the test system.

Moreover the linked @user keyring was never properly unlinked from
@session on the test teardown.

As a side effect some tests accessing key payloads from @user
keyring has to be removed since @user keys are no longer available
for reading transitively via @session keyring.

Fixes: #864.
---
 tests/compat-test-opal    | 23 +++++++++++++++--------
 tests/compat-test2        | 23 ++++++++++++++---------
 tests/keyring-compat-test | 17 ++++++++++++-----
 tests/keyring-test        | 15 +++++++++++----
 4 files changed, 52 insertions(+), 26 deletions(-)

diff --git a/tests/compat-test-opal b/tests/compat-test-opal
index d410b7b09..cb7cadf06 100755
--- a/tests/compat-test-opal
+++ b/tests/compat-test-opal
@@ -28,7 +28,7 @@ PWD2="mymJeD8ivEhE"
 PWD3="ocMakf3fAcQO"
 PWD4="Qx3qn46vq0v"
 PWDW="rUkL4RUryBom"
-TEST_KEYRING_NAME="compattest2_keyring"
+TEST_KEYRING_NAME="compattestopal_keyring"
 TEST_TOKEN0="compattest2_desc0"
 TEST_TOKEN1="compattest2_desc1"
 VK_FILE="compattest2_vkfile"
@@ -52,7 +52,7 @@ remove_mapping()
 	$KEY_FILE0 $KEY_FILE1 $KEY_PWD1 $NO_HEADER_IMG >/dev/null 2>&1
 
 	# unlink whole test keyring
-	[ -n "$TEST_KEYRING" ] && keyctl unlink $TEST_KEYRING "@u" >/dev/null
+	[ -n "$TEST_KEYRING" ] && keyctl unlink $TEST_KEYRING >/dev/null
 	unset TEST_KEYRING
 }
 
@@ -198,11 +198,20 @@ dm_crypt_keyring_new_kernel()
 
 test_and_prepare_keyring() {
 	command -v keyctl >/dev/null || skip "Cannot find keyctl, test skipped"
+
+	local s_desc=$(keyctl rdescribe @s | cut -d';' -f5)
+	local us_desc=$(keyctl rdescribe @us | cut -d';' -f5)
+
+	if [ "$s_desc" = "$us_desc" -a -n "$s_desc" ]; then
+		echo "Session keyring is missing. Giving new one to parent process..."
+		keyctl new_session > /dev/null || skip "Could not create new session keyring, test skipped"
+	fi
+
 	keyctl list "@s" > /dev/null || skip "Current session keyring is unreachable, test skipped"
-	TEST_KEYRING=$(keyctl newring $TEST_KEYRING_NAME "@u" 2> /dev/null)
-	test -n "$TEST_KEYRING" || skip "Failed to create keyring in user keyring"
-	keyctl search "@s" keyring "$TEST_KEYRING" > /dev/null 2>&1 || keyctl link "@u" "@s" > /dev/null 2>&1
-	load_key user test_key test_data "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped."
+	TEST_KEYRING=$(keyctl newring $TEST_KEYRING_NAME "@s" 2> /dev/null)
+	test -n "$TEST_KEYRING" || skip "Failed to create keyring in session keyring, test skipped"
+	keyctl search "@s" keyring $TEST_KEYRING_NAME > /dev/null 2>&1 || skip "Could not find test keyring in a session keyring, test skipped"
+	load_key user test_key test_data "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped"
 }
 
 # $1 type
@@ -1283,8 +1292,6 @@ if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
 	test_vk_link_with_passphrase_check $KEY_NAME "%:$TEST_KEYRING_NAME" "user"
 	test_vk_link_with_passphrase_check $KEY_NAME "%:$TEST_KEYRING_NAME" "logon"
 
-	test_vk_link_and_reactivate $KEY_NAME "@u" "user"
-	test_vk_link_and_reactivate $KEY_NAME "@u"
 	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link_and_reactivate $KEY_NAME "@s" "user"
 	test_vk_link_and_reactivate $KEY_NAME "%:$TEST_KEYRING_NAME" "user"
 	# explicitly specify keyring key type
diff --git a/tests/compat-test2 b/tests/compat-test2
index 2d7cdf500..7920133dd 100755
--- a/tests/compat-test2
+++ b/tests/compat-test2
@@ -68,7 +68,7 @@ remove_mapping()
 	$KEY_FILE0 $KEY_FILE1 >/dev/null 2>&1
 
 	# unlink whole test keyring
-	[ -n "$TEST_KEYRING" ] && keyctl unlink $TEST_KEYRING "@u" >/dev/null
+	[ -n "$TEST_KEYRING" ] && keyctl unlink $TEST_KEYRING >/dev/null
 	unset TEST_KEYRING
 
 	rmmod scsi_debug >/dev/null 2>&1
@@ -256,11 +256,20 @@ dm_crypt_sector_size_support()
 
 test_and_prepare_keyring() {
 	command -v keyctl >/dev/null || skip "Cannot find keyctl, test skipped"
+
+	local s_desc=$(keyctl rdescribe @s | cut -d';' -f5)
+	local us_desc=$(keyctl rdescribe @us | cut -d';' -f5)
+
+	if [ "$s_desc" = "$us_desc" -a -n "$s_desc" ]; then
+		echo "Session keyring is missing. Giving new one to parent process..."
+		keyctl new_session > /dev/null || skip "Could not create new session keyring, test skipped"
+	fi
+
 	keyctl list "@s" > /dev/null || skip "Current session keyring is unreachable, test skipped"
-	TEST_KEYRING=$(keyctl newring $TEST_KEYRING_NAME "@u" 2> /dev/null)
-	test -n "$TEST_KEYRING" || skip "Failed to create keyring in user keyring"
-	keyctl search "@s" keyring "$TEST_KEYRING" > /dev/null 2>&1 || keyctl link "@u" "@s" > /dev/null 2>&1
-	load_key user test_key test_data "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped."
+	TEST_KEYRING=$(keyctl newring $TEST_KEYRING_NAME "@s" 2> /dev/null)
+	test -n "$TEST_KEYRING" || skip "Failed to create keyring in session keyring, test skipped"
+	keyctl search "@s" keyring $TEST_KEYRING_NAME > /dev/null 2>&1 || skip "Could not find test keyring in a session keyring, test skipped"
+	load_key user test_key test_data "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped"
 }
 
 # $1 type
@@ -1555,8 +1564,6 @@ if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
 	# explicitly specify keyring key type
 	test_vk_link $KEY_NAME "%keyring:$TEST_KEYRING_NAME"
 
-	test_vk_link_and_reactivate $KEY_NAME "@u" "user"
-	test_vk_link_and_reactivate $KEY_NAME "@u"
 	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link_and_reactivate $KEY_NAME "@s" "user"
 	test_vk_link_and_reactivate $KEY_NAME "%:$TEST_KEYRING_NAME" "user"
 	# explicitly specify keyring key type
@@ -1610,8 +1617,6 @@ if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
 	# explicitly specify keyring key type
 	test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "%keyring:$TEST_KEYRING_NAME"
 
-	test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "@u"
-	test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "@u" "user"
 	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "@s"
 	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "@s" "user"
 	test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "%:$TEST_KEYRING_NAME"
diff --git a/tests/keyring-compat-test b/tests/keyring-compat-test
index 26f0e1035..bdffb4ed3 100755
--- a/tests/keyring-compat-test
+++ b/tests/keyring-compat-test
@@ -5,7 +5,7 @@ CIPHER_CBC_ESSIV="aes-cbc-essiv:sha256"
 CIPHER_CBC_TCW="serpent-cbc-tcw"
 # TODO: mode with LMK
 
-TEST_KEYRING_NAME="keyringtest_keyring"
+TEST_KEYRING_NAME="keyringcompattest_keyring"
 
 LOGON_KEY_16_OK="dmtst:lkey_16"
 LOGON_KEY_32_OK="dmtst:lkey_32"
@@ -38,7 +38,7 @@ remove_mapping()
 	[ -b /dev/mapper/$NAME ] && dmsetup remove --retry $NAME
 
 	# unlink whole test keyring
-	[ -n "$TEST_KEYRING" ] && keyctl unlink $TEST_KEYRING "@u" >/dev/null
+	[ -n "$TEST_KEYRING" ] && keyctl unlink $TEST_KEYRING >/dev/null
 
 	rmmod scsi_debug >/dev/null 2>&1
 
@@ -106,10 +106,17 @@ dm_crypt_keyring_support()
 }
 
 test_and_prepare_keyring() {
+	local s_desc=$(keyctl rdescribe @s | cut -d';' -f5)
+	local us_desc=$(keyctl rdescribe @us | cut -d';' -f5)
+
+	if [ "$s_desc" = "$us_desc" -a -n "$s_desc" ]; then
+		echo "Session keyring is missing. Giving new one to parent process..."
+		keyctl new_session > /dev/null || skip "Could not create session keyring, test skipped"
+	fi
+
 	keyctl list "@s" > /dev/null || skip "Current session keyring is unreachable, test skipped"
-	TEST_KEYRING=$(keyctl newring $TEST_KEYRING_NAME "@u" 2> /dev/null)
-	test -n "$TEST_KEYRING" || skip "Failed to create keyring in user keyring"
-	keyctl search "@s" keyring "$TEST_KEYRING" > /dev/null 2>&1 || keyctl link "@u" "@s" > /dev/null 2>&1
+	TEST_KEYRING=$(keyctl newring $TEST_KEYRING_NAME "@s" 2> /dev/null)
+	test -n "$TEST_KEYRING" || skip "Failed to create keyring in session keyring"
 	load_key "$HEXKEY_16" user test_key "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped."
 }
 
diff --git a/tests/keyring-test b/tests/keyring-test
index 6d75813de..63a73666e 100755
--- a/tests/keyring-test
+++ b/tests/keyring-test
@@ -26,7 +26,7 @@ remove_mapping()
 	[ -b /dev/mapper/$DEV_ZERO ] && dmsetup remove --retry $DEV_ZERO
 
 	# unlink whole test keyring
-	[ -n "$TEST_KEYRING" ] && keyctl unlink $TEST_KEYRING "@u" >/dev/null
+	[ -n "$TEST_KEYRING" ] && keyctl unlink $TEST_KEYRING >/dev/null
 }
 
 skip()
@@ -68,10 +68,17 @@ dm_crypt_keyring_support()
 }
 
 test_and_prepare_keyring() {
+	local s_desc=$(keyctl rdescribe @s | cut -d';' -f5)
+	local us_desc=$(keyctl rdescribe @us | cut -d';' -f5)
+
+	if [ "$s_desc" = "$us_desc" -a -n "$s_desc" ]; then
+		echo "Session keyring is missing. Giving new one to parent process..."
+		keyctl new_session > /dev/null || skip "Could not create session keyring, test skipped"
+	fi
+
 	keyctl list "@s" > /dev/null || skip "Current session keyring is unreachable, test skipped"
-	TEST_KEYRING=$(keyctl newring $TEST_KEYRING_NAME "@u" 2> /dev/null)
-	test -n "$TEST_KEYRING" || skip "Failed to create keyring in user keyring"
-	keyctl search "@s" keyring "$TEST_KEYRING" > /dev/null 2>&1 || keyctl link "@u" "@s" > /dev/null 2>&1
+	TEST_KEYRING=$(keyctl newring $TEST_KEYRING_NAME "@s" 2> /dev/null)
+	test -n "$TEST_KEYRING" || skip "Failed to create keyring in session keyring"
 	load_key user test_key test_data "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped."
 }
 

From b3f8c8cc3edfdc4f6cfe1e05b42cea44177f43a4 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 15 Apr 2026 17:18:33 +0200
Subject: [PATCH 066/244] tests: if keyctl is missing skip only keyring related
 tests.

---
 tests/compat-test-opal | 22 ++++++++++------------
 tests/compat-test2     | 26 ++++++++++++--------------
 2 files changed, 22 insertions(+), 26 deletions(-)

diff --git a/tests/compat-test-opal b/tests/compat-test-opal
index cb7cadf06..e5b22045a 100755
--- a/tests/compat-test-opal
+++ b/tests/compat-test-opal
@@ -52,8 +52,10 @@ remove_mapping()
 	$KEY_FILE0 $KEY_FILE1 $KEY_PWD1 $NO_HEADER_IMG >/dev/null 2>&1
 
 	# unlink whole test keyring
-	[ -n "$TEST_KEYRING" ] && keyctl unlink $TEST_KEYRING >/dev/null
-	unset TEST_KEYRING
+	if [ -n "$TEST_KEYRING" ]; then
+		keyctl unlink $TEST_KEYRING >/dev/null
+		unset TEST_KEYRING
+	fi
 }
 
 fail()
@@ -197,8 +199,6 @@ dm_crypt_keyring_new_kernel()
 }
 
 test_and_prepare_keyring() {
-	command -v keyctl >/dev/null || skip "Cannot find keyctl, test skipped"
-
 	local s_desc=$(keyctl rdescribe @s | cut -d';' -f5)
 	local us_desc=$(keyctl rdescribe @us | cut -d';' -f5)
 
@@ -227,11 +227,9 @@ setup_luks2_env() {
 	echo -e "$PWD1\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP luksFormat --type luks2 --hw-opal $FAST_PBKDF_OPT $OPAL2_DEV || fail
 	$CRYPTSETUP luksDump $OPAL2_DEV >/dev/null || fail
 	echo $PWD1 | $CRYPTSETUP open $OPAL2_DEV $DEV_NAME || fail
-	HAVE_KEYRING=$($CRYPTSETUP status $DEV_NAME | grep "keyring")
-	if [ -n "$HAVE_KEYRING" ]; then
-		HAVE_KEYRING=1
-	else
-		HAVE_KEYRING=0
+	local check_keyring=$($CRYPTSETUP status $DEV_NAME | grep "key location: keyring")
+	if [ -n "$check_keyring" ]; then
+		command -v keyctl >/dev/null && HAVE_KEYRING=1
 	fi
 	if $($CRYPTSETUP --version | grep -q "BLKID"); then
 		HAVE_BLKID=1
@@ -994,7 +992,7 @@ if dm_crypt_keyring_support && dm_crypt_keyring_new_kernel; then
 fi
 
 prepare "[28] tokens" wipe
-if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
+if [ -n "$HAVE_KEYRING" ]; then
 	test_and_prepare_keyring
 	echo -e "$PWD1\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP luksFormat $FAST_PBKDF_OPT --type luks2 --hw-opal $OPAL2_DEV -q || fail
 	run_token_tests
@@ -1216,7 +1214,7 @@ echo $PWD4 | $CRYPTSETUP open -q --test-passphrase -S5 $OPAL2_DEV || fail
 $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S6 --volume-key-file $VK_FILE --new-keyfile $KEY5 $OPAL2_DEV || fail
 $CRYPTSETUP open --test-passphrase -q -S6 -d $KEY5 $OPAL2_DEV || fail
 
-if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
+if [ -n "$HAVE_KEYRING" ]; then
 	test_and_prepare_keyring
 	load_key user $TEST_TOKEN0 $PWD1 "$TEST_KEYRING" || fail "Cannot load 32 byte user key type"
 	load_key user $TEST_TOKEN1 $PWDW "$TEST_KEYRING" || fail "Cannot load 32 byte user key type"
@@ -1266,7 +1264,7 @@ if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
 	$CRYPTSETUP open -q --test-passphrase --token-only --token-id 0 -q $OPAL2_DEV || fail
 fi
 
-if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
+if [ -n "$HAVE_KEYRING" ]; then
 	prepare "[38] Link VK to a keyring and use custom VK type." wipe
 
 	echo $PWD1 | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 $OPAL2_DEV 2> /dev/null || fail
diff --git a/tests/compat-test2 b/tests/compat-test2
index 7920133dd..9edcdfd58 100755
--- a/tests/compat-test2
+++ b/tests/compat-test2
@@ -68,8 +68,10 @@ remove_mapping()
 	$KEY_FILE0 $KEY_FILE1 >/dev/null 2>&1
 
 	# unlink whole test keyring
-	[ -n "$TEST_KEYRING" ] && keyctl unlink $TEST_KEYRING >/dev/null
-	unset TEST_KEYRING
+	if [ -n "$TEST_KEYRING" ]; then
+		keyctl unlink $TEST_KEYRING >/dev/null
+		unset TEST_KEYRING
+	fi
 
 	rmmod scsi_debug >/dev/null 2>&1
 	scsi_debug_teardown $DEV
@@ -255,8 +257,6 @@ dm_crypt_sector_size_support()
 }
 
 test_and_prepare_keyring() {
-	command -v keyctl >/dev/null || skip "Cannot find keyctl, test skipped"
-
 	local s_desc=$(keyctl rdescribe @s | cut -d';' -f5)
 	local us_desc=$(keyctl rdescribe @us | cut -d';' -f5)
 
@@ -286,11 +286,9 @@ setup_luks2_env() {
 	echo $PWD1 | $CRYPTSETUP luksFormat --type luks2 $FAST_PBKDF_OPT $LOOPDEV || fail
 	$CRYPTSETUP luksDump $LOOPDEV >/dev/null || fail
 	echo $PWD1 | $CRYPTSETUP open $LOOPDEV $DEV_NAME || fail
-	HAVE_KEYRING=$($CRYPTSETUP status $DEV_NAME | grep "keyring")
-	if [ -n "$HAVE_KEYRING" ]; then
-		HAVE_KEYRING=1
-	else
-		HAVE_KEYRING=0
+	local check_keyring=$($CRYPTSETUP status $DEV_NAME | grep "key location: keyring")
+	if [ -n "$check_keyring" ]; then
+		command -v keyctl >/dev/null && HAVE_KEYRING=1
 	fi
 	if $($CRYPTSETUP --version | grep -q "BLKID"); then
 		HAVE_BLKID=1
@@ -784,7 +782,7 @@ echo $PWD1 | $CRYPTSETUP luksFormat $FAST_PBKDF_OPT --type luks2 $LOOPDEV || fai
 echo $PWD1 | $CRYPTSETUP luksOpen $LOOPDEV $DEV_NAME || fail
 if dm_crypt_keyring_support; then
 	echo | $CRYPTSETUP -q resize --size 100 $DEV_NAME 2>/dev/null && fail
-	if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
+	if [ -n "$HAVE_KEYRING" ]; then
 		test_and_prepare_keyring
 		load_key user $TEST_KEY_DESC2 $PWD1 "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped."
 		$CRYPTSETUP token add $LOOPDEV --key-description $TEST_KEY_DESC2 --token-id 1 || fail
@@ -1162,7 +1160,7 @@ fi
 # FIXME: candidate for non-root tests
 prepare "[33] tokens" wipe
 echo $PWD1 | $CRYPTSETUP luksFormat $FAST_PBKDF_OPT --type luks2 $LOOPDEV || fail
-if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
+if [ -n "$HAVE_KEYRING" ]; then
 
 	test_and_prepare_keyring
 
@@ -1480,7 +1478,7 @@ echo $PWD4 | $CRYPTSETUP open -q --test-passphrase -S5 $IMG || fail
 $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S6 --volume-key-file $VK_FILE --new-keyfile $KEY5 $IMG || fail
 $CRYPTSETUP open --test-passphrase -q -S6 -d $KEY5 $IMG || fail
 
-if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
+if [ -n "$HAVE_KEYRING" ]; then
 	test_and_prepare_keyring
 	load_key user $TEST_KEY_DESC0 $PWD1 "$TEST_KEYRING" || fail "Cannot load 32 byte user key type"
 	load_key user $TEST_KEY_DESC1 $PWDW "$TEST_KEYRING" || fail "Cannot load 32 byte user key type"
@@ -1540,7 +1538,7 @@ if dm_crypt_capi_support; then
 	echo $PWD1 | $CRYPTSETUP reencrypt $LOOPDEV >/dev/null 2>&1 && fail
 fi
 
-if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
+if [ -n "$HAVE_KEYRING" ]; then
 	prepare "[45] Link VK to a keyring and use custom VK type." wipe
 
 	echo $PWD1 | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 $LOOPDEV 2> /dev/null || fail
@@ -1671,7 +1669,7 @@ if [ $? -eq 0 ] ; then
 	$CRYPTSETUP close $DEV_NAME || fail
 fi
 
-if [ $HAVE_KEYRING -gt 0 -a -d /proc/sys/kernel/keys ]; then
+if [ -n "$HAVE_KEYRING" ]; then
 	prepare "[49] Keyring description use" wipe
 	test_and_prepare_keyring
 	load_key user $TEST_KEY_DESC1 $PWD1 "$TEST_KEYRING" || fail

From dee718088ac4b608371faf488b279b0c0e7dce79 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 16 Apr 2026 15:55:50 +0200
Subject: [PATCH 067/244] tests: unlink all kernel keys used in compat tests.

---
 tests/compat-test-opal | 17 +++++++++++++++--
 tests/compat-test2     | 33 +++++++++++++++++++++++++++++----
 2 files changed, 44 insertions(+), 6 deletions(-)

diff --git a/tests/compat-test-opal b/tests/compat-test-opal
index e5b22045a..b26c50118 100755
--- a/tests/compat-test-opal
+++ b/tests/compat-test-opal
@@ -31,6 +31,7 @@ PWDW="rUkL4RUryBom"
 TEST_KEYRING_NAME="compattestopal_keyring"
 TEST_TOKEN0="compattest2_desc0"
 TEST_TOKEN1="compattest2_desc1"
+KEY_NAME="cryptsetup:test_volume_key_id"
 VK_FILE="compattest2_vkfile"
 IMPORT_TOKEN="{\"type\":\"some_type\",\"keyslots\":[],\"base64_data\":\"zxI7vKB1Qwl4VPB4D-N-OgcC14hPCG0IDu8O7eCqaQ\"}"
 TOKEN_FILE0=test-token-file0
@@ -51,9 +52,22 @@ remove_mapping()
 	$HEADER_LUKS2_INV missing-file $TOKEN_FILE0 $TOKEN_FILE1 test_image_* \
 	$KEY_FILE0 $KEY_FILE1 $KEY_PWD1 $NO_HEADER_IMG >/dev/null 2>&1
 
-	# unlink whole test keyring
+	# unlink all test keys
 	if [ -n "$TEST_KEYRING" ]; then
 		keyctl unlink $TEST_KEYRING >/dev/null
+
+		# some tests link keys in standard keyrings to test basic functionality.
+		# Use best effort to do proper cleanup. All other keys should always
+		# go in $TEST_KEYRING
+		keyctl unlink %user:$KEY_NAME >/dev/null 2>&1
+		keyctl unlink %logon:$KEY_NAME >/dev/null 2>&1
+
+		keyctl unlink %user:$KEY_NAME   "@u" >/dev/null 2>&1
+		keyctl unlink %logon:$KEY_NAME  "@u" >/dev/null 2>&1
+
+		keyctl unlink %user:$KEY_NAME   "@us" >/dev/null 2>&1
+		keyctl unlink %logon:$KEY_NAME  "@us" >/dev/null 2>&1
+
 		unset TEST_KEYRING
 	fi
 }
@@ -1268,7 +1282,6 @@ if [ -n "$HAVE_KEYRING" ]; then
 	prepare "[38] Link VK to a keyring and use custom VK type." wipe
 
 	echo $PWD1 | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 $OPAL2_DEV 2> /dev/null || fail
-	KEY_NAME="cryptsetup:test_volume_key_id"
 	test_and_prepare_keyring
 	KID=$(echo -n test | keyctl padd user my_token @s)
 	keyctl unlink $KID >/dev/null 2>&1 @s && SESSION_KEYRING_WORKS=1
diff --git a/tests/compat-test2 b/tests/compat-test2
index 9edcdfd58..318d55a54 100755
--- a/tests/compat-test2
+++ b/tests/compat-test2
@@ -36,6 +36,9 @@ TEST_KEYRING_NAME="compattest2_keyring"
 TEST_KEY_DESC0="compattest2_desc0"
 TEST_KEY_DESC1="compattest2_desc1"
 TEST_KEY_DESC2="compattest2_desc2"
+KEY_NAME="cryptsetup:test_volume_key_id"
+KEY_NAME2="cryptsetup:test_volume_key_id2"
+KEY_NAME3="cryptsetup:test_volume_key_id3"
 VK_FILE="compattest2_vkfile"
 IMPORT_TOKEN="{\"type\":\"some_type\",\"keyslots\":[],\"base64_data\":\"zxI7vKB1Qwl4VPB4D-N-OgcC14hPCG0IDu8O7eCqaQ\"}"
 TOKEN_FILE0=test-token-file0
@@ -67,9 +70,34 @@ remove_mapping()
 	$HEADER_LUKS2_PV $HEADER_LUKS2_INV missing-file $TOKEN_FILE0 $TOKEN_FILE1 test_image_* \
 	$KEY_FILE0 $KEY_FILE1 >/dev/null 2>&1
 
-	# unlink whole test keyring
+	# unlink all test keys
 	if [ -n "$TEST_KEYRING" ]; then
 		keyctl unlink $TEST_KEYRING >/dev/null
+
+		# some tests link keys in standard keyrings to test basic functionality.
+		# Use best effort to do proper cleanup. All other keys should always
+		# go in $TEST_KEYRING
+		keyctl unlink %user:$KEY_NAME >/dev/null 2>&1
+		keyctl unlink %logon:$KEY_NAME >/dev/null 2>&1
+
+		keyctl unlink %user:$KEY_NAME2 >/dev/null 2>&1
+		keyctl unlink %logon:$KEY_NAME2 >/dev/null 2>&1
+
+		keyctl unlink %user:$KEY_NAME3 >/dev/null 2>&1
+		keyctl unlink %logon:$KEY_NAME3 >/dev/null 2>&1
+
+		keyctl unlink %user:$KEY_NAME   "@u" >/dev/null 2>&1
+		keyctl unlink %logon:$KEY_NAME  "@u" >/dev/null 2>&1
+
+		keyctl unlink %user:$KEY_NAME2  "@u" >/dev/null 2>&1
+		keyctl unlink %logon:$KEY_NAME2 "@u" >/dev/null 2>&1
+
+		keyctl unlink %user:$KEY_NAME   "@us" >/dev/null 2>&1
+		keyctl unlink %logon:$KEY_NAME  "@us" >/dev/null 2>&1
+
+		keyctl unlink %user:$KEY_NAME2  "@us" >/dev/null 2>&1
+		keyctl unlink %logon:$KEY_NAME2 "@us" >/dev/null 2>&1
+
 		unset TEST_KEYRING
 	fi
 
@@ -1542,9 +1570,6 @@ if [ -n "$HAVE_KEYRING" ]; then
 	prepare "[45] Link VK to a keyring and use custom VK type." wipe
 
 	echo $PWD1 | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 $LOOPDEV 2> /dev/null || fail
-	KEY_NAME="cryptsetup:test_volume_key_id"
-	KEY_NAME2="cryptsetup:test_volume_key_id2"
-	KEY_NAME3="cryptsetup:test_volume_key_id3"
 	test_and_prepare_keyring
 	KID=$(echo -n test | keyctl padd user my_token @s)
 	keyctl unlink $KID >/dev/null 2>&1 @s && SESSION_KEYRING_WORKS=1

From 9fd1d55379134d5927916c379a3fc4c03ea184b0 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 16 Apr 2026 16:10:34 +0200
Subject: [PATCH 068/244] tests: fail compat tests when keyring can not be
 configured.

This is used in luks2-reencryption-test for some time and
it does not seem to cause issues. So sync it also
to compat-test2 and compat-test-opal.
---
 tests/compat-test-opal | 9 ++++-----
 tests/compat-test2     | 9 ++++-----
 2 files changed, 8 insertions(+), 10 deletions(-)

diff --git a/tests/compat-test-opal b/tests/compat-test-opal
index b26c50118..6c9081738 100755
--- a/tests/compat-test-opal
+++ b/tests/compat-test-opal
@@ -218,14 +218,13 @@ test_and_prepare_keyring() {
 
 	if [ "$s_desc" = "$us_desc" -a -n "$s_desc" ]; then
 		echo "Session keyring is missing. Giving new one to parent process..."
-		keyctl new_session > /dev/null || skip "Could not create new session keyring, test skipped"
+		keyctl new_session > /dev/null || fail "Could not create new session keyring"
 	fi
 
-	keyctl list "@s" > /dev/null || skip "Current session keyring is unreachable, test skipped"
 	TEST_KEYRING=$(keyctl newring $TEST_KEYRING_NAME "@s" 2> /dev/null)
-	test -n "$TEST_KEYRING" || skip "Failed to create keyring in session keyring, test skipped"
-	keyctl search "@s" keyring $TEST_KEYRING_NAME > /dev/null 2>&1 || skip "Could not find test keyring in a session keyring, test skipped"
-	load_key user test_key test_data "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped"
+	test -n "$TEST_KEYRING" || fail "Failed to create keyring in session keyring"
+	keyctl search "@s" keyring $TEST_KEYRING_NAME > /dev/null 2>&1 || fail "Could not find test keyring in a session keyring"
+	load_key user test_key test_data "$TEST_KEYRING" || fail "Kernel keyring service is useless on this system"
 }
 
 # $1 type
diff --git a/tests/compat-test2 b/tests/compat-test2
index 318d55a54..a1a59d724 100755
--- a/tests/compat-test2
+++ b/tests/compat-test2
@@ -290,14 +290,13 @@ test_and_prepare_keyring() {
 
 	if [ "$s_desc" = "$us_desc" -a -n "$s_desc" ]; then
 		echo "Session keyring is missing. Giving new one to parent process..."
-		keyctl new_session > /dev/null || skip "Could not create new session keyring, test skipped"
+		keyctl new_session > /dev/null || fail "Could not create new session keyring"
 	fi
 
-	keyctl list "@s" > /dev/null || skip "Current session keyring is unreachable, test skipped"
 	TEST_KEYRING=$(keyctl newring $TEST_KEYRING_NAME "@s" 2> /dev/null)
-	test -n "$TEST_KEYRING" || skip "Failed to create keyring in session keyring, test skipped"
-	keyctl search "@s" keyring $TEST_KEYRING_NAME > /dev/null 2>&1 || skip "Could not find test keyring in a session keyring, test skipped"
-	load_key user test_key test_data "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped"
+	test -n "$TEST_KEYRING" || fail "Failed to create keyring in session keyring"
+	keyctl search "@s" keyring $TEST_KEYRING_NAME > /dev/null 2>&1 || fail "Could not find test keyring in a session keyring"
+	load_key user test_key test_data "$TEST_KEYRING" || fail "Kernel keyring service is useless on this system"
 }
 
 # $1 type

From c06f25c0c760214b66d42a8963fc9fc696eba94f Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 16 Apr 2026 16:12:42 +0200
Subject: [PATCH 069/244] tests: Remove unused USER_SESSION_KEYRING_WORKS
 variable

---
 tests/compat-test-opal | 2 --
 tests/compat-test2     | 2 --
 2 files changed, 4 deletions(-)

diff --git a/tests/compat-test-opal b/tests/compat-test-opal
index 6c9081738..efa0a09f3 100755
--- a/tests/compat-test-opal
+++ b/tests/compat-test-opal
@@ -1284,8 +1284,6 @@ if [ -n "$HAVE_KEYRING" ]; then
 	test_and_prepare_keyring
 	KID=$(echo -n test | keyctl padd user my_token @s)
 	keyctl unlink $KID >/dev/null 2>&1 @s && SESSION_KEYRING_WORKS=1
-	KID=$(echo -n test | keyctl padd user my_token @us)
-	keyctl unlink $KID >/dev/null 2>&1 @us && USER_SESSION_KEYRING_WORKS=1
 
 	test_vk_link $KEY_NAME "@u"
 	test_vk_link $KEY_NAME "@u" "user"
diff --git a/tests/compat-test2 b/tests/compat-test2
index a1a59d724..15c9711d7 100755
--- a/tests/compat-test2
+++ b/tests/compat-test2
@@ -1572,8 +1572,6 @@ if [ -n "$HAVE_KEYRING" ]; then
 	test_and_prepare_keyring
 	KID=$(echo -n test | keyctl padd user my_token @s)
 	keyctl unlink $KID >/dev/null 2>&1 @s && SESSION_KEYRING_WORKS=1
-	KID=$(echo -n test | keyctl padd user my_token @us)
-	keyctl unlink $KID >/dev/null 2>&1 @us && USER_SESSION_KEYRING_WORKS=1
 
 	test_vk_link $KEY_NAME "@u"
 	test_vk_link $KEY_NAME "@u" "user"

From b6dd0273836ff5bbd59d10b026e1e0a834e2ac01 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 16 Apr 2026 16:14:31 +0200
Subject: [PATCH 070/244] tests: Make use of session keyring mandatory.

All necessary checks are already in test_and_prepare_keyring.
---
 tests/compat-test-opal | 10 ++++------
 tests/compat-test2     | 20 +++++++++-----------
 2 files changed, 13 insertions(+), 17 deletions(-)

diff --git a/tests/compat-test-opal b/tests/compat-test-opal
index efa0a09f3..021c2a915 100755
--- a/tests/compat-test-opal
+++ b/tests/compat-test-opal
@@ -1282,14 +1282,12 @@ if [ -n "$HAVE_KEYRING" ]; then
 
 	echo $PWD1 | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 $OPAL2_DEV 2> /dev/null || fail
 	test_and_prepare_keyring
-	KID=$(echo -n test | keyctl padd user my_token @s)
-	keyctl unlink $KID >/dev/null 2>&1 @s && SESSION_KEYRING_WORKS=1
 
 	test_vk_link $KEY_NAME "@u"
 	test_vk_link $KEY_NAME "@u" "user"
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link $KEY_NAME "@s"
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link $KEY_NAME "@s" "logon"
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link $KEY_NAME "@s" "user"
+	test_vk_link $KEY_NAME "@s"
+	test_vk_link $KEY_NAME "@s" "logon"
+	test_vk_link $KEY_NAME "@s" "user"
 	test_vk_link $KEY_NAME "%:$TEST_KEYRING_NAME"
 	test_vk_link $KEY_NAME "%:$TEST_KEYRING_NAME" "user"
 	test_vk_link $KEY_NAME "%:$TEST_KEYRING_NAME" "logon"
@@ -1300,7 +1298,7 @@ if [ -n "$HAVE_KEYRING" ]; then
 	test_vk_link_with_passphrase_check $KEY_NAME "%:$TEST_KEYRING_NAME" "user"
 	test_vk_link_with_passphrase_check $KEY_NAME "%:$TEST_KEYRING_NAME" "logon"
 
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link_and_reactivate $KEY_NAME "@s" "user"
+	test_vk_link_and_reactivate $KEY_NAME "@s" "user"
 	test_vk_link_and_reactivate $KEY_NAME "%:$TEST_KEYRING_NAME" "user"
 	# explicitly specify keyring key type
 	test_vk_link_and_reactivate $KEY_NAME "%keyring:$TEST_KEYRING_NAME" "user"
diff --git a/tests/compat-test2 b/tests/compat-test2
index 15c9711d7..19d66548a 100755
--- a/tests/compat-test2
+++ b/tests/compat-test2
@@ -1570,21 +1570,19 @@ if [ -n "$HAVE_KEYRING" ]; then
 
 	echo $PWD1 | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 $LOOPDEV 2> /dev/null || fail
 	test_and_prepare_keyring
-	KID=$(echo -n test | keyctl padd user my_token @s)
-	keyctl unlink $KID >/dev/null 2>&1 @s && SESSION_KEYRING_WORKS=1
 
 	test_vk_link $KEY_NAME "@u"
 	test_vk_link $KEY_NAME "@u" "user"
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link $KEY_NAME "@s"
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link $KEY_NAME "@s" "logon"
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link $KEY_NAME "@s" "user"
+	test_vk_link $KEY_NAME "@s"
+	test_vk_link $KEY_NAME "@s" "logon"
+	test_vk_link $KEY_NAME "@s" "user"
 	test_vk_link $KEY_NAME "%:$TEST_KEYRING_NAME"
 	test_vk_link $KEY_NAME "%:$TEST_KEYRING_NAME" "user"
 	test_vk_link $KEY_NAME "%:$TEST_KEYRING_NAME" "logon"
 	# explicitly specify keyring key type
 	test_vk_link $KEY_NAME "%keyring:$TEST_KEYRING_NAME"
 
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_vk_link_and_reactivate $KEY_NAME "@s" "user"
+	test_vk_link_and_reactivate $KEY_NAME "@s" "user"
 	test_vk_link_and_reactivate $KEY_NAME "%:$TEST_KEYRING_NAME" "user"
 	# explicitly specify keyring key type
 	test_vk_link_and_reactivate $KEY_NAME "%keyring:$TEST_KEYRING_NAME" "user"
@@ -1628,17 +1626,17 @@ if [ -n "$HAVE_KEYRING" ]; then
 
 	test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "@u"
 	test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "@u" "user"
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "@s"
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "@s" "logon"
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "@s" "user"
+	test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "@s"
+	test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "@s" "logon"
+	test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "@s" "user"
 	test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "%:$TEST_KEYRING_NAME"
 	test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "%:$TEST_KEYRING_NAME" "user"
 	test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "%:$TEST_KEYRING_NAME" "logon"
 	# explicitly specify keyring key type
 	test_reencrypt_vk_link $KEY_NAME $KEY_NAME2 "%keyring:$TEST_KEYRING_NAME"
 
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "@s"
-	[[ ! -z "$SESSION_KEYRING_WORKS" ]] && test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "@s" "user"
+	test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "@s"
+	test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "@s" "user"
 	test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "%:$TEST_KEYRING_NAME"
 	test_reencrypt_vk_link_and_reactivate $KEY_NAME $KEY_NAME2 "%:$TEST_KEYRING_NAME" "user"
 

From 2b8adab7c857b959f846a8b681c355d3580ab77b Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 16 Apr 2026 17:03:06 +0200
Subject: [PATCH 071/244] tests: always fail compat-test2 if key load fails.

We do all necessary checks in test_and_prepare_keyring.
---
 tests/compat-test2 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/compat-test2 b/tests/compat-test2
index 19d66548a..97cb68d34 100755
--- a/tests/compat-test2
+++ b/tests/compat-test2
@@ -811,12 +811,12 @@ if dm_crypt_keyring_support; then
 	echo | $CRYPTSETUP -q resize --size 100 $DEV_NAME 2>/dev/null && fail
 	if [ -n "$HAVE_KEYRING" ]; then
 		test_and_prepare_keyring
-		load_key user $TEST_KEY_DESC2 $PWD1 "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped."
+		load_key user $TEST_KEY_DESC2 $PWD1 "$TEST_KEYRING" || fail
 		$CRYPTSETUP token add $LOOPDEV --key-description $TEST_KEY_DESC2 --token-id 1 || fail
 		$CRYPTSETUP -q resize --size 99 $DEV_NAME <&- || fail
 		$CRYPTSETUP -q status  $DEV_NAME | grep "size:" | grep -q "99 \[512-byte units\]" || fail
 		#replace kernel key with wrong pass
-		load_key user $TEST_KEY_DESC2 $PWD2 "$TEST_KEYRING" || skip "Kernel keyring service is useless on this system, test skipped."
+		load_key user $TEST_KEY_DESC2 $PWD2 "$TEST_KEYRING" || fail
 		# must fail due to --token-only
 		echo $PWD1 | $CRYPTSETUP -q resize --token-only --size 100 $DEV_NAME && fail
 		$CRYPTSETUP -q status  $DEV_NAME | grep "size:" | grep -q "100 \[512-byte units\]" && fail

From e6b609bb27b6c040576d85222b909573d6139cc3 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Tue, 14 Apr 2026 15:39:45 +0200
Subject: [PATCH 072/244] Add mention about AI to CONTRIBUTING.md

We use similar approach and formulation by EFF:
https://www.eff.org/about/opportunities/volunteer/coding-with-eff

The policy can be changed in future.

Fixes: #986
---
 CONTRIBUTING.md | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index e929b6e67..8852726ef 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -11,7 +11,7 @@ We welcome contributions from everyone.
 Cryptsetup is an independent project with much volunteer effort, and our resources are limited.
 Following the guidelines specified in this file makes it easier for us to process your issue.
 
-Project maintainers can remove or reject abusive or otherwise unacceptable comments or code.
+Project maintainers can remove or reject abusive contributions, code apparently submitted by artificial intelligence (AI) without human interaction, or otherwise unacceptable comments or code.
 
 Git repository
 --------------
@@ -43,6 +43,10 @@ Alternatively (for trivial changes), you can send a patch to [cryptsetup mailing
 
 Please do not write personal emails with questions or patches to maintainers and developers.
 
+Please refrain from submissions that you haven't thoroughly understood, reviewed, and tested.
+Please disclose if your contribution was AI-generated.
+Descriptions and comments should be made by you.
+
 ### Project structure
 Cryptsetup projects include a libcryptsetup library, tools, token plugins, documentation, and a test suite.
 

From fe0afb9046e6cd3ad5bb53f091fdabb4d2276de3 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 17 Apr 2026 17:36:20 +0200
Subject: [PATCH 073/244] ci: Replace jq with bash wrapper

To be used later.
---
 .../generate-luks2-area-in-json-hdr-space-json0.img.sh      | 4 ++--
 .../generators/generate-luks2-argon2-leftover-params.img.sh | 6 +++---
 tests/generators/generate-luks2-invalid-json-size-c0.img.sh | 4 ++--
 tests/generators/generate-luks2-invalid-json-size-c1.img.sh | 4 ++--
 tests/generators/generate-luks2-invalid-json-size-c2.img.sh | 4 ++--
 .../generate-luks2-invalid-keyslots-size-c0.img.sh          | 4 ++--
 .../generate-luks2-invalid-keyslots-size-c1.img.sh          | 4 ++--
 .../generate-luks2-invalid-keyslots-size-c2.img.sh          | 4 ++--
 tests/generators/generate-luks2-invalid-tokens.img.sh       | 4 ++--
 tests/generators/generate-luks2-invalid-top-objects.img.sh  | 4 ++--
 tests/generators/generate-luks2-keyslot-invalid-af.img.sh   | 4 ++--
 .../generate-luks2-keyslot-invalid-area-size.img.sh         | 4 ++--
 tests/generators/generate-luks2-keyslot-invalid-area.img.sh | 4 ++--
 .../generate-luks2-keyslot-invalid-objects.img.sh           | 4 ++--
 .../generators/generate-luks2-keyslot-missing-digest.img.sh | 6 +++---
 .../generate-luks2-keyslot-too-many-digests.img.sh          | 4 ++--
 .../generate-luks2-metadata-size-128k-secondary.img.sh      | 4 ++--
 tests/generators/generate-luks2-metadata-size-128k.img.sh   | 4 ++--
 .../generate-luks2-metadata-size-16k-secondary.img.sh       | 4 ++--
 .../generate-luks2-metadata-size-1m-secondary.img.sh        | 4 ++--
 tests/generators/generate-luks2-metadata-size-1m.img.sh     | 4 ++--
 .../generate-luks2-metadata-size-256k-secondary.img.sh      | 4 ++--
 tests/generators/generate-luks2-metadata-size-256k.img.sh   | 4 ++--
 .../generate-luks2-metadata-size-2m-secondary.img.sh        | 4 ++--
 tests/generators/generate-luks2-metadata-size-2m.img.sh     | 4 ++--
 .../generate-luks2-metadata-size-32k-secondary.img.sh       | 4 ++--
 tests/generators/generate-luks2-metadata-size-32k.img.sh    | 4 ++--
 .../generate-luks2-metadata-size-4m-secondary.img.sh        | 4 ++--
 tests/generators/generate-luks2-metadata-size-4m.img.sh     | 4 ++--
 .../generate-luks2-metadata-size-512k-secondary.img.sh      | 4 ++--
 tests/generators/generate-luks2-metadata-size-512k.img.sh   | 4 ++--
 .../generate-luks2-metadata-size-64k-inv-area-c0.img.sh     | 4 ++--
 .../generate-luks2-metadata-size-64k-inv-area-c1.img.sh     | 4 ++--
 ...rate-luks2-metadata-size-64k-inv-keyslots-size-c0.img.sh | 4 ++--
 .../generate-luks2-metadata-size-64k-secondary.img.sh       | 4 ++--
 tests/generators/generate-luks2-metadata-size-64k.img.sh    | 4 ++--
 .../generate-luks2-metadata-size-invalid-secondary.img.sh   | 4 ++--
 .../generators/generate-luks2-metadata-size-invalid.img.sh  | 4 ++--
 ...nerate-luks2-missing-keyslot-referenced-in-digest.img.sh | 6 +++---
 ...enerate-luks2-missing-keyslot-referenced-in-token.img.sh | 4 ++--
 ...nerate-luks2-missing-segment-referenced-in-digest.img.sh | 6 +++---
 .../generate-luks2-non-compact-json-4k-token-0.img.sh       | 2 +-
 .../generate-luks2-non-compact-json-token-0.img.sh          | 2 +-
 .../generate-luks2-overlapping-areas-c0-json0.img.sh        | 4 ++--
 .../generate-luks2-overlapping-areas-c1-json0.img.sh        | 4 ++--
 .../generate-luks2-overlapping-areas-c2-json0.img.sh        | 4 ++--
 .../generate-luks2-pbkdf2-leftover-params-0.img.sh          | 6 +++---
 .../generate-luks2-pbkdf2-leftover-params-1.img.sh          | 6 +++---
 .../generate-luks2-segment-crypt-empty-encryption.img.sh    | 4 ++--
 .../generate-luks2-segment-crypt-missing-encryption.img.sh  | 4 ++--
 .../generate-luks2-segment-crypt-missing-ivoffset.img.sh    | 4 ++--
 .../generate-luks2-segment-crypt-missing-sectorsize.img.sh  | 4 ++--
 .../generate-luks2-segment-crypt-wrong-encryption.img.sh    | 4 ++--
 .../generate-luks2-segment-crypt-wrong-ivoffset.img.sh      | 4 ++--
 .../generate-luks2-segment-crypt-wrong-sectorsize-0.img.sh  | 4 ++--
 .../generate-luks2-segment-crypt-wrong-sectorsize-1.img.sh  | 4 ++--
 .../generate-luks2-segment-crypt-wrong-sectorsize-2.img.sh  | 4 ++--
 .../generators/generate-luks2-segment-missing-offset.img.sh | 4 ++--
 tests/generators/generate-luks2-segment-missing-size.img.sh | 4 ++--
 tests/generators/generate-luks2-segment-missing-type.img.sh | 4 ++--
 tests/generators/generate-luks2-segment-two.img.sh          | 4 ++--
 tests/generators/generate-luks2-segment-unknown-type.img.sh | 4 ++--
 .../generate-luks2-segment-wrong-backup-key-0.img.sh        | 4 ++--
 .../generate-luks2-segment-wrong-backup-key-1.img.sh        | 4 ++--
 .../generate-luks2-segment-wrong-flags-element.img.sh       | 4 ++--
 tests/generators/generate-luks2-segment-wrong-flags.img.sh  | 4 ++--
 tests/generators/generate-luks2-segment-wrong-offset.img.sh | 4 ++--
 tests/generators/generate-luks2-segment-wrong-size-0.img.sh | 4 ++--
 tests/generators/generate-luks2-segment-wrong-size-1.img.sh | 4 ++--
 tests/generators/generate-luks2-segment-wrong-size-2.img.sh | 4 ++--
 tests/generators/generate-luks2-segment-wrong-type.img.sh   | 4 ++--
 .../generate-luks2-uint64-max-segment-size.img.sh           | 4 ++--
 .../generate-luks2-uint64-overflow-segment-size.img.sh      | 4 ++--
 .../generate-luks2-uint64-signed-segment-size.img.sh        | 4 ++--
 tests/generators/lib.sh                                     | 5 +++++
 75 files changed, 157 insertions(+), 152 deletions(-)

diff --git a/tests/generators/generate-luks2-area-in-json-hdr-space-json0.img.sh b/tests/generators/generate-luks2-area-in-json-hdr-space-json0.img.sh
index b1f85a9fc..061e5ea99 100755
--- a/tests/generators/generate-luks2-area-in-json-hdr-space-json0.img.sh
+++ b/tests/generators/generate-luks2-area-in-json-hdr-space-json0.img.sh
@@ -19,7 +19,7 @@ generate()
 	# make area 7 access the luks2 header space
 	OFFS=$((2*LUKS2_HDR_SIZE*512-1))
 	LEN=1
-	json_str=$(jq -c --arg off $OFFS --arg len $LEN \
+	json_str=$(_jq --arg off $OFFS --arg len $LEN \
 		   '.keyslots."0".area.offset = $off | .keyslots."0".area.size = $len' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
@@ -33,7 +33,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c --arg off $OFFS --arg len $LEN \
+	_jq --arg off $OFFS --arg len $LEN \
 	    'if (.keyslots."0".area.offset != $off) or (.keyslots."0".area.size != $len)
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
diff --git a/tests/generators/generate-luks2-argon2-leftover-params.img.sh b/tests/generators/generate-luks2-argon2-leftover-params.img.sh
index a0d920c14..4ad808737 100755
--- a/tests/generators/generate-luks2-argon2-leftover-params.img.sh
+++ b/tests/generators/generate-luks2-argon2-leftover-params.img.sh
@@ -17,8 +17,8 @@
 generate()
 {
 	# add keyslot 1 to second digest
-	obj_len=$(jq -c -M '.keyslots."1".kdf | length' $TMPDIR/json0)
-	json_str=$(jq -r -c -M '.keyslots."1".kdf.type = "pbkdf2" | .keyslots."1".kdf.iterations = 1001 | .keyslots."1".kdf.hash = "sha256"' $TMPDIR/json0)
+	obj_len=$(_jq -M '.keyslots."1".kdf | length' $TMPDIR/json0)
+	json_str=$(_jq -r -M '.keyslots."1".kdf.type = "pbkdf2" | .keyslots."1".kdf.iterations = 1001 | .keyslots."1".kdf.hash = "sha256"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -32,7 +32,7 @@ check()
 	lib_hdr0_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	new_obj_len=$(jq -c -M '.keyslots."1".kdf | length' $TMPDIR/json_res0)
+	new_obj_len=$(_jq -M '.keyslots."1".kdf | length' $TMPDIR/json_res0)
 	test $((obj_len+2)) -eq $new_obj_len || exit 2
 }
 
diff --git a/tests/generators/generate-luks2-invalid-json-size-c0.img.sh b/tests/generators/generate-luks2-invalid-json-size-c0.img.sh
index 2991d87af..ee88cfc38 100755
--- a/tests/generators/generate-luks2-invalid-json-size-c0.img.sh
+++ b/tests/generators/generate-luks2-invalid-json-size-c0.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	JS=$(((LUKS2_HDR_SIZE-LUKS2_BIN_HDR_SIZE)*512+4096))
-	json_str=$(jq -c --arg js $JS '.config.json_size = ($js | tostring)' $TMPDIR/json0)
+	json_str=$(_jq --arg js $JS '.config.json_size = ($js | tostring)' $TMPDIR/json0)
 	test -n "$json_str" || exit 2
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c --arg js $JS 'if .config.json_size != ($js | tostring )
+	_jq --arg js $JS 'if .config.json_size != ($js | tostring )
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-invalid-json-size-c1.img.sh b/tests/generators/generate-luks2-invalid-json-size-c1.img.sh
index dddf99a32..73f176324 100755
--- a/tests/generators/generate-luks2-invalid-json-size-c1.img.sh
+++ b/tests/generators/generate-luks2-invalid-json-size-c1.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	JS=$(((LUKS2_HDR_SIZE-LUKS2_BIN_HDR_SIZE)*512-4096))
-	json_str=$(jq -c --arg js $JS '.config.json_size = ($js | tostring)' $TMPDIR/json0)
+	json_str=$(_jq --arg js $JS '.config.json_size = ($js | tostring)' $TMPDIR/json0)
 	test -n "$json_str" || exit 2
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c --arg js $JS 'if .config.json_size != ($js | tostring )
+	_jq --arg js $JS 'if .config.json_size != ($js | tostring )
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-invalid-json-size-c2.img.sh b/tests/generators/generate-luks2-invalid-json-size-c2.img.sh
index 47606185e..cb7afaaed 100755
--- a/tests/generators/generate-luks2-invalid-json-size-c2.img.sh
+++ b/tests/generators/generate-luks2-invalid-json-size-c2.img.sh
@@ -21,7 +21,7 @@ generate()
 	TEST_MDA_SIZE_BYTES=$((TEST_MDA_SIZE*512))
 	TEST_JSN_SIZE=$((TEST_MDA_SIZE-LUKS2_BIN_HDR_SIZE))
 
-	json_str=$(jq -c '.' $TMPDIR/json0)
+	json_str=$(_jq '.' $TMPDIR/json0)
 
 	write_luks2_json "$json_str" $TMPDIR/json0 $TEST_JSN_SIZE
 	write_luks2_json "$json_str" $TMPDIR/json1 $TEST_JSN_SIZE
@@ -45,7 +45,7 @@ check()
 	test "$str_res1" = "SKUL" || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c --arg js $JS 'if .config.json_size != ( $js | tostring )
+	_jq --arg js $JS 'if .config.json_size != ( $js | tostring )
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-invalid-keyslots-size-c0.img.sh b/tests/generators/generate-luks2-invalid-keyslots-size-c0.img.sh
index 8d509db1b..4c2191854 100755
--- a/tests/generators/generate-luks2-invalid-keyslots-size-c0.img.sh
+++ b/tests/generators/generate-luks2-invalid-keyslots-size-c0.img.sh
@@ -18,7 +18,7 @@ generate()
 {
 	# make area 7 being included in area 6
 	OFFS=$((2*LUKS2_HDR_SIZE*512))
-	json_str=$(jq -c --arg off $OFFS '.config.keyslots_size = (.segments."0".offset | tonumber - ($off | tonumber) + 4096 | tostring)' $TMPDIR/json0)
+	json_str=$(_jq --arg off $OFFS '.config.keyslots_size = (.segments."0".offset | tonumber - ($off | tonumber) + 4096 | tostring)' $TMPDIR/json0)
 	test -n "$json_str" || exit 2
 	# [.keyslots[].area.offset | tonumber] | max | tostring ---> max offset in keyslot areas
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
@@ -33,7 +33,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c --arg off $OFFS 'if .config.keyslots_size != ( .segments."0".offset | tonumber - ($off | tonumber) + 4096 | tostring )
+	_jq --arg off $OFFS 'if .config.keyslots_size != ( .segments."0".offset | tonumber - ($off | tonumber) + 4096 | tostring )
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-invalid-keyslots-size-c1.img.sh b/tests/generators/generate-luks2-invalid-keyslots-size-c1.img.sh
index c66ffcfe7..cdcc31f3d 100755
--- a/tests/generators/generate-luks2-invalid-keyslots-size-c1.img.sh
+++ b/tests/generators/generate-luks2-invalid-keyslots-size-c1.img.sh
@@ -15,7 +15,7 @@
 
 generate()
 {
-	json_str=$(jq -c '.config.keyslots_size = (.config.keyslots_size | tonumber - 1 | tostring)' $TMPDIR/json0)
+	json_str=$(_jq '.config.keyslots_size = (.config.keyslots_size | tonumber - 1 | tostring)' $TMPDIR/json0)
 	test -n "$json_str" || exit 2
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if (.config.keyslots_size | tonumber % 4096) == 0
+	_jq 'if (.config.keyslots_size | tonumber % 4096) == 0
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-invalid-keyslots-size-c2.img.sh b/tests/generators/generate-luks2-invalid-keyslots-size-c2.img.sh
index 4f96ef815..b5d905787 100755
--- a/tests/generators/generate-luks2-invalid-keyslots-size-c2.img.sh
+++ b/tests/generators/generate-luks2-invalid-keyslots-size-c2.img.sh
@@ -16,7 +16,7 @@
 
 generate()
 {
-	json_str=$(jq '.config.keyslots_size = ([.keyslots[].area.size] | map(tonumber) | add - 4096 | tostring )' $TMPDIR/json0)
+	json_str=$(_jq '.config.keyslots_size = ([.keyslots[].area.size] | map(tonumber) | add - 4096 | tostring )' $TMPDIR/json0)
 	test -n "$json_str" || exit 2
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .config.keyslots_size != ([.keyslots[].area.size ] | map(tonumber) | add - 4096 | tostring)
+	_jq 'if .config.keyslots_size != ([.keyslots[].area.size ] | map(tonumber) | add - 4096 | tostring)
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-invalid-tokens.img.sh b/tests/generators/generate-luks2-invalid-tokens.img.sh
index 6475bd447..31c4f370a 100755
--- a/tests/generators/generate-luks2-invalid-tokens.img.sh
+++ b/tests/generators/generate-luks2-invalid-tokens.img.sh
@@ -14,7 +14,7 @@
 
 generate()
 {
-	json_str=$(jq -c 'del(.tokens) | .tokens = 42' $TMPDIR/json0)
+	json_str=$(_jq 'del(.tokens) | .tokens = 42' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .tokens != 42
+	_jq 'if .tokens != 42
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-invalid-top-objects.img.sh b/tests/generators/generate-luks2-invalid-top-objects.img.sh
index cbb51f4ec..f14205692 100755
--- a/tests/generators/generate-luks2-invalid-top-objects.img.sh
+++ b/tests/generators/generate-luks2-invalid-top-objects.img.sh
@@ -14,7 +14,7 @@
 
 generate()
 {
-	json_str=$(jq -c 'del(.tokens) | .tokens = 42 |
+	json_str=$(_jq 'del(.tokens) | .tokens = 42 |
 			  del(.digests) | .digests = 42 |
 			  del(.keyslots) | .keyslots = [] |
 			  del(.segments) | .segments = "hi"' $TMPDIR/json0)
@@ -33,7 +33,7 @@ check()
 	lib_hdr1_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if (.tokens != 42) or (.digests != 42) or (.keyslots != []) or (.segments != "hi")
+	_jq 'if (.tokens != 42) or (.digests != 42) or (.keyslots != []) or (.segments != "hi")
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-keyslot-invalid-af.img.sh b/tests/generators/generate-luks2-keyslot-invalid-af.img.sh
index 1825780ee..cc8704ed8 100755
--- a/tests/generators/generate-luks2-keyslot-invalid-af.img.sh
+++ b/tests/generators/generate-luks2-keyslot-invalid-af.img.sh
@@ -14,7 +14,7 @@
 
 generate()
 {
-	json_str=$(jq -c 'del(.keyslots."0".af.type) | .keyslots."0".af.type = 42' $TMPDIR/json0)
+	json_str=$(_jq 'del(.keyslots."0".af.type) | .keyslots."0".af.type = 42' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if (.keyslots."0".af.type != 42)
+	_jq 'if (.keyslots."0".af.type != 42)
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-keyslot-invalid-area-size.img.sh b/tests/generators/generate-luks2-keyslot-invalid-area-size.img.sh
index 59bfd1ee0..115b4966e 100755
--- a/tests/generators/generate-luks2-keyslot-invalid-area-size.img.sh
+++ b/tests/generators/generate-luks2-keyslot-invalid-area-size.img.sh
@@ -14,7 +14,7 @@
 
 generate()
 {
-	json_str=$(jq -c '.keyslots."0"."area".size = "18446744073709551615"' $TMPDIR/json0)
+	json_str=$(_jq '.keyslots."0"."area".size = "18446744073709551615"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if (.keyslots."0"."area".size != "18446744073709551615")
+	_jq 'if (.keyslots."0"."area".size != "18446744073709551615")
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-keyslot-invalid-area.img.sh b/tests/generators/generate-luks2-keyslot-invalid-area.img.sh
index 5d1443911..9389164ed 100755
--- a/tests/generators/generate-luks2-keyslot-invalid-area.img.sh
+++ b/tests/generators/generate-luks2-keyslot-invalid-area.img.sh
@@ -14,7 +14,7 @@
 
 generate()
 {
-	json_str=$(jq -c 'del(.keyslots."0".area) | .keyslots."0".area = 42' $TMPDIR/json0)
+	json_str=$(_jq 'del(.keyslots."0".area) | .keyslots."0".area = 42' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if (.keyslots."0".area != 42)
+	_jq 'if (.keyslots."0".area != 42)
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-keyslot-invalid-objects.img.sh b/tests/generators/generate-luks2-keyslot-invalid-objects.img.sh
index 46bedd5a2..d69d825b9 100755
--- a/tests/generators/generate-luks2-keyslot-invalid-objects.img.sh
+++ b/tests/generators/generate-luks2-keyslot-invalid-objects.img.sh
@@ -14,7 +14,7 @@
 
 generate()
 {
-	json_str=$(jq -c 'del(.keyslots."0".kdf) | .keyslots."0".kdf = 42 |
+	json_str=$(_jq 'del(.keyslots."0".kdf) | .keyslots."0".kdf = 42 |
 		  del(.keyslots."0".af) | .keyslots."0".af = 42' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
@@ -31,7 +31,7 @@ check()
 	lib_hdr1_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if (.keyslots."0".kdf != 42) or (.keyslots."0".af != 42)
+	_jq 'if (.keyslots."0".kdf != 42) or (.keyslots."0".af != 42)
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-keyslot-missing-digest.img.sh b/tests/generators/generate-luks2-keyslot-missing-digest.img.sh
index c675783b4..4b74284ed 100755
--- a/tests/generators/generate-luks2-keyslot-missing-digest.img.sh
+++ b/tests/generators/generate-luks2-keyslot-missing-digest.img.sh
@@ -17,9 +17,9 @@
 generate()
 {
 	read -r json_str_orig < $TMPDIR/json0
-	arr_len=$(jq -c -M '.digests."0".keyslots | length' $TMPDIR/json0)
+	arr_len=$(_jq -M '.digests."0".keyslots | length' $TMPDIR/json0)
 	# remove first element from digests."0".keyslots array
-	json_str=$(jq -r -c -M 'del(.digests."0".keyslots[0])' $TMPDIR/json0)
+	json_str=$(_jq -r -M 'del(.digests."0".keyslots[0])' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -33,7 +33,7 @@ check()
 	lib_hdr0_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	new_arr_len=$(jq -c -M '.digests."0".keyslots | length' $TMPDIR/json_res0)
+	new_arr_len=$(_jq -M '.digests."0".keyslots | length' $TMPDIR/json_res0)
 	test $((arr_len-1)) -eq $new_arr_len || exit 2
 }
 
diff --git a/tests/generators/generate-luks2-keyslot-too-many-digests.img.sh b/tests/generators/generate-luks2-keyslot-too-many-digests.img.sh
index d86efce2d..576c83655 100755
--- a/tests/generators/generate-luks2-keyslot-too-many-digests.img.sh
+++ b/tests/generators/generate-luks2-keyslot-too-many-digests.img.sh
@@ -17,7 +17,7 @@
 generate()
 {
 	# add keyslot 1 to second digest
-	json_str=$(jq -r -c -M '.digests."1" = .digests."0" | .digests."1".keyslots = ["1"]' $TMPDIR/json0)
+	json_str=$(_jq -r -M '.digests."1" = .digests."0" | .digests."1".keyslots = ["1"]' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -31,7 +31,7 @@ check()
 	lib_hdr0_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	new_arr_len=$(jq -c -M '.digests."1".keyslots | length' $TMPDIR/json_res0)
+	new_arr_len=$(_jq -M '.digests."1".keyslots | length' $TMPDIR/json_res0)
 	test 1 -eq $new_arr_len || exit 2
 }
 
diff --git a/tests/generators/generate-luks2-metadata-size-128k-secondary.img.sh b/tests/generators/generate-luks2-metadata-size-128k-secondary.img.sh
index 248db119c..29b7d1526 100755
--- a/tests/generators/generate-luks2-metadata-size-128k-secondary.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-128k-secondary.img.sh
@@ -28,7 +28,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -52,7 +52,7 @@ check()
 	lib_hdr0_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json1 $TGT_IMG $TMPDIR/json_res1 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res1 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-128k.img.sh b/tests/generators/generate-luks2-metadata-size-128k.img.sh
index 8fa8c4915..393581023 100755
--- a/tests/generators/generate-luks2-metadata-size-128k.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-128k.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -49,7 +49,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-16k-secondary.img.sh b/tests/generators/generate-luks2-metadata-size-16k-secondary.img.sh
index b053428f6..8746a9ba1 100755
--- a/tests/generators/generate-luks2-metadata-size-16k-secondary.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-16k-secondary.img.sh
@@ -28,7 +28,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -52,7 +52,7 @@ check()
 	lib_hdr0_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json1 $TGT_IMG $TMPDIR/json_res1 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res1 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-1m-secondary.img.sh b/tests/generators/generate-luks2-metadata-size-1m-secondary.img.sh
index 61f722033..01643e7c5 100755
--- a/tests/generators/generate-luks2-metadata-size-1m-secondary.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-1m-secondary.img.sh
@@ -28,7 +28,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -52,7 +52,7 @@ check()
 	lib_hdr0_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json1 $TGT_IMG $TMPDIR/json_res1 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res1 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-1m.img.sh b/tests/generators/generate-luks2-metadata-size-1m.img.sh
index baced6eea..833d70b8e 100755
--- a/tests/generators/generate-luks2-metadata-size-1m.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-1m.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -49,7 +49,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-256k-secondary.img.sh b/tests/generators/generate-luks2-metadata-size-256k-secondary.img.sh
index 8d42cc527..f7f131b9b 100755
--- a/tests/generators/generate-luks2-metadata-size-256k-secondary.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-256k-secondary.img.sh
@@ -28,7 +28,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -52,7 +52,7 @@ check()
 	lib_hdr0_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json1 $TGT_IMG $TMPDIR/json_res1 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res1 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-256k.img.sh b/tests/generators/generate-luks2-metadata-size-256k.img.sh
index d65d74856..946457408 100755
--- a/tests/generators/generate-luks2-metadata-size-256k.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-256k.img.sh
@@ -28,7 +28,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -50,7 +50,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-2m-secondary.img.sh b/tests/generators/generate-luks2-metadata-size-2m-secondary.img.sh
index bc95c6849..532029a5e 100755
--- a/tests/generators/generate-luks2-metadata-size-2m-secondary.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-2m-secondary.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -51,7 +51,7 @@ check()
 	lib_hdr0_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json1 $TGT_IMG $TMPDIR/json_res1 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res1 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-2m.img.sh b/tests/generators/generate-luks2-metadata-size-2m.img.sh
index 9997bd49a..d81f60ce0 100755
--- a/tests/generators/generate-luks2-metadata-size-2m.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-2m.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -49,7 +49,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-32k-secondary.img.sh b/tests/generators/generate-luks2-metadata-size-32k-secondary.img.sh
index fe95d3a37..4520cf890 100755
--- a/tests/generators/generate-luks2-metadata-size-32k-secondary.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-32k-secondary.img.sh
@@ -28,7 +28,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -52,7 +52,7 @@ check()
 	lib_hdr0_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json1 $TGT_IMG $TMPDIR/json_res1 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res1 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-32k.img.sh b/tests/generators/generate-luks2-metadata-size-32k.img.sh
index f862e4f2f..a7d13b667 100755
--- a/tests/generators/generate-luks2-metadata-size-32k.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-32k.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -49,7 +49,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-4m-secondary.img.sh b/tests/generators/generate-luks2-metadata-size-4m-secondary.img.sh
index 837aab671..3fc6a2124 100755
--- a/tests/generators/generate-luks2-metadata-size-4m-secondary.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-4m-secondary.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -51,7 +51,7 @@ check()
 	lib_hdr0_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json1 $TGT_IMG $TMPDIR/json_res1 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res1 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-4m.img.sh b/tests/generators/generate-luks2-metadata-size-4m.img.sh
index 55ce0b28b..776582063 100755
--- a/tests/generators/generate-luks2-metadata-size-4m.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-4m.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -49,7 +49,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-512k-secondary.img.sh b/tests/generators/generate-luks2-metadata-size-512k-secondary.img.sh
index 8a46817e4..00825ca9c 100755
--- a/tests/generators/generate-luks2-metadata-size-512k-secondary.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-512k-secondary.img.sh
@@ -28,7 +28,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -52,7 +52,7 @@ check()
 	lib_hdr0_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json1 $TGT_IMG $TMPDIR/json_res1 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res1 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-512k.img.sh b/tests/generators/generate-luks2-metadata-size-512k.img.sh
index a9a002e42..3baf23f66 100755
--- a/tests/generators/generate-luks2-metadata-size-512k.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-512k.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -49,7 +49,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-64k-inv-area-c0.img.sh b/tests/generators/generate-luks2-metadata-size-64k-inv-area-c0.img.sh
index 6b3a906fd..176de9124 100755
--- a/tests/generators/generate-luks2-metadata-size-64k-inv-area-c0.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-64k-inv-area-c0.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -49,7 +49,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-64k-inv-area-c1.img.sh b/tests/generators/generate-luks2-metadata-size-64k-inv-area-c1.img.sh
index 02eb7de4a..2e9696380 100755
--- a/tests/generators/generate-luks2-metadata-size-64k-inv-area-c1.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-64k-inv-area-c1.img.sh
@@ -26,7 +26,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 			 --arg mda $((2*TEST_MDA_SIZE_BYTES)) \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .keyslots."7".area.offset = ( ((.config.keyslots_size | tonumber) + ($mda | tonumber) - (.keyslots."7".area.size | tonumber) + 1) | tostring ) |
@@ -51,7 +51,7 @@ check()
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
 # .keyslots.7.area.offset = ( ((.config.keyslots_size | tonumber) + ($mda | tonumber) - (.keyslots.7.area.size | tonumber) + 1) | tostring ) |
-	jq -c --arg mda $((2*TEST_MDA_SIZE_BYTES)) --arg jsize $JSON_SIZE \
+	_jq --arg mda $((2*TEST_MDA_SIZE_BYTES)) --arg jsize $JSON_SIZE \
 		'if (.keyslots."7".area.offset != ( ((.config.keyslots_size | tonumber) + ($mda | tonumber) - (.keyslots."7".area.size | tonumber) + 1) | tostring )) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-64k-inv-keyslots-size-c0.img.sh b/tests/generators/generate-luks2-metadata-size-64k-inv-keyslots-size-c0.img.sh
index 448729650..0076332ed 100755
--- a/tests/generators/generate-luks2-metadata-size-64k-inv-keyslots-size-c0.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-64k-inv-keyslots-size-c0.img.sh
@@ -26,7 +26,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 			 --arg mda $((2*TEST_MDA_SIZE_BYTES)) \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
@@ -50,7 +50,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE --arg off $DATA_OFFSET --arg mda $((2*TEST_MDA_SIZE_BYTES)) \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE --arg off $DATA_OFFSET --arg mda $((2*TEST_MDA_SIZE_BYTES)) \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize) or
 		    (.config.keyslots_size != (((($off | tonumber) - ($mda | tonumber) + 4096)) | tostring ))
diff --git a/tests/generators/generate-luks2-metadata-size-64k-secondary.img.sh b/tests/generators/generate-luks2-metadata-size-64k-secondary.img.sh
index a2ee1acea..b28b0f34f 100755
--- a/tests/generators/generate-luks2-metadata-size-64k-secondary.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-64k-secondary.img.sh
@@ -28,7 +28,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -52,7 +52,7 @@ check()
 	lib_hdr0_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json1 $TGT_IMG $TMPDIR/json_res1 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res1 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-64k.img.sh b/tests/generators/generate-luks2-metadata-size-64k.img.sh
index 98285acbc..22ed5c1c9 100755
--- a/tests/generators/generate-luks2-metadata-size-64k.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-64k.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -49,7 +49,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-invalid-secondary.img.sh b/tests/generators/generate-luks2-metadata-size-invalid-secondary.img.sh
index 7eb41b552..22e4d6494 100755
--- a/tests/generators/generate-luks2-metadata-size-invalid-secondary.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-invalid-secondary.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -51,7 +51,7 @@ check()
 	lib_hdr0_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json1 $TGT_IMG $TMPDIR/json_res1 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res1 || exit 5
diff --git a/tests/generators/generate-luks2-metadata-size-invalid.img.sh b/tests/generators/generate-luks2-metadata-size-invalid.img.sh
index 24113a1f4..3440826ac 100755
--- a/tests/generators/generate-luks2-metadata-size-invalid.img.sh
+++ b/tests/generators/generate-luks2-metadata-size-invalid.img.sh
@@ -27,7 +27,7 @@ generate()
 	JSON_SIZE=$((TEST_JSN_SIZE*512))
 	DATA_OFFSET=16777216
 
-	json_str=$(jq -c --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
+	json_str=$(_jq --arg jdiff $JSON_DIFF --arg jsize $JSON_SIZE --arg off $DATA_OFFSET \
 		   '.keyslots[].area.offset |= ( . | tonumber + ($jdiff | tonumber) | tostring) |
 		    .config.json_size = $jsize |
 		    .segments."0".offset = $off' $TMPDIR/json0)
@@ -49,7 +49,7 @@ check()
 	lib_hdr1_killed $TEST_MDA_SIZE || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0 $TEST_JSN_SIZE
-	jq -c --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
+	_jq --arg koff $KEYSLOTS_OFFSET --arg jsize $JSON_SIZE \
 		'if ([.keyslots[].area.offset] | map(tonumber) | min | tostring != $koff) or
 		    (.config.json_size != $jsize)
 		then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-missing-keyslot-referenced-in-digest.img.sh b/tests/generators/generate-luks2-missing-keyslot-referenced-in-digest.img.sh
index ae364ea57..f82c70189 100755
--- a/tests/generators/generate-luks2-missing-keyslot-referenced-in-digest.img.sh
+++ b/tests/generators/generate-luks2-missing-keyslot-referenced-in-digest.img.sh
@@ -17,9 +17,9 @@
 generate()
 {
 	read -r json_str_orig < $TMPDIR/json0
-	arr_len=$(jq -c -M '.digests."0".keyslots | length' $TMPDIR/json0)
+	arr_len=$(_jq -M '.digests."0".keyslots | length' $TMPDIR/json0)
 	# add missing keyslot reference in keyslots array of digest '0'
-	json_str=$(jq -r -c -M 'def arr: ["digests", "0", "keyslots"];
+	json_str=$(_jq -r -M 'def arr: ["digests", "0", "keyslots"];
 	       def missks: getpath(["keyslots"]) | keys | max | tonumber + 1 | tostring;
 	       setpath(arr; getpath(arr) + [ missks ])' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
@@ -35,7 +35,7 @@ check()
 	lib_hdr0_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	new_arr_len=$(jq -c -M '.digests."0".keyslots | length' $TMPDIR/json_res0)
+	new_arr_len=$(_jq -M '.digests."0".keyslots | length' $TMPDIR/json_res0)
 	test $((arr_len+1)) -eq $new_arr_len || exit 2
 }
 
diff --git a/tests/generators/generate-luks2-missing-keyslot-referenced-in-token.img.sh b/tests/generators/generate-luks2-missing-keyslot-referenced-in-token.img.sh
index e5da89ce2..e75c0fdae 100755
--- a/tests/generators/generate-luks2-missing-keyslot-referenced-in-token.img.sh
+++ b/tests/generators/generate-luks2-missing-keyslot-referenced-in-token.img.sh
@@ -18,7 +18,7 @@ generate()
 {
 	read -r json_str_orig < $TMPDIR/json0
 	# add missing keyslot reference in keyslots array of token '0'
-	json_str=$(jq -r -c -M 'def missks: getpath(["keyslots"]) | keys | max | tonumber + 1 | tostring;
+	json_str=$(_jq -r -M 'def missks: getpath(["keyslots"]) | keys | max | tonumber + 1 | tostring;
 	      .tokens += {"0":{"type":"dummy","keyslots":[ "0", missks ]}}' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
@@ -33,7 +33,7 @@ check()
 	lib_hdr0_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	new_arr_len=$(jq -c -M '.tokens."0".keyslots | length' $TMPDIR/json_res0)
+	new_arr_len=$(_jq -M '.tokens."0".keyslots | length' $TMPDIR/json_res0)
 	test $new_arr_len -eq 2 || exit 2
 }
 
diff --git a/tests/generators/generate-luks2-missing-segment-referenced-in-digest.img.sh b/tests/generators/generate-luks2-missing-segment-referenced-in-digest.img.sh
index 0cbb3bc0e..5d7c9f6f5 100755
--- a/tests/generators/generate-luks2-missing-segment-referenced-in-digest.img.sh
+++ b/tests/generators/generate-luks2-missing-segment-referenced-in-digest.img.sh
@@ -17,9 +17,9 @@
 generate()
 {
 	read -r json_str_orig < $TMPDIR/json0
-	arr_len=$(jq -c -M '.digests."0".segments | length' $TMPDIR/json0)
+	arr_len=$(_jq -M '.digests."0".segments | length' $TMPDIR/json0)
 	# add missing keyslot reference in keyslots array of digest '0'
-	json_str=$(jq -c 'def arr: ["digests", "0", "segments"];
+	json_str=$(_jq 'def arr: ["digests", "0", "segments"];
 	       def missseg: getpath(["segments"]) | keys | max | tonumber + 1 | tostring;
 	       setpath(arr; getpath(arr) + [ missseg ])' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
@@ -35,7 +35,7 @@ check()
 	lib_hdr0_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	new_arr_len=$(jq -c -M '.digests."0".segments | length' $TMPDIR/json_res0)
+	new_arr_len=$(_jq -M '.digests."0".segments | length' $TMPDIR/json_res0)
 	test $((arr_len+1)) -eq $new_arr_len || exit 2
 }
 
diff --git a/tests/generators/generate-luks2-non-compact-json-4k-token-0.img.sh b/tests/generators/generate-luks2-non-compact-json-4k-token-0.img.sh
index abbaf5a78..6fcd7dde5 100755
--- a/tests/generators/generate-luks2-non-compact-json-4k-token-0.img.sh
+++ b/tests/generators/generate-luks2-non-compact-json-4k-token-0.img.sh
@@ -19,7 +19,7 @@
 generate()
 {
 	# add empty token
-	json_str=$(jq -c '.tokens."0" = {"type":"a", "keyslots":[]}' $TMPDIR/json0)
+	json_str=$(_jq '.tokens."0" = {"type":"a", "keyslots":[]}' $TMPDIR/json0)
 	json_len_orig=${#json_str}
 	test $json_len_orig -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
diff --git a/tests/generators/generate-luks2-non-compact-json-token-0.img.sh b/tests/generators/generate-luks2-non-compact-json-token-0.img.sh
index e5f5208a9..bb355a116 100755
--- a/tests/generators/generate-luks2-non-compact-json-token-0.img.sh
+++ b/tests/generators/generate-luks2-non-compact-json-token-0.img.sh
@@ -18,7 +18,7 @@
 generate()
 {
 	# add empty token
-	json_str=$(jq -c '.tokens."0" = {"type":"a", "keyslots":[]}' $TMPDIR/json0)
+	json_str=$(_jq '.tokens."0" = {"type":"a", "keyslots":[]}' $TMPDIR/json0)
 	json_len_orig=${#json_str}
 	test $json_len_orig -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
diff --git a/tests/generators/generate-luks2-overlapping-areas-c0-json0.img.sh b/tests/generators/generate-luks2-overlapping-areas-c0-json0.img.sh
index 60cd23ea7..858c639f9 100755
--- a/tests/generators/generate-luks2-overlapping-areas-c0-json0.img.sh
+++ b/tests/generators/generate-luks2-overlapping-areas-c0-json0.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# copy area 6 offset and length into area 7
-	json_str=$(jq -c '.keyslots."7".area.offset = .keyslots."6".area.offset |
+	json_str=$(_jq '.keyslots."7".area.offset = .keyslots."6".area.offset |
 	       .keyslots."7".area.size = .keyslots."6".area.size' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if (.keyslots."6".area.offset != .keyslots."7".area.offset) or (.keyslots."6".area.size != .keyslots."7".area.size)
+	_jq 'if (.keyslots."6".area.offset != .keyslots."7".area.offset) or (.keyslots."6".area.size != .keyslots."7".area.size)
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-overlapping-areas-c1-json0.img.sh b/tests/generators/generate-luks2-overlapping-areas-c1-json0.img.sh
index 19ca941f8..b0a302b4b 100755
--- a/tests/generators/generate-luks2-overlapping-areas-c1-json0.img.sh
+++ b/tests/generators/generate-luks2-overlapping-areas-c1-json0.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# make area 7 being included in area 6
-	json_str=$(jq -c '.keyslots."7".area.offset = (.keyslots."6".area.offset | tonumber + 1 | tostring ) |
+	json_str=$(_jq '.keyslots."7".area.offset = (.keyslots."6".area.offset | tonumber + 1 | tostring ) |
 	       .keyslots."7".area.size = ( .keyslots."6".area.size | tonumber - 1 | tostring)' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if (.keyslots."7".area.offset != (.keyslots."6".area.offset | tonumber + 1 | tostring)) or
+	_jq 'if (.keyslots."7".area.offset != (.keyslots."6".area.offset | tonumber + 1 | tostring)) or
 		  (.keyslots."7".area.size != (.keyslots."6".area.size | tonumber - 1 | tostring)) or
 		  (.keyslots."7".area.size | tonumber <= 0)
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
diff --git a/tests/generators/generate-luks2-overlapping-areas-c2-json0.img.sh b/tests/generators/generate-luks2-overlapping-areas-c2-json0.img.sh
index cd62a730c..5646fdd65 100755
--- a/tests/generators/generate-luks2-overlapping-areas-c2-json0.img.sh
+++ b/tests/generators/generate-luks2-overlapping-areas-c2-json0.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# make area 7 being included in area 6
-	json_str=$(jq -c '.keyslots."7".area.offset = ([ .keyslots."6".area.offset, .keyslots."6".area.size ] | map(tonumber) | add - 1 | tostring)' $TMPDIR/json0)
+	json_str=$(_jq '.keyslots."7".area.offset = ([ .keyslots."6".area.offset, .keyslots."6".area.size ] | map(tonumber) | add - 1 | tostring)' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .keyslots."7".area.offset != ([.keyslots."6".area.offset, .keyslots."6".area.size ] | map(tonumber) | add - 1 | tostring)
+	_jq 'if .keyslots."7".area.offset != ([.keyslots."6".area.offset, .keyslots."6".area.size ] | map(tonumber) | add - 1 | tostring)
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-pbkdf2-leftover-params-0.img.sh b/tests/generators/generate-luks2-pbkdf2-leftover-params-0.img.sh
index 296d18bfc..cc4e54c92 100755
--- a/tests/generators/generate-luks2-pbkdf2-leftover-params-0.img.sh
+++ b/tests/generators/generate-luks2-pbkdf2-leftover-params-0.img.sh
@@ -17,8 +17,8 @@
 generate()
 {
 	# add keyslot 1 to second digest
-	obj_len=$(jq -c -M '.keyslots."2".kdf | length' $TMPDIR/json0)
-	json_str=$(jq -r -c -M '.keyslots."2".kdf.type = "argon2i" | .keyslots."2".kdf.iterations = 1001 | .keyslots."2".kdf.hash = "sha256"' $TMPDIR/json0)
+	obj_len=$(_jq -M '.keyslots."2".kdf | length' $TMPDIR/json0)
+	json_str=$(_jq -r -M '.keyslots."2".kdf.type = "argon2i" | .keyslots."2".kdf.iterations = 1001 | .keyslots."2".kdf.hash = "sha256"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -32,7 +32,7 @@ check()
 	lib_hdr0_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	new_obj_len=$(jq -c -M '.keyslots."2".kdf | length' $TMPDIR/json_res0)
+	new_obj_len=$(_jq -M '.keyslots."2".kdf | length' $TMPDIR/json_res0)
 	test $((obj_len+2)) -eq $new_obj_len || exit 2
 }
 
diff --git a/tests/generators/generate-luks2-pbkdf2-leftover-params-1.img.sh b/tests/generators/generate-luks2-pbkdf2-leftover-params-1.img.sh
index 4e4f5bd45..ca56eadac 100755
--- a/tests/generators/generate-luks2-pbkdf2-leftover-params-1.img.sh
+++ b/tests/generators/generate-luks2-pbkdf2-leftover-params-1.img.sh
@@ -17,8 +17,8 @@
 generate()
 {
 	# add keyslot 1 to second digest
-	obj_len=$(jq -c -M '.keyslots."2".kdf | length' $TMPDIR/json0)
-	json_str=$(jq -r -c -M '.keyslots."2".kdf.type = "argon2id" | .keyslots."2".kdf.iterations = 1001 | .keyslots."2".kdf.hash = "sha256"' $TMPDIR/json0)
+	obj_len=$(_jq -M '.keyslots."2".kdf | length' $TMPDIR/json0)
+	json_str=$(_jq -r -M '.keyslots."2".kdf.type = "argon2id" | .keyslots."2".kdf.iterations = 1001 | .keyslots."2".kdf.hash = "sha256"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -32,7 +32,7 @@ check()
 	lib_hdr0_checksum || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	new_obj_len=$(jq -c -M '.keyslots."2".kdf | length' $TMPDIR/json_res0)
+	new_obj_len=$(_jq -M '.keyslots."2".kdf | length' $TMPDIR/json_res0)
 	test $((obj_len+2)) -eq $new_obj_len || exit 2
 }
 
diff --git a/tests/generators/generate-luks2-segment-crypt-empty-encryption.img.sh b/tests/generators/generate-luks2-segment-crypt-empty-encryption.img.sh
index 4e1aa9bd1..bd43a36b8 100755
--- a/tests/generators/generate-luks2-segment-crypt-empty-encryption.img.sh
+++ b/tests/generators/generate-luks2-segment-crypt-empty-encryption.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".encryption = ""' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".encryption = ""' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".encryption != ""
+	_jq 'if .segments."0".encryption != ""
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-crypt-missing-encryption.img.sh b/tests/generators/generate-luks2-segment-crypt-missing-encryption.img.sh
index cdd621682..2230429b9 100755
--- a/tests/generators/generate-luks2-segment-crypt-missing-encryption.img.sh
+++ b/tests/generators/generate-luks2-segment-crypt-missing-encryption.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c 'del(.segments."0".encryption)' $TMPDIR/json0)
+	json_str=$(_jq 'del(.segments."0".encryption)' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".encryption
+	_jq 'if .segments."0".encryption
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-crypt-missing-ivoffset.img.sh b/tests/generators/generate-luks2-segment-crypt-missing-ivoffset.img.sh
index 8c86ad5fd..9fa9a87b4 100755
--- a/tests/generators/generate-luks2-segment-crypt-missing-ivoffset.img.sh
+++ b/tests/generators/generate-luks2-segment-crypt-missing-ivoffset.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c 'del(.segments."0".iv_tweak)' $TMPDIR/json0)
+	json_str=$(_jq 'del(.segments."0".iv_tweak)' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".iv_tweak
+	_jq 'if .segments."0".iv_tweak
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-crypt-missing-sectorsize.img.sh b/tests/generators/generate-luks2-segment-crypt-missing-sectorsize.img.sh
index ab0b8ec9f..c3d849499 100755
--- a/tests/generators/generate-luks2-segment-crypt-missing-sectorsize.img.sh
+++ b/tests/generators/generate-luks2-segment-crypt-missing-sectorsize.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c 'del(.segments."0".sector_size)' $TMPDIR/json0)
+	json_str=$(_jq 'del(.segments."0".sector_size)' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".sector_size
+	_jq 'if .segments."0".sector_size
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-crypt-wrong-encryption.img.sh b/tests/generators/generate-luks2-segment-crypt-wrong-encryption.img.sh
index a9bac8ddc..27921883d 100755
--- a/tests/generators/generate-luks2-segment-crypt-wrong-encryption.img.sh
+++ b/tests/generators/generate-luks2-segment-crypt-wrong-encryption.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".encryption = {}' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".encryption = {}' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".encryption | type != "object"
+	_jq 'if .segments."0".encryption | type != "object"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-crypt-wrong-ivoffset.img.sh b/tests/generators/generate-luks2-segment-crypt-wrong-ivoffset.img.sh
index 6611c3242..ceb5ef26f 100755
--- a/tests/generators/generate-luks2-segment-crypt-wrong-ivoffset.img.sh
+++ b/tests/generators/generate-luks2-segment-crypt-wrong-ivoffset.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".iv_tweak = "dynamic"' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".iv_tweak = "dynamic"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".iv_tweak != "dynamic"
+	_jq 'if .segments."0".iv_tweak != "dynamic"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-0.img.sh b/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-0.img.sh
index d0d144963..419c9726f 100755
--- a/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-0.img.sh
+++ b/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-0.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".sector_size = 1023' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".sector_size = 1023' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".sector_size != 1023
+	_jq 'if .segments."0".sector_size != 1023
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-1.img.sh b/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-1.img.sh
index d7fabe467..128b73d2a 100755
--- a/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-1.img.sh
+++ b/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-1.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".sector_size = "4096"' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".sector_size = "4096"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".sector_size != "4096"
+	_jq 'if .segments."0".sector_size != "4096"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-2.img.sh b/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-2.img.sh
index 14dd258ef..67e4b2d4e 100755
--- a/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-2.img.sh
+++ b/tests/generators/generate-luks2-segment-crypt-wrong-sectorsize-2.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".sector_size = -1024' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".sector_size = -1024' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".sector_size != -1024
+	_jq 'if .segments."0".sector_size != -1024
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-missing-offset.img.sh b/tests/generators/generate-luks2-segment-missing-offset.img.sh
index 66562be6d..b98152995 100755
--- a/tests/generators/generate-luks2-segment-missing-offset.img.sh
+++ b/tests/generators/generate-luks2-segment-missing-offset.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c 'del(.segments."0".offset)' $TMPDIR/json0)
+	json_str=$(_jq 'del(.segments."0".offset)' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".offset
+	_jq 'if .segments."0".offset
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-missing-size.img.sh b/tests/generators/generate-luks2-segment-missing-size.img.sh
index ccfc2dc33..7b05ece0b 100755
--- a/tests/generators/generate-luks2-segment-missing-size.img.sh
+++ b/tests/generators/generate-luks2-segment-missing-size.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c 'del(.segments."0".size)' $TMPDIR/json0)
+	json_str=$(_jq 'del(.segments."0".size)' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".size
+	_jq 'if .segments."0".size
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-missing-type.img.sh b/tests/generators/generate-luks2-segment-missing-type.img.sh
index 5cb0cf5c5..4bb133b98 100755
--- a/tests/generators/generate-luks2-segment-missing-type.img.sh
+++ b/tests/generators/generate-luks2-segment-missing-type.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c 'del(.segments."0".type)' $TMPDIR/json0)
+	json_str=$(_jq 'del(.segments."0".type)' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".type
+	_jq 'if .segments."0".type
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-two.img.sh b/tests/generators/generate-luks2-segment-two.img.sh
index 1ec04706b..fff4628c4 100755
--- a/tests/generators/generate-luks2-segment-two.img.sh
+++ b/tests/generators/generate-luks2-segment-two.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".size = "512" | .segments."1" = {type:"some", offset: (.segments."0".offset | tonumber + 512 | tostring), size: "dynamic"}' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".size = "512" | .segments."1" = {type:"some", offset: (.segments."0".offset | tonumber + 512 | tostring), size: "dynamic"}' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."1" | type != "object"
+	_jq 'if .segments."1" | type != "object"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-unknown-type.img.sh b/tests/generators/generate-luks2-segment-unknown-type.img.sh
index 653f4bdac..e283b88d0 100755
--- a/tests/generators/generate-luks2-segment-unknown-type.img.sh
+++ b/tests/generators/generate-luks2-segment-unknown-type.img.sh
@@ -17,7 +17,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0" = {type:"some_type", offset: .segments."0".offset, size: .segments."0".size, a_field:0}' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0" = {type:"some_type", offset: .segments."0".offset, size: .segments."0".size, a_field:0}' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".type != "some_type"
+	_jq 'if .segments."0".type != "some_type"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-wrong-backup-key-0.img.sh b/tests/generators/generate-luks2-segment-wrong-backup-key-0.img.sh
index a5bf80605..74ad40130 100755
--- a/tests/generators/generate-luks2-segment-wrong-backup-key-0.img.sh
+++ b/tests/generators/generate-luks2-segment-wrong-backup-key-0.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# create illegal backup segment key (used to be bug in 32bit implementations)
-	json_str=$(jq -c '.segments[(.segments | length + 1 | tostring)] = { "type" : "linear", "offset" : "512", "size" : "512", "flags":["backup-x"]}' $TMPDIR/json0)
+	json_str=$(_jq '.segments[(.segments | length + 1 | tostring)] = { "type" : "linear", "offset" : "512", "size" : "512", "flags":["backup-x"]}' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments | length < 2
+	_jq 'if .segments | length < 2
 	       then error("Unexpected segments count") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-wrong-backup-key-1.img.sh b/tests/generators/generate-luks2-segment-wrong-backup-key-1.img.sh
index 084566dd0..465f13be3 100755
--- a/tests/generators/generate-luks2-segment-wrong-backup-key-1.img.sh
+++ b/tests/generators/generate-luks2-segment-wrong-backup-key-1.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# create illegal backup segment key (used to be bug in 32bit implementations)
-	json_str=$(jq -c '(.segments."0".offset | tonumber) as $i | .segments[range(1;65) | tostring] = { "type" : "linear", "offset" : ($i + 512 | tostring), "size" : "512" } | .segments."268435472" = { "type":"linear","offset":"512","size":"512","flags":["backup-x"]}' $TMPDIR/json0)
+	json_str=$(_jq '(.segments."0".offset | tonumber) as $i | .segments[range(1;65) | tostring] = { "type" : "linear", "offset" : ($i + 512 | tostring), "size" : "512" } | .segments."268435472" = { "type":"linear","offset":"512","size":"512","flags":["backup-x"]}' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments | length < 64
+	_jq 'if .segments | length < 64
 	       then error("Unexpected segments count") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-wrong-flags-element.img.sh b/tests/generators/generate-luks2-segment-wrong-flags-element.img.sh
index 39a1c3824..9e23aa3cd 100755
--- a/tests/generators/generate-luks2-segment-wrong-flags-element.img.sh
+++ b/tests/generators/generate-luks2-segment-wrong-flags-element.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".flags = [ "hello", 1 ]' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".flags = [ "hello", 1 ]' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".flags != [ "hello", 1  ]
+	_jq 'if .segments."0".flags != [ "hello", 1  ]
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-wrong-flags.img.sh b/tests/generators/generate-luks2-segment-wrong-flags.img.sh
index 22ac9f7e9..7a049c790 100755
--- a/tests/generators/generate-luks2-segment-wrong-flags.img.sh
+++ b/tests/generators/generate-luks2-segment-wrong-flags.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".flags = "hello"' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".flags = "hello"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".flags != "hello"
+	_jq 'if .segments."0".flags != "hello"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-wrong-offset.img.sh b/tests/generators/generate-luks2-segment-wrong-offset.img.sh
index 69a704309..f2928cf3f 100755
--- a/tests/generators/generate-luks2-segment-wrong-offset.img.sh
+++ b/tests/generators/generate-luks2-segment-wrong-offset.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".offset = "-42"' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".offset = "-42"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".offset != "-42"
+	_jq 'if .segments."0".offset != "-42"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-wrong-size-0.img.sh b/tests/generators/generate-luks2-segment-wrong-size-0.img.sh
index 0d9c1aea6..07798b7f0 100755
--- a/tests/generators/generate-luks2-segment-wrong-size-0.img.sh
+++ b/tests/generators/generate-luks2-segment-wrong-size-0.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".size = 4096' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".size = 4096' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".size != 4096
+	_jq 'if .segments."0".size != 4096
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-wrong-size-1.img.sh b/tests/generators/generate-luks2-segment-wrong-size-1.img.sh
index c3e89330e..a396be5f9 100755
--- a/tests/generators/generate-luks2-segment-wrong-size-1.img.sh
+++ b/tests/generators/generate-luks2-segment-wrong-size-1.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".size = "automatic"' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".size = "automatic"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".size != "automatic"
+	_jq 'if .segments."0".size != "automatic"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-wrong-size-2.img.sh b/tests/generators/generate-luks2-segment-wrong-size-2.img.sh
index 83d9c2f82..530d83992 100755
--- a/tests/generators/generate-luks2-segment-wrong-size-2.img.sh
+++ b/tests/generators/generate-luks2-segment-wrong-size-2.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".size = "511"' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".size = "511"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".size != "511"
+	_jq 'if .segments."0".size != "511"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-segment-wrong-type.img.sh b/tests/generators/generate-luks2-segment-wrong-type.img.sh
index 0f7a18ef4..dac6bec65 100755
--- a/tests/generators/generate-luks2-segment-wrong-type.img.sh
+++ b/tests/generators/generate-luks2-segment-wrong-type.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# remove mandatory encryption field
-	json_str=$(jq -c '.segments."0".type = 42' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".type = 42' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".type != 42
+	_jq 'if .segments."0".type != 42
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-uint64-max-segment-size.img.sh b/tests/generators/generate-luks2-uint64-max-segment-size.img.sh
index ac0c7ee04..d15dbd2d8 100755
--- a/tests/generators/generate-luks2-uint64-max-segment-size.img.sh
+++ b/tests/generators/generate-luks2-uint64-max-segment-size.img.sh
@@ -17,7 +17,7 @@
 generate()
 {
 	# UINT64_MAX - 511 (so that it's sector aligned)
-	json_str=$(jq -c '.segments."0".size = "18446744073709551104"' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".size = "18446744073709551104"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -30,7 +30,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".size != "18446744073709551104"
+	_jq 'if .segments."0".size != "18446744073709551104"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-uint64-overflow-segment-size.img.sh b/tests/generators/generate-luks2-uint64-overflow-segment-size.img.sh
index 9a3ada618..a16723054 100755
--- a/tests/generators/generate-luks2-uint64-overflow-segment-size.img.sh
+++ b/tests/generators/generate-luks2-uint64-overflow-segment-size.img.sh
@@ -15,7 +15,7 @@
 
 generate()
 {
-	json_str=$(jq -c '.segments."0".size = "18446744073709551616"' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".size = "18446744073709551616"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -28,7 +28,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".size != "18446744073709551616"
+	_jq 'if .segments."0".size != "18446744073709551616"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/generate-luks2-uint64-signed-segment-size.img.sh b/tests/generators/generate-luks2-uint64-signed-segment-size.img.sh
index 2f16e7069..6e40e1c9b 100755
--- a/tests/generators/generate-luks2-uint64-signed-segment-size.img.sh
+++ b/tests/generators/generate-luks2-uint64-signed-segment-size.img.sh
@@ -16,7 +16,7 @@
 generate()
 {
 	# UINT64_MAX + 1 (it's 512 sector aligned)
-	json_str=$(jq -c '.segments."0".size = "-512"' $TMPDIR/json0)
+	json_str=$(_jq '.segments."0".size = "-512"' $TMPDIR/json0)
 	test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
 
 	write_luks2_json "$json_str" $TMPDIR/json0
@@ -29,7 +29,7 @@ check()
 	lib_hdr1_killed || exit 2
 
 	read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
-	jq -c 'if .segments."0".size != "-512"
+	_jq 'if .segments."0".size != "-512"
 	       then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
 }
 
diff --git a/tests/generators/lib.sh b/tests/generators/lib.sh
index 07365d7bc..51d387006 100644
--- a/tests/generators/lib.sh
+++ b/tests/generators/lib.sh
@@ -175,6 +175,11 @@ _dd()
 	dd $@ status=none
 }
 
+_jq()
+{
+	jq -c "$@"
+}
+
 write_bin_hdr_size() {
 	printf '%016x' $2 | xxd -r -p -l 16 | _dd of=$1 bs=8 count=1 seek=1 conv=notrunc
 }

From 6298269486354834d4037ba294c91452dec4c2f5 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 17 Apr 2026 18:02:12 +0200
Subject: [PATCH 074/244] ci: Fix jq no longer handling 0x00 characters

Due to jq fix for CVE-2026-33948, we cannot use json with trailing 0x00.

Just remove them and parse through jq.

Fixes: #989
---
 tests/generators/lib.sh | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/generators/lib.sh b/tests/generators/lib.sh
index 51d387006..440dff7c5 100644
--- a/tests/generators/lib.sh
+++ b/tests/generators/lib.sh
@@ -175,9 +175,12 @@ _dd()
 	dd $@ status=none
 }
 
+# Remove all trailing 0x00 characters
+# Last parameter must be an input file
 _jq()
 {
-	jq -c "$@"
+	local last="${!#}"
+	sed 's/\x00*$//' "$last" | jq -c "${@:1:$#-1}"
 }
 
 write_bin_hdr_size() {

From bccf4da7e5a3e7da40bf7bb8fedbe13147583d85 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 10 Dec 2025 15:44:14 +0100
Subject: [PATCH 075/244] reencrypt: update internal reencryption error state
 descriptions.

---
 lib/luks2/luks2_reencrypt.c | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index 96749f7d3..dcf349fe5 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -840,7 +840,22 @@ static crypt_reencrypt_direction_info reencrypt_direction(struct luks2_hdr *hdr)
 	return di;
 }
 
-typedef enum { REENC_OK = 0, REENC_ERR, REENC_ROLLBACK, REENC_FATAL } reenc_status_t;
+typedef enum { REENC_OK = 0,
+	       /* to be removed in next commit */
+	       REENC_ERR,
+		/*
+		 * The state not requiring LUKS2 reencryption recovery. We can rollback
+		 * to last known safe state (hold in memory since last metadata write)
+		 * and teardown reencryption device stack (if used).
+		 * The reencryption fails but does not require recovery
+		 */
+	       REENC_ROLLBACK,
+	       /*
+		* Error while writing hotzone (short write or sync fail) or failed metadata
+		* update post hotzone write.
+		*/
+	       REENC_FATAL
+} reenc_status_t;
 
 void LUKS2_reencrypt_protection_erase(struct reenc_protection *rp)
 {

From f26218bfc08d7882a6bc814235d1f0f7c3f4997f Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 10 Dec 2025 16:14:36 +0100
Subject: [PATCH 076/244] reencrypt: merge REENC_ERR and REENC_ROLLBACK errors
 in one.

The REENC_ERR was unused for anything meaningful and also
the error recovery from non-fatal reencryption failures
will be managed by same code in future commits.
---
 lib/luks2/luks2_reencrypt.c | 33 ++++++++++++++++-----------------
 1 file changed, 16 insertions(+), 17 deletions(-)

diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index dcf349fe5..5977a6e96 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -841,8 +841,6 @@ static crypt_reencrypt_direction_info reencrypt_direction(struct luks2_hdr *hdr)
 }
 
 typedef enum { REENC_OK = 0,
-	       /* to be removed in next commit */
-	       REENC_ERR,
 		/*
 		 * The state not requiring LUKS2 reencryption recovery. We can rollback
 		 * to last known safe state (hold in memory since last metadata write)
@@ -2381,7 +2379,8 @@ static int reencrypt_init_device_stack(struct crypt_device *cd,
  * 	   usually it would hint some collision with another userspace process touching
  * 	   dm devices directly.
  */
-static int reenc_refresh_helper_devices(struct crypt_device *cd, const char *overlay, const char *hotzone)
+static reenc_status_t reenc_refresh_helper_devices(struct crypt_device *cd, const char *overlay,
+		const char *hotzone)
 {
 	int r;
 
@@ -2395,25 +2394,27 @@ static int reenc_refresh_helper_devices(struct crypt_device *cd, const char *ove
 	r = dm_suspend_device(cd, overlay, DM_SUSPEND_SKIP_LOCKFS | DM_SUSPEND_NOFLUSH);
 	if (r) {
 		log_err(cd, _("Failed to suspend device %s."), overlay);
-		return r;
+		return REENC_ROLLBACK;
 	}
 
 	/* suspend HZ device */
 	r = dm_suspend_device(cd, hotzone, DM_SUSPEND_SKIP_LOCKFS | DM_SUSPEND_NOFLUSH);
 	if (r) {
 		log_err(cd, _("Failed to suspend device %s."), hotzone);
-		return r;
+		return REENC_ROLLBACK;
 	}
 
 	/* resume overlay device: inactive table (with hotozne) -> live */
 	r = dm_resume_device(cd, overlay, DM_RESUME_PRIVATE);
-	if (r)
+	if (r) {
 		log_err(cd, _("Failed to resume device %s."), overlay);
+		return REENC_ROLLBACK;
+	}
 
-	return r;
+	return REENC_OK;
 }
 
-static int reencrypt_refresh_overlay_devices(struct crypt_device *cd,
+static reenc_status_t reencrypt_refresh_overlay_devices(struct crypt_device *cd,
 		struct luks2_hdr *hdr,
 		const char *overlay,
 		const char *hotzone,
@@ -2425,16 +2426,14 @@ static int reencrypt_refresh_overlay_devices(struct crypt_device *cd,
 	int r = reencrypt_load_overlay_device(cd, hdr, overlay, hotzone_device, vks, device_size, flags);
 	if (r) {
 		log_err(cd, _("Failed to reload device %s."), overlay);
-		return REENC_ERR;
+		return REENC_ROLLBACK;
 	}
 
 	r = reenc_refresh_helper_devices(cd, overlay, hotzone);
-	if (r) {
+	if (r != REENC_OK)
 		log_err(cd, _("Failed to refresh reencryption devices stack."));
-		return REENC_ROLLBACK;
-	}
 
-	return REENC_OK;
+	return r;
 }
 
 static int reencrypt_move_data(struct crypt_device *cd,
@@ -4070,12 +4069,12 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 	/* in memory only */
 	r = reencrypt_make_segments(cd, hdr, rh, device_size);
 	if (r)
-		return REENC_ERR;
+		return REENC_ROLLBACK;
 
 	r = reencrypt_assign_segments(cd, hdr, rh, 1, 0);
 	if (r) {
 		log_err(cd, _("Failed to set device segments for next reencryption hotzone."));
-		return REENC_ERR;
+		return REENC_ROLLBACK;
 	}
 
 	log_dbg(cd, "Reencrypting chunk starting at offset: %" PRIu64 ", size :%" PRIu64 ".", rh->offset, rh->length);
@@ -4162,7 +4161,7 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 		r = dm_resume_device(cd, rh->hotzone_name, DM_RESUME_PRIVATE);
 		if (r) {
 			log_err(cd, _("Failed to resume device %s."), rh->hotzone_name);
-			return REENC_ERR;
+			return REENC_ROLLBACK;
 		}
 	}
 
@@ -4392,7 +4391,7 @@ int crypt_reencrypt_run(
 		r = reencrypt_context_update(cd, rh);
 		if (r) {
 			log_err(cd, _("Failed to update reencryption context."));
-			rs = REENC_ERR;
+			rs = REENC_ROLLBACK;
 			break;
 		}
 

From 3d49f68bfb6c14c88db260d498d63c306fa6173a Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 10 Dec 2025 16:18:54 +0100
Subject: [PATCH 077/244] reencrypt: better name error values to match the
 description.

---
 lib/luks2/luks2_reencrypt.c | 38 ++++++++++++++++++-------------------
 1 file changed, 19 insertions(+), 19 deletions(-)

diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index 5977a6e96..544e78b8c 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -847,12 +847,12 @@ typedef enum { REENC_OK = 0,
 		 * and teardown reencryption device stack (if used).
 		 * The reencryption fails but does not require recovery
 		 */
-	       REENC_ROLLBACK,
+	       REENC_ERR_ROLLBACK_MEMORY,
 	       /*
 		* Error while writing hotzone (short write or sync fail) or failed metadata
 		* update post hotzone write.
 		*/
-	       REENC_FATAL
+	       REENC_ERR_FATAL
 } reenc_status_t;
 
 void LUKS2_reencrypt_protection_erase(struct reenc_protection *rp)
@@ -2394,21 +2394,21 @@ static reenc_status_t reenc_refresh_helper_devices(struct crypt_device *cd, cons
 	r = dm_suspend_device(cd, overlay, DM_SUSPEND_SKIP_LOCKFS | DM_SUSPEND_NOFLUSH);
 	if (r) {
 		log_err(cd, _("Failed to suspend device %s."), overlay);
-		return REENC_ROLLBACK;
+		return REENC_ERR_ROLLBACK_MEMORY;
 	}
 
 	/* suspend HZ device */
 	r = dm_suspend_device(cd, hotzone, DM_SUSPEND_SKIP_LOCKFS | DM_SUSPEND_NOFLUSH);
 	if (r) {
 		log_err(cd, _("Failed to suspend device %s."), hotzone);
-		return REENC_ROLLBACK;
+		return REENC_ERR_ROLLBACK_MEMORY;
 	}
 
 	/* resume overlay device: inactive table (with hotozne) -> live */
 	r = dm_resume_device(cd, overlay, DM_RESUME_PRIVATE);
 	if (r) {
 		log_err(cd, _("Failed to resume device %s."), overlay);
-		return REENC_ROLLBACK;
+		return REENC_ERR_ROLLBACK_MEMORY;
 	}
 
 	return REENC_OK;
@@ -2426,7 +2426,7 @@ static reenc_status_t reencrypt_refresh_overlay_devices(struct crypt_device *cd,
 	int r = reencrypt_load_overlay_device(cd, hdr, overlay, hotzone_device, vks, device_size, flags);
 	if (r) {
 		log_err(cd, _("Failed to reload device %s."), overlay);
-		return REENC_ROLLBACK;
+		return REENC_ERR_ROLLBACK_MEMORY;
 	}
 
 	r = reenc_refresh_helper_devices(cd, overlay, hotzone);
@@ -4069,12 +4069,12 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 	/* in memory only */
 	r = reencrypt_make_segments(cd, hdr, rh, device_size);
 	if (r)
-		return REENC_ROLLBACK;
+		return REENC_ERR_ROLLBACK_MEMORY;
 
 	r = reencrypt_assign_segments(cd, hdr, rh, 1, 0);
 	if (r) {
 		log_err(cd, _("Failed to set device segments for next reencryption hotzone."));
-		return REENC_ROLLBACK;
+		return REENC_ERR_ROLLBACK_MEMORY;
 	}
 
 	log_dbg(cd, "Reencrypting chunk starting at offset: %" PRIu64 ", size :%" PRIu64 ".", rh->offset, rh->length);
@@ -4092,7 +4092,7 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 				rh->wflags1);
 		if (r) {
 			log_err(cd, _("Failed to initialize old segment storage wrapper."));
-			return REENC_ROLLBACK;
+			return REENC_ERR_ROLLBACK_MEMORY;
 		}
 
 		if (rh->rp_moved_segment.type != REENC_PROTECTION_NOT_SET) {
@@ -4104,7 +4104,7 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 	r = reencrypt_hotzone_protect_ready(cd, rp);
 	if (r) {
 		log_err(cd, _("Failed to initialize hotzone protection."));
-		return REENC_ROLLBACK;
+		return REENC_ERR_ROLLBACK_MEMORY;
 	}
 
 	if (online) {
@@ -4119,7 +4119,7 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 	if (rh->read < 0) {
 		/* severity normal */
 		log_err(cd, _("Failed to read hotzone area starting at %" PRIu64 "."), rh->offset);
-		return REENC_ROLLBACK;
+		return REENC_ERR_ROLLBACK_MEMORY;
 	}
 
 	/* metadata commit point */
@@ -4127,24 +4127,24 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 	if (r < 0) {
 		/* severity normal */
 		log_err(cd, _("Failed to write reencryption resilience metadata."));
-		return REENC_ROLLBACK;
+		return REENC_ERR_ROLLBACK_MEMORY;
 	}
 
 	r = crypt_storage_wrapper_decrypt(rh->cw1, rh->offset, rh->reenc_buffer, rh->read);
 	if (r) {
 		/* severity normal */
 		log_err(cd, _("Decryption failed."));
-		return REENC_ROLLBACK;
+		return REENC_ERR_ROLLBACK_MEMORY;
 	}
 	if (rh->read != crypt_storage_wrapper_encrypt_write(rh->cw2, rh->offset, rh->reenc_buffer, rh->read)) {
 		/* severity fatal */
 		log_err(cd, _("Failed to write hotzone area starting at %" PRIu64 "."), rh->offset);
-		return REENC_FATAL;
+		return REENC_ERR_FATAL;
 	}
 
 	if (rp->type != REENC_PROTECTION_NONE && crypt_storage_wrapper_datasync(rh->cw2)) {
 		log_err(cd, _("Failed to sync data."));
-		return REENC_FATAL;
+		return REENC_ERR_FATAL;
 	}
 
 	/* metadata commit safe point */
@@ -4152,7 +4152,7 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 	if (r) {
 		/* severity fatal */
 		log_err(cd, _("Failed to update metadata after current reencryption hotzone completed."));
-		return REENC_FATAL;
+		return REENC_ERR_FATAL;
 	}
 
 	if (online) {
@@ -4161,7 +4161,7 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 		r = dm_resume_device(cd, rh->hotzone_name, DM_RESUME_PRIVATE);
 		if (r) {
 			log_err(cd, _("Failed to resume device %s."), rh->hotzone_name);
-			return REENC_ROLLBACK;
+			return REENC_ERR_ROLLBACK_MEMORY;
 		}
 	}
 
@@ -4317,7 +4317,7 @@ static int reencrypt_teardown(struct crypt_device *cd, struct luks2_hdr *hdr,
 			progress(rh->device_size, rh->progress, usrptr);
 		r = reencrypt_teardown_ok(cd, hdr, rh);
 		break;
-	case REENC_FATAL:
+	case REENC_ERR_FATAL:
 		reencrypt_teardown_fatal(cd, rh);
 		/* fall-through */
 	default:
@@ -4391,7 +4391,7 @@ int crypt_reencrypt_run(
 		r = reencrypt_context_update(cd, rh);
 		if (r) {
 			log_err(cd, _("Failed to update reencryption context."));
-			rs = REENC_ROLLBACK;
+			rs = REENC_ERR_ROLLBACK_MEMORY;
 			break;
 		}
 

From ab4753756a2084928174b97b5b6a6abe970712d9 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 10 Dec 2025 17:12:28 +0100
Subject: [PATCH 078/244] reencrypt: refactor overlay devices teardown.

---
 lib/luks2/luks2_reencrypt.c | 64 +++++++++++++++++++++++++++----------
 1 file changed, 47 insertions(+), 17 deletions(-)

diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index 544e78b8c..21bd6674f 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -4232,6 +4232,48 @@ static int reencrypt_wipe_unused_device_area(struct crypt_device *cd, struct luk
 	return r;
 }
 
+static int replace_hotzone_device_with_error(struct crypt_device *cd, struct luks2_reencrypt *rh)
+{
+	log_dbg(cd, "Replacing device %s with dm-error.", rh->hotzone_name);
+	if (dm_error_device(cd, rh->hotzone_name)) {
+		log_err(cd, _("Failed to replace suspended device %s with dm-error target."), rh->hotzone_name);
+		log_err(cd, _("Do not resume the device unless replaced with error target manually."));
+		return -EIO;
+	}
+
+	return 0;
+}
+
+static int teardown_overlay_devices(struct crypt_device *cd, struct luks2_reencrypt *rh)
+{
+	int r;
+
+	/* Reload device with current LUKS2 segments */
+	r = LUKS2_reload(cd, rh->device_name, rh->vks, rh->device_size, rh->flags);
+	if (r) {
+		log_err(cd, _("Failed to reload device %s."), rh->device_name);
+		return r;
+	}
+
+	/* Now we can switch original top level device away from overlay device */
+	r = dm_resume_device(cd, rh->device_name, DM_SUSPEND_SKIP_LOCKFS | DM_SUSPEND_NOFLUSH);
+	if (r) {
+		log_err(cd, _("Failed to resume device %s."), rh->device_name);
+		return r;
+	}
+
+	/*
+	 * This should not affect teardown return value. There may be other processes
+	 * touching those devices despite being private.
+	 */
+	if (dm_remove_device(cd, rh->overlay_name, 0))
+		log_dbg(cd, "Failed to remove unused device %s", rh->overlay_name);
+	if (dm_remove_device(cd, rh->hotzone_name, 0))
+		log_dbg(cd, "Failed to remove unused device %s", rh->hotzone_name);
+
+	return 0;
+}
+
 static int reencrypt_teardown_ok(struct crypt_device *cd, struct luks2_hdr *hdr, struct luks2_reencrypt *rh)
 {
 	int i, r;
@@ -4245,18 +4287,11 @@ static int reencrypt_teardown_ok(struct crypt_device *cd, struct luks2_hdr *hdr,
 	}
 
 	if (rh->online) {
-		r = LUKS2_reload(cd, rh->device_name, rh->vks, rh->device_size, rh->flags);
+		r = teardown_overlay_devices(cd, rh);
 		if (r)
-			log_err(cd, _("Failed to reload device %s."), rh->device_name);
-		if (!r) {
-			r = dm_resume_device(cd, rh->device_name, DM_SUSPEND_SKIP_LOCKFS | DM_SUSPEND_NOFLUSH);
-			if (r)
-				log_err(cd, _("Failed to resume device %s."), rh->device_name);
-		}
-		dm_remove_device(cd, rh->overlay_name, 0);
-		dm_remove_device(cd, rh->hotzone_name, 0);
+			return r;
 
-		if (!r && finished && rh->mode == CRYPT_REENCRYPT_DECRYPT &&
+		if (finished && rh->mode == CRYPT_REENCRYPT_DECRYPT &&
 		    !dm_flags(cd, DM_LINEAR, &dmt_flags) && (dmt_flags & DM_DEFERRED_SUPPORTED))
 		    dm_remove_device(cd, rh->device_name, CRYPT_DEACTIVATE_DEFERRED);
 	}
@@ -4294,13 +4329,8 @@ static void reencrypt_teardown_fatal(struct crypt_device *cd, struct luks2_reenc
 
 	if (rh->online) {
 		log_err(cd, _("Online reencryption failed."));
-		if (dm_status_suspended(cd, rh->hotzone_name) > 0) {
-			log_dbg(cd, "Hotzone device %s suspended, replacing with dm-error.", rh->hotzone_name);
-			if (dm_error_device(cd, rh->hotzone_name)) {
-				log_err(cd, _("Failed to replace suspended device %s with dm-error target."), rh->hotzone_name);
-				log_err(cd, _("Do not resume the device unless replaced with error target manually."));
-			}
-		}
+		if (dm_status_suspended(cd, rh->hotzone_name) > 0)
+			replace_hotzone_device_with_error(cd, rh);
 	}
 }
 

From 303b319488b652efc68472e1580f5ec0df3e8eba Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 10 Dec 2025 16:37:20 +0100
Subject: [PATCH 079/244] reencrypt: add more gracefull reencryption error
 path.

This adds proper reencryption error path for non critical
failures not requiring full LUKS2 reencryption recovery.

While non-critical reencryption failures were properly identified
in former code the graceful recovery was never implemented.
This affected the state of live device mappings after failed
reencription. For example, read error on data device did not trigger
LUKS2 recovery scenario (correctly), but the overlay reencryption
device stack for online reencryption remained stuck with hotzone layer
suspended.

This patch addresses the issue.
---
 lib/luks2/luks2_reencrypt.c | 86 +++++++++++++++++++++++++++++++++----
 1 file changed, 78 insertions(+), 8 deletions(-)

diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index 21bd6674f..1845a7824 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -2374,11 +2374,6 @@ static int reencrypt_init_device_stack(struct crypt_device *cd,
 	return r;
 }
 
-/* TODO:
- * 	1) audit error path. any error in this routine is fatal and should be unlikely.
- * 	   usually it would hint some collision with another userspace process touching
- * 	   dm devices directly.
- */
 static reenc_status_t reenc_refresh_helper_devices(struct crypt_device *cd, const char *overlay,
 		const char *hotzone)
 {
@@ -4125,14 +4120,24 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 	/* metadata commit point */
 	r = reencrypt_hotzone_protect_final(cd, hdr, rh->reenc_keyslot, rp, rh->reenc_buffer, rh->read);
 	if (r < 0) {
-		/* severity normal */
+		/*
+		 * Nothing was written in hotzone area yet. Even if metadata write failed the previous
+		 * state is still valid. If the metadata write passed and there was another
+		 * error it's harmless to do recovery. Recovery may be run several times with no
+		 * negative side effect.
+		 */
 		log_err(cd, _("Failed to write reencryption resilience metadata."));
 		return REENC_ERR_ROLLBACK_MEMORY;
 	}
 
 	r = crypt_storage_wrapper_decrypt(rh->cw1, rh->offset, rh->reenc_buffer, rh->read);
 	if (r) {
-		/* severity normal */
+		/*
+		 * Ideally, this would be specific error (REENC_ERR_ROLLBACK_METADATA) case where
+		 * it would rollback on-disk metadata to the last valid state (still no write in
+		 * hotzone area). But it's not worth the effort. This will trigger full LUKS2
+		 * reencryption recovery despite not being necessary.
+		 */
 		log_err(cd, _("Decryption failed."));
 		return REENC_ERR_ROLLBACK_MEMORY;
 	}
@@ -4156,7 +4161,6 @@ static reenc_status_t reencrypt_step(struct crypt_device *cd,
 	}
 
 	if (online) {
-		/* severity normal */
 		log_dbg(cd, "Resuming device %s", rh->hotzone_name);
 		r = dm_resume_device(cd, rh->hotzone_name, DM_RESUME_PRIVATE);
 		if (r) {
@@ -4246,6 +4250,7 @@ static int replace_hotzone_device_with_error(struct crypt_device *cd, struct luk
 
 static int teardown_overlay_devices(struct crypt_device *cd, struct luks2_reencrypt *rh)
 {
+	bool overlay_suspended, hotzone_suspended;
 	int r;
 
 	/* Reload device with current LUKS2 segments */
@@ -4255,6 +4260,44 @@ static int teardown_overlay_devices(struct crypt_device *cd, struct luks2_reencr
 		return r;
 	}
 
+	overlay_suspended = dm_status_suspended(cd, rh->overlay_name) > 0;
+	hotzone_suspended = dm_status_suspended(cd, rh->hotzone_name) > 0;
+
+	/*
+	 * The overlay (if suspended) may hold already queued I/Os.
+	 * Reload the overlay device with the table identical to the one
+	 * loaded to the top level device. The overlay device will dropped
+	 * shortly after successful top level device resume.
+	 */
+	if (overlay_suspended) {
+		log_dbg(cd, "Reverting suspended device %s to previous metadata segments", rh->overlay_name);
+		r = LUKS2_reload(cd, rh->overlay_name, rh->vks, rh->device_size, rh->flags);
+		if (r) {
+			log_err(cd, _("Failed to reload device %s."), rh->overlay_name);
+			return r;
+		}
+	}
+
+	/*
+	 * if the hotzone is suspended we must error all pending I/O waiting in the device. The
+	 * reencryption step was not completed and the pending I/O would corrupt the data on data
+	 * device.
+	 *
+	 * If the hotzone table replacement fails we must abort!
+	 */
+	if (hotzone_suspended && (r = replace_hotzone_device_with_error(cd, rh)))
+		return r;
+
+	if (overlay_suspended) {
+		/* Resume will pass since the hotzone (if previously suspended) is now
+		 * replaced with live dm-error table */
+		r = dm_resume_device(cd, rh->overlay_name, DM_RESUME_PRIVATE);
+		if (r) {
+			log_err(cd, _("Failed to resume device %s."), rh->overlay_name);
+			return r;
+		}
+	}
+
 	/* Now we can switch original top level device away from overlay device */
 	r = dm_resume_device(cd, rh->device_name, DM_SUSPEND_SKIP_LOCKFS | DM_SUSPEND_NOFLUSH);
 	if (r) {
@@ -4322,6 +4365,29 @@ static int reencrypt_teardown_ok(struct crypt_device *cd, struct luks2_hdr *hdr,
 	return 0;
 }
 
+static void reencrypt_teardown_rollback(struct crypt_device *cd, struct luks2_hdr *hdr,
+		struct luks2_reencrypt *rh)
+{
+	/*
+	 * We cannot rollback for REENC_PROTECTION_NONE. It does not commit metadata as
+	 * it progresses. In this case, the device stack is intentionally left as-is.
+	 */
+	if (rh->rp.type <= REENC_PROTECTION_NONE)
+		return;
+
+	/*
+	 * If metadata rollback fails, we cannot proceed with device teardown
+	 * as we do not have proper metadata snapshot for LUKS2_reload().
+	 */
+	if (LUKS2_hdr_rollback(cd, hdr))
+		return;
+
+	if (!rh->online)
+		return;
+
+	teardown_overlay_devices(cd, rh);
+}
+
 static void reencrypt_teardown_fatal(struct crypt_device *cd, struct luks2_reencrypt *rh)
 {
 	log_err(cd, _("Fatal error while reencrypting chunk starting at %" PRIu64 ", %" PRIu64 " sectors long."),
@@ -4347,6 +4413,10 @@ static int reencrypt_teardown(struct crypt_device *cd, struct luks2_hdr *hdr,
 			progress(rh->device_size, rh->progress, usrptr);
 		r = reencrypt_teardown_ok(cd, hdr, rh);
 		break;
+	case REENC_ERR_ROLLBACK_MEMORY:
+		reencrypt_teardown_rollback(cd, hdr, rh);
+		r = -EINVAL;
+		break;
 	case REENC_ERR_FATAL:
 		reencrypt_teardown_fatal(cd, rh);
 		/* fall-through */

From 667bc74b83afd158c8d6a92316f20cdad98f694c Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Mon, 1 Dec 2025 16:59:08 +0100
Subject: [PATCH 080/244] tests: Add reencryption error path tests.

---
 tests/luks2-reencryption-test | 289 ++++++++++++++++++++++++++++++++--
 1 file changed, 274 insertions(+), 15 deletions(-)

diff --git a/tests/luks2-reencryption-test b/tests/luks2-reencryption-test
index d1d30c33d..f277483e8 100755
--- a/tests/luks2-reencryption-test
+++ b/tests/luks2-reencryption-test
@@ -20,6 +20,9 @@ OVRDEV="123reenc321"
 DEVBIG="reenc2134"
 DEV_NAME=reenc9768
 DEV_NAME2=reenc97682
+DEV_HOTZONE_FORWARD="$DEV_NAME-hotzone-forward"
+DEV_HOTZONE_BACKWARD="$DEV_NAME-hotzone-backward"
+DEV_OVERLAY=$DEV_NAME-overlay
 IMG=reenc-data
 IMG_HDR=$IMG.hdr
 HEADER_LUKS2_PV=blkid-luks2-pv.img
@@ -317,6 +320,30 @@ error_io() { # $1 dmdev, $2 data dev, $3 offset, $4 size
 	blockdev --setra 0 /dev/mapper/$1
 }
 
+error_reads() { # $1 dmdev, $2 data dev, $3 offset, $4 size
+	local _dev_size=$(blockdev --getsz /dev/mapper/$1)
+	local _offset=$(($3+$4))
+	local _size=$((_dev_size-_offset))
+	local _err=$1-err
+	local _table=
+	dmsetup create $_err --table "0 $_dev_size error" || fail
+
+	if [ $3 -ne 0 ]; then
+		_table="0 $3 linear $2 0\n"
+	fi
+
+	_table=$_table"$3 $4 delay /dev/mapper/$_err $3 0 $2 $3 0"
+
+	if [ $_size -ne 0 ]; then
+		_table="$_table\n$_offset $_size linear $2 $_offset"
+	fi
+
+	echo -e "$_table" | dmsetup load $1 || fail
+	dmsetup resume $1 || fail
+	blockdev --setra 0 /dev/mapper/$1
+	blockdev --setra 0 /dev/mapper/$_err
+}
+
 error_writes() { # $1 dmdev, $2 data dev, $3 offset, $4 size
 	local _dev_size=$(blockdev --getsz /dev/mapper/$1)
 	local _offset=$(($3+$4))
@@ -341,7 +368,7 @@ error_writes() { # $1 dmdev, $2 data dev, $3 offset, $4 size
 	blockdev --setra 0 /dev/mapper/$_err
 }
 
-fix_writes() { # $1 dmdev, $2 data dev
+fix_ios() { # $1 dmdev, $2 data dev
 	local _dev_size=$(blockdev --getsz /dev/mapper/$1)
 	dmsetup load $1 --table "0 $_dev_size linear $2 0" || fail
 	dmsetup resume $1 || fail
@@ -379,6 +406,23 @@ get_error_offsets() # $1 devsize, $2 minimal offset, $3 sector_size [512 if omit
 	ERROFFSET=$(($ERROFFSET-($ERROFFSET%$_sector_size)))
 }
 
+reencrypt_recover_read_error() { # $1 sector size, $2 resilience, $3 digest, [$4 header]
+	echo -n "resilience mode: $2 ..."
+	local _hdr=""
+	test -z "$4" || _hdr="--header $4"
+
+	error_reads $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
+	echo $PWD1 | $CRYPTSETUP reencrypt $DEV $_hdr --hotzone-size 1M --resilience $2 --sector-size $1 --force-offline-reencrypt -q $FAST_PBKDF_ARGON >/dev/null 2>&1 && fail
+	fix_ios $OVRDEV $OLD_DEV
+
+	check_hash $PWD1 $3 $4
+
+	echo $PWD1 | $CRYPTSETUP reencrypt $DEV $_hdr --resilience $2 --sector-size $1 -q $FAST_PBKDF_ARGON || fail
+	check_hash $PWD1 $3 $4
+
+	echo "[OK]"
+}
+
 reencrypt_recover() { # $1 sector size, $2 resilience, $3 digest, [$4 header]
 	echo -n "resilience mode: $2 ..."
 	local _hdr=""
@@ -386,7 +430,7 @@ reencrypt_recover() { # $1 sector size, $2 resilience, $3 digest, [$4 header]
 
 	error_writes $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
 	echo $PWD1 | $CRYPTSETUP reencrypt $DEV $_hdr --hotzone-size 1M --resilience $2 --sector-size $1 --force-offline-reencrypt -q $FAST_PBKDF_ARGON >/dev/null 2>&1 && fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	echo $PWD1 | $CRYPTSETUP -q repair $DEV $_hdr || fail
 
@@ -409,7 +453,7 @@ reencrypt_recover_online() { # $1 sector size, $2 resilience, $3 digest, [$4 hea
 	echo $PWD1 | $CRYPTSETUP reencrypt --active-name $DEV_NAME $_hdr --hotzone-size 1M --resilience $2 --sector-size $1 -q $FAST_PBKDF_ARGON >/dev/null 2>&1 && fail
 	$CRYPTSETUP status $DEV_NAME $_hdr | grep -q "reencryption:  in-progress" || fail
 	$CRYPTSETUP close $DEV_NAME || fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	# recovery during activation
 	echo $PWD1 | $CRYPTSETUP open $DEV $_hdr $DEV_NAME || fail
@@ -426,6 +470,61 @@ reencrypt_recover_online() { # $1 sector size, $2 resilience, $3 digest, [$4 hea
 	echo "[OK]"
 }
 
+check_device_removed() { # $1 dm device name
+	# ignore racy udev or udev-like hacks in some distributions
+	dmsetup status $1 >/dev/null 2>&1
+	if [ $? -eq 0 ]; then
+		local msg="Device $1 is still active"
+
+		local ret=$(dmsetup info -C --nohead $1 | cut -d ':' -f 4)
+
+		[ ${#ret} -eq 4 ] || fail
+		[ ${ret:2:1} = "s" ] && msg="$msg and suspended."
+
+		fail "$msg"
+	fi
+}
+
+reencrypt_recover_read_error_online() { # $1 sector size, $2 resilience, $3 digest, [$4 header]
+	echo -n "resilience mode: $2 ..."
+	local _hdr=""
+	test -z "$4" || _hdr="--header $4"
+
+	echo $PWD1 | $CRYPTSETUP open $DEV $_hdr $DEV_NAME || fail
+
+	error_reads $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
+	echo $PWD1 | $CRYPTSETUP reencrypt --active-name $DEV_NAME $_hdr --hotzone-size 1M --resilience $2 --sector-size $1 -q $FAST_PBKDF_ARGON >/dev/null 2>&1 && fail
+
+	# less severe reencryption errors should not leave helper devices behind
+	check_device_removed $DEV_HOTZONE_FORWARD
+	check_device_removed $DEV_OVERLAY
+
+	# The read error may have failed the reencryption initialization (blkid scans are mandatory).
+	# Check if device is in reencryption state
+	$CRYPTSETUP luksDump ${4:-$DEV} | grep -q "in-reencryption"
+	if [ $? -eq 0 ]; then
+		# the device is expected in interrupted reencryption
+		$CRYPTSETUP status $DEV_NAME $_hdr | grep -q "reencryption:  in-progress" || fail
+
+		fix_ios $OVRDEV $OLD_DEV
+
+		check_hash_dev /dev/mapper/$DEV_NAME $3
+		$CRYPTSETUP close $DEV_NAME || fail
+
+		# verify it does correct segment mappings (LUKS2 contains correct state description)
+		echo $PWD1 | $CRYPTSETUP open $DEV $_hdr $DEV_NAME || fail
+		check_hash_dev /dev/mapper/$DEV_NAME $3
+
+		echo $PWD1 | $CRYPTSETUP reencrypt --active-name $DEV_NAME $_hdr --resilience $2 --resume-only -q || fail
+		check_hash_dev /dev/mapper/$DEV_NAME $3
+	else
+		fix_ios $OVRDEV $OLD_DEV
+	fi
+
+	$CRYPTSETUP close $DEV_NAME || fail
+	echo "[OK]"
+}
+
 reencrypt_recover_online_vk() { # $1 sector size, $2 resilience, $3 digest, [$4 header]
 	echo -n "resilience mode: $2 ..."
 	local _hdr=""
@@ -441,7 +540,7 @@ reencrypt_recover_online_vk() { # $1 sector size, $2 resilience, $3 digest, [$4
 	echo $PWD1 | $CRYPTSETUP reencrypt --active-name $DEV_NAME $_hdr --hotzone-size 1M --resilience $2 --sector-size $1 -q $FAST_PBKDF_ARGON >/dev/null 2>&1 && fail
 	$CRYPTSETUP status $DEV_NAME $_hdr | grep -q "reencryption:  in-progress" || fail
 	$CRYPTSETUP close $DEV_NAME || fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	# recovery during activation
 	$CRYPTSETUP open --volume-key-keyring $KEY_NAME1 --volume-key-keyring $KEY_NAME2 $DEV $_hdr $DEV_NAME || fail
@@ -468,7 +567,7 @@ encrypt_recover() { # $1 sector size, $2 reduce size, $3 digest, $4 device size
 
 	error_writes $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
 	echo $PWD1 | $CRYPTSETUP reencrypt $DEV -q >/dev/null 2>&1 && fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	echo $PWD1 | $CRYPTSETUP -q repair $DEV || fail
 
@@ -483,6 +582,26 @@ encrypt_recover() { # $1 sector size, $2 reduce size, $3 digest, $4 device size
 	echo "[OK]"
 }
 
+encrypt_recover_read_error() { # $1 sector size, $2 reduce size, $3 digest, $4 device size in sectors, $5 origin digest
+	wipe_dev $DEV
+	check_hash_dev $DEV $5
+
+	echo -n "resilience mode: datashift ..."
+
+	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --encrypt --reduce-device-size $2 --sector-size $1 -q $FAST_PBKDF_ARGON --init-only >/dev/null 2>&1 || fail
+
+	error_reads $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
+	echo $PWD1 | $CRYPTSETUP reencrypt $DEV -q >/dev/null 2>&1 && fail
+	fix_ios $OVRDEV $OLD_DEV
+	check_hash $PWD1 $3
+
+	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --resume-only --sector-size $1 -q $FAST_PBKDF_ARGON || fail
+
+	check_hash_head $PWD1 $4 $3
+
+	echo "[OK]"
+}
+
 encrypt_recover_online() { # $1 sector size, $2 reduce size, $3 digest, $4 device size in sectors, $5 origin digest
 	wipe_dev $DEV
 	check_hash_dev $DEV $5
@@ -496,7 +615,7 @@ encrypt_recover_online() { # $1 sector size, $2 reduce size, $3 digest, $4 devic
 	echo $PWD1 | $CRYPTSETUP reencrypt $DEV -q >/dev/null 2>&1 && fail
 	$CRYPTSETUP status $DEV_NAME | grep -q "reencryption:  in-progress" || fail
 	$CRYPTSETUP close $DEV_NAME || fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	# recovery in activation
 	echo $PWD1 | $CRYPTSETUP open $DEV $DEV_NAME || fail
@@ -514,6 +633,41 @@ encrypt_recover_online() { # $1 sector size, $2 reduce size, $3 digest, $4 devic
 	echo "[OK]"
 }
 
+encrypt_recover_read_error_online() { # $1 sector size, $2 reduce size, $3 digest, $4 device size in sectors, $5 origin digest
+	wipe_dev $DEV
+	check_hash_dev $DEV $5
+
+	echo -n "resilience mode: datashift ..."
+
+	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --encrypt --reduce-device-size $2 --sector-size $1 -q $FAST_PBKDF_ARGON --init-only > /dev/null || fail
+	echo $PWD1 | $CRYPTSETUP open $DEV $DEV_NAME || fail
+
+	error_reads $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
+	echo $PWD1 | $CRYPTSETUP reencrypt --resume-only --active-name $DEV_NAME -q >/dev/null 2>&1 && fail
+
+	# less severe reencryption errors should not leave helper devices behind
+	check_device_removed $DEV_HOTZONE_BACKWARD
+	check_device_removed $DEV_OVERLAY
+
+	$CRYPTSETUP status $DEV_NAME | grep -q "reencryption:  in-progress" || fail
+	$CRYPTSETUP luksDump $DEV | grep -q "in-reencryption" && fail
+	fix_ios $OVRDEV $OLD_DEV
+
+	check_hash_dev /dev/mapper/$DEV_NAME $3
+	$CRYPTSETUP close $DEV_NAME || fail
+
+	# recovery in activation
+	echo $PWD1 | $CRYPTSETUP open $DEV $DEV_NAME || fail
+	check_hash_dev /dev/mapper/$DEV_NAME $3
+
+	echo $PWD1 | $CRYPTSETUP reencrypt --resume-only --active-name $DEV_NAME -q || fail
+
+	$CRYPTSETUP close $DEV_NAME || fail
+	check_hash_head $PWD1 $4 $3
+
+	echo "[OK]"
+}
+
 encrypt_recover_detached() { # $1 sector size, $2 resilience, $3 digest, $4 hdr
 	wipe_dev $DEV
 	check_hash_dev $DEV $3
@@ -522,7 +676,7 @@ encrypt_recover_detached() { # $1 sector size, $2 resilience, $3 digest, $4 hdr
 
 	error_writes $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
 	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --encrypt --hotzone-size 1M --header $4 --resilience $2 --sector-size $1 -q $FAST_PBKDF_ARGON 2>/dev/null && fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	echo $PWD1 | $CRYPTSETUP repair $DEV --header $4 || fail
 
@@ -549,7 +703,7 @@ encrypt_recover_detached_online() { # $1 sector size, $2 resilience, $3 digest,
 	echo $PWD1 | $CRYPTSETUP reencrypt -q $DEV --header $4 --hotzone-size 1M  2>/dev/null && fail
 	$CRYPTSETUP status $DEV_NAME --header $4 | grep -q "reencryption:  in-progress" || fail
 	$CRYPTSETUP close $DEV_NAME || fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	echo $PWD1 | $CRYPTSETUP open $DEV --header $4 $DEV_NAME || fail
 	check_hash_dev /dev/mapper/$DEV_NAME $3
@@ -577,7 +731,7 @@ decrypt_recover_detached() { # $1 sector size, $2 resilience, $3 digest, $4 hdr
 
 	error_writes $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
 	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --decrypt --hotzone-size 1M --header $4 --resilience $2 -q 2>/dev/null && fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	echo $PWD1 | $CRYPTSETUP repair $DEV --header $4 || fail
 
@@ -594,6 +748,29 @@ decrypt_recover_detached() { # $1 sector size, $2 resilience, $3 digest, $4 hdr
 	echo "[OK]"
 }
 
+decrypt_recover_read_error_detached() { # $1 sector size, $2 resilience, $3 digest, $4 hdr
+	echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --sector-size $1 --header $4 $FAST_PBKDF_ARGON $DEV || fail
+	wipe $PWD1 $4
+	check_hash $PWD1 $3 $4
+
+	echo -n "resilience mode: $2 ..."
+
+	error_reads $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
+	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --decrypt --hotzone-size 1M --header $4 --resilience $2 -q 2>/dev/null && fail
+	fix_ios $OVRDEV $OLD_DEV
+	$CRYPTSETUP luksDump $4 | grep -q "in-reencryption" && fail
+
+	check_hash $PWD1 $3 $4
+
+	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --resume-only --header $4 --resilience $2 -q || fail
+
+	check_hash_dev $DEV $3
+
+	[ -f $4 ] && rm -f $4
+
+	echo "[OK]"
+}
+
 decrypt_recover_detached_online() { # $1 sector size, $2 resilience, $3 digest, $4 hdr
 	echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --sector-size $1 --header $4 $FAST_PBKDF_ARGON $DEV || fail
 	echo $PWD1 | $CRYPTSETUP open $DEV --header $4 $DEV_NAME || fail
@@ -606,7 +783,7 @@ decrypt_recover_detached_online() { # $1 sector size, $2 resilience, $3 digest,
 	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --decrypt --hotzone-size 1M --header $4 --resilience $2 -q 2>/dev/null && fail
 	$CRYPTSETUP status $DEV_NAME --header $4 | grep -q "reencryption:  in-progress" || fail
 	$CRYPTSETUP close $DEV_NAME || fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	# recovery during activation
 	echo $PWD1 | $CRYPTSETUP open $DEV --header $4 $DEV_NAME || fail
@@ -626,6 +803,35 @@ decrypt_recover_detached_online() { # $1 sector size, $2 resilience, $3 digest,
 	echo "[OK]"
 }
 
+decrypt_recover_read_error_detached_online() { # $1 sector size, $2 resilience, $3 digest, $4 hdr
+	echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --sector-size $1 --header $4 $FAST_PBKDF_ARGON $DEV || fail
+	echo $PWD1 | $CRYPTSETUP open $DEV --header $4 $DEV_NAME || fail
+	wipe_dev /dev/mapper/$DEV_NAME
+	check_hash_dev /dev/mapper/$DEV_NAME $3
+
+	echo -n "resilience mode: $2 ..."
+
+	error_reads $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
+	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --decrypt --hotzone-size 1M --header $4 --resilience $2 -q 2>/dev/null && fail
+	$CRYPTSETUP status $DEV_NAME --header $4 | grep -q "reencryption:  in-progress" || fail
+	fix_ios $OVRDEV $OLD_DEV
+	check_hash_dev /dev/mapper/$DEV_NAME $3
+
+	$CRYPTSETUP close $DEV_NAME || fail
+	echo $PWD1 | $CRYPTSETUP open $DEV --header $4 $DEV_NAME || fail
+
+	$CRYPTSETUP status $DEV_NAME --header $4 | grep -q "reencryption:  in-progress" || fail
+	check_hash_dev /dev/mapper/$DEV_NAME $3
+	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --resume-only --header $4 --resilience $2 -q || fail
+
+	$CRYPTSETUP status $DEV_NAME >/dev/null 2>&1 && fail
+	check_hash_dev $DEV $3
+
+	[ -f $4 ] && rm -f $4
+
+	echo "[OK]"
+}
+
 decrypt_recover() { # $1 hash, $2 hdr, $3 dev size, $4 resilience, $5 hotzone size
 	local _res=""
 	local _maxhz=""
@@ -637,7 +843,7 @@ decrypt_recover() { # $1 hash, $2 hdr, $3 dev size, $4 resilience, $5 hotzone si
 
 	error_writes $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
 	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --header $2 -q $_res >/dev/null 2>&1 && fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	echo $PWD1 | $CRYPTSETUP -q repair $DEV --header $2 || fail
 
@@ -667,7 +873,7 @@ decrypt_recover_online() { # $1 hash, $2 hdr, $3 dev size
 	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --header $2 -q $_res >/dev/null 2>&1 && fail
 	$CRYPTSETUP status $DEV_NAME --header $2 | grep -q "reencryption:  in-progress" || fail
 	$CRYPTSETUP close $DEV_NAME || fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	# recovery during activation
 	echo $PWD1 | $CRYPTSETUP open $DEV --header $2 $DEV_NAME || fail
@@ -696,7 +902,7 @@ decrypt_recover_online_moved() { # $1 hash, $2 hdr, $3 dev size
 	echo $PWD1 | $CRYPTSETUP reencrypt $DEV --header $2 -q $_res >/dev/null 2>&1 && fail
 	$CRYPTSETUP status $DEV_NAME --header $2 | grep -q "reencryption:  in-progress" || fail
 	$CRYPTSETUP close $DEV_NAME || fail
-	fix_writes $OVRDEV $OLD_DEV
+	fix_ios $OVRDEV $OLD_DEV
 
 	# recovery but activation fails due to last segment recovery makes it plaintext device
 	echo $PWD1 | $CRYPTSETUP open $DEV --header $2 $DEV_NAME 2>/dev/null && fail
@@ -1258,7 +1464,7 @@ ERROFFSET=34816
 ERRLENGTH=65536
 error_io $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
 echo $PWD1 | $CRYPTSETUP reencrypt $DEV --encrypt --device-size 1M --reduce-device-size 32M -q $FAST_PBKDF_ARGON  || fail
-fix_writes $OVRDEV $OLD_DEV
+fix_ios $OVRDEV $OLD_DEV
 check_hash_head $PWD1 2048 $HASH2
 
 wipe_dev_head $DEV 43
@@ -1268,7 +1474,7 @@ ERRLENGTH=12288
 # data device: [ reduce-device-size / 2 ] [ device-size ] [ error minefield ] [ reduce-device-size / 2]
 error_io $OVRDEV $OLD_DEV $ERROFFSET $ERRLENGTH
 echo $PWD1 | $CRYPTSETUP reencrypt $DEV --encrypt --device-size 43M --reduce-device-size 16M -q $FAST_PBKDF_ARGON || fail
-fix_writes $OVRDEV $OLD_DEV
+fix_ios $OVRDEV $OLD_DEV
 check_hash_head $PWD1 88064 $HASH6
 
 echo "[3] Encryption with detached header"
@@ -1431,6 +1637,9 @@ echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 reencrypt_recover 512 checksum $HASH1
 reencrypt_recover 512 journal $HASH1
 
+echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+reencrypt_recover_read_error 512 checksum $HASH1
+
 if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "sector size 512->4096"
 
@@ -1443,6 +1652,11 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --sector-size 512 --offset $OFFSET $FAST_PBKDF_ARGON $DEV || fail
 	wipe $PWD1
 	reencrypt_recover 4096 journal $HASH1
+	echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --sector-size 512 --offset $OFFSET $FAST_PBKDF_ARGON $DEV || fail
+	wipe $PWD1
+
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	reencrypt_recover_read_error 4096 checksum $HASH1
 
 	echo "sector size 4096->4096"
 
@@ -1453,6 +1667,8 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 	reencrypt_recover 4096 checksum $HASH1
 	reencrypt_recover 4096 journal $HASH1
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	reencrypt_recover_read_error 4096 checksum $HASH1
 fi
 
 echo "[7] Reencryption recovery (online i/o error)"
@@ -1466,6 +1682,8 @@ wipe $PWD1
 echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 reencrypt_recover_online 512 checksum $HASH1
 reencrypt_recover_online 512 journal $HASH1
+echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+reencrypt_recover_read_error_online 512 checksum $HASH1
 
 if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "sector size 512->4096"
@@ -1479,6 +1697,10 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --sector-size 512 --offset $OFFSET $FAST_PBKDF_ARGON $DEV || fail
 	wipe $PWD1
 	reencrypt_recover_online 4096 journal $HASH1
+	echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --sector-size 512 --offset $OFFSET $FAST_PBKDF_ARGON $DEV || fail
+	wipe $PWD1
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	reencrypt_recover_read_error_online 4096 checksum $HASH1
 
 	echo "sector size 4096->4096"
 
@@ -1489,6 +1711,8 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 	reencrypt_recover_online 4096 checksum $HASH1
 	reencrypt_recover_online 4096 journal $HASH1
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	reencrypt_recover_read_error_online 4096 checksum $HASH1
 fi
 
 if [ $HAVE_KEYRING -eq 1 ]; then
@@ -1540,6 +1764,8 @@ check_hash $PWD1 $HASH7 $IMG_HDR
 echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 reencrypt_recover 512 checksum $HASH7 $IMG_HDR
 reencrypt_recover 512 journal $HASH7 $IMG_HDR
+echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+reencrypt_recover_read_error 512 checksum $HASH7 $IMG_HDR
 
 if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "sector size 512->4096"
@@ -1553,6 +1779,11 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --sector-size 512 --header $IMG_HDR $FAST_PBKDF_ARGON $DEV || fail
 	wipe $PWD1 $IMG_HDR
 	reencrypt_recover 4096 journal $HASH7 $IMG_HDR
+	echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --sector-size 512 --header $IMG_HDR $FAST_PBKDF_ARGON $DEV || fail
+	wipe $PWD1 $IMG_HDR
+
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	reencrypt_recover_read_error 4096 checksum $HASH7 $IMG_HDR
 
 	echo "sector size 4096->4096"
 
@@ -1563,6 +1794,8 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 	reencrypt_recover 4096 checksum $HASH7 $IMG_HDR
 	reencrypt_recover 4096 journal $HASH7 $IMG_HDR
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	reencrypt_recover_read_error 4096 checksum $HASH7 $IMG_HDR
 fi
 
 echo "[9] Reencryption with detached header recovery (online i/o error)"
@@ -1576,6 +1809,8 @@ wipe $PWD1 $IMG_HDR
 echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 reencrypt_recover_online 512 checksum $HASH7 $IMG_HDR
 reencrypt_recover_online 512 journal $HASH7 $IMG_HDR
+echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+reencrypt_recover_read_error_online 512 checksum $HASH7 $IMG_HDR
 
 if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "sector size 512->4096"
@@ -1590,6 +1825,11 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 	wipe $PWD1 $IMG_HDR
 	reencrypt_recover_online 4096 journal $HASH7 $IMG_HDR
 
+	echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --sector-size 512 --header $IMG_HDR $FAST_PBKDF_ARGON $DEV || fail
+	wipe $PWD1 $IMG_HDR
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	reencrypt_recover_read_error_online 4096 checksum $HASH7 $IMG_HDR
+
 	echo "sector size 4096->4096"
 
 	get_error_offsets 31 0 4096
@@ -1599,6 +1839,8 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 	reencrypt_recover_online 4096 checksum $HASH7 $IMG_HDR
 	reencrypt_recover_online 4096 journal $HASH7 $IMG_HDR
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	reencrypt_recover_read_error_online 4096 checksum $HASH7 $IMG_HDR
 fi
 
 echo "[10] Encryption recovery"
@@ -1611,6 +1853,8 @@ get_error_offsets 64 $OFFSET 512 $((62*1024*2))
 
 echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 encrypt_recover 512 4M $HASH8 $((60*1024*2)) $HASH4
+echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+encrypt_recover_read_error 512 4M $HASH8 $((60*1024*2)) $HASH4
 
 if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "sector size 4096"
@@ -1619,6 +1863,8 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 
 	echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 	encrypt_recover 4096 4M $HASH8 $((60*1024*2)) $HASH4
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	encrypt_recover_read_error 4096 4M $HASH8 $((60*1024*2)) $HASH4
 fi
 
 echo "[11] Encryption recovery (online i/o error)"
@@ -1629,6 +1875,8 @@ get_error_offsets 64 $OFFSET 512 $((62*1024*2))
 
 echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 encrypt_recover_online 512 4M $HASH8 $((60*1024*2)) $HASH4
+echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+encrypt_recover_read_error_online 512 4M $HASH8 $((60*1024*2)) $HASH4
 
 if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "sector size 4096"
@@ -1637,6 +1885,9 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 
 	echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 	encrypt_recover_online 4096 4M $HASH8 $((60*1024*2)) $HASH4
+
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	encrypt_recover_read_error_online 4096 4M $HASH8 $((60*1024*2)) $HASH4
 fi
 
 echo "[12] Encryption with detached header recovery"
@@ -1690,6 +1941,8 @@ get_error_offsets 31 2049
 echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 decrypt_recover_detached 512 journal $HASH7 $IMG_HDR
 decrypt_recover_detached 512 checksum $HASH7 $IMG_HDR
+echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+decrypt_recover_read_error_detached 512 checksum $HASH7 $IMG_HDR
 
 if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "sector size 4096"
@@ -1700,6 +1953,8 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 	decrypt_recover_detached 4096 checksum $HASH7 $IMG_HDR
 	decrypt_recover_detached 4096 journal $HASH7 $IMG_HDR
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	decrypt_recover_read_error_detached 4096 checksum $HASH7 $IMG_HDR
 fi
 
 echo "[15] Decryption with detached header recovery (online i/o error)"
@@ -1712,6 +1967,8 @@ get_error_offsets 31 2049
 echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 decrypt_recover_detached_online 512 journal $HASH7 $IMG_HDR
 decrypt_recover_detached_online 512 checksum $HASH7 $IMG_HDR
+echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+decrypt_recover_read_error_detached_online 512 checksum $HASH7 $IMG_HDR
 
 if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "sector size 4096"
@@ -1722,6 +1979,8 @@ if [ -n "$DM_SECTOR_SIZE" ]; then
 	echo "ERR writes to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
 	decrypt_recover_detached_online 4096 checksum $HASH7 $IMG_HDR
 	decrypt_recover_detached_online 4096 journal $HASH7 $IMG_HDR
+	echo "ERR reads to sectors [$ERROFFSET,$(($ERROFFSET+$ERRLENGTH-1))]"
+	decrypt_recover_read_error_detached_online 4096 checksum $HASH7 $IMG_HDR
 fi
 
 echo "[16] Offline reencryption with fixed device size."

From 3676b8d6c5c451bf99552f0ce04257ad7a0cfb90 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Mon, 13 Apr 2026 15:54:56 +0200
Subject: [PATCH 081/244] tests: add temporary debug output.

One of keyring related reencryption tests fails occasionally.
Add debug output to better understand what leads to the fail
when it happens.
---
 tests/luks2-reencryption-test | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/tests/luks2-reencryption-test b/tests/luks2-reencryption-test
index f277483e8..28a26f51d 100755
--- a/tests/luks2-reencryption-test
+++ b/tests/luks2-reencryption-test
@@ -2950,8 +2950,16 @@ $CRYPTSETUP close $DEV_NAME || fail
 reformat_reencrypt_device
 $CRYPTSETUP -q luksErase $DEV || fail
 
+# run the test with additional debug output
+echo "Key before truncate:"
+keyctl describe %user:$KEY_NAME_VK2
+keyctl print %user:$KEY_NAME_VK2
 head -c 63 $VKEY2 | keyctl padd user $KEY_NAME_VK2 %:$KEYRING > /dev/null || fail
-$CRYPTSETUP -q reencrypt --init-only --volume-key-keyring $KEY_NAME_VK2 --new-volume-key-keyring $KEY_NAME_VK1 $DEV <&- 2>/dev/null && fail
+echo "Key after truncate:"
+keyctl describe %user:$KEY_NAME_VK2
+keyctl print %user:$KEY_NAME_VK2
+$CRYPTSETUP -q reencrypt --init-only --volume-key-keyring $KEY_NAME_VK2 --new-volume-key-keyring $KEY_NAME_VK1 $DEV --debug <&- && fail
+#$CRYPTSETUP -q reencrypt --init-only --volume-key-keyring $KEY_NAME_VK2 --new-volume-key-keyring $KEY_NAME_VK1 $DEV <&- 2>/dev/null && fail
 $CRYPTSETUP luksDump $DEV | grep -q "online-reencrypt" && fail "Failed initialization with reencryption flag"
 
 head -c 64 $VKEY2 | keyctl padd user $KEY_NAME_VK2 %:$KEYRING > /dev/null || fail

From 4b9400fd7bfc81e390c16766779069043be34649 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 30 Mar 2026 16:20:10 +0200
Subject: [PATCH 082/244] Update valgrind suppression file

There are some not suppressed references in ssh plugin test.
Also remove explicit object reference as it is not working
as expected in some distros.
---
 tests/cryptsetup-valg-supps | 24 ++++++++++++++++++++----
 1 file changed, 20 insertions(+), 4 deletions(-)

diff --git a/tests/cryptsetup-valg-supps b/tests/cryptsetup-valg-supps
index 19349ada1..9b8f86e2b 100644
--- a/tests/cryptsetup-valg-supps
+++ b/tests/cryptsetup-valg-supps
@@ -33,7 +33,6 @@
    fun:_dl_map_new_object
    fun:dl_open_worker_begin
    ...
-   obj:*lib*/libc.so.*
 }
 {
    reachable_libc_dl_map_object
@@ -44,7 +43,6 @@
    fun:_dl_map_object
    fun:dl_open_worker_begin
    ...
-   obj:*lib*/libc.so.*
 }
 {
    reachable_libc_dl_new_object
@@ -55,7 +53,6 @@
    fun:_dl_new_object
    fun:_dl_map_object_from_fd
    ...
-   obj:*lib*/libc.so.*
 }
 {
    reachable_libc_dl_check_map_versions
@@ -66,5 +63,24 @@
    fun:_dl_check_map_versions
    fun:dl_open_worker_begin
    ...
-   obj:*lib*/libc.so.*
+}
+
+# libc plugins load
+{
+   reachable_libc_dl_load_cache_lookup
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   fun:_dl_load_cache_lookup
+   fun:_dl_map_new_object
+   ...
+}
+{
+   reachable_libc_dl_close_worker
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   fun:_dl_close_worker
+   fun:_dl_close
+   ...
 }

From d2d0b25ec30112ad4bd4a28ca2c97a4f880c7e5d Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 20 Mar 2026 13:21:10 +0100
Subject: [PATCH 083/244] fuzz: Remove proto buffer fuzzer

After several years this fuzzer found nothing, but eat a lot of time
with maintenance. Remove it.

In future we will go simpler way, as it looks like a better approach.
---
 meson.build                                   |  29 -
 tests/fuzz/LUKS2.proto                        | 366 -----------
 tests/fuzz/LUKS2_plain_JSON.proto             | 177 ------
 tests/fuzz/Makefile.am                        |  89 +--
 tests/fuzz/README.md                          |   6 +-
 tests/fuzz/crypt2_load_proto_fuzz.cc          |  38 --
 .../fuzz/crypt2_load_proto_plain_json_fuzz.cc |  38 --
 .../crypt2_load_proto_plain_json_fuzz.dict    |  72 ---
 tests/fuzz/json_proto_converter.cc            |  75 ---
 tests/fuzz/json_proto_converter.h             |  32 -
 tests/fuzz/meson.build                        |  90 ---
 tests/fuzz/oss-fuzz-build.sh                  |  29 +-
 tests/fuzz/plain_json_proto_to_luks2.cc       |  62 --
 .../plain_json_proto_to_luks2_converter.cc    | 147 -----
 .../plain_json_proto_to_luks2_converter.h     |  45 --
 tests/fuzz/proto_to_luks2.cc                  |  62 --
 tests/fuzz/proto_to_luks2_converter.cc        | 591 ------------------
 tests/fuzz/proto_to_luks2_converter.h         |  78 ---
 ...oison-mutated-buffers-from-libfuzzer.patch |  29 -
 19 files changed, 6 insertions(+), 2049 deletions(-)
 delete mode 100644 tests/fuzz/LUKS2.proto
 delete mode 100644 tests/fuzz/LUKS2_plain_JSON.proto
 delete mode 100644 tests/fuzz/crypt2_load_proto_fuzz.cc
 delete mode 100644 tests/fuzz/crypt2_load_proto_plain_json_fuzz.cc
 delete mode 100644 tests/fuzz/crypt2_load_proto_plain_json_fuzz.dict
 delete mode 100644 tests/fuzz/json_proto_converter.cc
 delete mode 100644 tests/fuzz/json_proto_converter.h
 delete mode 100644 tests/fuzz/plain_json_proto_to_luks2.cc
 delete mode 100644 tests/fuzz/plain_json_proto_to_luks2_converter.cc
 delete mode 100644 tests/fuzz/plain_json_proto_to_luks2_converter.h
 delete mode 100644 tests/fuzz/proto_to_luks2.cc
 delete mode 100644 tests/fuzz/proto_to_luks2_converter.cc
 delete mode 100644 tests/fuzz/proto_to_luks2_converter.h
 delete mode 100644 tests/fuzz/unpoison-mutated-buffers-from-libfuzzer.patch

diff --git a/meson.build b/meson.build
index 66623e4f1..b587111ff 100644
--- a/meson.build
+++ b/meson.build
@@ -287,35 +287,6 @@ if get_option('fuzz-targets')
     else
         fuzzing_engine = declare_dependency(link_args: get_option('fuzzing-engine').split())
     endif
-
-    protobuf = dependency('protobuf',
-        required: false)
-    protoc = find_program('protoc',
-        required: false)
-    if not protoc.found()
-        protoc = find_program('tests/fuzz/build/static_lib_deps/bin/protoc',
-            required: false)
-    endif
-    if not protoc.found() or not protobuf.found()
-        error('protoc tool and/or protobuf pkg-config dependency not found')
-    endif
-
-    libprotobuf_mutator = dependency('libprotobuf-mutator',
-        required: false)
-    if not libprotobuf_mutator.found()
-        error('libprotobuf-mutator not found')
-    endif
-
-    protoc_generator = generator(protoc,
-        output: [
-            '@BASENAME@.pb.cc',
-            '@BASENAME@.pb.h',
-        ],
-        arguments: [
-            '--proto_path=@CURRENT_SOURCE_DIR@',
-            '--cpp_out=@BUILD_DIR@',
-            '@INPUT@',
-        ])
 endif
 
 # ==========================================================================
diff --git a/tests/fuzz/LUKS2.proto b/tests/fuzz/LUKS2.proto
deleted file mode 100644
index 3e4c564d6..000000000
--- a/tests/fuzz/LUKS2.proto
+++ /dev/null
@@ -1,366 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-or-later
-/*
- * cryptsetup LUKS2 custom mutator
- *
- * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- */
-
-syntax = "proto2";
-
-package LUKS2_proto;
-
-// ---------------------------------------------------------------------------
-// ----------------------------- GENERIC OBJECTS -----------------------------
-// ---------------------------------------------------------------------------
-
-message object_id {
-  oneof id {
-    // int_id will be mapped to range -16 to 16 (mod 33)
-    // this way iy should be easier to generate valid
-    // object cross-references
-    uint32 int_id = 1;
-    string string_id = 2;
-  }
-}
-
-message string_uint64 {
-  required bool negative = 1;
-  oneof number {
-    uint32 uint_num = 2;
-    string string_num = 3;
-  }
-}
-
-enum hash_algorithm {
-  HASH_ALG_SHA1 = 1;
-  HASH_ALG_SHA256 = 2;
-}
-
-
-// ---------------------------------------------------------------------------
-// ----------------------------- BINARY HEADER -------------------------------
-// ---------------------------------------------------------------------------
-
-enum luks2_magic {
-  INVALID = 0;
-  FIRST = 1;
-  SECOND = 2;
-}
-
-enum luks_version {
-  ONE = 1;
-  TWO = 2;
-  THREE = 3;
-}
-
-// we limit the size to 64KiB to make the fuzzing faster
-// because the checksum needs to be calculated for the whole image
-enum hdr_size {
-  size_16_KB  = 16384;
-  size_32_KB  = 32768;
-  size_64_KB  = 65536;
-//  size_128_KB = 131072;
-//  size_256_KB = 262144;
-//  size_512_KB = 524288;
-//  size_1_MB   = 1048576;
-//  size_2_MB   = 2097152;
-//  size_4_MB   = 4194304;
-}
-
-enum seqid_description {
-  PRIMARY_GREATER = 0;
-  SECONDARY_GREATER = 1;
-  EQUAL = 2;
-}
-
-// message luks2_hdr_disk {
-// char		magic[LUKS2_MAGIC_L];
-// //uint16_t	version;	/* Version 2 */
-// uint64_t	hdr_size;	/* in bytes, including JSON area */
-// uint64_t	seqid;		/* increased on every update */
-// char		label[LUKS2_LABEL_L];
-// char		checksum_alg[LUKS2_CHECKSUM_ALG_L];
-// uint8_t		salt[LUKS2_SALT_L]; /* unique for every header/offset */
-// char		uuid[LUKS2_UUID_L];
-// char		subsystem[LUKS2_LABEL_L]; /* owner subsystem label */
-// uint64_t	hdr_offset;	/* offset from device start in bytes */
-// char		_padding[184];
-// uint8_t		csum[LUKS2_CHECKSUM_L];
-// }
-message LUKS2_header {
-  required luks_version version = 1;
-  required luks2_magic magic = 2;
-  required hdr_size hdr_size = 3;
-  required bool use_correct_checksum = 4;
-
-  optional uint64 selected_offset = 5;
-}
-
-message LUKS2_both_headers {
-  required LUKS2_header primary_header = 1;
-  required LUKS2_header secondary_header = 2;
-
-  required seqid_description seqid = 3;
-  required json_area_description json_area = 4;
-}
-
-message json_area_description {
-  optional config_description config = 1;
-  repeated keyslot_description keyslots = 2;
-  repeated digest_description digests = 3;
-  repeated segment_description segments = 4;
-  repeated token_description tokens = 5;
-}
-
-// ---------------------------------------------------------------------------
-// ----------------------------- KEYSLOT OBJECT ------------------------------
-// ---------------------------------------------------------------------------
-
-enum keyslot_type {
-  KEYSLOT_TYPE_LUKS2 = 1;
-  KEYSLOT_TYPE_REENCRYPT = 2;
-  KEYSLOT_TYPE_PLACEHOLDER = 3;
-}
-
-enum reencrypt_keyslot_mode {
-  MODE_REENCRYPT = 1;
-  MODE_ENCRYPT = 2;
-  MODE_DECRYPT = 3;
-}
-
-enum reencrypt_keyslot_direction {
-  DIRECTION_FORWARD = 1;
-  DIRECTION_BACKWARD = 2;
-}
-
-// The area object contains these mandatory fields:
-// - type [string] the area type.
-// - offset [string-uint64] the offset from the device start to the beginning of the binary area (in bytes).
-// - size [string-uint64] the area size (in bytes).
-//
-// Area type raw contains these additional fields:
-// - encryption [string] the area encryption algorithm, in dm-crypt notation (for example aes-xts-plain64).
-// - key_size [integer] the area encryption key size.
-//
-// Area type none and journal (used only for reencryption optional extension) contain only mandatory fields.
-//
-// Area type checksum (used only for reencryption optional extension) contains these additional fields:
-// - hash [string] The hash algorithm for the checksum resilience mode.
-// - sector_size [integer] The data unit size for digest checksum calculated with the hash algorithm.
-//
-// Area type datashift (used only for reencryption optional extension) contains this additional field:
-// - shift_size [string-uint64] The data shift (in bytes) performed during reencryption (shift direction is according to direction field).
-
-enum keyslot_area_type {
-  KEYSLOT_AREA_TYPE_RAW = 1;
-  KEYSLOT_AREA_TYPE_NONE = 2;
-  KEYSLOT_AREA_TYPE_JOURNAL = 3;
-  KEYSLOT_AREA_TYPE_CHECKSUM = 4;
-  KEYSLOT_AREA_TYPE_DATASHIFT = 5;
-}
-
-message keyslot_area_description {
-  // mandatory fields
-  optional keyslot_area_type type = 1;
-  optional string_uint64 offset = 2;
-  optional string_uint64 size = 3;
-
-  // raw type fields
-  optional string encryption = 4;
-  optional int32 key_size = 5;
-
-  // checksum type field
-  optional hash_algorithm hash = 6;
-  optional int32 sector_size = 7;
-
-  // datashift type fields
-  optional string_uint64 shift_size = 8;
-}
-
-// The object describes PBKDF attributes used for the keyslot.
-// The kdf object mandatory fields are:
-// - type [string] the PBKDF type.
-// - salt [base64] the salt for PBKDF (binary data).
-//
-// The pbkdf2 type (compatible with LUKS1) contains these additional fields:
-// - hash [string] the hash algorithm for the PBKDF2 (SHA-256).
-// - iterations [integer] the PBKDF2 iterations count.
-//
-// The argon2i and argon2id type contains these additional fields:
-// - time [integer] the time cost (in fact the iterations count for Argon2).
-// - memory [integer] the memory cost, in kilobytes. If not available, the keyslot cannot be unlocked.
-// - cpus [integer] the required number of threads (CPU cores number cost). If not available, unlocking will be slower.
-
-enum keyslot_kdf_type {
-  KEYSLOT_KDF_TYPE_PBKDF2 = 1;
-  KEYSLOT_KDF_TYPE_ARGON2I = 2;
-  KEYSLOT_KDF_TYPE_ARGON2ID = 3;
-}
-
-message keyslot_kdf_description {
-  optional keyslot_kdf_type type = 1;
-  optional string salt = 2;
-
-  // pbkdf2 type
-  optional hash_algorithm hash = 3;
-  optional int32 iterations = 4;
-
-  // argon2i and argon2id types
-  optional int32 time = 5;
-  optional int32 memory = 6;
-  optional int32 cpus = 7;
-}
-
-enum keyslot_af_type {
-  KEYSLOT_AF_TYPE_LUKS1 = 1;
-}
-
-// The af (anti-forensic splitter) object contains this mandatory field:
-// - type [string] the anti-forensic function type.
-// AF type luks1 (compatible with LUKS1 [1]) contains these additional fields:
-// - stripes [integer] the number of stripes, for historical reasons only the 4000 value is supported.
-// - hash [string] the hash algorithm used.
-
-message keyslot_af_description {
-  optional keyslot_af_type type = 1;
-  optional int32 stripes = 2;
-  optional hash_algorithm hash = 3;
-}
-
-// - type [string] the keyslot type.
-// - key_size [integer] the key size (in bytes) stored in keyslot.
-// - priority [integer,optional] the keyslot priority. Here 0 means ignore (the slot should be used only if explicitly stated), 1 means normal priority and 2 means high priority (tried before normal priority).
-
-// REENCRYPT
-// The key size field must be set to 1. The area type must be none, checksum,
-// journal or datashift.
-// The reencrypt object must contain these additional fields:
-// - mode [string] the reencryption mode. reencrypt, encrypt and decrypt
-// - direction [string] the reencryption direction. forward backward
-
-// - area [object] the allocated area in the binary keyslots area.
-// LUKS2 object must contain these additional fields:
-// - kdf [object] the PBKDF type and parameters used.
-// - af [object] the anti-forensic splitter [1] (only the luks1 type is currently
-// used).
-
-message keyslot_description {
-  // type
-  required object_id oid = 1;
-
-  optional keyslot_type type = 2;
-  optional int32 key_size = 3;
-  optional int32 priority = 4;
-
-  // reencrypt extension
-  optional reencrypt_keyslot_mode mode = 5;
-  optional reencrypt_keyslot_direction direction = 6;
-
-  // objects
-  optional keyslot_area_description area = 7;
-  optional keyslot_kdf_description kdf = 8;
-  optional keyslot_af_description af = 9;
-}
-
-// ---------------------------------------------------------------------------
-// ------------------------------ DIGEST OBJECT ------------------------------
-// ---------------------------------------------------------------------------
-
-message digest_description {
-  required object_id oid = 1;
-
-  optional keyslot_kdf_type type = 2;
-  repeated object_id keyslots = 3;
-  repeated object_id segments = 4;
-  optional string salt = 5;
-  optional string digest = 6;
-
-  // pbkdf2 digest fields
-  optional hash_algorithm hash = 7;
-  optional int32 iterations = 8;
-}
-
-// ---------------------------------------------------------------------------
-// ----------------------------- SEGMENT OBJECT ------------------------------
-// ---------------------------------------------------------------------------
-
-enum segment_type {
-  SEGMENT_TYPE_LINEAR = 1;
-  SEGMENT_TYPE_CRYPT = 2;
-}
-
-enum segment_flag {
-  IN_REENCRYPTION = 1;
-  BACKUP_FINAL = 2;
-  BACKUP_PREVIOUS = 3;
-  BACKUP_MOVED_SEGMENT = 4;
-}
-
-message segment_integrity_description {
-  optional string type = 1;
-  optional string journal_encryption = 2;
-  optional string journal_integrity  = 3;
-}
-
-message segment_description {
-  required object_id oid = 1;
-  optional segment_type type = 2;
-  optional string_uint64 offset = 3;
-  optional string_uint64 size = 4;
-  repeated segment_flag flags = 5;
-
-  // segment type crypt
-  optional string_uint64 iv_tweak = 6;
-  optional string encryption = 7;
-  optional int32 sector_size = 8;
-  optional segment_integrity_description integrity = 9;
-}
-
-// ---------------------------------------------------------------------------
-// ------------------------------ TOKEN OBJECT -------------------------------
-// ---------------------------------------------------------------------------
-
-message token_description {
-  required object_id oid = 1;
-
-  optional string type = 2;
-  repeated object_id keyslots = 3;
-  optional string key_description = 4;
-}
-
-// ---------------------------------------------------------------------------
-// ------------------------------ CONFIG OBJECT ------------------------------
-// ---------------------------------------------------------------------------
-
-// - allow-discards allows TRIM (discards) on the active device.
-// - same-cpu-crypt compatibility performance flag for dm-crypt [3] to per- form encryption using the same CPU that originated the request.
-// - submit-from-crypt-cpus compatibility performance flag for dm-crypt [3] to disable offloading write requests to a separate thread after encryption.
-// - no-journal disable data journalling for dm-integrity [10].
-// - no-read-workqueue compatibility performance flag for dm-crypt [3] to bypass dm-crypt read workqueue and process read requests synchronously.
-// - no-write-workqueue compatibility performance flag for dm-crypt [3] to bypass dm-crypt write workqueue and process write requests synchronously.
-enum config_flag {
-  CONFIG_FLAG_ALLOW_DISCARDS = 1;
-  CONFIG_FLAG_SAME_CPU_CRYPT = 2;
-  CONFIG_FLAG_SUBMIT_FROM_CRYPT_CPUS = 3;
-  CONFIG_FLAG_NO_JOURNAL = 4;
-  CONFIG_FLAG_NO_READ_WORKQUEUE = 5;
-  CONFIG_FLAG_NO_WRITE_WORKQUEUE = 6;
-}
-
-enum config_requirement {
-  CONFIG_REQUIREMENT_OFFLINE_REENCRYPT = 1;
-  CONFIG_REQUIREMENT_ONLINE_REENCRYPT_V2 = 2;
-}
-
-// - json_size [string-uint64] the JSON area size (in bytes). Must match the binary header.
-// - keyslots_size [string-uint64] the binary keyslot area size (in bytes). Must be aligned to 4096 bytes.
-// - flags [array, optional] the array of string objects with persistent flags for the device.
-// - requirements [array, optional] the array of string objects with additional required features for the LUKS device.
-
-message config_description {
-  required bool use_primary_hdr_size = 2;
-
-  repeated config_flag config_flags = 3;
-  repeated config_requirement requirements = 4;
-}
diff --git a/tests/fuzz/LUKS2_plain_JSON.proto b/tests/fuzz/LUKS2_plain_JSON.proto
deleted file mode 100644
index d825f74b4..000000000
--- a/tests/fuzz/LUKS2_plain_JSON.proto
+++ /dev/null
@@ -1,177 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-or-later
-/*
- * cryptsetup LUKS2 custom mutator
- *
- * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- */
-
-syntax = "proto2";
-
-package json_proto;
-
-// ---------------------------------------------------------------------------
-// ----------------------------- GENERIC OBJECTS -----------------------------
-// ---------------------------------------------------------------------------
-
-message object_id {
-  oneof id {
-    // int_id will be mapped to range -16 to 16 (mod 33)
-    // this way iy should be easier to generate valid
-    // object cross-references
-    uint32 int_id = 1;
-    string string_id = 2;
-  }
-}
-
-message string_uint64 {
-  required bool negative = 1;
-  oneof number {
-    uint32 uint_num = 2;
-    string string_num = 3;
-  }
-}
-
-enum hash_algorithm {
-  HASH_ALG_SHA1 = 1;
-  HASH_ALG_SHA256 = 2;
-}
-
-
-// ---------------------------------------------------------------------------
-// ----------------------------- BINARY HEADER -------------------------------
-// ---------------------------------------------------------------------------
-
-enum luks2_magic {
-  INVALID = 0;
-  FIRST = 1;
-  SECOND = 2;
-}
-
-enum luks_version {
-  ONE = 1;
-  TWO = 2;
-  THREE = 3;
-}
-
-// we limit the size to 64KiB to make the fuzzing faster
-// because the checksum needs to be calculated for the whole image
-enum hdr_size {
-  size_16_KB  = 16384;
-  size_32_KB  = 32768;
-  size_64_KB  = 65536;
-//  size_128_KB = 131072;
-//  size_256_KB = 262144;
-//  size_512_KB = 524288;
-//  size_1_MB   = 1048576;
-//  size_2_MB   = 2097152;
-//  size_4_MB   = 4194304;
-}
-
-enum seqid_description {
-  PRIMARY_GREATER = 0;
-  SECONDARY_GREATER = 1;
-  EQUAL = 2;
-}
-
-// message luks2_hdr_disk {
-// char		magic[LUKS2_MAGIC_L];
-// //uint16_t	version;	/* Version 2 */
-// uint64_t	hdr_size;	/* in bytes, including JSON area */
-// uint64_t	seqid;		/* increased on every update */
-// char		label[LUKS2_LABEL_L];
-// char		checksum_alg[LUKS2_CHECKSUM_ALG_L];
-// uint8_t		salt[LUKS2_SALT_L]; /* unique for every header/offset */
-// char		uuid[LUKS2_UUID_L];
-// char		subsystem[LUKS2_LABEL_L]; /* owner subsystem label */
-// uint64_t	hdr_offset;	/* offset from device start in bytes */
-// char		_padding[184];
-// uint8_t		csum[LUKS2_CHECKSUM_L];
-// }
-message LUKS2_header {
-  required luks_version version = 1;
-  required luks2_magic magic = 2;
-  required hdr_size hdr_size = 3;
-  required bool use_correct_checksum = 4;
-
-  optional uint64 selected_offset = 5;
-}
-
-message LUKS2_both_headers {
-  required LUKS2_header primary_header = 1;
-  required LUKS2_header secondary_header = 2;
-
-  required seqid_description seqid = 3;
-  required JsonObject json_area = 4;
-}
-
-message JsonObject {
-  required string name = 1;
-  required JsonValue value = 2;
-}
-
-message JsonValue {
-  oneof value {
-    // Json value types:
-
-    // null: null, will be used when 'oneof' contains nothing
-
-    // object: another json object of any type
-    JsonObject object_value = 1;
-
-    // array: an array of values
-    ArrayValue array_value = 2;
-
-    // number: can be an integer, a float, an exponent
-    NumberValue number_value = 3;
-
-    // string: unicode string
-    StringValue string_value = 4;
-
-    // boolean: true or talse
-    BooleanValue boolean_value = 5;
-  }
-}
-
-message ArrayValue {
-  repeated JsonValue value = 1;
-}
-
-message NumberInteger {
-  required int64 value = 1;
-}
-
-message NumberFloat {
-  required double value = 1;
-}
-
-message NumberExponent {
-  required int32 base = 1;
-  required int32 exponent = 2;
-  required bool use_uppercase = 3;
-}
-
-message NumberExponentFrac {
-  required float base = 1;
-  required int32 exponent = 2;
-  required bool use_uppercase = 3;
-}
-
-message NumberValue {
-  required NumberInteger integer_value = 1;
-
-  // integer_value is used when oneof field below has nothing.
-  oneof value {
-    NumberFloat float_value = 2;
-    NumberExponent exponent_value = 3;
-    NumberExponentFrac exponent_frac_value = 4;
-  }
-}
-
-message StringValue {
-  required string value = 1;
-}
-
-message BooleanValue {
-  required bool value = 1;
-}
diff --git a/tests/fuzz/Makefile.am b/tests/fuzz/Makefile.am
index c7a6cdf0f..114d03943 100644
--- a/tests/fuzz/Makefile.am
+++ b/tests/fuzz/Makefile.am
@@ -1,16 +1,4 @@
 EXTRA_DIST = README.md oss-fuzz-build.sh
-dist_noinst_DATA = \
-	LUKS2.proto \
-	LUKS2_plain_JSON.proto \
-	crypt2_load_fuzz.dict \
-	crypt2_load_ondisk_fuzz.dict \
-	crypt2_load_proto_plain_json_fuzz.dict \
-	unpoison-mutated-buffers-from-libfuzzer.patch
-CLEANFILES = \
-	LUKS2.pb.h \
-	LUKS2.pb.cc \
-	LUKS2_plain_JSON.pb.h \
-	LUKS2_plain_JSON.pb.cc
 
 distclean-local:
 	-rm -rf out build
@@ -37,85 +25,10 @@ test-environment-m:
 	fi
 test-environment: | test-environment-m $(DEPS_PATH)
 
-LUKS2.pb.h: LUKS2.proto
-	 $(DEPS_PATH)/bin/protoc LUKS2.proto --cpp_out=.
-LUKS2.pb.cc: LUKS2.pb.h
-
-LUKS2_plain_JSON.pb.h: LUKS2_plain_JSON.proto
-	 $(DEPS_PATH)/bin/protoc LUKS2_plain_JSON.proto --cpp_out=.
-LUKS2_plain_JSON.pb.cc: LUKS2_plain_JSON.pb.h
-
-crypt2_load_proto_fuzz-crypt2_load_proto_fuzz.$(OBJEXT): LUKS2.pb.cc
-crypt2_load_proto_plain_json_fuzz-crypt2_load_proto_plain_json_fuzz.$(OBJEXT): LUKS2_plain_JSON.pb.cc
-
-nodist_crypt2_load_proto_fuzz_SOURCES = LUKS2.pb.h LUKS2.pb.cc
-crypt2_load_proto_fuzz_SOURCES = FuzzerInterface.h \
-	crypt2_load_proto_fuzz.cc \
-	proto_to_luks2_converter.h \
-	proto_to_luks2_converter.cc
-crypt2_load_proto_fuzz_LDADD = \
-	../../libcryptsetup.la \
-	../../libcrypto_backend.la \
-	-L$(DEPS_PATH)/lib -lprotobuf-mutator-libfuzzer -lprotobuf-mutator -lprotobuf
-crypt2_load_proto_fuzz_LDFLAGS = $(AM_LDFLAGS) $(LIB_FUZZING_ENGINE) $(SANITIZER)
-crypt2_load_proto_fuzz_CXXFLAGS = $(AM_CXXFLAGS) \
-	-I$(top_srcdir)/lib \
-	-I$(top_srcdir)/tests/fuzz \
-	-I$(DEPS_PATH)/include \
-	-I$(DEPS_PATH)/include/libprotobuf-mutator -I$(DEPS_PATH)/include/libprotobuf-mutator/src
-
-nodist_crypt2_load_proto_plain_json_fuzz_SOURCES = LUKS2_plain_JSON.pb.h LUKS2_plain_JSON.pb.cc
-crypt2_load_proto_plain_json_fuzz_SOURCES = FuzzerInterface.h \
-	crypt2_load_proto_plain_json_fuzz.cc \
-	json_proto_converter.h \
-	json_proto_converter.cc \
-	plain_json_proto_to_luks2_converter.h \
-	plain_json_proto_to_luks2_converter.cc
-crypt2_load_proto_plain_json_fuzz_LDADD = \
-	../../libcryptsetup.la \
-	../../libcrypto_backend.la \
-	-L$(DEPS_PATH)/lib -lprotobuf-mutator-libfuzzer -lprotobuf-mutator -lprotobuf
-crypt2_load_proto_plain_json_fuzz_LDFLAGS = $(AM_LDFLAGS) $(LIB_FUZZING_ENGINE) $(SANITIZER)
-crypt2_load_proto_plain_json_fuzz_CXXFLAGS = $(AM_CXXFLAGS) \
-	-I$(top_srcdir)/lib \
-	-I$(top_srcdir)/tests/fuzz \
-	-I$(DEPS_PATH)/include \
-	-I$(DEPS_PATH)/include/libprotobuf-mutator -I$(DEPS_PATH)/include/libprotobuf-mutator/src
-
-nodist_proto_to_luks2_SOURCES = LUKS2.pb.h LUKS2.pb.cc
-proto_to_luks2_SOURCES = \
-	proto_to_luks2.cc \
-	proto_to_luks2_converter.h \
-	proto_to_luks2_converter.cc
-proto_to_luks2_LDADD = ../../libcryptsetup.la ../../libcrypto_backend.la -L$(DEPS_PATH)/lib -lprotobuf
-proto_to_luks2_LDFLAGS = $(AM_LDFLAGS) -fsanitize=fuzzer-no-link $(SANITIZER)
-proto_to_luks2_CXXFLAGS = $(AM_CXXFLAGS) \
-	-I$(top_srcdir)/lib \
-	-I$(top_srcdir)/tests/fuzz \
-	-I$(DEPS_PATH)/include
-
-nodist_plain_json_proto_to_luks2_SOURCES = LUKS2_plain_JSON.pb.h LUKS2_plain_JSON.pb.cc
-plain_json_proto_to_luks2_SOURCES = \
-	plain_json_proto_to_luks2.cc \
-	plain_json_proto_to_luks2_converter.h \
-	plain_json_proto_to_luks2_converter.cc \
-	json_proto_converter.h \
-	json_proto_converter.cc
-plain_json_proto_to_luks2_LDADD = ../../libcryptsetup.la ../../libcrypto_backend.la -L$(DEPS_PATH)/lib -lprotobuf
-plain_json_proto_to_luks2_LDFLAGS = $(AM_LDFLAGS) -fsanitize=fuzzer-no-link $(SANITIZER)
-plain_json_proto_to_luks2_CXXFLAGS = $(AM_CXXFLAGS) \
-	-I$(top_srcdir)/lib \
-	-I$(top_srcdir)/tests/fuzz \
-	-I$(DEPS_PATH)/include
-
 if ENABLE_FUZZ_TARGETS
 noinst_PROGRAMS = \
 	crypt2_load_fuzz \
-	crypt2_load_ondisk_fuzz \
-	crypt2_load_proto_fuzz \
-	crypt2_load_proto_plain_json_fuzz \
-	proto_to_luks2 \
-	plain_json_proto_to_luks2
+	crypt2_load_ondisk_fuzz
 
 fuzz-targets: test-environment $(noinst_PROGRAMS)
 .PHONY: fuzz-targets
diff --git a/tests/fuzz/README.md b/tests/fuzz/README.md
index fdcfa2755..7fafc90e5 100644
--- a/tests/fuzz/README.md
+++ b/tests/fuzz/README.md
@@ -1,6 +1,6 @@
 # Fuzzing target for cryptsetup project
 
-This directory contains experimental targets for fuzzing testing.
+This directory contains targets for fuzzing testing.
 It can be run in the OSS-Fuzz project but also compiled separately.
 
 # Requirements
@@ -34,9 +34,9 @@ sudo chcon -Rt svirt_sandbox_file_t build/
 ```
 
 # Run LUKS2 fuzzer
-`FUZZER_NAME` can be one of: `crypt2_load_fuzz`, `crypt2_load_proto_fuzz`, `crypt2_load_proto_plain_json_fuzz`
+`FUZZER_NAME` can be one of: `crypt2_load_fuzz`, `crypt2_load_ondisk_fuzz`
 ```
-FUZZER_NAME="crypt2_load_proto_plain_json_fuzz"
+FUZZER_NAME="crypt2_load_fuzz"
 sudo mkdir -p build/corpus/cryptsetup/$FUZZER_NAME
 sudo python infra/helper.py run_fuzzer --corpus-dir build/corpus/cryptsetup/$FUZZER_NAME/ --sanitizer address cryptsetup $FUZZER_NAME '-jobs=8 -workers=8'
 ```
diff --git a/tests/fuzz/crypt2_load_proto_fuzz.cc b/tests/fuzz/crypt2_load_proto_fuzz.cc
deleted file mode 100644
index def3cf0ad..000000000
--- a/tests/fuzz/crypt2_load_proto_fuzz.cc
+++ /dev/null
@@ -1,38 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-or-later
-/*
- * cryptsetup LUKS2 custom mutator fuzz target
- *
- * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- */
-
-#include "LUKS2.pb.h"
-#include "proto_to_luks2_converter.h"
-#include "libfuzzer/libfuzzer_macro.h"
-#include "FuzzerInterface.h"
-
-extern "C" {
-#include <libcryptsetup.h>
-#include <err.h>
-#include <fcntl.h>
-#include <unistd.h>
-}
-
-DEFINE_PROTO_FUZZER(const LUKS2_proto::LUKS2_both_headers &headers) {
-  struct crypt_device *cd = NULL;
-  char name[] = "/tmp/test-proto-fuzz.XXXXXX";
-  int fd = mkostemp(name, O_RDWR|O_CREAT|O_EXCL|O_CLOEXEC);
-
-  if (fd < 0)
-    err(EXIT_FAILURE, "mkostemp() failed");
-
-  LUKS2_proto::LUKS2ProtoConverter converter;
-  converter.convert(headers, fd);
-
-  if (crypt_init(&cd, name) == 0)
-    (void)crypt_load(cd, CRYPT_LUKS2, NULL);
-  crypt_free(cd);
-
-  close(fd);
-  unlink(name);
-}
diff --git a/tests/fuzz/crypt2_load_proto_plain_json_fuzz.cc b/tests/fuzz/crypt2_load_proto_plain_json_fuzz.cc
deleted file mode 100644
index c1f0f43eb..000000000
--- a/tests/fuzz/crypt2_load_proto_plain_json_fuzz.cc
+++ /dev/null
@@ -1,38 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-or-later
-/*
- * cryptsetup LUKS2 custom mutator fuzz target
- *
- * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- */
-
-#include "LUKS2_plain_JSON.pb.h"
-#include "plain_json_proto_to_luks2_converter.h"
-#include "libfuzzer/libfuzzer_macro.h"
-#include "FuzzerInterface.h"
-
-extern "C" {
-#include <libcryptsetup.h>
-#include <err.h>
-#include <fcntl.h>
-#include <unistd.h>
-}
-
-DEFINE_PROTO_FUZZER(const json_proto::LUKS2_both_headers &headers) {
-  struct crypt_device *cd = NULL;
-  char name[] = "/tmp/test-proto-fuzz.XXXXXX";
-  int fd = mkostemp(name, O_RDWR|O_CREAT|O_EXCL|O_CLOEXEC);
-
-  if (fd < 0)
-    err(EXIT_FAILURE, "mkostemp() failed");
-
-  json_proto::LUKS2ProtoConverter converter;
-  converter.convert(headers, fd);
-
-  if (crypt_init(&cd, name) == 0)
-    (void)crypt_load(cd, CRYPT_LUKS2, NULL);
-  crypt_free(cd);
-
-  close(fd);
-  unlink(name);
-}
diff --git a/tests/fuzz/crypt2_load_proto_plain_json_fuzz.dict b/tests/fuzz/crypt2_load_proto_plain_json_fuzz.dict
deleted file mode 100644
index 7d831518a..000000000
--- a/tests/fuzz/crypt2_load_proto_plain_json_fuzz.dict
+++ /dev/null
@@ -1,72 +0,0 @@
-# LUKS2 keywords by Daniel Zatovic
-
-"1024"
-"2048"
-"4096"
-"512"
-"aegis128-random"
-"aes-cbc:essiv:sha256"
-"aes-xts-plain64"
-"af"
-"allow-discards"
-"area"
-"argon2i"
-"argon2id"
-"backup-final"
-"backup-moved-segment"
-"backup-previous"
-"checksum"
-"config"
-"cpus"
-"crypt"
-"datashift"
-"digest"
-"digests"
-"direction"
-"encryption"
-"flags"
-"hash"
-"in-reencryption"
-"integrity"
-"iterations"
-"iv_tweak"
-"journal"
-"journal_encryption"
-"journal_integrity"
-"json_size"
-"kdf"
-"key_description"
-"key_size"
-"keyslots"
-"keyslots_size"
-"linear"
-"luks2"
-"luks2-keyring"
-"LUKS\xBA\xBE"
-"memory"
-"mode"
-"no-journal"
-"none"
-"no-read-workqueue"
-"no-write-workqueue"
-"offline-reencrypt"
-"offset"
-"online-reencrypt-v2"
-"pbkdf2"
-"priority"
-"raw"
-"reencrypt"
-"requirements"
-"salt"
-"same-cpu-crypt"
-"sector_size"
-"segments"
-"serpent-xts-plain64"
-"shift_size"
-"size"
-"SKUL\xBA\xBE"
-"stripes"
-"submit-from-crypt-cpus"
-"time"
-"tokens"
-"twofish-xts-plain64"
diff --git a/tests/fuzz/json_proto_converter.cc b/tests/fuzz/json_proto_converter.cc
deleted file mode 100644
index 3da143608..000000000
--- a/tests/fuzz/json_proto_converter.cc
+++ /dev/null
@@ -1,75 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-//
-// Copyright 2020 Google Inc.
-
-#include "json_proto_converter.h"
-
-namespace json_proto {
-
-void JsonProtoConverter::AppendArray(const ArrayValue& array_value) {
-  data_ << '[';
-  bool need_comma = false;
-  for (const auto& value : array_value.value()) {
-    // Trailing comma inside of an array makes JSON invalid, avoid adding that.
-    if (need_comma)
-      data_ << ',';
-    else
-      need_comma = true;
-
-    AppendValue(value);
-  }
-  data_ << ']';
-}
-
-void JsonProtoConverter::AppendNumber(const NumberValue& number_value) {
-  if (number_value.has_float_value()) {
-    data_ << number_value.float_value().value();
-  } else if (number_value.has_exponent_value()) {
-    auto value = number_value.exponent_value();
-    data_ << value.base();
-    data_ << (value.use_uppercase() ? 'E' : 'e');
-    data_ << value.exponent();
-  } else if (number_value.has_exponent_frac_value()) {
-    auto value = number_value.exponent_value();
-    data_ << value.base();
-    data_ << (value.use_uppercase() ? 'E' : 'e');
-    data_ << value.exponent();
-  } else {
-    data_ << number_value.integer_value().value();
-  }
-}
-
-void JsonProtoConverter::AppendObject(const JsonObject& json_object) {
-  data_ << '{' << '"' << json_object.name() << '"' << ':';
-  AppendValue(json_object.value());
-  data_ << '}';
-}
-
-void JsonProtoConverter::AppendValue(const JsonValue& json_value) {
-  if (json_value.has_object_value()) {
-    AppendObject(json_value.object_value());
-  } else if (json_value.has_array_value()) {
-    AppendArray(json_value.array_value());
-  } else if (json_value.has_number_value()) {
-    AppendNumber(json_value.number_value());
-  } else if (json_value.has_string_value()) {
-    data_ << '"' << json_value.string_value().value() << '"';
-  } else if (json_value.has_boolean_value()) {
-    data_ << (json_value.boolean_value().value() ? "true" : "false");
-  } else {
-    data_ << "null";
-  }
-}
-
-std::string JsonProtoConverter::Convert(const JsonObject& json_object) {
-  AppendObject(json_object);
-  return data_.str();
-}
-
-std::string JsonProtoConverter::Convert(
-    const json_proto::ArrayValue& json_array) {
-  AppendArray(json_array);
-  return data_.str();
-}
-
-}  // namespace json_proto
diff --git a/tests/fuzz/json_proto_converter.h b/tests/fuzz/json_proto_converter.h
deleted file mode 100644
index dd2969a92..000000000
--- a/tests/fuzz/json_proto_converter.h
+++ /dev/null
@@ -1,32 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-//
-// Copyright 2020 Google Inc.
-//
-
-#ifndef JSON_PROTO_CONVERTER_H_
-#define JSON_PROTO_CONVERTER_H_
-
-#include <sstream>
-#include <string>
-
-#include "LUKS2_plain_JSON.pb.h"
-
-namespace json_proto {
-
-class JsonProtoConverter {
- public:
-  std::string Convert(const json_proto::JsonObject&);
-  std::string Convert(const json_proto::ArrayValue&);
-
- private:
-  std::stringstream data_;
-
-  void AppendArray(const json_proto::ArrayValue&);
-  void AppendNumber(const json_proto::NumberValue&);
-  void AppendObject(const json_proto::JsonObject&);
-  void AppendValue(const json_proto::JsonValue&);
-};
-
-}  // namespace json_proto
-
-#endif  // TESTING_LIBFUZZER_PROTO_JSON_PROTO_CONVERTER_H_
diff --git a/tests/fuzz/meson.build b/tests/fuzz/meson.build
index 95ea3823e..fc45d4f48 100644
--- a/tests/fuzz/meson.build
+++ b/tests/fuzz/meson.build
@@ -34,94 +34,4 @@ if get_option('fuzz-targets')
             link_args,
         ],
         include_directories: includes_tools)
-
-    luks2_generated = protoc_generator.process('LUKS2.proto')
-    crypt2_load_proto_fuzz = executable('crypt2_load_proto_fuzz',
-        [
-            'crypt2_load_proto_fuzz.cc',
-            'proto_to_luks2_converter.cc',
-            luks2_generated,
-        ],
-        dependencies: [
-            devmapper,
-            protobuf,
-            libprotobuf_mutator,
-            fuzzing_engine,
-        ],
-        link_with: [
-            libcryptsetup,
-            libcrypto_backend,
-            libutils_io,
-        ],
-        link_args: [
-            link_args,
-        ],
-        include_directories: includes_tools)
-
-    luks2_plain_json_generated = protoc_generator.process('LUKS2_plain_JSON.proto')
-    crypt2_load_proto_plain_fuzz = executable('crypt2_load_proto_plain_fuzz',
-        [
-            'crypt2_load_proto_plain_json_fuzz.cc',
-            'json_proto_converter.cc',
-            'plain_json_proto_to_luks2_converter.cc',
-            luks2_plain_json_generated,
-        ],
-        dependencies: [
-            devmapper,
-            protobuf,
-            libprotobuf_mutator,
-            fuzzing_engine,
-        ],
-        link_with: [
-            libcryptsetup,
-            libcrypto_backend,
-            libutils_io,
-        ],
-        link_args: [
-            link_args,
-        ],
-        include_directories: includes_tools)
-
-    proto_to_luks2 = executable('proto_to_luks2',
-        [
-            'proto_to_luks2.cc',
-            'proto_to_luks2_converter.cc',
-            luks2_generated,
-        ],
-        dependencies: [
-            devmapper,
-            protobuf,
-            libprotobuf_mutator,
-        ],
-        link_with: [
-            libcryptsetup,
-            libcrypto_backend,
-            libutils_io,
-        ],
-        link_args: [
-            link_args,
-        ],
-        include_directories: includes_tools)
-
-    plain_json_proto_to_luks2 = executable('plain_json_proto_to_luks2',
-        [
-            'plain_json_proto_to_luks2.cc',
-            'plain_json_proto_to_luks2_converter.cc',
-            'json_proto_converter.cc',
-            luks2_plain_json_generated,
-        ],
-        dependencies: [
-            devmapper,
-            protobuf,
-            libprotobuf_mutator,
-        ],
-        link_with: [
-            libcryptsetup,
-            libcrypto_backend,
-            libutils_io,
-        ],
-        link_args: [
-            link_args,
-        ],
-        include_directories: includes_tools)
 endif
diff --git a/tests/fuzz/oss-fuzz-build.sh b/tests/fuzz/oss-fuzz-build.sh
index b3c6e04c4..3ef8c81cf 100755
--- a/tests/fuzz/oss-fuzz-build.sh
+++ b/tests/fuzz/oss-fuzz-build.sh
@@ -34,7 +34,7 @@ export CFLAGS="${CFLAGS:-$flags} -I$DEPS_PATH/include"
 export CXXFLAGS="${CXXFLAGS:-$flags} -I$DEPS_PATH/include"
 export LDFLAGS="${LDFLAGS-} -L$DEPS_PATH/lib"
 
-ENABLED_FUZZERS=${ENABLED_FUZZERS:-crypt2_load_fuzz crypt2_load_ondisk_fuzz crypt2_load_proto_plain_json_fuzz}
+ENABLED_FUZZERS=${ENABLED_FUZZERS:-crypt2_load_fuzz crypt2_load_ondisk_fuzz}
 
 mkdir -p $SRC
 mkdir -p $OUT
@@ -42,13 +42,10 @@ mkdir -p $DEPS_PATH
 cd $SRC
 
 echo "Installing dependencies"
-LIBFUZZER_PATCH="$XPWD/unpoison-mutated-buffers-from-libfuzzer.patch"
-in_oss_fuzz && LIBFUZZER_PATCH="$XPWD/cryptsetup/tests/fuzz/unpoison-mutated-buffers-from-libfuzzer.patch"
 
 in_oss_fuzz && apt-get update && apt-get install -y \
     make autoconf automake autopoint libtool pkg-config \
-    sharutils gettext expect keyutils ninja-build \
-    bison flex
+    sharutils gettext expect keyutils bison flex
 
 echo "Cloning git repositories"
 # FIXME: temporary use branch master instead of develop
@@ -68,13 +65,6 @@ last_commit lvm2
 [ ! -d popt ] && git clone -q --depth 1 https://github.com/rpm-software-management/popt.git
 last_commit popt
 
-# FIXME: temporary fix until libprotobuf stops shuffling C++ requirements
-# [ ! -d libprotobuf-mutator ] && git clone --depth 1 https://github.com/google/libprotobuf-mutator.git \
-[ ! -d libprotobuf-mutator ] && git clone -q --depth 1 --branch v1.1 -c advice.detachedHead=false \
-    https://github.com/google/libprotobuf-mutator.git &&
-    [ "$SANITIZER" == "memory" ] && ( cd libprotobuf-mutator; patch -p1 < $LIBFUZZER_PATCH )
-last_commit libprotobuf-mutator
-
 [ ! -d openssl ] && git clone -q --depth 1 https://github.com/openssl/openssl
 last_commit openssl
 
@@ -139,21 +129,6 @@ make -j
 make install
 cd ../..
 
-cd libprotobuf-mutator
-mkdir -p build
-rm -fr build/*
-cd build
-cmake .. -GNinja \
-    -DCMAKE_INSTALL_PREFIX="$DEPS_PATH" \
-    -DPKG_CONFIG_PATH="$PKG_CONFIG_PATH" \
-    -DLIB_PROTO_MUTATOR_TESTING=OFF \
-    -DLIB_PROTO_MUTATOR_DOWNLOAD_PROTOBUF=ON
-ninja
-ninja install
-cd external.protobuf;
-cp -Rf bin lib include "$DEPS_PATH";
-cd ../../..
-
 echo "Building cryptsetup fuzzers"
 if in_oss_fuzz; then
     mkdir -p cryptsetup/tests/fuzz/build
diff --git a/tests/fuzz/plain_json_proto_to_luks2.cc b/tests/fuzz/plain_json_proto_to_luks2.cc
deleted file mode 100644
index 04d33f85d..000000000
--- a/tests/fuzz/plain_json_proto_to_luks2.cc
+++ /dev/null
@@ -1,62 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-or-later
-/*
- * cryptsetup LUKS2 protobuf to image converter
- *
- * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- */
-
-#include <iostream>
-#include <string>
-
-#include <fcntl.h>
-#include <unistd.h>
-
-#include <google/protobuf/text_format.h>
-#include <google/protobuf/io/zero_copy_stream_impl.h>
-
-#include "plain_json_proto_to_luks2_converter.h"
-
-using namespace json_proto;
-
-int main(int argc, char *argv[]) {
-  LUKS2_both_headers headers;
-  LUKS2ProtoConverter converter;
-  int fd;
-
-  std::string out_img_name;
-
-  if (argc != 2) {
-    std::cerr << "Usage: " << argv[0] << " <LUKS2 proto>\n";
-    return EXIT_FAILURE;
-  }
-
-  fd = open(argv[1], O_RDONLY);
-  if (fd < 0) {
-    std::cerr << "Failed to open " << argv[1] << std::endl;
-    return EXIT_FAILURE;
-  }
-
-  google::protobuf::io::FileInputStream fileInput(fd);
-
-  if (!google::protobuf::TextFormat::Parse(&fileInput, &headers)) {
-    std::cerr << "Failed to parse protobuf " << argv[1] << std::endl;
-    close(fd);
-    return EXIT_FAILURE;
-  }
-  close(fd);
-
-  out_img_name = argv[1];
-  out_img_name += ".img";
-
-  fd = open(out_img_name.c_str(), O_RDWR|O_CREAT|O_EXCL|O_CLOEXEC|O_TRUNC, 0644);
-  if (fd < 0) {
-    std::cerr << "Failed to open output file " << out_img_name << std::endl;
-    return EXIT_FAILURE;
-  }
-  converter.set_write_headers_only(false);
-  converter.convert(headers, fd);
-
-  close(fd);
-  return EXIT_SUCCESS;
-}
diff --git a/tests/fuzz/plain_json_proto_to_luks2_converter.cc b/tests/fuzz/plain_json_proto_to_luks2_converter.cc
deleted file mode 100644
index 60d2e1ddf..000000000
--- a/tests/fuzz/plain_json_proto_to_luks2_converter.cc
+++ /dev/null
@@ -1,147 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-or-later
-/*
- * cryptsetup LUKS2 custom mutator fuzz target
- *
- * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- */
-
-#include "plain_json_proto_to_luks2_converter.h"
-#include "json_proto_converter.h"
-
-extern "C" {
-#include "src/cryptsetup.h"
-#include "luks2/luks2.h"
-#include <err.h>
-}
-
-namespace json_proto {
-
-void LUKS2ProtoConverter::emit_luks2_binary_header(const LUKS2_header &header_proto, int fd, uint64_t offset, uint64_t seqid, const std::string &json_text) {
-  struct luks2_hdr_disk hdr = {};
-  size_t hdr_json_area_len, write_size;
-  uint8_t csum[LUKS2_CHECKSUM_L];
-  int r;
-
-  if (hd)
-    crypt_hash_destroy(hd);
-  if (crypt_hash_init(&hd, "sha256"))
-    err(EXIT_FAILURE, "crypt_hash_init failed");
-
-
-  r = lseek(fd, offset, SEEK_SET);
-  if (r == -1)
-    err(EXIT_FAILURE, "lseek failed");
-
-  switch (header_proto.magic()) {
-    case INVALID:
-      memset(&hdr.magic, 0, LUKS2_MAGIC_L);
-      break;
-    case FIRST:
-      memcpy(&hdr.magic, LUKS2_MAGIC_1ST, LUKS2_MAGIC_L);
-      break;
-    case SECOND:
-      memcpy(&hdr.magic, LUKS2_MAGIC_2ND, LUKS2_MAGIC_L);
-      break;
-  }
-  hdr.version     = cpu_to_be16(header_proto.version());
-  hdr.hdr_size    = cpu_to_be64(header_proto.hdr_size());
-  hdr.seqid       = cpu_to_be64(seqid);
-  strncpy(hdr.checksum_alg, "sha256", LUKS2_CHECKSUM_ALG_L);
-  hdr.checksum_alg[LUKS2_CHECKSUM_ALG_L - 1] = '\0';
-  strncpy(hdr.uuid, "af7f64ea-3233-4581-946b-6187d812841e", LUKS2_UUID_L);
-  memset(hdr.salt, 1, LUKS2_SALT_L);
-
-  if (header_proto.has_selected_offset())
-    hdr.hdr_offset  = cpu_to_be64(header_proto.selected_offset());
-  else
-    hdr.hdr_offset  = cpu_to_be64(offset);
-
-  if (write_buffer(fd, &hdr, LUKS2_HDR_BIN_LEN) != LUKS2_HDR_BIN_LEN)
-    err(EXIT_FAILURE, "write_buffer failed");
-  if (crypt_hash_write(hd, (char*)&hdr, LUKS2_HDR_BIN_LEN))
-    err(EXIT_FAILURE, "crypt_hash_write failed");
-
-  if (header_proto.hdr_size() <= LUKS2_HDR_BIN_LEN ||
-      header_proto.hdr_size() > LUKS2_DEFAULT_HDR_SIZE)
-      hdr_json_area_len = LUKS2_DEFAULT_HDR_SIZE - LUKS2_HDR_BIN_LEN;
-  else
-      hdr_json_area_len = header_proto.hdr_size() - LUKS2_HDR_BIN_LEN;
-
-  write_size = json_text.length() > hdr_json_area_len - 1 ? hdr_json_area_len - 1 : json_text.length();
-  if (write_buffer(fd, json_text.c_str(), write_size) != (ssize_t)write_size)
-    err(EXIT_FAILURE, "write_buffer failed");
-  if (crypt_hash_write(hd, json_text.c_str(), write_size))
-    err(EXIT_FAILURE, "crypt_hash_write failed");
-
-  for (size_t i = 0; i < (hdr_json_area_len - write_size); i++) {
-    if (crypt_hash_write(hd, "\0", 1))
-      err(EXIT_FAILURE, "crypt_hash_write failed");
-  }
-
-  if (header_proto.use_correct_checksum()) {
-    if (lseek(fd, offset + offsetof(luks2_hdr_disk, csum), SEEK_SET) == -1)
-      err(EXIT_FAILURE, "lseek failed");
-
-    int hash_size = crypt_hash_size("sha256");
-    if (hash_size <= 0)
-      err(EXIT_FAILURE, "crypt_hash_size failed");
-
-    if (crypt_hash_final(hd, (char*)csum, (size_t)hash_size))
-      err(EXIT_FAILURE, "crypt_hash_final failed");
-    if (write_buffer(fd, csum, hash_size) != hash_size)
-      err(EXIT_FAILURE, "write_buffer failed");
-  }
-}
-
-void LUKS2ProtoConverter::set_write_headers_only(bool headers_only) {
-  write_headers_only = headers_only;
-}
-
-void LUKS2ProtoConverter::convert(const LUKS2_both_headers &headers, int fd) {
-  uint64_t primary_seqid, secondary_seqid;
-  int result;
-
-  size_t out_size = headers.primary_header().hdr_size() + headers.secondary_header().hdr_size();
-
-  if (out_size < 4096 || out_size > 2 * LUKS2_DEFAULT_HDR_SIZE)
-    out_size = LUKS2_DEFAULT_HDR_SIZE;
-
-  if (!write_headers_only)
-    out_size += KEYSLOTS_SIZE + DATA_SIZE;
-
-  result = ftruncate(fd, out_size);
-  if (result == -1)
-    err(EXIT_FAILURE, "truncate failed");
-
-  result = lseek(fd, 0, SEEK_SET);
-  if (result == -1)
-    err(EXIT_FAILURE, "lseek failed");
-
-  switch (headers.seqid()) {
-    case EQUAL:
-      primary_seqid = 1;
-      secondary_seqid = 1;
-      break;
-    case PRIMARY_GREATER:
-      primary_seqid = 2;
-      secondary_seqid = 1;
-      break;
-    case SECONDARY_GREATER:
-      primary_seqid = 1;
-      secondary_seqid = 2;
-      break;
-  }
-
-  JsonProtoConverter converter;
-  std::string json_text = converter.Convert(headers.json_area());
-
-  emit_luks2_binary_header(headers.primary_header(), fd, 0, primary_seqid, json_text);
-  emit_luks2_binary_header(headers.secondary_header(), fd, headers.primary_header().hdr_size(), secondary_seqid, json_text);
-}
-
-LUKS2ProtoConverter::~LUKS2ProtoConverter() {
-  if (hd)
-    crypt_hash_destroy(hd);
-}
-}  // namespace LUKS2_proto
diff --git a/tests/fuzz/plain_json_proto_to_luks2_converter.h b/tests/fuzz/plain_json_proto_to_luks2_converter.h
deleted file mode 100644
index 74aced52e..000000000
--- a/tests/fuzz/plain_json_proto_to_luks2_converter.h
+++ /dev/null
@@ -1,45 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-or-later
-/*
- * cryptsetup LUKS2 custom mutator fuzz target
- *
- * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- */
-
-#ifndef LUKS2_PROTO_CONVERTER_H_
-#define LUKS2_PROTO_CONVERTER_H_
-
-#include <sstream>
-#include <string>
-#include <json-c/json.h>
-
-#include "LUKS2_plain_JSON.pb.h"
-extern "C" {
-#include "crypto_backend/crypto_backend.h"
-}
-
-namespace json_proto {
-
-class LUKS2ProtoConverter {
-  public:
-    ~LUKS2ProtoConverter();
-    void create_jobj(const LUKS2_both_headers &headers, uint64_t hdr_size);
-    void convert(const LUKS2_both_headers &headers, int fd);
-    void create_jobj(const LUKS2_both_headers &headers);
-    void emit_luks2_binary_header(const LUKS2_header &header_proto, int fd, uint64_t offset, uint64_t seqid, const std::string &json_text);
-
-    void set_write_headers_only(bool headers_only);
-
-    const uint8_t *get_out_buffer();
-    size_t get_out_size();
-
-    static const uint64_t KEYSLOTS_SIZE = 3 * 1024 * 1024;
-    static const uint64_t DATA_SIZE = 16 * 1024 * 1024;
-  private:
-    bool write_headers_only = false;
-    struct crypt_hash *hd = NULL;
-};
-
-}  // namespace LUKS2_proto
-
-#endif  // LUKS2_PROTO_CONVERTER_H_
diff --git a/tests/fuzz/proto_to_luks2.cc b/tests/fuzz/proto_to_luks2.cc
deleted file mode 100644
index bd5ff7996..000000000
--- a/tests/fuzz/proto_to_luks2.cc
+++ /dev/null
@@ -1,62 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-or-later
-/*
- * cryptsetup LUKS2 protobuf to image converter
- *
- * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- */
-
-#include <iostream>
-#include <string>
-
-#include <fcntl.h>
-#include <unistd.h>
-
-#include <google/protobuf/text_format.h>
-#include <google/protobuf/io/zero_copy_stream_impl.h>
-
-#include "proto_to_luks2_converter.h"
-
-using namespace LUKS2_proto;
-
-int main(int argc, char *argv[]) {
-  LUKS2_both_headers headers;
-  LUKS2ProtoConverter converter;
-  int fd;
-
-  std::string out_img_name;
-
-  if (argc != 2) {
-    std::cerr << "Usage: " << argv[0] << " <LUKS2 proto>\n";
-    return EXIT_FAILURE;
-  }
-
-  fd = open(argv[1], O_RDONLY);
-  if (fd < 0) {
-    std::cerr << "Failed to open " << argv[1] << std::endl;
-    return EXIT_FAILURE;
-  }
-
-  google::protobuf::io::FileInputStream fileInput(fd);
-
-  if (!google::protobuf::TextFormat::Parse(&fileInput, &headers)) {
-    std::cerr << "Failed to parse protobuf " << argv[1] << std::endl;
-    close(fd);
-    return EXIT_FAILURE;
-  }
-  close(fd);
-
-  out_img_name = argv[1];
-  out_img_name += ".img";
-
-  fd = open(out_img_name.c_str(), O_RDWR|O_CREAT|O_EXCL|O_CLOEXEC|O_TRUNC, 0644);
-  if (fd < 0) {
-    std::cerr << "Failed to open output file " << out_img_name << std::endl;
-    return EXIT_FAILURE;
-  }
-  converter.set_write_headers_only(false);
-  converter.convert(headers, fd);
-
-  close(fd);
-  return EXIT_SUCCESS;
-}
diff --git a/tests/fuzz/proto_to_luks2_converter.cc b/tests/fuzz/proto_to_luks2_converter.cc
deleted file mode 100644
index 17a2cb428..000000000
--- a/tests/fuzz/proto_to_luks2_converter.cc
+++ /dev/null
@@ -1,591 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-or-later
-/*
- * cryptsetup LUKS2 custom mutator fuzz target
- *
- * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- */
-
-#include "proto_to_luks2_converter.h"
-#include <iostream>
-
-extern "C" {
-#include "src/cryptsetup.h"
-#include "luks2/luks2.h"
-#include <err.h>
-}
-
-namespace LUKS2_proto {
-
-std::string LUKS2ProtoConverter::string_uint64_to_string(const string_uint64 &str_u64) {
-  std::ostringstream os;
-
-  if (str_u64.negative())
-    os << "-";
-
-  if (str_u64.has_uint_num())
-    os << str_u64.uint_num();
-  else if (str_u64.has_string_num())
-    os << str_u64.string_num();
-
-  return os.str();
-}
-
-std::string LUKS2ProtoConverter::object_id_to_string(const object_id &oid) {
-  std::ostringstream os;
-
-  if (oid.has_int_id()) {
-    os << (oid.int_id() % 33) - 16;
-  } else if (oid.has_string_id()) {
-    os << oid.string_id();
-  }
-
-  return os.str();
-}
-
-std::string LUKS2ProtoConverter::hash_algorithm_to_string(const hash_algorithm type) {
-  switch (type) {
-    case HASH_ALG_SHA1:
-      return "sha1";
-    case HASH_ALG_SHA256:
-      return "sha256";
-  }
-}
-
-std::string LUKS2ProtoConverter::keyslot_area_type_to_string(const keyslot_area_type type) {
-  switch (type) {
-    case KEYSLOT_AREA_TYPE_RAW:
-      return "raw";
-    case KEYSLOT_AREA_TYPE_NONE:
-      return "none";
-    case KEYSLOT_AREA_TYPE_JOURNAL:
-      return "journal";
-    case KEYSLOT_AREA_TYPE_CHECKSUM:
-      return "checksum";
-    case KEYSLOT_AREA_TYPE_DATASHIFT:
-      return "datashift";
-  }
-}
-
-void LUKS2ProtoConverter::generate_keyslot_area(struct json_object *jobj_area, const keyslot_area_description &keyslot_area_desc) {
-  // mandatory fields
-  if (keyslot_area_desc.has_type())
-    json_object_object_add(jobj_area, "type", json_object_new_string(keyslot_area_type_to_string(keyslot_area_desc.type()).c_str()));
-  if (keyslot_area_desc.has_offset())
-    json_object_object_add(jobj_area, "offset", json_object_new_string(string_uint64_to_string(keyslot_area_desc.offset()).c_str()));
-  if (keyslot_area_desc.has_size())
-    json_object_object_add(jobj_area, "size", json_object_new_string(string_uint64_to_string(keyslot_area_desc.size()).c_str()));
-
-  // raw type fields
-  if (keyslot_area_desc.has_encryption())
-    json_object_object_add(jobj_area, "encryption", json_object_new_string(keyslot_area_desc.encryption().c_str()));
-  if (keyslot_area_desc.has_key_size())
-    json_object_object_add(jobj_area, "key_size", json_object_new_int(keyslot_area_desc.key_size()));
-
-  // checksum type fields
-  if (keyslot_area_desc.has_hash())
-    json_object_object_add(jobj_area, "hash", json_object_new_string(hash_algorithm_to_string(keyslot_area_desc.hash()).c_str()));
-  if (keyslot_area_desc.has_sector_size())
-    json_object_object_add(jobj_area, "sector_size", json_object_new_int(keyslot_area_desc.sector_size()));
-
-  // datashift type fields
-  if (keyslot_area_desc.has_shift_size())
-    json_object_object_add(jobj_area, "shift_size", json_object_new_string(string_uint64_to_string(keyslot_area_desc.shift_size()).c_str()));
-}
-
-std::string LUKS2ProtoConverter::keyslot_kdf_type_to_string(const keyslot_kdf_type type) {
-  switch (type) {
-    case KEYSLOT_KDF_TYPE_PBKDF2:
-      return "pbkdf2";
-    case KEYSLOT_KDF_TYPE_ARGON2I:
-      return "argon2i";
-    case KEYSLOT_KDF_TYPE_ARGON2ID:
-      return "argon2id";
-  }
-}
-
-void LUKS2ProtoConverter::generate_keyslot_kdf(struct json_object *jobj_kdf, const keyslot_kdf_description &keyslot_kdf_desc) {
-  // mandatory fields
-  if (keyslot_kdf_desc.has_type())
-    json_object_object_add(jobj_kdf, "type", json_object_new_string(keyslot_kdf_type_to_string(keyslot_kdf_desc.type()).c_str()));
-
-  if (keyslot_kdf_desc.has_salt())
-    json_object_object_add(jobj_kdf, "salt", json_object_new_string(keyslot_kdf_desc.salt().c_str()));
-  else
-    json_object_object_add(jobj_kdf, "salt", json_object_new_string("6vz4xK7cjan92rDA5JF8O6Jk2HouV0O8DMB6GlztVk="));
-
-  // pbkdf2 type
-  if (keyslot_kdf_desc.has_hash())
-    json_object_object_add(jobj_kdf, "hash", json_object_new_string(hash_algorithm_to_string(keyslot_kdf_desc.hash()).c_str()));
-  if (keyslot_kdf_desc.has_iterations())
-    json_object_object_add(jobj_kdf, "iterations", json_object_new_int(keyslot_kdf_desc.iterations()));
-
-  // argon2i and argon2id types
-  if (keyslot_kdf_desc.has_time())
-    json_object_object_add(jobj_kdf, "time", json_object_new_int(keyslot_kdf_desc.time()));
-  if (keyslot_kdf_desc.has_memory())
-    json_object_object_add(jobj_kdf, "memory", json_object_new_int(keyslot_kdf_desc.memory()));
-  if (keyslot_kdf_desc.has_cpus())
-    json_object_object_add(jobj_kdf, "cpus", json_object_new_int(keyslot_kdf_desc.cpus()));
-}
-
-std::string LUKS2ProtoConverter::keyslot_af_type_to_string(const keyslot_af_type type) {
-  switch (type) {
-    case KEYSLOT_AF_TYPE_LUKS1:
-      return "luks1";
-  }
-}
-
-void LUKS2ProtoConverter::generate_keyslot_af(struct json_object *jobj_af, const keyslot_af_description &keyslot_af_desc) {
-  if (keyslot_af_desc.has_type())
-    json_object_object_add(jobj_af, "type", json_object_new_string(keyslot_af_type_to_string(keyslot_af_desc.type()).c_str()));
-  if (keyslot_af_desc.has_stripes())
-    json_object_object_add(jobj_af, "stripes", json_object_new_int(keyslot_af_desc.stripes()));
-  if (keyslot_af_desc.has_hash())
-    json_object_object_add(jobj_af, "hash", json_object_new_string(hash_algorithm_to_string(keyslot_af_desc.hash()).c_str()));
-}
-
-std::string LUKS2ProtoConverter::keyslot_type_to_string(const keyslot_type type) {
-  switch (type) {
-    case KEYSLOT_TYPE_LUKS2:
-      return "luks2";
-    case KEYSLOT_TYPE_REENCRYPT:
-      return "reencrypt";
-    case KEYSLOT_TYPE_PLACEHOLDER:
-      return "placeholder";
-  }
-}
-
-std::string LUKS2ProtoConverter::reencrypt_keyslot_mode_to_string(const reencrypt_keyslot_mode mode) {
-  switch (mode) {
-    case MODE_REENCRYPT:
-      return "reencrypt";
-    case MODE_ENCRYPT:
-      return "encrypt";
-    case MODE_DECRYPT:
-      return "decrypt";
-  }
-}
-
-std::string LUKS2ProtoConverter::reencrypt_keyslot_direction_to_string(const reencrypt_keyslot_direction direction) {
-  switch (direction) {
-    case DIRECTION_FORWARD:
-      return "forward";
-    case DIRECTION_BACKWARD:
-      return "backward";
-  }
-}
-
-void LUKS2ProtoConverter::generate_keyslot(struct json_object *jobj_keyslots, const keyslot_description &keyslot_desc) {
-  struct json_object *jobj_keyslot, *jobj_area, *jobj_kdf, *jobj_af;
-
-  jobj_keyslot = json_object_new_object();
-  if (keyslot_desc.has_type())
-    json_object_object_add(jobj_keyslot, "type", json_object_new_string(keyslot_type_to_string(keyslot_desc.type()).c_str()));
-  if (keyslot_desc.has_key_size())
-    json_object_object_add(jobj_keyslot, "key_size", json_object_new_int(keyslot_desc.key_size()));
-  if (keyslot_desc.has_priority())
-    json_object_object_add(jobj_keyslot, "priority", json_object_new_int(keyslot_desc.priority()));
-  if (keyslot_desc.has_mode())
-    json_object_object_add(jobj_keyslot, "mode", json_object_new_int(keyslot_desc.mode()));
-  if (keyslot_desc.has_direction())
-    json_object_object_add(jobj_keyslot, "direction", json_object_new_int(keyslot_desc.direction()));
-
-  /* Area object */
-  if (keyslot_desc.has_area()) {
-    jobj_area = json_object_new_object();
-    generate_keyslot_area(jobj_area, keyslot_desc.area());
-    json_object_object_add(jobj_keyslot, "area", jobj_area);
-  }
-
-  /* KDF object */
-  if (keyslot_desc.has_kdf()) {
-    jobj_kdf = json_object_new_object();
-    generate_keyslot_kdf(jobj_kdf, keyslot_desc.kdf());
-    json_object_object_add(jobj_keyslot, "kdf", jobj_kdf);
-  }
-
-  /* AF object */
-  if (keyslot_desc.has_af()) {
-    jobj_af = json_object_new_object();
-    generate_keyslot_af(jobj_af, keyslot_desc.af());
-    json_object_object_add(jobj_keyslot, "af", jobj_af);
-  }
-
-  json_object_object_add(jobj_keyslots, object_id_to_string(keyslot_desc.oid()).c_str(), jobj_keyslot);
-}
-
-void LUKS2ProtoConverter::generate_token(struct json_object *jobj_tokens, const token_description &token_desc) {
-  struct json_object *jobj_token, *jobj_keyslots;
-  jobj_token = json_object_new_object();
-
-  if (token_desc.has_type())
-    json_object_object_add(jobj_token, "type", json_object_new_string(token_desc.type().c_str()));
-
-  if (token_desc.has_key_description())
-    json_object_object_add(jobj_token, "key_description", json_object_new_string(token_desc.key_description().c_str()));
-
-  if (!token_desc.keyslots().empty()) {
-    jobj_keyslots = json_object_new_array();
-
-    for (const object_id& oid : token_desc.keyslots()) {
-        json_object_array_add(jobj_keyslots,
-            json_object_new_string(object_id_to_string(oid).c_str()));
-    }
-
-    /* Replace or add new keyslots array */
-    json_object_object_add(jobj_token, "keyslots", jobj_keyslots);
-  }
-
-  json_object_object_add(jobj_tokens, object_id_to_string(token_desc.oid()).c_str(), jobj_token);
-}
-
-void LUKS2ProtoConverter::generate_digest(struct json_object *jobj_digests, const digest_description &digest_desc) {
-  struct json_object *jobj_digest, *jobj_keyslots, *jobj_segments;
-
-  jobj_digest = json_object_new_object();
-
-  if (digest_desc.has_type())
-    json_object_object_add(jobj_digest, "type", json_object_new_string(keyslot_kdf_type_to_string(digest_desc.type()).c_str()));
-
-  if (!digest_desc.keyslots().empty()) {
-    jobj_keyslots = json_object_new_array();
-
-    for (const object_id& oid : digest_desc.keyslots()) {
-        json_object_array_add(jobj_keyslots,
-            json_object_new_string(object_id_to_string(oid).c_str()));
-    }
-
-    /* Replace or add new keyslots array */
-    json_object_object_add(jobj_digest, "keyslots", jobj_keyslots);
-  }
-
-  if (!digest_desc.segments().empty()) {
-    jobj_segments = json_object_new_array();
-
-    for (const object_id& oid : digest_desc.segments()) {
-        json_object_array_add(jobj_segments,
-            json_object_new_string(object_id_to_string(oid).c_str()));
-    }
-
-    /* Replace or add new segments array */
-    json_object_object_add(jobj_digest, "segments", jobj_segments);
-  }
-
-  if (digest_desc.has_salt())
-    json_object_object_add(jobj_digest, "salt", json_object_new_string(digest_desc.salt().c_str()));
-  if (digest_desc.has_digest())
-    json_object_object_add(jobj_digest, "digest", json_object_new_string(digest_desc.digest().c_str()));
-  if (digest_desc.has_hash())
-    json_object_object_add(jobj_digest, "hash", json_object_new_string(hash_algorithm_to_string(digest_desc.hash()).c_str()));
-  if (digest_desc.has_iterations())
-    json_object_object_add(jobj_digest, "iterations", json_object_new_int(digest_desc.iterations()));
-
-  json_object_object_add(jobj_digests, object_id_to_string(digest_desc.oid()).c_str(), jobj_digest);
-}
-
-std::string LUKS2ProtoConverter::segment_type_to_string(segment_type type) {
-  switch (type) {
-    case SEGMENT_TYPE_LINEAR:
-      return "linear";
-    case SEGMENT_TYPE_CRYPT:
-      return "crypt";
-  }
-}
-
-std::string LUKS2ProtoConverter::segment_flag_to_string(segment_flag flag) {
-  switch (flag) {
-    case IN_REENCRYPTION:
-      return "in-reencryption";
-    case BACKUP_FINAL:
-      return "backup-final";
-    case BACKUP_PREVIOUS:
-      return "backup-previous";
-    case BACKUP_MOVED_SEGMENT:
-      return "backup-moved-segment";
-  }
-}
-
-void LUKS2ProtoConverter::generate_segment_integrity(struct json_object *jobj_integrity, const segment_integrity_description &segment_integrity_desc) {
-  if (segment_integrity_desc.has_type())
-    json_object_object_add(jobj_integrity, "type", json_object_new_string(segment_integrity_desc.type().c_str()));
-  if (segment_integrity_desc.has_journal_encryption())
-    json_object_object_add(jobj_integrity, "journal_encryption", json_object_new_string(segment_integrity_desc.journal_encryption().c_str()));
-  if (segment_integrity_desc.has_journal_integrity())
-    json_object_object_add(jobj_integrity, "journal_integrity", json_object_new_string(segment_integrity_desc.journal_integrity().c_str()));
-}
-
-void LUKS2ProtoConverter::generate_segment(struct json_object *jobj_segments, const segment_description &segment_desc) {
-  json_object *jobj_flags, *jobj_integrity;
-  json_object *jobj_segment = json_object_new_object();
-
-  if (segment_desc.has_type())
-    json_object_object_add(jobj_segment, "type", json_object_new_string(segment_type_to_string(segment_desc.type()).c_str()));
-
-  if (segment_desc.has_offset())
-    json_object_object_add(jobj_segment, "offset", json_object_new_string(string_uint64_to_string(segment_desc.offset()).c_str()));
-  if (segment_desc.has_size())
-    json_object_object_add(jobj_segment, "size", json_object_new_string(string_uint64_to_string(segment_desc.size()).c_str()));
-
-  if (!segment_desc.flags().empty()) {
-    jobj_flags = json_object_new_array();
-
-    for (const int flag : segment_desc.flags()) {
-        json_object_array_add(jobj_flags,
-            json_object_new_string(segment_flag_to_string(segment_flag(flag)).c_str()));
-    }
-
-    /* Replace or add new flags array */
-    json_object_object_add(jobj_segment, "flags", jobj_flags);
-  }
-
-  if (segment_desc.has_iv_tweak())
-    json_object_object_add(jobj_segment, "iv_tweak", json_object_new_string(string_uint64_to_string(segment_desc.iv_tweak()).c_str()));
-  if (segment_desc.has_encryption())
-    json_object_object_add(jobj_segment, "encryption", json_object_new_string(segment_desc.encryption().c_str()));
-  if (segment_desc.has_sector_size())
-    json_object_object_add(jobj_segment, "sector_size", json_object_new_int(segment_desc.sector_size()));
-
-  if (segment_desc.has_integrity()) {
-    jobj_integrity = json_object_new_object();
-    generate_segment_integrity(jobj_integrity, segment_desc.integrity());
-    json_object_object_add(jobj_segment, "integrity", jobj_integrity);
-  }
-
-  json_object_object_add(jobj_segments, object_id_to_string(segment_desc.oid()).c_str(), jobj_segment);
-}
-
-void LUKS2ProtoConverter::create_jobj(const LUKS2_both_headers &headers) {
-  json_object *jobj_keyslots = NULL;
-  json_object *jobj_digests = NULL;
-  json_object *jobj_segments = NULL;
-  json_object *jobj_tokens = NULL;
-
-  const json_area_description &json_desc = headers.json_area();
-
-  jobj = json_object_new_object();
-  if (!jobj)
-    return;
-
-  jobj_keyslots = json_object_new_object();
-  for (const keyslot_description &keyslot_desc : json_desc.keyslots()) {
-    generate_keyslot(jobj_keyslots, keyslot_desc);
-  }
-  json_object_object_add(jobj, "keyslots", jobj_keyslots);
-
-  jobj_digests = json_object_new_object();
-  for (const digest_description &digest_desc : json_desc.digests()) {
-    generate_digest(jobj_digests, digest_desc);
-  }
-  json_object_object_add(jobj, "digests", jobj_digests);
-
-  jobj_segments = json_object_new_object();
-  for (const segment_description &segment_desc : json_desc.segments()) {
-    generate_segment(jobj_segments, segment_desc);
-  }
-  json_object_object_add(jobj, "segments", jobj_segments);
-
-  jobj_tokens = json_object_new_object();
-  for (const token_description &token_desc : json_desc.tokens()) {
-    generate_token(jobj_tokens, token_desc);
-  }
-  json_object_object_add(jobj, "tokens", jobj_tokens);
-
-  if (json_desc.has_config()) {
-    uint64_t hdr_size = json_desc.config().use_primary_hdr_size() ? headers.primary_header().hdr_size() : headers.secondary_header().hdr_size();
-    generate_config(json_desc.config(), hdr_size - LUKS2_HDR_BIN_LEN, KEYSLOTS_SIZE);
-  }
-}
-
-void LUKS2ProtoConverter::emit_luks2_binary_header(const LUKS2_header &header_proto, int fd, uint64_t offset, uint64_t seqid) {
-  struct luks2_hdr_disk hdr = {};
-  int r;
-
-  if (hd)
-    crypt_hash_destroy(hd);
-  if (crypt_hash_init(&hd, "sha256"))
-    err(EXIT_FAILURE, "crypt_hash_init failed");
-
-
-  r = lseek(fd, offset, SEEK_SET);
-  if (r == -1)
-    err(EXIT_FAILURE, "lseek failed");
-
-  switch (header_proto.magic()) {
-    case INVALID:
-      memset(&hdr.magic, 0, LUKS2_MAGIC_L);
-      break;
-    case FIRST:
-      memcpy(&hdr.magic, LUKS2_MAGIC_1ST, LUKS2_MAGIC_L);
-      break;
-    case SECOND:
-      memcpy(&hdr.magic, LUKS2_MAGIC_2ND, LUKS2_MAGIC_L);
-      break;
-  }
-  hdr.version     = cpu_to_be16(header_proto.version());
-  hdr.hdr_size    = cpu_to_be64(header_proto.hdr_size());
-  hdr.seqid       = cpu_to_be64(seqid);
-  strncpy(hdr.checksum_alg, "sha256", LUKS2_CHECKSUM_ALG_L);
-  hdr.checksum_alg[LUKS2_CHECKSUM_ALG_L - 1] = '\0';
-  strncpy(hdr.uuid, "af7f64ea-3233-4581-946b-6187d812841e", LUKS2_UUID_L);
-  memset(hdr.salt, 1, LUKS2_SALT_L);
-
-
-  if (header_proto.has_selected_offset())
-    hdr.hdr_offset  = cpu_to_be64(header_proto.selected_offset());
-  else
-    hdr.hdr_offset  = cpu_to_be64(offset);
-
-  if (write_buffer(fd, &hdr, LUKS2_HDR_BIN_LEN) != LUKS2_HDR_BIN_LEN)
-    err(EXIT_FAILURE, "write_buffer failed");
-  if (crypt_hash_write(hd, (char*)&hdr, LUKS2_HDR_BIN_LEN))
-    err(EXIT_FAILURE, "crypt_hash_write failed");
-
-  size_t hdr_json_area_len = header_proto.hdr_size() - LUKS2_HDR_BIN_LEN;
-  size_t json_text_len;
-  const char *json_text;
-  uint8_t csum[LUKS2_CHECKSUM_L];
-
-  if (jobj) {
-    json_text = json_object_to_json_string_ext((struct json_object *)jobj, JSON_C_TO_STRING_PLAIN | JSON_C_TO_STRING_NOSLASHESCAPE);
-    if (!json_text || !*json_text)
-      err(EXIT_FAILURE, "json_object_to_json_string_ext failed");
-
-    json_text_len = strlen(json_text);
-
-    size_t write_size = json_text_len > hdr_json_area_len - 1 ? hdr_json_area_len - 1 : json_text_len;
-    if (write_buffer(fd, json_text, write_size) != (ssize_t)write_size)
-      err(EXIT_FAILURE, "write_buffer failed");
-    if (crypt_hash_write(hd, json_text, write_size))
-      err(EXIT_FAILURE, "crypt_hash_write failed");
-
-    for (size_t i = 0; i < (hdr_json_area_len - write_size); i++) {
-      if (crypt_hash_write(hd, "\0", 1))
-        err(EXIT_FAILURE, "crypt_hash_write failed");
-    }
-  }
-
-  if (header_proto.use_correct_checksum()) {
-    if (lseek(fd, offset + offsetof(luks2_hdr_disk, csum), SEEK_SET) == -1)
-      err(EXIT_FAILURE, "lseek failed");
-
-    int hash_size = crypt_hash_size("sha256");
-    if (hash_size <= 0)
-      err(EXIT_FAILURE, "crypt_hash_size failed");
-
-    if (crypt_hash_final(hd, (char*)csum, (size_t)hash_size))
-      err(EXIT_FAILURE, "crypt_hash_final failed");
-    if (write_buffer(fd, csum, hash_size) != hash_size)
-      err(EXIT_FAILURE, "write_buffer failed");
-  }
-}
-
-void LUKS2ProtoConverter::set_write_headers_only(bool headers_only) {
-  write_headers_only = headers_only;
-}
-
-void LUKS2ProtoConverter::convert(const LUKS2_both_headers &headers, int fd) {
-  uint64_t primary_seqid, secondary_seqid;
-  int result;
-
-  size_t out_size = headers.primary_header().hdr_size() + headers.secondary_header().hdr_size();
-
-  if (!write_headers_only)
-    out_size += KEYSLOTS_SIZE + DATA_SIZE;
-
-  result = ftruncate(fd, out_size);
-  if (result == -1)
-    err(EXIT_FAILURE, "truncate failed");
-
-  result = lseek(fd, 0, SEEK_SET);
-  if (result == -1)
-    err(EXIT_FAILURE, "lseek failed");
-
-  switch (headers.seqid()) {
-    case EQUAL:
-      primary_seqid = 1;
-      secondary_seqid = 1;
-      break;
-    case PRIMARY_GREATER:
-      primary_seqid = 2;
-      secondary_seqid = 1;
-      break;
-    case SECONDARY_GREATER:
-      primary_seqid = 1;
-      secondary_seqid = 2;
-      break;
-  }
-
-  create_jobj(headers);
-  emit_luks2_binary_header(headers.primary_header(), fd, 0, primary_seqid);
-  emit_luks2_binary_header(headers.secondary_header(), fd, headers.primary_header().hdr_size(), secondary_seqid);
-}
-
-std::string LUKS2ProtoConverter::config_flag_to_string(config_flag flag) {
-  switch (flag) {
-    case CONFIG_FLAG_ALLOW_DISCARDS:
-      return "allow-discards";
-    case CONFIG_FLAG_SAME_CPU_CRYPT:
-      return "same-cpu-crypt";
-    case CONFIG_FLAG_SUBMIT_FROM_CRYPT_CPUS:
-      return "submit-from-crypt-cpus";
-    case CONFIG_FLAG_NO_JOURNAL:
-      return "no-journal";
-    case CONFIG_FLAG_NO_READ_WORKQUEUE:
-      return "no-read-workqueue";
-    case CONFIG_FLAG_NO_WRITE_WORKQUEUE:
-      return "no-write-workqueue";
-  }
-}
-
-std::string LUKS2ProtoConverter::config_requirement_to_string(config_requirement requirement) {
-  switch (requirement) {
-    case CONFIG_REQUIREMENT_OFFLINE_REENCRYPT:
-      return "offline-reencrypt";
-    case CONFIG_REQUIREMENT_ONLINE_REENCRYPT_V2:
-      return "online-reencrypt-v2";
-  }
-}
-
-void LUKS2ProtoConverter::generate_config(const config_description &config_desc, uint64_t json_size, uint64_t keyslots_size) {
-  json_object *jobj_config, *jobj_flags, *jobj_requirements, *jobj_mandatory;
-  jobj_config = json_object_new_object();
-
-  json_object_object_add(jobj_config, "json_size", json_object_new_string(std::to_string(json_size).c_str()));
-  json_object_object_add(jobj_config, "keyslots_size", json_object_new_string(std::to_string(keyslots_size).c_str()));
-
-  if (!config_desc.config_flags().empty()) {
-    jobj_flags = json_object_new_array();
-
-    for (const int flag : config_desc.config_flags()) {
-        json_object_array_add(jobj_flags,
-            json_object_new_string(config_flag_to_string(config_flag(flag)).c_str()));
-    }
-
-    /* Replace or add new flags array */
-    json_object_object_add(jobj_config, "flags", jobj_flags);
-  }
-
-  if (!config_desc.requirements().empty()) {
-    jobj_requirements = json_object_new_object();
-    jobj_mandatory = json_object_new_array();
-
-    for (const int requirement : config_desc.requirements()) {
-        json_object_array_add(jobj_mandatory,
-            json_object_new_string(config_requirement_to_string(config_requirement(requirement)).c_str()));
-    }
-
-    /* Replace or add new requirements array */
-    json_object_object_add(jobj_requirements, "mandatory", jobj_mandatory);
-    json_object_object_add(jobj_config, "requirements", jobj_requirements);
-  }
-
-  json_object_object_add(jobj, "config", jobj_config);
-}
-
-LUKS2ProtoConverter::~LUKS2ProtoConverter() {
-  json_object_put(jobj);
-  if (hd)
-    crypt_hash_destroy(hd);
-}
-}  // namespace LUKS2_proto
diff --git a/tests/fuzz/proto_to_luks2_converter.h b/tests/fuzz/proto_to_luks2_converter.h
deleted file mode 100644
index 873a28ad2..000000000
--- a/tests/fuzz/proto_to_luks2_converter.h
+++ /dev/null
@@ -1,78 +0,0 @@
-// SPDX-License-Identifier: GPL-2.0-or-later
-/*
- * cryptsetup LUKS2 custom mutator fuzz target
- *
- * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- */
-
-#ifndef LUKS2_PROTO_CONVERTER_H_
-#define LUKS2_PROTO_CONVERTER_H_
-
-#include <sstream>
-#include <string>
-#include <json-c/json.h>
-
-#include "LUKS2.pb.h"
-extern "C" {
-#include "crypto_backend/crypto_backend.h"
-}
-
-namespace LUKS2_proto {
-
-class LUKS2ProtoConverter {
-  public:
-    ~LUKS2ProtoConverter();
-    std::string string_uint64_to_string(const string_uint64 &str_u64);
-    std::string hash_algorithm_to_string(const hash_algorithm type);
-    std::string object_id_to_string(const object_id &oid);
-
-    std::string keyslot_area_type_to_string(const keyslot_area_type type);
-    std::string keyslot_kdf_type_to_string(const keyslot_kdf_type type);
-    std::string reencrypt_keyslot_mode_to_string(const reencrypt_keyslot_mode mode);
-    std::string keyslot_type_to_string(const keyslot_type type);
-    std::string reencrypt_keyslot_direction_to_string(const reencrypt_keyslot_direction direction);
-    std::string keyslot_af_type_to_string(const keyslot_af_type type);
-
-    std::string config_flag_to_string(config_flag flag);
-    std::string config_requirement_to_string(config_requirement requirements);
-
-    std::string segment_type_to_string(segment_type type);
-    std::string segment_flag_to_string(segment_flag flag);
-
-    void generate_keyslot(struct json_object *jobj_keyslots, const keyslot_description &keyslot_desc);
-    void generate_keyslot_area(struct json_object *jobj_area, const keyslot_area_description &keyslot_area_desc);
-    void generate_keyslot_kdf(struct json_object *jobj_kdf, const keyslot_kdf_description &keyslot_kdf_desc);
-    void generate_keyslot_af(struct json_object *jobj_af, const keyslot_af_description &keyslot_af_desc);
-
-    void generate_token(struct json_object *jobj_tokens, const token_description &token_desc);
-
-    void generate_digest(struct json_object *jobj_digests, const digest_description &digest_desc);
-
-    void generate_segment_integrity(struct json_object *jobj_integrity, const segment_integrity_description &segment_integrity_desc);
-    void generate_segment(struct json_object *jobj_segments, const segment_description &segment_desc);
-
-    void generate_config(const config_description &config_desc, uint64_t json_size, uint64_t keyslots_size);
-
-    void create_jobj(const LUKS2_both_headers &headers, uint64_t hdr_size);
-    void emit_luks2_binary_header(uint64_t offset, uint64_t seqid, bool is_primary, uint64_t hdr_size);
-    void convert(const LUKS2_both_headers &headers, int fd);
-    void create_jobj(const LUKS2_both_headers &headers);
-    void emit_luks2_binary_header(const LUKS2_header &header_proto, int fd, uint64_t offset, uint64_t seqid);
-
-    void set_write_headers_only(bool headers_only);
-
-    const uint8_t *get_out_buffer();
-    size_t get_out_size();
-
-    static const uint64_t KEYSLOTS_SIZE = 3 * 1024 * 1024;
-    static const uint64_t DATA_SIZE = 16 * 1024 * 1024;
-  private:
-    bool write_headers_only = false;
-    struct crypt_hash *hd = NULL;
-    struct ::json_object *jobj = NULL;
-};
-
-}  // namespace LUKS2_proto
-
-#endif  // LUKS2_PROTO_CONVERTER_H_
diff --git a/tests/fuzz/unpoison-mutated-buffers-from-libfuzzer.patch b/tests/fuzz/unpoison-mutated-buffers-from-libfuzzer.patch
deleted file mode 100644
index 1f483397b..000000000
--- a/tests/fuzz/unpoison-mutated-buffers-from-libfuzzer.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-diff --git a/src/libfuzzer/libfuzzer_mutator.cc b/src/libfuzzer/libfuzzer_mutator.cc
-index 34d144c..b671fd4 100644
---- a/src/libfuzzer/libfuzzer_mutator.cc
-+++ b/src/libfuzzer/libfuzzer_mutator.cc
-@@ -14,6 +14,8 @@
- 
- #include "src/libfuzzer/libfuzzer_mutator.h"
- 
-+#include <sanitizer/msan_interface.h>
-+
- #include <string.h>
- 
- #include <algorithm>
-@@ -64,6 +66,7 @@ template <class T>
- T MutateValue(T v) {
-   size_t size =
-       LLVMFuzzerMutate(reinterpret_cast<uint8_t*>(&v), sizeof(v), sizeof(v));
-+  __msan_unpoison(reinterpret_cast<uint8_t*>(&v), size);
-   memset(reinterpret_cast<uint8_t*>(&v) + size, 0, sizeof(v) - size);
-   return v;
- }
-@@ -93,6 +96,7 @@ std::string Mutator::MutateString(const std::string& value,
-   result.resize(std::max(1, new_size));
-   result.resize(LLVMFuzzerMutate(reinterpret_cast<uint8_t*>(&result[0]),
-                                  value.size(), result.size()));
-+  __msan_unpoison(reinterpret_cast<uint8_t*>(&result[0]), result.size());
-   return result;
- }
- 

From 5da712ab32ed759c44e3e4014b1906c1a2b194ca Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 20 Mar 2026 14:51:55 +0100
Subject: [PATCH 084/244] fuzz: Fix compilation warnings with recent compilers

---
 tests/fuzz/crypt2_load_fuzz.cc        | 2 +-
 tests/fuzz/crypt2_load_ondisk_fuzz.cc | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/fuzz/crypt2_load_fuzz.cc b/tests/fuzz/crypt2_load_fuzz.cc
index db365b683..84343b4ff 100644
--- a/tests/fuzz/crypt2_load_fuzz.cc
+++ b/tests/fuzz/crypt2_load_fuzz.cc
@@ -43,7 +43,7 @@ static bool calculate_checksum(const char *data, size_t size, struct luks2_hdr_d
 	if (sizeof(*hdr_rw) > size)
 		return false;
 
-	hdr_size = be64_to_cpu(((struct luks2_hdr_disk *)data)->hdr_size);
+	hdr_size = be64_to_cpu(((struct luks2_hdr_disk *)(uintptr_t)data)->hdr_size);
 	if (hdr_size > size || hdr_size <= sizeof(*hdr_rw))
 		return false;
 
diff --git a/tests/fuzz/crypt2_load_ondisk_fuzz.cc b/tests/fuzz/crypt2_load_ondisk_fuzz.cc
index a883d3e04..45c25bdc6 100644
--- a/tests/fuzz/crypt2_load_ondisk_fuzz.cc
+++ b/tests/fuzz/crypt2_load_ondisk_fuzz.cc
@@ -11,7 +11,7 @@ extern "C" {
 #include "crypto_backend/crypto_backend.h"
 #include "FuzzerInterface.h"
 
-void empty_log(int level, const char *msg, void *usrptr) {}
+static void empty_log(int level, const char *msg, void *usrptr) {}
 
 int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
 	int fd, r;

From bac75a6fe7c9e12f1b61ed2311ae38a90ec36e38 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 20 Mar 2026 14:52:56 +0100
Subject: [PATCH 085/244] fuzz: Fix Makefile to build fuzzers only with
 fuzz-targets

Fuzz dependeces are complicated, the only target that builds
fuzzers shoudl be fuzz-targets, not "make all".

Scripts should be written with this expectationa already,
so fix only Autoconf Makefiles.
---
 Makefile.am            |  3 ++-
 tests/fuzz/Makefile.am | 12 ++++++------
 2 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/Makefile.am b/Makefile.am
index 688cb772c..f457499e5 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -86,5 +86,6 @@ check-programs: libcryptsetup.la
 
 if ENABLE_FUZZ_TARGETS
 fuzz-targets: libcryptsetup.la libcrypto_backend.la
-	$(MAKE) -C tests/fuzz $@
+	$(MAKE) -C tests/fuzz fuzz-targets $@
+.PHONY: fuzz-targets
 endif
diff --git a/tests/fuzz/Makefile.am b/tests/fuzz/Makefile.am
index 114d03943..88ce1ddd1 100644
--- a/tests/fuzz/Makefile.am
+++ b/tests/fuzz/Makefile.am
@@ -3,6 +3,10 @@ EXTRA_DIST = README.md oss-fuzz-build.sh
 distclean-local:
 	-rm -rf out build
 
+if ENABLE_FUZZ_TARGETS
+EXTRA_PROGRAMS  = crypt2_load_fuzz crypt2_load_ondisk_fuzz
+CLEANFILES = $(EXTRA_PROGRAMS)
+
 LIB_FUZZING_ENGINE := $(if $(LIB_FUZZING_ENGINE),$(LIB_FUZZING_ENGINE),"-fsanitize=fuzzer")
 SANITIZER := $(if $(SANITIZER),,"-fsanitize=address")
 
@@ -25,11 +29,7 @@ test-environment-m:
 	fi
 test-environment: | test-environment-m $(DEPS_PATH)
 
-if ENABLE_FUZZ_TARGETS
-noinst_PROGRAMS = \
-	crypt2_load_fuzz \
-	crypt2_load_ondisk_fuzz
+fuzz-targets: test-environment $(EXTRA_PROGRAMS)
 
-fuzz-targets: test-environment $(noinst_PROGRAMS)
-.PHONY: fuzz-targets
+.PHONY: test-environment test-environment-m fuzz-targets
 endif

From ae7ca35c2d8fc03d236135f4ac3f0604514f2040 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 8 May 2026 21:55:40 +0200
Subject: [PATCH 086/244] tcrypt: Use safe alloc for password pool and derived
 key

As key derivation run for a long time, these buffers should
be locked in memory.

Also remove aligned malloc, decryption should work
with non-aligned memory.

Fixes: #991
---
 lib/tcrypt/tcrypt.c | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/lib/tcrypt/tcrypt.c b/lib/tcrypt/tcrypt.c
index fdfa37e86..c29ca2ede 100644
--- a/lib/tcrypt/tcrypt.c
+++ b/lib/tcrypt/tcrypt.c
@@ -519,14 +519,18 @@ static int TCRYPT_init_hdr(struct crypt_device *cd,
 			   struct tcrypt_phdr *hdr,
 			   struct crypt_params_tcrypt *params)
 {
-	unsigned char pwd[VCRYPT_KEY_POOL_LEN] = {};
+	unsigned char *pwd = NULL;
 	size_t passphrase_size, max_passphrase_size;
-	char *key;
+	char *key = NULL;
 	unsigned int i, skipped = 0, iterations;
 	int r = -EPERM, keyfiles_pool_length;
 
-	if (posix_memalign((void*)&key, crypt_getpagesize(), TCRYPT_HDR_KEY_LEN))
-		return -ENOMEM;
+	pwd = crypt_safe_alloc(VCRYPT_KEY_POOL_LEN);
+	key = crypt_safe_alloc(TCRYPT_HDR_KEY_LEN);
+	if (!pwd || !key) {
+		r = -ENOMEM;
+		goto out;
+	}
 
 	if (params->flags & CRYPT_TCRYPT_VERA_MODES &&
 	    params->passphrase_size > TCRYPT_KEY_POOL_LEN) {
@@ -626,10 +630,8 @@ static int TCRYPT_init_hdr(struct crypt_device *cd,
 			params->cipher, params->mode, params->key_size);
 	}
 out:
-	crypt_safe_memzero(pwd, VCRYPT_KEY_POOL_LEN);
-	if (key)
-		crypt_safe_memzero(key, TCRYPT_HDR_KEY_LEN);
-	free(key);
+	crypt_safe_free(pwd);
+	crypt_safe_free(key);
 	return r;
 }
 

From 1d673f733fe363c1fcc9875c4c5d9494591190e3 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 5 May 2026 11:15:34 +0200
Subject: [PATCH 087/244] Do not memlock test_key in LUKS2_check_cipher.

It's the test key only used to verify if the cipher
can be properly initialized with provided key size
parameter.

Also do not force erase of test buffer, it contains
encrypted zeroes.
---
 lib/luks2/luks2_luks1_convert.c | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/lib/luks2/luks2_luks1_convert.c b/lib/luks2/luks2_luks1_convert.c
index 9a32f114d..73ff8c3ac 100644
--- a/lib/luks2/luks2_luks1_convert.c
+++ b/lib/luks2/luks2_luks1_convert.c
@@ -23,7 +23,7 @@ int LUKS2_check_cipher(struct crypt_device *cd,
 
 	log_dbg(cd, "Checking if cipher %s-%s is usable (storage wrapper).", cipher, cipher_mode);
 
-	empty_key = crypt_safe_alloc(keylength);
+	empty_key = malloc(keylength);
 	if (!empty_key)
 		return -ENOMEM;
 
@@ -40,8 +40,7 @@ int LUKS2_check_cipher(struct crypt_device *cd,
 	r = crypt_storage_decrypt(s, 0, sizeof(buf), buf);
 	crypt_storage_destroy(s);
 out:
-	crypt_safe_free(empty_key);
-	crypt_safe_memzero(buf, sizeof(buf));
+	free(empty_key);
 	return r;
 }
 

From d3491ae1a8d8ed375cae8fbad6f967f503097062 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 13 May 2026 12:52:15 +0200
Subject: [PATCH 088/244] Allow cached volume key in activation with
 CRYPT_KC_TYPE_KEY only.

Allow use of cached volume key (key cached immediately after
crypt_format()) for device activation only with raw key keyslot context
type.
---
 lib/setup.c        | 2 +-
 tests/api-test-2.c | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/lib/setup.c b/lib/setup.c
index f7d21c2d4..49ee72ee8 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -5548,7 +5548,7 @@ int crypt_activate_by_keyslot_context(struct crypt_device *cd,
 		if (kc->get_integrity_volume_key)
 			r = kc->get_integrity_volume_key(cd, kc, &vk);
 	}
-	if (r < 0 && (r != -ENOENT || kc->type == CRYPT_KC_TYPE_TOKEN))
+	if (r < 0 && (r != -ENOENT || kc->type != CRYPT_KC_TYPE_KEY))
 		goto out;
 	unlocked_keyslot = r;
 
diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index 3cf28e187..ed5375903 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -3303,6 +3303,8 @@ static void Luks2KeyslotAdd(void)
 	EQ_(crypt_keyslot_add_by_key(cd, 0, key, key_size, PASSPHRASE, strlen(PASSPHRASE), 0), 0);
 	 /* keyslot 1, unbound key, digest 1 */
 	EQ_(crypt_keyslot_add_by_key(cd, 1, key2, key_size, PASSPHRASE1, strlen(PASSPHRASE1), CRYPT_VOLUME_KEY_NO_SEGMENT), 1);
+	// the cached volume key must not suppress the wrong (unbound) keyslot being used
+	FAIL_(crypt_activate_by_passphrase(cd, CDEVICE_1, 1, PASSPHRASE1, strlen(PASSPHRASE1), 0), "Keyslot unusable for activation.");
 	 /* keyslot 2, unbound key, digest 1 */
 	EQ_(crypt_keyslot_add_by_key(cd, 2, key2, key_size, PASSPHRASE1, strlen(PASSPHRASE1), CRYPT_VOLUME_KEY_NO_SEGMENT | CRYPT_VOLUME_KEY_DIGEST_REUSE), 2);
 	 /* keyslot 3, unbound key, digest 2 */

From d826e084c1b2df5fe515fd3a1f52e34a651c7cd3 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 09:42:55 +0200
Subject: [PATCH 089/244] Add some asserts() for device locking

Adding assert() silences cppcheck warnings but also prevents
code misuse in the future.
---
 lib/utils_device_locking.c | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/lib/utils_device_locking.c b/lib/utils_device_locking.c
index 885922393..f6995859e 100644
--- a/lib/utils_device_locking.c
+++ b/lib/utils_device_locking.c
@@ -135,6 +135,9 @@ static int acquire_lock_handle(struct crypt_device *cd, struct device *device, s
 	int dev_fd, fd;
 	struct stat st;
 
+	assert(device);
+	assert(h);
+
 	dev_fd = open(device_path(device), O_RDONLY | O_NONBLOCK | O_CLOEXEC);
 	if (dev_fd < 0)
 		return -EINVAL;
@@ -182,6 +185,9 @@ static int acquire_lock_handle_by_name(struct crypt_device *cd, const char *name
 	char res[PATH_MAX];
 	int fd;
 
+	assert(name);
+	assert(h);
+
 	h->u.name.name = strdup(name);
 	if (!h->u.name.name)
 		return -ENOMEM;
@@ -208,6 +214,8 @@ static void release_lock_handle(struct crypt_device *cd, struct crypt_lock_handl
 	char res[PATH_MAX];
 	struct stat buf_a, buf_b;
 
+	assert(h);
+
 	if ((h->mode == DEV_LOCK_NAME) && /* was it name lock */
 	    !flock(h->flock_fd, LOCK_EX | LOCK_NB) && /* lock to drop the file */
 	    !resource_by_name(res, sizeof(res), h->u.name.name, true) && /* acquire lock resource name */
@@ -252,6 +260,8 @@ static int verify_lock_handle(struct crypt_lock_handle *h)
 	char res[PATH_MAX];
 	struct stat lck_st, res_st;
 
+	assert(h);
+
 	/* we locked a regular file, check during device_open() instead. No reason to check now */
 	if (h->mode == DEV_LOCK_FILE)
 		return 0;

From 8e15aafdbffa162f523647a69805d3b4fd437cca Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 10:01:57 +0200
Subject: [PATCH 090/244] Fix reencryption name helper check

The test for hotzone device layer was wrong, use explicit
names during the check.
---
 lib/luks2/luks2_json_metadata.c | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/lib/luks2/luks2_json_metadata.c b/lib/luks2/luks2_json_metadata.c
index 9e35a8d46..f078bea88 100644
--- a/lib/luks2/luks2_json_metadata.c
+++ b/lib/luks2/luks2_json_metadata.c
@@ -2827,9 +2827,16 @@ static bool is_reencryption_helper(const char *name)
 		return false;
 
 	len = strlen(name);
-	return (len >= 9 && (!strncmp(name + len - 8, "-hotzone-", 9) ||
-			     !strcmp(name + len - 8, "-overlay")));
+	if (len > 8 && !strcmp(name + len - 8, "-overlay"))
+		return true;
+
+	if (len > 16 && !strcmp(name + len - 16, "-hotzone-forward"))
+		return true;
 
+	if (len > 17 && !strcmp(name + len - 17, "-hotzone-backward"))
+		return true;
+
+	return false;
 }
 
 static bool contains_reencryption_helper(char **names)

From 2c1ca668f1ea4d237245151f0478cdc832112609 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 11:40:29 +0200
Subject: [PATCH 091/244] Check for strdup() failure in
 crypt_init_by_name_and_header

---
 lib/setup.c | 37 +++++++++++++++++++++++++------------
 1 file changed, 25 insertions(+), 12 deletions(-)

diff --git a/lib/setup.c b/lib/setup.c
index 49ee72ee8..7a3e43a77 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -1506,6 +1506,7 @@ int crypt_init_by_name_and_header(struct crypt_device **cd,
 	crypt_status_info ci;
 	struct crypt_dm_active_device dmd;
 	struct dm_target *tgt = &dmd.segment;
+	const char *type = NULL;
 	int r;
 
 	if (!cd || !name)
@@ -1548,28 +1549,36 @@ int crypt_init_by_name_and_header(struct crypt_device **cd,
 
 	if (dmd.uuid) {
 		if (!strncmp(CRYPT_PLAIN, dmd.uuid, sizeof(CRYPT_PLAIN)-1))
-			(*cd)->type = strdup(CRYPT_PLAIN);
+			type = CRYPT_PLAIN;
 		else if (!strncmp(CRYPT_LOOPAES, dmd.uuid, sizeof(CRYPT_LOOPAES)-1))
-			(*cd)->type = strdup(CRYPT_LOOPAES);
+			type = CRYPT_LOOPAES;
 		else if (!strncmp(CRYPT_LUKS1, dmd.uuid, sizeof(CRYPT_LUKS1)-1))
-			(*cd)->type = strdup(CRYPT_LUKS1);
+			type = CRYPT_LUKS1;
 		else if (!strncmp(CRYPT_LUKS2, dmd.uuid, sizeof(CRYPT_LUKS2)-1))
-			(*cd)->type = strdup(CRYPT_LUKS2);
+			type = CRYPT_LUKS2;
 		else if (!strncmp(CRYPT_VERITY, dmd.uuid, sizeof(CRYPT_VERITY)-1))
-			(*cd)->type = strdup(CRYPT_VERITY);
+			type = CRYPT_VERITY;
 		else if (!strncmp(CRYPT_TCRYPT, dmd.uuid, sizeof(CRYPT_TCRYPT)-1))
-			(*cd)->type = strdup(CRYPT_TCRYPT);
+			type = CRYPT_TCRYPT;
 		else if (!strncmp(CRYPT_INTEGRITY, dmd.uuid, sizeof(CRYPT_INTEGRITY)-1))
-			(*cd)->type = strdup(CRYPT_INTEGRITY);
+			type = CRYPT_INTEGRITY;
 		else if (!strncmp(CRYPT_BITLK, dmd.uuid, sizeof(CRYPT_BITLK)-1))
-			(*cd)->type = strdup(CRYPT_BITLK);
+			type = CRYPT_BITLK;
 		else if (!strncmp(CRYPT_FVAULT2, dmd.uuid, sizeof(CRYPT_FVAULT2)-1))
-			(*cd)->type = strdup(CRYPT_FVAULT2);
+			type = CRYPT_FVAULT2;
 		else
 			log_dbg(NULL, "Unknown UUID set, some parameters are not set.");
 	} else
 		log_dbg(NULL, "Active device has no UUID set, some parameters are not set.");
 
+	if (type) {
+		(*cd)->type = strdup(type);
+		if (!(*cd)->type) {
+			r = -ENOMEM;
+			goto out;
+		}
+	}
+
 	if (header_device) {
 		r = crypt_set_data_device(*cd, device_path(tgt->data_device));
 		if (r < 0)
@@ -1585,12 +1594,16 @@ int crypt_init_by_name_and_header(struct crypt_device **cd,
 	else if (tgt->type == DM_INTEGRITY)
 		r = _init_by_name_integrity(*cd, name);
 out:
+	if (r == 0 && !(*cd)->type) {
+		/* For anonymous device (no header found) remember initialized name */
+		(*cd)->u.none.active_name = strdup(name);
+		if (!(*cd)->u.none.active_name)
+			r = -ENOMEM;
+	}
+
 	if (r < 0) {
 		crypt_free(*cd);
 		*cd = NULL;
-	} else if (!(*cd)->type) {
-		/* For anonymous device (no header found) remember initialized name */
-		(*cd)->u.none.active_name = strdup(name);
 	}
 
 	free(CONST_CAST(void*)dmd.uuid);

From 85e27559636e77667b6b8258cc7c7351230a3e6f Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 14:20:51 +0200
Subject: [PATCH 092/244] Check strdup() failure in libcryptsetup

---
 lib/bitlk/bitlk.c       |  8 ++++++--
 lib/libdevmapper.c      |  7 ++++++-
 lib/luks2/luks2_token.c |  6 ++++++
 lib/setup.c             | 31 +++++++++++++++++++++++++++----
 4 files changed, 45 insertions(+), 7 deletions(-)

diff --git a/lib/bitlk/bitlk.c b/lib/bitlk/bitlk.c
index 34ae0b554..eaba010a3 100644
--- a/lib/bitlk/bitlk.c
+++ b/lib/bitlk/bitlk.c
@@ -774,10 +774,14 @@ int BITLK_read_sb(struct crypt_device *cd, struct bitlk_metadata *params)
 			memset(vmk, 0, sizeof(struct bitlk_vmk));
 
 			guid_to_string(&entry_vmk.guid, guid_buf);
-			vmk->guid = strdup (guid_buf);
+			vmk->guid = strdup(guid_buf);
+			if (!vmk->guid) {
+				BITLK_bitlk_vmk_free(vmk);
+				r = -ENOMEM;
+				goto out;
+			}
 
 			vmk->name = NULL;
-
 			vmk->protection = get_vmk_protection(le16_to_cpu(entry_vmk.protection));
 
 			/* more data in another entry list */
diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index c2ac9f36a..0533b0296 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -2919,8 +2919,13 @@ static int _dm_query_device(struct crypt_device *cd, const char *name,
 	if (!tmp_uuid)
 		dmd->flags |= CRYPT_ACTIVATE_NO_UUID;
 	else if (get_flags & DM_ACTIVE_UUID) {
-		if (!strncmp(tmp_uuid, DM_UUID_PREFIX, DM_UUID_PREFIX_LEN))
+		if (!strncmp(tmp_uuid, DM_UUID_PREFIX, DM_UUID_PREFIX_LEN)) {
 			dmd->uuid = strdup(tmp_uuid + DM_UUID_PREFIX_LEN);
+			if (!dmd->uuid) {
+				r = -ENOMEM;
+				goto out;
+			}
+		}
 	}
 
 	dmd->holders = 0;
diff --git a/lib/luks2/luks2_token.c b/lib/luks2/luks2_token.c
index 89e768230..e4952ac4c 100644
--- a/lib/luks2/luks2_token.c
+++ b/lib/luks2/luks2_token.c
@@ -184,6 +184,12 @@ crypt_token_load_external(struct crypt_device *cd, const char *name, struct cryp
 	dlerror();
 
 	token->name = strdup(name);
+	if (!token->name) {
+		dlclose(h);
+		memset(token, 0, sizeof(*token));
+		return -ENOMEM;
+	}
+
 	token->open = token_dlvsym(cd, h, CRYPT_TOKEN_ABI_OPEN, CRYPT_TOKEN_ABI_VERSION1);
 	token->buffer_free = token_dlvsym(cd, h, CRYPT_TOKEN_ABI_BUFFER_FREE, CRYPT_TOKEN_ABI_VERSION1);
 	token->validate = token_dlvsym(cd, h, CRYPT_TOKEN_ABI_VALIDATE, CRYPT_TOKEN_ABI_VERSION1);
diff --git a/lib/setup.c b/lib/setup.c
index 7a3e43a77..66eb707c4 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -1338,6 +1338,10 @@ static int _init_by_name_crypt(struct crypt_device *cd, const char *name)
 		cd->u.plain.hdr.sector_size = tgt->u.crypt.sector_size;
 		cd->u.plain.key_size = crypt_volume_key_length(tgt->u.crypt.vk);
 		cd->u.plain.cipher = strdup(cipher);
+		if (!cd->u.plain.cipher) {
+			r = -ENOMEM;
+			goto out;
+		}
 		MOVE_REF(cd->u.plain.cipher_spec, cipher_spec);
 		cd->u.plain.cipher_mode = cd->u.plain.cipher_spec + strlen(cipher) + 1;
 		if (dmd.flags & CRYPT_ACTIVATE_KEYRING_KEY)
@@ -1345,6 +1349,10 @@ static int _init_by_name_crypt(struct crypt_device *cd, const char *name)
 	} else if (isLOOPAES(cd->type) && single_segment(&dmd) && tgt->type == DM_CRYPT) {
 		cd->u.loopaes.hdr.offset = tgt->u.crypt.offset;
 		cd->u.loopaes.cipher = strdup(cipher);
+		if (!cd->u.loopaes.cipher) {
+			r = -ENOMEM;
+			goto out;
+		}
 		MOVE_REF(cd->u.loopaes.cipher_spec, cipher_spec);
 		cd->u.loopaes.cipher_mode = cd->u.loopaes.cipher_spec + strlen(cipher) + 1;
 		/* version 3 uses last key for IV */
@@ -1682,18 +1690,25 @@ static int _crypt_format_plain(struct crypt_device *cd,
 		return -ENOMEM;
 	}
 	cd->u.plain.cipher = strdup(cipher);
+	if (!cd->u.plain.cipher)
+		return -ENOMEM;
+
 	cd->u.plain.cipher_mode = cd->u.plain.cipher_spec + strlen(cipher) + 1;
 
-	if (params && params->hash)
+	if (params && params->hash) {
 		cd->u.plain.hdr.hash = strdup(params->hash);
+		if (!cd->u.plain.hdr.hash) {
+			free(cd->u.plain.cipher);
+			cd->u.plain.cipher = NULL;
+			return -ENOMEM;
+		}
+	}
 
 	cd->u.plain.hdr.offset = params ? params->offset : 0;
 	cd->u.plain.hdr.skip = params ? params->skip : 0;
 	cd->u.plain.hdr.size = params ? params->size : 0;
 	cd->u.plain.hdr.sector_size = sector_size;
 
-	if (!cd->u.plain.cipher)
-		return -ENOMEM;
 
 	return 0;
 }
@@ -2709,9 +2724,17 @@ static int _crypt_format_loopaes(struct crypt_device *cd,
 	cd->u.loopaes.key_size = volume_key_size;
 
 	cd->u.loopaes.cipher = strdup(cipher ?: DEFAULT_LOOPAES_CIPHER);
+	if (!cd->u.loopaes.cipher)
+		return -ENOMEM;
 
-	if (params && params->hash)
+	if (params && params->hash) {
 		cd->u.loopaes.hdr.hash = strdup(params->hash);
+		if (!cd->u.loopaes.hdr.hash) {
+			free(cd->u.loopaes.cipher);
+			cd->u.loopaes.cipher = NULL;
+			return -ENOMEM;
+		}
+	}
 
 	cd->u.loopaes.hdr.offset = params ? params->offset : 0;
 	cd->u.loopaes.hdr.skip = params ? params->skip : 0;

From f47a4774bb98c272c0f9f3093e8d74cd11494876 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 14:21:31 +0200
Subject: [PATCH 093/244] Check strdup() failure in tool reencrypt helper

---
 src/utils_reencrypt_luks1.c | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/src/utils_reencrypt_luks1.c b/src/utils_reencrypt_luks1.c
index 157f2b885..6d960a488 100644
--- a/src/utils_reencrypt_luks1.c
+++ b/src/utils_reencrypt_luks1.c
@@ -932,16 +932,17 @@ static int initialize_uuid(struct reenc_ctx *rc)
 
 	if (ARG_SET(OPT_ENCRYPT_ID)) {
 		rc->device_uuid = strdup(NO_UUID);
-		return 0;
+		return rc->device_uuid ? 0 : -ENOMEM;
 	}
 
 	if (ARG_SET(OPT_DECRYPT_ID) && ARG_SET(OPT_UUID_ID)) {
 		r = uuid_parse(ARG_STR(OPT_UUID_ID), device_uuid);
-		if (!r)
+		if (!r) {
 			rc->device_uuid = strdup(ARG_STR(OPT_UUID_ID));
-		else
-			log_err(_("Provided UUID is invalid."));
+			return rc->device_uuid ? 0 : -ENOMEM;
+		}
 
+		log_err(_("Provided UUID is invalid."));
 		return r;
 	}
 
@@ -950,9 +951,11 @@ static int initialize_uuid(struct reenc_ctx *rc)
 		return r;
 	crypt_set_log_callback(cd, _quiet_log, NULL);
 	r = crypt_load(cd, CRYPT_LUKS1, NULL);
-	if (!r)
+	if (!r) {
 		rc->device_uuid = strdup(crypt_get_uuid(cd));
-	else
+		if (!rc->device_uuid)
+			r =-ENOMEM;
+	} else
 		/* Reencryption already in progress - magic header? */
 		r = device_check(rc, hdr_device(rc), CHECK_UNUSABLE, true);
 

From 1f2b247f8e1459c8d776098fbf66e15a0ee48563 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 14:43:49 +0200
Subject: [PATCH 094/244] Explicitly check for length overflow in OpenSSL
 backend

Cryptsetup should never issue large encryption, but
the backend should check potential overflow in
size_t -> int conversion.
---
 lib/crypto_backend/crypto_openssl.c | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index 229698997..acf342806 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -794,17 +794,20 @@ void crypt_cipher_destroy(struct crypt_cipher *ctx)
 }
 
 static int _cipher_encrypt(struct crypt_cipher *ctx, const unsigned char *in, unsigned char *out,
-			   int length, const unsigned char *iv, size_t iv_length)
+			   size_t length, const unsigned char *iv, size_t iv_length)
 {
 	int len;
 
+	if (length > INT_MAX)
+		return -EINVAL;
+
 	if (ctx->u.lib.iv_length != iv_length)
 		return -EINVAL;
 
 	if (EVP_EncryptInit_ex(ctx->u.lib.hd_enc, NULL, NULL, NULL, iv) != 1)
 		return -EINVAL;
 
-	if (EVP_EncryptUpdate(ctx->u.lib.hd_enc, out, &len, in, length) != 1)
+	if (EVP_EncryptUpdate(ctx->u.lib.hd_enc, out, &len, in, (int)length) != 1)
 		return -EINVAL;
 
 	if (EVP_EncryptFinal(ctx->u.lib.hd_enc, out + len, &len) != 1)
@@ -814,17 +817,20 @@ static int _cipher_encrypt(struct crypt_cipher *ctx, const unsigned char *in, un
 }
 
 static int _cipher_decrypt(struct crypt_cipher *ctx, const unsigned char *in, unsigned char *out,
-			   int length, const unsigned char *iv, size_t iv_length)
+			   size_t length, const unsigned char *iv, size_t iv_length)
 {
 	int len;
 
+	if (length > INT_MAX)
+		return -EINVAL;
+
 	if (ctx->u.lib.iv_length != iv_length)
 		return -EINVAL;
 
 	if (EVP_DecryptInit_ex(ctx->u.lib.hd_dec, NULL, NULL, NULL, iv) != 1)
 		return -EINVAL;
 
-	if (EVP_DecryptUpdate(ctx->u.lib.hd_dec, out, &len, in, length) != 1)
+	if (EVP_DecryptUpdate(ctx->u.lib.hd_dec, out, &len, in, (int)length) != 1)
 		return -EINVAL;
 
 	if (EVP_DecryptFinal(ctx->u.lib.hd_dec, out + len, &len) != 1)

From af5b88175c93022976e5062beaca347e4305efb9 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 14:53:06 +0200
Subject: [PATCH 095/244] Use common error path in dm-verity query.

While data_device should not be allocated in this path,
the code is more readable this way.
---
 lib/libdevmapper.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index 0533b0296..6febe9755 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -2277,6 +2277,8 @@ static int _dm_target_query_verity(struct crypt_device *cd,
 		return -EINVAL;
 	if (get_flags & DM_ACTIVE_DEVICE) {
 		str2 = crypt_lookup_dev(str);
+		if (!str2)
+			return -EINVAL;
 		r = device_alloc(cd, &data_device, str2);
 		free(str2);
 		if (r < 0 && r != -ENOTBLK)

From 4dd8b3c9a0ded5ebf391163671cc44a5ace79d66 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 16:48:22 +0200
Subject: [PATCH 096/244] Avoid possible leak of json keyslot object on error
 path

---
 lib/luks2/luks2_keyslot.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/luks2/luks2_keyslot.c b/lib/luks2/luks2_keyslot.c
index 907257096..318555794 100644
--- a/lib/luks2/luks2_keyslot.c
+++ b/lib/luks2/luks2_keyslot.c
@@ -968,6 +968,7 @@ int LUKS2_keyslot_swap(struct crypt_device *cd, struct luks2_hdr *hdr,
 	json_object_object_del_by_uint(jobj_keyslots, keyslot);
 	r = json_object_object_add_by_uint(jobj_keyslots, keyslot, jobj_keyslot2);
 	if (r < 0) {
+		json_object_put(jobj_keyslot);
 		json_object_put(jobj_keyslot2);
 		log_dbg(cd, "Failed to swap keyslot %d.", keyslot);
 		return r;

From fe63d5ee8d316447438b3fb811134e18078c335f Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 17:01:55 +0200
Subject: [PATCH 097/244] Check return values for old OpenSSL < 3 HMAC API.

---
 lib/crypto_backend/crypto_openssl.c | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index acf342806..50a6a159e 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -478,7 +478,12 @@ int crypt_hmac_init(struct crypt_hmac **ctx, const char *name,
 		return -EINVAL;
 	}
 
-	HMAC_Init_ex(h->md, key, key_length, h->hash_id, NULL);
+	if (HMAC_Init_ex(h->md, key, key_length, h->hash_id, NULL) != 1) {
+		hash_id_free(h->hash_id);
+		HMAC_CTX_free(h->md);
+		free(h);
+		return -EINVAL;
+	}
 
 	h->hash_len = EVP_MD_size(h->hash_id);
 #endif
@@ -494,7 +499,8 @@ static int crypt_hmac_restart(struct crypt_hmac *ctx)
 	if (!ctx->md)
 		return -EINVAL;
 #else
-	HMAC_Init_ex(ctx->md, NULL, 0, ctx->hash_id, NULL);
+	if (HMAC_Init_ex(ctx->md, NULL, 0, ctx->hash_id, NULL) != 1)
+		return -EINVAL;
 #endif
 	return 0;
 }
@@ -504,8 +510,7 @@ int crypt_hmac_write(struct crypt_hmac *ctx, const char *buffer, size_t length)
 #if OPENSSL3_API
 	return EVP_MAC_update(ctx->md, (const unsigned char *)buffer, length) == 1 ? 0 : -EINVAL;
 #else
-	HMAC_Update(ctx->md, (const unsigned char *)buffer, length);
-	return 0;
+	return HMAC_Update(ctx->md, (const unsigned char *)buffer, length) == 1 ? 0 : -EINVAL;
 #endif
 }
 
@@ -526,7 +531,8 @@ int crypt_hmac_final(struct crypt_hmac *ctx, char *buffer, size_t length)
 	if (length > (size_t)ctx->hash_len)
 		return -EINVAL;
 
-	HMAC_Final(ctx->md, tmp, &tmp_len);
+	if (HMAC_Final(ctx->md, tmp, &tmp_len) != 1)
+		return -EINVAL;
 #endif
 	crypt_backend_memcpy(buffer, tmp, length);
 	crypt_backend_memzero(tmp, sizeof(tmp));

From d4d542f04a99995aefcdce9c922c8b75ebfee0fd Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 17:06:37 +0200
Subject: [PATCH 098/244] Add check before cast from size_t to int in OpenSSL <
 3 PBKDF2.

---
 lib/crypto_backend/crypto_openssl.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index 50a6a159e..78220e690 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -614,6 +614,9 @@ static int openssl_pbkdf2(const char *password, size_t password_length,
 	if (iterations > INT_MAX)
 		return -EINVAL;
 
+	if (password_length > INT_MAX || salt_length > INT_MAX || key_length > INT_MAX)
+		return -EINVAL;
+
 	r = PKCS5_PBKDF2_HMAC(password, (int)password_length, (const unsigned char *)salt,
 		(int)salt_length, iterations, hash_id, (int)key_length, (unsigned char*) key);
 #endif

From 55e962acb1eada8b740a7e7e6f6568b4db68e661 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 17:49:57 +0200
Subject: [PATCH 099/244] Remove VLA from AF_ALG cipher.

Also remove note about page alignment that is not correct
for this use of AF_ALG.
---
 lib/crypto_backend/crypto_cipher_kernel.c | 31 +++++++++++++++--------
 1 file changed, 20 insertions(+), 11 deletions(-)

diff --git a/lib/crypto_backend/crypto_cipher_kernel.c b/lib/crypto_backend/crypto_cipher_kernel.c
index fd4635a74..e572edd16 100644
--- a/lib/crypto_backend/crypto_cipher_kernel.c
+++ b/lib/crypto_backend/crypto_cipher_kernel.c
@@ -113,7 +113,6 @@ static inline struct cmsghdr *_CMSG_NXTHDR(struct msghdr* mhdr, struct cmsghdr*
 #endif
 }
 
-/* The in/out should be aligned to page boundary */
 /* coverity[ -taint_source : arg-3 ] */
 static int _crypt_cipher_crypt(struct crypt_cipher_kernel *ctx,
 			       const char *in, size_t in_length,
@@ -131,10 +130,9 @@ static int _crypt_cipher_crypt(struct crypt_cipher_kernel *ctx,
 		.iov_len = in_length,
 	};
 	int iv_msg_size = iv ? CMSG_SPACE(sizeof(*alg_iv) + iv_length) : 0;
-	char buffer[CMSG_SPACE(sizeof(*type)) + iv_msg_size];
+	int buffer_size = CMSG_SPACE(sizeof(*type)) + iv_msg_size;
+	char *buffer = NULL;
 	struct msghdr msg = {
-		.msg_control = buffer,
-		.msg_controllen = sizeof(buffer),
 		.msg_iov = &iov,
 		.msg_iovlen = 1,
 	};
@@ -145,12 +143,20 @@ static int _crypt_cipher_crypt(struct crypt_cipher_kernel *ctx,
 	if ((!iv && iv_length) || (iv && !iv_length))
 		return -EINVAL;
 
-	memset(buffer, 0, sizeof(buffer));
+	buffer = malloc(buffer_size);
+	if (!buffer)
+		return -ENOMEM;
+	crypt_backend_memzero(buffer, buffer_size);
+
+	msg.msg_control = buffer;
+	msg.msg_controllen = buffer_size;
 
 	/* Set encrypt/decrypt operation */
 	header = CMSG_FIRSTHDR(&msg);
-	if (!header)
-		return -EINVAL;
+	if (!header) {
+		r = -EINVAL;
+		goto out;
+	}
 
 	header->cmsg_level = SOL_ALG;
 	header->cmsg_type = ALG_SET_OP;
@@ -161,8 +167,10 @@ static int _crypt_cipher_crypt(struct crypt_cipher_kernel *ctx,
 	/* Set IV */
 	if (iv) {
 		header = _CMSG_NXTHDR(&msg, header);
-		if (!header)
-			return -EINVAL;
+		if (!header) {
+			r = -EINVAL;
+			goto out;
+		}
 
 		header->cmsg_level = SOL_ALG;
 		header->cmsg_type = ALG_SET_IV;
@@ -180,8 +188,9 @@ static int _crypt_cipher_crypt(struct crypt_cipher_kernel *ctx,
 		if (len != (ssize_t)out_length)
 			r = -EIO;
 	}
-
-	crypt_backend_memzero(buffer, sizeof(buffer));
+out:
+	crypt_backend_memzero(buffer, buffer_size);
+	free(buffer);
 	return r;
 }
 

From 65239e38b829affdcc1c3634aa562fb664759c5c Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 18:05:37 +0200
Subject: [PATCH 100/244] Add check for plain mode sector size and offset
 calculation.

Check for multiplication overflow and device offset underflow.
---
 lib/setup.c | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/lib/setup.c b/lib/setup.c
index 66eb707c4..303a58c43 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -1668,8 +1668,13 @@ static int _crypt_format_plain(struct crypt_device *cd,
 	}
 
 	if (sector_size > SECTOR_SIZE && !device_size(cd->device, &dev_size)) {
-		if (params && params->offset)
+		if (params && params->offset) {
+			if (params->offset > (UINT64_MAX / SECTOR_SIZE))
+				return -EINVAL;
+			if (dev_size < (params->offset * SECTOR_SIZE))
+				return -EINVAL;
 			dev_size -= (params->offset * SECTOR_SIZE);
+		}
 		if (dev_size % sector_size) {
 			log_err(cd, _("Device size is not aligned to requested sector size."));
 			return -EINVAL;

From f27ceb86ac0630b6dd65b8a0a909cc6817a32ca8 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 18:11:05 +0200
Subject: [PATCH 101/244] Do not copy partial buffer if buffer size is too
 small in OpenSSL backend

Move the length check before the final buffer copy and do not
send partial buffer to the caller.
---
 lib/crypto_backend/crypto_openssl.c | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index 78220e690..92dc4e501 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -393,12 +393,14 @@ int crypt_hash_final(struct crypt_hash *ctx, char *buffer, size_t length)
 	if (EVP_DigestFinal_ex(ctx->md, tmp, &tmp_len) != 1)
 		return -EINVAL;
 
+	if (tmp_len < length) {
+		crypt_backend_memzero(tmp, sizeof(tmp));
+		return -EINVAL;
+	}
+
 	crypt_backend_memcpy(buffer, tmp, length);
 	crypt_backend_memzero(tmp, sizeof(tmp));
 
-	if (tmp_len < length)
-		return -EINVAL;
-
 	if (crypt_hash_restart(ctx))
 		return -EINVAL;
 
@@ -534,12 +536,14 @@ int crypt_hmac_final(struct crypt_hmac *ctx, char *buffer, size_t length)
 	if (HMAC_Final(ctx->md, tmp, &tmp_len) != 1)
 		return -EINVAL;
 #endif
+	if (tmp_len < length) {
+		crypt_backend_memzero(tmp, sizeof(tmp));
+		return -EINVAL;
+	}
+
 	crypt_backend_memcpy(buffer, tmp, length);
 	crypt_backend_memzero(tmp, sizeof(tmp));
 
-	if (tmp_len < length)
-		return -EINVAL;
-
 	if (crypt_hmac_restart(ctx))
 		return -EINVAL;
 

From dbb6f8cca377ea36b104f98aa645a4c4cafe18ce Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 18:42:38 +0200
Subject: [PATCH 102/244] Wipe all function pointers on tokens unload

Just a code hardening.
---
 lib/luks2/luks2_token.c | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/lib/luks2/luks2_token.c b/lib/luks2/luks2_token.c
index e4952ac4c..b924e97aa 100644
--- a/lib/luks2/luks2_token.c
+++ b/lib/luks2/luks2_token.c
@@ -219,18 +219,24 @@ crypt_token_load_external(struct crypt_device *cd, const char *name, struct cryp
 
 void crypt_token_unload_external_all(struct crypt_device *cd)
 {
+	struct crypt_token_handler_v2 *token;
 	int i;
 
 	for (i = LUKS2_TOKENS_MAX - 1; i >= 0; i--) {
 		if (token_handlers[i].version < 2)
 			continue;
 
-		log_dbg(cd, "Unloading %s token handler.", token_handlers[i].u.v2.name);
+		token = &token_handlers[i].u.v2;
+
+		log_dbg(cd, "Unloading %s token handler.", token->name);
 
-		free(CONST_CAST(void *)token_handlers[i].u.v2.name);
+		free(CONST_CAST(void *)token->name);
 
-		if (dlclose(CONST_CAST(void *)token_handlers[i].u.v2.dlhandle))
+		if (dlclose(token->dlhandle))
 			log_dbg(cd, "%s", dlerror());
+
+		memset(token, 0, sizeof(*token));
+		token_handlers[i].version = 0;
 	}
 }
 

From fa6e244657d6bc09295c4628252d4f8d4970c2d2 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 18:47:14 +0200
Subject: [PATCH 103/244] Check for snprintf truncation in libdevmapper

The snprintf can return larger size than requested, fix
the condition.
---
 lib/libdevmapper.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index 6febe9755..53f9bfa0c 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -529,9 +529,9 @@ static int cipher_dm2c(const char *org_c, const char *org_i, unsigned tag_size,
 		c_size = snprintf(c_dm, c_dm_size, "capi:authenc(%s,%s)-%s", org_i, capi, iv);
 	}
 
-	if (c_size < 0 || c_size == c_dm_size)
+	if (c_size < 0 || c_size >= c_dm_size)
 		return -EINVAL;
-	if (i_size < 0 || i_size == i_dm_size)
+	if (i_size < 0 || i_size >= i_dm_size)
 		return -EINVAL;
 
 	return 0;

From 6256d7f7ebd84cfd6a965bafc0ea831acbc1dca0 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 9 May 2026 18:52:19 +0200
Subject: [PATCH 104/244] Use crypt_zalloc instead of malloc+memset in
 crypt_init

---
 lib/setup.c | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/lib/setup.c b/lib/setup.c
index 303a58c43..0160b1e83 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -599,11 +599,9 @@ int crypt_init(struct crypt_device **cd, const char *device)
 	log_dbg(NULL, "Running without O_CLOEXEC.");
 #endif
 
-	if (!(h = malloc(sizeof(struct crypt_device))))
+	if (!(h = crypt_zalloc(sizeof(struct crypt_device))))
 		return -ENOMEM;
 
-	memset(h, 0, sizeof(*h));
-
 	r = device_alloc(NULL, &h->device, device);
 	if (r < 0) {
 		free(h);

From a365173d1c6c2a869b82e168d434c6d085e7831c Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 14 Mar 2026 18:56:11 +0100
Subject: [PATCH 105/244] Add crypt_get_hw_opal_sum_enabled API to check SUM
 status

This function detects if LUKS2 metadata use OPAL2 SUM mode.
If can be used for testing that LUKS2 device actually uses
SUM (as HW can support it but it can be intentionally disabled).
---
 lib/libcryptsetup.h             |  8 ++++++++
 lib/libcryptsetup.sym           |  1 +
 lib/luks2/luks2.h               |  1 +
 lib/luks2/luks2_json_metadata.c | 20 ++++++++++++++++----
 lib/setup.c                     | 17 +++++++++++++++++
 src/cryptsetup.c                |  6 ++++--
 tests/compat-test-opal          | 10 ++++++++--
 7 files changed, 55 insertions(+), 8 deletions(-)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index 987fc45e6..365c9a8e1 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -455,6 +455,14 @@ const char *crypt_get_default_type(void);
  */
 int crypt_get_hw_encryption_type(struct crypt_device *cd);
 
+/**
+ * Get OPAL Single User Mode (SUM) configuration
+ *
+ * @return @e 1 if OPAL in SUM is used, @e 0 if OPAL without SUM is used
+ *         or negative errno value otherwise.
+ */
+int crypt_get_hw_opal_sum_enabled(struct crypt_device *cd);
+
 /**
  * Get HW encryption (like OPAL) key size (in bytes)
  *
diff --git a/lib/libcryptsetup.sym b/lib/libcryptsetup.sym
index e7cfa0891..61432c144 100644
--- a/lib/libcryptsetup.sym
+++ b/lib/libcryptsetup.sym
@@ -199,4 +199,5 @@ CRYPTSETUP_2.8 {
 CRYPTSETUP_2.9 {
 	global:
 		crypt_get_verity_repaired;
+		crypt_get_hw_opal_sum_enabled;
 } CRYPTSETUP_2.8;
diff --git a/lib/luks2/luks2.h b/lib/luks2/luks2.h
index 703185a41..261bd79d7 100644
--- a/lib/luks2/luks2.h
+++ b/lib/luks2/luks2.h
@@ -445,6 +445,7 @@ int LUKS2_config_set_requirements(struct crypt_device *cd, struct luks2_hdr *hdr
 int LUKS2_config_set_requirement_version(struct crypt_device *cd, struct luks2_hdr *hdr, uint32_t req_id, uint8_t req_version, bool commit);
 
 int LUKS2_config_get_reencrypt_version(struct luks2_hdr *hdr, uint8_t *version);
+int LUKS2_config_get_opal_version(struct luks2_hdr *hdr, uint8_t *version);
 
 bool LUKS2_reencrypt_requirement_candidate(struct luks2_hdr *hdr);
 
diff --git a/lib/luks2/luks2_json_metadata.c b/lib/luks2/luks2_json_metadata.c
index f078bea88..79ba37ba8 100644
--- a/lib/luks2/luks2_json_metadata.c
+++ b/lib/luks2/luks2_json_metadata.c
@@ -1704,7 +1704,7 @@ bool LUKS2_reencrypt_requirement_candidate(struct luks2_hdr *hdr)
 	return false;
 }
 
-int LUKS2_config_get_reencrypt_version(struct luks2_hdr *hdr, uint8_t *version)
+static int LUKS2_config_get_requirement_version(struct luks2_hdr *hdr, uint8_t *version, const char *name)
 {
 	json_object *jobj_mandatory, *jobj;
 	int i, len;
@@ -1712,6 +1712,7 @@ int LUKS2_config_get_reencrypt_version(struct luks2_hdr *hdr, uint8_t *version)
 
 	assert(hdr);
 	assert(version);
+	assert(name);
 
 	jobj_mandatory = mandatory_requirements_jobj(hdr);
 	if (!jobj_mandatory)
@@ -1724,8 +1725,8 @@ int LUKS2_config_get_reencrypt_version(struct luks2_hdr *hdr, uint8_t *version)
 	for (i = 0; i < len; i++) {
 		jobj = json_object_array_get_idx(jobj_mandatory, i);
 
-		/* search for requirements prefixed with "online-reencrypt" */
-		if (strncmp(json_object_get_string(jobj), "online-reencrypt", 16))
+		/* search for requirements prefixed with name */
+		if (strncmp(json_object_get_string(jobj), name, strlen(name)))
 			continue;
 
 		/* check current library is aware of the requirement */
@@ -1741,6 +1742,16 @@ int LUKS2_config_get_reencrypt_version(struct luks2_hdr *hdr, uint8_t *version)
 	return -ENOENT;
 }
 
+int LUKS2_config_get_reencrypt_version(struct luks2_hdr *hdr, uint8_t *version)
+{
+	return LUKS2_config_get_requirement_version(hdr, version, "online-reencrypt");
+}
+
+int LUKS2_config_get_opal_version(struct luks2_hdr *hdr, uint8_t *version)
+{
+	return LUKS2_config_get_requirement_version(hdr, version, "opal");
+}
+
 static const struct requirement_flag *stored_requirement_name_by_id(struct luks2_hdr *hdr, uint32_t req_id)
 {
 	json_object *jobj_mandatory, *jobj;
@@ -2149,7 +2160,8 @@ static void hdr_dump_segments(struct crypt_device *cd, json_object *hdr_jobj)
 
 		json_object_object_get_ex(jobj_segment, "type", &jobj1);
 		if (!strncmp(json_object_get_string(jobj1), "hw-opal", 7)) {
-			log_std(cd, "\tHW OPAL encryption:\n");
+			log_std(cd, "\tHW OPAL%s encryption:\n",
+				crypt_get_hw_opal_sum_enabled(cd) > 0 ? " (Single User Mode)" : "");
 			json_object_object_get_ex(jobj_segment, "opal_segment_number", &jobj1);
 			log_std(cd, "\t\tOPAL segment number: %" PRIu32 "\n", crypt_jobj_get_uint32(jobj1));
 			json_object_object_get_ex(jobj_segment, "opal_key_size", &jobj1);
diff --git a/lib/setup.c b/lib/setup.c
index 0160b1e83..eb8201632 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -6849,6 +6849,23 @@ int crypt_get_hw_encryption_type(struct crypt_device *cd)
 	return CRYPT_SW_ONLY;
 }
 
+int crypt_get_hw_opal_sum_enabled(struct crypt_device* cd)
+{
+	uint8_t version;
+
+	if (!cd)
+		return -EINVAL;
+
+	if (!isLUKS2(cd->type))
+		return -ENOTSUP;
+
+	/* No Opal flag present */
+	if (LUKS2_config_get_opal_version(&cd->u.luks2.hdr, &version) < 0)
+		return -ENOTSUP;
+
+	return version > 1 ? 1 : 0;
+}
+
 int crypt_get_verity_info(struct crypt_device *cd,
 	struct crypt_params_verity *vp)
 {
diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index 2aa24ec9a..317710285 100644
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -996,10 +996,12 @@ static int action_status(void)
 			log_std("  keysize: %d [bits]\n", crypt_get_volume_key_size(cd) * 8);
 			log_std("  key location: %s\n", (cad.flags & CRYPT_ACTIVATE_KEYRING_KEY) ? "keyring" : "dm-crypt");
 		} else if (hw_enc == CRYPT_OPAL_HW_ONLY) {
-			log_std("  encryption: HW OPAL only\n");
+			log_std("  encryption: HW OPAL%s only\n",
+				crypt_get_hw_opal_sum_enabled(cd) > 0 ? " (Single User Mode)" : "");
 			log_std("  OPAL keysize: %d [bits]\n", crypt_get_hw_encryption_key_size(cd) * 8);
 		} else if (hw_enc == CRYPT_SW_AND_OPAL_HW) {
-			log_std("  encryption: dm-crypt over HW OPAL\n");
+			log_std("  encryption: dm-crypt over HW OPAL%s\n",
+				crypt_get_hw_opal_sum_enabled(cd) > 0 ? " (Single User Mode)" : "");
 			log_std("  OPAL keysize: %d [bits]\n", crypt_get_hw_encryption_key_size(cd) * 8);
 			log_std("  cipher:  %s-%s\n", crypt_get_cipher(cd), crypt_get_cipher_mode(cd));
 			log_std("  keysize: %d [bits]\n", (crypt_get_volume_key_size(cd) - crypt_get_hw_encryption_key_size(cd)) * 8);
diff --git a/tests/compat-test-opal b/tests/compat-test-opal
index 021c2a915..2c2cccd91 100755
--- a/tests/compat-test-opal
+++ b/tests/compat-test-opal
@@ -413,7 +413,10 @@ test_device() #opal_mode, #format_params, #--integrity-no-wipe
 {
 	echo -e "$PWD1\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP luksFormat --type luks2 $1 $2 $3 -q $FAST_PBKDF_OPT $OPAL2_DEV || fail
 	echo $PWD1 | $CRYPTSETUP open $OPAL2_DEV $DEV_NAME || fail
-	test -z "$3" ||	dd if=/dev/zero of=/dev/mapper/$DEV_NAME bs=1M count=1 oflag=direct >/dev/null 2>&1 || fail
+	if [ $HAVE_SUM -eq 1 ]; then
+		$CRYPTSETUP -q status $DEV_NAME | grep -q "(Single User Mode)" || fail
+	fi
+	test -z "$3" || dd if=/dev/zero of=/dev/mapper/$DEV_NAME bs=1M count=1 oflag=direct >/dev/null 2>&1 || fail
 	$CRYPTSETUP luksSuspend $DEV_NAME || fail
 	dd if=$OPAL2_DEV of=/dev/zero bs=1M skip=16 count=1 iflag=direct >/dev/null 2>&1 && fail
 	echo $PWD1 | $CRYPTSETUP luksResume $DEV_NAME || fail
@@ -429,7 +432,10 @@ test_device_detached_header() #hdr, #opal_mode, #format_params, #--integrity-no-
 {
 	echo -e "$PWD1\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP luksFormat --type luks2 --header $1 $2 $3 $4 -q $FAST_PBKDF_OPT $OPAL2_DEV || fail
 	echo $PWD1 | $CRYPTSETUP open $OPAL2_DEV $DEV_NAME --header $1 || fail
-	test -z "$4" ||	dd if=/dev/zero of=/dev/mapper/$DEV_NAME bs=1M count=1 oflag=direct >/dev/null 2>&1 || fail
+	if [ $HAVE_SUM -eq 1 ]; then
+		$CRYPTSETUP -q status $DEV_NAME --header $1 | grep -q "(Single User Mode)" || fail
+	fi
+	test -z "$4" || dd if=/dev/zero of=/dev/mapper/$DEV_NAME bs=1M count=1 oflag=direct >/dev/null 2>&1 || fail
 	$CRYPTSETUP luksSuspend $DEV_NAME || fail
 	dd if=$OPAL2_DEV of=/dev/zero bs=1M count=1 iflag=direct >/dev/null 2>&1 && fail
 	echo $PWD1 | $CRYPTSETUP luksResume $DEV_NAME 2>/dev/null && fail

From 8cf635d483f2b40cfed0ad36ca5fad9e5b94e6ba Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 16 Mar 2026 08:08:11 +0100
Subject: [PATCH 106/244] Add crypt_status_hw_encryption() API call to check HW
 for OPAL

This call tries to primarily use Discovery0, that is mandatory
for all TCG-compatible drives.

In debuig mode it printas features, this can be useful to
show that drive is i.e. Pyrite version and not Opal.
---
 lib/libcryptsetup.h         |  19 ++++++
 lib/libcryptsetup.sym       |   1 +
 lib/luks2/hw_opal/hw_opal.c | 119 +++++++++++++++++++++++++++++++++++-
 3 files changed, 138 insertions(+), 1 deletion(-)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index 365c9a8e1..6ad052e73 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -1961,6 +1961,25 @@ typedef enum {
  */
 crypt_status_info crypt_status(struct crypt_device *cd, const char *name);
 
+/**
+ * Device HW encryption status
+ */
+typedef enum {
+	CRYPT_HW_INVALID, /**< cannot get the status info or possible missing support in kernel */
+	CRYPT_HW_OTHER,   /**< device support only non-OPAL subsystems */
+	CRYPT_HW_OPAL,    /**< device claims OPAL2 support */
+	CRYPT_HW_OPAL_SUM /**< device claims OPAL2 with SUM (Single User Mode) option */
+} crypt_status_hw_encryption_info;
+
+/**
+ * Get status info about supported HW encryption
+ *
+ * @param cd crypt device handle
+ *
+ * @return value defined by crypt_status_hw_encryption_info.
+ */
+crypt_status_hw_encryption_info crypt_status_hw_encryption(struct crypt_device *cd);
+
 /**
  * Dump text-formatted information about crypt or verity device to log output.
  *
diff --git a/lib/libcryptsetup.sym b/lib/libcryptsetup.sym
index 61432c144..5c2192b32 100644
--- a/lib/libcryptsetup.sym
+++ b/lib/libcryptsetup.sym
@@ -200,4 +200,5 @@ CRYPTSETUP_2.9 {
 	global:
 		crypt_get_verity_repaired;
 		crypt_get_hw_opal_sum_enabled;
+		crypt_status_hw_encryption;
 } CRYPTSETUP_2.8;
diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index b14601479..62e72cb35 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -146,6 +146,7 @@ static const char *opal_status_to_string(int t)
 static const char *opal_ioctl_to_string(unsigned long rq)
 {
 	switch(rq) {
+	case IOC_OPAL_DISCOVERY:       return "DISCOVERY";
 	case IOC_OPAL_GET_STATUS:      return "GET_STATUS";
 	case IOC_OPAL_GET_GEOMETRY:    return "GET_GEOMETRY";
 	case IOC_OPAL_GET_LR_STATUS:   return "GET_LR_STATUS";
@@ -178,12 +179,17 @@ static void opal_ioctl_debug(struct crypt_device *cd,
 {
 	const char *cmd = opal_ioctl_to_string(rq);
 
-	if (ret) {
+	/* Discovery ioctl returns response size */
+	if (ret < 0 || (ret && rq != IOC_OPAL_DISCOVERY)) {
 		log_dbg(cd, "OPAL %s failed: %s", cmd, opal_status_to_string(ret));
 		return;
 	}
 
 	if (post) switch(rq) {
+	case IOC_OPAL_DISCOVERY: { /* OUT */
+		log_dbg(cd, "OPAL %s", cmd);
+		};
+		break;
 	case IOC_OPAL_GET_STATUS: { /* OUT */
 		struct opal_status *st = args;
 		log_dbg(cd, "OPAL %s: flags:%" PRIu32, cmd, st->flags);
@@ -1563,6 +1569,112 @@ void opal_exclusive_unlock(struct crypt_device *cd, struct crypt_lock_handle *op
 	crypt_unlock_internal(cd, opal_lock);
 }
 
+struct level_0_discovery_header {
+	uint32_t length;
+	uint32_t revision;
+	uint8_t reserved[8];
+	uint8_t vendor_specific[32];
+}  __attribute__ ((packed));
+
+struct level_0_discovery_feature_shared {
+	uint16_t feature_code;
+	uint8_t reserved_minor : 4;
+	uint8_t descriptor_version : 4;
+	uint8_t length;
+}  __attribute__ ((packed));
+
+static crypt_status_hw_encryption_info opal_discovery0(struct crypt_device *cd)
+{
+	int fd;
+	int r, feat_length;
+	struct opal_discovery discovery;
+	struct level_0_discovery_header *dh;
+	struct level_0_discovery_feature_shared *feat_hdr;
+	char buf[4096];
+	const char *feature;
+	void *feat_ptr, *feat_end;
+	crypt_status_hw_encryption_info hw_enc, hw_enc_final;
+
+	fd = device_open(cd, crypt_data_device(cd), O_RDONLY);
+	if (fd < 0)
+		return CRYPT_HW_INVALID;
+
+	discovery.data = (uintptr_t)buf;
+	discovery.size = sizeof(buf);
+	memset(buf, 0, sizeof(buf));
+
+	r = opal_ioctl(cd, fd, IOC_OPAL_DISCOVERY, &discovery);
+	if (r < 0)
+		return CRYPT_HW_INVALID;
+
+	dh = (struct level_0_discovery_header *)buf;
+	feat_ptr = buf + sizeof(*dh);
+	feat_end = buf + be32_to_cpu(dh->length);
+
+	hw_enc = hw_enc_final = CRYPT_HW_INVALID;
+	while (feat_ptr < feat_end) {
+		feat_hdr = feat_ptr;
+		/* Length defines data following the header [3.3.6 Core spec] */
+		feat_length = feat_hdr->length + sizeof(*feat_hdr);
+
+		switch (be16_to_cpu(feat_hdr->feature_code)) {
+		/*   0x0000: reserved */
+		case 0x0001: feature = "TPer"; break;
+		case 0x0002: feature = "Locking"; break;
+		case 0x0003: feature = "Geometry"; break;
+		case 0x0004: feature = "Secure messaging"; break;
+		case 0x0005: feature = "SIIS"; break;
+		/*   0x00ff: reserved */
+		/*   0x0100 - 0x03ff: SSCs */
+		case 0x0100: feature = "Enterprise"; hw_enc = CRYPT_HW_OTHER; break;
+		case 0x0200: feature = "Opal1"; hw_enc = CRYPT_HW_OTHER; break;
+		case 0x0201: feature = "SUM"; hw_enc = CRYPT_HW_OPAL_SUM; break;
+		case 0x0202: feature = "Data store"; break;
+		case 0x0203: feature = "Opal2"; hw_enc = CRYPT_HW_OPAL; break;
+		case 0x0301: feature = "Opalite"; hw_enc = CRYPT_HW_OTHER;  break;
+		case 0x0302: feature = "Pyrite1"; hw_enc = CRYPT_HW_OTHER;  break;
+		case 0x0303: feature = "Pyrite2"; hw_enc = CRYPT_HW_OTHER;  break;
+		case 0x0304: feature = "Ruby"; hw_enc = CRYPT_HW_OTHER; break;
+		case 0x0305: feature = "KPIO"; break;
+		/*   0x0400 - 0xbfff reserved */
+		case 0x0401: feature = "Locking LBA ranges"; break;
+		case 0x0402: feature = "Block SID"; break;
+		case 0x0403: feature = "NS locking"; break;
+		case 0x0404: feature = "Data removal"; break;
+		case 0x0405: feature = "NS geometry"; break;
+		case 0x0407: feature = "NS Shadow MBR"; break;
+		case 0x0409: feature = "CPIN"; break;
+		case 0x040a: feature = "NS KPIO"; break;
+		/*   0xC000 - 0xffff vendor specific */
+		default: feature = "(unknown)"; break;
+		}
+
+		log_dbg(cd, "Feature 0x%03x %s", be16_to_cpu(feat_hdr->feature_code), feature);
+
+		feat_ptr = (char *)feat_ptr + feat_length;
+		if (hw_enc > hw_enc_final)
+			hw_enc_final = hw_enc;
+	}
+
+	return hw_enc_final;
+}
+
+crypt_status_hw_encryption_info crypt_status_hw_encryption(struct crypt_device *cd)
+{
+	int r;
+
+	r = opal_discovery0(cd);
+	if (r > CRYPT_HW_INVALID)
+		return r;
+
+	/* Fallback if Discovery is not available */
+	if (opal_supported(cd, crypt_data_device(cd)) <= 0)
+		return CRYPT_HW_INVALID;
+
+	r = opal_sum_supported(cd, crypt_data_device(cd));
+	return r > 0 ? CRYPT_HW_OPAL_SUM : CRYPT_HW_OPAL;
+}
+
 #else
 #pragma GCC diagnostic ignored "-Wunused-parameter"
 
@@ -1647,4 +1759,9 @@ void opal_exclusive_unlock(struct crypt_device *cd, struct crypt_lock_handle *op
 {
 }
 
+crypt_status_hw_encryption_info crypt_status_hw_encryption(struct crypt_device *cd)
+{
+	return CRYPT_HW_INVALID;
+}
+
 #endif

From 78689d7369908a1d0589c906b18a34adfdbf5014 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 16 May 2026 18:02:09 +0200
Subject: [PATCH 107/244] tcrypt: Remove logic for AF_ALG dependence

TCRYPT (TrueCrypt/VeraCrypt) format initially required
kernel AF_ALG interface for decryption of header.

This is no longer true as crypto backend tries userspace
crypto library first.

As there is internal fallback to AF_ALG if available,
these conditions can be remove.

It makes also pass test with --disable-kernel-crypto.
---
 lib/tcrypt/tcrypt.c | 13 +------------
 1 file changed, 1 insertion(+), 12 deletions(-)

diff --git a/lib/tcrypt/tcrypt.c b/lib/tcrypt/tcrypt.c
index c29ca2ede..d23cc0630 100644
--- a/lib/tcrypt/tcrypt.c
+++ b/lib/tcrypt/tcrypt.c
@@ -444,8 +444,6 @@ static int TCRYPT_decrypt_hdr(struct crypt_device *cd, struct tcrypt_phdr *hdr,
 
 		if (r < 0) {
 			log_dbg(cd, "TCRYPT:   returned error %d, skipped.", r);
-			if (r == -ENOTSUP)
-				break;
 			r = -ENOENT;
 			continue;
 		}
@@ -522,7 +520,7 @@ static int TCRYPT_init_hdr(struct crypt_device *cd,
 	unsigned char *pwd = NULL;
 	size_t passphrase_size, max_passphrase_size;
 	char *key = NULL;
-	unsigned int i, skipped = 0, iterations;
+	unsigned int i, iterations;
 	int r = -EPERM, keyfiles_pool_length;
 
 	pwd = crypt_safe_alloc(VCRYPT_KEY_POOL_LEN);
@@ -592,7 +590,6 @@ static int TCRYPT_init_hdr(struct crypt_device *cd,
 		if (r < 0) {
 			log_verbose(cd, _("PBKDF2 hash algorithm %s not available, skipping."),
 				      tcrypt_kdf[i].hash);
-			skipped++;
 			r = -EPERM;
 			continue;
 		}
@@ -600,7 +597,6 @@ static int TCRYPT_init_hdr(struct crypt_device *cd,
 		/* Decrypt header */
 		r = TCRYPT_decrypt_hdr(cd, hdr, key, params);
 		if (r == -ENOENT) {
-			skipped++;
 			r = -EPERM;
 			continue;
 		}
@@ -608,13 +604,6 @@ static int TCRYPT_init_hdr(struct crypt_device *cd,
 			break;
 	}
 
-	if ((r < 0 && skipped && skipped == i) || r == -ENOTSUP) {
-		log_err(cd, _("Required kernel crypto interface not available."));
-#if ENABLE_AF_ALG
-		log_err(cd, _("Ensure you have algif_skcipher kernel module loaded."));
-#endif
-		r = -ENOTSUP;
-	}
 	if (r < 0)
 		goto out;
 

From 4921256304d27dc1b9dd56a84e41a6cbe0effdd5 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 16 May 2026 18:18:30 +0200
Subject: [PATCH 108/244] luks2: Remove logic for AF_ALG dependence

Initially with disabled AF_ALG, LUKS2 keyslot code has
no way to encrypt keyslot, so old fallback to kernel dm-crypt
temporary device was used.

Now crypto backend already uses userpsace library
(with fallback to AF_ALG), so this code is no longer needed.
---
 lib/luks2/luks2_keyslot_luks2.c | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/lib/luks2/luks2_keyslot_luks2.c b/lib/luks2/luks2_keyslot_luks2.c
index ec68236cb..119fe6478 100644
--- a/lib/luks2/luks2_keyslot_luks2.c
+++ b/lib/luks2/luks2_keyslot_luks2.c
@@ -24,9 +24,6 @@ static int luks2_encrypt_to_storage(char *src, size_t srcLength,
 	struct volume_key *vk, unsigned int sector,
 	struct crypt_device *cd)
 {
-#if !ENABLE_AF_ALG /* Support for old kernel without Crypto API */
-	return LUKS_encrypt_to_storage(src, srcLength, cipher, cipher_mode, vk, sector, cd);
-#else
 	struct crypt_storage *s;
 	int devfd, r;
 	struct device *device = crypt_metadata_device(cd);
@@ -67,7 +64,6 @@ static int luks2_encrypt_to_storage(char *src, size_t srcLength,
 		log_err(cd, _("IO error while encrypting keyslot."));
 
 	return r;
-#endif
 }
 
 static int luks2_decrypt_from_storage(char *dst, size_t dstLength,
@@ -75,16 +71,6 @@ static int luks2_decrypt_from_storage(char *dst, size_t dstLength,
 	unsigned int sector, struct crypt_device *cd)
 {
 	struct device *device = crypt_metadata_device(cd);
-#if !ENABLE_AF_ALG /* Support for old kernel without Crypto API */
-	int r = device_read_lock(cd, device);
-	if (r) {
-		log_err(cd, _("Failed to acquire read lock on device %s."), device_path(device));
-		return r;
-	}
-	r = LUKS_decrypt_from_storage(dst, dstLength, cipher, cipher_mode, vk, sector, cd);
-	device_read_unlock(cd, crypt_metadata_device(cd));
-	return r;
-#else
 	struct crypt_storage *s;
 	int devfd, r;
 
@@ -129,7 +115,6 @@ static int luks2_decrypt_from_storage(char *dst, size_t dstLength,
 
 	crypt_storage_destroy(s);
 	return r;
-#endif
 }
 
 static int luks2_keyslot_get_pbkdf_params(json_object *jobj_keyslot,

From df1fe53746153a1298ba48971f1b83d071e885e9 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 16 May 2026 18:42:01 +0200
Subject: [PATCH 109/244] Do not print specific AF_ALG info in cryptsetup ciper
 benchmark.

If AF_ALG is not available, cipher test does not work.

One day it can uise different interface, let's remove special
handling for now.

If no cipher is available, just print info to user.
---
 src/cryptsetup.c | 19 +++++++++----------
 1 file changed, 9 insertions(+), 10 deletions(-)

diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index 317710285..bc4cc3722 100644
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -1167,6 +1167,7 @@ static int action_benchmark(void)
 	double enc_mbr = 0, dec_mbr = 0;
 	int key_size = (ARG_UINT32(OPT_KEY_SIZE_ID) ?: DEFAULT_PLAIN_KEYBITS) / 8;
 	int skipped = 0, width, mode_len;
+	bool head_printed = false;
 	char *c;
 	int i, r;
 
@@ -1216,13 +1217,17 @@ static int action_benchmark(void)
 			r = benchmark_cipher_loop(bciphers[i].cipher, bciphers[i].mode,
 						  bciphers[i].key_size, &enc_mbr, &dec_mbr);
 			check_signal(&r);
-			if (r == -ENOTSUP || r == -EINTR)
+			if (r == -EINTR)
 				break;
-			if (r == -ENOENT)
+			if (r == -ENOENT || r == -ENOTSUP) {
 				skipped++;
-			if (i == 0)
+				continue;
+			}
+			if (!head_printed) {
 				/* TRANSLATORS: The string is header of a table and must be exactly (right side) aligned. */
 				log_std(_("#     Algorithm |       Key |      Encryption |      Decryption\n"));
+				head_printed = true;
+			}
 
 			if (snprintf(cipher, MAX_CIPHER_LEN, "%s-%s",
 				     bciphers[i].cipher, bciphers[i].mode) < 0)
@@ -1236,15 +1241,9 @@ static int action_benchmark(void)
 					bciphers[i].key_size*8, _("N/A"), _("N/A"));
 		}
 		if (skipped && skipped == i)
-			r = -ENOTSUP;
+			log_std(_("# Cipher speed test is not available.\n"));
 	}
 
-	if (r == -ENOTSUP) {
-		log_err(_("Required kernel crypto interface not available."));
-#if ENABLE_AF_ALG
-		log_err( _("Ensure you have algif_skcipher kernel module loaded."));
-#endif
-	}
 	return r;
 }
 

From 0d6bfeed13268287178be0d06a25c0e097f51e15 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 16 May 2026 20:55:56 +0200
Subject: [PATCH 110/244] Make compat-test run without AF_ALG

compat-test used benchmark to test avail;ability of cipher,
this no longer works wirth AF_ALG disabled.

Add kernel check to crypto-check and use it instead to guard
benchmark test.

Also fix backend lying about kernel check.
---
 lib/crypto_backend/crypto_cipher_kernel.c |  3 +--
 lib/setup.c                               |  2 +-
 tests/compat-test                         | 21 +++++++++------------
 tests/crypto-check.c                      | 22 ++++++++++++++++------
 4 files changed, 27 insertions(+), 21 deletions(-)

diff --git a/lib/crypto_backend/crypto_cipher_kernel.c b/lib/crypto_backend/crypto_cipher_kernel.c
index e572edd16..da5b88205 100644
--- a/lib/crypto_backend/crypto_cipher_kernel.c
+++ b/lib/crypto_backend/crypto_cipher_kernel.c
@@ -364,8 +364,7 @@ int crypt_cipher_decrypt_kernel(struct crypt_cipher_kernel *ctx,
 int crypt_cipher_check_kernel(const char *name, const char *mode,
 			      const char *integrity, size_t key_length)
 {
-	/* Cannot check, expect success. */
-	return 0;
+	return -ENOTSUP;
 }
 int crypt_bitlk_decrypt_key_kernel(const void *key, size_t key_length,
 				   const char *in, char *out, size_t length,
diff --git a/lib/setup.c b/lib/setup.c
index eb8201632..4892be0a5 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -1889,7 +1889,7 @@ static int LUKS2_check_encryption_params(struct crypt_device *cd,
 	/* FIXME: allow this later also for normal ciphers (check AF_ALG availability. */
 	if (integrity && integrity_key_size == 0) {
 		r = crypt_cipher_check_kernel(cipher, cipher_mode, integrity, volume_key_size);
-		if (r < 0) {
+		if (r < 0 && r != -ENOTSUP) {
 			log_err(cd, _("Cipher %s-%s (key size %zd bits) is not available."),
 				cipher, cipher_mode, volume_key_size * 8);
 			return r;
diff --git a/tests/compat-test b/tests/compat-test
index bfd089867..ed7a0d23e 100755
--- a/tests/compat-test
+++ b/tests/compat-test
@@ -227,12 +227,6 @@ export LANG=C
 [ ! -x "$CRYPTSETUP" ] && skip "Cannot find $CRYPTSETUP, test skipped."
 valgrind_setup
 
-# LUKS non-root-tests
-if [ $(id -u) != 0 ]; then
-	$CRYPTSETUP benchmark -c aes-xts-plain64 >/dev/null 2>&1 || \
-		skip "WARNING: Cannot run test without kernel userspace crypto API, test skipped."
-fi
-
 prepare "Image in file tests (root capabilities not required)" file
 echo "[1] format"
 echo $PWD1 | $CRYPTSETUP luksFormat --type luks1 -c 'capi:xts(aes)-plain64' $IMG $FAST_PBKDF_OPT || fail
@@ -311,12 +305,15 @@ echo "[10] uuid"
 echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks1 $FAST_PBKDF_OPT --uuid $TEST_UUID $IMG || fail
 $CRYPTSETUP -q luksUUID $IMG | grep -q $TEST_UUID || fail
 
-echo "[11] benchmark"
-$CRYPTSETUP benchmark -c aes-xts --key-size 128 >/dev/null 2>&1 && fail
-$CRYPTSETUP benchmark -c aes-xts >/dev/null || fail
-$CRYPTSETUP benchmark -c aes-xts-plain64 >/dev/null || fail
-$CRYPTSETUP benchmark -c capi:xts\(aes\) >/dev/null || fail
-$CRYPTSETUP benchmark -c capi:xts\(aes\)-plain64 >/dev/null || fail
+./crypto-check cipher-kernel aes xts 256
+if [ $? -eq 0 ] ; then
+	echo "[11] benchmark"
+	$CRYPTSETUP benchmark -c aes-xts --key-size 128 >/dev/null 2>&1 && fail
+	$CRYPTSETUP benchmark -c aes-xts >/dev/null || fail
+	$CRYPTSETUP benchmark -c aes-xts-plain64 >/dev/null || fail
+	$CRYPTSETUP benchmark -c capi:xts\(aes\) >/dev/null || fail
+	$CRYPTSETUP benchmark -c capi:xts\(aes\)-plain64 >/dev/null || fail
+fi
 
 [ $(id -u) != 0 ] && skip "WARNING: You must be root to run this test, test skipped."
 [ -z "$LOOPDEV" ] && skip "WARNING: Cannot find free loop device, test skipped."
diff --git a/tests/crypto-check.c b/tests/crypto-check.c
index 04725c4f9..cb34bc9c5 100644
--- a/tests/crypto-check.c
+++ b/tests/crypto-check.c
@@ -20,13 +20,19 @@ static int check_cipher(const char *alg, const char *mode, unsigned long key_bit
 	if (key_bits % 8 || (key_bits / 8) > sizeof(key))
 		return EXIT_FAILURE;
 
-	/* Userspace crypto */
 	crypt_backend_rng(key, sizeof(key), CRYPT_RND_NORMAL, 0);
 	if (crypt_cipher_init(&cipher, alg, mode, key, key_bits / 8))
 		return EXIT_FAILURE;
 	crypt_cipher_destroy(cipher);
 
-	/* Kernel crypto */
+	return EXIT_SUCCESS;
+}
+
+static int check_cipher_kernel(const char *alg, const char *mode, unsigned long key_bits)
+{
+	if (key_bits % 8)
+		return EXIT_FAILURE;
+
 	if (crypt_cipher_check_kernel(alg, mode, NULL, key_bits / 8))
 		return EXIT_FAILURE;
 
@@ -49,7 +55,7 @@ static int check_hash(const char *hash)
 
 static void __attribute__((noreturn)) exit_help(bool destroy_backend)
 {
-	printf("Use: crypto_check version | fips_mode | fips_mode_kernel | hash <alg> | cipher <alg> <mode> [key_bits]\n");
+	printf("Use: crypto_check version | fips_mode | fips_mode_kernel | hash <alg> | cipher[-kernel] <alg> <mode> [key_bits]\n");
 	if (destroy_backend)
 		crypt_backend_destroy();
 	exit(EXIT_FAILURE);
@@ -57,7 +63,7 @@ static void __attribute__((noreturn)) exit_help(bool destroy_backend)
 
 int main(int argc, char *argv[])
 {
-	int r = EXIT_SUCCESS;
+	int r = EXIT_FAILURE;
 
 	if (argc < 2)
 		exit_help(false);
@@ -77,11 +83,12 @@ int main(int argc, char *argv[])
 		printf("%s%s%s\n", crypt_backend_version(),
 		       crypt_fips_mode() ? " (FIPS mode)" : "",
 		       crypt_fips_mode_kernel() ? " (FIPS kernel)" : "");
+		r = EXIT_SUCCESS;
 	} else if (!strcmp(argv[1], "hash")) {
 		if (argc != 3)
 			exit_help(true);
 		r = check_hash(argv[2]);
-	} else if (!strcmp(argv[1], "cipher")) {
+	} else if (!strcmp(argv[1], "cipher") || !strcmp(argv[1], "cipher-kernel")) {
 		unsigned long ul = 256;
 		char *ptr;
 		if (argc < 4 || argc > 5)
@@ -91,7 +98,10 @@ int main(int argc, char *argv[])
 			if (*ptr)
 				exit_help(true);
 		}
-		r = check_cipher(argv[2], argv[3], ul);
+		if (strcmp(argv[1], "cipher-kernel"))
+			r = check_cipher(argv[2], argv[3], ul);
+		else
+			r = check_cipher_kernel(argv[2], argv[3], ul);
 	}
 
 	crypt_backend_destroy();

From 9ebdb9491acbe17db31fb780b379b42fba1050e6 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 16 May 2026 21:25:46 +0200
Subject: [PATCH 111/244] ci: Add test with disabled AF_ALG

---
 .gitlab/ci/fedora-opal.yml | 1 +
 .gitlab/ci/fedora.yml      | 9 ++++++++-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/.gitlab/ci/fedora-opal.yml b/.gitlab/ci/fedora-opal.yml
index be5f78f2e..368724164 100644
--- a/.gitlab/ci/fedora-opal.yml
+++ b/.gitlab/ci/fedora-opal.yml
@@ -13,6 +13,7 @@
   script:
     - sudo dnf install -y -q nvme-cli
     - sudo nvme list
+    - ./configure
     - make -j
     - make -j -C tests check-programs
     - sudo -E make check TESTS="00modules-test compat-test-opal"
diff --git a/.gitlab/ci/fedora.yml b/.gitlab/ci/fedora.yml
index b17111866..c0f879da9 100644
--- a/.gitlab/ci/fedora.yml
+++ b/.gitlab/ci/fedora.yml
@@ -17,7 +17,6 @@
     - (r=3;while ! sudo dnf -y -q install $PKGS ; do ((--r))||exit;sleep 5;echo "Retrying";done)
     - sudo -E git clean -xdf
     - ./autogen.sh
-    - ./configure --enable-fips --enable-pwquality --enable-libargon2 --with-crypto_backend=openssl --enable-asciidoc
 
 test-main-commit-job-rawhide:
   extends:
@@ -32,11 +31,15 @@ test-main-commit-job-rawhide:
     RUN_SSH_PLUGIN_TEST: "1"
     RUN_KEYRING_TRUSTED_TEST: "1"
     RUN_SYSTEMD_PLUGIN_TEST: "1"
+  parallel:
+    matrix:
+      - OPTION: [ "--enable-kernel_crypto", "--disable-kernel_crypto" ]
   rules:
     - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup"
       when: never
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH || $CI_COMMIT_BRANCH =~ /v2\..\.x$/
   script:
+    - ./configure --enable-fips --enable-pwquality $OPTION
     - make -j
     - make -j -C tests check-programs
     - sudo -E make check
@@ -54,11 +57,15 @@ test-mergerq-job-rawhide:
     RUN_SSH_PLUGIN_TEST: "1"
     RUN_KEYRING_TRUSTED_TEST: "1"
     RUN_SYSTEMD_PLUGIN_TEST: "1"
+  parallel:
+    matrix:
+      - OPTION: [ "--enable-kernel_crypto", "--disable-kernel_crypto" ]
   rules:
     - if: $CI_PROJECT_PATH != "cryptsetup/cryptsetup"
       when: never
     - if: $CI_PIPELINE_SOURCE == "merge_request_event"
   script:
+    - ./configure --enable-fips --enable-pwquality $OPTION
     - make -j
     - make -j -C tests check-programs
     - sudo -E make check

From c757eeb1943652533a6da50c0fff54a22f889425 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 14 May 2026 15:05:02 +0200
Subject: [PATCH 112/244] Minor keyslot_add_by_key refactoring.

Prepare code for further code clarity improvements.
---
 lib/setup.c | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/lib/setup.c b/lib/setup.c
index 4892be0a5..f4166d510 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -7396,12 +7396,14 @@ static int keyslot_add_by_key(struct crypt_device *cd,
 	assert(new_passphrase);
 	assert(vk);
 
-	if (!flags)
-		return is_luks1 ? luks1_keyslot_add_by_volume_key(cd, keyslot_new, new_passphrase, new_passphrase_size, vk) :
-				  luks2_keyslot_add_by_volume_key(cd, keyslot_new, new_passphrase, new_passphrase_size, vk);
+	if (is_luks1) {
+		if (flags)
+			return -EINVAL;
+		return luks1_keyslot_add_by_volume_key(cd, keyslot_new, new_passphrase, new_passphrase_size, vk);
+	}
 
-	if (is_luks1)
-		return -EINVAL;
+	if (!flags)
+		return luks2_keyslot_add_by_volume_key(cd, keyslot_new, new_passphrase, new_passphrase_size, vk);
 
 	digest = LUKS2_digest_verify_by_segment(cd, &cd->u.luks2.hdr, CRYPT_DEFAULT_SEGMENT, vk);
 	if (digest >= 0) /* if key matches volume key digest tear down new vk flag */

From 1043e124d759bab2c604add09595134f60f8c997 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 13 May 2026 12:50:55 +0200
Subject: [PATCH 113/244] Optionally exclude default segment digest from
 verification.

Provide option to exclude default segment key digest
from LUKS2_digest_verify_by_any_matching verification routine.
---
 lib/luks2/luks2.h        |  3 ++-
 lib/luks2/luks2_digest.c | 14 ++++++++++----
 lib/setup.c              |  4 ++--
 3 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/lib/luks2/luks2.h b/lib/luks2/luks2.h
index 261bd79d7..50c5abe41 100644
--- a/lib/luks2/luks2.h
+++ b/lib/luks2/luks2.h
@@ -319,7 +319,8 @@ void crypt_token_unload_external_all(struct crypt_device *cd);
  * Generic LUKS2 digest
  */
 int LUKS2_digest_verify_by_any_matching(struct crypt_device *cd,
-		const struct volume_key *vk);
+		const struct volume_key *vk,
+		bool exclude_default_segment);
 
 int LUKS2_digest_verify_by_segment(struct crypt_device *cd,
 	struct luks2_hdr *hdr,
diff --git a/lib/luks2/luks2_digest.c b/lib/luks2/luks2_digest.c
index fb9a902d0..8429c912e 100644
--- a/lib/luks2/luks2_digest.c
+++ b/lib/luks2/luks2_digest.c
@@ -144,13 +144,19 @@ int LUKS2_digest_dump(struct crypt_device *cd, int digest)
 }
 
 int LUKS2_digest_verify_by_any_matching(struct crypt_device *cd,
-		const struct volume_key *vk)
+		const struct volume_key *vk,
+		bool exclude_default_segment)
 {
-	int digest;
+	int digest, default_segment_digest = -1;
+
+	if (exclude_default_segment)
+		default_segment_digest = LUKS2_digest_by_segment(crypt_get_hdr(cd, CRYPT_LUKS2), CRYPT_DEFAULT_SEGMENT);
 
-	for (digest = 0; digest < LUKS2_DIGEST_MAX; digest++)
-		if (LUKS2_digest_verify_by_digest(cd, digest, vk) == digest)
+	for (digest = 0; digest < LUKS2_DIGEST_MAX; digest++) {
+		if (digest != default_segment_digest &&
+		    LUKS2_digest_verify_by_digest(cd, digest, vk) == digest)
 			return digest;
+	}
 
 	return -ENOENT;
 }
diff --git a/lib/setup.c b/lib/setup.c
index f4166d510..d301384dc 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -5384,7 +5384,7 @@ static int _verify_key(struct crypt_device *cd,
 			return -EINVAL;
 
 		if (unbound_key)
-			r = LUKS2_digest_verify_by_any_matching(cd, vk);
+			r = LUKS2_digest_verify_by_any_matching(cd, vk, /* exclude_default_segment= */ false);
 		else
 			r = LUKS2_digest_verify_by_segment(cd, &cd->u.luks2.hdr, CRYPT_DEFAULT_SEGMENT, vk);
 	} else if (isVERITY(cd->type))
@@ -7411,7 +7411,7 @@ static int keyslot_add_by_key(struct crypt_device *cd,
 	else if (digest == -EPERM) {
 		/* if key matches any existing digest, do not create new digest */
 		if ((flags & CRYPT_VOLUME_KEY_DIGEST_REUSE))
-			digest = LUKS2_digest_verify_by_any_matching(cd, vk);
+			digest = LUKS2_digest_verify_by_any_matching(cd, vk, /* exclude_default_segment= */ false);
 
 		/* Anything other than -EPERM or -ENOENT suggests broken metadata. Abort */
 		if (digest < 0 && digest != -ENOENT && digest != -EPERM)

From e08eb1854c352a88f85a93b473b5164107edeb44 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 19 May 2026 09:40:43 +0200
Subject: [PATCH 114/244] Clarify usage of CRYPT_VOLUME_KEY_DIGEST_REUSE flag.

The use of CRYPT_VOLUME_KEY_DIGEST_REUSE flag does not
make sense without CRYPT_VOLUME_KEY_NO_SEGMENT or CRYPT_VOLUME_KEY_SET
flags. Clarify the use case in documentation and also
drop the flag if use stand alone in crypt_keyslot_add_by_* API
calls.
---
 lib/libcryptsetup.h | 6 +++++-
 lib/setup.c         | 9 +++++++++
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index 6ad052e73..3e312773b 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -1171,7 +1171,11 @@ int crypt_keyslot_add_by_volume_key(struct crypt_device *cd,
 /** create keyslot with new volume key and assign it to current dm-crypt segment */
 #define CRYPT_VOLUME_KEY_SET (UINT32_C(1) << 1)
 
-/** Assign key to first matching digest before creating new digest */
+/**
+ * Assign key to first matching digest not associated with current dm-crypt segment
+ * before creating new digest. The flag is effective only with
+ * CRYPT_VOLUME_KEY_NO_SEGMENT or CRYPT_VOLUME_KEY_SET flag set.
+ */
 #define CRYPT_VOLUME_KEY_DIGEST_REUSE (UINT32_C(1) << 2)
 
 /**
diff --git a/lib/setup.c b/lib/setup.c
index d301384dc..7b8c77542 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -7402,6 +7402,15 @@ static int keyslot_add_by_key(struct crypt_device *cd,
 		return luks1_keyslot_add_by_volume_key(cd, keyslot_new, new_passphrase, new_passphrase_size, vk);
 	}
 
+	/*
+	 * Drop CRYPT_VOLUME_KEY_DIGEST_REUSE flag if used without CRYPT_VOLUME_KEY_SET
+	 * or CRYPT_VOLUME_KEY_NO_SEGMENT flags. The standalone CRYPT_VOLUME_KEY_DIGEST_REUSE flag
+	 * is otherwise equivalent to adding new keyslot with current volume key.
+	 */
+	if ((flags & CRYPT_VOLUME_KEY_DIGEST_REUSE) &&
+	    !(flags & (CRYPT_VOLUME_KEY_SET | CRYPT_VOLUME_KEY_NO_SEGMENT)))
+		flags &= ~CRYPT_VOLUME_KEY_DIGEST_REUSE;
+
 	if (!flags)
 		return luks2_keyslot_add_by_volume_key(cd, keyslot_new, new_passphrase, new_passphrase_size, vk);
 

From 14c1f719354d3293cf556ebe22d9cf96af2cc4fe Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 13 May 2026 12:53:17 +0200
Subject: [PATCH 115/244] CRYPT_VOLUME_KEY_NO_SEGMENT flag must always create
 unbound keyslot.

The keyslot created with CRYPT_VOLUME_KEY_NO_SEGMENT flag must
always be unbound (not assigned to default data segment).

This also applies if caller would pass real volume key as a
function parameter.

Also if the CRYPT_VOLUME_KEY_DIGEST_REUSE flag is used,
we have to reuse only digests assigned to unbound keyslots.
---
 lib/setup.c | 40 ++++++++++++++++++++--------------------
 1 file changed, 20 insertions(+), 20 deletions(-)

diff --git a/lib/setup.c b/lib/setup.c
index 7b8c77542..1ed7387f4 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -7402,6 +7402,15 @@ static int keyslot_add_by_key(struct crypt_device *cd,
 		return luks1_keyslot_add_by_volume_key(cd, keyslot_new, new_passphrase, new_passphrase_size, vk);
 	}
 
+	/* if passed key matches volume key digest tear down new vk flag */
+	if (flags & CRYPT_VOLUME_KEY_SET) {
+		digest = LUKS2_digest_verify_by_segment(cd, &cd->u.luks2.hdr, CRYPT_DEFAULT_SEGMENT, vk);
+		if (digest >= 0)
+			flags &= ~CRYPT_VOLUME_KEY_SET;
+		else if (digest != -EPERM) /* Anything other than -EPERM suggests broken metadata. Abort */
+			return digest;
+	}
+
 	/*
 	 * Drop CRYPT_VOLUME_KEY_DIGEST_REUSE flag if used without CRYPT_VOLUME_KEY_SET
 	 * or CRYPT_VOLUME_KEY_NO_SEGMENT flags. The standalone CRYPT_VOLUME_KEY_DIGEST_REUSE flag
@@ -7414,31 +7423,22 @@ static int keyslot_add_by_key(struct crypt_device *cd,
 	if (!flags)
 		return luks2_keyslot_add_by_volume_key(cd, keyslot_new, new_passphrase, new_passphrase_size, vk);
 
-	digest = LUKS2_digest_verify_by_segment(cd, &cd->u.luks2.hdr, CRYPT_DEFAULT_SEGMENT, vk);
-	if (digest >= 0) /* if key matches volume key digest tear down new vk flag */
-		flags &= ~CRYPT_VOLUME_KEY_SET;
-	else if (digest == -EPERM) {
-		/* if key matches any existing digest, do not create new digest */
-		if ((flags & CRYPT_VOLUME_KEY_DIGEST_REUSE))
-			digest = LUKS2_digest_verify_by_any_matching(cd, vk, /* exclude_default_segment= */ false);
-
-		/* Anything other than -EPERM or -ENOENT suggests broken metadata. Abort */
-		if (digest < 0 && digest != -ENOENT && digest != -EPERM)
-			return digest;
+	digest = -ENOENT;
+	/* check if passed key matches any existing unbound digest */
+	if (flags & CRYPT_VOLUME_KEY_DIGEST_REUSE)
+		digest = LUKS2_digest_verify_by_any_matching(cd, vk, /* exclude_default_segment= */ true);
 
-		/* no segment flag or new vk flag requires new key digest */
-		if (flags & (CRYPT_VOLUME_KEY_NO_SEGMENT | CRYPT_VOLUME_KEY_SET)) {
-			if (digest < 0 || !(flags & CRYPT_VOLUME_KEY_DIGEST_REUSE))
-				digest = LUKS2_digest_create(cd, "pbkdf2", &cd->u.luks2.hdr, vk);
-		}
-	} else /* Anything other than -EPERM suggests broken metadata. Abort */
+	/* Anything other than -EPERM or -ENOENT suggests broken metadata. Abort */
+	if (digest < 0 && digest != -ENOENT && digest != -EPERM)
 		return digest;
 
+	/* no segment flag or new vk flag requires new key digest */
+	if (digest < 0 && (flags & (CRYPT_VOLUME_KEY_NO_SEGMENT | CRYPT_VOLUME_KEY_SET)))
+		digest = LUKS2_digest_create(cd, "pbkdf2", &cd->u.luks2.hdr, vk);
+
 	r = digest;
-	if (r < 0) {
-		log_err(cd, _("Volume key does not match the volume."));
+	if (r < 0)
 		return r;
-	}
 
 	crypt_volume_key_set_id(vk, digest);
 

From 276ecb5f1e9907be715b1ff2259cac5144611e0e Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 5 May 2026 14:32:18 +0200
Subject: [PATCH 116/244] Refactor digest verification functions.

---
 lib/luks2/luks2_digest.c | 53 ++++++++++++++++++++++++++++++----------
 1 file changed, 40 insertions(+), 13 deletions(-)

diff --git a/lib/luks2/luks2_digest.c b/lib/luks2/luks2_digest.c
index 8429c912e..f72dabdfa 100644
--- a/lib/luks2/luks2_digest.c
+++ b/lib/luks2/luks2_digest.c
@@ -97,17 +97,13 @@ int LUKS2_digest_by_keyslot(struct luks2_hdr *hdr, int keyslot)
 	return -ENOENT;
 }
 
-int LUKS2_digest_verify_by_digest(struct crypt_device *cd,
+static int digest_verify(struct crypt_device *cd,
+	const digest_handler *h,
 	int digest,
 	const struct volume_key *vk)
 {
-	const digest_handler *h;
 	int r;
 
-	h = LUKS2_digest_handler(cd, digest);
-	if (!h)
-		return -EINVAL;
-
 	r = h->verify(cd, digest, crypt_volume_key_get_key(vk), crypt_volume_key_length(vk));
 	if (r < 0) {
 		log_dbg(cd, "Digest %d (%s) verify failed with %d.", digest, h->name, r);
@@ -117,20 +113,46 @@ int LUKS2_digest_verify_by_digest(struct crypt_device *cd,
 	return digest;
 }
 
-int LUKS2_digest_verify(struct crypt_device *cd,
+int LUKS2_digest_verify_by_digest(struct crypt_device *cd,
+	int digest,
+	const struct volume_key *vk)
+{
+	const digest_handler *h;
+
+	h = LUKS2_digest_handler(cd, digest);
+	if (!h)
+		return -EINVAL;
+
+	return digest_verify(cd, h, digest, vk);
+}
+
+static int digest_verify_by_keyslot(struct crypt_device *cd,
 	struct luks2_hdr *hdr,
 	const struct volume_key *vk,
 	int keyslot)
 {
+	const digest_handler *h;
 	int digest;
 
 	digest = LUKS2_digest_by_keyslot(hdr, keyslot);
 	if (digest < 0)
 		return digest;
 
+	h = LUKS2_digest_handler(cd, digest);
+	if (!h)
+		return -EINVAL;
+
 	log_dbg(cd, "Verifying key from keyslot %d, digest %d.", keyslot, digest);
 
-	return LUKS2_digest_verify_by_digest(cd, digest, vk);
+	return digest_verify(cd, h, digest, vk);
+}
+
+int LUKS2_digest_verify(struct crypt_device *cd,
+	struct luks2_hdr *hdr,
+	const struct volume_key *vk,
+	int keyslot)
+{
+	return digest_verify_by_keyslot(cd, hdr, vk, keyslot);
 }
 
 int LUKS2_digest_dump(struct crypt_device *cd, int digest)
@@ -166,7 +188,8 @@ int LUKS2_digest_verify_by_segment(struct crypt_device *cd,
 	int segment,
 	const struct volume_key *vk)
 {
-	int r;
+	const digest_handler *h;
+	int digest, r;
 	unsigned s;
 
 	if (segment == CRYPT_ANY_SEGMENT) {
@@ -178,11 +201,15 @@ int LUKS2_digest_verify_by_segment(struct crypt_device *cd,
 		return -EPERM;
 	}
 
-	r = LUKS2_digest_by_segment(hdr, segment);
-	if (r < 0)
-		return r;
+	digest = LUKS2_digest_by_segment(hdr, segment);
+	if (digest < 0)
+		return digest;
+
+	h = LUKS2_digest_handler(cd, digest);
+	if (!h)
+		return -EINVAL;
 
-	return LUKS2_digest_verify_by_digest(cd, r, vk);
+	return digest_verify(cd, h, digest, vk);
 }
 
 /* FIXME: segment can have more digests */

From d8d0e3cb0a1ccc8b6e23796af359e5bc0bcf93a3 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 5 May 2026 14:34:01 +0200
Subject: [PATCH 117/244] Minor cleanup in LUKS2_digest_verify_by_segment.

---
 lib/luks2/luks2_digest.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/luks2/luks2_digest.c b/lib/luks2/luks2_digest.c
index f72dabdfa..a098dfea3 100644
--- a/lib/luks2/luks2_digest.c
+++ b/lib/luks2/luks2_digest.c
@@ -194,7 +194,7 @@ int LUKS2_digest_verify_by_segment(struct crypt_device *cd,
 
 	if (segment == CRYPT_ANY_SEGMENT) {
 		for (s = 0; s < json_segments_count(LUKS2_get_segments_jobj(hdr)); s++) {
-			if ((r = LUKS2_digest_verify_by_digest(cd, LUKS2_digest_by_segment(hdr, s), vk)) >= 0)
+			if ((r = LUKS2_digest_verify_by_segment(cd, hdr, s, vk)) >= 0)
 				return r;
 		}
 

From af75260f0e26dd38a27dc636793c665c6d9dcbd1 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 5 May 2026 14:39:37 +0200
Subject: [PATCH 118/244] Add LUKS2_get_volume_key_size_by_digest helper.

The function returns expected key size based on digest
the candidate key would be verified against.

If there's no keyslot associated with the digest, the
function returns -ENOENT.
---
 lib/luks2/luks2_internal.h      |  2 ++
 lib/luks2/luks2_json_metadata.c | 18 ++++++++++++++++++
 2 files changed, 20 insertions(+)

diff --git a/lib/luks2/luks2_internal.h b/lib/luks2/luks2_internal.h
index 1cdc1d236..77838d141 100644
--- a/lib/luks2/luks2_internal.h
+++ b/lib/luks2/luks2_internal.h
@@ -363,6 +363,8 @@ int LUKS2_last_segment_by_type(struct luks2_hdr *hdr,
 
 int LUKS2_get_default_segment(struct luks2_hdr *hdr);
 
+int LUKS2_get_volume_key_size_by_digest(struct luks2_hdr *hdr, int digest);
+
 int LUKS2_reencrypt_digest_new(struct luks2_hdr *hdr);
 int LUKS2_reencrypt_digest_old(struct luks2_hdr *hdr);
 int LUKS2_reencrypt_segment_new(struct luks2_hdr *hdr);
diff --git a/lib/luks2/luks2_json_metadata.c b/lib/luks2/luks2_json_metadata.c
index 79ba37ba8..792d961ad 100644
--- a/lib/luks2/luks2_json_metadata.c
+++ b/lib/luks2/luks2_json_metadata.c
@@ -2452,6 +2452,24 @@ int LUKS2_get_keyslot_stored_key_size(struct luks2_hdr *hdr, int keyslot)
 	return LUKS2_keyslot_get_volume_key_size(hdr, keyslot_name);
 }
 
+int LUKS2_get_volume_key_size_by_digest(struct luks2_hdr *hdr, int digest)
+{
+	json_object *jobj_digest, *jobj_digest_keyslots;
+
+	jobj_digest = LUKS2_get_digest_jobj(hdr, digest);
+	if (!jobj_digest)
+		return -ENOENT;
+
+	if (!json_object_object_get_ex(jobj_digest, "keyslots", &jobj_digest_keyslots))
+		return -EINVAL;
+
+	if (json_object_array_length(jobj_digest_keyslots) <= 0)
+		return -ENOENT;
+
+	return LUKS2_keyslot_get_volume_key_size(hdr,
+			json_object_get_string(json_object_array_get_idx(jobj_digest_keyslots, 0)));
+}
+
 int LUKS2_get_volume_key_size(struct luks2_hdr *hdr, int segment)
 {
 	json_object *jobj_digests, *jobj_digest_segments, *jobj_digest_keyslots, *jobj1;

From cb63f5cf847684f2f48012cfe80e21360e4abb19 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 5 May 2026 14:45:16 +0200
Subject: [PATCH 119/244] Verify key size before digest verification.

Verify expected volume key size before digest verification.
This is a best-effort measure to avoid false matches for
truncated candidate keys when the actual volume key has
trailing zero bytes.

With HMAC, if the truncated candidate key is missing exactly
the same number of bytes from the end as the genuine volume
key has in trailing zero bytes, digest verification of the
truncated candidate key will incorrectly succeed. This is
because HMAC pads messages shorter than the hash internal
block size with zeroes, so the truncated candidate key gets
padded with the same zeroes before entering the HMAC digest.

Unfortunately, this issue cannot be fully suppressed in LUKS2
when the proper volume key size is unknown. This happens when
the LUKS2 header contains no keyslots and the volume key size
information is missing. In that case, false matches with
truncated candidate keys can still occur.
---
 lib/luks1/keymanage.c              |  3 ++
 lib/luks2/luks2_digest.c           | 57 ++++++++++++++++++++++++++----
 lib/luks2/luks2_internal.h         |  5 +++
 lib/luks2/luks2_reencrypt_digest.c |  3 +-
 4 files changed, 60 insertions(+), 8 deletions(-)

diff --git a/lib/luks1/keymanage.c b/lib/luks1/keymanage.c
index 37929810b..e08a3a5bc 100644
--- a/lib/luks1/keymanage.c
+++ b/lib/luks1/keymanage.c
@@ -991,6 +991,9 @@ int LUKS_verify_volume_key(const struct luks_phdr *hdr,
 	if (crypt_backend_memeq(checkHashBuf, hdr->mkDigest, LUKS_DIGESTSIZE))
 		return -EPERM;
 
+	if (hdr->keyBytes != crypt_volume_key_length(vk))
+		return -EPERM;
+
 	return 0;
 }
 
diff --git a/lib/luks2/luks2_digest.c b/lib/luks2/luks2_digest.c
index a098dfea3..2ced2c601 100644
--- a/lib/luks2/luks2_digest.c
+++ b/lib/luks2/luks2_digest.c
@@ -118,21 +118,32 @@ int LUKS2_digest_verify_by_digest(struct crypt_device *cd,
 	const struct volume_key *vk)
 {
 	const digest_handler *h;
+	int key_size, r;
 
 	h = LUKS2_digest_handler(cd, digest);
 	if (!h)
 		return -EINVAL;
 
-	return digest_verify(cd, h, digest, vk);
+	r = digest_verify(cd, h, digest, vk);
+	if (r < 0)
+		return r;
+
+	key_size = LUKS2_get_volume_key_size_by_digest(crypt_get_hdr(cd, CRYPT_LUKS2), digest);
+
+	if (key_size > 0 && (size_t)key_size != crypt_volume_key_length(vk))
+		return -EPERM;
+
+	return r;
 }
 
 static int digest_verify_by_keyslot(struct crypt_device *cd,
 	struct luks2_hdr *hdr,
 	const struct volume_key *vk,
-	int keyslot)
+	int keyslot,
+	bool check_key_size)
 {
 	const digest_handler *h;
-	int digest;
+	int digest, key_size, r;
 
 	digest = LUKS2_digest_by_keyslot(hdr, keyslot);
 	if (digest < 0)
@@ -144,7 +155,18 @@ static int digest_verify_by_keyslot(struct crypt_device *cd,
 
 	log_dbg(cd, "Verifying key from keyslot %d, digest %d.", keyslot, digest);
 
-	return digest_verify(cd, h, digest, vk);
+	r = digest_verify(cd, h, digest, vk);
+	if (r < 0 || !check_key_size)
+		return r;
+
+	key_size = LUKS2_get_keyslot_stored_key_size(hdr, keyslot);
+	if (key_size < 0)
+		return -EINVAL;
+
+	if ((size_t)key_size != crypt_volume_key_length(vk))
+		return -EPERM;
+
+	return r;
 }
 
 int LUKS2_digest_verify(struct crypt_device *cd,
@@ -152,7 +174,15 @@ int LUKS2_digest_verify(struct crypt_device *cd,
 	const struct volume_key *vk,
 	int keyslot)
 {
-	return digest_verify_by_keyslot(cd, hdr, vk, keyslot);
+	return digest_verify_by_keyslot(cd, hdr, vk, keyslot, /* check_key_size= */ true);
+}
+
+int LUKS2_reencrypt_keyslot_digest_verify(struct crypt_device *cd,
+	struct luks2_hdr *hdr,
+	const struct volume_key *vk,
+	int keyslot)
+{
+	return digest_verify_by_keyslot(cd, hdr, vk, keyslot, /* check_key_size= */ false);
 }
 
 int LUKS2_digest_dump(struct crypt_device *cd, int digest)
@@ -189,7 +219,7 @@ int LUKS2_digest_verify_by_segment(struct crypt_device *cd,
 	const struct volume_key *vk)
 {
 	const digest_handler *h;
-	int digest, r;
+	int digest, key_size, r;
 	unsigned s;
 
 	if (segment == CRYPT_ANY_SEGMENT) {
@@ -209,7 +239,20 @@ int LUKS2_digest_verify_by_segment(struct crypt_device *cd,
 	if (!h)
 		return -EINVAL;
 
-	return digest_verify(cd, h, digest, vk);
+	r = digest_verify(cd, h, digest, vk);
+	if (r < 0)
+		return r;
+
+	if (segment == CRYPT_DEFAULT_SEGMENT)
+		/* use default segment key size or fallback to the cached key size */
+		key_size = crypt_get_volume_key_size(cd);
+	else
+		key_size = LUKS2_get_volume_key_size(hdr, segment);
+
+	if (key_size > 0 && (size_t)key_size != crypt_volume_key_length(vk))
+		return -EPERM;
+
+	return r;
 }
 
 /* FIXME: segment can have more digests */
diff --git a/lib/luks2/luks2_internal.h b/lib/luks2/luks2_internal.h
index 77838d141..2603f0ea0 100644
--- a/lib/luks2/luks2_internal.h
+++ b/lib/luks2/luks2_internal.h
@@ -386,6 +386,11 @@ int LUKS2_digest_verify_by_digest(struct crypt_device *cd,
 	int digest,
 	const struct volume_key *vk);
 
+int LUKS2_reencrypt_keyslot_digest_verify(struct crypt_device *cd,
+	struct luks2_hdr *hdr,
+	const struct volume_key *vk,
+	int keyslot);
+
 void LUKS2_digests_erase_unused(struct crypt_device *cd,
 	struct luks2_hdr *hdr);
 
diff --git a/lib/luks2/luks2_reencrypt_digest.c b/lib/luks2/luks2_reencrypt_digest.c
index 9db88a483..6dd7a1478 100644
--- a/lib/luks2/luks2_reencrypt_digest.c
+++ b/lib/luks2/luks2_reencrypt_digest.c
@@ -392,7 +392,8 @@ int LUKS2_reencrypt_digest_verify(struct crypt_device *cd,
 	if (r < 0)
 		return r;
 
-	r = LUKS2_digest_verify(cd, hdr, data, keyslot_reencrypt);
+	/* We can not check key size since reencryption keyslot contains bogus key_size=1 */
+	r = LUKS2_reencrypt_keyslot_digest_verify(cd, hdr, data, keyslot_reencrypt);
 	crypt_free_volume_key(data);
 
 	if (r < 0) {

From 04dc3fff85d5bcd8e4c968d98792d82a8aa070ef Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 5 May 2026 15:07:35 +0200
Subject: [PATCH 120/244] tests: drop cached volume key before reencryption.

---
 tests/api-test-2.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index ed5375903..ee17e91d4 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -5161,6 +5161,11 @@ static void Luks2Reencryption(void)
 	OK_(crypt_format(cd, CRYPT_LUKS2, "aes", "cbc-essiv:sha256", NULL, key, key_size, &(struct crypt_params_luks2){ .sector_size = 512 }));
 	OK_(crypt_set_pbkdf_type(cd, &pbkdf));
 	EQ_(crypt_keyslot_add_by_volume_key(cd, 21, key, key_size, PASSPHRASE, strlen(PASSPHRASE)), 21);
+	/* FIXME: We have to drop cached volume key from cd handle before/during any
+	 * crypt_reencrypt_init* function */
+	CRYPT_FREE(cd);
+	OK_(crypt_init(&cd, DMDIR L_DEVICE_OK));
+	OK_(crypt_load(cd, CRYPT_LUKS2, NULL));
 
 	/* add unbound key */
 	EQ_(crypt_keyslot_add_by_key(cd, 12, key2, key_size2, PASSPHRASE1, strlen(PASSPHRASE1), CRYPT_VOLUME_KEY_NO_SEGMENT), 12);

From 8dcf4eb19561982526155993ce514f00698f3897 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 5 May 2026 15:59:52 +0200
Subject: [PATCH 121/244] Revert "tests: add temporary debug output."

The bug was identified and the debug helper is
no longer needed.

This reverts commit 3676b8d6c5c451bf99552f0ce04257ad7a0cfb90.
---
 tests/luks2-reencryption-test | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/tests/luks2-reencryption-test b/tests/luks2-reencryption-test
index 28a26f51d..f277483e8 100755
--- a/tests/luks2-reencryption-test
+++ b/tests/luks2-reencryption-test
@@ -2950,16 +2950,8 @@ $CRYPTSETUP close $DEV_NAME || fail
 reformat_reencrypt_device
 $CRYPTSETUP -q luksErase $DEV || fail
 
-# run the test with additional debug output
-echo "Key before truncate:"
-keyctl describe %user:$KEY_NAME_VK2
-keyctl print %user:$KEY_NAME_VK2
 head -c 63 $VKEY2 | keyctl padd user $KEY_NAME_VK2 %:$KEYRING > /dev/null || fail
-echo "Key after truncate:"
-keyctl describe %user:$KEY_NAME_VK2
-keyctl print %user:$KEY_NAME_VK2
-$CRYPTSETUP -q reencrypt --init-only --volume-key-keyring $KEY_NAME_VK2 --new-volume-key-keyring $KEY_NAME_VK1 $DEV --debug <&- && fail
-#$CRYPTSETUP -q reencrypt --init-only --volume-key-keyring $KEY_NAME_VK2 --new-volume-key-keyring $KEY_NAME_VK1 $DEV <&- 2>/dev/null && fail
+$CRYPTSETUP -q reencrypt --init-only --volume-key-keyring $KEY_NAME_VK2 --new-volume-key-keyring $KEY_NAME_VK1 $DEV <&- 2>/dev/null && fail
 $CRYPTSETUP luksDump $DEV | grep -q "online-reencrypt" && fail "Failed initialization with reencryption flag"
 
 head -c 64 $VKEY2 | keyctl padd user $KEY_NAME_VK2 %:$KEYRING > /dev/null || fail

From 382e3003398e12faea041db2bf4954da3c573c4b Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 5 May 2026 16:03:59 +0200
Subject: [PATCH 122/244] tests: leave at least one keyslot to verify key size.

---
 tests/luks2-reencryption-test | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/tests/luks2-reencryption-test b/tests/luks2-reencryption-test
index f277483e8..5a8fe68ae 100755
--- a/tests/luks2-reencryption-test
+++ b/tests/luks2-reencryption-test
@@ -2948,7 +2948,12 @@ $CRYPTSETUP close $DEV_NAME || fail
 
 # test b0rked kernel keys
 reformat_reencrypt_device
-$CRYPTSETUP -q luksErase $DEV || fail
+# erase all but one keyslot so that we verify original volume key size
+$CRYPTSETUP luksKillSlot -q $DEV 4 || fail
+$CRYPTSETUP luksKillSlot -q $DEV 6 || fail
+$CRYPTSETUP luksKillSlot -q $DEV 8 || fail
+$CRYPTSETUP luksKillSlot -q $DEV 10 || fail
+$CRYPTSETUP luksKillSlot -q $DEV 12 || fail
 
 head -c 63 $VKEY2 | keyctl padd user $KEY_NAME_VK2 %:$KEYRING > /dev/null || fail
 $CRYPTSETUP -q reencrypt --init-only --volume-key-keyring $KEY_NAME_VK2 --new-volume-key-keyring $KEY_NAME_VK1 $DEV <&- 2>/dev/null && fail

From 3da919f8509761ce808ca08c4dc90e960b396997 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Mon, 11 May 2026 17:23:20 +0200
Subject: [PATCH 123/244] tests: test truncated keys with trailing zero
 byte(s).

It tests hardening for pbkdf2(hmac-sha256)
digest verification in LUKS for keys (hmac input message)
shorter than the hash internal block size. Any shorter
message is padded with zeroes (up to internal block
hash size) before the digest is calculated.
---
 tests/api-test-2.c | 144 +++++++++++++++++++++++++++++++++++++++++++++
 tests/api-test.c   |  80 +++++++++++++++++++++++++
 tests/compat-test  |  40 ++++++++++++-
 tests/compat-test2 |  46 ++++++++++++++-
 4 files changed, 308 insertions(+), 2 deletions(-)

diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index ee17e91d4..34525f978 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -6067,6 +6067,149 @@ static void KeyslotContextAndKeyringLink(void)
 #endif
 }
 
+static void TruncatedKeys(void)
+{
+	char key[64], key2[64], key3[64], key4[64];
+	const char *passphrase = PASSPHRASE;
+
+	/* test key with trailing zero bytes susceptible to padding conflict in pbkdf2(hmac) */
+	const char *vk_hex  = "bb21158c733229347bd4e681891e213d94c685be6a5b84818afe7a78a6de7a00";
+	const char *vk_hex2 = "bb21158c733229347bd4e681891e213d00000000000000000000000000000000";
+
+	const char *vk_hex3 = "8ca7689d9d422cd87f86b18cbb6aa834a632e8d74a43ccfd86415bb9c65979c3" \
+			      "2636b79b74458807fffbda615f6fe5d5deeefef5c890879d66fc6b5ce1105d00";
+	const char *vk_hex4 = "8ca7689d9d422cd87f86b18cbb6aa834a632e8d74a43ccfd86415bb9c65979c3" \
+			      "0000000000000000000000000000000000000000000000000000000000000000";
+	size_t key_size = strlen(vk_hex) / 2, key_size2 = strlen(vk_hex3) / 2;
+	const char *cipher = "aes";
+	const char *cbc_mode = "cbc-essiv:sha256", *xts_mode = "xts-plain64";
+	uint64_t r_payload_offset;
+
+	OK_(crypt_decode_key(key,  vk_hex,  key_size));
+	OK_(crypt_decode_key(key2, vk_hex2, key_size));
+	OK_(crypt_decode_key(key3, vk_hex3, key_size2));
+	OK_(crypt_decode_key(key4, vk_hex4, key_size2));
+
+	// init test devices
+	OK_(get_luks2_offsets(0, 0, 0, NULL, &r_payload_offset));
+	OK_(create_dmdevice_over_loop(H_DEVICE, r_payload_offset + 1));
+
+	// cbc mode
+	// format with trailing zero byte key
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(set_fast_pbkdf(cd));
+	OK_(crypt_format(cd, CRYPT_LUKS2, cipher, cbc_mode, NULL, key, key_size, NULL));
+	// the truncated key (cut off zero byte) must not pass verification
+	FAIL_(crypt_volume_key_verify(cd, key, key_size - 1), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key, key_size - 1, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	// add keyslot so LUKS2 can verify key size properly later
+	EQ_(crypt_keyslot_add_by_volume_key(cd, 0, key, key_size, passphrase, strlen(passphrase)), 0);
+	// no need to test activation since AES will not accept short keys
+	CRYPT_FREE(cd);
+
+	// test again with cached volume key dropped
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(crypt_load(cd, CRYPT_LUKS2, NULL));
+	FAIL_(crypt_volume_key_verify(cd, key, key_size - 1), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key, key_size - 1, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	CRYPT_FREE(cd);
+
+	// format device with zeroed second half of the key
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(set_fast_pbkdf(cd));
+	OK_(crypt_format(cd, CRYPT_LUKS2, cipher, cbc_mode, NULL, key2, key_size, NULL));
+	FAIL_(crypt_volume_key_verify(cd, key2, key_size / 2), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key2, key_size / 2, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	// activation must fail, we test with 128 bits AES key (the original key was 256 bits)
+	FAIL_(crypt_activate_by_volume_key(cd, CDEVICE_1, key2, key_size / 2, 0), "Key does not match the volume.");
+	EQ_(crypt_keyslot_add_by_volume_key(cd, 0, key2, key_size, passphrase, strlen(passphrase)), 0);
+	CRYPT_FREE(cd);
+
+	// test again with cached volume key dropped
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(crypt_load(cd, CRYPT_LUKS2, NULL));
+	FAIL_(crypt_volume_key_verify(cd, key2, key_size / 2), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key2, key_size / 2, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	// activation must fail, we test with 128 bits AES key (the original key was 256 bits)
+	FAIL_(crypt_activate_by_volume_key(cd, CDEVICE_1, key2, key_size / 2, 0), "Key does not match the volume.");
+	CRYPT_FREE(cd);
+
+	// xts mode
+	// format with trailing zero byte key
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(set_fast_pbkdf(cd));
+	OK_(crypt_format(cd, CRYPT_LUKS2, cipher, xts_mode, NULL, key3, key_size2, NULL));
+	// the truncated key (cut off zero byte) must not pass verification
+	FAIL_(crypt_volume_key_verify(cd, key3, key_size2 - 1), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key3, key_size2 - 1, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	// add keyslot so LUKS2 can verify key size properly later
+	EQ_(crypt_keyslot_add_by_volume_key(cd, 0, key3, key_size2, passphrase, strlen(passphrase)), 0);
+	// no need to test activation since AES will not accept short keys
+	CRYPT_FREE(cd);
+
+	// test again with cached volume key dropped
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(crypt_load(cd, CRYPT_LUKS2, NULL));
+	FAIL_(crypt_volume_key_verify(cd, key3, key_size2 - 1), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key3, key_size2 - 1, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	CRYPT_FREE(cd);
+
+	// format device with zeroed second half of the key
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(set_fast_pbkdf(cd));
+	OK_(crypt_format(cd, CRYPT_LUKS2, cipher, xts_mode, NULL, key4, key_size2, NULL));
+	FAIL_(crypt_volume_key_verify(cd, key4, key_size2 / 2), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key4, key_size2 / 2, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	// activation must fail, we test with (doubled for xts) 128 bits AES key (the original key was 256 bits)
+	FAIL_(crypt_activate_by_volume_key(cd, CDEVICE_1, key4, key_size2 / 2, 0), "Key does not match the volume.");
+	EQ_(crypt_keyslot_add_by_volume_key(cd, 0, key4, key_size2, passphrase, strlen(passphrase)), 0);
+	CRYPT_FREE(cd);
+
+	// test again with cached volume key dropped
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(crypt_load(cd, CRYPT_LUKS2, NULL));
+	FAIL_(crypt_volume_key_verify(cd, key4, key_size2 / 2), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key4, key_size2 / 2, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	// activation must fail, we test with (doubled for xts) 128 bits AES key (the original key was 256 bits)
+	FAIL_(crypt_activate_by_volume_key(cd, CDEVICE_1, key4, key_size2 / 2, 0), "Key does not match the volume.");
+	CRYPT_FREE(cd);
+
+	// check unbound key verification
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(set_fast_pbkdf(cd));
+	OK_(crypt_format(cd, CRYPT_LUKS2, cipher, xts_mode, NULL, key3, key_size2, NULL));
+	// keyslot must always be unbound if created with CRYPT_VOLUME_KEY_NO_SEGMENT
+	EQ_(crypt_keyslot_add_by_key(cd, 1, key3, key_size2 - 1, passphrase, strlen(passphrase), CRYPT_VOLUME_KEY_NO_SEGMENT), 1);
+	EQ_(crypt_keyslot_status(cd, 1), CRYPT_SLOT_UNBOUND);
+	FAIL_(crypt_activate_by_passphrase(cd, CDEVICE_1, 1, passphrase, strlen(passphrase), 0), "Keyslot unusable for device activation.");
+	CRYPT_FREE(cd);
+
+	// check unbound key verification with CRYPT_VOLUME_KEY_DIGEST_REUSE
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(set_fast_pbkdf(cd));
+	OK_(crypt_format(cd, CRYPT_LUKS2, cipher, xts_mode, NULL, key4, key_size2, NULL));
+	// drop cached volume key
+	CRYPT_FREE(cd);
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(crypt_load(cd, CRYPT_LUKS2, NULL));
+	EQ_(crypt_keyslot_add_by_key(cd, 0, key4, key_size2 - 1, passphrase, strlen(passphrase), CRYPT_VOLUME_KEY_NO_SEGMENT), 0);
+	EQ_(crypt_keyslot_add_by_key(cd, 1, key4, key_size2 - 2, passphrase, strlen(passphrase), CRYPT_VOLUME_KEY_NO_SEGMENT | CRYPT_VOLUME_KEY_DIGEST_REUSE), 1);
+	/* it must not reuse default segment digest */
+	EQ_(crypt_keyslot_status(cd, 1), CRYPT_SLOT_UNBOUND);
+	FAIL_(crypt_activate_by_passphrase(cd, CDEVICE_1, 1, passphrase, strlen(passphrase), 0), "Keyslot unusable for device activation.");
+	EQ_(crypt_keyslot_add_by_key(cd, 2, key4, key_size2 - 3, passphrase, strlen(passphrase), CRYPT_VOLUME_KEY_NO_SEGMENT | CRYPT_VOLUME_KEY_DIGEST_REUSE), 2);
+	EQ_(crypt_keyslot_add_by_key(cd, 3, key4, key_size2 - 4, passphrase, strlen(passphrase), CRYPT_VOLUME_KEY_NO_SEGMENT | CRYPT_VOLUME_KEY_DIGEST_REUSE), 3);
+	EQ_(crypt_keyslot_add_by_key(cd, 4, key4, key_size2 - 5, passphrase, strlen(passphrase), CRYPT_VOLUME_KEY_NO_SEGMENT | CRYPT_VOLUME_KEY_DIGEST_REUSE), 4);
+	EQ_(crypt_keyslot_add_by_key(cd, 5, key4, key_size2 - 6, passphrase, strlen(passphrase), CRYPT_VOLUME_KEY_NO_SEGMENT | CRYPT_VOLUME_KEY_DIGEST_REUSE), 5);
+	EQ_(crypt_keyslot_add_by_key(cd, 6, key4, key_size2 - 7, passphrase, strlen(passphrase), CRYPT_VOLUME_KEY_NO_SEGMENT | CRYPT_VOLUME_KEY_DIGEST_REUSE), 6);
+	// It must run out of free digests by now
+	FAIL_(crypt_keyslot_add_by_key(cd, 7, key4, key_size2 - 8, passphrase, strlen(passphrase), CRYPT_VOLUME_KEY_NO_SEGMENT | CRYPT_VOLUME_KEY_DIGEST_REUSE), "No free digest slot.");
+	CRYPT_FREE(cd);
+
+	_remove_keyfiles();
+	_cleanup_dmdevices();
+}
+
 static int _crypt_load_check(struct crypt_device *_cd)
 {
 #if HAVE_BLKID
@@ -6195,6 +6338,7 @@ int main(int argc, char *argv[])
 	RUN_(LuksKeyslotAdd, "Adding keyslot via new API");
 	RUN_(VolumeKeyGet, "Getting volume key via keyslot context API");
 	RUN_(KeyslotContextAndKeyringLink, "Activate via keyslot context API and linking VK to a keyring");
+	RUN_(TruncatedKeys, "Test truncated candidate keys.");
 	RUN_(Luks2Repair, "LUKS2 repair"); // test disables metadata locking. Run always last!
 
 	_cleanup();
diff --git a/tests/api-test.c b/tests/api-test.c
index 9b31c286a..fe8bcfc39 100644
--- a/tests/api-test.c
+++ b/tests/api-test.c
@@ -2373,6 +2373,85 @@ static void VolumeKeyGet(void)
 	_cleanup_dmdevices();
 }
 
+static void TruncatedKeys(void)
+{
+	enum { OFFSET_1M = 2048 };
+	struct crypt_params_luks1 params = {
+		.hash = "sha256",
+		.data_alignment = OFFSET_1M, // 4M, data offset will be 4096
+	};
+	const struct crypt_pbkdf_type fast_pbkdf = {
+		.type = "pbkdf2",
+		.hash = "sha256",
+		.iterations = 1000,
+		.flags = CRYPT_PBKDF_NO_BENCHMARK
+	};
+	char key[64], key2[64];
+
+	const char *passphrase = PASSPHRASE;
+
+	/* test key with trailing zero bytes susceptible to padding conflict in pbkdf2(hmac) */
+	const char *vk_hex  = "bb21158c733229347bd4e681891e213d94c685be6a5b84818afe7a78a6de7a00";
+	const char *vk_hex2 = "bb21158c733229347bd4e681891e213d00000000000000000000000000000000";
+	size_t key_size = strlen(vk_hex) / 2;
+	const char *cipher = "aes";
+	const char *cipher_mode = "cbc-essiv:sha256";
+	uint64_t r_payload_offset, r_header_size;
+
+	OK_(crypt_decode_key(key,  vk_hex,  key_size));
+	OK_(crypt_decode_key(key2, vk_hex2, key_size));
+
+	// init test devices
+	OK_(get_luks_offsets(0, key_size, params.data_alignment, 0, &r_header_size, &r_payload_offset));
+	OK_(create_dmdevice_over_loop(H_DEVICE, r_payload_offset + 1));
+
+	// format with key containing last trailing zero byte
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(crypt_set_pbkdf_type(cd, &fast_pbkdf));
+	OK_(crypt_format(cd, CRYPT_LUKS1, cipher, cipher_mode, NULL, key, key_size, &params));
+	// the truncated key (cut off zero byte) must not pass verification
+	FAIL_(crypt_volume_key_verify(cd, key, key_size - 1), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key, key_size - 1, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	CRYPT_FREE(cd);
+
+	// same test as above, but with cached volume key dropped
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(crypt_load(cd, CRYPT_LUKS1, NULL));
+	// the truncated key (cut off zero byte) must not pass verification
+	FAIL_(crypt_volume_key_verify(cd, key, key_size - 1), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key, key_size - 1, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	// no need to test activation since AES will not accept short keys
+	CRYPT_FREE(cd);
+
+	/*
+	 * Format with key in second half containing only zero bytes.
+	 * Due to hmac zero padding of messages shorter than internal hash block size,
+	 * we could use only first half of the key, pass the verification and upload
+	 * the key in dm-crypt successfully. We pass 128 bits instead of 256 bits used
+	 * in crypt_format().
+	 */
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(crypt_set_pbkdf_type(cd, &fast_pbkdf));
+	OK_(crypt_format(cd, CRYPT_LUKS1, cipher, cipher_mode, NULL, key2, key_size, &params));
+	// the truncated key (cut off zero byte) must not pass verification
+	FAIL_(crypt_volume_key_verify(cd, key2, key_size / 2), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key2, key_size / 2, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	// activation must fail
+	FAIL_(crypt_activate_by_volume_key(cd, CDEVICE_1, key2, key_size / 2, 0), "Key does not match the volume.");
+	CRYPT_FREE(cd);
+
+	// same test as above, but with cached volume key dropped
+	OK_(crypt_init(&cd, DMDIR H_DEVICE));
+	OK_(crypt_load(cd, CRYPT_LUKS1, NULL));
+	FAIL_(crypt_volume_key_verify(cd, key2, key_size / 2), "Key does not match the volume.");
+	FAIL_(crypt_keyslot_add_by_volume_key(cd, CRYPT_ANY_SLOT, key2, key_size / 2, passphrase, strlen(passphrase)), "Key does not match the volume.");
+	FAIL_(crypt_activate_by_volume_key(cd, CDEVICE_1, key2, key_size / 2, 0), "Key does not match the volume.");
+	CRYPT_FREE(cd);
+
+	_remove_keyfiles();
+	_cleanup_dmdevices();
+}
+
 // Check that gcrypt is properly initialised in format
 static void NonFIPSAlg(void)
 {
@@ -2469,6 +2548,7 @@ int main(int argc, char *argv[])
 	RUN_(WipeTest, "Wipe device");
 	RUN_(LuksKeyslotAdd, "Adding keyslot via new API");
 	RUN_(VolumeKeyGet, "Getting volume key via keyslot context API");
+	RUN_(TruncatedKeys, "Test truncated candidate keys.");
 
 	_cleanup();
 	return 0;
diff --git a/tests/compat-test b/tests/compat-test
index ed7a0d23e..b70e5b8e9 100755
--- a/tests/compat-test
+++ b/tests/compat-test
@@ -24,6 +24,8 @@ KEY1=key1
 KEY2=key2
 KEY5=key5
 KEYE=keye
+KEY_TZERO=key_trailing_zero
+KEY_HALF_ZERO=key_half_zeroes
 PWD0="compatkey"
 PWD1="93R4P4pIqAH8"
 PWD2="mymJeD8ivEhE"
@@ -57,7 +59,7 @@ remove_mapping()
 	[ -b /dev/mapper/$DEV_NAME2 ] && dmsetup remove --retry $DEV_NAME2 >/dev/null 2>&1
 	[ -b /dev/mapper/$DEV_NAME ] && dmsetup remove --retry $DEV_NAME >/dev/null 2>&1
 	losetup -d $LOOPDEV >/dev/null 2>&1
-	rm -f $ORIG_IMG $IMG $IMG10 $KEY1 $KEY2 $KEY5 $KEYE $HEADER_IMG $VK_FILE missing-file >/dev/null 2>&1
+	rm -f $ORIG_IMG $IMG $IMG10 $KEY1 $KEY2 $KEY5 $KEYE $KEY_TZERO $KEY_HALF_ZERO $HEADER_IMG $VK_FILE missing-file >/dev/null 2>&1
 	rmmod scsi_debug >/dev/null 2>&1
 	scsi_debug_teardown $DEV
 }
@@ -137,6 +139,18 @@ prepare()
 		echo -n $'\x9c\x03\x5e\x1b\x4d\x0f\x9a\x75\xb3\x90\x70\x32\x0a\xf8\xae\xc4'>>$KEY1
 	fi
 
+	if [ ! -e $KEY_TZERO ]; then
+		echo -ne '\xa6\x32\x09\x5f\xdb\xbe\xf3\xc6\xa7\x4c\xe5\x85\x73\xac\xa8\xfb' >$KEY_TZERO
+		echo -ne '\x09\xd4\x38\xfd\x58\x24\x17\x1b\x98\xa3\xef\x1e\xe4\x4b\xbc\x00'>>$KEY_TZERO
+	fi
+
+	if [ ! -e $KEY_HALF_ZERO ]; then
+		echo -ne '\xa6\x32\x09\x5f\xdb\xbe\xf3\xc6\xa7\x4c\xe5\x85\x73\xac\xa8\xfb' >$KEY_HALF_ZERO
+		echo -ne '\x09\xd4\x38\xfd\x58\x24\x17\x1b\x98\xa3\xef\x1e\xe4\x4b\xbc\xc9'>>$KEY_HALF_ZERO
+		echo -ne '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'>>$KEY_HALF_ZERO
+		echo -ne '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'>>$KEY_HALF_ZERO
+	fi
+
 	if [ ! -e $KEY2 ]; then
 		dd if=/dev/urandom of=$KEY2 count=1 bs=16 >/dev/null 2>&1
 	fi
@@ -1158,5 +1172,29 @@ echo $PWD1 | $CRYPTSETUP luksFormat --type luks1 $FAST_PBKDF_OPT $LOOPDEV || fai
 echo $PWD1 | $CRYPTSETUP luksOpen $LOOPDEV $DM_BAD_NAME 2>/dev/null && fail
 echo $PWD1 | $CRYPTSETUP luksOpen $LOOPDEV $DM_LONG_NAME 2>/dev/null && fail
 
+prepare "[41] Truncated keys." wipe
+echo "$PWD1" | $CRYPTSETUP luksFormat -q --type luks1 $FAST_PBKDF_OPT --volume-key-file $KEY_TZERO -s256 $IMG || fail
+$CRYPTSETUP open -q --test-passphrase $IMG --volume-key-file $KEY_TZERO -s248 2>/dev/null && fail
+# cut the trailing zero byte
+truncate -c -s 31 $KEY_TZERO || fail
+echo $PWD3 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S5 --volume-key-file $KEY_TZERO $IMG 2>/dev/null && fail
+$CRYPTSETUP luksErase -q $IMG || fail
+echo $PWD3 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S5 --volume-key-file $KEY_TZERO $IMG 2>/dev/null && fail
+
+echo "$PWD1" | $CRYPTSETUP luksFormat -q --type luks1 $FAST_PBKDF_OPT --volume-key-file $KEY_HALF_ZERO -s512 $IMG || fail
+$CRYPTSETUP open -q --test-passphrase $IMG --volume-key-file $KEY_HALF_ZERO -s496 2>/dev/null && fail
+$CRYPTSETUP open -q --test-passphrase $IMG --volume-key-file $KEY_HALF_ZERO -s256 2>/dev/null && fail
+# cut the trailing zero byte
+truncate -c -s 63 $KEY_HALF_ZERO || fail
+echo $PWD3 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S5 --volume-key-file $KEY_HALF_ZERO $IMG 2>/dev/null && fail
+# cut all remaining zero bytes down to 256bits key
+truncate -c -s 32 $KEY_HALF_ZERO || fail
+echo $PWD3 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S5 --volume-key-file $KEY_HALF_ZERO $IMG 2>/dev/null && fail
+$CRYPTSETUP luksErase -q $IMG || fail
+truncate -c -s 63 $KEY_HALF_ZERO || fail
+echo $PWD3 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S5 --volume-key-file $KEY_HALF_ZERO $IMG 2>/dev/null && fail
+truncate -c -s 32 $KEY_HALF_ZERO || fail
+echo $PWD3 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S5 --volume-key-file $KEY_HALF_ZERO $IMG 2>/dev/null && fail
+
 remove_mapping
 exit 0
diff --git a/tests/compat-test2 b/tests/compat-test2
index 97cb68d34..9e74cc37d 100755
--- a/tests/compat-test2
+++ b/tests/compat-test2
@@ -26,6 +26,8 @@ KEY1=key1
 KEY2=key2
 KEY5=key5
 KEYE=keye
+KEY_TZERO=key_trailing_zero
+KEY_HALF_ZERO=key_half_zeroes
 PWD0="compatkey"
 PWD1="93R4P4pIqAH8"
 PWD2="mymJeD8ivEhE"
@@ -66,7 +68,7 @@ remove_mapping()
 	[ -b /dev/mapper/$DEV_NAME2 ] && dmsetup remove --retry $DEV_NAME2
 	[ -b /dev/mapper/$DEV_NAME ] && dmsetup remove --retry $DEV_NAME
 	losetup -d $LOOPDEV >/dev/null 2>&1
-	rm -f $ORIG_IMG $IMG $IMG10 $KEY1 $KEY2 $KEY5 $KEYE $HEADER_IMG $HEADER_KEYU $VK_FILE \
+	rm -f $ORIG_IMG $IMG $IMG10 $KEY1 $KEY2 $KEY5 $KEYE $KEY_TZERO $KEY_HALF_ZERO $HEADER_IMG $HEADER_KEYU $VK_FILE \
 	$HEADER_LUKS2_PV $HEADER_LUKS2_INV missing-file $TOKEN_FILE0 $TOKEN_FILE1 test_image_* \
 	$KEY_FILE0 $KEY_FILE1 >/dev/null 2>&1
 
@@ -188,6 +190,18 @@ prepare()
 		touch $KEYE
 	fi
 
+	if [ ! -e $KEY_TZERO ]; then
+		echo -ne '\xa6\x32\x09\x5f\xdb\xbe\xf3\xc6\xa7\xac\xed\x85\x73\xac\xa8\xfb' >$KEY_TZERO
+		echo -ne '\x09\xd4\x38\xfd\x58\x24\x17\x1b\x98\xa3\xef\x1e\xe4\x4b\xbc\x00'>>$KEY_TZERO
+	fi
+
+	if [ ! -e $KEY_HALF_ZERO ]; then
+		echo -ne '\xa6\x32\x09\x5f\xdb\xbe\xf3\xc6\xa7\xac\xed\x85\x73\xac\xa8\xfb' >$KEY_HALF_ZERO
+		echo -ne '\x09\xd4\x38\xfd\x58\x24\x17\x1b\x98\xa3\xef\x1e\xe4\x4b\xbc\xc9'>>$KEY_HALF_ZERO
+		echo -ne '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'>>$KEY_HALF_ZERO
+		echo -ne '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'>>$KEY_HALF_ZERO
+	fi
+
 	cp $IMG $ORIG_IMG
 	[ -n "$1" ] && echo "CASE: $1"
 }
@@ -1735,5 +1749,35 @@ if ! fips_mode -a -d $LUKS2_LOCKING_DIR; then
 	test -f $LUKS2_LOCKING_DIR/$MEMORY_HARD_LOCK_FILE && fail "The --serialize-memory-hard-pbkdf option did not remove the locking file (did not use the file)."
 fi
 
+prepare "[53] Truncated keys." wipe
+echo "$PWD1" | $CRYPTSETUP luksFormat -q --type luks2 $FAST_PBKDF_OPT --volume-key-file $KEY_TZERO -s256 $LOOPDEV || fail
+$CRYPTSETUP open -q --test-passphrase $LOOPDEV --volume-key-file $KEY_TZERO -s248 2>/dev/null && fail
+# cut the trailing zero byte
+truncate -c -s 31 $KEY_TZERO || fail
+echo $PWD1 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT --volume-key-file $KEY_TZERO $LOOPDEV 2>/dev/null && fail
+echo $PWD3 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S5 --unbound --volume-key-file $KEY_TZERO -s248 $LOOPDEV || fail
+echo $PWD3 | $CRYPTSETUP open --test-passphrase -S5 $LOOPDEV || fail
+$CRYPTSETUP luksDump $LOOPDEV | grep -q "5: luks2 (unbound)" || fail
+
+# test (doubled) AES-256-XTS key with second half of the buffer with zero bytes
+echo "$PWD1" | $CRYPTSETUP luksFormat -q --type luks2 $FAST_PBKDF_OPT --volume-key-file $KEY_HALF_ZERO -s512 $LOOPDEV || fail
+$CRYPTSETUP open -q --test-passphrase $LOOPDEV --volume-key-file $KEY_HALF_ZERO -s504 2>/dev/null && fail
+$CRYPTSETUP open -q --test-passphrase $LOOPDEV --volume-key-file $KEY_HALF_ZERO -s256 2>/dev/null && fail
+
+# cut the trailing zero byte
+truncate -c -s 63 $KEY_HALF_ZERO || fail
+echo $PWD2 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT --volume-key-file $KEY_HALF_ZERO $LOOPDEV 2>/dev/null && fail
+echo $PWD2 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S5 --unbound --volume-key-file $KEY_HALF_ZERO -s504 $LOOPDEV || fail
+echo $PWD2 | $CRYPTSETUP open --test-passphrase -S5 $LOOPDEV || fail
+$CRYPTSETUP luksDump $LOOPDEV | grep -q "5: luks2 (unbound)" || fail
+
+# truncate entire zeroed part
+truncate -c -s 32 $KEY_HALF_ZERO || fail
+echo $PWD2 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT --volume-key-file $KEY_HALF_ZERO $LOOPDEV 2>/dev/null && fail
+echo $PWD3 | $CRYPTSETUP luksAddKey -q $FAST_PBKDF_OPT -S6 --unbound --volume-key-file $KEY_HALF_ZERO -s256 $LOOPDEV || fail
+$CRYPTSETUP luksDump $LOOPDEV | grep -q "6: luks2 (unbound)" || fail
+echo $PWD3 | $CRYPTSETUP open --test-passphrase -S6 $LOOPDEV || fail
+echo $PWD3 | $CRYPTSETUP open -S6 $LOOPDEV $DEV_NAME 2>/dev/null && fail
+
 remove_mapping
 exit 0

From 35b42abef4e5f613b0df28d679c4e4cc3a1d21a8 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 23 May 2026 17:56:48 +0200
Subject: [PATCH 124/244] fuzz: Fix build for broken json-c repo

Current json-c master branch cannot be compiled with clang,
until upstream merges the fix, use the last stable branch
for fuzzers build.
---
 tests/fuzz/oss-fuzz-build.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/fuzz/oss-fuzz-build.sh b/tests/fuzz/oss-fuzz-build.sh
index 3ef8c81cf..9a5123093 100755
--- a/tests/fuzz/oss-fuzz-build.sh
+++ b/tests/fuzz/oss-fuzz-build.sh
@@ -56,7 +56,8 @@ last_commit zlib
 [ ! -d xz ] && git clone -q --depth 1 https://github.com/tukaani-project/xz
 last_commit xz
 
-[ ! -d json-c ] && git clone -q --depth 1 https://github.com/json-c/json-c.git
+# Master branch is broken, use json-c-0.18 for now
+[ ! -d json-c ] && git clone -q --depth 1 --branch json-c-0.18 https://github.com/json-c/json-c.git
 last_commit json-c
 
 [ ! -d lvm2 ] && git clone -q --depth 1 https://gitlab.com/lvmteam/lvm2

From 645d5726345efb03126199a2e774b45152d24514 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 25 May 2026 14:11:42 +0200
Subject: [PATCH 125/244] Revert "fuzz: Fix build for broken json-c repo"

This reverts commit 35b42abef4e5f613b0df28d679c4e4cc3a1d21a8.

Fixed upstream now.
---
 tests/fuzz/oss-fuzz-build.sh | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/tests/fuzz/oss-fuzz-build.sh b/tests/fuzz/oss-fuzz-build.sh
index 9a5123093..3ef8c81cf 100755
--- a/tests/fuzz/oss-fuzz-build.sh
+++ b/tests/fuzz/oss-fuzz-build.sh
@@ -56,8 +56,7 @@ last_commit zlib
 [ ! -d xz ] && git clone -q --depth 1 https://github.com/tukaani-project/xz
 last_commit xz
 
-# Master branch is broken, use json-c-0.18 for now
-[ ! -d json-c ] && git clone -q --depth 1 --branch json-c-0.18 https://github.com/json-c/json-c.git
+[ ! -d json-c ] && git clone -q --depth 1 https://github.com/json-c/json-c.git
 last_commit json-c
 
 [ ! -d lvm2 ] && git clone -q --depth 1 https://gitlab.com/lvmteam/lvm2

From 6139f3ce461ac25b9407f5dde980161e6e08ed73 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Wed, 27 May 2026 09:56:45 +0200
Subject: [PATCH 126/244] tests: Fix systemd dump to stderr

For some reason, systemd now uses stderr for part of the
metadata dump. Just merrge stdout+stderr in test.
---
 tests/systemd-test-plugin | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/systemd-test-plugin b/tests/systemd-test-plugin
index 9ddc4afc8..3079b3c72 100755
--- a/tests/systemd-test-plugin
+++ b/tests/systemd-test-plugin
@@ -177,7 +177,7 @@ echo $PASSWD | $CRYPTSETUP luksFormat --type luks2 $FAST_PBKDF_OPT $IMG --force-
 echo "Enrolling the device to TPM 2 using systemd-cryptenroll.."
 LD_PRELOAD="$LD_PRELOAD:$CRYPTENROLL_LD_PRELOAD" PASSWORD="$PASSWD" $SYSTEMD_CRYPTENROLL $IMG --tpm2-device=$TPM_PATH >/dev/null 2>&1
 
-$CRYPTSETUP luksDump $CRYPTSETUP_EXTERNAL_PATH_PARAM $IMG | grep -q "tpm2-blob" || fail "Failed to dump $IMG using systemd_tpm2 token (no tpm2-blob in output)."
+$CRYPTSETUP luksDump $CRYPTSETUP_EXTERNAL_PATH_PARAM $IMG 2>&1 | grep -q "tpm2-blob" || fail "Failed to dump $IMG using systemd_tpm2 token (no tpm2-blob in output)."
 echo "Activating the device via TPM2 external token.."
 $CRYPTSETUP open $CRYPTSETUP_EXTERNAL_PATH_PARAM --token-only $IMG $MAP >/dev/null 2>&1 || fail "Failed to open $IMG using systemd_tpm2 token."
 $CRYPTSETUP close $MAP >/dev/null 2>&1 || fail "Failed to close $MAP."

From 2397e92d37d84552ed299e258644959f9e31fb74 Mon Sep 17 00:00:00 2001
From: Anton Lundin <glance@ac2.se>
Date: Mon, 1 Jun 2026 22:37:01 +0200
Subject: [PATCH 127/244] Add mbedtls to PKGMODULES

When cryptsetup is built with --with-crypto_backend=mbedtls, the
pkg-config file for libcryptsetup should include mbedtls.
---
 configure.ac | 1 +
 1 file changed, 1 insertion(+)

diff --git a/configure.ac b/configure.ac
index 52ddf11b3..260b0ab6f 100644
--- a/configure.ac
+++ b/configure.ac
@@ -741,6 +741,7 @@ case $with_crypto_backend in
 	openssl) PKGMODULES="$PKGMODULES openssl" ;;
 	nss)     PKGMODULES="$PKGMODULES nss" ;;
 	nettle)  PKGMODULES="$PKGMODULES nettle" ;;
+	mbedtls) PKGMODULES="$PKGMODULES mbedtls" ;;
 esac
 if test "x$enable_libargon2" = "xyes"; then
 	PKGMODULES="$PKGMODULES libargon2"

From 2a3734b2f013a090dab7edb0cb002defeefb5533 Mon Sep 17 00:00:00 2001
From: Kristina Hanicova <khanicov@redhat.com>
Date: Fri, 17 Apr 2026 15:59:54 +0200
Subject: [PATCH 128/244] Add API reporting default cryptographic values

Function crypt_get_device_defaults() fills the structure
crypt_device_defaults with default cryptographic values for LUKS
devices.

Fixes: #788
---
 lib/libcryptsetup.h   | 28 ++++++++++++++++++++++++++++
 lib/libcryptsetup.sym |  1 +
 lib/setup.c           | 19 +++++++++++++++++++
 tests/api-test-2.c    | 33 +++++++++++++++++++++++++++++++++
 4 files changed, 81 insertions(+)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index 3e312773b..cb4ed79a0 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -434,6 +434,34 @@ const char *crypt_get_type(struct crypt_device *cd);
  */
 const char *crypt_get_default_type(void);
 
+/**
+ * Structure representing default cryptographic parameters for a device type.
+ *
+ * @see crypt_get_type_defaults
+ */
+struct crypt_type_defaults {
+	const char *cipher;       /**< cipher algorithm (e.g., "aes") */
+	const char *cipher_mode;  /**< cipher_mode cipher mode and IV (e.g. "xts-plain64") */
+	const char *hash;         /**< hash algorithm */
+	uint32_t key_size;        /**< key size in bits */
+
+	/* LUKS2 Authenticated Encryption (AEAD) specific */
+	const char *integrity;    /**< integrity algorithm or @e NULL */
+	uint32_t tag_size;        /**< authentication tag size in bytes or @e 0 */
+};
+
+/**
+ * Get default cryptographic values for a specific device type.
+ *
+ * @param type requested type (CRYPT_LUKS1 or CRYPT_LUKS2)
+ * @param defaults pointer to the structure to be filled
+ *
+ * @return @e 0 on success or negative errno value otherwise.
+ *
+ * @note Available for CRYPT_LUKS1 and CRYPT_LUKS2 only.
+ */
+int crypt_get_type_defaults(const char *type, struct crypt_type_defaults *defaults);
+
 /**
  * @defgroup crypt-hw-encryption-types HW encryption type
  * @addtogroup crypt-hw-encryption-types
diff --git a/lib/libcryptsetup.sym b/lib/libcryptsetup.sym
index 5c2192b32..51f0bfef7 100644
--- a/lib/libcryptsetup.sym
+++ b/lib/libcryptsetup.sym
@@ -201,4 +201,5 @@ CRYPTSETUP_2.9 {
 		crypt_get_verity_repaired;
 		crypt_get_hw_opal_sum_enabled;
 		crypt_status_hw_encryption;
+		crypt_get_type_defaults;
 } CRYPTSETUP_2.8;
diff --git a/lib/setup.c b/lib/setup.c
index 1ed7387f4..7281415c7 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -6834,6 +6834,25 @@ const char *crypt_get_default_type(void)
 	return DEFAULT_LUKS_FORMAT;
 }
 
+int crypt_get_type_defaults(const char *type, struct crypt_type_defaults *defaults)
+{
+	if (!type || !isLUKS(type) || !defaults)
+		return -EINVAL;
+
+	memset(defaults, 0, sizeof(*defaults));
+
+	defaults->cipher = DEFAULT_LUKS1_CIPHER;
+	defaults->cipher_mode = DEFAULT_LUKS1_MODE;
+	defaults->hash = DEFAULT_LUKS1_HASH;
+	defaults->key_size = DEFAULT_LUKS1_KEYBITS;
+
+	if (isLUKS2(type)) {
+		defaults->integrity = "hmac-sha256";
+		defaults->tag_size = 32;
+	}
+	return 0;
+}
+
 int crypt_get_hw_encryption_type(struct crypt_device *cd)
 {
 	if (!cd)
diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index 34525f978..e11841d2f 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -3193,6 +3193,38 @@ static void Pbkdf(void)
 	_cleanup_dmdevices();
 }
 
+static void TypeDefaults(void)
+{
+	struct crypt_type_defaults defaults;
+
+	// test valid LUKS1 defaults
+	OK_(crypt_get_type_defaults(CRYPT_LUKS1, &defaults));
+	OK_(strcmp(defaults.cipher, DEFAULT_LUKS1_CIPHER));
+	OK_(strcmp(defaults.cipher_mode, DEFAULT_LUKS1_MODE));
+	OK_(strcmp(defaults.hash, default_luks1_hash));
+	EQ_(defaults.key_size, DEFAULT_LUKS1_KEYBITS);
+	NULL_(defaults.integrity);
+	EQ_(defaults.tag_size, 0);
+
+	// test valid LUKS2 defaults
+	OK_(crypt_get_type_defaults(CRYPT_LUKS2, &defaults));
+	OK_(strcmp(defaults.cipher, DEFAULT_LUKS1_CIPHER));
+	OK_(strcmp(defaults.cipher_mode, DEFAULT_LUKS1_MODE));
+	OK_(strcmp(defaults.hash, default_luks1_hash));
+	EQ_(defaults.key_size, DEFAULT_LUKS1_KEYBITS);
+	OK_(strcmp(defaults.integrity, "hmac-sha256"));
+	EQ_(defaults.tag_size, 32);
+
+	// test invalid type (non-LUKS)
+	FAIL_(crypt_get_type_defaults(CRYPT_PLAIN, &defaults), "Invalid type");
+	FAIL_(crypt_get_type_defaults(CRYPT_LOOPAES, &defaults), "Invalid type");
+	FAIL_(crypt_get_type_defaults(CRYPT_VERITY, &defaults), "Invalid type");
+
+	// test NULL pointer
+	FAIL_(crypt_get_type_defaults(NULL, &defaults), "Invalid type");
+	FAIL_(crypt_get_type_defaults(CRYPT_LUKS1, NULL), "NULL defaults pointer");
+}
+
 static void Luks2KeyslotAdd(void)
 {
 	char key[128], key2[128], key_ret[128];
@@ -6325,6 +6357,7 @@ int main(int argc, char *argv[])
 	RUN_(TokenActivationByKeyring, "Builtin kernel keyring token");
 	RUN_(LuksConvert, "LUKS1 <-> LUKS2 conversions");
 	RUN_(Pbkdf, "Default PBKDF manipulation routines");
+	RUN_(TypeDefaults, "Device type default cryptographic parameters");
 	RUN_(Luks2KeyslotParams, "Add a new keyslot with different encryption");
 	RUN_(Luks2KeyslotAdd, "Add a new keyslot by unused key");
 	RUN_(Luks2ActivateByKeyring, "LUKS2 activation by passphrase in keyring");

From 87faff225cd2eb00619f5caf9f04a2da440513f6 Mon Sep 17 00:00:00 2001
From: Kristina Hanicova <khanicov@redhat.com>
Date: Thu, 23 Apr 2026 16:47:03 +0200
Subject: [PATCH 129/244] help: use crypt_device_defaults

---
 src/cryptsetup.c | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index bc4cc3722..853de5cb3 100644
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -3537,6 +3537,8 @@ static void help(poptContext popt_context,
 		struct action_type *action;
 		const struct crypt_pbkdf_type *pbkdf_luks1, *pbkdf_luks2;
 
+		struct crypt_type_defaults luks_defaults = {};
+
 		tools_package_version(PACKAGE_NAME, true);
 		poptPrintHelp(popt_context, stdout, 0);
 
@@ -3580,13 +3582,15 @@ static void help(poptContext popt_context,
 			 pbkdf_luks2->type, pbkdf_luks2->time_ms, pbkdf_luks2->max_memory_kb,
 			 pbkdf_luks2->parallel_threads);
 
+		crypt_get_type_defaults(CRYPT_LUKS1, &luks_defaults);
+
 		log_std(_("\nDefault compiled-in device cipher parameters:\n"
 			 "\tloop-AES: %s, Key %d bits\n"
 			 "\tplain: %s, Key: %d bits, Password hashing: %s\n"
-			 "\tLUKS: %s, Key: %d bits, LUKS header hashing: %s, RNG: %s\n"),
+			 "\tLUKS: %s-%s, Key: %d bits, LUKS header hashing: %s, RNG: %s\n"),
 			 DEFAULT_LOOPAES_CIPHER, DEFAULT_LOOPAES_KEYBITS,
 			 DEFAULT_CIPHER(PLAIN), DEFAULT_PLAIN_KEYBITS, DEFAULT_PLAIN_HASH,
-			 DEFAULT_CIPHER(LUKS1), DEFAULT_LUKS1_KEYBITS, DEFAULT_LUKS1_HASH,
+			 luks_defaults.cipher, luks_defaults.cipher_mode, luks_defaults.key_size, luks_defaults.hash,
 			 DEFAULT_RNG);
 #if ENABLE_LUKS_ADJUST_XTS_KEYSIZE && DEFAULT_LUKS1_KEYBITS != 512
 		log_std(_("\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"));

From f32f13dd8bf89b2a3d91b8d790fabc28b18dba95 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sun, 24 May 2026 21:14:58 +0200
Subject: [PATCH 130/244] Include storage wrappers header only where needed.

---
 lib/internal.h              | 1 -
 lib/luks2/luks2_reencrypt.c | 1 +
 2 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/internal.h b/lib/internal.h
index 56efa46b2..bedc5d9f2 100644
--- a/lib/internal.h
+++ b/lib/internal.h
@@ -29,7 +29,6 @@
 #include "utils_keyring.h"
 #include "utils_io.h"
 #include "crypto_backend/crypto_backend.h"
-#include "utils_storage_wrappers.h"
 
 #include "libcryptsetup.h"
 
diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index 1845a7824..d06d579ef 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -9,6 +9,7 @@
 #include "luks2_internal.h"
 #include "utils_device_locking.h"
 #include "keyslot_context.h"
+#include "utils_storage_wrappers.h"
 
 struct luks2_reencrypt {
 	/* reencryption window attributes */

From a83069184cc15465ee78bf46fdb4989202b3f66c Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sun, 24 May 2026 21:15:53 +0200
Subject: [PATCH 131/244] Add prefix to storage wrapper flags and dremove
 unused DISABLE_USPACE

Userspace wrapper must be always enabled anyway.
---
 lib/luks2/luks2_reencrypt.c  | 6 +++---
 lib/utils_storage_wrappers.c | 8 ++++----
 lib/utils_storage_wrappers.h | 9 ++++-----
 3 files changed, 11 insertions(+), 12 deletions(-)

diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index d06d579ef..0f80eff24 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -1411,7 +1411,7 @@ static int reencrypt_init_storage_wrappers(struct crypt_device *cd,
 {
 	int r;
 	struct volume_key *vk;
-	uint32_t wrapper_flags = (getuid() || geteuid()) ? 0 : DISABLE_KCAPI;
+	uint32_t wrapper_flags = (getuid() || geteuid()) ? 0 : CSW_DISABLE_KCAPI;
 
 	vk = crypt_volume_key_by_id(vks, rh->digest_old);
 	r = crypt_storage_wrapper_init(cd, &rh->cw1, crypt_data_device(cd),
@@ -1419,12 +1419,12 @@ static int reencrypt_init_storage_wrappers(struct crypt_device *cd,
 			crypt_get_iv_offset(cd),
 			reencrypt_get_sector_size_old(hdr),
 			reencrypt_segment_cipher_old(hdr),
-			vk, wrapper_flags | OPEN_READONLY);
+			vk, wrapper_flags | CSW_OPEN_READONLY);
 	if (r) {
 		log_err(cd, _("Failed to initialize old segment storage wrapper."));
 		return r;
 	}
-	rh->wflags1 = wrapper_flags | OPEN_READONLY;
+	rh->wflags1 = wrapper_flags | CSW_OPEN_READONLY;
 	log_dbg(cd, "Old cipher storage wrapper type: %d.", crypt_storage_wrapper_get_type(rh->cw1));
 
 	vk = crypt_volume_key_by_id(vks, rh->digest_new);
diff --git a/lib/utils_storage_wrappers.c b/lib/utils_storage_wrappers.c
index 9b25b71ef..1104f204d 100644
--- a/lib/utils_storage_wrappers.c
+++ b/lib/utils_storage_wrappers.c
@@ -51,11 +51,11 @@ static int crypt_storage_backend_init(struct crypt_device *cd,
 	/* iv_start, sector_size */
 	r = crypt_storage_init(&s, sector_size, cipher, cipher_mode,
 			       crypt_volume_key_get_key(vk),
-			       crypt_volume_key_length(vk), flags & LARGE_IV);
+			       crypt_volume_key_length(vk), flags & CSW_LARGE_IV);
 	if (r)
 		return r;
 
-	if ((flags & DISABLE_KCAPI) && crypt_storage_kernel_only(s)) {
+	if ((flags & CSW_DISABLE_KCAPI) && crypt_storage_kernel_only(s)) {
 		log_dbg(cd, "Could not initialize userspace block cipher and kernel fallback is disabled.");
 		crypt_storage_destroy(s);
 		return -ENOTSUP;
@@ -159,7 +159,7 @@ int crypt_storage_wrapper_init(struct crypt_device *cd,
 	if (crypt_parse_name_and_mode(cipher, _cipher, NULL, mode))
 		return -EINVAL;
 
-	open_flags = O_CLOEXEC | ((flags & OPEN_READONLY) ? O_RDONLY : O_RDWR);
+	open_flags = O_CLOEXEC | ((flags & CSW_OPEN_READONLY) ? O_RDONLY : O_RDWR);
 
 	w = malloc(sizeof(*w));
 	if (!w)
@@ -202,7 +202,7 @@ int crypt_storage_wrapper_init(struct crypt_device *cd,
 
 	log_dbg(cd, "Failed to initialize userspace block cipher.");
 
-	if ((r != -ENOTSUP && r != -ENOENT) || (flags & DISABLE_DMCRYPT))
+	if ((r != -ENOTSUP && r != -ENOENT) || (flags & CSW_DISABLE_DMCRYPT))
 		goto err;
 
 	r = crypt_storage_dmcrypt_init(cd, w, device, data_offset >> SECTOR_SHIFT, iv_start,
diff --git a/lib/utils_storage_wrappers.h b/lib/utils_storage_wrappers.h
index 86986f407..6d2959f2b 100644
--- a/lib/utils_storage_wrappers.h
+++ b/lib/utils_storage_wrappers.h
@@ -17,11 +17,10 @@ struct device;
 struct volume_key;
 struct crypt_device;
 
-#define DISABLE_USPACE	(1 << 0)
-#define DISABLE_KCAPI	(1 << 1)
-#define DISABLE_DMCRYPT	(1 << 2)
-#define OPEN_READONLY	(1 << 3)
-#define LARGE_IV	(1 << 4)
+#define CSW_DISABLE_KCAPI   (1 << 0)
+#define CSW_DISABLE_DMCRYPT (1 << 1)
+#define CSW_OPEN_READONLY   (1 << 2)
+#define CSW_LARGE_IV        (1 << 3)
 
 typedef enum {
 	NONE = 0,

From 095fff15737f26348bc6313985ec2208bf098ff3 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sun, 24 May 2026 21:30:28 +0200
Subject: [PATCH 132/244] Add fallback to dmcrypt in LUKS21 keyslot processing

Basically just use existing storage wrapper.

The change need locked access to device.
---
 lib/luks2/luks2_keyslot_luks2.c | 126 ++++++++++++--------------------
 lib/utils_storage_wrappers.c    |   5 +-
 lib/utils_storage_wrappers.h    |   1 +
 3 files changed, 52 insertions(+), 80 deletions(-)

diff --git a/lib/luks2/luks2_keyslot_luks2.c b/lib/luks2/luks2_keyslot_luks2.c
index 119fe6478..92b4788e2 100644
--- a/lib/luks2/luks2_keyslot_luks2.c
+++ b/lib/luks2/luks2_keyslot_luks2.c
@@ -8,6 +8,7 @@
 
 #include <limits.h>
 #include "luks2_internal.h"
+#include "utils_storage_wrappers.h"
 
 /* FIXME: move keyslot encryption to crypto backend */
 #include "../luks1/af.h"
@@ -20,100 +21,73 @@
 
 /* coverity[ -taint_source : arg-0 ] */
 static int luks2_encrypt_to_storage(char *src, size_t srcLength,
-	const char *cipher, const char *cipher_mode,
-	struct volume_key *vk, unsigned int sector,
+	const char *cipher,
+	struct volume_key *vk, uint64_t offset,
 	struct crypt_device *cd)
 {
-	struct crypt_storage *s;
-	int devfd, r;
 	struct device *device = crypt_metadata_device(cd);
+	struct crypt_storage_wrapper *csw;
+	uint32_t csw_flags = CSW_OPEN_LOCKED;
+	ssize_t written;
+	int r;
 
-	/* Only whole sector writes supported */
-	if (MISALIGNED_512(srcLength))
-		return -EINVAL;
-
-	/* Encrypt buffer */
-	r = crypt_storage_init(&s, SECTOR_SIZE, cipher, cipher_mode,
-			       crypt_volume_key_get_key(vk), crypt_volume_key_length(vk), false);
-	if (r) {
-		log_err(cd, _("Cannot use %s-%s cipher for keyslot encryption."), cipher, cipher_mode);
-		return r;
-	}
+	/* dm-crypt backend requires root access */
+	if (getuid() || geteuid())
+		csw_flags |= CSW_DISABLE_DMCRYPT;
 
-	r = crypt_storage_encrypt(s, 0, srcLength, src);
-	crypt_storage_destroy(s);
+	r = crypt_storage_wrapper_init(cd, &csw, device, offset, 0, SECTOR_SIZE, cipher, vk, csw_flags);
 	if (r) {
-		log_err(cd, _("IO error while encrypting keyslot."));
+		log_err(cd, _("Cannot use %s cipher for keyslot encryption."), cipher);
 		return r;
 	}
 
-	devfd = device_open_locked(cd, device, O_RDWR);
-	if (devfd >= 0) {
-		if (write_lseek_blockwise(devfd, device_block_size(cd, device),
-					  device_alignment(device), src,
-					  srcLength, sector * SECTOR_SIZE) < 0)
-			r = -EIO;
-		else
-			r = 0;
-
-		device_sync(cd, device);
-	} else
+	written = crypt_storage_wrapper_encrypt_write(csw, 0, src, srcLength);
+	if (written < 0 || (size_t)written != srcLength) {
 		r = -EIO;
-
-	if (r)
 		log_err(cd, _("IO error while encrypting keyslot."));
+	} else
+		r = 0;
 
+	crypt_storage_wrapper_destroy(csw);
 	return r;
 }
 
 static int luks2_decrypt_from_storage(char *dst, size_t dstLength,
-	const char *cipher, const char *cipher_mode, struct volume_key *vk,
-	unsigned int sector, struct crypt_device *cd)
+	const char *cipher, struct volume_key *vk,
+	uint64_t offset, struct crypt_device *cd)
 {
 	struct device *device = crypt_metadata_device(cd);
-	struct crypt_storage *s;
-	int devfd, r;
+	struct crypt_storage_wrapper *csw;
+	uint32_t csw_flags = CSW_OPEN_LOCKED | CSW_OPEN_READONLY;
+	ssize_t read;
+	int r;
 
-	/* Only whole sector writes supported */
-	if (MISALIGNED_512(dstLength))
-		return -EINVAL;
+	/* dm-crypt backend requires root access */
+	if (getuid() || geteuid())
+		csw_flags |= CSW_DISABLE_DMCRYPT;
 
-	r = crypt_storage_init(&s, SECTOR_SIZE, cipher, cipher_mode,
-			       crypt_volume_key_get_key(vk),
-			       crypt_volume_key_length(vk), false);
+	r = device_read_lock(cd, device);
 	if (r) {
-		log_err(cd, _("Cannot use %s-%s cipher for keyslot encryption."), cipher, cipher_mode);
+		log_err(cd, _("Failed to acquire read lock on device %s."), device_path(device));
 		return r;
 	}
 
-	r = device_read_lock(cd, device);
+	r = crypt_storage_wrapper_init(cd, &csw, device, offset, 0, SECTOR_SIZE, cipher, vk, csw_flags);
 	if (r) {
-		log_err(cd, _("Failed to acquire read lock on device %s."),
-			device_path(device));
-		crypt_storage_destroy(s);
+		log_err(cd, _("Cannot use %s cipher for keyslot encryption."), cipher);
+		device_read_unlock(cd, device);
 		return r;
 	}
 
-	devfd = device_open_locked(cd, device, O_RDONLY);
-	if (devfd >= 0) {
-		if (read_lseek_blockwise(devfd, device_block_size(cd, device),
-					 device_alignment(device), dst,
-					 dstLength, sector * SECTOR_SIZE) < 0)
-			r = -EIO;
-		else
-			r = 0;
-	} else
+	read = crypt_storage_wrapper_read_decrypt(csw, 0, dst, dstLength);
+	if (read < 0 || (size_t)read != dstLength) {
 		r = -EIO;
-
-	device_read_unlock(cd, device);
-
-	/* Decrypt buffer */
-	if (!r)
-		r = crypt_storage_decrypt(s, 0, dstLength, dst);
-	else
 		log_err(cd, _("IO error while decrypting keyslot."));
+	} else
+		r = 0;
 
-	crypt_storage_destroy(s);
+	device_read_unlock(cd, device);
+	crypt_storage_wrapper_destroy(csw);
 	return r;
 }
 
@@ -177,9 +151,9 @@ static int luks2_keyslot_set_key(struct crypt_device *cd,
 	const char *password, size_t passwordLen,
 	const char *volume_key, size_t volume_key_len)
 {
-	char *salt = NULL, cipher[MAX_CIPHER_LEN], cipher_mode[MAX_CIPHER_LEN];
+	char *salt = NULL;
 	char *AfKey = NULL;
-	const char *af_hash = NULL;
+	const char *af_hash = NULL, *cipher;
 	size_t AFEKSize, keyslot_key_len;
 	json_object *jobj2, *jobj_kdf, *jobj_af, *jobj_area;
 	uint64_t area_offset;
@@ -205,9 +179,7 @@ static int luks2_keyslot_set_key(struct crypt_device *cd,
 
 	if (!json_object_object_get_ex(jobj_area, "encryption", &jobj2))
 		return -EINVAL;
-	r = crypt_parse_name_and_mode(json_object_get_string(jobj2), cipher, NULL, cipher_mode);
-	if (r < 0)
-		return r;
+	cipher = json_object_get_string(jobj2);
 
 	if (!json_object_object_get_ex(jobj_area, "key_size", &jobj2))
 		return -EINVAL;
@@ -272,9 +244,8 @@ static int luks2_keyslot_set_key(struct crypt_device *cd,
 	}
 
 	log_dbg(cd, "Updating keyslot area [0x%04" PRIx64 "].", area_offset);
-	/* FIXME: sector_offset should be size_t, fix LUKS_encrypt... accordingly */
-	r = luks2_encrypt_to_storage(AfKey, AFEKSize, cipher, cipher_mode,
-			    derived_vk, (unsigned)(area_offset / SECTOR_SIZE), cd);
+
+	r = luks2_encrypt_to_storage(AfKey, AFEKSize, cipher, derived_vk, area_offset, cd);
 out:
 	crypt_safe_free(AfKey);
 	crypt_safe_free(derived_key);
@@ -293,8 +264,8 @@ static int luks2_keyslot_get_key(struct crypt_device *cd,
 	struct crypt_pbkdf_type pbkdf;
 	char *AfKey = NULL;
 	size_t AFEKSize;
-	const char *af_hash = NULL;
-	char *salt = NULL, cipher[MAX_CIPHER_LEN], cipher_mode[MAX_CIPHER_LEN];
+	const char *af_hash = NULL, *cipher;
+	char *salt = NULL;
 	json_object *jobj2, *jobj_af, *jobj_area;
 	uint64_t area_offset;
 	size_t keyslot_key_len;
@@ -317,9 +288,8 @@ static int luks2_keyslot_get_key(struct crypt_device *cd,
 
 	if (!json_object_object_get_ex(jobj_area, "encryption", &jobj2))
 		return -EINVAL;
-	r = crypt_parse_name_and_mode(json_object_get_string(jobj2), cipher, NULL, cipher_mode);
-	if (r < 0)
-		return r;
+
+	cipher = json_object_get_string(jobj2);
 
 	/* Allow only empty passphrase with null cipher */
 	if (crypt_is_cipher_null(cipher) && passwordLen)
@@ -380,10 +350,8 @@ static int luks2_keyslot_get_key(struct crypt_device *cd,
 	}
 
 	log_dbg(cd, "Reading keyslot area [0x%04" PRIx64 "].", area_offset);
-	/* FIXME: sector_offset should be size_t, fix LUKS_decrypt... accordingly */
-	r = luks2_decrypt_from_storage(AfKey, AFEKSize, cipher, cipher_mode,
-			      derived_vk, (unsigned)(area_offset / SECTOR_SIZE), cd);
 
+	r = luks2_decrypt_from_storage(AfKey, AFEKSize, cipher, derived_vk, area_offset, cd);
 	if (r == 0) {
 		r = crypt_hash_size(af_hash);
 		if (r < 0)
diff --git a/lib/utils_storage_wrappers.c b/lib/utils_storage_wrappers.c
index 1104f204d..7a2420859 100644
--- a/lib/utils_storage_wrappers.c
+++ b/lib/utils_storage_wrappers.c
@@ -175,7 +175,10 @@ int crypt_storage_wrapper_init(struct crypt_device *cd,
 		goto err;
 	}
 
-	w->dev_fd = device_open(cd, device, open_flags);
+	if (flags & CSW_OPEN_LOCKED)
+		w->dev_fd = device_open_locked(cd, device, open_flags);
+	else
+		w->dev_fd = device_open(cd, device, open_flags);
 	if (w->dev_fd < 0) {
 		r = -EINVAL;
 		goto err;
diff --git a/lib/utils_storage_wrappers.h b/lib/utils_storage_wrappers.h
index 6d2959f2b..23a963070 100644
--- a/lib/utils_storage_wrappers.h
+++ b/lib/utils_storage_wrappers.h
@@ -21,6 +21,7 @@ struct crypt_device;
 #define CSW_DISABLE_DMCRYPT (1 << 1)
 #define CSW_OPEN_READONLY   (1 << 2)
 #define CSW_LARGE_IV        (1 << 3)
+#define CSW_OPEN_LOCKED     (1 << 4)
 
 typedef enum {
 	NONE = 0,

From fb6b9480fa519c70366d6743ec84cb0f3afcc8c7 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 6 Jun 2026 22:32:07 +0200
Subject: [PATCH 133/244] Update copyright for 2026.

---
 docs/examples/crypt_log_usage.c              | 2 +-
 docs/examples/crypt_luks_usage.c             | 2 +-
 lib/bitlk/bitlk.c                            | 6 +++---
 lib/bitlk/bitlk.h                            | 6 +++---
 lib/crypt_plain.c                            | 4 ++--
 lib/crypto_backend/argon2_generic.c          | 4 ++--
 lib/crypto_backend/base64.c                  | 2 +-
 lib/crypto_backend/cipher_check.c            | 4 ++--
 lib/crypto_backend/cipher_generic.c          | 4 ++--
 lib/crypto_backend/crypto_backend.h          | 4 ++--
 lib/crypto_backend/crypto_backend_internal.h | 4 ++--
 lib/crypto_backend/crypto_cipher_kernel.c    | 4 ++--
 lib/crypto_backend/crypto_gcrypt.c           | 4 ++--
 lib/crypto_backend/crypto_kernel.c           | 4 ++--
 lib/crypto_backend/crypto_nettle.c           | 4 ++--
 lib/crypto_backend/crypto_nss.c              | 4 ++--
 lib/crypto_backend/crypto_openssl.c          | 4 ++--
 lib/crypto_backend/crypto_storage.c          | 2 +-
 lib/crypto_backend/memutils.c                | 2 +-
 lib/crypto_backend/pbkdf2_generic.c          | 4 ++--
 lib/crypto_backend/pbkdf_check.c             | 4 ++--
 lib/crypto_backend/utf8.c                    | 2 +-
 lib/integrity/integrity.c                    | 2 +-
 lib/integrity/integrity.h                    | 2 +-
 lib/internal.h                               | 4 ++--
 lib/keyslot_context.c                        | 4 ++--
 lib/keyslot_context.h                        | 4 ++--
 lib/libcryptsetup.h                          | 4 ++--
 lib/libcryptsetup_macros.h                   | 4 ++--
 lib/libcryptsetup_symver.h                   | 2 +-
 lib/libdevmapper.c                           | 4 ++--
 lib/loopaes/loopaes.c                        | 4 ++--
 lib/loopaes/loopaes.h                        | 4 ++--
 lib/luks1/af.c                               | 2 +-
 lib/luks1/af.h                               | 2 +-
 lib/luks1/keyencryption.c                    | 4 ++--
 lib/luks1/keymanage.c                        | 4 ++--
 lib/luks1/luks.h                             | 2 +-
 lib/luks2/hw_opal/hw_opal.c                  | 4 ++--
 lib/luks2/hw_opal/hw_opal.h                  | 4 ++--
 lib/luks2/luks2.h                            | 4 ++--
 lib/luks2/luks2_digest.c                     | 4 ++--
 lib/luks2/luks2_digest_pbkdf2.c              | 4 ++--
 lib/luks2/luks2_disk_metadata.c              | 4 ++--
 lib/luks2/luks2_internal.h                   | 4 ++--
 lib/luks2/luks2_json_format.c                | 4 ++--
 lib/luks2/luks2_json_metadata.c              | 6 +++---
 lib/luks2/luks2_keyslot.c                    | 4 ++--
 lib/luks2/luks2_keyslot_luks2.c              | 4 ++--
 lib/luks2/luks2_keyslot_reenc.c              | 4 ++--
 lib/luks2/luks2_luks1_convert.c              | 6 +++---
 lib/luks2/luks2_reencrypt.c                  | 4 ++--
 lib/luks2/luks2_reencrypt_digest.c           | 6 +++---
 lib/luks2/luks2_segment.c                    | 4 ++--
 lib/luks2/luks2_token.c                      | 4 ++--
 lib/luks2/luks2_token_keyring.c              | 4 ++--
 lib/random.c                                 | 2 +-
 lib/setup.c                                  | 4 ++--
 lib/tcrypt/tcrypt.c                          | 4 ++--
 lib/tcrypt/tcrypt.h                          | 4 ++--
 lib/utils.c                                  | 4 ++--
 lib/utils_benchmark.c                        | 4 ++--
 lib/utils_blkid.c                            | 2 +-
 lib/utils_blkid.h                            | 2 +-
 lib/utils_crypt.c                            | 4 ++--
 lib/utils_crypt.h                            | 4 ++--
 lib/utils_device.c                           | 4 ++--
 lib/utils_device_locking.c                   | 4 ++--
 lib/utils_device_locking.h                   | 4 ++--
 lib/utils_devpath.c                          | 4 ++--
 lib/utils_dm.h                               | 4 ++--
 lib/utils_io.c                               | 4 ++--
 lib/utils_io.h                               | 4 ++--
 lib/utils_keyring.c                          | 4 ++--
 lib/utils_keyring.h                          | 4 ++--
 lib/utils_loop.c                             | 4 ++--
 lib/utils_loop.h                             | 4 ++--
 lib/utils_pbkdf.c                            | 4 ++--
 lib/utils_safe_memory.c                      | 4 ++--
 lib/utils_storage_wrappers.c                 | 2 +-
 lib/utils_storage_wrappers.h                 | 2 +-
 lib/utils_wipe.c                             | 4 ++--
 lib/verity/rs.h                              | 2 +-
 lib/verity/rs_decode_char.c                  | 2 +-
 lib/verity/rs_encode_char.c                  | 2 +-
 lib/verity/verity.c                          | 2 +-
 lib/verity/verity.h                          | 2 +-
 lib/verity/verity_fec.c                      | 2 +-
 lib/verity/verity_hash.c                     | 2 +-
 lib/volumekey.c                              | 2 +-
 src/cryptsetup.c                             | 4 ++--
 src/cryptsetup.h                             | 4 ++--
 src/cryptsetup_arg_list.h                    | 4 ++--
 src/cryptsetup_args.h                        | 4 ++--
 src/integritysetup.c                         | 4 ++--
 src/integritysetup_arg_list.h                | 4 ++--
 src/integritysetup_args.h                    | 4 ++--
 src/utils_arg_macros.h                       | 4 ++--
 src/utils_arg_names.h                        | 4 ++--
 src/utils_args.c                             | 4 ++--
 src/utils_blockdev.c                         | 4 ++--
 src/utils_key_description.c                  | 6 +++---
 src/utils_keyslot_check.c                    | 2 +-
 src/utils_luks.c                             | 6 +++---
 src/utils_luks.h                             | 6 +++---
 src/utils_password.c                         | 4 ++--
 src/utils_progress.c                         | 4 ++--
 src/utils_reencrypt.c                        | 6 +++---
 src/utils_reencrypt_luks1.c                  | 4 ++--
 src/utils_tools.c                            | 4 ++--
 src/veritysetup.c                            | 4 ++--
 src/veritysetup_arg_list.h                   | 4 ++--
 src/veritysetup_args.h                       | 4 ++--
 tests/all-symbols-test.c                     | 2 +-
 tests/api-test-2.c                           | 6 +++---
 tests/api-test.c                             | 6 +++---
 tests/api_test.h                             | 6 +++---
 tests/crypto-check.c                         | 2 +-
 tests/crypto-vectors.c                       | 2 +-
 tests/differ.c                               | 2 +-
 tests/fuzz/crypt2_load_fuzz.cc               | 2 +-
 tests/test_utils.c                           | 4 ++--
 tests/unit-utils-crypt.c                     | 2 +-
 tests/unit-utils-io.c                        | 2 +-
 tests/unit-wipe.c                            | 2 +-
 tokens/ssh/cryptsetup-ssh.c                  | 4 ++--
 tokens/ssh/libcryptsetup-token-ssh.c         | 4 ++--
 tokens/ssh/ssh-utils.c                       | 4 ++--
 tokens/ssh/ssh-utils.h                       | 4 ++--
 129 files changed, 236 insertions(+), 236 deletions(-)

diff --git a/docs/examples/crypt_log_usage.c b/docs/examples/crypt_log_usage.c
index de8d45cb5..491bdf4c4 100644
--- a/docs/examples/crypt_log_usage.c
+++ b/docs/examples/crypt_log_usage.c
@@ -2,7 +2,7 @@
 /*
  * libcryptsetup API log example
  *
- * Copyright (C) 2011-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2011-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <stdio.h>
diff --git a/docs/examples/crypt_luks_usage.c b/docs/examples/crypt_luks_usage.c
index 784d36827..8c63ed53a 100644
--- a/docs/examples/crypt_luks_usage.c
+++ b/docs/examples/crypt_luks_usage.c
@@ -2,7 +2,7 @@
 /*
  *  libcryptsetup API - using LUKS device example
  *
- * Copyright (C) 2011-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2011-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <stdio.h>
diff --git a/lib/bitlk/bitlk.c b/lib/bitlk/bitlk.c
index eaba010a3..84bb1c51a 100644
--- a/lib/bitlk/bitlk.c
+++ b/lib/bitlk/bitlk.c
@@ -2,9 +2,9 @@
 /*
  * BITLK (BitLocker-compatible) volume handling
  *
- * Copyright (C) 2019-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2019-2025 Milan Broz
- * Copyright (C) 2019-2025 Vojtech Trefny
+ * Copyright (C) 2019-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2019-2026 Milan Broz
+ * Copyright (C) 2019-2026 Vojtech Trefny
  */
 
 #include <errno.h>
diff --git a/lib/bitlk/bitlk.h b/lib/bitlk/bitlk.h
index dde32bf0f..c5d44d82f 100644
--- a/lib/bitlk/bitlk.h
+++ b/lib/bitlk/bitlk.h
@@ -2,9 +2,9 @@
 /*
  * BITLK (BitLocker-compatible) header definition
  *
- * Copyright (C) 2019-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2019-2025 Milan Broz
- * Copyright (C) 2019-2025 Vojtech Trefny
+ * Copyright (C) 2019-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2019-2026 Milan Broz
+ * Copyright (C) 2019-2026 Vojtech Trefny
  */
 
 #ifndef _CRYPTSETUP_BITLK_H
diff --git a/lib/crypt_plain.c b/lib/crypt_plain.c
index 21e008efe..21f665853 100644
--- a/lib/crypt_plain.c
+++ b/lib/crypt_plain.c
@@ -3,8 +3,8 @@
  * cryptsetup plain device helper functions
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
- * Copyright (C) 2010-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2010-2025 Milan Broz
+ * Copyright (C) 2010-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2010-2026 Milan Broz
  */
 
 #include <string.h>
diff --git a/lib/crypto_backend/argon2_generic.c b/lib/crypto_backend/argon2_generic.c
index d50bb9b3f..094d0cfc0 100644
--- a/lib/crypto_backend/argon2_generic.c
+++ b/lib/crypto_backend/argon2_generic.c
@@ -2,8 +2,8 @@
 /*
  * Argon2 PBKDF2 library wrapper
  *
- * Copyright (C) 2016-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2016-2025 Milan Broz
+ * Copyright (C) 2016-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2016-2026 Milan Broz
  */
 
 #include <errno.h>
diff --git a/lib/crypto_backend/base64.c b/lib/crypto_backend/base64.c
index d9733a096..8d517c433 100644
--- a/lib/crypto_backend/base64.c
+++ b/lib/crypto_backend/base64.c
@@ -5,7 +5,7 @@
  * Copyright (C) 2010 Lennart Poettering
  *
  * cryptsetup related changes
- * Copyright (C) 2021-2025 Milan Broz
+ * Copyright (C) 2021-2026 Milan Broz
  */
 
 #include <errno.h>
diff --git a/lib/crypto_backend/cipher_check.c b/lib/crypto_backend/cipher_check.c
index d8c7a6040..336a3d981 100644
--- a/lib/crypto_backend/cipher_check.c
+++ b/lib/crypto_backend/cipher_check.c
@@ -2,8 +2,8 @@
 /*
  * Cipher performance check
  *
- * Copyright (C) 2018-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2018-2025 Milan Broz
+ * Copyright (C) 2018-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2018-2026 Milan Broz
  */
 
 #include <errno.h>
diff --git a/lib/crypto_backend/cipher_generic.c b/lib/crypto_backend/cipher_generic.c
index ab1fac064..d20e011b4 100644
--- a/lib/crypto_backend/cipher_generic.c
+++ b/lib/crypto_backend/cipher_generic.c
@@ -2,8 +2,8 @@
 /*
  * Linux kernel cipher generic utilities
  *
- * Copyright (C) 2018-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2018-2025 Milan Broz
+ * Copyright (C) 2018-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2018-2026 Milan Broz
  */
 
 #include <errno.h>
diff --git a/lib/crypto_backend/crypto_backend.h b/lib/crypto_backend/crypto_backend.h
index ea1ba3ec7..5e25bb09c 100644
--- a/lib/crypto_backend/crypto_backend.h
+++ b/lib/crypto_backend/crypto_backend.h
@@ -2,8 +2,8 @@
 /*
  * crypto backend implementation
  *
- * Copyright (C) 2010-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2010-2025 Milan Broz
+ * Copyright (C) 2010-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2010-2026 Milan Broz
  */
 
 #ifndef _CRYPTO_BACKEND_H
diff --git a/lib/crypto_backend/crypto_backend_internal.h b/lib/crypto_backend/crypto_backend_internal.h
index 532609454..e00a5fa40 100644
--- a/lib/crypto_backend/crypto_backend_internal.h
+++ b/lib/crypto_backend/crypto_backend_internal.h
@@ -2,8 +2,8 @@
 /*
  * crypto backend implementation
  *
- * Copyright (C) 2010-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2010-2025 Milan Broz
+ * Copyright (C) 2010-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2010-2026 Milan Broz
  */
 
 #ifndef _CRYPTO_BACKEND_INTERNAL_H
diff --git a/lib/crypto_backend/crypto_cipher_kernel.c b/lib/crypto_backend/crypto_cipher_kernel.c
index da5b88205..fed4ae86d 100644
--- a/lib/crypto_backend/crypto_cipher_kernel.c
+++ b/lib/crypto_backend/crypto_cipher_kernel.c
@@ -2,8 +2,8 @@
 /*
  * Linux kernel userspace API crypto backend implementation (skcipher)
  *
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2012-2025 Milan Broz
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Milan Broz
  */
 
 #include <stdlib.h>
diff --git a/lib/crypto_backend/crypto_gcrypt.c b/lib/crypto_backend/crypto_gcrypt.c
index 8e214d436..73795c4ac 100644
--- a/lib/crypto_backend/crypto_gcrypt.c
+++ b/lib/crypto_backend/crypto_gcrypt.c
@@ -2,8 +2,8 @@
 /*
  * GCRYPT crypto backend implementation
  *
- * Copyright (C) 2010-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2010-2025 Milan Broz
+ * Copyright (C) 2010-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2010-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/lib/crypto_backend/crypto_kernel.c b/lib/crypto_backend/crypto_kernel.c
index 43a4f2561..199ad6570 100644
--- a/lib/crypto_backend/crypto_kernel.c
+++ b/lib/crypto_backend/crypto_kernel.c
@@ -2,8 +2,8 @@
 /*
  * Linux kernel userspace API crypto backend implementation
  *
- * Copyright (C) 2010-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2010-2025 Milan Broz
+ * Copyright (C) 2010-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2010-2026 Milan Broz
  */
 
 #include <stdlib.h>
diff --git a/lib/crypto_backend/crypto_nettle.c b/lib/crypto_backend/crypto_nettle.c
index e1f12dd6a..eb864d638 100644
--- a/lib/crypto_backend/crypto_nettle.c
+++ b/lib/crypto_backend/crypto_nettle.c
@@ -2,8 +2,8 @@
 /*
  * Nettle crypto backend implementation
  *
- * Copyright (C) 2011-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2011-2025 Milan Broz
+ * Copyright (C) 2011-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2011-2026 Milan Broz
  */
 
 #include <stdlib.h>
diff --git a/lib/crypto_backend/crypto_nss.c b/lib/crypto_backend/crypto_nss.c
index ca989d627..a9e1faa31 100644
--- a/lib/crypto_backend/crypto_nss.c
+++ b/lib/crypto_backend/crypto_nss.c
@@ -2,8 +2,8 @@
 /*
  * NSS crypto backend implementation
  *
- * Copyright (C) 2010-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2010-2025 Milan Broz
+ * Copyright (C) 2010-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2010-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index 92dc4e501..0aff4e27d 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -2,8 +2,8 @@
 /*
  * OPENSSL crypto backend implementation
  *
- * Copyright (C) 2010-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2010-2025 Milan Broz
+ * Copyright (C) 2010-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2010-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/lib/crypto_backend/crypto_storage.c b/lib/crypto_backend/crypto_storage.c
index edd4db7dd..8991949b8 100644
--- a/lib/crypto_backend/crypto_storage.c
+++ b/lib/crypto_backend/crypto_storage.c
@@ -3,7 +3,7 @@
  * Generic wrapper for storage encryption modes and Initial Vectors
  * (reimplementation of some functions from Linux dm-crypt kernel)
  *
- * Copyright (C) 2014-2025 Milan Broz
+ * Copyright (C) 2014-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/lib/crypto_backend/memutils.c b/lib/crypto_backend/memutils.c
index a041b3e60..39a466ff3 100644
--- a/lib/crypto_backend/memutils.c
+++ b/lib/crypto_backend/memutils.c
@@ -2,7 +2,7 @@
 /*
  * Safe memory utilities
  *
- * Copyright (C) 2024-2025 Milan Broz
+ * Copyright (C) 2024-2026 Milan Broz
  */
 
 #include "crypto_backend_internal.h"
diff --git a/lib/crypto_backend/pbkdf2_generic.c b/lib/crypto_backend/pbkdf2_generic.c
index e5e5a9c7d..ccb09bc1e 100644
--- a/lib/crypto_backend/pbkdf2_generic.c
+++ b/lib/crypto_backend/pbkdf2_generic.c
@@ -5,8 +5,8 @@
  * Copyright (C) 2004 Free Software Foundation
  *
  * cryptsetup related changes
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2012-2025 Milan Broz
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Milan Broz
  */
 
 #include <errno.h>
diff --git a/lib/crypto_backend/pbkdf_check.c b/lib/crypto_backend/pbkdf_check.c
index 5eb21f331..452424036 100644
--- a/lib/crypto_backend/pbkdf_check.c
+++ b/lib/crypto_backend/pbkdf_check.c
@@ -1,8 +1,8 @@
 // SPDX-License-Identifier: LGPL-2.1-or-later
 /*
  * PBKDF performance check
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2012-2025 Milan Broz
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Milan Broz
  * Copyright (C) 2016-2020 Ondrej Mosnacek
  */
 
diff --git a/lib/crypto_backend/utf8.c b/lib/crypto_backend/utf8.c
index 1a4079afb..13528c18f 100644
--- a/lib/crypto_backend/utf8.c
+++ b/lib/crypto_backend/utf8.c
@@ -5,7 +5,7 @@
  * Copyright (C) 2010 Lennart Poettering
  *
  * cryptsetup related changes
- * Copyright (C) 2021-2025 Vojtech Trefny
+ * Copyright (C) 2021-2026 Vojtech Trefny
 
  * Parts of the original systemd implementation are based on the GLIB utf8
  * validation functions.
diff --git a/lib/integrity/integrity.c b/lib/integrity/integrity.c
index d92d97976..c1e050acf 100644
--- a/lib/integrity/integrity.c
+++ b/lib/integrity/integrity.c
@@ -2,7 +2,7 @@
 /*
  * Integrity volume handling
  *
- * Copyright (C) 2016-2025 Milan Broz
+ * Copyright (C) 2016-2026 Milan Broz
  */
 
 #include <errno.h>
diff --git a/lib/integrity/integrity.h b/lib/integrity/integrity.h
index ff1293fa4..fb0eebdf4 100644
--- a/lib/integrity/integrity.h
+++ b/lib/integrity/integrity.h
@@ -2,7 +2,7 @@
 /*
  * Integrity header definition
  *
- * Copyright (C) 2016-2025 Milan Broz
+ * Copyright (C) 2016-2026 Milan Broz
  */
 
 #ifndef _CRYPTSETUP_INTEGRITY_H
diff --git a/lib/internal.h b/lib/internal.h
index bedc5d9f2..3d88ace89 100644
--- a/lib/internal.h
+++ b/lib/internal.h
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #ifndef INTERNAL_H
diff --git a/lib/keyslot_context.c b/lib/keyslot_context.c
index 1b137823a..fee5aa539 100644
--- a/lib/keyslot_context.c
+++ b/lib/keyslot_context.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup, keyslot unlock helpers
  *
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2022-2025 Ondrej Kozina
+ * Copyright (C) 2022-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2022-2026 Ondrej Kozina
  */
 
 #include <errno.h>
diff --git a/lib/keyslot_context.h b/lib/keyslot_context.h
index a2e42b20e..c07c171eb 100644
--- a/lib/keyslot_context.h
+++ b/lib/keyslot_context.h
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup, keyslot unlock helpers
  *
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2022-2025 Ondrej Kozina
+ * Copyright (C) 2022-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2022-2026 Ondrej Kozina
  */
 
 #ifndef KEYSLOT_CONTEXT_H
diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index cb4ed79a0..6d51e9173 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 /**
diff --git a/lib/libcryptsetup_macros.h b/lib/libcryptsetup_macros.h
index 4c1bc1bdd..a2dfba3c6 100644
--- a/lib/libcryptsetup_macros.h
+++ b/lib/libcryptsetup_macros.h
@@ -2,8 +2,8 @@
 /*
  * Definitions of common constant and generic macros of libcryptsetup
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #ifndef _LIBCRYPTSETUP_MACROS_H
diff --git a/lib/libcryptsetup_symver.h b/lib/libcryptsetup_symver.h
index 6d18ab537..b42ea01e8 100644
--- a/lib/libcryptsetup_symver.h
+++ b/lib/libcryptsetup_symver.h
@@ -2,7 +2,7 @@
 /*
  * Helpers for defining versioned symbols
  *
- * Copyright (C) 2021-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2021-2026 Red Hat, Inc. All rights reserved.
  */
 
 #ifndef _LIBCRYPTSETUP_SYMVER_H
diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index 53f9bfa0c..42fc52047 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/lib/loopaes/loopaes.c b/lib/loopaes/loopaes.c
index bdd9ded7f..029468593 100644
--- a/lib/loopaes/loopaes.c
+++ b/lib/loopaes/loopaes.c
@@ -2,8 +2,8 @@
 /*
  * loop-AES compatible volume handling
  *
- * Copyright (C) 2011-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2011-2025 Milan Broz
+ * Copyright (C) 2011-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2011-2026 Milan Broz
  */
 
 #include <errno.h>
diff --git a/lib/loopaes/loopaes.h b/lib/loopaes/loopaes.h
index 425ca222e..5f7a35e60 100644
--- a/lib/loopaes/loopaes.h
+++ b/lib/loopaes/loopaes.h
@@ -2,8 +2,8 @@
 /*
  * loop-AES compatible volume handling
  *
- * Copyright (C) 2011-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2011-2025 Milan Broz
+ * Copyright (C) 2011-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2011-2026 Milan Broz
  */
 
 #ifndef _LOOPAES_H
diff --git a/lib/luks1/af.c b/lib/luks1/af.c
index 7ab153d9e..3da43e16c 100644
--- a/lib/luks1/af.c
+++ b/lib/luks1/af.c
@@ -3,7 +3,7 @@
  * AFsplitter - Anti forensic information splitter
  *
  * Copyright (C) 2004 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
  *
  * AFsplitter diffuses information over a large stripe of data,
  * therefore supporting secure data destruction.
diff --git a/lib/luks1/af.h b/lib/luks1/af.h
index 08f3757f5..6dd24450b 100644
--- a/lib/luks1/af.h
+++ b/lib/luks1/af.h
@@ -3,7 +3,7 @@
  * AFsplitter - Anti forensic information splitter
  *
  * Copyright (C) 2004 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
  */
 
 #ifndef INCLUDED_CRYPTSETUP_LUKS_AF_H
diff --git a/lib/luks1/keyencryption.c b/lib/luks1/keyencryption.c
index de8aa30e3..fa551074a 100644
--- a/lib/luks1/keyencryption.c
+++ b/lib/luks1/keyencryption.c
@@ -3,8 +3,8 @@
  * LUKS - Linux Unified Key Setup
  *
  * Copyright (C) 2004-2006 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2012-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/lib/luks1/keymanage.c b/lib/luks1/keymanage.c
index e08a3a5bc..7fb132dbc 100644
--- a/lib/luks1/keymanage.c
+++ b/lib/luks1/keymanage.c
@@ -3,8 +3,8 @@
  * LUKS - Linux Unified Key Setup
  *
  * Copyright (C) 2004-2006 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2013-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2013-2026 Milan Broz
  */
 
 #include <sys/types.h>
diff --git a/lib/luks1/luks.h b/lib/luks1/luks.h
index 80f654456..f1545f401 100644
--- a/lib/luks1/luks.h
+++ b/lib/luks1/luks.h
@@ -3,7 +3,7 @@
  * LUKS - Linux Unified Key Setup
  *
  * Copyright (C) 2004-2006 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
  */
 
 #ifndef INCLUDED_CRYPTSETUP_LUKS_LUKS_H
diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index 62e72cb35..0d14e909d 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -3,8 +3,8 @@
  * OPAL utilities
  *
  * Copyright (C) 2022-2023 Luca Boccassi <bluca@debian.org>
- * Copyright (C) 2023-2025 Ondrej Kozina <okozina@redhat.com>
- * Copyright (C) 2024-2025 Milan Broz
+ * Copyright (C) 2023-2026 Ondrej Kozina <okozina@redhat.com>
+ * Copyright (C) 2024-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/lib/luks2/hw_opal/hw_opal.h b/lib/luks2/hw_opal/hw_opal.h
index 427c598c9..0ab254d51 100644
--- a/lib/luks2/hw_opal/hw_opal.h
+++ b/lib/luks2/hw_opal/hw_opal.h
@@ -3,8 +3,8 @@
  * OPAL utilities
  *
  * Copyright (C) 2022-2023 Luca Boccassi <bluca@debian.org>
- * Copyright (C) 2023-2025 Ondrej Kozina <okozina@redhat.com>
- * Copyright (C) 2024-2025 Milan Broz
+ * Copyright (C) 2023-2026 Ondrej Kozina <okozina@redhat.com>
+ * Copyright (C) 2024-2026 Milan Broz
  */
 
 #ifndef _UTILS_OPAL
diff --git a/lib/luks2/luks2.h b/lib/luks2/luks2.h
index 50c5abe41..d4f1624cb 100644
--- a/lib/luks2/luks2.h
+++ b/lib/luks2/luks2.h
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Milan Broz
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Milan Broz
  */
 
 #ifndef _CRYPTSETUP_LUKS2_ONDISK_H
diff --git a/lib/luks2/luks2_digest.c b/lib/luks2/luks2_digest.c
index 2ced2c601..f1fdfc9e5 100644
--- a/lib/luks2/luks2_digest.c
+++ b/lib/luks2/luks2_digest.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2, digest handling
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Milan Broz
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Milan Broz
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_digest_pbkdf2.c b/lib/luks2/luks2_digest_pbkdf2.c
index e5e06eee2..ecc526342 100644
--- a/lib/luks2/luks2_digest_pbkdf2.c
+++ b/lib/luks2/luks2_digest_pbkdf2.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2, PBKDF2 digest handler (LUKS1 compatible)
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Milan Broz
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Milan Broz
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_disk_metadata.c b/lib/luks2/luks2_disk_metadata.c
index f9497b1e4..ee88b71d7 100644
--- a/lib/luks2/luks2_disk_metadata.c
+++ b/lib/luks2/luks2_disk_metadata.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Milan Broz
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Milan Broz
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_internal.h b/lib/luks2/luks2_internal.h
index 2603f0ea0..b9244ea7a 100644
--- a/lib/luks2/luks2_internal.h
+++ b/lib/luks2/luks2_internal.h
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2 (with JSON internals)
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Milan Broz
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Milan Broz
  */
 
 #ifndef _CRYPTSETUP_LUKS2_INTERNAL_H
diff --git a/lib/luks2/luks2_json_format.c b/lib/luks2/luks2_json_format.c
index 7937f77f7..9b249977f 100644
--- a/lib/luks2/luks2_json_format.c
+++ b/lib/luks2/luks2_json_format.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2, LUKS2 header format code
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Milan Broz
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Milan Broz
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_json_metadata.c b/lib/luks2/luks2_json_metadata.c
index 792d961ad..d9755c70c 100644
--- a/lib/luks2/luks2_json_metadata.c
+++ b/lib/luks2/luks2_json_metadata.c
@@ -2,9 +2,9 @@
 /*
  * LUKS - Linux Unified Key Setup v2
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Milan Broz
- * Copyright (C) 2015-2025 Ondrej Kozina
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Milan Broz
+ * Copyright (C) 2015-2026 Ondrej Kozina
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_keyslot.c b/lib/luks2/luks2_keyslot.c
index 318555794..5947fe17a 100644
--- a/lib/luks2/luks2_keyslot.c
+++ b/lib/luks2/luks2_keyslot.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2, keyslot handling
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Milan Broz
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Milan Broz
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_keyslot_luks2.c b/lib/luks2/luks2_keyslot_luks2.c
index 92b4788e2..0b7d8d4b2 100644
--- a/lib/luks2/luks2_keyslot_luks2.c
+++ b/lib/luks2/luks2_keyslot_luks2.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2, LUKS2 type keyslot handler
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Milan Broz
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Milan Broz
  */
 
 #include <limits.h>
diff --git a/lib/luks2/luks2_keyslot_reenc.c b/lib/luks2/luks2_keyslot_reenc.c
index 180ac56b8..e2806f6ae 100644
--- a/lib/luks2/luks2_keyslot_reenc.c
+++ b/lib/luks2/luks2_keyslot_reenc.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2, reencryption keyslot handler
  *
- * Copyright (C) 2016-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2016-2025 Ondrej Kozina
+ * Copyright (C) 2016-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2016-2026 Ondrej Kozina
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_luks1_convert.c b/lib/luks2/luks2_luks1_convert.c
index 73ff8c3ac..8e4d46ecb 100644
--- a/lib/luks2/luks2_luks1_convert.c
+++ b/lib/luks2/luks2_luks1_convert.c
@@ -2,9 +2,9 @@
 /*
  * LUKS - Linux Unified Key Setup v2, LUKS1 conversion code
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Ondrej Kozina
- * Copyright (C) 2015-2025 Milan Broz
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Ondrej Kozina
+ * Copyright (C) 2015-2026 Milan Broz
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index 0f80eff24..5c4cf58da 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2, reencryption helpers
  *
- * Copyright (C) 2015-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2015-2025 Ondrej Kozina
+ * Copyright (C) 2015-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2015-2026 Ondrej Kozina
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_reencrypt_digest.c b/lib/luks2/luks2_reencrypt_digest.c
index 6dd7a1478..aee907147 100644
--- a/lib/luks2/luks2_reencrypt_digest.c
+++ b/lib/luks2/luks2_reencrypt_digest.c
@@ -2,9 +2,9 @@
 /*
  * LUKS - Linux Unified Key Setup v2, reencryption digest helpers
  *
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2022-2025 Ondrej Kozina
- * Copyright (C) 2022-2025 Milan Broz
+ * Copyright (C) 2022-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2022-2026 Ondrej Kozina
+ * Copyright (C) 2022-2026 Milan Broz
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_segment.c b/lib/luks2/luks2_segment.c
index 6284ca8ba..0990f0ed2 100644
--- a/lib/luks2/luks2_segment.c
+++ b/lib/luks2/luks2_segment.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2, internal segment handling
  *
- * Copyright (C) 2018-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2018-2025 Ondrej Kozina
+ * Copyright (C) 2018-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2018-2026 Ondrej Kozina
  */
 
 #include "luks2_internal.h"
diff --git a/lib/luks2/luks2_token.c b/lib/luks2/luks2_token.c
index b924e97aa..9244a9522 100644
--- a/lib/luks2/luks2_token.c
+++ b/lib/luks2/luks2_token.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2, token handling
  *
- * Copyright (C) 2016-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2016-2025 Milan Broz
+ * Copyright (C) 2016-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2016-2026 Milan Broz
  */
 
 #include <ctype.h>
diff --git a/lib/luks2/luks2_token_keyring.c b/lib/luks2/luks2_token_keyring.c
index c8a33a526..63f6a452a 100644
--- a/lib/luks2/luks2_token_keyring.c
+++ b/lib/luks2/luks2_token_keyring.c
@@ -2,8 +2,8 @@
 /*
  * LUKS - Linux Unified Key Setup v2, kernel keyring token
  *
- * Copyright (C) 2016-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2016-2025 Ondrej Kozina
+ * Copyright (C) 2016-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2016-2026 Ondrej Kozina
  */
 
 #include "luks2_internal.h"
diff --git a/lib/random.c b/lib/random.c
index 06d2713ae..28a184a8b 100644
--- a/lib/random.c
+++ b/lib/random.c
@@ -2,7 +2,7 @@
 /*
  * cryptsetup kernel RNG access functions
  *
- * Copyright (C) 2010-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2010-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <stdlib.h>
diff --git a/lib/setup.c b/lib/setup.c
index 7281415c7..5b91c492a 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <string.h>
diff --git a/lib/tcrypt/tcrypt.c b/lib/tcrypt/tcrypt.c
index d23cc0630..9e99a6151 100644
--- a/lib/tcrypt/tcrypt.c
+++ b/lib/tcrypt/tcrypt.c
@@ -2,8 +2,8 @@
 /*
  * TCRYPT (TrueCrypt-compatible) and VeraCrypt volume handling
  *
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2012-2025 Milan Broz
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Milan Broz
  */
 
 #include <errno.h>
diff --git a/lib/tcrypt/tcrypt.h b/lib/tcrypt/tcrypt.h
index db3b723cf..266b8b8c6 100644
--- a/lib/tcrypt/tcrypt.h
+++ b/lib/tcrypt/tcrypt.h
@@ -2,8 +2,8 @@
 /*
  * TCRYPT (TrueCrypt-compatible)  header definition
  *
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2012-2025 Milan Broz
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Milan Broz
  */
 
 #ifndef _CRYPTSETUP_TCRYPT_H
diff --git a/lib/utils.c b/lib/utils.c
index afde5689d..3f5fddfe0 100644
--- a/lib/utils.c
+++ b/lib/utils.c
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/lib/utils_benchmark.c b/lib/utils_benchmark.c
index 3694f2722..7c5ca0381 100644
--- a/lib/utils_benchmark.c
+++ b/lib/utils_benchmark.c
@@ -2,8 +2,8 @@
 /*
  * libcryptsetup - cryptsetup library, cipher benchmark
  *
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2012-2025 Milan Broz
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Milan Broz
  */
 
 #include <stdlib.h>
diff --git a/lib/utils_blkid.c b/lib/utils_blkid.c
index c65d51ffa..c2bcb40ae 100644
--- a/lib/utils_blkid.c
+++ b/lib/utils_blkid.c
@@ -2,7 +2,7 @@
 /*
  * blkid probe utilities
  *
- * Copyright (C) 2018-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2018-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <errno.h>
diff --git a/lib/utils_blkid.h b/lib/utils_blkid.h
index 211257510..87caeed7c 100644
--- a/lib/utils_blkid.h
+++ b/lib/utils_blkid.h
@@ -2,7 +2,7 @@
 /*
  * blkid probe utilities
  *
- * Copyright (C) 2018-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2018-2026 Red Hat, Inc. All rights reserved.
  */
 
 #ifndef _UTILS_BLKID_H
diff --git a/lib/utils_crypt.c b/lib/utils_crypt.c
index 76bcfac2b..b2da0e721 100644
--- a/lib/utils_crypt.c
+++ b/lib/utils_crypt.c
@@ -3,8 +3,8 @@
  * utils_crypt - cipher utilities for cryptsetup
  *
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <stdlib.h>
diff --git a/lib/utils_crypt.h b/lib/utils_crypt.h
index 21cf4b5c1..2183cf121 100644
--- a/lib/utils_crypt.h
+++ b/lib/utils_crypt.h
@@ -3,8 +3,8 @@
  * utils_crypt - cipher utilities for cryptsetup
  *
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #ifndef _UTILS_CRYPT_H
diff --git a/lib/utils_device.c b/lib/utils_device.c
index c24cf0a6c..a26707883 100644
--- a/lib/utils_device.c
+++ b/lib/utils_device.c
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <string.h>
diff --git a/lib/utils_device_locking.c b/lib/utils_device_locking.c
index f6995859e..6b34ecf2d 100644
--- a/lib/utils_device_locking.c
+++ b/lib/utils_device_locking.c
@@ -2,8 +2,8 @@
 /*
  * Metadata on-disk locking for processes serialization
  *
- * Copyright (C) 2016-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2016-2025 Ondrej Kozina
+ * Copyright (C) 2016-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2016-2026 Ondrej Kozina
  */
 
 #include <errno.h>
diff --git a/lib/utils_device_locking.h b/lib/utils_device_locking.h
index 9cc25cac4..f0949de10 100644
--- a/lib/utils_device_locking.h
+++ b/lib/utils_device_locking.h
@@ -2,8 +2,8 @@
 /*
  * Metadata on-disk locking for processes serialization
  *
- * Copyright (C) 2016-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2016-2025 Ondrej Kozina
+ * Copyright (C) 2016-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2016-2026 Ondrej Kozina
  */
 
 #ifndef _CRYPTSETUP_UTILS_LOCKING_H
diff --git a/lib/utils_devpath.c b/lib/utils_devpath.c
index 28039f0d9..972277393 100644
--- a/lib/utils_devpath.c
+++ b/lib/utils_devpath.c
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <string.h>
diff --git a/lib/utils_dm.h b/lib/utils_dm.h
index f76ff2f4a..7b8cb4658 100644
--- a/lib/utils_dm.h
+++ b/lib/utils_dm.h
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #ifndef _UTILS_DM_H
diff --git a/lib/utils_io.c b/lib/utils_io.c
index 801f6d6fb..509e85419 100644
--- a/lib/utils_io.c
+++ b/lib/utils_io.c
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <errno.h>
diff --git a/lib/utils_io.h b/lib/utils_io.h
index f80cf17fa..a6f36ab64 100644
--- a/lib/utils_io.h
+++ b/lib/utils_io.h
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #ifndef _CRYPTSETUP_UTILS_IO_H
diff --git a/lib/utils_keyring.c b/lib/utils_keyring.c
index 73df3461b..da1ccd85c 100644
--- a/lib/utils_keyring.c
+++ b/lib/utils_keyring.c
@@ -2,8 +2,8 @@
 /*
  * kernel keyring utilities
  *
- * Copyright (C) 2016-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2016-2025 Ondrej Kozina
+ * Copyright (C) 2016-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2016-2026 Ondrej Kozina
  */
 
 #include <assert.h>
diff --git a/lib/utils_keyring.h b/lib/utils_keyring.h
index 67debf62a..5809f70d0 100644
--- a/lib/utils_keyring.h
+++ b/lib/utils_keyring.h
@@ -2,8 +2,8 @@
 /*
  * kernel keyring syscall wrappers
  *
- * Copyright (C) 2016-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2016-2025 Ondrej Kozina
+ * Copyright (C) 2016-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2016-2026 Ondrej Kozina
  */
 
 #ifndef _UTILS_KEYRING
diff --git a/lib/utils_loop.c b/lib/utils_loop.c
index 4e5d8e0f4..7fe1bfdac 100644
--- a/lib/utils_loop.c
+++ b/lib/utils_loop.c
@@ -2,8 +2,8 @@
 /*
  * loopback block device utilities
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <stdlib.h>
diff --git a/lib/utils_loop.h b/lib/utils_loop.h
index a966a02cd..bd8de20a2 100644
--- a/lib/utils_loop.h
+++ b/lib/utils_loop.h
@@ -2,8 +2,8 @@
 /*
  * loopback block device utilities
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #ifndef _UTILS_LOOP_H
diff --git a/lib/utils_pbkdf.c b/lib/utils_pbkdf.c
index 87e941973..36cfa2f1c 100644
--- a/lib/utils_pbkdf.c
+++ b/lib/utils_pbkdf.c
@@ -2,8 +2,8 @@
 /*
  * utils_pbkdf - PBKDF settings for libcryptsetup
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <stdlib.h>
diff --git a/lib/utils_safe_memory.c b/lib/utils_safe_memory.c
index 5ee68d2d4..a8d0e1067 100644
--- a/lib/utils_safe_memory.c
+++ b/lib/utils_safe_memory.c
@@ -2,8 +2,8 @@
 /*
  * utils_safe_memory - safe memory helpers
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <string.h>
diff --git a/lib/utils_storage_wrappers.c b/lib/utils_storage_wrappers.c
index 7a2420859..09283b9e9 100644
--- a/lib/utils_storage_wrappers.c
+++ b/lib/utils_storage_wrappers.c
@@ -3,7 +3,7 @@
  * Generic wrapper for storage functions
  * (experimental only)
  *
- * Copyright (C) 2018-2025 Ondrej Kozina
+ * Copyright (C) 2018-2026 Ondrej Kozina
  */
 
 #include <errno.h>
diff --git a/lib/utils_storage_wrappers.h b/lib/utils_storage_wrappers.h
index 23a963070..4f830294a 100644
--- a/lib/utils_storage_wrappers.h
+++ b/lib/utils_storage_wrappers.h
@@ -3,7 +3,7 @@
  * Generic wrapper for storage functions
  * (experimental only)
  *
- * Copyright (C) 2018-2025 Ondrej Kozina
+ * Copyright (C) 2018-2026 Ondrej Kozina
  */
 
 #ifndef _UTILS_STORAGE_WRAPPERS_H
diff --git a/lib/utils_wipe.c b/lib/utils_wipe.c
index 6a26dedfd..67a3e01fc 100644
--- a/lib/utils_wipe.c
+++ b/lib/utils_wipe.c
@@ -3,8 +3,8 @@
  * utils_wipe - wipe a device
  *
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <stdlib.h>
diff --git a/lib/verity/rs.h b/lib/verity/rs.h
index 195e00c7c..72479108f 100644
--- a/lib/verity/rs.h
+++ b/lib/verity/rs.h
@@ -4,7 +4,7 @@
  *
  * Copyright (C) 2004 Phil Karn, KA9Q
  * libcryptsetup modifications
- *   Copyright (C) 2017-2025 Red Hat, Inc. All rights reserved.
+ *   Copyright (C) 2017-2026 Red Hat, Inc. All rights reserved.
  */
 
 #ifndef _LIBFEC_RS_H
diff --git a/lib/verity/rs_decode_char.c b/lib/verity/rs_decode_char.c
index f819dea09..3f2541f57 100644
--- a/lib/verity/rs_decode_char.c
+++ b/lib/verity/rs_decode_char.c
@@ -4,7 +4,7 @@
  *
  * Copyright (C) 2002, Phil Karn, KA9Q
  * libcryptsetup modifications
- *   Copyright (C) 2017-2025 Red Hat, Inc. All rights reserved.
+ *   Copyright (C) 2017-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <string.h>
diff --git a/lib/verity/rs_encode_char.c b/lib/verity/rs_encode_char.c
index 8d1b6c3d5..ef3c3be3f 100644
--- a/lib/verity/rs_encode_char.c
+++ b/lib/verity/rs_encode_char.c
@@ -4,7 +4,7 @@
  *
  * Copyright (C) 2002, Phil Karn, KA9Q
  * libcryptsetup modifications
- *   Copyright (C) 2017-2025 Red Hat, Inc. All rights reserved.
+ *   Copyright (C) 2017-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <string.h>
diff --git a/lib/verity/verity.c b/lib/verity/verity.c
index ce19dac05..c5f7c3fd3 100644
--- a/lib/verity/verity.c
+++ b/lib/verity/verity.c
@@ -2,7 +2,7 @@
 /*
  * dm-verity volume handling
  *
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <errno.h>
diff --git a/lib/verity/verity.h b/lib/verity/verity.h
index 7d7981026..328150fe9 100644
--- a/lib/verity/verity.h
+++ b/lib/verity/verity.h
@@ -2,7 +2,7 @@
 /*
  * dm-verity volume handling
  *
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
  */
 
 #ifndef _VERITY_H
diff --git a/lib/verity/verity_fec.c b/lib/verity/verity_fec.c
index 2dfb4ac1b..bd15feb28 100644
--- a/lib/verity/verity_fec.c
+++ b/lib/verity/verity_fec.c
@@ -3,7 +3,7 @@
  * dm-verity Forward Error Correction (FEC) support
  *
  * Copyright (C) 2015 Google, Inc. All rights reserved.
- * Copyright (C) 2017-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2017-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <stdlib.h>
diff --git a/lib/verity/verity_hash.c b/lib/verity/verity_hash.c
index 2949afdde..8bcc39aa2 100644
--- a/lib/verity/verity_hash.c
+++ b/lib/verity/verity_hash.c
@@ -2,7 +2,7 @@
 /*
  * dm-verity volume handling
  *
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <errno.h>
diff --git a/lib/volumekey.c b/lib/volumekey.c
index afa0cb898..bcd8349ae 100644
--- a/lib/volumekey.c
+++ b/lib/volumekey.c
@@ -3,7 +3,7 @@
  * cryptsetup volume key implementation
  *
  * Copyright (C) 2004-2006 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2010-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2010-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <string.h>
diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index 853de5cb3..ba2bb7981 100644
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <uuid/uuid.h>
diff --git a/src/cryptsetup.h b/src/cryptsetup.h
index c0cd88a61..2485d9d05 100644
--- a/src/cryptsetup.h
+++ b/src/cryptsetup.h
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #ifndef CRYPTSETUP_H
diff --git a/src/cryptsetup_arg_list.h b/src/cryptsetup_arg_list.h
index 674d37475..1f470c2d4 100644
--- a/src/cryptsetup_arg_list.h
+++ b/src/cryptsetup_arg_list.h
@@ -2,8 +2,8 @@
 /*
  * Cryptsetup command line arguments list
  *
- * Copyright (C) 2020-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2020-2025 Ondrej Kozina
+ * Copyright (C) 2020-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2020-2026 Ondrej Kozina
  */
 
 /* long name, short name, popt type, help description, units, internal argument type, default value, allowed actions (empty=global) */
diff --git a/src/cryptsetup_args.h b/src/cryptsetup_args.h
index 2009e24f3..696cbd148 100644
--- a/src/cryptsetup_args.h
+++ b/src/cryptsetup_args.h
@@ -2,8 +2,8 @@
 /*
  * Command line arguments helpers
  *
- * Copyright (C) 2020-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2020-2025 Ondrej Kozina
+ * Copyright (C) 2020-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2020-2026 Ondrej Kozina
  */
 
 #ifndef CRYPTSETUP_ARGS_H
diff --git a/src/integritysetup.c b/src/integritysetup.c
index 037fe7116..cebf92d95 100644
--- a/src/integritysetup.c
+++ b/src/integritysetup.c
@@ -2,8 +2,8 @@
 /*
  * integritysetup - setup integrity protected volumes for dm-integrity
  *
- * Copyright (C) 2017-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2017-2025 Milan Broz
+ * Copyright (C) 2017-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2017-2026 Milan Broz
  */
 
 #include <uuid/uuid.h>
diff --git a/src/integritysetup_arg_list.h b/src/integritysetup_arg_list.h
index ada8e2803..8f6d325b6 100644
--- a/src/integritysetup_arg_list.h
+++ b/src/integritysetup_arg_list.h
@@ -2,8 +2,8 @@
 /*
  * Integritysetup command line arguments list
  *
- * Copyright (C) 2020-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2020-2025 Ondrej Kozina
+ * Copyright (C) 2020-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2020-2026 Ondrej Kozina
  */
 
 /* long name, short name, popt type, help description, units, internal argument type, default value */
diff --git a/src/integritysetup_args.h b/src/integritysetup_args.h
index 1f4cb7d39..adb18c2e3 100644
--- a/src/integritysetup_args.h
+++ b/src/integritysetup_args.h
@@ -2,8 +2,8 @@
 /*
  * Command line arguments helpers
  *
- * Copyright (C) 2020-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2020-2025 Ondrej Kozina
+ * Copyright (C) 2020-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2020-2026 Ondrej Kozina
  */
 
 #ifndef INTEGRITYSETUP_ARGS_H
diff --git a/src/utils_arg_macros.h b/src/utils_arg_macros.h
index a92468bbc..21120b44f 100644
--- a/src/utils_arg_macros.h
+++ b/src/utils_arg_macros.h
@@ -2,8 +2,8 @@
 /*
  * Command line arguments parsing helpers
  *
- * Copyright (C) 2020-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2020-2025 Ondrej Kozina
+ * Copyright (C) 2020-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2020-2026 Ondrej Kozina
  */
 
 #ifndef UTILS_ARG_MACROS_H
diff --git a/src/utils_arg_names.h b/src/utils_arg_names.h
index 89d8b75df..e8777a834 100644
--- a/src/utils_arg_names.h
+++ b/src/utils_arg_names.h
@@ -2,8 +2,8 @@
 /*
  * Command line arguments name list
  *
- * Copyright (C) 2020-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2020-2025 Ondrej Kozina
+ * Copyright (C) 2020-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2020-2026 Ondrej Kozina
  */
 
 #ifndef UTILS_ARG_NAMES_H
diff --git a/src/utils_args.c b/src/utils_args.c
index e2a60857e..6984941d7 100644
--- a/src/utils_args.c
+++ b/src/utils_args.c
@@ -2,8 +2,8 @@
 /*
  * Command line arguments parsing helpers
  *
- * Copyright (C) 2020-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2020-2025 Ondrej Kozina
+ * Copyright (C) 2020-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2020-2026 Ondrej Kozina
  */
 
 #include "cryptsetup.h"
diff --git a/src/utils_blockdev.c b/src/utils_blockdev.c
index dab541d37..7393c3016 100644
--- a/src/utils_blockdev.c
+++ b/src/utils_blockdev.c
@@ -2,8 +2,8 @@
 /*
  * Linux block devices helpers
  *
- * Copyright (C) 2018-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2018-2025 Ondrej Kozina
+ * Copyright (C) 2018-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2018-2026 Ondrej Kozina
  */
 
 #include "cryptsetup.h"
diff --git a/src/utils_key_description.c b/src/utils_key_description.c
index 610e578e5..96c14d326 100644
--- a/src/utils_key_description.c
+++ b/src/utils_key_description.c
@@ -2,9 +2,9 @@
 /*
  * Password quality check wrapper
  *
- * Copyright (C) 2023-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2023-2025 Ondrej Kozina
- * Copyright (C) 2023-2025 Milan Broz
+ * Copyright (C) 2023-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2023-2026 Ondrej Kozina
+ * Copyright (C) 2023-2026 Milan Broz
  */
 
 #include "cryptsetup.h"
diff --git a/src/utils_keyslot_check.c b/src/utils_keyslot_check.c
index 7db6d6039..79ecdf46c 100644
--- a/src/utils_keyslot_check.c
+++ b/src/utils_keyslot_check.c
@@ -2,7 +2,7 @@
 /*
  * cryptsetup - keyslot randomness check
  *
- * Copyright (C) 2024-2025 Milan Broz
+ * Copyright (C) 2024-2026 Milan Broz
  */
 
 #include <math.h>
diff --git a/src/utils_luks.c b/src/utils_luks.c
index e9a29890c..64474b3de 100644
--- a/src/utils_luks.c
+++ b/src/utils_luks.c
@@ -2,9 +2,9 @@
 /*
  * Helper utilities for LUKS2 features
  *
- * Copyright (C) 2018-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2018-2025 Milan Broz
- * Copyright (C) 2018-2025 Ondrej Kozina
+ * Copyright (C) 2018-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2018-2026 Milan Broz
+ * Copyright (C) 2018-2026 Ondrej Kozina
  */
 
 #include "cryptsetup.h"
diff --git a/src/utils_luks.h b/src/utils_luks.h
index 7ef597778..3ea9a0229 100644
--- a/src/utils_luks.h
+++ b/src/utils_luks.h
@@ -2,9 +2,9 @@
 /*
  * Helper utilities for LUKS in cryptsetup
  *
- * Copyright (C) 2018-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2018-2025 Milan Broz
- * Copyright (C) 2018-2025 Ondrej Kozina
+ * Copyright (C) 2018-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2018-2026 Milan Broz
+ * Copyright (C) 2018-2026 Ondrej Kozina
  */
 
 #ifndef UTILS_LUKS_H
diff --git a/src/utils_password.c b/src/utils_password.c
index 2e1178e16..52db9d00e 100644
--- a/src/utils_password.c
+++ b/src/utils_password.c
@@ -2,8 +2,8 @@
 /*
  * Password quality check wrapper
  *
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2012-2025 Milan Broz
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Milan Broz
  */
 
 #include "cryptsetup.h"
diff --git a/src/utils_progress.c b/src/utils_progress.c
index 26ba6574f..929b9edc4 100644
--- a/src/utils_progress.c
+++ b/src/utils_progress.c
@@ -2,8 +2,8 @@
 /*
  * cryptsetup - progress output utilities
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <assert.h>
diff --git a/src/utils_reencrypt.c b/src/utils_reencrypt.c
index b42a1d258..910cb94d7 100644
--- a/src/utils_reencrypt.c
+++ b/src/utils_reencrypt.c
@@ -2,9 +2,9 @@
 /*
  * cryptsetup - action re-encryption utilities
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
- * Copyright (C) 2021-2025 Ondrej Kozina
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
+ * Copyright (C) 2021-2026 Ondrej Kozina
  */
 
 #include <uuid/uuid.h>
diff --git a/src/utils_reencrypt_luks1.c b/src/utils_reencrypt_luks1.c
index 6d960a488..b90f5add7 100644
--- a/src/utils_reencrypt_luks1.c
+++ b/src/utils_reencrypt_luks1.c
@@ -2,8 +2,8 @@
 /*
  * cryptsetup - LUKS1 utility for offline re-encryption
  *
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2012-2025 Milan Broz
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Milan Broz
  */
 
 #include <sys/ioctl.h>
diff --git a/src/utils_tools.c b/src/utils_tools.c
index d96d1d462..e4c1dad5e 100644
--- a/src/utils_tools.c
+++ b/src/utils_tools.c
@@ -4,8 +4,8 @@
  *
  * Copyright (C) 2004 Jana Saout <jana@saout.de>
  * Copyright (C) 2004-2007 Clemens Fruhwirth <clemens@endorphin.org>
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include "cryptsetup.h"
diff --git a/src/veritysetup.c b/src/veritysetup.c
index d95db09ba..9ea2696be 100644
--- a/src/veritysetup.c
+++ b/src/veritysetup.c
@@ -2,8 +2,8 @@
 /*
  * veritysetup - setup cryptographic volumes for dm-verity
  *
- * Copyright (C) 2012-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2012-2025 Milan Broz
+ * Copyright (C) 2012-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2012-2026 Milan Broz
  */
 
 #include "cryptsetup.h"
diff --git a/src/veritysetup_arg_list.h b/src/veritysetup_arg_list.h
index 826044f06..adc918123 100644
--- a/src/veritysetup_arg_list.h
+++ b/src/veritysetup_arg_list.h
@@ -2,8 +2,8 @@
 /*
  * Veritysetup command line arguments list
  *
- * Copyright (C) 2020-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2020-2025 Ondrej Kozina
+ * Copyright (C) 2020-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2020-2026 Ondrej Kozina
  */
 
 /* long name, short name, popt type, help description, units, internal argument type, default value, allowed actions (empty=global) */
diff --git a/src/veritysetup_args.h b/src/veritysetup_args.h
index 6a056118e..b6fa6fe54 100644
--- a/src/veritysetup_args.h
+++ b/src/veritysetup_args.h
@@ -2,8 +2,8 @@
 /*
  * Command line arguments helpers
  *
- * Copyright (C) 2020-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2020-2025 Ondrej Kozina
+ * Copyright (C) 2020-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2020-2026 Ondrej Kozina
  */
 
 #ifndef VERITYSETUP_ARGS_H
diff --git a/tests/all-symbols-test.c b/tests/all-symbols-test.c
index 14120cad5..6c0e40ba7 100644
--- a/tests/all-symbols-test.c
+++ b/tests/all-symbols-test.c
@@ -2,7 +2,7 @@
 /*
  * Test utility checking symbol versions in libcryptsetup.
  *
- * Copyright (C) 2021-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2021-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <dlfcn.h>
diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index e11841d2f..0523e11df 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -2,9 +2,9 @@
 /*
  * cryptsetup library LUKS2 API check functions
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
- * Copyright (C) 2016-2025 Ondrej Kozina
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
+ * Copyright (C) 2016-2026 Ondrej Kozina
  */
 
 #include <stdbool.h>
diff --git a/tests/api-test.c b/tests/api-test.c
index fe8bcfc39..fa30d9b19 100644
--- a/tests/api-test.c
+++ b/tests/api-test.c
@@ -2,9 +2,9 @@
 /*
  * cryptsetup library API check functions
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
- * Copyright (C) 2016-2025 Ondrej Kozina
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
+ * Copyright (C) 2016-2026 Ondrej Kozina
  */
 
 #include <stdlib.h>
diff --git a/tests/api_test.h b/tests/api_test.h
index afaae22e1..5533e0b31 100644
--- a/tests/api_test.h
+++ b/tests/api_test.h
@@ -2,9 +2,9 @@
 /*
  * cryptsetup library API check functions
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
- * Copyright (C) 2016-2025 Ondrej Kozina
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
+ * Copyright (C) 2016-2026 Ondrej Kozina
  */
 
 #ifndef API_TEST_H
diff --git a/tests/crypto-check.c b/tests/crypto-check.c
index cb34bc9c5..99772f6ea 100644
--- a/tests/crypto-check.c
+++ b/tests/crypto-check.c
@@ -2,7 +2,7 @@
 /*
  * Test utility checking availability of crypto primitive in crypto backend.
  *
- * Copyright (C) 2024-2025 Milan Broz
+ * Copyright (C) 2024-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/tests/crypto-vectors.c b/tests/crypto-vectors.c
index e06722f4e..0e7b29909 100644
--- a/tests/crypto-vectors.c
+++ b/tests/crypto-vectors.c
@@ -2,7 +2,7 @@
 /*
  * cryptsetup crypto backend test vectors
  *
- * Copyright (C) 2018-2025 Milan Broz
+ * Copyright (C) 2018-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/tests/differ.c b/tests/differ.c
index a713893f1..b116bdeee 100644
--- a/tests/differ.c
+++ b/tests/differ.c
@@ -2,7 +2,7 @@
 /*
  * cryptsetup file differ check (rewritten Clemens' fileDiffer in Python)
  *
- * Copyright (C) 2010-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2010-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <stdio.h>
diff --git a/tests/fuzz/crypt2_load_fuzz.cc b/tests/fuzz/crypt2_load_fuzz.cc
index 84343b4ff..e1eb776a1 100644
--- a/tests/fuzz/crypt2_load_fuzz.cc
+++ b/tests/fuzz/crypt2_load_fuzz.cc
@@ -3,7 +3,7 @@
  * cryptsetup LUKS2 fuzz target
  *
  * Copyright (C) 2022-2025 Daniel Zatovic <daniel.zatovic@gmail.com>
- * Copyright (C) 2022-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2022-2026 Red Hat, Inc. All rights reserved.
  */
 
 extern "C" {
diff --git a/tests/test_utils.c b/tests/test_utils.c
index a9a730960..7fc787bb9 100644
--- a/tests/test_utils.c
+++ b/tests/test_utils.c
@@ -2,8 +2,8 @@
 /*
  * cryptsetup library API test utilities
  *
- * Copyright (C) 2009-2025 Red Hat, Inc. All rights reserved.
- * Copyright (C) 2009-2025 Milan Broz
+ * Copyright (C) 2009-2026 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2009-2026 Milan Broz
  */
 
 #include <assert.h>
diff --git a/tests/unit-utils-crypt.c b/tests/unit-utils-crypt.c
index e2e90125e..6876a09e8 100644
--- a/tests/unit-utils-crypt.c
+++ b/tests/unit-utils-crypt.c
@@ -2,7 +2,7 @@
 /*
  * cryptsetup crypto name and hex conversion helper test vectors
  *
- * Copyright (C) 2022-2025 Milan Broz
+ * Copyright (C) 2022-2026 Milan Broz
  */
 
 #include <stdio.h>
diff --git a/tests/unit-utils-io.c b/tests/unit-utils-io.c
index eaa7e8f20..0bdb74076 100644
--- a/tests/unit-utils-io.c
+++ b/tests/unit-utils-io.c
@@ -2,7 +2,7 @@
 /*
  * simple unit test for utils_io.c (blockwise low level functions)
  *
- * Copyright (C) 2018-2025 Red Hat, Inc. All rights reserved.
+ * Copyright (C) 2018-2026 Red Hat, Inc. All rights reserved.
  */
 
 #include <errno.h>
diff --git a/tests/unit-wipe.c b/tests/unit-wipe.c
index cd0fd3784..dda9532db 100644
--- a/tests/unit-wipe.c
+++ b/tests/unit-wipe.c
@@ -2,7 +2,7 @@
 /*
  * unit test helper for crypt_wipe API call
  *
- * Copyright (C) 2022-2025 Milan Broz
+ * Copyright (C) 2022-2026 Milan Broz
  */
 
 #include <errno.h>
diff --git a/tokens/ssh/cryptsetup-ssh.c b/tokens/ssh/cryptsetup-ssh.c
index f3c34e363..c65e7aa56 100644
--- a/tokens/ssh/cryptsetup-ssh.c
+++ b/tokens/ssh/cryptsetup-ssh.c
@@ -2,8 +2,8 @@
 /*
  * Example of LUKS2 token storing third party metadata (EXPERIMENTAL EXAMPLE)
  *
- * Copyright (C) 2016-2025 Milan Broz
- * Copyright (C) 2021-2025 Vojtech Trefny
+ * Copyright (C) 2016-2026 Milan Broz
+ * Copyright (C) 2021-2026 Vojtech Trefny
  *
  * Use:
  *  - generate ssh example token
diff --git a/tokens/ssh/libcryptsetup-token-ssh.c b/tokens/ssh/libcryptsetup-token-ssh.c
index cb13e777e..c42a49b94 100644
--- a/tokens/ssh/libcryptsetup-token-ssh.c
+++ b/tokens/ssh/libcryptsetup-token-ssh.c
@@ -2,8 +2,8 @@
 /*
  * Example of LUKS2 ssh token handler (EXPERIMENTAL)
  *
- * Copyright (C) 2016-2025 Milan Broz
- * Copyright (C) 2020-2025 Vojtech Trefny
+ * Copyright (C) 2016-2026 Milan Broz
+ * Copyright (C) 2020-2026 Vojtech Trefny
  *
  * Use:
  *  - generate LUKS device
diff --git a/tokens/ssh/ssh-utils.c b/tokens/ssh/ssh-utils.c
index 5005e52ba..cb72dc0c1 100644
--- a/tokens/ssh/ssh-utils.c
+++ b/tokens/ssh/ssh-utils.c
@@ -2,8 +2,8 @@
 /*
  * ssh plugin utilities
  *
- * Copyright (C) 2016-2025 Milan Broz
- * Copyright (C) 2020-2025 Vojtech Trefny
+ * Copyright (C) 2016-2026 Milan Broz
+ * Copyright (C) 2020-2026 Vojtech Trefny
  */
 
 #include <stdio.h>
diff --git a/tokens/ssh/ssh-utils.h b/tokens/ssh/ssh-utils.h
index 6c0a5e054..e4d47a6af 100644
--- a/tokens/ssh/ssh-utils.h
+++ b/tokens/ssh/ssh-utils.h
@@ -2,8 +2,8 @@
 /*
  * ssh plugin utilities
  *
- * Copyright (C) 2016-2025 Milan Broz
- * Copyright (C) 2020-2025 Vojtech Trefny
+ * Copyright (C) 2016-2026 Milan Broz
+ * Copyright (C) 2020-2026 Vojtech Trefny
  */
 
 #ifndef SSH_UTILS_H

From e9a99bec07bd7a5e06eac73805c27c33563edba6 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 5 Jun 2026 17:26:12 +0200
Subject: [PATCH 134/244] storage wrappers: Add option to use DMCRYPT wrapper
 only.

---
 lib/utils_storage_wrappers.c | 21 +++++++++++++--------
 lib/utils_storage_wrappers.h |  1 +
 2 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/lib/utils_storage_wrappers.c b/lib/utils_storage_wrappers.c
index 09283b9e9..4d1371638 100644
--- a/lib/utils_storage_wrappers.c
+++ b/lib/utils_storage_wrappers.c
@@ -152,6 +152,9 @@ int crypt_storage_wrapper_init(struct crypt_device *cd,
 	char _cipher[MAX_CIPHER_LEN], mode[MAX_CIPHER_LEN];
 	struct crypt_storage_wrapper *w;
 
+	if ((flags & CSW_DISABLE_DMCRYPT) && (flags & CSW_DMCRYPT_ONLY))
+		return -EINVAL;
+
 	/* device-mapper restrictions */
 	if (data_offset & ((1 << SECTOR_SHIFT) - 1))
 		return -EINVAL;
@@ -197,16 +200,18 @@ int crypt_storage_wrapper_init(struct crypt_device *cd,
 		goto err;
 	}
 
-	r = crypt_storage_backend_init(cd, w, iv_start, sector_size, _cipher, mode, vk, flags);
-	if (!r) {
-		*cw = w;
-		return 0;
-	}
+	if (!(flags & CSW_DMCRYPT_ONLY)) {
+		r = crypt_storage_backend_init(cd, w, iv_start, sector_size, _cipher, mode, vk, flags);
+		if (!r) {
+			*cw = w;
+			return 0;
+		}
 
-	log_dbg(cd, "Failed to initialize userspace block cipher.");
+		log_dbg(cd, "Failed to initialize userspace block cipher.");
 
-	if ((r != -ENOTSUP && r != -ENOENT) || (flags & CSW_DISABLE_DMCRYPT))
-		goto err;
+		if ((r != -ENOTSUP && r != -ENOENT) || (flags & CSW_DISABLE_DMCRYPT))
+			goto err;
+	}
 
 	r = crypt_storage_dmcrypt_init(cd, w, device, data_offset >> SECTOR_SHIFT, iv_start,
 			sector_size, cipher, vk, open_flags);
diff --git a/lib/utils_storage_wrappers.h b/lib/utils_storage_wrappers.h
index 4f830294a..0101fed2a 100644
--- a/lib/utils_storage_wrappers.h
+++ b/lib/utils_storage_wrappers.h
@@ -22,6 +22,7 @@ struct crypt_device;
 #define CSW_OPEN_READONLY   (1 << 2)
 #define CSW_LARGE_IV        (1 << 3)
 #define CSW_OPEN_LOCKED     (1 << 4)
+#define CSW_DMCRYPT_ONLY    (1 << 5)
 
 typedef enum {
 	NONE = 0,

From a29e251478ea91f74e8fc59d92433ddf8a38f616 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 5 Jun 2026 17:23:06 +0200
Subject: [PATCH 135/244] Improve LUKS_check_cipher and move it in core
 library.

Rename the function to generic crypt_check_cipher and
remove LUKS1 specific bits and use more general approach.

The function checks if cipher is available in userspace
crypto library or in kernel KCAPI.

Only if the above does not work and we run with super user,
fallback to use dm-crypt wrapper.
---
 lib/internal.h        |  5 ++++
 lib/luks1/keymanage.c | 23 +--------------
 lib/luks1/luks.h      |  5 ----
 lib/setup.c           |  4 +--
 lib/utils.c           | 68 +++++++++++++++++++++++++++++++++++++++++++
 5 files changed, 76 insertions(+), 29 deletions(-)

diff --git a/lib/internal.h b/lib/internal.h
index 3d88ace89..24b5bd865 100644
--- a/lib/internal.h
+++ b/lib/internal.h
@@ -287,4 +287,9 @@ static inline bool uint64_mult_overflow(uint64_t *u, uint64_t b, size_t size)
 
 size_t crypt_safe_alloc_size(const void *data);
 
+int crypt_check_cipher(struct crypt_device *cd,
+		       size_t keylength,
+		       const char *cipher,
+		       const char *cipher_mode);
+
 #endif /* INTERNAL_H */
diff --git a/lib/luks1/keymanage.c b/lib/luks1/keymanage.c
index 7fb132dbc..269d55df2 100644
--- a/lib/luks1/keymanage.c
+++ b/lib/luks1/keymanage.c
@@ -420,7 +420,7 @@ static int _keyslot_repair(struct luks_phdr *phdr, struct crypt_device *ctx)
 		need_write = 1;
 	}
 
-	r = LUKS_check_cipher(ctx, phdr->keyBytes, phdr->cipherName, phdr->cipherMode);
+	r = crypt_check_cipher(ctx, phdr->keyBytes, phdr->cipherName, phdr->cipherMode);
 	if (r < 0)
 		return -EINVAL;
 
@@ -701,27 +701,6 @@ int LUKS_write_phdr(struct luks_phdr *hdr,
 	return r;
 }
 
-/* Check that kernel supports requested cipher by decryption of one sector */
-int LUKS_check_cipher(struct crypt_device *ctx, size_t keylength, const char *cipher, const char *cipher_mode)
-{
-	int r;
-	struct volume_key *empty_key;
-	char buf[SECTOR_SIZE];
-
-	log_dbg(ctx, "Checking if cipher %s-%s is usable.", cipher, cipher_mode);
-
-	/* No need to get KEY quality random but it must avoid known weak keys. */
-	empty_key = crypt_generate_volume_key(ctx, keylength, KEY_QUALITY_NORMAL);
-	if (!empty_key)
-		return -ENOMEM;
-
-	r = LUKS_decrypt_from_storage(buf, sizeof(buf), cipher, cipher_mode, empty_key, 0, ctx);
-
-	crypt_free_volume_key(empty_key);
-	crypt_safe_memzero(buf, sizeof(buf));
-	return r;
-}
-
 int LUKS_generate_phdr(struct luks_phdr *header,
 	const struct volume_key *vk,
 	const char *cipherName,
diff --git a/lib/luks1/luks.h b/lib/luks1/luks.h
index f1545f401..69cf9c9b9 100644
--- a/lib/luks1/luks.h
+++ b/lib/luks1/luks.h
@@ -89,11 +89,6 @@ struct luks_phdr {
 int LUKS_verify_volume_key(const struct luks_phdr *hdr,
 			   const struct volume_key *vk);
 
-int LUKS_check_cipher(struct crypt_device *ctx,
-		      size_t keylength,
-		      const char *cipher,
-		      const char *cipher_mode);
-
 int LUKS_generate_phdr(struct luks_phdr *header,
 	const struct volume_key *vk,
 	const char *cipherName,
diff --git a/lib/setup.c b/lib/setup.c
index 5b91c492a..560b5e1f1 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -1799,7 +1799,7 @@ static int _crypt_format_luks1(struct crypt_device *cd,
 				       &required_alignment,
 				       &alignment_offset, DEFAULT_DISK_ALIGNMENT);
 
-	r = LUKS_check_cipher(cd, volume_key_size, cipher, cipher_mode);
+	r = crypt_check_cipher(cd, volume_key_size, cipher, cipher_mode);
 	if (r < 0)
 		return r;
 
@@ -1898,7 +1898,7 @@ static int LUKS2_check_encryption_params(struct crypt_device *cd,
 
 	if ((!integrity || integrity_key_size) && !crypt_cipher_wrapped_key(cipher, cipher_mode) &&
 	    !INTEGRITY_tag_size(NULL, cipher, cipher_mode)) {
-		r = LUKS_check_cipher(cd, volume_key_size - integrity_key_size,
+		r = crypt_check_cipher(cd, volume_key_size - integrity_key_size,
 				      cipher, cipher_mode);
 		if (r < 0)
 			return r;
diff --git a/lib/utils.c b/lib/utils.c
index 3f5fddfe0..b827059a9 100644
--- a/lib/utils.c
+++ b/lib/utils.c
@@ -16,6 +16,7 @@
 #include <sys/utsname.h>
 
 #include "internal.h"
+#include "utils_storage_wrappers.h"
 
 size_t crypt_getpagesize(void)
 {
@@ -381,3 +382,70 @@ int crypt_strcmp(const char *a, const char *b)
 		return 1;
 	return strcmp(a, b);
 }
+
+int crypt_check_cipher(struct crypt_device *cd,
+		       size_t keylength,
+		       const char *cipher,
+		       const char *cipher_mode)
+{
+	int r;
+	char cipher_spec[2*MAX_CAPI_ONE_LEN], buf[SECTOR_SIZE], *empty_key;
+	struct crypt_storage *s = NULL;
+	struct volume_key *empty_vk = NULL;
+	struct crypt_storage_wrapper *csw = NULL;
+
+	log_dbg(cd, "Checking if cipher %s-%s is usable (storage wrapper).", cipher, cipher_mode);
+
+	empty_key = malloc(keylength);
+	if (!empty_key)
+		return -ENOMEM;
+
+	/* No need to get KEY quality random but it must avoid known weak keys. */
+	r = crypt_random_get(cd, empty_key, keylength, CRYPT_RND_NORMAL);
+	if (r < 0)
+		goto out;
+
+	r = crypt_storage_init(&s, SECTOR_SIZE, cipher, cipher_mode, empty_key, keylength, false);
+	if (!r) {
+		memset(buf, 0, sizeof(buf));
+		r = crypt_storage_decrypt(s, 0, sizeof(buf), buf);
+	}
+
+	/* dm-crypt backend requires root access */
+	if (!r || (getuid() || geteuid()))
+		goto out;
+
+	if (*cipher_mode != '\0')
+		r = snprintf(cipher_spec, sizeof(cipher_spec), "%s-%s", cipher, cipher_mode);
+	else
+		r = snprintf(cipher_spec, sizeof(cipher_spec), "%s", cipher);
+	if (r < 0 || (size_t)r >= sizeof(cipher_spec)) {
+		r = -EINVAL;
+		goto out;
+	}
+
+	empty_vk = crypt_alloc_volume_key(keylength, empty_key);
+	if (!empty_vk) {
+		r = -ENOMEM;
+		goto out;
+	}
+
+	r = crypt_storage_wrapper_init(cd, &csw, crypt_metadata_device(cd), 0, 0, SECTOR_SIZE,
+				       cipher_spec, empty_vk, CSW_DMCRYPT_ONLY | CSW_OPEN_READONLY);
+	if (r)
+		goto out;
+
+	memset(buf, 0, sizeof(buf));
+	r = crypt_storage_wrapper_read_decrypt(csw, 0, &buf, sizeof(buf));
+	crypt_safe_memzero(buf, sizeof(buf));
+	if (r < 0 || (size_t)r != sizeof(buf))
+		r = -EIO;
+	else
+		r = 0;
+out:
+	crypt_storage_destroy(s);
+	free(empty_key);
+	crypt_storage_wrapper_destroy(csw);
+	crypt_free_volume_key(empty_vk);
+	return r;
+}

From 3504525854c6f2ac5117f746589ef53da93bdd3a Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 5 Jun 2026 17:27:44 +0200
Subject: [PATCH 136/244] Switch LUKS2 reencryption to more capable
 LUKS_check_cipher check.

---
 lib/luks2/luks2_reencrypt.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/luks2/luks2_reencrypt.c b/lib/luks2/luks2_reencrypt.c
index 5c4cf58da..169ad625c 100644
--- a/lib/luks2/luks2_reencrypt.c
+++ b/lib/luks2/luks2_reencrypt.c
@@ -3898,7 +3898,7 @@ static int reencrypt_init_by_keyslot_context(struct crypt_device *cd,
 		}
 		if (r < 0)
 			return r;
-		r = LUKS2_check_cipher(cd, key_length, cipher, cipher_mode);
+		r = crypt_check_cipher(cd, key_length, cipher, cipher_mode);
 		if (r < 0) {
 			log_err(cd, _("Unable to use cipher specification %s-%s for LUKS2."), cipher, cipher_mode);
 			return r;

From 4288880dac37931d00f5d604cc486b9a10ac2c97 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 5 Jun 2026 17:28:40 +0200
Subject: [PATCH 137/244] Switch LUKS2 convert code to LUKS_check_cipher check.

---
 lib/luks2/luks2_internal.h      |  5 -----
 lib/luks2/luks2_luks1_convert.c | 35 +--------------------------------
 2 files changed, 1 insertion(+), 39 deletions(-)

diff --git a/lib/luks2/luks2_internal.h b/lib/luks2/luks2_internal.h
index b9244ea7a..0c15fa920 100644
--- a/lib/luks2/luks2_internal.h
+++ b/lib/luks2/luks2_internal.h
@@ -226,11 +226,6 @@ int LUKS2_find_area_max_gap(struct crypt_device *cd, struct luks2_hdr *hdr,
 
 uint64_t LUKS2_hdr_and_areas_size_jobj(json_object *jobj);
 
-int LUKS2_check_cipher(struct crypt_device *cd,
-		      size_t keylength,
-		      const char *cipher,
-		      const char *cipher_mode);
-
 static inline const char *crypt_reencrypt_mode_to_str(crypt_reencrypt_mode_info mi)
 {
 	if (mi == CRYPT_REENCRYPT_REENCRYPT)
diff --git a/lib/luks2/luks2_luks1_convert.c b/lib/luks2/luks2_luks1_convert.c
index 8e4d46ecb..5d1234252 100644
--- a/lib/luks2/luks2_luks1_convert.c
+++ b/lib/luks2/luks2_luks1_convert.c
@@ -11,39 +11,6 @@
 #include "../luks1/luks.h"
 #include "../luks1/af.h"
 
-/* This differs from LUKS_check_cipher() that it does not check dm-crypt fallback. */
-int LUKS2_check_cipher(struct crypt_device *cd,
-		      size_t keylength,
-		      const char *cipher,
-		      const char *cipher_mode)
-{
-	int r;
-	struct crypt_storage *s;
-	char buf[SECTOR_SIZE], *empty_key;
-
-	log_dbg(cd, "Checking if cipher %s-%s is usable (storage wrapper).", cipher, cipher_mode);
-
-	empty_key = malloc(keylength);
-	if (!empty_key)
-		return -ENOMEM;
-
-	/* No need to get KEY quality random but it must avoid known weak keys. */
-	r = crypt_random_get(cd, empty_key, keylength, CRYPT_RND_NORMAL);
-	if (r < 0)
-		goto out;
-
-	r = crypt_storage_init(&s, SECTOR_SIZE, cipher, cipher_mode, empty_key, keylength, false);
-	if (r < 0)
-		goto out;
-
-	memset(buf, 0, sizeof(buf));
-	r = crypt_storage_decrypt(s, 0, sizeof(buf), buf);
-	crypt_storage_destroy(s);
-out:
-	free(empty_key);
-	return r;
-}
-
 static int json_luks1_keyslot(const struct luks_phdr *hdr_v1, int keyslot, json_object **keyslot_object)
 {
 	char *base64_str, cipher[LUKS_CIPHERNAME_L+LUKS_CIPHERMODE_L];
@@ -585,7 +552,7 @@ int LUKS2_luks1_to_luks2(struct crypt_device *cd, struct luks_phdr *hdr1, struct
 		return -EINVAL;
 	}
 
-	if (LUKS2_check_cipher(cd, hdr1->keyBytes, hdr1->cipherName, hdr1->cipherMode)) {
+	if (crypt_check_cipher(cd, hdr1->keyBytes, hdr1->cipherName, hdr1->cipherMode)) {
 		log_err(cd, _("Unable to use cipher specification %s-%s for LUKS2."),
 			hdr1->cipherName, hdr1->cipherMode);
 		return -EINVAL;

From ea34c8ae85408b5d6d77f568d80f9268345ae1d4 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 10 Jun 2026 10:32:57 +0200
Subject: [PATCH 138/244] Move crypt_capi_to_cipher in lib utils.

The function is never used in tools or tests
so let's move it to lib exclusive utils file.
---
 lib/utils.c       | 88 +++++++++++++++++++++++++++++++++++++++++++++++
 lib/utils_crypt.c | 88 -----------------------------------------------
 2 files changed, 88 insertions(+), 88 deletions(-)

diff --git a/lib/utils.c b/lib/utils.c
index b827059a9..fadf1a055 100644
--- a/lib/utils.c
+++ b/lib/utils.c
@@ -18,6 +18,8 @@
 #include "internal.h"
 #include "utils_storage_wrappers.h"
 
+#define MAX_CAPI_LEN_STR "143" /* for sscanf of crypto API string + 16  + \0 */
+
 size_t crypt_getpagesize(void)
 {
 	long r = sysconf(_SC_PAGESIZE);
@@ -449,3 +451,89 @@ int crypt_check_cipher(struct crypt_device *cd,
 	crypt_free_volume_key(empty_vk);
 	return r;
 }
+
+int crypt_capi_to_cipher(char **org_c, char **org_i, const char *c_dm, const char *i_dm)
+{
+	char cipher[MAX_CAPI_ONE_LEN], mode[MAX_CAPI_ONE_LEN], iv[MAX_CAPI_ONE_LEN],
+	     auth[MAX_CAPI_ONE_LEN], tmp[MAX_CAPI_LEN], dmcrypt_tmp[MAX_CAPI_LEN*2],
+	     capi[MAX_CAPI_LEN+1];
+	size_t len;
+	int i;
+
+	if (!c_dm)
+		return -EINVAL;
+
+	/* legacy mode */
+	if (strncmp(c_dm, "capi:", 5)) {
+		if (!(*org_c = strdup(c_dm)))
+			return -ENOMEM;
+		if (i_dm) {
+			if (!(*org_i = strdup(i_dm))) {
+				free(*org_c);
+				*org_c = NULL;
+				return -ENOMEM;
+			}
+		} else
+			*org_i = NULL;
+		return 0;
+	}
+
+	/* modes with capi: prefix */
+	i = sscanf(c_dm, "capi:%" MAX_CAPI_LEN_STR "[^-]-%" MAX_CAPI_ONE_LEN_STR "s", tmp, iv);
+	if (i != 2)
+		return -EINVAL;
+
+	/* non-cryptsetup compatible mode (generic driver with dash?) */
+	if (strrchr(iv, ')')) {
+		if (i_dm)
+			return -EINVAL;
+		if (!(*org_c = strdup(c_dm)))
+			return -ENOMEM;
+		return 0;
+	}
+
+	len = strlen(tmp);
+	if (len < 2)
+		return -EINVAL;
+
+	if (tmp[len-1] == ')')
+		tmp[len-1] = '\0';
+
+	if (sscanf(tmp, "rfc4309(%" MAX_CAPI_LEN_STR "s", capi) == 1) {
+		if (!(*org_i = strdup("aead")))
+			return -ENOMEM;
+	} else if (sscanf(tmp, "rfc7539(%" MAX_CAPI_LEN_STR "[^,],%" MAX_CAPI_ONE_LEN_STR "s", capi, auth) == 2) {
+		if (!(*org_i = strdup(auth)))
+			return -ENOMEM;
+	} else if (sscanf(tmp, "authenc(%" MAX_CAPI_ONE_LEN_STR "[^,],%" MAX_CAPI_LEN_STR "s", auth, capi) == 2) {
+		if (!(*org_i = strdup(auth)))
+			return -ENOMEM;
+	} else {
+		if (i_dm) {
+			if (!(*org_i = strdup(i_dm)))
+				return -ENOMEM;
+		} else
+			*org_i = NULL;
+		memset(capi, 0, sizeof(capi));
+		strncpy(capi, tmp, sizeof(capi)-1);
+	}
+
+	i = sscanf(capi, "%" MAX_CAPI_ONE_LEN_STR "[^(](%" MAX_CAPI_ONE_LEN_STR "[^)])", mode, cipher);
+	if (i == 2)
+		i = snprintf(dmcrypt_tmp, sizeof(dmcrypt_tmp), "%s-%s-%s", cipher, mode, iv);
+	else
+		i = snprintf(dmcrypt_tmp, sizeof(dmcrypt_tmp), "%s-%s", capi, iv);
+	if (i < 0 || (size_t)i >= sizeof(dmcrypt_tmp)) {
+		free(*org_i);
+		*org_i = NULL;
+		return -EINVAL;
+	}
+
+	if (!(*org_c = strdup(dmcrypt_tmp))) {
+		free(*org_i);
+		*org_i = NULL;
+		return -ENOMEM;
+	}
+
+	return 0;
+}
diff --git a/lib/utils_crypt.c b/lib/utils_crypt.c
index b2da0e721..da6ae275a 100644
--- a/lib/utils_crypt.c
+++ b/lib/utils_crypt.c
@@ -18,8 +18,6 @@
 #include "libcryptsetup.h"
 #include "utils_crypt.h"
 
-#define MAX_CAPI_LEN_STR "143" /* for sscanf of crypto API string + 16  + \0 */
-
 int crypt_parse_name_and_mode(const char *s, char *cipher, int *key_nums,
 			      char *cipher_mode)
 {
@@ -285,89 +283,3 @@ bool crypt_is_cipher_null(const char *cipher_spec)
 		return false;
 	return (strstr(cipher_spec, "cipher_null") || !strcmp(cipher_spec, "null"));
 }
-
-int crypt_capi_to_cipher(char **org_c, char **org_i, const char *c_dm, const char *i_dm)
-{
-	char cipher[MAX_CAPI_ONE_LEN], mode[MAX_CAPI_ONE_LEN], iv[MAX_CAPI_ONE_LEN],
-	     auth[MAX_CAPI_ONE_LEN], tmp[MAX_CAPI_LEN], dmcrypt_tmp[MAX_CAPI_LEN*2],
-	     capi[MAX_CAPI_LEN+1];
-	size_t len;
-	int i;
-
-	if (!c_dm)
-		return -EINVAL;
-
-	/* legacy mode */
-	if (strncmp(c_dm, "capi:", 5)) {
-		if (!(*org_c = strdup(c_dm)))
-			return -ENOMEM;
-		if (i_dm) {
-			if (!(*org_i = strdup(i_dm))) {
-				free(*org_c);
-				*org_c = NULL;
-				return -ENOMEM;
-			}
-		} else
-			*org_i = NULL;
-		return 0;
-	}
-
-	/* modes with capi: prefix */
-	i = sscanf(c_dm, "capi:%" MAX_CAPI_LEN_STR "[^-]-%" MAX_CAPI_ONE_LEN_STR "s", tmp, iv);
-	if (i != 2)
-		return -EINVAL;
-
-	/* non-cryptsetup compatible mode (generic driver with dash?) */
-	if (strrchr(iv, ')')) {
-		if (i_dm)
-			return -EINVAL;
-		if (!(*org_c = strdup(c_dm)))
-			return -ENOMEM;
-		return 0;
-	}
-
-	len = strlen(tmp);
-	if (len < 2)
-		return -EINVAL;
-
-	if (tmp[len-1] == ')')
-		tmp[len-1] = '\0';
-
-	if (sscanf(tmp, "rfc4309(%" MAX_CAPI_LEN_STR "s", capi) == 1) {
-		if (!(*org_i = strdup("aead")))
-			return -ENOMEM;
-	} else if (sscanf(tmp, "rfc7539(%" MAX_CAPI_LEN_STR "[^,],%" MAX_CAPI_ONE_LEN_STR "s", capi, auth) == 2) {
-		if (!(*org_i = strdup(auth)))
-			return -ENOMEM;
-	} else if (sscanf(tmp, "authenc(%" MAX_CAPI_ONE_LEN_STR "[^,],%" MAX_CAPI_LEN_STR "s", auth, capi) == 2) {
-		if (!(*org_i = strdup(auth)))
-			return -ENOMEM;
-	} else {
-		if (i_dm) {
-			if (!(*org_i = strdup(i_dm)))
-				return -ENOMEM;
-		} else
-			*org_i = NULL;
-		memset(capi, 0, sizeof(capi));
-		strncpy(capi, tmp, sizeof(capi)-1);
-	}
-
-	i = sscanf(capi, "%" MAX_CAPI_ONE_LEN_STR "[^(](%" MAX_CAPI_ONE_LEN_STR "[^)])", mode, cipher);
-	if (i == 2)
-		i = snprintf(dmcrypt_tmp, sizeof(dmcrypt_tmp), "%s-%s-%s", cipher, mode, iv);
-	else
-		i = snprintf(dmcrypt_tmp, sizeof(dmcrypt_tmp), "%s-%s", capi, iv);
-	if (i < 0 || (size_t)i >= sizeof(dmcrypt_tmp)) {
-		free(*org_i);
-		*org_i = NULL;
-		return -EINVAL;
-	}
-
-	if (!(*org_c = strdup(dmcrypt_tmp))) {
-		free(*org_i);
-		*org_i = NULL;
-		return -ENOMEM;
-	}
-
-	return 0;
-}

From 379a64853e6db72b853f4f8765b7c3d7ac421f86 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 20 Jun 2026 21:22:24 +0200
Subject: [PATCH 139/244] Use "IEEE" variant for SM4-XTS in OpenSSL backend

OpenSSL defines two versions of SM4-XTS; we have to use IEEE
version to match kernel.
Otherwise encryptin/decryption in userspace can corrupt data.

Unfortunately, this change could make some existing configurations
no longer usable.
---
 configure.ac                        |  1 +
 lib/crypto_backend/crypto_openssl.c | 36 +++++++++++++++++++++++++++--
 meson.build                         |  3 +++
 3 files changed, 38 insertions(+), 2 deletions(-)

diff --git a/configure.ac b/configure.ac
index 260b0ab6f..f195b7874 100644
--- a/configure.ac
+++ b/configure.ac
@@ -346,6 +346,7 @@ AC_DEFUN([CONFIGURE_OPENSSL], [
 	saved_LIBS=$LIBS
 	AC_CHECK_DECLS([OSSL_get_max_threads], [], [], [#include <openssl/thread.h>])
 	AC_CHECK_DECLS([OSSL_KDF_PARAM_ARGON2_VERSION], [use_internal_argon2=0], [], [#include <openssl/core_names.h>])
+	AC_CHECK_DECLS([OSSL_CIPHER_PARAM_XTS_STANDARD], [], [], [#include <openssl/core_names.h>])
 	LIBS=$saved_LIBS
 ])
 
diff --git a/lib/crypto_backend/crypto_openssl.c b/lib/crypto_backend/crypto_openssl.c
index 0aff4e27d..33658a592 100644
--- a/lib/crypto_backend/crypto_openssl.c
+++ b/lib/crypto_backend/crypto_openssl.c
@@ -716,20 +716,47 @@ static void _cipher_destroy(EVP_CIPHER_CTX **hd_enc, EVP_CIPHER_CTX **hd_dec, co
 	*cipher_type = NULL;
 }
 
+/*
+ * SM4-XTS can have two variants of tweak calculation:
+ *     "GB": GB/T 17964-2021 tweak multiplication
+ *   "IEEE": IEEE Std 1619-2007 tweak multiplication (as used by AES-XTS)
+ *
+ * "GB" is the default, but we need to use mode implemented by the kernel here (IEEE).
+ */
+static int _cipher_xts_ieee(EVP_CIPHER_CTX **hd_enc, EVP_CIPHER_CTX **hd_dec)
+{
+#if OPENSSL3_API && HAVE_DECL_OSSL_CIPHER_PARAM_XTS_STANDARD
+	OSSL_PARAM p[] = {
+		OSSL_PARAM_construct_utf8_string(OSSL_CIPHER_PARAM_XTS_STANDARD, CONST_CAST(char*)"IEEE", 0),
+		OSSL_PARAM_construct_end()
+	};
+
+	if (EVP_CIPHER_CTX_set_params(*hd_enc, p) != 1 ||
+	    EVP_CIPHER_CTX_set_params(*hd_dec, p) != 1)
+		return -EINVAL;
+#else
+	UNUSED(hd_enc);
+	UNUSED(hd_dec);
+#endif
+	return 0;
+}
+
 static int _cipher_init(EVP_CIPHER_CTX **hd_enc, EVP_CIPHER_CTX **hd_dec, const EVP_CIPHER **cipher_type, const char *name,
 			const char *mode, const void *key, size_t key_length, size_t *iv_length)
 {
 	char cipher_name[256];
 	const EVP_CIPHER *type;
 	int r, key_bits;
+	bool set_xts_ieee = false;
 
 	key_bits = key_length * 8;
 	if (!strcmp(mode, "xts"))
 		key_bits /= 2;
 
-	if ((!strcmp(name, "sm4")) && key_bits == 128)
+	if ((!strcmp(name, "sm4")) && key_bits == 128) {
+		set_xts_ieee = true;
 		r = snprintf(cipher_name, sizeof(cipher_name), "%s-%s", name, mode);
-	else
+	} else
 		r = snprintf(cipher_name, sizeof(cipher_name), "%s-%d-%s", name, key_bits, mode);
 	if (r < 0 || (size_t)r >= sizeof(cipher_name))
 		return -EINVAL;
@@ -758,6 +785,11 @@ static int _cipher_init(EVP_CIPHER_CTX **hd_enc, EVP_CIPHER_CTX **hd_dec, const
 		return -EINVAL;
 	}
 
+	if (set_xts_ieee && _cipher_xts_ieee(hd_enc, hd_dec) < 0) {
+		_cipher_destroy(hd_enc, hd_dec, &type);
+		return -EINVAL;
+	}
+
 	if (EVP_CIPHER_CTX_set_padding(*hd_enc, 0) != 1 ||
 	    EVP_CIPHER_CTX_set_padding(*hd_dec, 0) != 1) {
 		_cipher_destroy(hd_enc, hd_dec, &type);
diff --git a/meson.build b/meson.build
index b587111ff..338d2c8b6 100644
--- a/meson.build
+++ b/meson.build
@@ -499,6 +499,9 @@ elif get_option('crypto-backend') == 'openssl'
     if _have_ossl_argon2
         use_internal_argon2 = false
     endif
+    conf.set10('HAVE_DECL_OSSL_CIPHER_PARAM_XTS_STANDARD',
+        cc.has_header_symbol('openssl/core_names.h', 'OSSL_CIPHER_PARAM_XTS_STANDARD',
+            dependencies: crypto_backend_library))
 elif get_option('crypto-backend') == 'nss'
     if get_option('fips')
         error('nss crypto backend is not supported with FIPS enabled')

From b9c84635b7851ad527db12ac3fcddcb553c46340 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 20 Jun 2026 21:26:41 +0200
Subject: [PATCH 140/244] Support Aria and Camellia ciphers in libgcrypt
 backend.

These ciphers cannot be used with generic name, add compat
translation table.
---
 lib/crypto_backend/crypto_gcrypt.c | 44 +++++++++++++++++++++++++++++-
 1 file changed, 43 insertions(+), 1 deletion(-)

diff --git a/lib/crypto_backend/crypto_gcrypt.c b/lib/crypto_backend/crypto_gcrypt.c
index 73795c4ac..8bf2c8cdb 100644
--- a/lib/crypto_backend/crypto_gcrypt.c
+++ b/lib/crypto_backend/crypto_gcrypt.c
@@ -43,6 +43,12 @@ struct hash_alg {
 	const char *gcrypt_name;
 };
 
+struct cipher_alg {
+	const char *name;
+	size_t key_bytes;
+	const char *gcrypt_name;
+};
+
 /*
  * Test for wrong Whirlpool variant,
  * Ref: https://lists.gnupg.org/pipermail/gcrypt-devel/2014-January/002889.html
@@ -186,6 +192,37 @@ static const char *crypt_hash_compat_name(const char *name, unsigned int *flags)
 	return hash_name;
 }
 
+static const char *crypt_cipher_compat_name(const char *name, const char *mode, size_t key_bytes)
+{
+	const char *cipher_name = name;
+	int i;
+	static struct cipher_alg cipher_algs[] = {
+	{ "aria",     16,     "aria128" },
+	{ "aria",     24,     "aria192" },
+	{ "aria",     32,     "aria256" },
+	{ "camellia", 16, "camellia128" },
+	{ "camellia", 24, "camellia192" },
+	{ "camellia", 32, "camellia256" },
+	{ NULL,        0,         NULL }};
+
+	if (!name)
+		return NULL;
+
+	if (mode && !strcmp(mode, "xts"))
+		key_bytes /= 2;
+
+	i = 0;
+	while (cipher_algs[i].name) {
+		if (!strcasecmp(name, cipher_algs[i].name) && cipher_algs[i].key_bytes == key_bytes) {
+			cipher_name =  cipher_algs[i].gcrypt_name;
+			break;
+		}
+		i++;
+	}
+
+	return cipher_name;
+}
+
 /* HASH */
 int crypt_hash_size(const char *name)
 {
@@ -529,8 +566,13 @@ static int _cipher_init(gcry_cipher_hd_t *hd, const char *name,
 			const char *mode, const void *buffer, size_t length)
 {
 	int cipher_id, mode_id;
+	const char *gcrypt_name;
+
+	if (!name)
+		return -EINVAL;
 
-	cipher_id = gcry_cipher_map_name(name);
+	gcrypt_name = crypt_cipher_compat_name(name, mode, length);
+	cipher_id = gcry_cipher_map_name(gcrypt_name);
 	if (cipher_id == GCRY_CIPHER_MODE_NONE)
 		return -ENOENT;
 

From 68cb74fe6170a45afa60cfe963e436d8e06d0fe2 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 20 Jun 2026 21:27:46 +0200
Subject: [PATCH 141/244] tests: Add test vectors for Twofish, Aria, Camellia
 and SM4 ciphers

Add optional test vectors for other ciphers so we can easily detect
possible incompatibility of crypto backend.
---
 tests/crypto-vectors.c | 119 ++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 118 insertions(+), 1 deletion(-)

diff --git a/tests/crypto-vectors.c b/tests/crypto-vectors.c
index 0e7b29909..77f54b37e 100644
--- a/tests/crypto-vectors.c
+++ b/tests/crypto-vectors.c
@@ -545,7 +545,7 @@ struct cipher_test_vector {
 		const char *name;
 		const char *mode;
 		const char *ciphertext;
-	} out[2];
+	} out[6];
 };
 
 static struct cipher_test_vector cipher_test_vectors[] = {
@@ -568,6 +568,30 @@ static struct cipher_test_vector cipher_test_vectors[] = {
 		"\x4b\xc6\x04\x29\x3a\x81\xa6\xa6\xe4\xcb\xa7\x8d\x1a\x32\xa2\x9e"
 		"\xcf\xc2\x8e\x50\x97\xdd\x6b\x49\xa9\x38\xb1\x51\x5e\xbc\x5a\xac"
 		"\xfe\xd2\xc4\x95\x92\xf9\x1c\x0c\x9f\x17\xcd\x86\x38\x65\x29\xeb"
+	},{
+		"twofish", "ecb",
+		"\x29\x1e\xd1\x1a\x7b\x14\x1a\x06\x7e\x77\x39\x59\xf1\x39\x74\xdf"
+		"\x9b\x05\xaa\x1e\xcb\xb6\x65\x0f\xe3\x08\x0a\xa1\x0c\x23\x33\xd3"
+		"\x69\xe2\x55\xa5\x4a\xf4\x61\x74\x52\xa6\x5f\xf0\x63\x75\xab\x73"
+		"\xec\x93\x91\x50\xdf\x26\xb2\x4d\x37\x79\x43\xe2\x13\x33\x2f\x47"
+	},{
+		"aria", "ecb",
+		"\xba\xf0\x7d\x1f\x1c\x72\xb4\x92\x6a\x29\xa5\xe2\xf5\x36\xe4\x7a"
+		"\x73\xb6\x9c\x74\x88\x18\xe3\x6b\x67\x81\x10\x4c\x93\xa7\xb1\x0a"
+		"\xd4\xd8\x96\xf3\x2e\xd0\xed\x91\x2d\x8c\x6d\xc7\xb2\x87\xfb\xe1"
+		"\x93\x82\x52\xae\x53\xaa\xa0\x8a\xb8\x02\x68\x31\x02\x43\x42\x09"
+	},{
+		"camellia", "ecb",
+		"\x43\x2f\xc5\xdc\xd6\x28\x11\x5b\x7c\x38\x8d\x77\x0b\x27\x0c\x96"
+		"\x0b\xe1\xf1\x40\x23\x78\x2a\x22\xe8\x38\x4c\x5a\xbb\x7f\xab\x2b"
+		"\xa0\xa1\xab\xcd\x18\x93\xab\x6f\xe0\xfe\x5b\x65\xdf\x5f\x86\x36"
+		"\xe6\x19\x25\xe0\xd5\xdf\xaa\x9b\xb2\x9f\x81\x5b\x30\x76\xe5\x1a"
+	},{
+		"sm4", "ecb",
+		"\xa5\x14\x11\xff\x04\xa7\x11\x44\x38\x91\xfc\xe7\xab\x84\x2a\x29"
+		"\xd5\xb5\x0f\x46\xa9\xa7\x30\xa0\xf5\x90\xff\xa7\x76\xd9\x98\x55"
+		"\xc9\xa8\x6a\x4d\x71\x44\x7f\x4e\x87\x3a\xda\x4f\x38\x8a\xf9\xb9"
+		"\x2b\x25\x55\x7b\x50\x51\x4d\x15\x59\x39\xe6\xec\x94\x0a\xd9\x0e"
 	},
 }},{ // NIST SP 800-38A
 	"\x2b\x7e\x15\x16\x28\xae\xd2\xa6\xab\xf7\x15\x88\x09\xcf\x4f\x3c", 16,
@@ -588,6 +612,30 @@ static struct cipher_test_vector cipher_test_vectors[] = {
 		"\xa9\xb5\xd9\xdb\x20\xfb\x8b\x82\x51\x40\xbf\xe6\x4d\xf2\x1c\xa8"
 		"\x5f\x48\xbc\x29\xff\x62\x27\xda\x09\x7c\xaa\x22\x75\x6f\x43\xff"
 		"\x31\xd8\x3e\x83\x4d\x92\x48\xeb\x49\x1c\xf8\x26\x80\x4e\xb9\x02"
+	},{
+		"twofish", "cbc",
+		"\xc2\x06\x7a\xc0\xf3\x66\x92\xc1\x5e\x0f\xbb\xef\x48\xac\xf4\xab"
+		"\x9a\xc6\x7b\xe6\x45\xe8\xa1\x62\x6f\xb2\xac\x79\x85\x82\x52\x4e"
+		"\x83\xe6\x98\xc4\x76\x34\x39\xf9\xa2\xcd\xa9\x83\x61\x30\x11\x58"
+		"\x0a\x01\xda\x9b\xce\xa1\x24\x4c\x09\x91\x71\x4e\xed\x75\xf5\xcd"
+	},{
+		"aria", "cbc",
+		"\xa9\xf7\xb5\xdc\xca\xdd\xf6\xb4\x3a\x50\x81\x69\x29\x1d\xd5\xfb"
+		"\x10\x39\x34\x26\x5c\x51\xb3\x6f\x27\x01\x31\x39\x75\xbc\x27\xd4"
+		"\x47\x41\x69\x1d\xc6\xd5\x0e\x03\xcd\x1f\xeb\xa0\x1c\x65\xc1\x03"
+		"\x1f\x88\x20\xd5\x56\x91\x2e\xbf\x2f\x03\x3e\x45\x9f\xe2\xd5\x2a"
+	},{
+		"camellia", "cbc",
+		"\x16\x07\xcf\x49\x4b\x36\xbb\xf0\x0d\xae\xb0\xb5\x03\xc8\x31\xab"
+		"\xa2\xf2\xcf\x67\x16\x29\xef\x78\x40\xc5\xa5\xdf\xb5\x07\x48\x87"
+		"\x0f\x06\x16\x50\x08\xcf\x8b\x8b\x5a\x63\x58\x63\x62\x54\x3e\x54"
+		"\xe7\x20\x8a\x2c\xa8\x9c\xc2\x1a\xac\xd5\x6a\xaa\x6f\xb9\x82\x59"
+	},{
+		"sm4", "cbc",
+		"\xac\x52\x9a\xf9\x89\xa6\x2f\xce\x9c\xdd\xc5\xff\xb8\x41\x25\xca"
+		"\xb1\x68\xdd\x69\xdb\x3c\x0e\xea\x1a\xb1\x6d\xe6\xae\xa4\x3c\x59"
+		"\x2c\x15\x56\x7b\xff\x8f\x70\x74\x86\xc2\x02\xc7\xbe\x59\x10\x1f"
+		"\x74\xa6\x29\xb3\x50\xcd\x7e\x11\xbe\x99\x99\x8a\xf5\x20\x6d\x6c"
 	},
 }},{ // NIST SP 800-38A
 	"\x60\x3d\xeb\x10\x15\xca\x71\xbe\x2b\x73\xae\xf0\x85\x7d\x77\x81"
@@ -609,6 +657,24 @@ static struct cipher_test_vector cipher_test_vectors[] = {
 		"\x50\x5d\xf1\x68\x92\x40\x8e\xf6\x9c\x3b\x9e\xa6\x67\xd9\xdd\xb8"
 		"\xb9\x5f\xc8\x20\x76\x52\x1d\xce\x60\xe4\xfc\xac\xe3\xd3\x91\x51"
 		"\x09\x22\x62\xde\x62\x6d\xc5\x7b\x4c\x87\x0c\x65\xe7\x1f\xc7\x13"
+	},{
+		"twofish", "ecb",
+		"\xe1\xb4\x5f\x5f\x5b\xd0\xc9\xea\x0d\xe7\x74\x24\x05\x42\x22\xa4"
+		"\x34\x1a\x84\x1d\x6f\xff\x65\xc9\x6f\x79\x24\xf8\xbf\x48\x10\x72"
+		"\x8c\x03\x97\x1e\xdb\x3f\xc7\x96\xf8\x61\x99\x85\x49\xb7\x05\x5d"
+		"\xf8\xc5\xa1\xe7\x8e\xba\x66\x29\x2b\x59\xd0\xba\xaa\x23\x5d\x07"
+	},{
+		"aria", "ecb",
+		"\xb1\xf6\x6e\x8e\x5c\x78\xc8\x3b\x8e\xda\xfa\x0d\xbe\xf3\x82\x27"
+		"\x54\x84\x40\x9c\x7a\xb5\xcf\xa9\x64\xa7\x55\xc5\x90\x3b\xa7\xb6"
+		"\x78\x97\x33\xaf\x91\x4b\x45\xac\xf3\x31\x3a\x09\x81\xe2\x02\x8d"
+		"\xfb\x36\xde\x3d\xb8\xa0\x9a\xe4\x48\xd3\x3e\x2c\xc3\xef\xcb\x34"
+	},{
+		"camellia", "ecb",
+		"\xbe\xfd\x21\x9b\x11\x2f\xa0\x00\x98\x91\x9c\xd1\x01\xc9\xcc\xfa"
+		"\xc9\x1d\x3a\x8f\x1a\xea\x08\xa9\x38\x6c\xf4\xb6\x6c\x01\x69\xea"
+		"\xa6\x23\xd7\x11\xdc\x5f\x25\xa5\x1b\xb8\xa8\x0d\x56\x39\x7d\x28"
+		"\x79\x60\x10\x9f\xb6\xdc\x42\x94\x7f\xcf\xe5\x9e\xa3\xc5\xeb\x6b"
 	},
 }},{ // NIST SP 800-38A
 	"\x60\x3d\xeb\x10\x15\xca\x71\xbe\x2b\x73\xae\xf0\x85\x7d\x77\x81"
@@ -630,6 +696,24 @@ static struct cipher_test_vector cipher_test_vectors[] = {
 		"\x37\x61\xc5\xf8\x34\x4d\xe9\x10\x91\xd3\x87\x80\x42\xcc\x70\x95"
 		"\x40\x95\xa3\x2c\xdb\x38\xe2\x6f\x03\x91\xf5\xd3\x51\x7e\x52\xb0"
 		"\x8a\x1c\x2d\x7f\x04\x59\x13\x93\x31\xa9\x82\xc9\x4e\xd9\x11\x0c"
+	},{
+		"twofish", "cbc",
+		"\xe0\x22\x7c\x3c\xc8\x0f\x3c\xb1\xb2\xed\x84\x7c\xc6\xf5\x7d\x3c"
+		"\x65\x7b\x1e\x79\x60\xb3\x0f\xb7\xc8\xd6\x2e\x72\xae\x37\xc3\xa0"
+		"\xa8\xbc\x94\xf8\x26\xca\x27\x7d\x18\xe9\x58\x20\x3c\x1a\x70\xe7"
+		"\x15\x67\x7b\x55\x07\x93\x33\xd6\xa0\xa2\x34\x08\x08\x01\xeb\xb6"
+	},{
+		"aria", "cbc",
+		"\x9b\x1d\xba\x5f\xcc\xc6\xd5\xa5\x9a\xdc\x17\xca\x70\xff\x65\xb4"
+		"\x2c\x6f\xb9\xc8\xf2\xb6\x11\x6a\x2b\xdb\x26\xea\x87\xaf\x6b\x47"
+		"\xd1\xa2\x2f\x86\xcc\x84\x33\xbf\xc6\xb9\x52\x1d\xb2\x9b\xa7\xc0"
+		"\x9f\x9b\xe5\x30\xa7\xdd\x13\xe4\x8e\x79\x54\xca\x40\x9e\xfa\x9a"
+	},{
+		"camellia", "cbc",
+		"\xe6\xcf\xa3\x5f\xc0\x2b\x13\x4a\x4d\x2c\x0b\x67\x37\xac\x3e\xda"
+		"\x36\xcb\xeb\x73\xbd\x50\x4b\x40\x70\xb1\xb7\xde\x2b\x21\xeb\x50"
+		"\xe3\x1a\x60\x55\x29\x7d\x96\xca\x33\x30\xcd\xf1\xb1\x86\x0a\x83"
+		"\x5d\x56\x3f\x6d\x1c\xcc\xf2\x36\x05\x1c\x0c\x5c\x1c\x58\xf2\x8f"
 	},
 }},{ // CAVS XTSGenAES128,101
 	"\xb7\xb9\x3f\x51\x6a\xef\x29\x5e\xff\x3a\x29\xd8\x37\xcf\x1f\x13"
@@ -645,6 +729,22 @@ static struct cipher_test_vector cipher_test_vectors[] = {
 		"serpent", "xts",
 		"\x6d\xa2\xa4\x2b\x18\x71\x57\xdc\x03\xaf\x8b\x82\x28\x66\x3d\xf1"
 		"\x70\x8b\x75\x98\xd2\xdd\xbf\x72\x9e\xb3\xb4\xc2\x3f\x18\xdf\xa1"
+	},{
+		"twofish", "xts",
+		"\x26\x95\xfa\x03\x81\x6b\xb6\x22\x1a\x0a\x8a\x44\x0c\x15\x05\xe7"
+		"\x74\xa3\xae\x6f\xbe\x3c\x12\x44\xf5\x1b\x41\x87\x6f\xc2\xc6\x2b"
+	},{
+		"aria", "xts",
+		"\x2e\x95\x9f\x26\xb4\x52\x68\x3c\x48\x47\x3d\x08\x18\x1e\x94\x98"
+		"\xf2\x70\x3f\x6e\x73\x4c\x00\x46\x86\xa5\xae\x60\x75\x77\xce\xbd"
+	},{
+		"camellia", "xts",
+		"\xaa\x0e\x72\xdd\x49\x1a\x32\x54\x38\x7e\x20\x49\x47\x5b\xc5\x6a"
+		"\x4d\x58\x48\x02\x9d\xaa\x24\x9c\x9a\x31\x94\xe1\x08\x99\xad\x90"
+	},{
+		"sm4", "xts",
+		"\xd9\x1e\xbe\xf3\x08\x65\xe2\x52\x9e\x3b\xdb\x48\x85\x23\xa2\x1f"
+		"\xf6\x38\xdd\xdc\xb7\xf2\x16\x86\x91\x5c\x26\x10\xf3\xe8\xb6\xbb"
 	},
 }},{ // CAVS XTSGenAES256,101
 	"\x26\x6c\x33\x6b\x3b\x01\x48\x9f\x32\x67\xf5\x28\x35\xfd\x92\xf6"
@@ -665,6 +765,21 @@ static struct cipher_test_vector cipher_test_vectors[] = {
 		"\x37\xe4\xc0\xa9\xf1\x49\xe5\x3e\x73\xb9\x1f\xec\xdc\xe0\xbd\xc5"
 		"\x31\xd7\xef\x08\x65\x20\xe3\xad\xd9\x84\x60\xdc\x61\x6f\x26\x86"
 		"\xb8\xd5\x29\x4b\x04\x41\x52\x59\x05\x00\xb0\xc2\x9b\x30\xda\x48"
+	},{
+		"twofish", "xts",
+		"\xe6\xf0\x02\x06\xe7\x42\x63\xb7\x1f\x22\xa9\xc3\xe1\x8f\x0b\x05"
+		"\xa4\xb4\x9c\x38\x35\x0e\x82\xfe\x78\x2f\x05\xf6\x24\xbd\x44\x11"
+		"\x28\xda\x44\x69\xf5\x0d\xcd\x7f\xc6\x6a\x36\x3a\xe4\x8f\xf1\x51"
+	},{
+		"aria", "xts",
+		"\xea\x72\x7f\xff\xb7\xb1\x86\x05\xa4\x5e\x60\x9b\x6f\xaa\xa6\xf0"
+		"\x66\xe9\x5d\xb0\xaf\x9b\x7f\xe1\xba\x9e\x85\x99\xc2\xfd\x0a\x4c"
+		"\xb8\x2a\x70\x7f\x86\x64\x09\xf4\xd3\x2f\xdc\x01\x58\x34\x7f\x5f"
+	},{
+		"camellia", "xts",
+		"\x69\x88\x42\x11\x49\xdf\x25\xcc\x89\xc6\xab\xe7\xc8\x67\x5c\xee"
+		"\x3b\x33\x14\xd5\x70\x3a\x12\x42\x27\xfa\x9b\x2a\x62\x51\xaa\x3d"
+		"\x89\xdc\xd4\x45\xad\x33\xb1\x74\xf7\x0c\x0e\xa6\x91\xe1\x6b\x04"
 	},
 }},{
 	"\xa5\x28\x24\x34\x1a\x3c\xd8\xf7\x05\x91\x8f\xee\x85\x1f\x35\x7f"
@@ -1231,6 +1346,8 @@ static int cipher_test(void)
 		printf("CIPHER vector %02d: ", i);
 
 		for (j = 0; j < ARRAY_SIZE(vector->out); j++) {
+			if (!vector->out[j].name)
+				break;
 			if (vector->iv_length &&
 			    crypt_cipher_ivsize(vector->out[j].name, vector->out[j].mode) != (int)vector->iv_length)
 				return EXIT_FAILURE;

From a13bead61a7142568c74ccbfeb345c2a56fbd0b0 Mon Sep 17 00:00:00 2001
From: Arthur Chan <arthur.chan@adalogics.com>
Date: Tue, 9 Jun 2026 20:29:20 +0100
Subject: [PATCH 142/244] OSS-Fuzz: Add new fuzzer targets general crypto
 loading

Signed-off-by: Arthur Chan <arthur.chan@adalogics.com>
---
 tests/fuzz/Makefile.am             |  7 ++++-
 tests/fuzz/crypt_load_misc_fuzz.cc | 48 ++++++++++++++++++++++++++++++
 tests/fuzz/meson.build             | 18 +++++++++++
 tests/fuzz/oss-fuzz-build.sh       |  2 +-
 4 files changed, 73 insertions(+), 2 deletions(-)
 create mode 100644 tests/fuzz/crypt_load_misc_fuzz.cc

diff --git a/tests/fuzz/Makefile.am b/tests/fuzz/Makefile.am
index 88ce1ddd1..c0dfd3d72 100644
--- a/tests/fuzz/Makefile.am
+++ b/tests/fuzz/Makefile.am
@@ -4,7 +4,7 @@ distclean-local:
 	-rm -rf out build
 
 if ENABLE_FUZZ_TARGETS
-EXTRA_PROGRAMS  = crypt2_load_fuzz crypt2_load_ondisk_fuzz
+EXTRA_PROGRAMS  = crypt2_load_fuzz crypt2_load_ondisk_fuzz crypt_load_misc_fuzz
 CLEANFILES = $(EXTRA_PROGRAMS)
 
 LIB_FUZZING_ENGINE := $(if $(LIB_FUZZING_ENGINE),$(LIB_FUZZING_ENGINE),"-fsanitize=fuzzer")
@@ -22,6 +22,11 @@ crypt2_load_ondisk_fuzz_LDADD  = ../../libcryptsetup.la -L$(DEPS_PATH)/lib
 crypt2_load_ondisk_fuzz_LDFLAGS = $(AM_LDFLAGS) $(LIB_FUZZING_ENGINE) $(SANITIZER)
 crypt2_load_ondisk_fuzz_CXXFLAGS = $(AM_CXXFLAGS) -I$(top_srcdir)/lib -I$(top_srcdir)/tests/fuzz
 
+crypt_load_misc_fuzz_SOURCES = FuzzerInterface.h crypt_load_misc_fuzz.cc
+crypt_load_misc_fuzz_LDADD  = ../../libcryptsetup.la -L$(DEPS_PATH)/lib
+crypt_load_misc_fuzz_LDFLAGS = $(AM_LDFLAGS) $(LIB_FUZZING_ENGINE) $(SANITIZER)
+crypt_load_misc_fuzz_CXXFLAGS = $(AM_CXXFLAGS) -I$(top_srcdir)/lib -I$(top_srcdir)/tests/fuzz
+
 test-environment-m:
 	@ if test ! -d $(DEPS_PATH); then \
 		echo "You need to build static libraries first; use oss-fuzz-build.sh script."; \
diff --git a/tests/fuzz/crypt_load_misc_fuzz.cc b/tests/fuzz/crypt_load_misc_fuzz.cc
new file mode 100644
index 000000000..f32863956
--- /dev/null
+++ b/tests/fuzz/crypt_load_misc_fuzz.cc
@@ -0,0 +1,48 @@
+// SPDX-License-Identifier: GPL-2.0-or-later
+/*
+ * cryptsetup VERITY, INTEGRITY fuzz target
+ */
+
+extern "C" {
+#define FILESIZE (16777216)
+#include "src/cryptsetup.h"
+#include <err.h>
+#include "verity/verity.h"
+#include "integrity/integrity.h"
+#include "crypto_backend/crypto_backend.h"
+#include "FuzzerInterface.h"
+
+static void empty_log(int level, const char *msg, void *usrptr) {}
+
+int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
+	int fd, r;
+	struct crypt_device *cd = NULL;
+	char name[] = "/tmp/test-script-fuzz.XXXXXX";
+
+	fd = mkostemp(name, O_RDWR | O_CREAT | O_EXCL | O_CLOEXEC);
+	if (fd == -1)
+		err(EXIT_FAILURE, "mkostemp() failed");
+
+	/* enlarge header */
+	if (ftruncate(fd, FILESIZE) == -1)
+		goto out;
+
+	if (write_buffer(fd, data, size) != (ssize_t) size)
+		goto out;
+
+	crypt_set_log_callback(NULL, empty_log, NULL);
+
+	if (crypt_init(&cd, name) == 0) {
+		r = crypt_load(cd, CRYPT_VERITY, NULL);
+		if (r == 0)
+			goto out;
+
+		(void) crypt_load(cd, CRYPT_INTEGRITY, NULL);
+	}
+out:
+	crypt_free(cd);
+	close(fd);
+	unlink(name);
+	return 0;
+}
+}
diff --git a/tests/fuzz/meson.build b/tests/fuzz/meson.build
index fc45d4f48..6bd69d952 100644
--- a/tests/fuzz/meson.build
+++ b/tests/fuzz/meson.build
@@ -34,4 +34,22 @@ if get_option('fuzz-targets')
             link_args,
         ],
         include_directories: includes_tools)
+
+    crypt_load_misc_fuzz = executable('crypt_load_misc_fuzz',
+        [
+            'crypt_load_misc_fuzz.cc',
+        ],
+        dependencies: [
+            devmapper,
+            fuzzing_engine,
+        ],
+        link_with: [
+            libcryptsetup,
+            libcrypto_backend,
+            libutils_io,
+        ],
+        link_args: [
+            link_args,
+        ],
+        include_directories: includes_tools)
 endif
diff --git a/tests/fuzz/oss-fuzz-build.sh b/tests/fuzz/oss-fuzz-build.sh
index 3ef8c81cf..bd90b2760 100755
--- a/tests/fuzz/oss-fuzz-build.sh
+++ b/tests/fuzz/oss-fuzz-build.sh
@@ -34,7 +34,7 @@ export CFLAGS="${CFLAGS:-$flags} -I$DEPS_PATH/include"
 export CXXFLAGS="${CXXFLAGS:-$flags} -I$DEPS_PATH/include"
 export LDFLAGS="${LDFLAGS-} -L$DEPS_PATH/lib"
 
-ENABLED_FUZZERS=${ENABLED_FUZZERS:-crypt2_load_fuzz crypt2_load_ondisk_fuzz}
+ENABLED_FUZZERS=${ENABLED_FUZZERS:-crypt2_load_fuzz crypt2_load_ondisk_fuzz crypt_load_misc_fuzz}
 
 mkdir -p $SRC
 mkdir -p $OUT

From b6fb6fc0fdc661afba734f4c29350fa6be2ede8f Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 19 Jun 2026 16:41:47 +0200
Subject: [PATCH 143/244] Add keyring key type.

---
 lib/utils_keyring.c | 1 +
 lib/utils_keyring.h | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/lib/utils_keyring.c b/lib/utils_keyring.c
index da1ccd85c..86aecfe4a 100644
--- a/lib/utils_keyring.c
+++ b/lib/utils_keyring.c
@@ -32,6 +32,7 @@ static const struct {
 	{ BIG_KEY,       "big_key" },
 	{ TRUSTED_KEY,   "trusted" },
 	{ ENCRYPTED_KEY, "encrypted" },
+	{ KEYRING_KEY,	 "keyring" },
 };
 
 #include <linux/keyctl.h>
diff --git a/lib/utils_keyring.h b/lib/utils_keyring.h
index 5809f70d0..b910767aa 100644
--- a/lib/utils_keyring.h
+++ b/lib/utils_keyring.h
@@ -17,7 +17,7 @@
 typedef int32_t key_serial_t;
 #endif
 
-typedef enum { LOGON_KEY = 0, USER_KEY, BIG_KEY, TRUSTED_KEY, ENCRYPTED_KEY, INVALID_KEY } key_type_t;
+typedef enum { LOGON_KEY = 0, USER_KEY, BIG_KEY, TRUSTED_KEY, ENCRYPTED_KEY, KEYRING_KEY, INVALID_KEY } key_type_t;
 
 const char *key_type_name(key_type_t ktype);
 key_type_t key_type_by_name(const char *name);

From 413a3dd04ec07ad7c3afaed84561cbc7a42f108f Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 25 Jun 2026 12:05:53 +0200
Subject: [PATCH 144/244] Load volume keys in intermediary keyring linked in
 thread keyring.

Instead of loading volume keys directly in the thread keyring, create
an intermediary keyring linked in the thread keyring and load volume
keys there. The intermediary keyring is bulk-cleaned on crypt_free().

This avoids undesired pinning of all volume keys (via the thread
keyring) through the caller's credentials when the kernel opens
a file, as was the case with
https://lore.kernel.org/all/20240123-vfs-bdev-file-v2-4-adbd023e19cc@kernel.org/

Fixes: #993.
---
 lib/internal.h  |  6 ++--
 lib/setup.c     | 83 +++++++++++++++++++++++++++++++++++++------------
 lib/volumekey.c | 12 +++----
 3 files changed, 71 insertions(+), 30 deletions(-)

diff --git a/lib/internal.h b/lib/internal.h
index 24b5bd865..e398d0ae5 100644
--- a/lib/internal.h
+++ b/lib/internal.h
@@ -74,7 +74,7 @@ struct volume_key *crypt_volume_key_next(struct volume_key *vk);
 struct volume_key *crypt_volume_key_by_id(struct volume_key *vk, int id);
 void crypt_volume_key_pass_safe_alloc(struct volume_key *vk, void **safe_alloc);
 bool crypt_volume_key_is_set(const struct volume_key *vk);
-bool crypt_volume_key_upload_kernel_key(struct volume_key *vk);
+bool crypt_volume_key_upload_kernel_key(struct volume_key *vk, key_serial_t keyring);
 void crypt_volume_key_drop_uploaded_kernel_key(struct crypt_device *cd, struct volume_key *vk);
 void crypt_volume_key_drop_kernel_key(struct crypt_device *cd, struct volume_key *vk);
 
@@ -247,9 +247,9 @@ int crypt_keyring_get_keysize_by_name(struct crypt_device *cd,
 		size_t *r_key_size);
 
 int crypt_use_keyring_for_vk(struct crypt_device *cd);
-void crypt_unlink_key_from_thread_keyring(struct crypt_device *cd,
+void crypt_unlink_key_from_keyring(struct crypt_device *cd,
 		key_serial_t key_id);
-void crypt_unlink_key_by_description_from_thread_keyring(struct crypt_device *cd,
+void crypt_unlink_key_by_description_from_keyring(struct crypt_device *cd,
 		const char *key_description,
 		key_type_t ktype);
 void crypt_drop_uploaded_keyring_key(struct crypt_device *cd, struct volume_key *vks);
diff --git a/lib/setup.c b/lib/setup.c
index 560b5e1f1..4b051e577 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -54,6 +54,9 @@ struct crypt_device {
 	const char *user_key_name2;
 	key_type_t keyring_key_type;
 
+	const char *keyring_description;
+	key_serial_t keyring_id;
+
 	uint64_t data_offset;
 	uint64_t metadata_size; /* Used in LUKS2 format */
 	uint64_t keyslots_size; /* Used in LUKS2 format */
@@ -4141,6 +4144,15 @@ int crypt_header_is_detached(struct crypt_device *cd)
 	return r ? 0 : 1;
 }
 
+static void crypt_unlink_keyring_from_thread_keyring(struct crypt_device *cd,
+		key_serial_t keyring_id)
+{
+	log_dbg(cd, "Unlinking keyring (id: %" PRIi32 ") from thread keyring.", keyring_id);
+
+	if (keyring_unlink_key_from_thread_keyring(keyring_id))
+		log_dbg(cd, "keyring_unlink_key_from_thread_keyring failed with errno %d.", errno);
+}
+
 void crypt_free(struct crypt_device *cd)
 {
 	if (!cd)
@@ -4151,6 +4163,11 @@ void crypt_free(struct crypt_device *cd)
 	dm_backend_exit(cd);
 	crypt_free_volume_key(cd->volume_key);
 
+	if (cd->keyring_description) {
+		crypt_unlink_keyring_from_thread_keyring(cd, cd->keyring_id);
+		free(CONST_CAST(void*)cd->keyring_description);
+	}
+
 	crypt_free_type(cd, NULL);
 
 	device_free(cd, cd->device);
@@ -4335,18 +4352,35 @@ static int resume_luks1_by_volume_key(struct crypt_device *cd,
 	return r;
 }
 
+static bool unlink_key_from_keyring(struct crypt_device *cd, key_serial_t kid, key_serial_t keyring_id)
+{
+	log_dbg(cd, "Unlinking volume key (id: %" PRIi32 ") from kernel keyring (id: %" PRIi32 ").",
+		kid, keyring_id);
+
+	if (!keyring_unlink_key_from_keyring(kid, keyring_id))
+		return true;
+
+	log_dbg(cd, "keyring_unlink_key_from_keyring failed with errno %d.", errno);
+
+	return false;
+}
+
+/* internal only */
+void crypt_unlink_key_from_keyring(struct crypt_device *cd,
+		key_serial_t key_id)
+{
+	(void)unlink_key_from_keyring(cd, key_id, cd->keyring_id);
+}
+
 static void crypt_unlink_key_from_custom_keyring(struct crypt_device *cd, key_serial_t kid)
 {
 	assert(cd);
 	assert(cd->keyring_to_link_vk);
 
-	log_dbg(cd, "Unlinking volume key (id: %" PRIi32 ") from kernel keyring (id: %" PRIi32 ").",
-		kid, cd->keyring_to_link_vk);
 
-	if (!keyring_unlink_key_from_keyring(kid, cd->keyring_to_link_vk))
+	if (unlink_key_from_keyring(cd, kid, cd->keyring_to_link_vk))
 		return;
 
-	log_dbg(cd, "keyring_unlink_key_from_keyring failed with errno %d.", errno);
 	log_err(cd, _("Failed to unlink volume key from user specified keyring."));
 }
 
@@ -7638,6 +7672,8 @@ int crypt_volume_key_keyring(struct crypt_device *cd __attribute__((unused)), in
 /* internal only */
 int crypt_volume_key_load_in_keyring(struct crypt_device *cd, struct volume_key *vk)
 {
+	key_serial_t keyring_id;
+
 	if (!vk || !cd)
 		return -EINVAL;
 
@@ -7646,14 +7682,31 @@ int crypt_volume_key_load_in_keyring(struct crypt_device *cd, struct volume_key
 		return -EINVAL;
 	}
 
-	log_dbg(cd, "Loading key (type logon, name %s) in thread keyring.",
-		crypt_volume_key_description(vk));
+	if (!cd->keyring_description) {
+		cd->keyring_description = strdup("cryptsetup-keyring");
+		if (!cd->keyring_description)
+			return -ENOMEM;
+
+		log_dbg(cd, "Loading key (type keyring, name %s) in thread keyring.", cd->keyring_description);
+		keyring_id = keyring_add_key_in_thread_keyring(KEYRING_KEY, cd->keyring_description, NULL, 0);
+		if (keyring_id < 0) {
+			free(CONST_CAST(void*)cd->keyring_description);
+			cd->keyring_description = NULL;
+			log_dbg(cd, "keyring_add_key_in_thread_keyring failed (error %d)", errno);
+			log_err(cd, _("Failed to load key in kernel keyring."));
+			return -EINVAL;
+		}
+		cd->keyring_id = keyring_id;
+	}
+
+	log_dbg(cd, "Loading key (type logon, name %s) in %s keyring.",
+		crypt_volume_key_description(vk), cd->keyring_description);
 
-	if (crypt_volume_key_upload_kernel_key(vk)) {
+	if (crypt_volume_key_upload_kernel_key(vk, cd->keyring_id)) {
 		crypt_set_key_in_keyring(cd, 1);
 		return 0;
 	} else {
-		log_dbg(cd, "keyring_add_key_in_thread_keyring failed (error %d)", errno);
+		log_dbg(cd, "keyring_add_key_to_keyring failed (error %d)", errno);
 		log_err(cd, _("Failed to load key in kernel keyring."));
 		return -EINVAL;
 	}
@@ -7769,17 +7822,7 @@ void crypt_set_key_in_keyring(struct crypt_device *cd, unsigned key_in_keyring)
 	cd->key_in_keyring = key_in_keyring;
 }
 
-/* internal only */
-void crypt_unlink_key_from_thread_keyring(struct crypt_device *cd,
-		key_serial_t key_id)
-{
-	log_dbg(cd, "Unlinking volume key (id: %" PRIi32 ") from thread keyring.", key_id);
-
-	if (keyring_unlink_key_from_thread_keyring(key_id))
-		log_dbg(cd, "keyring_unlink_key_from_thread_keyring failed with errno %d.", errno);
-}
-
-void crypt_unlink_key_by_description_from_thread_keyring(struct crypt_device *cd,
+void crypt_unlink_key_by_description_from_keyring(struct crypt_device *cd,
 		const char *key_description,
 		key_type_t ktype)
 {
@@ -7802,7 +7845,7 @@ void crypt_unlink_key_by_description_from_thread_keyring(struct crypt_device *cd
 		return;
 	}
 
-	crypt_unlink_key_from_thread_keyring(cd, kid);
+	crypt_unlink_key_from_keyring(cd, kid);
 }
 
 int crypt_set_keyring_to_link(struct crypt_device *cd, const char *key_description,
diff --git a/lib/volumekey.c b/lib/volumekey.c
index bcd8349ae..7df622677 100644
--- a/lib/volumekey.c
+++ b/lib/volumekey.c
@@ -243,14 +243,14 @@ bool crypt_volume_key_is_set(const struct volume_key *vk)
 	return vk && vk->key;
 }
 
-bool crypt_volume_key_upload_kernel_key(struct volume_key *vk)
+bool crypt_volume_key_upload_kernel_key(struct volume_key *vk, key_serial_t keyring)
 {
 	key_serial_t kid;
 
 	assert(vk && vk->key && vk->key_description && vk->keyring_key_type != INVALID_KEY);
 
-	kid = keyring_add_key_in_thread_keyring(vk->keyring_key_type, vk->key_description,
-					 vk->key, vk->keylength);
+	kid = keyring_add_key_to_keyring(vk->keyring_key_type, vk->key_description, vk->key,
+					 vk->keylength, keyring);
 	if (kid >= 0) {
 		vk->key_id = kid;
 		return true;
@@ -265,9 +265,7 @@ void crypt_volume_key_drop_kernel_key(struct crypt_device *cd, struct volume_key
 	assert(vk->key_description || vk->keyring_key_type == INVALID_KEY);
 	assert(!vk->key_description || vk->keyring_key_type != INVALID_KEY);
 
-	crypt_unlink_key_by_description_from_thread_keyring(cd,
-							    vk->key_description,
-							    vk->keyring_key_type);
+	crypt_unlink_key_by_description_from_keyring(cd, vk->key_description, vk->keyring_key_type);
 }
 
 void crypt_volume_key_drop_uploaded_kernel_key(struct crypt_device *cd, struct volume_key *vk)
@@ -277,6 +275,6 @@ void crypt_volume_key_drop_uploaded_kernel_key(struct crypt_device *cd, struct v
 	if (vk->key_id < 0)
 		return;
 
-	crypt_unlink_key_from_thread_keyring(cd, vk->key_id);
+	crypt_unlink_key_from_keyring(cd, vk->key_id);
 	vk->key_id = -1;
 }

From 04ef07a7070fc8f71dc8da57d6cc23423e1b632e Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 19 Jun 2026 16:45:49 +0200
Subject: [PATCH 145/244] Use unique intermediary keyring name per device.

Replace the static "cryptsetup-keyring" name with
"cryptsetup-<uuid_prefix>-<random>" to avoid collisions when
multiple LUKS devices are opened by the same process.

Fixes: #993.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 lib/setup.c | 23 +++++++++++++++++------
 1 file changed, 17 insertions(+), 6 deletions(-)

diff --git a/lib/setup.c b/lib/setup.c
index 4b051e577..1c0f21e6f 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -7673,6 +7673,9 @@ int crypt_volume_key_keyring(struct crypt_device *cd __attribute__((unused)), in
 int crypt_volume_key_load_in_keyring(struct crypt_device *cd, struct volume_key *vk)
 {
 	key_serial_t keyring_id;
+	char *keyring_description;
+	char rnd[4];
+	const char *uuid;
 
 	if (!vk || !cd)
 		return -EINVAL;
@@ -7683,20 +7686,28 @@ int crypt_volume_key_load_in_keyring(struct crypt_device *cd, struct volume_key
 	}
 
 	if (!cd->keyring_description) {
-		cd->keyring_description = strdup("cryptsetup-keyring");
-		if (!cd->keyring_description)
+		uuid = crypt_get_uuid(cd);
+		if (!uuid)
+			return -EINVAL;
+
+		if (crypt_random_get(cd, rnd, sizeof(rnd), CRYPT_RND_NORMAL) < 0)
+			return -EINVAL;
+
+		if (asprintf(&keyring_description, "cryptsetup-%.8s-%02x%02x%02x%02x",
+			     uuid, (unsigned char)rnd[0], (unsigned char)rnd[1],
+			     (unsigned char)rnd[2], (unsigned char)rnd[3]) < 0)
 			return -ENOMEM;
 
-		log_dbg(cd, "Loading key (type keyring, name %s) in thread keyring.", cd->keyring_description);
-		keyring_id = keyring_add_key_in_thread_keyring(KEYRING_KEY, cd->keyring_description, NULL, 0);
+		log_dbg(cd, "Loading key (type keyring, name %s) in thread keyring.", keyring_description);
+		keyring_id = keyring_add_key_in_thread_keyring(KEYRING_KEY, keyring_description, NULL, 0);
 		if (keyring_id < 0) {
-			free(CONST_CAST(void*)cd->keyring_description);
-			cd->keyring_description = NULL;
+			free(keyring_description);
 			log_dbg(cd, "keyring_add_key_in_thread_keyring failed (error %d)", errno);
 			log_err(cd, _("Failed to load key in kernel keyring."));
 			return -EINVAL;
 		}
 		cd->keyring_id = keyring_id;
+		cd->keyring_description = keyring_description;
 	}
 
 	log_dbg(cd, "Loading key (type logon, name %s) in %s keyring.",

From bb5e8e9f0b34fb8135e948ce60d956c2af7d5c8d Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 19 Jun 2026 14:58:46 +0200
Subject: [PATCH 146/244] tests: revoke keys instead unlinking from thread
 keyring.

With the intermediary thread keyring we can not simply unlink
key from thread keyring. Let's make it simple and invalidate the
key instead.
---
 tests/api-test-2.c | 33 ++++++++++++++++-----------------
 1 file changed, 16 insertions(+), 17 deletions(-)

diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index 0523e11df..c41eb4dc3 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -427,6 +427,11 @@ static key_serial_t keyctl_unlink(key_serial_t key, key_serial_t keyring)
 	return syscall(__NR_keyctl, KEYCTL_UNLINK, key, keyring);
 }
 
+static key_serial_t keyctl_revoke(key_serial_t key)
+{
+	return syscall(__NR_keyctl, KEYCTL_REVOKE, key);
+}
+
 static key_serial_t keyctl_link(key_serial_t key, key_serial_t keyring)
 {
 	return syscall(__NR_keyctl, KEYCTL_LINK, key, keyring);
@@ -504,20 +509,14 @@ static int _drop_keyring_key_from_keyring_name(const char *key_description, key_
 	return keyctl_unlink(kid, keyring);
 }
 
-static int _drop_keyring_key_from_keyring_type(struct crypt_device *_cd, int segment,
-					       key_serial_t keyring, const char* type)
+static int _revoke_keyring_key(struct crypt_device *_cd, int segment)
 {
-	key_serial_t kid = _kernel_key_by_segment_and_type(_cd, segment, type);
+	key_serial_t kid = _kernel_key_by_segment_and_type(_cd, segment, "logon");
 
 	if (kid < 0)
 		return -1;
 
-	return keyctl_unlink(kid, keyring);
-}
-
-static int _drop_keyring_key(struct crypt_device *_cd, int segment)
-{
-	return _drop_keyring_key_from_keyring_type(_cd, segment, KEY_SPEC_THREAD_KEYRING, "logon");
+	return keyctl_revoke(kid);
 }
 #endif
 
@@ -690,11 +689,11 @@ static void UseLuks2Device(void)
 	// repeat previous tests and check kernel keyring is released when not needed
 	if (t_dm_crypt_keyring_support()) {
 		OK_(crypt_activate_by_passphrase(cd, NULL, CRYPT_ANY_SLOT, KEY1, strlen(KEY1), 0));
-		FAIL_(_drop_keyring_key(cd, 0), "");
+		FAIL_(_revoke_keyring_key(cd, 0), "");
 		OK_(crypt_activate_by_passphrase(cd, NULL, CRYPT_ANY_SLOT, KEY1, strlen(KEY1), CRYPT_ACTIVATE_KEYRING_KEY));
-		OK_(_drop_keyring_key(cd, 0));
+		OK_(_revoke_keyring_key(cd, 0));
 		OK_(crypt_activate_by_passphrase(cd, CDEVICE_1, CRYPT_ANY_SLOT, KEY1, strlen(KEY1), 0));
-		OK_(_drop_keyring_key(cd, 0));
+		OK_(_revoke_keyring_key(cd, 0));
 		FAIL_(crypt_activate_by_passphrase(cd, CDEVICE_1, CRYPT_ANY_SLOT, KEY1, strlen(KEY1), 0), "already open");
 		FAIL_(_volume_key_in_keyring(cd, 0), "");
 		OK_(crypt_activate_by_passphrase(cd, NULL, CRYPT_ANY_SLOT, KEY1, strlen(KEY1), 0));
@@ -704,11 +703,11 @@ static void UseLuks2Device(void)
 		if (!_fips_mode) {
 			/* keyslot 0 is PBKDF2, keyslot 1 is Argon2id */
 			EQ_(crypt_activate_by_passphrase(cd, NULL, 1, KEY2, strlen(KEY2), 0), 1);
-			FAIL_(_drop_keyring_key(cd, 0), "");
+			FAIL_(_revoke_keyring_key(cd, 0), "");
 			EQ_(crypt_activate_by_passphrase(cd, NULL, 1, KEY2, strlen(KEY2), CRYPT_ACTIVATE_KEYRING_KEY), 1);
-			OK_(_drop_keyring_key(cd, 0));
+			OK_(_revoke_keyring_key(cd, 0));
 			EQ_(crypt_activate_by_passphrase(cd, CDEVICE_1, 1, KEY2, strlen(KEY2), 0), 1);
-			OK_(_drop_keyring_key(cd, 0));
+			OK_(_revoke_keyring_key(cd, 0));
 			FAIL_(crypt_activate_by_passphrase(cd, CDEVICE_1, 1, KEY2, strlen(KEY2), 0), "already open");
 			FAIL_(_volume_key_in_keyring(cd, 0), "");
 			EQ_(crypt_activate_by_passphrase(cd, NULL, 1, KEY2, strlen(KEY2), 0), 1);
@@ -1828,9 +1827,9 @@ static void ResizeDeviceLuks2(void)
 	OK_(crypt_activate_by_volume_key(cd, CDEVICE_1, key, key_size, 0));
 	// erase volume key from kernel keyring
 	if (t_dm_crypt_keyring_support())
-		OK_(_drop_keyring_key(cd, 0));
+		OK_(_revoke_keyring_key(cd, 0));
 	else
-		FAIL_(_drop_keyring_key(cd, 0), "key not found");
+		FAIL_(_revoke_keyring_key(cd, 0), "key not found");
 	// same size is ok
 	OK_(crypt_resize(cd, CDEVICE_1, 0));
 	// kernel fails to find the volume key in keyring

From aa214c098a11297f1669fd4d30d2b9c98cbd365e Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 24 Jun 2026 11:21:27 +0200
Subject: [PATCH 147/244] tests: verify VK and internal keyring cleanup after
 process exit.

Check that both the intermediary keyring and the volume key logon
key are removed from the kernel keyring after the cryptsetup
process exits. Verify via search in /proc/keys.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 tests/compat-test2 | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)

diff --git a/tests/compat-test2 b/tests/compat-test2
index 9e74cc37d..631c8dd53 100755
--- a/tests/compat-test2
+++ b/tests/compat-test2
@@ -531,6 +531,26 @@ test_reencrypt_vk_link_and_reactivate() {
 	echo $PWD1 | $CRYPTSETUP open $LOOPDEV $DEV_NAME --volume-key-keyring "$KEY_DESC" --volume-key-keyring "$KEY_DESC2" > /dev/null 2>&1 && fail
 }
 
+
+# $1 substring to search for in /proc/keys
+wait_key_dissapeared()
+{
+	local ret=
+	local tries=50
+
+	grep -q $1 /proc/keys
+	ret=$?
+
+	while [ $ret -eq 0 -a $tries -gt 0 ]; do
+		sleep .1
+		grep -q $1 /proc/keys
+		ret=$?
+		tries=$((tries-1))
+	done
+
+	test $ret -ne 0
+}
+
 expect_run()
 {
 	export INFOSTRING="$(basename ${BASH_SOURCE[1]})-line-${BASH_LINENO[0]}"
@@ -1779,5 +1799,20 @@ $CRYPTSETUP luksDump $LOOPDEV | grep -q "6: luks2 (unbound)" || fail
 echo $PWD3 | $CRYPTSETUP open --test-passphrase -S6 $LOOPDEV || fail
 echo $PWD3 | $CRYPTSETUP open -S6 $LOOPDEV $DEV_NAME 2>/dev/null && fail
 
+if dm_crypt_keyring_support && dm_crypt_keyring_new_kernel; then
+	prepare "[54] Intermediary keyring VK cleanup" wipe
+	echo $PWD1 | $CRYPTSETUP luksFormat $FAST_PBKDF_OPT --type luks2 $LOOPDEV || fail
+	UUID=$($CRYPTSETUP luksUUID $LOOPDEV)
+
+	echo $PWD1 | $CRYPTSETUP open $LOOPDEV $DEV_NAME || fail
+	$CRYPTSETUP -q status $DEV_NAME | grep "key location:" | grep -q "keyring" || fail
+
+	# after cryptsetup open exits both the intermediary keyring and VK logon key must be gone
+	wait_key_dissapeared "keyring.*cryptsetup-${UUID:0:8}" || fail "Intermediary keyring persists in /proc/keys after process exit"
+	wait_key_dissapeared "logon.*cryptsetup:${UUID}" || fail "VK logon key persists in /proc/keys after process exit"
+
+	$CRYPTSETUP close $DEV_NAME || fail
+fi
+
 remove_mapping
 exit 0

From bfcb0c38eb95c08852c7dcd488c28e26c7775cf0 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 26 Jun 2026 16:26:45 +0200
Subject: [PATCH 148/244] tests: refactor keyring helpers.

---
 tests/api-test-2.c | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index c41eb4dc3..3ef0adca5 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -477,25 +477,27 @@ static key_serial_t add_key_set_perm(const char *type, const char *description,
 	return l == 0 ? kid : -EINVAL;
 }
 
-static key_serial_t _kernel_key_by_segment_and_type(struct crypt_device *_cd, int segment,
-						    const char* type)
+static key_serial_t _kernel_key_by_segment_uuid_and_type(const char *uuid, int segment,
+							 const char *type)
+
 {
 	char key_description[1024];
 
-	if (snprintf(key_description, sizeof(key_description), "cryptsetup:%s-d%u", crypt_get_uuid(_cd), segment) < 1)
+	if (snprintf(key_description, sizeof(key_description), "cryptsetup:%s-d%u", uuid, segment) < 1)
 		return -1;
 
 	return request_key(type, key_description, NULL, 0);
 }
 
-static key_serial_t _kernel_key_by_segment(struct crypt_device *_cd, int segment)
+static key_serial_t _kernel_key_by_segment_and_type(struct crypt_device *_cd, int segment,
+						    const char* type)
 {
-	return _kernel_key_by_segment_and_type(_cd, segment, "logon");
+	return _kernel_key_by_segment_uuid_and_type(crypt_get_uuid(_cd), segment, type);
 }
 
 static int _volume_key_in_keyring(struct crypt_device *_cd, int segment)
 {
-	return _kernel_key_by_segment(_cd, segment) >= 0 ? 0 : -1;
+	return _kernel_key_by_segment_and_type(_cd, segment, "logon") >= 0 ? 0 : -1;
 }
 
 static int _drop_keyring_key_from_keyring_name(const char *key_description, key_serial_t keyring, const char* type)

From e6573494f0feee971c8079d2697a2d925c3799a0 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 25 Jun 2026 15:35:07 +0200
Subject: [PATCH 149/244] tests: verify intermediary keyring cleanup after
 crypt_free().

Add API-level test that checks both the intermediary keyring and
VK logon key are unlinked from the thread keyring after
crypt_free(). Unlike the compat-test2 checks (which verify after
process exit), this runs in-process where the thread keyring is
still alive.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 tests/api-test-2.c | 48 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)

diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index 3ef0adca5..a6b82d187 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -520,6 +520,36 @@ static int _revoke_keyring_key(struct crypt_device *_cd, int segment)
 
 	return keyctl_revoke(kid);
 }
+
+static long keyctl_describe(key_serial_t id, char *buffer, size_t buflen)
+{
+	return syscall(__NR_keyctl, KEYCTL_DESCRIBE, id, buffer, buflen);
+}
+
+static int _intermediary_keyring_in_thread_keyring(const char *uuid)
+{
+	key_serial_t keys[64];
+	char rdesc[256], prefix[20];
+	long r;
+	int i, count;
+
+	r = snprintf(prefix, sizeof(prefix), "cryptsetup-%.8s", uuid);
+	if (r < 0 || (size_t)r > sizeof(prefix) - 1)
+		return -1;
+
+	r = keyctl_read(KEY_SPEC_THREAD_KEYRING, (char *)keys, sizeof(keys));
+	if (r < 0)
+		return -1;
+
+	count = r / sizeof(key_serial_t);
+	for (i = 0; i < count; i++) {
+		r = keyctl_describe(keys[i], rdesc, sizeof(rdesc));
+		if (r > 0 && (size_t)r <= sizeof(rdesc) && strstr(rdesc, prefix))
+			return 0;
+	}
+
+	return -1;
+}
 #endif
 
 static void _cleanup(void)
@@ -736,8 +766,26 @@ static void UseLuks2Device(void)
 	key[1] = ~key[1];
 	FAIL_(crypt_volume_key_verify(cd, key, key_size), "key mismatch");
 	FAIL_(crypt_activate_by_volume_key(cd, CDEVICE_1, key, key_size, 0), "key mismatch");
+	CRYPT_FREE(cd);
 
+#if KERNEL_KEYRING
+	OK_(crypt_init(&cd, DEVICE_1));
+	OK_(crypt_load(cd, CRYPT_LUKS2, NULL));
+	if (t_dm_crypt_keyring_support()) {
+		OK_(crypt_activate_by_passphrase(cd, CDEVICE_1, CRYPT_ANY_SLOT, KEY1, strlen(KEY1), 0));
+		OK_(_intermediary_keyring_in_thread_keyring(DEVICE_1_UUID));
+		OK_(_volume_key_in_keyring(cd, 0));
+	}
+	// All keys uploaded via current device context must be freed.
 	CRYPT_FREE(cd);
+	if (t_dm_crypt_keyring_support()) {
+		FAIL_(_intermediary_keyring_in_thread_keyring(DEVICE_1_UUID), "intermediary keyring not cleaned up");
+		FAIL_(_kernel_key_by_segment_uuid_and_type(DEVICE_1_UUID, 0, "logon"), "VK not cleaned up");
+	}
+	OK_(crypt_init_by_name(&cd, CDEVICE_1));
+	OK_(crypt_deactivate(cd, CDEVICE_1));
+	CRYPT_FREE(cd);
+#endif
 }
 
 static void SuspendDevice(void)

From 1267cab6b6fe65eb6fb9d52db18659850e82101b Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 27 Jun 2025 13:49:15 +0200
Subject: [PATCH 150/244] tcrypt: Support Argon2id PBKDF introduced in
 VeraCrypt 1.26.27.

It uses Argon2id only, with maximal memory cost 1024 MiB.
Parallel cost is always 1.

Default parameters (no PIM) is 416 MiB, 6 iterations (same as PIM 12).

In PIM mode, iterations and memory costs are calculated according
to the specific formula. Memory cost is always limited as above.
---
 lib/tcrypt/tcrypt.c | 82 ++++++++++++++++++++++++++++++---------------
 1 file changed, 55 insertions(+), 27 deletions(-)

diff --git a/lib/tcrypt/tcrypt.c b/lib/tcrypt/tcrypt.c
index 9e99a6151..7f187006f 100644
--- a/lib/tcrypt/tcrypt.c
+++ b/lib/tcrypt/tcrypt.c
@@ -22,25 +22,28 @@ static const struct {
 	const char *name;
 	const char *hash;
 	unsigned int iterations;
+	uint32_t parallel_cost;
+	uint32_t memory_cost;
 	uint32_t veracrypt_pim_const;
 	uint32_t veracrypt_pim_mult;
 } tcrypt_kdf[] = {
-	{ false, false, "pbkdf2", "ripemd160",   2000, 0, 0 },
-	{ false, false, "pbkdf2", "ripemd160",   1000, 0, 0 },
-	{ false, false, "pbkdf2", "sha512",      1000, 0, 0 },
-	{ false, false, "pbkdf2", "whirlpool",   1000, 0, 0 },
-	{  true, false, "pbkdf2", "sha1",        2000, 0, 0 },
-	{ false,  true, "pbkdf2", "sha512",    500000, 15000, 1000 },
-	{ false,  true, "pbkdf2", "whirlpool", 500000, 15000, 1000 },
-	{ false,  true, "pbkdf2", "sha256",    500000, 15000, 1000 }, // VeraCrypt 1.0f
-	{ false,  true, "pbkdf2", "sha256",    200000,     0, 2048 }, // boot only
-	{ false,  true, "pbkdf2", "blake2s-256", 500000, 15000, 1000 }, // VeraCrypt 1.26.2
-	{ false,  true, "pbkdf2", "blake2s-256", 200000,     0, 2048 }, // boot only
-	{ false,  true, "pbkdf2", "ripemd160", 655331, 15000, 1000 },
-	{ false,  true, "pbkdf2", "ripemd160", 327661,     0, 2048 }, // boot only
-	{ false,  true, "pbkdf2", "stribog512",500000, 15000, 1000 },
-//	{ false,  true, "pbkdf2", "stribog512",200000,     0, 2048 }, // boot only
-	{ false, false,     NULL,        NULL,      0,     0,    0 }
+	{ false, false,   "pbkdf2",   "ripemd160",   2000, 0,      0,     0,    0 },
+	{ false, false,   "pbkdf2",   "ripemd160",   1000, 0,      0,     0,    0 },
+	{ false, false,   "pbkdf2",      "sha512",   1000, 0,      0,     0,    0 },
+	{ false, false,   "pbkdf2",   "whirlpool",   1000, 0,      0,     0,    0 },
+	{  true, false,   "pbkdf2",        "sha1",   2000, 0,      0,     0,    0 },
+	{ false,  true,   "pbkdf2",      "sha512", 500000, 0,      0, 15000, 1000 },
+	{ false,  true,   "pbkdf2",   "whirlpool", 500000, 0,      0, 15000, 1000 },
+	{ false,  true,   "pbkdf2",      "sha256", 500000, 0,      0, 15000, 1000 }, // VeraCrypt 1.0f
+	{ false,  true,   "pbkdf2",      "sha256", 200000, 0,      0,     0, 2048 }, // boot only
+	{ false,  true, "argon2id",          NULL,      6, 1, 425984,     0,    0 }, // VeraCrypt 1.26.27
+	{ false,  true,   "pbkdf2", "blake2s-256", 500000, 0,      0, 15000, 1000 }, // VeraCrypt 1.26.2
+	{ false,  true,   "pbkdf2", "blake2s-256", 200000, 0,      0,     0, 2048 }, // boot only
+	{ false,  true,   "pbkdf2",   "ripemd160", 655331, 0,      0, 15000, 1000 },
+	{ false,  true,   "pbkdf2",   "ripemd160", 327661, 0,      0,     0, 2048 }, // boot only
+	{ false,  true,   "pbkdf2",  "stribog512", 500000, 0,      0, 15000, 1000 },
+//	{ false,  true,   "pbkdf2",  "stribog512", 200000, 0,      0,     0, 2048 }, // boot only
+	{ false, false,       NULL,          NULL,      0, 0,      0,     0,    0 }
 };
 
 struct tcrypt_alg {
@@ -239,7 +242,8 @@ static int TCRYPT_hdr_from_disk(struct crypt_device *cd,
 	/* Set params */
 	params->passphrase = NULL;
 	params->passphrase_size = 0;
-	params->hash_name  = tcrypt_kdf[kdf_index].hash;
+	/* For Argon2, overload hash_name */
+	params->hash_name  = tcrypt_kdf[kdf_index].hash ?: tcrypt_kdf[kdf_index].name;
 	params->key_size = tcrypt_cipher[cipher_index].chain_key_size;
 	params->cipher = tcrypt_cipher[cipher_index].long_name;
 	params->mode = tcrypt_cipher[cipher_index].mode;
@@ -520,7 +524,8 @@ static int TCRYPT_init_hdr(struct crypt_device *cd,
 	unsigned char *pwd = NULL;
 	size_t passphrase_size, max_passphrase_size;
 	char *key = NULL;
-	unsigned int i, iterations;
+	unsigned int i;
+	uint32_t iterations, memory;
 	int r = -EPERM, keyfiles_pool_length;
 
 	pwd = crypt_safe_alloc(VCRYPT_KEY_POOL_LEN);
@@ -563,7 +568,9 @@ static int TCRYPT_init_hdr(struct crypt_device *cd,
 		pwd[i] += params->passphrase[i];
 
 	for (i = 0; tcrypt_kdf[i].name; i++) {
-		if (params->hash_name && !strstr(tcrypt_kdf[i].hash, params->hash_name))
+		if (params->hash_name && tcrypt_kdf[i].hash && !strstr(tcrypt_kdf[i].hash, params->hash_name))
+			continue;
+		if (params->hash_name && !tcrypt_kdf[i].hash && !strstr(tcrypt_kdf[i].name, params->hash_name))
 			continue;
 		if (!(params->flags & CRYPT_TCRYPT_LEGACY_MODES) && tcrypt_kdf[i].legacy)
 			continue;
@@ -574,19 +581,36 @@ static int TCRYPT_init_hdr(struct crypt_device *cd,
 			if (!tcrypt_kdf[i].veracrypt)
 				continue;
 			/* adjust iterations to given PIM cmdline parameter */
-			iterations = tcrypt_kdf[i].veracrypt_pim_const +
-				    (tcrypt_kdf[i].veracrypt_pim_mult * params->veracrypt_pim);
-		} else
+			if (!strcmp(tcrypt_kdf[i].name, "argon2id")) {
+				if (params->veracrypt_pim <= 31) {
+					iterations = (params->veracrypt_pim - 1) / 3 + 3;
+					memory = 1024 * (64 + (params->veracrypt_pim - 1) * 32);
+				} else{
+					iterations = params->veracrypt_pim - 18;
+					memory = 1024 * 1024;
+				}
+			} else {
+				iterations = tcrypt_kdf[i].veracrypt_pim_const +
+					(tcrypt_kdf[i].veracrypt_pim_mult * params->veracrypt_pim);
+				memory = 0;
+			}
+		} else {
 			iterations = tcrypt_kdf[i].iterations;
+			memory = tcrypt_kdf[i].memory_cost;
+		}
 		/* Derive header key */
-		log_dbg(cd, "TCRYPT: trying KDF: %s-%s-%d%s.",
-			tcrypt_kdf[i].name, tcrypt_kdf[i].hash, tcrypt_kdf[i].iterations,
-			params->veracrypt_pim && tcrypt_kdf[i].veracrypt ? "-PIM" : "");
+		if (!strcmp(tcrypt_kdf[i].name, "argon2id"))
+			log_dbg(cd, "TCRYPT: trying KDF: %s%s.", tcrypt_kdf[i].name,
+				params->veracrypt_pim && tcrypt_kdf[i].veracrypt ? "-PIM" : "");
+		else
+			log_dbg(cd, "TCRYPT: trying KDF: %s-%s-%d%s.",
+				tcrypt_kdf[i].name, tcrypt_kdf[i].hash, tcrypt_kdf[i].iterations,
+				params->veracrypt_pim && tcrypt_kdf[i].veracrypt ? "-PIM" : "");
 		r = crypt_pbkdf(tcrypt_kdf[i].name, tcrypt_kdf[i].hash,
 				(char*)pwd, passphrase_size,
 				hdr->salt, TCRYPT_HDR_SALT_LEN,
 				key, TCRYPT_HDR_KEY_LEN,
-				iterations, 0, 0);
+				iterations, memory, tcrypt_kdf[i].parallel_cost);
 		if (r < 0) {
 			log_verbose(cd, _("PBKDF2 hash algorithm %s not available, skipping."),
 				      tcrypt_kdf[i].hash);
@@ -1180,7 +1204,11 @@ int TCRYPT_dump(struct crypt_device *cd,
 			log_std(cd, "Volume size:\t%" PRIu64 " [bytes]\n", hdr->d.volume_size);
 		if (hdr->d.hidden_volume_size)
 			log_std(cd, "Hidden size:\t%" PRIu64 " [bytes]\n", hdr->d.hidden_volume_size);
-		log_std(cd, "PBKDF2 hash:\t%s\n", params->hash_name);
+		if (strcmp(params->hash_name, "argon2id")) {
+			log_std(cd, "PBKDF:\t\tPBKDF2\n");
+			log_std(cd, "PBKDF2 hash:\t%s\n", params->hash_name);
+		} else
+			log_std(cd, "PBKDF:\t\tArgon2id\n");
 	}
 	log_std(cd, "Cipher chain:\t%s\n", params->cipher);
 	log_std(cd, "Cipher mode:\t%s\n", params->mode);

From 4e0c3c87d7b2c2a52f14796a5da0308e0d2597b4 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 27 Jun 2025 13:56:11 +0200
Subject: [PATCH 151/244] tests: Add PBKDF check for crypto helper.

This can be used in FIPS mode to skip Argon2 if not available.
---
 tests/crypto-check.c | 33 ++++++++++++++++++++++++++++++++-
 1 file changed, 32 insertions(+), 1 deletion(-)

diff --git a/tests/crypto-check.c b/tests/crypto-check.c
index 99772f6ea..e39bb2973 100644
--- a/tests/crypto-check.c
+++ b/tests/crypto-check.c
@@ -53,9 +53,36 @@ static int check_hash(const char *hash)
 	return EXIT_SUCCESS;
 }
 
+static int check_pbkdf(const char *pbkdf)
+{
+	const char *hash;
+	uint32_t iterations, memory, parallel;
+	char out[32];
+
+	if (!strcmp(pbkdf, "pbkdf2")) {
+		hash = "sha256";
+		iterations = 1000;
+		memory = 0;
+		parallel = 0;
+	} else if (!strncmp(pbkdf, "argon2", 6)) {
+		hash = NULL;
+		iterations = 3;
+		memory = 256;
+		parallel = 1;
+	} else
+		return EXIT_FAILURE;
+
+	if (!crypt_pbkdf(pbkdf, hash, "01234567890abcdef01234567890abcdef", 32,
+	    "11234567890abcdef11234567890abcdef", 32, out, sizeof(out),
+	    iterations, memory, parallel))
+		return EXIT_SUCCESS;
+
+	return EXIT_FAILURE;
+}
+
 static void __attribute__((noreturn)) exit_help(bool destroy_backend)
 {
-	printf("Use: crypto_check version | fips_mode | fips_mode_kernel | hash <alg> | cipher[-kernel] <alg> <mode> [key_bits]\n");
+	printf("Use: crypto_check version | fips_mode | fips_mode_kernel | hash <alg> | cipher[-kernel] <alg> <mode> [key_bits] | pbkdf <alg>\n");
 	if (destroy_backend)
 		crypt_backend_destroy();
 	exit(EXIT_FAILURE);
@@ -102,6 +129,10 @@ int main(int argc, char *argv[])
 			r = check_cipher(argv[2], argv[3], ul);
 		else
 			r = check_cipher_kernel(argv[2], argv[3], ul);
+	} else if (!strcmp(argv[1], "pbkdf")) {
+		if (argc != 3)
+			exit_help(true);
+		r = check_pbkdf(argv[2]);
 	}
 
 	crypt_backend_destroy();

From ee1c86745a7333a8e97c85b63541b92af9a2e331 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 27 Jun 2025 13:57:20 +0200
Subject: [PATCH 152/244] tests: Add new trcypt images for Argon2 PBKDF.

Also modify test to use longer PIM password, as VeraCrypt
requires at least 20 character password with lower PIM values.
---
 tests/tcrypt-compat-test   |  77 ++++++++++++++++++++++++-------------
 tests/tcrypt-images.tar.xz | Bin 351900 -> 364528 bytes
 2 files changed, 50 insertions(+), 27 deletions(-)

diff --git a/tests/tcrypt-compat-test b/tests/tcrypt-compat-test
index d22d1a979..36b0942e1 100755
--- a/tests/tcrypt-compat-test
+++ b/tests/tcrypt-compat-test
@@ -9,7 +9,7 @@ MAP=tctst
 PASSWORD="aaaaaaaaaaaa"
 PASSWORD_HIDDEN="bbbbbbbbbbbb"
 PASSWORD_72C="aaaaaaaaaaaabbbbbbbbbbbbccccccccccccddddddddddddeeeeeeeeeeeeffffffffffff"
-PIM=1234
+PASSWORD_PIM="cccccccccccccccccccc"
 LOOP_SYS=""
 PART_IMG=tctst-part-img
 
@@ -77,11 +77,40 @@ test_kdf() # hash img_hash
 	fi
 }
 
-get_HASH_CIPHER() # filename
+test_pbkdf() # pbkdf img_hash
+{
+	$CRYPTOCHECK pbkdf $1
+	if [ $? -ne 0 ] ; then
+		echo "$1 [N/A]"
+		IMGS=$(ls $TST_DIR/[tv]c* | grep "$2")
+		[ -n "$IMGS" ] && rm $IMGS
+	else
+		echo "$1 [OK]"
+	fi
+}
+
+get_PARAMS() # filename
 {
 	# speed up the test by limiting options for hash and (first) cipher
 	HASH=$(echo $file | cut -d'-' -f3)
 	CIPHER=$(echo $file | cut -d'-' -f5)
+
+	if [[ $file =~ vcpim.* ]] ; then
+		PIM=$(echo $file | sed -r s/.*vcpim_1_\([[:digit:]]+\).*/\\1/)
+		PIM_OPT="--veracrypt-pim $PIM"
+		PWD=$PASSWORD_PIM
+	else
+		PIM=""
+		PIM_OPT=""
+		PWD=$PASSWORD
+	fi
+
+	SYS_OPT=""
+	if [[ $file =~ sys_.* ]] ; then
+		SYS_OPT="--tcrypt-system"
+	else
+		SYS_OPT=""
+	fi
 }
 
 test_required()
@@ -97,6 +126,8 @@ test_required()
 	test_kdf whirlpool   whirlpool
 	test_kdf stribog512  stribog
 
+	test_pbkdf argon2id argon2id
+
 	echo "REQUIRED CIPHERS TEST"
 	test_one aes cbc 256 cbc-aes
 	test_one aes lrw 384 lrw-aes
@@ -155,16 +186,12 @@ test_required
 echo "HEADER CHECK"
 for file in $(ls $TST_DIR/[tv]c_* $TST_DIR/vcpim_* $TST_DIR/sys_[tv]c_*) ; do
 	echo -n " $file"
-	PIM_OPT=""
-	[[ $file =~ vcpim.* ]] && PIM_OPT="--veracrypt-pim $PIM"
-	SYS_OPT=""
-	[[ $file =~ sys_.* ]] && SYS_OPT="--tcrypt-system"
-	get_HASH_CIPHER $file
-	echo $PASSWORD | $CRYPTSETUP tcryptDump $SYS_OPT $PIM_OPT -h $HASH -c $CIPHER $file >/dev/null || fail
+	get_PARAMS $file
+	echo $PWD | $CRYPTSETUP tcryptDump $SYS_OPT $PIM_OPT -h $HASH -c $CIPHER $file >/dev/null || fail
 	if [[ $file =~ .*-sha512-xts-aes$ ]] ; then
-		echo $PASSWORD | $CRYPTSETUP tcryptDump $SYS_OPT $PIM_OPT -h sha512 -c aes $file >/dev/null || fail
-		echo $PASSWORD | $CRYPTSETUP tcryptDump $SYS_OPT $PIM_OPT -h xxxx $file 2>/dev/null && fail
-		echo $PASSWORD | $CRYPTSETUP tcryptDump $SYS_OPT $PIM_OPT -h sha512 -c xxx $file 2>/dev/null && fail
+		echo $PWD | $CRYPTSETUP tcryptDump $SYS_OPT $PIM_OPT -h sha512 -c aes $file >/dev/null || fail
+		echo $PWD | $CRYPTSETUP tcryptDump $SYS_OPT $PIM_OPT -h xxxx $file 2>/dev/null && fail
+		echo $PWD | $CRYPTSETUP tcryptDump $SYS_OPT $PIM_OPT -h sha512 -c xxx $file 2>/dev/null && fail
 	fi
 	echo " [OK]"
 done
@@ -172,17 +199,15 @@ done
 echo "HEADER CHECK (TCRYPT only)"
 for file in $(ls $TST_DIR/vc_* $TST_DIR/vcpim_*) ; do
 	echo -n " $file"
-	PIM_OPT=""
-	[[ $file =~ vcpim.* ]] && PIM_OPT="--veracrypt-pim $PIM"
-	get_HASH_CIPHER $file
-	echo $PASSWORD | $CRYPTSETUP tcryptDump --disable-veracrypt $PIM_OPT -h $HASH -c $CIPHER $file >/dev/null 2>&1 && fail
+	get_PARAMS $file
+	echo $PWD | $CRYPTSETUP tcryptDump --disable-veracrypt $PIM_OPT -h $HASH -c $CIPHER $file >/dev/null 2>&1 && fail
 	echo " [OK]"
 done
 
 echo "HEADER CHECK (HIDDEN)"
 for file in $(ls $TST_DIR/[tv]c_*-hidden) ; do
 	echo -n " $file (hidden)"
-	get_HASH_CIPHER $file
+	get_PARAMS $file
 	echo $PASSWORD_HIDDEN | $CRYPTSETUP tcryptDump --tcrypt-hidden -h $HASH -c $CIPHER $file >/dev/null || fail
 	echo " [OK]"
 done
@@ -190,10 +215,10 @@ done
 echo "HEADER KEYFILES CHECK"
 for file in $(ls $TST_DIR/[tv]ck_*) ; do
 	echo -n " $file"
+	get_PARAMS $file
 	PWD=$PASSWORD
 	[[ $file =~ vck_1_nopw.* ]] && PWD=""
 	[[ $file =~ vck_1_pw72.* ]] && PWD=$PASSWORD_72C
-	get_HASH_CIPHER $file
 	echo $PWD | $CRYPTSETUP tcryptDump -d $TST_DIR/keyfile1 -d $TST_DIR/keyfile2 -h $HASH -c $CIPHER $file >/dev/null || fail
 	echo " [OK]"
 done
@@ -207,10 +232,8 @@ fi
 echo "ACTIVATION FS UUID CHECK"
 for file in $(ls $TST_DIR/[tv]c_* $TST_DIR/vcpim_*) ; do
 	echo -n " $file"
-	PIM_OPT=""
-	[[ $file =~ vcpim.* ]] && PIM_OPT="--veracrypt-pim $PIM"
-	get_HASH_CIPHER $file
-	out=$(echo $PASSWORD | $CRYPTSETUP tcryptOpen $PIM_OPT -r -h $HASH -c $CIPHER $file $MAP 2>&1)
+	get_PARAMS $file
+	out=$(echo $PWD | $CRYPTSETUP tcryptOpen $PIM_OPT -r -h $HASH -c $CIPHER $file $MAP 2>&1)
 	ret=$?
 	[ $ret -eq 1 ] && ( echo "$out" | grep -q -e "TCRYPT legacy mode" ) && echo " [N/A]" && continue
 	[ $ret -eq 1 ] && ( echo "$out" | grep -q -e "TCRYPT compatible mapping" ) && echo " [N/A]" && continue
@@ -241,28 +264,28 @@ for file in $(ls $TST_DIR/sys_[tv]c_*) ; do
 		LOOP_SYS=""
 		continue
 	fi
-	get_HASH_CIPHER $file
+	get_PARAMS $file
 	# map through partition name
 	echo -n " [PART]"
-	echo $PASSWORD | $CRYPTSETUP tcryptOpen --tcrypt-system -r -h $HASH -c $CIPHER $LOOP_PART $MAP || fail
+	echo $PWD | $CRYPTSETUP tcryptOpen --tcrypt-system -r -h $HASH -c $CIPHER $LOOP_PART $MAP || fail
 	check_uuid DEAD-BABE
 	$CRYPTSETUP close $MAP || fail
 	if [[ $file =~ _part ]]; then
 		# map through image only (TCRYPT hdr contains partition offset and size)
 		echo -n "[IMG]"
-		echo $PASSWORD | $CRYPTSETUP tcryptOpen --tcrypt-system -r -h $HASH -c $CIPHER $file $MAP 2>/dev/null || fail
+		echo $PWD | $CRYPTSETUP tcryptOpen --tcrypt-system -r -h $HASH -c $CIPHER $file $MAP 2>/dev/null || fail
 		check_uuid DEAD-BABE
 		$CRYPTSETUP close $MAP || fail
 		# map through full device (TCRYPT hdr contains partition offset and size)
 		echo -n "[DRIVE]"
-		echo $PASSWORD | $CRYPTSETUP tcryptOpen --tcrypt-system -r -h $HASH -c $CIPHER $LOOP_SYS $MAP || fail
+		echo $PWD | $CRYPTSETUP tcryptOpen --tcrypt-system -r -h $HASH -c $CIPHER $LOOP_SYS $MAP || fail
 		check_uuid DEAD-BABE
 		$CRYPTSETUP close $MAP || fail
 	elif [[ $file =~ _full ]]; then
 		# map through image + header in real partition (whole system)
 		dd if=$LOOP_PART of=$PART_IMG bs=1M >/dev/null 2>&1
 		echo -n "[PART+IMG]"
-		echo $PASSWORD | $CRYPTSETUP tcryptOpen --tcrypt-system -r -h $HASH -c $CIPHER --header $LOOP_PART $PART_IMG $MAP || fail
+		echo $PWD | $CRYPTSETUP tcryptOpen --tcrypt-system -r -h $HASH -c $CIPHER --header $LOOP_PART $PART_IMG $MAP || fail
 		check_uuid DEAD-BABE
 		$CRYPTSETUP close $MAP || fail
 		rm $PART_IMG
@@ -275,7 +298,7 @@ done
 echo "ACTIVATION FS UUID (HIDDEN) CHECK"
 for file in $(ls $TST_DIR/[tv]c_*-hidden) ; do
 	echo -n " $file"
-	get_HASH_CIPHER $file
+	get_PARAMS $file
 	out=$(echo $PASSWORD_HIDDEN | $CRYPTSETUP tcryptOpen -r -h $HASH -c $CIPHER $file $MAP --tcrypt-hidden 2>&1)
 	ret=$?
 	[ $ret -eq 1 ] && ( echo "$out" | grep -q -e "TCRYPT legacy mode" ) && echo " [N/A]" && continue
diff --git a/tests/tcrypt-images.tar.xz b/tests/tcrypt-images.tar.xz
index 388c142663a75bd01391e411ea717ed94603a756..f431393ad321749da327f6362be1a7348d2421f3 100644
GIT binary patch
literal 364528
zcmV(pK=8l)H+ooF000E$*0e?hz|@8bfPjDuApsTu0000QO)PQ$|BAx$T>v^5%B+TH
z`=|ooorH?HxDBcKbl(%zwkj%05V}X3Q)r6E5U#AcFg!GLltxEVHb2a|s`rcJrUcZ0
z<5?mAzD$|TXh-|Ff!DYabZK!xX64iD<ly(-t;qM=U9VW6bKK&TOmEcg)QDIZMudrz
z%%3X;t=c#13v0uNCfMbnlQ5Xx9o|e4C>%>%hUv9)`dEEE$<&qt9+%vp41d@hg+0+r
z=@_&?jO0tF;aa0jDABW4=M%3`ze6;N&Qs2<<=PH0_A1oZcwiD>J>0RgdIP?2HP01~
z2Sf3GbmmGeNBm!X*LKZ>vg}1Re1BeeTusc*eMUo5x5Yhz40~L|^b*I4Gh!Kv0Ruce
zoov6*Fk<8=M=37}sc&jP(yLGTdSm7<se6T{m(Z>*pnF5~s8uo1_#|)t!O)m~fK0MF
z4`lTuCtemvR_Oz}m8Ptt6y)(+VwuRz2Z@xR=huV6XvvF#()GyjD`XD5qU*T8j13)*
z`h!AlK^T1!2cZ(Fz;ed2qchY9I&p*pmyjFRRWU+f{U#C5a~PyOyU0hq1vBo4xc?^U
z7)HIRI}df9by7Fd+aA-IK}Ws%F10H7xl!=$ghoLFUTlP=bI%S?AfI<N7ki*<HVD^2
zwKz#-PuB*;G_m1ZDmj_Gpj_6U;k>>t{q7ca-^u;dk;UN?wBa6um~!Q$YWr(@eSpM1
z8;jzS-xk}CxT#qbxAHZSaG@A`zap&j*QuJz2jb1a_zBxf#Y;{HzUB}bSJF9g3olg_
zTZQ4VDOSiuyf_j&O%o~)n=k~b5q&~k0ma}oc44m>8$?@)=;=)}IUe@J;qh^I?Uo*r
z^$A4}()}x;T#m?JOlwruzD=kEn#Li?WGCUPnY(-zF)dkZ;L3Fkzd_dEpW4Jy^dO#V
zadCb>u<-Nfhr9wN)+C8Cwk=9kgm|1&!=y4p1?{U(30FaG1fhBqlI~*icM0zoYjNr^
zBLxdz0%m)n760~G2OkBV?FWtx%I}uI9MIy40}qQGTAJ1u-`j%C+la*0V(~T^uFS@C
zgE_dqs_b4<$scpvebsxa;`f(K1`&Dlz87P4z$>!^a7(tr?oIs)boug3z<E<}yobiO
zU~PRMNVmxwjo<@uqyV8^q##Tj(IUd>_|g3ByFTn}#wI1{*UJQ$a)2@ooc2C(lFQ37
z8e|N*pM8{_6Mp|e3lh%%kxwE%39$k<WGrg#Q~0bAwc~u@8_&N8f-=r2KA2*8=ybZ?
zG;5myi@eal*K+WyZ8M`-&34wLO)D-t&_FLr!`9GGoKlb%m{<3$Z~lQPjwQ)MA9tlm
zrp^9dXr0{CN1i+KHJ<7{$`-=u?FUiwZRyi*iPtIKbmU4RxF7C%7$5>3WT>wp;T3fd
zW?jfJl!}<HDEQK3N!3;afQs21x85AA5jir($0V_Xk&o#Ct5qoK36S!&vvq?<A3ZV~
zB6**$#qmby2zFkc3M=ylurXLCkvyBL6hgeILc4yCmL{vhvjj#IN*=^NI*3EoyoyQU
z2>_Zbvo5$Q$0*#buS|n4<iiGh%d%X)AL@Lq%GRf5`RsUP7F6iVC6H0eBI-{-V_0EI
zKN)+YuWQq3cbLdhIo;8MUMhp{c$kVe`xgXDn7-TqyV#ioSOi10jv*#J?PBv9K?H#W
zZmmJ+Y?^5zl+7m!yuFSzt6qfk^Pr9P1vd4YVi3qjl|kfa4oxd;>FKmvH0i*e=2W9A
zRxA*v+NWz(P|$K^zf9xU!>C7C-cflF>+kT=M~tG!;F0=GITwH*&0vpU^HLVum=G4&
z%`<%&#Ys_-V7@uIX%3<GMHI>JfX1OC;qqC{dm$zARM8b>E^^Ud3$sjE)b>KCq+(6~
zBA;D2w2rn!@%gfS<KQ7SIGauW-3PVaDe;dHqY4pg_A~T;oS`t{7iIvy1=Mp0<7Uz$
zqw#8-XOKg}%aWp<vGz2VsFer+D-tbchD#BVTn6d+`c)xY-sAA~sEi^0O%yo6E|3hW
ztazWpRCq>{aUL+MKcU8;XnWZ$;`m8Ll5j+wKkuNn@O2lNpGDvN{^3OMpSbX;?risF
zT-RYd+<m_aa9!Wkwo0u<wzBD_HakzY*x7)iY$xf^HM+hkHp)Izw59d*K#fOHFjXtI
zgJt98m^cg@m;6Mzv|)KwwWig+jo8gH%>Z%kfTo&X_MdVZ8RVt}46gCf2=<ptajG-H
z0;iUOisf0FP}o?IAe=RDhE#5XZM}4Un6Cg`0;IF$lG-FxYmR9QRN#CA*HKQkNeKnl
z!ww@T>rukvN^6{x4X|1bRDHjs>WZI35Acmf=wL*j$3MMKIL}0Ckq;Hm)kT(=Y4V$x
z0vVJHMUe$srGMkd@FIsM+W=Je|9Mdj7U#s-x)>M(RH}Z2tFlV6ioW({rE>B&GfV>_
zy9@b-=0eP<%J}Q}W*_0CkVtM>u6l3p)mIqx0A^gvl?+W6HBdb%MgQTA)!NRG?g3Zx
zSABMQ1`3r9k0y}ZIc5}|)<4f8xR(Cp)6~`b(-GyvGRrG0K2We9=1YK>*K?AUZcUwk
zOWz(77**|dD<e*oBxK!#ayoB<vXZ+Jz!L4g(4fm(c2CGMy4HjeHQ_j(;%X!D5L^z?
zaW8z8kk3+2OdTO`DG9Jj1MNYK70gdaMIahjG(20{S2`|I|L834IJnS|`DchbDC*!I
zXJgYsaE2%j1Z`AeP0>_?m3bOfWT;}%<r5ev&6~v8dtj<z9Kfe61l<Dc?2M+>-#z4K
z1demn(GZ`oLW2j1AZ|giQgoT0zHmdbVk^Q0Ez6~lwm*QzZ3i2aj>%PFn@axY?-<%M
z?N7^Jlm{`n)U~~rHnKm~Ot1CzheSn?7yOW_Eh7lezr3D0lFpT=><L9@phU3+W;p0u
z?-MKBjsddvsi$&Zs7r^K+l!;UO)%(>+X%ACJ`xC>y$}Sr3{97G`V%#{&R}S2fX(v^
zmr&WUSRw&ma#8Wr(bj$LumNNSI9T9@p=)cdnhEo^S@MF}Rs8_Zk`u2Wu~ujZ@kwfQ
zSgAs_mP4gH?<C&i6wZYCLlRkt;VKYOf2SFzBM4Y;rwI~nZaiVp!|Jv$88L^thh@a6
zNSYF(C~d2jxIz3emC<F}IZEYwEMC)o@B4}i_<2p63mdOyf*!DIplrKD+j~BJUEKzJ
zJ`}NapUZ)wH=EUx_`s47FX=o`liw9p)09gQ_%K`M?K4v-)JY&`HJKdD$-tg>;SU>&
z;hOp}768OKS^fE(pd@c&O$ZYRn%Un@EgZ)2R3mT6-JX?u7NV_f>4-8^KUjv}BI1jz
zKq)-Wbs|{HtB>XN{UIQE<Q}!qKtHFw?${RNpo6p<mIq#+>#(ve7-WRR7sJ%5vY>+}
z@MX)kZ))#A8UPYF95_Y48?ruz;rGI;TwYz3a9;ZuPrGRKP@)=xqIxpjoDMT8dPV^S
z_OL#1#K|ts!ueAkfHvtSqX=;?-iC`}#~Bv<mu2R->n3G#gstRuhL7%L%PZ8Mz)gHC
zpO-_aqd0fP*Qyy?v^6wnx40lz7*q<na97{o7}AvLz5EKv1?1AiHU!Us<k0UUCTnFk
z{`bD9oz-{`nHWVkI@--Gk?tAW2(G<72U$}(`_d28!V4FB_SC@%z^3zuyti`re(p^P
zuH9<ms2vF<warHJZqqc=sPBd1rs(;QW`>sjWhWP6w2LAtv`p8KRMF5@@dt<`cHT>@
zTC@U11wHC9uu*71ndDl4r_iWje?_aWf%*T4Gh{`(ZILHH-bhrZs^RtM{K1;kaxOi%
z!YcwaeNmn>&<2Yi&E#yR!t7gardMd@ID8bXVJp>LKSvmE>x%F(OD7qy`CDBDjfE+$
z8LVi#29?A2bxKw8HNee`o<II^KMfBZ`m^PR)7XL&As5r`MbWCE0gSTsxC$5Y=bm-d
zV{vDTO{37HXf@7+W%(591dHt19l4dZm(fQ3v5|6Ei|m_talkvD@0o^gG_wmF_S6!)
zW&7F4HA22b0O59F4qlN<4ON20{8fMRkMo;vD@&@O{T*6u1H7>>jU@M&ntsSF1vG{p
z`2Gj+5L~C1!y0lRP+h{L5itT?uX3xjv9R;&<rNG17NV=Oc3Z`WsuKu?BLsUhD%18q
zBw^ZYH*>(?Iy@`DJ9({+B4n1pfmV@&@-yNVAa!2z`k$0F(a}$&IB!AQxQ-C6IR+{Y
zt7DT7r*m88s-2Nw0oxoC$`^x4b7t@R1po%j?Nt#d44<>X6ARBI>O9Zv2DD10eV)?_
ztuVmnFjv-fch^Z5sK?VJ#3$YMF+T2bRhgHEJL00FzM<)96S^h#X#%Wcpq^?z!YC!2
z!l;Vdo5-2=Hnl0|Ey0!0Q)P*%_JzFnh*mLbFDi|cy;mp8w}kiybbHo07s>{wu&pw^
z8Yt7<7^vem%4v0I5Lb<=Yq+R2fPzQ30U|*j{qcjLu$v@q(RsLmkxCfx1DKY8!?IZ1
zI{SXog}km0JcA3`Bzbgwu>c>Y)b!kF4@wFka6!X613U^ssxsf$`PgHQOte|R(KSY}
znBt!;x(gHX^<NxvIUz>P^@B;!KD7+U85x|ICUbW?ci(+vYlKyo-KwhVm=oAZErROP
zSazuLt_q8QE5m*C_zRZNjYsE~Jrt&wSFT!d#95t-+<B&755H*XnRtDMz9}j}`;xp0
zgw^((B-WaY>P#=kqj@Wi1qUFXiE#61eE>S?>3=)EpVfsHKr%9BrJqKDHbR&{sV8R|
zb`60=biCQViYRKsYkgK)D54-U`#8O~XgQRj)zjC2Dph6}SKCV0e+8ZeHd)38F62m}
zX&0+WL_V#VkADB{cvWx~U4{2r*?4WBjv&>a)O$|1gf_Xd1y(Y-FL>Q6OO(W!-OyUr
z8-`37+lFz@@!<VB$x=%6A;Hd=%QvIE6(V2NHoy7l^;i%7SQhcaOmE=?!MQ~U7?_pS
zWOETqT1yatm0!R^Gp@f*MHS@kX)*Le1SfF85+{ATuVY@^zexM%|0>TE*`gq}F@P36
z_pGV#*CNrearE5Im)!|l-#5diq2MoLD)ICIun)km(L&+XVV~@P^HuWj%f#`Ol^4dc
zG#(cJEmxEm&*eq7R{AVasZc1>gd#b_jujKyR5r(c$P!4tk^!PbOs5Nm2fFGGR#$t#
zT>lRWFrS~2KBo^-@q?v9HeYBDdA<iH>W-2pG|NM5cyF@|$%XlM{DeEY@mBwF2V+lo
zEY!NHyenq|pqix%6yJi1UN4{4%LI7yZd<6*>1TxBSvql=C-=K@0;i<7OgdlG0S_(`
zXrT~XK%^1m8O*>Fo?5NQ4x#r|&%ZhQG4{Idd&eDHizZ#=l%7RZHFtr59D8xYf5NuE
zd0gF5<nZXoe_~Q=%^8PO>^F_-<M`DGLi%JpVu@V|z5(cp3HV^xNOqQy7F$wRUXjb$
zbc2rcg5277ab!X+|By%^df_l{JGc*_iq*hC?5xApg5A%5sP#P>cZ@#&q_^9@v0}SX
z6E|2?LrznhQj>-x*29l(Lmn11HMH%{Md!$6P|8q6sHnKZzgIe^WU8K~Oz)3PbM>I>
zdH-j<>vMY&RlF0F`&PCyarNyOw;#7B_xtZ8*|NP%aY)xw9#tteU}9p9i00h7GK_J+
zsd4C5W1PM1;(FjO4U2ThX#J-rv0>x-rXQWujDKxzBsl+mx4bJ>1d#NM3m`akxs}Bu
zA|l0C$MjACn<N1yYB1|4*l6su%R84TysU0#kWS4ALr%IdK(AwMc*{_*t|r(}D$lSd
z9Jh~Ja+$i|2qu}o#<3XDw1-?f)bbbpT$suz(w(6K2YcMrJ&@ZhTY&z@{u#^o-)<D%
z8JuCkii?%|?8?frkmjQ^k0-qS+0Eu2l%Hor#A|1KEeM!Bi~q4m&~gJuYoi^j6^}e?
z-7>&c7+R_CBHIuqr^D(tTcvGDQ(XhFzV}H-1B)uzJf&Z3l#fc>K}@GpkhiI5;?HLs
zHOZv(gT{<ggN-)pfnjht)y5yid(_fVF~=q6qBQHl#6JjN&oS5$(*#jR-ZZu72-ax1
zU1*=nBptjxr-Q!t84w_@A~fF_pjjizhyB(AjD#~};{4khJA;1_h6l>8cEw{yzByim
z2QRF5tvBOjtDaoMmZ{sC3db<F^h6=S@M!ieMzG31;O>^KaBQ8cx_iHi%@G47IopY=
z6bj|&qhrhJg@PJqomR!dK1Z*dy4VrCFu-e7!`SjW;?Mq&^b&7CzWA?m-=;m?-MJmv
z?|wz2W&p7>?S^eL%u_l1(eHT8dqV2rcG4Wx@(E@7N~d6av^|57NumId@Pe)*S{CDw
zQl$mMvgt=w!(RmOV_I1O?JR@sZJRh(ECJ7^0bD-(=!a2%i-%HnIsqZ)v&nK@@t<ko
zBO2?wv+okB$ONcHYoiuKjr1(<_-w;bggF-S<7H7|M&h@_I?ueTYGtGMW6A?X*16&1
z@xIjz7%jhEy^)>$?c*E2f!=e&*;l*Q%1B|GBXi<4&47u9^}x;l%Ag@;)42~EpTYH?
zw*apEJ!j>3zQ7Zvj?*50nhiaM{T9yQ31$&6uxLR7hFhe_pKf|;Ni64HH(2oaHNaeD
zPmBZ1On*6!yz^Ekt*b7{FMIeAbyzFHe<gujAnQCZt#<?HMA`+xX~B&_gUfm$oMU?6
z<JoOdGTmMm1b;qin%7r1(W=msbLJR;JX{IANk)h*y}=P_10t%kYH~^WlG@i-G5eS}
z>mbJw4^hu464M2NqO?x%qRL%hZ(Uh*5)B+(asCGm@`k79U*!I*vTtjc0j)eyngAbU
z{I%n_O*6<!<oZ_0?_JjLyFG1RliPka<+|4w)%2S~1pzd18yXcsaH1J4i5h_47f<gi
z1TJ44SMMZ11b`2T$eWdsMF?`Svo(>HP7;K&pc^v$s2`%d_T<2m?q-pibqghxas;W#
z0|xA=hg!wtp>fW5icCs<@&oer+mnP@DdGu%3?{OE462XGMf=E%M*4Nm7SwaIn02fm
zOKKcf;2nT{KIT};rX@n|AV$)(r31kQFrgO!w+DyY7S3T5Ysu?bMoC!;Il{A^W|q!I
zVqbE>t$`e@l|djtQW~;~4T|0L03mzD=$G8h$E(opNuH!z7`>(6se?sbDCR53+Qp+>
zbz67^`9uk*>hRfC#epC>SL#Qrbd1pzov^Pz>!kDzd*H{LL(fDd8mZXy33&+`Hn#lo
z6;wkydYv#C<~j$cK$qI!<HU2dWiaa{m-&TTqbTTmN<#59qFjBv$a2;q-O4PRJCT1~
zIxlG5=k9|xe^3v?d%K}mp>8@@D@ChUk%|v}rGO{1--Zn?06P*taHKi<4}&Nu`C=Zj
z@0~5k2YaPz0&(QC3i_)#`z?I90U8_IVTfAK$J_5<6?vN?<Oz5Pq;+XQX<1Usv1@d>
zDgYbgAIEXN>hD`qKKm1zU`=(qfJ?DP{z;W0p0R70%qMT6=b`PqAS%WDn5|pV_hmWd
z4F|JTgt_+Sr)Ctuk6nD36<^MN9>|5%LuHjNI1l*y+Fz)9SVJXJksb&#>rf!$59bsa
z)i=x{%xn^H!Y0z+AKiFg@OOy#HaBw2kfOavskVbb9Lj>ltYrT{43La*c7FHAv<_N4
zj1TZktqzmqLe#-$<&M7=Ousg80ZBog{bO{}&9w|QjHCgpB-7jhPDV6MR9rf>Dv5?s
zhu@yW)Nq#?Wi-u1zyRgw8L{?F%=_%&v4A-zHEJ(Y3SZP%0XeCPdfDw82y>h!er&Xg
zUIj6-DY?RW-5bTq#~TJ~G%GB`kKT?mh>%HddB(Cpo=W~~t8`&Pw}W@}$9D81IC!M4
zx$zq8cSNRteg2{cYQqJlbeSik5ssUM$NHHZnx7~>^G$(+p@T%da^H^YbfV>!%hsIY
zdNE0~JW~pL$*%bS7OovxN5pNdYc2s3CVHZP9tCtH<6_GZ_!8P&-WIjty|kv2ab3De
z9=rEmYAG-8C>muPg!Ip3fp(Hs$zw=Zdy&q(n~ajwH@@bhw+lS%JXXgonHl3I1_%+e
zD8~y^eU;7q1^>qrZdfR)Wm(=m2FSVr!QKGziRhGGsZU8=PLmSX=;A4+^O#&57YhKY
z>PcS6a}%i#uVHIh_BCOMK~sKJ@)xP0mQH}(VU4spgj~BO*aQ^OH#t?86L%MTgCu{T
zpZ0#({H<;*cPn33DTfb_a4K=Z-vzCZ7->a1kwUSDFJ0SN;p=R##OPjFCDSis^}AOy
zD-sVEvv%xexR3ibKFw&cMIe~PtZjHLz#nJ1fuo2<r89Rjq;lUM0td|D;GtyLu(;_V
z`0!Uj9gTd!m|WKctis|V=1F*V)pja=rfO<_-@zkKJZ&nOwNNp7zw7QF2-fkkPBimT
zJfMTQeAWl(NNIxWPbe$<j-Wik@Dvvo{L=G+5}=iH8d8=CaKdtA&;XWr+Zv6rMVlHE
zM(%Ax$i!W>0zbVoO}%$mb#~6RCccwr^d{!>R<b;$CFBFb)J@@vG5+5CsHppxdtaa#
zD%)`YG&gyH>ktcC<4J&YRdljjj?EL(!N(!jAgr}g5b8AMxK=mkeDEi&t}&yNx#GY4
zvDoU~Tb&&cH~8I(ydNH$kq26#DmVE>0g>l;FN}&931$?Qj8P+t3Q0@T|DX6z<F^|k
zPNjkE|CN#==<)j9Do&fSD{76fa2I;!IE}4A>kBksk4Tzq<x<#q%@J`aSx7BolUePV
zs)6}F2IYs+0I=?398aKFbB=;Ll|-T?#fz7%YSCGS9<zSI08P*siquc;zTr*b{%7H`
z81s}VE$&|ScwJaKQPcgGyh*^l+2B^S38)WzIGq$9c%ur3)uOMv4R*<JrIDr`Yash&
z2MyZTl@S6F1pu?N=NWb8hjwzPVi!nMbcCQmlQZs#*8R95$71V5h@u7`gE_Cxc8{68
ztuF56xySCfO>o40xp4=iL(flU=4-BqxyV#Z49#fnqCfbS^S`AHH9xtLZj&Pf)2>S&
z^hzjh(rosEE-bFKex^_xZ5$+dpH)zB(dyRRXRqaKq%P*>vn>Xy1At=apwXu(T5WLi
zXLTeZAVT%-!=4(AQEtJIj+2xJ=D7IU7?vx8Ua+*1JThyKu?<5CUZ}2uxdjd0hdp*P
zc^u+;Tw@}Lth^l#0Rb4W^=ELy!bZ;N#>e^i;SH@~VoVCO)6$P0-4)C~KKlL1x;)MA
zk(&^tAmv_wFsb+um@i1`g|}jwDZ$XkPhs|rKX8wU=7{_=Y3MQcT#)FNOhk0sBXSpj
zW3!U@@q%(T?%PV!N5~g&zuqj7#Nd&r0=F(qYb5g$ILOHNA4LZ)ls@WT@4e5!YHMc)
zb745@`_XLPuL!&ZEOMG`giB7-{~Y=!hj&;1$9(zr+?vw4gAB$vAY2FgG6jjymxv{*
z*l{H@lnRI*BUs*e@E<ajun2bA(^A9_dTdjb{=BzL?;gIX#jp{-781I&@|b=5Ic&j$
zl=+JF+09BSndgzgX1d+;5+1}Q?s3d`^QE?9G=M7_M$n`5X&)ek5l8~22hU2Nh^2C5
zacY{3G<B9JfqKQ6StoV-$3ajMlWcKOL_u&By`nXtstibt{lEk^Q&8dYW*mkpyj2%i
zm=g8uozW@mGfOvb2x`;Bf+Y@>3e%C?fpu2R6IZ^FSaQ?>qfZ?&hyMfo`Y<!@LQ;|^
ziplPQPTPdcBz#y`|9y8#F##0x(mE|KGI;tdhTI^b9$S0%6SP#*?v&(9WX0svevTM5
z%o(S8=}LWGt32?T$PEyTz7f<fq5~6y@h8DJQ2>u%d5xBE05tjUd>Uz=GZ#Ta@1&xk
z%{5QSNEHSe6SNu9-Dgx#ZhJwB?!W{YRkmS&?DqEO7Ibz!IG4mWj&su*0E|bLW_E#!
z%SJzNjtV}RHIkh~utDfv8~qammD4eE2G^8Z0QZB(`2S%({PekUwx%D;Ro;2?)CBk4
z?)-=7C@+?YeFOouXqWen!Gi86)CVM~>jVcLn%VjFvq_^DKl1R?|J{jh9|n@$U4|BJ
z@o9k;xquKnS1}oWJZ3%w&he9Z`MB1<G*_rpI`Gd(G+5Rj&eJu)x;4n~_%6g+3sSX<
z0Yk~-H^*(5M{^`#_^4*nlC7KW?&c5$Y|p)PPh{WHOG<}&i=cB2R^q7c_Y20om|Pmw
z%c<!U%Rr>uxEGSuT7JYiQFpSZN14W-XCGGlS6%P-ZpgqvaWHHz=cRB1W?KBd@^%;2
zuh1>OylycXa`oF#rsvmpIUqw1ih*L{11#65QbeQR8S{W>p#1Fact@1fpio1z>%QFG
z&uo#uD77}zsD(|JmKvpgp-U5`Qb3L&DnWLMkLhK~GJ=dO)2@{$bXDLW*uo#=oCZWM
z5@hE^4vmcPuAOz$aJgOW*hp~Iz8!5urG<*&LF8+ubnw<-5851cGjre3--Y*RUaV-l
z5%={)X13+;=mo&bf&`?vzPf9^pP2tY{VO<<aWw{$Ei|qD#YFd1ROx;zH590KB1>wT
zgSe#GtL<3iZV@qE2<|+~QQ<z}NlydpcLu&I_vhDG%TM%^;fCG0BvBl>Cm6y}=Vp0N
zb8w^bOElL&3AvZQVnxADw=qni$pjDwYjJfCpyF*d(&S33Ep7m$dI_WCE=*({tz$Dk
zE1RBCnL{>7cOE+dv;<bPIdC+qd57>`n<o~4vM<4&)2=RXGPVeUKY-W*@giJ5YE_ec
z`an_ADfJSs#uKY_&tXtYPKERAHC_;m%2$}Q!T4UHh8_~Aa4EVLmR{f!xRQdG^%ut0
z^iCv999b$!f>tkjR!v%h13;%FEWdg9Ne?M5dkp2WcR?O2T<{D1_ZXG?LJ8vQS}FkA
zKWx-dI8zn8>$8?Pl%Pzx$;;J6L`)T7CMnCh1~loXognL`me)4`UJRw%M)q{@9jSkL
zxj1d8Q$9dx4-Q^&?qZ>J+v0z+L7eRP^1&@G;8(U_S?n*dM;9<~z)jWYZN=k&8T04(
zr?nZ{G~7dX2TnL>8#*6SD^bi%s(APs*>6qX`?5M#6j#0pcCe|ngnw&QGa}HEh6m$F
zP8!71FK`R(JOqtAzhClV0k1mJ7Oj+;akx7ahWe#^hAp%&7ooKP+*5}J{Ihv0DMVt3
zTS(|!Dgv?{;}aBGy;-Wl3&a=+(*cbp$)8y^pbOf%fRji*-{a&i-eGsK+2;DZXIfB9
zs&EDm53qxOIjXdK3J04dGb>jQ{lx%F_{S1f<EbTgXGjnEmWr&Cgx?+mRSGS%o~`P{
zqDd11+j>-`cluDx)FRxeKe8R+IoZZ^*#o0J3e{>o%Tj|G^Hx#qKoR2p$@NznXiAk`
zdZ-WKr4vz20AzBl;Ri4f8b|CFo*oF&F2J5LC_Dx19w>eiLNdXD6Azr!B1VL<!wt1`
zQ^x|M5H?W!ozDl`jTZf2mmiLK?HPk4ZNHl_Kx{z;f_(LkzO1H=1cao1`~@#H<5;8m
zJfYMYH48WSjl2LB_kO=MFiwqDQ9aNF(%_+jj*ohe`{P&mVJuHg7N{#J4b`zU(q`!)
z1nnEiyEGK}k#@fhTG~9vA@XSpT}z1IHQ@KO$*p23#yVs9*YML1i5s1*vkvMZI04uh
z3TZEgD#C)T(|vq)wU;H#$oSI|Q^;HrBRFV%;>CXZ!*DQQ)(V?$l9Rbm#5-Yni$Vh3
zRDB9XD+<N<n9D#rM%aBLaX9rx0}wJlHTHCw3;w!t>^&@~dC_oTXhRFFqv<BAV=#L|
z7vBZ@MZo#HfaSc;p+1{brlK4tY<_t9#m)UVzfMb_#+|lxi9)egyGT+Q{xp+f(tb;f
z449fnq|%5y)>B-v9zidyq<F%j8LKcxRg7W+D8Uay73L%>7^>4tDO<e2dh8~d@mb-%
zrsIzQd00p@d3_bMob7i_6yQgkmQi~ZNZh4`k!t;uO$;rDhHL8z>z{JuE|ZB?Mw_J3
znvf=9$yl58=waX(sbx)x*6M(!VXa^p(-n>G@$)MHXj0R%<7?djM+YgR+C-YgjS_F<
z2=#$RhD=YOI7nQL!oX+Z&<wF!A0z9P7<|E9QfU1twuZ2mrCZypnR?A7m+&5T|2-?Q
zn^`-kyOy}wnFH$8$;N9+AE635!8hVb5-9q>&pgDD%8iq*8p+@m&cXbDc`=fa2EER8
zj3%22W}l5NR(FR&HQySQP0te|oT4sT0)~VouLAk@f!t-kmI(p<LL43kD)SObzg|-G
zAB*x4kd{~N@nlZE1FgJQ5E7VhBe$yGM+J8>%LLGBRR+i^NQl}BATyW-^Lml0tyAn7
zY|2yRY*Pj0BcB&Y05TjQ9ajvrB*TPJK`7Z<+oeB1sVLD$oV$fJfyCfKlnKu6%CLJ3
z>|+S9+{dN-ica34B4-%e&w!~vBQ@CmpI;`FRP{}(K)d0`tC1-I0(OAd;kG)hGh%Rn
zCy21k>US#;Oj1z>_+c!o<=&AGo0E|TKzCH3#B+->m1x{&Fan25P1(O=yjwn92pjMi
z`@oAK!!@K=MrxF-E&UCs<je-$aRKl!<4X>Vv;Z(!95daIibwKrm_}w|_k8#bSG96X
z5o;S;4`2A8^uxI~d$F@<0NCQ;7}#C$scxTBRVLklp;vkAauCa__Hyz*KBEc}w`W5_
zT+kFZ!Bag6e*87YAnb^mp&$}hx|@KN#lCZ+v|A_J3L?8;y{0Kny9b{w?k+5HjtY!m
zX|9QxGxanW#vs+RG)HnnnMKCqcWFd}NLrgzU}`cA1MVKO{V+re=}Ko_w>p%*d6NNH
zmqO`u!=!MDN7kV%$J!}z-dSv^t{Qh?0pC$OBE=R)R{$M`VUe<C?%ZV0&IUVwGy5tn
z-Ht!2sm@(fGQ&kg%NlEzc6Ri0F?9B#a!lG9BvRb$4DR>_ieVxcIqdtP8-7%Bt3K;m
zZs)vw^Tf-^tjPDrZ4yp}#F-QMd6bXhw7^;=>8ClF&2#$(RhdX#TM*$c`B5fyx=%Ma
z<k)fr`UKizMmiB@cc`(3vpOf;_%F`Yw0RJ$H}s=OeKoZ3Y0>P;g(3H4G>^pVSS__%
zi}KgRuwVatr~G+l0ERA3ovmRa=8-j_%`z*-f%bw%lV|(fvJ9cm=bsQqH^hNg5{VG^
z2d8aRZ4y#AoNz_$snpnRLpGk^f?OA;j{c<c0u@1wE;;)D^PtP*r3QPFtl&0f$gn<F
zzak=ke)Ypi$^Yu>yK}!jISvWgKVpmV+ux|2j@tlt^S-||3~jhF<yjCnjZA0S@4C&P
zlN^G_VwkIcji_ic$T_4tH%|K<8|AqT6?l*eMAVdWiuuoH4KSvNGLM$)zeMlqWO>_)
z_3c()aSsu2?qp$sK(iI3Slq4MEr9BJ>N4nEc?+1EoG<s^AE~=cN@pE^#?_T*7bPa7
z_$tHfn2R<MRTRPC^N{c4Zxl`*xL)M)Z$JYTNQ<>?9t}}^G^(P_KqZqC8+*d5?=8@8
zV{y5(J`#%qs2f^dQlrL&2)YQvl)*MRgS<<BHi>t<zOxT(NA4VfRvJtU!p93t<~LBS
zNWOo=X~cjiEwwWa!Gk{8cMltxCzwT4xn^ulX}})7N74sOG--?n0$kWyf8J)ynJ39Z
zD{ItueH{3X?L(z6vEopDMy&5rMmRHvV6!F*5589$W%m&Wc&R)ThM#^NYoSZJXL=5!
z^_AjrS%F)HUT&1$=S6s+nUKO-p8RdZd==3dJ!eSaIf^p_pP8bBp?9g5JDv`*Sk>T`
zwBbhFFHua1A)oas?n18p8V>&F2@+S~(S$HZq^4zP^6yK(g8EaZ;yO$(Sc~^hzqj{-
z)Q^5J)A}8j-4$;8sK#6@Gb|&oKVQQXyE<oy8~|&%BE)HJDMP93`OI!I6);y@HoFLE
zx-~@;atT2AJ(G6A7m0Sqap?1c7lXbT9(c^N!H7Wcj294O@Ky0r!O(fy_kXHt2t#@v
z`CzlU)h<Hj1`Z$RcwdRmI4mQH0tA?tPOp?ZekFP@Wn2;?7x4R)IlkJ1-lapBa?C^_
zBzFbveVadDmxb4mH{|s}^0){I;kQ-R*AIMvY>3HYc(^u!?9D9!KHE+X^gXn6tNRhB
zaM->X_Yy9-#(IppW0-gffIy|evnpy)eh_do<%R!63H{)`9X+G77VWkzDZ8dHBJl`j
zdHG7OGOaajz&_ICC0vlqiBh4mp7Wm&t-W1$T(khJ5@{x;CNW2#p<>h0^2TE1$r7g`
zy6=#}_K9b%;L$tFS3ila4Q*@?CSms0Z>QNi6*e*AwFxmvE=+HPva&GR(L|Cp`8h57
zg~=2`xD%^4xmB;0_~a}x^zTu(xDqbl=2^r!M}FMLO!SaALC(c*00YN~(OX|jZ@e4T
zs%xdV8&n%k%enIMv@Fyk9@a!~Z7fY{Z1DDfv((h@Edw4tD$}?D(<;;i9aZ5dn5Gwx
zn}zLyu%7-Jr{3*1#pFd@v)W`2S&ojIx^QJTbx(qm$cFf_MD;}TbYnY1>LyVjM|R6`
zR<;xN=OmN)Y7+=>ELx1=Pf-^o$eoUO($x6JYDek+yh{C+nYXO62fk4O&2Wm<6`46K
zbrpQ92^P^)019YJLqFrY%XsBEc%pDb>L1)jjou)}sp#+V;>6>*Q0_ZRWe&bm;F+Cr
zqGHa81mq<Umrg4w8Gj^V>oVA;kj7pYt>hDX`9fEireVJdjxeFbPEMU)Lg`l8_FGK#
zl3#>7r#Da8<QkL(RcQq^#QV*jSgsLqhWvPv{Mt%B&K?($HZ*|Q!6ko6SNC?!lTeOc
zP92`oiqvtij<PU1l5BX&Ev+}htLici1nJNf5w_4A<Rx7sr(y|JE?XC|LmDh%4A)o7
zzexHq?b)mxV<Pas6J!L^TcPPXn=M6SF&hP%Taw?9DRODkEEfl=Sdka+ujZ!DOgF`X
zAN<&Xs8Rigs&X?9nVov%y9f*Pew&@`tvQ-2W6}hl8j|hNAcc+xL9pN&O|Q8(s;Lt0
z>~DegpnjslIl0bH>s0{0-$~9rAL2tvtWSUh$n+oJpw=orG1)J5b)Zh)-iT<=8Q8Z{
zBU}ma`$)5^86!QPpk-TiN6uzjSWxBf{JY><9z+OADu%sNgXQ)(Km#>t`u7s<j=0^x
z8kSXDBtNVlo#>Z`B2yn}t)jzbptJ-B#K~(T)6*L1Mikq<>sv6H{$Z)L<5>s0H>*al
zw|sA4JQmb8(5aYdLHIG*7n}_kmrkqL|8Jx&U~8!u@u@o6cfAK2Tn|g;a34+Nxz{&5
z2~rtXg-pOBPIxOx-YfD)U8P}3AASidWTHv%DDYSX<<2OON>|Vwv>NU1GP~%KDV8Y>
zJU6BbtIg{$##CPgz$+ETq0(Aj8Q8!kYyjo?9}JNrns-}$h9KlzKOT<ZkjCc8RH|!K
zW$4VL%~AD<b6N^m0*&Q6z8bS*OjyW;pBvkjXJ|CAbj!hU2UCQzf6v==-e_yE53p63
z%tTLT3NVM&9C_4A{&ki%Et}Wi;RxV6`Ulcy?Bd{y%HV_~{pr&tqRvx(F|NXK7~n%@
zFPWVE%fM|h;UKG%)4pDoEyog40UZkE@s|iIdUz$G_9(uSBFI<5tuN;HBVgxVnsm{Q
zy<Whje`?mlp34UlGi`ZiKb|ziqF!Mn<TjD4?&l_J<sjsm|NjYd#%|%>;z6utW%Oxz
zs^U0c)QhA_Z*6I`ql%9We9Kc75uSAiGV4G^(<L*xIcTN&nRz1KEr{AygoHBozNdY}
zJ}e<xxS%Vq=B!haBCb1_$<wONgXAZbf4}%w7X<h%x<3oGBoU!Fd)bAE7?x0{Fo|dV
zm%Zy`y)%n6D7N{!_^&BUdcfqr+x@u4wC5^VY_y6q7&541XBq-UXmvX5Cr3Rj!M1bc
zWI0XHI<yG|EuDvpYs2`+RLv%ZYE@v6zZ1$5BB$_{@4LPSawlqy8_8fel|rM`hY!uR
z``?)8dHJbQ&T?vR=IJ(TTq5TskTq8~lU2K9zTqW>7)A||KLwZ66c8d}Jvw$Yaqtdx
zr&8@1lSgUcSoozTX|3Ncjp5YNa>jgN@oaH@S4nm7MtB6<1`bZl>+|%qEZ?q-H`a6<
zA(e*q#A`q71Xu6nWRYl4u#36K2Y<#|rpXz2w(zT&XfZ=}Q6m_=Sd%>Y?<bLY*PH$-
zP$h}6pgxW9g6SLL&VOQ=lM5`BJ(Lb^#obd&HGtD^^?PB*w-%}D>OhvtQu+70>C~*B
z7I*|nXN)LGm6u%3cCcI=FD5uQMQbRuPQsaTjBD3K&IBfXN0@^terY4ifA3RMzaf%_
zgwXt7nt!erfi%+hs0+sE&XdaBwkh9KR*xNhgVc5kgJm`d9W9o9#b=y8QrPHz#6?*f
zrv#>#ZyDB#jE^V1U#w^JxH(rvpd%1(%qV^Y9SnjfO+c5H!|*!&CRLI@PrAI>2YxHV
zJlM~tJwy|{;V4V`ATunQR1d^|ocYB64tP7&aYs+K!NJ(<3#2Cp_rj9qSdw+rAk^E-
zA*<~v@<H-F5~x>&v|PbINMFEVi{WCD@r(S5fXJWGhEI4RPnEca8Ua(BOXEmiNK5@G
zdAoNdFKmr7<qCkTSke~eVyl8_pZ>DL0Y^C18+YSN_Gd{BeL{Z^eTv(J^N`~39NkXw
z#MQ9wtY~-{pk*tr@|0%obAiLI#aFMY&*u@5yS${h?+&2wQXdZT%{zV?kaHm&cnQ_d
zq1?^&;I*U1u5KEbOgiwe8EbCH1@Y!cJNqJJZ2;Wm`gT_pxk1|r740SVv_S;z|6f@9
z6SiI(A>HsG<gAUwnxKqu_HA<^(4S*S9sCi+??T|11UJ>f$^mdpQ<W3uvI^;U%)!wQ
zMYED5Jsqe_RfWawYT<t*N2VN}76tL6!;`3kt%lyi=<a0R;Bi}LMS+6yw|u~Wy#L0P
zLl5%8UJQvOP?(7XV2!5LBKB@@-Z;b7>5g+I#Nqw=!H0t)%r2Z6;{=<LGH_1R{#{2$
z^H{L$V(BWC@o@8-W<ua;u3G(IQ>V$181q#nXz}Vkvku)S3EL2KzkwI3KN!mLpku3#
z!i+_P@(oUEd`RMZXgT3o+O<=ZY6vC`II2K&O#hYF_O@dgd(`dUs|W<M0I%iLj)b&P
ze!OL=Odb6U!1(cLg(}NF(+_T8c`rfIfHZQ8pzDUf%$D97e|m(ZkLfdb9DVpmxOS`y
zR)!;~g{yMTNRXT6c*lPTapD=dUVCj+y4)4IgCXDUXl|`9ai~tmsTuuVZU-l<D+m6a
zekz2MTgZYZ<ZCR#`36<LE5yh@NwMY*XS-{p7EMo(qhNCeJvOfAM{C&BUM2pRp$0Ix
z|GUb;X(IjxCz}(q5o$Ve=t;WUdXX{w!N6eG5^ozZrp&!|p(_F@$=1>AAnSP*>ez%$
z@e-ukPhA(nDIgw<W2wO!!u>R3hQoil^jJqQ*87aWz~J6-ZGv1WU&@|XP*FGJv>LZv
zc#D=3w*&}!l1h?elYu{9x-U7)Y2U3L$L}pAdd_VD3aNJN5GSO-$zyb<(tL(3fx_wa
z^^WE;ZsBR=5l0^f)8roeW|!9~Z=sM*;ApJ1^BU$ED~h+5J~?Kxk~3#2Y=A%DehZuA
zO5oe=IZ?`y$L*|l%ql6cZ$6DBLaP_WQ#-j^eO}hm;E)Wb-pf$v@%+fN7?cx*XO2<E
zIRPgwrqrAJ4SAy@B;mzW7a&N1T^wnGYV=MAjr<akg!sT=OmiD02)kBb>|}7AFYo^K
zWfDKQu}5^B;8Jo<E6SN%FkFj0G%7ZjRyZ*YKi3&i6tV7M`_Frt87DhQi!cwRr#C1$
zh}~2Nj~F7BoU){{Bn$jt+;5$_y}H&Zg2)$-dh5Yp3|k<gACXHktqhVhqD;>-R{&qx
z>FV0h@t#R|DIW!t#anbaTES4brBsD^6wjHhw3P#lAiiGBN1t0>FAko}jH5=6ZfJ_N
z6$=d%O-(7Kr22Yu6O-_eAUr*k9yQ&xk2WMYE&CHjitN$5^m-rTp1wl7ZGhw@Sm*+r
z5Z70csa@x%7HyXbzWdg4nUY~tXyM%P10TF?u~9t#URZ^-+9D_oc?5tvw*T2oThBET
zBF5ddsv~ryUJMBU*#ebgd?0y|!*f!&e+{?{!1FaA?MjRnzZt)qgELI;xlb~A^ulf1
z7}IQr_yVqPRcZQDzJBG-z!oZowY)C*YlyEz5X%1mmmyRBfM_-`s9n)9T~u&hmnH7I
zix^k^iy`h7%Z@9&X&qo6I@qbx;*ot91C9(x_&%Q7`Bc;^N;gXz@0J(BAKG1H$L{D8
z%ebo1)@!w8RALTlVgw>#-_c+E0Icj~`2ZMi^f(ca3vxqKhubZ^?5~beMn2z1GyY=(
zmkMaNc-^Glg-pZX%@b>?h7x=#I1RyNxiF3L9LnrGEvaUNDCbiFe|^Z%<fZH`oO|cM
z`l@<KVEg~ohd6vRSE|5;Hz=quhp}^PSD9I7SNpbnM$DRQDb5i}-aB1wob~PjClsE5
z2D~2Mpx8m@B)8W(m70(S399cAMnkn4jFlFir(^VX5|0C>S%Qm{M#Ap)a+b+riIXbg
z7{?Gy<G*9k=C$o(evBUxTv!LUL(f&rapbN-HdR56Zp*@P!_oEN(D@^_ui0jh11i_%
zw-*O|y$VxOK>9VJbj<O%h<cJ!GwcRS3JtJLsF?w`tPWAa(V+Aj?=dt_l<e{8AufZC
zx~s^bD=Oj^SOdkFJJHU^rv-I1i+Z-^n(hV>^)I8w28MN@%_AWQu)F4793WOz;>{g0
z)q7Sfe2I~}g8&bBEsC8CP4C1-b+ta`B2V(UEch*iSqfbya#N#2<4a2J&dA4!lp+~f
zuF1Y##<)Voy{zfSIZLO$Xgz-Dc9n>j)Xs;HdHsc@kVI?Ty<Q&NI2dfZ46qhTIM)s3
z5XwOsmC>+DpOsuTQW&z4SM!e-n9J`oe-;8XhKZ93=4rm=#D`qVGl)2|LBGCw^&j>p
z;d%Toj`}e8?&WzmYQ4*UP3J{0i{zP7HdsD`yEaQMe5?wbZHBT-Q5ssj4`SAN<5d;J
z{nN)&vfj#jM7t&7?;-$xn2F;!g$ewNRwF)o^m|v!$f*|gg3qNip5c<MG!4&9SeEpx
zq-3D%(bo81vyUo42r{4-@9sXglbIX&H#<sNwxoRCz0_JH5xfC!W5>rQNCQXB+^D-!
zj48PvNCx@ICm3?y$n)e9;6J5F8K>OqGu5AHf+cy>q=owC9a9w4p^eUfUZF%3e4K#g
z1Ia4x_4Jj`47Au2=)0H?P&z(}{>@egMBbj2f~Gemw`|<}&vPlpo!k$fsIXtCVQYBg
zA1CjnS0;)b-_0M0s)Ay1FPsh4eg=;hP6axLj^-6v<zU7>-M1nVh28I0paSh0jbQ0w
z7DI&N{iD@p(^%<377a>&v7+BN+Z7$SO}g~lc+m(tY`WJQlob>wee{zvEGD3{M&G^n
zhP`~$3?sD{71e*tLBbIXT06K27&HIG3m24#F2;{UO>1M!1>5kXQmQ?N`(c#bRYDOq
zUgK^5*1Nivy#oW|D=VyO(m!@ca?!~UZ$<`1?0tD6F8zM~*8|ocOV?Q6#k8YjVIq8s
zi<tMD!71wU`DMC=<wM;?aHUx>D^JAN;sOhl7s(IZX?XnW*feHreNR14aOCkx6y~ZP
zL`HuDpqcqQ_lrn)#Y?%fw0Pbp-WNX59c4PfOHAm6r6s^YID_$@(*qtz#I0)dz*Adc
z?mhM%{Rb*xEL!<mmo_%ZM;pi4sHV(-EXF5gns`UWxI}jM9g54!Y779~8jISo3G;KE
zrJMyGrXV5)j4#QM_Bl12!70y7zLC`Orbl(B^Vvr-PM85j3}H>et+*>jqIyO1*d<?J
zZC&f3Z|w46O$c%<lNR_;ckrBRoeQ+)V7T)czn&I_@XsYWn#wmljU%zDX?4*r;^TAJ
zW_D(W*Gzd{N4Hs06*(+|l~1nUY3aQ2@3_kQ5ji)yv1(q1{W`dHrTEQUYGp@+3yTA9
z$I+UxZGCD#JiC3Znkqv}XoR|AO%_V@yo|G~<-mIRkn{tAe!838xK`(2=uPB(-csMy
zK@BGaKDRcs?AaJ8kZ6cwh?gY1mK<h<kU0?UY?C>lc&oK2Y)ykaDG2(xUi6j+IF-XL
z>z8w<UL_F)>~?AdNi!ThT@Va2My$?CP@KnKkeGLPiZ^V%RBZs)`&U?Z)1}18x()HC
z0sdtGBRim5*#f-&x@$!bw71Sa#AD+YZa3oz4)p6Q<wTy7$e%VhwyS9rl&JXnIO@U3
z(=FL#qPB#SM_c6r?_MI=_}Rqw4r~fHE_gr@M}mp~(H#a%(&kXBsU!*HX^YX>H&!op
z2>5JrgOm#Ra*H;gg&dYs!BCfr#c@|a(}3CFoCKTmL-nO#l;hjtxe_^_!%1OUXJ|M&
zWy`t~n-5jYSieQTWIyUUVB5|c%^{o6)JBhONARd$(L-4hSiCdM8nu+Zfi&Al5%Q}D
zbIx|lW9{xOmPKoS3hsuI;3q?Qs2$h}i;HB|b^>&VgxP=e!cwB<$wdF=Gr&~X>+OtS
zaNk)+h<X3!3P}=wFYKdY3EwO9JPs~TX+A%Oxk|~DI#`=9RjiQ=IixNth9J$4VvM>0
zm7>z}Z5<Uw`pS45q}jBT1xFWdj8F@INRU}VpY}#SbS$WTfPL@NJ|i0T#^LW=jJQiy
z5coCr?;;(RcLnj={+;XCm&kGusX}H5;m((6H+xBwts{Q|WJlG$y_19{Bu2dVvxSZB
zK28T0ze&|4Z)JT)qoUC!mI#aP8&exWSB-$W9F`H-Ec?G~6^CMXL~P9p+N1wo$Mz+U
zXePk45N@LW*a)Zb1*-(_fmNb6_!ajrf#d#u)(jXvwuBHW4^L`HU|LO&muEH9nHrz<
z&UMTbWrCJ~Q@P=ji9sf~I5}O-S{XuOU_Ky*f90pYD@Y*oGqK0zGHaMTFa~JIMslj-
zQ_Bcb%aq9)e{VzdfR)*3gfe70()AU34_p(cq)r<8+Y|Vj`buAW=e*}47?QB*Gn3bY
z*-CyGp+Se8Nnd=QZHfMV)W!F;;vjGC%zCs<)QiX|^8kbSSg3Pdm%nmY$@%Tc8oHv`
zIm(Bf0j2RybQ?jIy3fBKKSegto2UiDA1}f>dj!YEn8S#(FbykMP6ER}c1H$fMOx&^
zVo_gCl=;>atv-8?og&ahT1w9&@IX$66dORuV_V93%1+aTJG!70XvAbqZxIJA0@%Ab
zuEskz>&6lf))7aHR)F3LIfUhhF66A2>+yMrnDpQT5&+30R-netu?uejIvva_IIaDx
zHK=S>$xvE7u(Akyaw^?Bjh`&9^z2}-z0}4dm}6>v+kuhn%Uvdh&*wQB?Sia2uw3Ar
zQ}Q&EPkh1sX^)RqNl&A>Y6e?Dw{^<Ny+VxDfU)F=Ykr6YO{%?rO1lynz@ya82o798
z-ZK^RYLTk?<W^}0AOpd!hP%_?cmdnDO^7I?Hu;OQoO{K}lJbC-eMa}O{yE`EX?mEm
zE{d#ncaf9Vk9oWJ!k65d=IAKija&SL`{NQG=qH1*Pa?DfUIVjgJ5!m`y$FMf{!8_<
zP9Rz=^6F3saE>GA!}N}pldDAnOS)f?AbbETK-9lZ0j8_QS4;2uCF$K3ml=25f^u;d
zO<Q^OMgCv=gTH3*SBvxik!GmM!9J4+hrtIqK?2&x<2`C>6qfkvliL5)YlqO=?r_xc
z)_~FzqBGL(rogS<)iff|;Jt_@Hh1?VjH_I94{+5}AdKHpJufIq9MP&64h2k{+{NdH
z_Hl1wg1NKe0@pElTdB5Led!V=ya!H4loNDCPO8cVE<6pq=!|6~Ld*mLD@~L+SMioI
zz4k4L)6+Th{avO(lBe-)d2mp$jq=aCLr{7D%QO;Fzms~LJh~!LWf8(gE)7LbWT@l2
z#!xK1w}Fd%l%OI?5+G~6#Odxtz4{CGjI~y=Da@TcEFUv9?leN!|H~HbyBEVfj?6iV
z12D3q4(c^t=YSElS2I$U&Vi|X)4Q79De={CnZOv2FzSLTBvSSO8Kv;IF5-5*C5kp~
z8f|CJrNR4$Kn>%;#F>HiBvB9x{Mrl)Vxdj;6rm%$*hkxO@P^Jt6$o;9&>D6djlNoN
z@6;4>l+(|q&I)fC-dlKfIG=I1M-#v#odFbN<`TD<8)MdMt$#U4c|^6q%Fu!qg5$u`
z*x)Kv9x!={t6>gCZtF?CecjjC9SH^WDfce(O;{4V5X`D&^kU$5(ydMAt&18iU<j0@
zgs>1f7p0>H!L-1p#hjfbq`2|0rNS&w6ZojeF7a<=D}E18SFh~&7>%I7N@&qYjlhUX
zTw>clwa3K>qeCs!%%$o1Ib5{ZEUD_gW$xL+O0iwM95MA`Hr#~UuH*H8-Blv?0@hf|
zXdhRgJcQDRSV%d$G1dxJw=tv75y7cZ44Up!bpp!7P!y2s!b|u}S?I&qgIEF23K>6<
zYoFtVb$Q61nO&{pGhOG+!HmbIC4B7v{r!Xg=3x(IkLT-vCvjoRiC;@TvJK+PX0pW<
zEFOO8%wU5+PnCGTw39bC=l&tf8Z4^Za-jhJ{7aI_{CzD)C-4FeJ>-q}w2<yen6A`^
zvhqHE5+V&IIvVe{i_tVcv2$jVcTDa%zw@}bclYmuY0hstkgE5gS+q}QZ&EdG19nj2
z($_h{xN35B_bPRNT&Z#sPJZiJh^$E>jZQ|Pzr`!laPiFh?Y8Sg+psik052r7#>Gp{
zSJ(GuFdJ{wAy>@|@1d77KS?2W%494;Onv9Ye=2;0fQ<5KOeGH?%0*E-PUAOUMAR1u
zmUB*VD2MZCZWyZ6<Elb4Um?L;;t~=`icfdS>3JHi;EZrIGZO6D--bg%;}<3oBl|BI
zz?dMW&z<kFyo?=4$3Wo+7M?-Ck5oYYb!n`A&NR3*6m-QS{7UcF+w70-P97f9WAxL8
z4tqn1e(@%KxV(310>69+H{UM>UELPzL3RTNHt0Yt3VX46;8=B@er?#M;3AE-NR2eq
zOE|~@!LZ&T<0-h3z`<~|l~4A)8Df0!IclL&i%y%gowG|eaWb7y9%0L@s_!|Yeevh5
zDs3ofO{IMhYgpgV*J=<4<yE+kFhadt%RKhrIdR>ffRSRcP(&<%W9}2929rs=(`_Cm
z3srh50rx`|5xKDFN!d8lc4ibUZcj&FD}56^l9Z;pR#_+&=DxUw46f$$*l~~S=?#RN
z0t|}N4&z+I2&NnQBgouVY7jl}I*PHoO{t7wzlwxVgNM<HLZr)j({Is&MSuEn8-spf
zA8}ueF!$6@B1zj?_wn>!{xK$%jg&!^qHL`81{7&Z%<1Gbc4cvPL0)iW@}fU>v}|2)
zEIs@F2?D;OKe`fcZr*W4B&*r-<n5OJke<d{-?2*ZY<7<M#Ep13YI~EPNv(8Oxu%g*
zmb54OZr^fwd(A~>#h^&CK>JGb&|^lQNDT1wlY>XM-Uza%PMbjW0v0|6W5gTs29TcC
zb3T!k?wr}qwS3atn`1!hX@c||btU~0PSn=&ddkjjpGTQJG>Sk;wYSPnUv5N2rKw+4
z3C{FY6xiGS8|V`SqK6mx5>$#_hi6||BQidSke>?6@9ewz6oy=<fpvfs9X(-09>O&r
zh(n3eRz@+?RrP+<2eqEx+Q*Xjf928OO*>V*v16>Q4ZLV!$2ez@?Lz(r9mYy=_+!k1
z0nQSaD7a3-bc579X=VRCb*$+bJ>b{&;MTPzL1NW|aG4gyGT^%}nQl0(xq!9W_=f}+
zjDcPrqj5IxkF^)+=eO1LVGV*obW-DF<{+C@Bp^?JiCQk_<?#M2=3Y+7CV_S+gl~dL
zSf-a>0k7HqcxxTz#e_B&q}=^~eDm4<$7?cv1Sm$+{q9W9g(~|cjTVWe%pTX%Fhd%+
zOGKY6#PmHcLnOUsjjw+wZ$DD>Z?AnG8)mRp4ohf_R4v*@%lB5NdoORDK)kOU!9IM{
z%dH5$C07h%Ta|OPFo`i^^V}%^=qjf_90}EWru+-ROU^9?YX(36KY-;p+BYmGMaKI9
zv?_dfgXS*(f{r`QjL)iU=i!ZKiSYgIh9NVyne~8fz<|DHF9PG;8RGUZMx5(Yq_m0`
zWe%FV^>{ZEQ$*gVBKS;y?umYMwbT#$2$Ffno~yO)c<R$2*Qtjn515DIW#(|lv8UT7
z$yAZ<VApI9>G+g>7~Shhss3z=XYmBA573dJ(-GU?4-);a&BeL%l!{mRAEYwq`?AdB
zi_}7$LA1bv9av`gw7chtCm!LaM&p%N7UqvDk;^R0M1k_V3kcuaP5VdDDV(KbFBC2*
zL}r=hfR0G5B1ByO(<%HD+AYBv0{J*wtl1&1IJyF1YNnmD4LX}#KNoLxvSEgADgIuF
z4CJK|lDpU(N`#n4grO|WHY%J+HTs~*@lUFi&fa%I&l`6c?~bW8v|4|Ve}9x9g1)F-
zDGsAOk33>qA|g8EL%VAl-W=l%3i?i~s9nI%N^;?gUJtd{m|5Q7?)velKiAGIDHCPB
z;w!E@MZ1a2^*7Hj!%+AF`i^83-yV+>G?vpZH>knNam@)glUh16+AbJ16GMZ2iC%sK
z(I&xx7vb1jSki}U87}?j4c|L`Es0(0D#<LCy$Zi!7#K|+o~{I^&!>uZCX!epq5>&x
zjaS{PJQC78Gaw7ZTzkMl+}Q78=2pn}t{%ugIl~2!0Thb#DpwP71oT~R@0ml~udAhg
zAp-J76)a6f%YqBg<0bt2b#JV$a}u_AV1MO`<EEMhjRbD>+?A1w@=Em+xex<v0qlYW
zp@A`7S6E2@uU!-9@`U8uBArMot)guyu%c4q3Pj%}M+&S(t1s5rJ73SC9<_B75k@Ob
zi(uQy71uj2)0*&l6d=T2fQTV+qf?JrCDdS41Thu=lwmUDx(jKjfm+T~G|gabq-UiM
zg4CroHu?z|3pQU+8b7^J&%&vLhHzhhJ%<+BFsu;S!&<ZfhaMN=e)A>(p6}0nPP?xL
zW@G5{pPm{@XtB@BxK=$cUawBPW_Nov{aMZ|z*3)penaaW&Y|)y?kILae>C&7F1ANF
z*z_Qn#5E8OgkC*Q3c>J$8ye8tn5kM0UR43`#B$j)Gv!`r%*rw}7F3pCd8eawn1(+6
zmIJHZ|9a*+>QAM#0M!I3s~&AZy*3re(SY_l5KS@Omvq?fwu2sThI`_kIh+Z4EG7kS
zT!=McEU-aV*DiKvD<$OFyf%}(obtEg++pYf$|HeNt~E9QQjgCAB+yg-8zmRv^I{si
zj2!3k(vB;e0S#%qaP~EO|6jvun`EBK{va$^srZMZp$?%@iy5-_W05Z2s3H~Nn{mU0
z@GAU)xpyf1>;*)LjrwxKp?lH2aC(r>`#(*k@6v}@@qA9Qh;AB0^m3YeNw6Bd@tT?-
zDWo?(+{Oo}M_r-Rm#PlBWGp4rl6xK6Gf`tYp(41^B%8;5iiQ3V#oUJL0p;sTh98+C
z@aaNF$^**apj0!RiaOjRz2zh4=#H?YQAKpUZ+1HH0L!+JI6KRk!W)vuQ}Ahnq$B4<
zs2mj)!u-p9Z0H?m%inRXn3|@MB%BXxgTjq>p`ag*MBn+Iz^%QFz;0HpP7w`Uc$kOs
zO)&yx**qQ9t}BHdE|>J!vzEG1GvtnT_vtz{GI*hT>IH&n74q{JdN`E%s{dH4pl#*?
z!_!hy=aV!cYRn7Y>p{N07ECZ#b@x7tX^@!EzL~@|Zpm2n3o!({d`r#9$TYl|oyTlG
zF`cU0C^OJsI64~GTxW1~6$@IDnsZ7}1W0&SA!xaUV`A}#+x_{Eupx*T(Zgy7QAT!z
zZVafI3=v{dtq+gO@Lql2hT9dbQ}{s_wP5!<A^;!6IJ&4leHOU%n2v<<gviI9Au$Ia
z&ZwlE2}Ul^Jan}=Jb|W9ji$ZorP@QI%-PY&at{%GL;Fv&Ww+e~T3)QgT<5}63F>Q3
zn#9T(osZv)QL=!jv?&R9o;?YOA)<H^i*&hQ7y9cem;y)|HBr+HWpyi`fh2y7Z7bbR
z7WqP9811%DQhGg;V?#1D2^gmS`-&xR2NCE5GUbPA*`t(lw?s^Az>z}U3gnbD=<evI
zgc*o$NLqxgm~=sK`??e<CIR@wv!hp_B}qT)f>CV99bqi*2!DG1vJCH)4sHnujFzUW
z`ueK#MGq;6I7Fc6G4m68^QdwW(%s=9`d_)S8;y!{?_t&P7hL9}qu2g;r`nkfK>`w*
zFgs_b%XLuMUbW9Z!18;2Mlxm#mHU1kZjdn*R>gHf_p>md7#EMGq2<Q0<4(jEWzkNW
zJ2j<e2E#fG_@J;3@HU2rc9E!K<vyjlNFKIyT<)>KD{wf*hBcy8gXWh&EnkVrTOKQt
zW++x^EF94mQ?!gn1ZX|I5943M(k!Y)e{{*P<b^Ej%e9IF_+zJsn`vv)!NPMXjcf{g
z!bh1_nXg~R*FG)W^mWd>%p`|~H8ggM!qYsxhW=8bDQaQJ4D+lY9xYnVc-}GZ^MX92
zOa01*U*gA^pT<Cm>ZGlS-SqWhEo%BjP*U^URIt0^-T*+z38eS1^9szLvde(U$m&De
z%q-51Bzx^kWul?xMkFmJ&HyE?M1l7Rbz)8{1ha%g&|y@VOU`SPd}38`0;sIh`#v=2
zR6pR*DYVD*F$+>ok9{U{Ni|Mqd>h_<7}(*V<D}q(a2jp6TDF*2?-kyV*Lw^A=m7$8
zTI;*|0!#Xs24?QYToJGUa@8kw`j=w5!t*}=>W)?7Suvp8;d8b?Q#RI}SF`ZY%2p+p
zCIq8dB>jZXP+sS(C&Lz_t(36CC3e-$9MZ5ROF1-xlC3%&Y=IwXy_T(U(w9m|Qin)&
z!70<3AuH-J{hPE3FpZdl_<N|(*ahA=f{Q%6Jma$f9B{2NNg;nH*3?`iPO)=Hxk+mC
zv8;7sW*zsr-G(#MSLA|)*4f<XYs3IB6~0ZPjQxSqp2LcYpP;z$-UPT!2sS7VPkdE2
zsRtP+1rPm_P{uv#O{p{&Cs+K2GfxsKc;1mHbOd=4R!lBAL{ma_9NZC6Fe{z$<nC|P
zTx(e1EQBRt9cwHZ@4(G+)`Fr>n*Y$X=YyZnt=69{C+8~d601gf)m<+`aW4s41jGnc
zVWh3CFJ7aIrSg840w(Ev4>UV-1|D{xJF73+V0#@h<Eft}uAgD4=W`}1Sn10QQOXWJ
z%F40<<e~1O@yf6Hqy-NG;n96w7chZgv`t}P0`&MPlkHGb-5iI-p{V86@wx{-$2pV@
z8RZVuD3(%&cN;9g@Bft0;|yIV<|FT`Pl|`9b;m~**>YQ9xkwNl2SAJop94_0XTRi&
zm;ZBxQqq^wZ0M_7E~1fX1)Sx~i&32bB|)M*zKkau<_Nf}rl-vA8>OOFM%1a6$*%Zq
z{=)bC7lWQZaf+#}mJ9+}L-J`8P{!OqPsspcNagOBM|IXAY8Ftu*-X)fl?3%r@JcL{
zBEnQFJPSlWU2+qO`4T9qD?bh)f_>j`KGnEG!IZJpJ~MLOdY2Kk>Na*5+AATrKZmUW
zTT8jq#)0&d%-b9IDw*FGnnb(v;MhUJ9vVaa7^9ERknS35wXNnCDUlGzq^1|7k@`$D
znh&#FL}2g^!<sBfHEpLnQ7RWfYhVSShT#Q{v$P&?+<(s<M5csmoC!#`<Js*_@{rID
zR{~KZot9_~ARH~R>#7!bI9mvIiU_Bpb=e~IJAHiE$roJyDHB^;H4lVnJ$L=RkDn7U
z911i2%eg)@uXWeSy|#XqA-%<ma=yG@$Pu(!__=8M<Q?kS*<gYak0!Ihh`sYHNnekV
z2gnD|v&ABW;L^uir*<uM+`Sxq<<M@=#!I+Fc{Qy^*{qwXeRhdOeri<x-LW0+u@S?h
zscn>iK%#k~4!ND~9%P={ry^){`W8~X1j|c-l8=JR0%qT;|JrZvY|0BLZDYlpBseuq
z*-M>2Yt;OLQfwLSs>P%ZZ+yA-VJZFj#VnG<i5BYwtB&+!L^%E2^v{zWS)`;J>}@D~
zY>2)TS_M-`POLlIkuWpif1}I%6Dv$zZX4*^fB+$zc5-JM6ny(jqTcaJ#;+-&G0`N=
z0Wuy#R&vCu<(*lu#$jijeU;;L4hMSa!b5cfl_zMJ`*>SuLo7Msv>{5)bu%ipwN930
zIJILL`tLA4qq&$RGGsG<GW-B6j`1~5^s;1z`?A=j);U694!K<PRz08_K_e^$gRNkv
zzR+6?eAlmwx(PN1TU_ArLCOixMQAvK&@R}?;j5-Cq2PCv+fJ*EB3sJcUH{4f9|S&_
z=Xc@00AF#@qkzU}!u%CVtiSx>`gso~)4*nhPQD7D1FAP!Jje(p2;|`U&%}ylJBq_K
z5QB$FxwTW<r_^M+=d-GV9czYRCjnZxLSRev7(`zkkmxGW{*=)CjUgN&IYA^m=%e!@
z!=o{r4Ob1bpCgwb)XUEc76BOxM2?#qahB}r7AZePxnzKIWlwc4-M_F*JY}8dwk@U!
z=wsh6>pw;%MUm|EFLqvXmby@9i(*r7R2<e-PPLQy<n#MS7c+s#UCSIWq2cpaOItH@
zr^XB)HPm_>^RY}fIQp9_f6LW(y2FWk(O^e|EHoVYF<x1sjiMCEd;Sp=IbpjFfH%)e
z8gf!;P2{Xx8pOA8@AV96h09c#u-l5D@7ItNp;2aIW$hVfyr7;rkpK5<rq?9h;ma~A
zmeObrQKQUS?z5*H2E}ZaDLRaWP}J;uvCr9b^sKfKlv}tcv~V*TFY1?FowEF+dX2CP
z!w~>~nvKq0nzSNI3QSy&mIMr;mH3sYrzL^Q{z}l?PSotET(Or6s?=fLSL9h)C4g)Q
z8G_7~K4)QS`ygz|8iWcwg@|0GSA<=ar*yOue{f`H_nn&6$aKMu{P^5_p)sI5=&MJ;
zhi_B}F-EuOBn0uuvl*oi6^7lsKrWY;Aj(X{IG8+pX|t>%upn~Q`hWHShWe2{<||@k
z9$7B&#|lVXXVafwUlA{NlI2=!G)9^?&n>ta_F@-zXqZR5?}Mk~7Iscm#}1wzCh)?*
z_F4@IEX3&{*1SyW35?HbN>iMp<Kz%PBFTOsiezhPqmH-}1Kaw)5HyL`?C94vJ|kaD
zhY$B$LdeP?^D69=Yo)~&o+uwKU`BlZ*Blxmc+%Kn8p(n10GpU6&8wLFUapo#ajSui
zBmV5Ox8O`)!YvYVm9p7SrbTOm;6<;u6EaNlz?>y}1sVRfq1y1pEG+j9_R?SXTXsIY
zQ?FhK>OIgTVY~AYMX}6ro2h&2^=m12f6W#t^6Sw!Z8Z`lc#?F<IYL<mjMY9ddE{HC
zz{Yw!-+D5hzWdHdUzLOFP?_D})SKIF-^Ic^=IKn86{<rHGkLc0eTbZ4z6(Gf5c#Ai
zE8srl656jkLY_smsm@WEH#T*o!__Fb$FnDStuop`A$$5&O<qBX4?1c=<~s=YNu@Dc
zpX!We3DS&?+sd4O#p0%xxt?|n$t=wc%{CJ=2S)bi|C&h@9VSwnquA$~Yf!62q;R;#
zB$>S;$NQN&J{XOf+l!;1#@Z8``VPBJ%S&t1z|Kk7++uRtGFn32A1=p!2d@+`l~S4;
zZ*q)AY09E#b8&4NB^-8Xmz}N?L2`L2Lzt$^e!?ihQi>7{qLe8EyYn?~;0DKKHs=Qg
zjnRztr=CyHWtRHz6<7pnm9hY99A&2JgyC{ZL9a~%Y(SnS{jxr%*mx%BwbwQAneLPQ
zJH1=mnNd><(iP@NRSj<~b|<--rFEharSE0zY3av9zplHe^$R(4rtB?#nGgl44P0rb
z+;VNsTG_a;r^M>)o#QF*7j^`_llU$Wk&Sp)8yV+!mm}4_EnlQ7Qq)(Ckbh`pPLbrD
zjY`&UFGkq*4|IvMgRkXGYk)^8MKce)E4NP?dv_{2)cCB*`5)8H_Qo1MqgN~juLll#
z%kf!ltD?yA!eZvYPB=+E7m8b$L`GZ};5%|s|4Mj$J{+4|%LE8f4(vf=qBgxF{#(gF
z0y;IY#wCRrKuT}SO-(B>Oh}<BAI${}*mB=i$kDm}gt3gh-(}sMHq6YpjoekV%os$n
ziAMx}ZWOtw^YAyKD$^^3o*>~}MJ8V<BPfXU)Ur42pSwNwC}@pQA3E|n)dWg}yy0uU
zWyLL;2S*G#$t$Ae(oRn<Hd@^n@Gvdd#pgMIy~c;An0Ee>fZ>_6huK2i#sp?5_=F5o
z$k76d(UU~#_(i~0WAg&?vD2M3vlGyZ9dN9-@m$J~#%0<;;vcKImHHRdUp35Z4R_f!
z4PF!J;*tdZs&xCsatYWSz(rR(k+z(8MJf8M-c~K_&vaRu({!?^i(scH2RV04oThEp
zf)P-%+Hl5@EqGpGO}1i52A}CO@*u3n-?cnPtBHnI??t!M(QQEFX+K8iZ)9|uOI)Eb
z{(-vv8OoWF%u8cgUr8U?7Z8-OVTS=N<6=MRzb7q4^hqm6rvG};@~RBN1(H4Yn^-hL
zLekYZWVU8bbrz6?$or9Z&JP~Nirg(47+yW@p_8TLIn1rj=8g0LeZ3Un+AJZ)CRJER
zst>DXvF_9eR)@jA+@uVXMf~&JkGV=_|D`jb5zBOst=i0&Tda5*n`Tp;Qq=XbdSQqt
zP`wG6#5%jnq>2{&l}-DKVsuLO!|_tq2kA&#p^3Uca%l1)8YnFEfBnG1DtJ}leCOAD
znZc^$j|~*;fFiBeUh#{@n#R$SRKqBaysU;JJ^zNLp>0nwGot&FMFVct5J&A6#^H8%
zflpr;J)jEck^k9PUUS6EDg!`pKxr?F`p!kfs8uy5`xMOn7r_Mf_qFJ9%R3T(fezzR
zS(C0i(XGY4VSouFGm<iKFr2o=xVTa}`>>OL>tQPVZ$R}+FhBQ3tjZgQSA0ni>@gbN
z2nRfF{<6trj+h-B22q3QKOqX^q=u@6#id=66S@X~ObnPCzaKevhgLZ~O5R<9)Hpk*
ze9~nF(td2V`*hOM>Yzaly1fe~1*KJPCJxd&BUoj{iKrQnl@I1h**yB1SA#X*5N`?3
z7Pn%;hMxf-p;N&ySO}oDGe1!|Uphf7y>o)%)i%%0V8x!6#m(hL6+#3LVk{_^aHs0O
zhk&dce}Oe*xLRi=d4hKVwX@NlE*@GrH`FK7WfiSa2pATy_V#!2mJg|~C+4*&XxJpo
zNN$94l*yNK@{vZ<dNlsDV}v~~Ocn{3CP}?MX;gjIBs=5}0vW}*`Z%K@!{^Op^Ar?s
z1#Tn0X_1Tstd}!hw$g0xnhlzuoi?sL3q`TbNqO;77yjRduQBz^O-dO+$>Yt(Zzm|y
zw^QeI8PUK$p2t99Sqp8geJ5<Myy8EVj+xdTRiPMa>d@fJd2QyT&!$6(+=imi5f8@&
zGCne5RFF_m#QWU&hrN=Cm!ci2jzo3a#0aS|0&A60w?g^`B%FcT*Nn6Rj-2(-dqKG5
z#7<nKN7b1;_*=WXOI<33v3#BfJ(Z?8NQPIO=pr&RZT+6CG{n#X?gvNl8%SBqEjg99
zM<*RSft_<)Y^_?CEy@0##`tb8=bRvQr+&JzEux#PjXZi;5vf5FHUgK-uaI1Ok>V%!
z{X9*zn6gVd9<ml`c|J$*`^)6hm?@(?tR`+%3?z|MzL%kJVB|4sySzu5=mdCmR$z8D
zbK_|Qo??R2L9z%e1n&O`0_+#EzE{2ke7{8RY-4+&1W`6{Zi!&J1$)d~DTn>*;nOF~
z${F%y^%~Z#S1G~a)qYg73sAC2)|@@98viv)l1Pm2#^Xs?F^+uwKGTGq=|l?6<o~T)
z@;tyu+vWD{Yl6s0Oz(T3D2A&c>`#tdUAuc76vyjk0yH94_s_7+f&$6>=tiU6dGNfj
zFl0p-j*PXmZ7am7Y^f20aBa%=5YsxTz-93Ok-&WHn_Oj24hg|p_plU%4~lhftr;-0
zB>!2}(p!6O?Uuf2sRRYIFQLAC@qJ9Sd>Q0~(QZ*Bk3{{XBRbY2gOV+mBMcD0EB~?+
zj~CtCN}&FK;3Jk5>99Xyv=c7AP$3w-26j<2TVQ)W3VtfQqpab?M%x@Sz7vF!vfy?%
zN?A~$XP6mzYmmvZCFn<WZcr$iE+ZK@=EUDbu|a5#qr0$seB;c@f)I>3M&nPX6Mx*G
z#^MkHh8iPjZ>$JVe-|djj=9!btHA_8J9G)`{oNj~Hy_x{l;JyuyNz#k)+Gcoau|rO
z#ge&w?sDG`j;0OY0v=g^d|T%&tWf~FCqCBEYDBM1#L+W)$`}yy1{-}-17Mysaynz_
zJPf)dUvm+Z&(426Ns=~T>~pN^(BKg7zK-0Bk|Mp;q;&kaEVUaEj{IOL^G%-cufpyi
z9W*aNvez^>!@Nk;u^ecTS3CwIRU-1mJIV4`74%hH)whF-H}>qbBRoVhD!}{zeyEf+
zRaYQ|&&*Te`-ZETPl0gN#no;8aVJM4EcYPH#f4-B;}}U>hb9j~v#_{Ef|#P0Q8vou
zxgyIh_OCLi5>Npr3?+F)ViiGvi&!JQF?MxiZB~Vj<-ugrxKBZC_U2;d_xu`=nuL4^
zEK35DI%dJRUcqp4_zCaQfN#jBoCH*~niM!?%DQt6#KPd_R)|DMDyiWqaKER5lBfsp
zL91(4pqi@_{Rmt};vOb&^)r`hvV%p*>6tla`NG-bu{fMSH*v!$%S4ZP#K@E!)*bKT
zn>-Vo0j_{_Cp6l|a9%Q*di3cSgB`nSGBp7)DrO%ResjKXC8lv&0+)Ue@-=h65e|wb
z(?$VA@)}CioB<lJCYTA88=pMx2X39N@P)T9GhPUaJtfoZ^!nlzPGDkw0-J{L(OlTK
z?myrnf#KIu^$N;b1@vEBO}da4E9zbUOuKJoy-WQ~Sv9cKA~oPK^zH>hASkLSi7R{$
zo$T&SdmALNof=k;zS}4Iu}O|GbtP!HNFDJ@S)a`vVI(+sa3o-q_6^F@_|~k|Ud1<0
zi{AX*RG5*X=KTKyQt~*~8dTCS9+D<0FGF>Vlin%}BC{PJ1!FXDT{(lablA98Rw;xb
z6$iQ))VR&oWKT{BS6B+dDqLw}s|@yp2A<nyS@mTKWQsnmd*N#)pPn*pcx*r_0aB^{
zo`t@J7TsFC>V9E*??>?pm7griBwKCLuXNbm`FVNbAcTXG46{F<zx>)Y8$*g%a&FcJ
zJw0sJsFBf5$h^KEowYimQoZ{y`eb@dNN8x<GK(JcoL^WWcCC;)rZxsz7?22kxuw#^
zWHisOK`7$LNMo5hlpI^ASkcjMy#?^j3aAJxsZtgPq<;$>GKR=sKglr#yJSg?eZbOu
z%DgRxMkB~sU7ymBZq$CGg0aI!GEYtrWh+6lPtWIHBEgB8cR5=ldOa7nkOC*^cWc49
zB!q9&0(imN#^gp&E2azt(}|7;z*<0;{eW}O=>5RyEGGCnp0_A&Vudj3)+SpljPE&_
zjkThzZMag66c4|1Te_N<X8nV^00SMBiq}lV6bC>Ou*Cbgun|}Y@|Qt`?I?2R-!{>e
z@;U^L;3<}O_coQ<PIGi&bYGP6jazUr2Ep?5({7)>@c93zT*KDZDBLuwE}G=7RGmQO
zgSZu!Y%k5AsQ172d-y|gXvTv+^^sxO*+4?xkCrzPm@}_Qb_?owq_UuUle@}GxW9M0
z)vnhd;~Q?QiwaZ#xav_i2;B)v-TE8=1(-?u&#HDfO73{c40D?odx`J+gu3O+7muFV
zd4{<^H?!2<^{ZC{DlO8c@cs<QW_1}z=dC`=?o5vU@W2uRmong*FsB$|2Vpz@Q|1Gx
zE0dTRd^+ugzV-N!+^80j<%@b%WgSb*q~C#h=4)kuP3z9AW;wD@9CF$b=j>_3JxnrZ
zH*Nx5Yy=>gnADT|<y^O8cZ^}vR^{3TF7!=f>!A#GgH-x8jn-K?&?;)-RZLy`L3V*x
z6;JB9OSn^mZLf3gnEMm<!mYr4x1qkDQya&M$I>QU3xum^D5RoZnaRi=;mqxY29lhT
zr@Ou{1WMO-zc|}2hTxpazVgi82qUW7-zX&0j@Dl8@BBdsJo_sH`<|#?v`jaAiZ^(}
z(DqoH%W`SiEhS#ot_vIyNIU-28~-;PdZQ!QYZf_YYkA#t+XByRHPGM|CQ~7ak4WVb
zCud`ZNHK_yO6;*o*S1%b(=Q-0ZQb9hOd~mi#`q2jKt<S=9|8dzu}G5|+;)nmQ9lFZ
zV=7bm4NR$9ldI)nScsjS9z+pg)=zl-VX5}m%U@gtp%01aBsr?QkBxZNO!5Jj=`4&Y
z4V9Jwd7}O?KkIELh)I&rntn~FU&hvq<tmiN%AysQEQBdjS5ThSf8C^VZw~kQB`;D+
zROY0l_o<Q{S#t>>$TaVU*L`4Jy+1u#$|Hi|q6+D=@yT>>Jcy9Wp2vKLm!u9w2#Z|B
z(%Gwq1kB=QtBg87Btz^*&)}E-dc>Mpo+s6xTW}I{{ISnLoFY&X0;M+(+b44LUSi<v
zgvt1DamxP>i?bx_!)QZ1>Sa7S80gn8o}rCs&&M>TLTmF0KoM=h&8q=MZpWzw7Ctin
zmFZ<4ZAM?k2pd}%E-4`FO&qf`qK3vYo6$8Xg|MKK_fe-xI<!M0B=9e@td1V$1BAN4
z_Efbxcld=#x<&cu_g?As)w5Tv4FYR<?Ql|-pb9US-uXnVdC5Q-)Av+tY(trvw_2m_
zDbWDS`L&W$5?K!<b|A0jiTiKkg?6-3?@;O(2+u*gvi_FOD9w!!=&VLjq7vYLR8Wf_
z%rF4baP*X3q*^XG<xp^OFz~ifn@9hSBGKA;DdjwKYUMODGzhoaaOF$HZ}Vu*wEa@7
zfP7|kt@p!`Xx^Ei;{I`@T_N7LKX@wewX4vfD`y&jK5}I7KU><gC)&KJZ$Kb~yn46F
zm+cRfrMv4JkyDxPQZ~uvVm~88tDmO;p8Wm81Y!t8i)ptPnrw6)x!xcCHebc!rf;*k
zNBw^{1PIWTF*BwIYaXdcBJ+m?k9H`X^1{}z2k2=I*C!u-0L{WEv@K77vB^q#>%M~N
z1wD&KgURyjU!==q9pzr^2(=2iLV1vSx#zPEBxWr1k>SimGudUxt@wz)#8;B!b{s+@
zj5UM&ijECi|KW<2o#Qhu`?4K0<|g?99rDa0uWG=a8v;I*Cm%jRR~h5nQ~C1e92m0W
z+2E}~czyF05N=<_XzD;>ttO*5pdS$tr>%Zb-XQN{U^xxIA5@^%XTA(W(n{@A&~1uy
zaAL%S%6Y>mvH|EzL;|JcGp`-rg~txeX;4L=p@h)P6glv9eFs37F)%_=>#MwI;Y9&9
zwbe$r8wjzgT{gao+2`?lU?1XYSmaQtq~k$dR-Va5WON(Idf^h!(QWd4$Ot-j3kzt>
zZrFh>;Ksn4oWG&yRX<^tK!lrV*0uy;en+$v!Yh4AJg6E-^XI!`>bNG+J?55YUT7H0
z+0Y{ek_^BPL=ki3-nAb~L_#4mK6b@x4EI4N-hAg<6K0jf`Lm)R(W5|z(g@ypx!0Xd
zoOQM+qO+{(It69X+fv#BX-GyJ%!<BbC;yi8+Wy=!k~%!N{0}jw--hL|%Er*`c*EKs
z2ZEL8)SWSb12aXDl_T#k?bITG9G^>5n45vA<JQUaJR~%rYfCbEX~bM*Tpalayqxhl
z{kF7IDhll$)9bH49OXm+jW#or>%l6IZ?ms9aR(LNr!J<dxqX~`61FDfk)A0q5PrW2
zg4iV@AFRV(q!4&fub9j@7VWlEgUgY6Sx;cC^lsQWW|7uzn`tj&6e#mi^OO7)?x!}X
zu3cQkttl2vX@(<&;?8?1FPP{t?K=WYo^k1`iSGg`L=Dh+PL-&&G;!W;-}oP(ZubIB
zXzdQ<2%}b4o*u(opQU|+jrr742K)B#7{G9ra(I6rvjA(;Q6DN-M76?zY|Jl@%NxOB
zo$>K5TuB;IyYhjAJ~Nl;4=CHtok}bzv;6SS6U$Nr`h%AtBHp%Dt?Z+e6!wEpbyxLo
zGy9)~*<3WWIQD2UElb@s*9tKtox;;uODAl^baUl)Kj*HzsTF6TytBl^vY1l~@j~#x
z1K90gzF1JI^PT)P2MZ3$Y}<Drz{nuI1s3g$>AnGeCv-|h@%zNfYPpa=ATsz61^-;%
zA<5pun`lNyFJ!9*;Kh(EKUkBG!7-~s?3%t^tJ9+m$g}?{WM%){%F37$agobb{!Fik
zp<Kk3&WojM5N<{*M1Q|3MQ1xVT$MK5&2H<f#mo)4P$)#;)*Jc>mJK)N+VqNsfj{w+
z@5$a|6d?&s)P$xn=>=zz`x7_8rVxo1iJ$T<noTN6bYznaZ7--AVO%89l|R$pq30`q
z?u8>tUSNm?5?iQO<0^;wiTbSV&w$tv_yien#&ZCTMaX9?3oH&<p#VAI7Wmi~$$tew
zn(e-a6j?{Js$66Pq@e8QkqMgdbSS10;iglbphp3f%|LkOyW5D!0rltF<El&r**2ad
ztyq!j{k1mB&j0S}odU_F3|JeI$KhWRwGVd_nn{Jc2mSbPT1PX}T4x#+YtAR&^-rCu
z`0Z|bKZi7=h;A&->!eJ*7_3pzVK-~bRtQ0CCvu$BL3o_C+R0=Xsf&7?$V9ndBJoa2
zBDM$@B7aVPMoEf(g3-i_q41k4cuU*RUzQuQ(0)r;QDz87WUe+Z<Z*2iQyiid19H^M
zM$CM9M!KvOEVf_{AcG4E{Z$NS8`$|6-1j1rFb8uMb?DgI;Jez@g!{70`dtK)84E0b
z4d!FHeTUD$y1UG3iDvMq(r3AI@$}~AIB2iS5Tqip7yFJp^-D8L(^R9u{t0Fkag~&%
zJCU=9d0x=$1rR(Od7B^66d8zR)j%;Q<qjSruN8`&Pk$C}p&WM*;>ggIS&JHFAD8J5
z@u8;(vOV1kUSwG{v_DN<)iq7TAVbTtHpLX-Mw7k3;Nc75H*{qR0e)@rDs~g3W&iV(
z1GGnvz*qq(fvR<0n)UdlEP`^TndkZOaai2Lx~dI|&U~6mMQq9;nTHpgFY!O4)Wd$d
z`I|~B9J4WIIvoiM@o#!1he**VJ0e)_{nN_VfAF;yy;9s~#qKj?vcRxUC1ag3AN~g2
z%yMNurJGxHlr$v`isV6MR`aYfh3HJajPN{9Zbg$D>G{a+9dO_FGd__8Y;G>ZY@b;Z
z!mfm+cuf2t1zi!?I3EC?0J7+n4Gv$C=<r+cvE8Q68{Y!e$H#P%G9bY@3}%u^jKt~o
zN`(@o!od1}q`bWy_Qx|>iksCk%0Y@*eVd=K9Z%ZWV9J)C071<33>###&h_`Z(9MAU
z8G3a#KTVTM3>0%S!}>Sj+d)#WYe8@}$WEp<q=0?{J$4wE^08Y*nH_+q5@@2)Rzs*6
zZSm^Wfh9xg4wddinJ3?&V0q&u^!t%EMb7fP-l71!MvyBI@d?n;uSol1mlK-=em7bY
zNQkOeu|%1;JR$qc`BFSVvcI}7_A%=#3IEbUx*{X$q@Z>F1sti=^dBUE2G!8Ulck97
z+HMZ>KO!ED>EV9FN-a~_-kt_*tQxOx`kaxtGf|XMy-dkm{KXZvj-=|DYx@^OW0WP(
zOaz%hs>3jELp5-1h$%06pY#SL2xmOj!!oczniUB&0cM+y&WORK{fim}y`7c4M5`N+
zKMH(;j6M;8@h|MYW#zgPW5P5%e6`jLM`+d|hKYvNl2sm7s@=>TL2k(+?X-y_FK~TR
zC++?To3W`@L%U4Tw9ajh<lSbspy)6DCw-IbCr<5OW01`ZG0uw-g?mz(*R8uHoYCGP
zC97ruM3j?&Ce7*Q*qA}-rfG_Xun4zV;=r!d|Ieg-ZiQm>x71}JzkS}jQeWZ1JVY*+
z(6fijFWoNtOGMvvgOrHzM*If^2qYQ@BIA!<!vQ@y+WzrZqU4S?V_-8elU=i0Hru<W
zM0g(BuxW{$2ix-<{XMI)ImO1MPv5#>3hnMjRKyZQp9C*2!Gs###L5tt#G-;+Fa7O$
zBp{UB?okuBFTnJ48|#5ik<|nfRQ9~|)h&`r6rTL}9V`aJv7B$UyQ8q!B>?^|0OL{-
zYi$HYN^j@FSMi2;OOr}7rfEXT3tAPX-kheMrTal03~4}i)h@STP~PpOF(nZshB32I
zwAj<c^?}f-NlK*;du62PXOzR#Gn)!_tvLh~_S$k@5)RP1Uw#mZtptM$(QWDXN&k)D
zlLXxtZ^r!AeC=<!@b|7%Z(4i}BJr&E7^PB)bOv9d@0+boQdge4oCP5II|p*eYp2X(
z4*=4b(g-IL`77zUwpDb#g?IDnA6iZ?XJ{RhkM-y}dbTCiR3ki7@RPxZT9$u#{M9R6
zO(97$Hqz`pConaUkQdUO(hicx->WU$Ih0GtP>|qEe&bpAAm1obhq>>ca5(GMTms0b
zRC@vcsN?%}UdK^E$XA$zdl}|U1anI&<ATQRI~4baTDY8Ix}7-3TGL}HGn;L1`LB%z
z-+_`jft&!~OtgGR$HHgX;H3lcA*z;m7*-8Sx6gW4Z_jnOq}+G{W#hiFuExRA0(2x`
zhI7c!lN$FDqb5BeyU)wpRk@DiNKLi@&PL)oW9k+gA%HJ)|2s8U(g6BJDV)k-AMwgw
zAm}qD48(uCSuab&W)(Xi5<=MbOAlv8CO##isH&BLdYHf2s-xL`v{%P(zER_1E_0b>
zW1ylvqt=0({>IKA13XmEaFT~!;U)4cS?}vZ?Q*ygtt)XfHmH)ZjG<ges~g??Lqym+
zE_p`U>B25ma`D(&4QAm4S)H?Gl;8II!U6bCAqN}Bs0xvCqY_%5w*)%3rkvBByx>FT
zsrNeQvh3Ogo3@2k3c7nB!3d}}n1I>dyM?M=YHlc_PJa5uy=6H5$9(!5En_t}-_7#m
zPj+QXbnI3y(O$(L*2s(&mrmJIPnrjD8a!k7bzI{obGU9`H~}jC|KZWXAZz(~BEGF9
zq?9kj%@;G@aEg00Kn(MRknrkJ>`7}lOJcwMYPe!Qv_5zS#h{VFBQm?Q2l#?OX;W|=
z!PMaAL5P8?@K*bq(@#eas+h}oK(L-m9j*^sBv*!GqXwS40u$iDcK3Zw_A1bPZ{Sv}
z(eb^5?G@-zthJ!{83t<3IgXdM7>;l<DfK8_Xf|JB(c7gr0j#_My}q71?M2ad^1|04
zY7c3iqNLVQiFMWE^Tn$Q%C=pD5m(Tk{mnx+eQ3ZnnhV~xtJLBr@KqWu`{d-se-j(o
zn~c399$2e&IxaDjbH~{KOYk%pTRe$))0OeJ>){RBJ8~HP%cJ*cg!4_aUu6QMpvGP)
zE1r&?H6<4pcr`Jyn#-}+e)T<#3-?3NB9#vwM);Q^Jv=h)1~V;nfOdGZZd$De@zF7O
zLyNkTVlg63+%KPr-;w{_nM*HXgTeIfPZ|<Af`f!bGC;_^1%HuwNGyyXBk<@SZeIUC
zfyiSz6XZPlkp`80!Q3WH675PXEZ6C|VWQqf#Cs-RnZDA;Oz%t8-|p`~n^=Opy6q06
zv+R}To#&`D1f*uV1=|Vqe1L@fRExH-J_*VR1Ajqx&(!D3_wFqefM3sN%9SP^+HBFH
zd)GHQb|SwkxH2(9{jA?L3Z-QL%qa#x5a@~l0Zm{!9m71K%f~DNqxLIRXS~rQue$?V
zA_W<wogPea&qqTskqPi@<hPv{=uM%wh`X6s+11gXsBknrz1*#QeVl?YYb3fl2jw;!
zTp&>teZ&wRR6-Yv7$mC(&7SIbQ4atg!N6rVk<efw1?BQ?Fqhj)GK4kJ6Sb&m{7zOo
z15i&fX+rfM+d;}@>GI|f2SvFhQlP;x+^fRb2+SH+D=>9(VM|duopZvCXkN(roj(tY
zc}NV55jkR>Ht$QLh$(y7RnbFmibeK3Sq(ra%9?54rf_Rg?;cJHZvTjN`13v@69te`
zjU14W;4jhkoS}~@DkPHLa{y!&DOq86#R8@7P&lc?cMI>ZksmST8<(mIW1GkkrUL=l
zbZOmbUv+X18P*lI{W)Sq{5AG%g(=#Ad=2b9ypBP6)bWcxiqw)u>-PK-s4awUnZ**u
zj5BnE_3-Dr^2s>3WQ)!~ZmDF)XYpiuZ10Zh;dikw@@eUKS(0Yj*;8h#bU#?eI{t7B
z{S+?jX3AVU(8nd3Ld14AS|w<JQ%Gl%KGc?T5>#-a1AqDFxYY3St3nPp8P28zml@RV
z$JxTg5hw=sx0%6UVW<m=b{bO2v$*9Lq$CwPsU;K2D8k)SB4o&Xj;~j=OC6}`NZ)7W
zA%0Ck1gNqGl<EDZ$-NIrk-WtT55I=gJ)+2*pg3^()%Jk=Y9BJ`8dN>#To8PXm&cwZ
z^?_}?BBC3x^cPB-@FUk@Tsiu+JU_)U!{7&!d$$i@I}drWpasc1D-O=*EMWnC10eM!
zfV#(#D9i*bxI`{89y8AjEcK*5sIzeTq<Fy!m4o2%ksU*<Ta4mZ3G9Cyx(E8f&@}WO
z6#b8|(uq<oj@uqT8wclx6k&vV6^Xz9>7;c(qs4NA0(c%M{Scxy4Vm!Q6uoi%k?jdz
zKI(P2k+-S(#QH{`^G&HT)lU&k>r=p?+&E%dlb`Oby%+YG5wnDkw)Y#$KoKwn^J4C)
zvzSSG<0*+N))Nn5TS^LShh&Y~N8n49l-VD^H5>Socb=KCKba6CuFX~I51genptRV#
zA|`<seuFy%9)Iaa3bfN0(iG|NqLW7}sfS8MQ~A1Z9qE<pRjRtF8&tH4+*p2PpXs{B
z!ZxmPoO3iRK7ad*;zcNi@BeFaLRMx*1|jBlH;&P9+mRQg4U&IifNA5`x#uI5u|(FL
zv7wXC<ehrYrR)NmNi6J6MMSA*Hgp9}0t?{L1m}C5m-v@FByPIcbaL8Rh4bwfBKZPd
zxxe<r8%YPNy6<ipmnK1D6x$W8XfQxcwiRjcth9%yK&Xh=MFm07XmO#=jg;wHsl3ih
zXbYa?Lru!(uMINzh-`V<eQTm@w@7?tW;j5xEGKSDUK^C~Zbtfyssp4~k><Q#UF$$*
z;u^=Q-e;+3A42sDtiY|3KIno_T;coDUWJMYy!|bW=7acjRw(W+<|wum;ZRXCW;GEy
zW~WN`r%g1=b{?KOn7N=!ilH7SLbzBn|Jo|FL{!pkNP8W6@N6W8NDKgwWK)jg?Adv+
zy9IFVjE=pb1~(R)U|P>4#qs<7#`DCdrqTyzM<fBFIRJ%lioXl<K3HozP;*;`lGVB4
z&zamsF-5DJFf*|nkrJ2v{PugxHgt#yl7L<-&mXhxx;c&!FJ5M>^bK~mQS`V{y*T9R
zLaUvEU|YeE#0Jbl*p=m%I#z89R@u+PA#3;~lf*tu87|Q{S{a_L^9QoDE$$U)K9x>&
zBS{5kT8SrY43K@fzJJ}dbBNq{Q9=O^80sDUL}ZpE4Q0ih7>HZ2r8u~(Q&-J1$Nrgi
z{#M!~^~)kKMsC@pN`6?PM4DCdUi~R(0AL^HgI_JFZfKK&8m7~fqg1)I4^4zcv*{jr
zDp)RFSCkrb#<2U&O&X?X=v449-xTkAef)<^2-lv(J3yqSf)@HNm$H*IfNtN(7r-R_
zHo1)U+%`RpTjkxf<om;N9T=HR#Lse@ec`ga_QDZHcUhQ}v96<+wssXGAxDVXFj)go
z-3XFehoYIZqnG&*;h%D(LlH{@px1zMAamdACdX7@>AMoY-L9Xt%$;nq45I4Z>`DJ9
zOmL55HK3Hi=%MlQIrVGkq^*W7C_mFSY}dJ{M%}buQ=eDgzq4O|xQAMuln;>{Xk7bW
zTdaeAMCk?4GN{;f1m-OGk-y&%O3vd<_{-O-Z?w}kt|JE^h^rUqenm%lISL&ko{jKc
zNzK4l;L`oIo_pu_clWUu$%N^#P1^IvSNjhghrp(4doAr$K;udR6d?R{&rh#9*$k#j
zjTf-g^SZABfpr1o4EL9A+XG0supM55LRoqWnonwS%Wz%ePOc2;R$CDkZm9AWv7rXP
zv}ZO|yv+H@Z@rx7xcUc?)jCldgD8)7Mv-2w{`Bct|H>P66A&oeL<*~UCIzEi0dyv}
zRH-n*7tQE3Uem&H=sy0unCE*V&tmgT6refujluPgT5>}DG=XGc^&xv1nhca5DCB5{
zNONG+S{Bg!d8;&Px;NglASjT_x%YF1gg&M7sV3<b_`x@oK{Dq)ZkC9R-MdY8bS48Y
zmT+>JVY@oKe(p_ML=YH@dqT;*UR$_X65!Uzjx1$y^+Vr8#Q~i}v%N;|gMEfz(UNN_
zSkpk^F#<)gP;Oht29+!FvE2PI+tvLw9kfQssauscc#0k;q<Z1~T~oAE%0s=s=^W<V
z4o=E#kAKi=S}<>)p#j?38HXnU+Um95Mll6_&ne?!svIK*)0;sNOqCJ=@rW(upa36v
z>+yol5SNW{sw|eZbuqxL(8!9qvFZt@`8g*4ycwErA=Hkpw!Nd&V5?)7P&pZh5Eq8-
z8+_Wa)Inj+-N`t&>@;JZ&E3oUr?F&Q*=~DGlEb)7f2IGY!N7#YL_c6UE@5K7luHp;
z!(AuHWTcNG%Q;Gwp7!sXMis0;<tpHQ;{!+ywX%7H+Ir|k`0YqObjbS>@w%5X>c?0-
z?PzW)J4Xk^KWwb+YggusrjFP(jM4P1Rt!*1XH3lc*Q@IO=k57@piGm;+iv;#2aDay
z-!se^%92F$m8mrRYywnnU-+q38s>LnardQ@z<69jw?w~2i>EJ=8;_&d3i}@8L@8U2
zw~}fAwH1yV4ZhV)q+82G_!#vbQpvVjH5w$?BVF06oeh4;`!l(x<q^=!Z1=ls!{iSU
zaE+A@H)TyC;-Bs066J$gjE4wHT~$Dnd?NLA<A?zXx$L0PALe=hvcvrB%r3)y&6?4a
zlboB)zpF^2ImEb)sK1+#B~_f&{cdrAxOY+9vjVr~4;LMYt@E*%=VPt$AuUp&2(>R4
zo>C<fgvPDMcheGh&6R@|D*2)*A=or3<y35Rmw5EovjL9a@wjZP(y9RC*Vo<umS!Z@
zh_8H9qITNl?5w(|@-iDo<o|jU_2u<P@ovMKeTZB6mYtP$m6X=(vlH$>sp2voxEXw<
zIwC6YXV;)&h*}A<4&*(b{isfTch8@v>%s>U0b(asNMRs`<qjnm=a9;hKv!m|arUte
z-&QhAH`p11Q72J(_`Nl2$kVfEH*hH~-36ZCH&;LbpLaG)RtFN2s;rw^$EBHtgI7Hh
z6$tUitNf149|kyl`jlDOpNX<ys4J1abSr_yuX3d-2Z<J2<rv+Qf&MsD`V9o7;QJGg
zd?lR-`H*tNKdhH~Sz))2zEPNzW;q#Lkum^9K)S!e9yv&82y3i&Ub47rnq=wr?qF@3
zS#nn-o%c7Y!SJz+c4D5~ZMPH1>T?N-a`k$Z`4BHr4T(3HuKNKLi+wWZ#gX2JWRo)}
zjJdx2y(|QljZ(ZF9!GkIn1fYhRt?_o$~U7HwVgNUYy&-BILT-H0CSQx7D_6!&d)NN
z3N{rlEfa^Iw~MGkm$nOI!c>JV#ym!Use|1XsNs@!4+Ma~Gg#bMLAL-x;f#G6f<VAA
zG>~(VP6vm|ExnWOeTT|FoMvw>YHR3i<nrb705|WG-ylS)T4FqSEwkaZuFir4C;@E8
z0#PWL54-a1uZPnW#^edF{(=+=c!k{=Vq<X6wk&zh|8GvtSV~&z>g(h3$z0zHQ;X^*
zv4vjFioSUu5M?PvmtL-Tky?*s0VQNW78{HMtsaW@fp5Yn0aSDO%ZC9?@$FD}h+cm6
zp6mSysy&xSc<ky9+TU2^q;sQ@Zo<=4R@EvudzUYJT8lX3_&PAJ00=m>&0P=@O+N|R
zwshe#E`4!++f0}_PXOtHKfq&DN?>)O3#qjd>#i|Aw~cJ#%zPNtW;O}VhsYFZ%~|iC
zo?e>Hi?7n%bs<j_N}lq0kgi!T{?|kfLt4e;tm5hiigKfv2?4ws;JD31{fU$38;i=Q
zBHd5S=7<k*qPJ>)xfP4QOy)6z3$$!MWo>I;T~yxbX_PNudN*e&IRP934U@|BFhd+b
z#=zeo`NEJ4R4{Fw>EV|5ePZOUP>e$g0=m@NJP<Hom|;-HDo(SEhyg1&d&laI0~`WJ
z<2rq5got5L`8F`LF~P?@5u*j|ICSepCw}$M<YFXep!(Y>yD&gNYa}r{zRC6dl;J)n
zDY(0|vX&wH@juitiffGFPd-pCpHa*d`-2Vw6g#)6i|IPQwk9o?*mlt^B0Mj8iyofr
zV{GIRvfmuzBPpll+RU36;(jhSWZO|%m6&)Dod($~C7T{)Q_e;tU8p<BDRq7%8BrG%
zXT^2!<qSdCkun`HAn15BkXg+ziKJhNb*AmX+&gs?Rwz$$UR9RY8EXK!d2FusdkDk_
zPNnNfpfe~;1Lm9I%k>9uoX)m-Z`vZN&t+uBVZoqI(Hn5TqA2eEzGD(UGO12X6C6mz
z```!EEpAff<f5~Q5+ufM%|Re<VH(Zo;JJ(yMo)LTmK+>}-4k5ZRApWOczoZ-H9(-7
zwE7;Lpq#>*AXP$McvU02>Jb!b-|+|_`*flOOGBqE<ZUlIVmuvU$GUDeD%`z&oI&3_
z7W^oSuxr)<eNU?vlZ5@BxO2MA5GXMcC=HGVxPb3}y3DAw3;#6YqbbAPmEB=*4LwEi
zRnSe+oqH-@K&7O;*Hv$j=-T5EuC9c25DU0u+CoN2EdX?}Lh6SC^+6@E1z#I(je+R^
z1L>?H{+qKLlZL4>Zw?UmH+Mu;ZeUCrs&ydTHn|VwJf4VQbMqU=!6;c)9JDDzT)D~}
zO05M6aH_~T)11=iNgVGtrmYE*0pql(LYQe(0K>mdGm_VnA@D2^)0)0PupfOYHm#3=
zeeX8!U)44fud%D#)KKKK>!w;^BVI`BR$eDyZYyncudLB!Nea>}PJe^oECj6nRUyJx
z(CWe8q&;Qt`sveK_s{xp@zw$P`$3jXBVCb|FjMR)4KLnyEbLf{kOT8vR9{o)V^=1l
zt_LdQ8A<A2-45CVm3pW?XpZb7IedLEcHuD741uX=3eDGzZdRUv;H~rNmCI39S1|XR
zQDKp88elW_gdxv)NSx=+vB>bI>LZ$eDbmNn1HMC;!em4RNl?Z^CGYv^nCdevjsCV@
z)`@pgDS(4tL!C5<6!ZF(=4_@EiN>>CEGKMx;(C3A<8lD$FNLhu1q3S)Hl+1(+8g4{
zU9llevaG+PUWskhK+BjELf;fD7n9`0XUlvLY#}6UXj<zwu_Kz%+>KlTYs*U@Ai!(d
ziA`nnhu_Eh%Yd?R^Uy_1zNlAO!y9f>5pu+9pTZm3sgz(>`^h?)uum12KW`z8YKHb(
z4XAO$7=AeJY1lLS=QxCK+|`9X((<b<*WdI*43|a+sP@c32x4-7`I9|VVB=c@wjF(6
zaOKHH<w!kzjjYVNm{$V_t}RrY$%dFVUfsbYd9kkkdy~a6o@hKZIOml*`S!SmM+~ct
zOsJzOXDEK>aPRR9_WD^z_E6xe7SirS9kg}_cH8xzMxXw%tI2>i>wrOve0ILFs`r2<
z&Jp3N_?Rr#PZeq-&69>7#g0=(r46i#(SOB_aa%Pnj0A%t?z3I!^oUo}-NFN&-X$nh
z6pr^g-u=ZJPw#gHA0$3oJwJMMC{;=Cn_u3TW~)$EcwNUgcC8o1jf2}4pG^7j=hO^C
zHs*WvwLXoSUO%0gdE!-Vxp@HfVMe^U1yAzFKK3u3hs?lypBgtRvwro-@J?67E56R8
zBxV-0N@?{oxCxhy2^gPi7H!>|k~!c9H(k%Mn!zH*i5-g<A3HNR@xJs-B4I9_@LDxE
zK2pyJ`>F;Fn!QG4RlPz++-%|nq4MIR)=+(RQho)TYxWhlJ_Re`m^O>MGCQ3GtnvOR
ztZRnU>{!bJ7&Z1pptUkgp8TG$7e0FP1)=4J_yGI;iw+ll{4v5}IgS#$h~g7;fm11^
z49!*hXCrku4VYf09JP|^S~k6tBd&FrH{49?YVR%J4qtCVT@B)+&_-m}F>m>VkY?JQ
zg912!nR>Yu0q{g$cIW}vilHOo?*-!zQQ4Cwzqom^X6<d(`=g6i2dsLsO)4crZ^g|s
zzOwY_H=YM4&Wa=!%!|7^mmz+Z2dZmt&SafRaUs#};-A->CMz?{<dd4GLU8Qj8}U`o
zHIKgF?Y;M|v5Gcs!(Wy0&6j82iqNX`8inW0+(Xo(A%Y>U{UyZ{=3p`85Zi%Adeke&
z-BGOWd1f5hd%@1uD_~^iXO|VaSij{sI%B$uZBj=*`S`d+GYWJA4Qnlp+yndt&`bp%
zUlG7`^l?0Fj0}n=>~d#6Z}R*y#r`(lr*&;T7m>V}UmLBuc5PlVva+kKbuHHVQ1LTX
z33-1hy@}|+zU$uyFQe=gQS)}21eA@mCF)cAr-a$pg|ALKSKjP%@>zT!>NiiTbh&;_
z3!400$r)>Zp2R>rx=rv4(aWe`E}qMgVNzb<>gb?xZp3S5PGZn!4%?CtvJ%isj17f_
z9chq)FEI08&g*afI5xF{0CqMhVDZlQX+YgfASK@pwRjUAvXw5bNO&k!F>QuC?@OX(
zW)9O|xRnP5EkE*QvZ#OWh084;akuC<upW(h)NeU=)(o^GPT{?0xFJwTM&wBah>6(}
zm|lS=dWRdJAfB0xb(jr2_M1BRl)RlF75g)<o%Og!5@*P^&>oVDtmYeo>wioDbvH{<
z9kc5^u*<}V#s)omxSv`m!mOF`zOP>1VmcH|3^#N;n3rnp<j;qYYAop3<&*1+?M{|I
z9m@VdJ5J!aM^VZS`s_uUCpyzv?iMkiSvmk^G`k&z;D+mR-6abx8q{BbrUG{m7bX&O
z)>LxLqV8NFe&}zdM;T-tGL8UA)a?N51tjviQyuDjH}TZ<(YIujU{oL~&H0n?UD|hw
z)3!W`v+=JW&evu6nOZE*H)eX{w)Ad`R~MANu_~TM^EBR+&eI^9$B?9Hv{huwVNJH^
zGHYJB<3@u+5gli2J(&d*3ZkU?6}!D)R_0A3eyp4&xS&mvjr(nX8`Gb1w$edzRlu`)
zffn*HsQ{zHbN}~|po_T0JAS&YxJ?#Xv?HAodn40o{ql7?iUF7Y$VU|x=<D~xE#ZbC
z>2pTD3UeVI16Ao)ufjCsj?h*O1Vo{SX2Ack#}j{FsF~S_bixrT5?XF<vw4Mq{omh3
zUWm?i2p{#GTaZGF_ASza<l{;zU4qkn-<TR0Eq<q4VVIhK%bhfM4NLG)Pm@~_%88(~
z;!2Q0!+?U#=0<73&)Ape*7f$+o=pRZ6Zi~0ElI;H$k_9b{K)1NobNq!yvxzXbJE1`
z57w0=XWk=YfNr5;gE2>|H2=Jrw>*y7O2qOHyt_aCPH+#qePGi09J9~Qr7OJ|FTLuU
z&V@xi(Nl-}e`JAs2eUt1G(NzxszHkdDULoalyGjUiAFTy$r#b1T*>p#ih);{d`~jK
z7zHO0a@u$^W-I{Ayxomz`26=XkOhH!Nxqur)bRzBPA@ksl=~fpsoEShA40ev{CfsQ
zlVi#(^ucEf?}<3eQaGM7jor%w>l;$W(^~5Cy)w?j_HNr~?C!`>W1UY0*+83IV@YvX
znov!weHM4WAdC$R-=|=o!E&8+BXzCLVkR`hc#{{RcV{EEmxMORp*19%kj)&KaxJ$V
zdYZL24><_)O@W1%l2nd|;SGyO8#KNe-Dj4b<e|kS1;HHRzzTvxPisL)^fqwrl5Y}l
z&-DWIzRi><Z-74uRfvKo4C%RQdGpwvQk_*LD5tmc0oK6OwWybaC(aVCKIxL8;9?Rw
z)~L8|3ORLfs4G^$pdBN^avS}6ca30)lR_y~>gk(To%5gaVtoyF0Z?+FiZjhNz9AKh
zNI*7L<MgYcAZ_{G7z+IUZ<SKKT1+5s2d)J#fflfdz@aLTfz!ZFpCT&Iiraw3FFj(e
zUBVk6XRVY);m==}wvocwLZ-}+W&2PqK75!{*uQ)*`95K-G9+aVG7Q`8*-WHFN_{g$
z^5yDj2)GbDp!5{SMe*^m7~r#Z?Hqw~M)IUXgwEl<oALiIsY{83o3KlCmV;pUlku>e
zCgCV7l9Q!io2mw{KxwY)rOfuj$B5gsdnvS;D0RxTxdDA_XKb6jx*p=_-peoFN-3?0
zX~pojCo)+rZ40O|&f8(Xv*bWtTDEA<fCH&$AsD0;Qoc<C`Xx%c1;{7045$s0Q(6Nq
zdiVR()N%(RklkZulBOMW<owbhh<_Dxa)keTT?;4UvHw#X$i+(^y066Kn)14Irw`Na
ze4}NdmIOGH2Ms<YjQfmk+u>o<w^^BurGd5~RiN|p8^b$CmLWmql6}-tSEO<g8A^sy
zWAW4B?Jlv!Pi96%0zk7;;V*z@{#_>d{QKGU^Db~r3O1$uxr76p-V{z+O$6jqJ(Wol
z#v=?K7@=M4WlUNKPw2&5)UvJsPYt*U)NW<~<+=Dz;%ni<OcRgrs@R5BK(U?B7v|$B
z#!kU{pP$K`CwI-Ty<?S)$<30LztNWW5-#<)8i9gfwK943Hb(m$BDc1kJz3#dXHab*
z9k)(M;DFYU&>sKUyIv<A*OO(u!DuzaBcmwKxBTP}#7bHnQ>l-W1a#oAnf+?r+<N~z
zBVh$!x5Mc~IA$V#$uT~W>&jrs81pILsRSzzz$+kt<;Im@K-(^~%NH0SqkRU!w}2_I
zhylgaBPHU6e}ZQmIFNj8nL~eb4X(g!`HNFNc*FKioGC1I4+y+RojSEvHD$dc?pE#g
zu4_pn96c@jD9J5+Q3M>dtW-d1ALN4OGMUl(0y;+)l@LWRfvIs-0(8?_r;io#4159z
z6x<tN!omKE(6^`X7r5F~AY_;iIRSUDJ;p+pZ^%RZkZVFh52x$cKkybM#l_+~V2R*A
zifd!hGeYO2Di~u_>vKf|pZ@1t%<XG4V;YO)%RQAK&MMZxX6|c&E8*RN<;T(vE_U)<
zcUDJN($7ZVBAkcoRv@VHzq>`lnP6D=sV=it)>K5I`p>TNqe{)DT&Me9^f!g^@IaI&
zTHwBUN^zFhA37_J&WR;&AjcSZ&&PyeMwus}3ZRP+fK;4O^N^MO4ygCS9+=Fl?qMG(
zOXCy^cbCMb?oIt41Xxm2RC>wH36Zlzzf<in-P@vB)KpgoQL#*KU(jA%`5j}@kG38;
zE@6t;mK27ER#!DX(?-qg85zLr*iXTHmGq934f-Kb$c^zbl4ExQZkc`yvX-%#zQy*v
z@6Jo)5&WqzYN{wXbS3ftyD1A-Kkvs0m3`c{(NL-BJXW0R-kb>(ryT_QzxSa9?~fck
zOnM`(CmGg|Y=akqwxf;g-^p-vK!>b=3~j)rx7MvTgfwAoIKez?$4mEPwE4XmwDX+P
zZ7(nz5VqOTCjzVip3FNhX|%RZ<;&iR&NaX2v%qtPTNS)(TAIZ_m*_btadS6II&`>3
z0~F=Mt8BahT*t7$c<<nSJ-6fzJ?WDUUb$g>(##o0ln4{Z$&SYq&qbEGNk$vN%Ew>s
z_umgTRs^zMSV@FjYb+&EeYmb92h&NB6iiyo^}gH7gzpW;jF_m_`6C+QRGOe0lR<<O
z4d-6<q&u?rpoIG7CM3UE(__Uj!@BYHb7u!Vr<l9yn@zz<itd?-Ojh5PWP336Y?E<Z
z<Si3Dp#>GfTWKMdO>D9~y46jcEfKe&_fB7jGr=bqAnkJ-ooA5Yke-VeJbC7%9y}Jl
zwbYSRBVM71za3x6Ycle^S1GrS0R9UsE<6>UHZ00$_|Gq|*<flTCab~2&{}{^2k&rw
ze$;G($Ttda7W;PcoTXWieaK41kcrj`Akq|g-9@$9D{b=_YRPPVhpR08M*`l?Ocd@t
zQ}N9Kni6zptMU1z@7rfhJ&-FNaBK>Zpw#C`tV8^)(@kOT8xwdtZl?}M<{QEzX$z((
z)sIQ$Px_NY^RL#}=}}dr<!zZ`2CZ~_OkYb@G+qCR8<E*j_@kdssyrh5lkZ>MRPq5N
z*CBe3ym_hTLWOghzh@ml4ZfUY6!fe&TU%0dda(=|LDt3f7|H4kMi6$fcIspcHRu&c
z{(8U!+Q3*|`iNZF;NQB37ebHwjYD)^mWVl9_K|pdBxOVOKgC#2LgqtOt8l2!>DBOX
zK)=Ve_(h9qxYXJIFywjmAZAs)8}A0kW;vG^nl4YCh5Gqal>G?z_<{?IAo+v|#VLud
z{(_jk72t#gnNmo2kc5b3260s@-%XdN+VT9;4Fpjgm<Q8Ic|CWv6S%*YsZGUKuO4?b
zR6b$W^0fP=r*Q*^71NL2rxXmV!oRBRHib~Pf;;jX8F$5Eq@Dl4*Y!7;1_iL+7A}A%
zAVo#~)g<5N76*<_a8GOfAm~JKa;~`c`Z#_i)sX54QoZ|DNa_csHvBFS<X#^9nEomj
zf6+T)yc;)2BT=CJiDB59LWB}9-)Gi2{bSt>8Fd0cZ&tTriK@fkgC)llmBsJ33*nhM
z``x5>7+3H}u=`m?o5<=k;9f*e-hNdq@Ig)blmMFb7e7c=b38jq7;PeZ&|p3;1j7KO
zO4;CcxMvimif1l^YMxrdu_wAdMstynjoqlqcZMdq28r*fov@G27iZ1Al3$PHd8$3)
z?%ItIC#PwK?8vLz1lf+2*bpx1h^Fv>{_h~EHxteHBk*#IA^W;_7=UE}xr$227pt^*
zFv88$K*blXeS9YavX9TRS51wanZtCI6BH=6<s9vIOQM-eaJaiW7KF`=4jKaoPm67R
z2n{<Ll#qIRAj!8rCjTCvx}qxTSzDvL5ZUe&1|YnLCGZetH&@YVV)f(sKf92b5Gi3u
z?Oz&4g@9Ec0E>;Tva~|Gz46TeC32ut1A8_wa79s+D@!3@6E)u%B*!sCmZu_#*S-Yp
z8gHujtNmXH;Hl+MmY*i8)bzN`Q;M-s%R5E)tcyHwe3drNo#(Fh!qKeeIIwjlPfz@m
z`~`90MOOUb`C}~4Dm;X-suM@}#!!;Yf+#hC4cTBGUZ?|E?G<#q(N*-z@y>3XH8((5
zBG5A#IXn6AZcYv23*tk&vXoY2zr@tF&wEpNJT(!pb{d|9Nr=M-HuN?0P*d`L3!3AQ
z^;z4>$a}q91INrd+WTeF0=?I1XKDGw1b;%kidyG4r={(WnXN)1xgm@fQEe}c{UOZP
zb_+TBX*ad4`N+ihaRMlOp?;E6zXNcrec~V~n>MbG2e`UXiq5TW-dn5`)#lc)wV0~j
zV=>#z4&R6F>dhZ8ne@+YD|Z$f!#~|%BEtwRa<z#Z4b`RL!5ARY@V}nq-I;?T?BzV-
z%{SI+rDWs=GdaX2vT@g7xcT_S%Op^MG%vNi^U@3$Dph5gf0rfMQAiU_n|8xzFCjv@
zPWgVIR?%Kf;7D<ad9V$_V!@#xD3DB+4)Mg{r-T;uc|SL{8=s6GIN4cJTI9=CW+U(6
z0Q8|q8{aKt)LjSWFY}yqON_yQezE)=VVqg52>PX^L|{IPpttTbK5a?@?CsCe_Jf4)
zrFa5q3tB0`KPyH8n0VFAs@}kpXFx#fUP-Z7^zjLta7<s02O8y`p-I+GDHoSn5^1#U
zNEs`0MCPIerdLpTSis*6#+n8B)+A3nl|%9GG6&+rE>s`Do1EpW<an%#&)<a;{A{Y4
zj0iW$<YAv7%V?a47wqiCooJFyF@b7YAWP0k4oY=nvhqN1SCcZD5bTraT6Hag8I_^B
z&_jC~pJMKt-A#qy+57R`X}nVD+{0ldE1-fby^vjKBDO^Irj(C(B4A-vI~!{9t{WjO
zw0w|0sf%9VbBqtX;8e%{_V585^)oG4Ev0au!|EbW-?}(HG(W2d11myQOLooe9w{H3
zW28=_>E`o$8GvlvpJftly0^!E--vMVW2F8WNmM&0)AXD(h>4DI_pi%@WoIn>V7f;1
zzp=n`D$tzJGF3esAzVRW&6*X3A`&SgI%iL2;%3~S!;#VJu~$+*mEt5J2CP=(y)9F#
zGxTna^Btgcnw!)+>gm|xQSlC`g?~e2;~V_+w@H|VL5Tb#5{tQ(OwOYX1aaj8Owj;q
zqN3TAfIgmfGYA6#2Xpx>fGmWfT1{KGsz4NlX&fsu#8;2p0wl;t0b#HpImN&vkGp_k
z?1+7gZ(ofxq8>4fzB&KI6fxkSMSa(4LXRomVKH-z50~!eqk{a^TScHgchV-ZGLpv!
zx#L&^g&_+Nq`5JrlTa=trsdc^_IuHz=@5_Zsb3`NQR;F|(+omXg=E1_M5YYdNK(bH
zEZpMNCHMbot;Obcxsh@yxU>4rVm~k<c16WH3|pZHshA8w=C^Uek8V5pT<3-tBBH}n
z=ptw?Tn8I^B*FRmD>v`+m1H~5tkb!#;cJyg$RnEP^VA<DCkFYkJ?LNE1Q((aw8~I+
zXy{l4B11dYg{zeD=_!boey8wVW`@v&N~p-bi3~d*X+`x|rF9)d3tj(n2xRm8q8<#9
z$<XjUXKYm49*|x-ulN(1?U_mDO?Rmcq2TpzkiYa7#kR2ogYs#E8FgxL)%Y1@1`x^1
zG!=oBU}75j>gYMWppC&oC4{4wQ8kH6TtOy^E=WSBCK*IZ=lH2@BbSRz+LM?lgk6#+
zY$4QbqmO%JS7))@{reT5kEr?tglHJ6^W{}>?(-vPX2Nyz;(Q49A;V3%bO_X1ig7eo
zcY$I7t={g~>z05(y`Orn1bw?H7+HZUD+`QlG$!7kUzdKvgiux0GXMxmXpm3oZb;>S
z>%(3FUd2@-ErT<mNGHWJTQ*FdH+3PH#urHMr4&a&-g+F$cMBZi={;As<DLLIc5okp
z@}n4ByUCaH{&4Zqh43F!oS%IGT^cp(zR|8`^jW(mh1^2|_=)4lwpHbrL4?WAXm3lr
zOfRZ;nkXN9`eM&4?99x*mKFlAQ3s4Oc`QDjhAAsX$${Fi<;d+qFaC8b`X4UWyy*tg
z8ndOKca_TRm|1VuMOSEC5RyeB_C>`vL|htZBx?>+{JsnO3xP(2Q%qziU!*9=bZ9MP
zb7=dqiVOrcRhZ$UdO1;-&I#z-AkIl4HrKhP*>nVJos*mrdm;jI1bK!^%))lsqRes$
zo+!XOoB*|xe(@5jZxlKO@jM%!Z4VndBxzCXkA=H+EIeR0c*p|W^hdF<v-~@5n`qar
zT6oG4G#>s{ZdtZ}?|}2-E;wp75vKiUdzVPckpk0w*MUSAJ&`mY8X{e3c(*h8CeL~!
zY#6*CQ&r(7Nl>Qz>a+;p1~2#arIyLheeHzci;6)cbQvR)KzNwLqNjsI{0aUjcjbNh
zAE#v9dk_xh2st$@CNek5T76l(*9@*`uh#$2VBdp;KM#%6LXWrv{+pJZwru6#+lOMs
zQ}jMA)G6>Hw|!|*$H9GS3w-t?7{aorAnE^;Ga|ECR<o~R&Cjst_$v^u&@#q2qNXKX
z`hK*^o_tZc30VG2p^?*4bw-R9+icI-eYvT}jCoecysBFjn18Nw*o4OpXaiY_9c~{x
zun%Ww^rJB}e+euZ!K?fW|F~HXwSP2*l*h60rT?h$S!U?1RcdK3dQ*l-6iLgFpj@GO
zPfYdIkUorB!uZSSEXzZHZSN+tK;14v5p@8-nAkF@lPv%wVL=VD-<2BfIN5pbNdj-r
zqj~<@s8jAx_+3O!$x0ChTY>7vd;6&UhjbMwQnf@0JnbcnCM!L57bPWB@>~i9E54s6
zBeKiNquPZ-iRxbSo-8e}!3oE%_8l);)G1qZ&O|Bol4ySln5yd81Bn3QzQ7>K%kmAT
zk$=f#sU>4%17BSt!HpK?MpBY5zq_OWYZA01OVQuGPHCcNW$k};XrO!5cs5H$#+xwn
z1#OZ)m#fZg_Mzttla4I7Ftj{0*S)drCcpg513ij!zRnl@2Dm?pjSht+MMeV&<|>Um
z{3HFFE&=KNeVL$Bvl)k%t;ZF<RUDO)?@C5f!obwjI$zK5C!qAS|96~?*vE%V(CVb#
z1xf^$M$~2AKP&Zz*&7XO*amH{ac3M%+EF%o4T!FyhEV!QY@+7=ksbl_`C7SB`BQwC
zZtM@}%w;I8kBKyQqw+6u!I9uZz#$@?E})Tu&tX1Xc!$SsJ#b$fL5@94lNL~90?si>
z6|=$RQcg6STCznj#jl*)SqHjonL(}i8r%j|oQ_4_<vD5{(=<USAEJXR_=W7Mgmx;#
zpRhl(jDr)@9o3~Bn=EzLq0b8RC5msmrW(8sT)ycWlH%|tXPw-xEiv1!MDi^l`L2#2
zDL*~yA`eiq{_|QGtORg4sB<Dlm%1TZ?eV{ERCbQ=r%W0ez_E~=asGq)X9evIk#VzK
zBY_~B-*`BCk_H?e)bm4Nag}i2IJ4!dk<tE*_U6|gL*I4v%$m*?iS;#QhLyDEl!REO
zdrFfm-5!3d4XGTg&&_$)a;I_@NK1|))MO3gO!PHogF1OL&!Tj#A+31xYF+%U?E&LN
zZy2vm^N`KN93mfGPuK-*(3X~cJ<@^g7KhVe7D|qJ0u0G+iX#K{6~Gs}@y;#_XRZf1
ziug`f@GV`{x-myReZ7Cq-OQ#w7d%;nQ0kaOle+}1&I|nL`vj4;@gG&$ES>i>w5$Zh
z6{VI)E9a9zr44hghq<o4d=p7+KIRYsZ?Xk@+;d=y9WmJHtXn)AnXtWfQyX5QTk*s7
z4{m4GaBevPQq7;d+<}EdiDMSLH)Qq|)lv}3ddh4P>L7SAwOWjrY?69Ocd%^gCJ0NK
zLgz&1@&9`y*qCV$v7}%YMo9t=&Zq~|V6@XqUdGHXPu_Q_0T{B~XYO8>TEZ=*7J2ft
zrP5SS>49FPpWAV&Qaqs-GD{w(z7`>Fs5Igi-3?X`=e05OTEsBu>@66jF4!%eq7MC0
z>&c`{cEr%#S8Lzjf{P;Btg3)a3Su*Eg#rIz2Uy;+@Pm62u*m-0s*r7r{4Fw%tbMmV
z+*|+uT8pdh4$9+Fi(Y~E%+ng*W|~$RSpPQ}_QtkoQKJF<svzFm2Sx<eoXcNq`M{=`
zOw1qtNxUX-OOWdt6Uti9j#)k1Z);imJTJvQ?8V7Gd-(+bYURY={?4`oi7;C7HU`BM
z>cx=seTILTX^et)Z1XgOjW7A|rkdY&%@O$3)RgG*qR~nF9Ze;6H+FM|p!B1HQtPC`
z$3~x~@-KoQ3zF&?9&>Oq+x<Rq(x2N3HmF-p#+gs}S5;y29MaMx2|R*c6br2Wsy7p8
zVuFhtD!F=UWu`+FC2gnuSMxL_l};=CXJY7_gd+dc2<<U)hoq+AE{f&>fOiMdDrMKg
z$hIXN3fEJG@9%B!RKouN4^|SC-JsD@dS)mjd<^&UrR%Xn6(iaLM|+so&vhQ}Kz{!v
zuX~(x%E+h~m$=T|wuf;=l5#`q0a+eU_rDj!R$ujI8;Ri&2=TXB(zaa?<<j#EMy8#?
zsoxQSIrSrBLl`;oY!~N5?9M8Ll=_i`hwT3kdZfl06Dv%yiz(darB|EYD7y!ya4kaF
z9ynTxtL93^)0uX1jz{dQpGTD*mFOPl5R!D9g{T7i*SoE~2gSUw`q2v4>M2y#PCQZM
z<Oiv|N!Iu>|LFnY?-~GY?3U7r={qK52iQa$#3ZoR^DtZ-J>1&KCF?nA^<Q@yhv>@y
zDleV*7kds+t<p4c^%X(QmHPM6@FtqzYKfTXcw7P10dY@0W(6fsS%eZYu)o%1#dG!s
z5JMtwf)7IPfCRgI@WmD)j+w?ITbfld8`P&Jtm=o^nz+Q@MZf%70N*X98c-g`Fn!*W
z#xh>D*?r_E)+Ejw`Du`|+1>mHE6Ra$IuxEqq|hi&JCR<M?oAz)M4^yRa)hvI4xt5a
zeK|o+Qp?xi4#R5^C*H<Km)PHs4mlt3A#8{<a;y<aEKeJ~uy)g{Vu=RO9>1{hb)Au8
zW4B!WRXF@o!Y8&>U%<-!56At-mhERA1_8k)2$)@0^wh|L>_&`Zio{+V>hbGg-?iQ?
z_dtM6$%Ipa#K~^$CW&;};9bh4m5eCLSoR%rJf$7kyhBfC{Y+A+!6X@-Wcy7OIG&yC
z`!ZI9)C=UxV8dpD0&^A`RR6zI?RN7aV$UFdDwE`-MkFMaLAMNHYc4&l+f@7#BvA2g
z=wo7>?AB&bKue|~$G%G@(2c25H-K1M?_s;2(YYtI7q^*SCQbk80Xl3x=$N{vzWcr9
zx)RJsmkPP>cW*1>*7AB(f246I>o+~e9>Mt<Bnow|7>cKT8faq38M%Aq4%?Us7OLeT
z%kYLq8G~}b46GeJxPfZ;l%kIjWvJvgt}vuk5e59p>pH86G09KQ>IlrfrT(IUX-?u#
z5s@gYlYS9FE`|qhCaiHZ;o;D;Lf><|xiTUqS2O7Cj?YCU^zXY<EXR~Vs<!QmKo%&t
z7r`W{)c~H#nOBx05Oa?6b50n32|xEy4{Em~EEkQ)3aBYF#C7c-+0;~58rTzuLuwP?
zF9EE|3CGfIUemG`*g11%z54L)7OED(0A`x-R$WXqvsE3M4)4H!kY;9G!3znrIIJp9
z=|&?^i1Zmo!Z+KaK%rL$&Y;Rb2jLODAAfymFpn*6ys?9KkUFzn>t0C9>9NAnsp@l(
zwz)B;g`50u<y6cP9soSbkuiuZ7CvA^{Kuk$kK%veXR5K~J^5i$6c#S#G-v(Zw$r`W
zodV)=P@uR{^z1i@;%wshHgN5wMfMr=d$^q}CM9<0t+Nd!1Nq%a+JRPpjEG$8X+U*5
z*Q$=PXn<|W)gXYTlP@H*&nQZEm4o$LeflwGSn|@yUlOCkjkk{?gE&+3DyBAAb3#BO
zSzh!_6BXkBI7jxbtY6Oe)P8gS#C1b{yDnefukQk;UYUKy^j9(14YZe%ZV+6WvnzqI
zC&eAxI}TTdbwD2E(H+PB`LEb-ADIxaKFV8Zt&0R`h8f9UO3WBy4y6yv42-e*D1i@o
znfGOI5y0}o^Vq03Er?1;Fa{>&drop{t&(0YvHAoWov=k4Yw>9E4h*`GN<+GNcog$F
z1(SEnwuSSFaHb@DcsqySo&l3@_`+bOea}#pLy<Oth}BR!?df>XHmc05_c|I|$TWHY
zCZLzMH!{vCwj{B#OpJ^umqDVcM%N?Q1pxYS-!JMwS8m;w_bz)i`q<I`Q;QOg!JX;I
zx7DT9+>s70xoL@WOw7ifnx0~$`iwq|x6v^DrX<PrVOB*L4W#WbX@t_hCR}(*`-|g=
zpCU>pF@zd1F&3{8ZIm1S;HgJ>Id~FHa~mZ{$<pugqogDLvQxQ;o++H8pJI*wT$0y+
zsxr2+S@Bs(fgA1T8YVVt315GY$AyqOB$+K=2D6vRaPwG|BI;$lwZt{WstX6PX$l7Y
zbPvHnP%t;0t@BUt-C@?9D&^>A9;am`&e@A_CzTK@Dyqq4!E|B*uuwsL$Gt@7MMfl=
zzp}b?OVUqWBH@bIgBtx1EdJ)iT9lrYjus#-$V4}C_S~EiUG~g{!DeWJ)YQ)Ce3du*
z==MFQ0mIyxY^(dvI}6+Y^cd8U0#sJt9UJdCZ8V#Aj#dHE?;!om4SR39_FPZ#lNlC_
zDaf&s$j``$3eGJHz_Nj<TO4h>z)h4w;bfPNr?TDw%b$z0Q+ZHQmYg6WOsE{Feax?_
z!9&o`#pnjMc)0rjktA^Z57%Z6SYMys+4-0UBM}PuR$(fYsgzk9SvZ?h_-@@z4grCt
zA%$woJu>_@J+QxrGu%gg{Er~|^-gNtg~}-&{eP3$0FY_D)?|HHGXB6#=CTf^YJm0X
zQT?(anS-li$1Q5YVB4?)c*GpAF09Fb=&m;bV{DbYX<Lib>dlt+xaPw9=KWkq&~!T6
zVk{6QPzb){FxenE;x>>6p7|-Hg~96z*iiTu`iCPoJauqLJug2tfl*EmDp(*<Uiqpb
zKf^4dgI`W77Hd<U2g-a(&4PwXT-g?<bP$?wg}~r-%KbAbjwSWq3=Ib7tx%d&tw<-(
zx`HNC&XEe)uwPB&T@YomC>0dYJozKt)%Q4!Go)w%^FooSHy#B~#6{NGjtgB^eJ@%J
zTSg9EJREJY{n^Rol$O&Xb8i}r1xnUVAl^1K?wJv=UllX@Lbza<-48csUra|j=w|qh
z^GSVpp7p8jmue%?3v{9a2bhmUt*W{V?ifR&?)z$F!H=!r!)AwDVAm!V!*Oa0zYW`t
zQ9+;levi0S_T?YK8=P&ees1;$_d>7ea%ZL2Op$Vk4d*I;;+05N6)8(O5$?yy9)v=X
zb>37=#CxJuJ_J2Z7aM<c9(h3tb(c^Dd*-?dBc+zOtZNm?bmtKl(}aBSNm7lWzcQ(I
zV9WDDu=k7PLh&Cs#b+?p*5h{Mx=@w!4l!B5WgM3h5Gb&v28G<LKE{;!|F6W;>&a9m
zv`X*nv}xfYP=tNo>+VA;#RaEX{BJN;8w`0-z2~EtzIPkKM^*R<CB8vFWknB?Sco&^
zydiVv>7-kxqXY~`qpqXBYKRCvpdll)5OI6VC$eh#R}ip76y5^IdCFO%-nQ3Q+_x+H
zFzsa{FQSCzb0;P!STYWdudu`GQo{`%eAs0Ws;u{%V}wlKl7o)@Xc0k3Yg<lg2{mY=
z0lf4JS`&-II0ThwD314S<!((oyxv`=_HuoUlpe~TpPxY((@>X~7#V^{-*@F#XB_U&
zLMII4T?r29+D(AdJfL>&@O7I8FA@<@PgRFx?c9cDzl_e7uvJS|rXT^P2Oan~IKg7|
zKx!F15wfHrJ{0##Y=c=0j)crx<6J}uu-@y%cq{>Oq<toL!m##eq&Ce(94^}qRi>h3
ztWwLv!xrw?us&j*M%UCg5k0ztD}>->sn>z`NRAlK?3AGOuf9Z_yr^ffe+c|lCqAl7
zhHoV^@Ig=+lE~1&D9xGM9~M1izEJDoFICj}gB0rPKEW=Aiq|M0Io)v?3I2&slYZ7}
z{0bKfBL$te{;eK?9O|s}^*k+VYLkBnK_2>vRmZstwrcj#XFJadH{Mex-|hwr2!P3J
zp3^Bd+(6y~JvT}RnHib6Z=Bd)KVO<;E6RpE3|)9+nk%fs$I=|EJup2Jl5D9q%Nkh+
zWpnpM&8C>XEJiO%e&Nv=ag0#Aj2=eb)}vqD$KTVLoyTx>C&rYhqbJ_=A2$+@#7V~{
zl!e$x?@7Pn?Vrql$o|5C1VI$fFOyR!BB$+qVB5Gg!~TjWL2|zfUPcqVF55aGy%XOx
z24QPe!!NDTK*DGeCv#H$ehT(bjqZ%|(N=t7QKdoc)?|$}T}aUU=H)Hs%6}+da*Nk1
z{2yV^R#2|H&v8~L7{$Td-tIJOBkB&VUL;V#T|(j@Bd;cM>}H--`%aMPn@MYmd6vom
zP*n~av2X|q2}ZN1K_I!MvKLTe(JW;uI&)3_Xa5ko_A+WI1NKDV{XcRES&{c@h#CY#
zWQw<LrNXi{5W3y-Lb?q^Nc3u!>GzJmS!s<hPS0_6PKm`LHJEw#qt>Z*8{nF?sw4kU
zINq8*{eIn}(iY>VP?G&muI9q3u9bVG1m-Y%V^N#IuFovEZTR=*>+k4Tx@|IWWaaQY
z4yF}<aVi{O^pFhaOq-bOv-&^9LryC0=8G$XsRL((W}p2TM8Sgo@hDk@3}g#(aYK-Z
zfXQempR{xBUO#xoq01O4r_cufdB>BQ9K>dW9bg(|;r$HiHWXK8Ky&a_qIv_n8Cc)U
zW02PER_zuY8)+E77al<JpPCC%qu=(_IDw7!V=t|(cqxt5I7HN0<clF&^@pu&XK<Lo
zmxzKhW@(`KAf5l+9TuqHq^-Qal%}j_u+lk!Dc-;~1WrF&WRlHw3ld53SazBxxhcfC
z$y@5f)nW7m2fZ4*c$?0^(t29a0$wU=C77hBz9}UcIp6BfZACL2Nc}|>?P!+~SWUQA
zGNG2Hh|Yf)_HdDhlZMR{je4$uFes(u7sIPkWEMB?1HEk2EF4-4U_*En9B1SrOR1dD
z=wXYT%NuGOtPTZCN1XPL6J0APP;x6{Q~;uFTX4Dfd_MF0_W$QG<`zsMMPK`*G=XAN
zzWL<KXrokd_~5w98|G&FGT}Pymw>4+7VqgB8gia(mKgVgxrrXXEhGlxCX!ez((*@&
z(=h|j45UBzA0E#`mC|ypYrF{Mwy<JG&$lB5sW8nGsgOrtk8FeH+X-wqOfiInc{wud
zwhX)Sj$q)3A?Ku7&zc0%FZvFxx1q@~DqkIRlcc#u*4JK9<}7bSAZb0yQ@oFcL~HRg
zP3ticEu2NQ;cvg`-6vOv-UNY)Pu6VDo_iCTbWWaA{Vq)>V(3gzg-r;UTG^Gv#ALpn
z>s;)72JGQBj9BRrIaAaGhYbnhLo6>ME4~mb3{mXA=Zl@RONg6dR0hv;QPA^q@HC}M
zSg9jGv3^7B2wz2o;)~Cbw5HVG#WRB=jv(!nW)Umov)Ds<vRm>u&P}OHzPZDH_EF21
z@ecN?`vX$JG;yXA=dd3j5`>j?xvC`;B!~IU^)r^Mbq9~5rQ<Q=zLR&Ptm-n11RbT_
z1;x)fWVzmRk+!g_iK{~p4#UsK&QriMW^p*TKQOSw1t|*Za~gMgvd-B?02<Hy^gWA&
zHD*(5I`)$5OT4EX+A(P#Vv#@}0HlhMAlT4#_eH;1{mm^T(uxS-^F8Sm!&_y?h&p{X
zN^FymMd0C3t4Jf<u1%8Q?guUvqF)fhs$@?N%_JRf$=Qf;nrdmjKYhKH6fzqK)wto5
zgZSc=9S#2wi)L!cg#HLhgKx#6=4;UFy+7$JZ9EQg|C#_r=d@qxE%*L0w6y0DX9fya
z>;oI5w|v-a8mxtSb_@+2M>5M-wfs<TmsZz<u+9ul+7IZvM4k>OO`8pQ^OqVBw!6`t
zMEGtP?GkMVY$B&m4!mVgs<*a2v#O#J(%#PW`*Nx?=oe?#%R7q!<MX~$*e)pdd0>hJ
z<J+uVOGLNhBGxD-(b$pW|A&H7WJXg$D?Z3buILLN%yU7Y7eha!n|AB82RJV&+A@B1
zt>@9h$tBZcMc>4lpE`DyvXgK??UKt`0E7yxC)|lpbfxz>KEVCeS})}&BXJ9OzKI5=
zz*Qbo;kn2bIz82)IMozsVb~gam}eS($cJlwCSKc#BLE^kx~UpQ$1uW;!CyV1Uc2pj
zWJz-gg^J()2)l32M10oR9S$l2$;!If%3~I<2}}GYT~hNVqPj0={*RQ$qT_^S(elrJ
zUmev6@H*_`)`1=1e!l0{x6sVuLS>!sZKI1o!6RyITs^S9n)9X-a{fy_sC(H5(@Djp
z&{$stD$fp}A_0C$0bHe$5-Oc8ydO>-`8B&K7AKCUuzp6Dnar+SUufWu^=$<Yqb%@&
z%bRTTpY6rcPmcIP;FcE1!L8-(qA~jGr7B10H2L7B3rvPySn#lQ;;ItKNBrx_Gz_*Y
z<4%-%Z3WjA%rjh9m(c}XC6}1`Q8FC#@MyE}gqU00_<w;N!VdHYjeWYdG7TU>t(Kz7
zGf6EP4d8}|TTPb_OXJ~BB?Sb>`GGBkg_*<MPI&&ugTjuruPe;@#?B9-cXbq#o!4JP
zvn%xn)Tl3+EtAaFZ(-a6a{KJV0ceK}^XoIjTM-Y`V(a7^q&z;Ga;nN!)(6cI3L#Qn
zQ}x?tA%@weyb9nFOi&g8KC|x82s+o{`lqkuhF<1ck{VAZK3uYGS*|;7c#Qbz!1r5~
z=3C@3jhC6~r73PsiDB;Y%t)!{t!t&sK5a*sN>{k|-wg_!Jj5ziRDBF)Rxr!^Mo4zi
zPl(fN`X$udjhDr_Xw7K!B+c-px}oyOf>6wM2Xj+YC_&t<4M-6d&{REOah7dfk<y8m
zb;@p@^%gr0-mD?!&jA=UbY~svyR@LB%z(MoV#H(NBT0!ygKuHFDWfNtEn9lPi(5kO
zRTp!`Fn%2=SIplx*uT24x?qjWGsrm3<&`BxQNbu|`+fgaiQrAO1J}pXn6?tbwW9%{
zRr_dL3PGai=zm${RXvP7?WvXm)~3`Y1adX318=8P+?sKHfgXmD8i}NJBUA#c^Cn&W
zGK5QFi1c)s{5s_fr5qX^GmMcWujk^np#-TNvi(EkS@ciEL{$u)tF7S*og$3`)Tin3
zd%`?*YwDImfg<7qR}D>Tb|82Y7J{&j-kM|(rRh@vgX&Ao_AEMYYF+kWaamQ$aku^(
zd{XwfxE_Im30^Xp2h7P~D%oa(kJX*O8XE}BRNk9^3WjT7Q{3*1Z{QJ_lwpK}>Eg1%
zpmu4cdX&Ig+&kq~T5rja{L#>pwAS|$CjrY5r^ksk7W60Q5y6C_&y$RiDRbS?HOL#i
zxt<H}^O&z!{#(+QsPxaZO4%_QxAjiE`@D4BV6a}e-Y1!M8T^CXbLxHKO^V?RG<rv)
z=wJk@Zz6MYuzWDkz$}9-qjNBx9I~#7UIMq(h!R*!OS60V$f)6sN==ggjR3CjI#OY3
zNpBa%_ql0RntSZ2KiGcvOkt#kx^x%{zMsUOPnAWo-~Jca!3gd`HWzR*#!aLnlLV`g
z1HM9!>I@Xi(XN*^ov9R`7fJ?`RR@7wW91vs#!$)uXy1&UMf8S3;u`S*4X_fOtyGZV
zw!r-0w<JpwYFauSl$6{o&}<)qV`{^3|D~w}y$Kar5-D@W{H;3anLPrRWl8CmQms=T
z5)qD_t(HdOZ35W;os(vcqYnce_hfRG^?un%$#<XzKFdKiPA^`@MyFRW&Tzqa-v$EP
zF5@JqWlpgPnc`+}cMKH*i~H{6I&*^RAB@6rf?o22PU5NgJ>C;>7%G(qVX-$F78(Wi
zDJvX%7b_N(pi~7>(0(0xvnLpX=P6z$iHgVn15V3SZ=MaN*&fjfbhR#}&KYst<f?z-
z80Y5%e4o{chqtp{`OcqRck{oD3k$|wL01`1-wh=E@%V(%nRVO9kX7h}{0v9HfV|cQ
zYlr9L_^?m%yUXM7UF1yugsoHOJgY(mMv0Oc=!Sqx`EU0Xx2BqLzV%%947_dgt2?We
zHOsxR+<`HEkf3@B;>G$UqXBWyM(aMwl8dKQT5Xyx%AD{v-h4qfdI%;Sx$^YgW_}=P
z``$Y_ADbL>+9XW-i6oJ-2&+j0a~<AC_qD;u5iY?#q!rIEEO+`V>-0Ky++;jpJ4WI}
zQnoELcT?kj;%kgpSVI%gs;6%wV^v<6oAZ#x-RIK;l+ZhrD#`EWT9!V4zKYk1YFPS@
z3SB-MdJ!(GJwvIV-db4%T3w6}3f(uNaMkz`NgMMnUob4~?t5dw!6@HTg$Bf&ikd~s
z(aZmwOn-DoQT@dgH}uZtLg}&~uhwGNX;tN!GvnTxi<7JRCCqzkR1B2kH!8xzLF{#$
z@IkzKX=)Z|l}`FHChc<akJm}ees9`AD_mVkcL)#UcNW1^I^N&HQ7nMSyYRuG&%6(=
zk;@EA{@q@jPNis3$0}&eckcPB)J}I~BiH^1X)}Q)*nGs=%Xi8DCG6Cj-{<t`(_QsW
zyA={gGi%ZV=dm{8(bVWfF0q63h=xTxTz`o%1xaxMCdheeiU?qTG&bw%55u9VrGv%t
z-gpEc4TQ>OrcY#1qMk9Yt-cFY-oAWwf<*}xyc=I&@J1+aZFvl=u4Y2ZPz9FPA2k|F
z+<bpPLcsLOZ*e{ima$OuD4iKRD-yJSvKZ~IeT(Y#2r@jtoJEURbG<tww4HQ<euYB4
zGPy4A63%xcdQfX=!{1vI=2hUzt<%Ib0_cEUJcb*_xKf@;H;g`D^}IT6`(#C1tj8~H
zp4HhYO1$&}q~^Vyq7zj1etxy&O=a+qb?r8#(Yg_d&vDwXefmkaBfoxJnT}f2<l2qS
zY3u!n2Ju>Az{`J=!esvA(z#FHKyV__l?$B&2vOmubT%_%J7sUomHV=V)q6t)%~cZj
zq*6rbfth5k?g0N52b2e1<gMrBiXK7%#<l{z(G&O(f<Bc^te5f4Xz-Jw3#cc)YShPT
zZ0(TD-%;vE@WLQqoxZvY>Oxr4GiZ`F#0c=%=&h6inU;PDu!DFt=<aj0yeG)T-R=gy
z^s~7V*Gl)&QQvjtjY6$1Cig%x(qu3@TOVF*vtJ~AGhE?zh-7(QF|ee8FC603dF?|n
zuoonth_g%(oj^P{WNm-~YK0syyzGGqo5M&=(V}$CgUK7rl_72Ld47p{Sp?^baswUN
zo5CP*Z7=I9!Rfw<EO_+Np9m>f<4J<FB4S*zsGTX48B2gO)1sI2<2^2|UP*7tlxM2*
zH9m=-I)bmxtXPR0(rP$&epQ?l%S|kxk!9zLFV0*unbwlHm%TQ)?vEx_;Z)l3kc_`|
z-_jn>^42hltFr&h)=CFI+T|{M*{jJ|Y5kChixBV-EW_BjQRtTY&-e@&v(5?~1dJ)S
z*}RAOK2Po^?<r?YjGgQ%l;tHQ2Pko$k<11kwAo{1H-6l^Vz+`DnIg0|6%y&^R{~NE
zylGi(fD}-zo<s*j!n~w7oczRHgHRQh_#`6%?Y7wht>KnC8rZ^)(mje@r%*iUPCRmS
ziy6tHMub+v+pRQKKf*nxCeDl5d7Gal807v@2_hGd|0rd^ihnpb5*@X#c-L5&zj9zy
zwmFNV<__@7Fn^jUbzwdWLo~V1IQd=Z)_((mOd2$$)W+GtE8Jbh8Hb_nc;hu9oWrvb
zkAd4dSDZpF6qgZ=UXew&w*`p+sUK^CmWR3X@h$x`#Il<9&8NTiC~l;T@t&*EZ4OIa
zFf@0*ob8ief3#I;|1Xn$JkiE6nik5_0~3^=M=%$J?lS1_=3)xvXWm(Qpv!6#RX_@N
z6LR)7MdAuxVkR!EussE5mg>?*4+*`m7!}&YG&7z1U}X#>I$LcCw7!{f3i?9*D#pul
z49rf#W>()E=5y3g^pW&*Wv{V2QJ9A<%r^=j*B#Y=dZ`k8mUZ0#gJ4#gG;Cm@mMR3n
z$&9G}kn85y5=KmD2MV{bim+F~=t|1*!6N=rZkL14(%ELHl8{5-#uNktvn6@lTQOW(
zabJE0;0V0pRU}ZH{;oEih++z37NvXfR(kigd-`f#hxfxmAnC?8j|Omb$ex8>KmZO=
z07pQ$zdwK*Wa4j)?@@f2FQ<Tc<i!(w%V<yr#^DLI9szrbg@0q8^`}*I9@pk5WfX$3
z82$YD9F8+i^b>2Q!(zBRSi%2MVnQ{p>n?faAl*hk0KL%o>8cYsWfrLNfFt-F+)!p(
zEj<@iedR`($I{zz@iM`shgkM!fP+|hz_tR_XjsNHb=Q-Z+luE9l6#$_UQ@WyXwPCP
zkf!b^yIzefK|mwn2i-C`3$Re8IWd|iUtL7Z(jd(a8P00YkfcGElgT0#=~tX-#r&2t
zId6J=@qMMr7e_(QmFR(letw%f<yr;LcW>IlQoZfOY;7Ow*L9_g$7&@I9@hqlM70?<
zi09}lU^wnH9SNU)upd}vS0jmTK6G>;9PLZZU>3b6|B-B6{Lth}?_dOyCjwyid`k@?
zJ|^Pz5l~h1dSjG78GYS%wh~27UGSJmcGTe^{U)NC+#2%$7=bID#3v1<O(+`2s2K>?
zJI>g>S;3}6GsB_&G=XRJ*n8EExg53U?X$;Xxpkq(!Hwp0yEIP<&szhWsMQ;5Kq+(e
zc_7EF@!ZkGL&#TVVmPfR`4xHPK1bZEJ5KPFjsK9|p$CeVZ3QG41SUrq7Pvf)o<s~A
z<`M6>ptE`->WDb|ztTUGt03b6A_N92*d&H7J!{#;G$5N~$6bRmhfLvTZ;c)hCbaIa
zp!3fJ@%GxB#g{fv%gA2P1!LmBMkG!o7~j(7ucsn6is26$x5Nf=WW3-_=5ZQ2zqLhv
zCBijUBd~Dkzdex<W9fp@*NGJ~JWv+w&v}>yaZ8}H&s>vd;DzozD`&=eyy=`OJ+$8a
zDV2;`V<~y|F<oJ>ZnRGvS>IbPxQuH}81`m(E8~|28AHlZ0*0ejjd_7|8gen8{`$Ad
z0O+(Jxq_SQp_5XVue!pU2o^L};Q{;>dhYv^hLLPV|3QA4d`;V(WKDYmt|Eu&Nt<Ub
z-&vgGwU3N;@RNX^fPMtbftlKGCO&4t@t7^ofu90R&j-O4WrZM5;-5>w4rdYh!LyqO
za9UBwDEhtRz?qP-(kX6M!Oq%@vfq#uXdB6z2wCFk^ZWCJALC+W7o;wIb}aqB;o$R+
zn6jbtff7056_h)D3Du!STbwFpp4BB*0ZxZQ@6`>qCBE*p*kQ=v2J&R>K`XlhEI@CL
z(Gn^=hAo-kt0)=TQBhXSJ?`@(0Nx5<>+->^`Ad83xzYTleFb0yB05#&&+}Hy_PxCG
zq>l0D$A(6!M@%YlXG$4)N0?oP6l4B9T(``yUGxy^QkoAKRUlpqu=Hy`hrco13r+51
z^YBU_iUWwAbn46xcic*06kZLbO`qp+q5JgFfm7r#aVVKneap*O^QV<dx}_YFD+!2r
zRB<$pkvy-zxB8;$*kKPnz(tp2>pJim*H+1d(CKhCO^5B_Ctp))>}q)`Bzgg#Yalwt
zR3Kdv%-xCC3&GJf$H8pw`h{bGs1HCKX(`$F-?WmH>%}Vb0g>0Akh&{k?nf_|tu!J)
zeII5-la;GsdM3|B>Sz=2n-n$az_W!wfX<Ez4%`gbsJP^J+)Iec_|U_fI@_DVX2^dJ
z>lLrof_*`DK4r9nfEC&}M2k*1X?(RG+xO2nr;EdR1-cg^K28OtIAX@UqEMCur&5`g
z$^dho6S_ejIF=n{q%`^9Q0vfd)jBf=mwT<ze&@qGSQX?hUxA)?9^QRAN;{zR<)mX0
zhhT2p=uD{b4&k&}=<+K1?&lhklnGA?mWJyQ2d!Ms*3mZEVh@bHEYb-IPwgET((7Xp
z@lNt#t1Wd6!8Q6VphAj2R&9cB7SO1-8dZVO`R9=4dmRx&y6&d2nOj@0!y`nizYmD0
zmTG?cZO;o<DP17jm#_&XE8F>(=*<4!K+L!K<wv>=Nh9W-d`IavNor$~zJA0YfQUh5
zs~NQnZpw>fIcdG-7`|`4TOIToIH3SQ!o{34t}K(BBE6KgYBx_=-E(cC(*%*2H<5bd
zNJX~jZb~L6&8H1x{1~Q*^#L%3f(8EY>k!Wel*+@1G<)(-jsg%5lTU9F<r=qpq&P9s
zD)S}Z_{Wvj3jp%`pH9u?lS4Zb-2d-gKW-4`fxZ-=M$LGK(2v_3wE@>p=v&AM!$8NS
zdyAUJi=RiOSGS?z{Tta5ulQ4599$1h?*mP~#!EuKaC%xMPv2g>5Sr=UMPFuYRpdF;
z;yYt3>~NB?S+esV9b}{P&X;1NOzp?pVTRu8&1GPgG4svzI>Kbqmc>W}kEZ`rY33#?
zZ>GqGKwT5&v3P3WICX;RJ4p%77}+xHcJku3R9G`O(qgki8YhlL51}GAJV{Ve7j|!n
zN&@Ti>nmihJZ1b8`b)Fc!V^3@ch?Z-JB)4=?qTI+O0q$eKGv8mUw_AnR36!PT#!^i
z32lx=(=bRe<{ipT%(tsj5^J9sRT*a42$H<lW|0Gbb$8j~KZe_O)E2|YmNpQObyp0u
z{;ZZ{*xAI)og(D4MDa>rnEA^!1m45qV35w8Z@lh1+=BEbKe@^7wU#kN_a~+JhL)Qv
zBUX3sHu`7C?e6#2#e^H*E_HS$+XS~IJNVCz_Fh6U`u|zdcCRbIV_pa>jM89W!)2QS
zP2+-8e|pNR;<?p1A+yt4PS?r>Dd$k^N&JJ+5I}HK&-^d#fD_quT+tYrC|+5>y=mrv
zgthyumn1gj_fud*MWKjDxVvukwe!cApvpg#DW0kGk?#}#+f@$diwlzU*T#lxVh*#a
z_IyF+pa5^~ZNmF^4PTc@l2S4Z%hoaBflCX#rn&bP&1#cbh$9-KB@xVW6UN@3&0Y?j
zcGyD1V8@=-&I_;k^@y2L#Ita3&>Hx_J|ojLbD>7fDrP<j9*K!_Pyjh(AoP<2jpF9~
znI&dVV7JG6y+5grTx(r|xqx?MGP!?nTR2H|EkcGbJN!`sain&MYzgE_Jvy)9jQc*@
zyfcvCsEctF_e8#Qx=)yaapxSav)i(wo~GvyJ0HpC4_ZfY<Zw^Ie8->=i(^(<bG;22
z08O!B8Qennadq3g+c^67d20Nb-C~hfe1*?Cb#2RGI{Baxpy!ip+nS{Wb1laYTx}k-
z<Jpw5oJ+n?!*j!Q;hs&X*MR&;3YmOqd6uMboIhR|-8j+!t`}>E=RMT_30EL?PHTR0
z&~2QbsIPZa7H-62R!ikW&{ay0(GQ(ZWWD@0>V6Qvb8u3|FWZq?3MPk-+sRy(hvkvD
zc5u)>2WRxjR=)OZpI0c5n5R6VR`;L%R91+Mct`hW#PcTLNJ%R1Q&&!G8J{vb4M%I(
zvveuEl^NKjw39Qr@zN=sKNXE!!BFF&6sG;e?P>By4o5~en1!PUmuqov2W>^}#<n|@
z>)zov|07jF!-24GVm$to@D;n<UtX~8?ldl2yvVANe<1tj)#GwA&Ll3(FBfNQw*c?I
zZv^UvJH)W^q&E>+R1w9?)<V_2NW@??TGX`4F1k#m+rRp21&K;)J!dXGAaXXEtq3&V
zYw0+XYmA<PwrbG}l^&Rss1v=TZ2b=t)<~xaBGmiuFWa0?x|er$bdwDe6E~!=n}~Ut
z7w<db0Os?xs&$SV>{rZScI&x!4feTOk=)+3{TDuubL9i2J)xuL-~?8uH7Y1OFVBh(
z)q$+NmtXrmaiDv@d|!%3BNAHo1h=yi7(eoreHj4er7EEaPp#&|Ygg~2+C|z)^P7Zf
zQmbJjKdH7)Om1BjM=x7j<bR{_6B6d}ImSBbipTLa8zhM64fZ)hIXKhsF9^y~{reSe
zkbr<n3v1m5yr$s?4UFWCnb+(d@WAHsEPCETI9F}F+?>rmFtLn2c3QbZNORv_Uh{+E
zCq~3IvkfyCt*<ild5ZAzS91bULlP1Mf|sdO)XP`dm+m1+(zjJ{6a-cNMOi{jE3n1d
zaDrQF#syHfAP~-*`!IDEmu$8ao|KM=+)Q5mic^r^A$n@8f!Z{sGdY5Fcfv^%&Yjk%
zi6uObN8k`j*=vNWtamZTr$FfkL|B*l_I%NOZvPx&z}BFM$$V(lj9q|<?~0Mq&r<QZ
z%O#ZqUmi`~Pq~_g#T=zlSGB5bsKRm*j^hXPt^kL$4T@GPdw6?Q(kR(g&NxNXE@^!s
zQ8@o)2@8;dCE$Tx@QB}hjH0<X2g@BVB^Adsw}5Aw(InJ$UkT&g2i8qZSy}C-=m_}*
zh)po<p!Ps12fV9tPK2mEF+CeP&mAShkps1ZmgVafq#Z{p+VAFokp*(>_Rcj<2qk2P
z5Tmeu`4R3{cZLCi9bMT^)89DOnl>7~{17p%*q9exw3jGN8pL5cBp_}Q&j%VRq*tSn
zAytr8<8c+nQHJN{>Q}1>Ov;Gi|1BSJBl4;|5Eb0o=Ecqn3IXzu9fK@lkOdI3;DhEp
z^a1$uy#p!`_cLC{m2M#S0Pc^*B>@4+inO@AEq_;ZO!Xcp7I`%1JXBEXHoquDKpf7b
zLqP+FWC<NWPsnob-^)t~DN%@<_YnE}=ahE^w+lq&>Jz;s2Z*YSZRWCL`=)X&u=aSj
z5j)AnMW91sy+3ehX09F*$?)lJbevoS2ywL6v<fY~bOBIy{34m>)yF!|1_%mIGyoeL
zD6TG~)j2}O6`I)I{BPsKy2}1>;nN90a{lD6U^F!n;_94-dN5VsYtAz)H%>)=UVdJW
zR>APheZ-57xJ@O*bz`{V%Ug3>Fk-6?w2SKelK*n>I;El$ehE*oJcZv<6()0mjWjWD
z!O8^5``JnAJZmAF#C3p-Ealygmhi^D%f7Z2ykUT6vjh=iXQII>(@>=0&qv&qnga!=
zgLsT%?v1=sEPFz|?`KH!u;TPL1}`6**J6YHlyp(zkgcG1?{+Zw)d}SJoxohVbH`<F
z+?>gqHrj~}bpoVNM4zLc_X+#34z+YGbFaDkTQ{Ln**~|n{<&Ek5{a@Ex9{^<;6sWG
z$Rd{;ImpWC#E6IwluR{|Ft|UL*_XencNBzgXJ~nbJ>9Dx97xe&>!Pb%c`&gRSmr~?
zDlv<)D{7!~qeeFFiu=Y(y;(=q;|dnW?MV(nm-5KZ?+Nb60A-5z!oQQ#K^dHft=ZFV
z(Rb&gD3HcvXoi$lk2eT!NNJrNljbf9Uby&u9KAbsjaL}F4^)P&oFgk}{s*1ho>Tqg
z`5oQf--sm|$GHpt5yZW8YeSnK?k~YY7LErC<R0G=%R|VWQbAIrFA~dtm(^njasraq
zdS$fm6}8`0L!E)sBL_m*-9m<wGYT^2v|9X`9m~f15Flw!I}bxc^a}yTf$R>853z3A
z*d~}99}>P!7ddLobs+iqU?I<WcPKrX@5YVLCn|Sx9o}o4KhzE-@xyk$9`|Za#fb9s
zCR{0>8#}fyQit105pIMrP&1X3chbmaITQ62gprebpfTiM@^zvAYgHhGg3YVX$_aYR
zrqu`aYM6Pgo|RW%r>c9BkKAyY%q~ka$Ot!$M(57t^#2SO@ON9-`P<(`iAOWn=+|e&
zSxP~UDx2wB(#8}Z0pWSqIyN^WeI$<7c#Z`*CZ~Zx&Qp+irem4qEXd|^_JZYuiAinF
zFSV$7In>Sy$W8QbdHyc+Uubmt9a6Ru?>-5@S#9Y8@^7<JZ7B4xwDY{gq3t1`^%X%)
zqQpQIoL@(Cy`(=hF}6*(Vr2NvgN6mCh!*l2nD=r^r1(3Q#G9iLM^s$Ft)`IU7+bZF
z{QOp|U64E0XF;^da~j6P6&cYb-?$0;QhPjX+?Se|%<Ms|8t`g86KqqbiYPt&cTGa0
z6SoF$UdF_Tyjw_$FdarIX?ZbmBAjfP7@Yh~&%9d1g)2zK^-R<5a?<$J0w$qW8sEZ9
zXFvTjfz+>qj>xL7yUXY0PYfAuc~2ur8&KEDK*wIM;sksf|KbN;QX)ujZ6tfN710+r
znSaYPMY!AA%ywn|2t!#erjB8MUS&K=Ice~W1ltlB&d=(YMjM+VmsD{C5i<0jNd!JQ
z636x8yiA+@Q`|VtSo>U2<~9FFNx-IFJ%MM`*Ac4zV%tkyg1#6qB70E|``cRUvrDa2
z&D#zICb;Vku-unshD?bpR%C86U_oay?Acr^txX==z5Wjpv(&*+Mmj;K$OMWzpzjIA
zG@?nnj9-bEGph_@SRX<@s|HT){1-vb5vOji2T=2*?n<!^f|TNI86&=em|V)j%%o;s
z^O`n-n7Z5u2${L++pKi||9uT}7SN|tVD7#ja|-Dxp6hZb+_^{7F5n#BLT(j@&96qy
z;T`WSIfDdA%D1UejQ?k*zd?~s%VKbLg~QZQO+XdH+@-BG{>J6c`f#Yb!j{gHC#ay%
z$XRS{0zq#bw_>P~zMkbfL*k`>!r{-HZVb6C%b#@_#$|ohu!@M^oWiX`1HW=*et&SD
zp5Lk>mdLV9)lsN61Rc2#c|uDJJTpyY%y=_rM#Kbf_ljqQjR;4d5mYo80nn1ggS%Zt
z@!r|Q(4=TlX0LruM!=OVkDVKqvZ;%RP*JSbAA!99N>(ga&$Do-^H6mQdi`tUVKvjz
zlZx(00g3HIrye;mec7D6Zr-M2v^ciqO?##R)}iWlsnXoa)a@cV6w$QhTxXK!RA`Y%
z#WWig7RiBTaq$@msY8h@x7tc)?et(X)b!`6Q5Xjn`YT=d%Z3{E=`+JLQ#46%M+gO#
zNBHm@t?RT_<JN{F=Bft--L6qcY}PiYm+c)8ff1JpJxu*=|0Hc~VQnOC=Y{0bTnDZb
z-}cQUKc#|?DJ(n(y+#nVZ)=)r5o#}!XMnY@MMBgWM3a)I$GJU6JQ`{EinhT(Ae{E$
zxVCKG<<8=#Bn}9or%!+=7lms-#o?T==beqY_)<<;6i52%Xd331cB_`{4l|a>r4F0i
zcK2Q9(Co>mO3gMFCGTz5BJj>9-qIQxxlmW&1KKn*)Q<j4K8ulfsidFOr|tqPRU>|x
z=i7GbS1>^!(^HLsUnT`Uv>2c!Ppk@bAQ(BIIUJaUKX*_<Zuuu9@dZox@3aoh8qSlA
zl;C6y?0H@2YdaADf-B~X>0WSgcC3A$+E@3EPElez1BYeyEF(n(JLOf-ea;VIm#MI7
zOCMkvzJosiCNo-18hRuNhE_orFTazA2A0wp2^Nm?l;*+zGVRw_AVAbp3a%+--UO0C
zh453d6I?EH>F1NpO#_77M&x$_nC!{PgWG0#tQU^SGzI`t-79d=Ip_Gu7p113cjvwH
zWLs1?BiqkEcqq^DMzmawpKh=^cdg2GiCyO$Pz>g?VR?Oi+}=(LTo7&8l<wo9)DuF|
zq?MZyer_7QEucbms*FX`XL)pq1afg`Cp3Y+!)1<0#!>jlvRMi^d^IO4WOuZa`=luC
zTnC%>6=V{dWZ-QaL6FF6O0ZdKVpM$^Vc5^fKiB6~lBr8&=N#Hml5gMtN!dDyN+%P<
zkeZtQbhM6h+JgXyWbZu#g_wR@G(*HNo~y(Xtp$|RX-0PDMYht-DEccNg3eBz#reU^
z^jsmx)40PmG1HphV;rK8fH#c3*bUsg`%sH@+!#d|-s0S%q=+AH{=6#<himBAKmv0d
zqR^*s_Ui#YckdOw6QqE(Ssm=HMm;jt1#d%n1uaGBMUnDK2lN&dTBzopwh-LVQ@Ib0
zjd}kw3Khb7f_K!E@v1lV<P56{m6Bp$ul2ENb2iRQ!!%KUL?y*`X<NJjs;#;7FfgOu
z-fV&F?j4`BKx~aGP$woFcl`SIci6K-_zeQj3r9#c1E8M<b)K<^6}lMGQJN+Kn-ChE
zDZIC<n-R2YP3@G;j5x40%(Z{J?5m7H>umzA|7Y6K&n6c{+t&2^A(j}gweG3pCU>FO
z4S__OQ2s7@b|0S5AfM=g%0lY9K0B!Ji+w4+hL>`$`DAQmT)F3;@%L8vkBiT<GbIM9
zRR`l;&2NDQ5A31TES2u(vx<mdT|mk-^0aI51oekzeLq}&^{z7_TpnF;`(wzt0VtS|
z%^%kD*S8E>X`DA1sVSNKohE5Or0&T0LoIH^Y^&E#MW8WUx9sEO1zReiUS=s4bd!_N
zYmsCDw=1?Gum)<*DXsaFJMr7!?pg5@YTh&~RhHV0^4bYJYPtW!73}F_PElojiDqcK
zkeg_TYLC+xg%AZ<CR^0c+66hB2{0b;j~BBRvO{cq+PB>ANM2Zcm&|pt01b3Rn0p6^
zO%7|wR?R%M$p1M3$3kLAIlC<#=mZ;NP*4sc1)y39wO&W8$#Z1kh7=H??u>l1tC&&n
zJa2HxNT-4)lLAO5H&t1Qqz(O0Ktrk)Uk(={njroF;IgJMvlKjBaH{&JMw~J6+i<@R
zIE~gsC#Vbu+2MSy&$ho;iLE#>S<U5J?<!X<-&#(f=BN=iqsx9unX6FZq@$@Ubv(R}
z2!KIbva;FDXn$v!{P>%8u?f@a1K{ryJoserY-LqbJP?^6b5>9{%*lTmDuq1~QTCsk
zeOQIvye@mE8cQZ+;BQ{b@!8SxI@?jShv4$a?R8wF09SGm4$G?)JmS{xIv7y-p$oWT
zE73Y;LHS9?ZL-;U{t0wBCuQHwj2#BH&aE}>#2nxrf2H&PWd=9|7KwdQW|p8D9DI1t
z)M_!{ac71IrZB=P-NgR~7&@`ER#`Vx?X2P{^=gnlT*8Hla?9jD^3&WLsDmg#RKlr9
z-GofW?$XsO4dEP_lIc6s(<V4~^Z{9SS(UDjb@n`_wy&?+qX{qhzvp)uE=mKPps<nV
z8!X*xsT7h|C)H04|7kN#c*$cCTqRKzofw>H7QV(6_o|Nn0c4|3+3?*EYQ|Gv<mb<c
zL<Z5z=>I#JLh$=pdpt^BK}3JoYJ{e5qc|vpVRhLJl|%tm#uJ$6qqVo3Q!PzrpWg?S
z?~N{#2hLCvAs@p&+c(n=Uf<DrYf0C@_EFZfi@MlZAou{FoeFX@drq8XPU2A0ojT1p
zJp#!u_G;6k%bjH{mUVEbttxQ3K6oH@{Fyd>0>OO{C>yaW?q?_)ACtlshuRJn3a-fd
z*w(##MFw=7y3A@6@ke|_1D0C^fAH*ehhRSr3YaTE7G4QDbM*sUo|yj}Jv|aNZ>0Di
zqFpWWl%qZG6x+n)W#$*mC$EC_APlPvwcDAE3LUha4~vWz8ey%o+q5FSz{8gI(UUI3
zi{93l<5*CNO1lrFhH+H?5fnN+pGYu$D^p>y6PUTH_Cc48ep!3trB~l+D8Sh|kuMW)
z5HDY<rQf$p>KjDH07Gl^?30Xld%lhGC<7aZiKBJ@<;WL@n*r&-wc55y*CH`S<;C2*
zdEZA1_?(jT&u{Z%Zfjhd)~f_cz1Z#^jeCc(jusT$AB;XY=BD>}wF3#r9^N#;IFJlK
zSUk?c{D2-I=q1)PUZtGb$DwS8hSCJTBIvyfQZ*Whk(kc<p7>TMznW14Pz=H#eIIfU
zKL*M<CpZO%XQSSogI0uL;lr8Ii10UT@(DJ}vqk7{ljj!qY4OKMBf$JTUC#Wqa~?Oi
zm|X3L>O{>f#tEr0$b1@E5i6BdCc@Pjh_lfENYIoF6AVQm-<_~=os>*~wkIC&oZY?z
zXLrZm-=#Jk*~p0kP#*B?oj78U9RGrf{G)VQX?q^&{i#|sa><sd0u)%jdxO)~sN0y8
z^1~$dg78|!Y17qwOjnX8bJZ^jn@sqEzNZ5^RVLF`+q2Gx2UB9A{uC2_?YLI!2HlWk
zM!QR0<q)TSd`S29<nB><8Q6^k&MBHrF)APl+cvax;i@#PPJCPs_smHY7@?#3ELcwK
z&9h{7LYlgVa(7h@5kO~m^AOVs-3i2Jm#ZzqD9PV~#%t<bS^B;o2#91(_d0b2*?S@S
zxKMR@Pd}RLZteBz#hbTW-Z*VJ>Sn*nxR{h3(J@-0QIOfCU{%(McrcU~G&wTTYa($u
zLY1kv%ES5#GI3ex_Dfao^V6ObbasG~J5LZZN?R>qbn@Bni4GQeh_H8;O0C`hOeQPQ
zs35f_-%&%tV_2s^bdi4o9ojKyigc|I{&02){wqX8r0em6fELp;wI%?WbI-YBx(qj=
zNfJ_0d+q*!Tmm8>8byReBdG$l97fRfxoXo4c02LfOl9CJP<mNy$~K!>)an0hT~}j&
zw%{~$3X}B|$EImY?$wmNhjG^9uXQQ{zgEMBeQR{W{fp(CWMFIO&0zEp`c-;y0HjBQ
z8A9TfG`lpmGNcmUmRGRLU+1^Pbp-Ti@b<4n%u9eP%nc2(-0HNz?p`;D;_MA*p*$VF
zG59t|iC?sX)9h=Fm?*;g*=+A@6obzV*t}0vRb2|5@u#pA%O$T%JFRI=yaJrg+p?P#
zAMj0}o64=kyV&<3&ak)Hm2un@^SKG^h3s#_wopDF>9rL`M#W`CcWShbZP?Cy{RnDc
zMogX@fk|+*xWbmp?q$M4JAMgTvJX^eCv9AIE(nx&x_5-ZfLPZZgB^-r+o(P?+Tt|v
z=K}%(LC9wWgH>Z|6t=~4SAS~=lOpEhjT9xe5A;${sJ+ypU5!n_v1Jk&9g$D#YpK1&
ze69_;0(RMx>ozYO8S(c0d!O-miQj5{SVYK>w$hRSwm)nDM_m#^jj)2cJnwYhO*w3p
zasKvASNC>mXAIZkBMpF~qXK!IFy)U%&12yl*yu$hx+$Lgxz10Sa6|jVO`s~*xXgfH
zrkEJN!@I(;T#wbIgyMgw>S*Q9(>6@Lsu=}&=k<xNZ#YdBi2ZN^y4ZqFZ(liob}_v%
z?BWy}UvPj^lD0zrj71c_jInUTl_)s<7#5(wT3EqkNf-8P!2K1$Mz-}pj3MlTfy)3B
zqV#Z!Ml!dlZ3ep3r^<M?DNVp;N>r;(CqHrMB!bY+cofzfZf5i-@m*V_p#kVy%kvqr
zFA)KvLfQVo@(w0fTzKl=qx0OyOQ@`mlw^%)kb6;24ccJtF$%51n7&$gOjT5v@@!I2
zR1RrJtZk^yT|E`MmUBGm7MyK9hn5d`*_Xa8%%|{FyF!GGoCgn{4BSkd7;T2|`IIbW
zs4z)5`O~2he<ni6ZNgrd<y7v$5hSbY`?-t$=T+xtl^fl>&(30B^-<Y#z-;^1<w_D5
zb{`Ga5s;@>#Z>1PQ}UycqmA$8$Auc{)I#xV!@l<_?Zsh=$!q>6=|~WTq(W;z5ViE^
zw^s-=!<wny@rhfH#`*m<wR`lNfKfWPfZK3Zh&PW0U-3=mXXdo-p>YqG$u&b!QLD>y
z)~Eba;Saa;z+qgpNqeS~uiepT{Q4bR_c)sFhC$qL=i<2cc4L|kbSFoBph&7mp=F27
zXnel14OpZ>#MUuVAmKF(i;o4wWcbBE6z(J8@v_Ao0}04WtJp%!P-K-li5o$mgLb80
zoL6_ncvv&;zB~P3Wg+geUZ%^#dW^oT7_lze+q+Q5q1Eeh+YD+#zNn%1bm)`h-%l=(
zQJDmKO>BE-fUbH3_oAx6A*&0ox32lKPOZ7`ygi^j(B3+fP_frVFjt@|lGcE)VPQhV
zpIpt&WKhbx6uA9><$C+271X>cFCR)<Fw4Y495TOMoE1+1t;`A35dJ;+0qCewL`J>D
zOmGm*IaG7Nx8uF1x%jTFq>#|-T%2!#<sWZLz%A{)cTS^<r1PVdmLo4YoY9>#CS^Qx
z8%-nCwylhuD!b1nal#k5G$T>Y$hSxtXNDg*Rg>_s)5)sL<w4K`v540k@k8Pi+mgPV
z)<}QisaBcO`K$ycNkV^WUZFi{3;zZyBO&MQo$DC&H+5b1JvWczbwGD!6R0En$y0~`
z)}sB!8)fqrbd)Bx^3RAL(*+y7HTh_)rHr=)`3?k)D9^6I3wVDf=g}|y0drYsH&mLt
z)I}aCF(TV+q>7Da#Rbvj@ERIasXG8zBZ?;MYP|tEK4(h}nrxDK^NU$lIxY>Hl?)m}
z$2o5gE~CV|+^dgL^lJ1|aCPywI5GLmj>fG-Z2CUKx21Ini0osfFiyBo3{Mmcx4Bst
zVV<p7UMc3x4Kaf5^wR|g;?KCYcK&I*qH>%F5ILaFTm?>#8MAGgc55-}W|P#^>al}a
z-XX@1EWYw|qaJlWk53?(OPRJ(Bht*#qhEE)X14WaXw}D!t{-q%e5oR=wXa(r83RzJ
zp5qFz>)(`0^(HJ=o9LnTvtbKL>{GJb31(L-llqWZ{?|r09MCqufu43h{WnkRXF=fG
zUgVfJ@OzIlU0Xay1jO7$MmD0z$pAu3_1At(4M1>48c;icS>o>gF_N==r`7g3!Zfuj
zy=&U@w|wEmqsah^P8(^Kt#w`jn8%tnN|_<OKJXt7D33zxO8{o|wsz-0C%rM1T?kR5
zH=NM?$>OAFc<B9r%m<&N-+&YDyjAWSs+}U3>#R>hLOuq8#DB8DuZ;71(P_(<s*>Sb
zTJ@aoRNKYXL3}Re$Bkr>S7BosqgoNvIbfy{iTm;V4q#paiKA(k+O@Yu?Lm+P4rya#
zriO}2PCQS{fpHsQaieG9+%3_*z6ZY}X1w0}NQ+~!7vKbH&OHMj9w*qubgVa-Vc8)&
zNnkHT@_x4i<X(?YPc-7brbt|J2x8O9=TQGtId4vyeoR5safgbcu{vmuF-Qd;#m_{7
zf$8o24FnOUK`vji3l#c!!>9TrKqkNW8dGL&Baa#?;R1I$$>HGrj+FTg{`YGS0aYGH
z0p73(V4;ZVcq<3iqdDJ{894IMQ1%71GZd?0p+L<{BLxCjfU{efDKu!{nZe&n&7YwB
zvsz)ecLjQ^OS1s64W!|MRfOUD^}`&829uiMybsv7B8tS+{=ivsSOKS0{E@}IVT5$L
zKh1|CJ4?~Oh7w1m@+dvXt;y%B%DqpjUYp-`Ab2do_c{ps|LVanPeTh8RCSh&iO%*l
zPd3@Jkh0lSSw(>4jr@23OZv!IHii%5bWCpXy9=#SoE8V`l3WarApf;7E{}C+nvIp5
z!g_4ojCJslT0QWm?K2O`cd9E6+zHu6KqqR+<fC9A#dFY2MU}L_4*Rtl9Oyf|r3eBw
zy8>67XoxvQqM3KMq{+*T#|zZnOTp|b?OL$NQIt>>PJ~No^(e(hbY`5>)_z-c8-b#*
zp3Bdzo??|s&8DIT7}2P8R=TlZRcuY29?ycKsWWh<E|Ov~-4%}VRXvDy)y`cR^Lzwf
z3=-^4-s?nr!ZCMX4H}iS-a)-l8^$28vrdhtSe;irdCv*XxBhJ+(4S*9LQTN>Nh4+K
zayRi5^FaGUQlcgcPykK@#cFikPT9jQoE)3>Vb*Bqr7|_tP`a=`&WuCQ=R(7eBU(a9
zMb(8RiDj&ykp`6Xt!{&@tiTpTzL(5K9to>jJ#HR0*p?KCMTN8tbu#@M7By^H$aZ~A
z*3^#qpx<1ZnUwG)k^rb_M3a9iLP-OmvqQDEskOIJ6_HhCq#*;E%&?@lyN!flt%=u~
zT)w(!C=88DoF`U(DFJICx0GT5<zer^6wWW#wJ2j%2$*D#2W5EQ3<#-ih#QJqt{CSP
zLrKch87OVidY^Zg8Se<kH+LEoJ&054cfFY!I-J@2d+7}i7bmnP{{qr(6I}c<xC<>?
zBC|QHB@osu+t2_+BqsCLQ|m>8f-aJC<*Vug@i$OxAE$A1K%F&o)y&k0OukpY5^HUm
zEXZiQ{CfA@dGO!uoBKM%MR0i8LeUNE-*;@rNJP+M4pOnbb5RWDwzZ|Fox@-wcq&iq
zeC&_vEiYAkL<H8zRecaP1ukR6qPm{VP>FDCIU30aiRb}jW3$^jf;iYkesRQr{2EsA
zsnLy2Oee6$;Om1gHa4(5HRn%hjr{%wRU<oqI^r{I@6@ag|GGY2@e^}ZN;Di%x9XIi
zKEj3_^YFvUryKr<t1`na#Zy%I>e25#D|axOSB8d{?P_WXHK0E}h4@Gcd}bn85?nhO
z<bAj)UA{EbzqTzY!hW6*+E`ta$r?45xu5B>IiE5n{LVgYS#&gvMLz!DT4^GER>ZjM
zgRy2<4@DoX18O%eyha^!Af&WuRm|FwtQ-f@<XA@-@Q`(XxK(K)NYLOH&z(XO@Alrj
zhW1#XE`<Cwa0^?Lt}c5NCL+TOxTZq3;@RH24JB&1jh}pEpC{0OiNIe=Hd!MVS~B0o
z8i-;^LoHjw5Jm|H8ns#$I9x*nfk@WQl}DJ9qc}|P(~RSt@5<i=#xogEi6~bGHNxLr
z!iTUe)v@336C252FV2fEGB6xTOG7)XqD)!KpNB}IHnf5ejwRFkTS%p*m{HIyYvAM*
ziSoSbc}n^;^)rwle4Jrs`ulTtZ3saqzW+6o!jnrk_E!pWXHjeEo}inZ^?*<gH);SB
z0$6(TPs6wayK^HADJx0qu<GnOG4JlrGJ&3sDQnH@^(G|2(@IGNo}Ju|c#JHlP4#T{
zWW@Xgo05NpvV@6C;G7SOWcj){L>N>XTv7gvxX6p7|LMBrGi}UNr7YLw-Ter~p~q1N
zoA~{ww~gXC-H(?LY@d_g`LV!ZNsIQSf)_SMfh{Iz?+2;^Z9sYoM7M#Y&o>K-(k(YS
z4OaZ1PSd04GQ#5WKXK|7Xy;%T79Mdvu%DCsp;$rfi<o0Iy`5zBynSmhGT7we<D#w6
z_M-hqB@hmKus>4gl!4+7e}T7P@u$LJGu5FH<SKC^bx)AtcCubf+|XZGg>i4?O9)mt
zeZyLx9mYF!x=XuApa>N~g-!|~Ed^T=I88T#PxuijVLTdjMzV)&EcOecl$?Tyr*9?s
zGAD?Hn$c6*)gs?doJ)Z&dgKg&!;ezl1^D*LbQNARdsv##rtkV0cnG?4>bED1iJ-iI
zRx4s>YsiRwn8BJT7T!&7(s@_C3CE>X=!pnXY?hocs2h6r{Fzyy3;vhS(QBT(g(vca
zNNMWZFj^^~C_<_8!R>MnG^bl6YUd_7+D><DzP#6+<WN_b3|IFO{JP+9WdB-w|6`m~
zogez2=+OM|&ZVzmvfCLDU-tR-!HLusL0M=o<$VSnaT9XiCJ%RWSD`RQqf>P}p-kEc
zL^J*5BA%!J%1RejIdn7_5q+^xQX;R7kPAa}IffNu(NC?j&6YX7sv#T9%PF2H<EYwy
z>F#Sgz@%*rEp)tj>9l&APM>ji3Jw;;@xgPlsYeXEk1y_d%%7fz{S0T;7O%<mX^cEQ
z`C7$paRx&@8n6>Qn4+&fn5JGje$G(qkPPZoOmL<-y58EY1-ZPtl44FjUT09XUX@m8
z+Ubfk6DpCPYj@7EdZw$qAjb4<<3iT*9I&nJOm3_{{#+xX96YF1$N!nEaN-ZuAeDFe
zb?g@@LuizPG(5gd3mH#R^QSPXYuxIkb1;5eYhy00GJmvz3nM&Gg9D^9|IN|!>5@dz
zf?b{}7i??#AGejh2ST^Sfhpj7)1*JEKAgtBB$X;Zk`ytbL13~mYbkzaI-9)NL#v*u
zwC)rV7ZPMwmaFDs<$nL2r!_UI(<Q6c1xp`*l&*avBUtC7(sc*KvVg{;_K_NtC=aF;
z?<JUV^s53PFe^f?suWxopq1Y>1NX`H!xrB$2NFDrI{}smj3S(+QA4?(;*d4{J`Mu9
zVdWY-4S{F7=2v$3JNGx4@<4;W<pWA-gLA%)VGhLClrn{GfrU+8hhzOkT+_hN&FO2W
zCK{gjz~_+S*tnXUeaCPXNIXNRR)26b%lVnZ84y#D2dc^k6!qTvsRo)1J;Dq4d^5dp
z52dsa@VCf(x)7R-5cyX<pOUyBx{2xI)V^etdOZ|Q;d&X~C2X=0i>Pnfrd@&$7<cO9
zS&*gk+2TI|(=@kmU^=YUFF2M{S=rMw!GX`q4~lmv5SO3RpaE4*ih7`zY{P`+Jj}HH
z_E;0lnCx_Ongc1&C`*kzs}BwQhC|6nEZ7ERkWcjw&^1N_u5#u5hU-Nrblvy%?qqM8
zsf1tZ`hT*5&I@aguJ{I;YaVA>_PA++oMVN*-p|?G)Sh25ZIt3)p9YXLoY5T;tc}9q
zg42dxe)`PRb?0x&*O<)Sep8YF@Ffm669KC{LTo;U5w{MkLdSwf{VQ%{LstcT!@n`S
z+=(y)W|>*wPIga`iUzQzCbKypN$&(BV(j#@Z)jUz!m}udxFw<{IkxLs+-FrMYL)b3
zfen&F(t1CR{dO~xW|cFMoGj$at?7hy5_522Kl#mwv(D3&I^gku(ROkHJ5*kX_D~ob
z6c3FT?TjfO=@c??@77=2b_MIDebYwOZ}yl1j?H0VKNsF(efvC((}{5tE(u00PZnpr
zj%VZ(8mwAcIE*l`&-}(3&g_I5JZuz#3^?b@{mt;%_z%&s^d(?lc~!IM1Ng)A&?V$R
zL0X<;bTN!y8G%Hmh~ZX`ydtv5rzhHyEm*VQVCt!kQ*L#~{^$+Ki;|f~mvcLgXvCzW
zuB>0MHZj5wyi2Fzgxy*(VrFA65dKIyd)&l2k7+^^6yWDx2ZUnRDJ<hAr!g?V#=<Yn
zHb+cUx?PVB%OvZ`6Wqov4dc`wW&a<xNOHEJ<~WmySo<)Zeb|zb8G+gzQZB*uq()5f
ztk*7EEe^x?g?Rus-ct~abQ(4-ZHJ~h{r?%;vxqV0d%XLgs}^R`%v;rEa@lhzP4i84
z8sByTv%(oZ#CbFCs!&;C$&mrL(+G#%zva#=Qa7n;?tTpRQ^&uLnwn;&fT=l%>DR6I
z3_{PD?2UI1q|d{>HDKoB+X{6T<=Oy$<^->joGDL05iU7s4sgPgt|m+z_&CEaBQdkq
z6SCv$QrSl#?rq&%WIewo|5=bqQhT}M@L##<tb2clv;`72uQ(yHkw}zzqCo+X=%|w<
zlKe)x9njtKD{oKW=^2&~-J*_+_XnRvNN%|HvQ)LlN~ahOhRmz2niA5T9jW_H2w8j8
zUX2Nl^UdJhI;mf5+IY}wx(xfseG^T(a7-H33Fg?HP+2WHG%t&lWFDDelPE9Gg&di4
z#9k6o7lu<Zv??;ObD&B<Hq*QDP|e!|B+@M6K5hv;5i-ae831^!x4%-_3%JLP^rYtm
zVeT&={<>FDfMGy*&$hT6(1;b+X}8U)yp^Mh)RA_kR>AJV>F?t~4G<wOn)W<}awu{H
zt99#W+Qkm!3WtGH`~36Xg{1)D*3GoXFLeCsbaoUwb|ixjv=r;g5z1hh3&<8_Rfs{W
zRwT+$RZ3%pnMflFG^MN9!O3-9fjWF5GSN>I9C{=#S{AYkKPWtV!`V7nSrKBRJ7BtV
za{=AbwYiFGxuFqmj54L0yaUZd32XEM?I*_pq_Hb2HGt6`V+Bg>gjTseG~z@#A*>l!
z8j@SnsJ{sDcye;jFP>=41=s~GQDo-@$m2w&5^8p!c#?2d&Aqa;PesEqjU~ObaEMBu
zH==d>$eo|kle+c2;yXKhB8Jf=wtg`nek(!+&eoh-Eih#RA&#l`x-^EQILG88*X9SN
znt>~O>4S2}FvtcAgfliCU&4B!S+cI*T=w3g%eu5+)Q=XzJ2&r*IiPHfLXb<ryy7Hb
z=KX<0Cls!xFwHMmGbYbEiP<?C%o=QImkTiX36DUBDs^nVtY3EM`_tCJtW{~xywRVB
z!xhcL5TCJ^cGvAd_dSS19=JHJ#lu;ZYn43veSyoi;;oOMWx{mIB0*uBVSXtWiQAC6
z`cJ{@=Uky-_0CJ*p+0j-&pPR0DDS5RJj#~N=|xPX_S}=Is0)oHGTx?`{tt_|j%tX@
z1*9Qjj<cmjtYg|*5-Rh?#r%$f>QdHNaH}Fw(hg~Y2(pO&@2WnO8O2FbUPs?;6T}Mu
zN`b=wbY?P)*UQB{o*-CQ{ohH&QjS8)Q+}Rd)(9PxhsGAlohFmRyQQpap`GOd`v>E`
zGp<1tEIad0i><xSkz00kYnd+f6|(o*f42;Xs+R`<kcbUH0q$r#6z1P}gCZ=R#p{yx
z;kG#d5Se5}YM9Vd9lL)dSgu3DceCK>vSoIE7!u@>c%)@Lt}y0jPa|j~VNQ))I@n+6
zc5EgF$l(TfAzZQe5E?|WZ|Dj{OBGuxak2ChN`Z3Ec-HpsY@^}$$dM-M87Bmn1ZK7s
zplY>!f(H&uS$KbtuB9Ie5cV1D%E{}Cg0`i400mp26Id;pH&tTANDP0~^1^sfGP|bx
zDrL!#5=@H=be&q?<XB~L2{AAz-IsvVocWfe{?mJo53#TK+8hdn7XHIh!EtB9X4G0H
zE4~#^TOdk=#nB6i@d+;w#sXvUyt)xJmW5dQSCRMmr9xHeCPjUb2pYxiHXv@$;`I#U
zNN~6f66P3JOd?{B@B!8Ddv7}^4YL}tfO9vp3!HbUyqU@lnG1`mbb|Mr7W3D}*A{lZ
zB<)W$8<VarSLcDJL{dvUR!qSt))cx0i~ay|g6i^l`C4OeJ-<^IVwV1&6ThI&T<Zn8
zp#rkN5N0r0{o+59XO?vpU5VH*{G>4_`5pkQ5S!p1t4_eb`&4*>2-Tyqm4u0=mFs1K
z&T{)+HQo*J!;+-EBscgI@gORXu~4G__=<LP0b`bk*<Yb-jnRc`0R<9PrFKL#EjkgH
zvu}Rd<Gt1@&fguN5S6v7!D05>4gOoRagg<<H`>^O8Va2b<z?|T@c$pIs}~V+zO*Tk
zk_21T$+T6}2I=L|6&aC@5zOJS=x#u*IZafsS0FOxvSOOXjc+GDcGTA!Xq6MI!=yA4
z<H}CI{V3S-ZjPu#Utg|l`B-4&dhG3I<c?YV<`|fP9ggFcyAb`AR9)%HGW6UD;x-;y
zuwV*qL_3Lpq6Sqc;YSeB9<F2ou7}u`a=Lltt3((f6QFz4qf5Q(h&Pr!o!SRc7w__D
z6S=|{dJY#^JB{{*PvT!lc8t5T!l=_l3%P`|^rmJAWwdct2#d4d(!8Ky&uhOm$XU)$
z2voJ65TLiR=@u*6d}?<{aEY$)71rVUo3B`p!HU`1=9AqfT5FNs@90;mpey7tMe7>l
zv9g2CmeNIQaeqW<`qGL2*ec`>z$1-#Ab|KlT0p{aR04KO1-XmBF*?izeU2(vFwf%C
z62h8^iirE$I#U3TY>K{WV>D5&s{94{eTS6m5=fj52$%-nM1Yj0E-kUlf_a@1-x7WU
zf`b_O<*vCj_x|<B_6%c#ZN2tGgWrH8D-C!Q)JTq_7&=d>OthO!+#<9<H%)v>)0+V>
zJ8j%iSieOEE7LV647b@^6oyWE4NZ!uxickq?{lEFC>YN%W6du*|77EI8js%iaAwOY
ze!Ob#AG6=bQLnJK?tV%uG9?jqexF@>1#(R%=aIaQjr#7728j=ZjCmzoEmAp?I#Ae4
zrl>bG&bxf33Ul_wg_%1@5p4M~5gwI{Wg*`0fm~<p+tG-V#NY}+c?{FX(-b_+@rWxj
zSqu05^r;HzE_ESj9=wRs6_P5TMLV1~Xn_esN#TH*<<Y}Cno`#anmSz|X1V;K#!X71
z(&Ale@L^QdSDmcveoQ<LfUZ4e`VI-o3yn|&E$cR~&f7#eE?6yz@*F%YB3y(b40`gF
zS+18)X#%m31TUOfyH<t+EJX#dO&}_EiAzc>c3?K7Ror(na<!h(eIQhV;%@jW@N!re
zo5qmPVcYWYOs?sMiCSdxSw^-y*`gK_S1_8jP2n-mt1nrP;|Ycls>Pe6*PsFYC7%rH
z0GO}yrZ*ybm1Ba}9WR`oLlv6P_f6&Yw0YreYc|C-!byKE-KfpXJgfP{j+hgwJ%;%7
zD;u$s%nniU^~SX?@wE61TbA_wj=yD_jg)v(M;o(a{fEA1ELizBJdIdIq0LToaaW=b
zs@SF+8l4*V=q@w7454z}(bNe02?xXG8&kq-M6p@%>~=hjM|=(<u`nf<8RF+0;{ha;
zgqdPTaIu1~NS#`R`?0tPNrGypKVwW$I;Zj-^JuX-X4S1df&v9|9GLI98+A~Sm4OAT
z82wARLHMM^3|(CaKfor=kU`W*9s7w(9>ID@gKS>52Q;T}P7uz5?=t$dE0Uk<KEY9<
zCKuj?1`E@a<Gr0ysLfMdYbXIM66}JE(kJS~sb|u=8Uzm%;3r}t7*I7SP&8<uj+T>i
zhFbuC!*K&&K8RvXZMz;UK9pNRldrs<-%6zOTOiW=sXUNLNJGR#>h7Pcy*;vP4Tf;^
zYX_+(f3=j9$cRN3ig!<`p276=AcR!3;$uUv7htlhv^+?GDTIt(wPBmEMj{^G!8hfj
zcJp_1Mh-GzQ}P^##JU_&pbpkdW_5O{S8{7+?XrPPg0;AT57HoX91PDRK-K%}sqJdG
zQc|}cx&deQ9aqGvuW2jyE~#TmEmdnuwbq(#(L^;(idk=PwZT8Fnm43)QQJP4GrkL>
zIFP6XfZ9fDFTNvy0Sv$yxE_4RA@8jsq=Svp@cc%03jz6~(MO0W5)dkTXr-K7f1A2u
z(oZKiktJ%P*<vmqJSxFiFF6miJTLG&M~27H&B)RwaFp_cr`}bjK9Vg#mQ*9kw3f+7
znF*y4?GGVJYzC<Y4EgEEYMuyb05~(zhX&f)H8xXJycl_>%+Bju?!{+JL^@J<!uJiR
z$ay%TPhZt6-}R}_iN{CyNo!en5s<E|Vx|1emn5GPX0kTONw{E)4jf#_S&VN+eRRwW
zhN%RP&sPQddpj@l**dYLkeNQvh{v;GaGsq?6ee4}cG}VsvZ}oM3p66?O@ME&$^kQJ
z+#>}WTR%ZYf+tE+PskJt$N7QDzLJG?SI>^pm+EsumE0aVsO{L?=z$-tC+CK+4onmn
zELP1#>p+4~Ma?i8DIOAc?sSgL64{RR7;X!3EYl<jw&{-pbITY&-SC6M<$Kq!J_*Zf
z>tXP;1pj4PXeW%|-o~yH^I28pp$#S9pv$UI(p<AoD8dxnMnI@!)oM&aoZ1EE%-2VY
zmy~!7M;jcG26;PRIm0EC-Q3{6r}u(7n^v;j(~i`P!$`ArAPRtDkK003G;Qc)3Z?V^
zf7tTJp84w`W$0l&)zi?qC>7USd@olIr|f;HwJNbQ25E=c@2Dot^$0uRc5J^aJqH%e
z5JKHAYkU%F$WA~(c&k)Vqts}eHn06bX`89CT)zZb-VqSCIFp~?n44smt>4a61rh(C
zq_nR1nQAZidg@f;M_TZqrX^^cQ#GJnUX07$bQUpMu`?GBv^_|6*@Dm)7+y)kaf)*x
zR%7t-(pqS>KxKP|olJ$S{}u`|R@YoV*pVaMjyjz3+6D}-brtg(rH+0~##rLXv<bDf
zwCd1EK!48sUaHtrvUFj^(`u3eID7o!Dang35XxfBq#+l8M_3(L50o3FT8QDlIzWI<
zK<a(%`PVt>t*?YTFIcQ{dUlRq^}`i^ujXGZ8^)~O@jtbiN@RSomXM9DpqIH}wsvBA
zn&HYd)>B^(NyIpY@{aLS-ewxa5z8RBs*TVSx<st<ff`UVYzj^$?0xX$x}a7G3oQeX
zD)&kJqiy;DS;(07ks^H}A&mi8mPkwp9#=6MBJfFW$_zVsIAlHPMLc?GsX2_zZqxz8
z=+)jfWao&8g+iU1>{u;Zn2uc#@~;sNK=R!EZPeeZ6hw{Nq%DjkxNW}s@dl<O&MswC
z3~ir4Z_74*eWglia~cK6q@4tFQ2jp=%I#SH0xBdl<1$)Ez$Q=NlkiSD0o*|oNS5eu
zM)}6>%yDxjlhPxgT0yv-w)DIB0dJ3c%*Ifolv{fOVh=B!@tGO=h#=L~Tx|xG){VKS
z{SQAwGO{V;POJ+rt<ykEtn+E@94)vKCiU2(vb{%f9|_rv-pJ0+<XK-|VXM<k@LDb}
zv_@Vpu0J*-n;`km#>=AE)nWwlCzrkjk0G^C06jp$zlGO(x4*UF%I9d7H{B=}A&=Z!
zh|LF<n^^Ui;=$P|if7F<WR_%0S&cp6SQKlDEz^!;+B>tmNPx4T!p;1o5e`EjJ2hS$
zhmC2P#zo!I0Eb#S!YR*7FPuvi*9?$FJG3h!(jHzQl^1^IWcu9{$Af&+kedW>A-v$U
z1iv)$$FxnKItenTxuF=#K4*ySkwk?*faI*oE+M=HqUs2bnBSik^@1g2qUWDyd_*PT
zE``?9gG{M!A;BtTru$xhlM`0a`pjD%5-@r2`xC#(XAAj4*ATcZ5>De;i&n^d3DXcC
z`GimV$M6~G=sJz8v#J+O&!T>N#Jc+?b~oXGbV%MgZg`i55=3l{pV}EQqoDQ&!@kYY
zXKse0*!^Xh1*T3Uv1R2W$)MipiDlRG4DzbSCU_hpB|APLy`~_U{n;U%U8N05+uby-
zlq?7F5bsY#=|H%e)AM*O@WrcRL*3+Eh8l%pM2CP?);)s*OLJnouU6sCN)+$orhKJ9
zt&ZL98NA9`2mo4+VYs8)(dV;-5j<!2h6E9YgL&7GM2;Oyi1hG;6mxPWV28|K#U4Gc
zJCS0dXK)YQtera4u5lq}BOzJ*Ggc(f&#^;b#amPIwDCc!M>q>4xTca1*KFP*%YDtO
z%uRY8hd;W00MaRLmvGPqat<Bi6lui8J$08QkOeEowrE2T2@4-5;clB$TWv+SQ!+EG
z&y^)^9t(WYSiImf;PKvhol?d@fIBkA8i!F7677b6CfXL8x|-TSD#_0(*=}58z_bKS
z*}A^O9QcG0md@^(MvP^F94UA@Q^>+lbR=?VACh2?J9C=jKhikii;$+#8EHrlBe_k%
zEX)@f?F|?tICDzXSw0<Gchc!3ZG`k=KA!JR;7A#2ZJ$A3BpNnoeDNN_s@kCR_n)Hl
z621Gu8;IO(E;C`)%3ukZ0Bp4_jsoIoo6zq3w!`fiHa2(KC^3^yH4^vI7~?*#K#++1
z<SrbrX@=J5fP~~-x@dJ6YP+RyD?|`%dCodd1C}HQ?jgvqYaaT{ADifg2ZwBxJ?1Gw
z<aW&9RiMR|-D27%tpq&cZxD_MGHJ&UNrlYrOu;v;3Sn)*=MG@r%<Lgz=vTt4VSY0P
z<poqfY(@etwKgTIi#;ACc}M1+`>fy{DZ=)hC{2GgnnP&p^^WA89a*{IG@?pVYIK{<
zR`w@g+L+lhEcng1&%iro!^8nQA;bZgJ`G_%B6en#$bXHwk(@NDjOeVZQ$$=NXrK~<
z&4Y-CDIg%0a(!9B?(k+w!AMvq)$l%-c98~tl;uK?$xG1U$KD9heKM<@1W{iU&~Lhr
zJ?h`~?Ouy(Dakg{Nf8QZ{Ku$breU)Mt%Zh{y(ezDtXCJwS4714P?r@`g*sejc9rTn
z&Fp#tC#+b;O%~3>+|Lvn-UF`@rcrDW9W_DGTfYDEdjQUY3q1H6IcLE79rg=wlC(tQ
z^<xyiaB0a!9O*IxfkV|lmhkYJZPnzh8}Oz@(dJUmHM3>`w^#|n;faZ%#Q`~PtvLo#
zLC)nI?05fG3IGYQL!QU5atJs^T-GM`o5v5>q~O`(Au&o4o!bt8q9Ox;HQ>Q>2N6Qq
zU0KB`2%bHbX3q|DQ*CGbX0;GJ%tRKtEUWBUswunp7hbncQ(Ea@NSKr1VhFx=Nkn8_
z2pe?w3Sj5EZk&@J^T7eG*)#!$Yj&Dfp$%cQCi!cxNvzNisapiu^AZ$K6gwdJyf^`K
zJLD+oh6p{YHg$d>WcM{-11y>0+7xsTcI{{rT4IfO#K8lOU{U8CU!56pHas81r-}^g
z5!H6{2l|2|fKL2T`(<H*uMz(k6c+J^ph^8@QS?_n37rC5!3zGV!OwNlpvQLS;7bZ0
z|9FY)6r6b{dm<*`NxQ*rGWPo6$?T3X*)*#B<Ha<=cu~;+weT>pZKF&uH|Rf_#rT8e
z69JcV5sWe5Y;;?rwB0uivc|4~L!Vf`3^$+<wu!YqA0bx3p&~urXnc<Eox0@0V_EE&
z5({^D)GYEHtD``-)NH7?{ys2@1)auXBRSipc|V=uv@??S780)#sGekGD1zgGq#=~X
zd_@DMJp<pKg~lI+7%+`-3dR^1ocb<97D@Xt&!^~`+Y$6cI$iNs%xCFMxYr|M7s6!3
z*uDfo+q!=$(sh}3Kzq;_1G+HCFZ#g?ic}mU={rgO=_S88T1d;&mtXg<#w4XdK!F&a
zrLMTH!RZa#G_Ai>9IB4DMxw`7IA7}WeRa1$MUiQib(wJz&vTva5uP(2Dj;oDTM-Cq
zfO<m~{nfr2fUF@~^HxNUp+!4=&L)7PJX*+V9+*HUNS8r`R|4a6oc4@%Q*KyCSv{I*
z_n;G0crJ%xN6DFB#Z4x}sU}$+qJ)HznDu}c_-^tm`c&B91^?U1_(ZONnHhZDb^H`U
z7~spw+nynLqFHqWSp1GsqZAY^-RFUJ(Wez+wZQiJ%xYS<#NHM<f0mOI6RXkBFZ>2w
zPj{-_l6${D(l6pOUynCmEl4_5aB<hi70Qh%I-#pF-1y=b@<R5i1GJ&%uR;jQrdzPH
z^=%@b433rBrA>=Vb(}plC@^sZTs-gn=nmlikV?CP-z(@?PAMgA?Z$}Nh)oqmx}~&<
z-!lNieOm{-@ARTO;7_8Q$HC+bUtQc=_gCIulvZz?p@D$J8>ILm*9{roIap5jHc*AR
zNvVx`i^pFSyy@D@B~4RRid-kUP&_vTrmc}0;T-pqb^Xafk1%cdR4PnlvVN2z%tT#g
zK0Ul;KdTnBVTb{Y)^t&WUff{ekaH@wlRrN;d3+3Pd81-C3H^?!fJ?#n5$C*egPmk@
z**o9|6y=34H2(8XsB{vkN?AHt0^IXEqwAdcTTz1nOkv+CpuyAv22ZkWd4t9fX)e;F
z6v)DZ#am?pZnH`+ORUad-b3sp(3TV5H^2pVsK&X}x^Bn;J#1@5I^D;qFMmxsP)WPN
z&{`8}$U_^};g_fJk=a9VgdCHcZGcfU+370JE|fInq@uaeQcbKMr5CHg87&cwxF+2i
z^eUf71t>82S_lW&23qHPJ5F~H)k)Djm?076E!OUjV7$yJRyx+8d8=kHZ;istz5@b;
z%U5UUoa|ggGaCF|(L2WfX|b0)7=#8w=2E^h7rkXq>E7uuMd9!axH{qg24M2$R!!tF
z*R|QJ@nw%kbT3nJou*4`_K-Yf&aKUxU3NEIRh3%wG%pvuLL(?tZVM*u>!IR=*nG!_
zGyJ`dfcoE?mkYTcf=!RYC)5b0`omyyIM83#eqOXSf+l=Q9|98|zPegdsM358GHz1-
zW7^SzIIqzgO06LUi)^)GKZj+naP?(7StFl3+#3V?DsBU3-Xr;ulpsuOI5>$vfekM(
zA<pWSXBBRIWu?n0mIl^7xObY+WBfksu2V#3B+J-i-T~8##QL|d8tI5}<*60^E;_sU
zn!H4Mi3F$mw#v{p%&uft6n<WD8X#}TP0HyuA1zz-*bxP5)_Cn7NR6IY*tOw=fVLvR
zlKBV5H$T#Qa7mb#vE}KcN!y<Fx@n(;15>=3J@alAVqWt&-5gNJ$U||d`N$+T4asbC
zaSV0sqW@}eF1m8#P!>39=t~>Dhc{QmDsSM216tK5sqfcxwWliCXqJ}C0PNLA2L82-
zDmW;<-~+;>0)g;Y^vA}eZ!AQ3lg<j|AAR4uOq=L59o;JOltxbb4=^GuIUzfAk%#ah
zpEMee;wthzTDLD!7^@B~&RB}%sTjReY?+V7>J(IJq0x@NXsA*rrAwO?aGrKa^Lh_Q
zIRiT?zy=`p{1A4DVt)Ex8;7bR`%gq>pI|x$^+Rt2Q1|S;IOxA3YqPE(ZJ`nSc9cVV
z6{4!%UAKRTkCsMgkXG6idi_F`HC7jPZi$zv&tc|Q9+RXuvxt1;=Mn|CQ&q`Lq4Dj7
zpQ&B#GbFsu77qQ*y!&4hF4Z%&Dpgm)sN{fa#id`Y%seF9qWuku13z5Ty!XP?$UORm
z#~1$Y4*)h@pHxPI@xD&ofjb_1vkXH-s6r1{Ha_<Rc?;bnIfsqHoaGvK>o7N!P*w}^
zRQiq{D$dm0$UjT7>|jGIaBx95bv!d75**g74Sh}!RHWb4=ETANBcJxsS?LjP<I@c7
zmTa3Zd$V3Yida?VNNGnYmagb*3_<;&kTHZXU~%P;F~QwMGxHWFHFojtwB;R_%7Wkf
z<ZJ5To`8ycWXXgkMj9l|j!Fo?nJStg6SS|wzQUbvp#D5SNTY9_<QnG5a8-lue$aDh
zex4w@UZj>d*U41s=Xdu=wKHg-DG5~`XK0<4zuzbgKlEQo7u~hQ5JDC-MXzzG=U26W
zcB?`Xc1|}_U&b<BjZQ#i=Ny%%rtv0vzHD%eu;NDEv7!FFL44m+@wB*iJq@@W`gjxM
zZ@UQQzx`RU_{7dWZ5sBMlZT6@(^%rj^|8`hKUSMpyEh&_Lk%VKd^{banlFa2E43P(
zwhAUN*dK-jn;6oy{BgY7jD6eUF?&?VTdx?a8>d}ITGJ<#%Ia85D1qGC;?}2~046ra
zrr8AU!c@&0<vMZpB$*sC*W3{@t=_05b(b<ZCAA>2GIyMAq^txYMeuM_K+Fo$^}sb~
z8&TG={Ig~rqMSf9z1lncUbTH0CeJ*KJ^+wD-tyyayp_hFUp}}F-`um<>~yI^WoQE~
zk;N4mjB>XUG$Q71BBvLr|Gls%!1;S8BLvsiLf#$8MjIZYSh=DGau$O=!~cdbt>$Zr
z9s748C$39UT=hQ;P4_NEBc#YEH>*B^i_>WCAftG%$k!WBq+<nM`lUr0ZVT<~?De2&
zUx?hHB#c<COhO5#!P7Ny{Q39c{k;peu}n!vI|wr5Y8Tp9LdHf>9-O&FI&%wW1duN<
zNgcH-HCI3qgs;r<rZ>OfDU$0Mz_;O=JlQFRv9>%F>r#zt>qB+PDunfyWo(O{U?|OL
zro@U_$vQDs5j8Ozc_Fl?p}H|mRTb}U+bc$Ya_tP2S!@nLDxu?3X%cD49jbS%UZ_|z
z?EJ*~EmgwO;z>FGOx4l}SQ;1C0hm28@l(Nk#?KbC#5hYfTTml1lJojlWr;Dea-e)1
zN55O!sI*M>*YMxBuS%7RCp;75g)F`SIfCfl@=s%r5e=wF_OS`Zu9%H_(HNs~6R_ve
z_Qza>h<j6fOiXJ;3R}jrgJSFGgpGHuO}*G*CY=Prf2dwDJeRgsetODzrh4|zY4=Mb
ziMJ%L*!=Bm@K{9KVKXS817*5yn`YGdCBUwahP}&pzed&Fjwg(&x~_tz#QXU2Zl>uc
zOT43uounJsh$s^K$J$z8>BMRYvv3)|k6=R9Z!uPAzST=F5@oMi*e`qui}CLlanG`z
z#8pL0j^0{aoqoq5(%Q;p*Vg@d#-3|4cl;^kwiMynCgdS$fi`A!ap=TaU2xm9g=%{M
z?K%T6!N7k|F*>oDfAndRgvUB_cJEdB0pPEhL%)OJR;U5juq?NNT^#DD-;Lz|n^|1l
zgt8RzB>_2m7PLfVc~=onfEhcf#q+B4_qf$LPwz%qRF^CHO&^=LZKV`^X%Fp&y=A`d
z2xNns!So^yyZnKCR}3z)qjSK8>0VOq)JuD`3;%x4Q<oabQ<JD@cCphqVvksv4p#B~
zGcgnx;mQGImlmg|`B$hih-z=C+-e3byll)=w^YQfGb^)!QqL{0-u)?2Bw-KO+2Zwt
zd44Cgi)NaNx|V|X?Zm}Xt*fxv3^E=+bw)wFNelyBX2Lm44=^&Ag>=Ag?c_HcCY<~U
zMfO|J`$W;s%s;c^I#1eF(fb8+VlJv%M_f!Uoq+`0Me%o3t|tHsWHFSQ>LEM*Gy!`)
za`ph+k5;_23=BTFfu`FYSkrLeY~C>Yr~j2yoU%U+*7x%1WmT7vB_S~!pwfnnzBW6_
zL^Bn5{h2tsuQi{sq(W#Ek2aemHFH$paT0nLQNNFCyP^uDx(Em<dUyU%%jaHNk;E_h
zNk=YtA&G>e>LLH?I3Vw^u*AYUyf*Z{;4cW0?CROejb#^JkV)&~yX1f|0yaWUDl8(C
zT401Smd5{37rovjKBP7uLy5AN{^ho#ipl_Zie-9$mi(X3rf(T19t!c=oqBlj5qdvu
zOp8Yxo{7B85WO0h<_1ZL+-DO+dKq8P^&J}SUvNAIdk4ZBKDzXW^?D>BduY<foQH0l
zO>vEjy$!|lVgp+<{TlEjD_>Z0dPw_Ih)6uh75@eP`}ZD~q&Walkh{OTw$G{v_b=_r
z9qv)!2a>;kh2><0`AMqIwp-&M_-AN*O!8~&T}M*q3z+^ixrTkLw;ZzO(|PY|wnT=c
zzoeQ!Vk*mQ6e&rbVlifGHx|$au%;HCNsvp$>Z~pv*5gjdsu!U3@z8am%$z{YYF7Wy
ztQ9S?N5m6tUXdD6MPVSgKezgG!V<!#dAlKS_P6M`;)&nf7>Mg#M>I)=8J)!HUpjad
z68J#;#;?n-H^89D>g5gBCv>nMWmUAQi{cDpuRA)P{u-FqnXE9}6Tx6I?6kd-!BYSu
zY|eMr#qByO*?~1;EoYSX9<<{vr$U%e-<IxfbqFbqOT*Fj6g5uuWb|3lTT`U3z?<+m
zx!HhrklR1F7-vg{_+H?zf;P^b+~ssd=u=0xginy~xylOnQpv0)q`a`aDRwDrTFM%N
zy^kkIvOQu7l~u#U^i$Qi53wlS4nr9!QssRe$mequ|8bh{9qsm*+G~>DcC2_R0nA{3
zQnYj^#5^W9<0POg$`u2kDjKtt!K?qu_|GeVvy6HX$s04S?KKD2{21}4m@c1=9E;8l
zT$k2gP(xmB8kpE>b*m&dne<sNzK@gw@q(qw!&siY*YtQRY7+L@)hV_r-LR=u&dfXE
zkt}5@_}1xYLeBo3B_ZY3?R9%-cQ>C#2}j5CwxJR8WhiotcGzNU$L_w6F!VjvM2GZR
z_5kSmlgh2V9EG4uQy5G*4zdu^bLOcHjRnN$MRUp!EZ)w1YKi0VJ&`(ykEYew;K7ma
zQ+r!Nm(;Ai<%yuUxj(Ke0*i+>Gl;)ad<WC{EbV4Icnact;)&z84YFMFQIm8<M4Blu
z%-x&U{HvM<&bSiXA*+Bq24D$1)esq(#4X@KAsDNZ&%aJ3RZJ|Fov=5wHo;T(eOjjB
zO_W<`*bCfVfMkHz4G%RjX=MhRDa1|<i2IDct!Ja0BM$^?zrX(*&vKygoPkn3m|Pw4
zx}A>NP*r`ol*DVQkOSp@&IqzWaK@mmBmK`$z?bhK{i1qdBKdOK4!=tDq)7^2DiE`>
z{xJGMs@QHZOtI2*y5&+R>f_a{iV@@o9+Qg9ZpAM9(D_(9r((*lvV3$X6Cb+dw4@VC
zUUh&q`~sux3Zl~B`bgagWqy2i5mBtlHmDHxiY+0HfHOJfPYRxGb>8t??`)q=*qhJ)
zMXtTFrjG`KRo!JRj_+W-2+5PM-#}{s9#EEEf`d#M-Xx_25wm$@B-KUmPv&nm_IYnf
zsKyCzC<Sq~kl5Q=Nc=MdNmF&7>*)h=A&?eKvDW^%gvPCSuAD4&02y&%m?C9Zq46Ky
z$NrmSznZ#qi5*{N?;g`ZQCy5&u$1QCUIt6{UQ2!Ga>l%^pclgAYza^&4R~!n?3dva
zRDg_H>J6u)<@^)a$(-auc=!naHwDO3cJZ?MU1)hS%2If%+V4tE4*1X;rZv+aHc&<K
zP3cS`&_P#3O=hJb<ItC5f}a_J#so;YF>NfbqYn^Ft0oDDD`VKLL#;H$*g|12qS>L0
zI4TeQ+2eh~c8}$x_ZW-M|LzDdVz2+zS2)XMV3kaAYbBVVRXS<SQb7mmS&|@mfH1Vd
zC$s+rZ0iE)qTS{;9HA&~0_5ZNg-A)i?O-TL4#@;R+rUIX>#h!{0%G%)j)}n^2VB*X
zkyyS9s^hquBX$TXgVtmkK@Jx23=M7jnU``@tK<ZEsiT6gANapVr#HQ5W@z7rTCIf&
z5OrZZ(DOWd*r8la`t-QAqJY9=q)i2)X!;c)lhXq}yt9P9`EAdtFk7T6QRl&l1}`KS
zPNHtsOTLxi4E0!kuJDNggW^}3<O6D1bidT09r-JLu@;1XCc&B4LYbxCrnV$Cg*PmA
zx4nGY?P7G!LIBKsu8NJRP*eoDI>rf`YGjTw2sXE;%S<MtV84pC`g}xL^J3{DDePBZ
zN`ZbdS5RL5=Wo9@fcTl0quPLrFir*SeRZ5&mTB#_i_}|FD$(sB5crMC4MgEuXKIO9
zt664T$EtvSH-MT0lX1@9omF==sw1#8*M<Yq$8E>j4ba=WPHt*AVB4HX-m2@P;Ohkt
zg0AAY=f4THM3gP5z7JBnqQswE5TV7dHMQxtJvnn_QoPRRlE8m(jS<8FjFX@Z1|Orl
zfXi%D#_brX5=+$s#IKlmu}S1d=V3Omac4T)?)v;p#3>B!kGCl9k60=rEx@qs(INj8
z+DhSBmun21hFGl$z8E}>k74`axK2qmkZ9Q)CYCi}dYNsx(7^N5@}zuU$0A5#?@B8I
z^nXCFJL{p!&if>zB4DA8c>N1r!Zl)ptV~U)WW2V6=99KII;Qwyr9K(hUwp-qSEZQU
zuorLL>Zm-)Cyxz^LCC}}_}iyh5*IU-VF}90F7m2MJGCA*<ahH39-z6)%9Z|q<din5
z-$0Tu5vn<vwMA$8Za~;Pr%H9+NZ4KPbXJb~Pi?jokRqN(uot;z?<su{kPRHyD#(-I
z?`)N8=Jcbj-EQ0(-PkKe+*d)sfw*T;CP#==<xlBl?KH(3Sv|Q(X+X;a?vtbenh9zA
ziO+ar&k16Re93!dx0LzOmNTVzn$5lD5j4aLCUl+^D}vqEE=O&vd7d1K*arU&{rk}*
z2-!5r*=gWu-UsgCNO|?CBmA9TgONR@H^uRgi`l12X;B$#1Kbuv*qe~Cv8wts=pDaR
zw1@rG$4_pM-K0(flMY<5LLRfNjD;52_N!UM1}?J6(Ie55Z8MzOlx(-;D}Ki*PIBd|
z7N>EXR=n{sbFcDmM<cdiB{7k3T6S*K`)p>5(oIOD6d=_IN=yr*_(fEZ&7`22%_&or
z{n;~G?dfcQoAi`pcY<Nggoo<qb=mzs#Gf{Vwr=DN)3ker@Y5;-2lV<(`<XoEm^Sp9
ztp;VZG>6S4PuwON56QDwqrE9!imsYFx)Cr_jHl_3ygHSI$>zpm@QfzqC<GqMD)AiS
z^%iaow^N`8zJb`B8JLp@Jpnuak;*idZR#yLf7)GCN`Lcv8=prH*1`h>T}3O<xb->t
z7CAs+pyA_OzsCep5ubK=vl7Ve4y;zFFf<jj<JN;}5NZW&Ht2_sv~x3z>6_XY-L`G+
z3uqY<0}!Sw`0tqcf;a6acFEgd#FHe<Q)~Tf!--(n%MKT9TCy|^c0E@^eM8RJIFf+U
zw3`H~e%r0*KtnJ+Pl;5^WtZr=LQf+f5wO|XV{J9SU`6SlQc;{~rA-tVj`U21lrYKJ
zp_P+h>(&VNHx<$D6QN%g{qy<+k(sIJt4)EbP+JSj=kNijH`c;PoxJ$f!WFg;>c_qz
zbISc9ydb6aZcs=MG++`LmjsTfUw-ggN*~Qwq^Y{9p-DXg1j4MkmATO9ZnI@V%oS}C
zt|!Diz6jbca+Jl8!<-ukd$<p_^>h@V&i{4L&w=ARe)tN|j>=I&91JadZ{E`GSEc6V
z{9V`Lr!(Ff;Sik?>ZAI47cnV@I_J{4*Aq?w#$H|}&DVAmef(WRCu%+_^Tdk3o8I#8
z#RNF!Zt1z0pK0YIL@QSSsEo&5F^V5XZzk1Tt_=JWmGrPCOWzs9tzW%=fM{mfjk@qC
zfPo3^PrH}+GT@$m7e(PtQUJT_*^UH+5(zs}Y_lB*7r9+2=%BYXOZegENW5+u@|hzq
ziY%|CDGVS<?6af`1=hg8>G42<9lq#b>qRbxM|09QSk97}E}1GYG>kGh*tE*1qXNA4
z2`<k!<;{_3VScnUXE@gYgn~;MUOEzY^$NmnpZT5DhyRw+P@x*g;C(rFDdnv%k200V
ziri`EW)6jKOVWm8NO!zayS47;vbrGz<T_7vHiXyeCqLV59gU3MbqtPA-q}if8Y8?l
z@_YB$8MSL)iy>;jbkp%y9qYSQbm5M-*97^AC+H{3GgK7MWbb;u>kJ^{gk|_O6%+V_
zRKjEd9V&yi8#|{M*9?-+H20h!i8*(S8N+%Jy)fD;&W{$B#M%aip;Ht;%;;7m3K<Zg
zVyodxCaX~e^{}=K^0{(QdH9UI?xtY4j^h~9Z;mp9(9h>m&8zaizt8#SPF#9P=dSf3
zyo9Am$A_6w@Drue1*LXASO-9a5@wXlI}K2w0nV&UN?xXsn@%pG$-u*e9@PRHxNOVJ
zQtvo#c&vacH<Q)CQ@K86R<#GT5%qTjF`|1(t5C<dTMxU>5sEVm5zlkYAXl@(NhI1;
zd=FICK+bTcD3If6=&}O9mW+pT?z2|sYH**}T4})wqJlqz{<q(6L~zAI?5xBE)Y%J^
z(H|5O?i|7Lp$}siMCD`Zw>M;FTWFLZ@8fNMs|#;|6;wd?%{@pZd676Zd~NjDNa)|<
zPHqTVuh3;w9l=v<`k)Ggt|g0SZnw}u9uG7X1b@*_zTI6Cl*j!pr$|AUZ^BF5iZ~Z2
z?Xy3&pO1NJdg?+34kPNs4cqwIs{X3{*#TvaQBX$|lv0~Lkw*?oJu54GiS7c{c6Xt=
zUCtqSyF|m2H4*FPZR9J2fhiE?VkN5{oq_y~4&r6CI=QA1(MwA&5;8&-J+wC0lliLh
zQ%c(Uq&rG`iw2J6m1)>&<Xk%fEIGxS*y_@8!A^}mC_nxRRK%x>=#_<r_lxk81{0+5
zF1y+<UQ<HK!r>6s@^pMeu<1r#d2W_RkRG;uxDenv3$D4l(Xi;U^=vqhy%7HtHU|44
zjEakj=(T<M7Cg(nC8ZT&ktb%Za5}7SlgVXJ!q=8}8%p}?Gto)oNQJN*5Lt_o4I9^Z
z0)mJX%cW$SgIa0%k`^3Bx)57-f>hg-Q%<rwlF$Ul0DW7#<^@F*>dCGu3Igq6;POwU
z8T0z!D@%!CoYjHB$Y2zVUg<JRcDr?~T7C_;3~Y@Fxpy5!5&1+dyyj+Kmyk=->j=(=
z755b8**{flp<G0Im(o4>oIvgY;s?H${9bXP!k}g*v@7r~i<v^w?m|jWbu7L72cHQ5
zG9zlRRQ=gj3;Y?O3p~6{^KjViWxklJVz7NANE<#Bu^DeSdCRdydMw4G)oxnIt0$2r
zld48I;gbjv$v>A)qkc&Y`_P5fzwQ_MXM@~y=nQ3KHC<F>bH008jTGj0%!5Z7NQ}0a
z<94QcN9yk{sC2!-)(4<R*<fGXdHp=WsGGlh1*BD_D8(ft$Hv~Yf6mAM*3(B;#PN3K
z{bRrLGx#P7OwS!RpK=d`fln#72Nu2>X)bqhKw_+5)0q^=cx$3^{K0DqFQx#iA>SIt
zCARGo13Qc8B(Lqh&IzM>sZcFV!P;L>-L#GerOeu(o2X38s5GQhD{bUNKBMpS7G$Sb
zeFoMvnY(eTopz(4Vq4QHYh{}d;;|}UWlCJKC?)f_8n28khN9RGvo?mOkhsW)ZU_<?
zJLDx4VVv1>L1!>P9vjK@Y->ST>PSMb8*_swNtKG+`NbY<Pknik{h|&Eb)oX7XF22z
z@a%H|^~k0{2nWq3+)le6EL0zyZnYM(?+Vw}&$u~QoSsM9o_z{F<YOGn6FxkO-03Rh
z*j(yaOUM)Rlv)=Cf<F@*>?1fPokbMA>`gSMN~Kp*g^qN$Ih7LQjdsH+UYcUwRhGb(
z$ROPc1uIq)=}JUSj8z=T-7kk7(p5_91&3$(4Qih8u7gn8OS<F!nLD`yvrH&oj$0PP
z-~&U&vtllSZuWVwBiwO~J}-uLSk?Ri08zR1PVSQ33lyVFJ+r^aQRO|gvGRkw@|XFz
z^pL^vK3qj8j(5+Vx(NZyD5d*tV{MYhA54&IWL{?oYfp7m*7`3NAI}acXN0+qYSd<s
zq0JFsALRA7X`<>bJqRS)n4O0UHm5|i;t6xn7YgupKc|JooZ>EX75B*WZq82(e`m4*
z|6<!BZS7lC;`webFrmhKk#1P8=C<uKt@9#p{i*dA4WH-cSm!;!BGoh}w_WQnb3$5G
z$tAE*1@2*1pQ9I)wCd-Lv~&QsD+@ae=o}QdtiQ*81JOoec>U~CelMceW1?xCnAdBj
z_o8<WJmPkk%6~FOC3)EkpThu4(ET^Y?(bOy=K>A9pJCf>wT@u%UH;1<L61~24FB?T
z&Qg<60b1C$&WxlOx&i@wXgo3U-}5bgXx9FzVlg3K+eD=1wU#H$cXhlM+4JW*0gNKT
zZ`wseFbFj#U52Wp9~l9mOk2T-<?me2Ki%QbETgComjvU6&KJMq%L$JkAC&~%(K(3|
zRYTF$9<T|YZ*=#Bguh9@*6RaKZJ0AY#XNKCE|5j>x8COW>^=0qSs5<aXVVX3vdHbC
zcp~M~uslXLL!=%Rzy|w4R_YXZ@QMi>LuOIQ6Gt`2zeErI0x`#9fQzqa#0h#-Rs~fF
z$iiXvM{}72?KelhQjP@kEPoKjMB@von71DQu-pL6%OB`9Fq%$nP9+IHcN$P$Pu3mF
zB$}~Dd{^KyRAVQ8lU>K&p7`a?x>^x&{^>&)llahejD01GmwprjD(V3*{EquzHNP_t
zr4__lPH4NH+-a6ezcE|f?|vvRUwir$!=5XsreF0&0H%`H3>%y?b&Bh2YRYR8ox^Y1
zWZmfeDS@Q;7i$}Bc&9dBSql+48F52-cL}K#CjNJ3`_67{YkD%x8mGf2#GEl<-vfsV
zaDkjpGS=9y=M>B}nMRs+XJu{SZ9vI-WR7a)d6{4v{~I~BB-2?39MgcM8Tfz@2^~@N
z*HVW&2SogQE3)F14!d<R6&er8Iraus&PSiYz#j~&_~p3NG=el^;!<<R#|N{4FtMqY
zy&5hYLx{c7EnaH3QB+;bG(phleOV>SL`}^Gd<(@nM5;&KjUY@Ij9OwZp?}6N(KqM}
z<$JszLu7cfIi0~r01?YEfGDtdg@E=or0~`DOCw5WR5p%#I2JA*wdRYTTVhnYlW$lI
zkco15mkc$yC4h5rpqbuxKh}bS+2ghTH5Ree1szSHT4pTad4oYd#4$pC4SchwY4!24
z?aEMcflD3KOGbtRUjyk)l)lQx0I{74+rx=z8O}0huUbwf2kBP37VaIGbxhdOAY=ig
z3%ppVGn44?1irHhEq|Yr$4`7$sjF_#1Y(Mi1Zw#gAku0y_`PCC#CGQBKP`WGf8~vo
zk?LmzyJdgsHkIXx@XAYL9VqXfv}y|<Y3CmBBhZq-Haga=4Jdw87ph+E34yIw5C2jf
zH2VBTtwe^<Hs=n(N)cPQ8f1U4G;&)p;8Z6GR|yUp%WNM()wUpyfWvlx?6B8uBI!kz
z?;<rR(i;4&ZvFfmJ%-F4c(*V^*N_#meG5fBWP@=l=%SO9q~O;V^?1wYknw&4Ka_Qu
zc>|{-B!~?qtI3&hFb=lTrr(f_J0!ypKJwVT!~2(StNQR=rS%El=I45O_Eb2GfW{lq
zRRt1<U4^LV#;?4xK5HeILLR@6i6Gz&NyFF+D#1;=d%3UW4(7}$^)3;fS}l9e#p+Kt
zQo!d$?f-vC%=+`(H?|aIa$+sGXQ&MOEs$LLZtwjTsnx<aokc(XZ%%)vMnW7sqN~ko
z%x_Kp5t|P~6G=UJ=d(L^ZbEj8e3(hkY(hj8meXG|Op$zYIz{jh@xbqaf@{1A{^tJ+
z{7nL0JiJ`g7xPaj%cqlX{)BWQz&Eb49atYjLa~N(_G|=JF&?({4+mvC!2)QlxfP2^
zulDaA;_}O0NNEgZp{?%_)#(hun2w)(VtF9W1Bnv>y<Vy+>4dT8c4rUeJN)j!SEgSM
zoA{fxE)&;ouuJL1tMhh#?Z5*hy{uU%S4xq(pzM|G(`Zl$2HUFQr*ZVR^BR~h4*_`@
zasla*rj4y6Dq+?oz&Jbe4$y4j3nwO~it4as5RVoxg*O4m0rp6u%R@6PHr%kAIjg&{
z8Wp&w?0j9LO2$97rgHYQt1~k9xFn?b)H-vI*dBlp+Dm+<wDRw`_6)5}&AN3#v6)|<
zbj6p#UJfR#&}v~QM`%!pfn1{@_eq@Wso!b*5BTwSAB2Uju|E)~$LvlVt->g^``iy&
zN=G#k!^_WmuJ``|;y0Xuk@O#LFl^*vRMDv047<V00(}uIB{hC87&*RUTtY^nch@nj
z_mi2+d^X7+XV(;YpX<BOf|aZF$SWFS;*AcVQ-1E=V7YSOiaqWr%&Y@!KrE8U4h-fh
zO{>cZZpZ3r&ZGmli?wF56pF3R;a<b+w(8>_!8C%SWvT_B=0L%9^a-DN{a)ER*Ej!p
z6wzJVs*(ju40xB-VrtLsYUE2W$sUsxPzu+56B4}Jxu(M)K}7ANGVGuMFQdFPOrOI)
z>@$BJV-)0W-luurZMgtmMH$?dRrH%fi8N?2s<f@7&i(SANNasS4zj2P>$5xyD;t)!
zvq3_A2|4bN!oy*ofd`{K=d$pfe9Qm)n-PN>LzqmjhX=*OnA$Spf-iErt<Yy5q)=VH
z@e2*|Ia)`1(PpdDJkwhm46Q*$lSP2AmI0r8RfTe4p-g7P^j{%113#^OIC_SDlv@#g
z2qt=-bg;}8(ml|mS`vvhjkz`NTqGT$+QcA--c1ShRbVn`d`P`fXZSWVqVAq{6F4&A
zAlR`rlz|{p)e})k>xr5%qe3&k>+Tmyln7g`UA64%6NgPc#YF^`azTb2s4T=7?D~7n
zuYR?J03vKrD_tDpPth|vKFv~e3bmtwX%3NX!QE{uW?gXA2AnkBu6ra~p5Xtf$W|a-
zl@&51INp=JMa2vgj%~-~7pHs1yj;wFsVwxC6abayC70i_K9YKTx7^olfa&+%N>|Z}
zt5cTQ{IOPYJ6V7?DVXd`^2mH`{)R;{9!Tk7p*YUm6J|8ZzF}@&_7h#YjEh^^T{}2T
zq&CEM0r^+ai2;0?Zf1$-<p*`I)*6d&i2$XF`4$ugmE<CVfG7QL<S?b1?FVTHV*ZYe
zX%BZ#`Q6C|=!L<kshVVPBkXg6lS7TQC8cMNd{V?NI@Pv0Nxq{LjW^u(swhpi2BE52
zg#$2rV-!hGZ`tn*ww4wRVhwV~BS+{9Qqo8c8tIgmX0$L&pU<)HPFi;t7t)^yz?;>+
z;q`8-YtFyXBX@M+%F;O{e>-Za1X-=&Y5u^>+nHLFmm~(|v+m<dYZq@9=P3MrLfKr-
zrD1FC+F<relfu`dPEZ;&18DH6-rR{&#vjwc9tu@#!+D0ZvCdD;W+COG2xxgMRa8cM
zc+Z~HT73zw(gVWRdz7;^@s6`@e7-Wm(>52M1Ln1)#qDaXI@|Iq1N=|e)*kyic0(Lz
zOmahTtjbx63DP;%0hZYT72V+)=Et@xh3@iLA9>#d*;5IJ@SqTyMz1PT7KSRs#H~tt
zuz$=%#0P1nvAy<@TONWA4}434efK3bfpz!f)R_K!p@Xp2k)IoPB)voV@CyGI@XT*!
zu9xgqu*}b5O>XNyMWl<CD4%t-Xur+UhxDT11(FKUy&X|;cAbTg97+VQo4SZE1Vghp
zb3^M+D+^lLsqsb39wh%`oHx8;T1!}$sY;!TaT=v%P5sL!lW8+IeFK&h`hT2HF<eox
z>>JgbZ5eQ~x~Jkr>$x>S|Glntg^*i9a9QGh2`QCURvVs84M6WS>Be*;{sEDd?aGBG
zg6){Y!E9;r;GkZ|Hb_-)hb@z+N^YYhtG106CAc0p8nSW@yFw>j0yA(+<4|LqIozQc
zFlBj4yd*t$?_O+(^K6b|mD(^RQ*zGK7%5IO*oihNH2H3|z7|~IHv9dH92k8LiS`Xy
zu|csE5~q2eK227>2D*Tuk!FJ->nKEifOXpP6(@aEcIl!KW>bh;ycf4l6~ZqIE}*H7
z;9=Y?p9IX2yfUP)I+k`O0f$57GlMBn08iOBrPs@)7IR}``bfcRdqI4VmIu*gb$HR_
zCl}e2bt}`dR$y@HwF$@%K2&g2s6%8`NIOY3l|v?4MI;s5(rv+nF(Sf^lCpO(EkCE5
zId=0(x$>K=FpJ<=;TNoS7RVW2Zh$^<F}JMl_uC*_InI&3N-^qQ-E;MSj(SP1Bk<T5
zxXi7#aM=~(eAR7db{tm!ayo1Z8-o1ck9-e#WRo8`Alr}5@YK%q*;dH}qLA!Lt!N2P
zH}u2pO3B9#LDwQd$v@Jx4J><Tm11$B3|4r0TxA@>&09;xUcV4+3A|w9S^aUPUEim8
z?Ll+(IDo2uT(hKQ<<a-O2^&FpIgHUYqn6vJ1xp%RK3QqIumz-VI@}|5g;0qb7TM!v
z?tQ9Six?fXTrqcUFksX6R$aXgT#EB=o%O*g+IU~ldPqu~#4`W>D)*{07oj(Cgdus6
zb)7U?Os2irxQ9Nk16>NW(Dqqknj^m{bqU*aBOwOqtkp=3q!ri?+N>enls;xzfj1A&
zCl>SIeHlX($DFG05cf7I`m2h9PNSvm$7(l=Z`Ye?`7@RY`K7zf+@o>V1aIkWM{dX6
z3>{)*&4CC`qqPrZyO<Hy9tuO^sn{dL4eMwzXVqD#h4w&C#>Znn!!@6P<8;!>CCzwx
zC|%;5aH1A7SQJ+<antVL5S3T?uw7a!3JRDT&;E4M04xMMAMK`4P~&AETUsd)L!6zk
zJ<2CO3B~Fo$GvIQ)X$I-fTI(q$hK#bBs%QZ|7u&z6ZuKSS2R~#6faWoL}~#a{%r0*
z<JeW`-8k={kLAk+pm@<leg$`v5{0_NP5tqnMmxUQ>3oL6<#^!+2P!S{6W&6Xn%>jC
znC4<c@}<UGDsm34P-DfK9bb``*0aEisx{XXfB3<l&E|3`(Vh?}#Bh1MJSc}(^1{YO
zAADpe_69Q%9~U4XaxE49YpS`-hHd6prK!Q-(m)458}pAdMh<}S5v&1)PD0&P^E8ah
zdbXH7tU_Z<xb9Zf+(|N`9r%95)Av$04MKS`7`?tDW!xDo1)euRN3Qn@o@f#uXzf>s
z*?iQkZS(G%OgyU9F#T+}wB&??dX>~7+7}rRGN;kPB7d4T1b?|~QMZ!`eeVrB{>!Z-
z!YNm+?x^JY&=)6fyd9)4M9+AcR~gi&`x^4%(%XmU9rw&NomydrRx<>(sCTdI%+oFL
zY+A&FkjP6+jK_Yc*zAY<VLxYpff8jAlG>Fc_z+1+U@tJ@GkvB~Wk(F<L$H!1OBXaM
zs?YJF6t&%K2+%{j8H59!+E$2G!qgo<mQ9IQh|9#ogja1f!9<bGppG;)$@<W9r=0K#
zPQqEO1Mk#5HG=ddUG-&oDFb;15!SMmu)BR6SshG&503%b20e~`Oo04NtRgjfMPrj#
z__xzo_kz$cge6GVi$cw{u1qN6Np88pwIu{~TQgQaf$Dy4ns`CgvN@^d^S5x7^jJ?r
zLY|QOE!BYa?fnK8Fb4?_F|%rMJLg*3*eR>h>HoDDfiq^bwvm$4$)xjCh2k25<(CXD
z3Q12AK%8vL$2$nkVUpWCzoGhndPnTS^2nC#kF`~}ozHmfR9{0x49W?|G*%A!;C`BJ
zuj|th<o^V&22h%JyFh-$zPX&yW&P{IDDeBqoPEk~$#Yw3adklDQE%Nx5)}KVfj@oX
zja4~Bj4er012;{<=Y`>UBIlV){rmCIB0&|-M;^o<_izuoWv6-g_59*ET(CrRTY1%v
zH3a*(8Of6zA!epcs*kvjGiamHM&qwU9pSg+?KMsfA%W5<vHD8(#0U5Bb^es4wStM&
zBE|a9i{%{2V%1m)&cc&VEcN-VD`MmPdaT<jMcAw1VXw*tl|2io<K;^{2h0D#l*M!!
zUJ@JoU9dj!K0C&dzsZ}B#R3%EdeM3sadMz3Kwhr1TC;F?*}Hx$+8gA$VLxUvx~!$O
z>y9A=15#T-q4pjvS?`EJ=V31zpR$xP^6X^Vs5?F|e%u6ncc<MOd9Z7G3##uLAQKYF
zy!s=|qQsQTTfxV(pxzR*($lcBZn6yBt=3i=BvC~tA}Y?*qPq3megA3MsV3~L?-Oc_
zH56{KxkQ7})o5J5rHzh%4w`pw8>q)B$5OgRJaK$Wx!SkYfqs}GDg#JC$<Kzpi@{Iy
zn}B21`OGwqKIsTu_efS?5at16T<3BlKW_2fPkZF;yHF==_t&1E*D&Z0mt6qHu9Srk
zDHm6SlPL9oJPIa7tWoK%_C%pN$AA%{g}sEU3(FnlzHL(!xlkRDEX(GV-?sU8e_*c-
zpavfQNj{!1s#N*Pd6jp>9JJ8gM)gx+4|($0tfj1M281*qWIGnw$;6PfRw{1Z*GSOm
z&rwp_>GgIol|$0v@qz|cCy4Z`JsHzfQacqNNS`Vb!kw6ttG3c+oy!oG=Z`_KUo$9m
zZ>Lkp1vtFeODDhGZt*BGDP!$tMl!s>oQoYly6u7U7syI%hZ?OM`?s+LGg)pWf8BZ@
zJyB4ETA7rHBcK1MX(843zgA148L29JfJYJ|W@ul&)WG&}BrfA4kCwk%xhve3<5Ie&
zytX;W`E6J=XguEMCiL!8zuK3^_p*%-63-NA*F%ZbsC3`Os$wXt^yI6BILkCPm+>Q{
z%|SRdtCqVNq0S7VI7uv>HbfBdS60${3C8=ghs@1{X06`87T5;@LE!!Tc9QfY4t~04
z?tS(2yZsxGix^&!po#r5YhY}^AMOcQOVdqf1P%A=mbly@qtYmdOBWpOrhAk>C9kAS
zojA9@dQ<2+j}JTr2pqd8-|Wbof5O2gEKl-R!7D~+AUJN86e>XK2X_`xd$P&>+gs5G
z7D6CSU|wcy@<n+&;AHwoUS{4{W6EUz#J8P14F-e-ozHx^y29;<FOH(CCib=xhPSH&
z)~WGP-Mrn2-8e${R|@C#1r6D~wAatGV6eEpQH0v5+cPg`7>jk2CK@`oG5<l-{T(Nh
zw@9c<rwUl;Q(3)Po8m}Yj3^+=Fd!4=$m>(lE^UUSpQ#0yF_G?dxTjhfwEk(p!R>4W
zX2xQtH*X4<QI?}t^+r9|I~r6C1B`a}Lif6KrSr+%6vml2+QNZ(`n2lXbix;yk55j2
z;?mjd;H*0e-QTeGu)VI~$2>dyC8*ToGpH%&citGsmKJWZs<rEPT^sZp&C2C_UD~-u
z0ckEBRV<DN6NVy6Rvp!3VOTc2sbo%wn8^OvmQX9O>AE=ddTIx{UUmr9^iJTxn*p3e
zjygnk<Ku>r(JYq-%0<k5QkpBGM-lRq_+kX3e5{g3?qH_a<P@1V&3?crg#7-38My}q
zfG31hpKw`4rX&O8{v{0C0yQN2lvu6a94aOCJ|0fNh^47;nRSDmq%y=~hE_?|h8n4X
zB8apwX8Xl%I`(rU0y3Yrn|b)|yE{|NbjIhX35@BCWl8zrw1wS>_4K%G3{-R23p;!J
zc>hsaM)q%cs?$L8pq{!~ud9zR7MwE)?9qB56_Z11Hqw4bmJ{0&AXV;7RsXEdT2Z+W
z(u5uNW`~~JVz^KJTv1idp!B6gFSt~JIs-;wbTcpE=Fv|^R4{wz!a$~%CdAnMYNZ^+
zi6(_%B%V<9O)gvQ@(nH8oUI}WLqu_7UplBI!EmDMTiZRg1#@x(x$6)f)8j!Cv(L-G
zeIYaO9g~mYG9i>)9{!@K@-_z#zN5n$ePXnJm*5cotLq(J@K`EPei>y-eok{_o0+CL
zyJ{ZN?!jhP;h^a2jgD`k2K&IN%<qk0Y|r{>*ksjXH(?!K`Uo*30;z}2!TJ8f%Y6xl
zPv|Rrh@#~d1QX!UzW)`%joga=Yib;((64X>OxANjqTVVz<&^U<=4Wh2Uyf5$b6?+G
zV+p{472zdi%m~jS+tVB9&Tac>2yYIs`bi@gZJ)GXk5AV>TK?|N7L*M*959e%wqmga
zUbZ3Y(UhM-A&SHk3hMNUj^k$Dk1QKA6>5M%(n{C9txU7P=BxO9{&k=mMvp*Ycfhh7
z(ok~Jnix^6Cg{*G{krH%1Qt70zwQ%lufXiSu-o<wv$I^t*RO0{OFy9#P0wd1O_S^6
zZrfI}hUcEpvq%rh6vG4YQyJ~Ltx-L+9vMy~0x^yr>PJ>0(Z6JuwW(aPtfIAP*-1B9
zMkARV`v2*QXs6ZDF8in&K-Yj%?bC?=9Z^90U?>2liw9=ZNkL{ii$0=5xt{jno(-$w
zre@w0w1eFO^PK7NR~G^LWeV+3y!lC=_RqpQ4*dI>wLJ??Y@TaK;=^5dsXTJuYoxxG
zCFElo*S(0haB1i5!jDry#-{?Qlv`iX<sQIQy~n#Odfk4jC^G=5eOG@Zm@}zGbm*v$
zms<Zu3_2#5XKd$-B1tZJ(g_+};E&FU-IDfbr(JM8cXIA3L@x>YjLk`k-NI{rT!Yhl
z@b3W7OJ6C_s*na@D5pT>p@E9y*y$jkJ$!tJoz(vq2();jiG;zSgbn&R6S4@y{D7T$
z_gqh!;%S==YD~%1WVNf1v3>qSQc}J-|DaLXkU%h-k%tF`1_lSEYuWY+A+2%L@#fWF
z%-YGkf>~y0bp*cqc3Yao#PG7X4veIcKGqfk9HESb2sB=eI)7Q=PRcB!RtYmtZ7bkZ
z0|_Q*=CBJ#j@YeMb`KkN5d4SDr_HpjV;SzaVV;k>56)}LZx!h8?4GYg3nv==DS@Dl
z{bx!mW&N-lA#^_a88W6|#!P4h^wFgKw%$kRjPKXo+SxPcYw+4c`iiuO_?v|0%eDc7
z`RPhhc@1ZoFtO=C?|fR5xq?o)+q`q<G8=A$p*?lBt@HK#l@`<h{`v<j!I3|IFD}G7
zWm2*p-6>(G>Ff~<!k|;~hay@5+V5C80=FcKMp3YIl~VBX0PPUO=AfsfbGC*8Z$@&F
zq?CxL%Hp{m{(vb{1~$ZgX&$da7wmX1^%)c7qy3F?{A1XI0U}?*7Mshxm}#l-0=Lz`
za5~t?3Ifb?b~^6V9GL=C9%>jO)#}2}V|Ad<Vegx`=TfYAay-6E6->5Rs<h}(UFf*n
zQ+O|&(*5D?crg#(cc07&HUV1P?S{u)yYaMpFFz^Lr01V-Twb_sd=!vEd=Lo!31Z-J
zg|qp3>gJ`vC_-+V_7snXX!IwM>q#HAoJ#c*Mw*E-@&Qia1fy&I6aG_!;llLRb;qao
z;_zt@l%^Nim*DPLO?}&ttG7$*@1Tj+7iP4Y&<2M74=elV`i!jHQE}8F)6otH^{zO!
zW&(5Zjgh>-=d_j1uBQau_5uOPe1DoO4SZkeb7?OZb)KEm?j)H;NrdLUX#A_uGUJ&L
z*@-TE#7V9*CeNqHPKNO}UU-o=F#rn0{Zs>5^KBsw`4y=5CvwPOy3$KoyZxfyvBq_Z
zB&~w|77IG^bdGM+9h<7U=SF@TnkRFC$Zm%5OK`^hc~q=Kx8W5ALgG?6&|EV0e?)?a
zUl}ZOH#BB;(WDGPX2<M0h30x;9=RpA$QGeI9wLa@N>|76igz&Un8je72L1X3GEZ=Z
z1pz`B!#hrX+0H^KQ%{&$SkDXdn!_OJFenbARyn_*|5mxQdAP0J*Xj@@%+4}Ls%p~_
znatacxbh_Dw@k4SfX9mCVePIDCzjsRg*x@a{is7u-*OXI^Ja4-hIxBE4xj)(K)}D6
zmN`xtq<w4W#6NQqt-4&d&Ro`GJ+>gFcAaj?Y$_3~gJzp0VtK?ZRs<ZlG>Ah68}#2E
zolH}%d5@8I>gg?KC76W?Xn<Wt^|Riad*(`fC$3$1M&=-RRfsZzfq*l=GmpW13#7G)
zV}%j4v+W<%ukL6~+_+kM-I9D(qM3EVZT@q3pINBo2!7usGZj@uow6p7!}S*tu5mTL
zXhVa$$VSUnzr1~DF?h?K^7z{n8yVPLo}J)RGNp|9wKZ_?jt7*ev{56^zQ`=$jpf&6
zV6XxgI49CS3QOM`@!)PWE1g98SUth4IK(~wXIm`+>tGZnYNPolZ3jQBxTVszfJ!zC
zuBoV$c6@N-ccQ9Fc$$6lfWoNF1JT2I;8$wMHHg8tzCqE4qRGgT%(~{*Tj?kMLV5M*
z3r?+RqXLWAiFKJvECGqm!0&6=-#j?)@uyQ%DivogVgE4TZ~!^LJ`wxLyjiP9AfV62
zHvAOwW0Iy&0g9k=ODueO^rh`!qfOWf5<4n>k-{v4mvuj*Vm|d3LgEPnT9_D2P2$oj
z4aLfluL~Ag5v0j{CM+2q59QSZc@-)fY#Aq*SJBTxrwmKGUk{5QT$cxZ$QSm)bBwq1
zu9Ug)uZo-V9dnFHZ%4yX=l0NB<t@tly5+<6I?RQ7i^S3>fJFVt5pys$;4=M#dA@F*
zRNT~7qurx>Fy#m@;MT(Vw(FVrH#b>)1k~l<p5m0EiN8Rf$?kql0DTit4MK$i=zXV(
z0Z0`#rC%uHv$?kbg|3G6mzHJnn$dA$RbA!vp}Pxh$L*x6&yW}X<c)|aRYuuF>FYPl
zLYtt7l6m`_B(-v$-jK6@9aSu(CP%!peLPrBxvZFcF7bgS+32a=8uCKZRI=JWaE>r<
z?7TXGHD!iwI%-wC-iLU`j>uu3d?gNgJa3<zve!3qHlhZ3$8vIjuT;8DVDOqrCRIJd
z%vnt5uUtaOK{gr&J7fo11;fxkvd5bZH<!JBnP=1)Byx8m-!tr$`uqDSx8=1fp86|*
z!z&_qta<T}akDvW?hH|d%k3Pkf)IB+a=>WQQ$oYyQR+7FU~!gsiHUPS%Cqr=NJ_mI
zOv5H0chI8K{xH8&?>6)Rc)5LZYGkXZK~Ki^JrzM>=3-JD(I$Yo(~)49lCN6|_~&c#
zA(E?A2Q%sjN<SluXd~^XwA0FmS<&w-r<)6RkgLeA^`oFNG}!P@e(O+|hg+ze;j+uo
zUmNEkHnOp9Gk^VNTe}>>!<|DHTOZ6J;5YWCvAaDsr=&!Yf6UeJ8WhT>J$+*Kp`R6u
zzgNf+8pAV{vB+KfY{P}>>oSBYScxG&o&Gj1`6<bFe?5D*-1?;SGeh<Fu-+BuSdm*p
z-N=`c3kq{V7mQGBC(i1{u2LWD)jx=^iz+afV$h8E<{(ism=_0rj3y+(CDT5)zQ;Su
zr-DSgv!tQ5_bQbhck|akRLQ-L?DE(Ah6z9;E7kuq1_weP9urOBbqNLv*r#y^o7#e;
z`;pvG)A-Ew``&S8*m?-i>0r5Z%j10I=r`@Kihlm^krpev(RoGba8i+0Xe?ZGod@$f
zKjB!fDXPE3K92)ekL!CaweV3ZTaku}&m-X*W<diQ3a*oKu>NEd*piwjJOL43eH+iL
z^6*uI=EjQKDf>@fxntBGp44CC7{^9|_yYk4z4(Cm0H=+gs6A;D6BsFkgJQw_IobGs
zs3Y#`^{<In2k!E9C4i|~0pwBKq%iBX%(@#byIU+amd7<w`F}6NIj9dXz%9kOS7XkE
zhgagaBhN7##zMp|J|b5B;0X>{@=hy{uN`a)NPIQN1wysI&PZ0J?J(E0#a`}LR&)TI
zN=A~}mvEQU<Z+l7)E!64Wc*ow`2uT<lg7O*LKLmAde@iO7<?=OV{DeHUPBHgU(QR+
zS8`wC%Kon}LP$c!N1q3YtVGfP3{D&9$t^=U2%Vz<IDL%a%C>goUTDxKambB@Mxa65
zbyci}^AC>k!0-5TXM?|>YQdFDF^>HpV>kCC;-nr_xH2Ku4Qd2(gUdjpOcD4DkI_-(
z_r1eItt3--CsEA9Ixq_^qQ?;2)j7zR?3Uuy7hbgye>BY6XhH&y#+Fl-;Wcr%;-mZr
zyt|A?%cJM<DgerPJ_MZ$R0*Oe*SZDWeb)=cbL}_(cio@M={B&!cz9WR_Iqa~!QYB#
zA`OiJX9V_@{0-^3BYjs@`2d2-MwxW*J*qnU_~v9KrE=C<N0~n{7+cC&#Yn@m_V1r4
zlVE|HN)G2}XNhx3(ATpA{?HM-NbBMIdsoBjW-4L?1(QuAi*Nhrrj%-XCJ275r$a>A
zzGXct9AvlCpSnX!0h8APu3vSnmHz5KNN|i*=b{eEvCFlmC)+?2;bf&+4`Rdl!cIjc
zx@OSnyR?V(_xVq}m*Y;`K9EiIK5c5Y&yA5FF8X{P?nVoq960d)3mPx=LE~(8s)B5E
zeG+Vk4)7<)On<H;9FI6OK#OXjAKrWn^??CF4UKqT^bQCijQkTP!_)=v&tk*c<f!$S
zIZOU*OrQF?po+uhwmVE+p@eF8o8V|V+;?*d+AjI$jn$-VeX}U|?l_sja$Hyw{S+JK
zSstMWTe;bIp4sy6*qpTFKU*W`2E{#=1|}Wct+*macVXtcJ&wOo9FvBt4y}t=3${_8
zp~?<xSZqQ4fSK9@?NxK}SOkk9#TaN8#ACAUc-RX+9?E#qF+n5{963xESn2tvs8+Yr
zB?}WlkRX-5KErRZvTwS3MvrS15xlfxrqgu9H#QgMRobiq6sbPOF^IY}T>Yfx=nN8J
z<Wq-g!~Z1UDZf10mfuP*Yh7!KUd!<z@??N5XOtvCgw1j$ju+YXj06g+x0IX#W_{1n
zfd!nxo6{azK*&k2wDw4Fp=pR^r8~|HyX%uEYFwsA-t8gBecoCZn$v^P_=H`mc<d46
zk!85HU}SlCOhLi&V^Wu?U7gueHkGGzqEK^kmAT80^h6*6Uz+6fs|moBy7$`X+3>5b
zFS*_y?2a|Su<YtCaNDKeMgX!QTsCRBlFA^K&bLu(oUte$gkX%z<cV0r_VpsL`IsMM
z*Q`kNRD@mdb=;xbqcamV=|LoX^c;Y*gvqpE;$Zrp>rHUS39R%kuJW&4gfm>w@^~}-
zJ7r!t?9pioXg_nmzf6;RH<I@7{M6vAj^=5Q%?$e%Z3?4Pnu&as28QgRQOT;7P^0dz
zLkvuwLt6#N$(>Q7sPg?9b1YDMJg8sCJw!m~oPPyq!L&s}xB^?fz7^R82vZ3kVwgL7
ztS8m}Q6GYOQ@EDL1xS0{&;F@{5DyZj)$r}s6pv3Y5pRQnuPBC`nCSMw;6so=o+dC)
zHnK20NWp?;_C{Vo+Wl0GFj;v2da$tM`C^kkpPNb-*L6=Q1l2vmf#O9e(L_HU(7G`4
zGn9z*Hc4JkMVCPO-+2u}-riRv2cV9n3IByyZq8l$F@m6DO;LN8_D%oi{icLHMrYY0
z&3eI(p`ltx_%+yOkT%c)E<?YejEp?PjJX8~Mh94&<g1rt?ENt-%e(?RWKju+nWk(z
zsOF;v|6+^2fVbl{z+anLX>lM(KpGjmD@yZ%FmU+kg3akJ9yIK&iFzp}NNFO7<<Zf^
zTzcZBD+YSd+P@{z)|ko?Zbr_HjTvp_4%ATG-@5`u%`=-7`ukm2dI}2&x!c=E_$H0e
za>EphP6PxqlW~Y=D~3S`stW$@%0Rad4i)QcG8`1U?JyX}75tS=nRyp$6T4_Wkw$O}
zY08@kPmF@TSED6bg80-}^=J2;no8}`vO``0ATraL{r@2bD*{STp}UVnjJScXf8lJ2
z2}s@93Zi9)(9uw6heTZ)+7J$+C69~YYZ_$XkO=V8l!VI;3QKaf3r=<_Yy&`_D_OkG
zL}x*hm191%KH|oOx?-D467YjfPzU7PB;k5uNC>3_A44VpjFK38O=4}~Q_}Mf(HkJj
zT}6YIVVOHIj20zMMcRMF-0I_rw4qMX53;Rc_9>uz2H)~WZ)Xm1Pof4t_~%N4h*96g
z2iYmpvwDHKdoVEsSMC=EMIBh7Fm}kK*H%Wl7*x_Eteg^D#yx-j_deE?1v1SnO?9(Q
zBkB1_7F{cnE$uzn!SZ8CsTZC-ul{6<a@gn@p<dMhXLE{4lk+k7vo!O?c{o8T%)Ci&
zG}a1K%(cXrB=4biV*pEhAlAKj5Lr+G%<IhXLSFN}bINN@e%S056w+qS%TKm$1-6c=
zJvh;G^=5gJbX9&utQ1k^O}k6h+rmlt8V(GrSw4q%{ZT-VQqO(xS%pYiS1--fDGs@j
z?U$xH{)h*bIZg2kkhZ5AA^<fQk5(N6TX-_Y=8`$*kH&tZSMbaN3(%Slsm#@2o(ow_
zibP1*zK`kXW%$Bive0+?`s&`6)OP(=O^&S(3&3U*;LiVSjD_h`105du=h%>G2)`z$
znw~QYs)QYG3{n_N^E+VCJ3d$bpw9y7Ri%0ThjzNzmX<4TH^|NDxnj%G^$36Rs+cBw
zrEpGTn@{c?k4MP1ma_)5O&%A3wE~1Hb0T0=1Hj>EuC@x+=#V`&A%rPPv+mt~$Qw0h
z4sU6e$UYf|-x20mW$f2@dRmLpciGsIZr(MS;1J4V=_xTK2rILn^t|yDay;dd^}`9w
zao<(M*fyDlN$Uv4TB<^isQ6<3t2;!h$fW+SO1GTjP4~Hfd!a<fhID14Lf6*ho}5L(
zi<m<GJ2Ruj*>Uf*;(|){#hWwcktJc0BK*Da-EtSUQ<%{D`NOLPhfYK%O^d!ps8Hbt
zE(tiF-9c%iHa%A8-L@Gw5G8_5NAn9?N!%oXUZl|gN1)Q-h*h)jO%D)^fa`WiGk~C9
zoZAvVFbNX_$2^TzFg<YK-mwRpErt_g%r`KGrom`}w|Y-1^DNAo`T|#T|M9mxt0*4I
ze^96`g(66&Zeqegj|ZF$#MqCUzR|O!ToJIj=^()j0^cFZ_;6rz{-ce^NAsJ!whmk&
zz1rpQ)jWFh*XIf!O-32&moo~QJ)9+sE@POt#!wc?7G1UGzc3sGC6`#1(L()pM4>JZ
zCn3<mP8ypj7tNu+H8bQw-DohCYBln__@oW$EfaI?(%)$We3+(;>K#L>-@K)|q(i^u
z+A2eybu|I!0{q!aIln6)_>&QuRvP&}j1nw~WU4w$;)SOW;UxxNCA-8{H8;d?rnutL
zvl71`hWG}@H2JTX>_yPi(8m$-U~nDM{t@KJveZ{k_YRr|mhC`=fb^Tp3vKd5+;%h0
zWHH&&3qo1&xAa{3k(--Vl}=@GNxX^RDQ`Kuzrq^+4(Dtd&`Cm1sD1f+zX68?+FF6O
zX{Pr<e|CNj#)<(|Lu?6}-Y@DUr*a|#E|$Np$iaQ%rO}O>mR$v5SS;?EECzh0anb3>
zjZbE9^-ua9w)S|Oe%v_;_5JE=NB?<0Dvu&wu_v`38q9qdnbOr@-Pm?|3~wo<m}A@N
z?cj&7(UHf-&g!ZXy6)03p=f!=l721Ht`9Y8Pt;1qRGx5xMcpQphW_U~5AA>f(bk0<
z>YD*F@yOxFXNvvs=5}N^FT<W?q&eV6$@#fsVeLPmkLkN4v-lQ6>2MQS&a_SiLv=S?
z01N#S5ni#c!2_=KZH>(cbQ5n+kktw;Dt3oLxF&=$-yU7POL(AG(I_9>2Y7)755xO?
z3TR!yKI4LyQk~n~{+$z4eNSN(SZ)V>%q_5~y~uer0*)6k%?;!}YI15XNY|QOU>+p$
z#LZl&Wsfw&c+HnjcMhcE&q^GF@##7^DDZeZ=_;U79*SWewxJp_B2>S}<WjeX!%&Su
zgWDQYSZg1EYP4l^gYf8S^7Q8{$UBCX)xP}9xb@QMo+;uX+eWled%UE{J4}-?5-x95
z>@844`%H=62J1y5rV=!cYFdJUDF#;(8)$ERRVaz~9qW904#9@-RryAn-$Ab6s(B*n
zV!g{_*I9@nj<43&%9iOiNk%MAmtgix^t+ZfzwuKkm3O}2VY&r+^ZL=a+Ufz+4$nl3
z`7H@wB|M&jWFT>!?`aHaee$+m5g*2_Aol*uKh$3Luk#=o_WkZ133_pC&D*90dKm#}
zo7qyaZH^|zY!*coNxr*PN!on0xe<I#)FY~6auBsF{APg%OnxV37DDIDI1q!Ix{V2s
zV+7;J=KGU-)ri@?bbQL+ARnGX6v7@_|L<{nrRYZCc0V%W>(g;#HpLO-;Y9)pqZf(8
z_HB?!K$A23Y!u=tu8QO|M;@qt&o{{bVqMk##hp*Z%7PcQO7cYl0_M)?XK>3te-8fZ
zReWy0Vp2EY%fLwlkztQ*Zu&21HcCj6p2k$c0$*2k1tOch4Q{Mvz@(T6{8t;~8!`ko
zf__ni+R?mH;%V$p<pS@_KPTu99vEE!E>|S6B3MlmSe>#|q;$%_bKc*J1m45?A&%E8
zzqjCwN`)Z3q)J<ypg*$bvpSf7lKZSd^u@TL02aJZDGLZ6&bpnDq@Jx%xaFTTrzDGl
zY(-D+u=(ih|BV*OK8aZbn+_ZSqJ{<wv}58}S9AajK;ofvuOSO-sKI;ye53MsVoI*l
z_eC<k!U;pp{dxpyP#q@`J$|?4KPUHzclDm8W82WBXb>y5L;QzyZBeizke7`D>UQ;$
zEaJ{!65M=yL<AlqYrW+g@ABe&H=sJdcv&<G%}AwwfKQ+K1`7osY+zb>*^kNI82NKK
z+8)(Al>^Du!cy6)srZ{qvGs?4zg*}NC%YAHS)bg`(4=PYCzzMj;>P^WL|}8!e9wU=
zQAc@zVSRyZL=ebMUqvE>nHs#-YumKn<sLJ2mD`Mkz|tt^#bAX|+)59>0RPau7N{GO
zX_0VixP)DW{0$%^%|oyFZ4ADfc`GJ%l&7<qmkOZ)Rpv!&eo#EJSfMD#A>~M8H8s5w
zX1zkf=>5-zpe%s>x4nuK7PJ(UVETyiQQ1RciEr7ZE;*dX2LX5?W-+BXtxEZD8+4GP
z0Q~Qd%ZETr_kO(Fs4%n(Fj(0n0$exZuWt<sZS+~rV>&&6Z3YeneJp+cptoBx?s}er
z!OFQbtuTO1R64tHnJb;{LC@?=^h+$jXdzFWxnSYr>Ep`33XxbaMS9Fm5;T2(=3*4N
zdJ|m7NPrJ>2DxM%F6BYRQ<$%>K@!wsv7f#W$Ghr*cCcZ)xk}m9K|=SaH7jHjjzN#l
z>}q}f+UgRkrVR@dIE@e$Pme!<u;Q|=gdzxa2NZ20^W5*3*IRb=cq~=VKPV@KM`=?D
zwZ5=Q+=Je|JdW{Y*L!v=?y#j4k#8UANKyitcaTkFnU<lV833uDdQ&)VY~W^zmt6Wx
z)s`swCkj=&4R1rcA*ys#aT5Oet(e(4pHToTnusHEQ9SAP=N)Q=OMxvMCoqiKS_RGN
z0FlkmB(m^AlLVqXs~XRQ<S<<8i0=BCrgD?nn(iJAx?^gkMPvjk#|z{T1ADt*D7irf
z5#oIP<-A_bn)j8hE3~4c5VaJqL{=;h+kZz;h9Df#R-qDEWaV9`L=bkU$Ki}m!-_g%
z!_02Es^--PF)(Ws61NZK15^sjk-5kwBlo;h{~(A{vi!CEH6AZ1F>AD{*TDSS$4>!;
z0bS&ML1v)KYd&U5AWIeb@L~d-t%7A#-28*1(N$NEr8CtwnbV2)1BV$#>3H7y&3I|p
zHMMTJD&OlH7`}3I&)vfA<{le)wl@xODN$W3#+lVYaH$k<Wtu+u*<IlI7ZfdHby7b#
zb@<ku0?s0;)5ch9SIKR=3;;_*R5_KS>@pPWn@=e9Onn)7(wCjV>Ik12r>6zf=nvN5
z#_&fmtAW5Ano<~e0NZwpf2sU{FlyNx<s;Nc^|>o?q=s007QP*WM`k0h7k+EE+f`K_
zwyv9${Co*Tf;<kV`+P#q!pl|6!5I*9#F#i39Bw7JPc>N~ttO^*``1#Ip3Ftly3Axz
zy$D>G-Mbf$F1p^NMju2ffrrQs3c46dbPw3Hha)=Xy3Kbeguw1j<uejx1z|mU$`#jp
z1}}q2#yFx93=K|~25^tE*U2fXBcS|l7_3eiWYCRW*~W|cOziA(GfVbfo)D$$Pp0~u
z(D(N%C-ef3BZsD`U@~c=={6M9iU6@?Yf-@L8pt^gK%8ixQ)BFrmZY*fd7+Hg__{?{
zu)sqwrJ}x}mZH0t7d&dxDlwsjH37Cf+*JZV`U}m1qQDDowWjmGG+7J6L?V*;9VSX=
zV9m(t^t)=s+tcV0g1n{tSaHK1P%I`ku@{OtAF+N0iE9LSkWj|aj-$f@GMdQ-7hPin
zfz2fmy1>UdSP3J8c%DZ|Jm;qod9J`-9ytUd{P6=}d2>LHE(@o4kpn9c^US`BI%Yh&
zDFk2G%pwzqmxE)1PnRj&D71>yb;BFI=p;P=J^z>+)MxIPrj*TYOVQpIYh!?RADFl|
z>^W8AlV?fxcwNGd;oP4T61-sie7;xty_O=wJz}^-cn88BQwes_Sa{g<!#jQiKV}Vt
zN;(4cYow7IeI`J6oSh86X{(!s?9a9!2KeQ{7+`Gyjv^xsLlOw=GH2zav_Eh9dEL%Q
zwgQSY>6f9f+g(LFyc)=oY}-faB16mM^>q0hjV2+DiqxrQ*kY`Ow@!zKMY4-~|A@yZ
zJrZtt4rn1(>f>57RLBaRQDPF!mNQv)<Xrgx?c}GX_!*t^)L82{C&-8-@a1!#Ur6?=
zUsaD3;mP?yKZS1N+L3yG39+ltNX$|%6cziF+>o^vrcf`3LLAAc{70cme*nL_yi6-M
zS_cO+&aC+Sgpr`)yS}AT-Ah8I;Ei5}@KL;%2<^IMAG*e#3tDb#3a+_<uj{&QtsgCW
zUUQTIo1-c;Jd#Mi$_;RYzJsfEz@*pOPbt;IUe#g?6cy=EyB#|M0~LoWr_jSDY&iz+
z4Ee>HHYw<oyq&znN0e9%c}hZ{3!->N0+V`D&-V=TTT=_$N^3@!{K?*-i$b442RP@<
zc&op;L1vk%1V*2BJMHfu$Cyue@v!X@#mEZE*ITt7<Mv?17yE~<I`vp93ZG%Us@dxp
zymF~0@h7~^`a;jG8lUwAqXvQ4Tv6BJ?M9acx||Qj^$}$7Vcwqhm+!Y_+UX~m1ZJta
zi6`ONM){ECE+%f(nJMt814oDRbic+<r7^T^eK5sf8?m?UiBda4`b&C=YYw`0Jgtm!
z(01!+sW)h$T9T+8Kg)g2b3Yn2i>La34)9w4Y_*k}Ohfgj>drJv0H$|?{s!irVOhaX
z)n+1zIE`V{0tp{9Rg~@7bD+hb>F66N+nsAG2Dp&oyV39wCi%k{_ign#G7(k#F;Fan
zgahJh62!l>316iTp^5Jv5*UdQqM(~|L(ju!OED+}`rzywIrgqraf_|Cm?AeI7o5-p
z0X!u`4G7z8kaA39Fb!v!j=ton_*ZL50*#%Oaa--g0d_eDm8!7Tp#e|yde4**A`@7i
z7_%Ek0p(G1<ML(ncH>O6UY_@t{eCSP+UXS~wLJzZn0C2R`#<;!9ZDE@2?SG^*dlUq
zufax8)?+0wveNwZicc6a9`Ql%0HOWx%gbCpppoK60D>EO%4d3U%(R_>y}f1+#%stC
z`U14LiB5lZ&jkotoEQSZL}3{Xi&WZsO2M}rT_o4%bW{Golv3U`euPkL86tHS<s~mt
zD$t|XvI2RoxA)anI5;t%K_(c<(}4)Dob@aSg06&K3S=C@a45fd1j3l%@~CK(oWK5w
zxyQD_0t{rKN?QkiUtQOAhJ2xn8)jK^kwy6phv5XI@PK-tIW*R5On1bI?aBY}mrRS<
zA3-EQ;cbw_xapUK(=GnWfAR7^7|n~Gzr6|I;z)f67q-`ZCtCXS*E`@3OeqAZfp_J0
zAvR#6g6rZaJ|O)0ixDYi#zxiDBlD-$A=!1jxSYt9BhA1z1CsIQ-3$UFCUSPvJBtq_
zCXc9r+KwR{F$+gSdl(L2kSIAe9|8+M{1;oy%;wn%#5Uk%=6bSob%f;mQo|?JP`y%p
z^x$>5&Qj|hz;)3j3AVZMf!$~M6%E1B)~(oh6;~t$@1rsR*I(>LCkYNx8FOe=(=bnL
z7XGy6C<>yLN}nt7`8Mk_dDZ9&(C_WSKNRZR0jOOFbHB)%dFgYT|B3$+OJljTg)~0H
zq?oKpiiP}>JuN@CD<9s6=BO{P-uy=4P{wnJb5L^}rV%%_Y`bsRr8kbu0~trq`JO^s
z`WJQrLi5zAZ%qQ%LsZ3i7TjBgj=k>`cL_L1>vktf8Oz3eKc*Bs%x7y&tR%9Fq6Gs<
zcYt_%t&>-OyJQ;JCjZH>FafkRBEa2e$xJVbn?0i?XmSf*T$gq^$y$nXp5a@A(CO-7
zEW}isvKR7LZja=slH3{IWFf%fb!FcnRjG|oX8-JHyo)GXECTClqqZ~WV+k-j%4CVn
zI83YQEpq)K0bWO+!nmouYsk%Xi2LwgF|{Y2?#|o>yH`zx&<cw?BdSZGh)I-xh9!e}
zlM<M2%fHd=&vUazQ?b|Np0kdw($q<ouUdq+IG1`Ponaj-PuPM59(jJ?7-HUd{?T}q
zMDe8U3cE<f&Qok3HhTcuSR9gIA;(XgK+a^dK@ut<=JeMWKj8s|6C*bEZr08gG~m*V
zM~EzfEc+(Z18Fi^)TSe2fHo`m6jBfb$L*#c!y~-O0`aa$W--Egi{|q;ArK;@iMYN!
zEftQaPH*@b3t2SR+V3f{lv-VG-(QJ5+6&AITPEhv)1K+j{B218?CkU_rLgoo1f~?}
zV8eBazGO#n9&l_c#z@lZa<LhRAzOa|&2>3)h>l?)i;Frh*MhLC*M%~WGM%{wjhQNe
zBy#f?#^2ar><Jae<<>@wIS}+P1&fs22xO6+Z*O>Ku#h_386gv;SSV*Uh&|yW(yM!-
zjL;{Lwe@`fc~N4N<OVHdG3S#)@yo43PFrLfJw3egOT}E9=}@g2jW>0@KBy4Jl6gUp
z)|l{kLXkmF1Kzj5#Fo%A2D5JtYXApBRtgWQY%*JY*n6x&%ebjKeELZXNfN|qFUVw-
z3VJKQe!PUO$o)Z4s(a&Ce<);JC3zW8dT-fuHbSUC{Zo8D$6h`b-h34-6<^4_v~p{2
zSMk4h`s+E!jtoys$I2*kWDpRG5%=+Mk^x!Ai=5;`Bqc-ANCU-X+>W&*a3S*wfiK_M
zoimE2EU!`7@xbV%S3HjsyN^ZX5nT6wv)key_2lBuHdsFtk-@s{R+yh3Z_%M75E;--
zNcxm#_tXslXs5Kvf>%RM5fxbBiOk{GQW?!{qwRKeb?DOQkjj=9dL2QvlxjQy9EZor
zk}-A~^uoCAp6Gy1yROPmJF+#XwF|;$gbvX5W)k~Ba%z#QWMH94W_g|H-T|ULmw}q@
zx04vS>GB=-`+nL`d?ssW4n)ldRbkx$5@WWZtPG%)iGeyieE&2`v4?=DulJj}e7Oss
zPlNxi-ZlEM<Q|4|S){p5RqrqSA9=j((&M)C#m<N3K@UcA;uyu<i7bCWJu@`WT(u~}
z!6Q+R(%FwKni!pp<7#!X{JQbXLN@Y@x`t8#QyTZF6+s1VY`USY;q8yvDN9XCK-7u`
zJ2&OoK*$<c7QOy<lr@VvHfj8u?>92O7cL3?2Xo_KO*6|OtO3q)y0sRY#h5%HFAjS*
zr!^H9na;wA;&W+oNinJK>GvPjo3I__4`KY^>xi$j&)Q6py)y)?%YK3`BP4k}pBN)d
zDM#)@#mI>gbB?LGckNg)@9jJr^3D4-r}LI)DQ+xMI5GFOoAYJ@{`-IVlqZ!uxz(1l
z!*6roSc$0M>5`n5(y#Szrr)S)<>a(|(_f__>RY2yKV1s${&i7{or2SOHiz41a@T@V
zRKKqka^uI5Zel$O1nq@*hMljN>_lDdraC4@(h3rg=BnB0&(7Lvgt0LIf5oOHx8e{>
zCRW0_sh6`mNoebq0)fbxl8;BwTq5BgKa$ON?}IcUTqEZ2S4-Bp)=pH6wHJb839|Ix
zAYtmEC7Hi>p(Czcv<jRFo)VW!`A_EAn;B+~ea%SSgKzo`;uM4t&7Xa00P6Jtpb%Vg
z=FF4KbGD)xO$Z#0f!?TvxSIoE5P<&ecSa&k_XWm)#&RnFHA?-11~{ZVove=XWM=Jl
zlK)uvM`uE63un#5YaPO_U~n4)4jb|QUrOl1R!$cR6x^cGD&&;}R?Q<i9L0SDVrDN$
zmou1>O<&Z+IY)G}8VkcfHflh(6yJOszjD(-@WpkP=6sH@Y;00N^E*ediB)hxoHA1U
zm2c|X4j+%Sn505$2c0XoPeM@b$i#5C6oF{lf05e^LE{gh)D4%TAFGp<LY#aal$u@d
zGsSOy<9r6eu_F8V&;w?*5=xHLH*#i%ik#r@NOm$%b0LMcAb^3eF<l-zD_rp}k8>EU
zDRxM8#+D5-PcdNu(`v<Q<Nvt2klOjiGFWNiXAv&V%2i83vC9zp37+xW3~S<Q`E7F2
z4>N)J@mZc-O1vmNJtG*B)%cWrS}iqgN!R(|mALjvPl5FxUJ~XY6Ggv^F-jqJ3>%U}
zT7afgSQyo=)9SN~bM{8x0zRmN!LuJ~b$5<<mH*8?#UDbm3@cwvk3WoJ*%HFF>}Tv{
z)HCPSA@mIOVoMTqEVKKOF%N<M0ec#mV?C?4%CFl@Rce#Q#RJQDpQeOb=}!dBUn?v4
z#Q`E+P3v!8kQ^Of^`~?;3P(XG<&x0byaluR5hFOutm_Q{UiJ@}^C*$KRZ>}shFgLh
zI!NzeYzL)z*2-3>w*%y4%UGL@xjTrqg8&qSdhX$y=aQ@Rd+%SZl7Q2!yaiSTzW{5(
z#ABBWe*#g$Zwy~O%%U(XHy%a)PngHI(>w}7(rq{G*e26&w#05$;rIEWWzzh)nQrp#
zr)XFeoyh!PPaAF<cU8_$=`Kd{l9;SRS6*g2N^YSEZ9OCxo?EZ=&NA^=5upDM5ZopX
ziWuXU9Eo9<vr|ex(8PLAc$LG<^lw?<BKmzs_t+})xU$%$UT&1d2|^gav7I6G%8z7)
zJVq2tmZi>;|6y2XVrkcWQ%a}stD6P`BqUG$iA!jxkM`H0)+|X63><>BQgKk_BGjz5
zyl{S;&Cxu(0TPDCiA{ONlmu45IG>A2(9iu26i9|~m<Mju@QJ2qikfDh-cq#vTGqI~
z>!>t`&Xdq0e`;m6Ea27kL1)}wW>T~x5fj<4tg$HviKwWwnbqE*L=JSM`fzyz%+Cjo
zLE1FefJi-*y*2h^)9LUw@%o<rB3%!dkZKJ7xZ9^?uB|zq81_wqql*`fdP|DL(S+@f
z)Au~^%*6xxNf~-sat2zA+)`rhRcA5OFJ+4gYSMX~V`nnbXQdSmRQ_DKDgy{b?eFfG
zgF->iFw}MrsfoQzL20ZVCWCc4e?D@pfmixpF)>$!u7f{^)O$5}d^7(P&PE_a!$Qv=
zVcHMPnB4m{$7xKU`8z*g^oR{OgfbBhAvONd9#(y>Bh^myL|TXs0N*9^hini;mho~^
zy~b>^PXJOKq2z*x28B71qg#$|50wj`gGAvW(!2x*SLQF0(1V1<%Gyn=PV}fj`=QKv
zUjyyq0CB!sFWbB|ag>FkP47==F({eeN&*xF?eE*z(>k8@b*hvZ&%eDm5=LnCdHlXf
znvS{)k}KDMDAs$@YLYxJ#$?}IfH2zv+Z&kRA;$J<)2J%_zuR&fet|PlT8~Sk%XL8X
zS7r6P`Z749WD$tlb9l@9`ot9n;v(WCvjIeM%gHPbF4xEH&sD|)2VuJx&h^oek@gUT
z9gnf}PqU-xj*}G250D~ec#_D4D)PEA>K-b&O{U;G*Q@jtl!<u&I_bOQGszV>7w>g6
z_R&tjE>`wy{Q)s0sB|&~1*RmZ238q6MIJwcK3NBcR962q#!!DH!gm8uQM|<6E2ccr
zRR-yz5G%Ji?fS9SI<Y8sL?1~X8CN67OM->l&!k*V7K)rSYo|qDD84+LcuNpDI6BEQ
z-K`<>6U!4my>0CpWZMA!_YV=Lx5{%1pqkpS3PU^+<QAs%+)ffGf<|nxnX%baG328>
zeVE;k^WvxL#5+G=Oj(Ke4ruigwzcnw2LpQQ(JQ$`2vfQuED_z0%{@yJu73umiWiPh
zGMqTT(fV^cQiZXUM5Ax|7i;l3=C=o+<O`MYLFn}zuIuAoFWy;@o#Wyb!cs~muPC2L
zs5T*`*k8f&u9`o=S%Za@aW1oc*C76^SuvH3kjD;&fwvPO9HJjx#K8+E0V^CuEBz&j
zK)uCxnHWjf$PhYxOE=CO60j)H)h8IsCouRf8G-+`cpKfk>cXIiXUf56ssjUhslRjz
zOI<LbYXAz@0(~p&z9F7wR628^fKB1u@NkH^*7mYmD#UBk0ea<WeGK1@md$_3MKSMn
zw`1vHHslFY#O+?U?7`!#)g+Ef!S}oO1_8MNcHdqE*(L7g_JcDT^cemc_f&~6=}&bY
zRhqXtpylDkY_Z+Nt{-r8&gW}X@TgoZB1a*#?Kr3IC8n{4BF`ALEM;z49Ay_<>#EUX
z_OAl~C}<mK+2SGjoZ$~PwWvXpI?qTDdf>V%ABMf+FnhQh7Hg&ZO)2I5hIlI;|M?Wy
zNx-uIO2Vi2PX@I_a?W8N><`VsD9)nNfEBAm@HOEtp_swx=s+cUpOeT+(Q_K`!)iEf
zO!=(>p=kf$mU5)(^!L7<Vg)%7?$pi8W7lRm(+>5q$JR!yCSw*o6~xSnT47l#f*QCJ
z@52I-=6>gg;P|O@^0Lo{faO!X$vq3kE=1e6lCUCuR?Oy-Yg1V^mcdFK^stgm`uIj%
zYY!|ygDTd@`ef2q5q<n}1Y9@dT>4Zp1^Jkr9^fjk5&hA=M$>F4xuom-im9@4w8d!c
zO>SdNkPN7;NQBm=)%vOjezi%h)hv>i4vv^%a!~VlWsq+6jh$@@^ua30$WG(%0-24~
zkd;paau|bnvWChYALtgyv$}9eaGE4=xm4^9DB)fbQSm0wsHU9Xy6Pro@ry1j^V`b3
zQ9%-7v;VGnf)d}BOXf<abg#k|$IvFG41~pbK<n#i0_5|XvQH(FpTh#~RC&utr|Q34
zgS|&dLblWNedQ<HTiLCrZ^7HW18+5w=umZER|AM|Hlw{V07Qbs(n&aby(gb!IsJG4
z|NGJ!lKYI^NII4ztuSYW)uiS>eOZ5&rr={bN+CTWwDs^yrjCS*M+}a_Dee};y3*N%
zIxvke5Ke){9SwSucn>ynxf{i!ARH8uWVMc_gKmeVC_a2>iT_`O@1UP_5x&1=YXgLI
z^gQU6+^IPbdF~n$iIcaN{Ad&!1IhbOn7uR13x0<|G4+J|H)~3x8KA5!g*Swcum}Ar
zCZv2XmSIYwuCdn)`v+b1GEWZ9nv1_MUv^ViJGx56S;(7<R8=(C74b7r@oTL!Yw?#s
zV5Yt1-OdHscg(BWWN!E%+Vs0GJ=em_+gQM-5XzY;={)PJx~GOGU@bNdlKT;IE4zr4
zrQ<7t--;jXAMM62qIHHPpgi2Ak?u#a&zgH=^8ROBBF~>){Fa`sf#+GsOFtxBHr6#K
zD{<kfTc`r_U&%d6ONEE=VK2gxcbZ|NOI$+VAj|0%+)Bg?w#&@dC5qPn=6iI(v>Esw
zMw919*PQG5lIJ9*=P86uz+V={M8YmrCjn}!o5&TiveVJW9v(iyyfhfnvjztlT&U_|
zsjs63r5ltODkzBqjb9mlpVX<sr-~f%wg7Ip9<0UBH;Qz@FKu2w>&hy%2T?6W14FSJ
z=6&HVN`>cvL8SvbfCxp3ON#aT>2XOWm4S?~VC_*O9A@C0DvT9ms5|xhVKn=jz`-05
zEzzJu-;j^LobJ!<`%jDoScIu}1RKQ2(Y1O`m(4!VxdPJB<LG9@qT0`C=+N9P@V*%#
z9tUZ3HP+wH5b4EP8}H#hpoTDNg;4-a79)r?LZbx$TDsG^?L%OmdOfS=tUqqENP+I}
zTOXDcWX=h+Vj!pNcw?GzFHj3YS^qb?885re$~_UA?=Hu-%LRgPvOjn3S=P4@>ze2i
z%kvfW3c<idQq;z}1J=?J=sOa(6cT47x7_w_m<+n&n#E@f(2`Ey#;fpENAlD$2*SQC
zMt&GPN3sdk!kN&Q6NQ03$iG6m!jKy}cK=*Dq(OjGS%7-D6wLxG8tOSUVxMyomP{hy
zaX>GP$7u@uvB&J98nJ7f9VeX=fA;1(R<#sTa@N<ii$!$E^qv<_)TiY@E_JME&ZPcw
z`Q|PKjoqYfyisl#$_|2#dJai9!@wy&Oy8#siJS8IsqSB&iQ12IN$njh<v`m7=KNJ*
z|C8;F%(VaObb>P`^(3L+nG<n29*qmNdZ{V+P-D&}+%nxrSp1Jb<zUU-{7vhOL-mK|
zH%CuU`i#y}5ICiT7bAu4J*yNwecNN8XPEFxM$RYeB&n>SrfRFPdPbcdfutq03a2*a
zQ}R{>7*vul7z@~L_&w=BYh^k#r1>6~;9GveO;T*|>6sf>@cbTc#c?eCvgoCkP_0dC
zMdh^sSDh}{-?T<3p+Y+cY8kYc0V1>^eGP)<!4*#yM5KV_nLtt>aLsy#j%9$n&30;q
z7f}R#a_2G}fSn?2gs~$1*pJ++;B(@zypc90L2qnNkMs6o0qy?=Kd2pY%&qI1iAD8y
zN){-)FMn(MFimI8KdXL1GQUUWae<gBUh}&?$LC^2&}x2OoS9o1c_o#_&AphS(QqbV
zU9Q$;!Yhk&6FMws(b?Wvl;-johfQX5Szb0Fhr}qaHOxv4F9tScY)<q}xx8_OBkj8`
zQ-(0H7IAXlX*wslwW#BJA(L@VvBhy-M;JFtA+y-I7lnSR*kj~|$#&J!#S0gSmV{!u
z5X~5bJ-Z0b^+nW!TG3%S2fJXjE=tyHi8^GsO)!fiSribLH}jvuPySkX_r`YI@<>mp
z0EGe`k>t-Mm^fQC>1V9w$E)Qha;vW85VmZeX3niV4la(AGt2GlVZHYweX8Q_Pz=b0
zAUYMywkZ^B#Q$l<8(dJdvq4+k?RRJ^C9LC%)_ggQBPCvj9ILd?#7cOWm5(qAag&8&
z+}rgnrsSa|hGdo*XO-NVhf3yMm+JJ)!?Xy+{V25Qt6OhMcyWh(;aqcAlCbSE+KJ?U
zw-NBD$*9<!9GZH3FB_|mb6+;(m6t;gYMG_U9AHPVg1Q~S?^VQCUDXb=DybEV@Ik!n
z^ujizjMEyoZfn3RdJm5&l5;g_KOAkzH5+E>rOOdBhIddHk@3P;!iOP_?U-yk_U-Rp
z-}~pSx4tXI+?jGoWJBN_lIMiG(il+-9)S-|<0-6aP(RAEXb2Yo<(tS(p?UtWA5P8r
zHOw002VzERG=O^6tIAJ-O+~U%38X)h*<i1}%NrNWzawC7fA{`ZL7za@N$R`f0?$#$
zIr0>Bp6>Jkh>>Yi$k0j3bkg--T*_-eBRG8WR@nm=djTEC2s5Au>^S66bEE$tOazfb
zejyd2xvNE?=)&5I#V5{SgT9nUW6024b`P6FLU`?wt~U!iI=kExQ5b<ph?uvGX)Sb#
zxdh7;z00d0-D?)SQ|XGdwG1)sNfS|;Swf>K_8AV^XJuC^jU+`pX<}?KOv<))aQ0@o
zw@qE?<8usev{V8zSBPDOfM><k1)w1*!|xOqCzP_40|6;X)2t}kGNg}|;_pvq66@h|
zSo{Cg_+!-IjWh6Fc?N0B*?j>$kr^;VSxjX*J<?b=tE4uh$nfNSR`208V4j6XIiSu}
z8GrX-79sqECzXd>!yM_pur(4nqwJ=W4l(s}qx9*UNy2pW#@5;a_n&}}K1JuP-4<Cb
z*^kZnMH{`(776X#dIZ~@{I)IICg`6tpi%kOA%V3g>``8KPi@1fQrjD;y|-+L4T~c8
zb+2dl;mz;)0P*^3yl?2sAo_lh%Jgx6)}*O1F|lzNV&ydDyds8;eN}ZJJTieH#uALq
zgqgiOzdl`Bw_BUf6Fv0nZO$h7;ofMF1_K^@2LmSApf}MZ-$1BST8$gDM)s$#1=vY{
z-lAT?vif}>D3RRcEXaIr7J%KnHF#r_?!W8vmRe&8Q)q|$<;&Ewrww!jWvkq>eiGm6
z?Y8%OnsA-{lj(hf5bd7o7ZyESp8?8?W_L&ot08xzHfPnZ(l6DWE09<`>{*fiH`*IQ
zx%#VNV&uxa@a%00f>b1!(bKB(HSL4C`2g$1i@H!NN>;%lXJ`Ltc;Uk1&MRb5w>Iyb
zS;BKwDl?5Q(FC_{Ncm0<{_gPv_NY!j{-$Jn9H~rwv*279|BCNMTjTsO(La1H?KW)B
zpCj)M)b_Jj6jNplj0v(_hk;_2_Wyzi@v+csa^}@ZEdQkKn(Z5mn*s$mFA>vYfJRWF
zh>wuq6=GdCb+%)5Wo|%y{Qy*-<(H9f4JX9}hB<kwI|WCo@cD!ql&)<8Z3A0^y;e*H
z_GeFqo~xP#w1(>r6v)j>Fl94jZ9Og5nH77)AuVJRNnu4u+h1>}O=i@kwF5BJqGhAf
zWZ!on+QWcEMJV9^9T+~^r5*QU`>KJj@j!04x!A4}bfT&AD)^YT|K>C0r6<Ui;=e7a
z)8<8_XgF~{daZ>Ytog$-Lj2y6JLiza_pZ%UHiRd09SitECEtru4~3jk%A3Z~Bd5N|
z-3Ire9zRwh1GRIF^a?W56C}mj)LP@Qt#L(ChA2lLT=>2x5H?ezf_CLWMVjD0HPNH?
zswl*DOueDjRf(*kiWvpxGmx7@LUl5pZz3(k8hHUJO0RpWm*QM8jrn{;W0G7TDTiIn
zlC-To^=KMQa^Z{n|2~*FuBiV$JCR~j7pcTb%EYV=rOH+2)oY{z!k09t{7~LE4pybo
zhs-$qt@KsL0zXY=VcF5-qH!xS*q2q{|EFXEt8wJdBj5rwjb`{Ch1K%9>XB#EDOMta
zV@Z6Jt;KF;xtYIKrd!|bRHEffVTGi&<%Y+LGKhw2_RL|32RFs{lEZ4U#!&P#RYm8c
zXR6}~5-5ey25*-(#;KgXU((4?Exb*{9OQDtgpPMJT7LIsA~;dqIFl`8{eBzAre&e&
z1zkebK}NatbMaxd>Zp`T=)K+YH(qkDeSkDPyEO-G!a3s4#s3pli<^Nml3+f@Y5L$3
zOkp!4pC~VYSYLQqS<CM~?m;8f70nq()7f(o$?Vdcn3eOQ=de}R3f|AZTqWkjxODB-
zgs~wjgDq=exLzrCmN_;zh;(gbd<IDv{>~_w@2)n2-^K9m3VhF4twI>+E72D~%N8&0
ztEXQ1wK=v2DyZ)@vdp6PYRdiMPvtaFy?zzKtD>G0(pBWC5_Y}A<ZI|+gdo3mSM7*V
zZDqtRhI0B!P!3yJ0V8~Q_dM1BT}a;*FiuI;B-D=Hc9>hF5N}+$+`$s0g^^)x2%H@M
zex_eYdm;!GFdp3+r?GV*qA$cMH|$Eres<zavG$NGCZ?A8)39Rnc%_sjx{!-&TNstn
z#vT-A#7-r_!=U!1UUlHkL*d@qw3JggNd6)=D-B<}Jwsss65t`g?R9gZc`N0-%Z&HH
zo1gy-p49;B@w7N6HCF$XHdsO7A7LB}eNA3k{q8)CT16zlaA1((ktL8n(DLY7DsY2`
z7xR@xWti6yRMf{tDM#0X{=;1Bxun>l7RO=#d~Pvi{my7xyDnaguu*3%hga)DNOjIv
z_snwnM~Z;@09Muh{CO)L9wIdb#YmLLfl7iIOrk9DvA1`dd;AZFobP>HTCWAJvCj#q
z;28KTEO|`DUL#9b$?AmSY-Up@^@U!i49|??9Z)5<>YfJGuN@XClNPZP<g9%NjD?ZI
zKmOK)Nm8}t_OM#_O3bKzBj~KwSjst7truipN;_5R;c)l-GHcq*hq+jP21f~^7a9$m
zM!GW9>A22X=pS!=@tdUjaKP=|_^}?ZYQ|)rGE9^_&nW}hM31SOnoOpw6&Wge-*+<`
zZmpwm^$*ykEXSX?ZKoXmXd>AF<iwWHQ$5!9R>VxBJx(BEzqi!mrE&p<aIx4QPA<oD
z*=QpR1X1cf*nUHVR7PVIo7=dDK)Z!u!IlZD0ua#ikJ`fqsc2sKNALGb<d7eAxmD_-
zo43f}cVp2MS>SPqTsLrPL>O~B;&d+2Ux=A95~Z-0MtN^UC--dq2zxn&2032aV_<E(
zZn2`MSO!xJ2W?X}p`6R1AmO-%#^_6>HHFdSvZn4VL;6Mf(Jq6S6~)~5m788PwWWt_
zD&oK8&*+r4FPlQ*!e0d;&2HIlG{q=$79b6C!4VnNlZg=6H>2v^iYT*~^s%TvCDAuQ
z>~v*QZ)PXq>0mG5*_3HZcJF`aWXPLnIU_-YMI+!Ou%;tf)jr3YAoVB#$~ZlY2|;}L
zaS_V4%Cfacd$Ag8LvFqnHXe+tqaq#jAR8mlIXMZpt_m`6pYMo-oSR4Zua@WkbUlAv
zWQqLAH4F>I97+-T4JPzqn1xb2X%YCoNM?Gb89XXj2wWRzi)QDn|L&7O32uDHk!rzN
zael?@fAe1I)6HQyJBnFT$IDdb3bLd{i=F~;Upj$F2jvNbH3s`s#2mgppFG}gVP(oo
z)gk=h)ik3H7Ixd{kXhXfp&#vs_uD$&a`#Tq;l~N(1lHbdO>JbhH1K|0t>TfpZ#0v*
zW|uqU(wb7J7X?$_UcLkLNEYDPXgdal13iI3(dLR6N)T^VD5-rq(RAIVa57~rQ|tr!
zjp9#wVsA@yQbDWXfg`#st5M_eN67iczS*;&Si@2t2PKmvV{RMGVIbgddF!=8Ct*Cz
zFaEaXo)aMy-X8Fo5i*?aucV5z-u6Cc7%9b5_fuP4Ii3b#pp%oIND@|Ri;oS*w^8`T
zQV}Wzz>wB%lpw~?#|Hl*sm)B2uFEh5<I6`eKWN<EoSAf&sFCblO1*=RFBCOF(eDJ%
zpG?P72bo@kmtm90{=)bDi9g@g%s`3p`WCk!NADTx%zLl}{{}YU>0s(hR{Hz4{^I)&
ztzjC^I#KOk2q`>0JYx6>@CZQSt<E`MbZ&L;ZdhX+{2k9S;T(cU!0OLsZ+4sVUFb#`
zjJ;5*D9RJyzUX?5{GoVvHNx9m+F>A|NAb}UGp+qN33X=-QYA&-<3J|~K%*xy$~@48
zQIWmlTfi^Df#9Vzy>6*G8L5VuweUjqii!t=)I73>riquoj<<YkzT-9U+<u0soC6u1
zm!VT?K^kV><o<&hM5D-Tf1J{E_b!-h=}3qV!fR6$d;J#*K`YWIo1Q5T4p>uB+y;J7
zx>)f2(}4MJmeNphPuR`+2I>1vapRSYM4HVZH&zwU%*`+9AVtzVfv%2g<fQo2Eqj5w
zL$f}@+X<`T;MdyvKpI~8i(~*0u<@dSO!UQqZQO-scRS^op-WiXet~}LTF{^h2{?ip
zrm&9EEN<5YLj_-~ZjF{#^m2f=UMN=ITFa+9bT5@@aL>IXTZdMJJkz>v<+DJdP!$E`
zh4(hcGxSPf_O%JPi{@U~<JSIEk<s)QqRKsvhrW>lH9#tKmJ$C@g%a^$%8kk$`4w@&
zv7tfu#1?Dx5HbENrlcLXej}uCI}VF<63-YwT36(NgD1L<=XvE_F;~xNIPSK8f)J*(
ze(5XFb!&VKqja)J1KhEvM=ijWY14pW93(Zo1VX#J^?7;HX-48}TDrOiO$nwXzo9Jo
zUI^4i<NqNZW6qe!Z;k*%K)k<+R6W<Fc8KCGp2kK5boApB!r-{wy=$gvg;Y_RQWaM#
zYwh*0W3H`*zkT-EX%2KoE#H?tp5FiTV~LyZSC6MinjK8vT3}fVT-Exc7N={N6AIyM
z-(1DAylG7+of(GLwcLqhW0xLaM@fhWYGVE=09-l%M;dVf7`cZWhhgkd)ld19lfm4r
zEPUZ~tdn4Q@9T)&V!?N>F=<|IONkx^C&C6iQcP_MD?)`f+^xkMXJi03X@Y(?ejPW<
zQF`=fgxc>NIij%A@#3MK5at-loGshjIUY<<17+6%v&#_QBo0%#b71PUl+R-@o1rh1
znVZs32N8WOhsn!LIVwggzV^husT|XRaH%m#sbY-=8bi333?X5h`<y(Y=aoQl6(J-<
zOk@MV<;aR-xWwZ2=5-3~!?*V@JAG_J{Bf}_!GxB61XKq!mtQ1XO2r|vIbb%v=Z=~c
z#i8MH$5x!GB@s<61*q-W4lXLnS#{rey~Dx|n;D^7^iMa(@`;hUnm%-q|3WDMSLl8y
zhX_B!$u{N`3c@eRn^esrGGs)kcO?_awp?Su=LOxCeUjG$zrhdhKEm3WS{WPytu#Pq
zJDVXj*c<{)sO1oHuGRkeV7`puV*Biz*HPWV_oxyAbTzNqt5CrNnRuq<L+s+L;u^6f
zh<^^m%<<jVsHUsnoGWm;9K|o>`&Pi`(sJ3aO2qq02HYdL-1TIYW3mR}vFOKOmL@TX
zWKp2_kf?y#xb56^o92V|HO?co<c04xO4_4ZC-YLrZhkDCz~}nyrYI9ea_m%GF%vP`
zJ0}-0+&y1Ce7l|Ky~RDie-OjfOt|U1UWBuwZFUK!tLse}j|!X|Y3}mFhMW`coqLBG
zSY{}2u+&#}uNQxby<y%gX?t-snWG4fMMj)#sY+Q7(A28FQPi@Pq@tX-+{5vN>f)M*
zL~(<aPA`>Yr;P!CFlaPu*%_dv+NxEIJ7`EMV-Q;|a}G+yUW_(Wo~lUtJ7HU$X;ors
zz+Xn0*U+(;iCLv>UH5oGEAJ8t@newhF9**p0E-#-A6j@QJrw<5TbcGdwe%wEPK*TJ
z67g+O%HDYXbRg#Xy3fhv%8Zs0T7=up1ZR{rN;Jn%W^=`fJKHGgv31WG5Xt~od>{YW
zrN=Rl8sGi#^$sysZ-8~3FXipOhy`3r8_L!IelYGd2xgos!51~*y@TO+VnP|Wl->WU
zRB3UYI%KMzcZqLh3gnMU#$Kjms8b;DH2;+G4{%i9z+DGDH9pR1{R*}QjZ{jS%8|01
zof4#CJA-9mk`e@*zp}k2!A=agulPw|zfFE|XNyKx5=a$ODK|k@TpIxT1F>Y{U67j$
znWm{Z{~&K@mAb-fx`?Z@l{SB&MCgLnA5Fs#y%zOrQIbxeG-r-AKmLYO$>I!fTrwV+
z<IU92EBO$M#H;O42aAzp5>RX?sWzct`VGjounoR92PuX}%OYgryHJ?S+!%5vKeacG
z8HcLiqv1nhTn-sPCfjAfNA}Br2=4Ww2CX!j^Se+8J<_E*C4&4!q10vXz+gPg)cbmn
z;LK6fZkw9!$%W5zYI#i8{Yj%@8!CC?$F>RJ>o4-~=o|WfJCgTGvjAE@!{$+Rqh|P6
z^=Ssgpl2ni(4bGT)gp&|as$KOtywS^1MrGG_gtfjN6{M*i-U8IXPm_9_iqRLL3E<Q
zXJcEdXOq*Z)jL48?i6jG308)Dfv}Q}a}ub*zdd4cDyhn4+Ar0f+=!lUVQ20AM3`_X
z*e2REU;1zh5v`B8aD!)SWv*@kGjfg1_f;Z?isZ6-*zOQ4Vz$d5K@Y}ab;aM$ZR{u{
z5hy&J&BS`{I$p7^Jh#9H?vk}40z9p&s$_t58m=P;266_=MS_^DJNT1@#BP`(W+oq7
z0`Jv8FR-2ce+>EQtvU5n)z(fM#oCbv2@FC?PcA%1+N;;(T$`V%^oMjtUK3ds%0fcA
zmB~LYmw^KO;d02Z!uU*^lM;$x7nu$Kt}~b8gM(zsx9y=B0gq#$OBQdU2vJJJQk8fX
z?`ACSb-(kT+9|6;^LRLq_HbnChB+G_T=9PX+`CzUDf10&tE_sqzAM1MayF}#hIj6U
z8l~`-i29$HF{eNsh}_6sweqbaMEM>Mm#754K-Q@;bqIZ7;4JG5yP|(h_O7H!OTbiz
znxV;NUS&-4+F$P-k^tXf>5#eOy5>z}f0_;}DwtML*F@@3GZtG0Dw2HKP#QD{1;Cc2
zA(Lp=_(11S2i(mZuW0Tkgi8?l%luue1Z?q{tORjlqP10e+%<g#&ku!&UbBT_&i1go
zI~ci5N=~_H2IW*vmuH$5e8@c9tng6}jB59ih6|qXPm-N}$QL_@y+n52VMBN13Zzn<
z_%<lOx@I!cP~kflpRUTaPEcaFG(%D8)*PpR+U%o9Pr`U@cXL3QocgSGv)~5{Zlt#N
z!U23T#WZlqJ&IX~4>m>2*981`pAcjp+Hu~K{bZ?&5%jl*44<#Ev>U78R40WGkc#zK
zfq1`hZZt+dLq?sk*p6Ui(o*)r7rEi+DmZ~OBNV=4E*Mon^oHZOo?iB}XdwAE3|HZ1
zG0Y+h#|9;<zqD2X<R>1l6ywS`u<3_sg1Py7Ea8m{32yq=s$|Ck%6Bu~rKuw5_CM(_
zZgN4Sf`y(61b3PxeJQs3n8TO*B1;Lsw(aN<sq3>&Ks0t_$(zQn00>p^%GNfO1)5@S
zG0Fy+ROu%>C@9Ff@4{V`CewxKK9qArGtOb2#4?P(>P!)0!$r7YVFC}~<lUlYI2+M4
zw6m&l-Gh9!FseHg$pJru|JX;(?P8Z1e^6~_T5NGs?Gat25~5JKs0f`aE|h?;%>>*P
zT8HVqUTdgBR@9|0RgZ1w7g?n29!<PiSOy|FX5GNZJ~*%S4b|L=gQSx(_%ejd2f<0a
zO<k4hBuZoT-|5A4^QvRNCr0dWM5jhit56f2Tc+zZZM)KCu4wgvCcbt4j4f)6Wk;o}
z;p*s~Q=e4F-qSXHcIWed7&sgq%<r5SMX2aXM>T`&!-jie#NuOsN7o!?4fhTf+Q630
zV5e$ax%^QcPz?a>{zfSwD-!<vmenRjrUp=B<1*b8jg-90LO=vU+7K&kbK#eB%_)mH
zI)yU%^P5+sT-{L5?vE%V2;CQ$S5dVAAGm6sfT*o51{oxQ)*_T51<7(-@*4PBkSH>i
zYx9kt(fE`bi!?JnO84kldmetp9pe9Xz4anW?`Y)hd3VxeVPVqgCG>2mXYsFvkx*#V
zl4<>Xhq^h@vdQNtycw2hTR(WBtvAWGE@xLGoYY{x8dDGWrGTu;@7jY=xOol=RCf_J
zWfbCN$=uYTk<U4#)S{TN95+r~D;L|Zc-2CkI{<l8u|dqM^2cwC=ae2@FTQ984<&OG
z@zkp>7|h7)-6YkjBr2;x%|pkEOT1s-zu<=ex14wgE<+1k>CqNC2dTjHxEs(`M}tnP
zvprbi`#-?x05=p+(T|ZxSB(v6U?yk@1uHB_==5$_;XMmA(v#RTjJ_<aomzR#u^-;%
z$=(&%A%it|GaQU6jd%g=LeoZ_)GX0wzrz=Kd_Kh8o%9vRqaQ`!0yID{QvE8;xU&&p
z4eym55cFo=si!{AT}{^FTUc6x*^8Lq<EI~Si~X&LQPFLq*7-=MBZU1w3)Ykj`S&rh
zk>l%uPtZM<i_f<`u<yFozTXqE09gFe3##%>D@!0*9;#l^2QSsCHd?3QI8bhX7s~AZ
z{*)%qqAwe)1vRKdr&ZI4ST*t_3pW8fxAm>PO7#exZzOm4qsrLUPnHgeT2+#~Dk`YU
z&-C;?dwZc80k#Y1r=C3Lc|elzJZeB;iFsRV$?Lh{qFBS1jEWH1phs00(G4N$Z?X72
zw}*5!FX=2k`~fS`@qbF8U&vszW_o>gI};vu<S$gcSg8>_xu{AKO><Cp2pFUCuZQTQ
zJQSd6voF>|V^gVTY;kJ93qC#mvzub)hVI?g8EVz9VzB&e4TFuIv($oT-WUvV^u5Ms
zm_+jd#o}YC>xQH0I)BAJr%b^5z`GXyr%w03Q5<ag^57~1CY2+{ik~?!_O2UCWoz!N
zN%liU*j6h|bQ-Uw=3D;nU@dVdCHDjly&TY^0?mx&AkA%QvU7l=^k&;dR|C}HIkoiC
zNV{g6k7$0mh~5I;Tu1mWUcvXr;+HSceEYn;$Z1X16?#V~S*>y91qI-ZWL`U*g0)QC
zAaBY6OE>osl1ur@lkCFGvXJnQ%9xa&WGsW@fk8S^IvGmRDH<%8iRji45bm>dW6C!C
zfFlnhXXFrv*Vrr@4Sbhh)^PvRV2NE|1Kgr>HV?QRXZW!N)TK5tR(L=8LYW3GdB2$f
zYK(qY>m}5-VTsZfH&(D|(<-<GRFfF8UECfrJ58Mnn)uW%p?scoR&bg9y+v4JzPpo~
zLm3n}CPeWM#Yg(rSV3+AK`^DL)Voj~;Yk3GdT_Vd@IrcRUS9hr%3>AZy4yW`yPJDR
zA8(ob=r-(%LL0%%l)0VG@gG#~eDrGxAJBk7^Oq~U_a|pG=0%m?otQjbJUPhu7&A^p
zzd=NlGyk^-%h?>ahwxsNIk_kA@^W(*<8!d1!}G&?`<a4NdN~ty&4|{lrQvf8X&ZK&
z>a0_@+<-s*c_44ArP7Bj7;{&#9uz3s>jP~1>cU^Jbh_bspTLbw&uGJsJ%E^Sw+uR4
z_Vz19UZ);nT(UwfVd*Z4ny(eQnj={Vx?|yyi96e*i3cBsRu4S`XtSPleBR&nuBLCx
zg!=q^uO$PqnL$5Q`s+*x*10}gKLr-DHG6(xJ7uW#-H`YVIcu)Sp)C^i`%LxG=DB!4
zrcL<i@w69Y8jh`1K0P!<fKO>?9h{Yq1}6iW^x}mOG6|)bURko0(M0q$o9nhh<LKoq
z9i1r8J)+$E)a79PiX1L;rE;Xn*j|JdbszypIgnmke5_lR^o~{ABdg;O9MVWftKw6;
zXGkInmyT@>l@jUrq+6Kx7>S6^3*Bumz{G2NI)9HSZ4_ed!XYX3+(CZ$ThDZHCL*3T
zTV#?_pnLT|KGXBqWYg+s2AvAbb)4mb((?P<ea21(_XjXpVOs)n^@sxU`)l0`#5xan
zP>d(d?{IWrh3T8(sN%guPA;xUt{+@S`L`%+r5JZUWvLVGY}h!?QrFC*9<l>z4v(5u
zGv$JpZhTUCk=ETPM8W3=phq@aU?eC08x4~_)LHxeKFWpgWo5Qo@EWe5Ii%s)!=62N
zIJ+8WMxLWWxd-y6Q59o#<Kktf(Yq%t+BX~-)Aj`MC?BWU+%y&|fqC)J8Z$4?ar#}C
zH542@fw_GHO1da2yO)4yD2x}fFICqI??LfZBNwf%4We^iT-ShOc}FjsLf2S}O^3=c
zfz|6Wv*!MTGN-R270Jlex5wtJ6^!Lmm;aCKhVm7va)uYaIkv-?vOMAUcYaU_%TxMv
z37Xw;Tp4V_4p-a{gpyIZ+kAi9Qyq&+>i<$eEK>Non^rrs91s6vsyQ9PI={WjMD=Pt
z+Ai1)H><k<|FjutPbf>IZX8|Zv(R>yY7JirK8=yIIBIn~Iv9!ZM%PbrGS6Ja+InrS
z<K%x}jq0^XSLXhdlE$7+%~!{DcF2)X-F2e2>+y7xgujWr10-w6HFxMzgu;ki03{Vv
zb>jXqJn&&u=>T>>(fr-Uv>kqG*Y*J<onawz--V`kl3j95SaRpE&ZmR5(5&=&00Epk
z0pT*MnL8<gjP!gd&Fz3^-_YwL_DyuovMySLZX)K)stBlq;x`bKNg=ddz8?=BYN>_R
zOgg1;lRPlhKiMR@!6|wKfkBp^h1`AH>kMDk^-{bU(I=b|@;D<`8W50HmG9)M4=v0t
z`y$PCX~x0Iej0&~S~;a(*Jn!Y?$7&|2*$Mtx70h~;z>Xi!jj8;Ix$4&SCyd(-Hess
z0X_H567ZfQ5v1)c+n+Tb{zjH%+^^;b!{C8#@$LBC#P-wL={<Mv4%+ss2J%nA(th@F
zD)2?xGck@ogV3WkxGRxViu0~VjAF#?tOQ2TwL;oIU2kLZeeA*4e1(hQH^4d#*8y^j
zC<L@;5zipQY}TF)LLsFhjyqxUE{H#eb&!pUw=Ln$zT`pFa-pNd{q+87bT0Z7MLM^-
zz&*h(4(o`LCDns~5(^BV-)aRJss}d9aW2+@Fx6f#O++<}%fM<!C{HjeWgDR>Deixt
zUokD7XWzhGl!j!%*6WlGNyM6WKQJA6a+sy`0pfaY<LH{ly%T2l;~Rby=^usX0_$$}
zrVFMMW`c5=2_=j^M{a(V)kJa3_8}?ynvFHs+gAT~k-t6;u`-Y&RBWAOGzn3sjk4o%
z#n<k#vYL-2nM@w!aySU%CJ~G46TE=PeJ!PeU=l(43Gyl75J6zy`Eo+e1Ceer?$fbm
zi~0>E`zGZ3)_iI2Ai=r|JPxWli?k<9N|8Gun*56}Lbtx)Uf>4@C>@mARG?7tv$Ck2
z2$J}#*ch0HaaC^|Xllgz4Z9v?l6fD-5LD9ew5qizn&yx-@Jh~(1EynHdqud01;2HB
zCR@S4SAc^;DY+t5Kxuw*x!+N~d~%zt(id@l$9-E9iAl>KIH!-sIgDvM$=%T@3_(^P
z4m6jB&wTDp+kJ{`n*<Xt)31V9latw<5QRp9J8pk5CiIGp7$Y#|g(qHa=8`aPcs^cI
zRA*gXv1`usiasQBW0LkJRTu7X*E&576!J&8d3ly<VRYy<FLOb|Ubr!OGCr-NG1W}8
zbY&X~q$nSR4>T@fz@(n)q-<Prxyja>iRx09u^f&p@V&w2=?$x3pV=`sDssit!3wSj
z7D=&?7F98Lw~y7#x94%*>mv+xHoRbMyfMW7u|qAxe1_eJHCk-Z95A_>!tMG}TNMj5
zj4e~?NPNW(g7TE5o($fY`qFMqBq_<Ea@8<;c1e#Qe_nYB#vl3LI@J9h;UXMkgq!eH
z4#(Bi4Ml(k(Y*fWQ<SE8Qi;(1@PPJ79ZmNoxV9$YF%mM%$Nld2^dQosy9A)Np^-nE
zW^n870wo&q0okv>z_C3=dq10>MigdH2k5Y%mJKCN-lT3Jao8VI!!(mM*Il!%VwETm
zzp(^`gOH3`<O1*3SL*kbM}UbdYV1Zn;pk7z`ziZTO%c_0pr|MhX}UX}h{j4ovf>ex
z<2FmZzW3IIX;0xNa}sRN<L)tZVI3k=>`i#I**Zw%7?6Z?xf7$txgfQv-ZUw3w25Tq
zy^{;%%Tuj`0Pa^3A5mnTVz{zCH+^!*n%FdoWImyo44ND<X?<Hrpfe9Hw-CKh4Scv+
zS&=Oq{Ol@_8nTLHDL?6-ts*=C2W8h$gfghq-p2(Rz}~D?Upvw^!8R*DpJ087h*61|
zZ`jQhq6W?;5}C66^4!_|aNuaFp+U5+Sz!$$7uz~BIT94R$Ig-Ywb=8R(e>y9jaY0M
zXF2|GBz=6GMp}Q>R2KHGp<*o(W-bXXw<%Pe!+1WBBalkTtZOShi&UT@+VQBN(VTzx
znkDFC^Khao5Jg`}<1a;t4feK=3jp8dT}gQM1Ry|9`S~VK4`-TuV<1oVpf;CS`HcbM
zY?T6jv}Z&tGS(!F=Tr)JP1MLzV7#VFwV@frX`AF95;dVZ$JR}}4{nGbE|~HVeUkF9
z@YHgSL>LqD0B*fbEcGbNW-X3Q2va!8z8Buk7YD@3$np1*U^t=m_&_(3x`6@C9}&)*
z`ZHwH0{_s=dV$X9NxS~Mpx?GGbNfLuw#4Qfu@7Y9+ln$K>#UIUxD!nufJ@ogvDcpr
zo-rp35(E<+&;|VEL9e()89(-3$E@BRKA6Mhjtd!5)Ad&R?!kC%#q5e?E?|VR!Q`j@
zWgZxtzkW1vu_xf7T-YFDpH}b=&n8v(OiL*f=bp%*WkJUk9!r@B<`R+zo}Ng5>4V^X
zS?y$+bJ%CY7InsWWV7>*qFW&;CvIQw;*(B$yNFqSC(w!8ER6^u>%fl%I>O>g0atjS
z2rbUKM~os&&OibI{7ZnXeYCk|MqQJHlZwxEXQcp<b^7zH=iurExmJQ86(S=P*nt)m
zbxpyWD;hO-k}e0yed&TuL5<@1URa@ICup1Ow7p<~OJQf;&Pr-)17=i1crsrkp=*(W
z8CC+{>4&GE1tDkvWaIR((gCOw``Wl7?oSGRr$bz@-*=f+XU_dbt6lbk#J{+`q0j{C
zo-!$@O{McL8G-xgZ%MfDS|v&_P0%9t-dR^561K(0#aqL;{lm2sUTY=)5(2xjh<`Nv
zbno_5LXD=X@i%@Fr9lg}pw2cFU=LQKSWr?K4PaKiI@@;sHPO))1{EggJ;#Ai_9Pbv
zp_xT<bK(XnBIVnO`v%lA44%>GUcakr0pq?gPynqrwCBpS1-RO^7!KHcbq^wc0rzyZ
zioIZw4%YcqXRb4FKb(1?dBLX5v|ri!+Qt_TTi_$U7@{G6C9$xm{F+Vr1X6xrA8B3v
z*-V{V2(V2zE=OPug9Bnz4n*^=O+b07V%lk7g~wqM6wwY3v%KvsZo%UR6^^TYn8NW6
zsVG#la3_n1nI#<%VnUci?@jrjVJ_}mF8~B=LrC?GFOC-G!<b}3wvJ;mIFv$EcXxGC
zmC&}X#y4%BP`-i}bi~mL+3RVeR3%!-XqLMNO1Y5PX^lKMZA!Z#iW3#||57C#b!rl+
zp#M1M#IcQ}N(tqJ+@pAJ=JTFu9SL(QVSi(Nb}1c}4hkVDYKs{SD;<VjSZaL?<oLSE
zOaQhzAK3<T^gm$4_zA1fn?nqiWLgokw;jXG#-9?TA5$``U+8FukHrGC!O!W=s4Cg2
z0$3UtUX*xpO|LA7?KZ#4=+K#8^{L}E#N!aB$We<P^<P$$ba-WBQ%XQ#8rB@v4QpWE
zJYQW_SRHfU>AEV4t@U<3dYD%K#8FH1w#A<nz(BsLT#oc#Ezp25>q4a1?NII%qJ}cf
zV{%de7x(kLEQM&$cR=)1_O00l3)5$Y9xEwMHhK=y=)6*K7m&IcWcKYX+(DEecWkH?
zZ+*;u7IBR%UDWlIJenLWCrnMtRt)y`g3$!Ee7^C!coS9OU?Y!%;!~EdlDOfAr75J;
zLe2p_2zPflba=rOlY(SL`?Si6Rjr?2wJX8#@RZVwRThVO55^3qITBY+>>)G>7VL`j
zn}Q!)SAFf4YN$5XsJcxk#Wfc&`ad5(G)DYih!wm~YU}vjgmhK*ZOKld=v!4*1T`=f
zhWkq~cc2yE7ek;*1y#2qM%zQdV57``P%Io<uzw4yq1|2EjtS)29lS$#^aAZemzy1@
z*ZQ~z@WCWrSzzV+)E1Vpr(sq>$%{x#Zrd93G%w+GCh{u3{kg^kM8BY|pjt#y+s^Lo
zP@9zHfx%xqSu<V_yiZ#ZivwZ*;|Uoj6m;OFS*SJ2Nic@*!F^Ut#<sC4o>Ba`Iszp_
zFXaZqF`IySa$TZf;_fk)RT+wP2y@6`z)$T*bV46m_<tCCTLlE)cjAQB@J|aN5x$uV
zkTvIBj4{b^ldW}ly$yyCKTM2jt$ptz9$a@P%3{3!9vO8qj#F&5Hs&OYHRR#y0wH&(
zf7mf^olfT4mpmu&F55FOkBHMhyuTc%E|R?>l@Z!7tWv@^QzLXM9m2PdiqS+Ug9F;z
z5b^9FK35)ZqEOQDrJSbtOcbInE`d&{*4PWQAc0m`7d$4~A@Qw(cuzTGg}vS5Wk~<~
z0%G<W^Vqs@eVgNrn<hk)%eM`kN2DAJN8VAGPECDMww`8;>Vzs;i0*=upuDP(rTi1o
zI=1cR*Cy-fMi@<{Y^l$|)@5=G(hEx2=KYr(Y=az^_6P3nRov#2xaJ1uZ2=GmFuaZp
ziZ0ye`B&-DS7R?JA0(|zZfoxM{yb>b_{2>otPd}0%);FVb=}=Kk0e9Im0@<iq5(}i
zQ_}W;D=*XMLClcQy>Ln`QjC23gJU=qGO<+Y1MA7|Wy)nqmo2x%;O%^EuVUjSg)0o%
z2$B+>C>j}$xEp=|STMHfmFYrSdT!iuMV;D70Gp~Zfe_?+WE1pI83Rk3+GD4~A~nnL
z#eu*?@#<S_x>7$g)Xxp-Z0x#`9lTp!^-ogSXo*7*BF0XGPWy?%#kpiQcye99>w?$U
zewS{^G^19gm@}2b(Y8XJmF~H;f7NQ^>xrXlJ6JD)QJbM#n=Y{fe$}NrBm1B5AyzYa
zfkyF2jfm)-l<%cK-hizXr^H3XjD712dNnp*&5`k#Ay@=dpM`c8#eZHN)KxqP;f!VL
zow6+K&{+!S)uIJresN1JMe67329i4>!-jGOpal+Rnls7-%|a<H)I7HQyMlP^O@)zd
z5TL&y8dBnc%)Teo6Z^$N<#as~<J+$+soziL3(OU9=Hg)aqhapLvWl^T{V_0sGL6EM
ztV>QS_}BBAepiC_5Vc=KK5y=czMr0|n%6Jz{+;-qD)$=0V5Z<AN*YS|I}bJPVOP28
zhZ>PpBTd-7LKn-j1z>b%B1XW#MQl7tD;d?14?g%iz@lK*EJNS9dE5*wJqZ0K%#p6}
z=P>=tim6|DC3epP`=%5|k@(Ic9joztORoockLjQ<ljDd4Nih_~?o7{w-H}gXeV;2!
zW3_G?8=sD1SRs?Hw4;_*05Ad9eX~b1IdK}#i(f{mL40f$i@?HH`9(z8E4!0~@b?%2
zF7S(tTW11;I@VZ}8-E!=Xsd0VjTiH~0oF7uwoFA<!tICUlR;UFZ{xZ~&}=svYF4&T
zKH?W9GM}-qu5&$I2YRLyBOYpfK@DI_9vjH8r?0fBdW6lXVD<jw8^~OVd%zye1FN&K
zj}v<|OviZO;_oKxBnljPFD=Y{Xj$4Z-YYqdIDa3JSZarmHnHc;FA3PZ17e8I3&SGr
zHYkeA*gT!`pp;P5m|eLFPpnL)lmsj%-JHrx^d1jWCQDjG>cU%6Z~C!AY5lFQOlxM-
z{|H0QhRnW_46$S9?Xg$hOGmQYjOSPXaxLI0J(t|kom@zMyvlDOnDG*HX2TPEpmnqf
zE&lWeOv4?!LI%=$m{zgfNcCCx>OkAsJwkMrqOUbU3C%&f33uFfaBi;KlRu`-Hq`Z#
zNKG7f|H@-a{#;xm8wgiA93xL1aVB69n)w@3*mz^M=cbDU2bK6qYK7byy8EAPWfE9=
zB^Wec4*<y>FN$2@I8!Fo|M8FrAow7Kp!n{vTbD=&CCDU4saAO~hj^Y$&4vpv`xp~S
zf2zh~`w?+CnXDjf(#jBBt*BhX(AT43tp=6)kM!nvA{&d%UZ!V6B5op=qxhfH9BRQ)
z3pZYW4EcX>MxX4%X$Ab8%H>PuP%p;PZ_mX2=-HWB1B_7m_Dr&~{>EL*ph}3OuDZOY
z&5koATbw6%B5&&`9b(^MUEHb+(JX(}BJmHPP<pD}<(7NdxilM%7*AT5P@xWBipIIc
zGh<@MUvx-Y0ar;eSG`?1|K144mSs%Q^T;1M>4As=UdN<3vKF90oD@#aus!%#+IdTz
zk4+*>McA3|>Kqz9a5zAcVKj_*m;rjs>;ut#Q7ZlW+$npgQ!uUs7{vaixG_7SM1N9%
zdj}cBf0u*W<-iJXFj`$Wea+*uSkR8Km6ST1GY`v)V5WBG3u*NjZ8!B1427A{XM)ky
zL>xRDvMiLz1Gh1SPJ*{@B;DMrT;u@hJriAVJUu<LY<Eps^*@!e-U-nUlZ53b={SK0
z=LZB42Ybs=I)n7?20vJ+lgg=nZtMqHo;qYN8)Dq-gmI}I&amWA3{O7GqK2JOt7V!s
z1PXyA??i4l59NhYH=WUscSaTpJie4Uobl(kgLK^HBCCDYrN!kQD`3$Yhx6%|y-o&z
zGT)nuVUAv6@`@6&$xl@nVb1#RltAW{qZRDc%{f(u$uN#D6!HgQ=BeRStSua;8Ffwg
zw`Dz2B{Os~(4&1cW*OIJzbMtXi@m!h`HHP=m7*uE_3*D{4V(5n&Zz`=#NL%3z(raV
z>5Thz<ui4yAC5^L`@%~NhX7wHC0=;ohUfd(9lA+|P-S84>9ABSRRW^sNd1gcevPCG
z4h-$fb3?a;Cf3Jvt)HTZ)dkfnTy8(Z=C7G;qgbV@S3YO2N*|~PhwuFEt^Z03l`qA;
zhunb{YQ*2^&l^uceZ@wk7XNv=tDRsxL5<RqfcLWf!wb(gG08V;BNN0M(1ta;%M@?M
zOAmDWC8IUGjvO05?;x+|^TNkchHTm(wob&iNIq3IUSz0`?h@IBbA7aDz@a3JCpHkx
zy)9G4T1#(OM)Lr<U)v}JZAp}+D^%OsWd|^ogPN|L7oo(t<}bO?n{W+PzLF1}O+J)Y
z0W#|a;p0<kF)nx{9p)3axaplgxDgKyP|C9}rwr9h_t84{`l^bi^c;?o=dTjUljxuD
zm7$nY78^#<{|r?T>x4ThpQIpRcWM;ZMcz{top7H1cG^60lZAkuIF|ifdptg0_#7X(
zBjG(NLXPlIG$YQ`oz`?o5<=FG{G8=j1sv16Bn+?CFY}^B>>6zGw;~Xq*w&5OC`&i=
z$C^Xo6pq19micP?LL%l@PDxCCCyz=*=ajP{HD~3ER5~yFWPtQiObmDlb)2HjDvP6i
zp%x#S?7WX<LD4m+0cLb1QHKN@3aLUPKu9f0&eK-r<k|^wLcj0&=B+C%uu8x^huYEB
z>E4_L!QmuB0tOu38L31eS3p?Dmy8-P{Q+@%l(KSt_so>>X|@FeGScXGGA1+jC&m|r
ziu+LXpJi#L4|dKb?7!BQY;tQ+&$E>ZbIswib7{N`vN>|bfIH4W?WDU@3C^%H?k^WT
z+4kL&0|-m9baEmns`<1}sD{o8rkiOK&=D<AAano<T55q)toq2yf_Aj}t2&}n%gRM9
z{Y6O!F%(_gS~c%N;D-wB&|)&clnvY<6C-Rw8YJ3c0C=}znPD)+Tc0FgnzDhA*gX(z
z7S8k(TGLo}_WHPfG@1E@M)!u38bq2trj;xRgat)scyez*VI|S65AMVrd(+U);Ae(H
zhk+ppMR;agoe`Ws8B)^`?#%GxBH(hx0XlI<(}jCm$9IG&_nufylAh{+AX6BEvm-kG
zy64NWK8$0j7S3~NN`vPGlUpR%M8CWAKoR&uf&U_}?T1X;0_fqJd|+L(73z2guxR7W
zY!VTt1K1_lytw&`vrtl_5m*`<hR`MVui#@Dzg0{e`GZ@v3NVzWv*IIJumjr-kPY4Y
zsiTpyG^4Tg-F^<z%k5^95CUz?lHcal6##QUQoArnVPZ~yapB7OaRQLQ8aFQc&W5}#
zikDlZG9|VV2!7s1_8U}pB2C<yB7nA}*V6z=csf45jauam1Hv%2ma53;g&5I&Of`>e
zQ<j%BY-zOA;DYXj06S&7s;dD-yFAssj1h^8a5cIJX+G&`Ha*Wsy?NPU@w2%{fQ5P3
zX7eVCH{R@i`^#lfqSffaWK#w%VFPY%im|39#Aw>wGSH^RVi;g#p46;>hnN<+k)l|?
z!#$r$%GKt;&m!~7Y+0#qE)Zo;lUVSaIJst2q*8e<o)`!v?csL}f#97NlQ6pKK9+DT
zkkM;J`_m60Zv22-OVMs81Xs*qaVQRX7hv#e9gV`4?8?1jhI&O3xBWLn2!R&-cD?1?
z@`~>IU&vF*KVsM!nEPa4F~I~$j!0l22Z}tVdNz|?ZjS?P2l^OH&kZdh?Q8m<byC>b
z;^Qj8bD3}n$0bcV1jH@Mkle%K*MGidPFu<X!U)>Us1^Dk?BUKSUc6Ntx?q;?>+^H}
zawoo|ND3R4Va|=K{4S2vtwKCR;n<f{?T7;m_!%K$1q_d>KkP=YN~=QqyxX^v>hc!o
z@8;hBFs$b)Mf~wW45*+yPkZm!G~}cpGdHJI;H-NBhg6Iz8-v*pe-bTU$nV1a9RE|>
zV?jz;tWVhp;=`+8Q<-CZyeY)rtsUq~lw9`Ct&9ybTfC5fm=YbLlH0P%6W<uK4tyxC
zeXFL(dfUMBoqfs2rYcu$rqg=BlY1s7K1itgR%fR=nr%E|Ld%$XiUmtIEs%#tBxo{A
zBT7==CJ$A|ak_P}FdsNhty?dBdDeb_DI4(;)8JUpbQ<2fy8%XZXq>hY<t}kS^d|IZ
z1>u~vP8hubNpd2}T%yqnqF=?95Ln=g#u?)~TspY}cIMAsbHNSq-?|(CZ=gr7gd}{B
z#8p-i!SO}Wg(^AdS;7GS*QMo0zG<V+VBBPEgv<WQ@ej0kjYq92hZ)t(C#$S2jhqJ~
zar6eEZ8!oTm)s)R)0;mZ1yBB_(wr0N^70a2$ZQiS=>B2ij2$>g;n)Yt6b=H(a!a9l
zf|)PU0TY>hNAT8$&!9#xWkS0=hn%ri$}y{(>1p{-mgTOBLfs>KIY7ka>WkbTLu%YA
zKUEW*UkA$A*AE?}`;ke>0<m*F+f}vF>_s=iluK}?IKA`xn7AZ<FMKi)LY)I5vTl6^
zw1=&Y^>kk+ReltGfBepGjJc^h6G}+=Y5rP2=leKv9p183D&~htTzTe0WHB$5yc*_<
zaaGUvnm|9O{G$f??;kh%kd&{FSHj7JUG?MTSTDgJV37j^U*3pvrAbMH$i&>~@{FdE
z>vd#-A^s6A`ZBj8^b8UgB8HFHyI9%PptRM>blwk0r>tUckJ8_b^Afg%x8A=C5oz2m
z?;d80A(12hcTI2oz+;>bsumwnrt4NI&#ah>&jm3f*{5OGn#f+=ePu%H4=crmg<A4Y
zL?F<+tBV)!lQTE?G`jFqBs%|d&kW3UtU1aC5i>6$E@0zXM#m4An_6N6>A|Pqo-qKU
zd?)U+NPYEb4xz#FLA~^sa@Wpa8Br>1?GgOYvw$({=^yz4JzojdC&-!KkcYx8qIuhV
zC1N^7upLQ-TOC}c<b^6T2+)HIz~>Y<_)EB*PcbzX;p*R1X*%#%zx8wh+ngBC2f!fL
zAopct9okKV)TO|}#Yv#?4z48d>n!N0yzkAL<N&u0r7%1s)h?yZ<caOq_-HE_q>LgJ
zliS<j-ZMc?Q&<9<1J@$4#aqr(gLBgb>qb|a9$e9g&rK4b3us>Q-vV9ObP|NGE}|xf
zA`$lMDBs{BUUAwD-;&5(5wYjAUEg6kf6LR~bJw9v^<mq#Td8CLBF)}7Y~BYskF4}l
z1|^mRx8P=eR5~h@65~C_(BhGuUr{h-=8#Zux)KW<zAymZMK~WdQJ>MV%!|RDH%Ug!
zO1SE+gBb=(Ce;o5=Dh<CCu1&WS-a{u4nT4lPdhC@@Qsn3E7*6>R%|0KtkVeMMlwjK
z5Hv%g`iM^~$`((Pey6@$b3O{@`Yp&Xu$|t%PibTcb43gRW(h}}Xa*?S9i9W|A{8X=
zQ089ErctGPn<Le~L#XLJQG7JS47u8W8KI5=8J!Q1>?z?D;Yok>I?NQMsOl`=SI?pc
zq|E-nl(+K-o|rI52glK?^HopQNEnqt?6;o~mLny|e5w(^utmuhe#`$t{r@H2rRN6L
zUF4=}XT(GodCp4anotH=gv;MDYiIBoIj$F3t_+nQgmKrzRyp&H48?3xBHzZOcC3+h
z=6X~$BvB;lz4<BZcxWO=4~>54wdTeX52^ClnwVt;-I8dM?Nm_qlvNXS?={hQcD?<e
zFL~dnD<RYTliHHOaot>8;gR{WSHO3F&g2)}@X_)?h-QGuYp+tl?*K{L?PBnEhN48T
z{M^4akM#C0$hsG{QD%_SJUQM+Kra0xqoq5Fb>fPOW-WY9X~IbE`%<?}5CtO=YMYB~
zI&#*xFz}~27nJsM{4ACD)}j*Fj@5ZGOho&s4y)I_)!_ok@fef|Q{Mpr)vidiKE*o7
zu84uH^6yOPTvIMWHm<rOtm{o1w&Lx*vJOAl35<~H-fD?~w)}Ty@rs+xxWWWLUM{`%
zpBcEFlA3xg3=&lGHHeh<s)OyQAoUH2OD<+g#)Lec2^LRg_@j?^99%p0@vLj1wcnVm
zWJ*us5|3d;izgw<&j3qXDPg7i|3w!lft?chL$sMO7T$Oi>-U+S>?69@Q6Ee$7a$4=
zXPc6WKTcTapWRJT)&y+iBy=9Lx&2`pB>*X0lJ@i&IS~W<>FZIiGkbsBcy2>y*p4+)
z^iL3?1v8f}_V(y|Ru?y3&*&4mD`h!L^f<b{_DwfwxNtG4El2J2wv)^ZRnl3j6s#F_
zos1!yu-NB#PS1`3G~a6^ELUJ}da+K{<6B-S8uVxsB*#j=zhM8|k*6jWX?N}2+SWok
zqp2AOT&9c#&YGyc^S{RTOtBWBg92$$Y%j=c<Cobgy*@yiiV3a|S>8M%_2t=j1=$Cn
z^5+JqJkd(Nr&D*FC|;?!GQXU==tVwM|M2QnvoRICO>qU}T*7GBn)&A1@rSccYytkd
ztscA`1YNVr>Pr96#+bZbohl<LEJ6g_#zl(f(qRGjuiAo){{t}xRu|Ta*)SE6HR}RJ
z&nT67!3Vx0E6X58=qjSS=x|(8SXkSF!B(fCWHNo2EW$&Ya(VEMw3z-VK}r%Ux8dV#
zwE#%C$xkMIRMdUJ3@ZU%Rf~HwreNt1VJL%l>4@rAUN#t|x&c_8>PWjyh<6Q!=|-bA
zaAIcZ&~{vP*t!*dA5VoeUKynhK9}@DZ7i$Hwlc}=PuGV{Z7QJU>d87~rz&oIFU#FO
z-K-;84&0)O(Z247>$xWaH90xW-IgVf0HiPU^yMQm>>O($_qh7zg_|6JFrQW^QLq-a
z`Fxwv!va?)iPE6V+$y8{ZaVfrCGxDN&H$a76dpz4lEzeo5-|dh7u#yeNcjbY(PsU5
z^D3RoaxJeaMld}#?%RUFXTQO8ct0nirK_yy)4Lh>{fL_Q8{YMADb`Tn|MFY%{MPSO
zidG9X)P9RY_i1F>n*Nd@edLvz%B5~)yQY#HiB*#O7<K(ruHBRCfO!D>r?pQcj^&P=
z_?T{GqQN?5Nov=;ng-jXaFFNWCa!zwgHFg4VB^cegNE@kTmO5#U&8D;YRjN;XHEUZ
zelzZl(22bd`~HbUQX%P7(a@Yzgd`6unNf=`7NX~a#_K*IAw8xKlAM~UZdmH_Bp2|+
z=D@Z~M3FhbsSEcAXi64gUutryS46Q_XEQj|_Uj-%2~4xz3%aE5af7Ag9f!E`zSCRJ
zY%q)u_^TW}D`upf*UL(zvlm8ztYMNg5_KzjxtctBE^UrViU^2y`07V?+j9J*aU41e
zl>7_eLshc{#H0SdhoGkm0^w@QX{`C_QFtLrJjAZT*|=i!hNixu+HX+9n|^H<8@Ac`
z!#5YzOF7{w1Kx5a<hcNz95)K3Y;k;7-J=A_s2{#D2C*~_G)=|vT5Mn~$|ESFL(dJb
zSN}OMfC^gFdD=P-7J8W2scKg6j{U`Y0J8}$dS{uPW9u#DGYllP5#_XKsihqonw_`9
z!Uh&UD_E;vKRsg?VL#es>3!FL)i@C+546(R^QtqYPCm8ywQ?Y&8K5hr<utC6c9Z$8
zyetY{iV>ZCzZh3jN`rapX$Q`sgRfer9k-qzbcrgoYWIjw&0Q#6#<1lILkf#?@yyjH
zEec8}_DD0mkwG}tZh&~+p3CyTa>yQz<b7Cuha7?Z&RYDq3a~q_oV*x*#QgX3oNWQ}
z!`4bkN9cS~=4Oe1H3erby@Dpfq6?31x@_$nN*hfFjwdO;dxA<H*_tNx#4t%D2@s?z
zb@9|Z4<V5?8eeN>o!HhtH^dtf7kmeQAFBSCr~H7~XaWXT&RV(?23rQ2JdFZZza^<e
zGeW4;>L%;O0THs0#;<ey8K@s8!9!})0_;$c%ij`tKVyK(ko0{>xJ+CH*N3p^#m|WL
zbZT=V%etkUTqFseoiJ|FAQ;+WcP3Jr)}C2UW6iUIpKgh$Hm&tHz$=R+rgCxwJt3lA
z>i2#bDx;qm#r)uN_MTe(#3ft!9!|p7Z_Zl5|Hj_@cQB!aBi@0sCsLr+nf(7f!{qQg
z+GhdNWQ$$1D&ceJP=r1cgFB8BgBWDBOo10AAoTh|?X=ZIa@rf8WbMhjf5yHgYy98(
z&!+U7pjC;077O&A$?rhieJ&`Ez(2bO*@G%&FgPS#3vFb`%+)~xtVZsXJ3zk7dDS5R
z%-afpI(lO5y$2<sfuCX6{#AAqY$4%yKOKJJt_`k70jX)En!7e>-6UuDS}tz-?3VCN
zljTUSy+&on!|M{QN5fnx-TsjlJs=Va8s|wajxBv&kUjOiz^IkJ?cC=<d0@^mGt7<W
zIA(Nnc8_1G`wI$x`K4YV?L@!9bHc>mmU4z3FQfF7$#l<W1UX%}41~`M)sL^8@REEe
z_?5+ezk@XU%c*H3i-cX=>IE<0gWq5#a;|43nX?QmtgKUestx&>m`AihLW8h4XIk`g
z)1zX)+LFBs?`H@i5xUkHBasm)YVY%dYzsdeq_t|0i-Z=ffx@-l=L{GrjfPgg5r*vi
zt7=n=jO0btXwJP~mCYaUC#uONBEF?}mH5R<l%QUqWJ)Wrd&y|;)3f-n_-N)mmnubF
z`gq#mnFB7dKf`u=pN7MX(u2ax23z3JddX#12#gH54$(K*3=U%-={m>8zFNpr0ax4!
zPuRcD43pswaJr<iGK<#KXf!GQQsalb>OmbaAP-2Q1)=c}r=pnYOYHTxc$v@#I#F~6
z6fh37YwK^q7<VGo&xeC9x$4DMp*Lx+o0#rqIUglgAY2_pn{tn^|9qA?#mp`D8Z4=G
z>Mfg2<u7N5`!n@P_eE=1_<2|fbE(WjUGRX~5-xEMEQ4usZE$hQs<_7UVMbHDmB-OB
zm9KIB;AxHv7ICHHBMgn~9)!nSc}l~TV19PzX2&u;Vyi>3ttANtc=fB|J|L4x*Vk**
zi88gg=>WDKcTxpH=~#4EB2KFIr(*%@@tf%;ub|tw120nxewi+n#fXxmfsQr<v!KOJ
z9G>jp24uOaOB)rHe1`M4^Lm$5b`7;x#+y!h7)#aU=V{(^))Bk9(>WjT8tPTyhGkxt
zyd&PdNG9)?3rB8WS}UXIE<>_n2X6YlA(rU4eekrrDCTMy<b``3i3!h8>wN*hq($PE
z`1t32N?vrY&a#)kkzXdx1j?WIpGKKSqX05{FtklcM*=9TMMg6ix&;iG$#;tCfoL1N
zy0Hm}Whi{Cnrd$D;UBa$NWxN|I5*sN=_}Z?5r1zJUPQ2;KK+#z5{9N_TP=slXQH`B
zuH`?RY!RCoJU4VQY@wT`#h6TO!y>CxGW0u0CJ(4XeD~njswHJu1bJmKmgbFVc=3OT
zEgdJd7M3r#5_VF>A>d`!aURpthjbC$J0uAbVc+H(+d!5z1e4Jn=j+L5Irf$73MXP%
zr9>W?-zbnwaH6eC8gs_Fg=fpJI3N=(KTK$E=K^82tA&aPYFylKScr`eKr{+Y3~s^e
zeoG=g;t(f-qeq%hZ!|PYHg)YUQc5^U;#?JQ3lyVBbFZhGktn2-Xy!(`iFU#&VoYz+
znzY7CWk%qF&L*<pCvrj~wG|T1w(<SBN(>W}34idD1sQr=Yy_Ix%<*14$#H5ASnoXo
z^uhI;pvTzwick4h3;~l;Kx6*y*5Ifh>CfX1$7@riDV1wCMHy!p*v`|35VrfAUc>EG
z+_1ZcLb%1QLE>@$wNFfwjUf_)R3#KOCj3AD29bwl**Oq;4^Or>3z+y<O#G5+Jh0WH
z*1bLY&D8cw)9IpZiUEc#n;2~TF8Cbh<A=FyI5fe<4(sA?>%>E`_iC=<BAK&2(vqJa
zKs>s0SIKq772Dq%u-6f6Fz>PlyVUtKzB?j|KiOXXT52P5?)~&4GV84k<#J>fyqsZ^
z@^fpRZrSU2xpCF*%3I+BZkDGi30r1#pLrVd?opS)eF0<MYGMaWR{<ce2$@6{U)19r
zO#!rdgsEJTmelw!a7PSra9-33sB==No5|oze^OZuCTZ`l7^9CB@aiDGyUmLP_o}hN
zLHK8ce%I*KrajbTyx1-0pRAiz?z^hWH4z899v8+m2?*N=DiC03r{Qpn%Ic^EUw4Cj
zXV@rZ(IrMX4a)D`Z%bG%#hXBToX7470D-9BylC%wq%(_SsLcuNs8d%uf4wAc37h<Z
zi8Y4&$-T3Ko9FugQKg*;*_6^6IfQk-U5*^3Mv{g@{SuF-7_0L*B-LLj9FYO9NB1%a
zA-=!X&!@SE*0unOF5dk-7m6wUjsKcka}RT7YWvIF8hDx#`V}-%=c`||=|O9e!aex4
zH1*3;M%lO$>nCGIbI-AZoq7(KzN@6j-mY!2C!u+4^D5f(&|y!`=7G!K=M$c;OJ0ct
zuivlKbWsTl41u8*eS5(N0L~y=+4fWWON@GSOeA^36Jp5tiK=U8!o;3}&KW!R$%({w
za_J{UFPIi#Wm)MbTdh&Dr(_USr!%+9EW))~dg^|hlp9~FP0_O^`740da4t=^#9+Zk
z#WP(VC?9VgwBh1wWPGGXV4P9SQMhf14UVF&-~td)3R(GvdgdIK&ARxmly~`{ZJN8C
zC>58u2TJI5e=vfeIMVn_WrnW~EG>$@xla-eE0#(4cmXFzR4D&4jl>O&dg_eT(?i_C
zURbdfNW&tO_x>E2kP&{{v$^*p7|cZw*(UP|%R*vQiHtNtPWrBY!d1=|rHo$tgge6e
zVjZCtMKCqoE8;8w&O)aED-3l~H)0@57&T61QiH{hG%b34FEhbEU9&|C7;4l2s=;au
zCDA9q(FSyZfp>Luv0k*A8MAttQLyO;q8?jsl&Pt_H72|-LZ<tU@H4npJ6#7w1NSj$
ztJ^hRlCttH?6!=yp2?T#$t06UVD-9)?!0||Q37ua#(Fegp<?s`<B@8ztyPRuB4)?D
zCF?8l$+Pm{boQjky^0o+P}5gp!%N)lu-U{sr(4H{1(Mn03Q<eGuX4&myQUdF?D#%&
zt67RMQkuU{TAm^aN`?O!W?!K^;Keiy)BS;2f2~JFf7{3l3Qdc*ik*XIG^^S$NEBsv
z`jTXm&l+L;jAlB4p}CezP<|i|dX?F3#ELGTB&HtS#hD~t$oLpIaNT*gTv#?!5Hy*o
zOk#0Du$k7D)e(&M(Pt(1S!Q~ZI?(*|GA!GO`{}3`gL#8I8qW^wQCZ@F{Td;csZRjr
zpc7h;Sjus>+u}Lnw;2BHx+LjuxmuE&YYpMm<y0|6u<NH}gbZi(i<+;cVoo9api{26
zq4*b$+hd=OlEwPtWma3d@{%FgDh|itdiXA-&1>@HH9vQ0#0b1CPy>w&M&8<3A-k`K
z{t2K=)gkv=6fMK=J?0O5@ttxOk-8RfUCYgi?z*`Zd$0Ux&DE}p%uommZ#4N^$u?t1
z#;==sjJk+S$AvRJ#=!t2P+l|+y{pP}O={#C-qyIHx2C|PS~*(|bcV%*m3H5l)LDig
z^*_ikoQrm}(gscN6jn^%jMy>8BS3siU`^?eNEF*AHFfSw*?^WC;YHMnriE2r2HVVL
zHP(kala?<ZJw30k{-blV*u{U(Yg;)H7@v<ZnGw|DOS!+ol>XA6aw67`p+}a0zY#J?
zSq?}CA|1IeWk)(*W#}V9J>xt{W#LI|Wy*6>37c&|pQas8$L;Y-w+Z(k-SHQ8?T}DE
zWx}+6q`g;g+)*1$X1gsnJtlP}7YQ)pl#zNwYKy}AZTEeIzsHYF222xcwKg&pO8*H<
z<V<uDtsCn=%gq}`CP;#9Kod{NI&n2N{rNglc(!#VkV3xFu8;sTK+M1A(G6~Yc{fOg
z;$w6NL~o^;*1Y@{tnrs4QDKrZ`M<HQ*V1cQY5G3K_cE~tkwBQUj#_F%e<}B^$aX_N
z2MwfMgeDHx+ACdXHb2Hx_l?Aq@o4dtAI^8fTfo@extI7hI3<3`)+9)DM!&R+TVG`5
zmC#_a8d8s}w&x7t{+(8Y`6cyj&%gsEbxE9O0m<o7i5Q|jNIz3>+<gps8}+v<mZZOL
z!|W*4SR9xVrBSo6Y?d6AMG3Goo36%*kbAnB?72Oys_^V2n*s`Z-p8lc12`RzhYqB2
z&7qTpA{b6-w?Yi3wFiSlX*N%W06OW%uL?39Fx&1)p(=aebyfBqrYs_c3WG`M+s(qR
zC|NkC%I$`^`jCX`1HT;auInA;<z!(M1<6PG8V|X|NeK)e3SXDmK<0pMtFQ(au=N(+
z3ZuWqHGlzu4jtSHID#FG0$`q@vu17-o7|hkH!tJ7)QEXQz}cDcJt8?phh!}(Z}c4t
zA^ES)cNHS<<e6`8LsxqOGc{f;Mi9lj3`TA!Xx3;sQTFfx3GD-GB{)ZTNNoQyNM_am
zT#_wZ&#j0O`}e|tPRkWhRoxW+kDU~QC8~AAR8d2!qUXK$NKrZxHJ`7lifZbDAD55k
z*zj-I9%no*P5^+bob3sEG67Dy+)Sz~4_X<R1g~&~2U5<;{X6Cdiitj%SSF_fXGx-Y
zsy<$sa8AKhYh-#Bbpon4<};FvAt%n|W(uCd(0Deic}&g@)}&S5&D?tejeHZ$n{7w{
zg}~&I&e=VWS0q$FP=bP!x5+|6M(Aq1&GcWwmC<`6!}diV1nuU{Df4z5S^#YtRsUyK
zEv9L4AwBVLTs|j<g}Z~<OOweHAw|T~>?rT3@)Y_E;kfMk=HCH-1L%N3v<+8c*47&;
z+Bx79HwqLazL;x!NKPipskOAFFsidC<%}Z2M|n+L6chRU75BrM13blh&SlX`I$9Pu
z^1b_`tT)R#GUE4tmM^P%&q$ziRQ;!8ecxm-xDWV|A_UA0S2ZbvwcYcbmAQEynbX0m
zeGgi2!A--%qu}*};-J3x5ByV-Ui9DzxE7ljux<jG+jl}32|Cc%0$Hji;s)vbCAg1L
z%&ADM;1)u?f*Ljrt8=;`$z0nx^z~ApxS*rYv_<Og$X({5zl9@6tUi-g0`8!s^BXj#
znzr(~SB(q0U4Ko|;HG)EOu&w35Sbc{LBpzV-XlX<Fb^m@C|&s^-=IjSS8RUo#$a^m
zaC7=mIUgM52#WZ<teA=lt?J7Dk`)Zn&?f9Isf13SCNm7hm4cxughBzV|C^a9vs(=G
zh@oE2N{}3#U*keU;Gz4*qjO0H!WV$%j}QA&?fIPA22mg#UA~^js!sr+ojBYRnmSv`
zh3kyz{U#!&n>?wG6p<bYcPO@V=)Q+HXfffjnj)c2F&x&J!OxO)ry9Z}sIt#3>>|Z@
z%-mZqok008I5h3{XcW)gyN<Z&zm>XR0sk)+38%vpo9Kj3N|f}4veMB6rt195JK#z#
zuDjYjvCWD_C~#JhO_#GJ*moDP$WnE1@$-8RKO8qC9kE!~=tICw*|(Z1LIfN7Dog!F
zNd3_!D+Ba_F2UTQg_Wf^;(Ch3hiTbaa!J6ip%a~{BKF2sZB{d4BwhrRm}ehKHDJ>U
z|FPL06VAo<{j<GN1A~&`tLkj^E)&V0-z-euWWbni6!Dj7Qq(yN;YlJ`K{$7g&8O>7
zn)Sdyj^%%}qt*>)_L00tAL8`JY}Mz-R7XnHu7$z&!C<(AEk%G?A>y%vOlD!D!hzNf
z7&*7XBApZ#_>I30&ysZdJ=d3n2?ax8Je5!jIq(mxih^aI$0=Azd@E(B8b&AnsWhue
zK)<_!?4h>?AAN(>xuq^LX<X#*hudFKl!R0@{#Q=sNh34Z7)_J?QMlReM`S%?62$z4
z@o{HB&gP}24GrctE|6r6#B!pz4#9pi3MPCR5Yh!-bglfuYsCTf%xS9Xi?1sxC{lVp
z-Pb(LG1<f!;k-vkiI8)Z0C3j>#UmJNw6~g3H7ff}j;R&de#fA_K%VRvSnacO6^aJ#
z>KoAY78yOJd8o}ATLwMI1EUyAOks4WH`GNUW%h=qfHIii68j2NEMr@0O*P8Y_9)J)
z5a9EXke&^TqyCh)8kv21#So;e`xkG)7J?S+yody42;DWX8zX@(>*7F}XD+!Ou*RPV
z$)R8PxGIvK5=3SC`>X7?VqGQ3kQ`z$FY>$r14o_4h?#}FMrt}0eXuQ8&PVRqV~8h~
zOdrz)%Q3jziBkB+C}{hJZ_+ZAJL(KY8=e6zzv!MOpX0q>mQoafoP=d}@!dqMosi25
zHp(97b|dpv$caJa8rc{mrj-}6GpQt~k$E6m7M2J_=MheMg9UfOz&t>&?UyS0Fk1x6
zh(CMl&_gEyTCCRQY18!Uw-l{?!jAeDP7{)iAH)LTh1^v#e`Cq%md>Bi&@&Uj4)K}Q
zbz>>u_#^$h#(D^5GmEU7pPFb~QD8+lkcYs!6UX<5ht<7Pwb_V5YqBQz{pK%Yd6s<O
zp9{(5DBXPtIAAp6cTQxp-|TY)mFs0r-jd(nw8+F@!}hk>ui(9)XibP@3vIM&uqaND
zX%Z5$Gl{X!vWa8C)<Bvg4=;8C5iYpVzTVte3XG&4)EeB^Gka0qiuatqA)lPo+bJL|
zf!%fqEYBPxtU8}H#pf9KVh>9jqMif*=lgoHe;rw-k-?1x-fAwe;=vK!*Oo&H<Djto
zrNpTrUrS@rgQR$9Tb$<uXA5cA--J8<X5Xgc0A$d-I@CVREvf^jt$j0Dz~f=C{Og>W
zZ{L7UQ{_j#i{vrNupyO$x)u-1@eiN`yw-=|>lRq@HL7mc#l!v^YUOJ^l#)rY<+|p7
z{nQW!4|a3K6QhKpEKXlVja5T?P8Ffe%}8h&2R_bpVU-nIi}KH+i-_{UcT9=b2)O-L
zJ})d-*_a`5;+;cRGbvMtjN6>kg4^P_#BT};1%3U64>e9|(^iHO<cVirGA&^JdMAN#
z7${cpl~GL0wo>wCqsFx>Q`Hue(lc15%VG43xnPcURP)k{z`N0G=^L)WFoVapLAkp6
zh*_=*nSLTE7htG)BRSEcy(G|wIIGy4_n`~Yda`=(J*#8Tdov2Rg_i_20(5cV_OqYA
zhz>Sq9x^T^FH4GP6p`X?t2Xw*JkzN0!6K*o5^EyiL8F||6+@d~>4*)MsfG!7DZR4i
zs&dt^3C)F<bPU6pm`LQ2PGZL-%k(2uUXTV%F`=8elRs5d9h;5OM46cSUw`Abx(X6n
zrWT4;oyQgHxUKYjX)xH$<QjTz&8$&17=VF{Or#Ehni`@3*_U3NReu+5bqf^#+Ficv
zomOY{Y3tok6Q%rfIi#j9e2VrN;&GBu_G;TF9`T@QAz5>3wLd0{SK9X?V-$Jn02IDh
zcN<99k&u(6SCW(fNo<?}tkb$OsIhw?K7FpGzA){DCwpYK8C~dYLO-OrrT-OG$JzqL
zO<7AEe2)Hp(yREsVRy?AWaN>3(0bn)f)6Vvd$~LTzC&iP>lYq8%6N#xCsiu(nY>_F
z>&<!>`+qz>lV31|Dwqq07#a@z8`OrjMd4G9_#CPwQ`|IvqG30qkSC8l<@0FquQ;ev
zx3Q*0=9iWuPAA%4UH2Y4#(hqBcmX5YJxmZoz}bxYpgIepgzYw9)Tn}CX}nIIKURdh
z!tMZrQFQcEs3?kJ4&xm%sf|*u?xiLsW-zG#nEpYxfv{$9W>g0=6;6)eEs8$301K__
z;;L5x(LZf@@N?do;)dz2|6aVO87d_7WXAqz3#9?cvbjBsp8lX6gux*G=}xc=(62Xk
z`0ZA=Vdxq6Y7Ft2*SX+`l6z)MbyR*nB<@BAOSu2-?>bKT`jbvt`~NPhGR&9-Ei*;7
zHK+SiN$jKYA7e3p#f)UOK-XNMF!`7qG7<{eeNHFi@LgK^1zznf((QOZJ`~&N1((=D
znD5&cKlr5WmhL9hFdGz@H9e|K6~X7JeT6~&^tkR!_=ln$DW(@=65(Q!G`g6)Gr(Xo
zf-&X0F8ts9nxmmQz^NNXKf04%{jC~r$#t6cm(KL-q$iPLSTG_XU_+WyKt*R$VKhFd
z*ocW)cMxnr;V3&?0iOMva|8UJsj`ye8z!^TBX3RZ?vsD&Yt)n+^^cdgrGtpG6FF4H
zv{+6IE|Je5@RB03*8y`YSe(#lxgqc<pxzVA`H^66w5ZqW;OcI$k08f!GgKae0j`)`
zj4ZS=&tjkH()(R8Qud_Bj&&2Bo+aXAX&M#jl1UTCF%j8*Tcg9@F?Ri~mqVxDZA0{_
z7HW4D{8CSRL#XfXo6WJ)zDgdSBbo6>Uy!s_#i*?#1<&HD4P;n^L{hBild!7vMXY59
zux^dRxMC#XsZ>ee0^2WZQohTp%Fiff^x4Z;&+vMjgk5MZ8p_)7m1S*dtgGNWdm_zU
zK4ay#5-7n;pW{g!|3>Y48iE0c2fP9FlY4XUcmr^n2-Y_}N%4mnSQVey)xA^-7Kh7f
zYU<<Fye=+gHKI7^!iHEuVEp_!{OH*qQ;AnwA8A^*V>sEAl~ZH{_r;e$ekFC~)K<^A
z2#u>%bE54ZN4M!cR!giNpDkjq(_b5nBIf+-^(rr@lFCdxHrA<(hqRSmUUks`u4vSK
zOOHl7LC_#+s~_JmQ;&;38qR9D2hE9S!p!t$`yxYLfEKkNqvB{>+fcgUxj*mwGug$e
zITw9UXv<Zdm{hvz0242!T&KK~?^O_<xtgwZY@&w#5=~2wHp1}Y9UsH!6lZ~M>t`$i
zNB}dKB~6*Z**5$Af07HVkti4_gL<?l_-}huzv3<4Ik$vpNXeJUm!|U#X!oHEPJtmk
zI3%ruOE|M4K&_sERy84?G0hP8puO0?JdDB^wuAvQMAb7heR0mr!TNAzQC@Bi^Ai8t
z$5fi7J!3JyRW)?8W&<=Dcvcv(T92;ny&?qD0Y`2Au`|y`uv9o0E^$j~QarD$XXDCy
zLydkTkt}<hdha$=-lK3?lNr#|X?#_n!<1mrAH4+XN$_R4LM2_D1KDVWKrCiLl>Yvo
z0}VHpE{xZ1MJy=BK2TW{Rz73(8c~77<Wx|`-TMVBDju5J($n9|z6pos>eY}8;l7DE
z<NaWXk;da4v}l9U1UDPaoN&s<-$$E)z!>>oe+DXCTLJY&1^vZTNanRB?T{o50m&Xk
z(I#+x!|D)A<&ayhPOZ^wK#!xIn{EO7cJncZ;j)Fj$??QS^)9Z@fBn%FhbIWue&Mg4
zCEdhz>lXBKS@cicp^yv#$X?QtpF!sn4Gx@M1FoVd!>s2V?zas8_E$)aoWg4%ailV^
z8V$v2GJ+{OTW4PP#2qf1-$ahYP>Ydn4SLHeefqbl%QW{|3WwFdt-T9#<W0ETOESSX
z8j)Hg-OtvXIBN6@n8g%syJ0{g<N0SR{b*p^`AG;khVKedbrPnIWW+!Z=ejByj3SR$
zxGiQN@`IB+qi-JY&xtLOmPk8Tuwg&W0=-9ok}dwEvw?utVYw%!NkE^{dzGzVGeC58
zSJy=!j)|i0YTwkh%?-6k2)1sOp&F+rD+TSvGBe+L=~F_olYDEO^>GeZ(z1lKquqqo
zkF$?_*{@8w?H=tdBsTCDJnq)Lh>g|`tEjMHrQbKjCm6sy(QC0Mnaq$j1)ZMG)1Pig
zWwS;ELt9H}<(Q4`yEQ&kKAf+jt!zvw@I69`>)nDATUNb^knVhTyTokPibQfLh6Z8G
z$~e5)ni{{;24c%`_MyJcS3-sU7#HmdF-_Qud~94sos1P}QPFgd`F^WFl_Mgc_CE&t
z|C60}=ajUi&(H+4>Zt?UN~v0I(h&$J@j}tfy{(|u(N>ZO;xQ#)mw^O&Ffu|2W>3KD
zR^ZHa2kHv?*~w9849O}Gt?vUn<<!1|olSL3*S(>GbRTL|;GF4%9=Wp?h<RV^50+Mi
zsvjvoZ}z<5S5(XHJ<KT+$noj{0D;fDDgPn809==>JNn1mVE1ksnH3`z<PhKM;D6``
z1ROTRd@MEgq`6BarW1`+bdlnIt@RsFS5@3_R%v&~8LN_EL5ANHe-|cBYzvo|Jxcvi
zC0mT+%>PN`t<nTb^{)n0vSyb__1oe-{swuoA&~|XPJ#T<V69tqyw78s)l;^FMEKv<
zku50`%?37mP=D5+cED;5t8zpwL#haYK0izK_aP1~2crmELJR{{@UFV8$Wd;AbhD}1
z2ybL-%Rv^+VH8zmC4y}3I7w(^D!<&vSs*X-C|rwBE2Q_iUmdZ!F@6J5Q7B^?;%r)g
z_>_Ji6ryZX-_(2NM~CThC8x8=UJyT=DZGlt{RU6bBmYaP#eTXo@>^)t(sT)0Q1{zb
zmHJlOX`kktjvI^-6C}1|-k@~M+h)y!3DI~D)gVsNmesVKO1+_W6lrHs1c%}hx!JKv
z1E^(nf98#B9bZNm>G=CTxOsLU2C9jSB@}jnCWCb~WxmPP;c@u{ORUAGlf1P4UA%XU
zHGZclb%0I7vz!b~07uUG&68XV^}G=|Gy{fDO8p~K0&9US6y{;cRb!-&z>?%RliP&H
zA993Rz~7=Gc@qY&L?3W(B#(*mU$g6`lY@5AU|a;|$G#%j4%E9V!zTssg?n$7^sbB(
zk`fkOl%{i5a|t8r2mzO#qUURZTNR{WS462T4XkdJ)^f&%)=iwK-Dfc_G&O4p2SXxS
zrP0rXk~Gff)nO0iim1z1-<)=S#=?<O0=nZ`4M&1JEs?1%X^|TpixvIIvF=5wh(fjP
z#;M}g5UeL{$SJXX$fb2qcN$=xA8KP>S!MPR^)7P8U=O)<Wy9`y66J}#1zWy)z9EIc
zfy*I$927c8ZU-af(k44wt=@xm5x8D-Cv&gde5Dy$$rAE|OEwzU9=t2^qm+BPjE0+?
z1~*0YT_Yk0kSY(0Rd!E>ycVA&TMh)sX~%5XF3vg%l>}~QLP%0^F8~tS`I0PSmZ5Vz
z)Jy|0y5rxF3Vz08%~JHdUrR!EG@V2YK5`u3yU^7Dw~dl)d%kbl$k{pWmW)TUjl=2#
z?A5L9m!=DzN@`OnYD~+9ZRbXqK`HOasBM#?i=R4{laT^ULBKfwd<zYxNA9h$24&-(
zXivL|f*~vQ`ty)SOE`6L*%YZb=i5B8a%Z)b<Ci~jFcSl2sgPKhn6I5zes%vl{M+_(
zo_Cpmpbe8Pn?Leh6(_R^*~rmBQl`9~g<8=AzdlY&q5qFm$CsjOwTg5=inq8FGQieA
zD_|UvQQDUY`UM*dPz|u0E=3z+EY3p<0;Fj2-7y@R8O)_YXf<IY(yNCfTCl3P!?>k@
z8e5Dp**#(h1T(cY7QC#LqfhZ_oi0)K8dU5ma{gq6RGp@o-F?sN(vcnA9bj>CZBm^V
z9?MLvkM#cMR0(kpoHgp}nbcVya4K|Gnt8ApH)6_E<~~Z`u9r9oML0zCSkHm+?kVJ>
zb=H)%_mc((G<gx8N~E&UsP<gr8X;$&UNXxgd0-%Fldn;b(_8c&Xk94(!k8?;Mk=Pr
zn|rZxZ!NO-HZkP&#0B5Ai5kOqNf#g)t4ICLyl4+)A>iKcu)C(5>GG`tRaSm3wN4|A
zpi#*@9o&ZfplV8Ix#3nF=0{>rE7h|GyEoe${BvVcF1h3MP9vuj&^Np1q#5D^zE5Kk
z7`|WIU7GVs#TF-_olM^NX`4|lir9z^e<O`(-7M32lJyCMFAn3#^3JL<q?xJo3QoGZ
z=P-TZyY-786MOm-xS`h~IoG(BxX{rYnG~upqbOSNi*DzHP)>RX5TxMEJhrxIDtu92
zq*Q|b-GN3E&>N6=mkl=soLsD;(8TE9efnubQ+ST%wQk@`Ad>@@Q#(O-db{23?-=!f
z4GQS?yC(l-peb!T<REc``K^G^XR*VX1^e0zZFwIg;dWOkffDK;=YS3k{_b-zvp+hY
z?H7)VoC4qi{}9~%r$E~y3dMVqq;xRCv#t=GBRLGuA^U9fxf_)^7F6uY$ScL0RZ%IM
zZG^4+WqO%{aS>kDp9Nahj#vRU*Py_#%9e<>S{+M|<2%JCf>R;vkZG&IDDyCvOspy&
z+RXT%xJ7{Q<ywB~7K770ZGG}D@H^tmjDZA(kRG8#{A4x0V<o4{p)|!p7u(c|w;mQ@
z`3T|t&JckgxE_H1Jb$mfh?x}FN;HBaSSPm?j@71$I(qpYZV%nLDW>&26Fq0pea%di
zz;T3x;t`nO`91dW3PVG4=#wSGBfySHlCYlFCy-T9h9Ikr$}7aoj?3?;e1xVUTu6MY
zGN6Q8tlNP)FDY4p!G_ALdz_v~G@4K%(CRJ^q*!HBzVZhu_iKn#hv1^RfD3CJ#nDjE
zpk*OvU)Q7s%hnfVggy?(C9IVYWi_BQM4CK2U1e($RMiLBY_>2`(kS`w4R&vDohF=f
zf<!g>Xvg_qVU88Y$?9J1jIFfo5l>RJ6gj13;e5?+U>2k$V99H)ySbE#6Vu^o9M<(-
zokRD)3wGAn;2W{rzqhpC2jZy2JC$_UUC$`+%J>HdJ_X1By8GQrLEy`XldB{v?#l<r
zIWn0OhjPN6!Lt<pUJ10uY`U_{SZT(PbNr_^dPJ4F1e<S_wAo8d;%QdH&=hOu$KzD7
z6ToW9jb(YM@?~he6Co2tDVU}F+?8DLR19v@h=FvbyZ03SEP%wh3f$4#O+ZobC}&Y^
zE^e5WGyI?iGy)lRFvQOr;^MZkS|Z@WYWMYk5ZF+IL5fhK8%Vl>#rslH!SjgNXy?_r
zoU<OcrVstQ2vMdm7`REb*u9X;Z&ezzHzy5dlKBc<eJPU9N2|H;R?xDn>9TWQzRc{S
zmOkm;;?E=2&ZZ()@<}zX7se>PlHZ2?c~!F>D2C3nO0;<;EWwXQ#tGZFvVV{Gd}URZ
zh>eDr{%ne0&ZBR9Iodg8SihFjp81<vNl?Fjh+SXm-_&16&(jPvN_5OA<t`x#xx-!5
zXZ(y{k5`cXqP$$Xt;)ol%WB<Fu-d;$a?l+a6qaN5_|E6riPf+Zh7s>>VT71y4z3#X
z?RjtoBFfbawk@gJ+qClbV~($RV?2+Nh_}}B7PXLaqFaEmOsbzXS$dDBm!Hz(M1cC`
za$^;a2L>H*IQ&aF6Xz`BD4KqV2y!T$qun;%*9>*8^ha!eyix=9f|&x{{)R#6?;Y((
zrkY@#Vg)W&U7CYCA2XXn>x0Kr-?5@$wzTH-Mq9+4`@OZV4ph8vstn<Gd(j&$pK+dM
z8&K2*&fdjXv)j=cy$1kI?@?>FGF#%uDDJ~~GX|Vj#^BfyTN<~!(pr<`&Tj}aUY7|F
zIZPW+g-{za#ztaMXdyFgBi5>&-95cRxAl;Ssq?rgBf{{R%9CHNiI9c#sA(8N>&D8E
z(m%GUopzzbvM-q|a5E{RVZ|H_I{sdS_ue*O{SjqB0?M)&Jiz~26vhW?D-E|%xof0b
z7D%g8KNA|np@Is^ghSyucZt02RDsD@E}?xD-+3rd%-mM;cy`Nnc=Gdd@`=%Yu0<m8
zH8A^BWM1zeLHkpbDRo{1$vnFsTw!!Zl%P%3Kz{&^tnz4nI(wY&owd7rPB>HFgtJN+
z*jVycyl-oGh?F#aI1m$+i35HhYClKUU27+pL49_!glhjBSfWql+K9(L^53BlgHm%-
zd%(e*U>>G=!x({eza1WtR%exl`AcFYMIxTyO#EUs3rF9EX(z4SoY}EG@7zHiEsO#}
zo*U_}JTZj^0dg+0IA?82tb@GOU(hP3$A<AF&qCiWDb5B#47ox_GqPHG78wTXD=be>
z2|V6xBaOs~82NcWc=eTA^HnZXLwg{tpZqA20t)UOdqM|C55^)z&ia!O?qDFU=^Ho%
zMdI>=tJjlBLt^D3>ctLfKz71TWsL?QL(H1+3L|S3f8QMNrc160R}q7Z(S@8hJ2%J7
zs+_ip<YIJ`L<(`#f&|6=cbFfHX6`vG&-y#GQ!RO6_<dMMZ=(9j3sAQ1$6di8t5p~d
z2t!6K)0V}zl;&u3PM_ZT!xKS>2|f_%D#nSZW<hGfzzIg}p5lz?+4Hd^0j<kRHQ<+H
zUxZ0V4|Ri06}N@YxWU^6l}j1i?|Pknc(*<C+XzYJeY7D~zIK>4wrJ5t{sOjV**xt;
zM~qH)uTTL9*tPScLq9_9i$fdTJTutYJynd>e)_Ba*%B2K(d0Hi7azYw|K?<;G+)7n
z5N3^JZ>zHPzMhwyB!Km8t$(^5=6Nzj=7nFV%)cfLxsZEwNh-WoI!~5Ge~z)^Pb&(G
zc0Il|3~x>R;u6fu**-l{QVfiq2PVp}b_Q5u;QvCh4us;yZ3pq$P*F;6CKi{;D4way
z)WkUo96gVC<H-dSo*hG}+GStgD*tr@Y7%d22&X!EOgaY7TEhg4AHmL{$5dv16#jRS
z_ZjS$^7|85k4A;w<0qt6v_L_$DxMaLmdCt8d=Sv}0QY|9>Sl+J@}T_<e!0xXHnF!#
zt638-Sa&BJZCVu`xeS;_az7^JlT}d_0%>iT0Pn&Zhw|7D9Ce5GXPOXk?KAj^C6_s|
z4wIlU@YVvEM?5{DLbourPElHvO!ae{GZ8@wt5crhgm7ij7Q#E@X_5p%hrWv_Uky3&
z$YC+;2=WhRp|myKm_k52bQB)o?}EUnW3n~**}^dx54l1_ah;`Jt4S>c0FLXys4x=m
zwJbYJJBMry%5S=@C_#%~pj0#<SY++S$_w+jgWeynrDyDx<Mzc7Fc%><ju;ed=jsFI
zI)~!n?!W|@oRGC<1)r4Hu?ShKAE1}eXySMvb-$3MNb}-w#SgmAWbg};#9BW+o6<qn
zX7!j`qbGd@#78>bV}%U=Ezr61uQQvh>;qE%v`7?+5lEa7=ij82Ro4nG6ko&msrs5<
zM0hhHH!u}6k7x}Zp}ZF^t0ntojPbH6+Q#IW5<XJ;Rg;zQ#Lb+&p7H3DTnOs$GN$so
zY$2LjFnP`xuRamWQ~kaT4Xh29=l|{uw1Ne<t2r^WwNjm2)6=BmF(AcJu`tTAaF^&1
zNGpTEIGC4hw!=nf?gF;ttNe_`f#!gcQeg_lHL|ty3@s{?z?n_7RBYMOgNp<Pnpc?q
zG(=Zj8}%7DG_fC^x96Zfcf6EZHk5DV{knetuERPqQPx3|$ah66{DutC-TFP&TF|KR
zYA+~4*ScXHaVQVm+{nji1t~F<>c8_pYRFDw;QY?1GAwBuxz=*X^Vf6kb})h`=A#x&
z5#w8G4k1APe8eZ5&NNz_Iz{!bW-5nI>z^!9`?a<N=i9vuQfY+9|9lsuQ8L);N3DH}
zpie3UCV3%qs-Uf;413}{l`FT>pO<p@c4VxoOb|g4q%YQYor$!&O(VYy#ClHagglGN
zrPhsy-b$yeFg&6cVj~$SMNf*QJVc8b|5uz=dcckkjoMpDrn0$wzc9F4?Tj?7cjbY;
z+BAO+Ck^wIE7YD0ebEP%K1u#v?qYVjHRe*KKd3w;EY=TFHCjE8C}49vp&(#yX0oDA
zeN<+%haqDy%3v3X9Vrq;0SlQrS!uV@b6rH#EM;6vXm0Iita$h;-w-`j8h34$)?X!m
zKU?SBlIVZ70}z6Qo>&>sW6#ar6iG1U*FgqEkk0jd%rBYV+vokRjmWKEUgt9a8Y~Tm
z#)dhP{(KPr)=0!zpp{~HrLW2hk%=DC3oX35jQF|knF(1?I!-5kl;61+XevBahXWR2
zbo@N(5on_TjM1CuCCP1sV`s?wXj(fU$UsqAsw()H^;^S`osv|q3x5Nfj$@@TS6rKM
zGIJdu`}&(hMtdGBj4A~e$@_hwiscq!!_P1JZry~vYPXtTG<{*COq=IQoB`R{2|th1
zICHM^E}2-#IQG8}dM3j+Dw@x}T&-UOKY|p<aGofz4Clr0LtMr4v(A9TyJagb?OZJT
zg@gl1eP9By;3Ql`Y?=-GodwR+h1oJ0C|}1jXSdy|?T&dZ>e)2-jh~Srvo0X)w?c9%
zw$*28WsN*S`Y$^Wcvi}h9%7KP;>JjYRI#HepuZDA*?B>5_JB06YY3$vxi$AxVMWno
z=8UU^0^}Tceam!&!K^{Q#_ARoDEP%}ioRHBA6{y+DZ6^UJ52~kau~`(lE&_P>w(fx
z$s$NtSbKa|F|ZwO*J%*5IA<g+-lvwc7YqwaFe_ByW=e`gPWDZZ-6^kPyPW6_%Ak}f
zHDK4^$~geA#q%rJ=k<_OU0zE#*OQAc-41G>)_rHQFnLbxXpX>Pefb%NE(Wl5l}lS#
zWy>nS0P@Pcm$@8j_M@_eLqg!vmy<NjjHe|hX`V%AAEpRje94<UTvv|ZQUn#dY8&p!
zPLA70BZU!jR1+|bc-Nnz4u;l76`*?!8UUS5nE1v(;uR!U^ca6EhFSWD{CW#)@0M)G
z@zrQ{kO`VmEvCQW5P1~d!eD9{2Ifq>AX-b~w6ap9W~@x|9jnn}e=TOe!{a}bDK|6i
z5z+WvDsQ@4l&Z^a1#Bqlp%C`W#7jT1&Lwb`C%5@AjkULRnq@z8&EkDkT#4i9bL&HO
zz`WXHd{a1h^5b6;72{>{JR(cD3_`X7wOxzUzqEEUFx#TZ^>|R=w1Hiz`S&C2ZeX4T
zB0~QyxP6<`^$G4z6dF(rHm+QfXAMsHeYW%H<>XIIUxU8O`XcMP-@D;?y+1ir*$K8%
zheZwFw&W);?f9I2&}28)N2%oewpYv6BxR~aw}srUB8)LW3y@B>WfA~)BQ6(iV1IV_
z*M=k(3VD|`yxlF3rfKGL(kxx4krn0}RgdiQraNy|?7=ht9HH%M4G#Z|_6GVpJm9x7
zY4_AjfwPgbg1uWmdXcU6g(<)l>%IRoS9dIUr|(qZ=g{EewG}E@c~+-gnoodsgF4P_
zi;$JSEc4O$dOM8%sh;`TgbXd|GoKeF$a1tz^An&-vC2p@1m}l^sy<JPo8c;vi3OV5
z9NCS_ujI{y7KQzEDC@N5zI+m5T|J-J(E228fPQuGE^eNCrC*e^2o>y0hQ1})bq~=R
zbmy(=Nx^?K<#^Zy4z@&Ns#JV!Lwx?!n(mf5%SpNIvd9$BRm%xBrY4Zv6v6j8go@93
zw7|$QL1B}*p<qI>KJn9)`W^g5yn{n__mYewfLC%SgkiU}IZJ?#n85`XUMxcq4%PhG
zIqz1$5n$v-!F(dMpWS~&5`FBD%Wg$|0p#0aaMq-ay)P*BWp%Afx~Zc4)tp?RC(e&7
zKo0(8*0uNFT$K4~vE1e)QttSAv)Fk8D?n?YKdu==d@4HWEjsxgm@idfh|N^;uVyp3
zTwEoImf(cND^!7DLDd+>kvYe(Oi#4{4aG0RD%zWnhk<mr4jiG8186OJWyH2?wkQ6D
zP)c<VU`RAY5Wm%u)pS|tH3E(yH7oF1d3}a&+aokCiROx~z+8z8fAJP0=seMPi7S?$
z%gE}lZ1o^}mf2*nw?woh)Yg+0a^}9wzu+|-8TV^(x=ebCS6l9YKKHSKb_4_t>*6lV
z>?7w3w9Wk<sz!v#SPwHB`Y8`-8FeCP3bD#Wr-knye6anioCo{FI*WDN&+b&B`Urgh
z0uj2eyP*5Rx17v6JCfs#db5_V`q`pz1z$!5=xcick$<|x`NtLbH5K4T9ZO1)ZSeTh
zu-oC)o4VOIl<2KXl@drZ9wt>JyDBNyJg>>DfBpkQ2tsn~d+s0MwanL0rd(*|Q&M%S
zMziQ+YmC32izyBfQr*B$?i^bO9j8Lj$p9dOxuT5A-*P$ATOhDvR{%MTqNF4?_PLMk
zf_}uvy5H*~RTWKMulU?rF~hNS5bdwY6Xbsow;Agi@Pk+_s#X)mLJcv}QM+~x?c${f
z;Q^sNKK71H)8=B`^_3YwVMZ))66m**Gk7&}(s{kf9LBr_PHcC5(QQNcHV5rQcaCjp
zbYE?hN<)W1BvaVvsd}r&?sM!2(1g@-U8sjmw0-Tb_jP0=1u<1F+gYx05b_%q)YNe*
za(FV37Z)a#U?bGYbGnecIl&UM2Mw42Hdxk(e1kY1bZ<zpU2$&6fXyDWDIlo93+vEk
zD%_9F?{U|W*`Ou%zo(QpaPSw|eGs)!Q`y5HI2mtn$%JoQqdvV*cj`+{9B;iplCjjr
znOhSOZO}aX%T1cVwy^|tJTNJTZxSV(P3aP@7%9d5tFtdQ{U?Z*cYSG_MU-lqmmLK{
z{~Ry2(;+4w3bY93{-wjksR{9{P)&-|`EUw#1rOpG6xZ?6OG?yGq=`2gUm7q#XGWnN
z@8LwQv&N$+ZSIc1b#=5Wlh7B`_bIvmR~FttL@&^K-0HHxnsGfH8A`F^>|KnNyp!9C
zv{N)w`X~a)k?0<$&n`kD+wl6PvMINH1klhfW((>|3*u?_5rHwy>o-{oOGj!}<)93t
zPZ#(A|Ct2S3wyf39is|W)pt%8+H?;8?e!s_ouSt0!6rQBv$a1IORHT%)z$diPtk~X
zO@E8qFvK|c!nw-N-yWHm!%8n0)-XlgUrk30lvw84n`;t_>(NLhuLv-vpwN-M_h0}b
z9w^vf<lIauqKOJl@8@R*giggy=FhS{>_w>oH?NZySo;=nFMJdc$IZ&lNVlK$Okvzm
zW<By*WR;<p3n&pGl~&|4HlZ42L>w;n0S&+WQ~9pvo2Fy_zl(0D7%8gS`cB*@5Ddcv
zfaxC!>eL4b);018g0I6S4jVKSt6S&_Hg?wUK0hkf@X9Yo4KbI%B7H#q$G{fq@?Wc&
z1$eFsdWU#prCWg;Tw_o!*Kd<rYkce6`6WahwmFQe%C~EQQ=s4v;+w`FsEhBpeu(WD
zno(VZcP;6J{Nm^c&i3TuieD$6qzlZv3n5n%@ZE?F5a)jmmlIw5E){Kia|Ygrb(<)_
zvHc{M6Pf;q96&mw118?e5@J`WL&Urw9S#C{%d*&AQOnq(Q=jEK1Z0<C+S64cA!tXh
zaERtXbYE0tooSeFhHq<{-dInF{~kmrJ?`^%CSsk!O6t$$50yRB5<b_^v&h>*Oq$DV
zCV50kNkqi>35!d~yzYV~LO*Nod*D4xL3jUA#FF&}fV3e&TVeRbHu|gOQBg$n`fJBr
z!GW3D2vm)|t%}s8$>mzKNv%eutO(}w{{lzr)t+_v6opjlX0~>12TXBGP0Ww!k!Fq>
zD{PnCr1397GLBE^5|>yQU9s6aA_*n#qw9>ZKA&COQsgeg)-bhYT96^Gf8Nb$)2YOu
z(=^Oswg(OaleSjVC{--|;Ctt6#a}!%!V&b+FCS)j`@mh?zkQu7%{>OE!tZN`rOH~m
z$k&ipY;<;*olo=F*HvUYw<7?MVe{scWvYri_x7{Rn%y-#c#4HDbeV{Qb4eKSGEsJZ
zd*J>@S*@r;7bbZY0<8ZTHMCUbf%>u^lUI2M>bwgxFZ2q<Ey_U~>juSbjsr2?b*4wk
zN8D7gF!;!J!u<oeZ$IMR2?AS)xm59+)rIwlN_4JR=84G8K!5ycfPCl!R>P<~;FVc#
z>&_Hp7C)>QvgG`JT6ny00B@w`8POBL)VK3&!b}Ux6uOr4q3JM-)JspBT=Rmv9ZEfe
zM6Xgc+BZGLEW0o@LN5}rcs=2vV1u+AsI1n{%#e=jqAKpxjHeZv)_eMTXAatXZ&W!L
z)#qPUo)C|J+1V#g1v-)~#|W4(2t4x5yW2GUIDYk*Dud_U3;lfi{Hb<D=Y;`(!*%Zo
z^5)2d{_Wy*mWQ^|GQCCbW{e=1Lf;S6q#M48Uhf8NK6KkM&~q>aCHN&}R>WaD^OL+v
zfT+cR#1HFeqjHH*jAE@r;UOyGS$Tr}`k}OFss6WB^;3RBt#5S?_{kZWwwHK(1Rv10
zd5YRC)Fp2mXi~S)jA9@!@pgUGb4OUUen{CX*MDGo{L=VN0)fT*`n?z5FEgkMcDozA
zrMh&_ezSYXY(dynMK>b#(V!g8^d}Y3FsLn{BgqcOjArtB3^NEbpsexU%AKw2@O9eQ
zn98}^mC#H!YPoDweW{evW?N%Aa_T?=e1o*aS*T?7CVQI4x;#>CM%kphq4R?Hol-o4
zmtw|Fw53CB<ui~ET9_O;h3D!y7m?I28h-9k-7vZTSTzce7=Jx3@o_X_(6`N5rE(k_
z-1?QDblAs|3SY>3I^$xsVc-WS{n*7Sz=@^eB<?U8@yXwn)$WsD&Z}n}%n?1NJ%+YR
zk<8mHgsDQ&cyi-=9(P;puLf9NkT~$og@k;tWkj`!hgt^ZZo1JS{OXv-HHjqFT4gb>
zt~?~y@{PP^lMl_EU4XZ%!9T+pGQxH+E(grRFRmv?C6m|-iG2n7fena@XN>AcYj6X>
z!2Wq3;?3b}wMNzIYxP)fjNz^8IwOJnHkp29WapktvZaSmN@FhefX_Nv?Bb`_pE9?j
z0?hfcDtw}hgG>h<ll<mYrIji-ii`X%j5Xc6Wq3lUZ1rcld^+DRKV`;SdDcdC-Qbb^
z_+>S!L&dzW*bk}UINc`X?%DEd#t=#t)Scx?$t=|8wIpQ2QIylX16{U1uk8G~P3p%x
zfe}}uGs}y20xqReD=zgLGE;(=tu}fOEt`_ylghE1j9h+TDO&XsC?5&zF{MW*eSehK
zg5a%AbEGptDzSEw$rjHO*r4y=Oh24L6$1H6ND3*u_WTF-BqlejbP||Zl62TlB_UvH
zEjFa=!?6=d)=+dmWyyGsp(x9V)L$qkTd`9w3=ZRZB}=xt6?X|(=XNGbZB3Ly%-l*A
zWR(1K0e8}ZvU_3UwWLBaW5Lz-y4(+K{CbcGXWXbR0!?#bXd$ozu$J(;9OT60=j}Mb
zw<fR6X3mMR2vetCtvNPyWZ8(7>ZbMTsB%ZRS;*kI2B5{2eym!gb0*_`%SbM4oD3I!
zJ#;{BmQJ>jw|)*6UN8VpjA@QTAEZXpc8AT`_Eb}{-5gJ+Bu$KF1wu^x&JxJ)w+_l2
zp<rQUWl4R;dHJ+;_9Xkwx9q%m(mg+f*Z<~>ZwDVe)2swEYU!bXNXJ~YmBnr96B|aX
zV<b45+_CsNC@J_}QC30)`=A)9zHKgOcb<JSFK^YtI1ux>Ir{p|K8b36J}77Y$GvaS
zy<s|A_%Z8gArj@zG`p@~3XGmjofg4Nh<gK@2`xtQ7Y<Y-dCtGbDlO72>zOuw;FuWP
z&JEOfz*%~h=?gKPc&$OqrqlgRZKOh|iCP$kVi}o&xCJMpbol2btsp9Ayq90pLXQ|1
zn~dz6n{2yOT;2}T#t+)Iv{x5?t#bIit3j29n<(-jBQ@&fqSbp8&O~F1d3%ssfXlHG
zv+ZN=I-(5#MQkM&sj8p+dxYcHRP3M)zb5*>m+PmSQ@DvPJx3F{#OCyOSz0iKlrx4N
zrVRC{{LvR!b1r10(tKNHzs0`*hb%s257q?e_meS;bUc(+pRs@O><{l5*9KccKq4Xa
z_6ceDxQrgx)B*$mr%Wr%MGZw5BXFU|^LQk*cNQ-zPZ@87WnlBpF2uhsQ3<|&<HQ<)
z>{nP2U+3M7-hLvA(pm+!`$C#P1<r2hKP#vMHS(^XPagwn^vvPw<$e6#C`1@&1?a^A
z2_q|rS7@k{kw@l5O2>-0c@0i2N`x%MJL`Fqk_qp!<3+<U*<*Bj|H`9|>AUt*1UtEr
z?+=+xP{?(BP(yPtyd+@-wtu|#LOe-J%+YH2DHO1(An++34Uyu6t`&PM;ah({Qvx8R
zC3o;WtQ)IR+7jkX8$9K2ov}WGgKL5?K>A1CP<3=P(eej)mTp=<4_nf<Z1hR<_-Xxv
z|J6l84eES49*AUW{)&`H#(cDzNihs8Ql!v@UpBCw+$WLX=Son?t(}yVn}Hl^yVDGf
z+MKG&T}wk@Zsnmi$2fCSqGuTvWU&^g0dKV#q(i#_>=d2q2r_FOdEQ_uDAHO)kT)<U
z{4kkz#Fti@IWe(sw6xs2%eu|wt3JeCaCJk4W6Pt>a7L<2U1GXd_a<_R{I6}9D}40o
zvwRz><taq1Bn<qO<U47F{o?N*@BUEVJfQz_y=Z)0#a9$kADgql1I9esky~-ThHx($
zs1bDnwngS?75?MGSx18N>~+t#RJrhxqF0LeV@EM$@mr~nPAG2$T`=32G1z*-(~fIe
zvB?d0T&_VGY(M-Q1dt)7K4gfSlSnmPmo)PWbV<thP}R>cqat>yC$OO~1gnD&DV-dB
zrvYIw^_&5jp>s1F>J<;==#@x;jUTzr>z!m`dyExhdyIzjs0e5Guz+XfzNHz!p%|LW
zeQNNH>XEhfiasfh+Y#H<KjA%E)p5ol(UIh)W6`<PiwIlu+ntKGMBj~L)`J<YCnKCe
zsv^T_Q551?iontQ#Pkmxckqo6XTaVZt{%QY-NmAz-%cd-me|pTAs*E+E6P20t&yKV
zil<eltQPsm6So-1nAkY=BiC!4nztE4`5+jM09i+dDl*j)$fW=dMyS(_;;I>IZm;WT
z&DL6~UyPT{{;;cp?G-4d5p5$y@vHO_p`lv%cNx|Q49Ma@7AZS!e5oR;Tu4(ex0WQ5
zC|{tcPsN2GCGbIYamnoZCRO|MXv#f?T}AbCmaGk3Gi)Q$_QqH$a=p4v1o?UTTt9@N
z&066yrr`;&m;L9tXp7Uoux3Y!nQwVrAO_43do<Q931qHLhs~nJp~;+Tt8H;VWc{N4
zX&<t@Wt>1K?c4~URqOl-SRxo1gGSz>r35Ft+iZt#c8>T$uRn>D)+@O%sEYXAthYTM
z(6r?D4Va0)-|Kw8jarPBWN4L@{(7jgk)iqM=MZ6=jEX1w&zGxjD9ed(35@Bd@T}~{
z8^xiNme&w+smF#N)NzC$?}jINfM1?bgWL2xbe>z~FhDhB*%e>sPy&mPOOrSd>VlzY
z@Dt!#@=Ul{;|~jGl?|3{mfcSuY(%`baELb@>#+hVL>e~K1?i^3JlF$7VG7`H0BOS2
zd;#?p7ck~$E1*-CS(E~_qE~xMfk3QcJ=Ibm6zMjqDFO$({{*NN1690h@$%F$G!BlM
zsAnLr+@nPR3|&D6m*AgbtNTkWVt)Xw{CfY!!1wv|e4Z4fCpw2XDSrvdgHL%oivoGs
z;r=%|sW0FReuyiLdZUc^z;nxh0=k*wngOtGF|(ndqcpm)9HRl@3|V|)Oent`+dEE8
zxX#9imf@bz$g{J8=Jg=1wpHyp^)L`hLySgp2*RTUYc>QNo=76mMxAP~*FUm336y5>
zJ-FdU56VsHvkU#4CwpjatHQeYlyzEWKxV{DG+i6KQUKlWNfVh?l#Y6!Oz3HbEjuml
zhMS*PeYXEbfaYN8WE$Czf*)+GIFJ2C$Wbb1i5~GY0^&LHxg9Hd)Vnfmk*vwa!I6tt
zT|8ukgd12@TuQPN`l(Uc?a5b{L|!^c_WP*LW|@)pw>LQNheK^}?+fWk$$OK#S;Twg
zIT6Uf7Yl4qb67r&$g9J#<-3uWTeOl-d%>XtbdElSTKC!CDA-cJ_teDtYwp*59aPhr
zJR#R(Nss-;-+u@v1d6V64m|i80lp8pmd*a78%Y0CMiAa0P*y#JgUSrN3e?q0=BPfE
zOimcb?%c4x#fv*Xwk4?23I)wv8`7#7v%a$Yc2A$u+Z+U(bv0!QneI3%`HmAf=B#qM
z+uAdo2Va!RAlT9*($!r#brZ+<ia3<6yClSKoP9?~x!$cb+$iS?mIr3P(yD(86cz;m
zbz?B_jUECk-JNez#{N-Q7UT(}H&n1Wkmt`!W9Q?3Bj-^#+84r7Gdau7x`39BwF!YJ
z)lDcozLYLq1IkJiH$dF!I>^%*Cq@RqeM)W1gotNVxub5-$E$zRd$Z(cSuYiiWyykA
zAza;Zdjw~_v`1SD^0AKU{0`~(PNyo2t>>HrS)SEc<Ss}Y1LP1w1py04gv0&kp_gpa
ztpuGbyY$Q6&d_?c*j3^4l4jme%E~UAa|JJ4C>nGbl8p<g6t42u|45kr0Uut9hR+1B
zSlyQgkaQuHHci|`{>1}-3^%Bp+;d6G-t)(hyEvEkgsAnueQ`kBhmU&DQt91*@oo?U
zaTCg7+<b2Zc73M68<@b~Ql`LQh6dsynij-jp8)FoGy+&=ZScD>G;(K)EJ;K?MolsG
zrlQ9j+#^D7fk{?M(_+JUj8m}gNrK%VKF7x=viT!qw;opc+7oicQh876lN`%Ie0AWT
z6)JS`@yJ~|r&(jawoDww0`d-e(E9Li!LLQ*3N(V|QH4qDncOVL>b>}KU!qhB)b-09
zL;vX@A~6Cv-r7-*yZoSLGLL936_jko9_v%9v=8UNWs*|XU0PyTB8bp+?9%{;`ZTD*
zgUrdWbHczr&`{mg!^SaQt3CiaDnK|Xm8v@JR|zpz90Vp!H88PHsgGmolP0H-jGd?l
zJu1$5noDq$IzHqG)4ntp)gq>%2;9+$c9ojgU@LPAj?NV4;aRIN^J-+J26RF5uYuFz
z9U#YMxh&TBQ)JC|i(7tA#kT(I=HE%b-}*+`SRb2eTB>KePmEO$rAaUi5XQbSXmyn`
zV>Aw*XsUcuA|7Wxkx7_Se+$AA6tkh7u<MYZn`#SRv3<jH%8?=x{uP50e<*h8o$R#}
zKTMbR67$3P*Nz$wzp?9$VG<MhL+!@nZ^sk<hp;z$PKW;~imeJ&fcRlrsVT8OScDBZ
znza#H;K>fY*PG{X3tnrkEdih`IW3(zk5#aJG0VjH*O`}p__vWPa5&BzQ9vQ%DY;gS
zK?l3&PJ$z)-AiUeDp>Z+no<pdIdyPQ5KwfYRdQfpu<5-Uf0*v$0`@4-gFJ*&Gd)h5
zg2@>h$WMm3JVV?}gmW{vjU0E~D6sXsiWI3Lo{aAh>4j<OLq}q4i#6X;BKpG9JC;w;
z9~it1B%A=*IA#Q2Jx<dg+4*e15em%glGOgRR8r0((J<O7!$k2a0*%lCs*rXEs1cQw
zj9$SccXVm6pC^+f5^E`*j5jg0P^_PFyp9t+FYO+0txrwLdYw7)3N3{bkRf>0dY@m@
zA|#z`dRdEsEph(h!vvc3h`#tB%%n=nREE@Z+DNH>`{s2x)(KnkNcry+TprvII#3lk
zqRLX2&g8-??t0I1Aa7~nd<Xn=44%vQ3Bh#=+EX(UOrMQM`OY&9(0kO74TRi$ZS__-
zQUGGJ<l{Se_0z3m+uHNC;y5ylM|}-77b_o2l)H4v6pLn1dg7tQfB$sH@>{STw<g}J
zkMhbqPOJ5pQu+gvrSd!2ZidlUYoUoxh*kdV8S}=5g2Oeks|?A<X&oTLW{uTVTAhqo
z2eQ0j<I4-}+kBc;NYX;9QS;L{k`O6Qi@CJkUd8qI=YkQX>rZPZsgaBHT)o7?idTWC
z<UsMye<!%On2>l>qD4a{cC?s{E180yD79{1BMBzM&+4LWsw%8A*!UiU2wp;)RBN!A
z+{okXerjPaYh82-R*v-!ak6<=?ELbh|CtU%Bad=>d=?^gwI-p__9cq!>%aT>;0LgG
z*7+n+4yzzOk@BpK=8Z67#nSYbp6{ZR9Atc~vZy9zAZO%#wc3}5)ttvMsfxz)_bw_j
z4ZHWxmblK0uh?U_vO^HN(AbkAUK`Zu@nL+4!8qodE&^m?i=S=6pxReLqS7nI{Y;Jl
z4^-Hgt-<hmtP{GZ=hQwk!Nu<&gE~jMk{=5kkTo+CIjazYdV%^k8`pJKT=?vLQ?n>M
zwB)vJ+qP}nwr$(Cb+&EWINP>uTXTNFt-230^YZ06RjI66mGnw_bt_FWrDOGt=Z`tH
zadjI$WrkJ94RddOXEU5agSc9D^p(5=I{#7*WHGhRZJA#u>-!l=NDerb`+!|i<vQMi
zbS`V)g+@JMiwt&B6MbFn*ROUY2TZ!3$&MxRTo$&11}w)9;EfKQwS9Ye;V2yK#xf81
z?){=j+`t7+r;6P~e~F9Osrge$aE2?ru3#=)pUDpi+%-A0(C14oWW;C=t3-U1Z+*d~
zy|r+h2!Ws2f;VT=iGAM_%;7&WuR4@IDgF7ipzisRO`U&u8&~AQ&Z&G|7yQOGNp;6r
zY2-wt;4b<TM&HgAz%vB{n}<Js$W~H&3>%<$1j)hhvq{@!qG@Od>|C4tB-R53<mz2=
zL$-x-BvHtd&}&a-m|=WRhS69+HEsx7_Qi*tEL{wj^GsdbDJyyIZ1Y0udF?k%@-jZJ
zryzfd@CY|U&&p2=%Glq#GuEK&KltKL6CtS-9&B^|2dmL=3DG^V=>!F#E?u137;CP1
ztCuT5j}Ok<Hs6v8WDg#tORda|lMQ#px4qfk+^LN6d8!u)j;L2|G%raquO`j}d`uDz
zYmZulhD~~c%N)OEp7|d}=Mxlc*}1a`aa~E=toHY)ecR`@+SF|7MgwD|LBHC#LF(cX
z2t`rs1uG@@8T*@|5brD0pd9%C0w6}}*6#XfA8SjJHk%p8tp}Dt?ua|3@#<)=G2L6o
zJZ@Zs!&k%g>e4es8rx(}vobCv<jR31nS>IE4Pr6KX$FijLzh<vTMh2@qzX{tSaguV
zJ~~gTi3RqHU+l!=Zcf}M1}DMT{#hHkdWlZXKFjb@2DI#I=-9#|iYOlt80vlj$fx|{
zhghMSAII;kEL++}x_+EdLWr=&4IWbON~7eIlV6C%yH$hnv{x!;s76a%64rt&57C{|
zTtxwP55$+pOJ%!f+)zPJJY822wz6Awkws8mHb7|(J!sJq=@dLSefyQXo8nD8(c?Iw
z`!yfGL0cX+$uWMCG0$3fU%OYojX*xUuYCAfC*Vzs2`uH;%<_06h9oLxmaK(-{m}*q
zwR5xYr=X3X83lhz_<N*F=u`_`3IE)-A(V?quTQgt!J0PtF2bfA_*sDR{Oba(u;8^%
z{Psr4=xgXxHh*Gb#<wlejBOLNA)Uk-GroyTT_tQ=8+CSH$ScTsFVTV)#=}DVK{-t6
zv3;P(5`QdsAB=+k;eXIOc`ah>5AQ}p?RsWyuwhz2`te{|+Ke`3z&HyB_vBaPUYWiz
zYA;bPhqc&!UB8&1=p}FRiMac@MH&EhZ(7KJ+FA)}<9S>t;3hex>qPonBspsJl-k88
zr>@G1DdMki|Bqyq1c^Ea-)l&+<C;qKWIT5z{U>ZO^cCI5w6(_g`s)l#1niDyM1ABS
zRVn;{aT`NOiE)V`WC_%Y2*>9>8e|tFlrFb8hMh>7*AryT&hQBEcpIo3^ccHBy`D}y
z3I^QuQGo&>vI@LtS_x&!*t@Q<uMpP>y(7HT$hF~UI|6EB-97J&Ft&i1Uo1;;c=i%X
z@rIq;NcPF=a(dkLpfj>{<^D9%%=hjg*59669yiUBSW2*pJ4yPa#k3Uz1LjjNzk+jl
z^ChWsa-V+0F%d^4JjK<6HorC=)}gtUE-~6*HL(+xP^5{cpQ2AgE#lus6@AZ6Fsk>f
zFN{CHKbMZozZg{}jX&Fh=a<BNXdW|)7_JmBiQw|bf~R5TR2&xMEV7<qEhebQ1h1al
zN;844=YulqL46z+NN0pLtLos&)`$iqgc9(Sm`oC(18}gkUzW7ZUdZR5y^D8{*>X;9
zl+{(~tE+(=(OvD|%)eAi_i@m>q8EMGnQy&&LOhj!VUH_K{@t@{ez*IOM~j5_;xc}r
z;GUlR4?sKNB?8_oQJ{?)**qORP5xo%ZzX1MdNYQdHw2_7-iRU!#eU~d8e$(jr2Svy
zw3tw;V*t(QsA*Dtd|82!E#-c()k8e!_{Y-#K=gd0Jhb3pFp3g=MAoRG^kA%gHrS&1
zC%-`g!D#&{fo$Z+A>rVPIN2|t_0mrC;|iDD8iWm6t$0I>Rcn9^BXdBGOU3E^sr~hO
zU+xVzK@J}=qmVY&k3=Lkbv}4r{>}hIKMP&-HT-Nkmv%Uc0ez6(dE9ab(IlpCKBUP?
z=gL;{uRve|;Djetwa!GUkYw^lxBMux``Kvqb#5L8;A9iM{)EkXx{k9E>NpACIO*$Z
ziz$PbTYMZF@HnfUkb;SX_mjlK2}jm2n1^+_D|~-`ii7wWG)rz-d}!_CmOzu1zlX<R
z3GFCGD|e<3SQQ=yLC0olm2qqViHA<8)^Hs9#0M=OwjG|qW}0TK3JJqq!X;?OyK{BI
z3T3`JS~sF;(;CIh{Te)r?gZQ};4mjdRQYECy@Y%`!+2uhruKwh#WaYGaMk$2{q8kc
zNe@I?#TWzJn1d7faIN2|!$9dU8+`aKBVuipVYuOO;&!c!P5bA{P(>kN215%-F@}MP
z4_?2G!7O#=yoZaQkT&Nf#zY|$U`CFi{pZhLE^;YuJx`%cG=>f${NIi-Y`3769f7}7
zd#M3Yy@9$lcOwU5auS1(E;V1y|1cyg3Mq>EHe)k0&KfN6$|KXBN@&sFLW^=}88RG5
zkq3(KxbzPA9lC?MN|H?M-t)uJJ<5lx+^ksy>jpdp8jPP}9p5hx@YhE1;|!E08<pKQ
zG675^-77=$G{mOq2M>#6vQ=6g_&|rqElO7^pW~$o7NrR~k3{XQx70(-{+x^XOH!t2
zmE-JcSf`=?q9M@A$fusj2deo(;Ktxq#l+M0)R8t!g)x17(@vJDCX_7yur3%={tke2
zV!*&(DYxKhdULBS3A$iY`d|9)wPxdR94Cv_&cJsnucb9fX=(tv%6$j+mj`R&#CKur
z3+j8l<b}3>$RI^JKWCGzxF~$aMj(m73pxlH9cm?lT(d5SH*H2sBU7qrck2+*+2yNI
zY0YATeJ@q=Nrn-}UFqbZTAi$z>tVpcDPkSJw9v}l?E>hMRm6N#*3$^ny6RDdoW2li
zIB!z^@wVL2iYJ6YTkP=}?owqc(2{RZuAU20Um<(eAo%C&*JYM9PNDS>UsprbCU@2Q
z(u!`$4W?{qr(E*W=$|ecW6tc1yW2)$so`wJ=vPJ?$B&h)FDJSmoiEIVQbF99iPjCg
z*qr*?x?{y{sCla`Fb~arAAcj}@UFtC-Y_yweRA0}G;335W$oqa2ru29?1oql%UJ2X
zCQ6(X+|^TuBss}Rn_NN1(eNQ+9!2@Oi=Qma^OH+lweFgZLmf%#V4y3kh5hz1h{K+p
zIcr3_eO~XTOciqffnX;DI%*|1#D57EN$ayl)hc!wqm-M^i;J=;LDt*ozvT>ve4kWs
zIuN!xz^VRV5|bu1?7(eRbip31d*|45pE%~gN+FXI7Et6wsLB?6k*3xZ#2WFIC}#bj
z*$6qoQ8uk>+MV%Pc}bLnTMK)jdPji0{#cxAmT0>vjumaT#3F)?xxm8Zi}SH>46ius
z7%?h>s~=q1G>b$e4!7kG!sR`K=Z#+jeevgMmL6o2|67Bwh7?tl^`et)|KkkYz|TD6
zVq)~sz7jiv70|t6{_zjIg-471?xJNQa7U|uqEwuG;%kYq5Q8<|+gn%dFa@b7bB$rB
zlZ%&^+Q9T+arVnp<_;VdTAg1i(2Jf*9$p~-d+DQM*vHi%ooDLKGLQCr1w|1A?E88y
zI=}!Z)>>`ADLUskS+2pl5Cof!ZkVylqoSi&4|X~v+;IM#5juUqe6p<@QG-Guv~I!L
z2m#FrYLYnYE_yWy6$RIBIWM9{CrS##>?WB5+V5sXszaR(6>88saV6A*kLdZt40ey;
zA-UPZT7*ZimIytF|NXmtcnivmH6&#uuPd5DqJmN~x8EQ^+iSMK#kpJ7B{~OrfB&!0
z3ejpEuS7^?l%i2HK3w?9&mbt==+9NVK}oI0VHYP{^O_X0*_T6SPr6G=%FOR)0lSM=
z7LNeeSd3TMxZN_gRHm-cLV#IA(KgN;CzVL8wH5J+&gbIiIi?PWQT4Au+H>zE81>>F
z^^c)n29!~MJ5t1Vx&1w{VJNj%sC@5(bIc`C$`BOoGH32;WDPfC=P~Q;guMa3b)m*i
z$X_1yT*r9<@Xf{~<;;+S&P1C%_LXfW52|1G5-8~opU&AMxB>gS8FZjUZ-U5R@T)BH
zM)rI-tH$bi4(uyr#YQzBT_>#qs(xkHM2WbL>9gxOPpY;_QtAb$q#qgY5=ZqMUydQ`
zO$4BoPOAk?ZXF}`@`Y_iDff`US~aG=nw)(dQwY#I{>PKta@(t-%<l=xV&V#?bT*fV
zWi`zg3yaQ$)VfR|M-P*pwV=nPIJ=qKRmAB9uQFciPIGgN2LD-lNe4}%=qWxcNcU^&
z;?MSYxCP=<b^!{e*3*#PVD;JcNESyka6E*GXDpZkjeUf37lsU#!@#7foZ{i2-cN+v
zv*5h8!irx=5b=^Nht{x8E~_B|x}L&I;>{Degep6oaW!|`ts!L#7U`JkCu@c0_@IvB
zn{fVY9@Uq(C!IRg;CRc(<bxXn9o}FCpG(hK?%bDKsLdokfBBq2n4+dNBD$oGj72U6
z>AJ+QzMibv>?s;KY3#X7z>Fls7)Tu?bzL)iWH&x(=ur*V^5p_`nw|%zwp_w>y6F-!
ze#-rLoK_%h#gaK3(zq?uk?k}=@e#I2fET&+n!CB>Uc!Q}(yxlW7YYwCv6^MreE{Mb
z4HQVe?fUZw%}F0%3FX+?3(tMSyE}D>7PI8s_D1C_{=e?|ZNd)SC6n8h{n>>o1LysJ
zdl3|t_32^+;b#%3MLTE`a~~rcqb=m6M#_D<LE8KK2*eKi3+{)bFNdO_v>Gf{#8-4<
z;Al&~k3)nR)@LrYAATkaos3oTTiN-e*OwBAwxr_YPe{YgS5ri_#m481J<Ugic@s7C
zykBDJRAp=vh5>?u13f-h#(`<}#SF+)Bz^tp`25I?rP~WfqI&5Y_0H*v2$V0Uqxn9f
z^`tGeW(_EZ%Z>?@yZhr%W3WMO{aqAUlvnwtAkN{((Zt+*YNboRODnS^=GKbpnJNK%
zr-gJ0&>rPOwe6h|kef46Txg#?aTO3|1;MsFV|Hgtp<I#{&Hk={v8vQ9*po<9>G}|O
zcZ*w@H7FtNZ@RbIa*Q=&?%bu~-dOd5nMJbW4769Xfq9H}?$4+*=p<-%Nj{^t+Jxl!
zvGs>mv;#EO`}?5l4JMzO5+g=34ctK@op~F2p3@4y{P4BUFRE)Qk#IkXzkctWyP?>A
zg9?xAna2H^?nls!_S<Uo7ni%4k{q@_!8SZ1es>p0>a;d;$S(g9`n*`Eq)#4~U)ZD9
zCelYl$&{A7mA7%GVZ*s){0wv-n`0QK;TC-CBe%$nNe&`LD~oi(j5=-(RrMLkBewQW
zl@h8XtGI*=&UF@~6z`X{1gD=`u0DU&Z%opU&??KR*HwvvTg5Jp%}8y=A*TgW54gia
zAA;;%p=0Jrg63hXs-d-;Fd?>L)>yxYNGxcSd0ahZB(+59%TV)<*eghZBt1d(bysrJ
z$blG@ht;1?zyw{4x`aEj_0KgD^wvC{&Cs!gK7e3nvC_;Qf)weBx%{K^BQ<|H5?(6Y
z(8If-({fmcsGesD$kvP#IJb(~Hc6dMKyl@^kE;k=EFlXKMDxKGI%TfA#;=sm_1E<w
zLFDSYP|e%Y`Yl3*h?f3Sn866+h~gdM7ymkRjMMP3AwA|<-BvQ*O$JrU)PlhdB5Q>J
zr@qU35@=3u5pMeqy-=aE!G(MtPAEUcPs;#b`J6T*sBUnsuA+(2$TZU;uij^C5HR6!
zLDJY9t>@>gTyV`SrU5pq2J)=gJX~wQu!9StIiP_%t)XjY*zb3~*B2YiPkevyBqCdI
z05;r23I}%gg7GY(ypSOE{@8<1k$S-zEf@S{_@~cfM5AF6f`U}tRlr8BskB4XzS5wR
z_=pUaO=z9G!`0b5?B*ivCgf`xFz&d&e=!~UNwQso;VRV7p6fB$9i1MOb<erh(oq`0
z(eVg*RC1{-Owbum>pkAC2$4}&;VKU{SXi;-B&`bBEdGkv`N(AP)(|VAE58~Sv6Tz4
z_^#R6EpMBXr(p%51-iW>XKZ<j5hCLlFu{eno~VWaxU_+Z=tG5eg_6M1I*c_pPBYcV
zN+XeNku9HO#JsK?QUkM&9gz;S9b{h}_T?#wc#=HoI07Bbx-SjdHe}jX3B|!np5VBv
zLI)l-GRt&zR<6#GkTf2_#iU2^#KDbM$17|bt`!c|>a(TBoy8(D-2isp$LA$OrCWCN
zeR-NOZR-{VD!Zm3Be+>u{`?KCF*1J;acKu{<X697bv-;sy&efSA)u1s0xa@C)#(FU
zz^cBec_?lc{vmjF)Oa$lmxGw!+2-+8*~H{XE@UeLcs9E1WVW_^1aIOj|3R%P{L<Sd
z4G6;|W)EAOR|lfDezLmCJueLDKj3yzt~i|tRiaxC_ObWTIJp%%m2KDm_YEW)`g*3O
zN!>&<pC)O8irLdzgX&d&)(v@P^PxpYq7HL}L{Z~ghwkGurVq1cJHC2(8j@IbU-HF_
zCby5By-s8eCPO;5g+ixi#iX=1BcBG5BD5L?I1yD!Q+Rhf=y-FZZG2NrI$V4-cL7z`
zf_13uxU0`I2Dyg+RDUvZzW=rqjY6kAH8L>UN@E$WS}0ij3NmAGaBGxMYB_|uven~B
zHI#a2-&P$ODb~V+B7eleBB%gWu`y^-<p{EAFX6<M0pJ?LwjG1G(I#xkqcyN-gc5lf
zjnjUm!6$lXs634cOA;N)D<(q6C&+LN&Kl&8Zx7IUWorVQej~$IYG_=GUTuiUkntGc
z)r-52nr_2;UF34{E>gj3iVr_L=C86zh&*jaFJy>NXL@sis=XJr_cC=Yu>6H4FCT^5
znOoNS#Tb=AO5!1YS@GsLxBBuegj>M=Abs0hQ_o5ZO}R^XhP*N-f_N6}sSV1QUNkuF
zv#FI%+Sq=p7eJ$5zI*j&v(TE}>?pmQ?7c+!5aNR5+S3!Rg}L3UR^+scIVEiw6Nagf
z(5<Uz$8ZN{2G^;-aQLALP66P(PhcYLiwuRk;{df(Zn;pMhn}kC`_T$TZV+eai^3$;
zX~Ex?M%rM;0@>kF-Endw_(}c)o@gy7J<c%O!Q~&+hQ`_5`C|u+H59RAEG(?VEXQH<
z=h&ZaPx7>d6qz>;CNUhcN3KCQEb^S<JO;h|YFsLC?x{Ve$M!efniJIws`P3m-rqq^
z1^5f_DUovjBjhjvd8p>oT14;;Js|ufiHrbjS)9&7zkZ5(tpv;DfTht31L?CEA*FN%
z2czs7xNSF-fGa1pcs>xTg+JsY2c*j}<L|NIIj$SSrKG9{OZOk1t>&q~vRfI23Ln2h
zb^;E|bVRD4W6rGQ5Zw%YgEYu%4|FMQYBm?U6X5Is-{gjF;(UxGe`oDAus8CGEjZ~_
z(`ot1Vnmi^Mj@*hTj!}HnEmR5!X_A}g8tfwRI3tfC&dE15avJLY9?i1!K+ALlPPwL
z`rE6Z194+J9rLWzLd!bvP<}g!2o;YU7?6%QvN$Kl^$0cc_rIMd<FkKJzP*!y=Y&NV
zpoRr5OrT(?c8ee?1^V{H11!zcP)!Bov=du6cBT)eLkKVjs7mHiI(`6@uyllZKNP)s
zdyO4xi+c25pCbU_N_Z)QHj5HeIOfy};{9-0gi~n9)RPFm{+5m9((G1tt5W^R96g3h
z->*%4MM+e1XZUikJ~X-1k>=V(md+yd!`_?E^z^=vSWqQI8FYsOBa^yb&8mP@s^p4l
z(#~f3_GdXvnQDv-NKus3s=FcF*)sQSrBkNE==?!<8qHItmY!mz;f{UZB+OC!3ok_T
zfw9+~|Hj*8jx^IaB2Ej&Q=TSXHO-K11ki-o`>=(M-ea=*MYOGqwhbf;c%wjI0vXZv
zG<)pEPpE8Pm#1YhKP`<=eM!S^AgGNNNSRkqtN3P)%x6moiCK%$ODb!E?_-Of_*ROn
zj5|cukFzCa6tZ1yAc2K?zsxZ|4;zD`$uJHE3exLYRiOA3)l@AQZ%oGJ#(d>{3(_e1
z_2?SuY7mxLZ-wld|7%Nt25`kU1?Ql~aLs)=k8)4i_=RwZC%L->#^A-drB<{z(!H$Q
zP{_RZZOE3MJI|+WstflpvTzl;-VQ{MM4B<*&}Fe(1Ga5*VH53%z7F!wD5^~mxgnqY
z1f$8)jr3#Q8*YB`pA*cD4FmYULT>qV_{tOy_k3JumnvR)f)PXShqX|-s{r^C+dYS^
z<vo3-1FT<B%Y<sv<muadt=kr*ova>xXvF2ABn##y!Fe2FO9aM@X%9T_&}Q=b%ts43
z5n?5X=P-<$AwC#?u-Nw07jlL-6zc8q9PwqbrNCTcH<RcXHA$sSUVcmJEK&BNpFyQQ
zN5$-=DUt%q3;_WD;`qBZ*j)!{;G|Y9(}Gc1N0I*7thQ^F-AeUN#pvf)TsGA#t|?O2
zW-iCP4aAF7OEkg4ZKirnbph}JZQ&jo?||_iv7o%7SZxpnBhF==+xN13cf<X(EoSmu
zfz(4XVSjS_^djffC8a^4)Iu3=+l#CB8^}TN#GJ!b5F2k2)Pu%D8ro?t3ZiOmrKOOC
znMu_HCA?Ox*>=SpkzAoDJj~a)`)jo1q&;<4v}HW`(Y!j_Z+JWT`w+`D2GwEF*er8q
zdf5Pm3$z~7FcFleT1KS!k__7?nzk;^P+tdAcYy;b)hQLTQWkRy94Au=L3OR!8fz<&
znip2k@+66?MrrPawCQ?^ChFDgvpqJq`fP^14&~spJtcVPTUYrYq|wXV?I0O)65IX*
zC1p`}(7b}q!*1Lub|5-UIU^Ns3IJ;;2b!LIAIcY;O85|wKRp?ETf2gV7otXZaO@1U
z#xbKiKuWY=poX%{dPM3hz{1&nvIog>+D!XpF+ieWiJp%e6P`7py^g`6Hm;SU^uEeg
zl=*S<UX36+KrBicAp3YE$YIhg96;@F<*yS`HshiOsw7V(a*ou`fN?%Eu#uN`{f2l1
zSH4tLVURf~bb>%z4lkIu_bO?oj^+uDMi1)RDw5}_@Yp(PJ*!t^GVAP7R~|QInxpf5
z^ui;J&Y;lYuP7AdpSo^?E_LOw*dQmoljHV%$uz0&m5Mp`{y+y?Ff9*8Ow8o!^U765
zFXr{fHEaK?Tps+MRZtUkQSE7tz5&J%CFsV__G}fCti`;zyl`}8yc6#?L!Xo&LXRv2
zU`1DYB@W_79mqoPP~1cjlt{kiLjEhk6Qgt;?ljvj5^zt0daRCaGvUReVz)vre}wuu
z#!c1MTV!U5q54kKuiePlD;m&f^}nl&+B#&sTW~KVb9i1%m&b#yHY(y*a*!w}5D4`K
ze6nLsh*rxPA4V}&0gwXj+KS^ogYShX?NJZ*V14|Vi|MO#sY?^1-6rE=dHS9?`%%r_
zqvH}rhDnwcC7spi8#9&1R^yh)dF(zkjJbpmM{|L1eEe*B)~8S-Z@qaA#v}eC(<b1j
zObYnLi0B{CC`Sjxqy1iq6)d97?Jvk27WJnX`lpzuNd5G^>CwabCKso<NtMH}rs=b9
zRZnO+Gw?&QTx#CX_N1wDm9?2+Rn^RsxWxm*gO4{n&rfK<!x(DxDpC#JSMH}@DMBq!
zXJ3RwWEV+|E1{b;ZFe!Q#iwFgX=_d6PIc2tA&(xK$kPS=zZo($(yM`r`Ikz7@pc_7
zFXxPeW_VBZzIycQ(^@(qkB5ZMo{FbQ<6+05LeL+NW?1p_TZHjtyk9wb-k_Fs)1JwA
z`~_P?3+vqmw~xA^f6<h-fQ(U1e-Bj>xul8{0<A5dNSGFrnC1aW&ohTK?WdlxyTz5%
zRQJSMuAaUMJJ*Ow^2->EeyA3vcqE*AdK-K4dy=g}Gg{8L{(y6yT5p+=T>Q=XlS88W
z><<&znz6W%yJ`MOM&2-TDzxftS!p2{?xuv6z1*)Q@AKCdLABfzmwoYgjwEY^Z4bvE
zCH!X}Q}|y)IKgfsJg<5(LePw(Iuyx%p6;=QdPv207%293e`|q)_Ey}bv`Ml&#nuA<
z=A-Gk@pT3r4Olm>=29V`OKmtc*<<%sc0ctaQ`U~%9;dTF<(L{Higps>K-GN~7?fWs
z=0?F2xC0yaeQ`pz&TwnotBAIpPh?gGevj?D5U9_1;B6COHWYeR8T)!uVqoQ{)%=XU
zwkE)-lDC5qn&v->5Rnj1WNh;w8Fg(CR>u{e7e+65AXYL*rz1fK1e+rus?J~!oXl|m
z!E@?q#~t7G4T@pa_c70Ks4LKcFQEo=eZ%NNOubeK>04rm9s6#gQ#vg{!g+-_lF->W
zwyrE4YE>2QgcN@PP=UxD(^wNTA$Bi=Y7B%@t~QOsk-}K1zUos&La)ovHB_?x-Z^0;
zFKt}zhER}1e9;i0T<!U>;v>e3rt`DH5Y8#SUOMBCvLq$<iDiQ-`=7aQ*Z@o3USFAs
zwmNWRaxGxnEo;qCInm+4#(zJ+59x13_2AM#r3f=_(ZLu`qf&LV-1E*TAik(NP1-@W
z%oF%X7p)o@`C^wSi>Pr1*bwoO;PN@15?)1;sKd=>*|w%xUZlsIFwAH$3Wnp`M?XU?
zqR7XQ1_c(l$b+z%Bt$4R?quvDw=tHXrN&|^_3?AQtSJa{aABb;-rO43Y+2_mXgSu8
z3<rG)6sq<quUbyR!UdlZ@LS(u;F<NQ%x!1vzYLyIoip2ins;&A@-JfHQY_b6V;>D)
z#lq8bJ_+VfYr2gf?6{GrB0L|q+xFep)X>xMwrM)Gv)MSPvtS=&#tu8&>t$C=_Ki)x
zGlTO`$Kvrej9212gHg#-S=SItL1N5ZL#~4@{anEbi!?jn_TB;Ig{T*Ly=0|QM`9>r
zdNmBiKdAmVI*OV$R3MhVZC*n6!(FnjN8MU3o<~ZsN3bD&$+NR9ctsCG0e7w~u+3~=
zCC%^zbR-c~&(f9&9dA*9b_go)cHE`6-+i0pydYuPBtnd=R)M(c&p_tYWwQF@=sC6*
z>%m6+PScA*B0Q-%`JE$^A^f@ThH|>2B}$>`p;A!bJt}B$AVvRmA(jCj!rb%_d&`(n
zV)B*UCj+zrI?CGMSP)>2htv61DG0cXPKtVLKVe>H4cml{I<By;keWcdqg|BVh_7Ci
z3AJC(mzFUHLj8;=%PAqCA|yMU88)W=@o*UMUxn`EU@M+}6W-Y>NPR;~q8a&N2fFRx
ziFY~e`ZK2=vWPW1?p41Nr$z&kg2R(V?Sg=@so$mP3j)?P31vu#(~rS}&FjEG$#x_@
zgE~uYyAz17&;A^6QkKSGBzp<Ff^TFqGCNtEw~Jf8K8HS7Hkeb(l=Fn)D^LcOTg^Rp
zQ7MOLx&=8NY9&V6a>|s~w)e|@p-A?Vq<Eb(04dio+Ul0Ic|f|<(GBx)3%gjXa%H!a
z=y3C-sZg3tP&aV?&E@?qU`VGqx99xtHHy%O2+08IK!hZ%VQmZv25Jg5AJ&rR4AWBk
zug6U!_@H13SzANcWBvZ#g~dl15e-LL&81Kq28m=Q5WghwwY<E$wSmTO^deYvd!{Mi
zgG=|bXDav`5lvic_upS#H&a435%O-;z2@egLm;U`L^iZjVB47ZAx~F-W8(9_o>}r~
z2A*`;kBF)PqX{zH0QIJ>sHYk<e!_cc8t4cRb;b5I;z91SZn+>!(4BE3XT>U$Sq(Vn
z*DYxw=KR5x8P@P0&^SP8qbtgD&bC7}o9tYH{i^kT*Nx6pky=sMUz&NXn0(K<U(`{i
z+SnA%<0;0ChWla)>++@{XSj5n{>y{mO9qydEIXDljI@0_oMyBZXiL$f4<oRkcDw`X
zOfK%jBZM2erEZtaTh+AWo&5+{$i!ffkqjmrw0Q239z~K&PGxj8yMHQYob46;(%ue7
zB|YxlhAPML)UX~046V~)VzX#yL-B2rcQN=Cu{l=^-Z=FR_zr6@P#q(FJW?Wv;=AsH
zk+*n?)THYkOz;*e1*NqbG>Le1w3;);LdS~%9Mg>izeu}U9{+H>m$*800#^68cu+BW
zcO=)BxrLKZ^brMLhm)#D@j&dHdP*Zv@)K6=o&W9A<Fv0F9`E(&el@CDegTS{50(;s
z&FG+$!#eY5-VW(7;SQ*e$nuAMv&@Ps^+HGwC@8*`TJesQQiH|tQrKErWnD<t;KJp|
z!feBCP@WI85pMn&S3V|4Uya4{&kY-kv&euM?K@o@Zc(}T?#3k{QVs_H++NagVJ^@L
zO%oZUij^4DLiHpoI}lm7VuCf1&i3JyW`o<)QN&e~XAc>M-_tGk?5G!kL3}xcvaZVN
z2#r%zh<UehZp6pnM9KY8`5Fxo9SEPAE2tooA`T%H8)9w0<%{8Z+Jr8McB$L^V;xNY
z4!1fB+VR1<aCR`5wY`6o&ptj$BXEsm#crx3IvkO!%&U>K9YS|8@W!?b52vJ%E3NE7
z#kiOGuUG!JeZZ@t?RONp@i+E_l}g3~UzP-VrGDv-0?&~=Tu#wS8-MPcQLD8N*B&-f
zhJHAkkxjV13UHPJ{cL$!ZfS3#5xf3L=U)$UhO@OWc_wP`d9i}+TbgKyl)C?dp|gzZ
zs-*3+j`(&+6OY@*L=hniv)?kFa`Y&qoJIZLx9c<TblQ0X%D2aAxbFnah8Pj>jJ3<q
zHiSgaJ7|JyMx4ptvTCP1Qe%H{nCh|%)GsDxemxv{Rr|MJWOE?<9@Ms{9ySB__*4Vn
z0!H<A4-?yn3jAI!C|-RwIQ90H?BOnuYOq$5!<PrODTC>nxMH|zbfBPAS9<pJ+LGGO
z<2-orpQ{j$1PJZbpH8Z#P+TKW^UNcwaOd>pnYbl<q)fi<4tQmRaT3BK$hX98B(m|>
z*DkE)a;SyMrk1o?tS@8JX8%~}b~^o?sv!1{y1Ls)cqR94ltIb%pA2AKt-9X#jBP`a
zo`4^?HHJc^!>18KVj!y3?=wXD+TE4BD*0<qL$}yjyARW*;CWamxE85J05POl<{Fxx
z6ZJul&uIX|A)lE=#CM03Gjwjk9pJ95Nz$`p?}&J^-h>u><Y{|~1%%$q379BlW@u`0
zQ9ay?W6?ie6KfwzLj;N%`<4j|7lqK&>>`=SVx5y!a+1+Im_UVa*h8TzYhZBFV}#L8
zuXn)6)D7cIDU+75-pX);hBic~ECMstj@T=mZ_C1cN;fg$$)#*mRakslD>Rd3f8g)X
zsJC(e6N+r^XlFGd9_5t<VX<8+nhS#QnPXZZVp=aZuGDO{k7j+c<0d{iSlG@%l&U<f
z)GoCnxiUCx-p;!O|4>&aF=k@#5`R<tl|^Yos6&z?3N>{#IzDHM_s_Y8;j&Fl_2}ri
zkNb#azqv^q(k(WrZ-<3%VzkiN&mjNIp<MwHY~eoo<22mcV1uXswX#$1EzsGcAHrMl
z88<^E6NwH7yOVM;DeX#vP)-o<I<2%%$YGm*eP0?2TbK{>o4D71pVlF<jy?U_$vCi^
zD*f|JW7IfVsAT&5x5u2Ihzf(O$ko7BOqy=HintU4Gk48>dG0ox9pp@)jnwxvz2yLH
z`}h=nghPi6a&yG=$fQE_d&h>Sma|a_&K!<t7h@w=Gb55Kh@3oMn2hM;KnZQePfIvc
z-dp^*V{XD=J16@T(n_Izs>&=;t(@?|W0;}WX>*#?>I5=X8()G93BwSASVtu9_cShC
z+v~hC6P@YRQ&-%iPP>nT!wvEfiqxCbD?hcaU=gKbjTeG;N+j=}fZkIPG|q2afWruI
zF=lO5B?xhf{^f^aOAm#RJE@qDa8PKHqfFtx=|CboJJCi$Xd_cc(ct=X2omw4Xi?5u
zgamR6=jqny(7QCY3?lBC^w$v&$}rx{+y_qDsPrbpV&$LX@VkVE$~iOKHPZxb-0&dV
zMu8x1WDO4hNv=^Kx~<tOSPC`tIVa*`42;D2UnZijCqL5(Ed@>2SsqnS&H*E865%4T
zVGX<4gkyUYNb4#JTdL{^Ql3BEzAcR|pa}D77H-mkRj`RqU)DOv9Lq#V$g%H}ND^Bv
ziNa_I3w&oA<{&0m=?@$EiGAQ=uWxeu)o9;$DXklD?E`>0s=Ei%B$IJ?I5{fvBSDC(
z*PY1rNe?*l&p5@9v!@;7>Bwu}kHoh9ga9ri;s(V{B2<byzBXDWlM&S<2#r#>rd0~M
zI@RyL`buO}Xk+d3gecSxohEe&AnMV2^x}w(+Zm{5_K5({$T6C+s7UgR2#oK@a50XZ
zp996Q4T8sI56}2%W*<+Baj_(H_|wbPxB6dUdz~Vy0~`mIJxMNko4><;la|y!W8u^}
zf4br1Uy=FxWC3jg)1-&bo2!|+z~tt&&s|_ov=X+~5^n1bLGoAVYgaC5_D51L%dpX%
zGr^^NN|YgKSEuY8?xxlxf8G&}hZb;1YB|yhq^mtgB8fi5yvPXHA@t;VJsKBESD}^5
zx$9+xJ-S9DCgW(9GLEz-g!M*~(*05;++i|b$w(vlmFAg7LJeQP80(4HxB>U0Rs8PO
zw!I#Rz<~N2wJ_P5PAv<)3mY@i3ejzxnMCO!XBaQHUI<G%?B8dG7u)wW?+u*4AdJb6
znp~$S?L@-s+_`B1;JbEN2QA1@PTR>Mm!W|}xL9&-1<pb$M4e~9@D#y~ce}_!@z6Ey
zy#_%O!Z7DaNN-=OQ8TAg8Kso^OL;i*8pdV)$2etqw<@`s`gJ}G@5dspJt-fiZZ>rM
zk+<UGR|4<voTG?nlL%?eI}^A;*gPeZxCxr+j!CP`=4IKc)HJeY==TP+mv}mWw)Qhg
z76>OQKTF)3p-Ab2Iv+s=prH={d1q_m=fs3h<)+DxIfzm0$SpDDfW~v~>-?G(0f<QH
zPA<n^j4x2vkZ32d%NU#AAtq7vjEmc<8<-R%5B8Z>l{O)V?g%Kb>4eW8;>kpQdd>+L
z{rG)aLI3nKiOicPEuj9>ge1SIwfiz=IPI|IcN$>*DSq>v<2$dsMboQnJr|EgF*?Of
z+!JA-H>?OSDwgVIIcTO8(!OmOip<oZQ90lw8KF45_yw$pjT;1`g>i4JkY$r2Zbyzx
zBx$2?E@~M8;XpLR&|dlm<DLL8Rey}I?+@H12n6xZ7EOZRpQ8IpMKiHQ>C5clyLzlH
z0e0a9wkGon>h=1>5%zTp{=tjpY+4i1{OvVVZuL$65xZE*BurgU>NIw%VDg6>;*{5o
zWBDqZTn|Q53);q-?|#tg>U3lXNqYbc!U3WYu1JnEwB=b-%e0XUK`j`R!}y+JFUH=0
z6Arwo+2-Kh`bCv{MI3WzVom{&PSM(4{bB<x4)v^WVP1Z~z0k!-d(1zIIadd)1gf|t
zwju58E{tVf*Fo~j!nWkBC+W+bxQH#8o0-j-jC_dd!D&><eZ)aw>ai>ho=?_SuCLU1
z<bA^|j^1jZTr4MpQ4OH1S{UNW5aCn+BG`CD1>#-b>7jXN#)oIZI-OMwKl{|KdJcW)
z?2(?G*Ny@s9uFt?J1}aFp-h=)mP<+hg4IEvS*hdeAO5P%;j(7kxZj967{4$7sp*E)
zq2QugWs?~lNGXZah_5^KvFcEWGP;CYr>y6Fjqf7yf)CMqTo$}GXDuV#hB5}&Zi!u#
zfuZ;1Tp7d)Ug3UwB}GW^E9P;U>T*{kHN&Byk~2{>9m3PjXN|VyKoD_u2v*NBODO=2
zt8h{d{BY(5$<?-r`)j^?9Q77u6E6vz>c?_GXKYgn0p%8xt2gK`@Fha4`Q<wyM!28-
zA~TB&GYobTw?qTCt$^ZSxL9ad>R7e1Nt@PeUm?L|OMx}aU<0))grbGE3E>oq%s#>Q
z)MdC%ZVT{Iq?d1yj&zCXa^nlm@Bb}DSI06*pfvCYl1_KF^legmQvKIR|L??K-M=~i
zP=QS(-7||;NGDzKwYigkl1A^jTearVu{J2g``AX!*QXM-%QT)gfzbQ5GVdFu2_$#G
zB$dr>3-{e{51oD`JfF0gPy#aCFGBL0qle}j^z?5kg&2Irm(R{;76YAHe|+d;aA3db
zFsbs}b0QlfXi5Ez{eZ(iIg|NB#L5~2+|HQ>at!Q$1U9{9A$?i-Qzs2y`c!qDo?TFZ
zAZBc62Qqd2vsc_J<w8`hl8KS;K9IOc_0h_=rB=0HVpN7Wb5LmrtfucObpn*7PoErK
zv_JqE`s3}tkEVDqZSrAcTqE)z95_I9w|jh7hKL0%%~re|xB(R@RoGNxbgiO796T(8
zX2=IN8l|0bpR%Tnvc=a%hbnl2bvc-z)UNSI^$;H*BC51EbV6(jSjo-dab4a(!S)Hv
z5`41aw^>3ZZtU$O2HCyFF7AU`F)({$`r6q`d?Nble5~Z`pY}@4phiD}5VoWzYT?Vv
zRV-Nu?;jOm;$LI=DCxHNqw_`^PXdE>etS$9X<7XVEIr+HJirn|oWXARl?ao{Z>sr9
zeGt*qXF5-b1OTbtW4jTHyHi41gHlzWh&K5^KHPei=52S7WB(}AXX7;;@>$XB3jyHF
zG&=Nu<cON;1d(U|>?D-@CCF&CU3h=dE`|o;C@Tw`DBkJA4$lFEaIk*MI$CdcB+(b~
znsRP0?#XmlbHr;;qpJCPGW?O&`^-tYL98mQE<7d7-4sNL!F_FRBQEx_39{LoyYVt4
zz%wmH?AcKN!i0m8lOAYCq%A$qLHm)?-Y><4_<E|HZ^%v&lZtKk)upR{f{Kjc2pfOk
zi%_3^G?g`PX?-V26WdSSTFXq9A)2907h`?9@c{Vcl^-P>b17q=izA)DWoMfox4I3s
za>rJFx4N{E232N{Z}C(r%NF^yPgcdyHjcR4>33D@5e%H`wBCrE%j-Bx=CFN<bCLr3
zA=@_2=yP;0c#lP={6(=B0#v;{bEonY`*)b*!C}qwL=g``B{vnn#4So`o+W+|r#*2(
z_m&9q*9rAF>vW3csN4$<kSvL>zP2m;fev}xt27<&CVYd->~w1t^h_0aF6q-;d1T!)
zXY#K%^|NB}v%<8z#KiV>`JZswbyMi4@Ql)W83%I;vlO<dOfP}-lLug|E}qWdTonE~
zzThS;_{!q<lZFsz-3XLi=~7sK(>#GP`6&_4vDY2~DS6OQl?9_V*en?vNzQV8VM=Ic
zVi_u9?n*Op&x;3#ra8`!y1el&KxOu=7~Rw$-^=3FZ0f*H=P9!AgYcsxi1z}%2OvA=
zI8~~izRlQ}Y_8TLq~(UCwW8&_pX_UL>~pw<nm&)7%>ww*<;+mGXsE+=j1%c?)+N0s
zf1vR}QMlf&=vxe1C^AeaacaRmB})-%8Rxi=Zdf7kY07x|Ql{NbA}G~FLNb2doXJ(w
zPb!V~_<}ApHG|8B%62ShG)!QlO3p(qmktZsQq4&dX9;6Zz?&Y#fW+Hd7ZX8ecvBV>
z;N}X!-;_@=2w}qC81VgWPy<w!r~v6M?<~I-@t410V3wW&vxu_Na(`5wn%dtakZxf7
zyRBjvcl6EGMx(xXHCsgzPdU2vo4O4g&wI-VF|`rl^$1Jkp~>>ddepN=m9yl=_GylA
zodsI%c;L`WX=It*x3#qgBQb<xCzPR;xw)ZD&5m|de7ty@ZqoW{2z-7_@5ig4m$@rY
z)qhh!rl$MQk@1C=<sRA$$PTFJ6%Bj#`HXn(jhQ&@l8MQc$Mt;p%Lb1?yRB9c$Pu>K
z1Hxs}b{2=-8(SfYY?+#(z`i3Nygc0XTqM|2Dj(g5Hd$4V4r|T~wor8&WqjB28;LP|
zv@n~ynYqk&U#L8Fx}b}sHt`-cCk=}WQbr)O<_XNkb+2$oT58gD`v9RGwG-fLkBwOQ
zT#+Z(S>YWf0Pc<H(%JE@2vTRa-!ZX;ke=xtYDuGo6oAKoDP`TFKk5G5)NB=w4BUBI
zn>d;iCiv72NwAVmu|LPobiT8x7+HeWMM$%e<>23xxUR7d;SwZxAs)SmndKc-ZVlj3
zT`Fe(^L;ACbOSQW=gf;6{X<m_^G8$oCzJ2J!KUdg<+k1j8r$q~&qP5R{L$aX7TVQs
zA&b$_eW%Cw%%m=GU+;xwTm1s!Q^}6sF+N%#-L!TiLXP}?tWRA*;hX+o!0^kf9Ccsh
z9A5sam%k||L>a5<2y>w*x&iEp&6@G(W^)PFmf9U*%u<<4zufz$V*IF>#kq#3S(62c
z`4?F6U(@}&uZuA_fuAGJTotgb2b|ga##j$^HXYZO&07PxnI)c95;2%B8yru`aX><2
zh&@&sD3x2=vusNx{tD(#HVJIQebkxj!UV;iz4Pp>ve0AiW^OoF8Bjz(XtBLqJ;KZw
zGrL=Kq(>E}zMhg^?}O-0&xvZml)%%eoAQ9dY8s2CPk_|S4_wBsl4jQ7viiR+5@7iQ
zz+qGCNx@HY%h2^>bgx`gzHa1q2|Q}Hm9QKcL0OJfMIUy?uOTzwt*&Wp6e(@Z^2fSX
z=I8BNA%+-DLosRW8$yi2*0vju^xq)Sl~n#>SLoOG0FHmnXLJ!J*}Z!?QLj~qm_+o$
zZ_6kQLuCO1?9sL<Jj4-{1HiG-&)~nN6UnbnO_$VQ?ORpiAPA#ghi~TN_aIG-!;zLH
zb|!cNeS9Devym}EDdZci{g@_niev)L7Z*df*8*ZPo^;Vv3l&-<P9sn~_G$~;n~UyK
z?yL;&CneIXgfWksCG-9u;^2;SUz2MmqBxMnJLN#aE6tC|PR36S>UPN6YwQnO{YdLF
z@zP6p!j{v32W4SlbM^rpweZsR5)1>^|E47?FYJ6Ymh-G+R7eXpTs4M6)(P^44JFKV
zO>4=WOcH}@wiZ;WeGOiUmX>Ll*-t~l`B=i8VyJOTavnui*Ewk3U;L#mo(#k@JDsnV
z*_A!&vC3q(8cE7%3?%Sj+el7-Swfv0oMh>;VruYn6mx_i2DC+1XOYLt@2&M=#L91r
zWwdk1D<jswqL>VwPtAz(qe^^0H6Sp{|3v_#2DoxoF8lr;W|F(UV)lb&$Yy-6)h#E$
z|Idg<M>Fi)?Eep#`oFxiB0PWNe*ybn0N?)t_P?wY{tMWD0sFsueEyeV|7F;J8TP+>
zqxpXTD*~Y006+nz*MFQl02F<qHsWH}?m_yGmLLKG0$>OM(E$F9&#_2~-(R3~cU=Gg
z`|sc1qPAagJ_%GOPD91^B#M)wF!1-ABfOwR`VlT3K<Ng*iKr-9`XbnM|I))4VnpRV
zO^gxOr~~)6))apjtNtAqNt1(f9py%lwO0|CDt%a6vGe00w}`eh_3BpHeM?;XPw5B*
z8=-&3+ByL7b8>ZL6e*7Qyz$s*cAS={0G${u3e(YDu1Me&WuGi(<23oEy{xOq;yyuq
zf8_<+a77)WeEo<aEXwuSsUa_wmVXSxO<e568505q=)44JpGTI{=dKt&TP`godffYK
z>@u@Pa<`bM6-%|?lbQOLt)Nm2g4kyhi9K~z724{lWv6l(LLsx3VNcW5>+jBTo<r<w
z6t{;dYFDXlQ%;PFzQp8<OCfyXrf+Kpabw7>mHkivQO0@$@7P<z5NltjaX^iwS!5+)
zFhXG*)-+)r$ou@$_apYFP`U)OJ{T;`Lv@tuhvG1$ha=#YP9jl1Tw!LO(LBXM4mNY4
zhv*HqzO_j}sX_&Rv(9Suf+u-(2k?-dP95Rns(OmQd8r#8G_sz?4RaFAe#xC&l&^sN
z>bYtaruwdaDCtg3ff?eU@`*-dR$Dv+k@T44c>r}q>=*knaIvRtF;;-c8ZRkw&D597
zyxcUP(^Mrb;Y95EY+$G|H?JV$PCpOS!W~w>MR-XGH#YsK;NFdIMwKUqBWf+T*S!zJ
z<7H@Kqw=kejW-gn1MK6*`8{@RtZ;A_6qYYdp#%WRBm22kG3si&QpTpDjL1cOyvl`{
zllFBhL@(oZ$|RkgaLjxDR-&95a_R9q@ger`kB3GQkHl(KAlTdSX0B3u2MjJzVvc#5
z=-BM3W|9?4;F`%yu+z84hh8bD01m62bruGB`EX>-w538?Sp>9U#aazGJrrlu1#R>N
zdS>j^#RV80LT}D;Cvp+!1M}L;WE}$<2ZGc@QA!15bB!DrS}|7Zux3|xEON?94BNJN
zt4XVW!bz{xc($c|2@ArvRSY#^;=IYIa&pO*BN3}kqI<b1PwRSll(0t@29@O>)3+5_
zRlQNo4th{T*r5;dUQV4@&Xik^iIgD1&u>1$)iqZxtEvp{D|jpf7*e&_mESV%hUxBk
z&(ACI-CL*GpYsL3T_o98OVCifo3>|-v%S&)2$B<vQSTS1KbEQ;=_M{~t>W)Zk`lb+
zLMB(C0~VUU2ybBiCAU$yc*;wZ!|oDyTvAFf*shV##U)NP7=_{~rusryfi5qFde2&T
z5g-D!7cZc0A}$9srYmH0@M@yDhqsxRB)+KU!P8vJpP~%8m$zV}{&p{@--8SS*iXGO
z?WX^5FYKlH=cWe=NTpxkNkGGJS4&h1FG3U98PtpI;;Ij7+A8soA%<0ida8|!EF#j)
zGB&j!d&&)=YUlQX7Z?ux+KeYopFYoDEKKpfTxn(3SNnIa@__hdJ2A93(VKn`N<#U_
zEy3`|IF~Dkq>R@3XuSY6Xbd-xC`?~E2W*zc0UQ2G{O@Wt4Yn4d9-xTpFz|CAY}He|
zijASmc2k-q$Fb*Ul!8h!pQ}yx5(a(xf)4q?n~GiaXCULorc_R{He_R!PLawQv|i_{
z`)LwLw+iu;#b4Y~5mtmKSd8-KNhsLDAQkNpi0*E|V7<QgQY3OOcdEZ!r?UzA$60W9
zrfIN%p6Sn)RT?`#4-Sby&ZPbgoJvhbT@r7R;=o~tVf8kZMldk{{7#<GHW+PyV<3rk
zDnzcYS+{4e-9)EpZ;8ffXo7r?S~+%yR9SwV(`c6;snulHzcAmK9i#H;+{Q!j#nsp~
zKTv<>MUws0QyIqDc>bglHQ>zO5D+U!Jo&9pCLqXBV_mj26-(E7y6RQ=i|1Bg^8^qi
zN&Q*GH;vKJKpdhiOQ@MP<@&h4*g(|+tDLsem8ZHLY5iFFIuP#YV0vynW1XJ#<4a!9
zd$=o9w73_MYhmbz8a2zBa}{+wH+$a3>ApGD0?1?x9dVodgPxpL*T!xPLZHs)|C@d1
z6sg&fB)lqXlZ)%CFCTvhOMUAMXnFbZw-@H;&zE@8I`+moYO+%hx@Zdk5oUtDqx@E`
zo3TSR3Q$qLQ`Eh@nz#Xmj!FQmI)^Au`xxGg^Db9#Z1pziRL%DejhPxi$b!bTsx6+w
zg4mAJg$@%|mSE8>mQDqd6(rwdV26>4JWYTuR}6iKj@3P~N^G$jkAW@1KiS-W-sJ@#
zDRu5g9Iy>DXQWa~jzl`SJhU2|1GO^70-hNJTTNn6iTsm*Rk#G1O4?+47CeP9n!mv9
zPICdZlguCJ=R@G3J`&>AOLUrM+F0O3&7I#j=KUcFH&X8_sA@zxP(?dQJ@vqYlZ~D=
zIs`Wm&~7~<#=-0a?_PmSLV}_mYt6uFgY+EH_j;p@G4C=$v9k*f)gD!V`K1frvv=7o
zB2UAKUuz61JZZ(#2f6SH*OmNM4EwGP-+Hcs@9U;ChLSPtL7$G}_#h;<@Td`ww>D$7
zNkeq(XN~<+$O+B1%=O3yEtK7)-M+li0#i|ieGdFP*Qo08MI1Z`^F=cQ7c);tY-Jv4
zV!Ao>NRZk$f`y{pF8k>t!M?v@PW>gzhopoED%|P6yI651-b)3tG(cYaP%<?Z+~5BP
zNkF#0O=Ft3y?;9z<Y#6?7}YX8Hi-tCx!_fIRSG~6N^B579VCtoxd`xnzGu@b<(I0c
z9g<{!qL0IAl0Shu#8!}sYO%Oo%9mDNu_V^QFjSyl(2N~z9V6dDK+dDen}6^J4D0-A
zSYHf!3mlZ2|GH|yV7~$CA`G2W748hL31)10pkV1u**dzfc7|#5^6zA;4fm2B!~m0R
zda5yDAWH!B<e+EP+y2FUpUf~sy!w>Y6M1Vhu#a=b+G)A7gyRr=FB?+>#c^ctfLDUR
zo{L_JyPXGfTc1>Cw`NCcL6OYK&NII--iou60vs3D51~nl?H5DQE4ruz4<c+DScbB^
zTEMTKCx>9xIM0%9GNbJlADq4+&1${`db%AQ?J^uLwXbh@Hecqk)BRp=72hk$54xmf
zQ04hIu$rt*C$7Rx`cWm?LPckc=g=*CT9Bm@laD~}_ouAPF;SqZRa&Xp`q;c}q3ye?
zbSo5+AB>uQhh%h>g)yFZD$bn8-g9Ow(40qL{~^?23%R;s{N<!szBHnhM*Xl)nHkI~
z<2}ykXlwYVgJNFl6!~NC*s9%zq_w&qb3q4MOs3Qjs&vE5Stta{eZTq|eoAmTI|OF>
zLUu%R_P#0?*XG)te?RsP$M*;w;Y2JeaZ6!_22KX~>EMiM!0%F(`QJBSB$<J%_aB<>
zg?!#}Aove@*W63>Ox)yrZ;A!YqY?YrgA~04Hf%Aq)Rs#yf^E_>`1gL*onlkGupp#@
zA%dA6&{t*w*H1(RR#JeH`C#tDc9lMs-maX#GkPn%-)!g(B5dj%ZafCiXG5~CSPWoA
z2Ww(EgJY%7^bgZ6(065PEH(B8)=Hf_Shs1=C+w?)JyfKr<97oaZUy;+JlYsKbd~Vx
zXz!>6IlMszR2N24^nK!&RlRo&!>%Q&Rc5A+e9hXO(rv0KE!#wkpf<&g2oOw0AHU29
zWPkUZst|G%>kIymI3WV9gic$KjaUB)U43(ZYf4&a)xd>Yi<IC69^YZzPcF&WfIpX*
zLLveC8Bb(ogU^YQf;K=@y9cz5&4kuXvUGB=z&_#ryi#H37ozjYOixa`7$^?k4`t?%
zW(q<-1<x1@(hxHA-ThJyD99?lnt}AuHlVhxb}AiU2+8d;Bj7b+4*ee)KL{{XYnTIr
zQXxE(t?Pd6VU}EUU;RTeYM%;7p`5K3HC%C(Gv12b5@9p;Z^xwl2EaT1gWh#<u{N!E
zvd?%SK^}eCpLu1aAl6KmgGwlSA_ID;qL8vTH{FbJ-6WtQ6X0-aveEV5w?|@k%FP%S
zUYM;0r9z=0@P~WbAHX4W+HhrcCioU4+L$0r(@K+d{{ES`=x^K{<8ZR=Z1Qk=&3iWp
z!$~~>(Jx1sf<CF62CAc^ME@Rzt!F6^Al)ol+!^Z}D@uHb(A9edeRjG#$o`losCIm8
z$@tZ)5X2)RK>{BuFOOJsqdEk22{cKSpUVo+)J!ut#VpTa%6~5=)v1tL%Mp<))C)pR
zl>?=1y1f;yh1iuB6tZQuxBEwHQ-gES&S{O#3kG2~lc5RHfpadrlI-WsrLCqag{DL`
z9Ib(N(a;0FBjQ>rlrd0HW@=YmL=md5wd_bsNaE8$(R<88QL%TAgrV%(x~ER@9L|&*
z@u@9+6CCQkSj=w9^d#6Mgh|avrv7irZ?A{4FoUmO9OD(IEtdgy;5~u0@ZohPVTfcq
z4s^`BsTrjJJ<sil>LFG1g(1*-oST{9X^+M>Gp$!eov&;n4^}wVtFhhe55hs@ynfz+
zQcUL#^!7Ew5CnI8o&uWtRa3H%CjS!5T}lSIm&Xz5IT9-;hH*qm!kPi*!_sr7LNFvc
z)D?0r)_5TOu<oNXa|o9r3W6LU67F`#T@JPkO*XdTZ9p5VjatE)1Sf*96!Ztj*+PVp
z6C!4>2LOCkQ|#Dy0}*w2?*9Z%a6s|G_e-yNi734RCl;SwRrF@fKuA*Uw1(`GUMV?=
z4kWN$KrQ4Qi<rkx@)f?$C63HDpEgDX$JhF>J>&Kd`-CrQ<HDR5vthu9r)W<RE&Sf(
z4;qp0zxgO%5H(na2hY3Y&)!(MlswF$1>7B22ZS>`&8RR#2!%t9pa&PS2A!KFDC26K
zaBj(Dpz;OskWi|UbS`P11`MR~*KWDxo7h7#GHE~bPpl|&(2GL*k7@@41T}{~rG-`E
zIS01$Kkdp6&pH<|$+Of?w9Tlv8!+TvmP(}&e9uC0s~_hOj89Pp8R(hMP$RWpiNcOL
zJDz1)B4cf^X!>cBpOCp_U#5qMuLf%w$U)V(QrJXh6L!*HX1<%)q%asA+VDKAgngoD
zm?)vEv{a4DNOi^LH59mc2O(B$D0S3@Q7t?i>2s*k?fC-(HpF`-9M!6DJ>$TDH)sVQ
zVTQOQ^BU4*x6uikbuYIEM)C+)*O(3v3PeRSYwQT&i4p^eBXga+SdRNW)le~=Lc#rr
z?m)3QA;0kAQX=mxEes>SrR{gFC)gX};4=hFK}lT5D7eZ#zuAfy=##vb;e!sdpU#4P
zMW%H<2t<uO{M=i+Uf60sXlWJLQp<}jqLI}*JHg!W&t<7=r-%%0K4dYqSw<BHRZh_t
zI^$gyy%kI&9vcqRL?LnF_*T-y@O%9^`AcD4J4p}2U3%7UL0$cP=L{*R8$1a_!Y9Tw
zO9^s(U}DeF%ra=qdmS}G9JG=vY-*%#22ziYm%8*8DO&YRKWMeO$?Mc^?wJx>cWpCq
zse~rYG6kO&`IU1;?1%A>mS5>wxN_v)S{7Byt1Pm+>}oQ!LwJ|M>mxbj-7@c{FGR+k
zFX!twzhLJ##_H+jb8trB@or6g?3R(#SneVZ0YPJqx#s}x{DFx?VhwuuOqG_Hj#LN9
zLx=jKkTh@Ip!TW#)rxO&^30onu(fg)3n&Z}o|9LoW%Rj$Jpe<5M!~CL7RB*@7J~~I
zi24{fxg+W(yoIFH0WTLYK%ltEt4gx*69qgR4w(B!U0&Xf5PR+x1kHggQ4U=igN1lk
zXFj1AXDc;T5Z*%^cATH&EC4?K)EA4~p|h~F$nnRE*F5{Fr4^wJ^C#qjhRQu$S5*O=
zL?qPgUBBLsvn>x>e$TdzP0TwWZ462za8G}Oy-mJ{u<lS#E=t?{Ll0IKN=Qe!_IiIv
zzurM~tcpDf-k~yv1gt2wlMSys#E%;+KGf5<6CQc25jTRsqs)a9&}$AhyhpX}#+k|6
zKXU8$Jx%*AiN5pclTJzhv#x|UpXeyfkC>hndGN@~z^`}W9Ag4V2U~hMz_EW!^8<OT
z3wflq-aQwI?v#K3LT$%M#&)nE%cUutG4Je4%A7I?T?<ThZ&wla^vD8r{n4(6F+1tP
z%9eAM_px?UvY2*?Q%-KBQ}MD6e|VCovR*;%cewEGcP?QgaHfhxqvO{cr&A2^2R!VJ
zb~D1MPZ<S*o4MT^p&R4%i}ztmrqh=_vB}%Z!gc`e{Av87Tb8}RvKb$wc13yb`F_{S
z#W6ZVV(toZW7+{Lv-<s#i3eV1phKa6i@!g&={f^2pZhF#R~F}<%9E1)rlAf}YwnPg
z0U0FC$cccUk(7r)Y0p61M%*e>|LD+h#8MCNt9B%PkW?o>AXc?W$z~<7M)?1YyfC=L
zKkoB7M6_udbYtKMnEe)Oj=`iEQ=QRoHSf6jK_igtp_u47b%j8h0enCEFsLfxOv<49
zyfg39csMXIEET7lMHkAIR2&nzLHz&|Waxj#+J_C*<yc+_>RbjUt$f^+t5-8;k>j-S
zJb19K^O<z5<{O=|jkQrOaAKG?a>zuj9M{de+Ab88`!$L6@3#bNUNuE*46A|RJ||9}
zOT7L13Z||A$O$B3Mn1y$jv->vrhy#Cx$Z~vc4k^MaH+gna8`;(ME5x&N(H4o-s1e{
z-8k47jw4A<+?=;(cN<pPgsmc4IgcJ|9$d{{{Nv?3IvEzW1sig^w2+R*%OO=Q-X^LM
zRU<~Sh~q~D-t6ZGG-fyA$XII$Fr(-hUVi;v%-eKkYbXye$V=|9N|WgikS5t%x+RCc
z{DxjpgaT-g4aI-;hR8^T_AE5V{`Jy<J(!Wi7MjSsx8n?gYAQ>&M7U3^-?A5qh}9Xb
zlfDK9Zftl9wS4%dCY0{ugqcF!a>QcNl5{10X>>LzF+(#DFhk)q<|318B@X8>rwN<2
zSy~A?twQ4prYAU;d0|TD+=wozh)Ya8iFTUk6R}98>;9L$IY!)Oc()Z<iwl;r_orB2
zL<&Ja8{+zlSYN0+=W(VqKR2q7g%=#?V&KcY7z~AlG@VYHU%FOc@{AS0+I|qt`$Z#{
zn+1cci<?`v$jOXbcjZX;sLT$0uFC<RXCf}v_xg=y&ro_}pjGr4>0b3}@di@|##Rp!
zzz1^q7jdSy%FL`5exV7`J+?3>@~PSUaixD=p?irb@F8zp_A~pwJ8a_#s$95Q_rUiY
zos6^Ro8yawIbsHn+@C$kN3CWKB-uqi07KrA=ncWCdwD!|NBMx~%@`tn&#3bJ?JFSz
z{8O4a{hP&(&1*od%9MV845QR`#9uHC!L+yXtfGp|Y^!k=)fnOO(Y2_y5H5zY3<%7W
zm?DO1_h+uaDn7%xWyN~#Z0&q2PpC-V8)?nB_n+sA30nzYj$;e(W1u)-^1YVPe`xyN
zB*(^*wF`42hvU`EoyNZxO)=f%@Jh8pGupx^GrrR3x9Er<1v9^MNg{PnXpcupZl*%h
zS9GeAP7^CHKlWDt-Khm+=ZQI|@NwwE1AM9TIepad5|C1XsKig9aC3T#oow`hs&bkw
zO=M$CX6@Ql<i6-oYgk_8FpSm8M@Mzi3(=aD3#bmcrHBFf5rNZ4tNj|b<1J+YR-(7j
z1MpYxlKwAAw5LQeh?`sy<|QvbxYb<=a{RH9S}SzmB1Kgg-hhgYm)3k2NYf5Zw2RVY
z@e{?QBvHh)Tvn256WQUfqHiX@4kORSv*{c81O&ZHjX6<fFZFX3x-uwsgylBq1vzT=
zR8TdeWr)71XhoC<)=KX0+q9r!{Af*%^vgWMS%yaX)5CS_5LfsYBr6&*#M0}xm^xW~
z?Thas&qA~*x0GL^JjI^wHu#2Bu@D$*a)1}K<{&9hpr^-oxw$GAJ5O0-XJaZ6mnW~L
zGQrCq!XY-7py_CDiFuk~_`5P$XfZpKlm#ZbGPM$(B%oTU6^Q>QSh55g3~gmI<J#$~
zES7J=_(tBzKtZF-2NXU+l)amD=T0-7v`rpy479ED>{l`iaiZXLv^7+QSUQzAsXQ5M
zYoi)!8}I>7zaoM6mtx=rKcrpu@}UGa;Kb7q%w*r@j=(NC1#*k<VKpbbqeS1VmOMe2
zh1efLm3ZJ{vi|VER#(_cqA+Vk0nykBjzu{=)jKk-Ki)a}AGe3k@N!He6#zYc=ZWWE
zGk`zBWuW&Hws7J;vd9`R5kZj}=yvLYWkkxAI2F<zXL-?)Ip7}3<>R=X@c^+}3y7_o
zfj$=O&C0R?X(<l;d6Grn``vUD{vp;+s6!HzJAB=B3$cg&TbaSs((h2%JZ<Vyc_uBB
z-j>i?nqR@5&L>C}k^^g3;*aF6x4?@uAq7%OeoJA;mJFikinV$6!Ew(@E=n0rFuqQl
z?J_!)C<{ZM2~T$s{X*a(j<9BkT<28jzz5>@@Iu7@wZJ2BVi}}S8i*c%IP#m_w>zk~
z){GPpi8Q~uNcjm^WId=$a7Q}Ff4-qCD}(eR!5c!a^vKnqV1l&;sga`8)*lTiA1f6H
zvw+Y1fMKfi=uN>?ak>te!*_Lm*aNQQGJd@>g`vE?nLEt?vt0Uo=7g6q@tT&Zdp|K~
zQ%?Jb?=ObyXJ&FNFlt?7&?7pcxDoB9h~SS-FE#s1Qi(ukq)_7*TB9NXYH4uy-yaXZ
zS%*{e#Y>aGARst$1YPtpp!X&oI$Z?xYmtUbuS<VBV^lyVI$W*9bV^)3t-jruV8TpZ
zMd6~vLkJ|SuOkXle-d8c+r1U5bUBgqB}@0YAb!wb2GCmWLjpBOm)*{)$qx}6uI^yC
zx<dkh|5b58yCVBW*`+--$cF8#ZDTf`%_$brVb#6kp4RV30W6f(?+A!yB@<+tjhp>&
zDLlzc40)NbJ(+VzV5tx#wzg`-@+SLic2Fa1MoI%?#yMP3p^aBdPwf`U1RE8rzb$fL
zZf|-4y?9`ATba-xUPY;po8z$q_%J^8OuUi9wPiIoU>(@^1ElhX?0w$=L_24cv$96r
znV>%(3amyke>(*GA@wafwZ;kKSE$OZ=$V4==d)#C^=WJ9f=eYr7v`Ej;88JL79J?$
z67}BxFxl*e$Q?a|vw)*GFsW74j8H7<(ZMVgxD6Vl_I#hT&_%t3miJon%Snr&h<re-
z-I+66C|oPsL($T#JJbwjFl29%NXZwj8M+p~JA0A+dNF7g{CWFAd%SgAHdOs&)qQ71
zxEk&E&Cspxcd*-;@*xM1f|ijvwaH7(hqH3-uY_*=>)<2ZHi?*P`UT)?Pu{Uwz(ftc
zuKoBLiUG@G(JL*em2peI(icUbsBQ04X0z?AA+-E?iMTnlw@#`^{m!=;(D)nE95#Pw
zUatgU??NkHPD@Gw7qI(T>G#sLMedtw#ly!jKs-;hq4v7e$awAt^TTwf-$-805hz!z
zqBXM&OveG1UU@|qD30l$IUiGgU{)B3WjlT;Cjx4Mht*q0dE1r#eru=a>kL+N;-TpB
zm?g6W$a=~=8|qSdv!vKCG7)5p(A3@g?;PxhJ#0Pn$-&JFBHDFTAaSm~2HS3;?r#5X
zB7V89!P^<^qJW@7w*hb8QYuedjpEj=qxcQdKxQ~OsVCSVq?BQe2v+TDSMsXL<4tOF
z>rgU6_P-I*t45>GD;Ui9rV^#(Zyv4xMkb-JWHga<Kp9M!vS2zc(v-Reu%Xm4r;tK@
zmO=o_OUCs?4yVby7Y{;yGAg$Zdj24=>vM69Qa}1;>cOs<fTaMRMk1`4&p?Zzk^Ly-
zZKkIrGoE-k@nTF6*KUmV?jkU#d#7yLKU>a=XyV^b(7Bbf$7Z{EA{zzIw03G#8zuF)
zXNh5!C<Q*anJJs+#|+!7>0ieZ30_5qwa~G~rc+X!@M<o60{BlLY(Uh3Z)#I!`h3X4
zWVvg4D)*SPFp#o&knq$%CVkz&(e+GV><n)94?}i7L70k96A3Gcv}`?B$W{EI?4_D{
z0sx4t5$9AaLD+n(VhCdunGaDkV1@CpWc~3A1pG3}tE(hij1J(TmXS5%dBmgrgZ(d@
zL9q^%AQE?cLvEKz#S%aPvH2agmD-&0e#uw@sns!`?tBW+?2+TWu1XxZV4Ck<;)qmk
zVQ?sEAd{+yLylPsEXI?71A<9sRtl0AvM5&vyYp(X!>g`w06@>-scGNJMet5lSuBdI
zE}^CJt%tY$2G6dZ0Vo$Lr#lHQ;9G?@2G<|78Zq>%xzIJnSg6Cd;Fhvzca|y9^So22
zK-OhdDc$}?7!_RE3KtUrpL@u)FKoARk2Kk3JmMDwA*I0~=WB+@q%A7Uo%>CAck{<g
zcyX5`(l&`uxQ)u0K|M3MlRlOPH?~RliCRJXUdfk19j_gzE}3-U!UrsXCmvSD>QM_h
z{zK{MAfdy6N(9m&^PZecomGa>Ixu9X94>*U2(HPtfzJSDg*%02A4Rq6xFx`TFCC`I
zpC#h2uR#Nq5}UMEp;2KFMvl5_vP_e*FrcIdvb;)VS*TEP*8?0YD<|$7I|cJZj2jem
z)3|r0A^&M=HcUzpCHcs{82OjD6X)-S2$eC}z0yl@hg1Sgsr&riYlVSP!A!b?%0-=u
zec*2hdb6|KMFU88B4ZAr$_Po9V?%ygRlPkXgMD{^lHOGrLQP#Uv387#vh0*_x=cK;
z-3M`r_aSRT?f-WkH&HtwTOCkfi8)#ch!dJAfmxzw_rw)d6%Y`5xruomrV>^?5HwVQ
zBj|7-Q@$(@4z23gF!w5O5GjIQCt`(Hf2OZ_uQo?{r(O5@4nng|p{A*G&-0(IUG(~C
z8hKf#!0e<h8&O=zk9Xkb>Qx)1ohc_a-%+U6Zxw^N&0`(+Ft?2Z{Ae12er?|mmxNH>
z4GEWCHP8__#?d^fdw|H?0W+Mm!w7>YQFUBPh=HP*p~luIuFenVA<Kkse{Wo%GWuj^
zt+vA{hEMy$<M7h-C4i(z2AcoiN$oJa_Ii!bn@$7|<gHd)2xJtlXiBbL0n?lSWA5I-
zTgaGKBg`Qo?rqCsw+PFq1Y#k$z%j8ps-BsZdFc<L2<F*iWRxr_K(L<kaFfR0DVC?Q
zNB@ZUo1$q=_tuZZ5f`My<U(cA6fTY-Gl}AmyXZJSjO!JDRL&wPIFPAE%Hf04*(>-K
zLr{RF-3MF$gM8rf{ejli4i1eDk`)BOd|b*toA|2*HAV>3;D5Y_QB1Lqw^7Vp2T~$s
zU-7J#9^QCfn=tSpYB5_X7tLPiFhilW0awVYjSbiRA{KrT@NtJJ#5g%-j)XYs7~Q3O
zv>a>BRoTvkFmB0_)n<87y<E;27{+;s#7Z)qMb+6`?sM95BKdvIDtPX-)zzC<B_XOY
zk8aD^*3L_8QFSRyKw_<U)0ba|gDdTbkUKLfKjNDJB54YkOR;(Tj%0PpY-gh5n48J2
z(uG~-@M!l?2(z7xr8_BH+UK2Ky=Yowhtk_p)+eGb4_qT`Ba?3!f?nI}qSg<96G_~z
zQVF&<ULqzNP^8~4Ls5$)r0^Auo_#Pk*9ULqG^OY&KTQ5mNIE?5i^x(dn??e2CiRc@
zXB)W$|63u073HejfN8us#Yp@)T@WuUKuvy)WeZ|7muT9j@XR9iz0|OF3><R!_Dy|C
z_iHFUZnsRyo5OR|<((|~|L_nu0G>L!8ZB;-7({C;+Rc=+^#palZ|m?qn-q;6`7Fn0
z$+x7<RF4lyuk-M7ZSnuiHP8$2Q^-AcJx6Uh08~atPIP`q7$fXhRc*E%G~HQnKC-lT
za*F*&u&4pQxeuwyG9f?|{P(3$O9j(%tHxagYGz*r$*v!tH*NtC^-?H-K6&%Y-Bj@H
z{EpdZ+u;j<VMGsj*Q}KWAT|L&39I%fsEyS;>n{Bd*dS4p<VaP(rILs>lI4mfi=asf
z4ROPS@{<-Viu}|3<5B=Z1(~~PFq&C=Jvf-0AR7HFx~=f0)>U!e|MUf6T{a~^*X>lZ
zrt-S&d90N6+VP<VD+mv1<bR)1E+7!qs~(&47;IL;7No0HkH-q;M7crRySiadn}std
zYWP7(Z7oonS=^TeWFo*$hWwUBZ>4Nc;Vyo#!FpT+#fZ9W>b?y9*5>E>_*TM%hF4C4
ztoYCqwg}g_*`@9Pd2~Hw<@|QUx$ho0!Vw_Jetg7WFmV_Cas49Vjg1ELCWn%4!p}i+
zT=Qwi6PFBYE0W~V8^V`BY(=yGT%UK!+VDvq!BJVK6?F)hu}OAx0{W@p@<Zq7i^H8-
z1sy}{|0?$&=m@d|C(zav!Te!ad{Ebi_Sq8uov}ghsW_uufC4vc^NZAA7SxS<_%39H
zK?-1_C%EFMK@`$~2}Onphy3S_^k;_1z-p@NlJC6(^_C!^Vn;!kfMr%nofT^9CNI+h
z3$40>C{Fk0<|B|4W@%V_IeP>AO1W|}Ku;z~U`B1;5dQoa5}#&ujIpt1X}GkK(@>BP
zU<p>t+KlQQ^3BsiFhZ%n@edjBC}PX*;%4p~Z@(xbj>OpI@nW9u^uX-&79#Jjv>ZAK
zfXYUGcy-h}A2VC{ym(>uD2mAUt|)ED7v2nY;fBFFj@}Z|Z^%M{0XQo;XQ>>HV+slf
zJqp*{J8el76WfsLS!d6ms8IXlfNH%pyQjHeMdX7duKURbb-HpQcBIvfGyN(d<=X(E
zpQ<zpX6q0fTuk1EY2&l@5w8ZCQVt8Tv}BX*eN&u6ZzD}0O$<k!?=3}RG%h?41z!0O
zuMibGv_k&KAF7>MHg7vboX#muuFq==qv$4}q#pV~Does}8+ll^MgK@oRiDBeqWyD`
ziAFzS=PSb%54nZ&iQRZ%+Q=)<mlmoF>t53UFk8W#<Mvv`2teQB@+(Jzt0Ob_qL(O7
z-XtrnWHGDZzEz6DAj=*&i2$x1_uk_1BBT*UeUcE17^TqZDf@Zz?DB>W3S?{66^vFj
z?F#9O@G0hmkLT8;hiE~fo;1Ja@wW@R)5b4F{F9}p8C8*=JkDkHSg|>MwZd#*R?aDF
zty`bmV_0--F3#?b2r43Xw(}vhlU8}qpxUpU>gnej3cPAuFPL|=l#2Ye9(Zs`2o2Q$
zx-quwQ)Ul#6U7wRVS8<azB?9msY*VU3QWSAP)wb!8TbH;!Ss<;<lTml)Qt81I2%K+
zE_X=~*L#50QVu|LV@E<WRi4M3h_Dy2Yk8qKMrB&{e+Z%teIqxEL}@U{^}D@CgH|#7
zEehXjjyQ+|PS#qQ;+*la0px!o305aKW;MdU)?o*}O~?moy|`ae7$1Eswee1c^*QTM
zP&2sBm4YQ<4y+{nSyYTqTi*CFQ2|-UY=C)Vai}@xVUXD=z6OK0PO}}2zUWZ$#MPW|
z8*WhnEfGs?>M56lqCjNmLgv!3na5H;Bmeu(jO#_e<dxS?XjFMZ`^kG-#jlNZ$#xOj
zA+Xmc_Kk#xMqgm@^%pgwRb5Cro>RQP?|2wdBct#+k2&Rr<F@<=xe;~@xUsWP6nYc|
z!H7gt;}V+ENr%~1=9J-ZF#NkaDQJ)la;V5Stzl)CQLi!*t1|n}MqZ+H_rt<}oqA|u
zgvv9D9)mE1sbX{bPv)*x^JGO}uBs$Bh$+}P9<dDRyuL@=!!P8P<Tti2BO5fz8Y>au
zRk0>{0qlcG$6V471L8eWZ3(&SXuHai_xv)^y%DBi_4v3?SZjf8>;>=iTsUXj^D76w
zETyxqk^vk?H93Ahc!SqZo9kzpV!vKy3#&p-{`upat7J#p>VYC7l(bRV0<>6TXq2Ck
zNz#limhKJ+QfYP-Q4{qkIZ(41eN@aAsTu7^^IeSq^AY!vST&b)*0s(LNieMbuFRoN
zV_xqGlf@k9xwWUp4EK;*xW&h;=fM2RMIK!D=+qcnl80LoM)SSA-H-)R6N=-p{D(}#
ztS}lxFMJDh%9KuSGFxLMy!VFOGkU=Ro+-95KLEO%Xkrhh(F%Pbxki^g3H6i^<T-bZ
zomf<L!2A!YSeNlD0*v;cZ@j_F8|BIAKcBQ)nQe$V%9Wn{v!P^eogtK9Y58{#!~r9o
z&E;gmxK7m&3C#8V%MlhP-;TfR5umZ3vf?y8a8l92WrkIB`|0=#p@$USbm+cU-DsZw
z+c&4r2fu1+ni~q~_0mzYZZn-pnCH$@8#R$!wJwq{2JYa@RjjwgM5f;HV)CLD#3Cu+
z70Y0=`@6@LtLg2Ku`?>ky)ERo3AWVJ4N0Jvuh<0@6^?61g{ZFcLjk6EuzpP?1v@a)
z`sM|1Pb05>S~jz$uykM;JE`@gdmWgW@3!707)V~(*MnM8%X5u^tqfc$nvo3O-c~c{
zM@tDlEm^HE9AX__@7I?ul5#)x#DRXyxZv>T9Y!uzVP=u%;Lwkgkw=aK-){Pc8el*r
zuXxtxa$(d&#2_N-kO?=gbXV6&gLx4pFo;Ds2{q|P5UfCJ&LTO(5$6SkGrUFB&oy5b
ztU3hGf&l)gT|(4sb|^1Fr!rrJW;-&RcEr*sgotZ|{PboYQKp)bS~hu%@lVHd0s_?a
zc2$Y^us`#guR$o9Vu^r9Y&*YL4D>7S#gK`Ju}^-UF{C79@3RCuqjZOPn$yGb9qh8Z
z^hZ<X-$%N*5G?_vZJ?ZFd^2H<5xDzX;)($u#9qRRz-)db<%34vQ(U21?0|fPIt`vu
zBAS!_U>?zKRFPm&O{=H3)@ntv*CBB#f&{^!pieJUIv|ieN;e5nSe)e|mS#+3ry<oZ
zd3Gj!Mk^}FyD#F5g@%lucE2rox!*XcG^5X#Slaeu#zgSX%;;0>Ot6dLOl>LICh!~_
z%ik!GXqp1$Kv$==bub=Zsl4d!qvq*Zsn91k?`2&PES|tSro_J&ysq@QDG{({<cy!W
zTvdX{H(~$3YZ?oH6H5bE9Mk&e=coWh-GqGTx=(s-n}0*YYl)9WBP@{9{4PQ-U`Xio
z%o8N(^l6;fV@hDxJ5}@ZTcFpIl2o^j`$up+p8B&|wR<y8{4Ll(H3?aPP;>}|d+u~f
zMOL<o!`<U025bk0zSo4cgv*jk(^<4*x?!0KlhkiKC3s1D>kM{Qp@b*;#iEYSq!RC%
z=0eu5r7kAg(ruITDR{L48Gsy93IlptfeOzLad(0r3F{pP%BNlEv^O<@`>e)U^M;fX
zY<ZOJmgoif{6XWDSiEI^p@25c0yuLXnU>>h2qJ|H=0+6s1fUY3Cg)`X0+sHh%SOB(
zvBU&K<w~(FOOTIHUxB*j!gaZ`l7XVSTY&}10zUg}_q`ne0-f;^%`==hWPae~LNbR<
zlokx9*LABZG(^pR>gR6u7z66zT{E?AntvI7Jm-u=scvD3?s@Gx=g$_{a70oaJ|!PZ
z?i;HG_co>Rru(C8atX;Am9WX4OEWpbm9kd;GIYSpyB^k3N@FqPwsZGMa#63@F64&C
zjiySi)Oisbvi2r>Ctl%iVD5qbaRr_+u!R!l!v9lrp7tQ8d&l|jn&rt4W!7*zn`loo
zTj>e#Beol`|1kGIA?-oc?}T-*mLOTDxky!IAEVuV9uP$#%4e?jBf~W4@?5;5fvX;>
z#J-HBuF$b!AerU8K*8yZ0-wNeu`h2iE%-X)S|#s`2Gm_%RDYWBt$W3UzXB3id5MAQ
zjOi6aa&?)zuxIZ}tsVhFK{zI+Y4{S7od`*hkqPejPPlLe9gqQD*u3<#oq`fyNy8E+
z?f{TsszO>f1+y+PEKLe`eLvN_1(&g{d%29VBenAhKdO+2g$P55g{L&PvER{$+$QIz
zu<|e{qE!Z@l~W$>g2Cqtg~W4OhkQ~TL+{whipEbJm@HVry7{T*hThOt<e&8UMl0<H
z5hUr3LGL0Gm>ac=V9x{jSq{CQ!)`k&iS6=3grlOEVA`d+4ZC#84gQ_mUx}lXdFVax
zlUG&BJF^`mMr8+OZ^>J{Fz}<hn_e-n8F0?B+pac{kjj}AUq--HotmpFx$CfD8u$G{
z3~>6moL4V<%oKqATqMpAom?mnMJv`Z_le-D$mn4ghHY@s`D2L4F6=pX30c3i=Vhu^
z5h_3QM4L9v{iFP!f8P>g4BROkNq${gfsZ4NgU}Jpp<k`z_ll@a2kMszgKlmif><EU
z?5G;A;b>=Bll#_R2AnuqoWx{YgD?Xc0qj$WjtQplmH7_$PCht-Un_8?XA<9K2qJFY
zB$eyA;gxWXGrYm95>xcZzGtvfua56G<hdsZlU#No5Jx54q6aTv1Ah90(ysN6-2=cK
zyzh}a_qQrBldfe!Zl2(jNAjl(Bhi*=l;kZil1r*&JF}sjH1*E~ktp9&Wg0pN{A_W6
zW1BDx<3}I|^D*ey^l^VIfiFt>a8>5P745I1LTo+Sdb_bcbS>GJNTXGN{KKcWc1mbr
ztVM;`nB%zEr)61y-o$iUOIw+i+~b8k4<k7sndJUUUO2IF>anOunNRs>WVs;#Tg!_8
zgzj5(WHPJ9)o=D~W10`QLM2#e2_RHWT<DQmQ`06ars4s9iI_R2KuJ$jn$ZA>wk1<d
zz!SzQ0#ku140c?OqEE&TDCMe+N3fpE(`c<{P}0)Vej$$otGru!f+8_3qYq);aoNGr
zU8y!X>}ILW_%cUuppA(Pafg~~g$a-*)NHDVa8B4E@PSEJ6%i<|b9eLCvAz{$MQ-QL
z$8=o9r#PoqU>0kGrc987l)4;|Jo+NIdpy9sm*=(}3p5bgOepyuyb3H)r{!V`m(MCy
zNIUr1D$#w3erq4Dm0Oz{l+TD?u!InKg}4yp&)7lcvOGIHI!GLqIOG!T^=wH5Hq;Op
z@Xm-MgnF=1knXst>$fz?7wOs@fKv`OWa+GQs1T2xGfM^eXMB{Y!c~NA0$#MY5@@=!
zS+(Cq&DEhzupu2yaDu11?dme-QioVTTTRF}8(gwFOKyYjclUGmQ%6Z0F5VPjO%<15
zR~tTSuNhfx9=Q;>s}HCeU`;^Y4+d;~abYxhm6m92?!mo^#c7@l*V=B~g>dkqed#Qd
zi!AC_!4hy9MveaOJE<F&s}`?TalE@;P9kq_XfA5E2y-v(UF<C7LhF}M{CUn%;&5cz
zgT4zUV4$|emnQXeBH1AWn#hd&qUFjEgXXOXydo0si>qEJ$BWEO9wY8gST$wvc879g
zq(cDr%DO1TCi7~RNG%PCbEI2(F$S-drw*Ema6rP3T4IH!FqY-0!R;Ol7%@z&YI?9G
z*N7fHq|aJgxBm{ini7|OB$Km1&yb?F?bE~nZt}^6GTq#xNVphzrTISqT54myc~6_(
z$l>#^J#B&HQ$8S{>ke|Tt{Q3UvP=z~FhTc3$Bm0vliC<Gr57nn8=;g~e9^T)XP(;S
z{X|ts%6vFvrMe9qzDEH}I1<tur-=pS{#h3vEYFIR=In=H?seE(g(U$eQd|)#o6j)u
z$A8|G`kOS+m2eAVNSwH$H>;NPLS!CQjD_}s#nv#NczjFtpwlQ$SWvvR&auLHk{Dp&
z;l@`4pq1=9b1n2`z`#rr1vAVCfro60q%AiuIM=PS_h^PQH@lDBfzGlE7|<}PRL2lL
zL!o2@^c3_8s5Y`brB;mWQF6s?L<zwVvw=^Ew1EOQmoQWfdEGsA32@Meg!k@$Y-%W&
zG$pIgS}@sxZK)=C+gLnvjib2eGe?dMsX*Ya8-yy3;8!xjA3DaOU~(eAzttwN`TYN@
zL;a#E$1{t<`5quCj@T~x19(aSE{|!BnrGCz@0?MY-?iRxX<e0}$*Sd%{k~^Hmwm6F
ze3B)&_jj)Dc`-KH@G|H|&fP?#qd2eeo+9tt#+&u~{54;HaA$+<X(zl%Tm-%D*us$d
zQt$=8Or^TRGQj#&W>FPOTtnT((0)+S$V@g6x$g!?(O+4?+kZcInTV1~z-3Dk<!ZpD
zVOE!WhGs>3qr@&HcV19K5`-bQe%1H3Jjd6XKNp9=E<SDtVPmL|F95(5^&Xni54zSm
z3mo9u)>7TmHsQ6|Zqa#+=!_yttg)?PD&m)=^oT_api?lZA#}g-7$o22K?%hb*BAz@
z(1}@`h92|y+?!D{oX;(_X?|{i-c;tUnF^OW)vNEoRrZ;~7<08)<L?Kvnw!#OBloY*
zan+-RE@@XYYAWZ;p3?!3(X9DJuCsn8@&oVeaO_~;{FAJ{r%ui~)T@MPqiL?|5r<<i
zCZpF_A_nFNi?2?|VYiPf1S&sU2yajg75J)(W2|*f3Sbf7HI$j8Tl4>04DN|@-(r+A
zO9L2YZL=hMT)hzT=)Ag>!+QTiRrfVLVhg9Bhl@CAjTv`~-S1#7xzBH!O5$zf4AD$e
z*S(~VPfi}QwBR&i;h{|syjorj(=jmb(_+!A$hoW>X-Qiposs%KHA@vgjkF?@W7x`A
z`zJ~$4Sl3HaZd0{N55_=-1Y;IGyYUIUH|*9aUtNDr@usI)fp)6gcvp59%bO2a;8$p
zr>EYfTKX-Ur2%SydreR%-S$2v@GF?(XKdXapJxJY<*wRadCr1B7SL=Rjiwu=6DbY(
zOQq(n@{?lnLiqh`iNSgmI!J&2qd#7z?MmQzcgz<pQj}Sn(lo9m2)}!vJLEF?u#+ZD
z+7YvY|G?4zN7b4_M$w2F=C?x_-mYJ+OSq4`Pf{1z1gw-aj%BHE!*o;@4KB)g$F-Ez
z_glSY0|$@UX9CjDjLMBlBd|okYxNMyu{zsb<!J4MaF&Qp*1wtH@&oHZjuHP+?O7r7
zzDgrUr%*B@!h{Q)O<xSikK5E-TD|y0?x<*kR9p=EDWCHd<=U5DAd}LwzcNsm?Xs&V
zPo^m-jH<cfyIlCfkJ=PFcJ}k+JI?G7z+N_1zvno^k32fhzg4jgC52T|!27l%FJq!{
zKtxHKPV_iV&<adJzzD*&Q0{oJn<c_Ezp+`>x#!iU+rr(4=01u78;09hm_(9=iZ@k!
zkDQ^Z3KCHE!|Vtj@+FaKhqv!O`f-j0-Wt(Rytj#;0x|MF@zmQp7bEi&0G2vJ6!>1$
z(EFWjTtvBAv|cyS(NF(m;n7u6>(orJF=QW$=~QY)x8qzRrh4<w1z6P4o%oJ^!w!o(
zb!3PL&Hr-@-<(fJ31Ly1gOpa4>5e5^QY}lQQB_6?pET4<63ah3U~;Y%IK_;-=WeAQ
zJ~w{x=xXO0737fczc;F6YYJ&*GPiatD+SiCWHApF`ic?uBo@7l2NS=}Cbgn3zW&3?
zYDB5JT{V+3`BN`X-=LkGQj5)#Riwl`Zd;#!t1o+xzMy^kczuu2Oo<yP#SF$KK?&5~
zF4DXI6`IkFbn6<Ws8h>G2l&I_L)ntPB*ja~jCRUT1?|)Eh`2NVc>|ukl2y9R$WU%O
z!K}k54;T*Utvmfrynt0W!@Pq8A2ff$ZfV&w!e6EMfg3xYHJrq|fT%008A)Cp_m8FB
z*}5~pD&y0Z!--W_u6O^9&KEiwDTzNVq(sJLoVT>RYP_#~;RtsR9(YP_44Bzl6Dz-P
zdy#o_8}kr(GQZ1G<R<h07VI@J^d7z#R~a+{Akf6bnOTOt+jQsVp-50ZR-hPu&z1P8
za7!m~D?8p;o?!?=Pqg<ft}40p^E3G`kwR1BtEhMEX_8vSXX6X3<Z&%H`(XTU%0~Ag
zGbig<@_$Oq3>KE11RA&n05KF8&ek#%+(6bpIHUMqOOm@b3)=AC5FX>=<3&Li4+^;C
zP*wc`t$M`3W1uE8rP#32G(32Z8;~O4Vndg)uZg4IHIQ~cB*=r{FlJ!yd{md6!(`su
z_}t@@M^`A(4IhmKR7MF%33T1OVaGjsYyj40n3esi%a>SQE+>;)E(qOf!HxUn@`6V=
zJ1Z;k2v}q%@OEa40c`a>XsY9z|5?OwgqDXYZJvXrjPYKL1eTbbn8?+G4Y@_@=#lYk
zzlN<m=l9nQ&}W+zDUWAZzl#9E#Sx*=lKpbEg(a)S!?M^WA#iVQ^tYl`qn<ELw=ZWR
zwhQO@QeH}lcT<QA`9FnO(tQ}<gqP=gd-N706ah<<(N|q0E-7xIm5iNJM~i!?`<uE6
z!+@Kw<b(bccx1P=6Hfbm`MkS5RPQfdp%Wyhdwvo{#9e;zXAVE=Ry6Y$V-v0<z`pPj
z<THM%flNbBJr;FJH#q5aH&P=vzNrfGS@>$xQz1wR<sXChK_(y^AETjO)d-1P`&xL?
zB$CgO?g!P8Qu$$8s>WBgz89pWDSl>RL#viWmdqZf2Xq}}Y5ZCKZ}H|g1!pSx`n^S#
zm(OM=@gUOBZRX+gYBe{`7&IYUK(FPh`y`E0UTbKwUC_M=Rz-FaI}Q<{HVB<v(5<U{
zvw3~&y%Rv}KB1A+vF4YZaEt8gHrXtYG=xEdw<rLH5UG-R<AYoEB6wksKi~`PUML=(
z`%S=i=ZY$HGkIe@0$wD1_SP=mCpxCozwzPyYYq(zHr3m@aeK>cHWa2fnoq1Ph=h|?
zGui_EY12x8z&xC@uA_BQ+_51`zW@pgeuV~#DIRP$Zz1M<t6@S2>_}Z`cSX>OJN4gF
zw4H~R)dpw1L#jVrV4Fz53u0IX0u((*tQEQDr8bC$uR4%VHSfFoE0x19i|4tS{NXAc
zZrD7aL71``D%3niuD>R4yGgExL^0ll28HmL5Ue_5w+CaiSq$hA1}Wb|uDq5VxiCZu
zL*Rb)|JHdm2&>aubE%M?8ZE}?O^Z(AAZqroT#ZLt!OVIQS1gT&HlD<w(@+ijOw=La
zY$FSZQaY$;Lc-$vFcB%d_dhJdWJC7G2vFy8G?<ALrYPx3I4bP$fXd`fijjwEQ+e~w
z9{!TDG&SPa(A~jfiV4z6#56P`i>V?yXz7MlD_h}r%;<|q;-1vZmQwOGb%0J#`~WTw
z2cssNjWlz1n>j>|gj5hygLAsfw#MuL0&pw-(8P{?i}PA&?-BV7Qk^V6D)GKgN@bG@
zYFQ;xd03}aTWuZq1<G`@U;0Fck=JPY8KX@4UM5-+xHG))V_LK9L_mMX!4pKPgl~g`
zT(Cm>9_YRK%o<4h_#Ihw2VUNn6G)NkV|(C*!42s7!N*=-xppN~beTQ`rivcQ{wF$y
zA>f*XW$2!(x8Z%_5<3ykhKcW<WOGb~+zLRy{y$tw+!h*6p2Y9Jt;=hFncJ{Q{<Sbs
zSDmHgJ%|U1VFA@5xqZpLntj)^lU*<Q1H?CzE7~~E!t2hw_r!CjRwnOOc;kW9`v5M@
z<TD@pg`(~XZ-xmT3VW;2?Ejn1bvl0E9!GLj4qoK`@X2bD`e`z)>?v40-Yoyjv>M5k
zM#cbYwpIQO`*s)HNXx@!XPL~ac}6WETUcR2M;w&RMBv!5Y8d5;86|11fp;eC#V~H8
zer!O#&^kkf7esTjdfmpLNt%zMZCixDJoPPV5mr(0T11DltsqQE`VPu)Eh`q1^vbB>
z-L?4HMhzuk(0jO^g)B_LjR*>Lv!})WGc*v=Z8zK&MG@T8HV_~K#alhrJ_aMxM4xf7
z530_vW%L;B&thgbL&O)(&;w>8kt*02x$_cAU7W=jc#AU=MLGO5K8YERdX#-}>pB+J
zTBK9WF>7F?vm2wtXofQVS+AeuJ%ec3zB<9+n57Qw#>O#cbhKC`Jfqr<npWa)*-oo;
z<@>N#R>(#kAN-ZaT%{S<!BkISp49@Y3o728U>bAkXH5i{Wt8}mJde(CZrU&2M*Wo?
zPp~i)+O=Fwsm@jdZzH6*TvZ8>Iivyje4(H=Aq(djh_3gO+j}NGs9d@-C$QoX|HNy)
z^F?fFXPY5W#X7&nDW<gIWJoIN5Hh1h<oZoWf>b~5QxWq!P@-mQRm-6;j8Rn1TOSmA
z*@)t+27yATkOO`?OtnQg@Mt;+($xabY=s!lkjT#G$K!#@{1U0OLqv=x6=N(M<O{>+
zWp*ctd0hUwe9LN#F#K8I#AfNUb#0<tD=-EyeQ(xs9`Z(ilq;+>)tAaBdB&PsdxMOQ
zKFjo5sjQqqY%*2C-fE{jgON;1AX+@U|Naga;op07i7ewk;O47FUIC^aBaLb6HN+#L
zX#8{R@I){P?dz*BF`@qubP|A3yTI1KA=i?j$7<fPnz%PNp}fLqTmHZ=Xk?svuI2H-
z6V0?-0JQKvb2riNbX3V+%(n(g<nP$&T>bwDCE>K1-rDu5?a{!sb<1IcYJs#T;M-7g
z=LF|zr*r&jW7U}q@She5YIm@kCHG=Qb0{1WwscLcWlPTNv(|w1+EQg_s(Qu2seaQx
zFVz(dxo3h#+6vvi16c%<9DqPj1{wO@Es}NJUG#<qPAtHPV2%gz8)nS#IHI2Kj7z{s
zeyse(Sv<Ht_p8tME02ghL&p`>p4c&9jh--r$gnb}COQ&0#a;=uF@X$JPNl2s)F;~V
zrOIrQ9-dhIHjBi*yI@DPD<Glu4C|BWqXO0$!@D`vG!{4?E^sckte{x;n>S`L3h^D=
zcZ!O_hjTMcaja7E=r?v$H=S*|l*#5(%|~btb>c5EC>x_N*{{pWW>Q-e5zJuZu37xo
z_DP`Es`5aD-yZgrwb@v&Teq46uY@LesFPs<R;=IDSWJQ)O{V!4D)3;6wTQ#^VG(~X
z`!)Axe=eGaLjm|@O$lXt70PlQ$}H`)^<(|3O1S0%G(DKvnt~5x=T%&HxTe(l5=2(1
zcjulMjvnE|dOFHzvy5DRj24|tqD3N!wikjv48;782=kqWfK}j3+e)yyU3t<J|K#{G
zh;srmCEDz~F5sF-%EWOo$8UtzV5YWw*-59Y3!ki-!-Qb{Cs2tC^`TJZeh(P#5*s|m
z)X)FA`eab*ePirz38zW>tmnD(By54d$Uk&+n0228c(@3lW4B~E{C3w)(_de~X#b0t
zb3Gw6(e)gMLos2vlKOk?UG*#IzHwvy_%TC*dgI3X7x?%2_%_#JRGlVaC2Q#}AJ5Zb
z%Yc*~wtTmAr_Guxe;1Df72&d)go7WoCK3%b{>5E6<0GKcm6P2<1hw&^e{v12e2mz7
z2Axl5!41ZZ^2iuG(Tm2M2p=~?mwT>`<Ll`LZv9KUKNb)nP8Q@(e|Q`%!tzn*L}+Yd
zj2od-C4hHAguV)ym1H;p+g~L<i%YBzk4l(vFyF5y+5AEa9Yku`@AB+1+BehFVahE|
zw@JVsE#jqu-<^#zwKH?py+h;m0(X)j`C5>nwdUQIcWcBycr_JqPQnJILpxbIvmuD6
z#*-n_7UMyRJRY(_N~Tv6scCBe-+;!0M0XwG<FEAEjrV=6XC8+x(uEj7!m>N6tuGYG
zFr&R&<_{sjIS8V3f6UkmlvRC4VO?BQzjE_b_ydB(5|`4*9L@b5Nmb&Xil)u*qv0ys
zXIoPEH4VFgCPS5(@Fh0;>=*_4RMw(yfp>>=r1TSqq2$-tNNOlE(#XdO6{^K7Dvj^Y
zex0g~e>2RW8wWf$+ZO31dc8^zOQ_>RD(14DJoW8PF-wCgVcW>LQO|3)36VG4_sTN4
zUSHUm>Ex`C%tQ1=wSRjoJLEMNHY)k4{aFSx=iPlbb|K4qMIc~9HlDe$MR^RQVTJ3_
zh|UPZn&6fZXuC)Y&JG-AMx4Id<Qud{h>OhXdJWl6rSK~er+)Udeec4-)cNacH}pA}
zMxqMr_QSTo2G+Rie%?y0@b2PQ9m6%3UsQItel3}?Lm3nO67dURD)4{mU7ETa(f(Lw
z;3t&c75#FPvv7b>34h0#R$T$IHY)mo0yqx&nOc_VV*-v|dlXpS3F$ON-c$cBddL4`
zVyLRdy(i?r3R%8zLfVu{<{c|B89K#}0zSTt^r`j72wq_VUJ7M7Xv5&C5PQrR#<)RX
z;|aGrg_+vSpl3*%AwN+hRBnsq#>a?+o;NwnemuiP2EX05*YTBYC_&aHKq>tt-;I-R
z7}J<bJAszZzELefFkC{MsU6NgqW<g~RQ`C_SMLnW00)06F59Ig)rr}P4Ve}Ou3$F8
zXAlbX>~bDDYvn-vgrWtL&;=X`06|_vg!zX!9f<9r_mBtYS8dwOfg&dTf2HEYz_l^m
zf`TZ{2rm(_FoBW--2@{~2-i#glf&6;vga)ZS<C=~+?K&e2V95_xI=*lIb`^tC+Cc6
z0i+_^8r-e98d=zc8bz7lF2mG8AyHxB{=xf0m<W0VznCAHdCWB!y8st#kfFGRf~iFn
za&nAX4Gpw)@?N~J?L)}9wEw~Vze-iMeAZXf^Dd<wkU56<PH1H6{53&*D?pfz=rIVL
z$ppI`?bdizM&5;_leyVLG&c#wt-r^j(No78Rwz?vU3>h|-(nfVgH;q4S;h3gCGMkr
zZP#X>jl@#XV8aHGaooIJ<a%WqC%1eWrR^U7aDE3`yt_SvYYA1*O;&H>!1Rhb{)N7<
zGR_Z(YTZ-M2wh)@S#kj#9QgNgFh}>2=FB^+P=%|VxBt&r$@~8l+XCH%pf<%{V?B6)
zZ|+C;yMmzjFJu4X@{|<8v3S09f64FxTd;pAy3<nWcR+ZE^B>=*H1ya3+zU{|3r&=x
z=p?Geqfo|ps2B1tuJS5dueX<B;H9&=ACPmwK>#^G#=kk&KGg(}8?8A^TZqPKKF}_%
zdCT&|Zl;n$P@?gyn45NZ$Ei5SUVyJiI7FDk83^cXjO?^har@ugw;NVGq1`P{PlO)u
z0hP%v{6x6;O7V2Gf9p3p=xoxzm4KES?AkJ_YitRajlTZB7HRNvmvuF0Nh^Xqx&Rtz
z`WNWSL*P#|7q7#oj(IOCsT+?faDMixqH6Qoq3o`c!^7;s{WLnz|0sL<--+F8yblby
zo~4pk&+-Agy_NYyoe}hflb=7DURXWna*#b`=gJof_y)uf2q*Pq%PhcYW~`HrI^Er6
zGRsFlWItz|cSs)ke%i*dM~So%nggpeJumyZcYrMf49jILR~A>Itk_?Qi|U`T-y{GZ
z86Q>_3_P_kP$(=C1Fjp9<Hv9EvLsdXT@oOgey^}vw%j1)x#}p8>H1Qv6}T37v=BNc
zk9#aLPAkcAQwk#mWY0oJTIja&#w@v8b+8rMwI+d&=9T3JIGvyjcl}MqU_*0)jCV!b
zPu4fUD;(`QbiXoGLR2gI`*WMQ0#QVK%x^cvBjkBe6kjId_6m@;sU8dozeB#v`gh}3
z;O>49TJN=>78oq6NgJ&az8veusqk<tY^$djwW5e|!`c}i7O927jcFn-Sns#0x}(8`
z-xYkfp`clT8dI7rf)v2#-0|jRu0TmSe-`$Ea;@)GAK{JylTUpOFsJdxl8KQVb>FJ-
zvn>9{={JVu4UwUT8F91cG#uXSc`lvPF&LaMShAmAJLt?F2?HUgz>j;p7NHX#zA;TP
z_^Mmxf^BJ}pxY&3{mB|9h`N;l!kcd?FT2Uj0=o{w!VCs0l*yS}yL1B`#UFW+nb)<+
zNaxWzRG!0~^YKtZo@vr<z#BJ9hPAev{r^9Tkn#;i%WTV9q5Md%2F->DIVPSHlqcb-
zTb-GRp3(sNn$lLL8gxp^IOVWlwy{YqJZ#(=6;Wx-=OREb6M^ZTpIx(Gtd-x%RA%!S
zg(xwf=+*n-tw_bjZvLxv9??jo$g@@m@hxGKn(58(PfrkPl>a(#M3HP5#OjA%P??Jp
z8_YGiQlBhQ_C<i_OCNokw%(PBAHP^YA&Cz(=K_u+2IsdLw>1xEms@E`RDHyOvW<SU
z4v*3wJ{n3(IB6#a55Vefo~;wuQONECu`i6@0I(feHbg~YH%Sp0uMReep1M{_+Nt6R
zl|LD0OUCwU2C4hl8wWy2c(30}A6S6rjmG0w=8m;PBbY<LXJhf0X@kC;TI8N3)Gp@+
ztaHI&F+9mYt<$L?)?kb16LQTT$1r)BU`S+RggX76hf%i1O>bc^rc+ksn&)VV_O#jw
za?C94p_gy>`S~Amf%*`zNWhb_FImtJp!_w!(`jX85<0-;KuzjsVNAMYj<3Cei3IC5
zdkGaegeOjO#m^%|j;Cq`;dS1)?`2tp4*`Ub{p?V9!4gcaVHuCt4GNru0Z4j?;>5MN
z6CCDSj)yrBrP4vOoc+q-=sz)#W0ydunVRTbSx>Y<620#VE<r+P*`JxdnU&akgX%?A
zICwxu<n)7e%h2-Myl2%jCL)#Ru+rms&uCs=gy<`0?T^Hw?+&Q3^?GEqIkiezbFu2=
zH{4uV4d(xSf!Z(+!$ALwy9G61`C~B^ikUU$(o>!=kO+rhyMUXbpC*?KDFcw~K(Zem
z)w~+>^=s5rZ9?5=@|5n<g#xqSpTce#pAr*QGQW}F(k&A7_vN|ZUVLMIx5$%I%M8bV
zPStQ?j&PGN@6n);r)OSxuQ^vDn)T~DkhkV;RK6eN^wXvL_P|~^oZdI7-{5il+GRjQ
ziJmyb6;W&c>m6;A<pfB^kt*%}VDq9xZ`NEnp;o{xBiay}tjcVIbo_Ke0xs%0S|!QM
zXM2`aStq5^02jXQ^s><{rF+US5U<YlaGh0}9oGMkN7vke%x@yxQPo=l<+~g@drQkf
zRtob3u=q)n>Igf--97_Ptc0w-tX(_E_FlqFut-k5SQUV8*06p$hS@1;7Fy3{?%i@D
zm@CocJ8HEgi_}S92vQAZYpsjU0-3_dlVY4xr5c)%DX6I0Pppsg1@i2M3_%Mht=qy0
z|6mA5+%%b6d~|6RnZCe$AZKg50S&hlxdII8QY3T72vej>rg*WR(T`(0&Dn=sy)9tx
zcOsMxkjUQLty=K|w{la)mK&>k0v<K}|1S$aQBi=2M#QFetv9(som=36{h?lI@&kd3
z&onZz)z-qI+otd9+9J5Dm*D1u7ReOcP{yXOI5Jd{xR?Fh%4gGOI#ZySWZE~#v9MHm
z?c{$MMh$M!e56>WycZnY%D3uw+IsPJ+FztNJHWrdAc$-mfYXmYuUQ@&F^e<JHOD|H
zNg?c`_V1?vBt)K!saZDrdY48Me8mwwNL6SJi6`nc6tiXYUqxn06!;}4R=IdD7I#H$
zut#UAN+DN_#;)0a&KYM-y|>_(>K`6j9@xf6>@_su)W2j-D=s-5tl#kUB62!^Kd2{y
z9VKBu6FCb-_=_(Bs!t3;y83GqrgOC7k;oou|286Bsl<5Jhf|Y(x@;=(9MCiB?tR}f
zWb<1KNz`sy<p$=Q;#6vAdtK}Kt6J8b2BVGG_qBN`-rB!K8SD%3Sef5t*N(SF3VL!`
z*+$%q`XMjO9Tgq9RImO~uM1(``Jr1{?T$lopMGLZ@_7Wq20$OmiuLtp*aL|27ZL!X
zIJPr3-DHtd+srdX>emM^x(3yYt%;wx%x*Hsq)54wq~#k4u;|ol+Qj123hAiT-K{4;
zC2XEQ@zRi=E749D%D`_V%LcCmB~sm!blU8fObxB;k_yib0OumNrm`ik^gNA6x@j|A
zd0w7#c(Xhf4kI$Sn|reFJ*IF0y!1D%YM&pPR5UjerdZJuq<b`=9<D}v7~vqnyLVlq
zt2v$lU%!_6MSTsL=hK4@Ew;AjuUE>0xsW9>w2G(?Yf)J&$MzZ~CMp8gr}x4EFE=@1
zZiE!qh(W*LPhZhY)yau|1t?*L4bEl8Mf!vvuTyqBF;lKiX#rm{X}iwhj(vLQOzh(I
z@(k?I7nZ%A^ENiz-R3$-5kK_JIPY8Ixuwpqj#YeC1*cJ_#Gi%)bHpFrw4zU!f}`k<
zNRbp8{wRPVj?zN@4xj`mI6sL*W3o5%)Ha|J#`1qJY9Msw@b*>aj;l*&vc6&>1y)Yu
z*ARcvw=x@j>TS)r)kcULatd<Ps;r+Gvr#LHP?q3F@|d&oL*Om0*Y60;g6?d~)>~{a
zcwD08mLURxzp!O^Ww~Hj4Db}yy$9SPz$?THcXMpBr!2X@s{e(ad;{`S(>qQ5$&er2
z29bMF8E8OrFJ3J+RK*#K;Vd3==B{divzpswK@&b%$ObY{zuFClsogA%Uyp(^^L2Ra
zY1W3DHfCju3>bvEM-)37`yvVnMcUp}UJ`a%{@884_)_932siDfy-qXB_>3SsESn0w
zpRcefUO`NaRs734)v9e__i~xWlih3gqGSEpWfemKNmGY`*B@suJp11M7?NqTIpjCv
z?PM>jmz6Obl$@)i>!+KbE7P6+JxLV*(XhTADuM)gxQ-{#t?i*Z`jL+a%@WNPwfe#m
zJCP|?bI}b@M!w^GWmPfLsn~b*!R#&J_f9f{Uz<ZR$INbMdN+re-ZIHK11|CX7-zfY
zY=*@BrkAcr8SR!1q(d}W9ot>{{f!^tTujnxMaTmh@#ExNq(WLzV?M(m1_+}Ng5MAW
zaDmTh7hXQKtNWM+xMBLb>DJq0uMTCYhn0}A&j+CQ)oh^2Q|2Q#FGS=7VX0SswzvX#
zJ>~3?CBd{=LP+m$GnkQ~jzY^;ciz1ztiB4zAn~vEt*qMG7NCw6CY}NY<Zf|iqA}}=
zRxas<a^ybG$V90zJrbvr&0~<|wIM)mnbmE1ywBbmG6K36bRhCcF>c7>ObmWCvA{-)
z*gWm@B=bW<AJ%S6NqMFTae91IL<vSHFSy9nW{P^9{%3)>Gzy$9`nbo%U)o)teGU0Z
zfuE#)<K)uhIxeq)d#gbZ@D$Y1iYV&<9JU}a0)Rdbw}<KO-s}r}Ri%VLQAM4)5E!~o
zQa=vbpqaYz;lo;z?>ub4s3MD=;uM5V9vpF~m)IbahKe-jf6R-Zz(=n^t&81<62MsO
z+toAb`@E7VQ&&5(o9`KmA2{0~UqW}%3G;teF2;{AZHeRvq#YcWhSt(eMMzX+!ekEp
zZt}Oh2(`Q%#N}fb!LOq0OPzh}B>onEDaffjt!mcOz^v7SL_SsZ)r>mc$~%%-8fe{E
zu~CoMU5ZXa1y{>?pPGP_ef4BQG$L#@JCk%Gu;uba9`g6F$K~h2hD@z-!555@#A7fh
z!C|Y*jT+h-nn{3Ow*yTZUost!*#b!g?rbtOW;%&vW(Vnb)8v)MrVioM8}zW?b}fBt
zJ2BQH6$ds3x?SXO+M9Fa0E<IvyLb&cJZ28fGVRJf3;<<ad#_8T55NND##0($DO4n5
z5EEr*-B~18TNbo60X|=#pRwVL;a}tENAa|^W>|E&fTA4$Z<ozoW8x0G96W$2EaFT9
ztn&)E7-qL*1Mp_Jxgs$Bo~JIX>Mk-%W@$fXp}cY|s#FLfXN^*IrAjLOBUd;#-?DF7
zZk+s#gkI2LR4l*%=JZCw_)$o^fj{)B=o^n;iA1T?_+6RD32PB${|n1!QrxuV)B~Zy
z5gasnRg6Jfp3{8ZT`ZV3VDWlww$GYBIr^XVr=+|>lJ6%fgstaoC|7V_1dVSI_C#ko
z8dJsv6c7c2COerDmf<u5uV6juZ>?>8C@z6|DfhGi3gC`=pIdecC#nD-TII!AK~{gF
z?g0dpprFOH8!mYMMQ4~{y-j~zxqfthGXl@cs(PJLv!NZi4mAbgP|!>sT(gQ&&GI+V
zo@S3#I{a1T98EpCD3YS3=o~B%ZZ=|dVreSXEwtVr`0UCl(l74C9rvw&>={tz3x7!l
zy%^C>3YlJYqK;X+Y~peOJm9<P4v~srxgSCh9^vk}+R-GUv%@b7{vAposa*C5D?sJ7
z%pR44K!QI@DXWOD82GNrU}*>Us8F>N52j5SIj(z;X3|#+on^5bY%er@QBIiVfX%CC
zT_f8~cyBZ=eML`s^#mQ3L@jQ=OYC3kz>n)=A}kecNLYp#`n{ujLZTdn?Wj<=;-w|o
zun2FC6TRg)zHDXt=<}W?oT_dyuc~H%wCH9kAmTI8fQmv<1+O>(K481sE&N}jteD3l
zCd;Cr#ugEftke25D$e58C-IEL<@w48&{17Jgm85Ve_>#uRweE1UWq6@e*c`%l6$vp
z?Wpkb<wQT}hE&&378Nt$+2ies`#9zrJj6UOu7$H-;rc-Ecs7=-qxJqbPJbQ!MJC-E
zK~dO-#R^?`T%!WG)=Z8<8Kej?iveFL-raT5+7TzP>o(wPKE0)fmAe}u*{KV`Prd7#
z>eVk6491lE`fS2$E!u)gzO3Uoh69!?{}e;PIgaO}Vu@$!Sjf~CP-ug~!tf~P?;|vE
zsL*>?XQzb@i4#V+jFH@ddr?FRqN)p)koU6<0mR~#^A)B{sXjKBUUv$Ye1_xCPOmd%
zvkS7D45_f>D4H6mLAC1GTv>z=!HBHxkOw<bf+CfF+d-dD`b~sy#ydRz4IR#a+b;F>
z_9kMT7i(;MQj9vARGzuAZ~fmVs>rUb-bn-i;hq8k9Mptit-UnL3HRHTf67ZBo5&3S
zbbFp;m5=cse3r{+eV0M#RU0`-`<GlE!mcCwB1D8EvuuGhX*Iu|NWbO@&T?$H1D9*g
z_3-<omr>$toOKHz6vi7J0-()bktQZ}<GBmM?dSUR_G?7lX8GSKTm(=IJ<n-bDrI*~
zlyQ@H<Ewa*PSt700bFhpmkX+m++Plk!%JO?2&)}?4Q29O4-xf&nne^4Jl+q^o_~ME
z`|bUr`<@Z%C6le9d(U5jKP|$wvo|E7FX5*G6hh`8f!?(lPE&i}((4k3OHh8YPt2Xd
znxWH%RtMp|ys7_H!e&9w8up1NFtAa35L+kDpyEyM?6_#J9T!oN#1ee=u-+qKjn5Q^
z<>W`42lLmgJuN|$eJ-&m)443X{$-)3YCUDLMVaee;EGf<MG-<;+$T(Gb}wz-<<)+Y
zQ(s(k^gKh&8XV4!g>1$Gvpe|H<JiR1iV~HT#?KG#(WP4X9afnqc#(kO=U}{C8R;+0
zlHO1^N(H$x;>9MVjog%GabFt1Xsf=j=g{MiEyTk!^IK>M03oaRWUy@Krkh#9@+WQg
zceuiJNAHCb_y8f{C5e1k$1ikqY`)DmskGKrTu0j_+iJLMP|bQ41vs$L_N^BCLl$%u
z!O#NAX9-9B2WHQ%PxfcDtZdexJ;2ntjo~=d8dr_LB7YhEPl(psyC&NtaC_H^Q$&f{
zPX^ohw>FwkpU6pP*AEA?jgZ^ok4{IRtQZ<1d{nZhHR-X0(trf+_@j`h4?QJujN!cY
zZlyD--Fx?o2}L^V#F)`Zp0sW$H~zJllxCiR*=RP#4I~?V>ntJ${%%n=3)87`AZp0Z
zekyDOA5Lb4lX_vb2SzyW-%<CP29}p@K>+~Z#`6rCR+023ZfP{tfjo=)e`Dr4UAXI-
zPAiVD^#$dSCN%yXwy=kyim@(+;3KgV^t$5k7c(cF-1%gOIeGhFUsj%Y!X%q~e6cY<
z7r4c$xiQk}rR2sBzig>FIVdB0#lqQr#uBZy>%Q0D1$dlx?dwd|*d{42T#$q~T5=&W
z+A!S=4M;1?4i3-Tod!2_aRkH9pyShj&t&kg{7M$ori80C{X3y$Rw*r%3S}AAKz;hE
z89}WpG~GD-=fYew#D9SrETPLt`?RI2UW!_gCD?fefvXHlZn}ajr(XpCFzt=R^S2R3
z3|(6d@7<4E>;jpP_=!`A2sTsQq8RUgO+V_IZR#V#!9SDCQcbMbMp;&tjSqF2HCOsR
z3FaMJ0MU1D<i%MAe9<dniSD`qT9ND{Ws&Z~=x^*HBcy=?c}`&ds)AW_Rzr_FBEjZ)
z{^-E54`S<a$s&V|x59B;!*;q~$zew@UJB%FfV8QsyfB#i{((GdPa=B8xot7r&)(?>
zW=RICE8>FiwV4gRk;s4FNN)$DWQdtamd^35Qk1iYqnS&m#Ovgq=87mOF6kt`4yg?c
zVIp2fxz04`7oP0US#~&1z$Nmc8D-S8D?aaBR*wRodZptpfb}<Ugvs~^>*l_}DUB^T
zFMwUw<+D)>0<34@FZnxPWO;y>Cu^SxM|2%*viTYxIvEHPH@r13%eh+@AxbEae%*PK
z$@Z@+z|45w%oEzcTGF{&V<%GTRvq~Tf1Q+Myx2zd=WZ=-x3L}r-Sr7}2m#7t#Bc;d
zwsbSk;rOBM6|HnP{0KDA=s&1QwRCn0E|YF*>Oxw4O6iZw_>DLT)HpgJ8Re50PmR{x
zT3~sDUu8=gs?;I=8M`_s8&GP;Agwh&cLP&|dkwH5l`S%v7K-{YerX<6Q;TW(v+*N+
z0x(Z!kpuN>x+q6Y>jb$v#Zmacaa=UfHW)&^1{i<Oo?7}3y*5L$(P=E?>;4s_c2P5$
zjfP}nOxx%X)<!<Gxu50Xc0kHbi!isdKF%k6nsAatXD2zp2ejA<IDjOF5~4F1ge!6F
ztUW7U)wfW0nNXmpYrMX%7_W?4k>#F3^^9Qd$_ha-_7gNp8FVvseG~xCD(_Wfs+V7I
zUR7H7|NgROcf)exqmz3SssmvJum?iI5-M4zJD_JX?2s>w0w*o{0pp8PiRsz+&gLda
zNE{uGc!{t7e6SS;SF#})MU1@_V@2r0vGd_rRzQx>1XJAJJJ>;gw#X`%$U=a|#K+V|
zbFTe*6Y>TgUAaqNCKh{;7Rip``5}N;ivioG0-s13!t+If%5A-+{xQZ^A7N=4)1gGy
znv~1)(CfM~*d1FJy=TF@RNgq0N;j?Nh<fDe^5Bc~mziUKwQ^ijkd62a!LIkB{0Li=
zg2-(m)_5BBPZ|GD3=P!Q9J&68lg_YC+r&b=&;RtZ(m_=cV3uHPpY<90ObZA<u2dy=
zZXh!y6kz=BnJAeyYbBY`QyVHO_(<}yu>y+_s&w}6LiJd&gWkJseA!Hmm-m+Ycq9d+
zZw#7)nOW^Ac!xAq@Kv49;Vbfif|N0*^ROXM_tq*W+xiXyA4P+3KpA%*3x$^$tYJX1
z4)+!Vh2a7HgCP9)`R|1HPaTgPM$5cuHoh!~bw;Jbq*=$vZh21;W?^S}eO-Hna6sar
zDw=wj?jR~wQ;VXbX=kMY(RCy$8H&yS?Q%$g2d-Q!Xv~De)rJ34iUGb(FA}`uc3#Bc
zd^9e2wfoj`!%#kH9L(HV8F;M+EX(*}fE>L0PZKDdhXrWV0S>uS;{SosIljs9skE;y
z&VX(;u2U-e;1VZ$OzXBcXO)bFdIJJ_^2xrO0HT2M7i^XWT=orX(wS2lDP}8onp{7Z
z4nZ+6vbo}PvM2qgP5<5Gf25g}sb0tG^KU^U{IDrKOoNiB74u7dh=2KrtBb|pM^*ru
z{eH{Y3{=E!rp4i>mFDn%*S7}x{eTr)`x}9HdplTezXj8zr<K%A^hHGZ%6{&+kof1W
z1A)S>N9YhfOp@#4)F$VyNh))r#>re{0k@rKHd_Os%)(Su!d0Oz)KL^qSzwfLu231i
zY*GciL1a(uT`C%6UXdP@!7Ef#l&JXyQ3mk(zRkjy0J1!g<=iUXNYLlx9_T_natJz)
zhXZ}WMEQNS*3D%ID5(eRf+CP{c+DMyQ^PhE)%RVtuT4^23h$vc5}wMvRL3Y4l~lZt
z=hm3>TDPdbB0{@5XVwf3^yRmT3|1v#ktgu}oBuuy2VriSA&z?$3FsaTPH!3|!2j=7
zkcp3^T$eW%tR=bE^ygSS1!?9lM#+YwbGM~ib4!Q7Gn{)#nuj|4j7rk&5z`DZI27x`
zH-;#`xTDHGtA7U@^^~2iw=w>g0D?T<Y{>j;<~IS_wch=D*Qmz!0A^1XsrT#Xpa|&d
zfPs;nH`znFiL71>8|BCg3*o?&MPQB<2^VMjorBh@L*GBRX4=dbu5J)V7fi;?a!|4h
z<xHzC(Bp)j$ATIUgYQKJn!$UBn0Wv4n@ri<$V~n$$>?<RP(Y_KYg61O%z|&E&zsl-
ztaAH?S84+!b@eZz8eZv3!o&dzX;c)9((1uyIXN@5TC$jBTb;%{6*cdyMejZv313c?
zXd!EvXZ<>T2yZY=XqV{yE!e#uM!ia>w}s&&Pz|~wyOswO2tE1w!kg<bdk5~Hb?eiR
zA{u#F;Ws9@vBLMoot_FFt}t?Mfu@5Z(7FMeJB6)9@5$R>OPIP$lX#Wg?sB8cHE=bJ
ztL6v1qKa7XKnDnw#XZscEB#|l$IFbj|FWx%ml<6J70rh%<X@Zi!U!lWwIWJLe;t}d
zQW40;h$rIXS~-o-RT^s(-|KuKUphmpUL=3_$l-ZfnGu}XXw06qMgW#+#b>&c*SNNK
zxx9A|@JL>?H)T6@I1x1!uE^8N4RpUrD9hTPWE#ge<O{@FQI<-QTu4Y*HE1ZucuMsn
zeo{jp7MnDJoj6x@B5N&l@RbPBR<sOj<Xe@UAWDgdw*uOXE;-NxZ(&Aa60$A2@7aqo
zCpN_IONrw1xvs+thiz{j5;c1CMvFp$J8AzQcp5J$q7Plk%S4q&RX0RpuCTK)I@-~N
zCUEsxYxBW+wN5#zWfXQT;1;!ET;Ck(Xidi%6+~WL1v3EIin_0Q_*Z4LWVbJjkaN9j
zR84it-oXLLKPDTQiPYsjR9OG^0k}9Vb+qX;g<o;uCICj{vx4N16vD=isR#KLUCw4-
zBUj{vR{5#cH|femJc@@>1df@FrPR`#P(T&+T<OBnbHX1LfJp(psP5vrs|FVME3s}r
z3~^cSiT5T^?>`lCN#s_e{@_ZcNvS~+q7ZRJQAU}PswIion8aqWoOu=WRb}OzlaI0S
zCK&g06*%Q5nHoRQh-M0wZ(Y!Ld?j|EohL>7<1Y5pjVm1oD7aTSfXa~%xDyR}ZMr<?
zuLbUx)kZO@@Iy%qS9$iPlA;6UrCY(BAVxW3@RB3|2QZ*pr|p+xnU3p0{lGC#0XlN+
zD=($6z6yCv6v73v{VDD|j(*0PV(|%iJ7ms(2h&LW6fCtosZzc~e96vNf>wg<+iZSM
zDsOMMCw-4TtrLi#S=sYdRmY*f_GhVAjl5lrU-*GVf5j++0!KYshr;A+$`>A(4F)=@
zn{s$KE0(hqSo|9CYrNG*JJoq?j?Tzjoh&QT<eJep2z*Gkm+aP3b((z7mT9QI3$#<u
z7OXXY$&YpH^#<1uuORO@0TWHGfQj@;?duitjqs9z7|Vd&H(cdzJp#rl7H^aZ9+{2^
zDU)#smG3?-6oIh|Un%{dGOYMV2}}q5W+TzQDt55-S59zDMq&AlrA7kc2$yCq#(H!q
zySa?eP$kNxiUlj~gusIPpSXK%CH0xm6IZ6kpLHJ~Mh;HjuzR!RYg8A^Y9^LRBxsOl
zjYSIiI>%<95HlH<=wz{$DK0l#nfO(DVYC5*#yK^7JO!QRW;e*~8sN4AnH$a{X=7}i
zV65)X{dtrF8sC)<#()CDdWI1DciDe4J~ZBB<<p`MH^KS@QJWK(+?dh`T>}=sZeJ~Y
zJr?ZN)}?@W0#@+6DT6k3od;J>a!~N9o9t8oLm}dMcuxv|iHzB3SD$r0_NF*?r~w#5
zwkPCk<<-!o3>I!fB;PuNq2v#@RWI#vzXK@d#0XYBuKh6aV$~Urn#2R3jKCM=DK_dy
zNl5ZXXc+27|E!JsLato@(3dQzu4k>5S&eK=(WOe>)mX1S^_!Y8<3yeDb`R!9c&m39
zZRldXUvWcYBAZ=`h);!{==V+pd=n&<QBIP!qc;9?hjpb&B_xp!MUKV9juh#DoY$sY
zAsi1pab-&{xt(&0BX|dQ*SouBiZGEaz}&}xJXEb`X7Ard62BS!zdc*fe8gzmXOamY
z88F0OAkNh~O^w%ocp%6sIeXLf9fMV`b#DI1L3{x1*@E7{5z5xXk(e0G_a&(WlL&bx
zFH_-MBcMzb739LR=hV{qxwxIoD_|#2^#aAhf$w|l(zOm>4wh5;7kiM(pZ2t;$K<`n
zJ55^8!T@qy-%CZ|Jyc@P4B@zh`>)@TeJ1Mm)02bG!|PSMiM(kjou`gq4txnwAcyac
zm%JFM0f^!LJk{Lt2|$fWF3WVeJf#aX=hFLzuSGAkpCZ6uwPrFL2hIbS;gVXr;|<+B
zBn)R9;oJa}?tgIcaf#kCY`fi|R>a|8slI?>j&W!+p@Z+w{HRfPqQ&GjAi9eGGY*Y+
zP*Pq0Z+Wk831iwq@omba5~!hQ-d{|k9c2}>EB*N|C{r|)w&B+@7g6Mf#@<8yP@-3z
zv+wM$3^k4Ml&B5<Pu0<e^hJ)9Zl7Mw5*+F@4V%{`mmWT-6z^jcYQ}8|(1Uf;`2x&T
zp-hTM{rse-t=I5;ok!ma0rg!3jmExN@&xO0P>SpXM2O8@<3bEf3#${mb?EzIxsUet
zCYFWrgys_*HyU+^!PIe7az|B@GKz25YUAmswWu<vN39!|c0bLmlB_&^K;h52$hzDL
zW~GY=b`6_cW86c3L~UnNRoXSF(@b|EY8TFT0-rmgM6{HsN{FMe=y6*uvYj7BLJ|j5
ztm33yK+zLuy3ZY}7qxY2fJehI3O2e(DVhr74s^#Csav%Lz9W)Efiy7>ir^C7zx^QN
z<G_6fVkWUt5xLE$(NRKjBoY+EP-MJD)`0fmDn&p3$rk)Gr#`5n&Mz{7k)aM26eW_=
z$z9#ELg2AGxHK3``y<WMi~sGvsxg{AVN%t<VOfxj_#==JsnlO&$hK!8ZS+eBK@)<@
zasmTc>EQ-)9!0)@QY~{w#FbT;)^!ERrXqN2aYz}aG4@(>AbRk!6`%~%ZXh>p`>tmX
z5A?%*RQ50mDTx9Dz>Y!C0$eHys4BrS!BS0^zFpZ6JgS^2Q>7K?7Vi}(i81`4hd+T&
zqY0ET_JES<tC!^FvcVEPwXg-*7XSaF5uYacBl+?bJ!TE$)>}!2<N5XCF9$`qFRVjS
zr3e9z*4#!E;f}{jg+!Yhj}qw?%7V6G02x7N$B*$;oHb+<-)Y1y`G-C~0!V}7@Yle+
z)s&KizX4M(L?rs^DV$%@^NdgwhKwMF-SIErcEIYAHgGxD+pd6<s34_4dDH3R#nc#I
z9a<Mv2__X|Bb5o`>t-xStwWohZvP3knrq!+pU4w`?a(n_w)}#E6a{M-YnDxN>Il5^
zb4zP;?bvcfvtt%aL+@}Z4_1HDikfrbj--yZ@8G9B{NW(X4dGcV2n3uHOC}3bbAJ+@
zdm}l_2~=Q4nz_YoS2VG`HdLuM_=5>_cbJQ9J0<iH<-0(t0%vx!J#GCWwB#juC?o-F
zAa7(l?!q~M|AHP$dGda)o8jSY?9>i~%(&;`6fVT$BkJZmNh`Z{4W!i1E#+}j*>@WL
zc&e!x6|=@A;}S#P3*|P1WmbW|-uI`H_iqo!rR)U7nkvo6+=WXmjE4!eG`06G=lSEC
zz#y0M_M|NPh7}(DE~GzzNAHPPX#r{ub3zggdA7c7KY28qi>*<vhxFjI1#katsM;+%
zg`A$(9OJlpc?_64x0$g~QX;Z_fX*oGHa_jhJa>%dTDqd_g*PviaD~ks{=G0UsG-rD
zaLyy|YL$t*?pi#g;o(s(rw=S6oRRxUC(2E;?B$69!tob(vpRZ|nO3V|WH^o*Q?1rI
znSA?;o8Hmk?{jYl16zUL2%MU+TQ!ZKT#Jn&QQy2pvfUT{#??Z)iM0&1YZB)G=x)WN
zb8rVt!rljuPU@(NUX7+FBT4AtrRZiMY8y-eFkE@Et03j5-yF=@r4hVqZT_|6R5}~n
z)oapwrS5+9)Lm1L2x~^waV)7^wLO&;f6W0vuMmu$L>DfUhicTO6OE&dvL;kcl5?Al
ze}Ds|v(~nJEtp>TGHA5DW${@o#Uj?^A~?si^_>xL9XMh1H<?V8O~JEHpT|&g0(_dN
z{>~bk^BBJNXT7<}m&%pdKv3;VP>gKab8<(-^8<cgkM@VgX0-R2MWmu>Hf+C#6kfVG
zOt{O{x2CA5IP;L_fD$ySNaCJ#1Sw!ERX?@3u!>n@?jNH^2_iM9Kq>NfwyF~T(q&Y`
zcMQ~6isKwayb6u?eqoD}@`u!xO$nSID;s2-gPku!4%V(_&;TU7F?Gs45;_bx^DsJp
z@##zfxprG1P5bSt_8Tgdfx<JzhN9-`Qa|Ho_~eqof~0g?4sOv50EH~k`2dewT{REv
z(^R^f#c)x}f=LjN`ZNT_0Wa{w;x%$TM+!I0N=4=B;z}UwS8P^LRevp|<4C`x87r(1
z!Gg>^5|lk2+1&B%*tTE1SxZEP7lsI0fJ%E35#((n`0#tkLYRK;nO<IIJmvVr@+$1K
zbq>Om<3cF9RAcRm4^p7DGiW~mVccrmh>}n`dU2|vX<keW)UDglm~ka>g(&f9G(2&L
za?L|83~7*koXtw0gI(K5*(rcxQHCP;u1&cmgGWk7Rbk1%XClot7*o4cJCu!N)f;og
zn_~9^G%#gEy%sW-a`K6<y#40Au{$9eh7{5JgA&Tqd<v6)st732q{o!f#(Ng8tN$~`
zV=KUma(4e3NvuuH`!;0~-(myi-Hy1kr(uVR=wj13<|Zu4S5N@PuqGVb8vh7gMU5}_
z8wTpQrJHnR+Xe>29DQL@gbFi+eBBs=iQ9^xDG;SWIxL6gDs-o;f|+$(-SYLS6u-``
zXZ+I9PGc+5(12WT0+pz&_pNV@q35l0M_+N*A0z-bMxohOC?wDuyTXUfg9^OD&<RqC
z>OePHIXRaX-_xg1u%<3o!LN=?fMwmTG+d#1q%=67Z4taaN%;mX97l*kga8OkL?KU?
zl0y7Z6I~mfkK<Z0MupZYZ|r1+sgjo@pwNnxg;f2=H}ee*dn#5wAHM!_gp8T@CVbUu
ze%rX@{TIPVzdGm^VMsy6-b(^wdy7KB_Wr=!_VuizSkvbsGun9zMMPbN5pCm8VRNC?
zc~QI2&?C=U%0^qmMRJOBz&YTRE~0>vRjv3vX4+1(THw5L!0XDEu_si)lYGBeX(6hW
zqVu`TYrF)CIragnQCK~6jSqnmI{SOg)X~j%rId6-FG`z7B7ZZZPwCOGBiUSnCD-na
zouj}MFvNBfoobKnag$mdYk~Weo^WP7kxUs_5TN;=Z&itNTM~4Ynb5lG$IzdE$snc3
zC1RGC4MT#*Fd$g}Pq`o_dK3h*Zc9-EI76?BD5R?|Mr>+P+tFl_jC1xaBXTWEIIZ|B
zs9ebPj*NP_c$UrP!~6j2V7w^ImGg?yR7!k4_K&e<ecdQ)y_A7jMe<K)j_gQpAkvO>
zEBMgJm;tzL0P5)YC6Oa159c!CGtSr3_N~h>E3b^5bLHEAO+_++<iaQz27$)h9}mXk
zaXC{rsiF6uXhdKpkDfLOP8iOT;PXU$Uv@~Ux(va$Q>7ycw8#1Yszf#8zWa=~O<<11
z(YX%(9*Q85t&Y-qLp^IrV5zH2>jSW~4aEv+ryFI-<2#>E>?<NdzC76$iB~?i_vj)#
zJQ*>+xS%$^SsLxZ7n<4me*G#~iHu7@V7OFy%Ii&_T?Nq6F#7;y(V^@`=w%KAPFzrt
z^ib!3s%N%rQI~>$w&aUw>=ToEy;(pA49W$U@lw&zYE)37I0i%O8P@fNCXz10Qc1Ep
z<_Q8d_!&nMY|x?)yAYH2)Zp)aV_eXd?ePIc&(z}gvMvjMXi&U)2@pImEtObBMWa;R
z@Hh;Omhn{RTP%p1Ta1`rU1nF=;Qs$4d&0#QEmc`MfMN~#)!J3gg<UT~&nk)**2=;e
z8p<Q0>pE7|fX;+zcc8nGvy;b)w&b4~2L)uz3LP|zQlxaC=hddMooK4UKZ`*pxGVQV
z$edV;QJp0k&Qth29TD!E#UfL0ZGKEvt1ko+SK^596wO$JX>vu9`1aVFgyinn{$I_7
zBvUcG<#D=dg>NwM6tP8zs10oW@*2EbZeT8h3YV}pg5kvk<~gG?|3h6MXsaDLMPe%q
z7HQ&IWOw^4wWOcQJB3nnXn+8Pb*3d4UpPtTejM{N?WBJAnCtf~t0CjA$(|w>X462L
zhH({FI(xjcpyj)ly~im_!##H$whLhGsXedDs@GZd=gvOO<)>imzP<E;fPswF0tJT#
z!b`N~OO(~g-9cV()fahc*fa{_u_Sg^+>eKQMdYI`&Z^-E>uWLIfW;F2@X0aY$egF?
z?UiMXwopTWi1&NWfpizX$8-GX{jNn+!+$LL!H|sE`XpqkIaR-i1Y;1I7S;GUjaKyt
zzy*YJv$C03_)|r1i4@XX8zoD@F^Zu}1IM=yuvHbf$*Mb0m_AO|KNwTpdg=ecCYN>X
zjNeSOu4#ZR*Iu#1TQzT;_bjL6MMz^_Hn5wAG&`~x%YtTHM=Gukw|?6M{<`s+a%!2W
zlt%1WEnI8#YVzQM?9*c^23rc1Wjsu=^n_#^21b+VX}1Rb{YV&XR{AlMUGZZkEkp9N
z5ySHTef|p<1x=ixJAZ_TV4$6GgqeCloYA=CS%d0Rm3c=yFZt>$QVV0H>D(iS2FYI;
zW2}=mK1;3v`jLtjIdeb^iz!(V`a(IqFC?$>MhdW^iSFYdlT<4K7n~>oTGBaRn6M~O
zs(t$B2e|&y|2$f!Ly2LH{g<k-sG*CQ@%#IeuKheff^TO;Es*CF8&jGu#@Z1nAVxF7
zk%is#F}3YLj9fA?1V&L<ct{Oo{&KhIOP%FKxmy>%KJy|3vP*PcJUk#yCpSF7LDEsd
z-ZCd9@R42966>u{Gt}0^uV-q!<gqlTD$#A_tUx$TrBUa~ishw-JqEJEA|pl0w8AJ1
z58DEcy^H06vxHyS3tQ5>d``}0nYo2)3>Qb`v<+*&0m<d@X!f0z({huUiNYZ!uw>Y`
zwIvc08FGP-Wkl~H6N?r%2{T%u52c)4eDp{Ho$BoTZ>m#pWm*}mayrxR0Nw<8mr+~O
zTiR|^WnIFP5{Q|SUq79;|8<pyZ9FvV@U66JRfOk<Dim?i(0gX2T+H@0V#E5?{s@yz
zF?%*i+YKws8+rZ5kG~p`7#5F#8w!9tuH9H3CQOLZSM9Glt@v*dnlA_4f^b7$*!}Sc
z`f>E^I4stU91Op7Vy@2XLnzGoym}$(Bnx7jN;~YQ=&(R2bz~#+HItb56E#-Vft9ur
zwSLI^PBU;RQW)-DlD6EH5DiX>2*{ZX?G3R}^%SwW6tKY|!jeE=p172OkM@Qe?Gvuw
z;~i$+(=b?`hTiGWB!WkJc$8k~qApeUxU}UyV|x8B*2L>@Dc$v%P&&Vt$}AN7@j2|%
zb{V@PExZ!i`k8WURY)dzE%|ty)p$B;4PUapZ*S5j5nOP~NEZMb1f2(|x$#rQynovG
zJZFEOI!qLNj4(GZU44d4F^c$sA;Lny4oc1vi+%LWlL3lbn#4q@@NmlB>|l|e>8ahJ
zQn!mj3mogEh|yt4bpR&NO0G=}>Vk*chrpk)>?m?fY`5loT3)AUK7k1dVb=2V&gk;P
zhy!CNb<jbpjxhhK1*5Mvx6Od-dv3$KhO&a!0)0Kag)EsWG3UndvdJ)C4b!Jes*sq{
zUy?K;_{Yw&w*k94EjJ9+em|5r<n0;D@~n@J_HC426WjSBAW=FLYg1}Glj@yl4YsVT
z$c;Y3#vjaB!;^$2Vc-XW@jCT6Nn4|Wr*jP|5usa*7NR}h24`d7-2<n?V4N^NG&haE
zH!>w3%VcT^ow6d9`2(hF?tkgG&wS+k_SXzgCb|n&PusbuZhZ?VaL}yExH^TxJPRqu
z^ghSB9(+}hhyEZw_g?xC$LMZzweQ*nl1?~=816ENxPrINUIv_DA1w~GXX-<J%7tK>
z+eXrT)<Lkh&+dKuc?&Z*t}y3iSSQsK{tfL{dFA!T35(1DZp_c3D0q(+oUz)Gb70mN
zXbli!VF}_}jC^e1O}80$0enMJr#4wo8G`100KHCUmc~FjbcK`Y&Y+SNI?$70%lG1s
zfyAdB1!A=uiOYiH6&ZTcBP{ViFB21OGt^ve9f<`W{<~JjNg)|V6QG#w&xvemiy!QE
z(Nv;S*rfQzGUGO><z>KusU4;J5Hp(3+(f>~0(AxXuY;K5WYTj@pApwhGY%decRgwM
ztNugMjx!ul9l~5ca5JkrV3=}%lf^!nX26teSLZlCiLi_`$&+%bE2_~XDT9?p;yZ8E
zLWF91HQY?8E5OKX5Y*DQ(XUS(0OOQL6dU%lBAmR~tUmYUaFXl7aUpWYrPp1O1%)-z
zj>s&-=_YwzM1mbETPqP0bO`ANbX26`Yqj?zSe`Ax##I2{HP@+GK<1@e`SyQOv#B28
z_)KOw-IjrD=lr}ynIm#Z-?#`!|9IOCCL(7s&tW#8(p-UAVy<kh)n(7#HT=|v^G5Yk
zLrQP6U=2}Vb}britTdO8nQzTh<dLcl2q1a~c@mlF4<w&6Pq4+Ov03l&<14#j*FmiZ
zXQ7|0F*FWlaFFHKIg+BRoe+^PN`V{5#G<Zzg6-k?{VbB4X2kT~lDY$vS?Rkp(?OK!
zicArK(t&StFUW_Wh{oasVvhBvchd`{?=W|UNT~=I3#slQbGyJ*={eI8Kd(t{cOo7x
zi7Ltn`%JnM#guPCC1%?Re9U7F3;~p#c5J=P5YzMr=lP#GC<CDC2yFV{tg7>;CpI4K
z#!6Z${I2iYCA+zzRCBboyY;iewD~{~iF0Q^yHkezHq!pu5`mc^@>eLv!#4*ln?dZk
z0HhQn6sQMjbGu@Q9I}t99~6vWB2gG@io#!m)yCSl=)v{QQ6_!?-J<&McFmRCLN@&Y
zs=Zw)5=Xo=5+<p-?1p|DfHX1?1=Pw2JhjV!SE{h2MTq=~!gk@AoU}4X;GSzYn%5wt
zhj!7@F*)(zrs%q`uwN>SQMSv_@K%O3Fag7u{poU%|C&beNy8MFQI&`OSZtnZ5xTky
z*!e1otoDm#J-)b{$LYdzO}5oQI<bjhhT)ErQBmws&}-EYcp?&T1qgipfoU_n9nk<S
z8M_Q!t6!1IppcpVxiF?)F0sz`uniAsk*HI?qg2-mR<;7P%AL6;-5^%j>lbbRR#I=i
zyvRyRv`}+4Dg{8;cGj%n+z^!hK~Lh?yKTmtO=AF5)0Dt${wpn^zXB|#_FVSt{+Jax
zui9__yD(rBqV-No4=?=!XxZaz!(AOhm5rDtn8M&EK%f3;c|Qb5{(KySNWPI(WEn$`
zEeW@Lbk`_@T>n_M8|`TS$8@p6=TNaEuRr|lss0{{>I;`aX%+9NXc2J+&^mtlu?!w|
z^FtD;@9E5n*C>-{yECBDWxx@xlr@@lE}~psU)6x$vlY;God6sKgOR!MH4RxnoR)>>
z=G2@DW`gi#(+V`9>M|`6df{~ut42-}^$F~{n&4+W)rCFE@BuAS!G7K2r@vw~ZmzvI
zFyAUl-uwRAVmjeBh2gjYFgjwOZLvAgix1jIP3$mxL7YowkrO|Wkz7-+1wsW5%-CK8
z|K6t^V-#X;w1px)xOUST%R!!>^*0f%<Ki`L**uyFp{zt!U`{)1zLSuhCvYI?0%Y!F
zJViF%+=UM`EVG>njq9RBE{u<8-Vs3(paL8O{_~cJOFxRuA^EAT?OQeHkjX<vZ`k}s
zFuIXCqO`na1&FDmFj6y3*nXpmg`T}#sbNWc@pXrC=Oc?DP(ffw(@C^wrsk8&AirI0
zP=S5v9?kt*0WUVfRg|>Eq~OzFF!$qtc#~I843NDO_#H^eEI)?HeL1_P?+;GL<J27w
z1XDShE$S#?yNW_sCp*r~N6cO9*o)JUNU85};^<0-iq8tzURDfLDG9@X1fZEEnIaBA
zADNF$LNVWS>bg*M92@fHS_BU~l41u~^&&*1g|20D-SO~_=po-*0r*yp`XED}CThqn
z7s&q1z&O~BXK+Ukx!jQ`J{zzAmhXZ|(~)hQJ7rdGUj>sImY3x{{6@YFX9Et*GIoj+
z^4*_J%Sy(7N<cFX@1I!cLKbc|lYxi$NNyP~_n_J|d5e;j9UpSLP1$@76Jz^zO$J@W
z`$%C^RPOutrA>3~#%(i?T1?>CKq*yc!T9PGH28R>tVC6j)dpF(r)q-rJ}h~^SivZp
ze#bahv{;lWW*U0tRB}k7BPIhoy?tAg7eI4ikFo<NAXz?mJM}PGzJ@CGKRuZ+*t;^I
z<2C(Mjj~c_eL7^Qy3qF?7x=0Me;b@>eaVt(?xsgqpNOYu9;A&ljJoYg+^-T`-7Uhk
zb=~8NO#ATMS0neiz&{02Q{bu!O!s71P5K=d0bJ+Di&o?8cX*RE0TzJGl~V;{f)u@>
z3`DZs*j<&`<Pw*@Clidpp3Y47{!3wf-_AeRUHsn5Wz<k06qM%}`CfC`mqIK{KQ&}(
zc^7V#1Es>wbvs@6NohZJ>F8ElSh=Fq8Ag=spVmg>(Da7;1Lm}8!|9{CzugIJXtePp
zb()$@7CIUJM(ev3XD8Owpr;8V5FM5W^YZv*!t06gf9(&UAIXWc9+dZghh=|Y!!bJG
zSKz-L{jw@8i>=q>*>`^Q9XWuu_h+7g_k`#WBRWE%F+xrroz#*wTqLR{bP$Yt=bz`l
zihpElVh2wGD;mjm{LswC_U#ov(Ig~Wt}2m%ouJcK*A+f?D;mkr_x4hhNgy`=xdC91
zjngphWeg(9jj}%UVT}1GnpoN8NRUkyb8Z6KIA`a%Mx2Hi41wYbj?3^XALViXp+tHU
zGB7U0bUIteNuGq!YPU$9EH1cDsB9-&%p5r{G){)|q?*ea!V&8RVgSrO?62K7xN-(G
zZa8dIe>UcMZoGpPR7P4;8kD5ADCuXa=83{`!t8YY*Z-zIsgnRxVx#JS5OA018p^G_
zc1DachZ+$-ziZAit@gG!w;GLq2zrmgI#h;~>=5}rcd!XIogL+4IM5I!H4ougw`%sq
z(gBgb=spGV<M=j>asI~%aN^iLJ9^)J;8!lflxh+@hBQ&4ITm&)UCfH`5I5|Q@-m*#
zOygz(b<hR|?AW6B9Vh$TO2U`?)R(hFe(MRfuP_;A9mJ{B;&Eiq=%Xm=-cs<0acub?
z?xp~>IV$%a=*qV6^^OKgBIbCU5N{#(RlC9k{?Q5;T-3xCiYCF%7zt#`>#_$&{298S
zK-sLOVyYPK{Sm#G@rObIU9-4rw<yQJ;^6X?n@U!!qtU-`AhA>;^?FiLxhyI(Xf!lA
zkQ>!i_|x<{kLvVvQ}_aQw%0ahoD>{#NMjEbXS#+VXE1SpoISPdR}oo@7shFA--we-
zw!Ur|$*TM|=D=&#BU#|thLs-kVVKlf@qh(^Ey^)ie;y%i9BBRlAm48Wu?y7F%Ef3)
z>l`yK!AA`tq+)6&oDbQP5Imx)N$-PrW#r7#_c`p};zvz!Kv;Y!o3i9D*EZ*r3%Pq2
zm}@&|%Wy1HhbfGIEpg~+x%uVjds)V<7L5rwL*(R<pQYpebA|YyYqU-WI(Z{e!#;Xq
zJ{-d>_zpSezm?a`n;BMUkBb+t-_VmfjiKk`l(^IqYPlx&Ovkh!b*MSp1W1W`k6Ek~
z3iXbzPjq^-+!CJDV>yW4>!Rmfj(L`?C4e$yX^?vE@Qcf=pp!5@-zBPJrwWbD7^@Vn
z4TQZ2IpB_Cgz6w~3dQEr5J^D0iDjPpv=k}pZoyNTqlXu`C9gfD89Do&{9=0(X_^ar
z8s<U-d{Ks~&Fark3L|13T_rs2l0{L}3kulE5E=s&9~*$mh;3zGGAKy3Eco!$!c<o&
zuI42g?mbX&IQ>Cj)hYvqLRHmA$}Vv~ED|3JIqW%$O|}p>Z7g;Z0>8cCGv2U$w}2~C
zs~|RV(r01jZ`ZZCG|C>S8dYetYmlm}RL0lPD5oaJgHpwb-A;mD@nidUg5@o|bRqtE
zY-?_?L~Wy3N_d?g3Jn%k&%;1o85`cV*&1&m$5t6CC20&c_?Q(*{sK<>xG}UcpS4Z1
z4>ai(-S>MWb(xLw%);wc*1$6`ycfzyxx}&f@!}3dYY)=jijmNP8$6~r0;7uZH0Q_e
zU;4=jW_qiaM`~t{h_h5c*{gwz0^c_F#P*DojS-N<FWhF+zUHW0HG@pNv06gX<k+(#
z#D>fgvr77I6k-lnNYBCsM3Ze*x69Oji&47y;(&bB4HhSCm!1-gQJ!~at^h*SVKsiD
zlJ7KHM9NJ6#0RPSu_&dR5gU;x3D~;cR&F^yq*_b2K6)<To2xV$fM1q1U;Oh4QpaQs
zjCAFmbN{=Pf~S_2?>gS`ohp;tZ1ue>dluciykrO&+x;!?_fcAj6Z4*wT(}f?;_qYj
zyBB`xKW)RD2A{R$sVpH@OZq(|*)$uG=zyo`8ZXL(?f|sDvuO;+UIu|~fXkh+dQGX9
zo+w$5Da*EJ^J4FfW-Gqy$LSfd6U1Il1hi{)Zrs=l_7%0#EE#>~;7=$x23MQF0%3?+
zk1F$_|EZ)Ypw44GU-FO^{cmIGsYF`WIWcT5sF*?%GsSA)fO9Z?R0ID2Dw!?%oP>hd
zc3kHqJU|n1KX2y$oJD>8R(#g*>8)EiuB+XE?nJ_^tmV<D-jS(JuZY$FGeFG0))orn
z`3-Z0<>)X;%>RKh>y*%V!{)GyF8I#ZnmSn9)S|Jsk8>nT2Q5Ap9!&`f2tpyt?6%BE
z0sANO*wE(W(6>IV+YIU&s0AcSZkQx!%o?(z=lIX)FFCxx79SN!Idt#7kC=7f@Lied
zwy~(SEM0@_{K6IaQ@9y)?9<-sDd3q!G;Uz)$ri~pO4=fITDX8vl|tG(Jpw~BIzFSi
zD}*w=kKwdk;S_c0O$EdgOhf|%&?o1>G8>!&&Cb=17b38m`fmrO*Ts@v>*i{*#5)rF
zVJ&{3$zFb;*72@WoVDQ-nGY40nXD}kArNhf<(#Jq`d9fhV*sYK=A5~dw$YAaCT?22
z##lMZ>5}^8G#I74<G-K?%)XZq(Vc4CYGu$&e<&=^Gz;KBXepi#<GDG-AtC~7{L%x-
z<d4Ua?DJ64zTHhE0dwHy)Clv-R|l!3odjk(ca<`OsY!}jV{iGht#?G|#by}>hvP1_
zeOfhGSl2$N9!Up>LB5j7BcbAuj8qE8HO#7?E?)l}zBHx=&KY~MY+)$?Ug2EdIV|oV
z=(`Lux78^J)MihRIEZ6!E`1iocnL*d-2Ls|G0S>d+`<-c(Q#0K%!o@x(FMXfX76rr
zJ-nBaPc!tW)_ylKV6Hj;JpHeLn2wvErjD>M{!8{ju0zpaD@8u82_h^`Bl%;O_I#Ot
zVYG1M4EcbuO)#i?J~WbXvoKo9)u_ahlV<TE+*Yufxg_B5_uaxGhVp|9ptOtGC&D&W
zgg9{1`n};5|I6|4#s8L`$nc(wWWJ*{tGt)2$Xms^4hxA_yaDWtMq2=&UmosG=pZf;
z+>_3ap4h!YYdwcSQ`A1N8QWt*0xnn2q2>f;g|MeB{lFhV^@nkc^<&u50q$$5>iLrg
zbZTj%<<AJUvxVc_YeVsU7tKfi7a$Lem~nsf;)if6*8x}*4jc+JAy9G_TbrM(iLnJZ
zh9mRuI)XvF_!IPZobq&GMe4?`@-rslur57WDeWO!iKvN79!R1_$>8wR2LV~oO*nYo
zqB=(s44U;|6`vIacUk3q1O}olm=#|U7mr+RMk|oBuv<O6t-H>6h;Y194@zY|;>5IE
zt=d6v&n$ov?%RXktrGv!YF_-fiw+~;ig(@Rb;%EwXNPe^i@nENAe?{tgG&2kU0z2{
zBbZ;2w4gG{TySEU89JKwt9K`cX-s3G1r_@+bFQqdVkJ)&h?|kJ1Te@>+#{?_bN2Ml
zyN+IfPP+bJBf2gO|66Lu(pM7EdevTRI6A6rkNKAD9ZzUt#5EsSKfREU2Ohzl#OhUk
zc6{v~%qA_S!6{VWYn9T_{h;xlYCbHOCr;p7YefnrWRu{mciDsfYvPC))i9j2|2+f(
zC7uB|&W-ByW2ZwIN8c^m=4yfFw72vI<&<i1wk7nOZY+B^@|~}{KyV*_zJsCiOJap{
z-k7{yx*G!J2Jmt3s3Q8fdS<8K^7wfxL<B^&95-Yw)&Ss2lh$E=u(^Te6?}2;TyDhV
z*+n^^<X*F7^&@xaqq#q8YEEk`B+Hl_sXK$t{uw)tMREdy&mf}X!;Ec6)T=%Bg^XKJ
zHS)`L-xR-xBJDB7J#c9%!@f2e2MO)<{LXgX`~pVXT8N7%vQ`$V!%Qsz!o}_%wg8Em
z9Xh<0pmtN4I)Z}>Khr*Sb#mO!2t&T0PIZ;3w=;OO-|*h#1}6l5<RmtF-$blSj$pyn
zm}tRm0f7=9o0;YJ1hq7x7|@zY`tt|+dQi5jt<9NrsK(D6QmllSpho4Po5Nb|RyKVr
z?K2epQ>@D{`&prCBN7`53221x55X|##E8;ZTQ>$NSGezW!BX*{#Pf<tCQpcj^LZ=J
z@m)1$<(`!N*%^C=SEg=--(4zH@mhXgH&vVBIq57N>~(1()YU78{nZ%u8O~GhU$ao2
zo4z(IO}Jis-v66NR9%gc`+VE%XR0+-s{AJNuh~T!T5?PwsD<%g{(E`+dxs}#3J5GD
zu920kWs#E^01{C&Oe|}GjcoaGl6(*Sz!n4F0xdGj@tu5Fp%#p3Sk<7<1oDDm#0uG#
zWz*4f7vZ}>cxkHj|ICQD3K<R8(L*%ua_YcuaH5YE^!ImYGqr@ZaE=}~>q^tob)CmR
ztFebPK0Q0<OnqjVQ5z!jYaLGMZ4u}Iv$1G@`5kJJl)g6BwF9>T1*vCNAkdmxuPUOk
z-279=Mhit<^Pq9!X`S;w>mePI?dg0!9FD4(Bh2|0)u6Ier#?{Lb!BrA#}JB>@+-M@
z87{l%?s`SflP+*Wpf|3t`_gS&D7Xat!#%*I+Y#g}On`S*+Bhk`U?t#c8|>OFW%{?Y
zOZ7KR5eOULUHb0PxD1w-#o-H}x6R;s?p89adAG$~r+4)A@IZZl*-_2q)M3@Fq1a-y
zMMPnoOok_11E(npsT8}&r(}wSCdq0Hr=2N%q{qt5^=^0do}dWzUOgzHNw5B{ZC(5D
zMhC@^F*Kl^2zS|Xce8g;!x#1IL#Yet<wC>~^We^^6|y$fakbXLUTMgPiGzlVsDz17
zOC-`j*(_3A8U_8_W_{Nzv#m;sgCclf428|dD+%4KIzfJh8GWTtCy6UMa>4ujiMGx$
zk<$Ct2DSD<PJ=R@JS4iZ_n)&rXiJ~ItM)|hvl2Imx(lb$QLG8u(ImC1&Q7F7B6(;=
zjW2G1fbbV1Y`F)vliDQ*oCC%L9e=Jh7ow3pWEAAP(3=(<s(x<V7?vq2M9LOv^0@m}
z-p@I3F0RSa9>-K$T9G@VP-GXlla5c0M>Sdig+g6xTnZMBVWR)Y`@}JyB*hF%G3n;o
z(1q*bafAO~S}(!vgfdQMnpSN{Xpq$SiV^RRVq6LwqyK<eZDKO|eynmRGm@Unl~ha=
zcFJJ~LcbHV)!M`O-QlAv2k&-Ybsgo@HjYvF7`1-@Nx3VVIB%N0`fl>&c3CDtKoe<2
zQgXUxPpk0j>m~$l#k*r9=?jD;Mu{`}Qnzgzj}~yda;V-2oLtBNji4I__2V`<7!V*A
z&ipviZ*Veq3S<m474sZ=no|8UOZ;+fJjwz?ExkE3QIDs_G!pbQZ7P3_7}#{s*0SrA
zX>zGTmpGotj9w5%CxIcCT^Y_}WX41v0ubmqg5g@fb>!1qsn}SWA%&dDxe0@z-1<IE
zd1M%<ee4)JZ!7mjT&7<#<P{7R_J%pl%-}s^;*gsA1Xqhk)#Ckqy6?^w5J|p=sv?eY
z0AI2TE6vi;MMrz~C-=<kD*$Uwt7um%H}GrOjwDC$m>cHQu6uJ%GiqeL5`y!ZeaMA%
zhq>GUCG?q*z{pj07ZIA^ECNbnuJ$&dWlcT+{;@<r!k#ZB6Z$e)no3CHn{Ix=dvr$g
zTJ;4TI&gNO2hUkx-nf#XYEuGL`^#I;30~sMux?UbNj-Kll6)TX)(RPu3h_i(JGxU0
zSpzyOw>ImKdNeE~xs?rc)dtCVRG#8U@+@XN#kYl9C)sNiEW0eU%O`jJ7FF=DGSl?C
z(sLHaK)x!W<Mjih<wVSQa>@6C5ojCzB|Lq?9%Wd+jCvtmuiEL?V$3Kw&-p|PV0URl
zj04^FO?wccYi2dan;AvdOkx_Y%w-U7I2LkVrzxYqCTyK^Bi2;M5}!G0bm@rAR?w58
zYJ%3~HR&knM5livu*954!0RY%pI99XQ;OXXvV!10GtZwRn?x?|PbYR=h4v=tHglX!
z-HyKQV}x*JvC=#pL=_yyz#i4#)^oM|;a8pgKG<eb^lc0K{bL-b1DYD)u#NC*Mw3!A
zG&~y$>(JX~zK(a%6z98QFbuOYMOd_T^(aT>9TD7h$`Wi!=BDiR#n3gI$tsr6;Gm%-
zk+<@70V!f8Z@5<$$V0{A@u^j9lSEZB4Fs9&U$jrTi*@xBNMth@fbnTzO%Yu*@F?`u
zyLRZjFo73p%>7c2h@D!y)yfPF(Rt11(`JVp^(JrWMKe8Nl3{GG$>nr1Mb-3GvTz63
zbDd)eEU0TYo1ms~$*<Mt`k$5$G?8V_6M^YTQd8d}UN1J;D_u(bWtW}OCG8jPn?&-R
zpp;G(<_V|1xJphtVigBHnud6}VfWVFa@$a1wX~_fx*kn<5o;iOt3f(%b@i__W~#^~
z3*t^4!T1et^0qbHF9-wtzZY9F;#2yUl-xcpW}P-dgYyv-kf7DM@?sy)u@&+Bwv#)F
z?9i-e8<M%J{!%<+2k%yF=X0oC{Qk?YLM!QT0@u-ytl?#w)M&l4#j;XKcy3WM9D0p*
zt}zpj)u<dA({bXG+*}QFjo}|GgKB`Q(kTD{^=WbX%<YJn>P1Y^fm<ufKYpp0V{+rn
z-*in7EoFbi8);qt*W{xZX6t5yyrm$(6m>q7-plk8lE0!4`QQe8A7YW!ktY-$l%E7F
zDMecyR|8hg?#9f0i8){+zFgxVeB!a0=883*BS1^o%?%j_y}Wj`n6yM2)jGFuiqcxe
zc!9jiPMA+s=Z0L%b`;T-iiCWZBVe|fJXm5W5+5`go7Tuxj*$YjwENCkEykZ+tFsB(
zs?5!M<$?bYoI|O`N7ydLS{oLh5D|FxF3)Dr6;753M?g@c5M7B@H!aIaxFAq(i6~&G
zGaGrxiKoRYd4Mq`ZHY!qo^f|l>Hx&sEB4V-t#c3GYu>R3@)2}|_ue?1USOguHo~R1
zZTwSlu6KGsKXz{@Eg@wdI%oNp5k^HkXTA+NsNBUM5Y{4ii{t3}^8TQ`*&T753*n(%
zr6|StW@s<qjQygsX71?j&@%P+dG={sR=7dFMgzUzp#wx$AuB8<)+lELR(o{0M>!5w
zBq*q54y(#=B)0eQ(JF2G+P|+RpH<}YgN>1|t87W?oT?{YsU6kZ#fOQR64Ydx$`rFr
zPU#EXg-Y~W;q0t|NZWgaN(aoaSFtQ5;p?&GfK_@$Li!}We)w1PJH-NMMU@yrw?XMM
z49Fyi`uJlh#@cvO72K~9sxRx<&vEy{_d|MRnFL=nG*}ZnqsV|g-sM;8*)dY|Z*IqJ
z!Gb{{0fQHd4VQFEpD^T+EE<g=2TiXhJpFo2GLA#hhC%O+<cr61u4oaPP{-gpm`}78
zaio?t3^@&(KDTp~Pzc%QnY~N3tg<b{wVjOSh!!uPy8->}93g57YY#{XnWt$AK!Yfv
zpa1EdV*u;L4c_G{ZN*kJ=#y;tC)Xk36kfs-HJcuB0{MS<ZCMQ`2WR7+=&n^Pj+jS^
zoE_QQNywW8EhgYoZAH!?_GgAjQkr)l$q*LqyEF_xx9ecs7x<*T@GlA|fLShKnZ|q+
z6vN~=$oon#=Wq!T-kRcOWBBdj@X6vinuLDF9^{Y3U)Izf6Aa1&NK$?4&}G6E!mwsh
zP(?_C!2a{tM17G18q%16u6@7RGz&IX#wfqR`2eu9f<P*;rz9Hvp_;n$eE-xs#dc_o
zB?xl}*1Q}!TWg<$@l*$l)TVSSoTd-OzG~8w(x_JQ!H<UB#wk)MjU2UUZ=oK5a5Ohz
zF55D&5VnIADCse`!%UKZ46UKx6O9Z<x#|0l#s-JzH!^;lKg3R!-*;Yk^O^_jT~mAa
zcxlnt-msvYqd}z)Sh%pYa35)*U?da*9;fEbn_iVPr_hT^nWpEvF9c@Ta(SH9_sC15
zF+BxV&X*cf9%7jyH4K+MR_HDFh*%j2_Mz_Iw78RAm)>wTysQc`MQ}-+fo>WIoL_;&
zCqH^rXnQUtM*ry>+{~jaoEGouNLHb~M7D2#E@S>Q^Bt$+><BoppFVXBIU-FKMubrD
zyq`42wK}4x#-Ka%y9Yy<0)v{<@hJj=;!R4*x+W!#j0Fp-T~sK5wLreO3~R4FSxV=i
zL6X){S;|(cuX%39b)gq4Luk7JDzsUlzyiH+LKPvr-!FZ>ra8hP{r~XPb+R%@-s^Ux
zI2Wvvdl+Zr{e>p#Y%9q~91MHj!mM%9emj@tM5CEk|L`=|cYlL{d0mn98Y>+$TPWc8
zv$L8%?VeY!+=D03!|~?ru`^rNdQ%&UjOqzDqP*D!Y-6r2K;&<HxATH`h>39hsW7*e
zgYe2z>)59=2*^G4^7S<^Mj+C_y%nk#s!eW0f#~^&PZaAqe>oo+A>7llsJjk<puC)3
z%K_D$bPeWAITB{&^X<_(ys{3+HrCKlxlyV$bj((IjfG)eVQQEh$nhIfu6S3k!xcv~
z%U?v6vg~EkZi#ElxAHHXxJsLBGChNv@w{_`us%HC4DiA9{4RT!ANb>i9B(47!UFw%
zM+zV!DpzW9l&yFdCI-$3<BCGMe2Ay4P85XH{!<rT`0=iA(n91aURVIA;<{bFLu>3O
z@Xd}wp(P?qc}=s3b9)mTL!~xD<fA5nWBgHlS`gSkXPYr)$yWB^W3R@UY<d@z{E0>q
zOHNRDjyuP<N8l7~G>iM{@B#y|=4=|+M2Mkt*j9xSGS||!iUSQY2ry0RS+$;LcN1Z`
zNh>*MO7q8vYa&jB#C}7c!zIeZx`>zLX$DC@)4_lJ-p6p)t7QP~yuXaDaXWJL3tCR5
z;Ix#qEJrw$k?C;XR%jUh{>o#Gp7wj7?p=)DrYC70$!&vB*(me5DtDx8*KPEP|1fR=
z#u<oMoefuCude1+b+RkOKG}Yv{9Xc*9EHWGr7ent{&|i^|9vx){tb>VvpS%ipq{X0
zZ`jVu<g<iw;LX>xQ-1~yc#v#z8I@c^G3>8V{?%XdF4A3o26PF-Pj+wE1)=`C3L?US
z60C7@#(+}CzzUn@q@ow%?kejo6Ba-XI+qI{7zhVeqbvZdEdNw!V?@;3p=tx)#y-SH
zSn<eM#XG1_m?*lB_HA2HBlZf>5H4`<a4W;O+A3@6;h;bcK3|lMYW&iy=wAV=ifaCc
z1R^4oRFIF?>88CTn1q|o)=+UGX?wy2e>cTfh9fzCFYsc8W)M7%(bX(j6KO&}ITHiU
zT=sjo6<n3&dzng@ueFK##s2X)C^Xid^QFDMp>%@60~}6aJ^+`==r%u<Sph%DBf_1z
zF>~Xg@P7_FPihS(>TZVj--8l#>eP65ACBEr+rP7;KZox<wuNRS@->z)GC1?|=8?ae
z%?U(io=+)Cw(Ej&uMG7i$<)qV3j7W;-Nw~tZ*w3Tq7b2d#kH30-WUrWh8D6-&1)C!
zEmCNno!~@JsL+z(T)3CSs3Cz~tOk!As9%RW-xCt`3QJazV1v&#REIkfeeFmnfANm0
zH)E<HN((4bo)J82&sp7Ky*FGV67hR(EJ5`tc6ST0iYwb)4b$#miU>r6n2vDX%c?u?
zXGskbj0^$Vc`Wp%kp2y6$(2yrYkvWfHVp5K*Imf>T=tDhEvN>Lm*fi$0}ZPe#{T4H
zPeO_skh+QF1xdq{VsR@KP(30y9v1?4y-?pB2;chC_=g{w586od9;&BMz#&S-T=X&k
z{)8Wm>-^~PVxmZbBYo4g(3D<+jceTD`lJNK)me@W`Ar#zMES|XuJgGJ@b7Ro_!C%a
z+g#~^;>v)k1elXDhW?6zme$!$&zL(0cvVBFsIA!bP%DGO|3zqthz$O_nlq>&?1q)T
zWPBox_9tSK8}N~o;UUeG@`v2Rld}iTZ}f4^qHx8c$#-c5XpT;q@vc2C0$F)9>{LUk
zf^9)sqcep`>L0@lg`q8sV=rE;qeKZY2N*FHqS-PI7P)rFxa$ky^^R-+8z1-`jCiJ;
zRQk8`a$RnqGj_Y@33{<AkBsO%f;>A_Ue%0=7;YY(%N&+Not3NCOOQ1@IfLQt!M$z^
za;)pP4jd3m%yC9~FqwbTTd(5mn5>*yFo~#F;MMeu42`M3U$dxgL*J+&RjtkU;#tSx
zLWH-|_?cim6dFlQ2(Yn~`sNP>x{)%hy7#BEgeOK$$*&x7B{u)+{)FEVD+ZS1pMqko
zsdox(_N^+2p2Ns_OX+WnLSXsjkX|xl49e4?G1VKdo-~>kuO>Ip(6Kjg{j4tPudT>S
z2Fat$v0m=6h^14ij$npS$e^TlX0EYHr|O)^8SG$y&_}&UFyJWuy<KnNs}~$INnYVO
z$AX4kzaX}OtSy}q8YBaFUsd|iF!t>+zpg4b<w3GF%o|ksmI|E}O;~3oY~pEhU1tKE
zg+?MYdv?^5q)+E16yc}fRY6Wm_KHgo?<4|dPi}vFAb|Iw^Z9*S=}Lu>Q#DH&qtRj0
zH@HRhF9o2wEDL}HKNBk{$U^Hjr&6woo+XBMVnt0^XcR%2?NUT41L*GM^XdUFk2+!q
z<W0xIdr7v7w@qrjI&?u(?-dbh-KnXX98hAPY373fggC1iG|Z!7WJIZrp%mFmE!TZ&
z&L!Z)z}>!aj*W?(!J5zE;$xI#k9?GF&FMrVfWR99qW%GyMkF$34qF$Kw00Et!#+MN
zi*81!I}9CZdkd7Tip3U$Z$@N-zVvC!1qGFs5UEws+zdqCGHc&cvDr6-xyEWUajk|5
zQrxq!g~>w!O238)tJ%&_qX7CIaWXK;1P6rIF>dG*FShoQm4N(NcnC~A>9A2I8+dq9
ziOx$;k*>ns>8hw+8rLF?#!n(I8W_tvg~7;Y-utUk0Ka>fae{lmq0S0*;UHr!IA8KW
ziyzYhu5&S6hQ$+$X5JPpVoriue|DmP%O;~#R2&e1$EQA9=F@ZY^`#HM?{8jF;j`j^
zo_AmY(f2Q`Ux*p_FW?|7Tk{<^1n3J}+P79Dh?0be{CI18qqbnSJ2^$gMn2PaBFbG<
ztGw9j5337bxVs)DdBI5+%*K++s<iYyp5kYhl_*1pz>f}+I(IhAR3~U4V5-q57w3|N
z(F*i5e}2gM=WC`3SOsvPAtCv;!#Z#`*EAbb@ZX`R1;YEK`xZ~^R4=e8v>Duz5&1i^
z#kjU`)<Z~7Ts{YgvL>4z6Zk7g)`>F8;AMViMa%c&sLOJ6O&oj79i2sNwQ8A4TsWe=
zdH)rMEZ8<VS8L*bLPpy!f|vLnKZzO=I?uGB7wLXN-<KIx;9E@#emTqnLcHfFGQf_n
z|I&esyG>m97MjdR3h>x9!54Xa*PF~~pBm?_R4b8ToesvzncKM_V9dB8csQOzgYeM<
zmHsK-=61{{M^aYUlji2Mpg==X40BNVLd-E^Fm6uoFY>W?zUj@lLAvHGxuPjjhRR`L
zk~JjQZXGEzxJg_uQ7x*yGPi|mk|SzBY30M(DRbUpY|sA_+~z+m&xtRHp^xrf0g1aa
z@R<zkokeyna8v`M>$(DtapX(9NY7ZUxBMWkOjkF8&woV;nB&DM|F#lTTMeXkVx7_t
zJ$IntrVuz+L&bIS@4hv$T)Q-OR9w&trA;Yd!xi)oU*Yn4N&~H;>bJ}JY++XC6ZO3p
zedXH6qX?pK_Wy*Iv+Q%Y5CZKiq`k_%hP_z(0y3ykyk#$!Ns>s5<?B=>kizx(B#xcI
zua59J@z>j~0t(cnVuZAD9|f!0W?gcVLtsdbg@%;DG%CH#)ulaM9n|Rj5o6mPFKNc%
zD*98^Tw?eH7Gv!Z+Bx8*<UZ}frUP#~=^pjZMZwey5~<xwcvUE4geWP>R)_rZnJ2wR
z*jRd2w$?JP7JH;zAG{?sW3#<sR2v<oH$QZxLT0*x<}8aal}WQx+6#9{pP;3cueh48
zd=D8Myi)JjWkOgrm=#vpC>vP)t=q-nh<HsOwe8yxcBFodSPUs~p~H8knroCPXkY3J
ziVRWL3IFFrtbMuFYAbpP$>RMtS<79mlybe>Uo&#~TnxP%A}>3+#Tb$TOHflBIU~%o
zAbpyigo<(zWFUw*FvQrcp)x5@ol2>dg*qL*%}>k56$<CwJ9uBDMHn@~Kvq|rq5)W`
z@R=+bLVZ95KH3}|SMAM9obLjbMY)EQtgFcjP#hU4gE--=H~r*ZBWeR)Aj|T+Z`gd^
z<<u&4clEWDe+@YQHS856;Gu2oyJOQ;yW>G8BD!)V<c%+`_k^I3Xy~!`=;#o`LHqh4
zOfw|5#z+Lum}PJ%`C)vI@yHf;a*Iwr%54vvq3!#aGGhq#9eGs=8rO8m=ly>zF&fCy
zNaK%gz*~{~g|E*k5HI!6w~rj|)n;pfTTPU0moTzO0+rW#z$KkXqe+SY(!fhn2XRFd
z-`RdklFkVU;zE35GD-`Fy~e<`xD4AjEn|s(Tm)q1p-t3`wIdT>CG#~PnY#z?jd$`M
zI3DvI;HUu%B!;e%|M(}Wqq>;EOkIJHV50?FW52SPH|E+g;C&9(fx-`Ph#!*a!^xiw
z?kmuzm~HkM#@p;NHQLO*SqUqN*kgd|Jp0zEWVsM&ol1E7e7;K`V^3p{Czs~9Me2i}
zIxVv2cTxGM89_%l{3WI}M7Py8QKPa~A+$`64=qRW_AZi(a(&xD>i((~?sPMZH-j|q
zq<e{>f2Q#HCj<nKC36Rt>**yBhBLDAsm$!U15Qrju+hkA8`xN~Z-(PHImC=*OA<Hn
zp{&<o5qRt2I$DiF@m_eU7{VKrBbIS)6oXqmLa^Hfnx!x-HjdqTIKTZE=QVvHNdhzx
zRJHZwg?-<Qxlk%cjoTvQ-V>gcynjvC{RL>R{;0T{hLH6(j|seS&ATtBO^10W^D(3(
zOEPat7`n6QT<TTf@98sX=j#-C+Ro3x^*zh4@H}Ltv3xP&2(KjxT8qFfs>ZEPE(UD7
zy1&~r26$tu4Jb~qxY1MkOGEa$_9>n*xg$k%@KQ?tkg5haT+_Yd*eONcJL+UVx4!CK
zRMQb0bFb=!h8F}Gn&I@FG?kN9px)46Bqt4txq}MNei+LYHW@7MD!?}xs%3)2q49-&
z;MShw2)i-%krUHdz1Lq7+^8s<Xn0$}z)1=9GSTIGF5uGqyY++phJ*Xkq_6N1THA??
z$e5&vy3U10?*o~Vc)&E$8QjpQDg}e+N6axcL)0SGNsRYn%?}vFti($6nYKBHS_VhX
zx57AJX4lu!u75c_o3hXvY*fdL76>IF_?^v-row35_&T*s5eWvRhf6hjJcL`^7Mf6`
z)Vg?V>e|&cf7wZ8zu+Iv{qe_$KYf=bxb1bRl?ufQ&)8(RJK7chg#d@mm$jIPxa(k_
zsqRN5ce3v=MwOzBu~7Kj)qm<$G-`*iJ7+1Zl&_j?!bwA+dL8s!S#-CD5XPq6?);T?
zaPdb}nZPYa{QIhyk+JGt?zy!ly&!RV`u%@0U+&XC6ClU(CaZGT(20IMSDA@|UloK8
zNtWDd+WtaIml^nN6wfynsYA(#-urg`fqi}V#o`J^_LUamo(B7~{<pSoHb-F0zlqG@
zpW-l2S#rWSHY&v9Tc6;NrE~84ZR22rJPw8sA=thn^*|#Q&E%*Y(lr;xYk6@4*?-`A
z^odmitsvSzSZ&+Quc0%yJz9ImIbU&#^~eV2I6m|jgbgI#Ma~VOGtfw;M4V~R;NpI?
zQ&fd9B=JFiZI${WMYh2=VszRdq}MuyqLgXVIbafA7|aR1TNH-kqwh9BMmT$;Mj(lS
zjupt~!X+tR1-y~~deKVHp$GO`L>xg;mZh?hid+b@ag2>1Ez8~<;5uU7|6v>1kF)C9
zF}hPx^V-59(Y0)~1%|J&AL3!asqsrjnHJghG8BM_o-T(YN*%#C?MGRV-)-VCvTTG8
zG*L97=lOWT<FU<J(U#SDBigUXdypjsGS&a59Z!pO{*Ln2^@OS<ZWk{IE=E3f3QWE{
zZ39)&2tN-_we&#$?V(q29syr!ZZDy?M_nN8{e{_t*pXmxb=7{Ml1wBnVwupG$xcHR
z#r8FZ_(wmFq_v+(xUg6?@78vAAPP^F<QRlM?0Q83tf2b}OC$TbkIw^ptO$)*XJ*2L
z0rrval&1?h7@*hEuqwQ~uy68sg-j&rohZdXFj65?I`pTCOq5CPHw4QGCOGZrm~eCf
z(B4S}^*J7EeEp`RT1)ha-#z=CS>gD&zc&K1kuE=F{?^~5#sen=(tG-{Lh?uBqjU}z
zFH_o2YkMP+s2(*oF0r;h#;@T9B;d48tph6_Zc;0iEl{c`Z`PWv!|$W=Z>0|`ry=@Q
zAp?{m7J0-7iHf${4kcPip~Hg51@1=t-mQr)#d}z+w)yTv-vIc#iFWxUE|K8_nN;0&
zG0fKW#_XzO8bJjyCb6Dt?V34Svc@1>^-Y~HfXfQ~DFLYpHj4btVNpikd6&n8@~ut5
zt+4^mAH3Mg5rmpW*N_&S_7~P$xIEJcx3gAqWWiSuB=4}omKi5H<a{Sq0g}sQ`uGVh
zqI;VB1gABOd5U%1p((i-fSqOl46aI$;Q#G)zFXH;Nb5)Bv;=R5S?6^)K>|e|_lSv2
zFz6gsbq&&ku2D_*)V3&bB*LWb6hMg5lgyi2uab%;fukco*qfx8(c9S-wVB5!2X!79
zJ}x2NYrifvzAW8I>u}x6$kb*@@(!M@E*akR{|nq7jyrZ>;O+iEY-dum9#Ey6C^?Yy
zdd~1K;d)zLGX<K(?mnmB9_nk^mvQ?LY&J7|eu*&G%LZ``zGz2dL%;P)+Cx5kyr#&2
z1{a=kBg-JqH8B&Yc)*yPTNzh`HPj9$-$}ByN+y_QGF-E=WZ}?0bANaUK%<HO(E+?Y
zJXS`G3gWrW9ONS+Ns7ia=BCC3Jh+z}yPd4W9qi-k4GnD^leNQn@Fr@`2-!ihNwCo-
z!m23$aGNt(6f_W;19lEhf3YSz-ZHcyg#ZCHHB7tsJND7I)Lz@*eOPH14w>=`Ei%z{
zHe0G@yh<&WFyKA~YK{;szY8;P(xnn~YaRgIH5denQ7dQii=1WA=3*6iI(Q4jtU{pk
z#vev8=Jj9?M%!BDnAn#y+-4+W0?3bnN3s$&fco^Tu)EC`IDd32Nuz72mPLvvV>vrh
z2{#Mg*-Pk9)bc#Y9~(<Um)P)h4u|jw^NUw>q&*7A1<)F5@<7rMtDyWnWXP_>`!%`C
z3v$i@A98Lf?;ZmN*-_%nJzHBZ#!j9`f0!QxpkHAf2A!j$2b2I@%RnV!rX+>EKSEh@
z&goO5v828ujSbE<V<`LZGm8!|mid>zbj+XCl0@Cs;LtQL`m5rv0kwbpgVW6@HB5A*
z$nybH&BC~<ggwU$TosEB7qE%cy)Uuf56sSw9-MR<_8X)9hIH|AU^t*=G;U4*8}ngx
zoc)x%rFcVo#@o}!p5BTjYj8ls!^mD4#7UJ%B?A1mJs25?p{B9;O0(Spb=`D$vJP0q
zwrfIO7P>)TTvJuL=vMse{E@gmay+x#&}~VLYho;a{4E}Kc)J)Gk0sk*N1E4yPy5%W
zxo<hHuP;_RqwU1xe03k34-E6^-h4u1qEh=Kx6#raCch*(*~W2uYEBPTvv~3N2o7*o
z&f@~YfT<Yn0g;FZy0rdm|00I)ie`EuHfMQR^(ra?V@h6;pq&*qztvt=;j#00J?Vi@
z!+TpJo`}+YE<n%oP@5ph800zNiO_E3Wq5=;$DKdRAvG9&>9m%(#vP7yxNhFw5C_&L
zuTUQ=0h!tEcet6i8{a)LrP6OH!uVN0t^fu|4g8x9mZqE&ug=z^Fbx*e+ns^x^}uyi
zx4-MsJ~?RsO!m#SlPmAQ%9%ZvYdcAeX0N<S3X2-b@24DIjTKxb`64T}N}#^7%BSpU
z(nbhx-6|8~S_};=AFff5Nqs2AxdKmxCpoyn?4NZDW+I3^HY<e6M~C}WyZqC0v`K3#
zor#S-%S%@((vjo)EW?za1(BHUv#QDnh9};I7mD(2VQ;FpGVKKb_Od=zg#sH)=3y#y
z1GD%&m<@2o5INyUg`aUV&4nfd1};Q$$tpnn8gkj8FBsLSxCj@kplPCS2N369G-R7_
zqkkJbgvu-*eY+Yzos^>D`mZeiRBc)vJ~LW>sk3R~-+(y+cehV-z8)T0q$79~ODw!$
zIYA;=a#Ikc3io*jfKx<YjE~#IUtOPn!v({(?Y>07$8w^N(D!zAzZ8wawWkf#|5ld2
z9V*!Q!)s3}wO9p6*6SMK`lG0FZ*n35won<EL(m?v<0MomF*5X#tpRBH;9C6}p<Nr4
zjmva$?{wy9GWEU;eJ&y^7sIU^0zl|-(;g$-ReihU<C0}B56MWrL}o90Mx(Kkr8y>t
zs8Nyx1_zlkO_-@?Riyr~&kJjvQHcFo`kxez`#41|JK$%op8yu8?{s+wkFlxJ=lyuh
zz>l`eFB-*k+{HsPZTM)51r5$WL$i6aO3>o_UZw^02c^AG8f{!zleNLWh6(|5TwI`*
zz8+&<^Xb?YSJhhrnueqiX)=T%A-gK_5<n)V+n+TD?)X`nsyj-cfM*$Jc~F2ZUd1Z(
zKzlY<7$wrl=hC@N9MxQbLD`);qiku{PoO6Oet~ZyLh)i^oHtWlFEH+=LRx+ou)iiH
zk`b-LEi#K{xT^iF$O!ZYDxy!K{>dbcdq@^-xq7_$Tb{i^EdN>WY*zP?vZlKKOza1_
z6ZeogSt6GWEmFtpYa$k<MF|jL0?#9a6>P2<B^(;G|1#Ll02jU>OOx3ft=J6Rv5kh;
zsu0~$qhG;_c{HZH61HMs02+KH^i;*-{s$5Ln7mKajJhk*?K<p4MO^QXp%MAw>?rI%
zxCWf!8U~+GkST&6`=s%e-j?f_CpvY9j2=|76<9Pj%iMKJi-6z2=fi<N`b|RY(fJ0L
z9j`h=R?&c&%ZNUcRVxN^!{r`<5p+FSP$quCw((?lt5&K0!bWtoMq?MDK#ahM+H!aY
z^hD;nu1A@1VeE-q!Ja;u-uHUqo2i>}xU8pjh_?@1vIXS{*oxsw0fQW`yq+o%O$@GR
zLPt}nsp4CMvqA3DW^prXJj^bPOd}_Cm6q~i|41Y4i$%#=YsK3$in+1v7{VLq>~Eyp
zDw|UKd_8@1GsqRUek$CBjod<t*Q9*p()u){yP>0^1}|Ny%>1I4KY&+Sm$4>fG!1v`
zoYSm9hXiL=;N-f;;FYA|sRe@^zJ9U8lf=u1amm0aR}bqy`a8;NUM-2Wbu4DMM5$if
z(nBdry`#c$1OiV7VvJy8Ym}_U-`oTs=Ln5F<jT?K3MbhiZ#OwHZu21(B}(6ioQN?R
z0i|2an!0uT0>G1ADG2~zy*td;kpNC60bymDS^HS+BtkB%^KaIA5FJGLOcDv;7aGF_
zS4~a7IE0DKe2b`^Rc?WIyC|uG2lF39Qci(ESdu`X&CmFdv;-Jya6-A{<LZ*X>dIaq
zQg%X^+nFYH1-SS9**rn$0(u4bR(y}IWlz5mpasQOgRHY`dz8vuU$LNJ#srTNL_>_c
zu-!*u?W)<)`H>X8#r1;Wb7IySxF%f!|5g3jim6?w53G`9T*|t3DJ{#EU<q8@ckOI!
zj6&!y&bsNdKk6TI;y$1h;bVXS@0-Gw*%Z_LqemDeZ@~sgb#hR^av9Hfm4sCRjRTia
zkRm3-Kzlq4zC-<<n(wLzv<@PGoJrAbgN3blHb1#MM<kLIhrq0-?bI8S1E%}+noWwV
z^#Imyg{4^Ou!(uDSxv8bD05QjX5<1c|LpAEWUf6?^A<`_gKif~z+w%mmF!{`jhi8u
z$IET`a552k>(mH6$fQ$Z8w^-_nvV#{m<F;ARAOd}hF+c#Cjgw)z+FLj-3n=JTKn&f
zh(oMa$>g$QwBl3mZotOFrcb&=36xAcRavSSt|;knXv%5GWYF@jUu5;d<i97@Ho*O9
z&o+&U!EWjb!)@vX3%fjc&1d6F4TazlP#N~;GBt~;BNpS^@d1=LQYHUHG(iC?FD!XU
zRt-4)!_pu5AHj|^jlTUIOOx=e4q;&{mP~3_1vDOs?*t_TXYW37)_}6G6j~<sY@_Bx
zm3L&f<VF^-Qqxa1a?G%p!@=(Rnd1!V#h*Sm0&x8`N(j*Utu|+6cz#UA%i4+~Le$Au
zV_1;SRZ6nAB@!D!XfThwY7`#g`&OmnHNyg3rI)hkQ=tY2pNnI9Nn|S})XDLfmojk$
zNR&+0QG%g<qakOe(1&(h-6?JX%XI%M4nC-az^ru2rx!P1Di9NUxaPv3W4CahOo|>8
zLWBym_}9uKS+$gL&og}q%&)gBNJ2D>>}6{K0gQ~RIYBkZhP`cmEtlY`v;Op@zFDg*
z>v6WE4?Rdz^UXKd9=q0Mnay?Y+OYD!@PwEMBQ*n6#S^PvMY@TKZ$DCP2E~LsWC3Nd
zeMQiRu!ho?<>A3ET{{q8385nX0#KMautN#y8>yirj+Nlo{W8uUPJf01QGgUFwO4b8
z&Fp@@t>&!1CxT?q-EV9c@-#gmhR5~Ec<0b?+gB<AUh!V=S$)w%#9X+UshnOvZx~m7
z=+Qjy_+vR^iS#n|mDR?{RXV#yLh1C2Dv=V;phFvMu%#m_7<9Z)9sk}=FF|3Xli9I<
z&`z3=W45{}%45<tVcbUW^Sp4g)^0E`QKJ4TuOx-%S5b_J^Lke3ETr+=Ojgu&kBo49
z*nHVP&M38Q1>>*#d8yn3Rn&ePVaXSSg5n&Ci`&uTHe_wX!GWFc$eKFeVsjbN*495$
zfqlxL<62N1A{*E+<b#pfM>BAIi0i@6x#t-zQ7j2)?wqg{Be`c4X*Z10^l}TC`<H(!
z(nC~I=AT}hft&W)>y0>RcRrA=c)Mq2*_QR&aPAw`o}tKiM<$C}@EERts5%Tw(iHYm
z{x8Zz59NCi%LHoNsw7LJPRqtM7u8;>hA+SLB%mU0?n~3=G7MBU0MxrO3OLL=FXs}}
za?#hf$G(%E&HsugZFxo59-IV<@#*?l9ksb=;TmuZtoj??aQeS+3vFgS;wK=I??!2)
z&8CFcc=7(fGa9DSYoC&6vQBj5t#~Uk!((-7_o&Ly?^Z`Zy0`-7V$^LQc&pi)rr-88
zKs6|ouh#{!ONvst27aI6%^V$womiFGI;tK`kQ2OdzHB)Sy^L3z-y5C^rfV$o45q)1
zXcR9{aMLn!phJJ!4lAo{b#+V=Ho4iyaq!%EI51LSHNGP&)HxuyPjUy@4X5r1T^rgv
z3j@%3MTTSCFXuCQ2o}Z3x70IF#iCYbQj|F4%_v11u(WM{SjFN%n_o?P_!A=YgdRnx
zljxvqta47%70izW0`m@<g2k9@dxBOxL2c8qc+p6`Dw}cKh!k!5n-}G(meXK}sWKwA
z_oJh4ve)3u;7#v%OwJ-r_K)vILuTtKk|?9@7)mIIU}<=O8rV2q#<QbsvcJ#SEnj2p
zOon*vQ^39WY`U#*@_P*Z`|BRMUT22>8f4p(EY1Tn+0H5`%};-=52`9}A$iLj+3xk^
z`FOvmiN*9#4GqvB|9vBcd3@M~ozPBM&Qj$yUAI0|wapdvN4c>ATN$ENW`KOUyJ>%w
z2N1i17r;Gshi?EUJB&Xn->mun>?c?Md%lXd>>}zX6tg^kGv9%yq3<gn+S$lZjd+Er
zLtYrrNzn*KB?I*wlCk5~9ewC|E*3cN`3z~`E{jg4`)0vRt6kcpkA9SV9FFG9fkYdp
z=B2k9yF@F-vpDB`a`BC2U{kak^9iCr(Wt;x%?_`q=ckYd0^BrXGLBw=Y!!@EF|S1M
zvfY6jFr@3Px`%SNsXH|d>uP7T524AH_>$1?{TOHgJ_N<|@q<qv*9298yeE;aVFzXd
zYrGO>vMOnw3wF&J*e;uSFJMUSDmxSL3)jaX_jxf2a`~wiTR0FJa~d*~J)w(y=lckQ
z*7Jl58Q%k)?jG7Jc8|J;fAL0&t8oblh!ME0L1^-_F^+jCuM>Y>LMY9QCB7({xwz)~
zuYd_}$C;;#g%&|t#GkTC>}h&C6S4I6@<UC$Dc84C;a8T~;rm1lnsFszB+knscaR`-
z?60c)f4UG;D*7!QTV*#FEps^WR+Zm~8Bhr9Ag&9&*x@<&h+To4Qr#T~gbdb?^nLml
zYTd>8$%ywLN<jgdBbIFUDV<ClAQXY>SfKxmH>P@7X#AsSJ+ihVXe3-L*2T%3L<{9}
z2zUGc!tt_&{EP9EGC}<*F3Ff)3Y?;}KEA5Y+zZV8#lmP@<pBT+U(j}8>ixD!RxA?e
zQSW`1)Vd;{Y<qja6KFu+TxeyDDL`ZzvYArsk{)2I+7@_cV$&E1VbWngcMzX|Fn$+$
zzHB(Zo4&D<m&^4*Lz2WZ8cGoqB&!Jc6xcN-2YsQ$2G>P6_1ZFE#G%ibr5en!Af&=c
zl#~_TE7V<J=^@JdRUER;yJtR4y}<eo@u*m2bbMSavgZ$(0`8$KfWu&X-rQ<9DLHJn
z96{-O-+Lp*0R@6*)8jZ=fA0G1Q|!0F)u6aD2L>~hx6Eu8{?5aD&<q58zJVB0zxVYj
z%0mk!NnyR6XXU}DVzRN5q*{K=Dpge^2Jakk#Xw2Wj=d+i9SnQf5PqRGh_J1K^67Mo
zfK)ngg6xre;BR8<rG3^1M>fQ=GU7V{^5N+}(M=Hk3|a}}_@c|NAgQKoRhIY*HN1T(
zbB9M@P@hbJ)raR-u(OpU!II8o`v%wb{z_|2E^Y&cuTUM;(|B0N6VPnHY_R1-8-D%&
z6z!EGo(?(#n%xWs{MB8`oP(!;s8Unp{{N=Y?NTIsET$aUC^?$T#nUAFLVrYqr#FdN
zcv;H7GICy>(>e>$;GpIN#Agpp1-F|5Pxsj(qq`0LJ0t8ip)|p~b*y6hT(5;bK&_v6
zsl{Nd9bhc4Jgs4J+lQZ51bkm0077t5#%##tpfqM&$V3jfZls&&QOs!AHB`{q8EZ=!
z!~SlNs75a%XlOj$@biNzJy*9rh1+<Cjc9HT?(Qxuwj_{o;%wj*=_%?0ZTDNU6UtE`
z6@f=^v*bMXBV_oGGskg8I*4^=eAmUiyms}&2=1z*t$i1W33PT6ijkOijg)hhd`e|i
zj!U!UqyfITv)P_!O^@`p?CWDe&uU{JP8^X}`43pb{KTMez?ir@y@GC?e5++2b9j5E
zBX+DJ>V*wj@C({^copu0nGWztMRuzv8rGp#-Ayah0^0Ri4kn&E)tUNykZNcB8|?5v
z4iH68VFkJsg1T*kmYmrJi59+&;4+>HU9N#jeLR2Z^;U_3M=OE(!vK6KP!$;MdsCAW
zm{Tkunp;xUVQ}%CCLKni<e#r%m|k%A@clfOhH%5sz;#|*+XiHA`5tm-vwH}-GW-d*
zBYzq2kaLKDX|gCyE#|vrM^v^!2PtZ>JcMK2pWArGtoxmNz+~z~;QA_sVah*KgMG2>
zAH+S#kh&M^vrzo{JIz&E;^V9L>JIQQV3?BHZrjNqrt*Ay0dV^?5bhA@6KWFf2d-1W
zkO~=akTjFtWw9B8E9C$@OvY2roq;W`8l#q;&gy=&QiH~K=Lepv_1L9XyPp6EL=QpI
zyEt>h<zT!r8e~X&Hf%k3ZyGYNcS+j$fyHg`ZCoHgaSV-@L&qsq71_N+baeveiKesV
zKEb)ADdB|};vaWns;uhz@v8o#)KKOxwyTHqqRMfpD;5Pa$W?Ynot0j6#oFSWn!b`z
zO{&%5Cq__xq&4UtS57m6OxaEpQQ%EN&Ezkc5n3>NnX9?hm|-Iqd@*=S3Z2v7tGbBC
z<6OatkN==JfwA+-<A?Al2Wpz8cdl-OJQSw&iW1)j!vloBr@^qRrcSr7>UAKdQ?Omz
ze9Xr&vy?KR*x{_h#}t8fr(ne`D>w8Qq+yppbGQW(j$=2Aid5|!vL(eo$WQmhr60@t
zHN>v6v`H3`U^4JMXIEhc!7zqxJ{ppqtfM-2TT>JdZRujbTFk#4tBLepu<A>A6>rX$
zvrG|I%krVK=aT8hLJ1(j7>U()DVZ4Gr-?0b2aGVycVPH?w)3b-4p(tTbg^M-I$*1*
z@b&ef(k!gn+?uKH2Q63BiM#&6@j_YsZ$$Dd;jRz*p?7N(4J*zq$oZ$|t?0)S#dY(>
zhU(yVuOUvN9sdEXqoI;oweRy`L0pS@VfpSd6TdgouZ16dTUGU(*YCdTj|j~FVdK`X
zdmMT?@N+n`-BcC19eQX>Bd8l!wxLm?1?99t%b>M$lY|d5n5HQ^N@5Y0UjBT@H+?`&
z1qNUR^}?n>sjQp`T;^cO4k9vP(8nt(Z<^wwv5Q#_u!woG%Rhe$K)18TO8yuCI%>(E
zlj0uO#5v@XgJh$<M@rwVVvNA@JE_VsB@8_@6u5uf?MShZ+{<giUJ^#Y*!$}wIl;69
z%mB>~)FV<db!?AVyoEs?1xnCU!k7OlCY`F51~W=UpxcvcY|_ksm$;kBbm`(;;>T5x
zppI@LLYxPhFgVI|0c>U$pEc{vz^8X(Q%n2!<h~S!7cXHhZW-ET)j6wP-6#zR0@g`S
zsK&0q4t$dUB$bwm<lO^LJtC0izEUPzt7*6uuNK=*9ukWHMduPr`B&o14Nj#ce{)>1
zQ38tRa%TRfc^2yx-9aQ3RB3Xl)Z!vS)KjEcJL?0=b5x0N2P=R38iyITlYR8&%eUMS
z6YOE?Qwfk-0zns{{Zl7=PP;>|&PZJ`=nHw;${uNXS>7RnYP0RL>&BVq|3FClcc-nF
zB?ovi-qF{GUXA8`OEk&z%@|qf@qCUE#Nl#tWm1kNJOsw}y7;oQ1GCUn(__bm1v<k6
zD8kG`0&)T~R|*?c66w~+MPFw(uz2<|Q8x_(J9(d&%$RPjX@DJh$asutdCyEys>Lw|
zk+BH0%vIx#m0c;TOQ>^fX^aY5>x!q4);P&{eX2WWvDhP}jmZ1e6M7t2H;HDhj4Xfe
z++b%|KB0qraXy$s$J|$GW32Qle#g)*fScL~8Lo?kZd8S$tv!t2=yQ^VdrpDrMNo_y
zK;ekfsvR|*+VFZt1fY7uSP$BED{PwGhHwZ~696j>%LWM_0e~{d0JMoz66b@Kn6y{T
z6t^qLcX1l#m=h31@g*($0BEZ^B$;RG7$NlL`H%j@1#e&R)HQx}^9q>e=u};Sv*ySx
z=|y84BRngly;WWbb6`-dsk@Nw1^wG5MW<rc@Q(~I$r`zYlm|w&iaju$BJNa!$agr7
zvcbDONo+BSpk|LQE56hsm43&4u$YD~;511s)1bq}-Whb0#uHnO*L`r%5gX}TT4_yC
zXz88jQrUY-hDp2)!I>YgqHa-S6(M|LlsPhWr4-vP+SO>{4W?^&5iy+5mvqevAYGRE
zt@=oc@C!v*o!<31dE6BBD4|J4Wlb8iI#c>q5N9<%X>D^5rCUQ;<#O4!JQpYNd}p{H
z1t*_adGmj&9HVJMG5Ugs6$>pIOKV}on?f9h-fu`jnDf>Ex7H6Hc*oC~c@MO+*!!lG
zgrwm1O0k6h?dWeculmnI4cj?GdCEw{hnxp_&Ct>0N|=hl#@N2?9qRW^`YLkg2NINN
zg(n3CPWvYaDmTDr>noLD*(DQ+T~}1tz26ms%>97NvG#?JMcZuP)mPdTvCM%67_Z;b
zwt=BgQDJL8d_cC8<zL_QzJASpwwFHY&ghOHz!z5L=HduRE2Aq;0P&EMs0GUEXo&-F
zp9?Ui6<Td~#mz+UG&^Yf@J-fo!r<Cz!(MId1D`!2EVv%)4t#P)u2AO7)2|CpeZf3I
zHoZ?m<V?fzJ49&~!J&XZF@>Jx-$ug--54&~?p%<g6g1t(K%sF}dz!}^``62PqJ$C1
z>aQuW5c}%(Ik;h-0gwiOmb_ce0%sfupND3Hd`p5X<RZX?fI$JSV%}c5xJ3r58O%T~
zq?6-*XVho4=$OxraEktvz=r(^4oF2A7LL_?NTZ*mH46>Zh@k0@AS{wVYS_8D@Dhgr
zNkF#0zDz(%@AqfM8_3OBu1g_RaLio{9e+?S)f3(+x0IXGFQZcL5sH1WKVmiF;{HQp
zj7fcD25F&TCc9)jg2b*CNQ%_@2)HG{Xh3ZvSv4;fP$@xYZTaO?K*kK;tkh;m&k1R%
zguG5A)^`a$O8Hamu8IfnS<bU(<P;@vC|NG(Ta_*$xQ@;yzZ}lUWu<IJh>YP8FL@FV
z#VFhkV7_6TM|v77-Yug_Dx=#wzsfdbXo_Qa(_e@unGdtm_L++V_9o*RVOnzK!Ay?G
zMsX+bBv;CEerpV&77c*%5#oTERIOZnz$M6Z&Cxi4iFOMk*`k^MLoWf14`P%jX{M6V
zzL~ELP92~)G}W*5L}YUD$W#}%*KR;hgyalsRU*pOlFrn9;w#bI;UO;m5$(`iA%=OJ
z#-5y=KYjt})E`U#J2OYOt@k6IIj<>@1b|42Bw^_L%szpH`9(;dtrYb3<oH`<4cY<*
zPQJKh)-H<bfB52D;}p?42)H@FJk2f+c_`$q)d@TJuK0>1>SkCpx(Z#v@=`A@jcH*x
z_aazLUhv)JjI!iMq@RGtiS)Xr!pRy%!SP<erS-AERJvh~FoDX;;w;Y9xwj`lgP=5v
zFTYgCtbbLe>cPf{tsn}F7lCxKw7zk77_)2xrb%|7#cAvF>t{9VKlN-{<|DWPS&tbN
zabo|4_SjlGDZstFzA=gEHvxPO!BwQvr9*~vPLl~I)|3aOqsC)!G84k6kJs|qzzqN$
zobZS-%F@G%ZPSEMR{h!z4pTmRhu<)V%U_2|+kgVPXD}?&F2Zl7$TKzqaojS9wxI39
zMh=I=#GI)3`tXlUxsT#iU>5p{dmVE`pBx_JtRc}(tFz1TcO88yWZ$h~lU)&Xc-p4m
zch0zN`h8(f8r&oHT_FO@w~9q7t0TV}meJ_cBn-MPDXi_jNg*Az5?prpu3M<bkvrwn
zhw1FhB0Rx{Kd+zk;TVngQd{A`Na>w?=+%#53P0KVTGEq1w*R+JxzqivOQ%_YD6%Cf
z8yik@?S3TR_gI0e1x?#W?Ti!R(77zWH?iP%cYSd@-;ntf?g_^a8tOGY$J-Q%mvsk-
zdb2*3qqWnXlBn|+k4EFh5*O0$W_#7Ef=M(Zf+SsB^UmbFawSJ+Vj?zfmunddkX)&9
zffRrSa;*LTaO9<#%FEp7rXrxke^F?{DyhZR_oy+pOYob!AZqOYjLiV&kcU5jy5v;{
zul7#}E5@Lg-W$|;YJ;Rxq>H^Pv~WT$$h!t6Ox?T?JMQJsF(A|@%OI{oj6cdIdVUCQ
zUL>3ZspW!y%{ZPX;9Q~mw>O&|3qSp@%Rmy){eh1K1AJSzpTe<XU=z=5rm7$hkwyK1
zV&%#W;isyZdaytazw_^|A&#$-J?;1Wl4^orxr-Ktt5EGg)h%<kI>vamrDJkG6oFz?
zrL9v#$w%Wf<ZtT#a<_0O!%#olim2)hJ3UGl#^<7_VPV%7xt=;aKWri(M{Zq9J6>PY
z6+%!~%#|n}DrkFd209e5a9x#9j@PwrozZ;)!*(cv31G!@Lt^K*%I=9;fKzxm_-+{j
zMZ7=5xf`dCvlH|h3PxFn&KD4`Ev0o=F=FK3!lahQK91gKGT4bDOO3QW7g&)`iRhdk
z`#1f;Va4%)3*~;qfl<bLoaNT8QyO}R&7$xo)+EuhlpF>;Yy-*;@oyjs@kBhHuB>-o
zltBUL=ZTn2<TCWjg6oi!+XFWmJq<|V7oP)6&?fbBXrP*)t0Nu^z-G(~!S_>TZIngO
zypDlXVfyo_RAIF$&+H`(opv<#Kj+R5g}$isI&^6UP5<r0EV#<HOF*NC`|fX?Q^%ho
z^0bp7(4K5}Kk(wL;Je^cD9N9jnCtfH1kiUjUY#z{08co3GMy<%i@ao(8~d6wq+CQd
zz5m@o3C!)el6E32dcp6mj4-9*FtCmS$5Y_IiaI{fg`g>Q<=r;KTTz09isTCLP~mz}
zZMa39{+I^V@3R4;>e}Lrlu$ZHRc_y3wj~GbU3{-Mb)?rLO_|@L_;QGO$(tqzt0~+x
z6Y^<^auv^9u(JBEfK(+c_55|eAo5==%}8Si$|9Iz0*DG8oZu-vA}Zop#f*m@`!!-W
zmil?=f_yp5Y1@>rvPw!3KL}>jKc3_(EQ{LnUnz=rB8PdgcoeD8&DURW*ZfO2gRHWR
zCQKxQ%d_stMdo#Y9cM$bR#n|2ixti~7DQ@kU~JP8g4sX@Wg5Hr4yM8V=HYA~j~T}J
zR}-g^!lJhSf7({Bze88<&znPJP(=@dh9z|s(|TZskC*!S74dP*AcbIv%DB89-i@{c
z^_|S=2Kkn5>2FQTFWME7zG!8<?bXn~-_|tdomlsqxl+UuJ<rRKqAmt~2qyq7!(?L_
z)np>|nHM4edSyGEI^t-=Y<wO_8dTaOrWB!XlLncWE(2coLz);=@EuV#UZ=xi`41Ke
z#yP~^r>nmqC&SrzGM0GY#EGw&N-{FLf2_6Yr7_Z#V>N<S#97a{UOF{*tgYFTIam>$
zOlw+#P%A3r&)o~ZmSYXsjvbfug4Np>zOzxnFv7k<j-m&_-?gebpZ+gq&CqHx?f+1#
zl0+3#;QGz=7uK=wWB>}VzL6vKWKuG=X<?!B2LN+$V%FsgwTY%C_kZmeVj@W)3q1B+
z!X$^Bsq~WnUg<F{(`$MrFj^RNT_W!kF4JrowhSr+YjFhQr@(xe(u-5Q5xJsuEK0`v
z>d%_A`)KKZ4x09BCg1v^=u6#K*M{0^it~i&yLr8K%<z-}pL9l3#|2mkgnlFmi&;s_
zV$o!@{`42v@F|`BA0aNKm6C%Tt>5JgKe2WG|Ey~%f5<k2Uly_0gxr)_0>qJ^fPY)P
z<};e^OQCR~YabzxYs_FG=638sKjijp<z*l(CX%9WxKtH<@uZi&1Gf@M`#a>}gd=P}
zKjwc)M{ZUV;mBC8OV)MBHZ+Q2<h)P64@}eFGV;(`3!GCi^9~MtRL-jOm{DZumTYwr
zmvSEHJv+`tjVY`EP^mWmpM+vkQOeOtXx=lk-a~TSJLUsfem|!^hNw2Go-anFNd#42
zbKrkKwuR0N@A2dGq8{Ie6V;hzAsPA@vG_1_ZKMjHZP)S6k&%t9qmR~mG-U#^W!o{8
z5@<fzXiY{at1b^T!1}jjcvhzaDycbU$$AbFYmPEqQ@;!>U}nlDj-WFnh0J9!Z8R{(
zn!SkUM{Q#R8$^Je3fK&(ql;ykslAJnQC@^y2$3s&dJAXT0OEHWJ9dq0D&u^KlUKgv
zAg84_PN!VhTuC6%s1<$bX3)rM=&Gc;>OVXQ38?sY3ouE?Iq?w!3`JV5bl-cN(M`kP
z>xzfn-UA4t%yNQP#G<AUo&TIOO4)r{RZD|5%jMCom$e6K*BI?sF9<_U_22LTcs=#3
z)vW1&ZN4>(*cNodH9qZGb`62|?;crAgVjWt2SnzwxEgv+Db&##op(9hGiGeh%h>j0
zS&Q^rqCl_756xo`#$(JMV<v?*i@b{W!J6Hrm|?FVm8lKZw6?`cCOEWYIJ+=HW&<tE
z$}WmXSp8!1AcU-r_Ua^>t3c9Hlhi+x&}86DZf?9W5&dTx+O=0n1fAZWF>B_!g6N*b
zbVhk<@L{_SzCkVV%DboqdV)~{#JxSH8{21jjFVW}<K<xvyYTtI|13JAYUXY6Ia+t=
z`5;JZJWBi3-Bq~Tl{oyS*v%TAyFs$ij_w9M5uqfaoW+MQV7Lw$)%!ACBKb7=w@S~(
z-dB@UP{AaqhJ;gNlk{~M%Q^5cvE>P1^_T;{Yl*g(^nVOhU`<r&uwTQLnlqFgabz@M
zHT@w!WF4=xXkAoBd+f+zx2@l8P;z<H{(_RF$rJLwt(b2hQW{{Vjkw(mzCY+gtD+e&
zlmh*9_R%6nAs!co1-L*oA{^|LK%Kg#7i9)}Fvoe(Cyh!AJHe!|%?Jo5h->m<(QP+X
zA|`)GS=DHg%)&ILn}C4cVUja-P4y?k@~=j`Ji>Pci<-q-jB~eMBzGuZd&bq_u>H3U
z8|Iokr)i&VSS2#m5GKxkhMQ66gN)>~VTfq*hdV43uM5?rP7yrcBpZ%VKF#x~@zYYO
znV&ZdPP@`_i&?xh`pH<B`zm79G$PfCor7!6$F!T|);p1Nt_&b#01Gg12H7$>%BI`=
zW;g8)Kf6coI<;E4CsClYN`>y$4Fn*`&QGOciE>$UTP5pA-0bv~WT;9(M9O7)q0h>2
z<T2k)(C<c4m>w{3Jh3ef1h}^hLcAzre?#L(-3XirLN>NpU`9yGSo<7O+9O+BaPc4Y
z<vUMwq#6w)I@a$U0}Q0Bt)qBcKrFNwe`aTJ#ckHVz5T5F*pq`?>WRUTg^=hjasH50
zi;#e<?RL(4Di}i=o-t^d_&7=5Losg=*Fm@fx=dR#y5)4$tD@0KMkrba(RVX?0GwdG
z?=iLs-=ScFLKa85dWbSxg6D{48Go`czDS*7b<<`TIU)}%FC!yH`E3=*;x~()5rPyN
zk4b}?d6W=JMCfh`Oc{d1(OKLSA;o%s4l@u=F2N1y{r3Y%!|cSl2Ze}n)W0!t`r9wq
z0-qOJar<g-E`AH7g@{X!hL^GP9cj?CJ3q4}ra=vsQh<8UN1A3)s@kLR(5G4q%S13t
z?IZ~3ZZ!y)6N`Y9LZ&ROl;dXt&HPgFPKSFYcWSo89NWw^E$;P}X3(1&BG(gHjVVzH
zVsaKe>2qx1xg#pCr_-<h@r6DZT-iqh%M-RFWSY`m%>c^_#04#%r^QvQ2pvthsc>k_
z00iN{yZ#V&u`W2+E{wDRx15yS6k{P7FZT3FPDtD>IN<|*PB-R>#<;<s>J8Z1E*u|A
zo{JbUAbrXEl=D@1cy)n5!IoOl>UE<7WF?y%LRQ$H(Ei*3*V$pg#1WwqH!)_{{>JyL
z^y*a70lf<@M*euxy-V7$hzJEL_Y&fFquj>i^AnZzc)I?ZuTyOlC;A|uO4`(=(pI#&
z?T8^EH+3il+kRMgd&V8PYZ&bfrH-BExr{7p2(jG{LT@tC3!mrzYnf!|->-Ms{|||C
zws@ak?}TFU@$s0tB>w^4k@+n|oP1>N<<3PO6Ib+o!!)iL9f-<RHCySd({+CxZB*rG
zLwN?y_KSc0kgs)<2Eee`-K$6#XqG2T?VXcA&woz%!bm<F!K&Jr#7n~Bx5d_24IJ{n
zfr1eFf)r<CDHK+@E|4Bh*(I?PxKFrs#uA1mT^IGpCCTQhgU)Tw5MQGtxp8lf=WkQ8
za9I{!jX8}>;GgiJ!JD$7KaPQsiU_I6&vK7?-$Y}cc$rRQ+uP$Jn;^nobP;nT?9nMj
z&0t9`4zZqVs(sTdo)TlrW@?7vXGMKU3t^GjcjRs|Nx(X<`wzc?HNRm{9bx<1#>l;M
zL}3wE*bwpfNaf;j#X^MKMb&LdWH1B5Sgu9ORa4zJ@t|-+d-08XaBD2XPw+so?S|Rw
z@K33O5+0m996f$lzIlr*bxhYLC6vGFyG*6o(jus>!rWvMmTWoE)-ouN1PYi#ih;Gb
ze}+h~4{|}B6gTM-E4+qC_yZu(v6?OjCwrW`kdk0i5Wls7-+muB!jc@oG6gF^=R0C$
zhi$V-G3rGh!1zn&bxpQX?f#uU1(m8crU_ejb#j0#>VaHtl5Cn-S{@xrd7Qef;h|5)
zG4$E+TSk=+F$&X<nrW?kOgIQ)GkvIsX}1YSqo#_I50E7wlJOVZkTQl0Uf!cj^aUyD
zUFbbH>V>U>_)<^v3}3di3l#S8PO0kmi{>?*FcuebSGbDt1v5vR={#p2Kd@t(qgCJ3
zIL}z$7-Rw1oVK@XClHO>9>Ee=URO*M6y86jC`-CV`))c#w|KNth50Lf8c)LKw$X)V
z-Y)Twtt*0mM65}08U{qkl|4h=km~q3>?9evA1*-G9f^qs66WER;5!WENv2RS^f-np
zQ+y+X+!C$dD`|CLC#n9$)U)j@-=`}`aDqJ8_%KXeN%n11R;6T1*Q1k+Fhq}vE`j01
z4s42Os@BfBRE}_sEPgiGOmN$Z=fj%t1&+{5by95r>WTK1!rM4fAd?FinGM4+1|0Vr
z2)_maIn=2=-<}Ya#OS^(>E|aw!7}G8DUs(Ce@5is)%zo+fM4d!2OE?dE?mTP){imk
zwFkxP0V75%brLHO$oT=ha@5i<+N~<NtboV3A={@-o>c%o7dweL3AVimlTTaqCL!#9
zow;i`lB9HaNW~nIJrut=qJF|bnY^3^aGYxMKuuxvE-n)kL<8111;)+vR)s$Fno|(L
zk35cRQ>d@1Ls<yE5`(D=L4h@fz`;i>^;C5%mz#g$QZ89#{F$c#@J7#aac-@+g`)mY
z&#O5KM9h>%QCLe<(;r1UrJ7ax-I0b(IJRPY6y`NldR#(nwRoLEToCDM;*k22QKxa5
zrOnCBQ6lDAyS+*I1%sBBL3O*hu!<5Dkv>Z$acYCGsBEi!dX6_AYY0Sq8d0+X`ji7>
zVp$l6l#8nKix(ZD60UHc4Ag4Bjyc$)a(?m4U&(6ytGB2%t~AK-9^zpY-2E6EfM+|9
zB-d8U87)v|`H;N}tCBiY9>%`^ywj4!7oiAc#_**FQ0O&B4P1tLh1*PlD>ez|Tt6jy
zT4Rg>3yO3_EO<Py;#Fc_PDtrTY)cbO0x|{`8If}(a;m18Q@*}Vi||nn9SCoqa~h3r
zoT@xYV>Xj7A^Q5qN|gQX_bM$l|BAw+Vj!fS#N-UtQ%1W$mFY3>2Kc-UzYqJP@!yiR
z4`D+|HX3NxlmIQ~ea>9~e-RIIFht!Jgw9}*)fv<0X3{Ep{+$Xniinhyiv)h>jUFQc
zrTWq42Gsx5bJW0kS{g<54&RRuuigSfc^5~HJ!yI<ppvs8Iq<j0Z3^f-|Hrd>fJcs8
z{e)dM7;u^30WTRA)15q2&fTYY)8#KEX>_l2<4k2^O{^Q#7l9Ot<&UpajF4SBo_{{s
z^!UvdVErrz-%icvL#T&+th}+Z*pWz8DcW#g|Ab^H?ew@VJzv9~q)^F^8R=_I+Ss98
z?aA|2M)=fqTEA&1g8Thm-OBVV)x_?AIJKc{Ct+X=)mT*~k+3tUqJn>-Z1UT-1k`Q9
z;wv|UIJ$9?C7+3T7&+b-PBbbpmp!{Cd^?du;aMKS(ImOli5kxurV!@d;k<%sQA1B<
zbp0Iz6>}|8<H=fW2nnpgxM2;PwMBz2Peu3k3{E;;GS~@_{s<0(q6&F`C3RK?Dm^Y=
z?X#A9hGjeiI}YsEFbrlD;z+E<Y&iT0uxK6NnJ{mq^$oJ<0M5$_{S$Egw{%v3a^bzU
zb)YLzm1n-CQ6?ysl~7x|4!%zQBm=D!?uAV1h&#A?MZukoiv8Mz5li+IJ*<Z!$jmoL
z546o(9Nh~EZF_)KYN%sWty-eeOZ@7+s$SCV2lqEJG2D*a?mBjr+SvM@2}9K;fLcZw
z1kh~k;}7FFas|y;o0*#SgnDYg|MMb9DSaZ@M*TV%Rw*z4hOvI=axxJaA^eTPZ6b&I
zgXQt-ci`0?8~<v(NXDrj|3n<#I^G#h&jnu94NRfRz59Q2W2L^^4Kb)O{)M(lnfl@^
z*f^TllE3t+DViEC6g+BtnDQ*A(yPw&yXtN`D7MYSzZ<iGebH!vY#upWWD)Cv9%Ajj
zbH#;egB-(;pGpsXWHI?azL!R>kP9kUN~u-vlZvj3p7;I7G8BK|b6W>6x+-J~#htuU
zsT1xq^yD?l@)w@?J`(2P0T|4~gdB5IHzK{*sfpPO+3Lt~Q-Dd^3dwUu%uR0y2)C$D
z-fts4!vRtsEI)zwZMgEB{3APX_)OYr!0o{7)&7e!euYPOR|<b^oY^7A*db3YewK^s
zd#akqfa<5;f4h~lSOf}+Q%LjSB{|Ph{mtA&@9$;@^F$~Ofef7=`?5V3Fy41{&%)G2
zJG><3d!ISOgIo^3Wn#3Q$@3JN)kGhekZUC=QM=U#+Q9|E@C?6{h<9E29>rru@ZvCD
zj-bKW1{;i$_?`Ebj~oC^!e`G<a`o8|@!5EE<w;a(%YDalTinJ<2s|U{>Q#FmI@n|p
ztlsR}$N(u^2>RTH&yHh0>Ch_XJ%xCIqK>5z{mahaz=4b4jhV;Z|1@dBY?k8Ird%w7
zGrw>^xP(e+D`VxZ60ke*wG`y26(mIOjMQo)dZP@CE-cGR+*7~2K$z_wG=o=&qtGwe
zy?I{0X<-pLDd?*E`IQD&LoP-Fw%aH_$ki&N^PY&2wLUO<)P{)G(oLcTh%dgRSz$)m
zb1!Ka5#Tav5A0BH^!gqN6<HYeZ_-XxRSdqD?}C-ZBsJTc-lif{W$o&ApGamZ91`zc
z`W`u)sURfqClXKQS*8bDt`lyqdHJqN1C!s&>=5f=w#R|5bJ0CK_&n8|>~f~Rfg~^A
z0wl9n!Ril1z!5tdK&FGWV$z{mi^#>qkFo>Y_Xn<3PmU5RpH<WUZDQK|hJ<w|m{Wuz
zcPn@^4(*|1uX!pt)s%|VhWk1`itzG!$og{Dcrl}#5*Ik4D4KgC7js)i)`AaEp!FH>
z7A>?!33?t<a8n;a@zq~5xacD0Y|QKSS@R8kkIno=v%eT{zziVR85$ON40UE)6mtu6
zy}*MM_BMcGy`jS)RgSVX5bjk^rG<$DNqIbd@48PX)H1+4r&|SwT^D>-06~rbDII7|
z@f6m7_V#Oxv6^_9xX5p-WV;d@W|P;f4pTm`N<AGyeEg;(w;3)a()^Fw!W`<6`-~7A
z_k*~99hMDYMW(7O2&YJeJMis<kzRi&%b{Mfes8s=!n)sUH6V9@8JJ3>s1q7b3_r#(
z)W?qmH+d}LT)m;>XT-)kkko~1(#RlkB_$#;J2J#yKuYbG;h2OaoT>^QrIpr}P`$HL
ze4Sfa*iL4{ej0Nf!+zH$2ab0@ALzDigg^hXc#rsQpeyW~6<#@@go?et<M9TChFhLK
z%#_~OYx-2C8_Z`qDp~Y9xWx88zkKWt?>qx;fTa3y)sEw6#;u<8T7*@tnaO1_zSz<h
z%fNSWCxlE+Z2lo8;B0;8nhBCx#Gq`mO$ZMF){tRFF%x55fuM^OBdHn?iv88BVY`(x
zlkE4KDal_<7mVx$_c|!=kNX!0BB{ZnF>bBLq`^OF5+RkNjb#!|p3BeTJfJXDN_&eu
zv?pr?lXG4D2@&$jI+n$v;)X+aL4gZVx(54D`Nq|-OG~+oTL_nAn;q&?R^{&7F@`md
zIDv_er|sJiKngJNFE?8Tj(-dLXfRkGuxzd6_Ouz`NlGBs%_rOex(y9JJ1p9`X+hJv
z5dK3qsouvj*#y)SWW6<k|5hRH<&s}9^Be+3u&>Lgw?<*Jkw`94&f#C+%H`4?ECA6~
z?HDb``yc$49#*ZiGVnaAtQ+NwCcHL=S(a1T)97Z*?=r#gVk?`R5GPJb<M$~}pGKsj
zBG=?h-RnlA^|`MZ?+X7d-rzreU+|L+sT01PLc0P4(h2G?NUV3!S=_J3N%aat47e>B
zg$$-yk1bs?T*vwQI}q^Onh}q%IC~k2%b!N{77+OQkq`}i4Apyk^y}B4?cTe<8+eMU
zAW^Dx-aiE0w^Ca9Xvf3Tn)33hzoi5S?o<5d$D_;<cqBDL3uoW}%FsneICqNGUO7xY
z$al>9Pvs%iwypPN;424Y4oB}IJkFmG0^h!yIx4AEGcGXAgCUmVBx*@lK4@^MUxD>X
zA9Uh=BhodvF=z_Im0FuD`f2qc$b_0oj6YeD%=M^vq%*@Kj4WV2U<AmyXm=BUziX04
zZd!>`*t^t!yV(`|V~&#2@L46!OhNN*DGr{!Kpum0(AS%+y73_^b_493N}#`L0OC)K
zt#px<xx6pR3H9KOKPW`@_NAJRxuB0|)j{>U+(UzC`^-0KiLp7c%Kp8>tUdsn`stLK
z;y(RZj-SP^RZRF(z0f0)cZEzYk%d%B^}_f!+biUaRj??MebR@`)ueTU3$kwV+-fGO
z#vvniX<s)VL0nkI0npw!!mLR;7NS#ROi=;3ij#D7D;vR0nAwc+IEWp)_ruIb2+pdd
z6744id-yI|S|9(G(#E3@ew&(wUdohVhEu2@iVOc^twchfPP9DS+!@fhxp$K7Fw_oP
zOJDsJ%mp8z`Nggr&ofOUvl+9OXg7aE$sj4I+A>KGJSoLV-3&XO>}2$BjWcG5vX$JM
zRJpTFyXGdM?by_qc!xmqmW4BpH(bKgWDx<OPN`2&)62<)GQ*feV~F=!sCOfKRkTIa
ziwP#%@ekrrS=@)sH`tlu=uhNihVm>$J923I`i-k&#9pB9gGvE1LTJ?TD*h`*6iy#?
z(CYYgDjYrj89;zpgJXZLWGE<$pm31n&RDGymm5r06}%=ncu?>Vc>wLv3c<4?uK!&^
zCdaoVmsI#pvz<Y51m_bI-y=wc`L=0_+M0<yiD(zy?fd3jZD-9YvZ_&Pv*Gpxv-(|a
zU}(GH<Mj|BuJCKLHhd|+p3QK=r#(--X8g(a%2R}ZYt|v#!d$?@6`_rJvVI!4rMJ`m
z7!WoP93@YlmIs$)1>>0ixL*XYDXOe^0BtPWtRk*Qoxvh1Tfr*I4G2xn@O}UK?4v&e
z2=7a+eAC3s`c1?T$9@XA4&!!Ttpr-)aU2EtnaYLyjchMQ>m}KaOotW>UpNivC{_QL
zpVG5~rmnDErsOy7e<Vlq`@!kE<j`0yZ%OS(w_7zHHm^0}J{nN>9z2TvzfW*UPWJQg
zC{us;yql_A2B!jE(&+K>b!HR{ZZl-ycC~3G40490#z8PBWDCEK#JLXlnW@?~VNKAa
z;FL=rRjyVHpXZDBhOKM;b@QD@60<tTW#~}Sc&Gi*#gGmj$qX{#{er7l=d|$#v0B)!
z3OjGpJj(xnQn9m=L2-uhl>~!aQ{c22>=~qgo*_m%4~1&iQxl8sJNaBHcmibA;fqm-
zUBF%4jVTTBCAQl2<5?NOQvM8p7EVylqZokO^tlCvtk3i!12TB9Sf-kTosHsbT&ze{
z@0dtZ$*Sf*&)Y1Q_^gQbsKE@c#~kyRMDgqKJ2JGEg*k<yUbg|5>gDu0!}eiUFp8Ak
z4~6P-y-l`}h#M8!gY3q^Aqv>quI$ps?#i`zEpcz{LfW1BH8mxE%#-k_x_PTFO#E>z
z^CI(hM04a)6?4CNG$V~AFOY+>k33I}N_LQUdw45alkXQozxX(&(wt*~P_*F?N)wpi
z*E5ogQKOQ{r`;Y}1c+$tJ#Fl_nit@(AA#<oz+}b<_#PNgCHs|e!P`p#xZ8YNlen=(
zzQd^_^tv0MIcDKf5YV9#&bC2~@^@9+#^kD2RI5~6O9IcoD=J}Ek%w?RLXBg&HMPd_
zLfp+myCk^kB$qafIhCl-M|~4S^39*vfLUUgxTFp(w*+D^&lsf46))Jwm$oq(S!{_q
zG~$}p1!k8u$Ft?E$!OcXiaRKF39SG9bimXE8~ge#4u)#Xo|YUYx!#^K;og}NYKb4B
zc6qRY-WtQ}!AI1?L7U3%4=w4YD@?9hKcTt*2&|-_j=AV=rXT#Sq8MSHQ&*$Q*tQ}l
zZHf-zp50d@=o1A7&7FnBKa#meL0o^FjNH$qk#CJU(_cm$o=wr~Syt-0+bVQ|89N<$
z2Xj=}Q^XA{OMipmOL8K&Y;E;>T{$l6WKeqUNXF{oAylk+TFc(CWCRb##&0)`Ln#m0
zRd&cfEn}xA;444{Oe))dYq}?k6Qw!6G+A>2QB1TBXh+vnj7hd7D>I7|*)O@e?|;QM
zADmdj+i?33PiV;aGZQX7vzCVuLxdb9anNg<L+d)NY!Ski^LYV6Ve=%5Ez%AJ4@#Ii
z$WG~&yv_3=QyOO+_<x1|uqQtxiYu54iFoW>adHGVn|%276p@H=HO@G`)4Ps?^`I>@
zvI+}?6qgI+0h}Mts9Q2qBott^`o<2u!Ynh)5d}q?X@n6OAW2Am;paDar&PHlBOjRm
zI!#R7dI%%X^rye`nOgW}FWc&384ZoJ1r{yc5O9qy(Fywe9X?ouEEIG0F(Y^_K16RW
z`AZAYhB|rw(xTV@04Cvoz7!!zuVCPYv72rzv>Bo^ucxb$(U$ec+ddjhR;9uE1uGEs
z&Q8kew$jAJy9^+{+P;--gD%$Nqh2vvDvCx^)S54fSQ<i38pj8Pm33$~z6;NKqUv$a
zU1sO+5Yp0EjvX76E%Yh^$8M5`89qaOi0UsojXibnZY}wt07MY8FSSc=viRvNgopPU
zTp)(P>ce0VJzZ@_-;TI8b{;!-^P+|x&Xkw8E~Qg9EdqDk6#fLIe~nNdGt;Vd)KU<C
z_eO<vaaq|l7CH0=I3noqtKsm4oWXTsqcp_<B^PQ08%6@;ZBuBwE;Y=@I7TeTAKaK4
z-g{j-C?(&m@ps7WV>Z%7!k<Qh<-Do)zv(jO9#dD}sB(YR!31W|cvXp!aS}06dllI>
z7nM}?RPH_h9FSNg;dcola;X~c>!d^-tWXRfiOM4L237NJo6`{uz;uKx0D&{flDB3P
z35d1$ty#ByXBu8g|9Z^8;iIU7O=n3dG#%aF+9Q_FS3E%H{IWm>qB~r8;07cPd)no-
z!df%ZKH`>}{`7Oc_ix(tRzfOPDHUNTnt5$K;`JXbhq}qGRSgQk0<tbZ)2~p7T=CUl
zUI}%=kr`a+7~pD#B#VI|m*}=Dco|Jrz5O19!;2(B6~9z6x6aC14|P@L*>0_=f&dMW
z>6+{?*#@Y(07JkJ?~`ZbD@gQQ?0t~#OD@FZc#TY1PxQmQkJv$654(e&IZ0*Wn*Cq0
zzBB|IoYE=)B%}*|f!`5VPa`lG$Yq`ress#?s1M|Fo#=5`#I9w5eTjnAAHiv}CBRbe
z$==Gj^9E^#SA&Ow7JxQxg??-RnXY){3-oBrH|8@-C#@MBWo`x}EI>iRsx?`d=k<;i
zeSE>jx4a7N-{KU1CyWD{M%0#7(5JigAXx*<?Q6@Jyw?K+>bV74ntSwo;LsKVRst@`
z<LV0cXH}n$VC^(#pS5ay)xl8KuSR39pgoy!WE1h=qBjec0$pofj1pQu_w1hQP;NRV
ze~xFsuJKFejBWupTg~BP6u;@laiZd-iW`x@t}B9y6@6g}I=TW9uXM-C+iYP?5NLhg
zlrZKG_#gB?$byx|bj*4eD?&4mpXT67^-3W}`52a^`oJxH3k`1BP0~ivswc%RD4u@L
z@O{?L=hD+`%&7V-_eiT76CsW8&O#=8Aun{a3oN&10XKm{?F$cO*x<qIYE`x^qxLFq
zLJp2xmKGwjtG!(P?)m>~$Nu0Ox2M+;j$<C)k(XNsjla|wY25QO*h#UcXaY1Xm0$Nk
zW286dYW)?v8EM(_w*S%QC|!||^+PpPtGl5*2lD8#qN!snc?)Y^-HMcb7aT)AV1|wE
zq1mbZDMJfm1sC;0;xZztmLf>3L~=?6ks;Tr(@YH53LvZ{^trFCU<x!Q5_n#TiZMoC
zKz4953k`|(R;$e3FKT?B%$O8lxkbh-WesdQCn^}wUd=ILPUUwQL3v6UvD+Z<J;c-c
zb}tF}8B{&yz#pX8_R_}isJkFRE~%K4KiGSM+gRzTH1!dZ0Z=R~n5pMO0MKzsBF-Uf
z45-&fbyI86<s>q&Mvbd|S5KvO8Jw$aT(~yX8pbptfNwGd{X7+WS*v!tedgyFrI07b
zb#&>9;4auVMP}dmmkY6_mTeNV+i<Sfov3NI_9KKjpldNCA?W?Alhh!<*W!3lE2{B!
z8@DxNjAB5=@M|i|M1Idx9;h=3zjqbiOEXQE_?W_<&$W}|bv~-o8&R)XJ$0teO|e{J
zx6b_`=<*FG$<=H2{`eI)1@{UYg1i<+(!}~jsPxa;vE1p7bqHv3C_=pl3>lyV$@ET?
zK<`MJ2=a^R{0B90N4y>o*I9g7nWBV#@S9}OII|8<S(na>*}L>IZAW6M<e6|$xDk_4
zm>~5`I99#=11%D%0IC;zzvDBsvFWb$>(E;EKI&avJ6vIRkcGO?y#eO>gEChGt$=@z
zSw}HEPuGbOKEd?G>sRsl0Y@Vb#{(yV0aRx1DDBZCaIaV-dK3^Y8j`L{B}w5x9bAsn
z$@H>?AlH;a#GK8yr|L%H<+%YM#6e=GDl9NH>A7Q2Sa~de$QR!xa3`m`YboLDGum}#
zIy&M6HbS&P6>l8Q(q(v^htt3Cqr@GMP8w*w7>{%&jKVF%#Oh~<r_Xe?X+;5Bsd8{F
zZ%$a4;;Z=#`iXhi^Kq|ie`a1E0;d&X3_?uu{rDzsT!xGY4w=_}ns>_M%%HYph$&$%
zK~pqGp*Bn{#oz*U%sPqN5fl$Qwnge@cCmFLrFN@C`#y=-8ryRDH`F}Ly&&QE)c1h_
z8wAMoP}Z~*<*1S%Z2nNDC@27<im(^>Ph5PfOF``wxS~n;pXC<ec!l#rU-Dki5ye6P
zJ8c$p5jmKO-`anBckMjSHNP$Iy`H2Y3BOdkNLn8Zemvk**()Kx6;j<9jPBz?upWd*
zsu<|{qn7B#KOPUW@bq0&z<NQq&KuTj)`YQ>ln9wn1>(t73Qg6(D^$Z*w$Kc=t1C$L
z7E?4RLd}ael#Bpstlb!}v+Yb9;!05>r7OIEAi(V`^XU7t%9Q$O@|D?oIo`x6N=!IZ
zMjuh33<id{Oy%a_Tu=#`T$(&-uk?uGweyLkqAmH0q}w3`KA5F%Q*B>0!}9})oSrF0
zK~IMI>}4tTZ2&&mJ}HOqQzH&YyBFVb8|M7FqYcI_cjEm-EWL8?3dxSQ8dTy>^4i%B
z5!Jk3dKp$%U2;8-^~Qr`-#P@4|31=Xw`Wq_R)s0oFt^Hw*qPW4qyN;a>17~JxcYIX
zbBz-oy)m@~5@x6@kQ>^2bcW)xFN1xa_93GrN!~L`4k$#AC=`sbzDu3?iu6>e)`yc-
z(Gv&A5MU(JAfIO0mkN%kGOfLTC0$_BzrpQkw8{3^DGG+GBz?OBjD2_Cuj~>aEMmsb
zOxctL#2&XEbVF2ZvR(u)n)J25Tj4LJ7Yzazpk<Pzd=7cqYnu`lriHLGSHt|wx|XA^
zpYhG>+Bn<^w)KqwO_|9<b`btw;)lqbkQn;SZ)Gzy%`>jdoj%pZf}<jx2oBbLmceg4
zt2-3)iCM{*@Nd8JWVd+tY?R-5g%r}Ur58YtDJtu9$yD&l1x|kd_=C5jd!%wdZjOVz
z8cvZl66T5dudhIR+#9Bik{Lb`CQ6S-{U*#Ilw?ZxByA<0-(VZb;p}`!@R*~sp8kn8
z;rX^88>Z<<*K8*=@rK0y<J$$FD7bn*AeTRK4f%QQC-P1<f#ZC&oJI$ZEuDf%PHEN>
z=6*el^ZKXn^<RLAzGCM;!^CkdS)ZcvQ%HVG)NR2X%@wf)uA$cwx#_gfa0^yJ{(k(b
z<7qv&ig@V-0Mb*5_-sv7u_A2$dL$6ug!6BG1bAaO{zbjy?tvMtG(osd3)hak$5R}F
zLw27nQKaE)S(~iPx8q>p_*wN6qV?4(lESJ)gE{YBs|F7poKSbBQjg^Im;sB0__YOM
zrumO6B)D(y)3H|CSjz~J+<=pF5Wkn7&J^)jA5hm_sc9JLT}3G}_s+9NSnW3D&?jCA
z5&?y|6q1i=V$qq0rWvRx8V_0On0WaAZ(t7Q?$Mq#tGotl^<7!%xLiWHV16k%f@y+4
zW@&sdX|kXD71FvBxHir#_J4B)fXESHBGO}3OMGY!do{qX(pdA$vm^LS$`%q>ob7+$
z+JF)eJ_0YoLzIju1~8V=g$c}VPUBZ&yG@v9o<P)yiOKV<Xikn4{`Uw?&e;SaDqFl(
zI={GqpN6ECmH~#hl@x7VwFj&eqN>XiiEOq70-xJ=mPwNpW~Gww{|jK_C~F*CrZq56
zsEk{;IcYL__HeDB((HY{ThKbwT!Qa2>B{VPMYmgoyz)SCUwYB{G+xutAH8!Qnst9U
z2)z}AEQnRKg=!y>)-H<d4{Q}GG(V|8l$J_p+TSiGS2WHigqKY!vCwCN3f_D`1j2*<
zzx%pil&A1mx3_^so5=F`*$mzN)F~B#RB62ltJn0*nDz37hbNE(KTHtK5{7If8XKo0
zET1S6h&BO{>4!}qe!Fpt=b7eDe?zLN72V--Jq~DaUnpPT|9%jQr=EP4_JiK!b>YhE
zxDt!f3ZF-5T9!~7KZV%@n6~wM^VIqt*;aZD{KU7Izrw!rL*nb1y3A3n-C}HK>Csad
zl)$1z`Cq9O4V5Bw^S-5=xidLU+P_ISRhc{VpvOFV3^urr{REx5yyo#QmlS4%My)SK
zi50`~ep59ITE`tK#p*XH;Gj&+k|p0+L$)My=6EO80{Thh_<Z5<aV)JBw7=zw(NAer
zh<|ul09Y0gCcPiOf}Q3+JrJ^D5mQ+fo}Oq>lk%YD#Te7+dGlrdfx*fQ0>p3C{xAdr
zbKVxK4UP%9rH!iS7+a3N?K2ZA`_Zp6&*PXL@y}^32^aWGs{XTIZ`)4FDj{%Qv$UPR
zMj=m!lf2UWIFwsOU5IfF5Zrb2JG@nUPEce^p><u{`Vu>8yKVAg2`}0csEw|k2Xeyp
zyCj4`uzA>=sCju}^5S0qxRN90gf+AR79xo3$i%MT9iKsN@ex>70C(Cdx2LTLS<t}n
zb5H-w8@eKnfNd|BoIeBQmt?q;L)LUPBR6$r#5AO_>=+O@LZKBoG5uTGZ$?ZU$F>SR
zNjgbs*%yyC5>L1_$Y|Pvu}0p#P$@*n#H8MwGTV*IUZU+6Ed+3}$fAr3-s|{>qnj>u
z47$(D)w7ZG8^)FC*<H&exN?f-UKJ%20*X<e$b``z?>H$9AKoco4Jpp>OC?bf5eRZd
zvxAa^X#ezM=rv;~XI*nF>Mwxjx|rP$7Z+3IiSBAHvgi_Os8dVEZ0Cg}&i6FfcLV*H
zaA*mR7O8XSvT`T!Rt3qk0>ADj+^7eSl+TfNYKo-B8x~y^^EUD+D4IgajL(VhuIzXE
z;uike_?&GA3f9ilSR8+86Q_dXSEnMO@=~y9stlLDxKJYwfQR-}39#<JAGRDmf8|Sm
zYpbq0Ehc&69D+L{w|4`Ujq2{}N|@`pOr_ExG?Z|iBu3%zt&^#An0159AInr*uLxil
zDUu9qA+K-G26~NS*0jsgNfA8DYm{8wlbD7I{@Uvpb+LJu2`)u&9`UlB<flcXwVvqa
zfI8WhU?)gYimpTqOUN{)q8Hx+_Q@QjuCh3({Xlhl(I#vb1sbw>00+u7-`A0`!02m2
z2?C{t7ql1};<{u|qWToKZE+e4xzL^qkDOScNLMj{GYA{39N^rHt8*0;hA#Af??Dxn
zut2Lh(|C&=819&{a`wCXQE4^dQCf0IC?{p}5xv>A@6ZMXXh{5oExPbl?lV8!50jbn
zs+w;6?@vM7m+XIw-sgl2ciy;ltZYrZum1{Xd?iQ7jW729aayXi=j?#RxKf=4<bFnQ
zbn@v)P}<z%g}4OZuvS~@n^7XjmxN@fOM^|U6I?5`xg@AWkN)WYb#3I-%Wo{w0?hB1
z*q!_p^JE0~?M@rPmBc`M20L3#l*6E0oIrep4fF$;B+Ra7?n*?VsZC++=b$>}IO?dN
zLowg?A8fuLWq@zoE7GW4N-@%~0tR}6*6Vg{sP3c67s7tc)d>T=I^z!wFvQMI)}ie0
z1*@I)%JCEGez?~qfm>$jKUd3y?=l=xFo*oBjyN#jKB4vRGvd<>QA7aw6}a?Tr*@E<
zD~@>pPehMDV!0r*dd)RIoP+-`Hgw;W>IGLwnmrF|b{H~cpq4$sSXGWBp{le+?$Sug
z7yW$Z4anddWNC#Acnx!52mV0Wg)<zw)`Bj7y9;i6=5t!w5Rms*V4?hHF~c)u6&fg4
zIBjXG3Q(2Eg;x~Sv$~FccH<cBwkSe{_uWab4{o+|QvTT+m(ILJ{(8&)9IOi_2Qrg5
zDu`1;dnwk))&mcwW1p3=+60gfi_};^h?5^oC?~o?lrmO*#0kozVL~k@0msz5%5Nj_
z&M8y!i&?ZIkx#&D*@8UeKkG37rdRRw03C)%UOtQ+J#leZNb&mTLtHsuTf1Nf=FYP~
ziQIrzTO0DTGWSX*iWmC}wg`cI+RcT0g=-Xog}a$u=Ilqvrz|XUd9IFvo=kZ2LtWaE
zM#<#D#>HG~o$;f1?{o~VO*}anWtpVN-H5*g7CZ{#c&INPd$(G;#s@{E8(yd@QDRF4
zkP<2(V;?w;w*TUn_Je6h)kNL>5G;1qD0xfk7M9|tR|YqX)B<LHB&UD0Xe2h3j8uSa
zMNtn?B}P5X2e!bmvRs<?Q^`5;SQ!)u@}a^BG1iL`rEay}I|r0t@5ykvK)wN^5RY9#
zZ?T5ZZmxN>`{{hrJmR|eX28j!bgyVdOxi=B8=_Njcq{8l>XwXg%KmW7%pkAnT1Mlx
zJPITRN3Z$virpr-pnn^!sbko;GTz@t8|UF_5<n-x`YGJeVtHd99$@kkTT~Qh=M|&4
zx0sIbCWWt>-EvY?2nk5Uxe<+>#(sJJd?VN9sPG_v^8a_K3=`<~&2L`&Fj{(cUNPz}
zgeQZf#;^<rIAL~mo~V_D|Ap5M@?T4y?#^Tx+$rwj6oVY>oS*5UwC-v%0P+QY%OsDT
z;sDf7>~v)38+_R$0FQ6`BlF%s3up4R)}+$2sPh&m1W?7-XIv+3j4to-WshaiT(#a0
zXJw4y7k0S15MQo7eorsvJ@NvaGk5(L#it(bjAu=*R7oigy;nX%sheSYZQm9HNB|XK
z=C<{7JHonno6UpWAZ;<yS+=$S&pk|%aO=RaaCt>a8Y#x06Ff4W{~r3y8Aq)(+hhfe
zr4Ey6^Z)1&$U;!y%^cft&_gr>7SMq)@4jNc#&g@3wyabjLFUeaM>$9cAzi2<LZUkm
z07*C{-IHC}A^_<5AAo<NZD6lUil3x*7>90AqUsv<ZO(AUYmy~jex!=-s`3POc8Ck6
ziTg?W5>yV%^kB>C*V)mlzY|y|HS+n0HGNS>Pph_+Bb=@ACgfScrLk|&hDK`#yQ=5*
zQSFDl2>(T+7BJ6-WCdOWjtnzpr<oAZk2dZXkmFW;oTq2yYLN%iTmEdnOw#u-N_#M-
z$;saNW!Y)LwAtNAWZ}nt&Lj0+O;dyw^&<mg0yi(PD9qS&NPYWJtto`jB#;db#y){x
z1X3U^Sh*-xdb$n?k0%k$R<Eo&*Q1>j8)BxR&Fto=;8}vo2zzU<DS6T38hxxZlxJ^(
zyXG#zJhrh*mNC7DXn=^A(uHd#JJqdQ%hu-D$ymhjuo3~-R?F$NYpItalveL~wI6~%
zvmuo}7a?1R8B-DTm#(U$O9MhWqV-SfLWnrDPlStRm%}n9$49!{HIPD&LP=+Ws}jM=
zuk5@$bu8CodsbXC%JpUMsHCsyX%sr~cB$B&zvpjLB#Y_{EE#!Q9DY`hc#3GMcJ1zT
z*3$&vlN54DmLPn<F2$$M{rgor8PnQ|LaPIf2pM(5T;O;hU|0^kG=yXq!igqnNW{z~
z0!U5)JdQtu!t&Ong%N`E*<WjovsK$!Z|TSJVv$teB9+wnBd+`Gu|ia{2_HgmKG!Df
z<xY}5NIqqk!*4x3)OoCZe@T#-;ck8#&2@h=C$G&I(K2i!>CzhcbN8TG{b#cAnNrr4
zFmD&IX;R=UYY2&e;=sE*Y?eZ+YSZu=nZP!W`=T8;RNhK_l6an5Df1@LlmD_DcbHs<
z=rL_jsp@Z<OJ0lvmhSy1f}1odT#usi0BCd%0r&Q}8YhxL{x^nvabmwcxiY?^F+}B%
zaoqn!+-8^X?cayOT`9Gef^jbZ@#7|wygH*Mze)zrp8Kwa8uaKokh0q5MUOIk8jSX4
zEPBtSaUUMLHr*4I8;)h4@4O;j^<_G<6Q#d|)s!pfwnnNjIUWM)tt0xp;}H4>+vTxB
z;s2nm$1e6+d0KGBoqsK@`%jZ0fcqST4H~e%kC<Cq@7i0W$yQmU`Rn`XX3wxbIY%R_
zG3OAV`p|sjA@9i)6rCU(p8ViFUMG*)vQTn`QY_`J2Jk~fzYsl9@*P8-=X~xfIFU>q
z{BXN{G#x7~8y?R!pCGKdQfspc0jipIOuRxq6H39`_bI>A*#xH#06DDWZ;MS$Au6%C
z3NP$@yImV5i?NM#()7dt$J@QYWlXk})za1v6@g;&ZYm(nvnQw-p0djKT}}tX0};PH
zQ&_AoZGqxgVOv}XH$USqljbtU3sQE%U7^}&Cdx@`t2kj>{~aJwXQlpBtxt_dzr#XB
zOhx4IU+07!f#c^pP!yttT_*Ms*Xsd+6sJ-ZNNuGiT0;O$tf#n1KamVB4=6!|6>Azh
zQ$HhEJGso`<I$pSn@r!`vcI&PgK`>NpGCtd6$tT+t_gpzy5!OUyOTOoUktYI=()XA
zCgGqIGNAAXo~p7*G1;*Zi6u2^WkQ}14c82|QG*{J>zd4!ifX0y&@;}20>Z|PS%=4-
z0SCW^Sqh7lV17W1c(l~jlQ7U-;XDxz+>#NJGF_5UOnGFl_xE-dc*b$+rBt_+U?;FX
zsN}mMBjm^M3GsM}v;qWBCd5AfGBIs*Az{EQ5#damzw%@^YWSKd6dXj~l{@x*&OjMm
z`Y)%9#2rPWHnkKIQv5_Wc^+4nXW2S;s3C~$(*Jti2nn)kTA7WGyI+ILFotjUuBlWf
z1#~C=t^U3+isullKX;<j0YOtOZHepSk~>d@nb@T!NBSYEdJH9g&9~zuvHt|V<(pv*
z+Ozi!T1HAt1B&~uAu%Apb&-Zh<FF3K$Np&u-#=uTv5S~>LWvglPWM1aI7H75rDkKy
z`06xN>ga;uI&{Rf;-*yQM|*L1M+Zao3d6{ahdhoCzZ*edDya%in`1y7VcN-Kbt2&$
zA?lMJ&z<L&7<7806a(ZkIW;+2;P9N?d?9e=C3V_fWYR8!OdAYIcvE3Y^oy%_)Oo2+
zdg$OQ@&un%+bjeGMh-*))Mo-9F6bzVky=O%6D!x}W(JsuOD_Jsre1|7NZ7B7g$7#-
z!*h(Nh7BDVoO0CU`3fDa(Hf5QiL#Y8c|QephM)2WgQwf<#uhe%LH-BhogUi|!<>dO
zf<r}&N`=vM2^oW7t1F@3oSOrJDn6DBrxQisB@YQ)7FRP0IZ<s3!g9S#>K44=lMdEw
z`G<LS6#Pv&?_2)nyW8+E;IPHx1ze%fS;oI{#Lx`-gO`Dr!gk&xR%q?~TC?`5!9uPA
zcJotIG^{OjOs5L4T&+~ui^Pi(-i9;}Dodz?&z84>3R@6*23MyG)VYErw6ht8(H#`<
znIcd9Fro38HFK8D`)ewoq-MNsOaK$FnUW1}th`zxTAG|CY3w3{slxzK>Yd&YBWBqh
zW+o(MgMG{)pC(L*6;6RG{O?wZFu~~9(AY(3Fx;n|`p=jXbh)b*xg~}#N&RkkrT5do
z$qtV&JYgF5`v@L`sCNkxp02kiYrYRi|8lY4)(tldW^!ta2JLNZVwn#|M3*PSVomT~
z4_yk|3Y=0E@PgG?WMy`Q8shb!;MZY<)*JXm1)4=6Q%ZV56mfOx{b?-vI1wxbhr?kP
zxho)XHxlQ_^${2!pqO8v!i?om=pWw1WeUox)ajs>4UIaa4m`}3<-MAsOOG{8-`LD^
zX&{C>luwA*IUIQd!qiS2l@eaT%N3%ANj-P(J^(d9%D-4}A{L+`X?}@ay1JW0(IZRB
zPl~pw=Nzr;MOASowH@T#I{%5Erx`=88#N0e?qEt;Zw4F<ivo$Hr>`mR2lj<k<ljh2
zln3$!_$u>Rz-1azAnQxmNo0i*OF6-q^`N+|b&H*{uXP3)nJ0+(b!|aQop|;rbZOC_
zmJ!4WK{O^=iz41%+#y&nKgyDi&lz1tv-(v8O%Oec5()AiX(IV(LUowAqXe1ABZel^
zzNcUbmd`(kIv`x#BIAaGY2yC#=_c5r>pN-Z?!>AjHsNqGC+RMea;%(+$$X|^!YR$B
zKZ%zK&h)6NJ)g=%fW1mDNX$cInfq!zWNOn8J8SDq%kDwgNI5Fxk4QHkR;&j@T%nd6
zPCYU~`KuAe|A1vrmg!Q^92)I8z=5lZ?zkQ7ZchHPV84c{M#D6|GtG%W5<g(7A1hMH
z%UIm~v`nv|;G#$ST~k9qi96Q(g=BQ(lm&3Zj4sgTOR>H3!xXc3m1(2hpKEz;%<0$~
zOe!hx2Cd^NRkV4i6dNd4zT`AVOkES0B;kYiQGcYsC?mdB<+c{nTfFoQ0t4{DlkUaz
z*&Lv9s$j0vAuFCP{#F{(din*EAjQ`4z~nxDW6~XGd3z=?u+boVtu!xhLd1z)V-V!8
zJcI7S2L+Jw*PX*-1&k3E$iY{kVC$a?v;@Ac`gu2#9kX>lYoj}Py`rZL(X_z;<43N9
z4<}W2Fi66DzMTo!k%azXF&x<%4+qMGhFua5AE7zc+X<1&IsNB`X`E%BOs~Iwt3{O#
z2?@yKYa&Wcf7Y<9y@_BfSwcB7)GL@M-PyymKU-h$m4dFDB$1s;nDQCo>SeqET8VaX
z>P4^1RO`lU?;Q&=0e%4$y|=$M4PEdRMy{Ml%F92^aS*LYUeB6CDzC)SjNg%~j|siV
z1l>CmNu1-SrkR(HLMJb)iEuY6bFVq47=EwYwxT@DpQc?X>gP)6Ae4z}{Tp3tz9dyx
zG!V??hKzZ|rmylguYi-4*dbY}U6&Kr=mfNg*_ds85dn*p(k2V<Hv&AT7aSeON#)vx
zq()EB`(Kw<>8?WG6;UP6oV$cRBo3qDks})Xk~$SgU^5Ba^l;G<P#zO2RmmRQ^m8Cs
zu{02%n>HmeOV5V(lbB6qr9sTNy)Ch<P)v{IjX}TXmsSriOsCmi!`p#Oe%BE+rtaX{
zrvawg>DO}C_rBjAYKZ~Bn72m&(mR_8s_np%?@=EVP<ZAfEk1SzzN&txKWfVy>~R<u
zi)njXYES%ArTTm8p4rP(9cw-WK82BH+DEqN(pBt#^sza1P!Nl_*SNZZrpP=!1p532
zil&JlokQKyGXvD=mS-P!rmEGp6NL^!mB+GAR>1W6WW)2FF@sU+wYKMSz82|b^2HA-
z$CkP^nRXi9x<3MiihF1Rido8vKxhO_c(g3JJ;<EcemhKe$<ZX~590#k#)Z_W1&F1<
z{)_hP2su=7gmdduh1n>jjZ(cPOuur%p7*C@`?yLbHfSUW_PW9iq>yMCoBg!%6I<o{
z!z%s3m%+Ru8{JCLC8c$d1ReoTre;ms1=oY%gF^RdxhO0XFeNf%U=&|XOzL&q9fw;)
z@?%=)aXAd>Vsp9%1oJIGHD_BiSz|?tG{JCBcV9Nco@g`H_sZ+GZ8^ooY-c~nZjbNv
zo^<0ZU~X8*lA7C%hRFmFuphF_g&x2>(Zj!7sJZvJ)Ev{Sw5RmdCCz?jW2iBhnhRT}
zmQ{lDqTdW>+ScqCMNRv4&v}7fA1fF<Q(zi>-L_hjOd-%oWZz=b?;!3_{RRgm4Q3Hq
zzx?ZPyXq#NUq&O{xl3|J(Ib`wRDKckvMGjSk^ptxVlJYWFjwQiJU;BGj|zX*H^-ig
zPfKwj>%ccS!@b6XRE&4=R~0f^FEUGTMV35d4EuNLT#!L8^N$^y1J-Vu)|ZJreT|9-
z<^HNVDjMYfg>>*15afVq<qX!|5-EdC%_yQ;BdJD(K2MT<G;A*+(?)XpAHMph$OxeM
z=GD!tpccqV2a<(xH7}54AN1CPX`(nS#}S|$3O(waJBi0Xfn(ci<eWp?*UzevfOfq+
z>xyH)p!Gz6X3jce`~A*b1_9`TXD2dYr^mft#HTgJQr@SBvyCbff6E9B?LH-XL(p=e
zYi-8B**I)%my9a#$-Kv~aGE88@{`(=!yaPuY6BRAO@dv^qa3|%0(|I4Eb5<|oJmM&
zSD!@rq@d|iMj8(`DHCFl(VK>|C4A`<zAWy|&JD`JNa(|&u>(l;6$C;M=2DNkpEC_)
zi+&-+@TZ*~LcaTzLa1_}+-~fovxCIEfo@kI6u+3OI+cqYqZ`T0|9*xMuF6FF&ek3h
z+!6^c3{+nn0LROTu*H~BIsL>ma`(hBD9=%;$=!KL%DyYQZehyI1kFe<+`EXXot{rR
zmHkwe#JvYOJVFc|VYEtc2mHdK@*d4{*nVaE1~_kSnO(*F9%#)NDA<m&)#Qw6QvAtg
zAdXmFX)TW=4eEF7X~gBqDadU(#NPo)F;pyD{~Ij8cU7}p_k^IQe<D7+dh+GP8`y|k
z{h`iVzyqV!wj|d9Qh^WF3l@a>6BI&zI%FIyEai?@Sq|cB`TFl)c!P*^d^Y${BTBg1
zV>P}E=2_^ywS_Ah*O!#{_;K2YD+(URyA8--go^4G?sq#7V&`8-y66W3QP!$Cf)DSb
ze@_!L@K5NXiwEDI<~y&QiP`a7S~;hmoeb^1ZQ0e~9PBm?<QCg#X;rqi7W_y1L}jDy
z2+?yGf508Wdeu712C9-fQG?-K2)3?_K=i_F!Mze_UUcFosVVMkrzS1D7_&^mk%tOm
zuND@<Y<uo;oW0dk#JI}%Gu02)L_u`+P@TBPZnCBl(uP3XOqSsFlcEcyoX4Drxv5h#
zuJWra`0__4R}kK4$Y7)zTy)#0;fsA-C};cB8~|Kh#+)4f?Fbrwtgk-vF^LcCU1<l=
zte;7tj9vq1!7`DBx6-B&jmsuAk<Wje#Z-mAHp6#ko%i~B^ngh{`RY5`;O1*Y?Ow!M
z%2g^|)0HwG`N=!bU6G(Tu!fwy>`c#DVH5<0DuSvn1>(^>vo7|8Gx4%4FvNWgf1)<o
zHNs;}(Yhb@IL2pav(=)8j=d320ExRf;$V^8k+MgEuh}OsjsK)nxU4f=jwY2z=?WH6
zJKKqv{0#w>;ZKe2r$Y#M&wsLjOV?~+d=dxO@f0>oAwrYz|LDKFNrJ&p8i`C0Yi_yk
zx2XJ$w_Bpd7dCV{I65cb_1R_0O85NSP5hRenWdV#w>eq1ULezWx!W7l{h59AJWxQH
zpxck<Yl(pX`Lk3(7aV`X;=;9?-dA}?J5p_jbd(22?{qVFPlll_+n>{ELxb8!2(v~V
zhymw08vX~~n;BKXNCz=+(B?<#1@VT~TfuMXo{Bw~eYvJokO{e@az!wmjI3;ORmA$Q
z`@?{;Iuk0Fp0U(ocqqv=InXv9qsIL{h1mG3XT`_X=QE;l)Crj}69$oji7Y6noeboo
zzsXoY1}_^o3<?~W6uHh?+Ct*gkEwubG>$-cYAPG}vdza%e)fiS$^lB>o9GO##7DWy
z`p(i~W=ZkAWF(~`ibG8#zPb+gbi1_bcNi<fdN|MQj1Sw$M1PVRz3fr)(+=I-B+`2;
z^>1qDv(Bk%o)jsY3gLMnQ5RpocQ<Em=ZzYp`oygP*XPe`q8Knyv(^Oasd~05!d|uf
ztXbk6vmLP0KBm-}!!Ttb+%uS+Y7k9tJ?Ovz1owr}q@;$=^Ff6cU>FdOfw}Iyt7?oB
za5DMzO~SCXP)U23*q>{IO&4uF$-0$DRAA}}*HT+?l$^7(P`m7(iaUi7i7};op^{j_
zChetK8=a?nC{i;i=8{sU;+6NiJ3NitS>U)6+{(DDzO5i*Tp*hs>V^_@0SF})9WLx&
zYa?T+mcene!YEphe9{+Q*&}`8TO3I5`ttlPc$am|{=i-~x<hGc6xO$wGmcxVLC;Z=
zJE4|EJ)ll1jeMMWoY897S+bm9a?BW8qD}`?zsDdde(XeF5mprNoA}YVqUd{@+c(g=
z*jHcfusYb}9{Mx~&1vYKE91mCpkq$siruB8yM{VeK$!|9224Vo-$)CTJ&7q93vDk|
zV4{{TncEnRh2j!Q&7tpaUN+s9Lby3W{r}0ItZ^b)T!&qoBB38&`b;M#175AkI8mGN
zIKzPXrqZVJ3UKdAPiCrZp=Ft_HkG<F?R1l9hV#ju$*9_?_KRsvf{21G6hHx6Bu3Xc
zw4@F%XQHkc$ej1h>EaF<?Z8j%m^t7(>-rHK<*b&Z{wkq5S1VDWrl2JBft}olDDpjq
zEx1E=70EX4)rW*@mBD%M-9u}#@5}OQ%7jVRx_KZ{IV6#3m@!RHH{k8t8n53CQ0!HE
zVVtsHJos%Y+Mn`92U8oUntY#?ciNV8EQ|*FCIB`PcNzrEkyo0_*5p9xlcc33fLyo6
zUNU27l!=}Q{l8b;(3av?W0XO;4@KyI-3!>AvDGbUs94TXUQYYrK60z;4O$_wv0H%<
z7ijy0!HV3SBYB*^poB4U3?yeUN7q`{AXqs62wG`9*uX~(0^V;;2~#~-_@YJ+X*=Bq
zR*w-h!p8U8?(AxmoK?xyF8)<)+>7WD*}(jgvGh-$oEu)$!b8joIA@X@PR~GdFskbh
z>a*5$Go=OI-}rAg+b&N`W)H3>v13#PvGJ3XDkqGVxApCDZUdT>tn1w0rG@_rLEN*5
zjgrbO2~T2VLDa?rv%{;nS(G@&1Bf;kjGZ=3Tj?V;iPRq651SO@#b+&-*eQ(KII}Vw
z;RTiitiuw)LTF4&^7yw)&5rl`n`llJ?N1jTC)Thg>qsPA(<f*U8=3&jvxSdGvzd5X
zr1Z}UEBrU!kbZy*<uhJQsuJSkDSwuc_N)&*XAb+dB%!ka$-<*47Lxmv-C!a%(owDM
zXQORD55`z54|6E3UkiiRZ4B3-y16oZ8-tkC!1m;J`}C!5uzJiK32Jku3vdF0)o0pH
z7#cna*ubo<pl;VBfK6UTYSjpOk%+5UhdWKx$;=-BVl@d4=yVNrtF0iTas~)Bq%a%m
z4u6~_k|;wugn3$a8)T*esex3-LLnhRa#5n!=xtuZ);z0>NZ~TSPtLJf^wsea>Qza9
zty$tf=Y$vaFvhmKzMD7?uq{ewAGW^*Bd{Gm0*wxpCX;ECob&uUzuVs;azZMH)F33k
z`!SW_I2j_prVQFpo6KGnpHIes6QO(Wi9h_*YNC>Di(AJ(O$0LQS@!@|tdb|&#|GM(
z6@2|6GR;5aR*O##f;{ssxQC=CHEj5Y;YQ@>-6t`=-Hw=wKC`pj<<Kr#uIoysSUn-T
zJAn|<GCs`|SqW;7KS_pBThOy{t=g2fkL<+U0)E&aX(>qEKC;%iGQihQg!M0Z>d?t!
z?f;;zUnHXKh7XXs*(NloOuXCdacYmxY9GY>N4xM)Fq?K5C%{H3xB^Ftfx?@r*D8Pf
z4)JPmUKpxttu4}_i3r8}vGW2xrvgj`aikU_5QduRv_}KAwR@)hUe*|UVv8L7gO)Z1
zNLRivoeuP055-6WD&a8LCsKyM=h;V*b3@Zlgmb<Sp)2VY-nUZ#A_;}AE!m_~ghGR+
zaU}h#RkEhxzZ2!O?kU=4YaB4D462Wpi#2Lyq8N5{v_bW!0$P>RuNlk^Tgxzn#-&D$
zU-JI+6M08{HR5T;Ww!J&80J-&;)1DO5c}uti$>RQX5x%*<Mgq>V^&QhCh%K?El5$5
z1L?O*N!=)Z0JT_+g<ENxbvx8GsjOTC(9XVzf@%Z+m}rr=jG``hq-Qv}H#OCmy&771
z(12_m*yFRT1(EO2Wf_;Wjx1lk^s_?2S%p{k*{5%mTnC>tGNv!&z{dlNPYZvcnNd*p
z%S5?;P(h}?$KcH?jYVxnKW2KW_RsxV5I9IUut^PM$jIs0TetTHQc9UvYZTcY#hAl=
z?~vmDY5Uoz`J6G^dx363?HC4fK-Vg!SF||%Vi2@|U=EgxYhqv;ZB-!BW2`fYk}K^w
z7CxK;%GVT6r_H4-Bu1N;T|CiMrrXI5^oN8SSm{4R_JvLt*jCyg&T2^a5$tkwKxU8x
zJ98V@$q2!(l~%1Mh*>;2mlX&Mt(Einq;GKzD<KY19UQZmItSG`K~B9=sIYl^@#NS<
z0-;l~fL-jRe*J%H>c9tw!XarA&J4n>`~idw7Kg{=paMz;!49aNaKk$qVpcRU&-1I%
z3+nHTs`hRqMC5T|TofE?<l!q<$V1lafZW(#!zH2KHuO>gaSS?w#KuG&%;?%#X^Ypt
z18d`cqGq|7bJz58|IY~6_uqiDGkczK?uE6__<6hj+uSW4(BEw3Tm`Ou#DjINv7gXc
zMwoq@Utl_9&~iASeRuO<02S`A*Znz=2QdwX!GcszDb?+^;fU3eQxCmdM%+?5wIY`s
zpY`Ldj%?3oI7x5rtZHN7jCMW{Kf!{jjTOcMAD4rRQ<DSRB}H%CiBWH&MQ6`={Ffrp
z5Rud7YkPjfIOji6O$r|MfzrcnF1-bdKmA`_IL4F|Wb&3GzAmW_7SILThQqpf9+r^X
zoB+2z2^KIny2a%8Os0_GnAjVrw@lU@m(8-#%zE-sl0&rh1(egUQonrKOT)|~96d`8
zWKWqk%jlaFW&Q|vj9VwFz}C^;5;#R@$?Y@AIXS%~0@{PCPh-+bW2!?W;z~<fsTWfQ
z9<Ivcbk6X0*AtjTUi5A<hjpqfk9OeF=&i)y!0-4KgMC<Ut?EeBO+8Xf5XR1H5*J7Q
zqi4krlUXo*+IN=9pCXclMAz^s-hQ7BWY#Ut7=y|y`CZ`_aq%x3ZY*<C7MBW^JlB;C
z`38d8I}O?fx1=4f&!TfEkf|os*}h;JzT0Q|;{WSKXxj9Ck?dv8$i~4)da0=ko@MYf
zCvl&KpvN8s-~~-6;kM!3jCr{R09X&PKEz?*FAQB&`dq1-+e}_&tH}?g6WQyFfBzm0
z2peofA{>k?I4Sf#KQp$iys$bQ*VSRmsWCNX2+S|(EU@XTQ0)#>B<@__FrV;r<L~~N
z4V3To)~xZA0=1dyn^G-xO<Ss{2jw}wDSer0yfH`xUN=)4X);uFraH;O%}}&rVCRz8
zivyAziVw-Yps!qQkMwuE1P(iG)YUjDur#gaKt!O8?fr!PM@Zav>4lMzMm6`l^pNW6
z80?4>y426XAG?qZRYayjnPQF#AH0;yueaBNrxdx!ar*#MIyOGMi!5d3btSO1UNgN`
zy&kWFa2PkuRAG3hO;ts7Jpb3T44m#z_n5ns8E<VUWKgj!2xR(q6kr$p9JFXnaXj0p
zOpU!TW`b`F=*0agnqMLZ&y4+}QTj3A3NqgVExuN1J}&zqsqS1f$as`B(xBQOtp+q@
zu!ONCuQ5ZWCHj%9fVJU&T*gnfOL?5Z+tRh4HL1F|;HbV-r1w$4>n`^we|W&L3-pYv
zPGEy?Ps&haoJwL4b8(rGMj&c}&JL`IW>r6NACM?A!!4<K1rFiV3)%CZA9Ln|60t>*
zFhmeO<R|FU<IOXo$ToDR9Bq4BI1I+?<Iaer(xqyoro>V?oXT9yJ{~GM|JfU?Xie~q
zc3k_$>v|5IrJ<`>v4c`Q4gflGIK<=qkNxR2O!5PRFcNSx1RN#$ODDus3mYR>p~+jd
zbag(O#g;YeeD+?E6W4;V$NB=r%8Iuv&eJ}>C7{>ZPMt?-L2h7FXPwt&sq3vs$Pw#>
zOa=D<C-FgRvI3#rv13R&?dPg<h;to7?vSSe`70ln9{mSb_=o^17peyFw09LuPHJwH
z?^$x{hy$RrbO^hkDG;qZS=GMSe6x2?o$bo9#8eK4Q--_rV7`0Mc1!nR6c>bQw0l(2
z1M&Y9Vi-}{(b_xY_@0|uV20jn?aT;;o3e*>O_O@b%Z4xv9LL;gaTS+&d!UH$uNri8
z=3iu*8)5VK8Rz&j59aPN7fq#>oP1DEGqSQatLMH6q{qX=wG}Z%-4R|$qc3?hL(2k<
zxg51K%>Tzr#Tq$N5)zK(=Ey_}PrGx?<Bs^w4I+93i>Oqj+8zMW9_H+!dHE0Ly`h3$
z$hyxX)$XokhL42EfTCm{qNbMt!N1k3WqvbyelI17g%4cZyh&>0QUIuSqX>x%N%Sd*
zo;LgJF^?(*Xc1DoFG!xFHe~Os&Vh6<jrcQNq)-)q@~j*mwImTFdr2&POvqW$Vj>cr
zj8B={>s&C#3ns@4-Rb<bLDw_!(&D~No#ZjTb8XPHD;F&e%RR@oX%Du*Do}>?9+q+%
zFlMbnZ8S7Kx#eTHvj*{lf5Ru;GhVQf-VA(c1D<Ot2l1U~!mZ9#n~Gy>=zB2rAs(wT
zUwbqzxp#wl9&YbrZ}h>XH1!f!HwAmX0s>jv^K^*?R%#nO1J9=Xv9IwMhU#bed9u7o
zshivd#%wphnTU+=0MJvy1tu;a<DzmBZJ7+%4zz%@$Uv-jm^DiX+7KwNI%V3t`BMV_
zsV7A;86xci?>&EHlYyMu1k!*T72~4XE8IKHeqgc=F_Sh(X<@6^oN3xmx>f(OhgA^9
z@%hdFkj}L$zoU~+ZgI)Xa2PoEkpNd_8TOXz_l0F{MtEj2kdSSTJF9d*y}o)w<Cryb
zXP#uBmI+(Xpq9g=WD;X-hefE*yvm;SC5+6JP<E(oD{wHSGzH+P@KV`=0PWl<!1CKL
z@rS)67zYAXz;+!yFY5<_-<KHpk~tlEvETZmD-}~#VX7YGVJ?A4@tQTSYcPojoO0l0
z?A+&pq}1dOdUrkWOfZK(RJa9>KWoIRYO|?+G)%t<uDuao?(le(?J;&`_iMRkLU?V|
z>SpL`dqgQt!gC^!HeOS1$=cOfWf*`uQvtVf-^TgrmfflF(Rf;{J8iYCG(kCtE<*3Y
z4}Y7`{Yiwm%+8R;*;R1z?G$oYFDGq)>uCsIZXOGX-w042>O}7pa*3V!baEBSvvCzP
zql#|`1lYQVIvbsv_*&GP{8^ndbbU}Vq8FhYp`Y(Q^RCQ?Oy*gp=X=SrQa?_Z2ZqvZ
zTlX&;j+5=+E68sLs^xxYDB~X_$229nP-}Z+_%*A%D(fhwMMpD61}Q?7q<TP&ie>GY
z+@vq03ui1PNkwK|N>3x*MAkJ&Diqk<D9;nTS2dJ;9gU3d;pEUNt2vo!@U6(;^~#{;
z-%#+pcD({20V3sjurtl8p$Ye8#B2}S04E;pAU)C!E8Jc=$h`MIiWx=?3qtC9h6}&S
zqLohEiisMx*&X-oXf??49h!Uud-wDTp_qaa8F7fcvnw>gG2T=MV)mBl)T%A9+H0Zj
z%a@udyQO;38t+(#I_s|XaBg{s$5RMiWa|?b79bTYxOk?(PAiM%mys~QC3^UR2VQ^p
zoA{z$zA?QBefAq_Jx9d`KpIp&DfSAs;@t;Z%rB{0XymTd!UgFn1R`~#iW+4BLM%N6
zEHQQiN68ZFz{4v-(s*DxInf84+e9ErU}E-Li&E!q_&YdN*|1-brRw5#EW!W;c#o6{
zqr*?&v~tN3m5L%Fbx@}%@~)eIbyGfKvq>(E=IZ$mNNxX>eL<yu8{*&8odF6&<cdxY
z`rFSGEo)MADSW-!8!pfk4frW`yvY>pSt6~R@r@#EOTX~egrs~E%0+EGiKOzsq7UK(
zntKnLHPTA3uU}xo(O{mY6Lpg9Brc$Gv{UKk%s~AH(;E<UqGcxwZ;j-X;)ul~tuiU=
zq#ej#RXZ`<y`#d)+i4{L8B~z_t1sfZOlf`c`cw2^Az;JtFY2h;al6KSOVC9FTgzDG
zDH=)4gs%UpmE1*Sm)N%5KtXl{<%q;Mz%bFrcB<tTM<XfTS}~x=S#*X^-=l(tZ#vcs
z>;G8S6T}mg+Ai7fdY)<V^1i77WX^&^g;jg#!=ATVo?r4VoP{Igbt5Ut(A{fs$FM<q
zp_M+Wf=;b1Gn4soEvHQH@K(TcSKlWL;HUx_#}6Gs5Bt6rL@Mp^IMB7{C-6h>EEZ@O
z{RqL+EgjG65CTLKJYKg3`q$f2paD8@Jod-WA!??Yt={DB4?LTz#a-{YDbxGn8LujV
z0#^W*0Q!c}p=AJ_K59i$MIWS)VQC$3O;WI8F|vOOtys9lCmk<K9{KA5u5*dO{o<uG
z`%usG=rIR<ZwH~d2H(99dKo-0o(CFem0;sEt14Wzg9t<_($C?=M!QNW%AM&1DjUNb
zkU!W!#ZL)LYie5@=wYqnU~p17lf-8)nHDfrdT3@ug)=}UmRj_uXads)L5q);(UQbL
z#gsp{Os2sviLZQen((x8F&=yAfE7xBnb-1ZaY@w(jE$oloO*`S*!!!8QwQ99Fihil
zIN?AUE=Oc2quk^gTWljWbKMbwSc@2|ajpZtW&766NPh?d-#rMrOOlg*OZo=)9mx^Y
zyJY?jz|U6C2hX$GKkj%pwyQ!YT@$pD!Q%ZjMEqlXKr;t##>73H+elxLP>q4dT2pFs
zp}Pm_U7&^xnX*LjLC{Brj~s7&dI=>`=CWZ<9^6=?ai8%P<EVnl8BVbb+m{uIm+#x#
z^XwmQp0b#h0t#`xSJlJvo;5?+Qdg)4^1|Bgl1zniQuDnOXPv;yH6KLUvO)ar4;~MJ
zEa=fKuc+|5?jlvXa4YZunE4N5HP48uKO?<PK2P1F8|;KT$hCW|(BF>F(xb+XQZwF3
z5ZR7(Kt4-c!~alsQaE&43z%bwaOV)ZCA_tEoV>o80=Tk$=)y15MP(4xXuvZlP~Dh<
z#X@^tZ=z~vyl3mY3(`u<BCxh7tnk2%*bn9dW4{_-OrO@v^4{~H%Bm&*k^#r(eYKeV
zAsGYWxHnZgdrM#K8boJuwV6z|OWBahMq$}MJrdw+DSUu|nan)SNRT9TTa+F7joCmY
zaRa8mJLgd7VQ^fQaXNaeosrjwGbDM?hY17FYp)}1D3u|{?C{afjV(;Luy=g2>-+Ce
zE;zgj{g&0061KH+3mgg(Z52hXC99RFHM2|CF-?_&Tk|%8Eh^}5^z?yg%^Evz3;lfH
z96%go<N*761p7t#OJ4{CZPd|gpX%urn0pqPc$KV{5q^wa49?^}3DQ%8L^ArRnhr8E
zM`VdKYH{W|`qE*=<tkWh$|51wZxkkjZx|G1)g*6`PRi7IHrukn`j9o+*B8S)@hPXD
zgKN=Y%WXyhF^bow*yyAS8z_QVBkvs_wO_$g66;yvHpHB^3fQ>7yEf6lXD@<b?kPc$
zQ6xW_m&eJkBhe1wCM=o|r5F4+V5MOPabpYx#KuD{U=$eJIaXV=_c{js{-3r`ulAeE
zhM3t5OZ<y6`%H*-P9+>PhWSgmK#_h4@6HO}-@X!$!4%$_kHZcXP?6G!y!j_{aJny=
zZI<tD04A?}4C)la4st}ErAt@ODW?}slN_N|JQx{`O!5uw?DY4Qh!OFf!{ruk7KNP#
zTc9bL*G+nBK~-m_e4<XIJEMyp5#AADs-8U%v8u`-_!QohNs6weWQ(6nK{FpA1uQ51
z{PG%~$>Q@Rd;@9Eyt3=kXn_=oR!9DFm2^~~28vb~;8cBCtkI#zo_lwVje@QLVv|dI
zwTjr5RW7~h_86v1tA(OGb6(6S+6ifD2*RJKVn=|Ht0;q6=c11s@p&dPF41t@CSAKP
zuF|@4{JQ|rF~vvlJ@to$CAhM`k`Plj)pijZIhZ+1Xg!4*A_4Kd8O}*oF<u6X*?&e*
z2OlKu1FqnvOv9$ew|8s+n|D}g)>4TTFqedz2Cnr|Z10A&|7T|l8CaB#G!V^|BdXIQ
zd5!=Ur{z5(c$)K_{TKJ&ShyUS1wW)5Wq-L`*WKQg9|4McAL)?|`&LKDd{;z4+TS3N
z_g!gb>HRQo&P~PhTeFK1;wz7>OGKMCc(B_$F(hi;=ih|%V{NeJf^P~_p0{0W;)`Wb
ztkXfU@x!QOcBshc8%ar&cwqHMlkBvWe`kc;g_vzeup5yt8la2`N}t1K4*B~s*Ij_E
zQ}N%50&SR(9JkNoe5UJ^ly!P8ZZ6&xNCVdnAXH7!x8p$YBTA}uZ9=hMuw=xd7;gmS
zrj{$9J1ORV!sGCfO9mF$l={;QeYnH3O4GHW8Q@R_%t<W!(JN`qAo8n3k1K%5M9UmT
zkV5EC&PP)L<>#Slo!TD8U2Rh0_7Sv)ea0V^c-B*mN34W(x%up}YO+6lsXZjLAoiGO
z^jxW#86N!C4q~7)RKA$2sZJKVMOiw&r22cHIn<)zd8=uL8*1}+m{*DY?@VaQMhdR_
z^S5g|A!r3?bcVQ7+a|=N{q|{U((Xvv0`BkoQ7z*>Im33^0$tt5?09NRtV~vGw?gK^
zZ6(wUc(MCjV!hVa)<|Z>2E^8?{#0O!cyWWuBa`Bse^R246WQ!Lwk>hq5(@%UCg+83
zKM%GNaTZxvHhhM_%@|t!11&aR?luGzmr1d}o=@TR%BWXEP55s(cB=5Dd_PW%dUD?&
z{<O2#->oYh;h3)wb_3UfZZP$|XMO)lV38$VvSH%3jknao_JhDSn9O>1nt)<X^Gy1r
zpr)cCFGqi+x1*0Cz{L4abc?Hgh3Z1d2UiGaeVv;1lqw;&Bc6Sh%)XlJD^jnewWVcS
zyl+skrsX;l4#3cJ)ZHpEuGQ4{6C;mfo&9pvVdJ_&O5ZYJJ$TyV#iJI;T>=A3Qk^2F
z0@dJG#q6gmb*soZg*8%$3{8lV#JHrT-p|XuV1qH>cm3s`0<ctSM_C&vUuYKoS)1tb
zY06Z3q;$AgV4V}wzO|JBXzLW8$FYucBA-PjK_JNR7Y~TjTKCv$b1lBCME6~&^?MIJ
z`h-;ch4X(wuLj&#y;RFHF}LGT!yRvD>m#QHA^_dNjbwDZZ5N%26bud9MNYqLLPD{p
z1Mzb2E(44!NNsBw8a)({{VA7%-htce;$V*A-xBm#to)q?Hm)_M%}y%cg~3;h(5R5n
z^n{(T&xCu2x(`>Fq(j38<+pZF9cySzkMiW4l4^n{5`cH$=NI*5PZMMhuuQ#x8D!f!
zV&S{~Et$E`H-ppcsw~lQY;nfo{xLILZz>zXjbE!P6ewxlE0@+5vzj%GSENwYk;W<8
z58#WSAymcugq=v(Gd|aL;Xrr9B+=|Q0_&9mgAVoKsR*|)+6Bg_8qB*?|A76Ea!l`!
zFxqE@_c3udU1igCGq!&~|IK1o8edZIx2-ZQZzEc~;x;REn%BLW)GD{Vk*~Hc<=`~f
zW6e5Ej`_ts;BWT_>k=A_Rl`P`9}}J`;zC^&0)yG4g?E%CM6^7$$=kpg9r)pA13V53
zt#rP0hdwDiY*Yti@Q*<zZ@`hDU8Jv3gt9yyeOYpFbo~`iNzoj?`lgn8%HG@Jlxj@L
zrrtLVPf;@$HPk6wgr|GYh8R}NZ4swXJevf@7VG)hDmdhoE<GW}w;+hhw%X68-hd7O
zK<Thl93<$-0`O=^yU|BFiD&ak*#o5g&@)}czLs8_JTJiRt+hha{R{e6Q2rrdO`rsT
z-7DLI5W4(GsX?_oz+?g=<u%EyrLBzwwK4wmP2~7w#LvonxhfyMu~Bdn3`j?yksd=O
zM%PRA$ydBFlwRgi=J59D7bJKvs9vq`;(J(*#;1rp9Z~aIg=U19q8~)7z=|)QGl(NG
z{n$rg#*^w+bs2urMYRTQh%+z#?CD)dSoGRWO>l$u&4?b}o&c?2oUw)iZb@Rru^>FY
zxr1YaE8x2_96KwE?hxKcyf{U4@P(gVxJ9mv$kAcLm&QOlb0&k#$cmr7)#Y1iR*Dtt
zQ6KDUWGCRmAH~4%^e&6W-m6;R|H^#UH4aB$kPpo@!>4f>qpju$?<H2fDhXn2t@>l3
zvMu!v3_$`6&Oy7@_dLDSc$S$uOVQb+rgQ5iN~B14h>Op#hzw}2y~F?caOKzth&wc0
zlO#xJzp#ru8v6*zmLA`v@;k$10yv$rpKQ51H9*&A*64Tnr)3W`mdUn<uuH83M;gD%
zE5|`5LwdPAOXfj=n|dt|!K#KUI+*Pa2K3($*pb>>%-v!B<r$Rfhuo3@o81h3=I+lO
zyhN;eq+%xnf6L0=*P10rugLMHV=k94O>zR%;sWaIQ+IU?`DT+I$Bxa(H-a!xpDwM(
zIh#Zv6ZILm0AWU_T7_S+mPHJQhwq>a7!k<*iQ~(&Jd+S_cd&0Z!X+D8iA|rvPm7Uc
z(^KCMZLLv9`*W`;2W7POm{E*xY?*?l7hAqLN!$AdqarDn|4^JPU}NZyVX*{hohz{~
zdGmiCae$+)*RoWAsEgx>vTSI4tB`ao#l}1^AxX@0pz!i{B?_m$xq;8Y&3XqHueS8J
z!IQW|_UHynL?R-=-fCL?C-&J<*s2SgVMl%R^}(^a)Jb6sOR4`NrOaUM!REiB@Ae1h
z;L@uZeGx@G8ZSw~`TwaVX_1`#n^_LJlG_aX(|2o0fC)hToCspJ;u6u6)4$6<b0ipb
zt>pAgkn}afFtK!3_bzgmk7YdU7`q7QuO%*(P1uLhyjI^oey_wPOeuV`AUfTYCz-gR
z@hXZ6zVDvXY1igXVI#m2!A$n^xH!K4Ul_whect@Hgd71`!L5#5QaUq_m@YXYc!qP9
zx(Kjr+@YBp5<7^UpzS1-?ugG-ocLFFYdzI~9}%AnNUSxtnPAT(NQS%`m6lDLJwkX*
z)-WtE9Q#1kV^M>%nJYj=?md73xyEgF2LUHtRH1Y?FBHzPsuV2(W<HCZS^XMthHNwg
zF&Abs3Fj&Nif94stRJu)y;&f!N9}wH%Mf#pfRDQYE!9b>i<sT4Uomn~56-aOnv{r`
zdaTL#6j@s`%ypb!Ff~dFwATdTPzOFtDBZSEVbch!eo7>k#VO?WWk>_g-Zy*;$MRH&
ztcSG#Xm|Uc|NN;30PnhG<=~b`c}C{<1q~Kysu>H7c<$3I>7L-3HiRI3e^s{HDM>&}
zOH%X>p?eF6mrd|^pq(~tdw;mjSk{V*b^<=}xsWp$sNHCZz&}*r!Wg&r7k{jKB8y4?
zii`g01|4TeTs2HEd=@ON+eW&=Qb}ApO#?IsTT^(XC4#1y&3|}@^WTuyc>KLiVeK``
zRm&FX9yBk5P3Nj;&>E_kmFhLsa$}6+b)!Ej(34YkmOumcY66OTiv(jsi=PeJVVKi)
zN<cNao5BVfdZO^s0}`#pJbtM~j~r3Pl&Re6U8*i7NONf4fjioWTp3{Iersx_4-h>9
zQzo_7`t@(j0Pm95aq|4{F$?sj=o55tx}7b{!)UKG5({(lQh+8`7;SRl2sH9HbSo+P
zKgK&SGy?>qo9X!U=6v}czz`sW+Ue(ZzUv@J_r*U=v8+L~gBQ99DOz!N<NE3KUIqDZ
z8fX60g*w@(sX1qc^%kDkOgH~Vw8|7(Ae6j+T-$W%rP??`S&zqDT6Q1Lq2}DO6Je^H
zJJYIOVo(zYh+wdj^~1lD_q?#KRj+AQM0~CZ%B*o8Wir`=BoW|{wFtmUbVM^RE(?A3
zjM+<%I~L)D0j+sDA#uM^-{D`-X`ieHPu;Du4rtx*<O|R0L8;z|H~2W{$So!S@Iq?t
zcD@8o^{%X*PRsB#2lx>KIxu$fbm+3TKJpa)l(v<JQ|J`ouU9#8aCpTz#=kJYrmO>;
zO8!CNH@dkWLmoS<R^cf;1o?)P#|8;SAEF?fn^ZG5DQmd7hY1LV#g6KO3S+`9i*!HE
zToBf7Lpw%p4JMeI5y>71M7Zz`4Vn$k@tpnDmYpG+S1T-bup0ghv#5}TMJUkr2f#ud
zF{6)<d-u|qMnwZRd6$iz6g8;DBo~gANe`sB3Ji{sUfM`>*C7x;G;#{KQ5~0!o{mEh
zN`PD?PiX!#rjco77T?%Hc`-9o?DXmp_7w-Ys+|S<g6zw%k}5bfa}?7}#M8-i;pv%Y
ze0PE{9$zoppM`_V*pLIH8`a47rTMZ{n?{F@eRHJ+p=G|Udhfa*G>$v_z&OhF$)bP@
z&`N4_>;8Gv5*Ja1EU7P=%|F_(I2_5p-EVZK;Ix)r>oR@SSVw*+E{nx5_c1?ZI*d3Z
zU`0SYCa2yndmda>hv-ej;#S6;4;rgo*CXD<3DOa#z0Gz20+d55l7K!{|1tG#Jg?J>
zW8)}o70;C(VljY0C{8EDoUKfobjo<jdPa=7!|Cwz2;R^>1Y#UKS|bqdg_bi=SU#92
ze5W!MC7!(9&v?fScNj@LK1^a6WsO5@8q3JU3m0Q2xLxzooqEg1OTDg&ETb7$#B49h
z)W=`GndQ8##D?<LxYM}<(RS}jZ;s&e5(UEFl)%-q5*htlm_?$tK~LBowAkjh?c33F
zr8dT>r?68N{w?5Sy-Btraa|1MR!-TFaY*>@WW<IexMnOcn!LN9cA86Xm7Z0U#9>xI
zS8RRU4v8locaobyQIODpzv$PjDO-^KND7OJHJrYSZ2fkwj;k-+=>mSz8kikdNK~Pr
zCS*(1QiqH=11i>0@6V1A!$Vqwg0EH_ci`-;3QbO3VKZX>C8jh)jY1FwY`BG%rj(EN
z3+v>pEF6;|clsS)2oJuRej+_G2Fb-qjCm;`rB0tdUJV*5@5|LxmSUx;N9$o^-*Thm
z>qHYu^YkOe+vqbqMoeG@vffpVeE4nV^3%}yCxNq#*+?c;!KaUuF^l%F=e`h18UW?d
z*Vn0*%rR9PwvN`95<KfXDrW+dOLaRU5u5p=ER8EMK5(XJK`k30nThvps#}%FxlT;J
zR8U+VjF&<)T(;))Mam7{;zsW4b3%$30_;(_deC%#`>#`+M=SopgRCL0ZWozIJ7$W>
zrRUobND2T85-1bqV|5sFEJt{iY-fTYX*3rh7tS*_!%c-y@8}WJ*v{*mOLDxYbdkmL
zXapYDYKRL<<&Uv{xFg*ZOXD5nCVJcjsaZr*({IzC-cVl6iHynrNUZO_oog#7v2)b`
z*K9vPvaNu?7yCKEfj4Z~QMzpZG1Gs<*;@uoe&f32<RJoH?_`qI(*<5W$KgxfAWkLC
z%xj})>lvtZ{vnDTortnLBJZhLIyySjYAFj&y?62uE)~b|QTD`ofgln8DhgdTFiEFV
zad4v-><h71t$qe=>IDhwYB+*V-VhZz7Ob*B_6=TWlLlzrc$g$AyAj3ERQaVPT_>{J
zqdBC%99>^1g_R@M{T+<$IrlOm3Z<l-dcZP@!O;w;Xx!1ZYp1dkG4YnNYQ|SEoFrfR
z=M?^L%6-k@>0mQkc`JqDwJVwWX6OACZUC)PV>3)LcFRN*hhSSSGn*V^e}S#)9v*!7
zlUir9xmkXSY#t7}RMr|P?`mz_FM})68IzCFLsSef7P+at(==tuMqx#~Wdo@dHvqNO
z>s@26kD_!8jMqZt%7cWJIKxss*zW9)nl7Iy09$b2r+2^ILV8F<z@h`a$QG=$uzHHE
zguaJ~WciHavnECvOafXq*ULK41V?=RN#z(qPxo_Y_~z=hw%C!5*#OMO2p2=L5i9Xy
z8b>1J$^qye0KFq8%saR@!AQ4z3N}hTp#|yW^6c{me8l@@XFr;0^o@fxNT_-(j%;@y
zr$wu3?Cz6K-qhjN=bDIqtnjJy*eaCIL3rB#@<Wlz{8EInW$_=t-q7%Kx2(^Yz*xot
zLNY)6J|yo3Yn1(dujrXBX2@_kp2JNLPRuGrRvLo|+Ne1=F5ItBT{?EXKMD0uh9eMG
zrU&P&?HV=jc~iWl4gAFgKsQo^0}`JMVedS>C`OcYa@uWPnousE7YeU2toVrWBj!dC
z^afYCpI$aUEKa<~D~pf*`DjG)RVZUez2|`V>_&G$F!h0h%eSMm4Pq)D9Ey7d7vqVn
zOzh(fc&-pr=zrbEKsNseh5CAwcJTSlv`iQ1`v-^@rNHNxrP+?(Q|58P5cDv4tlT0>
zKJm`3_Uzo`qI)uS5L_0zUPBi3%J8N(mZ1T3kXWYTF6e(dF8_SBjbl9d9uQJjd-j;;
zJNS3mB#)uSUuVF{55wy`w|b?~*L=24OT0WVuw4~S&7f9Ha$Rg~b7y!M7fS$;re#Yj
z>=bzx+fXuoxpXdC#&_l*ratrKpxV69B5O5U^2y7(Q_WNp-$+p`H+e^+DGCi<9a$#k
z;JojW&YEZr##0{9oY)*KsN0)(D?79`UAKX5)Ei<KA4o;B;wD|*#}+SDAXXfa3txA}
za1Aa7_&Nh65z7Ezz|CIGfs)VV)2R)N(H&?m`9r>IUT%5u2~Vy}95fa|cT>ON1ta{1
zTl9F?nt+EqvXtQ1>;}JMC}5Xc+Tl*OY-D8cb*&!9*?2g{U*7A^!X%zgRX^0lmF?i%
z&Q~J;Q^EM1wGn93w8LQPSz2*>-Qtu?9+*a}jN$=@9mS-OWfwrj2Z;H2JFgs*jp6qF
z7%7wCbD|$aFGa&@Hb=oCCaM^-hjb{I5;i^{>#+#HvctHpeuv7&??#bUBTL7KUCXVA
z*=nA}R<i^pHyf6`V)d&^MQx<XcR01|(pV-yTh5i;Inf3a+6HSaVTg;2bBSRej!Gz~
z#}EG>ubm|wuz(GeS-t*G_(O#83!3ZUJ9o!%E>_I`+?Qmq!UZ<tR&FJC#~?crU*aXs
zxX6{0+{~B!m1csSbQ&}oCGcgye}OHOIl}dh2ba}QCo)-tIaBOSzAaJDdM&^0rddv*
z{wIfdzzk4z{-Tzwv(FS6LjnH0_!8_IL#NS}-Tm@Q_E*W*LrMmb|3bhH$*lcCw!Wi1
zVzYP};;@<bwe2{bV!G7~dd%6m^_@X-oDdG^1+)lNxYP2U(dudV610AmA9Iphm}*hU
z5d8Ut$v;JQ%_jf)h<FO+Z?~057w$(2nHW|u)ZFbAgI7mk2z~T-?Ajm6QQL7BwPoSn
z>KN(X;M{CIzAYbbjK<isd6ii;ETtyQ5k`M7m{QFHcy&wKn&Nh&pGKD<-~OyDOU9Gk
zf0jIXdUGgUdj7AIgkgagGJ}}W-}8Ml2(6BS6Acl<UzKArFr~Z3;dy%4eHFQqv0-MI
zcLGC)|3se%&|Tx_1IC8N92QUcUG7-}5zaD<47Wv>xGDH<_V76}w|t!rF9D*#g8lIo
zF`g^Q9A~T^5)RwQJWNIll-chqOcG3p{SLEzFg}y5$J3TWDg@uj#4&VBz6^R3#eLRG
zxHy<g`&7@sE5Qle^|bF_-(W)w>TAAaGwR)Rb3B<I1IJos;C@;!k41~g2n92Jm5}sL
z3k_X2uo5-tWTFXO9y9FW7Ewdw{;F_Wo)KW|{y%~Dk6VeQId8EInohS7I&hAocMePx
zqp^6e94mB4n$(@ww*E8N$Sy`RU>TWn>!F9prxMhWIr%EN$oq0yMcsNx93yML$hex|
zO&Pb@sJg-^Z~92PWBO{%n=HK&C(=@ipN%Uri|+#8UE>nH`n_bq;@sd68fpBe#mMT)
zv|Sy+#C+Rob5-svLUEvvG}{D8Z0ak&#HUUpXKeM~%R&*&T>7KZ+D{RVz5j;x#z4<D
z|Gbzc$Iz9~p)ln~9plSlLHfm;?-b-eKX??Yr1q6{eeFSPXQhq_vY>=rNpZS4n~e*h
zzr%c}`)OuKvDW{69@j_zb1Ilt;S+aL9<He&{rLKfiWrBhTMmaajJ~22zOpj~74C94
z@|<$S;-r;VQe!N6Nv{?gC9hE?ao#A!xVbka%pkx4lF4WHKSR1_aD;sAuv>9f4FZ!B
z7h%EibC_45h@>G4cYjJ#^jjii6WhCUmLQ#bHQ_4tqIan^dXtt00|~yl6WNM<s0*US
zm2RPx;lpkKJaqKnm&|!O$yv{lt~Sc-dAN5)BFif?TEr9beLvtGT+|X8FpuIt%V-l4
z!uS7$lCXnurMhV^9Cg4Bm9Twx#~@(7MP%*Y4}f8pS0$RG@WuAB`98v}HezH~EDpPo
zoIMM!;t-!I=&s4wIPcit75lqU{gZ#lM{1%q+-`QkL$M2c5QuOo8i>xJufc9*R5>f1
zqkpMydVD9KwWo3)Jg(ijkw`xsz@W>#M`bwors7=~ffge?upBQ9=fDuFev0xU9A@`2
zOSMV*ymJCPCF{_NU!D9%^jV43{YgBD4m^MHczG9{Cs%zYrb@Fg-dVU^>pfF9QoWy=
zXg16*8Yf_9tuUfCE<H9;no{S5i{YhnVq*R&<M;E$FEW3B+M(`ebeSFE<!@e&pOO9U
zL_e*FL8>|2;Ckv2A+CM5K+{H}7ktM3xnEO${wr-C`I134)W;RJ`)R9p)1g<{dPCG(
zq(#@<88m47A(vlSnT?Y3y_YIFoK8+bp{raBksv6)0N;On`#^GWA+NXbJ3p24o!I#Y
zL$eg0lcxBJp19Jv3nb{M`)n`k{_>@-C~H!1rNMkjXE(y|7Frs8+n1d?uwCzHGk{JC
z&0n67#?80`2d&y9x`IKU0~8(0swtdwDs`AD9fvgga>8iFfL*NDY`8V5v~kjbxl_T<
zbtQ_`J!Q3sJAI7x^?GxwjK<x1U-0%r2BViEek!|87(LOp{6+1j82RjX5nuiyd_Eqg
zb5eU*l)Ov)X;h<9bu2~$BIckb?f}A(X5}uImJ|UpuwcS(&c=U+S+a59zFElwgH-%F
zg(X~<bc<bf_3^x=cc1%p60GO4{tEHa&uyc(akv;-dyB+>y04}7Ye$iBCm4mAp75rD
z$dQh~c7bpHJKH&-U&+L1Q<E?}I$8i`i=sb*G5kf(e7$QltlyRK!C*fjqH}L$(nr8T
zLVC^g2$TK$&uI1sQ<1CX;AHOcws0VwW(?t@F**zfN;%5(7$i*9fht%P9*2iX#@^t0
ztzVo#3`EOYT8AoxJK3kT^CSyV%tZQo@<;M6P=gHA`sjqPqz5U$KA;Ad`wn59e)2*G
z{LntDCQB0-;a)dL!HkzmT!FcZOv(c0OXBNr`^4zFz6axa7_`K$<Gjn1F|-yiU#nTD
zBUx|jbdtfGb~Hivn7Vg4TRU2TS;p{3;~)FM%3tb^4IuAQk7{C+%R?56W<W#Ci`pj2
zuy#r0Zul1~1mR@ZCT?>=8#q>U3hyq?%2fAUNLbvePQvvf)TY;3Vc%;D{94Ie5*KbL
z+Q&0;s8%q2W(WHb(GC>U3LkNT_o<7&dDQ~BlV}xhw=-Y3Gj-YPpLX1?snC#4v^_8S
z87ZEaLSIlLwn(vdM@WL-(*9(I`LPVM;lGR{Ea(9q!h3UBAkLfj!Tb%LOBm&V<-21|
z%KfN8$^vJ3jcEb<*@u^bNvw?{5y>!XQo+a{hR}K2q3oRo$hPP^ir^WvzcEK{!{(J5
z{qg=PYGTzMQ6*0SU6z!}tmoT9TQ(!iDYbeRKilZ5D*5Ndqk!bMItiQSsc$-LL)jcM
zfS<0@l>evQ)^<(AJcbCt#mwb`#3z^=EcYTigzMxn0M>Yo*KW0%oOJB>@9~qza$p7Z
z$J{Oec}nEsU4^tF2=$ihi`~ijh^HCRYttuQCc^j4Tub#M6=wCj&4_DrjQ|YIjd(lv
zWE;n4m&796s@6npDG!J*s2t$98>c*(89ZO#niPWTAyVe<io$f_jF8q5fNUwNAWv<h
zBj{E;d5u5oK$Pkfyu+I0d}iQcd&5*qC(_3?c=D}l(-sDlGo>ogj{^NMEF1k%)&hPZ
zuG|5hPF^0frfX*w@R(zpRATt85Z_NH$Sv!XCQsQp&ff=ye{P@vJwU?0unSzI$FzfY
zcP?hM<wV08c+<|eG32VFw<~?%YNVNij(B@*gmj=k#PAH7iwo}KG7lXX?s`grn}^ou
z355p6lH(li(&48PbB{119&Sew5hEKXogeHBq}_d1OyzCAD>r9cQOFYzyoevlhq%|+
z^QrY9i#jm4Te!aPes>#U`GL%Vd%T$KnG+(=M%Id>$uzoAYd}>H27#iYr6l^4pK=wA
zr)U7{pOz0H+O)#DrAM;QyRJZ}-cN7(q*u0U^ZdnmdBG${t<cG0i>?#E^c(3&dSe64
z$F|43UV0rh@W9hEnZ3{x(76OJ8T&FbNmpKO1dZx#4m-JQf+YF<-clx62LYf1A@^ft
zzBgsY#%(hZc4)qfa^=`|)0T#@9|Bs58GH!fmvz^(aMX#M1YNw~Dm3btAchcn|8{Q_
z+o`ZR@Z);Wy)QCPMWJQ!Hn7ZV!F;c@ZS&Ce9iVA9V9I}nm!yaPGv^33ElkZgu~rGJ
zxX;(BCtzeZ_P(8XV#|kZNbHyCjF3skUhqVK9bD)1)rVQ>!N*pbcxAc^GA0vkrmbR3
zAAqymB0YNV{5`R;u<jd+!H$-r*GMtJ$V4AY-Jf|4$HHtU)@zD1!+^EhJFY(5595YJ
zrE(WGG@kqTQEYGzQoaKe;kZ-vV0{CV@plkvZHU9GC&s4hCjQ)Mlm$dD&y!NY&?6c=
zVhtzb+l>^GusISdJ?O>T=-is@QDL-_|0@A#wWgCLB%tr=xfYE|7wqvcwzq`9ps)R`
ze{aARy?t5dRVaW^9J<dxag!}EnZaJ<c;W6zaAb+D4Fpg99WvZpD?z~5w`?8DvAFm>
zivD6?7<pC;0Hy(JYJ*p)BE>*EB)b;rAa&I61mrdU_eZK|{9PP?h=KOh6*S*OG8g%D
zQPkVSQA6mwzje~IF7c=Yk5zp<;lh`sBH_Iyw=ihUg+b8+BBTYPhf1VlK0D{4c@T|6
z?=LViTNy&RW+KK!*|mNgwGBOO1Uc@BpHp4woY*=Nr(LaQ@sB6Y7t8Bbs*r+fOwXVP
zBY{X46;ux`z<cOcz^7c4j0xBA3YJSFaCJO6qxXTJEm>r-cZlSddZ}+<{@O*FOBK=X
z$eInS9ptduuYW`{A|aNe+P0jRI|io=fToR<TRq|Q2^*6)?3+wk-}73hom0Z#KlIW5
z=%_ZP@*IMU2Um($c82vnci9QvkltpuN#aIwqz3{o;|9}!HG4FA%-w;im)lUcjS73}
zde8ODBG^d?`ENss$U<SqJVu<caKwTzBrGfiW?U!Ic!p}gAct~w$Pkb>-Wa^f`XMNk
zF)2RfPkl%eI<rNy)K!1RCLY*uU&t<hFEv+hA7F*Ym#Dluw%z>=7}NwgSLag_KZ9St
z-~*)_#$!`mQv>|XN*!svWbn5W^oH<Q$ltIEw6Z?kMAsS)Zg|k|r)U+>+V|8R3&XQT
zPn;e$8Bq<&PYg}&RT$glBbU;uh5`QIUJrr=(?rrky%SB#q4)F$eepG(H#&hA%8qz8
zyjKyH7C+_2=1q#sU0h@@d4!#3pyNu_Cm^=$fUDISyB#q$h%0qm0S%;8kwhq@HXd2Z
zLhu3J=>=z|A@kV&_nwsD<7UbhSOzO;u6jZU_KP9M@M@i_q2Q@%!OV~W+IGp&d52O4
zhp4w0{UUb$<$?)xIBRnm<NZJ(52xgFZIBilr4I_YKrguO05&4UmDWK8FuUs2umz0j
z^iu>Zj4(d+eH)@(G#X+nR@Wh#FIj7*h)LC1c6sL|KkS8Fl^dxL7#V_Tu;LQ#9*ae#
zbm(Be;i21%+2f=U<jtIIF`5Xc2Wfu<#zN907&BT@Kg+hl;qM@D>U+UbzK)9Xx8s{v
zKCfs<Kh5G{70s)Y#<B&QN+T_>CHKVzb)SvNvbvG(A+jy17Bge1$sYWOlChq(i1L#T
zv%IrfF-bkq2~uc7rwR>M+hD*_<PH)v&!u6WxRjVV19MbYbz#?L-rVB`9Y!N%!`p=k
zm0hgdz*jAJQIiP!yQhne{WdV{{c!e{vhG34K4PbuX;h?#&+;^eObp1kB@8}tG{?eM
z5|3)qL_R7$s+YGzmOTG}BI#SP2wP4~ueMgtjADG^(cOn4Bym@{G*rMGQhShe0fSUU
zMRSYFzPStN`9L|C`~NGsx`9RES|Pb^p8(M>IAOU`_nf0{07k`LTMdk9`*bpN-WUBd
zaF^*KE6*uE*C@`#C+nnp%!LP#evh~Aus4|7Rnj?m@t|;w%mBp*J6^DQIHX`Y_YM5(
zwaNiDG*KAW$883M{^wxlq)4E4<K<Eo1bWkWZ}3Ia{b(C$(-1oXVBn=qsD#i^2Crq`
zS*UWo+vADI({x$yn>NqKdXG%Z?iu2&za;T>J_KDWX(viP?t3iyjH@Mrgt2IXOydzR
z*_{KDC7qnrE$O4yGAUpSj`_c7H88{sFK6s?hU(GuIe?%5)Ud2yFBfZ6@i#q?7`4}J
zO?gJ9KOH}k9p+fTC9+jiY)JbjNN%5-jTBmVE+wCKCt9+t?#R04hC>(SB2Xthw<dg8
z(2+l;=H)hH62~UY=sm-jy~bXh%MEyxtu)8b5OH5`x6!tlQNoxFCw33zx1e0<mV(3E
zyJ;VrG2Z6nsPKMsP2VmOd^2lUsvrNIOZpi4LKK`7`mFV@*bYJ;Pee*((3y7AH)Ba9
zLyH7*l62_I0_;tblF7;3jc0=EnKdmbpJYb{$eq_kmP`;}RA&NxMK4NO2SGkm%|_T?
zgVJQkk*wzoF;bD&P)>dTNp=(mwCBK7Fpg{Sf+5y!vhd2+kuhwjN)=QS(d)$XshPc>
zBv5ir|A0||t|zZ$9gHmY(DP#^*2!Glw3Re({aXqZEF5wdtnNYR(oc*JC2~k89);DW
zTvcgWMAk~&`x49~?X=7~;gBmFd*-1)@iC_vZNd8tgD+I%<5g~?sr6C95HS`*puyy8
zc(MEB>fh(inU7cbKn&^S*AJV0h-AL$!n~kMd2nW}lVTLe$#f+Kq%W53>wI!f=mY_A
zt%=D|)|#z}u@=^1VCBh~I2?GDNXMs<3ZccA-AO%0Qd&)e=)n)8>V#_9SizSY>L?@?
zHIUK`<`pziq`^_C=D8wjnT-2m+`uA+;v_4(=m&0!TO)3ns|ab%N9cB>w=o3BJ8&e~
zR|ZYN1-VzDXAG?R)B;Lv1G0Dk8mdXk#ND9%J0T<XxvnMLIITzGdi;RCyhqof&-TjO
z__tNY){e_;VciDI5<IvYNX|z-oylM4>ZW<U3cyoP{k!0Np5msajejvfv~g~#Tmq+{
zIYwjRhX6e~<l>kODN<hHOEDUMD!gmNe63Uao!%MJzq8{(hBCxgpi3&tat0A5=QC^t
zo|WZS?JbWag-BXkRuPXuo-zyU0AmQpKIfut=zeN#Z%7p_%yZS`$zv2DBnQw|`GZJy
ze)G+xjTH|@hz?Yq!@>lT@%UJ|9Kf_?Nd&rsGRW9;&Wrjy;IT!u!MQ4af#lrfTF0Ng
zZ{?i)ISxLTBd5DA=hXynto+AO>J|pJ^`)J*&?d8;n3wyFP&Vh)&7poB1;Md$a>));
zxOk?jA5QH+fkM_V@cT*ZB|M{$<Vq5cPik$Y7ErRbHiZN&=i!b{>dTgKKCaPsoHKbq
z|6U!}?ueBFk#s|)+8$#y2d-_$NM2(g8F|1JAS^b|vsn<=v5anro+SI%yNEj&sM`^i
zdWP>PVJoKXvNe$pbb0*p`&w)($dvcNrTXRh)kLI_bR_8<q2y3Q+17Yjbo6xNIYanD
z{`~3MWFA0}OG2rTHdms1^c+o!3CZj^sj%hC`8GaL5^Dc2q?G0Ru*h=0(@6CPE#CT*
z5Ty077^8KJ#^^@-_LN=mU?4HQqvzQ5ZqOn32*dH7L2HXQf8v9wEP7o}s)|q*u||d0
zr#;vw%?HGgWa|p61j*9vleNHc4EFrsVX~bK8JrH8c&^5jTK^{B<X^I#1IBK->k89C
zRP7e2|M}w1uiVZ0wc?)CcbBfTm>j>}%-C_J%taYS7n@@5*+dMr{&D?z)ag{5!ovAM
z_Se|a15~%_*l5cQXae}NHaiRZzdG@bN0rVS-CJZDuH%xaE0^y9i=Zq3r;4eo7sLE~
ztKBIneuXyX55BYQnk|-HVgH&Rj`>gA<pi8a@`9+J5g*4RfXV=hL6vN;+|-tP>z&;T
zl`{Mn=)YNa+Bd4kS4RBiERLboUzfAR3ycpY^rb1`(+3=&8L}Wl%;ob`W1V9#FCq=L
zLKJJ&9hO=z>WqBGhq8;61zB1BL%I73rs_MDck10b_!wWP4#0L1;yzQK;IE5k0f&8d
za=UKXZNw}3g%zVd7wZr5dH!fb@*gOUvd(i0V}yZq1Akcz-I0tmoX!lY)<m5=k<k8N
zN-awtjxANfAy7b%++j01_Q4@-EOKA(hfo-M<(v5#hLcl{0U1?8`NjhD26dl?gnwW<
z%j`DXIbmSbNMjSgLVf{mSXhnjwDrqGzBuNit~-eCg44g*dd~$2ZQ;cUN=h+-SqbTL
zrc$#=j#(ZJ0jCilGjor9RbPS<yY1L#z#cK3>x$!Mrx7&d`58@dx4jSG1p0|aSQ9$&
z=`2M^p|vKWpE-!6Ezbhw6K!1PH358tmZr`f{qnDAR}59UnixQ&rKq%NwLJ#xQirca
z-?%rnrGC;5u)2ydlU{sj6%i0nNsRX6XKy-CShy69ptuPBr(c{B*?V}*?Ntt-#wVu$
znElK7n9E=E)LY%-TKeAir}m)b*=)=6gsBbi(nGk<*|`s86wFoy79FnRIni{^18~wf
zD&6k@l{$sZf)zZIm_MYu6U8!M-h9s^5+NyuF<RZ_HP60<l-{U!i;Ga}fF5Y3A>*dS
zS08N&y;x*+ei+@lL<X7Zb!{z_r<ryhoiO42RyB*$W_-PZ{}RMA6l%)vtT$BH=)B(_
z5|~;;P*Twl17jD_lH}i~_$)iRX04g>JamS`KzJ$5giHj?SqhgqN|a0`hMbdf1+xzx
zvYmS$a5eIYu}6dF-WO)%u`$sd5HSt4f79;QEHdiGi<Gp6b>Dk5$=x$IBQ*;8%Ut)@
z9TB_u!~NPtxc?(%H@-D;i_z6t{bc!4hFw8#-}30}7ve1^Hb5KXg(L$OXV{eLf00q3
zNRp)wxKSVA_viXhxQ{=XXR&#q6~y`q%smtd%+ySd2DVhPpJ9uBK0J@KYm%A)){4UQ
zqX$rlMCYcLiD6q=0Bp4$_Ut{UGctQsl^KA3w5k}+`8ZFB*>|P~CrI){t}62h&s#X4
z#1u|4KEZyf)iD!a&zUOTey3*p4Qkgmrn$FnetE~;T^SV{=u<}f#5(qcjS+v3AiSwk
z_`-!2r49(sLA^xN=x4r<bo*g?hwPycip@;m-gVt+<JLI@SAQg~*k1)?d&pS#{z)d)
zc`^Njg%g*Xs7!M<Sz@c3KCcMbuRPZ#<uc4;j&4-q2TY27vC`D0qwm)v?uA(6zZ$K$
z>aKXRmlxfWk710NO!Y<I>}OABH2In|%vt*$ZaJ+#VHOQZZed%*<Btywb%_x}M?l(y
z7bLLC+wepOrDRa2d1LWLH9|zUaWklQ8LAKC8;bGiXR6ScNd-TbGth9M>{WTJ?p0L3
zxF7F{gvF(sU=SLT3#4d-l^S;MZ<{U%W5*E-qi=%S=LQ}+_9=L%@83Sb(U??GKAmXl
zih(;#x|yGrq3PnTvavS+Mii(84qsiF5Drz6Tl$lU$F`F_Z>ss`?`>jzX~{o59yGBK
zu&oQf=$iR7#$SIkz0E)tW@kedNk@^LEwNH}Z%l@aiS1K0*oYO#hMc$9|8FPI1(a?a
z%0)z?c-@-H^=FeKBRS!(=9LpD8S3H?iH!R8?qb@kfIX0OEjw)4D|7}Ln)U(AkSG32
zxmREnG3?m3@gXB5Yu<f+A@c=30EQ^d+^BVs6B~FoUk0{i0P;l@xjVQ`?~s7*^5*_<
zq`kXy&~vivX~3N;QtB|>;4<%8!D!MUyJ@A-LI|T1+6m`CKY4ug!!SHiC9B(3t6OsE
ziO!FAkM^t)YkH|iVa1crxoFhrU=_1!@c0>1f1$5kPMFd(DysCzu%^k)XN4QUH{=hu
zwMiqf%h_UEaw8=<(9?ukz4<u=4cP%h1d#5&G1IJ4AHC&p^z`lt)KB06gf%-&#){_>
z5f2%PJY`hr_W@sZ%j!foyg4UEl}7V5Tf|`tsp{KZ&D_x;o&5{i)4N`86jui9^@?>c
zKLyQ;mE**IoI`+PTcP1-^<zp4)+wlr65hR1$eGs@L10_ZnY$HFs?Q3vzeHsybMhTa
z(kv>JKi+$WFzao`X(!Bw&s#XbQ{VIFui2xa7mI-v;(x>T1)5<5v4bub1G4r%sft6s
zHp;tqI&4hP-UF5Z%M*}L`u}-)ANVRjnn2nb!ZHGoboh{i|L!9H{I#?<*_5K%y{2>{
zqTr#Rif-+j|GHw2VmQ;k28W$u^Tx8CP-nw;w0dp2R9L|`OCl&I|CgL{95o2_RUoTv
zISf9ci8Q<<LR-O6^Bu3KXt{McwiTH@UL_hu1oJ+h;o}Tr#{OC?X+%>zarkajxgoyS
zq~*t@@-sCbdweSK9JIQ%-+gu|6lh*BuX63vaqsrh8AJ#jP5K)e)Xr^5oi};NmtrAC
zh1u^9cSQUVB}V$SUzFll8I45w!F*TPMWpM$1Plinn)v$`5cP}#P{3(k9l|}N>2YF{
zly&)cM^Cwa8wYq<K~4^W3tHDsYk@?MkV#L}?B}7wRr$5z>Q0?BY5|rjORbv8MZ^M}
zI!lv7Ngqq|KsU_`M-FQ>B!fA=9%knPL49;2ZR(AJQ{BRtX<D28pqwsxoB@A7hZYQs
zS%ljs>obj}o)&D=66{%_t05S}s;pNb+xC=sode|s6|I_&n8~`-k8;+>a@VNKZWd81
zGzK4z)js(^bpsaI3hSO0G$fJz@C$}*Ek6*$4(~M-TDCkvDKvRFi(`G$<M(3b)1X%)
zmzU`yKi>n-xC3pp@1n;GjVVqQD0ej8H6x)gr@TzEqCKsghBC%}z{WeMeA=5#Tdktm
zj@$-hr$}K0y{Nj2CvpaUVlp!&SGN%tx+4dYjhPRZ3MjO$jMjCJ`G|hIY*<^s#W=W~
zQrBq{#r@0A9<ew-8GW=up{ntD1oBz<VLAG5=0w>?N095t#lp+|{TsgdvJVWJ#3aG`
zJM!S^V%afKeGOTa{K{sO#f6g3foSh2MMX)@%1b4*Y&<EY#qJYw)qu?tCIRM{g`0-T
zPUoJXG^yUF_5?xbq43=nI9Kb3nD!wx4p9u!^&uyqKjJ6BP9(#ay&`Wbr9gWGO(9R1
zUVDprK)yg49N3i`MpXtgc_f9Ds@+s~Q_J%JgXSR&9`Pbc*=0QNw6*wOMnb(JQxf4W
z6lk=Q^$d>9y%iqbYkwN1!SD$2v+;$EhFJw)u;GQ|M>pFV0s=k^CtTLG*oycMMN;n2
zGNvC5sI2h+QfClK!`RvQ`|vTe0wWh;|CC!9Sw4B~wM(VQZs3TGUYFyLR^k1gylsco
z4N3h#{JNLmxEL3Q+j}M%XZ48^|Lh!s9B=(KPt`oA#0Mir1J2vU*YXyfgEhk?eW7Hg
zRduF1=9=)N-*8R^HLmx<=kXP+?c~(=LN2un)d#r);WvWG5dI2U@L~)&k3QwHf|Z?%
zdINR|TGMf|5iOIv7Z>Nn8O{5E><9us`8gTTscOq3xJYx85)bG#s-boD^y(aDS4bpY
zRHik=S!W3y)e~pt?R8+1-Ux{_Ubt8shaO<h(6-5oP=@{yiS+9>8*EoB8igSCF}Z)F
zvs-7?IvW^ngcR+oxpKOtusTB>A5?QnygN_=$`b*-w%|NRyA_z(Fvnw<T_JwJ)v7BV
zKq=t(6CKstvjv~~>gKy<&1e4kUFW)|Z}v14pJ(bwfN8;S?R^}x_9VqO;vW=e<pAXj
zFO|anZOPOYl_pCq3#;;mbs>S(HsU-KyBm3&t6^^3JDO_6tyES|e<v)KWU8d$wP%i`
z1mz|e@ihkjoAF`yvqPRBri;i`f7R!`_gA_JQ9sdmns*a{;Bteam;;bIJd0Y%ERbOQ
zAxnQK9|Y!y6qdo}uUO@?u!<zo5cm;=GQ450@N6Zw_|No-EPJ)0G{QQDLDiq~Va09w
z99ujeIJ=fU2yf-Ct|p2FX3<LR)eEYhyN!yvlz*<iV|DqtOKm;XWdIzIsj-u4APEjR
zrrU#MbZp5KV!=Z`zicSfk`R-xyRjP;^%USBgj-w+h3mOY0u2k}w1aVlvf{D#w$Y;%
zgRO~@D`uvaz9cy;S+}1R?_<XJruZunHjaEWr>6=e*vqWXCu#o?3ul1Pv~v@@ayKhN
z?uQ>w{0K!w5`R^2<=-^Jzd(8v1ARq$VRT8nmqSq}Ndfot{CRF`3U4<*rB1@qB)K1q
z#BA`xS=+pHpc~bRjwWvjNnavYK#x^;qx2m|&%AUnNrsP%h)kN<8%r-op=KyRXO*nC
z6~XT6$}>JCvmme}QsgIyU~W-x_h(B;Zs~L1F~mFatCRvs&bM%HRHp~*vup#QfR^%<
z9v)1DB~;+l_^xVtSpe#f_D($h-o%SfKSLX&-{e<#K6qt(1L_X?6v(mmF)^8z>UGJf
z33J+~C#DOw>Y)*m0vw(-=FS+GK!#0IeXwK=OwU+7_6LOFIR!s#B_hEhYSqZ_vZj`D
z*qqA!)e8)DJqyq+ZOGWET9EvqDJD+(8!iUfa=)NY`BAk{?$v|9=m2m#+OR{5&}T$M
zBFbyM570>48?8{cR7Tpa%p3rp33^OycBsz9%+yo4hIiaKbh}Vpxo&_JU>SEubzrCu
zC3N#QilggX7@~q<`~p0C1IE1*RriMtnoNdvrQUMP<q1dnj5Y(wU|zri1rBr1DeRvo
zF)i>+sOf(OHp^=RqEx=j`*(*%Qs#y15^sOh>fwOpalz2LETBuZ%V4@OL0bR<NAcn1
z1Eviq9l8<wX(M9hV$EnJ@-Fk|&46z99f~EesM18=R81zhugN-Av$grb&eF8a2X|15
z(X$8SM)u%1pbfq7C+6aEBZk=mwfd#;&ZHBsf5{Wo4_2ymmQl$4<G&ILYi<PK9FZEg
z$z=g30|~Nxfp}w8kco~-pvzc8>v0X*UqB>8`Xz49p36kN_ZNo<Ci^iF`T3LmnS||j
zUKk`ZYQ7lTZwjMsTRwSp+1I;e&AXu7X6>m4K|sYW=;V5V??<o@a3r!g9WkDDB*v)E
zP4)@2FXXA*6Mf53<E%{qn)#qucW!xgX<d|YfFm0ci_pw?hI`Gfk6NfCV~bh}3#0t`
z(I&__1j1i}vhW#E*;i6Xs7to(GbUZ9838ge{<YsX&QV8k!{deqn25aAQ6t;+<?&=Y
z+UCXM43d)h#Q>k)FkJ<7Y9)eGb!=AcV+zf4f~Y*{XAJ1E+D4!qA*C=$Z)VZg{ZL<1
zZANpjT!(zhrb_WL&1#i|zFUSGCdv92On;+RZ4R>W4Axa0hPrDK?l00a?9abe30Q<u
zad;8f#v33rSV5PBf!6r^5fZh4$GU(FpW@b9F+Q5lC4F<e(1<p~gu}UN&5c31kt2xh
zmQ6AK5@P79T-~m)0G1V})qShxGpomW*}_oRwOV+{k!&LFXN9j=w&icm7)j_KY9cm-
z!M8z#qrpR7gK%$tj8?Enu(WrFLE4PjZs_Euw|+`O9osxS7XgVq7;`pG5gA^&4FD_9
z$|WpczTY6uMNA!{3I(j-Zad<DlS--vzy$LkF0r~iln7PkWf0O~3Dy6)3*U8-cqlyT
zc!`DmhW#Iqm5NMIAawtxNW^~hyW%}JCR*T6Gn8(vlB}{-y#3_k-9e(<-)=U%|5uUT
zBIW?4e8zrkrFe0Tv%uPhUbrA`snu20=ZXPNi7gwK4(ZT%Abdfm&cSn?>RShOBX_ZL
z@ZMnm<SG^k46xJ_3mk4ntW>J6g8?#!)Xmq%K(#lOvp#8lr9PXoiMuVD?5C~HM2Cz5
zNaM)>!mx|!g!I)0)iHS(&Ut8%_7M<)t1*}&&(`u)$?C53+)U?VO3IFR+!f_dD6s?b
zc<Kr1fCuhNED8R!qeF|*$05Yq&oqslrX&?hJeQi{770-DR4dVR)rUU=QQ&U2+;j+T
zAzo;-8oEscC}~_bdLy>NmnFmU7pf^y<CyGDRnx{w#l9Uy5#=v_ES=PC#?7}G)YFA<
zv0i7dot^iH1=ES6cQi)b?@RD+P;fZx4bFyh%$lGA3LSGu*B?%+g}FnO-S|BGdO8JH
zXv1zIwrz`2Q*DiiW83ZVZbc~=_OaJPGO=dCkYKEAU^a;<1s~xLS*dx+&d+rj_uos7
zi*WZ#nLft<HPtMC3yWYIIb%9YND0<ddCH80CQV8>5e<)3iyF<*--6dknbw%?2o@vf
zsd=2QrJQ8m6P|&%+_jJMPpe#L?Q!-v`XnurTR~FyRC+JFfUa2hGb^TU5{~Ig%R6Xu
z9-}$Z3?Hjux2en#q0=dUDUJF><4`};q^Rllg^CO=lg}G;x#VZNHK5k-vaYGQ0o?Mn
z(s&oX65V`B4s?}FbVu_1N_xHE5g|6|E3|`lriV%$e~RIuZ}x6Iz8^;gY!_>@Rh^u!
z)beV^bQ`*$;D8eB^0YzJq%?mQCZ{3WKv{z;O9t=%r@1@naO2@~QCC8~>`YlbK&lAb
z%zwn+Bpag1dV6W$Kwi<BRTFh4PhD~)&<%$K$Gez6bHqv4mx=b#y4}o$-c%ikoEgs6
z`;aJ3@Ex6^jWC>&^=6myg7Z*IVcDU}q9K)Ta5KB=dSq@26+d4uu&far4=g;9)LlQ3
z&GIZFw-yUWnj#~Vs1*SgXhnZrm<is0AuRK_87=$kbpRa)YOCZT7QPawOMcQ26Jxhy
zwN5&@2JnH_HhM%dK3(5A<4j(>B~2eMOQNv14qUkg$^JvGK7V!&+C|%;hM1$62w)8L
z>3GZkp}fGg;d}g^?VC=d&rJ86UADm2iNH2dU@PO>Gv|FiQK?OeNiZ=wsN-zP73k=V
z#g5~~JCHTt|Ih7+!J4oS49>lsFOUq%yRz8g(sxzY^D*F}w9weKfr{Pie0gcyc5L9C
z4X*AQchO^LDs#Prf66tzf2@1~^;3q?=z%`#n_ut3o^?h+h_U5b`j+YJ){-Tx^G048
z^!VZzBOPF3Cr&^O#Tr;;^UrOce<$A=s{i++`A|rm3H*c8PqU49pgG_D`qhEKNIF40
z3<mzQg-^*B=tw)@XX+g3GC=y<%0faGQ11BIhLBL6lY%UyeCfy(k@;G#_SgjA7PwN6
z2JAhK+q~20yOE~3pt(FjJt49h8*&Z^??1?HaFX3~E{T-#qOb^yI1E-vN%opt8oWiC
zh^}5$HsCHCQnv4EhJYS%5Y3o-4<xgXKUzGpw-C7e#AQQ?2q*ichuLeDk~yRJ@@(w-
z$44jyzKI$pL)qGn;$fNYJY3k?KDrf35*P;Qf~ud^Ceth;C0cWuTDN?!6h%7hW&5Hk
zadr@EEorZ5-PJBAn%g~yx;vf>((<J?Jk+tSUWV7#PzJfPdL;-`Bc|X<Kk1Q&e_LI%
zl%W7G=Fol?q=(%+8Q|vna|%^et|0MxnOts0NG>1X#!JkC7>SU|GGu})gyHNGnBd{;
zX=Q48u1g*B1KM%Jf+%{LMcSuPq%ci1xh>NZUm&4yf(r=g#@xiT-$CGC)%;=#cg3e{
z|9?eg&p?^tU?|mA*@yRn*-1ecq$T?QM4BKZJCfqO!M#~!Lr(1qmFlg8ZR$jiVr0fU
zEstpt+HPLAsv`2jeDzjcQ2hIGI@3$jaymZ&r5XqJGHtXQ;4msg73~y)VeXX0UAFkz
zhWe*F3+g1(W=xZ0gWqFsqTZvlq~9KiV!-%(lZzWD+;`q8xnsa36u%i4p!9WCW(5Tp
zh(pyGb2>}>&GCLc9aT4CxEM{1yr<CI{Dy@MImi;%o%&Q$h7O$+;xQgrf+FgQFd1t`
z8_qa5AjDur<1)vTba)Y2*|F_O+x|OdtE-vEkMYT}W%vwyszcg-48p)VQkWxkN1u}d
zBJpkmWwoIC(~xOsQ1|hM+ckKLv1kJ-1Ctm0=T0B5o5Y$76P>L-w>9t!d#+c?EV<uD
zQVrD`%TKU^i~-Q$0kqBfDy`AXvpm&lo*@~Xb{Ikl%hMl8_#)y&PG~6HkJtGw?mh^u
zk#=n(ToXsqmfiCMz``2d5EHf526%rb8Y~iHpc2(+mR9$OU4KY|y_6RJbK+pa>s{gC
ziX24}5T#pLJcb=Kttwzd0Dq|FX{+ccPCBoEg51(x3GtoUQ0-YQpU*;vs*%53wKTp7
z38&@Jpx&z{2h7a5KQ6WP9m})<2$NG;6PniTItJo4iAOGDujFLXHit#T9S$dAp{Mhp
z|JObwYjU)>2%wzasVNMEl&2Uj8sX^KOvhg6IFUvhU*B#1VsgJojS**ZI2<K+^GWsy
zD@5I=uC@Pm8sfuJyPkcqdAEwLSZW9J4qq-{#CB!KNJ$CUr|@*j5tz4S-p(=PgFb$2
zdg{-l@*w><+&SbKM&_dUT_Uc&?2wolqBS4Bwl}!}a?#^qQ6l^g2sWbRY6)F&IW-|R
zpd@kBqF-&ZFd$iKc|wI9Mx@)~hBXpJhsh5qdwva6*${}{MayU#C_Q$(8lIDJO4Zl^
zIy##AP|R<}(+n%D1M|m8%i&$}A|l{P$+#4;AZ^_T#eUbVDZ<tDkNToqpAH>l01&|e
zZhqnxYLLRxRiIxJ6EBp96^<055+8FN9r+D?l6L2S<l!P8me=+*9*tXrm$+-asnTdy
zzvl+(ukq`?=MC>_D;py%d301Ly8uto9<aGO&vHqsJ-2(ID^P0o<+$$&5`alsk#mdS
zj8^NDq0MEu+N@^L33qpWkOCil1;s(Pw-$UjUlD8(8QH4{{PYKBu=B-K2aT5@YMaO}
zA<m}QYfebK|EwZwP|lo?5z$gW7VmCMSu5PlXN3)wothgtKeif-x8>%O>kb3R$k;lc
zkHdt0l*gOfvA}<b^ej=Xg3i8~HL3wz1tK3E>9t&42k?c1Z>W+hC|c2pz>{oT(Ob16
z8Yvyv)oM|obJI=*CVEN@IO?GdnzV+1glV=tf55xXWI|&A{!BW#uR8yI?`pwqpElWo
z2A?6@aDuK00JjWM5}YcmdLV|5z8VOz&nf7Yl&)x5d~bkB(@W_3cYq>D*LK#i6v^-a
z8qhiNzREn<BC^(X7DEKxSfI@}|Cn)bX$7zO@7IB>@FELF<JQb2zbGNOq}FaeW`%fV
zOkDpzmc|OsnGU;asLkrbM!1M85QmlDpk3P_a=yijeC3UFQ-dBLYCL+{dC@fMfzR4l
zZK7f?Pg2VGS0Mk+*hDUc%x}O-6k573%oz*k922=j!Tq#_PmIe<^cu<8tO@iIzek=#
zpz^ei1`_guQ!DPkx-DgF)Jh4{DI$YOcLLLL9a8dISBV!R1#X{2VMZ-Kg_fx*yNzN3
zZdZSaKDP8i_bYt7)*o+!uD*IUrT3!;KM~&PmjAWaMwjRi&^s1_H4l$51CF2oyG6e7
zv`NWjpbVD{MRPw#*TZn=P#s<qBv1pU7?@_U#8A<DaR(@}lVU+ms))<$qFIBcOy>RW
zZZxFH0}b`z(Q0HmSav|FY|T~VgA5Zm(g1L%9J(cly*<Hw847AfV(xO$TyRSc7=SS)
z>-w+5sD@c0JV@xt#&+1jib4FZ7<t9XG*BAfm{y3NaYu*A8;4&4A;Zw~_?VusjPw=b
zIuYX$gD%IBA%(Awi;oF=dYr&#(U&u25UarDFe50voujBJenshSjn6LF>SkI0%!dw=
zXbPDStx_MWD+i#5eJB2K^yZANK7L*+U=v7ezJ*_#E;j(pXRD*YnSBWr5M&hiKxotb
z;6;rRDZdRlPh#SsEQDwO=th}l$nOF@JsuZAHdWa|hg%#Gh0y%k2D}SCUw+*(gy4rp
zb#~efa1JmqI+W`~Xz**h|2hF%^AtD^v#)tD5ooP&7-2A|>vh5*(w2BK6OgRvPdEp^
zyLJ3}Cr8-gcD#V|;AI%sPKUp_m6za&8^v0|C{hm;<EV-5GF<Q0+h3T6z>R^I)GIry
z+LDtl>poPLGqycOgxplg(*JBj2+2s9YP^F!5jLD3j4RGhRC}X_?k`fFDMaD3?Y+`x
z54JqV*50D*&6=X&%?v<4UAbNPFy-k8YktaS2M;;?dUQ<#bXv*VoM9tQW(O+fB>Ja5
z^-N3wx-%cRKFI30zzhlw%IZ7UDL}7I4HeydRG(3k6oi4?Q#lg~(|W<Rhh7{mDJI(E
z?3Q|X#J``_P!f(a!*?5kQL>pZn!N<9R2VpKgDkBc<YR)fn*+5uXvLC#%nLttnr#MJ
z(-rq4>oz6lQsfEPL`X_+I<{jM2eff93;|MOoaUY@r3xM94+HiCq`24Hv-V$`BoIVq
zC|90$c!1;`U`Y7zUfgrsuvV_8u*-_Zqt1K~?kGQUt5+{H#km*;X>;A3tw>Ehcm^T?
znA!}1m6_Lo%o5Cg8{J_f-hw;B7`CX_zpPf}S~KElXq9fk_V!cz(2y)|>OBFS%}QQ|
zLyRK&fC6lqkIy@^kHH3PIT%d3DW`sQO*oIK8mFbMPUOJbJ7V!@mwfU65`;gE*2IBX
zF42XIPptkFg{2lf6;-N|xX<dpldt;jw{6;FuNd%YI}1=l$;tvaC}nrF&sO=1o>ZAd
z%C2#N^uVmAUrD&TmUkC~rMy1=w1aY1Y#XI#MsXmSh=mn1kdS%t&j=_^qlyLdt{%AO
zXVia0O{?zQBGG2*MBp?40}FH2&Q5;E%frE|kwTWqXiEFcD6U!H+}z3)k3g`fHqfW8
z8e+=S$>B~X*Nb0jCYnhYQ^<{e3*-m#Z>Of1ABFmrcVTBm0YEo9;J=~qZY)f9hMv2G
zOa6lHK4~s|Ze4e+TeJLu3?;Q1CVjY!L!9rs3qb!C;LngwQKEYaD}+xUJ7v5;nNH+l
zBz}we!@Gc1c95K=z5MQ*(eTe_wHIb)cKOqUIbh71Kez|1J^zR>X+Mprrl~d0H$N9P
z9dNaBU3Uu*o0Tb-FO+h2e{lQEaPAaQ1nW}UuM=>M6G8Yrk0S30j~$N#7{u1uB?+f|
zc3%e?Gm%kr2r&3;+KphajW=pqahnOqEf<J;8>iaY3B;@n%a?w}8Dp}blm1*(P9EL0
z&S8hYEOFy0mx4TY-(lwro@HSdKaD;r;%HAl{AR>8YX+!+PCq5Id$A1BMg9$OewLhm
z0crSn?#`7@wxaVTe^j3TqJFoLWxKX1;fXeGl|8OgDFp(WZ38S(^W8awvmyyulmL^o
zjvvRmv^(~yRe6Uv@>XfSvOJ&pNwgkbpo3#%On2n{&URmuz!tgT_WDb;ipcHYDBJRX
zm^gxIE;1$zft7LJcU%MAejhq3$CWlQ;Ly$wqh4(X7vc1NralX|-ddwAZAD4F+3Xdp
z^8OH(@;N1Q8M5#ZWVv-~Oh4{)BbNnV+dFDtEhNyCYuWdA-{4_dA;WPJ0&Yxrbk|rd
z7X}2S%YT$Z69&gSWDCqe)X8{I09s$I07s<T3J(9TWd?7ljf4N)nPBLeMY8M6)Lz9u
z?S+BK$i2|rWzG4)%+0nC2?4jkymLtpA^|k^AI3OE3Lf|5Tvp$NhXg6B3ylqz{b5wz
z9d3tfRpq2fB%2VwVSK}+e!4I!=0gzKVk5;>4d30+Jp5|m?2IIhtKl0&n=>3j>@ccd
z0H0l#eIJ7=m&zs25`3uBMUXb>-A?~G5y$AFe#ktL^k*fsaN$Xr=((8`q4@X=LH&-u
zk8bMAN)<^PLK0v1{&A|r@W^Vmu~W$u&Z{|jfr{|cKT&`dp}!-Wg=;LNd2ds8ZENVh
z*2Q|9xL1*fql*iolI^z}RjsWMue#t*g_M1O@o!@z$*!yh<X8(D;aex2LD*7qAPIk1
zdtElvp9S*I<8o+4%y}0)p~hG~h`af*{k?nmj)4LtM^@Hc8jAVF<wc)%T|k;W^eq0a
z*{-iOhE6GAo;J@cwvn&0yTJ+#`5(1ezbz-)FRy6Q1?lk(%zo&MMtf~KcyirtVyI2|
z5l+WBEqbCNT@30IBR&qI4I<5lU(qwm<0on@2PeaBOyhQz6olAPg%WUcQK3B0>=-*^
zrvb=n1VyPS6VHK%$o~#Nd<Yu;AZGRI`xAVS@Oc*#<a3eV(}dOI1i!~^z>9E^Wr=ns
zKm(y4IndSc*J>DRDxhWfm6F1d%;HJLR=W!;7&3->{1(0dIDSq18TU_{cf{es$xBV4
z59K`B1=830BjG^!fnq*H&(_6Ikbb;FL@d`XA-@s+{K>BTT<56?`C5AJkhNcRmt5*$
zVFqQ|g?H_8;fL^SB}y&(;oR=wr}P|z*07ihN}Xw<-oC_F)VlYrQEBLb@zKX?42E8P
zPn-Kdk^M3V;Di{t$79wkU+?%#U&va8>v4|``EhX`pc}zqV?3vYILB{A<BjS@t?Ozx
z^`>(Pf7svt*(5H<rtlz5OKnj9o{;d_^z*5C(8&yG^rgXVA{Q^YznO-;sK_w=GH~-k
z3MMawQ#Ln#`xTCByUI_T%R2B~dzA3j++r~$ZG=;C7SAip0^gz=bK`C@fH9B9<i|}=
zm=LXg$4x<SFt5{t+SY$h);plJ(#U+nwubF9vzBmiD;#G<-n<JnpH?1|{?J|XW=IuW
zlrP*Po=M2XszJ;2zt6onxby^6<(}mg6eY1c^qQtrH5u;0U??GpmcY~nf8CrY`|ZW4
z#|BgZCy%wlzo4#ZyEarT$U;E`0KY-xIAEh-Ko}<_Un&3b1dkjNzECV2tgAqEL_0OB
zu`B8ZjgtqdsUE2=!dT{AfeYA08J{wuz_mWty6EoPWme4&f#xA_@C9NCZb?O{v>x}T
zGl83wPzkumr+Dl-)vhETV;8Tl404n*aer8~d9{cDxmE>(yqM*p2}xT!iOM8Df%ZQj
zch~1nz-ctc$dvs-Rc|Rv*oHD9BP#PTKVIqc#Ghw;bS5~Xh(<)MqsMHagAZ~C9nfoS
z%qxsn1;YM6R1Q4E(%DoLosPkc<-Dv+*qNWWO=O6iV8t3kX3NxvC7W<xDS))seVxwi
z{(w(Z$^UPi*nc|LS5tq@K4_O<@6J&lLyx@+?Yh0WWUf`@*(&%RI0HI&s{%Q&@>@PG
zSECj53q%Ex*i1{4$+;^)&^Fh>^43ibnydYywnfhHu^T8ag@VWm1^7afP64T2gcR^^
zju%ns@DL5;@9(1^=V{OiK}q_fPlLY|3jsw72?!m4GAz)!iA#=AntJwq-^NpIg}2u?
z<fL8Uv>_Ja$-hJ2VR3<aCt+*)21!ud*sz+RcVah!Bc!gkhRo#rtl%z21{BMr=mx`3
zHg#)M1gqXI0JFYV-t|Oi^1A)OFKo|XdE(<oVP$O*sqcABDXpolJ<fRMJ_e^?2MxW5
zhR_FPjG~GM15bE!y7wbxREybK)aLTzaur--_LsT)3o~6-q-g0VqO~pj62T@72R+Le
zay24GSurJ7I6eA=!;rGuH0nv8nuR`-kgOV!AD2Ia3HeN#cP@l`8V_u|{}-+jB1+X2
z%mG|xIok*?=lQj3`he(1xzS*gVAl{SqB$L?4XMOk+){_%3CROLTB;78;NhYAx0_aI
z-%>_YpA~Egbj%J1AeV0?K<!Iwp@g*)rB{zUj7(;oy%8vIZ)6QLs(6%{73EJ|SncvZ
zo=&w!;y0g;TJzLoJ8UsY1T6;iw`3FNon_$6f@LyJ)_SZha{<Eg$!lWb3@1)7TE>ir
zxdBt<y9l7b;)c)P1>$#EW!E54b|*%7TFqd7SG%c+8wqj<JID-v%GJmj=9s3#@Z%R!
zB~G%W_^sbph+pe^gX^_j4lTPUKbz!>aR!{?YAqNLKbSXjQuxZxmD(W_2rfy>2@t;N
z)t)K>PmcILD#4m#H1Q|;>bij5bSiFF3TEbJWTJj?p7^yYrDxsG{udV2k`uUkh-Am)
zE30zyAEpb4_C0$OcHZ<?q|=WMXpMTswjR=!F%E8X)nK`_{?29hnOr^o*UGF$6`S6|
z)>e{lI8$<5iwX=FyAOx;)tt3M<SJ<Zwi$e^M2rTyn=IgJ8*qq9zTQuw2@(HK<Azj&
zwu-n5nx|WN1VbMrBzZ+Iix_K1)UcZouaPOtQq<9#XW%mOIgwb7hCaRU6C;P2e4sNG
zSiZUNsa3uU`X5~tD(qy>+W@Q@%Q8P}UC_=zG_-**q(|<`LH;WCg4A6;k4=@cIY#wt
zsos+=$~9dlLW@XFU7q2F$6_Pj1^67K^w*>!@#8N$11>}w7zKBrn=`^R`2^TXlcD%W
zLN+}HR#LXXf;Etf(j|+zA2w{v+{#EDs7~c3bioxfk#W+!nhia~8=2=T#)fHQK-~0G
z1w`Im2K%cQWU#Z9x8G~5yp#KM4cuvLnEM}9VcBImE~R|)freSZB*z7Y1J(xR;V#&c
zUS=r0I%j8ptnyer6&H*U1OWJ{$>2qOs++j41%+5zI|(5vYupR^Lk4_-t-o*>cE1*0
zHJ+5qY0OH8R(53h|9aa%L~8X~T8%AU^1@Bt1h+3!QsLAa2UIt@ZnDWA0|v1Uo(VG1
zxDoq~6^=(F;CjEY=Zl8)?G+f?(zGn7-$YsX73Zs-`a(qLYMPYm3l5^}lOSdauxAmC
zkYC)UnwKTdt%j-1Z7mVd+v1kV8gQTjeABvTQUu>e5c;CW*GInZuiMlbHb_YGt+4K*
zl$k9UAN88qW9`#KnXx6yUrUMs;MSo-e~$(976@=y#g<q(V7}Sx4xvpbEfMHDa}vQQ
zlafVKQKnxGHrku-eVnk4{l`ag6B=eM+U8mTgTk9uxGch{4;pCe^ae+FV2(4BW+N}W
zFd!qOTWsS(wk?T=PGRvnQM~()XlZ;jCII;AqwJ>WI(vZfAWQRL7qxAvpcixhChLoc
zvDN{|BisMPawsEIXG6}m7WS754+vn<>q_B`lpu!}V`_%ZO7hCC^o`XfP{S=!jf<Aw
zKIRlZCSRg=W4ba!oV}6eEO_GnkAp>2Ho2c_-be6iubp3Wwcp1XEa;YWWBhdFO&g;7
zJ)0}@+i`+K?61bp?bh+iy7TVFfpboS&oVq)k~it(^KW(GKtuw^#LL_4@?FV$lnn`b
zI*3Kt@WnMPgHawJi<3)RLJlWy5ga25ihKwyF#u)Pso16*V;1<LdX@?+RzU{bh#LxV
zX`<h}VPFvObqWc~wdK73eAB5JhN>rdjoueja3(p>r-JKj4LS#*8_FDVY?fyyA}TRc
z?DD<76l=8b-Nn>k0e2BkS`2OYDel;egmq7X43>Z@3#!|e?p!ao$s7GBqB9tr_kI}W
z(%x$e2qs8<tXjPAg8)#N5jG*d*e61G&-EOVmlMqm;8lIisWL%JV9y>}>aVNSdvR%Q
z`7z<gf$P`+@CbG#7I!+rD{ozjNMc<7u7kksOl+lPm3RHFoTs?Zp`x0aViJo{!A;n$
zQzw@uwBv5-0IT8E0zp`Hqf)f4WdYRK1(@JshZ<?gB4un?bLm~W)aXE4AV1CO;)ifx
z<gKwro|*}=+0gXiAu2Kqgm35L;jHv}+>?vwQ0p#hnx{a2=R}XguB+jyG?78p`TN&-
zCyN<(Ys#2qimA4Ho*ksRm7EaKHO9=9&NmG8oY1!OeM@45b@CyQdV9Kgj0_f+mK?-l
z(BZ)G++H!yzBL)od-;VNl?-5#UxrZ7O-`04vwRjgwb3Z@`<*sVQ=Xi!AVFE1_heuT
zfcZK0^LJu%?ApN*jFb77E@~HPSR;yO*$O((%`Er6JanYc42OvCQnep7Zp%QFjbW|_
zH3?(E^W&96aA2z3+YCt^nO$x7tB9!HYHNuBIyv&BeDT<9MFMQ$<<@tZ6|SCi46l{~
zXmb7JlT-<T!oP~QtjPHon!`Wc*gc{|n2brzia1vgllzwtbx}6kV7$^UbtPlk?C1cm
z4}aPmRWjs~hz<wrThA>2T>yD`+4DmZ1auMqg?}#o{8XvpkSL%nv7CUu7uDBe-%Ii@
zITX2b3(vTfB)oa}Wfkq3)nq~9Ztel=IZ}ttR93Ivn%@E1vg+jRAI<t=2JEqg%l}lH
zWZ``^X&jSRrc5gy;_x4S)gHW%hO<R7=vF$gU6*va#aP%Vl0Th_whZsrNRNof+!N%)
z)OzTRUj$7!K#&YzgLXM+UbkS*fInt<I9JT1`<D4O&X~ghzyQe+bW#paThxM4lrtp|
zeUz!0I@pleh7)zcWdrj8c9LerV1IL&rpw=-qYPVlAzE6ufN*;pxQ&Ri)$OB-jUr5)
z*2<SrR?n3#rHHa=Dn$nKRpIFw*D_MLA$FRF5kU_v{Uu!ei6jpsLn<?+JD~wpon@Ha
zak~CZT?ER|;@XCr@IlfL{iw!^x`C5vfN}nkYAuBf?$iif*f2>Jjcb}8IX-70D?q#7
z+Otgur(lq^1D=1F{^FgOQG_Vrv7h;~r9DU96eM=wcw(FGLyW-8xOpdHt5*@oR|7LF
zb7v1f#q1eU5t^ztTx(2F6WT%~w;B6Axb-B4dsSz6K45sr!Mig@WT;Y)jw)WEzkpx9
z+oXJ0JixiH^*Jetb`OiRKSHuMD6o9urPQukhlTfYf{F}#$ECA>O&!j_VixhW+dR*b
z`W$^}t)#hEzdyCi8lT2S3o4d--MxAm^FslH*H=M8|9_i#ZOh3$;mU;Kx#o4xK~+z{
zbG5<?+f`*k+wUzBZVFB-3HP+*bo+?PclZz@1sMkxQt@CQ7=Q?Dd0~^ndio^i`nkFc
zZx+F{351l@vqWM@{Qoicvq@3cHC7xRaNJ{HG5S<J$LIi%%f=I7Yp)N3SDGMOGw++^
zNsu0R1nY<A&r&?LV{=HY*~WDly+Y|olMnj#6JU4;4}-3nQP*ekv-{F}`jY{35iE&H
zmw=)K4f|}sS#~fE!`Gy5W3#`!4Mq5HUPsk$Ge9mY{3*q@s~XzZwWq}i67#D_F#L`C
z(E=s#%p3pm589y@Tm}cz?Crm7XJ1o@Q60Jt{RM8Mz%lor_R_)CzEkbQsMt9B%FUqh
zls3CaY7f$;w}C`na0E^fy5OA@yN!<|bZB&@a-9bSo&VtjN?A;jkp?ZIz4BRZxB_?x
zRr2TvkA7(x1p`$CMlk9I&Z3G-Ly=<`IYK7)frTGV2{FALM1;OS1edf=nK=U+(+e+?
z5={U%q$><_!6-LRyN2ZS1-dD((<aw5$nQtO4O4Ne5<q2Lm7wgqka<Zkcq+WmVaA+F
zCGChm7LQ;2z{pvlO#=&h$G}CnAujn+epHqxDeN8gsV1n1a0+un5?Rxa)>r9-DO+UH
z*zl?NdfrH&`8m<%5k*=^J+!}ucO#|fEOL`@3}UP0wzzn6YjmsD8ME<mJxcz(sH-&J
zR>9U@&rO*0-8@=StQ?!w>vASeKx|DqW`(-h6T!1dzxwjh^u?6S>;I#H-s6m+6i@DI
zQhn6$w-a#6B$?hQkGe#3o|iEIN9%l@9n+v2x+x@j`U__s;`b6G&D!{c;EWG9J^o3A
zpR-A@Acb?;K;6rRi?~{Y9|1~rH>9r9t-o|tjh9@$jZp1^&hpL5G>|u2aUD|(a}lEZ
zpt<y`6979v#J?<<<`NgqQWaH+!H@Ph?>@gJ-UW`WrwYZaur8r{BhYZwsZy?}AZO;#
zw^Bf^J`rmh)V0+!?}hD2%=Rw4R%l44O08zZJg44`&Ps8SA*7{=(^&6`^HOa{<BxUQ
z!CD-Oq3gSTNB$sO^5(9s@N_E;ix>d$A)6IOkChDYsQhRFz<)|@&>TMQ2Re(WpsJuz
ztpazZFQ?sg=kp_00Zi>Sd@+^#s#FrpeEe#kTWLF`z$1LSPu<*$N*SUW6mN9&l=oY!
z?PMu(!fvc?tlNa8N1kP>(;=ifM?z?UnuFemct*@Ng6&Y{exdbA{Kgxab4-eeImEP+
zMEbMb9GA15OV72c_s0sYtddVRo=&ts{@}Lb6}<3HeW27>yhO4a&yo}{e%Cfu&<g)!
zL&N!xQCdo(Q=m}VbnpQSu&ZNZ(7MQHQ4D?V1sQEbL3gGhNQj`z87aqfH?}WPGyF{X
z%KirpGL=Cs$5ma`0Qc?!qf_G(dK7xITVC<1;*RbxuP&L3XFJSLlx&XyaWcTQG8YYg
z4bPgy5wjR8fc}~O16J3+wZ<3k=7&H)8;&BW)SPj|@=(Pt22~BcVdJJ>x+v`X@zb-E
zPRQRhZbs+IZ&B1Y0^#3P^L<{-rAQcL+*T{c^y^rpFx&6+bXxapb`G~vI$^i>+KipN
zRf~5EPX6!F-M1edlP1C<=(v<tC?@cV%o!rVOEr>O)GW1lPmF-S5Rm}XGl?HviiRCl
z2aUY<s%l#8G~%kPE2ou!4kK6Y)E%@X7mD~N_!*%M+)(=QymZ|wOlPw1r%bs~2XHvn
z#&oW6p(;Gt88m4$af??(tq%hL_7`^Hu_s}55U>CA;lI$0UbE@6bt5M^q+kDqqTi!E
z;sThG956dLuU^5#8?-hys)B+q@=(z9Lsw`U(OO_C=F2gwy`?a3^GVMB|C-<D(MakX
z7L0>}S5&ZYv$JaDyPh}MuNECf=0oP5&P-*t^7_8(wfOSMhZAE+tU`;(-;7A0cQw!2
zK)HrU@Z}e>-GKNUoqwf-O|Ww-uX1!T)+DBIJqyqib_>I?s_z9F4gpz#8#Eih18?-|
zXAzn^d%WWYgpt0A673Lzo{!sNY6*}CsO^}p302jf3xv3qZgd#BNx&f=GEu7qMS%$l
zI~O`o2%V9hAwZ~w2F_`s8v?O!=rE?6)}|mh4l0E!$z*C2OCUIMN}R_K(_nR_R)k7;
zJnu9L>Mk&jxMxmy2PEXxXfWMM(AZ^&Ik}$JeZ<S00KCkh#~{$zkM(Qhm#;t?VN<@1
znYrL=q@*=nj5|=(<Y12ebDF-g>L7UcZll-+KhAuH5IjagGe-ejZG9;<ZE>K4^eeu$
z4mpEu>esE~(Rjgu9R+Z?;yGi4WGsg3A;{XMD|Uq_)DCqI$ECTb3B)Zrr?1zoxF&bn
zwl7j77Y*uSb)!qSa(J%UD<t!hhFd25rdPi{eOVdMVAHp!3o`u&E;epBO$p$2h`0{X
zznW9Gq?yh@MAD&JlqW1szD^S<oxRo5uAGugbiAt<0nN~tn-bS3qTI!>^gG6fp`&#I
zor!bg+3`;NmT^v{{63;NQ28^90p5waTVAl&_Z16F5vCriL1W5^o8EkPLM!Z*;!3Om
z&iLsBNuq9mD;HB*aR#m{578Z+iwk*0UKf20Buwlblm9XYNaiDAfJDl1P{JK$@>LYx
zKU9Um1pW_&TNW4c{U12JNHJUU#%e;A+}s@^twI@K$;8=6jkuK+$8V1$Xd34ie0*=`
z+p&%L036z<=H0co@#K#lMI6Fa7bKYcIisG<5b~4r?!p|oz-{sbN|PCmbLa1Zep16#
z5tm{1&LW|gra-Cd1djl(A>zEk;77?_nQa@sljSkmw1N@|i^K{{Eg8v{sA>eXgaFIJ
ztdkJC23x(=7zT(L+9V$0%Clm#Uwg!!c~1w4iWCzAFosX$e{sj=6H}4x^{<iQ)tY4~
zr^M3`o_BZWnp<@Z)zZLg*cy^qqDI0&nv^qQN<EBt7GfQ|DB|&VS%lR>+&qMcooT4t
z_yikg7{?A@QjHO<_3K9G>3+{A{vw5#8tnOwp<E?BWqcK>*i_bx5~-9LbJ`fo?xnxv
zrQMTS_HZhZKxD24Fq;LUb4M_nWB!}Cdv>7={=3Z?TudVH_It@(^VBrZrtlHC&ZWCA
z0GDpTH34qREP^`VaKn=YzVjB7;A2c0^Iw(wjRoA7JdmsVCMt|%6QVPbJ=9L0GFK|x
zYlcH!WlJYmJ|Be1HZR}fKt1%@q0vY%5^j5FeKV0^sFIoSZ**w<Fc*hku#_uay7IJ^
zM#iI}I>Hj07S&R~qXJJWuV&Mi<ivNc{TfdR(|+_Wi8E`t-8Mn7W!Vf7|1Fo!F~E0+
z4eILig0w~pBD^w-lDQqlNkUHoS4wj2dXr%A*TQR&?6JM?yhzgWi`!ZfxJCGRi)s8U
z=t8JIP^}%<ZsT7D$E#!waGX+E080}#R~iM`gsC`|rD`%EWTRY7BkoQG?HKljhzC5H
zN>xYg%K?nj1s}Og4xwsDJ{O2j!zA(u8%wdO@6kyTpeY1Ii>AH;7pdjam=IkbYV!P#
zuncz6<_)u%XBH*>P!}S);JK6tSIiq0`TPPgW4GRuV$Lx*x4H|#2!dAb`%||!;@Vfs
zPfEF?O5SjguxZxqyY{b8F4Ap%bu{~P&<~cPP6|X6ShR*md1W_Z>}Oo@Ulk}=|3WP9
z7TSXOJ!e@B(9m$!di6jdAz{g~B>q2fs!89p#<=Q`+69~z20i9|R{Ei4NRcK$X*P?f
zVK~okXg1d5>=-N7<-)wzY9$|M|BM10V5xgVIs2bp>U$Fg6+4mu$b-Do*9YdKA^qP*
zHGYE_(Nlpajnuy*g|bCou&qwYDUo=nITP^9$3D5VdVg6}I-8JA@BOQq@;Zo}a_}Bm
z>(?;@bwSpUx>=8@&SA8CHMql+Rar;jAP?O@dWEEv)vToC;IR({#s)amP+xd4)d!<V
z(y-gpChE+^OtjZVCYl>D#>6M{eD-=U{5AL`K~&i?#O6n1rFdcuxscFL{w;pQ=%Lqk
z&^0n)cp0L5&E$!@UpJ>B4K|QPqc{9hdyr)`20jWSJa)&xl+6TRy{S!CJX^T>6I;2t
z2I>3V-gl~%rew?R8XI?4bt|ZT?I(byq#{aUF|k)tTNbtChws10fZfJb#+4zauiyRX
zdn!d$hh|%C`KP0oP#+?tmH@e$Na%Y>0Vi+4O;k1c^}eaej<c!R^V04omc8^?YouSW
zqwx>Ni}+RwzA*UhXj(n~jY!^=g_6Hff~z_fV+lIp-}Gz!HTnW%slFnxRMRyUy8X8b
z{Kciu7+*J&FZ8u~g%id$DHo1Lg>5CuAaHV7N97u3H!1ow3+T9jz%-u~Zy%lUi}y!k
z0&PB5I2WsWmgJ{<T2cL+d;@rNaM;^H4i$&r#~D9FF<-_FFyA2!TMq~xM9MPe%1$@H
zNvMdl`y<C_y>VnKaMQ)l{rvfusnoFC-x&RRydx8-(@_zX)x6*87=Dfj9}J(2I!tRR
z`x|?P9Vz_<g;_t)!|i#)PTXy3?GIEPix&C>-}G1!m!zqmY8vKb6$TZcNyf8%#vr>I
zcr)Q!_bG@5XkN$`MpNgw#DUWC{QBJ()Z|T#9DMaI!OfyuIB?;XzIrN~`s%^z&u_p)
z6TYv4d#2sA-sdT=xW#1q!7tB+MRVdxKcgFQH0^Ni6l>PDdm%_Iodmx(doyQTOI@0l
zjp=*w`i;06HmW^c1r}^^TFzoKKhqdWe4Idv+(|1&9R_x>#w+noh#7yCN3LDV@9=_s
zWTnE+=>4qE^OwUUzwmuGLQWJ(s$XqyEU|0-@fi=4+*nVte!q-fmHovc*HM-jRH)YV
zBUs!c$PS?89{E~P>8p;<R}gx&qi4&Gid2i%8h-qBkTT<1PU!K}!u<f4@4y#mLTn^i
zvtA~j*X!k&ySv!=FXq6gF*pVt{$R6z=Uq?P5=@GGAcDeRiBZi$*ffA?2mgGt_}yW(
zlr65wjt$;K3_Tylt9l!0F5uP8Q>Rl3#}lFLXd^?r7LP5T6W%uj_`<pO%<A10fR}n+
zw9EA}IHWncqD%;T#K4;6njbwE^WlJBv;1%{6>GHN?#|xITH(wvWPs9nQbRTs>R10a
z1tulL7;raXaZgb^ou(U_IAyOe#IvQ%wXBM|oUi5ba?Q|w1Zqe=M(w2nXQz~4rid$R
zteYd$ffv8vNl|kRss%>GNqV=T$9RDFWI|`RS#QMUZqLtdvI^8S+AZW0nlCW3t$mm=
zmNpl++0MNZ9x{O)7p{X=IIIAuc$Fh@OlkLxus+epR8`MkA6Itgr=tY^Hx~y{pl(s0
zuZZ~H984GHyLYaeOOn^jItGVxK%&J=LjWJM2CLp*6y4RwHrnr@PnZuZfy1>-8!=sP
zYndc*^VJo@ZhFlU<Z!&>s9)JXses~Z546UfJqux^ZN8ni0bz3$l6vp4^$MR;Q0oys
zT?r<4JLM`!{K;j9echh5t|%{PIoA1<3-O+^HWMStFdW*YbG}XTIyU)$gm3zgJ!K<m
z!WDD*f=+|UUPQO{Dn*uo;+4p+2QQjK_*aWM7~2{x2WJb4UIot&a5Xyq?05Tg=X}O4
ze>}iNEI9aKe62@W!DcfTmqX>EX0Qx!L03r+|4GC!Za02mAHnkmB4XL!@SXzX)8H#$
zZ`7jI;Z_2dLsGa6*k7Wq`I)k48)PZ<zvlJ<y^$DO#L|~xkg0+;gOl8_3TQC_d~S-a
zq2BQ*L=$IK8ZKkT6s_si)1n0od$tsQ$~_jJr#=_9S<lvsy4Hw)Iy}iOT?<#iAaH*W
zpBdrN=P^>9Y-XY1Y{=i{7c;;(m<gG?uOAzr$4s8P$cAnQ8_a+}OG#4TQr>e~bq@|V
z;Ea%1ChlHchw>q6gUje`(asV69@Pnm(5q&`ZY-wzvQqDVdDejN=Sc^Fn`)D>DMOdF
zA$s7ICh#G5qD^}}Au66+(pgrrLIFModub%fJt|qcsgATVX*IM>XP_8$MguAt-chzl
zB2HcbfM|N=0>2{+9Cl<N_^jh+MeEI2h{iCi`R2<d*WbL(3NY<qJng#_THy{nC3vh(
z?qF~?4@Wi|O7!s0Ud#sY8$w+z(R#V1jQs+l1sD=<sYv=Lt+tr`Ti*uJ@DT4X{3~z*
z(%PJgb*~)DIM4WiK%ZYaG~8w~tRq@DigW?|zh;cQ8bFI=q%;`cz2M;}K))j7WV+c1
zAyiEVYigvyXHyc+A`axuff`KLO=-zXjyx0^xK=K}wI`s20jA9bg!w3_OoUZSTAQm9
z>7d^BAyR0VVqp|r$>e!o;0zl5Pd`+_JMk00_keJgP7Dtx3?fy^Z1NeRdI^+kTE=tD
z$S^Yu%+`F0mCXs9dh8P;PJaUVHvdZ@!OrP1Y7ZoNbMV@0D`5|UrGDSF&!#>NpeYzf
zpJI|_nsuB1-cDDrJHIx3NkjMatjXAT8$q+vkem$elJKAw-TSoGE5oCM_4yu7eS$Pg
z#{(KFD3qX|l2w$E&W6|5(T9%Y2SET$?rM3RH=^G5vf2iRk=N5_!dAQ?z{T7;Z?Ce-
zwvW1ZWM@vrUKAKQkk3l>^0qd(<k<8;{?XFjJWWVw1u}KFrq4O(Ylb(n;3b3u;#&au
z$YbxSF*e1PWmPb=;Ct;YO`IBgKSAbwsJ`IQ2Lap=Zz-cO@Kr%XOrU>#bC4Hn>eH3%
zcXsZ_(!xQH9cq<jyZ|$|Az7FxoiY>Dso9Ezef}jL?E*Jb?2{U8Ag2^$??M`PN!>`L
z0@;vvc^6+?NS0j8(rkl}SlLNk^2S7J#qijcFY8~zzu+(de}lJsQ<71ZGY~E*gghT}
zoIk6x+`O8T?2gx8IpQFh;nU3<r#&r(UID6klcrY#I23Gqd<D<>o9LE59g_JhTbNxP
z^f^6eaOJS1-`jI#0-UQcgT88U@gfJ-S~ZUCJs&*I;Q_1{@(#v%k!S<{<^VmYg~A*b
zGmO!4a-DiY6$G~-__V-B1C;XW@Roooeut*@7!)w%i<M@ur=!#iv;TC~rV`9^)4Gt?
z+)UzJ<OY2YaX1HL@D|X7zmcLUo#-FL$M?oI)*gM%{6gyuuHaT6S)|G0trt@?1_$pm
zZ!lW=LhL68ShTf53*b>bdX;&I7f}~eDr;dPQ|5o{l*7Pu7D|D?z}iY95;&&`-79y~
zUG}v}K~dGgWb5gH7b5sqyd~VagD5lTWl*oE4+FbgMZgZtJG14iJ~)j8Y1n(G6)@^q
z%EH2GW&|RQMX!DeFPY=Y2%1&?I*(=*iF!r4A3uE{{(tK-b}(0+$oPv>+jk2pE|6+s
z$GwjH*Eg?hnHi}|;kCN!<y|j^YWV5WO0;iV5uDeB%Uy~Kt@CHYJSwoNljcUce$r7B
zzPe^*37Y+&C`q+fiM$puCb)preeK-C5A*L@1uQ6hw~rj8v-w$YE2l4P!IR_-Qlx1C
zF&fk6IsMU&Q<9xKOLg60r!r)(lfw2T-VXz8Om_r8T*}7@__9b|KCY`06TRf(SS%6>
zgQnt>PMVB6a<|5?GaAKf;lWEp*x%FQ3#P0j|KRpk3hDAn)xn7NuDuYW4K}qA&bAGe
zy!GH*yOsEAAt4p@s8z*XpAF*uBzIS6fk)=3Lox0O1U88-E*5rEn>#!hHo+b$dfx$y
z_K)X;5Sl-;HJNQJSC!zVM9)kSquqHqSWb>%W)a=n*YOS0GLiCX!L;lQ;fY-^Dxu4l
zNozJQ0m%Qx(e$cxzkEi}v*DiPAqf#XlR>%phi79rdzT}r_@4sc-Mu#Yt4_rFn7^R6
z7hfb5!|<q8dcw~G2{XxjD<eqS0Rn&vWU=kRaSqy@W5!EORivIfR#2fb?ZO2+&>QNt
z<VU~9WjUdEVWaCMW7w#tV%{HeDp&`5TKG3uJQwWX+NEJRK6{1*Ky7i|(%;C7RkoNi
zMRW1E$=04NkvMVt>!8|+@R9Zs`CsErIS|bRFd&pzb2e2C_pn`?`2E}Ni{$NRkB^o(
zKdGfUhbltB{m5G4dk)<nlYy_f`IGbtb@%1@48BZ+IG)LY(|8=)C8qB%W!qrIQ<Df3
zAuhQ<J&PK`2D}g?-U4x2x#$p{_efp`e<8&l<qmlb;O?g^BWLaA0Z?+Y$4bgiFRUI!
zI$SrT_U26|&yP_iK?%Q#W}2?5x4)n23|*ra*lG@3(dBx;^ER$>(W+?3Ug_&?uJp_e
z5G2Af^Wa=+Qpx6!(mMFlr{aVk%YL~y5Nv2b(nRjz;CWwc{k1|hbGd23C>X~5^{uYo
zi4Yq7OpRm>x?vouPvsh&qSeD9swlfbRQpjKo~{;DEU%!OSWYD13|@VK%Duz?>--4u
zyQ>)m4(;Px-W~pz&6nJ*h~6PPD@i)WCMrb_P;dHmGIJJ!;dDlYujgL&$)b_jxxA1t
z2bZgtUnoqBCPyBd5+ExmVOS09@+Lx*+PJ?szPs`tr=nV5ER(B-PqkjTwKfFnq&XPL
zs=T#Yhj7NR7|&bokR}qHLGR39%{WPml#r*pd{4aMp$o1y)DvAs<P_BkC2F+>ArW7}
zb91}|Ww^ZF2DQGo2P3;xD>f-Sc|qn!uKR$rE3AYJi$xX$Lhn)|O;@(wO(mmF`);*`
z-*b2o*QmPpkGqJ-ylQlOUr*~%^k5=pc4pD8xF=4In`5~PZ%SQt3X<JZPr-(Ik(g1}
zq#LNZSL9;OBBR>qPdpzg*aC6h>?J=m41-_9#nrLDGys=slJGIexSRA|;B_frSvm#S
zd6AT!DbgFEksJKX5LlIpu1XPmV*}C1<d4|sg~N){Ut(r$TYl)aaL8Dsv5$Fhfm*PB
zg1ZWpkcb%M3vU!PBF3$1DKn=QpMZ&3>%u=>SqAlp)xH?OEg@j|UNsX+;B7|(3G!`x
z-A+&vE5l=M8wWm^UeB(F<YuAS$BE_-YvNnW17b3z$&fk=g}T>6gct>;T5a|-I~XPW
zS|Q-_(dWyLg_~%wiS!3h4ujtgzhXkJ4;(V)@mnfH*@mTVq9VPrnN^`||4HXNoFS%#
z+daa~IGYB3t%e|*k~FPebC6pv2D`vJKwi5AtNPjFhy6=^32v(jNU78ZMbM1LhNV(}
z<#DiF=v^M)KV7GSsMOPYoUgbUnai7>m;i#5-m2;UttC7ht6VOo2NRDumkK{YPGzMM
z>&N*XWp<us6)v(;f&@<k6GK^x>F^YXNj|B^^^B$c>kx;*go}qtEU?v@<z&?tHRYAZ
zBSiSN0qa^$YDE0F#o0w1_S$R?S_*!Z3h8s^NSzaJ`BpZikvWV^N_j2DG;#Ns2%w{O
zWTHxXHba2@d(0a@l4Wisia@C0pAc7YSR1c0k+G=qZ~$eaYyHBa5IK$m`a_HC;UT)4
zpCC5X-BH^~bU><s4qlsUQG`MlboPUN|4%+i!vYZikhKlW2AO((l1`T8NY6M%ABNu<
z%lQ=s)L%Vf$D*lKlWH8vs2#DW049OT>Hl3x(pyNp>Su(HyY2BlO45rtNn7f=RLkdX
z$P+}e8NrRh>KY7vvay$~KfG&YJ<|~VQhEj{f+zmSnb#6|Y}AzWia+Rj+|fsv=cN9c
zoP!E{t3{6DxE)08aB%|+INYjOJEn2BAlA*)%s6I`0Mk}}tR&DMH6sKRgON<?vz_s>
z8f;sL#{kEAxRY+d4io{r6wnXQ>m3XGQW#Hu(!;x6l+IrJVwz2&q2;Uv)tm8#A=anQ
zzB-9r3L{^?>b3|cLE^oyiXHj|nV_iy8f%=GXnzp+9|lAVMVp`?wRA9ld5N$JDn5TH
zEneoda<w^>=J@YY8V^IoyT@n-XU*Q9VLxM3K9L3<@c}|6-%CpsR;V--CLQdv?WOE)
z?aAr=;XhT1k{%*fPHuZ#)a4X+4*ZYwzYbd!`L(G4qLCyI#iCZdNVnMpsptD5GT%+t
z4$^Dx)J9?<WXB3aBo43ONdYqLlpuQ(ZynB(<x*|+6CkO`YF6NL?YLP9%~tRa9^-ok
zY+f~9Qj8!Id$2<Klcs!z8N(KA52Y(KZ@-y)*P0i!c|6?fkTLI^#XJTzuJr~HH4_+_
z2$eBfQw;(6^b3{@3#Bat`%EXjSE3RB-uhIdlbG%hp@=_ra&xU-_C3W3wBI5bYI~{_
zz?v$Ks<iu>qqPQDvywZx?A=lGA6tzdL{<^ii|gdQFoa#^IRq|wPWqbCqJn2j`clgc
zBf!~3fIdmAxnLHQXz9#Y`R5;Q@AI0)#q&NgEY}ljj#^?@+3WwI9F<Bs#lH+3$f|nO
zm5Pk~%3S8h&Q%;(>T-?5yMPQ+`2U1}3OIwLSlctZrMdsP5AN-gdl7Y*79-YHwt}T-
z)mm<EII}5iqM}n{I2u*5+NKy6#ThuC3!x+X!fZP5T>x&E#f?hc>bI&1&c?L0+D;Q#
zh7f$5x)`nNy~a<Sz1^(RUbFQkdhHB!6*Tg^T`2i>{|v{eqTP%nQzR`;Qc7VJJ)L;|
zSW4spye3|tj4Azh4z7+wG#sWEZ6KfgJw66WMjo*VwoaAI5^VMVqYr4rIU$-@!{Is9
z?NI=!N?O%IO89*$sq>7Xxa$JuoXbuU9g-=cQVcJb+Q8cib#27%YBAXIh7!PD)BgQG
zu4&x3#O94|D7g`WmWR#RTPz%Vgj>jnR2mI9_QZ(nyvC`i_ny)$u+uQ*9)jhdJOp&;
z|3*ZA`0cTCIjD*?+#uoj`?DzN;&(zY$yHE^FLUBLp2B&_D@`egusPVCSg$dMxVbSF
z>XV9WD;bDzTVLVtzb=+T@Y`j~#*IbTc+4Mhrua~%9MO*I@i)xz&d4oOJk{xpd(Vd=
z$R@BIpXc;E$onuN_joleKyl8)BkE@*Qvmgo0HY7^n2J%k$qq*|%+zyrycUScUR!8j
zDE!2I5(15Ron4n(lZuVY{?W(~ixC@9kfL!-IM!76t?mpk4(s-Sw-Z3$bO^_Qh&BZM
z;bRLnb>Z=Np9PlQVtA83K`0+~xJj+wDqJA%Kmjt*9cAD#0GFujkt;WLz%S0Yx8*Dn
zwFKvD#&f>D)I&PcX73JgH&Nt`|I_P&kGL3yu?rChnKDf|S?C2=$I|Twzdkzf5DXeM
zn|PE@p$ra{%ourdJ3fvDoWPA#s{PMtN=f2QXyT;wqbur6AaV%)#$pBFM%HTIP<Z^_
zbKFMJpdDj6x9sc~?z`*g^p`oCLrUNGC`xGz_-b;R?{{^G?C)~3!W%%uAQzP@-0_Vn
zEHR2JFqt{%-PRAl!xI~GIfU5l+iSKCSYoOFtp{yigJo+LZ*tT?TXE)3Ce-c$Aki1;
zIPv>EnS5>ri)svH*3m*=hbcb)!PkDGM)tygdmKQj5W5^HhJ-lMhw((LrQ61)gOv)N
zeQ!PWMe6|R_jMLl`|f~_o3Q3rf82+I{`}FZ_n&Q_@b6e+)q8u2s%k<at7M`xcH|%z
zJ(=(8h{=<)vpH5nRW#I9H{Aw#y!K;UaYCKaM79UQ0wU3QEP}_af@<h{^xYxG=ft93
z&vHHq9rmgu1>wftmMPYg5QFnaB28=KP0;u}blwQWt(65pX<<fmEA|*&r;p8eOVi={
z^QvS_*(oMBXD)c2D$qJ#aLdYnwxJETAHu^7frx6vBES%N<q7P{GHb<e{$n;6yUcp0
ztu807U^*W3IIa6s_Ij;bg3?|Ip4W_y-TuVz?pk6_fTwhy=vd7A!%2Z?hrl<gACyZn
zk7F~}+%K`KJ|u}e--l>%7p$G*-V?`{?}I_zY9ivdI@u56APrm1@1Q9_x)R!=C*<hM
z`U{b9GxN{-)*Mw6RSSRGr5EzDzq>y>aJqhh+!4gjm?^<N3eLj3_tk|@E|3MGgZjlX
z4uQfx!~SFPH2j#K+$w6QEZFO*(E*FJ$pe@7lzA^ZboRfKwqRfd_0pMYM}aTYcA=O>
ztem=q0XV@60_P~zC~O-&5C$Z%agyCq?==N(#=0%S4fiLm6>&oAX++}9794Yzy{#@S
zIQobX%{b7_Jg0d?!G6T2{E(hTvwRz9b>p5(xtkYhYTgsA-P`~=I{$;S%~kmH+uO}p
zbV>yVHEV|8&S$$sFwl0K!77R17&}&X<-$0kU)?KAe;FaVyr}HgoxKs^KTFi<1z=cb
zsG}X9)qB`nUJ)1oelYRXO~sgT^dS%M*|OjB(9*LqLu0BeTqo({8dQVhsi%i@tk}Pv
z<8?UcI<2c|26GT_iKAd~w7u-nal);gz;U?Wuw`1kEQ4z$=wKZP<Fp^dBCgE@--)Fa
zR(2|Pp0Ycz_Ts<odgLhIwJJi&ZB8UVk6mEf3QD@9;6*Th*C@(kGAfSu*Gi1FgcLMm
z?nfdeg^<_jlpY}Lb!|++Ww(onM1*=u%9+z>?J!Spi_27B^j_1RdZ59V$-~mQrtP7M
zx1`O?y#bzSM|mPJl3-`bH9f@kVbpqG!L`iocEQU5*W~%40=@EpGh%Iq&ru!Ire<nU
za+s1PqO;d!<qyD<1gffPY?S2ouC8}aT{gySWoE8}Nx(W*FWE7;mmQ1}5ZWINbeCwO
zkZid$ir0h60toi1>H1;gfd-risHko=Hej%vyaA^4;hMHPGJit{S_NfE0-@`+XMv7o
z@UFqIW1HL7yn+}Wi~sVNpx%F-xISi~y;)7z_F_+Dqc#9QejdM4=l@5ob8=LJcH*Y9
z<9@l?2gZ%4*YW#+&#g;Xs$Rk(@HrqnUCCM@)f6d8tgNi)UG;_9!qRrI=R%!@x-tst
z-SDIB0GerC6(N;dYoxYNEFp4W7JW?b_J1b)z$kBLU;GV;amCu+lAk?3$HlfMS(j02
z;%+@(Tc8V}J#0b+VZf`Tqu`suN$fc@+g@P;0`CduvZwn*C|S)En|o0Us_^HCJbMW)
zJyJ6C?(gx@oAnIN*poSU%s~sCgR|U$#H~S|N;^*EoXG&3=|EB09A-WgF<=4UX6reD
zX=olk60xX;-1BY0piGxn87GF&f_p0Y=I)<3Tqf3XD6Cuf*5$&~(;pT<fiPLj=_!Zy
zu?eCJQc^deLAPuJ={VGC`O<gL?9RhdJ^2rQh?Q^61sv67I7LOoyi4|EsPajwX=~Iz
zi3g@!(*_GqZQ_md-uHw(Ni+5k8Ia56VZr{1J>hGpeMVq8{7~V!BIE%gKnfIs)M&qw
zDc9W(UJ0f$tV*Gn)u8jqxdeOn2>3TgL-kuEi}<q(p@|8RTYlk9LDf*v?`4)=9y-AG
zr5t}nUx#Hwc(|0>O;m>Swh-C;kA1x1lodFDzotaqdQm#OOJzLeLZk{4iiFXM9mH%9
zRrk-HGIg3`DzE$n|3^-dwu_G8Z49w^*{Qj*LzyknGw|Biv851cBu?U~6wfyxeoifQ
zitko}Izc3%HN~K+Q{1JTtX4sf)!g!gG`&%qR(sxy3?qr(J#|Ukx+=KBs;zGUVD`e2
zwXfA0HOP$auY<l9{&gn4fxP;_VzW;|0Rm$$Im!a&`DSgBzGJ;i*wWFeVomsQ^>BJe
zT)%ER1romn7oliGr&6-l#GhAFbnb%UB|6@Ho^R<zdDzbE@zlB|-9rr<;WbvE*S5*H
zM^3*(Q3qJ~48i#8va77$`CB?s7bkaa%{t)sogEeUDAK-@_7{PCjz=5Ma;)02V`=d)
zsbm*&w}f#X(@t3=r2>nlp<>i>8X-$Y;+p`h-Ilm&o$#tX=lC~Dawx|<*fH@HuD$9e
zFIH+^^vY7bby-HWOrtdX(`H^m*qAcJU(ZcdtCu-H0&7Lk^+G=%aoB<pKK3N$4sfJs
zvu=5YEFxtAN(!xc1gfzXQa`f$gAp>=#0&X-PzWK=Hb4y!_`*mzR<NEb+k4tl^7ws2
zv63YEF)eg<uAIM``?5w$`@>PQ`&WYyAQrED0`yVv<%65iw>hDvEv7^?x+uQF1Xx_l
zpO3saiCRgtlyZMzoaV%p1$^CbC%P%JAlLo6&_-}r;BE|_G1nId4Ixq#TYjLB^#;=A
zuVhIbo%irEsWGNISbL-&$I#=)dBqH_dq^~aMoB``{8eyFNdw~~Kz7Z#>{n1u?3Bfr
zJ7!yNpVT^OC%}}ykQ4&jw-a7sKWVa`Zg0S0>cR}Cwrr;ZegNb&$3{l=sN<>X#W)$A
zqqa-28+eQjxXqdaDlhP*HSySo&5qi`S-V$?$+HzZW<5>Uu$O2WuUb&7TmF}TxX!rb
zM%MFW`lJU!Bt9G*862rsDJkNhAF9sU3WVVa1n2W$4*VpTnO68yQp>Et4de|l>+Y~&
z#i&j~qROVxb9A(iN0z*SKtlovL*3km|1)lgT0tv?nl#9JVjGDK1)EPv*bX!~G~=;v
zs)AzTh7_8BLOQ@V;`sUACLDJ`-(lB9nS@N#itWzCRz6y|-e%ER`oiL!qfF9cfPrxZ
zIS9~;WBgP}X2kR5Ov90*`4_OGG7zwKLmL#v#<s{;>;c4t2Dm5(Hm89L1GO4JJFx&@
z5u^AntP8Q&MMa`&cn{M7v<095%j$PBHUN(Z@?dOZ_;|o92Pg&my|1NQFv*Wr%NkWI
zr!+LxzFDg$;xJ{Wcw;gc7t@bsb4>!fX71%&Uot@3SP_Sssc@y94=h#Ae*x2eS({UD
z*18=Wj^Uqg=!h0Jc3IJ`7sU99=`JBqlRSVDUmtGmcTsq!ILQa_u<#CXBs)de--4`?
zdTN{et%Fuq(?{IDo%0+p$>#br=aD*)`4;_jAY|6X5@~9uc#*CC6dpk?7dtTlXHyPX
zS-*y+@eud@Yjf<|i*Blj&fhs+^t<(Fe1jmB!-CVFc;`XqVoGj7<F+B8rFJqInV@mm
z{ELsdm}UVA)&VwHlUVhi{X&o8IlnY4l;X!DapoHN4~cfD;U(8>k&$dIv)f}A=<MSI
zJihO(YYH|^;TjTKoJP6dyI_Qo!2J%7UkVS>pzi(^(27c)ci0QYm<jivV?0wpCM^-5
zpYZO+tp=R0Y)E(6Plyay;PsF@p{=SOVXekrsmQ)v2!U?7nGC<?I&8oKd#)>N`olLI
zYt5pkbVm8L&zH+q7|s>`h&RLdz>(ISRydkJ$Vzs|GpBjSDi3ZQIHP8Dg|48biV4qB
zbl>fH_juTS9!HB_e}t^+42+oAo$-~x1E^=eYZRjwRE=CeT__)|&KtOF*gg5E%+_?o
zORHJ0VcXGo6&s5ho+Vls&7q8HxkNU#nX7uf{Vi<203*5g1J-3jc52UN<4k+ZXRk;t
zkYXBuX^~Em`5&$x4F+hqt+z|_#MX;c;8WHJ<M4X8iFwi(s!JSGvC_OvZ1?UtaS~kf
z<Jg&4ZTK;JnDDsj_F>g+T8WnpZHT&A5G-d6Y5^+!W)2+^86ZVAThcvWhssps858>x
zXhugx8xmNBQ%tHPm4tkz$$Hg*&o1Lwo$PlAyrNbl{QUvt;||=JCHRQX@H#|8daCDk
zB7Ch{oKuXi(i3oKQ=~{m-P1v)F}1+1tOS_1+ufweh;LcQmK))r%4DcNkX%}jV3#Ff
zTti^OWf&xfJa97l^Q%*elA5INC`L-rQ!Hc>76)g8tp2y~T;cLY2v5oBW}n(ah>q^@
z?rY?Pp@TZoSd?yw<eeek-oa3*1x&7@05y)=vNTD>>a%UDp}$Rp9h@Jq74gq131B~(
z+Tx&oZMdZMY@;|0iK?+Z5z>M?cV)|emOgvrw8~5Vu+w(-$012<Vht~5W>$@nd6t>@
zrq|tv&iv_q1MM!8h+dh`v&<rl?#giI!e8jwS3NHmcS5F&Ig$aW(iK$2*rQ_5fs+n4
z)7<MS?u|Y=d?){ocbpm}0)(l&YXTo*qrD~Nc-*meCTv|Mtyi~8x~_nL(XIV3($WC%
zvmH|MgeZ=4zk}5kfo~AQ2uM8R>`pJSIT<OZER3Gn^&*Mxsk%Y5hm-EhRlx#rHttp1
zV`UliRt0f<?E`(!cWtfY#evG%m`goFCOU%-XT~beXLc}digRGii_ew_Es_CP$19BW
z->vLLl5obv<3Um9j3d(wqnNmi7B?`e*xo+FpVph5PI$R@Z;fSdh6Uy#c00RIJ4~hm
zCPYF9!!pB7eCj8?S4;{`c!@6)=x}A7DQP)rMwBC6qQ?}rL+%EE{uXDrKE5Hvs_Ygu
zNwdI|{Rm;N3iQ1AeYy~1lafddB~3#=otAZe8=g9yX1;%*s<LkCnje?U4FA59pP8kV
zF<@1MdVz#dZI{r{(O>2u+Xb^?Xpu3nQ3uZ;=iISbvE{SVXm<(s3@nLBDq8z4@`ae9
zsqTccmYt%Nj$SL$f{LlalK<7NK6b-%FP}lh{Ox3rj+5aq4~6o!vmHBG2AMejW`WmB
z9!3Zh<^I^wxGIQ&X~G_d;&-lUwu-;dFT*{UvLzE2*uA)*o^u%nz;UkyS*5`ev3ipN
zEh=;gd-it}KVgv4JY%K!h42QcBSg4R0mU!Yr~GgQ$Bko8JXZaa=<-i>Zy8x#?8XE`
zoC--MP<?BcYt3}(eOrR891S?0HPR0LPRHXAlEnUr_#xmT7iJL^RE7wLJ*JD<yy5K^
zUFHR3AH{>cmNqLO6wooaRH2v_t&Aqz4BkBx-(tSvW6j599|_3SOt(iI!AA!q2WQ-t
zSohK(^m#9X6noajo$}Dve3ICQpyf-dLQm9BNEa6NKzeUHao(P*y2x=`gI7#J>>Abx
z09abjCR`tt7>NEvQz1%?8g}?;WnVncry<sUY;9D~rd?2fq4qrdS;C+39FG3{Oc6Ln
z$^w$cp_;<?K1*2r<b+i%1p*@c`F4+wiYj^bmQiiTNRnRsNBejDv$z*9!o_0ePe+em
zOB0@u?{K?Q<48Ulqk%664I3n;w^i~V<nI>yuNw+WI%cc0hate4eFA5vXj^429h;g-
zpm=TyIV!HA>ujOqHC-4((+_eVny{N+3{q9qU=WTHJz4#b>)SJsM!fJlHOB~BcuK95
zUiza0A`w^g!Fm5@7$O&y%lZE0W+J7G9HN8N^FY1EClPq@{`qokzZA^)T??(arQeuj
zIHfx~@;h_bo(|MEpE#_A`V$1MmAZyIi8zX#eGZzU=4$%Zg7VEk+jgq!ulL>Mu>q(E
zi<QxxdQwC&sc{;M7~R!+D#oc1Tx>hTUDFP*!x-W|(F}x958q!0kL6<qMq<$<nPCPq
z{tN`Sc_#4VY_{xUDg0F*Q(8AfWR)fue+&NzH(zPMpxOaqBhGc*!&!_mVL;%{qHbUw
zbFIcOg8UNzT{tU!aa1=fV{{sgga4lIq*I510@J9ZRQ$|xrs)a<Gk2@#2SP3!%^5)N
zE;_As+dI7fX6iquVP(S$_80@bxeTzTI4>jD%edin1S=}338bu=&=^Q#5@AT4qaA_`
zUn8t{vZ~A&g5|U6Q%c2E3LZG0Jk74U?Z8M0_;KDcW9}}{e$e**5^7A(y3Y@Wd9Jz%
z7rKWSOS$6eBJ=b$IK!o-_$5+g?3oIp_|n$N2t#Uw{+(IRnZm-`n*ff+cbV~9^ibZX
z0wv8_6cD0}tfF?UW=zuv3A28>6Ne4pH_H+;(w8-w&qJbsj`0X%F-URu#m;$pSK6|S
zyxp~<)f~B+Jv(e}Hb#F<fuKKAy+a-d6ydDL^*faz?MGO~wP|ctKB%W1Yqj1Exrqe!
zxzXPGS!vBVQ@p62{f(RAZx^PvFn@M7GgFzHy45UOU0hV*^YF_2Lvx^%`<f?&Q9m}D
zWyAH#a4)9y8Q)~&-QQA>HkmArGBDX2eCBQxQ@Enn+~Q-k1smcW?If^w@OpvNj4O>#
zV$km+g~Lt2Bkc5T$|!ou3*~qxt%`6pR1TO39gehlT(ppJwe`~!wYla=4W7?ogEObp
zgyi|pXI;DD@!R80g<VJ?6W_kSK5Sl?Z6pPQR0G#Mz09WeN@htq0>}S2>z5?fG?r_?
zSm1|h`}gC6a!r4#(=J4E34!={Yk!JqZo`X^6n|)v<?g$0pCv287>{L30sQbWVtS<v
zL29K#7sV@Li=Okx;%obkeMZ~iRf|W%MW6DKXQ7maII+*w)wpF?k?ZVSFVV&YS(Jyz
zT=0acbRHS8W;HU=8bMEDVs6e`qX}F0fp-6RQM5}zwgtCJ2b<6J2E~wB{H!>vGT&4c
zsauR2Hb0ehjZ@}2@qpQU1=$VeZ*EKicu#SCQ`InsB%t7Q{Z1QsFp1GrBk#v&h_qtS
zL4rsOkhX!-YH00I6ffw}>im~hBw<y&ffilH7e{l*Ws3Zftd`6o6llyY^;to!d7!?s
zo82+m>YupFR!BIlRqf(K%83&nN*;=CsYBSs0?Rq4M2V;jrDXehK(7nSCL$4|HNpUU
z=-|*b<QQbVW?tO~?g6e(dY+m5=Xw_<(q9|i>Gri%+Ni^hE3D;%cygqtn6?=utW<ZN
zF#xs$ef$A>TCyU~gzs7Wyv;6d8NSOdz9PUJBN1-HP0xnNgq(hA>K_Q+=_GS7uH&~<
z5x)8R@AhTqm!^3+v<2^_oObeouS*zt1`}1E8{Ca$WH?7fSheMcn^d2|B|XP6-nJg`
z{n8rHkJH+3bT;&Igz88+k}i&Q&RAkjT%P5*_z)?D7~Bp2p-c_OIah)yM~FcU6ayed
zoP^78NTo}lJAwz_>W=pY3PD6j@D!c}6?MG=?T=@n>Q=^L4N7T!{^rJq*}l4Y|1kkZ
z1oDCNh~d>WvmQ-uBG*^Fp@4KTmtm*zyvNYr1zvR1U`c=Yfjil6e#zHTt;}VVlc)vQ
zD0dddF0AsTdMuRmm&xn$Q4rK9a4p%2D%s|Xtg~jW$|-V{c9tQ~&=e|>dM2B`qVI}u
zLrKOnSVThEG^)pXD)VAm0~Lrtl5)5KRRMqR;aA7JIhf8!$6p=tOpZyR>L^GOT6=@}
zF-hK?t*cP5PC%*fWVoX%NG|QYLh)bBYzc6SYwWtTGpP~yB4B`M^2XI0^_`|_<UCPh
z!8HYw4@L#`6?13;3u5LeR$)jazf_YP%h9fM#j=dbDph?7o(KN1?2W~8{_&X4SkPGb
zE{e-%qTby{P+=#fmn?Ue7TU=LFKUCjm8R47w{DAxj>6|Y+65My`)AA<b6P<JwI!)o
zbw#;vT3txRJsfejfn~Ew_cnSVMJBBn-c}63+1oJM9{*@gM#<cA;l^)`5Sg8-uKJR!
zd_*H9hOyNg_!|2V18@Om&T%diPg@dRKIcs}cMFXhbdG>`3g{LMen3GUTvMZWw4nE1
zbahxqqYnX49e7NJ7qy*ilUL-T(X-`QK6ac-7Pmpp&AphW%f3h89pXFqFS=*PCrK29
z`=4k88~7@cIV`#u&n8zti#N%9m(&~XI9-R3A;ySdu`{?=2I?Kn-Wh)|J=9l>!*wZv
zB}mYDJqK>9((r#=?pg_NwAPb?8W7UW{uXu<9{e(PbD>2NQreFVMKuaJD%T_vdkn3g
z_PFrG0^CM6&0NCbKen2lR%u-P6(PqeEd_5$d1n%(aElPoH^@5{wt>NaEG6oUKUd`R
zp7irNS%=h+{2JHEtSb$?8KpLD?{IAM^Ml>-4L0SG?$s0<@`xmknb{!TlBDJiT!U~0
zzAS&Rvo!1ez8-%ztLKyJ!9s73hEGdViXixU-W*FOL_!Rj3R`Adg~s)BccP4?IsJu^
zY?xl1Z*!tScOG3NgH<if-d7{|n{}3a+-eiF#H8}~s59k1UQk(-?I<i|_~bGAte-Yb
zHwzm|p(N-Zr~1E`B(t5Nil7qSwf)jz=?4!Bxw))(BP&Q^W@-wed+y8Z7I4*IEkpvD
zg%j97abYy02p?=dxQ4t(@l`G}{<_n+-AC!;eF2dNsT0^*bR%&Xd*O=XBB)8vM!G@(
zuF$w70$5Qh88&o2$q@puxYuKJ>%Q~&Dzycu7}q6W+R8mftoyoJ$GPXh`)*BL$;+zj
zfiN_V(^Q7&tc-mP2A1b%*o4Z6(yp4_xkv|M#$pBGYquubgaDA<0qH1{R38jMdzyt?
zM}$}>M3Vh7xhy!t5;R19=XxY18N!MW^2z&Q-qw%CvsQ7bNj<XJ<s(ZX`e-i;oxwv7
z@{R$%clEx6D_IY6JM70?r^KH)51q!sgx~rMV1^8S19A9&uSWhUIys{5zhz8B?E@h$
z6Q#h5;e;(v;~{LYzb(dF-!sk;uOZcPdtih^<i)nI;{`{R>?biCI@2-z+k&5oLAVg`
zUs1mlTw#Pzt~5K|7ZcbT9Q5g~Uj9t5WNPq<aA?H|PbBzfh-{udzwY`T<1VQ+%J`Jo
zhHV#_!KB{>`DVwkB`zre=;D9{{d%LPUq_2Dp<gOGD38vE_-{w3uagVOvfUB`+|wHM
z>UaFbK&LLG)lTkxs5Z<@?^ZMn#6-mdRW{IxpGsSR<D(5Io)qS-)_{M(q1z)W3r|4@
z^WYPl%0+u_^cw3LK8bZC1=}4{%T(PsKa`ov4Z4xOGzLs;x+41(PsR)56<^?@s<qOr
z6U3-H`$;z^<%_Td(nweswm`|nsC4#A%Y<6ADlataGG-rL{49nyf`bKX5F0}k`bKG9
zat-<isf<rH)t~NlX!GShhaSt^R(XpJm(~uiIp#;2H&oDaAz85^Kgd0U8o_|6MJi`9
zJ^g<Q5&h09tT56_xU)AsM!Zk7<Fo(yQ8Rj#4*-ojvF|gawnS=$I)`Pc5_q+#!6i(i
ziInMgh_a{sRI;RHeld(re2oLr-*w4aT7(DQ<G!rcFszX`z+JQ)rqm>;s1wN|`fBnV
z=k>?Knf4Z!%Rv1iU$_8IP;cULFnhT>qz`LO66Shq5untGZXqhX$G3lSZ;%o*!xznq
zrJ>*SD;3^DTqIeKi?ixY=z4y|PtEd%i@M+k0}e{f-gf;6H(0oKFSy=4|Bbarrz=r*
z_tAuzEZ516mZw|R#M%jgB+9)eEgMgAG`@yy593{wCUl8F&voGrgw(Vj`N>w1?l_PF
zuDjwWa8yw{2`}Jkh59=I?!G}@CFReTj}Fx$0E#Wn#l9qOP(krnWo2u3wS2OvifeO2
zjbTlD3C7yGk%PRpwmAw~(mNqoj$sbw{7w<0>O!388?=I9tq^d(nkyY#LCkLQ&xCiQ
z3oq-Z5;a44$A!46wmKRn*gHE(kxFbI=h9{$Pe*c}gmPMwcuzbTS-B$nU}AGiP6d%n
zdAPm3nspo5f1BiS8lL-j<csVUBl~EL$}#=aZzNfC0FrhxdSS~DC5yjm@}N?owVPxb
z>(<=<-w+`5Uk0s~Z!6+bt(25*LJY9o(kKVMwn9>1$L#bP43#5f*wxW{{*G1j1n8B`
zuB01jMu_5)Qh?eg%HZYhsZd+o291UX7PIGa;u=*^Ph(i6C%gTMc8$Ot&cX98DXCL<
zWDyWo`kp=@;sz(P<j-mPpA-sa!fXMbEd&>=!b&+~BHNoN1kKEa-XrRE6TBb?|NSQ&
zr4eD`4ZPvi74m&QedaEbFYg=CF0S_^J^}T>Tl)Dpcx}4ow?3fw;(=u1JYM@ZSW~*V
zFMVEK+o1C6eaYiCt#0!K-5rgs`2FbAd=Q0HJ(4PZyO{JI9h;<N%TweHgII&2CBblQ
zf~C(LID7a9Fq$PcFU6b6&)@0UyX=(NOL^P>#!0TkVTKY|OplAbyB~}y%&;Xi;uSn<
z;P2t-L>yl-m)=0+M(AR$b%IN;LeIF&$g}~h#xd8)+*ODLrSs#^ZHp9CEG{$n7s-Pr
z3Cl+M2kd_NmH=HmLBd{>g3^{5KM~w|hd?L{v4HH6R7T*Wg4X!yD;tih5JJFef>bFk
z@U|1i{@Gs-T`O^0!(RofD~MCT>4$iV7xdPPV7lR%YK8gia?{qr8n9#<Q7;qn^FP<g
zhca~x`QwscGCJwtX6F)ZM)hO@ThWEl35^}=IK2`5B~vbOf9agL96txIOBa6hi=mS#
zW@lVe8PeGwd4Bz&=KG)vB27TJK5snhVk+YX3a#m!1EDR@pB;W3Ettipc?VXMSG%!f
zpQ1@^0D8aab$R;1dbF*yf3k}pg~%H)n&SS9Ri}oJsxgFaTHOqY!pwgVjVV;!b8$*7
zr>^RT+qHTbuGT(fadr~#miWOp+r-5U72NM*B~v^lHj~eW!+EO#!hSu955zd%QsEv^
za~JIMY<|O8sFs6fcljneP{$y4Ap0Khp_4IN>XqeMqDLR-D%Prh4O5OC{ET7`GFG%=
zukc8l?J6J(``_@&%oyZVPpUoKo10}*mFLlna9O@&!gv!qZn34#()d?Vg>&Z=X7Ep}
zDTxnza2ThANvH+>gv-QQrI3B}f>L^9T8c!of)36OO+rUGz%r2GP${Jl0q*jorE6?Y
zu%D5ScGI_s8NFTW<0@T4Rs{HLeS~wm05saVtcZpoPYfSQ(>MB654lJc*_DId?|M~%
zX>ZkE%vkB7wwu@BBI5((SlYEb3XWv^6?necqC@(4c#F_2^EubC2pT`+Bvwz7b(~Zd
zewI&$QiPj_UCN0nkeH%<J1xouJFLE#mWnEi@mIN%p$gN>f{Ut)8we&F)1JV!fQasV
zGNfO|E#v|Q;zhj@u?9n|%q^{P&&Cm$#;yZbwl>#R^vxyrOJ)jtwtM5<zV9u*o*9f0
zj}8?Rx`(ik$4+tO*DUz(*5T~|&!^n-aM<qz$G*!~CZyjI_Rwshhwe`CFJ}w&0bIPt
z6^vVKx(7=>L=@=zw`gOqg@+|foB&5axW68*XVWCH9&nNgietb8F!gucyMahwQC%d=
z*C%8?TS9imw{w%=#B5UPFv_5igVCiv47(!#b4a8^_Loc#<#t&yN-Tgg@!2#}01$g>
zJuSf)l9J4JJC_QM@nI4ri4mJvZ6bhqF-Q=e$jOKCT~c&^Ee=XtXQ@hzmkNbzGb7@v
z@9`Slb1jJo%Vy(ypX<B_o-;=EAy%L<Q$WY=DDvC!vN<hswtqANX?fg}FsjlTJq}Wd
zli@A$igZ6}=c%)2%qdr4D*yI<zJWvs`w4Iao<|1fC5rw=*gCMHy=wF=`lr+wbfCA;
z<?fR;g%{qwvEbpjA*Au>o&<GxEyC)qqBHfpnETvv2QU@OLNJb_P`@=I)LMG>7~{=a
z`*2W)`JJCTxK|yxGEV!1ruT(vIGokRQPrkgNwV|}mEa)keO@1LIKIPeuc8&0x=%w1
zIJX+teDzKHK9%L>cE+k%<%=i-`c2Sx8ZNH?ijr+o4ImCAI_+)H&fbC8Az~UVRuXy=
zy7gh--|Jr8=kz`~qHc?(^Ct4SxO;W9(GV#9RzxQ^!?{vp`zODE(0?mUt>;pcwurH#
zLy!uB2!}3>gq!@BrB8K28=mnr-)j$nWi7c2dOpmn3!An*T(AgbNDFvI0s8<b-z|@8
zEEhb(lQ=`oy%w&xCGm!NBnjh&icjO!3;QZ;A@7{28Oft@zgE}<ZV2qFH36HRF8QmQ
z+&y(gfgnV9>G!_^P(KCbldcz}zbXlSo&(IiAio&z?~(%7?qa(mnRKhD%*!{Rqb+Xg
zZLmz3+VOPBg1SCKPklWrjs09WR2h@ajTPT>F)jkl6q<t@&Z+wY(CivvH)Y*B6wxTE
zVuviB9|r?RFte8Ts?Wl70wYFU4=vvOW&lsFgwI0HoZhm7V9cZ?!i@_}jeb=g-dF?M
z%99RUpC^u2@Qy5ANghKpFfE4t(FNQ%9nQL?m>P&JdPJlEwN~9JPlHSL7}h0xWZWn~
z0zaNEsu(0aZ?aoqeux#u)~wT!dg;BpEn>qijxxR!=8k~{HqWvaFDYBoGNdHF5%|sG
zCqeU}-9(g%*Z-~Juo43dO=C>>xp|ykfWGiC)5#zXd8O|&fm&;LLR!u;GxCaOSmTRa
zLN}=3f!>%V%BiI?T2d(u$3AjB!okHqnl2nOhBj|;&=|H4|D;LyRWWJeZSN%S*0@#%
z{nAnfHwF1SK(;r@P|4hXdB>iVeq3+=W(KQ{pkWBVQUQdn8GAC^RiQ6eh;MR00`XiW
z0;(;h9{G9uXmv%DKjMJsM&jr4AZmL*uYcC>BA><L<ol(MZxj=p;{_mfIhKm$iY?I^
zGo`q3wqF*HQqf)s_z0te1C`an&jU2-QgfUns%=sCp$|a*cvqB;U^(0ZOaJkC<c16d
zTygBI$9+v{C+nLx4h}8uHeZhm<TH@)TrzFNB+mMG@T7Kr*(<m)gULZ2xH9sBjZ#8V
zXNO{qO(RWykt8Ob<niHVEE@R@B*~pn7JOiTt4&+t(1hAeR2(1@oNIQ;HCaHf`nu(B
zH_6A7Q9%pt2yttnyHa_9sNPnjVqr(>tK%qXRi-q&NGF)$ODmx+9Y2mFKk$@oey8zl
z);0;r1E=5nNBX^kxHK*_jI3LuuagE>%X_Kxbrzum%53T_mT3VK+dR*Q=Z~CK;AS&y
z*(TQnu}0}x7Bsh{_|iAAVy-jdNVF$`xZsa1j`a@ACd}WS8A=lk>KwGEz6T}3G~}}D
zyMmyrouYG&uKtnIEZj%RA4i<90tne;_X3?7P%8$71$SeyE)3b85$CCNiLcLp(c2Qr
zs<@Mq1pmVrbM}t|+}bkGfBHZQ8LEyokLGGWFm~le-B`F_e@Cr|J(R4aRc{W-AL3fJ
z()3M6uB44&sJNlr*%I21S;vAP56V(HO=c?^sPW~+l)lB=QP{XjMFqw4kTpO;F1@d`
ze{z$ouq8Hjw|<A;8UQ4Cz8_n~`DaR&CnE+r0zs;~u>tQ<xTajqqq<yjU$@FB560{r
z@|VIC*-hH|n`GvzTa7a09f<bB1`kWXn!6yrR@)r=C-t}Uu{hPHXGU2{?-k0KRoyK!
z&9_By$I4L#J2<5ZoDG|B_uVV?$GO#D(yPV@eMjEdK?lM{N?yR7>O)6<T|Yy-WnTyF
zWzBYuOF$lap?O)@f`$PE#t0qT7qO0}AC{xJ(Q$?n6_E>C1)X=7Jmm-VR#gzOLp9;w
zm5{{@25yfg`0@V^w@8oGUcA-**OG~LJn_Cp+1u`+4WU!WjT@+Q!_gxUCw>DHdOw?a
z4EQ%uU-4zL91foR{6ae@Pw+~OAmwIY`Aax*Wx`#@Ey{$?2t74Wd;?IXgSFvtJAjXi
zEu{>7$c7q&>i#}m#b1ElG3>{OgH<NkqWWkBNuwnq)9>-F3Z>0*X}1t3W9yX8-qU`z
zMlD3raYkerMEw&-`gg9MFf&|raa6A}nUM|@gm#-nw_1P-3&o)iDq-^Hz#G<SVf4`g
zpmwV@7L*z2tSsZly&4kFCLVk%QPeGCeu(DiN}Iv8X-L)Y0dkc!HW)W0vMHEcTy=Tm
zl0r3RAC2EuP6u^a-K`&boor-g1cTErtmTdD*@V&3Nj@k*u90iHdhfOGGC=?b`sE}i
zFplZJU-2%Y`=|vXKJ}<-i@S;RFO5skuua_bW5aRi9Ockq$s#52t-qWq_3Z_I-Z6g%
z@zV=YwYW*%0S?>J@vjvo5#CYx5zo}@<Ut9un9Ea>#AMKM8oxjPxJm_0v8SJ=IzT8K
z2`+a4MRIt)9ZO2j{Hs?+>$|1(azMYyoBTzH>}|o7`1!bjFT`46d-ZJyN`s)<e3-_*
z57mvQwww7dPcng3Hp6_r(n^tlwz+TaHuOmS>%m%yYh@kkQ-_89W`-G$Y`*3}2aBpR
zPI?!#frmks-kY&vz>n{|#dba%mmzV*uOf^d#@@Z4<Mgr|bd+ZhSMUvh=<|8{T_>lu
z4f%A$MQiea{XZbp&-e~Q2BvjE2;h0giYgTAkU^(|!@`<e(e$ZDaw@l9dM$?urYuBG
zj3Qv#kp^5r%Hza%+BJ8E(PRpTmt(c_5u%Kn0xjuLs|pyDY#HJ<WuTonHCk}ybRVR&
zkBghQ)anI3kL@b<Yz(@KNHDf`72u?Yg-536$y+SFSGO++rjhficR)_L1=`-oEsN6g
z3I$6)+77d_3x^ypJFe%Hb`<Q=FVOH90f|<KNiAEOdK+?<*!X}&YN@yWS$Q{>tT)<F
z4Q40tC8B^1h0Bxb+{01x<68e6dtA=tpVgUso9M`f9J#tv2*+W{!MF_Ac8bmi5bYg5
zmbA~AJ9HfBk@6UX5tI&i*!XAtZ6Fcah+?zY3zD4dQ04{zOFG`*UT<|uml0t{6@(w=
zX7YzY)gqn5sIk)c^;^=x_txW;>4OFReEzBj<Gmb^&7T0J?xyr##6RNVBwm5YS(*$W
zF)q!xcl57(STCD^!QN500W)PWc=6Mb_dc~)!$zj_;2I;}6Geo#5w+W6RB6xA5=nyb
zHxg~;QvQ;_-@KXUZGWT(JOKj>D<{58-vr#4`nSF|yrTI21}bKyl5nlAZ#lp0;VEG_
z9MIWB*c{dT^dlm%{PkHa2pMWm)_UpBr`m<R9xj{b?Cm^bgn?!m__n8&My26nhzc;z
zVlZF*p1muky26?nGZ5b?dzRD$%n?8)FvD5<jC{)e*?~UOE0{zJmrhXc{By)b8R^y=
z{lemwcfLoIRTe9j4W@hB_d|@t3B$GTQPH_SX1<^R`ID@+l+oj<$84`<AJfL`g#{Zn
zBsk@EAl+%`-JgiY?tx=wNr%b1RI_|UnjXf^QHbSMqJFDT!^Eb!{SDPlbhJ<WLIBfr
znm$`~G?J7m{0B|8X({{EQ#(8yRxAfUx^d*xdUnUAoUc(b^3Zxu!M6)TX#GqLnIaRj
zq3I33pb%*jiU%$9Pz3R1r_UQap1zq@oH36#VVI)-Mz~G8>>GO{{y4D?h3g;Gl)4v-
z3U?Tl8DEVw;7K9zrsFd{B`bl6^&2!#q<x221;Pw#XYP<^Y!48)qkNliAj~pJ7tfz4
zzYw}7{#)LcfQwlgIa%hw$?DGbKLECHM)qjp@JZ-R6l2h)pGD(_i9z0_tIbJWz-QE^
z|Le=;0mXhqSlb2-$QAB`9Ni|7)9nq08c{@*3iLdiAj%dj7nvR2zWD3<WsU)iQgtCs
z-i+G|Glt@!nI5y@6?qz?FE)l}DEf4Ob<z2t^1vKvjmNMrI9$?W#@W@rBw;-^ObN1B
z^F0)boQogyHuUmjLLW(;spPaQ-r!V+o(cXbBB!XJh;Md~a_`0pbg@!Y2lD(2lAVmE
zsmi0Y@9{eBo!jAUAf$-dcZNahMI_{Sv%KJ(!sr|n$4Kw`Kg^IY4wvg(k6y};`uLw^
zTSurxh?mgWMsnD8x<K))G9G@_4o|Pp@W4!y{fEQ976YS^cG_RbQcFEsX_C$eat-8N
zst<&LHpl#bS#CKD<m0pm=K|VXc*B7aIwH7Xf)lrtf54-ru3{ycHHGhiH(J0CQYuM7
zP?(75RN@MNN8c?ZK~f6-ddz?^{x6{3C<FK8zBtqCkg0CQ&h_eU81pKpgo9=0q<NJg
z%~%163e`+-rLB_zq|?N{6-};|hfp*QfPC%lfe#og6aFnQ;S!lAG7rDy*M#4geL_pH
z&C2V<Ut67-a%*PLD!c#c8E^L$kpL^Z9_W(Lf&?wKD{6BJk*+sCDSj&-eZyCtTx+|0
z9}0_{&K<KcG2-Qd8ySh7IrUmfsowwvlUET&$+El~rjM1Ox$2;(#;}G{X9U{hyfyj}
zHpq&fzSC=cJx@?tMBSdyOFW!W7g$H?3n0W3<GRnbeS@;9&P9F_bj4i%TyaUwfT%AH
zJ*Wtjv_FS;*+jkCasLvnCuL8gtB#+>%pt!MN!dFA;WEj!=e#&J+w#02@&b+C!8Ck=
zi5DD0V+a=o19c;BE5<AKLx}8w&gJ1s^Lr$C<)=3flwBMS0y!H2EUxPM$xBkeAXNI5
zzxneVy)cUN6eneD^KgZdWX#+$yu;ep7qW!9TJ+OSloTEFm3Y1;gkn5xPRLc0SO2nN
z6hE_<sZH}(v8lN#p12)OI2m6e*+As|h}vEjBMKqh^!A_Zd%d~{yR-3K)Jw$|u^dL6
zU;;hqF>X1Xt#>vm0dQsocJ=i#-s@eG`tgp|10-u8&9G}DgwW+dVyv_HJz*|fhXW=L
zOdS8;5VN7?VAu277T!%7rkzH_+rp?eY4{Pkv(8(h9aK<s?&9nw{h8b>Tw(}&_selk
zaj)|qdvc|1d<i<j>~s(p)et<YqAgyCYKr`xU$@TOvp10{CAK*iZH;D^(F+_oK`!R6
z%K_y9zbK5q!{EDdXb%?yiUaLWDDln(>DEy}@7+?VisH5$Ps4Ac<w|XWkeMf)zi1qp
z8Wm`^_>^I7&b*^=;?zTR+cWJ$z=^f!qk3#j%X4#>rO0WNNmnMx+>6ptz+Wx%LwVA~
z#Q5g_800LT{x9vx2cpPpm6X{Y^(Du#+#0G&wna;=BHYPTVz}rF88DHk8VzFO&6&;8
zO2So3L~4@ub|d@}2=;NZ92Su!<g3#8h*D)vsmnRpzz!U`*WCGUtP;qWM8Su@fI>>P
z@N`=?!+?vX&aw-Yk*)@f82djE#`udLegP`9hd1kcX?47(bF|l_mxMX3NszbhR!d*5
zV_UZ0%PX`j#z0-to;Z%LYs*1ZRw4_-stAQaZ^>{$H9u`;HHRsM@ce5FNj*0YWt-2F
z<=ENC{eax<`LY#OM-!SXc(>cLM*yG1G;VMiakVcMi(=#pYyRbfA87lQb3YyZfFQnQ
z9_0fanx7oY#4TJWdN%{$)299nI#EWqD>>}^Ou}l<`S9J$jLLmpEf+|>&JMtieRlSl
zKV3wmfMz>LnGz+clC03BN>1GHd1YtP6A8T$>YUgSfZZqs1#@5rGLkO=I%?5;L_Nl7
z4)iJoNI`dxnS%-H3-r}I3lJVjaQ0jYnxzLhLjf@Pj>d3J=f_9f{{E9|@L2F(3$-Vq
zXOO-E(fmUd7%2fe!{tpwATjjhKE;Vgum=8r3`>C;a{(uw%MgM@q4kFzhx&iQbmfw1
z38^*X#{d*SJ#TKmUyrUOd~+0rrW)$}@tFeSMz$9Is1j!uO@huI<%8a9lKqoWlLnW&
zOJ05&MM{>W>xX2xXb|KJwsmcn#AudR9mmae;W_Qt!c_BMtxmslQg$pEWJ~Uryy6OU
zUg)NBUrIsJ^=^y{O0UK8bmd=jb9xri4Pw9RZwn5H9#k4H#08;J9XDES4(`$N<QTDh
zn*{??F%(40CsEkYzQ{9$pTK4#Rs)SsVsZPcRC=Rgp{XhN@D6_7PK$Bky{1MKFzJ|7
z^Pgt`Dl!33_Gpv-e-y50ym(^>-XVz_eSB{)m02Cz1)7;M>uZQflA&8ZP(cN0vfiN2
z83Ythf5Zg1q^N&0O^o|rTh)nI9}&HLfTN>7ticLtD)GMj3uwalFnC#!e5b--iuG78
zyYG-h=VZmJ*v^^?DlvX3;EYhl<omCn%)uxa04p<v$m!k50$J7rsO?JhW2lD0Clom%
zX@+9y{6Ka(@}`9B^fpmvr;~Nk7Kw&dQrlMrV2QQ4HIEq|&NldYY_+2@%IA9UTffK7
ztRP}B4emz3jP3cclJiTxVmxP+3hdkL6vgDRtUb=vB9)Oolh5NU5OREnH7$@ySU{h8
zNmp1{i#Y<ifx!2Tj!l*2eXRs)oL^Sp@izC0z5}&vvZA2>0+N#0&$~RsxVUv1QGYwg
zra<{hQ(_c#f>oyQBUlQbwSd8C&*K}}8EZa$4G{`&s?M1GO~y%hJ4jo*wt1y>h=D3r
zC&6A_=jNX1IX)y**}o!*vsfW<>>)u`VKlaW2`;Anf3jSk|J_2>0POkW#}u+&A9ogA
zb0?Q@tZ*6%MejQ486^&3!qf+NFolwZBMk;4*K#CLV9)#^JO(gou_IB|k!-^OqBrFe
zAps7VxM&Aqux;cjrUty$fkw*OP~eA<^PS1ST|Zw<Ed5y89ayxHamoy2+k|G*YcP<f
zpnT~04_Ly`XwWtWWV3m}S0jnO`^(40ocJY-WeSWT+s#4U4i>7LXo(!rFx@jtgUzcS
ze7)di7Okl|{gYOf0aB}$fX(PY440q)NME+(con?<GfX`Z6HFuC{lwb}V)uG0NJLBD
ziZ-XlR5XtmqdI$kM<}wfX2?d9d0rg#a}JsF?B7CYpo@r`r+*X~m&>BY272ZkQo7?C
zQ(i(pvtB%C)RUHAcYph>=dUbFpPlNSS+*Z1R&a>2`OY7Mz383Ub+1h(V{|CYs&QgP
z^G`EZEpIpLsJg!V?dr1<2c08eWB@qhCe9npV0P&An3F}bSKhG$W!3$3715x8O-*1L
zc@#A&`57UYs-$%IA}jY7;z39G6f)L&cCHv_4kXV8e$0_zV|Y$$LycMGkX>)VIvu2r
zheCewhc-bnP(vWt2`Ha!e_=tjSB6BJAWR#Or(NPlriOJuz7-<6-uO~^qSc#^Bx$~q
z7<rv1yPdVcxv5qjezy+p?VQA-Ci-PQPDvPj<ad>gqX?tikp`;hYc?Vhl1k>q5>1z;
z;MOi~^99;Ij0muY9w31ZkVF@%xuZlEX{-RY$M!=28}EOF@sO$^28t^$0&zwc)ADfg
zY~U-x0HX!l9@p#&WC`9@D(?^w5cSnqXs}L)6tTw`PE1(ix3XrJw0(1edBSP2q~>L3
z%x;?FK&-pYLEh=PLWW%*i)l|u&l{rCvkHpB%AXZG9T`dVzJ9~)vg4^nff#**iWC>!
z48fg-(c!r;Uwq-B!EBz8sDy?&SHX6b+-sm$dHmo8h6vahBkeVWt)2((QnoML!3Sv%
zPiaOu<(~Rx(brVgYEDKLZjCF$ZG6o5*=(_Zher7yaRx7<`=7Dr-NEB9r)lQLpDL}U
zkS~kbEzSK{>iP}5d9j!}0?S(l?PydKH*5S3std=rxVQH+@SO-e&(tLXxgW#Xr<rx%
z_U5U+WbrAu!XUMi@NLPHm>;_m{%MdeVNQd)%%KMIYuJML0WmQ6Y)(7?`sp+YG1vp`
zVP2fIEM|A1|I1&jCTWMLTM`XN^Pp>AF=Ba<0lWSMd-O(ZaWu}Q`)#Fab+w&QH!P=j
zi1#kK(APn*WnKMZxRSxJI-y#$C<ec)uv)N&k@d)YaeXLd3a7M(LACtn@fRd9_RGzS
zY#2r$?A-zqMb!WEj2vzF7x!yIES}5OVchzLTc~fLD(oGFa6QQvossOXlT0x9I{`1v
zL^2F`fm3IkL4;(craUO(Y#;E(|M)-akQlS1m{)sO;qq^W8u+B!eK$joEV!jS-XyAo
z|A0TD!Y!66eS?7;$Psf{(-(v<<X*&n!e8WO&PCQ$?x%&E^fuPMq+gqrVb779Wk5I3
ze;lo_o*CYLSU?Z#^s$w|GbVY|Nkv;9vDr)FHR0?EfVs_Nw-+jis2Sv97d)?i^b1PD
z0C_@s?Tk~sE8J4*Cs$qIRpEAx%6H5US7!}YBCur0VJp`De-n9EpggdP`d#L#s2%n-
zgfUTlXB|Y8ur)g3vBmL4eo|u>EX0XEEG$vvLH7B{C;haZ<<k|yY|*@{-C0d8f*s2X
zQXwTCMYc?njP<I6rAm;J4jxoKksM{H1@6I_?oxvgwd79gU;5x{M4mgqMV#K(yTcWM
zXHsX)*e~1RowlUCi7nOqk(D!FvK~*rpXr4}^Lf8;dhPqBF78hP_coS{j|?&U#>V*6
zOw+JIH0*&;9bq{jFD~_!Q;WSyVQdB&uy;OSDn|@-D)$o+0u7Q8(i(qPUid_nEhv&s
zuX*y;{^6T}f_<Mci(ene0+5HRP=oY{=r%h*4S1MZ^r`E|K@+S!Ti?XOIVLl;5vD{<
zW^gy|fEF=*qyB!_mmv%}oW+oEq6c3Uqq|8?Pn<3oAi+nPSX(%!?>W-`_t>*Zl8v>v
zoiDb=L=z%n)8w@g1=GWM+|kIDZ+Du)LRntcD~L!E3yYrj_1C{mGfIDJWLn}=LOz`|
z^z*BmR*(ydB!h|K$Q*UsLHr|6O$W)e_2#y7D$`E00;N5R>1t1jUOybsup}z!(lZql
zfVAZyInLR*Hd_S~?IQeQ`Us*2Y*oX@XStE${@owFA5`fxXX3@QB1*lDR|HWxGVe1G
zr6rq_K8=KO4b8#gL$67`27Ue;c(D1=mLu#y{R{uurj>hm@Ms9RJ!od%uwU89GH0u7
zGW<5u2N(po2>6TaA`ry&RT&|c^Amd8_#giBhow}osqdN=ZfcS?QKA)7FKQ3O^+_ZB
zqW3CIWpkxgt)T84zxi8mH5puK^wD4eIBiJfl>zJ{r1r49FCR}@1G-4S&dS*8I@!jf
z7+yxjPf`JY)6Vwv1c=Q8aYeNYiION-uD{A%N0_8l@|Ed89F8ai(IEifsL#6Jdez>G
ztPgFGH(iR`(QJ)W>SHp7PsVV4tv2mmGVY5xN_#8QFdY{Ub$Pg~Fkd6S|E94Q9XEaY
zGnVX!!`mT#I1@`h&9x)@mh{yB%jm43W3R<SCJ!3zndtO}ENyzl@PGtQfm&;iz{3)6
zk=(_;fPlDiLgG&a{?d*GFVw<=cb`peY1ZD|jAl$d3IAn7fOa7gDcL^T?(DP`g2=jn
z*Y-&)*T;f|L)z`q&Yw@+hC}xqc(aLMDr3luLe5PD&^X;O(hx}vjEj5<7x!lGZSx8^
z3JlI3EcBdDJKNJ!FNU8!jd1&&_XAM^AG_b4K+%Y`enn(bHV7>_CI><IO<+Bd5t<8{
z-rEC9XqNfKj*C)VV*4=D&Hqa}FuuS))0Go=>~<>pGh=8oy=lh48Mx>?1^~)U{q8rN
zy8S9ifS(_aFQry@WI;?ow{($Y)ATr$m<1C@j$gzWI{TE+pWgmn!JvXFL#a1o0*}zv
zeCi?_aQ(ph)IRz=bvjL*;8*%w!te*~qcv^hr%j#F!^q>h4NIi$Z^TsqYxCYpdI6h&
zekTXed}XY50&)YW?n5*;!^fNpnH#znM%;yom|s1&;IcCQ4HR0W*UT`2z*56b03`+M
z655kv@8?a%&ZlH79N2?Ar#7O%J-<ef4f?H6aCe7r(L#cu7GcL0O4vP)r=CR}Uo!<8
zf|0ZBNG%q|uh&YtydAt)th?Fa6IXw%KIWVxRZn)S7>;|Q!0hcfy-pLV-0X*IE_V;x
zWhYGaZjA^Po3=2U)kCRG;ZN)!4I4mzH$=F${69lXi-9n}@T4evYhG05N#Q>eE;sm5
zm<y%^M>T-dkwee45kGQMO)`9w<Q%4h?P(6{+=L|-Hr{H4P1#`+{6fpU{LinPc;seR
zMiI=ZFg=e|&~L^ZydeAJBiRp{p3jL0RpnS@@9fb!^=F0S@{3|DS9<r83YL|ew{tQ%
zbv9;uaI=0(;kOi#Qj@ZT4^nB@d*Yf|_;vVzkLVmI9)QnG?y>9VJDg*(o&5%e69$oB
ziMttl`^0>O;?3D4;lU;Thdz{4wF;}<U81S>gB8oJG-V7uf}8n|G?!a|n@xn)@YDn<
zC*^}xll~qi4f$he#jlX7UcN2Z-*uE;gFR6SJ5-FRw*U-8>3zN=tEw_1@fU!GvsL+<
zkY2?uaRXXQw)z8Y5CXTWYunV6!8~P>$L40i?>Hxz+4*TnjXlWXHSxcAM8@B2i|m)Q
z)AN*NOY5dtHWj7^{o?Voc+uMr*10$7T2e-Y81_0iMonVc?%LYQC~Wo=xf#Tcn;A^y
zFJmy*z&$kB-3ZpZ)s-n@t)EjwKzJ!H!w7Wk5hJuu<=I2>ai(cI03%T;8h7H;ZF--d
zgv2-K^J0_5G5zIeCDDoc?-qFLkS`hr^Llot*P^A6Rb?P7O2rh>RfD6NlLleHcr8lH
z0v$|Z#^k<h^?3~fdoS}%X;FYU-t&R)_^OkwmwAif1_P7&XyrNU^YKH3<C4OwkP!J<
zqv>+M8QB>lPU(bM?s9n-^zK#ZZlt6Z+wek`v8@?89a|HgyJq7JBdkUNrgFJPCs=KF
zdL;4bmVt8P9X_X0`p$-ls-ggTA6jRd%wk}s-5-w=q9bE?G&~2Yg@k6}Ch^R)M}`d`
zrU*mcU6izGlS9?Ki5jv`(J3Sn(1tP+Y6u)7Y)39eCt6F1kj3)9Qd~<DYuy*O_p4Em
z>h(`m^d9$DtuEDGrzq_@m_J`j6<r!pE%(c0EaZVmWk;uUa4*b2BRljN@#%NNeQzxW
z6v6jV)rvxjY`bAyc*+ki_=aR9j@izI7(ZPZ3aF6O3BsIsJD>?OsbVNHT^qWP3%y#Q
znT`tZ6cGqG2<NVDxF(=KS9X9oQ^2BGueWtatcJhsf@aA?|2WJWO)<pDYqJE5Z&aPT
zK)I4V^~!|vy=Gep+zme&c<A+fd(8Dx0(_Xe&90wwZ+E%N#&KK>mnS2J3k*xpoRmzg
zlp1LfcF%?hfcGd-R2%DQrq&cPU;c1SDKx*>0xzz$%&crFeK4Rt%5KY{9shl$C__(s
zh(><^(@&>|_I)IJ4$ph@%id=1%+7YNI_x?MKE9u&B#-Ukm3#%YmSHg$DAET7mpC*a
zw(m54H7*zao;zGc6uGP$BH#&;Ld_B)DdKi^-NYsO7q7mpd3l+OIg}BenHacjw0nM-
z?KpRL@_Wa%*Itp_Y#86qT#>|~&~pt_qf?5~lr5)y#Q+;GeLb4)_Z4miDhPs*E5Jqf
zrTc&ky29{GiuvXV4o0-m>M~kn-3wgT$sdpu$xQNt+>w@g1BE^usO!jVW{|7acKyi$
z@M`^ii$<GfiFB@FI;`WChz#;oR3dZoF<rOngcoXA95%B~;2vJN<HkT*P_ridDgdVx
zJeEA!j2bPRjjkbiEb}NxT;o3D_-P>oCgU8h;s&*Dqbsx!oY9a<#CG!y3R)~ucU$#z
zoQXpR4xEtPr931po%@7idcIbj8lUN<y<X{+^@<aU^p})XBV&34<2Llz#Vg)=d?UbP
zPy}B!Kl1WYFAUSmwU0XNB-YrmZy?5c$WQ}t?(LU3Y7mwh0l3YDq{-8%<tr+qsUQ@K
zZq9m%#FO^4dHmK9!DLSGu@v%cq~FkpVOUk02q|P;%lfCgv*A}9rGYvIHHkQ5Jd-sv
z!pd;69sP~c?F?nc4*pS8A6fMxCd0RQaoqkmCaIZ^ZN2#C(x-~s7JdrdFHjbA@q4-N
zm|xz8mK?5zz(;I-;{Fvrnn}zue!C^TpJ*<2^%N>UG)gmVDsdM?^!p1!3i(q@$&o3C
zuvO2dRDoMr-Co$fePWP7iZ8!vmBOZR8%a`8#6rc6+{PN70f2r!qR%4yWwq3bLE6)O
z&dgrD=spp8d|lI=_t6$4@G#q&@0Q|=eNvjD{(SPa4o=j!@{;U9!X>)0;0L#1mO7w0
z&PK;?_t1X&RqTRe9>8ch3;9i1Yh~WNj)V@<DE7c|55IV{%;Ice5M;7)3Hi{+lBe#~
zpr>b3<WKeP6K@FUIZQbOGOZ(n&&ih%^88lUS*ljqjfCE~+NciubQ^}4>@ayrghlb(
zoqtUz&eE}|atum8$EO6w+uR}aU2;0{CKA>(mr5-2Q}MFUV?H~*KZ>P@bp!npq2+<d
z>VEh;66!O2OWs>@MyAl$B@P!G{z!`xjEhAdqrDc1;Ck(?naO5GH|uBWbmD@3#HBvg
zSb~z&N;Htup+7aI^gE+hR&XvE1h%yXJ@Asd+@-tRkz#wP0<%m->`gGhSzbcc{CIos
zdiD>^58up$$>8X8VcKLQ5cXOof7@GAZHf5Ak8&e8pu`1t^AYJCa9Y1|Sq$8eV4`0f
zNeB&@!AlB)e+Ad2lbUP*k_dA%gy%y`S1<i+<E!&y-xt;_TX_rtd7t!baU-+zAb75q
z7wEZFBYNUf7Yv}6-Xl`4d<5v;luW2su0F0h!TN81nPkfCbI$$!I87c}U1q!Q7CZcU
zHwwT42LmWyr54ka__`q=*UD&SHnxH%%`b&6OZ4>UW<EHBG!>GFvF9&=-bm4@AVDqz
z=eYi8DWl+9x&)zZSP~a5xSxul|4{CISAG75KqP5S>SQ9jP((Z7=ZogSHV^H@b#j{H
zFn2^e03{+9__^n0Oi}eypY$BWGF_>q>^*yTA6QD8zR_s@!;XiOsN(|4DtV(0*8aR9
zNY%FdkZJmq;MO?eEz15cQDFDJ3sNupWyYE{rcrr#KA@>SDPQ}1GGuK#(Hgs$dZsZ$
zJutc+h_{s9y~u9APNr^O_$%x_gIxhc(=ZU7^x3@tyt-{z&Dv(J6-{aMoldskLm;@5
zz>%)oH5Rw2-al0Y+!I<3@1+}~eEV_++Q_{$t*poSU#4y>oe(jJZ%Kjf&#aOl(1*pf
zjF_Bta%Ql0`P3NY10-vFyS`_;*NhePdy)-Z3)AS}AB)V;*(w_FchXhSpD!kpbXjhZ
zGcoCx8l!6z&F?+mdms7e$5fojs$iga|1jKI=l<P&D(l{7I9`EqI~;(I{oEg1AhCQ^
zV}c>ZKM9a?!ttFvDa8@*GD3<Lt0#HQc*Z^7&V8}e*k^saU|@-B&u$QpL>I=5FI<_C
z+7|gv-_~OBHU2?ldf|Z<H#e82(k7;2eqWlj+T$VA=^_c1`TTvxNvFrA>)hFDzDe`A
zLEt^uR;$O>$LgYrh^5)$geao3ZM()Q0FFWO$FM*QuP_|7L=Z_xL2-;vdrzyRve_l(
z^I!z8PAj>3iHAA*TfXd#VjkX*3|>(YsWaYOPY?XO+O^LHgk8j;JJ!1waDn2hV30P{
zL1BhI7ya>lW+6i}UHFU7PN#%SZbXGSNKNG&Pf;%0Rm;bLN0Z>YjFR=}6rO5O`8p0a
zD7JaZsiYBpNg_4S#H1EQ@HMpv#D4qEp%e801X+`eZ0hm`wm9bEZnqAhiwP)JxYKXQ
z^l+dsZpJ#;WPsW-#Kiw_y)C|lx6tB%%9+}>-Ol5r#rsR}^jQQrGiZgpV#wv+xjp_?
zn?OyWtk$A@KTe?q_69F|&<x~7(Mu#M#W%NM7*BcRS+Mb1B0#>MZ%pk`w2Y<Ne^N|f
zhzL&=V7DB91>8MsvRrb)Sn*4(Yc^l(O`VahB@>j`Rl8$dNlEsf!6`xvZ{7g~5yFM0
zu>n(-@6gTNt5-K^YZrJCb@A9{*q0DJzAj_*Sh>;6GYpwiE3{&mVeJ&B4fVquAhszY
z?+>NP+5nlUaY9QN;azx2S7&71x-i3SJ=&*k#4$T{b`*WB>d25tuFJK)ax7*Yel-wz
z-%HKz^9CA0g}R<WVJ{Hgb{!OFEwjr?aRgAXuTD}D2sVB(@LT*;xcRVS%6W5<%$usW
zA4{3n@iUzN5teR29=Fan#&}>84g^1`h?5y{d+YDS0l*T9WO&GcEM4WjoTvG?3HJ#b
z+gOd>Ao}4AcO360po@4>&b0aLqone~4)*6?L*N!BB-j~umXBzv`P9FsCfRa1*S&-5
zmZox23Cb|}4+!x8Mz>KVGhCe1ud|kaZZ4);NT!4V%Rtgy**U07N@N=cFH8Qj3=G*?
z)H!E>iDxIupi;KBJ2)CAf;0c`K22plHHRlNDxsf=Q1PXJRJGl~<=S5KCxhkah*#mn
zqPDJWB^#Id83%x*uRr*riY8#W!yBhjt;%*|JAiJMHSi?&#LU@jZrNop>wsP}>BAsm
z)YW=e{>@NGkW5D<I4+E@;jZ2@eJDpmI>?3<us`p--2JVzEE$$rs1Y<UagkNlHc~RV
z)Ns-*lZZ$@@KOnbO&~xeRm~@;$=rWp4D!UXoofI6dZ@Yn)0z2y8A!GqJQc8L2`P3r
z<YqI6Ietv8qUk(CT?M@N1JJ~jl=V|VL#cOI&`(2k-HVxRBcF~uu9|8C@PSir{HPRs
zFu)j#;ge&1tAcDmzu3f*!%F&<{RO78px~I>&9egW?-1q-z0dN@$R*l{I$3_7HGu$s
zjF6vu>K|%X6t2#Va-yQnSnCQ^_?`;+mTYUKfZ8hj`-(4MCJymEDXxCDF)Fm&*x@xx
z_vGD4zk40;9ug<q#THcg^-8jj=OX8;;W6wTxXf!;<d?}IGgsOeG7!1Mjv*}6*ITu!
z2RGQUJK*C+w$7)6dJhzoYjyB!YXT=D_hvE1NZ{E&R&$v%#D{AY%68VeArOU%TTqSc
za{QrBeEQPx=l@9P?`Shmq!MB&XTXd<(-AxW^t6^H_D>${HZY#_D@TwYn2>#a7FBY;
z>$Z79pHP+b4{d>M+9j_BD%i7KsGl?Jnol$YwO8dF8<upqPTyv^i!3@3$PG7m$#j~>
zK!%RxGN)G8(rV{!^zvTM4?xp|EZ2It?}<DREmlE6-wLG-YHF;j#tvOn25(*=ueguF
zI3~dH`Sk~CNTbVNsM;KIjb?OvjM{`@)(Utj1jW6-9jo+Ji_00Z^EZFD*ec_b>mR_8
zuvMVaC;Ffz@6AE~zvifu7i#9gmJqowwNpd4zPwlL{4QVzaZkzqmLX{~_>=FmSY%0?
z8%kO*g_=g5`-cjz+AJbx*4gUNjB_If;!YwOc=%8_cIXOj{6*GEz@Fx`DPgIxawoT*
zFWTKzx|z(JPX$`dx?ND>Z7WW|GW`l39Qyl|EbAss9m~z6KW#{~v}>!U^l)ttS;uWi
z-gS0)8kl^8W9hl_yPPCW46huikDf(}Q3&Q#F^`Cn27>Vn8Jz4@xhM|M7drIjKO~jf
z58<lA&N)_B>bE&)0h-f4q}MRT=Km@vp+fR7&OU6s63lUe^GLcThn5V@8W_i>_CTl3
zCuq48yF4Ts2bY7j@s4*&xmu2dQ;77Sz|hYOX4I8^YtziA(Eh0;t%w89DOdDrA+oF@
z0PlSo>%-)7AN&71?sW8duBWJ>$`u>BC3|LkX!p&rKA5XSiKdGqxlGdtnMy8~8|iWW
zRxrmzu~yo^Ba$-sW6QK5tFOvzYGdxD5gt0SlJ)G(vREUFZs-I@ommHYHBiezE^!>G
z;1x9{p$4kO1S*cB2nJ$GdaPqiToR4}o;}x6mp_H>b864g&Mi9!qm(>ntZ+=iIguz`
zs_Gbzuky{1vUfvx9kuiGMv;&LWLbPVwW-(`y{w^zxkb>kPUg{ON~ysqRz4$b>M65%
z4%D#5n5nhjHuN_Lc$C$MhUC6Krqr95en}UlO5p)-On)xh2n>}ZKXo)E3}A(Vt9MJY
zzRqqJ5+tIeXh2O2ubn{@PmIeQeQq?d_?tX8tQzth<(4Dwb(`r;)qybL)+fM_4%9S_
z+M|m_=SOlmHOVC#y#z<l6quu)kxPx~JX`gD>$sk38VJ8ghG2BN)1l0W_3eL=!~|Fo
ziuq95cQa4h3?rp9Og0bCK0kS0=>JMr<n5s>x=i@ZWUFu`eSwaBTH6&DH7n_je6lo@
zjzCI)#;Q6;z}3;GZ&RU1>u9or^4I%f+qUTW;LHF0#kNzeBPk<OHy3Avu>%heAJ1jU
zQ{}p&c|o0l8{U+R_iM?KuBPy)M*YxSvMlXPbdy*uRk`#WR(}1KUo-Uzq+D?D0#sc5
zK3RoiSA;qP5PCBIASXi66SC|Gv)<jA7G!Ev-t<#JV{JUU#GfUxmmH|6IqI(M2^j$J
z<{3U5iLoZ`2zel{!b10v@*G&nE*;nI;ipbptKmivoyrtCaPTIO+r>|MIVvR_{T$`!
ziC<@S{BbR+O?$W}Qi9*&EnLxx@ufx^X2)S~;=*&v2S{C3E(qgVcn-pn<8`m`1^!Ac
zxaULbK)kE~aROM0GId~pq|_Xt<Xb+S8X#)~@k+Nd_m96Bq}g68K!6&w%RXV8KCYKm
zN=d(Hy~#f3!M6AmL(H=@>H~fYgO>`5QdPf&HxdVp{L+fTx~OXjE!cqE#YJS^24>0*
z<F}pbRh8<38kfr$mUXnMe|AIEaI4}8E^F3@Z3YmzvF^1ILz(5%k5i)K`rv)>D#&hw
zvTWpZrH02o1gd;o{%P@G3!a>_zQ-@0Y0AcJ#^i?cq#j<6xPs=g)LxTCUm3~!n%K!^
zn&c6<Vqy!N4!m_&uRbwWcC~?vJf7Z)q}h(bO2+LC>7JELiVUaiRf_3z${5L$PRIZh
z$ZD*zJ+$&9f(d8A;bi3c?et_+0`%b-B0od9abKr|_-RxDHU*s}Y7Ra4m_enu(Bqc%
zEM6OB-Y!}kseCcypV-5G=n{lT$!N3=wF4rJ9rsDzU_f!rIZ0ESIPc6^OBprLmviKj
z2|n(TS@NCyUwG7?swSjvl$RYG!~yv~_=Hi*?BtkQrNAG_@n2l7lrYtY%Hp!a{(xMI
z>C)!$)jufKUbSj&pMa_u%WgE|3rrgrDLBA(RZ&l_*82bVu{r(0DTHtg^w9ZXWv9)l
z8mw>IR9Lkc!s!Q@`00t$(NF*B*7n@iJ8TE^5{MP+^+5&~=iNzTI*{9)2iw-C9UYkk
zmOHk(2GEUDgiw2;xS#7+8a;tXfc_MMZgW9Gb&-fJdpcrdK<K70SkI8>dqATMQ#OXu
z0|JPfUc>%lB_={Ka?``hM6Wr>)|FTRdm?iEMxr+b?*wDr#cqy;Iy(D0UoY_Oi)~1I
z6z+~RlA|mX`FF=R(_X_wq!<JS^6^<U2SM?$94{=uNdc9lAJBolFx17j+l>Kx;4O<E
z%kUX&MAXl^8AOEMR5ve)y?hVhjtFOpj!ElSYeJg3TWX5bnb{sci6M}*URX`}<^%mg
zzA+O~q<X6_KfZb7qcOwO1L03ubSRQh;!2znaoBBMyO77KXV7hiSrJ*Cl~#SBJB{qw
zhZ64EyyupZ-%j^i)3|s0QsFby$sh^mQS#0t`%I&d;Ze*O%SxV|=maoX*N>>ReRhax
zcvO(=^}J8r4z{n0iV`H%?Rx~)t5ezu-v-B5`hkLI_IcW5Ub<);GGi*FVIGl3F7s8N
zm}wx^aIkxGi=d=)kXQdv5Je~B?yGlr+jhFnp}ZaLxmF1;lkw3riju(h`Z@w(xjb?6
zmHkx*<;y9Pd^7)H%9a_@A0^DCE^OGZx3$+0`m@H=BV~`1dk<0DxJ-Z2WB*NG=FDvL
zeCZyX?9OY5_>Ppspd-tt>Dewf$N$ivc+06-u<hIKp}Z`@%uDS3c6WRg5B-mn6MPAG
zY$Wlq&3>A=LcL9jNyU}-5n^shxdA%~P%s^tC_^F)w^GU&75Wl+e@Ctr02923KrJCY
z!a(sf3n%vGLy53BMEJtDNOdVhAnOQ+D+cqSDx@1`$d&D0N*MGyYtGU@qJsOtl8e6y
zJ)?c9T8f+<%)gL8u?vw%+kIN~8RzM~EdisTbxYt;=$lMn#zF4Ui!20!cm)%MrG1ye
zAM<XcN^QnIF(qD4^m>c)#Qd<%&Tcw}H16y0ol{r$?#Z#}fs=isbHe`Sdb0s!-(k~B
zp;6$iOWd6>M>!B6(Vml9^Dhmhawdtlz1a~2W28+!fwN6ci?rX7AXvOIIk%p`TZ5-u
zCA+pP(y|4`KApPwXe5F-YH=10-}U~Bl3VW(_K%xMQym{1Mu^}JWBzE~HbHqb%S@S$
zYKCN!l-@NiFmbf5WTjCq@rU&%{mhVEo$-1Cq5%NOb+YPB<?D3}^;C^l<cxBxl6`2i
zCQgSy>jkwEUXFuJ2}IyO=RKz+=8#`sgdY((;TnHMU#kAlJcRsi=TY~Q@!&PYDa~v0
zfJN&@WI@mlJjbkxd4fEv52AOVgV9iYw9}XFci33tnvqe3-InYXzak*w*Ytj&I@N^v
z+E&Q9&3yaE(6X~sm9XlV0$64Adw`>X;l3RdRez>8TpG!NYPgp@mG1dkjBOUa2Q9}#
z`?pTgG+y+?+}O`PKk+>czw1hhXYizlL47lATRd3H$liM0ov@Pr475VfyA&mk8VoU<
z6q!|kz`K4?5#xdbOX8uPNlHW+A)C;tor*U`^kN*}sTC2&TTOlF_17<cP~qUSBIDy{
zi!o`o<T_3x-x5jFW{xUSkr9o^eEulMqBRp8l6BIdE(giLFhGR3qFWJvyH(nWvZ0~=
zgJPcWDYxwXP$o`lp~%(@Hvb$pRWOuSW_T!aF(&f%Gq^}Nt5rech|da?)!xU;d!UUk
z|4#jaT0M&f%Z?JG#ug}^8dkFXn!&d-2WpIU$2@iTe|ABCq2(tv75cv}EBF{U^La2^
z%S7MBdqzw8te$7Dutnq>(}m2#rj^!o9tzc*K)amU$CaX)9H*MooeMji+v8M0L96tI
zko+8L(0~3FL*8irDzCQDBQ-cD%iOY|cf=v~QdBZgr@GsZ>W;br<%;vh@{YodI0|%S
zy|ZSW1JMt#09H6Ea30|&+h>M5m*^Emw(s)doO5sf?K#lo&u~8<9fOQ@4i++|PAFVF
zhcK4-6Napa*|N49Y9@5UG#9T}o7%C#*PxS<H-;KKcoZ=Gq4XpMtFYqRExcG_0_d&&
zl&d$x+Sv($;kr%o!Q(<b24!=YJZoltQWqzJZHli!q$nXyV^>#=1>21}ZC*TMGSV7h
zl@0?$whbn1PK?_cUjN#Mle)#ax$fC;n#x&P=VS+lUPRm{_ut0dK{G4y@d~v1UToCI
zbB6jW2@yU9^W9+?7l`&viti-%IrB7(t+4Mh`g<nCB;#Rq5p4~30><z)o9>Xkf{Lru
z!bUI{IiW7r_ARu3<%gg#UwvZFq6&FT`fPz@z#_1Dr4>#a6lpU@WJjl{v9rMLedx45
zGf7d0Dx6P5c|!-mj%)WytM}v|^VD=?tGE|96kF7y7fE#&9v!?1vo6RbC<_~)o9`LV
zc6CQ1P}{t-$uQ3C;XYd5CS^G3@-x2%hI)~kIhOeb;q4Dr%8r6(z;v&s!f+=pdyb{1
zzrDZyfQylow^PfrS1(@3j^&vS%#zQjndphH>8||d)XTFv_Jjdb6jl=N`z&;rX*+Zj
zBT@cD0Xl47S=h)y?~fH~0?anuudS;m%FocVxeUKT@r)}1PbwXxjTD48fFZ4ZJwDbi
zy#+w@+s!?E|KMO8%lw!<OYVbA_NODH+J(VWM$n65-Z<BSJ{N`lm*V{W1KG>*hs|@)
z8DCbaTS0U5nK7OW+$u@YCYa<H^p4m({DOCL4IL<`^mw2bgkE=Q9KIl0lx`Q<vjd_U
z6%27u==2K=1d4SO7pJ*J#Otmjn=SFR@bZvdoj(4me=InUG<)kyv1_x_Alini`$#8q
zt49Srb^0VYgyG~!k>{2g+^Cmkho<7v9&}LLCFEuMe6rK+1sTQx83DCzXrH6$H2`uq
zd_aBVXQR2{CWf0LYgxEBwqH^HDsAQ;?`NBAsBE+G@=~u&_`v4~XRIy_moO#OyM9-0
z;9hGF2Sbi(WTte0I_^}E2e&hb`e8W}qCuAo5mQA2Akg$RF<D`w*b;A0Ub`oSQIikf
zvw^G=mZOS0#aL0BWlmiNcaU9e6fyz5e=kHX18ma3fEkn35S50!pfl5D{X0$nx80X)
z*@{+Xn=CA2zXPzB9fKdMD0TC`K!elW7AYF&r>}M|=B`3GwxTK(qAB9$ZOzLsv~nvH
z>Qb3cZeD&TA_1?wzE1~o`feR9Ec5gl&pv=37)vrZnGkE7R#>-kB6s!SZxP{o%Vdg9
zPD{{m3}$+knh(`d4;~j;iDk@S&h!qdsq5IQ5Mk^-lD^`vGp#ZnJxMK^dy9BjM+Cjs
z)Caz`hHJPUG>PRH7~++wCY>-1Wmw!Pw%3{Km`fEce_G?GJ*H)NZetwi5rz@mYC-lv
zY^IEG&5cUw?`J6M^9~f9RI-GbA-vr>z23!ar!LKrUWS;=!H!8$UgukM2yOD98TApY
zayNh*qVU(q#?3|jdhL8^HyOoknQZLpqZpa<^+d8jxr*cZgHPDaD-T*yfhW5P|1M2O
zMf<`U{1TA62O*yC%BncAr|Cn<QpGD&?~)c6Nwu#Si!K6ujRU~6IC#|x&M?4#vBSP7
zZ|c%ix=m@lB6N9tukR*;EL;9ZTdUCtiE_#vpd(<@`b#nF<{duj1v$u~RV|}nM#^JY
zJ{wlSTN?IR;EqCyhc1z}Y^Q%8t-htW5`_hN_2zD|BGD^b@mOYMQ3xg+r=t-yqf?pR
zK%G7lUTFhnI=Ekzpb{I^vGRSLdA%ryHgZw3?uj#ULRB(+glBVvJxl|Q1nyXA1k0&M
zVh)`V2D%z_ZLB*D{A&Yxyz>erw1MrJ<Wgu__50u}pSGFwti%tJo(SPIU1|n?n|kPf
zljsv1;#COe3;at!{4z`=i{1*9S<YsbUo)<EV<rZxMhP^dhaAlfw?2h7TD}OeG`1e-
z_ldPYaP7vOR6ozLA!$u)NPVeo<foET{ow@xu~QmZ@n_Zp*XZYK>}w|RY_U}>;V&y0
zqK?GLPp+iwSA9k5df?R9lL!Eh0AN<@i&DAppw~rpok6fOm&iYtL8{&S-7;}JL5^w^
z>3n=93gWEH=l&XJ+aJP!MqSa?ayA%wxIrboS^u;CwGyy$S=N3EzM&S~`bQDbhC9^I
ztT`D6U*0UhCAyFWk{$PRg}A<f*2XZQqx!mcBwcgK;LhX?7YBTA^}juXq);mvQ!~ci
zB8u;o46;Z=>-snwOe>ywYx21zBQU-lxIvH@*$5i}6jG{Szit(fMy{IfDc%3$nhY&K
zuwIxxRRALvrM;_X@90yx|6^7DGm>P&w2P1~l;&*3m<giqE@SslQq?BFm#8!n)9k$i
zukPQI_PK4_wr$(qXPf72+qP}nwr$(CZR`1UGLz}dOgi&_o}SKh=G<>!C3UY{tFBMg
zw~93B{Hy*OKI;tPEUeSBPKT*&h-wfgRn$9$03q8q2A0P#J~dekPNo{pH4RBYL_RtS
zWssH|y&|W@>F2DD&?Sy`1;hk%-6l0Tr*YO~<P&F|R=R~X85GKMN{H<B+y_>WL$&Rw
z&8BCS%DJOW6oQ-9<`20*j%ZBE<Ct39JJ{-|NWq3UQmh=SLgd-n-o<)K9JB-@$>eX}
z3@W=6vdSPeXvPa|l$eDdzybU|GZO0bo0>@2%=X)9Qu$>Z;h+k&BwAqt&Z0KWvtlZ~
z1_;RJ=OUF$IR`lWviFrlumCLyqN5p-h$SJCfm$KBs!gu~y}+StjK~6y?S>>@{!P!U
z;AObC$*VUiG?i@8y+LPy(m}Vb<}6gz-d~qfH%m7lvdzI??mixY(R42!MDa&4lKYL*
z=VI7H?g<{^7G78?pcjV>4>$WGXs`_xq%*m;4N-vJGv;XPN+eIVGs;fIER5dpI9S_{
z8)enfQW!UH?|D_ZSR-_<gL55Oim(~O7EBArEx{??G(N6#W0#Ti5C%68tHdTGqK518
zd*u+AtgAoQFwQ^c2)9H?IAFjjtau#6mkJ1^3`fq;?ksz*B9=mDcUGQ}#V~p8N_o%)
zWYosBG(s<f`?E&^aWLN6c2B0*&OJl!lK^TcK-gAG8k5<U2U8mkLgP~7pnlX-F$gX~
z2#@m+ab5|4t`)ZGt7+lIyBYwrIm}=;o7EDRBbD+j5tYqQE-3=$WP?8yL%FCk+`!1)
zTB#O>|Cq>wn9GECZ}$K|_|eEX$Hv3iTkNR}#6aN}yG%&P0tu^!gpI`q3ffn+M+=X;
zo_R)!Un+8sK;!<Jgyu2gH}=@+MtInm#5(-s$0-))@xf@bSCy1?5+g-b2<U6{HmH^e
zhbO15BG+ZP9}B`;|8zC&L&@(f%?%5S?wXhuM!>P0T)mZK=Uxk<E6oJZmGG5O<hDRl
zImMcTULHf;rX&D|wU;vx8n?<P?JSB3XEejk3r2a;SYKb%l>x@-2mqaAjSBhG;K756
zUAE3`0zCy9_uI7k#w2={zM{EEb54J?1P%bmg2YP2wPm&WyL&l-8VGgMVAH-tWXIe#
zHjN}NNUQy`U3&4V_Lq=?wevL?$UrL{xs1`_Fq+&z$+H<nB6I^W@}#+n;e0_-hW#+O
z;O=L)%}Xz;rJ;QgYytyJ%tD};W=^j^X9Ggfa)9*ec*$#Pxf&#Fv=h1XdjZ}R5)_c8
z?@#V3kqaVbcq*=%qcY%;<Y7;4ww_Fy0<a6|>xt~VhRFD(XL3|W1-#JMJn};$6mF{)
zD=M!+E!r00hXs3!hS=cf`9C9NHR(d>?>tEH4G=`XYYrILaq~Uf{0z$wO5XI%X{Z1i
z6ZPJYbxO|383y%3&lpJAzs<ZwdE1WqRG43E!h*ZqlUur_Z2tI4rjIfvk1Jy+P}NbU
z%Qm+A3AniyQmFgS0-Qo!?>E-c`dz}Tnm~M5v5k81IE76xRbB^rmlEwG1Rdn0;dUeO
zSHSjGUwB}^BCy**ZXq~C9rnvA+mVTO;*!M7y9LZdESt(ONsUv5+gs<agmhB0YD(NK
ztD=?oa)a+Z7eS+$-wiylk<!2em=v(?#d<u~?pn^0kgbV^Xi`aKh<Ic+^adEnCR@X$
zOYaqFk_sE6vSJ$`r96{j`}I7-Y;2^3bnR%_5bK~3UUqYwqU4y6xWt{K!)A58Q;#Ba
z<j|;Sq%!xl1$v102)^(N32$Jne*m>$zUo(Jo058d3tQUic#7*~dNK6EYLRtHe7COt
z$c1{tP9c<jsr+e3z~TLKPyNw-ebDy>W`Rrle$vh<YfP89y*VI@PXYELPplqz5_4BX
z+*A&lT(;Wo8FVqSMi=#@Dp<6&v0*kvF{Kjw&W?+GK;I`nJfTgUVnsKng`w(>MS$z(
zdMz-OJ(cCf-h`TZR7Uq`v1v-}Z-oQZ`SBf@=WmpPai`Fb(ySSy3rX~XabvsaWE*yj
zB(Iig)(Ukxeki7*EdiiEYaG6keEww)vvtxh@@4ZT82MPn&G!EAhGSL|Hf}D{H@9B7
z520HF%kkxXMXx<Mo!9DDr`Wg>%T&wF!Ld9)zCB>zk-7))$3J`D1ehy>a4Z|?=T^CV
zz!)J!he|Gq<T_d|isB>B)oy6sO1Y20bRo{A1`rs>o0kGjbxp~qR<vuy;|Y;VW@MTz
zcT8Jb3GvT)+Ur%<9d>zvKGtU*oTd;G2XvZZ4qR3$botrtxGjn{OtgWo>sPCS6r`or
zSKSib0OiP4EuA$ytITB~S8A1Gs>E6x;4goEp$^W-^wd2T3w2h8lR{N*MOT1HOomQQ
z!0|7wx1N+18Jx&NGvFYEqw1Ak4<*DICbmlgfCeUkbd*i`7nm%nwccXCxT0f$Po=EW
z?nAgWY=I|>ubZ1n?tPa;SmUie%D`JjN5Ji1Ep3B@<1p{j<;JCf%kSDfTMIMLK73Op
z_pJ=&Pd|eM@EtwvOXT!!j1XscAI5?KV?{^~rHoNH>HuPzKl@SB8<E%G(_V((esb*(
z#}}UB7Yu)kz{h?3GsTQFE7`*?ir$9NdUa4`H;@DWG&n!2Z(yT;?Lkt#jBzcahfhfi
z62CP5OzsC0V82<<qF$6Qa?$hWNf|08UQ&}l{m{LlLo1?rIJ<@i_uhGYXPk?DL{X`1
zu(zehM)3~Y#B<j;ud@6w8T*;&v$RykqS*!}6T?*4Y}E1o7}2tYjHJ3H6x%2yA3&Zl
zyn$*RnA2A!qOazvNJ?0G3`jQaQ_J`fCD(~Y6OvNNZ0x6V*AZ1VQ0gKtT!GZ@hb|rB
z#mom<iS<~>9IYptA}LM!+~4_^t<rTw6o~g%S|ayqQoSN_G3Tx0)Or=c?R_O}E4>WI
zpFq<a>tBdGAM4<H!XNhx&1lJimfMVi2}k@>8*K%CyvnuSeIUHdfZT)4ZR^9~40Xm*
zu$SdKDRXuXnS(hVT{CQg8i<r1jcQ6`kY`)JsmvRIN{%Gh&hnO=W?4>qdl-c(GVox4
zDD2;sqa%xPtnhX<(&pi6!4iz+WTsjDRLM1C#(1WPNWA)~VJ3Fx|7q_kpMqxMFvhXe
z@upVtAB8ad;i%P0d<084(^#AH6(jr_=J+vf6`T*+x)c$=++OYsn&l6+q%pq>OyE2c
zOMRoewOtzg1w?gYxL%u}4(EYd_}JU2Xc45a*tm=RoVAV6*)a_H-AEPs;RoBye|Mge
z$5^if$y!l|?7SB0zHn{*BKKqPB`eB?#n|PzW0jB~Ve=Si#@jS;`QRocZ|fy9E33p=
zfcsvUCs*i|M*TzH5Qdvy@`tYA6&pjibK!ow31m1~UCPy&9TV(m*CnzEhFJTVSwY?E
z3Om6eW?MaIls<i%HXt7?<5h`0p5+}b!#liKkL{F*)}Q;wIr>t+F{KgGa%fjyNMi`5
zz`!Y#S-r=qS(Sm0w^cHi+)u$_i2&qKWb~tVQJ=D<-kE*lS?9t-iXy@MkORpG%8<x=
zEn64y3KKW9?Sg72|Ae8u4`OX#vyf_p)epwuE#Iz_An<D^b4IM1T@%WQ>Vu@rR^=?z
zjQdOBHGb$U?{aKxEh6O*lq@%vi<0G2`j&oT4oSynJ3@TLdhmcKSwR+(gsy$X>x|3m
zL%`;m(wdsTT6%VNZz3<_v%>XkZ<C>R>)rq+4PAMe=YqZjNaup7#tj98vCwrKb&*+j
zFGZC7G3}WhnVqRyCd?`mpC!$t7gkY=+pY^w{uKT*hD1zE2xL9$EWXTJ>-}-3Z8aRE
zGIVas36ykjm(@;LU6kmQHo849R};(7a28-2-2@vRSeq}$Rh?t`L(Bu>;gmZ?vTJwW
zst#kNLssMkw0D1;ku+g4{fc(e7QHPjk|8YQTT%Db4|Vi4T{3AySBbBDt1t7PO;Xa<
zQ+^GMzzB>swA^oUKPZ`NcVmsa%1c22qPoV{K6iUiakr^>{4%4GB<a1#lq`|ADW2A#
zav%X;IivFHwVRZn&)GJiyrA3SI=8t1GcyX}iu_F(_kGQXN^?CMsT}=tAUWMhgmJyf
zx!P?XiejDW!`MxD@t_{alB}wK=sf5>w**PfO4hb@7Usp~!ONPv>h!l48m!|b^<~&W
z{C{EkmW}B^Kb984E9-2T@48cjB_6XjjHX*3Fs8oD!j8fFwD+<6vjHe}9se@G=^Ihm
z3M~La<3WfAlv&E20kjqXqip~F;q`uA-K-M|Lx|BrzgN*uJ>R>b28PsvjtfMq!k>y}
zYCu3bn3CE?+xE!l#p;ZvcgpymwR@P8;1wE}i>pQ3*Tsqg6-#Y==5eDo$9``U$cz!B
zb+DGn4d;VecinU&h1%3~44mbKT=`@t+wQaQi=4i;inhL<gaBTPJV8Rf6~&&oh!dY%
z_9E%QWS<?57X7;Xq<g{1={jEiT`tcIB6f4y`oI=XUV0TNFoOI-Bb+@=s(~=vRB1)H
zIi&66st5z0IGiE`UdLrSP57Bb_c@<6J<5}AD=I5Nhw7B4KtokmZ>ZTuBJZv^IaC7D
z=sb{`PQ78_=fx7szwh6(Z#7SSfAO6l;;mMz)f<3DaM?#3PC7D@Em&Bk5~hZj3z^X;
zG)zl18EiAM;^x@@PC3{rv!AsfSmhgG>VHPKv)SSCsa8M+ZH)}6#(dvD>dfJD=m~H4
zMk9}MMg{(DvEhW)A&WiGC<ka`M%V=q{##D92W7}mLE>Dh6sYQu!G9zSg-T0PYn*M}
z6c`1d`b1#gUMP)T&A~Yyz9wfx8V&UwYR-zxVcS|jKze@Bi(l>4^nGrY!_;!_SassC
zd*9mmc55fQ<L6tj6tsAP{&(IyWjtUC)R8pLxiC7!tb!8_!$!Y?N*qxN7_i=$EjLOp
z6MJeADqzuR0VLIB`Hv=9r9BK<d`UNF49T8tb_ucGCB;P0TvBSdH&xs{xzh_~FIcK<
z>ep(`QY`!+sq*Vn92+BOQSG%&pRKGo%v>B|d6hnH`*a;ShPFoVnX!_3_nC90#^I3`
zD8$>ydevF!xR@(^#7bMubx8xRTa$QAWgy)ggz${uu$hNs5kQtG7Im&#hA~q!`7o*F
zfx938>o3C<Jo&Q5HjB#ayl_REjk_|A!wIo8G-iQ?31)ty9>ju+6Qq)uRc4}xU}G<{
zYuqCYBwYDYQy9%&!@WZ&I8Xs$xY(24=egh+Or*=uV1yG+y4{Ez-rDyzB{<<ddE8Cp
zzQ$VMfjCt7DfQ$o(}0mxx#DiUY|w)<4gOUfr1Enlx}D+z(IE?k$Tk^NG+?VqV}+f4
z8G#7uFQ4C28kCduwav*<P)(OD(OnLT-Ge>0!4bsAP8p;eCfbAiNt{tBT(DO&Fr>Q0
z{NY1N76QN6<uadZiKV<qR%}D%4FXw4id)eq%>nI;<qLKl4eb|O$nTnd^OH6NO^%?A
z7bEr7M2eP<X-)P2s*}ORI>1d7;nZQ2`JSe}0c&o)iGmO<X{4dIDmkTQ@IsXT-TFtW
zsC5O|Rqr>pRMwc@3`@P*M#^Sxn627%5+^VzZ*6k$w5YU0gp6Ra!4Zbuj#G6{wu65W
ziHt*siDMF(&_z0EyaBVkOZK|~Y!M9UVQwrF`3vj4`nNGo2)s~(nRL_8pB)xH&hhJH
zednu5)O847?(eSpS~YKUyoJqv<-r|{Hl1F&j81o|5aRPLQ-&VI!A<lP6`ek(-xL$_
z+pElil3(;aqqF$<l~Nn)rtavaBi-5gROMwq-h0aA)k`Mh*O0LNDspG=-Q2A9is6&^
zCtlgwh8=6NYp_r4=jk<YMHM0FW?EJYt&L;aXCi}8>P#nK-uQ5931is?rt{8V)4`4X
z;3LiDURQYuYf@-S*w!vGI_=K9oxTRzVEN(?zjI*}Vn$)wKlTIu=?%di+m3Bw`(y;t
zwJ>y0Y~^(WJPgTydz!mzI?n(jJ|G{xXBd(bvU&tSk)?vTaE9)tbLO|}XKN*Hp~t@{
zdCpmOGeC9iY9tpA`LmXSY8IVR#izCDvP@w3g2mIs0XLICM-uf%wB)0J5|X9%S%6cE
z-~eGA>)IE&k7!71N%;LiA1}F?M_FR+AQ6r^_k_m@HA6Wp`PIrS*N@b3QK4kHjo8P9
zJ908Ku9>Ymek@C9;W0Jes)P~+dmL5lJ~PVxl@P^eiFDZC$qgnd2MMy03IHA_)%)=K
z*ADwpT`+5TBr3Y+e$$GW_Y#78!IAMY8iTXrY5Zg<7xH;=x0|NNMA71GR36PQYSXF+
z>!oU!Rh0%}rW?@`-7=e6A_-G`iqIRa-=-a5<`gK5G7mnY&!SGx_Qd*1DGco0Ex8`e
zB(fb3N&FzHof#cE*^D^iaZ=*$#*fam4GzFT?#)S}umMFpSM@$CY3>=^Qxl_T$B8+c
zsyMM_ALegW59>O~m|hB>{2N#ebLUSq)bYJ&>q8aA8xWDI{3JamR{@|(Yrt^QZTPB~
z9ZmI=IHXS_WL`mNNhiDrela%>HrIXj<Xa9!^F{Q^G6+6-y5Z~#?f1GbAeYC-(0F~F
zzKjbBNaPDNcTq=;eT$f6Kxtv(uPK6D4+4UeY#!w!A%^(zSBapsw!>qKN@9j@oG1sK
z9SiH!g$&P~Ln3_WRYN!&VTykDC8GHEcOz*p^Ox4G!^-+5t3J|aRtVyLf3S3gIKYN?
zFoK?kQusSxc*Y;SrwBiPj_63w1Wl7y__{Uo=fO%&y>_pJkBO~5hHUz4-l-J7>X^tU
z?LS`GFGLqb<A*wo@qrvGU1Ob!n=Zj9!#RAqc)*QxD}hXSEEyXBM#mea1KT)~@a&uc
zpTD<>qAxM(YWK2h#NS~S5#9ou-j9j(p97hgD^*9aGS1=%Dr10-XbD6Owdo#TRXBpi
zMsGFmx(tbf@6M6nY8GC%XW!95rCck5u-NscTZ4;Vw^fU0AR7hpIGrJP4Dd!5%<2!c
zi|}*Ml?0s6(l4Ht?z4>7(8wfP>7iGBBP-eZ<*A9jx5CPsuh&5ub8er~PUuLr9*m?K
z2+w(M>4<t8lrVOJP0oM~>!@<<*0n=E7!X9baLKsI=fxO1It18g>9h4uVkQ}<5Wcfv
z5X7*cis;n&n%4a+cmd-TfS?&y`9d*If$2gptPq)b0VpAJr|F95!ZouGCku!{d$n<i
znrs5?E}gV-W)ij`sKji4AElobqhNGWvomX7Y3A7u#$1kvRE<a%)IELlK=Me?yx=qI
zg@)k0OEI=AqE9k&V0QIUJK04*QYvoxS$?9*J3utpN#LnxrQk8E*Y10qCZvqzL^jen
zwpsupykLY$Za9}B^OebdWtS!vlGgfJ3W?zvNwNnkgRQh;XcQ6Q&*ysI<&v6?+`;-8
zv7mSE3PIsc?8bax90w?{=W$H@axNfmvat|Q-y{QP)aGw$ZD1yQ+9G;!3yt+vPa_xY
zz>gDbQywm;Sw|$uRDR71QkCt)Sn~O<r%_=%1URS}xXwm2dBsUfAWSj4f!YyEf=4l>
zR$1_-fi2*OzyKD>1~c2ZOR0UTn`}0x4TyooK1ONvfa4&{a6@zZEmtX99S+%{;x+mx
z36f`=C+dCzBw+CUNRw<ul<Fl;MGj%?BNm@n#l@h%zn${}ax^{_&N`xsBrrOteqX#6
zbRmnCSd`*{e%+MrJYdi%q(Nshpn>!l>mIi09KBz4A3zkwH9qJvb7SzN^Bw$|r9gYT
zTR@wF{P_Erp^A8&V7a62T);?RhR3g<)xd4TGh|V)9rmA1zHf2}ZrTeZaR$F|cN3n_
z51-MC+4b_4kYmkKosvTXapZ6_aBmo57en<XCT9fXQs+LDs2!*9v<QUWwv>5aDgQun
z|IX>m$oWA4qz1TjP%ioEuJ&Za%4vyWwElk~ZTbAa9`8FrWx3PDeLL7ir&kWoCv7Yg
ziwyUJknn2fs__av^^-&)24D8+x&4vOK=-RRCg>r+uh-~*B4hf`J6aK*zy5E){)PYQ
zZ@~V=%l$WCe*^Y^=lcF?*uQ9#{|4-D!2Ua>6}}KP0AK(^fH&)@007#y7_&$8*jpgI
zD<r<YzA%J<XaN8AQ-^NR`}r{grO*KYu=)D=DQNi-=aWFS=QL1kji)#+2nK(<KE(51
zpdaGm0hF%u9t#hbr7wV8^C>=vBt}%;)xa2X3g35mZBF!oG4I`Wl>D=Qrmb8Lvic$d
zQ=tcIC3bc+;2heLtXA19yJv=L^C2CIU@0^a%C8L&Gb>j^Mv-WT&-<@ptv}`qO`-hL
zJK!mgK8SR-<mkBq&4u#1k%@SPOhC}yvOlv)8_!y6q$#xF`BjT1Puero|5zKum|w(@
zz~U(q7ay5}0v|=3gy(n~2AB*x`3QU6W^oMiq*tW=K_Zsh)Jn|)3v(sJi;Z8<#H4X)
z8NPD8L+n?=`-$_(XRt$OHtE|%!oqgY0ZqVlzA$xYDEg+6fd4@Er}+jswQX#dmgVQ(
zDRckt7`MZHaJN=V>b|B@W=t^!Cf#xD^rg*mt4Fkxp)1)EKw<7;F*&w7C3Z>LQ$PK*
zpK~WZSwXv6KiHW%5|+IZ!-~Dq9iNt+7mnO#8vru)Ij_TEkh!O=n@t6HTYV^hg2b*}
z+mu&R^%4Kb8R^GJONC9vic(HHr-c!U<y>2RTN;fq1Q+T2#SRv8n$qvjF@O|x(wf#^
zV?Zu*UhyqSJHDX__xPo;tRD~vJ)@^Jph}N%n+(Pm7B?~(_fWvqo0U54LwJByk?#)6
z@Xph#4=Igc#Nq??gvAVLibt(MSr{ZXRH15)8$~vzJE-J|j*H^fUE7l_Mu9YX4-pgB
zg+TCc4-r?$Q2Y&!Br64c(SA-EY@r_6NWIj&1Y4pED8WpMjL53^16miy-Q0>AO9sHT
zLX;Wzui@mBrFfTR%cd#*{B9eR)S)l05xS}`TXTJ#!6j&+aPCwNB7uclY>3a;IqnP&
z99Lpw1BOp>Ou?Zvzo(1fQ+ODO+v4bS5Kj*jb8p0ar_OC%<7k`TBLv~T_pCNkd23$u
z=~j67>z{s13%P7v)1b)kbGrwTg0kuLaH!Q1iv{@%A<YG(oE;iNWJ$9Ghi*&BdC?~q
zSAOaK0lix&vy)dn-JrVQQCCibY8FeMp+chmI&|t8CD%AaLf*|_rE%^M)Ite;kF5Dc
zadZTCt4Acy5Le~RT6sT@WUhLgHd7f_U$cVUI(P**g)+-uxtAZlFbe>5jBBr&robZI
z-q_zJ941JM-jUDcGZ2`}gE=MeqtMLJve!e$JyDCWr_Z-y?8&Bz|LZ4thWT4jBG7k!
zSMj{QJ$wm&2TPFvgdIL9+E{UTykClLr@KB#Hh*iL;a7`C)tA-yZA}7614Cm@A{q^m
zYF1odXz4aD0doyKUNyesn4lbg9S`A$qKD6_ySBNDyVNkqjgIvOE?UTbc_ypQc|9Yq
z{`~FcvBj~3$AE@Fx(}x`E3DM>I)Z@M4@NJ~)R{}Lfm*nSVG(vRr;akXVze0|y6#$t
zP;4hXiGidh;$dS>-ax4mqM$w|8=e=P6M1E1BkCk>5l9Eae}*djKZD)>Yp*!b&1&CY
zyY|<v{hv!H|7*AE-?NCncI~fS`)k+!GP?hRss4qU|55S!KTmo8<+}NQ-qC+W|F7u(
z75%@W|KDBoeWBL>K~D42==;6@uqCo%s^SnLx>1nc9@>A;oN8i=O@4k50WJSKF{l3u
zclqyqz<=s%^v@>2WA(qj^{;RJ>s$XnR{5ugl>h&Cs{~vI_Zv@y&+U$<JRVf8KicT7
zF)K;2`uvh=A8l3(OR{H&7(+(kfNsudw(%<|OC7$l*Ew0ym<wwl^fi{+=u8@~3k9_u
zOH!ZxIJKQ{l#MCVQaC}dcPSIBwe$K1CH-YFf+Se8>^po+c`_u(tv;NUlxrXprb*QD
zvBFBzJ`~3CT|q2*NSz!^#c)3o`_;BWTjXi@*<sU4P;z9+kX44D(B=d5MYLOp3Wiu?
zYQ#W=?+rkwLgvQ;8^k-<y*RLdv%q=Y2E6GXh6>|0Y|LcPT;NGwmr4I(^LprHME6Ox
z5j`pXK-dA40)XNVl%9_cWRp$s)mzVab(#2TeyUZ8z89q?o+M6E36^^KcEV3fsWbZI
z3zQ0g@H!^=Iz6eRK9c6i6!=lwSIF@vd<F!@qddhT^_QT9>|{>jP@g9RFq&|jg3HlE
zGV*}%gF?JK;9*1i1^m%clVBz3tpgNySdjuk{zR~DDNm_zu|1{qO`WAHfUpYyAK5uL
z%oGOqx~pA3mO6z#a9l2#W}XxlSvXhbQN)ME$GV?t02)^>cfRZVOKCQ>maXj>QmTWB
zknsaLu62GdkS4C>*O{}OtC90P=jEIRU}Jq)vw9=lmf|A&=oisdZ(sc%k+M$+&0PMp
z<4U0`mc=UnpD|hY)S3qQw~+vPq9`?YBT=u^SX*waWt<iL2l0=7I1hX#1mc7J^_uiN
z?&Ik^MOz~j>4~uP#0tBdB+VK~@LgBlLw}|0n~2PaFE17#uGc0^rPEw`*r}EH$)N28
zIN&azs2xmm;2$3<+x_&od{gql7Z@(|CI~=Bls(^M;IZ=(C5w6g6K43+rXorQY6-GE
zfZrFVJ6l&H6{}(Vm`h|&8dU+gvbKm9fXRv=N?4itJe@jBam2QDp^b;23lq+Gzct43
z1=4@R`o~fH{xD#gq;Q^)uC+Z)oxwJyWKRMx`DH+khNrNU%jP5^wNS>~;498J1V1-=
zd}dbC{fqLr4j<>64Oh;cA5bgBMstfzis*HWmcC<%pZ^N*!AxQO2zNtU$+Ha$F_fzw
z+bp|oR>=`@BZ@yi8VImhD%!o!D#Il`=Cw(XIRQw>z?XioOqYRRtQyteXRFy0%rJky
z4xg(=G<llGx($4r@;bvQr$?)P+M0Vy57A?a?};_DVTUBQzYFBudJ>-h5jH!&$&|IQ
zh5L~fC!}t??uPU{PJmZ?rM%N^vx7L3RF?nVjkeA4m?6-o4w@6)KZqF&iI0>@JxMsw
zRTZZUo9%))hpn`i3BRuVPyI=lEavwW@13-yvU?6nw-fI_BT?;v6#Z>8=Ju(U$51zc
z8a=^R@x8*x2_%j2W1^Ih?PShemo6PwaRt42EsC3G$4{g6-#pI}Ck!HZKH$Z-<|CUG
z>>eD#kQs)*qF1b&m(RKDGa5yyv)Vwjm}7=sjo^tfFY;kQEZalr_<kx!JE`Lt9>j0g
zSa%9hCz6<lIL$@&EKa;urAUb28&LCO-TJMEUPf>YVQ{V=-Yh(Ariy;??>L226Ucj`
zLWZ_QmJAc{=N6`F7bHfAa7kyAl4HXyJ;+fFOYg5PXo)A}H4t%Iv2Ji*3cd9>zXHyi
z$4B9612mci$qPYHu?wkOB#)|E4;au`yU)5`vn!@-r)%czOTUusAQ?+T>rRHjSmlr)
zWg1Sv%5rt#7&6{1L%=1?_|*NV(t*8b#;-jdZe&2B<)T?houVmF@Pp*$<v0A%dPq=G
zzvQzlgxC7?0HK6Q6IObjk@t0<O-BP&d)#Z54<pv~t*6l@70I89Ul(=he}l!B-+UFZ
zI4lawPgFjhUk=Y~6_08~lw)^aUk;A{<l01w;fZjKfMr@pE)akF&HbY$;$b{Ns4MT4
z72&DN0p$Wc%Vb%4X$X6`KM}(LaSmU^jLueh#J`^Z#kcxP<CpZby+1p#85%7+!5)dC
z#B1u!1zZo*1+~UE9lcvhsadUKE4A+zxI#o(EYTR0X!o^!xe*@vEz{ejA^@o2@h&9p
ztqH_WU#!qupz@Gg-iJ(SWh~{IrJ(jTn7st@kuW|o>{@q}zb#*%@>)v#yiUf_=SMD)
zo{BusIAcHN2EzQbVR%9NtX~yaJ40{zDO*2v*n)BC2sIUAmGgeEYXXDGQAj+vvfZ*g
zd1BQHP_UNB`&l3%vI?qefMl@lfLRUlKSQ+nBJI@>U%c{rF2!{c8YdyhVVvyw_|`Xe
z3Ab1BMJlF%=M0sZy%DGm7LaHrx)iApFT{cP^+Al$f|99>fvVL;v4_Ez*67Wpn3ECL
z17nCnu<q>(ZzcJVRI0tBWHJN?S>Fw}yO$%6Z)}N;k$Mjbq;2Q8bh{&sko>P^Mb66H
zA6yN0Mp1+9aU*hr1Do?l{L>rE^Wy$lh4D&d%EYf<2u37*dx<oS`KtHRrC?xF0di%o
zV5s~GK29JA>y<H3SggZ<pg(NJ&$@po)Vx;LR^#<M29z1uXqES3-r++@S}2rNlB9U0
zq2F0u<(=!S#p>`>yH^9TkWB#WAsxPS&u_%%K`fn+H31s1W)|~Ls-I<#Yo3fpcN9K?
zA)Q)7V%Nh>05iPbHf$<P^z7O~`HMy8_W8~TUG`Wc_mv)>ekFp-rbQ!~?N!5`CeYPj
z`G+&%3Jhevfnu6j7TC!OfWwdU?oqEP7qWA*Ci`iFBBFo1OI7{{dNHAd3<7>tuuik9
zXSA_Z2M(jg5E@uDrR0kHkZk&S6}ktqm16~p^gxC{HrOG8HFg;$M~Ih^y3;3cHs3|S
zm5IH;e~`o~&+1|Q^*Mii&VO)4{`Xep|4FR=7uEhnwSQ6VUsU_w9o7DQCI7`&(ia-}
z-`MuoywAV&O)9W!cu#`a>w)wx-U9pfZbAKT4V5I-{hEK-_J8H~Hh<anzxuh;-xTI=
z3iCIG`J2N0O=1397j^%&Z(RS1{$J7muMquMh4TNZg66~pFZc?X34?>=1=T@}S4mik
z+DAL((Fv$XC^4^Z*{X=q$Y)>%dWW^+sXez$)ntQaJf%yuz&sIaordFmt$NgStZ9+)
zRtakjq4KKv_CKp%m*IYcw8~G1GEtN>zA1!ejYxwJ=(pPpax#R2Wj991t^0<jioF`s
z?Q2V|?BMIB$3c$hK2<df^h}C!mj=%g3-JFl*GahEAgBnr!fJmE1d>eXi*m<YHMkLP
zQE3Dz`e5L?MP%*j>||J^?(A2q0AOz%n&kK&SM$JpZ32i^7$NS$H)pGvMUvhoNu?k8
z@@FNAi}qpX97s5&X>bMMswL$_vf6k&+=CsSizO5Jd4{hqTNS>a=<+h<_V<{fd%#^Q
zRvg3DgCwKzp52kpVN@+7DDdKLTR%eMj*|BI3jp3>`IP;rzKgVpcv-?K5lqV9^N6$z
z*y#vYJ|wc=PVt?X6ZkgjFEzxHKg_-U8sNqp#JLrZgP3+80|1X5i+f>60a#y-oNl(z
ztf<S$Z>0ox`yv*{i>ejko-;zdK`8JPe2AXB(+~nIjm+PbpCs`*;gg|YBaOTiBEG?M
zS=UhXA)vN<X=%$}PhSN0I61t?tvQH|js+z=PQ~%q;}*}Z-Af6+ol(sAerADwVZkxw
zM-<)71t(P&nF>qw1Mk;DJI_195b<7)0Q#!8g2iF5vXamk&$K{*x#A5$M%YF7Y2Cul
zOqM6ZfVSfX4iQf+N;OEfmh*}6(E@|CQI;;SICVKYv1~*h7ONW3CnN&*vZpYISa7ga
z6+W18>?Ys5li0j#1Y?JUxg+e%hC;N~&g_EYN>NO;y<L;WLCr1mgg@ZgL2qU~1OxA`
zaAt0>J&4#Tq)OQr0#*=;f~(4DzGddAN-%>X`>2L{Q(_ljiP7oCt1}7l=z)nn=Yc2e
zb*H_uQ;}}Lp=f{foxQi`H!qogGE5j06U$2i43HR_IR<=pO4LQn27FQm;%2x0EJ}G3
zgmKuI3(*+qEn2!gveGYR@uCHoXwRNOJJGwjX+OyA_Qo+ruI>PAa4m+2z*(f77eMa|
zq2V}(7vcgo2@T~#nF<}_IB`-qJZqw>rFw;O!r#M*edEVq+c8U?fHLw@&N@h)`%va}
zDF0FNAvfSBm}OVR3E1CNeIvhwU?jX1MDu_0JT@)>N$3ZBAq!c?j62KXan@xpS+X#P
zvZ4B^rNvvBX@%I(%5)N!*0m1|q@^o>O>SwA>$c%XSym~_%&!N3L+mQm%v80iT#UoK
zJ3KYH@919QTq{^B9q5Ue>AR%+0OXQ24#eU28Hy)3jvwm)-Nx&_7ypzZ1wps2!SQ{Z
zCUym*D|J!6?<dkoTk#I^PoFds0Y7G#M!7Y^OWfeiO^eoJO+JHU&c7kOr;OCxb;O?U
zcwot-VsDZ)H<dF|J>)i!yGxt%-ex)3r+#f#_>doo|KJ$Q*2gY`dQ;%zTOr}$^Gi=P
z3x}%bv`>XTUVWR_&2gS_pj{{?yBwDcuDF`KvGS_PU0L?jI^+R2p(ox|N@*L>g^3-#
z=mi=r&C)SsJ)CQ@=x;5O^3lM$#AnD)cOEgo6~B&Qeg=WGYk>5SX6;hg8+6C!h=2)&
zAt7n(9nLbkZD5ROaUIUccix-A$^)wkWFKPyYF<`2URjSjIQHDqs>bib8w8AUFznR@
zo^H+eQhpD(W5FFY3*CVGx`V+Ni}}o?p9o)Ou0>kq%!nm0*gLoKQEn;^_Qf^|g#z7O
z`lgpSXawxwK5fQi-0laSOJ~PVWQ1M24NX%v*dqd*>yDZh(UVE?1%uR{w_zzCkWtA4
zO>S5EoYl_YTkjX0Fw`(YGVK5r2H1Zcx|_`%@oYDATe)|GnVoNAgZvuJr4z*#$VK3$
zk?;+;<b}EMZVlCgjk~YTaF*%4tLPYHkGG3OpLax2BPrZDP=DnP_pX;dH`QMyAQNiU
z8VRd&<y9VJ>96kR+!Tqak#da~uva8gsBPd(-$RdN`tDtKk{?sd98vnAX_J*#-Ct|r
z$UfjlXEhUaZiKlVuhU<I(e@|j=NQ0a%ZnvCYnVasu~AkGpzt5vxmTe?Tl-N{7K+4{
z#F*ffij`I618GxJA7F0jsWbKDS@LwG@*eb5F%zOIWZ>-u0Ajcn<OK1wS)-~aUNz=8
z8pp0FT?HUn6j+LRb?`OTyJsO=?$~~539Y9f(380}SB(bN8nSkOM5D8l1Z|kpQBgoT
z{8>0OJXcT3eF4>ioQ53Ch*7a0po%ed{bvlzqOfLDAgMBJy_XB*bE%wIJ_xQ!AJeIM
zWvxSKHnHhD_qOW$-A)b+?w>uFEM^6@ZmjoVmaw)!2}d@@%w<efey5w2r14cYY7n#7
zB%+z{ySaH@T6t8}YXX#W9`m^*RXx|c-|o_Fs4WtKOyX4MC}!*L!(~&p5|0bM)PXTk
z=O2~5I0z50vkza>==Y|dIF{GcOe_)PU0EOrAA||+T56Q>LPv$oz5sGvHo%|65$|F6
z0sG;<t_k7aSU2A|X~T`FdqG{oKz@VQ+reIZDgM?HhDfcz0~D7t(izFs%F5?5NMj{t
z0-G8eUo};S-7~jGJ&Xo^uJ{tnJK7GL1&MKtvSRCfA~wo97|D$uWpCY2=(S}Z7ANOs
z??~@7f}YL*3b5YSwC2vS8xS<e@J^-JwWjp|(jR2?X3RToHtYf-@Pj)<q_q>g?p-$G
zCA{sXW`I#^7^BFd^<m7%G8Sai1}9JmNdh_E+KL9Odd;+xqn4l}7D)O%&TB$6PmA*1
z^;9bl*b1C-fqMUj;_xo?DH<A+fU{gt);vlaXh*U^CuD1}G6R|iz+?IHbpAMCM>iM0
zIv+iQVXYm<@ns*}!lYuQaphZu<8CC5hCCJ{0TEvYFO>fNr=j1#K`|3orvyynx8*O;
zV|Xi@*?UFrt(R0puJ})V=0$S183r+5`mk9!{Rxv2vv7z20Y(|qy*^c6v`d`H;AM+d
zI^pAj=e$Wcki3tm#IHgjHw$lly_FqAxoJhl-rF(BX~)<ws2HZBho0trD#p|XA;4M3
z$|Y%3*?i`K)3uRtX>EJn3d#Ug#fvSqf7$?c_8DNJuBBGyDUV43MIZwap<BlRR_Ypf
z>Jvsfzc<mK9b|RhvVQ#Z6mdK?DJmixBKsvR7f2XlTIxW?-&b8&HoQQ=elOBTGoBqK
zFT8schtkE+Ec2yyonCpGD5A#UyoiomLh=m6Dbs)(2oi2Sm~&C0-_HkK-m0tAl#hR^
z9YPviQB*~=#2;7rzmc8BMuW(%Do}RlO_Su3rt4_BvATx7DkFXN(^2Z=Q#mx{-hKYs
z@whi0O-`@v(RNnvX|-!XL_vS&?W=07+O>?cKebP^qIO0IV{VfZr;~z<H2Ptm^~bIi
z2?)~Q-91xr2W27oMnvrEGL)fcz*#@1g-}IeYS~!z=KsyHNckIZLS#L-Y~LiqmZ&UJ
znj=7xQHr1Or@~zx5*OEmAvD?cchDLLQF}<yM#yQmJPBGQ4%ULV6QCM!zyBQE^EV#Y
z_*5BGDrOru-^U`Pg8n+Ox##h)H;mlcw|mG5wHB;AZlX$($x;tr+VB?{5O&k$Z!cga
zg{f(l*?XGU?1t)APBGj3-I377@5q3H^iYl7H{yw&S@xBqy)HeGng(nHO9p5KbYV9%
z`QA#Y2%v+JR*shL>addixUl7fKE-)iF~~@q-H&!UrOK_{?8CyS9DGizslwFMSkLq?
zTuOsn`x&OjdZ`^|JqEuUs~3G_i#X5KXXE0T(J}F^KzmJp?Ifb1UA<R-#<*T#EEJ;s
z<DVio#!WdOMc$CHAvXIIuad}4)(@@6!zF$d_zX&<%&Yotp~o3*%}I7#6;IqkO5drp
zJ&gP`egn@Hr|Ni0F|%!p8WQHkL=fE!)Duu>a|BDue|Czi^OE*=ZuIInt3YKohjoFC
z?A1_5_B?>?$|7OVP&>D65roG%1Zo;YbwLf}FliyI!;$zy3|0$9&x@X_Tx-Rx_~m5G
z&9Kq#be}Z3eFL?`U5W&NEZk(;M)R?0Gisw|Y3-OttQ`}O<mp7@iQ7X}-QbxOvjJ~!
zNFIeLxqGI4tn2b1qrCfP^&^Yfn2*JLr`?xORY}WHxawRLNI9n#%GU`-zq~*A))Q#U
zRA<o~L4R5d5F(ES_T5pGxD>sO1}bx#gx+QB#&}<1+wRW>XF;AfM@tVb$MKn>rIVp#
zrkF`85&)yhI<Hk0oedGgv|fqjZ^Ep#ur&yga*zR*Q?DGb2j0gf5r-7y0Zqri#3Zwd
z>z2z`BDF-GnDt1-86X;es1;!JOMKyH>8$EG+MCQ%1A1JDh6Z5hW#(5i7=`i{>ZOnk
zVXic-e%W(ms(~II^BAT;29sxD${1AC%_8V<{i><bUI30?TMkSXxQhYIqFmz4N=l<k
z^C|lyHFgnzY&u{{|Ja3{k!(54Bymb(jaPoi=M_k*6|FU~lMX{K^a(C+lYe{f(|AIu
z;u3m!@+lAcHc+@!#1WFZPkiW~Usk+*1M5AnU!&Mdf<-Swd(H4ERe<gWZ!-pU9-z*+
zJZVV<Leu4il+6F0-(Rn@t}@UWRz@sNk;k$=+)hsN^o10P5}~tQ0}j21u(OyCetBfx
z<#jr2@%yT=^v-}_eaf&wQqp?py7sq^10g9}r}_3MvJH|BS5m)1J}xP+|Dx}k++qnB
zCy%^nYDRskhPDB$)B{{s><#7B0r;#sZXvNcIQ(=)fV1SiyEwDGg0B3)6f3a+ZTv>8
zrf3%g!-Hq=ty^E8)b67*)`&8DNgMSS86H@y9_U41uUA{rFzA`Fccj~X3}pf{L%aXY
zE2m5WX0lS-j91Y7mjjL*ogSXoaPy4TfpnqU+D__YHaMPH{WCME4}2U~Gn#|GjQ_k5
z(#V&l+^L$W9<54Ln@J>l0{WOHK$yVx{s-oEOY0Q&qFk>U5?<X>Ev%tQ4>M{LgHBeG
zvqVcP>1gr=nSOep4YkxSDNU%NO9P(Gsd;=)e*PW^No^ZR(D?k37>3X+{|+F4Ayrk^
zCam@2n>sDd*}3GmwRSwvJHhx)oa&z>5Z40k+wIDR8*3c7f%Qx71<*bvqx@z8JZqdW
zDNn+ScY=^thb9Nm-qdav{pb;T|L2ub&FDirl6@r=uFtjJ)J0|(h#}lVLs~`aZ#k%C
z7ktc4K}Qv+8#XvyKk0zpUHT0;z2eHm)o*WCjMi%S+<LiL%A*&5AD9FpGN4y0kqTJ#
z=@LJTz-ftiUQFD^W%oWGU6dK}r|-pmUkUF7POvDUKSc~TUx<|*=;gpw6V(I`r%2+I
zR-ngc6RWQdsWdFiBDs7i?-kiN9Z$M$o=ojzyJCBE^q(BFIc!M2zo@#nRjYOSpYzTL
z9kbWRH5g4Yk4(p}-ssP}USD%NI7u$&m!H4HtvA6`l%gpTpGS19*Sn|?$dv`UUyh|?
zh?sUD*(gBRKkgXxiRCBI1BdD;Cb(j^a4g*}`c;p3s%``f<{X(G(X5A+h+b3i;}l>|
z3|zirCD5C=_dst=GS0HfVj2JV_p)tC1yuLP^@mO~!@x)pn~@e2sBB!JAK<7WA(TX&
zwew$u9KFZa3WpjnZkY6EY>$fHzvdjdSM)!3zMoE-2Ka8xvQIXrJ61vAIcvi<I4dzS
zfDQwMKcX>n#-@pZ)|?8jn%ttll@@BdR#Fe0c`qQ$d}Gy$K5vtl4z$IAHIy_8gUShE
z)-C51TI40)RkpPxVl8iICNRpRjPxH0Ln?aMsd$;ur_$d{YE@gm06)k|zR9uhVSohV
zSn;95XQfV>a_})-$--j>fFY%C3BH1(0~-g4FL(C8{1}y;tuQH~3O9?0EYQFAug-#k
zKh5d0^*2($Vjw|ZNhPx9H$~XsC#tD26>zVxV6qC%zB9`BX<mz?eujuZ59dnrtnt4Q
z@5A#RA%+WwbxCJ}LE<`ee1?Vsa0}OeuI{qv2r#rTEpa&A3!F<!&&~*%1Fb(&LY20p
z*4jxkX-9PzSP>A3a+w`Sk;4dh71HSy6d2JI*EE^%wE7#k;YEUq_C7U4<=u!kry%7W
zXb;a7!?c6dR2Cd{U10;?c0#!NdLF^<wfAhb*Y0(kOJ#MJ?8NNCzddip<*{=B`-Tw2
zuU}VNgH=Qqi;FJ2Sn)pZesi{FM3@m6KpU%~*&#VYESi-P^B2t*;uVi+9rre@N~1ad
zq3~Ev5vVM9B45x+9hO{^MSsm~JsGBj<GV!VlGn?S_)1B9kD<Q_si4s~z(<)k?0N=%
zPn3)bTUsvDUcbOo{Y6GVrIN!Rj4y5b%9BkRUgwZrXPIeDtKcJQ`xQd2n*Cy4n_;y;
zG6}F!3Ala2m~i_RsjE_xuf0X5J6%}SFUn-ePrXXh?Pd4^f6h`XBqNeGq<Mp68i<A^
z3>3sIU(;e#yaFI9y=M9j`cQw84q{<ZQZV^6OBnQYGvN`g|FJ?hXe<6%r*x@~z--8F
zQ?Km`Og8ABUs!?*Xrf_0+vt`4fbZIxsdAN87}~=txOA<KaVN4ue&ra^@Wwqmr3NEu
z_PfYJ!P7(AGM~^=uKw_WN{QIL0a@69x;0v?$cX>WZnLt{T`}p_1x}t1;DEcR5$Z&6
zRBx5`YZ-ubqUelOKB1jk?>n&=5f-y`i$hbyAV9eV8h*IA=BQ4#EB)}FJ&V0e*ot!w
z-ySSEEOTr9W!FP4j!}o+7u}*giuK?eCELQNT&xu)S*}CAwW@|zbPHj-I+H{?2AAw|
z1ZR_t$G=cu8y3@A)&dhfu<$@88tj0XaZ|6NMT+g)J<?(vOE_)X>ZiXJ4Y6g(Mg=Y#
z!1SYfMlP!`5HfM-hRs+AVJ2)hoj+j$8gYr=7JS(gvLyaAl;=m|fXVmTlPXPm?rxyg
zTTO)Lt7l{e%&C~oBjn}0lBA8}Nr6{#(N$q*e$(=ZL2E#_1{5HC87*cx&~TTwPW~Rs
zg+3(Nw>gc%*-qWrLCA2#vD5!p#1&_-29lu62%bAUK?B|tXND$gW?M)JX|JOMe~Cxz
zYmDLHa<t$j@NH>syLa+~)2RcLE?rRfvcl8_09C*YXVq0M_i2sj)XJCpL1RF?@N^MR
zQBWI&3}%ud4BoMqrn;`RGKR9#bagzX(lHfU?l+Ya3kG8xin6-7b!b3D!O!453hLj`
zxghVLNyvy5{qX9h8PkREy@s3cFopL+c$1QVF%n+nyTOt7?o^HHepqHeN`zfEI_k12
zX^}xtj@%uO|9RS6Rs~Towk3=9tIuLf4j!pz@o{OeLWbv)Twv0sdNIySrTKycXte3|
zjCYY(5ob%9b=sN50?S(Nj=2SZV~i%N>QE-9?taQ?EuX5kWP7hW(l+z(u&Rmkk+`)S
z;jC>{c-G2l90#e)lSqvTB5QB-`XUPiXk#j<rVf8+gdKiGsnN3K*RV<|r0(ltY_fe+
zk&7Lj1^Po!&z7_fyL&L4cz1D`1x9W`GXNIty8IblD@#L%kRxbJH7k^|0o>UTGg<Y=
zGD@!ptn`GBwaX-|mSv*OO3WZ;c{gKRW*Yf7^L7>-F16J~Uv#~;=8i&Rdis7lViZ#c
zYW4M^Mb@Go-ik)3PDgZbHZV2MvG9tOc3Q@fAFKAtz2X{aou5yJ68X>6j5c1Fc8nKN
zh2YfZY&>{B1)4Er$FG%j4MQTEw<6d6l2y-aL5A~H<K<_T1!R*zJDyU+#a;iOBnuW{
z9u(~6Rb_AW&yuKXT_cJ|^bjPk0(VnU-;#b&7(K8MWYN66(BDsk&h&r?pAofDri~fg
z)Ilz12>y1))?UK!)KrVPGg$zm^9j%|pi^3;yUWICh%ioRFiz|72#B>;*0M{Xeio>A
zXy7n#m2_Vy_j&}eTya|-WoNr;qaISqfLcqW-kS$s|8%eTc=WsiTU1?ZHowRbApT%h
z&*^cMw6Z}HVR4$*<5G=&ZY)$5RE%uE4DxJrD0&7rx5!h*peUg^zSPvV8wDV~h_iGO
zmYX&#oQGFdc{B)zIlKY2bo{BUjc!OaweoUl?Wtb)Rp49FG$`Fs81E~4J0Pl0x|psM
zb~sprUBk_F;UO)Dy>lfQXcr!X{{p`F(?jJ7<i?Esr<E#(p+J2y=8OEO!SxW1`Ytny
zEVq0Wv7-b^Z-Yx!1uv2i#LtHVo@V7+rC?(dUPafpGVcel=yi6W7S7nVPv!1UeCAT+
zGLtL=-Z|$^dzUAM@VKYQEk*#RWB&0g%V+=w>mn`6(dqB5uy7k0<G$Sb@`QM}t(R?r
zhkK|G5dzjk`30;I>-+WK15TGFn{HS3&As~`PTXe~MhV$X2L4wU3S}fKSDCF1?^Fnu
zOg^+Ktc$d8;7Oa%F;{~dpyJmkYA@5~D>6<KSpJcLAS0k@EF|<<0y1*;YZ*t{b0?i>
z8X^as^w|(k!xD9PKja-(C~k~~2Fd|o%h30TT>M|&0k8-1D+$Pt?YR`S5a7;xzo=-)
zp*<*Z!oQw;Y7ai6F<E>JZc#ietU|8J)>nypNHoFirhYH!w42K(FeC|xE#P&NPTwRL
zc)&h6=fI0o+kkb?NN3%)?6ua@my<!>a-g$Ym%M1o&iXh(%uekfX)YwGr)-jrpTnGV
zXLo?VDp2NeFxvt>5H{q*8k4h^g0*iVMgWSW5F^!tyk3ktREShBV|3Q>pu#P_5?}*Q
zb-Z{Vdz@&@emdI8^`rfYVFLTf9zd7YC!?3v9>3_BShJ#5$c<Kl0Q6_9V&soquYcKN
zT|18wKzHE*gN^LPu=JR-?VuDJl$*cW(r@ck!%OS3xlnlL?vBjkOVV3N4rH4(!)^&;
z;1wZ|azT>>8-R#qb=n2eYxKE*1skOgZZe`hF&hjxH+&vMUi3MrAK0|MX{)1m;!CGq
zZ>aFWFMRVj$@qpA*L}rhn_VJlGA*(Wp6+js7ZfQnFl#2xfh6`x+M6-O*~ZF~hlq<C
zI>0F!1;)<^SRfR2J!kP&H53+fF`g=(gr4~^`-n|23OrXDBaLVoq_bnK6eZ$}O;)Yd
zS{#<x<hFX1r*z7?+Da-shm{4IU#M$xNoD|Du@9#eV54M&8@#?nMX)CvI)$TlCu}?*
z>rdKrED}l<b<`JJt_;t>RCjY|=R8j!TfHs!#wkN)=ej$Qjm_5$|A1$E))*m^bhPC8
z1-Gc4()5Sl*0ocx54aq&CJHqB>!=PEQ60ZgcsT^U#qts!Gc@CU9kKR|V!&e|$5nQ4
z_b~${9CZiySLWFrZ~>P7i2ZM0uwcK)yB;)^`xPyAnU?c<;S4fVv_yoZvkG+g2~2$1
z{{bdI*}n}F7(0`yS+A#?<S;N;D(D>*!6_@>4Wm8@litWO(PIoTwJq$b*sc{QxwqAP
zcuW{`AR7Vj+VX@Y(lDCrYSswp!*n&T)hqxE^|a6ncC>K^KQaV2vPE>ZGw%{$6lo52
znY(LqGVgz+v$<#$r5Bd8-HR|y*l}gL9VrM<nQTD}*vX)($i5~>ws6Hl(=Gh;LpR54
zPv#1whb@cDFSV??NeDTns?FAu+;2R(75Nv0Jx9GhE9JRQuhOhJcv&pvk`^yIOlTtY
zKIjMB8jbgdFDLr$H)~>ukPw@#e@QlyU~1*3OI8(&ug@OY=%~=GG(Ws|&FvLgGk4dU
z3)CJ?!p0Y-RQW0A5rCzC#0l?tLfT83KZqg$0*kO_uWpxaYb@|aj;bao`r_U)-IG4y
z9-v^QQEd#&^r&1Z_qBdQR2mkX!+}#R1MniXUjG9ON2>^+fDS|?0Vp2wWesGA*Zn|I
z3$G7RZ(P2#*q+KH7nqA7@N>swFG-Kc4h6;Rih02qBuGT0kYTJNnpRozo13J<-YZw@
zCdN5{bWM0nZ^0XEPH<nU^7)17di=c>uSRiDok$QY=Oxp{G8d^#Qz!#V$p;tm#@7lE
z8q)NFT*3N&L|_95{-B1QM43=#+fEVt+Y?L2DP^owN`UN&V+ajUr)5Eo&Kgxn;*HgX
zc^(^OTFI`%{(NZ*a(mPlFQi-WgU`RE8GzwLUsaJS<ZnHMRH1J^VkA9aTbI?=E{E)m
zSpsGlg~FP^3R+)F^Vf%eY7O|oDT4-iV3wkB8P{_l(X!3fY4rl+bb0{t7_ra36jbLo
zyZXMc={B+;hlm7wl5cJ$9BQ9Db<33zc3~>Q2a+FX>8j;F7|qHW$|#F{Vq9t~F`TVy
zf}cc3^GX~ThvW)=)a>KIUx-%+s^nVV&>FSw=>e&r_@npbJ0o4RrduB7Ze`D)2|7jp
zDW><bs5)ipHs*it2dI%M7&?<Ff4`|H`A7aM^f$~`i4QPe78hlpId)iVdvwFQT_+Et
zSQ0Q0I^N9aL*_-qsE%8HF{!cl&#SMhrQ_<M`pb`sJK*0rCqSj>426WiQ@S(5^aF_(
zwXHXOeV1ZWY)kYZS=j?17E~ydah<A9n$!EESCZj48S`*@+?0ghL?R0n6{1o+jEEo@
zy?AG2$?^BN6lJALaf3aYNjD*8hRE><%S(8D>2*Fi-q!*rx5UeD(6(X-cOXP@D;#MC
zXn1R~B+PSh0T)kzvI1l$uruZYl&+n<F~x6;X39>7Nfg};9}u`8u-O~U9TA4l4v+><
zYh@?*r&hWA{4|_y`h}3O0@_+74^;iCUN>_1(v%m!nL~Xv$_<H@k3~fAq|`*q?31EL
zHCr~OWBNKvjH&#If#Djl^*!PA?oy9Fb-gy0f)s3~axki&-+L1*bo*2aD=8PHR&Mb%
zAmr96Cb>NWOW-=PRDvkvdBk(Px@u%J?W&9#3hqEO2Q$|UCa3YeHKHR^5MX~%c_16m
zs?0}0>2dUpmGIQ%EGw;fXVPzeyM*Ndw}`Croxhj9uB+PUO@Bxw9F^ym>8~(j^qQ=n
zmex;2vMI{9JzqSJgjzKfh=5_E-%2QwQt?X>FpOo1pxOu}(1d}dT`MXkIJBZZaUmre
zsa9lOsmP3adHo?aN=HbkTR=wej&%lZ)*sbV75(j)5%i?`(Solau3!U1ioubx{GX+D
zOpJ9`sk?B>GNI$n80{Uf?4~=60gt6a1?m-@&ZUZx@$jm#SFNr&NWz0@QVq<5ALEw~
zWi957TyMv~Xf4$HAAxwt{Zh}`F&Ihe>SC>Ga(F7qXaW+T_qcB_^-*n#jn6Ob;LC7~
z!C#e(nmg%6?8E^GiYx5Y+HaUG&(Kk_HOAFopf#=S@&h{7ICz(<f5lO<<-4-AyoNsG
z@l|%#;axj_G69QHaxm8)WyN9HvYUfMU~kQmy6vJr_Rhp%;A{qO$sK9dC}Ys(GT+`E
z&ZjVQk;gt_Y_wLF>K)!KBAG2sg_{^1slHs^Uxd$)_YZ|K``;Ix3t6+2$jX26A-#HB
zy{p)y%*z*0&9h9A!hW9<wZis0!A9zzn%oS;i>~~$^HS=~AziDY;;wWDW?uttUHbJN
z;pNrmU$<;F-#3(@ce0-pK`)$f0|Ak|`^E#Z_)HbA0=*~~B5?OV6<xIy$|`<#+AZiK
zhnl*U)@L;08WgJWrm;@q)o@QwR9Akh!<kPy$Q>nd|FwInLW`zb1}kSG5=(6-(^$XN
z?ChPnY4qSZC;^<tjN2E(*q^rP;SN^>jhEhljUr^b4QpvFo`rb=QUGf=Q7DjF34qLd
zEDTI)sK;quF*whty<zfx6?0cXAMU;f&mZc-q3)4Z02^_xjoQ_;zZN9wOmLV%xg1I(
zl<>TbOW*DM7hti>H~Wp)=&)b!h|EM(my4+!tnFDzocZ}5DEc-Nv3e~+B&pNfq?1j>
zdLl|8DZ0`o7R%0=n_?g~r_8$vH%M|MspH2mUJ~EMdgZRV*GNO^A^73lota<Dr3g*^
zxHnR%;k#KkhCtd-K5T^bB^Mg>VX(FM_17yX0>AxeZzn^{_t2hvAJ+0V{=qmA@o%T8
zJ<CA3QCM)cG|+~iy)sD#J?VU!KuT@1B+TLG=&|s%u~9YB<R*yIj?-4|bck=?iwbtF
z4<qSeT}hpYqh>fpYQzo*G;(6ySI4rwwO<prxb)u;bzm+2?y*ILV?I!)_N&s>8W}?1
zaF>>_Ndq(!&saRh40?In|9%m8m^u*yC&j^|kN#n(E+oz(nN9mMQwqd~A1Rwpw=u7K
zv3mK=2z%lzC{PGdYj=U!4Jwodj>vKH5y#d5cLdB--F_~;dHNSkA6v}~%<)<%gOPk5
z(U551zSw%5GA*60c!eTH39*FdL8(#dWPQUzw?~d|AyN7(*4v_8cpO=Tcd)vEKGRg7
zCumC^Zv>1CD$X^kFe~{zi*cJaW)#(CwVsiAPulS6ZdDgRlRJsxl>L}!#&))P<AI;6
zus#E*>zm8A^&j_`A?wF_4>}I~ulS!84nGB5EQG#7L@nN0tNMm4n|#H!u<2q4qM_`y
zlT(%zHRK}^VGW_N%pQ7zA};*T6(V!~_la^8sa>u2Reh2wT@^eARS*;~d#&@u^^OmP
zQUm?X9|@4&Rps>x5=f_fuiTAc>IDLI_Ry+w@s8~GwBz1n)iuqt%+d@i7%>}XZlQ>P
zdp>+4c9mnL>iTLM1oK`1Rs(EIRe4EN&81I-5VxbA#!h<C_bw|5`!A^v2dH+hFCD=L
z2c@XG0(1GDX!K<8_ZeLl6xLyC(`8C~6h%w$X~H%pj7@|JCuF(kcJA{#>;2U2pz|!&
zm;Jt#x)S|prmX1jN|<_kKGa<Lo;`r4T@o;5%WDM?v-YF~r9O%fPQBWZQ;sw?+Rft$
zUl!fXJZY@D=u(jh)*mbC%$P2p1X!z6$+KG3H6IMZI|uA4BrS#X_oz08LP;tnLC2}$
z2Z&F6w|5pF*Ks6r?(5m>$-htw2@VKA1)>L5Tb`MgaN)TXs3AAyhj7_=AOy!t;!Er2
zf=DDErI+vxvZ+Pg#lpK610Kjb%8hF~D>ZbwaBp_lacHHF3^ypt1YY9guC3i<a|Pcx
z9<&h>LBd;@63R#XdNC&Xdf-7m5pED)8Z#^-XzK&!b#Amq)k5U0Me`mLs0zOqG{<T`
zHR%{#NDqEIp^u>u;A^z<r-4?86RK2qJ@_U)D5Crdm%OP8x$Uv<q=0T!as{~Y3M17u
zx*k7`vH+egv{`xP+@K+4H>>wPWV}t`)UfYTi^%vQn}!mSc@ncj8Fi<59m%IP1v5Of
z_p@EX>d(e-k}V{+pKhq}{PQY+tua=16<drWFZBq2xqe#V)#V(-vG+Ldf1JXveBt0p
z>NI_<9O*}$mUxrEVa7-H+J(Y1k&;i*kf7J4ot7uaYj^!#_!}T0mWyS1iW|-lNhQyj
zC8makkTD>GzZ4RTL`RiD5Sx*UBPl&<Xy>M2IDCDE{?rWOf6-V9Krts8cAFVF7|HR8
zmCjdSz~nbg{&cJtSw+#r6;(wP6vn)-ybd{R)p!ovhStFfIHg#gMIsg=k)-QB^{EuF
zBCN}DU&#KDJaI|j2huN2S?k9v&b(J%pE+lT?*|VmdY-=0>^!nqWr&f!dzsEADSSZE
z;$*qUTzsrN5qm-A;pf9nWP0T`JTXwpdWOR9i054cX)x=RxQxUssnR7)HpR+rKKE{R
zIs!%!bX4f-Rh-^Q7U?1(7SRmv>t;{X1MIX|5%dv4d2_O`wP>8u72WZ9_Fmnha5%Yq
zL~<55;n3(`q;S74)xSxO>ZPWje(UwYY!ggmo>+wK^g8)LN7bOgZ_qQCNqWRwhG2n+
zWQ4V-<!iN}eLx;+t3m`GlK^231KS$1oPG2>>$6)XXxF6(xhCA={PQ2Q7Dg3lIq`WO
zU^lYZlqS<7S|ljaf7FP6Mf?~Orw(v65%}OU;NCtgb<8*TRbn_hE~p=?*P{gL7=*yG
zx)#DINdZ8y1Zt!ojSVU7VZKQWxvCa_I1M8OWql_PflN#rr`wABI*uD%L{k$?^XYnT
zH`Zl)gn-*`v;v=w6ALpJoB}(YDacF(OHb>N6f^xSgA@~%>R!ZY<H#9G$=M+qG5;+D
zDpVq{ne-Ao6`TW7QBx!fQ0K*>G-f^~5Pn<>crZ2`>OT<ikjZ<v_|dCk?#qMo|MRqF
zn*Erc(K=<OA5muMTtsr~fyl_2{cgGWY;fx?+8$~A?xbtn*Q}ExG_je|7>`X^!q}T_
zBqh-iza)v8s<*><7;0Y+NK|Fmc!)lG7yL{W>>&u2AGKDEVm32QNpSI#hfc!n4{NbQ
za>($*Z|R3xAW{T7<}0@IW0PgD*d_XRgOAM_u8Mhl7_@UxhD@jlkpeEJWe%z?)(HwG
zFQ6CVvCkX3irmB>d`EK~(6?QP2hf|<t7SZLE<?k?w15s{%VsL;H5p4|qQ`hA!MG%d
z*vP42Xhs47ifoZr%jnq+L`L=x*Y;xWW=dlcpR)92yo83BX(hDH#k#V`#M8nu_q{c<
z%$YGwe_3cfy5MmsX2Vb2euTI|=+s89AlP$%TJ|tE3lVejMcrqkD4{V3zdZt(6J8P`
zWO@o)O%s?J?tuJRK}6*e-5oDm%2)Fx#bAzLG$<JsZcX}wQdX^2Id5#(_V2`(*1!A=
z$u*d5#s}!xLef)_h;YHa4Fk#zc3YA`LZq)#j>M|O-gvd@kIV}E;_Dfq<vlPfGuXSF
zWK=cU+<73WKS7gJBr_%*rAr9I-+;{i@EvWko|RytRQTA^0goEWCjTJ<5tB2HfA?vt
zon_5vOZm|)E#NrypW~Z-l*wb3{|2w%^xmuy0c9L=7XH8PQ-x7T1M5htYk1=&F0%Y}
zF5QAiidLUYaZxHI9~*DyGU7oYQS9NFH6IdLgfCxuV~GMTW4o_RsinT%+DjAt`z4$}
z`d-cQK%Yp@%gAAw?7cZhgRUab*vsaxN_@N_2FO~F3lG3uNIL$7+O~(uJXAS6KdU;Z
zVR)JXGfw<+ZFrJyHLbQjvPePK?h#Fh;9nUWIxx2<{J-w>;EVHB3s$>1#Gc=B4tOcy
zBAplHh6#8Z$bPN*d*GU2=gZC?h`s@$)h=v4-dn|(a>dJouGuW@FH%>Qbdb^ubUOqi
zU4{_lIrHYBi@tgrneI*B()pd|=CN|O4IHps*Q70`mPBfGrMzmC|DtZ_DYr_@9&~kQ
za#+Nq_=T*C{n^2DtLThmH3l*TSOj-PuLSiwq{`8`QG>;rhHrNl1kMDu1gX)djax_~
zg)eVKww32rY`b2ZEVd)xj?er2^>Ai)4ltykez6dhuTJAuA}>!Z^;eQg7i5yTdwf<e
z(Pg)7#X!w<hwWSSvNi4@Rq7z!R!DNSAQ<(bq{a?Hpc>vBR#l{+B-2vjY$Ew>3Q;}l
zFGHLz%F=lxcjB?du3RA*KEuF`Y+0bC`+-!cWVh*evlXDOQ1g19$~8j(xdu?K%JP4o
z_-z8yW}S;ebDgg$kBt!h_54G0`Fdx@QwdkVB>67S++1pH&3gvb^EnarA}@Nu_D3)M
zmlGghAbV+#IECeWCMr9j8$_#eq05V0(U&ocG^%F6r00ikqzydeIthY0*T{50bwZBi
zq<67%4IO<iEqr82dblMgd2Bf&RiR#e9<`GBNi-T>!(XPBVPCz`G!tOhtb|Ebg9iT2
zx;KH$n>oYh;%#4``i0nI@_h~6feUj9x!?s3ADX4az`RjPc@@)9JNw7q^o12*=_iL`
zIF<}AWY<Q32+Js1_I>Jmoha!8_l~aMZ!ZW6{8wAyMpb<DH(~+W6Diq;NNk|G5ItKd
zs>da7$T9W;UY{F2!(KmPX-4O-xA@roHl)kK!p~L&f{7%?Ihfqt{Q4wolaW7WC$<H+
zEk-|T4nQ;(YqgPm`MXytw~~X|Q52CAl<m<pZzNU&@JzqL-DKisxDGu1Zb>E4RhRIp
zRV?cHXT7$$s2k@ALh4_o<XD1FL4b;hKEu(7%b+#D!eE}Eq^v1Mt|W>cTG^yb)hbZQ
zhxg%SUa%Gx^vtxP&jrBDIl=u0sJGwXCHkUkUJ@4Sa@=8N^K;O>5s|nGGI(P=z>})s
z5t;y^CRQgHWkuAWwBBy}hBJC&!wzCdi}{@#pB#|+vKN^liWJZ=sf%eto%z^)Ls;p*
z?V`R@x8W){FiiK6;p0mqAlLkJLWFa%gim6}Z2)vW8lJQYY-|2vJ3K!?KrTP^E86{<
z$-x1BLD`%HC^dW0k&b#jt9Mg*<XP7_!xW6Gv7YAcA)1L5m?IAw^qPMnAq?BTU0%d%
zI|Wd;Hn?^!R0ciGeQtt>C4S4%fbock(*vbTqF(aLdD2%8U17cmpW8?wSd;iw!*q4@
zH&_cD!|oPmp@195H3_CN6yq#5<Qd<=j1606eUk@>dh&fc1nu{vzXi)@X*+z_;AOHc
zOGW@&Rs%(zg=mjg>!EeW0&aC3f>A)Gl1Km^D{ZI_CxcG%a(3;7ZA9=+FQ1_U!&tFK
z@j;=h&N$@70gMuN8<9S1E$F>p1_ObolhS!(gh8?>%RK6Mdmp>tG5-gvoh`b>yjsNR
zf3o>`(T2U5oEaW>P!F3Ly3is|R~ltcQobVYbADG~w~-C*{{gm>=~dFGhtRvp&7P!6
z4F;8x@>f%$^9LBr00-f|80TX9Xoi*S_>c#P81pQ~?rRaW=dg!e3I9>0lg|bc5~==Y
zA{T*jI+Yhq#abaZw+YcgMikzJ1}#eT6@=)#&*WzxOAxO?R)=$j<Aj~Hv^M9A`XA4j
zTxz1v1w`1NX|r1$ZKjf`I^Af>wgdXi+aHpp%p0Fq=7FQ-i!sdym_bMw={^n73vELU
zZhXFtjgI+8MdKT9FTVxA3u54n`>?bHfE*nDR6PrzwR*p$6~qBkhLd;J)aO0JH1q>`
z_ea0l?p#i~JauZ!#r=RxejPhmAOO?9R*}~@kJFe*`iAn`*txl%SjrpMfv!|=Q;ebN
zpfFQb1wXM|aYeMgzyg#jEs{LIWfPI6TZ30vI-DoE@B-}!-*@B<EVT%wX5z}u6QCcN
z>caBNMjX^M<6XRR5W5k914kAa10+$I8h~yYbpaQj3JZqr(RaM*s$}&&$sre<{r0$t
zeoN${hWAN`Rd<i^TbOLCZ<`&d9O;}X6q<GdH!q>3Y*kQ}XPfs148XyDoZWR>ny9R@
zDLl@Yx5K~bXbKrg%dE4xmVGhO`AH);=U60k?pWiTqc}W<TBfXbS_X9v=<J?j^!9td
zezs4i^!6U*5AlFg6kGjgRO%TQzio#K%H{+M`AYpS=LlU_ouciC_zSwoZBVdo_7m#|
z5=B<|<4g^h6!V}5Xn&o=M<gn+%l>NCOBElip<;^s!wAQeGOyum9yB7-&p0kITZX_k
zF=g|Zc3z<L)}mTeuD5fPWFlH96=S$E@EIv)e4dasBAs-u{Qa;L{BC;gNo!i9LKSGe
zd`h8(E$ZklvfU_Tk~akb@;)AR-7L%I&VBCenYNOA@O{hI_Z&il<@g4*#$8)ta1C~#
zXg|VYu&t&v<&II4GAKc8cqp}YCsYK}gXz0NO06Crll4pD*BRj-By2KeTsnBv4(hzw
zr$D5C`e48rv{8z7@#y>7kLS@h+8|2}+f!ngm*W1|Gigi|<z%KgnBoFW0NHuJkX;3~
zg{EB{fig9K1@~>vjW#Oh3<RnOU7cKLq<wd5XQuSvOz+**6J`joy{w1*8ZrZuS;D<O
zs?MV@Fyf+Rb&U%#<=+0sAw%%Z!Q93Hg2Mkabh@t(Fe#5&Ayd8jO_s9`i{{qm;ztOr
z6@J|y1=R+=ES52=HxHzd@fX5bt8o?d?idyb(bKs;B3Dxn?ctE0QUJxv_zCZ}crO3k
zJlA;{%^=n8OWhKEw_>Z}m5#NC)O5(?ofdCFr-pAJ*MqFp-Pr_+7#|qaQ={Yw@v~zI
z`Yx*3{I!unEqc$ZnnI^jgG3`98b!Fl>ec2Wy($iy@u?5`;9C+vU7ZYOA3b%mPRohO
zO6e2|CguNi+M%5p>ktkE*C?D=%kLC;g|{X=`EMvcAw5P)1b-;X`@|u{HfSX3`C=XX
zsN|a&>BWZ;R&#Ch@PTcm(PdVf#%K_L(0e#y`tz0T-fU3fSa~Aro*^pu${(gtZ&z9+
zmJnf?;1{b3UAz@i-EOs0#Rjf!5Je_0%@dNYL6+6Kr>5<urY#NjjgDPrC<?~nl8%%j
za$T3n;=)(G?3_ZNSLT=9LyljZDKwv1a;vgX{Z}yY>TWc)<mV5;k65HkwMxgO(IW-K
z^>wfFf#xPJonY*joSp;IKC5`g)XSnAXo}o!A&JMe2ZRQa@&mK}(T%0KIon`5oXxFp
zL(uP+kRtyYqB*gDq9-0vZpk<cPd>50*|Cd;i*>Mww`#@u*uRjC1S6Prn8YhE(F5!G
zZtJq`!<dz2JWI2_$N6HNU>9B=gnVX8GPZ<)jll#PB@xGE>AafeF57)w3gib1h83!h
zW#RpH20UC>Q#yowuE1E=ZYJpD8DP`#$n01hZyxdD4aMlYB8M;U$}M+USvBNWwvbvV
zQO<l!z$wvPg{Hx!fs4C15+HIJjLtGdeY$r;Qm<=&tC61Uh*;@%IM&&Z9jZ=cU^UX;
zzuK>N^*Gv!&K%FxX9lY7VWMuE)aKj_^_|qzG9E8kbtTvQH%E;4nZMyRMGo5ApDPI_
zDT0BD{1SU-iGtmC8pU2Lz0#~QAeBgdHzB9E_1bg1{&{sJ&v+$4?PoZ7v$EA5nu#to
z-3V#ItAhlX93|_hj*(=G#4{^m)#Or!rwK+#{}3tqdA)CPLOvw&HV*d9FzD%%);Hd1
zOwbq`Vn2(xFqlTCYjyn11+^QIk3ee&^{ihjUu!=B6Srqv8?;y&LPS<+!yc5#9<hEd
z11;M|O3zYb$~2&)rjB=R(VI5&fhmGo@Dg-b6+34bzBnh{8ldV1SjSMJc{`*Ni@Z9V
z#}DN_?JPd*Vyww&oil6GY<|froD#c~b$mgiU=7lElgVf0F4rQFIV#v<YN#+6DaVQS
zj`r4<`xZn?%9H2*i<%rf0!n608k}Fkc#zBI=C_B5^mowJGfHQMPd&wdcLpywf(pYB
z3cCD1uXGg%E5pILZ}C=4DcCVgE7v732g=rdmL0keEUUqhS;UuBg?zT&D?ItOwN(cr
z?HN?@0YH?vr;dZc(hY!0j)5!H`owivCA$MUo9#lE;MYnqF?f8R)t%6Q&Mt4EV(v|z
zH)*5giH%H_i1i3C3&>6XCgMNh1Tsggx(|PC^pCgk!XK)4<Ya!kMiB5qHXPObO9C@(
z#yZf8Xfa0#0USC#A+SN+QYe%<^Bqod{D9MxCTafvWK=zEskBJuG|_G#RG9XMYLKNV
zxR*QZur;=yE<_!=3h42lQ##MG%FYRynj8qaOiXSrLZ>Tk4lt8Y%#-YkDVk{IIu!K*
zR?aX!vKEZ^EGOxm#D9()!t6Y$MQnpt^|E9S>su-`ZVJ-(1OmgTWu--9w_}HUXGOKy
zgoKk^fFDZR8XG&~K#bU=P?Oc>{Dd4m2~Nub^?gmzSTfJ~BZ;jn^|QKb6@0vQOfb`u
zohW2E_6B=J9wi)qp%m&$-iN`Z-Sd*V@Nu)qp9}m2O8vzCj^(Dqioexd7WP?+2#L$H
z8%5%U<sx&mpXo3R>`oV@p!R$S`&s`YkRiYeZ|NoBZJ=xF?A+tNjIeu`YWcNHKnVJ6
zh)pB%2DSJMlssTIv#Y|_5)`eq+=9W6-H4~=2gmy>fmGD{C(D_=O_SI;d(-SP$k?>t
zo+;HO|25_-yj`RqZP}##X{}RIf~d$Ov?4IFmf?NmHYEN2?JF}5=PPqO3b?ryN;Dgn
zjr!Qr1Nez4LS0Jz@dDi#DF4@cbKH(&0r<7(Y@|A*ah=3%LkzAF8{OYTYBy7eI%qw$
z!e!*Rdp-s0Z_tV|!tZ%P_su;Th^nXA#xNj`fXY)D4MN0FW7OShikJ2W76T@unzjW6
zjm{jJm2PiZ^c>;m#?0s0j%v$v!}UW$e|FC@K;Z(|+E4=MMT)pxFsYv1eCW`PMJLWL
zLeM9s&dZHD)q~NP-^g4$EJApoR|QwK#^PhRwDRaEB&TXN4>Iub_@zuWfQt1_BRrV<
zjAs+;mE!@K5Gv1>-o@#bwY?gtcqo=irM{QSupBr$1LYce%BV)INe}$&l|>p#5;F9c
zxj@ZF%}%iAWSqXO_d0o!B883{=q`M7LLffQr?5<26qJcjK(LIMpF*kWK)QUC815^G
zpCroxY?`sBUtjn|e+e(bjYpGEITVB&DGd8&GPRMuQL%sSUr^eu&9D`wv$M$A!$#d7
zZ`XDb(B(eT{f2HcohU;(e~PV^Zl4|XQs49SQZ_Q$@1jZ^V%IKDL<hd~8x~DuGjm<y
z{PV8V!gSZ*!3OG6YE7}yZ2>>+o3&diZlI2XDKKYUWLzPJn^NRAy+}R{J5Db;|2;Cq
zLo9ndWsR{m?ARPi79tefP$oz0ZZJgtdDt4-%_+}`@H7ikS_Nd>>VR#N%dH!1Ed&#M
zCPAB-zR3FmwVHR2r<#%cqA^RTkW#4oOuTG*%@077zG!cid16uWLk>c25Qnc8>ktN^
zweIphBUF|W3w=P7I=|_&d<V!n#}mpLX#KMs=JxxvNb%2&VDtC;t)8lk4JgPZRk0wl
zCFhv6kp}bz%n80dp+yPO(iiS{JA<ohVt4S`VuV~-v7eKOhtv+udU?MJL!DU%0NW0;
zvuuQj;=M7~rzBrIr@<DrGNPWnTKn<OetC^prc{`!Yiq|`mcR*E)AXy>XwGQm);$4@
zYMiIs%JRqHk3u?<hgE(;2@q}k`*(pELHZdI=c2_z3#`Jk7js@V*ejmPHP@i&@DCtG
zwEJ>~SoLyAI;Ij{n<*>5Rs_++n7&rJ14PIU3X=K@O<i2zs)0<f9|4AIJPHaB{KY$J
zH#9p3_U4~)mle^;n6TvH%<RY&zL~avq;~3%06^zKKdBB^K8Xn=`;=?jm6nx)ISHIT
zOS3!LJh*bi0NdD`6LIz|4$ALV3VPuaJV0S4F_%u>7~tW<U_M|LXFCn-+@|F^y)uy(
z1jJ`KFSWsFf&}|)OxjidWl+7wjigo!lc8cplB~0`EnWQ~JTsi)><WP|D-!fDi_ubz
zuDIlmP{vd$lIPn?W9sP=kf%eT3*}M5K#$M0*<!ZNcFQ`wnv_Rbom&cxnN^Q)cnF$l
zp>bh`>LZ3ZiZOqRhA2`jS{d5>HTew$w5@$8qeF(@VPv4Yp&f~gZ}aU2qwV3hBDuq{
zOjYq-)4HV29G^cqE6Q)T#S|rgKjt&Vh=7qKt>HikE8v~xW=F#x4OSy%G>Z1qGdViM
z8k3|aqX6oeEQCg1l$4|V+sqhr9T?J^u_HVkY0q!Wbsu)9qiD8tRq0_&&+kX|;v~$H
z9eu3yzf7H+`mt#vK~gcz7>uirDHE}Q3~dv#W$8SJGpl@D^?s1Dn*uM!15dqJ9SO~O
zbME+<;L7Z@PCV=#l*5<D>cXl`W)+zoas|K-^jP`^3vKlOc^}Lbks0HN6E=8xt)_Ot
z3X~y(C{U+n7W*Cpw1NN3-IYnPpV4jFHv9H+KkxGPV;JVnkLoJWOL(Y?L?WCyU^Om1
zE3T{6kEnkrV{yVDl|JT8mc5#R8CN!1JEDL01{F{tur`YDZr^z^foI`}fjJA#2JW2u
zePb{>xOMN<BWIQtGIO|Gd_`rwgEv-rS!a#>Sqg!Ariss%bq{;g>ApqO;|r92V(yfu
zEZ?rQcvHHVgj(g83>n30MZULGRt1e)uAf(*yR*sX62k=Ycvqmvr7^88<zY7kL86<g
zg-Pj_(C>>nfYg5kHm(fl`AV+&jKus7LvEboXu3fI0m38V6~~%1SrF3LyLc0ao7H$|
zCfB!jDL4ro|Gi2P(hwQuCf`r9`oHTTNBKsm3P1xW60sNT`R+ocPeu{UPXe?Qp!46%
z3gCfbu!)Q&=(9XLmlnIjAc9AvO97zN<Yd0x^2@sSB?m`TCn({ZgPbxrP(P5rp(aFl
z{o|hA;@YTKHE_XBYP|Tn`SAn+nP*3|MpHi=?-;`pvs^l{y@oj#_Lo4Ovw6U|Ubf`A
zg6$A2JQ9jD=7WrtWs7el^4SB~_8*^TB$6}w7C}r{th19Hiav|Oy$YLQ!58?B-ZLK`
z(ooe+`LNOx!3_9AKb}&AQIAY-Xx(rs3Di)o=ne<aC($F;`$6frH8GBn9F5)MgWl`#
zPYg=8U^;H2$ceytnW+tY@yOOj!)MG;3FPc7II0})g11v>Csqh@rA^@?Pm`e8mjiQ0
zco9!Q_?n|twhuBcLuyy=|0-xzH#z-5X)n~4+?hs+Jo+DxPr9OHn710f?>>SO5TKr#
zG39W&t_e00=}&u|i7;BO_xNYXID*?piK!8Nj_r+6u7zzvF(pWP?geCe7KKmqcXQ*F
zGm7JBGcOW4+c*<JRDq!*8uUSL*xLTnd{W~YVZGL=C`~`@^GF8eO)vM05r$70g)$Kt
z)akSe6(u;6DtWqJvzW)452@=u5KPiElSB|(S%hmsU`86Cb;Nvq9~%nvGiREkWkJ5u
z^0dF!4Tbls`I1d2JA!aFm8s~+Xb7UD%}Xy`S?*x}f{UN>MAx&GB5m-t)E&k-b%*?)
zgFu1K`Ahoy?lZejE$$WxPcUG<vW1qb2dUiVNtZ`T3LA?Pba4|Qi8<GxZj7RRYnv0t
z!OznYC+o(paxVJ2&X4GVObHp3Hrm2F1<mNFm2nCY6#pu0B1qHjcKG;>_=#Z<g85M=
zd;6$J`y?liT@;erWfJGBpv`o4t;goasXasTNva53_!bs|yXwhM(uX3k^5UDl62Z|M
zWw|)L^)!no3e`1ls@rx04o=$S{sMU>>_{&GoGCE@sD~-;BMt{9@sX3U{a*I5?61y<
zkzTlV#skvs=~4W6nQPY<I-tXiN%RJ_Pvg6&8grLLOB0W^TD9@mS4@z?cja#aC})(p
zJ^KLTRA{LS0lWw~_a8Vh%Gp&{s?zgTCQ$lZG{J0$G6np4GFFs+_^6Pl)0C;-7;C)y
zwExUxI%cB@a8g@*KU5$)h@h&`psoMpG866uZ)9bx1UJOtX#`HWmc}~FQsNBD?S4`3
z_Db?40E$NiR)@*R=YP?v)#=<E;C!o=W;tk!Gh9sF$6ZoF;mocdYyBBOhi#y>=Ns9F
zY~as;BcG}SHe({PEXZbE>&m)saZdTS^aj;ra<_Uq4|ll4cmzk2TMmMJyRw!k8d>WS
zXTSGfg+`=+Pn_>_N0b6GnDfSQ5+<Go+EcbHl@w?1_&@&!=E@=OwL2bbCmh;$N*f_X
zWc?tLkpkSJ9DK%vflq5A6h(Pj$KNoyQ!A|kduRa9?))Qc3AGE(+12wCv+@iy0}EIc
z(xRx0XR7@*;ipvS7lKTlP+$XuTOnN~1P1^;z-)SjOkrvyx30n+1u7<nx)@qe%d}5y
ztXjRO0G69BBmqpTftN26X=stVXR7=lIl;$*%*?W{%T_escm#%~K7?4W_C8KaB3j$l
zK?}nne{|aEnr0}Y^idUmZC%;KuZl)>m?!;C)q}4IOW+kzcSdx(H$4p|-s-*@;_3;X
z5yr6d>8^cc&G(bNDt{omTZJ4^`w6$o+=^<T<u=jFwdC+k>CX5eUEwoJajw*)MZOF8
zTJddgR>b#=4-QEkMh!z7GU}0~$qxO#)nO)q1-nh`{wN#HS$YhIi5;L}T=9wy78~kL
zKe&^hy_3mzeu4L4ch8Y1FS_qG9f^wfN^ZU?x)4)&y$m{j&OCEQ6^cf)kNrV7J-=Ha
zGiuU=JAdIM&f6w*iE^GLH&5vw(Ov;zY3^qic0>r#;(|#d);<V#CmlIm8xWbw6$ai8
zOTT*_U?tw*dmOng?XtZsEq%$nN15F<`Li?LDYIT)$CT{HluLW02TnaBY6zqfF)%0d
zs!L2A-r8;2TQ2tQ6JTyAFDz9p4UcX+6)?ODLb65VJq?8=OJhTeMDB#ZwQ%Zbp!s0G
z<Ju*yah;P1r7>5n+^_rHd?Nm-$T~w({f->6RQ63DK?@6NBC&Y`8|ZzJR6Y0<mZQF8
zsC$M<988w#-5`{b-i;vc18*X<_9D&2n{jHs!qM*Ff?og=OFYn!kXZN5%EcosZs&22
z>86pNw*nvNE@6r)!!~p4@XC#GG9Z_n$Z{N^xP!IQ6JxH{r#HnsmTGxm_#i}i@OkVE
zd|a&`ebh<ytr>FilH`JO6_n9Qd@UCilh)fW?y??K`Awy_O7fymuw;p?g3x1TAT!06
zGV_A`&5vu#;l>fm?UM5t$%jI_+4uqzp33JCib7R461d~>q+jB`i>11rLxMGWjUmzB
z5kB<RBTrd6#~gg=K+)eR=-K4;35}TBpce%Rk8_+q9ovq`nWUDL3Z%SPiJCS8cj?!|
zvX6^=?*7J175Q2#*S`5<@ZEx}|0GMU<=^}dyH>F;4|VsX_vd}Y5PPd64wq;&6@1BQ
z=$_EcyF%U}b-RqEnYaTg1}n}51UKF+v^An!xJvMun#2RFL!Hq(G6!WHk1Xl`x{8<!
z8i_CkBDWwl=S!Hv5;~nsokdiAc}onT+f4-KKlbF=Z91fD;R>O+1rg}9*sk!Sw%|e~
zH%?XQS<m>(b&d;3C98|z((O88G4zgqWDoK%2ypznGH`_F<8#2>sc5vN;Dx_1moobi
zuHsQJ)^8ZAZekv$ycE5NO|ibym&Elv2IHNopb06;a*}ym?R61-6?`$XKOVqG*6HN-
z!C0zDTqd|T(NPecEZ=(Z`F23kiGYs^R5Hoylnh_y+M6#}oL})`1Zdk>M6zlpFGf!X
zds~#y6rLN35h*HrTNDFnR&lW%QtiND3rvu@7`Gks%hrD`8wupWsi?MJ3fn=QtN3B%
zG^+Q8YUhSsxciL7GML<s)e^gWGG#F*4DpO<;o%3%lPSwDB}(_q*?^{Sq~oSSSS>#`
z`~(Oe1LUeT)!W@mbDXw&js<38I?61*LNQA!EqHf&$hR)r$|)@?)8(W|Uwa;6XU~VE
zy{8$VN9`BZ@AMo5iQQXq0R_GKw}soUr6|m>AtdrplaM<OP8`&(CojLc6^nus-%#IO
z!(&lcO+{*=yv&=Sb*fscYLA7~3hcZ6sOt^x-a01{><rGw8@;f&q0z1SA$+Dq6?Jl*
z^uLVr7A>RDSpQ%Z2-&Ts)Q@S!98I%#k`qkLI$Pp6S_B)f`Zq4AU$;jU^l3Kx?mxG;
z1UchO^4Ctu?|L?d1~-B0sLHugkONn+ODcD*g11Oc+AEj@GAokn^xEB0T&at0mYDy%
z&wc^yTDqoqLfnoVr(V7cV2j2K=LnO(R^rMwi-IK+pze&6iFwo^ngFfVl>qft{Qh#5
zRy)*1#CywDFj$cftb`N3e69!Fx6RS%3HE+>y^rYFfZ^Tud>S4FwHgfb{96L^2_tg#
zL-9npU0vGQb9?cL=h<J?E{%RPpJ~GOy>iDVlY8R4-F<YhpEVznAPm$7B%*Z9_sp?F
zV=Fn1nKEnW=0S74xaRIY2jSgwQX+HLv_Oold|8ZF;!vcSWM(1(IL34MxHf#F?&N2^
z>7JRnh{KK$LY;m7|09Hj_LNMI$Z)&;IZu=RfrL6~9Rb~L{(HGOKrHPN3i}?gA!_vd
zVLw&Zj8Ej7ifLA!!{vj2z?K~3;@hv~KrZ79fmP%}CDfAGO8d1iXsQDTw`U9QoG1X|
z?H4gogoZCKag*NommaSW3&E0(B@an4hNMn!ReiB>{Clu1ch{jXwydWO-hM)af2Abu
zGtQ?ecT-8iCxU|xC{xolY`PI}Yqjt!otW%(n-Y8}yew)D0?<7l37hgws(gT&wRP2Q
z>_x{HebjC*AQ-mTmV$>9c>eTJ2aE7>IO-m~!pH#Tlh^1s@iE%Vwp!5p0F{PvECDIp
z8H`fh5fzQiKxth!$YU<y18%A-%vbSh?3JCEzv+=zUR250UFf8O$lC&e^!9#tvZ$4g
z&LCnN>s^)5i%JsWDD+*Z<#%FE%}T56M-v2Bj#b=gRe%4l|1h6>`w{=uP<`DO;i+O<
zVZ9&xmrO|mZfity?Kz&~PiOuG>YP{MO*b_i+w^*Lz@lEkp&LTy=33WqWgN1u1d6aD
z%ajX}0=<*8%r-OTwxO=U^5FlzwpD4%NKtXG<2j#vq9GaLHjSDp<fz{?1Mjg|h9acb
z3nx^}{-Y3FCUn`f7IIW*(kRt>%SO+B5mzPBdsD70tE|32H6cY{<0gpwz(l^Yt`kk^
z;>YyfPs_LAXTPk9b)@9!RD4u(vyx7;#3P1t0~Zq=5Rhh)cSzTvGlMQV#MfK(o7`<X
ziU7_SRKY#nT4iLE`Xx336rxF7RkcD%8bq68M(}CivKgsRem;kQN_sFx8XDf<=R3S$
zHhYbBt<7fkrSAB7VaeDuFITubGbu*x9-6r^!r$90$I_}b4-z6P$UGu2T~2CmWv^>x
z9ols<|7LDW3rhwOl?4S+5rpJr`<m7|d*g`Vw9>JiDB)va<f#3L;evbQRwkC~tV%vV
zDYJWso*}#qg74FmEe2*6fvXsXrDyZ^x9z}0Ha$yiW9EUeEAyS<48?t*&CHNVTWmY-
z&Xb#IOb>T4;bOw!ht*#eF+Fu1{%mjv%=|YyS#Y}nnH3XePaHsA7gw5i)S%;B{%_*~
zP&c!D$=O3YM^Wc->1Q01m4Q#zfV?cctalA;oJ%szagQ(#S~_3sqhDks;ox+-D<Ak8
zDOr@RD|4Jb;#{~dz>oTNR>zMRZj$t;BCn)#-p0d;@XEQ1BzN9n{?vjX$sDdw@tfk4
z=<Elr?w=UuBkA=vut$qZMB2zMl*{9+Ys9bReqcm(cp{7fwffNM%6tP%;iXxkoyvR}
zIM2p}E}$JDZz7}AZW#+y9(_0x{=pmO#W+slheiUane1~O)S!7R!kv<Aftca;iWq}o
z?WH}$>|?DuJRBIZUZasyMz;#U<_MXDHskNT6B6^{%F+XM)VsbcY6o-E(7#A)sGGaK
zsNL$KCZa)Xg9b!yq2^s4fgN;&!0*HK>h=1}=T5Lx*&^h@er6@jU20O`!StEM51JGZ
z4gYPos|P^^uN_xBFZ5%z@=!+;n#EWcN!v<Rmnq!|jkoztkX4(At@4YC7&ZZw$)R!T
z3dV0SQCt)D+4Sez=J=qzR(_3@s2#qW4KgKnKL0k>-?bFfk*+wk9ch06ocEO3u(7h$
zCZIJKmuS?Sq5$l<i^UHfz`Zz?lA9aNFJl%Z-X>mtd8*+66^l^7h6Sf}=S?I{tEulO
z0oXPWIU=>4$5SbL?8{et+hvgyY9Iv$Nu(axICt2d92Z;Xhc2W%V1aD-3LBOlOr<4L
z@t@Jv>Vw+D<cun~$|!Jl<Q|lkbM1H$sNLjMDSx&<x>S2Srw^;E$Ps*}HQlnf2{G*3
z>BDIP|E{bMeJz7B%|^R`saH#?&q%1!@&f=UnVRvZg-|^v`y0=`wPl3u;|JR*Cu#zj
zt0jjZMGRDO{6^0R6w|=2oPPZkhrQDh08r?hoKyTr50Y;P{%%n`&KsjVVvz&j`armR
zIr!}Cot08g4Vv6oF649{U)d45bNa%L(Q=Kgz^i?4oH4kLrym@`<~h+sv|@{6PX2*x
z`%#avWg?BxnUY3K$0-N)JJv$wF)1ngKDBtj$%BKOW_(2Na4^c!Y}hy8gAhX#Iy!*6
z?nlKWUa2DXgOwG|=pmK73+bl2qI8M15Ob$ew)`0s0beKi<K{O5z?$a|zdB%^xxjKe
zu+DRFG+8U)yPD1~4s}Z*e{UCXC6;}JZH?|NW%-z*&DJ|^{}(qV>d>KkqUpvIuQdsv
zLMFB{U?m|BQ+_DTok)v8IhB3b*2xWFvzHvXu8xq!t305w#N)`<6ymWuAUge8DkL@*
zmWq6)6o*^pmJIW9q-=>4I8wvg)>TX%vLpuRA9bdnMFcl#&Xzfg$RQE_a<b#rsu4Ef
zQzEb=H>c^_7%?L}SLN;pOdqeLo#@(=?=>i;yr@pj|Icsb6JG(1A)Gbq8!x?QX=!cg
ziCwwQ&)Qi7m8%<V3%T^xfN#{fec$$C)5Qp8vfyIUzC6eB3cF$U#`&{uR*x!V9d@eU
zFhaHmHJ=PJe%=z$cVl`@G*KpK7N`x}yQUuMN{j)`)HI~1oh}mLamz29`2wu7AxGb(
zs6C|5^^6j|Wr8Gq&wIDU^YFiqhdf*&xkVeX#hA-(j{6UvD!O1PvnEl$q~=`IOMe4N
zmRIEF<aLh~Mt$L4#8(y`Gb}vjOK-e&&KEAaWQKP#;wQl<ihxOb8qoqDC8E3b;@a>D
zvs5weYD<svDe-k(Y2G5`)Vf#cwiMEG@x*t?j+o_-kAZ;KDGmlca$q54v+1J65PG+o
z?CP#3rx5P(esicL;tsUHD*M~aKTJfIpc<@x+y(<acs%N_TN_e=gi6AS)Hn!YV;zM?
za)rx(D}tuKP$DKb>e&o8HX|kZ#)vD_6LAhkLiH7mo~Gdk%4_~>{dmqCc+(A5)WqvH
zs($M-8icT}OwV|CUOI&I+sbjcwq0~6IyB{n_Jx+gJgBO6-=HHSEg?Eb>%1eSononl
z?&oZl^|$}Q|Nct{2?yN|<x7p7C;x#+jk|{iq%Y>LqZclXv&730gL_Nw^$g0S<`|<|
zVIgHAs+Y5FQqwn^pE(D%OP-uM`=WYP>)O&wqNp(aq4+P(4cgP^*WId+pq6ymm?6sX
z;kukv`eOC~_5`B^<x5K?Rj@&vA_Uc`*b;{ISZGC5oTMn7{?wFKBS5r>(Y<nF5417*
zPP8M&%3?RpT_pc5Ui+Vd%s>n<4W9FKPK%HGzB0NWa&|8UscYzl{MdHkEoYLTRbI9h
zcSx#TVvoDxEh8HA4lUPGrp2-egHmDI)DVQ4G)~=9ZHOL%g;oeV6(Bx(Cz(jdC(7m6
zy#VlA_%8+gL|+E50!7OK-XTg{3tW2K)5eO~Dx+}*dX()w7yPDY?V!=V^fKTY#{DoB
zo<{AGCGBqqfBYBS5vGb(k}}}vWO_&Jzs&Kztk#d7L)PjGR|-R5>oP2S2Zl8@Nnvmp
z`z~T;Q`OHjL8X#iY}s<q;{^zs>$6Vc4a3$CjP=?Q<9C#e9aL^yf4+e<q6?W{n0qSO
z<RZg8oq2ke%j)j+W4+n!HBvy+<<!We+pH!T8Wn~PVb&yHBf9{;ulKby9}LO&;)E~P
zhv)~aNKS6p6-iEH0SNNq7=}nshf}k3n^mdKkQW*LwX<3Af|H8St!x;RfZ3fUj+~j|
zI{5kJ(E?;E&wIUX0dJ7bce-FcY21-F_1!ecHxbXm78Wm8waHlQ^j%L##VZbiIihVt
zx$?%IQB-z3#pJQ|HOxAfXuzOdy9^wkP$SCHI}=H`C@%#bTD^kP?yL;!74Ofo-DEmg
zG%F}s!-v|wU*8x=CzUg70NkI?RzfK6M<P#{f)hqRs?^`2PrGTPr0`B|6A&|pCV+bG
z=Giv0+TaQ!$JEjPaPGI|G$JacFQ?%Uz{7IfgHY8_KY6FU%DWukEc?<DWvh{(JSy~c
zK<(%A?K?b3DxHnoJ^|{p54=Bx1!5)AQSj^!rih8Wns=GDWbKI`apeO_U7)a_Us1A{
z(Fy_pP+MB6WsptRJ)?B0=Rj1fiIXi!TdO`qT3KT|K*Fj735~WN47ycn@VsG+x@jr6
zgtb%-ge3g>$l~7j%CBTr*;iC|q0Y`yJoB~Nr-Y{H;qzxg>{*2{JCU)SUuqRJPFkf_
zGHFUg0Z@ggWX!*c`}S5=r~$S}Q~9V`w9yM+fsfN~AM;F{qn;WJD%YUED0iuHZZKD~
zPH^<)>4|d5`mlAbl}52+%r$1j5b4aCE^34tMIApSK>yfds`)b#PYT94EXyY0<a(br
zFl(67^^Tqo-5ZHA?8g0|Js;QYTtq~3{UZ4l`>Z_L2gCS*bP&u=VU*ojEgll1iXixN
zIV|P|iP`IW4=uoFKg*=#jKWq#e3N}}%M#G)WA?>;lw@lVsLIgN?UsrbMxJUY$;p#f
z;YT`#bNrE`ihAEzh!vf<6GAm4^3sraLG%CCJ2NetSU*#(X7k?TIW!Z?8u2Y<SQ`Ip
zB8-Y-<M`AV?lQfEDe>3(>fT7iCH@QvZ;As@94?r^x$6Xj4;SHK7>DTzqaMQ&p1Y~-
zm{^-A`vUQ&d$UNSSGG)(Zc7f)BSf2(gAFY^K!FU7kg5Ybn4;jYr>?cz`-t|k_wlZq
z)3pO>;h0=TZvJ^ra{3bYGAAFFNJx|xx4So>^|{th`Xp2#<bKrNV`7h1&bqd3np1Ol
z?3*&)X5V2`NC5!|f1yPP^4rb%Fw$1!Pt6;CYnrkL1)VDUvA-PnY9r0dId}puJuc8V
z1tKJok-$FiKxj8M!(HtX4wekK0?Lg6(2Ikmwb%EfVT~tPgugA`%xG~sf3|aGYYXob
z7x%D22l|mL3L*Aq)9lu7@=>t1;jgJJKojFLdnJt5&r$;1PT{)$57hS)D37+YCx7vm
zkGq7HHt@t^5Wk69tGf+)@Hsj6+G;U#By!OjGPB2XBjLfT>EdKQFWs6z#=&Y~G;N0r
z!y=kGYRH;QcSfu-;-xqTPZI}{>zI;WaS>JbGKWxt6f6xEVdSCMv8Z_1RSKgOe3Kz!
zc~9@OIwob%@C^v_q`hk7bn8ib_L_NFml)${xv7H~*^}!n_bZQ!>5(5_$l}NEX2Ckl
zC%rhff7e(I1eUb@uUB-awMjB&c?@J!2&2TtzwjYSnzNXlv)&!f4e>J7?ZbQ?`x{e?
zd-CHgh0gba-_qSQO_R@i5ENX=W5a;a-?YTCC~DdV$2ikhd(cNqar^qY!jAu6;EU@2
z73b;Df&-rrcm%?4Er;W%kzMq>`=#f<&`F4M?z<gKyXIh7&~Y63iX;UIfryX1bKU>L
zQ(}Tvjqxg@{BD(<w3ShO)9*Mc_OCcjnsht2bT#$NZAdoD&VHniQTZrxuGsXe+DJLq
zpY;xV3dcw@gjV^Wh9<e}tdcDjlX}TW<}ZUE1ZoMGH40*v^FutDIIhb*BtG9|07pQ$
zzs$c$5~<2iLzgw`oM&gQLo{n>&AwU9X4EgVbN^tEWpWREdJS=}`HXn~wJtb1)}MB=
zTnTd;H$e=lw8l6bAHWEygB976Fe#FSWA`YSDY(5#<A8h*2yx3$q?{Do&7r~>pP^f_
zM0=(GR1cm`_INA8*updTapY!}?Z*CPNFNrZIwK+C%!)qAb=IOyfjlY4#_kVlpmVE7
z`D+rHU<-DYr4cL2x6WWXTfqb)ENWlGcRKHj8<pr>ISW&`p%22YS}?d*+XPzNqp@pT
zoVs69<{h5^a&r2nG2;+09RmQa>;Pp8_B9!O^76_hAeGV3D=V@3<REjNh9a6cy9E4X
z5}l@A+Y6MS`Nul4O-7T0$Q?NIgE-doGt^9yM!R|3+fF%uzQ|xIfK)|L)Z>R+7HaY(
z>_Nztz8zz(cycbm;p_96<OGD+MuIHH5b;R!%JhAPZ{*c3`ed&MFpIjc#>zzS^(W2p
zJjE}&qfp>w^gdcqOppA3=#}5C#hq>tyq>FjwgfCP<zsq{N?%@-!9cIWpo9Bmbou^X
z8h&hY{P+(eI+R&2G=D5b{l8sf7q<ja)XuTGE&UEwfbksk7(T?i&a&m#k?*Wa^vx<p
z1TJC?dCf32o?h!q3fE>o*b))szSoU+(h>iX?eP%LU4N*n;2S`bkae<HM-km}?|73b
zwC97i8*fj%``I{ttt(sun!Jx|lMa2)wmQYuV1j4FYN<eaq<bcKZKP07H!9%*uV82(
z$4X;W#VyT7&m$fn@+`fH{zP`~%aK>TJaf0rp3@jjP01jEit;Hr^p7YJ!(!Y+!9>@6
zOK&WyYF%&C21#_eOEy@VEoel|;WQ)=1cnJF<S_OeapGoT+Sd5OS__oNWZ0H}3?Y?s
z;XD+ZclCF!DInR)KF)BL_x<A0Wq@$ow*<u;_>nrxwLnSK1|L7-ByFxV#z+b{z)UF(
zjx49HPq_MlhIRjIn!=F!gyiv{YPremADyTOtDG0u+1aOKU$ZF0+k}%md#8ahvy&(N
z65!D@ED3`4|1@4vyN^EDHq#rgM6_nPQu>yd7b<)v0*KqqU&qKSm6$~uYI+<cFw|YR
z!lRX1Du*JcIMtIW*<4Z2$E^o7prqbbPC~6tn@KGxnXXGdgPQrJ|4FjO%|B>DCjLWp
zL`O-Y{i?2#OoXkNCYJ-gGmJYsaAT~{Q9gdptca%JO3DQeKLf!EA=*(r*QF@T_W1rm
zu`<Em^#Ea+tcu~AJzwB>8+`fi*rTPA^rs&-Vs}eHHauQlf^>1Nd2A%z>Z*yJo?`s!
z`q6|eW5zVdWmm4~T5GB?fP!28yW-xeRQ|~nyU|r5B2F~r2S+3lj*se`_7caU9aKUm
zFkHSuG0I_322mRuqh;G%zg>!k`L!TAtMPl6BUP+=l00BXS!t4cSBlRUI@yz8<2MDx
z#ppo&G6GsOGDTcJ@SZ#_tJZ*MRcH7ube?lf0-pRYKiaUI=E$ovG-{5u!|%%q@o2Go
zl{@b5qkFtw8M~6ALsFk24-epbkE}H=KPp_fM+fFFCqwJj_TX=)?CQoemq2}hFJFW!
zJE3-kz5Y@qeg8etngW7NlfQgUdnJT;7AFb4kq#`=r55+LLZ?A|fRJy#5_qMElR@+o
zO`;XfiKf&TX8j;Cy=3Q2L(oPK=cPggAfE>&9<aZ@mK^EPIK@E2bjr$%cqHZzOIY1B
z0ln88aiu>SZ{;aU<!{K^SIbjF-PsNi8fq;KoGSduU+!G~Mtqx7_dp>2_Eo{>jCubE
zAGBG$(1N|_Ca&Sy><@sC;Svv2!X$?Qj@GZGjZTqxtnKBsv6u^;Dz)cI6Q6eMed=Cx
zXMxXq)%#j#2nYVFlVrBzW=fWsvlMUw@V#aP`NS#s%A(B{V{ucK-}%)GVGZIfF~&j&
zai3^uSzK<?VD>;YOoBqx#%JZ(;BnbR)I8R@-M~ZCQW6{9KkjA|Q+B5bLDFR+2J7E3
zgWWr%*0aqQ=v+ipK19wY0Z7IcWExKW<cm7-g6=cb8xv7q-G-lhQ~HpI)}_maOu!y%
z5pZI-m#9l~uOO_xl?-uBu0&<Y!_E_&QJ93Pc5n`Jyg70AVmuV{U${tps>$8?`(TuF
zZE7?XymoPgsyK=;?>B8lpe1p$->jGUae(>GRipWPu^a{a()S;8FL$H6IV;5u+5d-A
z?E=&RpZdc<Hp!ldw{YESuCqOJaOz`!kJ&>s6rGIWE?a+6Y->}TmakGScO92WjL(6_
z7sCS)umnM*qmWN7t}I&{xQ87tkVS9^_h6&{2-$HxY(4mXWPmLRGFAJG%L@_iJr<r4
zcg^*`7V6v~2s>v>(Pq|?-~j>V>>e4Gi=oOZ-VJ6Eaq@j)3_Q2k&xHh&F!WlXjQXWF
z7Zj&w%lxoKqn7J0s1Bq)rn@ov5w8NLoT?MUw>PBkcuOwN>8ITeQL-B!&eI1*ABSWH
zK3nI}D_`m;%=(VFYN%vJz^{f##tVuFp2<r+Gn+oPaAX=vX$_&OA9$@bQepVFl`6rP
zZtRZ^Oa2O=SyqxpMDPRHww5!YLB(C9?ZCw>SRl0U669@uFCNX<*#@k6;^)O<_9|w`
z2|>y0wS0=dyxLN31Wv9A3uhHLN759n(7jI_<pS%By8@z6-v2L(uyr0iUXaXL>CS#a
ze3puf!h2<OLMVc+wS7a$oXFjAfzqDA0*ECj?D)AwBv>hm--3<B3;~@^P>Srh3&{ok
zli{n0<h{7LpzG?tGNVpC)iSK8Dsk6}{KwkG+VAZ$$*zKIN+1W>>okM!F=sKy3qG+U
z*G{Z_;;2GBgG?~|`B}PsCXL!AwQ>3AFC*m!UQ77($kJxmxS4cs$=k<P#N)k$8>ioZ
z9um6vahOS(=^{sNrLVSDTV(_8tSC_C0i$bDW;&q_FTJexIdWr(AuI8>u_(lHYErWp
zk|ZSlbLBR&o~IwlRKe>ToTHLth$nnDv3*UlCyr8K9tojPvwqHDT}pqras=M@72+f_
zR#0mTU>leRA0_}cP-pJ4wXCnBH|JCr7&V-)26ed}_yW=kudkziHK7gkwD-mMcWe6R
zjOPm{XEVaVE#JC>7nMVFJOs2IgfRS;r7C@2J;}b$1WK)33-gX^ts5u&L8?AwpL{W)
z?kd&6ma&iiPnE53Xd0VYT{V&*ic!=8DZ&3k{gj>(P18gni$8xxt0F5-#&%1nL7Nua
z-2O7|=fgvD`QHsl+_G9$KomvzL@v*Rx(2D+hXD+nG_7C($yTQ_#V!~REm@p6le`a_
z|Ge*WiM*BHXq3_y3knF_RV)pgQuUTI#fUFu_7QTz54}>u|2|46^-9Hs1}TlR?Dht<
zV=PwaS!QqRI<3Y4=<NE=_xqjzgyc%B6a0`D^&yvBtIFF8j=fx=)3x-*XXiqI*Rkz*
z`Av$RTV>cwhFhs*3}?-^9gBPvTL6H)UgcrV>Zm(`-9`tV!OQd^QuG;yeU3cWI0=PF
zHxS+mYV_6s)w>yA1v1=P1wVaa8lub)!S3>vrjwr^ybYVpU%)Zf9XF>u?8<GvcIGMj
zKQsN9q}}lD$e9*nF9lY_hraNwP$)TJN5;rSiKA)lyb;8ze5W2*s^@l(r4zp0t~CSs
z7^LaLgUSEv--Hd;3r6riC)N^9*>V)!!jx5pic(!lIeIXO;T+Ayhvy`S?xo7-X230%
z%XB8rW@{^OIh<;cQTlW<Egr9K4Jh}~li6*pK{ANVjDD@HP3JqMt9|vv=q*2|E-t{P
zvyvX6TA^@a_3@FnAGg8Rsz6;3rAEd>3~juohV11esi!49DK_jWQvkxQI=D5g`yVnb
zxg}PMqo%k8Q{QDOAf^Y`v&9G}ugL!l*Db5K6dwDB_z*Hp438fB2N0JBE^lY7?&m<*
zShFQfMw%dW7J-y_*~chzZ5kK@Nn0ibxh68Z-LIJ7{t$D^JO{kFu-3mUD71hgckA}a
z>yk6Yn9H0Bb`7}NVG|GZPS-9z2Ler{hvz$!O9Es(E|>b6O?ZP#{Vc-zlgw3b<)hzU
zcg?sXdOjJ9pb(>G_xq~$^sJVAKrs==@Ea<ut($nsbI{3haEfEmSb=I1HLOq8YZRP#
ztbQjkA7D6pUx=q;^-eY=h>}ZMxB`x(aXZnc08XLL1-6cIz;_ZpkxF-P3ai3BcGLke
z61}*ZFJU?AxU~(10k;37%o;;#jbAv?9e$k5K96cO>38z22ozC?>rO6!fD$lRLvACa
zybyq0#|tm_3vtLxK;z!JRR7P4R*@uNCp7^((TEU{2|xFlw!Baob(BAy)`y`YfrutF
z*%4`zRE+cL`eGy}DY~Z~j1yK|BJotkA|P@m7c_;u&NovUB$Es@dC;us=Y5RS0NSl(
zN^hAfT{yl{85^*DMx}Q>m92_<FEj(}EJrWe6vYebDmWVpza0~54!IrZQT+)JP@Qjz
zCjXt1f3N-L8ubCX1yvzl_L}`>z+RR-_z01wXJAj$T`bHfiHQu1Cgu~#J?~}gQ%s{I
zD`^{}q9M(n;?uS%T*mdvna$1KwlS#_2zb{=ZI624^7wp4-No5N1rAZTqEW*or$I>B
z%${&nPNKcqP`628&u+Ff(A+)<9Cq^qU#<CpOi&cNPiVYU0(%xN-OE2R=Opwk6`*gm
z5IcoHT1;mNH%ClD*d<VBw8F}3k78NC{=-Gd)zGMG>Ia*6xLb``nreKE#Jz{GJ%P5%
zJ2v@q*sBd>Xni2nhD@^sc?POBz}MJ#LF^x{tyA8>vJ@-|B`uh1)Oq}(IY-FhgPhRq
z7}`6xa@I?G(wux28Uo(IGfLOWx=Ktg>&3Zg1=h0qEIOBi(*G0Nw>(pCSn9M{-(a`j
z&cu^w+p$Or#t;XUnc^Pk9bWQqUC=4v4t(wtgrP%Oip^aFwiTr_EzGw~fQm8ymQ(Sw
z(m07+1Q*bAf)yhRbarpYc51LUrj#JCyyu^`1x8Po&Ri5U6NjT~Y2DSY+E}9*><191
z=T8f}!7O#*NmNlPM`y_8Uz#bMKOG;hxGqP33bd?_I1}mtmJ1m@?A2QewhA?OIgC{Z
z`qO7FGv>IKVAC`VLz#mJ3O}bVFJSYx-*&)nIMGC8J1|!k4QT(WTEZk>YX;&}oD^~m
z_jJ9dD);jlpXb@#gn|4c#}{+qWzQ%VM`YCXU>WTQCC|Bn*Mje@UNd1RXud85&e(D&
zJ6Yo~$9+x)ZRQbGgOyQN1{q+J-LG=97PYDA=-st!IjL<>=D2R{;y~FJFkAw~>>R`b
z%fM&kiaHXb@kMKF*5bDdavWG9vu}aO0Bgj$H`=3SnDsbc2$bMMdQ<TT<ZE3HonQ$~
zK?_IFgkdB4;U04QOqF4Z+8;x+qB@M1<H3|yfnGk2pX{y--Jn{e<>qH`5)h$9dfkSf
zRW3*0x0H#aKhht0b|ODU5G(6ou5KO2??@hbn#~)GjdfiEA7EYHFn4BO##~jYTfJIG
z6hqm7h!SW6c8Q`w+TQ2Wh!Dn1r6IR5NL4X*RYjc>s2hmBI}IEa48%V81fMtB@r7eh
z12^9t<p$TjsZLMOXjR90IOu|LZWk-k#xuB>D$|2%h7GvJxfmY5NC2>;iuVL~Cca^|
zB!`?RQUJhd`h~#Z^*_#W&4iA%a-SV0y#EFR9y1&Zk5!%8!GZA;iy_EHnRq?u!R7gk
znV3&;Mn7s#BBa8%N32H2o-g@T`b<gE%D`i|se{0BGv!;YanJa-7nV{NGv8#MJ>c@r
zZ`LvzAAt{yCoD*UUM(!`UbY3l`7P0bhD<lzWIdALIZH;(sF3mvYgGz$axby?b!=oX
z5;un=A*Dx#`nFqJ+L%%_i_2O_p~^nKB@J(+l91FFz?*LnWBj}00%+fZLv%Sq&t-h$
zQsqotvk&0m%h~_k?*_O()zrTz&0LQqzuwBK1pA)qDr7lkVaBwZXZFZd2u_y6+@mW2
zGH3=NPg#7Uxc`i&2?pmaN+V*onyEONMz5Jbl|j?d0E;o)50=QGCUT98La@_n6q<gV
zmyE;Tu0}Q>RrAU(|G)nQoC5z(|M*tXqebo+OU+4Q?_XfdeQ7R9&JQ)ow9zzYE@2{%
zk05;RFIE^hn)B%InO07iNsYYiyQ>cPZ0fIJI?Q3gux0kqTi2y95!*U1yK;t?d67bf
z8M2S*#IMlcc78H5a7bO>)N#)Jg2d;`@-lmRf`m->19v(<$MZ6qQS;n3pZCx5-_$hb
zTSh(&wxO%fkZF9}ZIdzPpvwn-sb6Z^R`X>o{X!5Z;(DtA^LrLGL~#u(S?56C`T>5-
zgxmLDbXz#b9M&94f`RfoE109Y&w3I3=Rup$p|#JZxRC-|7qc-pQZD3E6FQ{KtxCsh
z-w)n=?*q14wzq-mtp-P=`;#xJ(;nX4s#B;&(zkKE3P;R>9%&l83)9#!6VL*<TQpjN
zOU0{Xp-2npo<+b;aXI2Q4k}aB4>>v0>Y?tStXD}6F}BP+Uom(Ns`rU==M50&wMAiy
zj3bPoY|gFaaA@XS&8V8o%Nyw&S$~PaHIa&?WFo_f@OMjyVTZY#VVidMq{3hkyWCc;
z#A@>&9)92=6Sti-;+|<6qrPfDxg$x?|0!n9wsK!aB{KXTr5~hsJ}_dSn!3XRfT*5q
zW-$0cn11Q$_0!P|%U?RG>DK^(`z9eM<rv3bP(A&uJ_E5do_aU8Ip6d^rh+Kf2eja$
z^=u>GhjAVFn{8)oJkGj2@H)l&mJ^iEd>KZ%lxYeLfNUp8f3XiqC{-Hi@hN6%ll$(Q
z*zrSvvgE(}=rI`<5QbSW)^3OC??O{*Rem*Hxvsx0di&2lK_WOErgv%mYLQrae|AIW
zD6GGpRU9%O72cY_-k<K&vO|1$qZRi`$2q+N$5j&TVeK<*6EB+zSIK`~<3@N4*IKig
zwG*KveA&+!?)Hk~tuBv(Ndb7V&oBs4y-ob57M|q<OU*|-%Gy>GNuRO{1bW~cPpYs8
z)8)x7FDTmqrI@cH>MfNy_57;&<d^fO){SK)IQ<!8i|^S<9_G`n2p+iz&#}A$?>8{A
zd;-<+Fx>&xa8G5dFCpAyQOZW{%0G-^VoE)+@*^vEK-`cD#n7Jvc`M5$)nnkbvW`Bp
z_W}3rpBh9k&yLKv(5KN)zvhWMFzdxeLoW1}zEU@3@DJe9-}L9oE~1hC8DJ?~*fa;l
zyO#`IYJmQuo`zt;q_@?c>tGi-BaJ7P@y`Ff!(jLCC`82*eayF>bA@68m!|<UR)3ui
z&^H!&g2S@tPCyKrzrK9U*T2^h0@e+<9<{$W77jfd3~?hi1%iNeja)=5dros9T_||F
z<eBP1i|lqY-GQ#ygeO0;)Ud&Ly`slhu_HFi6c}}k-El+V@M*2#l$_fqHBNLUEWXSU
zZ2qOTvbfDK(hs8S+#;J|%V0d4qtYj5rtqkn_|j2>$oXZHU4gs6K9YQg8fv1ff%7{v
zh`A=11?bW5=}<>Sx1>aLd>W~l4zDi!D2+74xrQ6^mq((#{`_ke$I@)`UCi#&y)`19
z4hW04tn$aEI(nL@BAHPVUpo?Wnj0jjgj8yVvM=1{rGtbvkK~hVX<7Q8xew!og-k_k
zM;GkKET)Q#N7CFlHEr&FMM$&&*lVxN5MFD;IcHS53y)E(iLI<7?;bReoDGa^IjksC
zuIjl9g3HJO!b$j>VPJ59uegPs3w;evn90|w=-L3WVvm^WVG&4#!Q}f3BqBhF<p2v?
zuvyPIWbJ{m7|7@sP=0$SiP|IhV66>*Va4)T{n24F3LmL|;%I{~Do!2{$Dm_~*jUcn
zrO*`UEpgLsTN&Y*iJ{Y+#JZybRMKkVR6Ye3es8Hf+5>F{d=W{W<2?+-+nG($9ADBP
zJfiu>KlvL6NEg;Zr$NFOAt?eua=UPOwkN?y!I2lmJgEEik54}GrEZ{(wl(-*xV8_=
z*Es>M{ho2_O(G_lOKitGjv&5Dzmppzct6Q4mYz85H)+EfdyY|Yk^_^-KT{a31F<y1
zQO}I1uGkaILI)9UA<+Nz7Y;#kXR2#y9~F6F`LTX5@NL;OwOc)FY34c^C-|56oS5sb
za)z-ManZ8$cTyl;%UzPC!mguFc=iPovjBvwk~t)U8nMjNTc!#}k<-T$fGr?E*Ee!#
zPB@~Is<iWt2VAh-tf;1Wq|mC<YMh7Bh4sT(=vZGp)!VRMF*d@~&#aK-)?DjUE+H$B
zZQgV6&Uko_Wv&A*v;H-lZXo{(I5w4~%c#F<buL1NTMV&UaVivGPJ?KeZDBxQet3UD
zz3Ic+J{0405YM<9g?Kb&EO4pXCxHN|TE#phZofN5RDI`ovffk}k19p;?h8LQ?TF(3
zIoMcq-*U<8kYgJUZl3an>KKaywP+GOcwo4x>-|LcTPE=L_WrEy5x3*7s*gYI^}hXy
zadxNPGX^h1a*WZVA2%o2Tx<7WKkcH0J<Er2MKBuG&vVeJfw9!`dP?#_0qa(8-_gCP
z$?)d%7!$r~6{q;>8`hzTh0sp7WL8bDv2HEuYg+k<`At0%8?Ht3iV*-(LPY(HxfFod
zJ5(I#`B=JjcCfN1%2>Q<`7V_(&3Pa_p<OtbwCbi=bmb9i=Tw(b8U_*Y37#^9c@;s>
zQ?Hhm0SeMKtQ$wn=D^uB>cPepFov=-f=1r-0u9PZ1U5Dmb5j;N)`#eJ*>m1VJ`j~(
z2YJR2^_T1FeL&sAfc1jMjYVDLb+Ho$v+#SD=%~Bqnr28jlk$K86tZX^@#!4jcd#Ry
zSiVMo_L6a*5a%yT(B4n;D~V<VBj!JJ5#EH^6GV7|Ny2cD*6Hw34Q1-dE?=-tXZH`D
z8^yzQf0jlshyv@J(d5ClRqjLnvp9*exhK=f2eLp+lX7O<9~g%sc)Hl$A&!%-VFR7|
zW2`F1V{!~7I~6be$Msv*@ge$rhF02wtW3f~PPHn_2^*Bg+I_DZqjKdJr7>>-56q@c
z2Nyr~mJhiH@*2&==u7iRuo4Iul2ZUHUHHW0e0%qxFl^MSn^d~>L9munQiW4W(D}Pr
zY$*0vjFTvw7VAX9G75yWtR9q=q`XfxRK9nqiypMEh&DV}ndQTQWWXY46?V;(Uir^8
zBjZRBBHZ2`+LL!aZy?3QdK8I##alE1@xkk_oV$ZMW4t)R(QGkYc3K}5uYGA2qNGIy
ztqY^@2(w1cQPLyyKF*4d)>dtJh_(<%aM`AXsQf}7brINctO716ut%dse28Gt^NI42
z*yl9g6P9xkG&;A3HGkqyj3T3FBUr8qF!CAMF8@*vs;|5|;6U1${%yrA=Ry5jiCVA~
z)QXijJ-wJ$J}g>e2peen!`tzoU^J@0Iia;wlK<+40nK~oN&3VK=f8vNO)Q%#PxFw9
z+zVG8?Vf>3goa||Qbl>JgYn=R_kiD)z!0!x7H4AYZrqaa?9g7VZqF#9GfCa?^j4A7
zRTR&W=(gZ`^7D$+Z|X*4@NYlED-`0NTHZYo_{xiu6W&L(RkBNb$jtudK}*q5rgp!F
z+&qi1yvu(r3S>>?4!Z9&-O1SWN<yVgr;oPq9#ZE!98)_dJ;wTUoFnN<ipX`DcJeLU
zimi@Mm|DC%<0XLhl(2RT0(22b%N_Z_yl<DzpVza@jqT?>RSzeR&FSp@FzX_SlP8hx
zDYb-a&hbr}-BKZ=q`?b7d_h@Y(ETOYdQIXlQXg<ayUJBWKT(H$PzC_e<9xKML3A(-
zVl6aUu0+m$Ez&8eGkb5+)-f@EH$}F4J?5@8N$xLt`^}%MMM+^|x-zQ>pD3xMm0jL(
z(QMaOI5bul=tZZ2X8g%&(n))B{Bxde&I>ej=nKuky%O57&Ei0!SF#7&H9V@RAp*=5
zwg8V>pu=Yi@0m(2OS!&PW^^Fky~ihOet;JU`I(VS8r$YOU>mecW?FZ7WuCiJnR@k$
z7;)4C{7pWx9;+QRRI+ggb~RT5hLdp-$>U=#s;DQ&XPoZy{^Kx(`#mp9<n?(=`VUv~
z3Asm<4U=CQ(3Z<LV8F$mX=mp%1YzuUm?;NvO#U_FL^AMg4&|yLzL!+C$RZw)OpnpA
zISDj-_+r4Yf&{%}4QPO-NO-i>Wbt@{PtZUoG<PDTDPIQ3x%^D-iaOTI8AR^^Kh-Gh
z0ku=KO_6Li2rT5sX}IIfMSl5JqJbao#~RV;wx%zJ13*PPG9ySp%HDfdpDu`i$%vtv
zPPw2^m)DBeMz?=8xitE6<3^>;o+lmas|^Le)uhr=4Ovk_ln$SRe@+=Okn#-#tUbK6
zN@<Wv@phIR;9m~C=r^>m%LydhaHJx}=60;H@o}*OBuHEppKB^xU&v*wnKCAW_tgs>
zB0fKFXpx4XOtov!og1%Rc|@=Rzh0sqFH;pxt$@;GUPNF_|5QrUU-te(P{wKGiB`f?
zzWd!ks;OiJdzI>;UqPa5Bq2K%$60VdVCP4654_FhEn6X30-`j*|JdkIrSn~YQv#R#
zSAkstH9y{~F(uKNkD2c1{5(A-s(H3R&m@&I=1LxN-u03nIvTV+MI#b9&qy=Qeq8e9
z-iA4v7oU8p0BJGzfbA}e(c%!4r1!tYY720i=l?XA&R5TmuYwS<ims6iLz_DyDl@lE
zNRhjs@!zV%4awyvcs#JPjX}@|pXp_K@75Dz-F8g9Q?38@>E$5<kDCE$d&Jbba9z^y
zzx|Z#JgF$#hOr9Ul!uWRNB;<1l#;A%<8z^oHyM46Fomd>!w=6CJ>dJyS6aIm<v2F8
z1#X4E?KvZ!WRWOy`M85+p6NiyPaG~qG5z^DKMf^8Yr~kgh(!k!9cqR~WUW8yTFW5N
zkre^e!rRPV1rp!gV4$;}$$_sK<Luj?y^mF^urrca=59mGoX&eb-(ZtF`k6AT!}tH=
zh^3duGHJUcd?l^QRD=JA!CSF6X2#X~9$$OyYg=ZR5Hz?^9wv8yPtO{)QH$_l<kp=w
zFUHt4Pn{y0|FUhMZ1>QToWQPSqqS>J`KYmY;8PdAJI{csTmz7b?JDV-=sBF{MW?%7
z)=Zafqz|__pj`i3B@;Ij^|WD-EW?>@!dS?CA)t1$49#Ts$HjQ)9xith>?cm3w)4!0
z3yh3;rZ8-Mw-@^gEC|$lmq^-Gw7!^ebHRHgJE{SzdkPmE{Iu|^D9tHRf3q_c&y2&#
zyU@7aUQWt|CI=XN4^N2dpb@ngrNpARTS0L-6w5p@y~mF~B!T4yrFB3091o{j|5`L%
z>=IqTTz}*yx)S*ht2i#^GnsFxYQ(D7pRPe87}<wLv(Kqc!k_(tXJ&c7S0zYQavC;l
z3$)k|;R`kX&+e$8hus-i5_bevi({pRtd|_?(L^=wh^L;x_cK*Bx?$AN#MWcNzlpo2
zRn%R0X95f%g}BP~Am}sRNhWc&7=htF!a8VHk1BB9_n8QEr*VFN6V`zn`(L5G5KMLL
zL~Zi>*a)f*!rj`^y4OcfHoEf>J@B1T=vNgqg4`HpZl{%mHFt=Xbkd(lq46=y6{RRh
za?Sq+gs?g0rwq{x2*p0JLP7*ZwR&>K6(2QkkM9++HcsrLJ8=8DMmA$>gH+{J)vee^
zoYG&6I3yFX51MGQF+ppV*gOTCJUNTKz)=yE%K?6+*nHw~R+dS70>38VQ^@Q)T>mhw
zFFA5GuC7)Ug?M^at7FNHZR`<G*C{ZKh3@#Gct?G=zun9~bWoC?69%AM<LFO_i$}0d
z!A@`DQ(dk*Ze7<I_J=p7c(&>r9c{k!Gh9-Oj83a8W!$3sr^{w;>9!=~4wP+XorhcH
zB5Bb5>gXinZt7FAAY`=v?BJr)_cw#5Z>U@xDi>~nW&*endBo8$kuoA3`$Mbw%W<QW
z<}#)8UdpVhInmznN@xHkA5_L3(8Rc(GG(V$D2WZMyHN>(9#Dx>IC~UsIaRZz)}L~<
zu(hs^$H8d%qIsa(pq>y9r8QY3={*ro4>=DVXLCuhAk2ye+b>ySz+i$jA*b8AjwO)K
zb|+@X)V;vmnZuQRCsJ_~k<`*O4-^HOjck|F1co>a&-)ha@d+-v^EU(J_a@v<MQJ*;
zib4O+J@WRH5}H19O3>21&_BHltauNv7q)1+Jk6mkQWi{!G$GzMKkg@$`tq=F=uLx2
zn<7n%wJl?Ms2`-RKz4>)HlHwz?M~Puoxd9TAgxZW_hL`BW0<=0tSMvEhM7F8)#El3
zgT&}o7kH{CiN?qlR5xuLb2d<Um2wjqzxv?nk8Oe@79ank1#Jg5XL$g|9z3+Yr-Z{3
zLO3tP)aa*@gIbYylh*F&w~*^pRmZ*-loA0Gi;+GXe2W(2<xnnpvM(QVvA*KERzqN-
z)PnmN%*1xS*eTMCM-?v+gpY*dQWwY~fpCZQQi})<7dV-pu7+mA_<TQ~t$225na~Vg
z3cIcX4)T-W#d+=YUYlh~RQFdSLT2=Is#q<Soxy3jpi=>gN4Zo{*$La|&|t(}&G6z+
zW;UN;*}oFz3UU5li;#VXS;%GJJ3u#SVCpo0yZ;bj8o2W3@B(FVR}zq4$ZVa;73m$>
z_!1l@o$Z-Gin?3m01u~g1wyb`-Z_4!1!{8bX5!+{C>fA#Qy#qb=sQBW(mWB}3Cm02
z`~2a3vrIgj=VyR8^xZtbEB&2IFdYM;dyYlDfuJ_J!{Xy?7FQSi7S-PB+UB3MyI<=J
zdqFnkA$$hk@l*mFcS_96bgM0$y`6&it$KDIw-@Bev1F#AP!qk?;4uED$aRX!^mmwY
zY`IGVC&}QwCX-`Syf1f5!Y|qntQru?jq-dufxt#a4GjjG04Q!%k0!mg)X^kyxInbx
zOBgt{CR4(fs@X-aAfa_^czYN5PclH#a`7OAPhbK2$;{@I=BgwQx>=wXMp{~qepfDF
z5N8)P*evc&7W&%JT7fx#AuM;lHlp6X9OH|2{G^YrfT_#{j@2EL=NAmxhiee`@wjBA
zk|BuLS2r>rp<Y9=ORL16xSuoHNsu&8@2;{if%YX5x|x@bbn#p*b+%c`_uPqg4A?iK
zU{gph+wFh%z{<$8N;%6zOu3JYt4~-C-nm6xG|7?ZoCaQmzZ9O8WXq)xAdQ7dX=X>s
zHJ8m&dXA6Pi5`lh=*jtj584Zb-99?s9bQ)$t(+?`Ikq1wL5&~~Tbl%-U<A|e)!S<j
zHE7!a^Am3>x;v&NU@I|wK(<n5u9?D}+%ou-apZ+7b(yp~^cQdR;MkzS97)Rs8N)GP
z@|es}PU!TvOGeO%bj6|Sx+_7;=vOs~KAJ%{gcgE`@2q8x+y5GvNJjQuU^uH-jL=ze
zyt|ylj~bdXv&*?3km!*P2lk9{VUl|xOPAeP0M(2-*G)AM>E5D&#>j3;;b^<~CJj#|
zcKtb$Zb>HzIFNc|@^kbrk}=JDC)33HYRy-ieZ=k-PGNbp%0H4%u&7p!^}fKq!ytxw
zbkU=Pi+v5=<zJ<(VDccCAi6#$sws;*^uRd>&TN-1&i9}MSraW?=M?_-_#gstD@#WF
zyBLrng(NLMP?w0W!2r>VmeR$k89FV4y~-DPGgS>cBf+`07-d?WW9Z=5@<Yv8k9CZ+
zGn;FAm#j~ZE3a2Vu^EnMVeAzsHGO^Na^PhC2y2HCtA#9tfTi{^<@ht*&O9rg&11|`
zLe21aPlu_~RL%G8a;Eat-?G`I6<@v4nI%q3Q|su$D_8>Ka9r7Q)*Qewv}IY9xs^MA
zf#V?DsAw$XV+SSD@FsXnXi$iA7R7H~Ms$h2#K!ozM10{L^7LfEXVefU(bH7nI;3)r
zV<%lX`5=+*^z<e6#aTbVVcqHca{e{SsvvwVK%)Iao!~{9Gk{fO)IV#->&U@5W)74A
z?0)-G#Ke*@uAp3dqig9LhI~*IP@(pnx_$wMB80|YiK0uvP#mxkT&EHw?r>Cx+o)LU
zJ|yV|+@?m_pm2XPaLB7*l&y@2%HDrWbH)BL{FBsJo|umqSSlV@r^US5Xe@y|*|OL$
zwh3U)<hKXlhr=O6?C<eZ<&2Yd016}n)sDI+oiM3E7c6T~HTYNycl2;+QAu9PB-+dD
zy*T$ks7_eH>p<Iwo~9_{S>a6)>Nw_40q8}ju&~V*RwPQdIx49v{M|i_2O!h90#dS#
zf<Urdr3NKg#}?yVqJB4hi!8X{9R{8ZEe3iUAb(3pU{MaNZ5p-Qq$!HI160bH!Vr};
z=O@*0%&rH6g;O@QpH&(&%-8=ABx$_YGT^bg#H#70)uEpZJU>-$#Sd!(4Lh@cA47Dm
z$Btcjpxn(0ae<r31p9%=azl&RBhp!FQh76>Yi&a&p@WJ%ptqn4Y(|5!jK`BQ>Mchn
z@(oZ0i>O%GPMw~5eH`(V!Wa?bxIj6ZlF!I*={y|xY{PW?ALVhaY5ljv&rj)zU4aGR
zFsl{BP3XK4$W4Xt(tJ|NH4bisOCpC!sMa%ha#A`JvJC8+8A~1aq!|Vd^#8`mH4*aK
zt2XXvF#J|^UZ2>NOg_Z7VYWN;oN=`o8&Q4<HHx1lZSL$>F;ZbsWhp44n&7^J+hu$+
z6I|Pxs%e@fHCiQM5eiFgMK_W~3bNYevT@R-H4`b~3bwt)WG5G4Ya@p7?N673ZqH7x
z+fxIEb5q`!dV@GV05)ZqY897mrvY(aI`Kp(Tc@7st<$&<Jh9hR$)k5y@3U@>7m%R{
zXyP{oUS<EVf8Y_bh$O4xHM95>j(Y4xM>E)<2vM9DUDwWL$}I}Rp}IV?6D_oBUnSs(
z%6|VO<(?=h_Ov5}^B3?le34uoBr}Cji4i5d1Tq>7^hbzF|G!82RT%t1w0dE%)AW@_
zRR1f}NOQJb6=j^J_dUJpryV2677RJKx&y&|{p6qk88qK(9F{1PeXw2*#%Os{mCfz)
zPJ=NKb(jUxaH=UlT$%p$wX(;)CHT$KaB(9xgX@Do{_=;ix0C~w?x4cuUQ+zgVU-^Q
z$#?h&q52gd|AYllnI{P62#_j9IN<71m%2E+(63JsY27Ag8;4c1NfvXu3vwiJ0LO32
z0<09+)|Ph{wtPK0E<f)m`WeHDF2MMwFWke0=T=t^C1vsinsuBzrJTB?LxIbe2)jQ6
z0Qf#pJoTnBcpmGc+`=_>A`U-dDBsE}rH9s6Y);8)DX(*VXCtcv<d|-58p6K7*=_Qp
zdS<>pw0=T|*{L4P6SXeR<01L70|QQ>T6aWNupZaM{S~~Ny6uiHq~fyFIhIk-OIzik
zQLb=ePvP95fS<|PBWk{|tujpk8xciaR-{_U{7GF+5E7b^H9u1CV*5sglJ9&2bBPt?
zxa|#UcBJ``DIn5@qaeUB=#lgfeTDa3&u<Q-F-q8SN8dv3{Z@7|*0|47X;R2sY9}gO
zWwqZY7p1ACq47M7=$yY4DIQGi)jy{)ck4_rti&j57;+7S5hpD2?;b$W%*1PGz7uHh
zXG5crx`K~sa%G;UzzJT9@m#jTMFxk;A@tX+#-4Y(J0~W9EipCY0Q(EXAPi(bQsOTY
zbjKlxV>81IFjG4!uM})PUPP-*<ViY9l_6)hNf*}ieu49gUxoycs5ThK6>qB=WmeM)
zLCx#nV?m567_?3kc54-1xNzOWahoHlsHtLuBpSrs&El*(Q8o<>ygrz*Z|`BjIqE?G
zCdN#Gn{o~We$nNOiy{?Q_bil*W&f{FLrDO!Iq{^CsxF&S%zV&TtUk>;Hf$MJKqh@J
zPgRWs)ql-Lxn?S?n}vyV$d=o+vDOjDBf6<(A`L}d*(_}Zi7M@|bKE!YOEQ{L0hB{i
zAF^6M;KFl`DlqW#tsFQ$R<YlKIhY!R-M+i*jB=>QoYGGnYN`=>&ZV+{J#;>DTvzib
z7=`bK`@=+SW=q+qS^96Uje%9?Dxk>!#p@_RpG#I?Fbh$#LJ!vT?sD;CR5f+@*}UMG
z2L*3t6?j05eevMJ*uu(QW=jt7rrPIIC-gy(2R)W!f!BAf)P2j)ljM6FNulZXqa$Nf
z^ngROOLKIQf~I!AvY-rD&6r~@SZAc>l=QU)iSIyClOC|ZBJ$`=wn&LsJWi8b7Qs0Q
zGkH+8^k-PTUGgt`!^CE6bCfHoLVuv7OG322P|==}IMH1T9NcBSiea<j@7mHL&t;uX
zPFxpW!Ey(8;i*<R>21sx%_(G`nIh$WS)Opw%TT4)b9~0tX504l=Ty1excXs!EBa=y
zC1`N3`cQaIkY0KLU^oI~twH7EZTtHd*Am%L*K6d`r6;bzCxl15W}bTuXSLT&5NN8e
z_4PH$QRgL}D^Isw5kX!vPa=fNdaAW&sw_mq-%g>u65J~xxi_B>KDsl+1aBd%KvPeO
zTI=do$^U@kK)kumZLt+&J{nzq@3jY8+h1Y_2p?(l1x;S!;Zf$w(iuh|ga<zhPnRLc
zn9j{eI7wfXb=~X}zQwM+^fWunff8A-0C~Xk;S<9La0n;i{;9TF87UoFx2qD)b-2~F
zRHK((2nQs{#B1^^DdX235eOgvNZK`r8QW;S`n4|?X{VP=IM$}?P+)p6EvWtXE;D5|
zq0lI><<MVeafZ=rE}LG|g7pGj2<3IrvyDAY(G|5tJXnVy<{%mXDx<^2>{qGd%@jmu
zLNjZer1hxdT23jH*dX%7jpOiSkTB3a;M!uJg_$sB!(&ra5AiWkpp+CBWc}|B6=->5
zJWRPA5o+ZjS1{02j|Q0$^EHvyiIeUFBBO7esgl43f`b}UQ1D5mHD2!V$MCSZ9J=kx
zkP3fcU?2^mazUxp&F8+`-^s=iMP^@{!HTtN5}~z{KzKd-QV4Btid=zZSF{M{|5bbO
znx#)KKj4fmytr+>H{BS7{o=aMMB^2^C^YI-jqgfnX#}Ar7yJ+w6DJ=)UimbmMCjBG
zp8h=?Nt*%kpXaYf`dqw9@;@;SZvZf0+K$F!`o%*5?yz^0erp;l+ng4X&SBfc2?$wm
zB%^A8w9NE@8PonT(H2NqhOtQVBd)atsIsrrVSOza?J~CL?BQ9!c+7=Fg=KK{>PwQ>
z?axrW^(qhWe3XcW1#WIvc+Ri|StMr!I!5@M=l3{}Lrk_GM{k@W+Fly395TH0OePpQ
z2XZx|c4~Qdhqsmc9?9aX+jek05~SJCf@&X_5W(5m5VY_G*bEOUq9re35+>Qrqr-iH
zkIzVfRlR;TiNl|SFQCC#@5A(`GZ0HctkUvB_0=A;a4*6RTxU0e!O17{lBtPhDr$63
z9GA7q_k8Z19!T%R15F7K&|B-$6KeKsHAg@X>@s}zk_K_WrQ1{_)D=iqzAeeIvb;07
z+~exuv!qZ{m&1mb5_l!bmo18`XzmJrjsxX0QB)}eoj{7j*<oA}WKSljf6~neb}M-K
z*?Uf|p*|dyfYrzq&oVY4Cv|)s_$4Hr7<5(Kc86Jh&m0d^wfC!jsG@Ht0dyd{o3e2n
zXhy?R8uEYe^o}rSD0X*;|H*lDD}o}YQTF8(tj}}i5sYTfw76<1zf(&o<BP<l113?r
zgJV7xX1p?=LRSBK-J2T*5kav+*>oq(uc<OnMEi)!yI>jJo8xYnztLhy3pv1^{#b7H
zM<1s!9hbW6i_ChjIRtY@>O~j*Wq%P{i?zu`J??r%*8XQcO6pIjsor>$;qXd!>agw>
zWycPb$5sB^Y!@N_Ib<)M(tXl(pLkH;tFKJ+b71}sQO1Pt2Iw94mwouwR*z;9trZQ!
zulH)No3Am6O}An1^rv+S>9CIIEpb@srRYTQFs9?LIh04ClZ=Qf!iA#MHx`r#cFy;C
z@Oemqs{gCCW<J|c9^~Nsy68)<BLq#TJU-2*#4Sgut6xTiJLEOGW7h3J$BdAX+(|wE
zIsq`~tb}TbgRC^fJV6#r+ITpfEWy%Gz|oUp{IOAHzh8yERHPU8k|<pvwkd5Oj=JNJ
z75qjWWz+XWEZew6Ym{NKxIlH5sdYF=G2d=MYh}qOVSl+yd_Zf;*-Uc!xJp*}fb|$S
zGO@h>{IW65v-I2Rq<3qiJb!{~RJyZ#sl?kZ`iH*8N76edLGRdG%!GU_D=kL1y)l&O
z?<<_WHrYK3P1$9SoyWg+Z9s)%;da0iQN6M~fmmvQ9m_@}qp@DQY{9v_jWtIMMwDjl
zb|?0fe@Ey7W12wjdfJ?TlUa29FW~7-{8A1R3B~5nJl>sN8d;H-+adycpuR<)xN^SK
zt|G6Zm%uW4wMq<BNzo$ck$@*554253q&A40SGtWlmB`#7_bHpQvh({(Ok`DSN{y-D
zn7d^Kn!!Nqc}?fJpxlIvRKt0MuC3>5hMugt3vEZoC0vaU7oM}Xmih@e{KaT?At_dy
z3Xe7!M;w$?r%C$4r$x7ABE)2qxW?ZKN7`UtjyX~&)*e#Hm(n8bPmr)TP4VHHA|4zM
z_6a#UNxn${mYy<=6iUDwgH01{g>mSdUENXY_SWQd*vttH5Phw+MNw_{Rj$5K=FuV8
z<hiRFL|+z!wJt8-5*7w^CrQ;|Ouy?%lG}M%68~KSzD<WIP*VeBDt%S8u<Z}OQ!pZ=
zgnenIg8iiUUMg0pJ9IHYoQK52D(I9MjEElY5wb0)xkj@hLgkdk)Lz-WGiQsbkXxD(
zYRlnANGypWsWFdBUBt7neMaa*jtIg~HYoqkX6Fy1>hZ{}13-^9m}79dBZn3Ve!Ovb
zvSf?OlaDx4B`FJU9&31DiT4N}Cw{WsX|z(#_oH@1ZJ|?5nS_%DXB>M<x~U-(UzA04
zoz^==f3&jNReN5PxDy$r{_m2dDk12uMgLD#Yk2B8mP8g_Nwu5Kz+)3}Ze4UK?-#@k
zOWI*`-%L<6S#>2MXtu^h*D7hvLabGK{d*B=!Ue)n+M(tcG-)HC5a-F?PiC*Nbzn>P
z2AC7U15IOt!|H`yPD}@+$E%`9%h#ulfT4rT#QfG{O@$Hx;iH-x!NZhgQshd+Kmt!7
zX4}tDuX{jn`450@VET_tz>UuD2X@xyrzWc=t<Dg{rvLLqL=E-y;??`xTL9Rd^YqS%
zXJ0LXk>P-stJe!_xKAi}FQ{5`PEDXC7Y}03(vdWqqY#if=>vj1-%hWDphC+chg0s-
z>JVfi>x_U&cw0>|d&-?}RgW#<w$gy#c7cbfKiQw60_9ATRgzhUL*ub)c@<-EMs)QL
zz~*{)H@F{MGwoimozNQAF3;7*Oh@+^TjJ$<`D?GVR*CMN?`4BZ=fn5B(xdZ)1UTs$
zSnHvz2lf0t@sXf?8c8W=09b<BDt1h8v@@^VXaZOALcQ8r_rWy8h2ZuQ9%j(}B^lB$
zmNb97$EhXcefo_?@^tyv>;{%NAVAJ1@RgTj>6qL{xfm@t6Wc;1eSuIGqnprDVHo@i
z;TejvRDoJT=*8k>7rOTSfp}0v6d_L?doTsFSw#{as-r^}C(W^|H&(1k0sA$+O8(jC
z<d5HHYy-&upyTVvb#UZt_T3<8hb@X?HcT=ggf)tMmoKTr6Oh>Sq<R&7B9@Q#1bHJ0
z`uO+53?sU5lr6)W&zBU|QLYp1Ok|%|afOBlJo2T?ed!+NG*0w}ay-ZW0R)T!Wz5Hw
z3qKkq)bYFS4uPn*=}wJ5%0r0A;Hvyg(hmNe8o<A&U#l{TqdZOKZ>%Dak@MARz<a8P
z#S%~^H+`vCtuS`hEuKpe@M_}kJadlsPxGrW!>&qd2#)GyhG#h(F)d37{NbbIR$}&c
zBg|k55r$k2+&)H!ZZV$8SwR$)!BPNFG`o_3>z7!zC}Yweydu##N*L6wNq})m1Akm8
ztOPXMGN}f6J_w{==UqLn{QQIs^h4AdpPj3lnuY|;PZlVeP1cndB^wp8_KeO`Fimes
zH09*7?fbNxIQ9dHElZ;JpI8;3p%(ge&IqHlygCy&TpV`jgq11!osJM7&znGpy4*1$
zu&XRVB#&z($Zgh(D?_U=mPaLhmKW>tft9-IeDg1eLN9a4uF%jEu0a{_9;~T<9r~Bj
z)yPR+P;p_qj&4P;7Cn+fC#cqT*xz(G*f5i$Qhg8ye^#pDH?Pt3tF*bW&A#kHnWcAL
z%lo+WuX>`V-D!~33N3ppnr`I#GY3>ir8L>7i`*TDc2$wwwuw_o_-NV9(q`qDGFbsk
zOMGjDro=<3od4PMe&Z$UxdZpmDJ>qTYy=pi<X!jm7rg0h;s_DQQ`*gYDXjGYGaZC2
zlk4QrbXD7ec*p-QF$+GONpV4dG^;gj7|smPl#;*41TAKkYD8w_*^TpQsn0xBQUH6M
zbSA)3o|}7oapIFiyLGjN>=Uf&&cnkXbq+Z`@)`UHxGI_2?|u=ntsW+}*AQ*`({t90
zzOIg6W+hRAJsl=rQ>)7rNOEp4bv)zy*hxk$8|g;FCs>R$=H}ud8(~ro<%CLlmN2uN
zUono$=wMe;(Gh+@8=mb$cF{B|bbe{z<>mtCDScmB1Zr_@yDq4k99MwIEpR7&&(?JL
zR4>x2f&p-dhF;7|jcOjT?Nwl79?EoQfJzt2cMbkof2MsCK!JQ;!fhDVgKyVY%P5&-
ziyDzUmA<f?#Wk1>nBm4;?MNG5Og*G&5__??%?Lk06BF*yKGcu-sHIK;*yq|5(TXLL
zJ}D&dB77c-B`49$234b=E3i4{GtCDjNL}!oa7TSBd-IMchiSS%C5GOnw6_0&!11oE
zXM`sl_ZZD;zcXCvEvD<7<?)f5?}0uSz&~+OD<{HG?gIvu%q5Ta+h0mps3_p+S_!GP
z4~)%Va%~vTlIKzP?^<XBp$y;CpiHmxeO3vDiRE)R1yO20Stk!K3rNK|2=RoHZ_jYl
z<v(TCJ4^COv;vJj1CSl0-uRuxTqxxAOwF;D4FhDGLaX>j#b_&{cFbU?=Z;aCeDBa{
zA?X-%9z4F$aPT;+m>8>OcmBN(&b!2)9Z^C(x)^dR*?9>Vq-fpET<ly~nDG$Yb7#3+
z8s2Ch!qJqmkFVGHFH4t6;`CtPpIMq?C?(8qJjLkUY>2!o3)>n9FIe35sM8~9+&i`U
z<@9iKj9=Uq%iT*tU+e6dzbo0!2o84u<@fn2l8VVGz<D2%UoDEUjlk^NmlFXLmIvE{
zmjw3b3?dAN26ZA1A_5Nl*yz29!grqp=5miJA~WMrusvy9_4Q})psX6b>?zsGJ|-w>
zjP6<6-YC=K=V-qcy2&LJHU}D3o8$>7Ss<ofi27G8u5K=?;xzTsA_f9QdiP)4W*t<^
zJR8)<&}p(-3u!c84E1E6r;xyT1tHkToM6ilV52TDpcYLN*-F37z43*6`$}mnRy)D{
zBEAPsq)-VTtY|CxtWz%LE>)yuD}-Wx{T@DOl?CtAqJ?G$zz&Z@U5>qZe5sJwQ39$D
z(ro{Ax(_d*r{dqqNxP_^cS_aIijPJ`Ad?&PV|6vog+ydPa*Miib>1}?SKHtgyVTd|
zyCMbIR^pE{Vx}+wgV+V7-54wnQaN~UDbEr6uc@~eJJ_Odh}O^8sg;(Zy|}Lx+1Y-u
z^9^J62G9`}(~lT53u;7{F^jVToqvYH27^#0@*U0VD(VFNu$K7wVD3g#kVQ}zG<{GJ
z0WdyZY1AeDCrl}EVrs1Ny9_=HcYIf47(6u$87Z%M$;0Fd(T^QV2CfzNsDSpiJiZJc
z4JWB`2Qm=jN6AH`L}Q}TjVQ~LwAo;X8G(cK2-VXeH}?e7s_sL0L!m8676>`VW=+I)
zyC`X!p<(KzbguOi_49wprL4cz*bMyL06jp$zf;wi-4FjMO!+!^-7l<2?ftQGq|t%R
zY7yWBCz)~R+)2r=b!t9(iKCOSb(axxh&DIPD@U2T?<0?n{hoCM;o0v1o(&-~T`jQ`
zh}D>ix4HGN@~{2RohHHO>W8Fo|Dmj3ARdr14|QDtB(++gJo^&<k9tcX&88uH$mUl!
zvT;V^e&wvnVUN+ItWocpN*m5f-=+H`dm(#{%xcIvSg8|?h-DXi<GI)@0Ubvv&jV=d
zg@n;Gw0w!X%5s$1-?>#vDwIZRe3?5@gZ_tqb|K3$6!1e?%v!ItuT4V6?m34}jqxVJ
z;zsCRrbDauh<r)q!0)dRZSHp>6)I2=ZD+nUkLgSYAqw#Z5ljBSa`W4a=mm%)`z(%d
zi1FuXW&`=y5!7C{75JIg+f&(vvuc#HYUSCa%Wc#b3B<<WT}3igv%DxGdgoL#uAo=H
zOr*=Gc)A#A5-;{MZcTz$mm-vxxAmDi!!w2a8df-3V9l*$Eg9CTklhLNkg+nzCRRLn
zsf%}L;Bv6&W+ajCfobDKbx!(B6Gg<;dl-~X+^B~3v5f1mn<i&mC&p2v<{~W>8I|~U
z8wF7og@~qfX)&_Va1?|171G@_|5P6dIusrB!@y61bWAL?SIWw$2FhC8l;px`PmQQ`
z0W0L+g}iuaE&c=b{o^>q%Ngj~b0O8qcWuj*wXigXM6d>3113g}D?H1ojD&MD0S)M+
zX=#$5cF^f5ce|opraIPRe?zqD)MS2bq83Iu^kXJe;(`u4{;+#V;lj+!+r0aO_C?n{
z8F@3V%b`9ylQO^!4eM=Hu5}KkPV~-H{BIjN?hlIc$d?gu$Z#LuKL*x-wss4zv)Kn(
zhl;E#YmL%<?nT-JTGv8-umP1V47EEVsNL2F?*PT#rCu;_Gp^#UqFS1RM3x}sCYz|a
zI5X;S;bsKGn8!W3OwA*{B4Ku^Zte)+BA$x*&umnB;>bjT-ySj2nw6OjxpM1h0{Klq
zhULB{r}SgJzkF=P*ml)&kFQ+Gm;TtTrO)pT+@nG%ZSY;>v3HMNr?8H;*g94V7+7mF
zR!?KbbKTT5S`7+KX9vl$4PBQAh01OpDWC<fHKF`rt!e&hW^C_xe3_Uz4==br_Pmb?
zTL{Js$ekvMHf6K)=vbUwwX21OAxNk(j^2w6TM2|L1zHd~6qhl1>~Jt)ew-r{vhaW@
zmx5jnEmBcPZekVOmKzIFH~V88=3N!s@b{m|&(=%GY}aRxTx)8^U4uXCW9<=Z!1yU|
zi?3p#x<`YNJ+blN+TATh&#w?9^i&QwVEW>PT$|IO=+^u;aLU)|O0qNL1|z&j3eSv8
z1xH;Un54hE=j>&|N8;~BD~u;p*%*ct=H5y^!hu~8xom=CNybxSk%P2Db#KsY(68;s
zL*MsKf=JFbZRDcsY{6j-L#KEflpt}~P6OZYT6(d9Ylx}FQ(Ahd_?wqWSy~Vy09&(w
zXhE*u+f+T+3CR?xX)sqckJ_7!2uLp|2$*=P697NLx@U1sTR5v&({8~y1Q?4N2c8qa
zo;rHxab20H<?%?kF-zXJO(DfeFe+T?H&q}ET+_p&we?!hDEaoW>oCz?<XAUhZ%XDK
zv@I9zZ>}hCwA}ZV+F_8x;7W*kMATG(IFyTBg4IC1vF9QWk6JCCnM0IjcOH8?Y4vo)
zq0k(8#F1*7ubX91{=IfTzQ+i<eDn^_hnhHSKGXvm1@u^{+TMu0^?r=#a%aCp;T1tR
z>Sz7$!q;)|d<rC~9z2LczCLFPJ9QuZInoU@bVr>rjqJ${zM-XrPe<0x+K~$Db#>uz
zs!Q!M846Gqcsh@b1V%p8clE%9xW!pgSMnjlG<`w#;V^!_430#%7rJRHX{3w<U3gt?
zbqxJn=^a@(qo^3R8B0JgYFk>jvGJ)D0EKkwULOVlY@F!wVIK$Pl(T_GF25|46q*rP
zlwV`zP_a6Rx<5Y1tTjmxS=f#yif)6b1Cy`XEnt)1hjlaNFweJ8S4-#Yv#4=ZmmW~J
zPBa=k>gq|vgUU4Jw|zA;?s&e3ueu-4TpAF_kMf%=fYAu0(PSV)NQ~I;na1lmZrU`|
z;?b!s>2~dfCy*r9#1c$RGB#{f`vLLh){0c9KhOf>R<P9$C*RKgT$7lXB`0m~XPKIH
zIjhU7^iu(U{JLsK$^Pn5hv@?tZ$w7@^lHqoN1h@-+(HqWh%|6R+^bx^44zK$$!d4f
zHDn^ZUBds>D;&w=Oh>8+f=`}rBhHs3UVXwoWm|~yhULzFU|pSWLmoQUe1o8DPD1e9
zHql+u&8qL(&&Tp5N;1W9mK3xD%Q1spX^%yCWS9qmzqKJsYa;W{6qS0)7uTuD`bqjN
zAew0=Qfkk4CU0%Wi;};?qs-#oQcU-2ks(l?@13y?Ylreq_#Df?dJPa=WAk1;fB>p4
zX?%E&^ycH?j|=LI&%(uXb(=U3AOaD4n(l>>O`%7|eP1{~*xL<;r-dcn?7{?PUB%ng
zS(*Ty$8c;uyIe;HQy8X86YRd$kcOOeG12tmZQ!-xa-tmq#2yYyzyveXJ``+Q%x4Td
zA6VO3IalF?+tR$}M^!tjtF^~2&Qk&;BiGG13<wn%|J?q3(reI7O6Sr<4zk(gamw`-
znMQ|=mCrak-`#$3Y*fHq;VS!4J<KcwC+UP<Fa^nRUiH@gYv{zPPO<74jDbu`ylCr#
z3YBu!oJ^I<1S&ZQqrZUCd7#{EOH#BINM*d+Zs-dKrX>|IUS~a3(vSV316E(x{v{Bc
zOu2>ki;C3~eMO_-38W{i7j)MP|H?s;>e^t%xfdvQ+77a6*(leww7fNeYIJy^&G8;4
z>mn}X&34r~+w*CPgD_fFE$&&aMM3F#*50|HcprOKwU3@(mG<%StcRdNd~;Psd4qhF
zfc0i-<CPm_UL4{B{^SXFT;jdVhT8UGg2@=bl)m}QQx-@daV{tXDXknSjJl+6J{sz^
zss!@uvM&V|jnQ*L=*GJ+S)+-^54dSf!ruOnw^AH_^bDrpCi{r`xJ<^Y)oG!#q^<p=
z3=BPs0^gsCX;*0>-^hib>CS$Sg{hopq#gf!YW%aDQSv*ydu^@$lL`0k{yyV7bL$Yc
zfH7VG*VOMV*qUZiyyjbw4An1=zut{C=k1f%{F$*sT3WtX(=Lq90z>Ck)w>;sR}}2z
zb-!_q3c%*t5Ur*p1|d}Z4i_}nz1*>zK!HtMqn);IkjZ28de+sH8VGEUb7mtbKnaGM
z>@Mg9OE$g#a>3VfIdC>aPm)>q2Vi}}h1QnvmTtJiOR0<O%t!>mk<G4>Q7Yti;Y3Fw
zWX1)pYgXB$>7UG!V2wShu#TuW4Wx54HKx@Wdg#3^tLLbVuWk?{<Hs3-h6k7U31x1S
z&`Lzrvn8OIBf3l{3S-y0^W=Kq8yCgZaneAB4edM;qqAQVL5YNxZZ<ZWfb5NDp7l#}
zRfAqHUI~vEN`n0U;pGWR$SI$Ub%x`FtN!z{ezueE-ie~kMKy8upyQ_Q@@1;=yhjbP
zco8e0^_LpcHQvC=i<{SEol~Ax44Oqs^&9D|`uNm<#%V}Q{IUS#*S5mqM@v)hO~T|$
z7QxBk*`o0-^B4(jB(h$D-N(;A1~ia8m*}i+6twX(P(!3H$VN&m+(x4pY;Xe`6yxtV
zpwC@GN<2`c;hUgi0)k7%e(<JhL7QbmoAZ}q86b^Px(Tlf8CB@ua~d7F;c1~H8aqNP
z`DNsA+Qd?E<d1N1su`L=tI4N7Ecb)s4UR|G_9cyfGIB71cGl)lw3TS&AIi>pmT)Eh
z0|3s_r`V@0WXVlpO8Dd@ED@To?aeL&K!dzdtK+r4f7CpDI{G|jnZ4aSF3zp_*}0eA
z2$imY4YEq5^s90U53=-G5Vm@$IRur*qGg(F5*zncmoO0HXU)Pp$f6Tov(RD|m&bjL
z>;J)5PhdI%_@@=*ka&FCL5hP<af76S;o~E{-W9Wm0X}zj8&=mQ*`w_U&ji^AUojdR
zdeIWwC;jiU={!?R6#PR9IVQcUj(n@Jl9OC4rj~6xTxIu1e>Pm->3(E}aJ|})Vaf=l
zYS7457Oz7y^DSn<=a^mUtRm#7n_=ySFA9X_pn5Q!<}m&S&Iwn>i_dVMv-g>0&OxQ$
zzZmf{``;(g#8E*#!GDZiMPnejPOsai{aL&QD}#IHZ5NJs&)Z@qmMok)5<h%$CN?{1
z?5r%R=A-jD_a;8)^q)4ly;B+3g+h*8VB>$wmj_txFf%?u7?81l%(jL9x7o&X2@{n=
z8aA>`Y6Tc(x+LvPrhv~-!^KH#CL<zCy6rZHX+^#1pG_VXb#s8m)Gl_?RUZR=*(pKl
zdmk#^TKhbyd%J+P9<QR6ttqa$9c|{3cs%9gESObS=qcHY2!G5`5QxGuxMTa}uPlcZ
zV`*c>B9QcvZAcLqDL0)`9$B%fqB9H0$>1Ua@!}V^3|FhJ<%evbnYO+y=@RoS12!ri
zJ=(lPW^o?h6%x34-sDSV2fzRJOq@*1w<veT;uV@{*Z3HjS5GKo6QU4}2h3!WXDk)k
z>gu`|)4nTAO+)~5XrC*=r;7~7G&9bR+T5n3h9bK<gW4oE1=;^%K=QC+GR98^67K8L
zRc~g7mP5j)LPgmndw7?&NWEf&TtS}k>_HZ)+XsGaSb)ppm15F-E9Z^`SKUI9Y1?kZ
z%?%-1q~O$sr^7k)uh#u75;6N$4}PaVz%j7;LoA}qlHgem-HN2c#Ui=%bld2c)i+>D
zwg!BRW|N&Vl;kC8x1x+m%DnPm7Q{g>^`)<|U>U-!c{oC;vQ9sGiclG)ahN17G=+rl
z^3QRXU=hopFIi9@#7ZMFS=ZiZ?HD6SN5I8uDH}!94~gMJA=tXjh!h%PMaN&nPwnH}
zHFRgr3;FWng9$Z`Iz<M{ClDwzLj-gaQ2NtL&8cl$EyeH~SQRPbzE0K=C%gC&2B_h5
z>hNuR6v^t6&_ze~deq}i9zk<2_4u))pBOyLRd*|~^s5_yib8YmBF&m(Xv-+?%p06d
z%S(nAFXgK*PU&9x73a!BJlf&%?q+&!S2qku{7tKFe~yqXzi~xBga$!)kVwSKQ%7sI
z&XJ3`sk}Qi8#QBTfa{<Treeu<gm0M83o<3kdbGOsK^3ZY@~;B>kW7Ke%(}P2M)%U4
zW0&U$aifoH^}!I+7)-<EvMeJPUqT@*MBp7fCVOHr{7ZD~fo0swP_~;T{$b4bh@OZD
zo2b!#*cBxc+zFG#wsqQwceGBs%<v+el|ABzni!%0g7PNU-Wo|}4x$BdW>4JmxPtj3
zH-b$rJUDWo6+fwb^-3(~oM>|NK0A+@3~JjmNFOa~f;g1l7Y>5`-q~;>Z;|Y%dwu%~
z=#Keu5KT6SAgx`hb>-G3JWOR%m4lu~6WXQxrb1nN#HGvKp)6sp>O!tH3YHIpr>M-3
zkEdmz!-(evY<dy?%qTxuHcQg2Dqoa9ng8&!O{H#~s)r!`fChl)JLOI}25P72%B^1R
za#*-16B=Hh*UKBbSXbe&_3rLpd#Eb~dB-*MXd&A`of!f%nlD%R%}SMtW;h{BDIkt*
z!@wv8<Vli}tZH1taU-ein{;0F>itQm*A7_N;I6*Z_Q!_6hUoEyp))yHJ^E`H-xMHF
z{!O<S<Y}dHd@KeG3##Dk_|;B5H5g7FS+Ob>p$Tj{l2vY_R)WWgqk5pNEatEHnF^S$
z2~E~>xRYFjYdTO9V3Kj<WL+!yJ!y_{2zaZ1`ttXMyz00_wB>Gx)^Wf*CfM*o0L-Ui
z3cnvjxy>*^E6r2PL=~c!Rr~6-9X&Z&?@R+|jm8T`41pyO$_(|kq|6IdUfPYZlI4A*
z-bPKVEH=f+3}5R7axqy)7_Nb3L}q8D-hG6JD&X-19*ibHa%s@XO}K5zgMy|BqtZ>t
zL!fH-VjF~5JnP#H#XrtfnmMuX+$GKNIGf+~_h(=_E*Av068X4SlaNZJBLVVMW9HgL
z&Gx*c^{5;%#V6%0_j%+$<W6lGGhA;?1g)t<mj*F6e#Q}UA)DEF`dErl>*Y{ma!jJ9
ztN~*BHqp}MoPHZ2Ao`zK6mT2GGHG;2LoX$tw-*v@Oj_vkAZm7DA0)8ckOuFd44UxL
zaao;+jGe{0Hn=f@?kZ}>MRl$FCPKPT7b}_LaDe<^gB-j0>;9cH4O~|GqTS8qRMEFx
zb0O#9{K5`kTqb{+TI>fXRZGTJ-S{eWfq2E}p<6>g>H$v#TJJ_r68S%lgnbJU%#J0w
zbGo>NhS7cvD9<_l!^z7c@I(DNuO8v?Dq8(YAyRr=UQV%J7mw1vei-(L0sPDV+)6yg
zC(vGa>1C_1&-8$>_v*&OvOkxhU*m)g7vN_-vnlR0ZY$y!au7<fHb~9tM**pYYy@4U
zsCi;^_UZTC>Dhc4mSdhv2m$HZ+GIh2WbE+*#Lo9iP#935ET`hbotnzk)Q|mlVCCH#
zm)atrBg)=2d_ri;6d{?yc4MLX5_5bErrOv|OJK148Q%5U{9VKBN|Oo%{=ugE8pbn*
zjNR3cuov5oPH%9yk<u=A`|0<2T~JYt<PTu9q1)jSq(9-K#nnoL2#-kf$y}O04#p}A
zUWa7r>J1X^#BV-HJAnJeiqrTtG1kly)WSj)v@Y@N6DAYs;M?P9?cH{wMt#+&-1-a+
z$4Y@OLL`U00~}K!$@J>UeA8SV#0?n_`*e${jW3{S)Gar8mklDd!<-EqtwSAg^v@%-
zTqGC`Uyi9Ty$gdV=^X^RYRtUjBdeakb^U7vwXG+y;iNSOpNvgm3-S%@mmZ0RHPIc-
zyW8?5!#6kTm&s~*>9X*pjLJQ|HD{~D<4j!H==uaxhjk{N!d96KP?f+Mwn=F>V$cQz
z-Ak%B!IGVnEfyQQKTgCdvK6y<Sy%1EEp0FGTWH@UGtT>$Tb-6&$nk%gUuWLf$PPmJ
zKSH0cyFksCx}#v(7lt*%f*)y&&2U-KN376c{R07~dVi2N1r=Wn>EWgnU9TdYbbvI<
z=Jy7<A(lNGCN3!a<G8w@r1{*scv61QtFj3ZMRazq<|=`O8(Hou^vzhO$W)1A=;94-
ze?@`<H_FJ*TDO(h{D!AVk=~|?;-sN?B4wYXmBG0DTt}Ss;?}e}S+rtWv5rNH6g%E$
z=!Ms_g#v>1!fyJrXO*5yxv%m%?8?lHEzMk}XQ|n0dA4*yu@N6WhvO=!g=U0<Gfln#
z9G5sS+!^Q>?@fT#!}8h+PC#&R>THx?C-=_vBbj)`A=?wkepH#wuD0Vg9$w6LkH1;J
zxqG_3s_5F=(V{zzuO%nl-P9$+SMuqRFFq*wlrEUu9UU4tH!=ZXocF76mP<`^EbuB>
zWPVmP%y%O54QgBk=bz%TA$xEyuT<LdPp~TDk~>H-De=o)${s%<?u=S6R!G#hN~SR`
z6)#vSj4y<|u?kHbm5IeiEt2ebXumqiqsP4hoB3m2wd8|VHFG`<WWIX=1I?hizH@8f
zzNyHLrNxGlmL)~9@n$#G54)adlCuUOhI(IXCy}z!HLd;sy}aJCryj4nhmDhF00m_S
z2kNPYI`f)HWp=mRT^d?JUG2BaLHo*vs{S;CM|0GxXDAe;YkTzbSXbXPcOLlYs$^Dr
zM3}@<5D4IKNtUNd%E%&@<%Y@%MY4M-y^@!?6l}BcWR^?Mg!XlDZULL3{9k5=twdg)
zDvpGeXDp<!5&U70U=Y<rK4}lhZV&Yy&#|1T5(YXk$;k@*m0Qm6=nVdph31Egy6(!S
zck?2zp^gum0FIFT!m)hAK0UTb8~w|`25a16KoJa<#LtHO8rkad7ce{uO+)RH>Z*Q3
zM9^x=dCp8a9SF*AGcbR*Wa7m#XR7o3ss!1^@+XG!{R4aQf_K5}`A3l*c~)y~f}>vb
zkhUyDzAS??es&kQ0>AyPj_kcH;M2U<X=#cywg@`haId@A<cuW0R)fH}27cg`b)7^*
zti8M@Az9p?yQwq27Ijk={6Jpa{}EKa0kr)(xSm-K>C{fvUsHu%yW?}Czx0<d!1l!j
z45U}~W!5zMKi_Bo_A(ZGd8zZsn^PC+27HdkIOo7T*cT=~0qtH;mfu&rfPRbRT?^zC
z#_4qaIuFNtT3R?_+84~nZrd$G)o%)LsKff_fh6>JwHR@TjX#&qUmc+RuUW~y5+w+<
z(*}XSF9*K8)ywk0Q<S#vplZ(7t`wf}8JWD`Rtroi9`~0WsUItT`gV;VjaV<cF&$F>
z0fC2P$zz;)<(Mxc@PinR9`977z@^RAG#X~&Yh@$%Mw04}&`gC(q&Z_K+@EP|Dy`YA
zf$<uqaNd*kVG;1iGKS*rOFh_|sYStff$T<2)B~kgeo+MDs4$@OB`-RpS8Li<;lx~2
z*2tm1+n%P=b*sAQJBAIhL3O{1{l#&&`BRM6`i&nO81;{UQcSFq0VT3?ZL(R*<U=Rl
zP#IDQYOqJi=o?-OgLe$j;B)_0G=nESZmg5n)<aGZWpP$4z`{a%MjuZNE8bj9w<{ep
zgUQ%C9#Z$WLF%|{1++>49(+N~i-yf$7+JhEZ`A)X@T)%r_~!5G23~wa5CU|vh(%tz
zDWYohE=2l_c9;PhwbevTswIED!(lzHC_;$q<haFs3a|4kHO&~-JfhiJIB!NF)xfE}
zkjZs9Gj}+a%L!%X7nR?q5~EO*t<hO^+@sj!t02Wu>w(hquCU~wxAygcDfL1VuO6~3
z7^NsLx3$yau~*xLV-#3M2oWrr69QpKXDYACaNSVW{%o}`Jkvx1KSWIk?T5Hd_LT$l
zGqqf7lZ-5fV1>4#TM<(2YXi&!*BG)x>$y@mt^9=pPkb&l$AWg0WhKgWrzM$($C8qw
zB)ppAi+U0|2o3ZvgP`^Sx4|zqF*`P9|HdTz=5Zg8;Jb6=tc+W+gp;weduvLudR91j
z^mMp;S>kQ#w1!?VwwH#b{S+?e-ifCDkroZ4V7#<WJm|Ki@bC{>I^})n5y7TOqQw!j
z2Af(OG8Gt|t4m`oxB@|V7AlhIF<2dakzdshpC5}|j12DQQskNLJuDgKWUOv;gv{w2
z7eisHPQQQNyQUf=LYlYd&zAGqwMCoE{XCrv0mi`3@^+$2?xNl~xm0@=%MDle_<1BG
zg18XuZ7uuCI|becgc*th=u#q^M5oLgN@}FB<63vBek6*~yqb|i-VA&;aWZ%V<%oxt
z#Z%>);nege-<+KJ>Wtj{!bu#+xpNSI0vpor8u|k``7pw`;Py!v8zlIo3raYeV_;d#
zHBmH?PO&m(I%M|o^>xa#jq+ph4Preje^PnCtIc|d+}Dq2J$+|rfZ#Yb29(QZQ!t!K
zIp$cr2=bl!7V#Jq1&Ju6Ns*e8k6>+Ot^l`)trb@OAv3?hLIiI7rPE_`l0(E1GoH2J
z6~0&RAc#a0V@0(7TeIggTthdAM^Gg9cEsvL5`1QgszNZ<{rEGp1q0-x3}_VOKv#fQ
zBLzGEdy@_q^~#P7ow76VeCEutQ)knXji}(%j><Woo5G8cED-c(TeS2plnyv_@ncLg
zM!N5gSM8J~U{rGzzKiOK)gWv@6e0W4&q4IJ=ox-@a_epMZl2aUz3X3W_qQHOo5rIq
zh|nX^g)xgK`oe>Sz7dfmaBzx3^}#qe<VIp#BN0HE*&sko1T#J1t${%-rKf#$u$Tn)
z4v$700v@BM>6o$F;`>?<{<Z9ID1nsjC86IAD!dc}J17N@f+qmt)~Ob~#`gP@C=|Ji
znw2H@ceccQE++q!m!3t-%$Nu<gEL(~fU2t8h6CaXZEo+6dC#z0daqNMJb`t`Ob%Z9
z)yGhnJ4+S1i$;-7@N?D>c<~5KHWan1nP^1X3buHXX)6hAE*rdVP>8mrUy%yA=hXKw
zg^iLb=SJbLasnKc+Cm^30tob~<UDNC6ZH1<exv<Zukvzjjwi1_#e{n&DAiJXAJa$n
zBF}iw!)3latg3b<qD>c@sr%4`41;c97wRB~4Uo43h|iFn<ptow8Z~*x3uZXe|JJ4g
zUxd_}Vz{KzBETCWAEK{QF2^RgkSAjP7^KtbJ8Z4CWx_LAGhvP~s4%_xks7hZ@+H6G
zQYlL`Ze8aCwAZ`8!SYwV0ZF2yv6)!W_HweFrn{ajGS>yh6<V9D9R5I-mMUGy6)@ol
zPTCGN2D2V?*y#$R{j8vR8a?;P@HZu=W=Y>D^V;Ue%o`Pw2H;2Pd1fcAI)b-zds<YU
zF3(Zu_B)e{B6`r(g4DY_!2|KT^W_)9+&udEXqzVntFirT@0#u%JV1E4eLH+obUp`A
zf&gp|N$u#APCbnQrdtP+3tI)98Z%-Xm`7FTDrj97zz6;OILOye%)GqBJ{byq&ccgx
z?yinhS@>vl8Hm)M75f$fDZh0^X($KRB3J#Bwj1~)4jMMGSfDY#5qzuX!c?Z1?=QkC
zDPWB((9AZCz?lS=a%Hk#C06Ovymoek+io@hA!eV=4%`owqYvTTBhXKc5s2G>jq-Gu
z8sw*Z7*k1EP6;z5Q`V5u#8&?65Afcc;-AT9F7hLW*X?cWmNb`Y^UBO0jQcdOc(hiW
zfYoyu^T6J>II*S~;UKzKaBp>}AJwbvsAH@XGS~;_UtVgt@3CVqyPG5-Q<8OD^G5CH
zWmj^$d&@b&<qvAmn%TFRUTE>ZjN`H!32|Wh4R9J(`M)oxJ2l{UYi>b{a+pXS^6V5G
z?s}Ex+N00#)dw6#@E#rCJ4f)E+1iHrZB*q>$~doc^YOR*Gm_x30p;1=%L6NQCW_2V
zFQ+qAk6qb85#e!Ul3Df+*JuUvhA_5BPqwktf}GSwhW75APaDT<b2|`@wf__IU+aPK
ztKX>y&9>XUoxLD70>AT~`~!o&zuIFO-eOVEsvR7^{tn9oa10~6hZIDmU;fvkGv&%}
zxFIWM<n<Khu^});V2_k`=Aj@g0Pgmh2re_#ByJrh<wRUT#nAL#K=5oX!MdJ~n_Sw+
zbB>W9kFLMTA_t#;(6nLo#Z!auG3F`%&K{1uqJ%D_y877S0oRag#&~3*{ZJcYN&7`J
zlOL$50Eoz)dGV^BPlI2`*}k+fKcSZ{spO$fn;;(#0K@=spjZ@8Z;(ljcYU8ndpsX*
zWXk7PoY*sG(ZWc(X&!BDTp24Y5?C~a{eugFh39K5>W1$}D7(Ev@1XsVqo}Btrqb;h
z<%E{!)cZ>%24dD(b>xLZ4D0ydmb)$xC#Z@>3#0u$98#XkTh*43o8iX&<zeF*=v3Fg
zn_$pQFzhNBixnwB9_yM-ylgGxu~d|>5a#^AeX|E(d`Uw5i-6q?)q0w*LK9NPogHLO
z{q<L|=z2^4hP;55boSKV2Ioa9<oC<Gh`V*Q%nsw{oLgwH`w7a;nR<op?kF%Bd;JKy
zj~{$4a7emwXbz#SM7@yE5{tAa8MwsaC#X67;4@dXg2Sw=0-Buim_IR$Fc6<=))>z;
zXU~T;>ac;X@uV3T+_9TSa>tK!?0`v`cq+kW<vW6}mbh8Wb$%asbi}O*#Pgv?K{r8k
zWjgKcB2GLDr9mGq?&VzJxV==#4FRDPYstdUZ`(;W8n*BzU-Cr}#nJRfUsUS<1x|`q
z!t^m8C02W%U*GI)(qA*H9WT!OJPlYrb{A-N>9fL~^*+*Io@<R)L8~Ui#VUMWH>!;s
zVKaVaIEkMB@P3Ypj79u~7LA8bPJ!&qigc}(%hqO#%(T1f437}S(Pbu%XOt4ST)+1H
z^xA?fS}v!F_sQ*q#jz0z0YxcE6ZTC8^xjX#1eL2$z?fwYQP|D=kJTPMVzuaoeiyjV
zKV)8x#vS0)QY9=_3^Rvb+e!qxr-h*&eQunP<0^pA={Yi%2f?}V<18gmzt&Lhuh!12
zW4l&Mddzh2Cgj3_;qK`iR$TV<KOWz+f&^`&URH<<NYJj7p~B_)2MS!Sle$7UCos*}
zZ0kS1xCr6ZW_kG`vH<}M2Bko#25k6@5Dtkz51GoBUpvsGP8!+@#JZ+EkBK7TgLy4=
zhm5;gom3IbwA<|NsyqUN=`J#LYkru{UrOJ4ISBT&Hx?;A(}!4m=y4#oq|B!lF9>x9
zRn$7V+MOc&F+LcYQB<WW!pqh&@O!r$C{ii~`KU**YF<0}a>m0j=DU=z(7G)pjQh)X
zq7u;@pnV0l5a9Q)KI^?8Yls1<{#sdX%zj_G_7nO;y(PJ(d-2pkM==;N;*bO@?=4i|
z-9^Ff1Ub#ji{W|FAa%GsA%?%_pV4wP4o@&wE~?654c3ZHbcqSHc8HxY$*)+U<&>8E
zYZvM9^yegcYMUbpFoj@s#Hgw7Q}-6x2T^G8CDT-j3yneocS`EHA|dV>RF;uspryOX
zkV;Rj=t7&uRsdRt34o_x5NvBEk+d>Oh}5!xgRg!>*UFGv#Udn<x7?FZ)nzAxO&tQs
zo{!9mI67r1cUk%yZPIZlVEv|PSRN*Jf=-T(-)N^vdUYTj%A$&}p9T(aC0szISSAtV
z-R_dVsaL#drOQ1Zu7C48{uB%3|AlCJ$AF&=b8RA(p-KAZhU5-tlsuguHi*FT=YsUl
z99@K+@wP=O`}CT59166gf78>4(SBGXw-8Tg@_tl}OFuafY^|FCttpX2+>F--WA!kC
zQ=E$Pi8IHX?Vypov@rb8aK>kyaF23iF<xhDLn_gz=4QjO7s-`c(C~5;G4!|rN<buq
z{1c0%;TQW_jNc~(cE}8REP~3>j)A1`*8IEY?s*C80r}7348&-D`<H--)8?bM=_cr1
zl^co6Qf8w$ND~GETbCqw2Tb-aStV`aNi?9AJA6*r_|V3u<DX)dyV@rpA!T3bjm9qR
zv(G7qSg!ZOem!}D9NAZcDa53jWD8I*^JSRzq1G0CC!lbTkGM0jeOvpm_-`ZQ8sAkV
z$SvNoJ~n9hx~Tm4cLvJ9rM@YeL*CH-9Z+{1<(9@I!889ELLtiKET`Tz{V!nf-x5bu
z43{n^eLAs<jXhWZx1|1f=%$7hu1Fcfc`iL=7W?a0+dxdF67#1nKBA@WV#(@yICLF&
zedf8b;eOIbe=#?3kOou6Avqc=1nk)yf%~6R9n<FQs9!Y6tyuO@&jAQQ4r1|&$^S;P
zlQF9Vwq>sz<IhpAb_E@`WYbb|XOnpBQ!BLsh5mVJ)`AdzW5vz}txr;rnXJeP#2fX<
zDLZu5uz^H+N|_U_rf~b97r4e9Mz&ECOw@zQzq@{-spNL{ludVXtFbGrtJ1O+#x=Zu
z7Kx{B8V16nlAB0V(wZh-vuo`4iA3Uuh^v2a5;~Plnc&)WUof%tCEt>)SYH2XLrXV!
zF-&eY_cI&oN7(&EI6tgr)4&Lg9sN=d2<_$emPKhhJG{L?!p2{Lp@JJ!&xGn~7fFz`
zvcAl_>2-C59Q~dTiG#|qloLHimrun@Xid}ufH7B7=^eG2n^PIQu994Nc-agCq|cD)
zi3nm?RM2UYxz=BN3Zda36+aLKyVqk#CQu=o1Gh2U?zjffVE(=Fb60z&ekeW{Mx$wH
zQd@v>OcLzs$8BoR?V^N*OUN^P^Tw%^1{{_)N<J!@Ce+EzNizKi!*dYh=MNfmHi~FX
ztQq**=$6_1p{D!9w~G4EBOrAFZC$H3>@UnNKiNO!Aj!$at9QD(Jq;4wNUf|t=9t=}
zpDMDK>(ae~i+xmi3U*W(=immY(Jzx@2m|mV1<?z>E2&G`)ZaQ@c81<JTkU?nSW-`t
zn%j=eA+gdKW?vW<>koNVdWSc*-XV}G)eDm-URqeSs>M`S1WdpSP!xdwB+cPw(Y1<t
ze^K{t{f>>&A}D(KYIlgluydL>!8&hqHyvtpAlZ;L3-#1)0w_edeU(x=+T~LcD5^6q
z+>_W_6BJTF<~Q9GO5N~MX#BF(IR<Mb3#&yW#3$v@B!hA4oYknl3qNg5g8o*Ko@8JT
z<4FcI#=Rb$Uz!!1#0KuR{{&b`5vGAXOHM{5X)D9d;^0T;9N?wIoe69*Pug$qta`T(
zl#v?%+C9TsO=82l7a~}Tn{1+7#U$v|KARv%f*JKY-tYgB<Qxq0Yt%$#Y5`zLM}T*2
z6Mt)VEB2<Y@E|rO1th*zO0#BgT8S?-ygT2ORTrf5J<)~T7|MJ0Uza8SXfZSM{UZv<
zNP95fWlbeN<v7CNNwG|PhxxBDcX$Jc?$8bpj(PZcz*ca<2UXvv^-{ZJ0{pfmXL>H{
zGVzegoHT|UDa`S9G<O=ScRepLUNKOLWdT3vFHS>8X{Qc<P*%cmHz}?`ktW>Zq`$&x
zygUL;CtgxR$}k2ntv+Idp)$<mc0yg0pFmRY#vxSj2)?!|WpA2?*;rd{-FA7K^{(Bb
z5&C#}C`SKfX>geLS_J0*inB4$A1vEro0=XHtkZFnh9BRHW*{Sk7uU((gaqnDCfH=-
zqpCU+Of=L2%uX+XHxB!|V!htz%JAg61&3I+u*ACCyZq02nW89aM7ok3c#$)I5?e=F
zt%FBLqgs0T8yce>xpe%28!utE*!3Fqw=KUabbH2%y2hRRWTlV{0MNpZF_E6KSnF<b
zB7xm#1Rff4C$U&}>SP?#yufkA>$^Y~uXZ%2KmI_W-n!MmO{`isYvM`BJ|L=BGD8Un
zjx@jL0tvTVi$3}8HeF$5TTD^D8JeqR4();XGMsr!X#bXe9o#Z877&Tv?Nd_@4_Lr2
zW*JPbwtCkeY-py7F!ylX%LU-3m|!`%O2!<m8Sa<cgf$x*y(Cwy<M1le04J}-G}iKO
zlo)@o0ZzGwX?>Ow`=DK|K$q7Cd17dSVp>j$O$BPPRZ#snN#}qD6|m{3N9#gOL|aos
z2K;c5;XIshB;fjM?=nwg@F-5gmfq9t7z&9%4PL9~tU1#D8Dy=?P^YcfDH)!+AUso$
zZcyG{xPx<->&}nuXQCTA-u4}hdF16--`U@3(;wq`jW8|{!r00T1EF7muM~h={VHJT
zg&Z0^Hf(Hi(z2#aj%8`1fELQn=kss#xzCTXs8r)965Yev4IC__%+7dh!_B|<okGh(
zfagc|A3B1%!P+><i<em>*n<QUEEDb>+4yZ2J!$J)T!T{>-4>IbRtGOMQ(fxt&)&Zy
zTk(RrVFZ7yoy9-|X#;?aU^RVa1DCZHMa&wnB+E+E7ssg7LiQ~rkY+LrV%~wEQ@@mN
zg$Trs8T!GWURt4Qp3m2`^^M$a1P6l&TN>{l?r%>^L)pu*`+GjIvh~T7!`0nJkjRZf
zt!2>V8r(v$*@6drcMwdf*X+K`Lh8PnDGGZCd>p^I6(+mFH8mQWKe=GA+$$!qBu=|!
zF0(M9)36dEHRduGqq4cVF==YWW77}Rz_R)hXv?m1d35BD3uF!oR8?JK0&DaKx{zKo
zt>{0S4|nkBuz*I;t{Z|@S%CSDYsjkVCd*|~w~3fq@r`8`#c;@e5E7lmFp${#qrwob
zSfqDCHO7IJM$j1CEd~oy&*|8rbk5fk9|>BtRLi`Z=1AMtnA$7JTg6r2%?um^+^(;l
z%|PEJJud}N(`1$a>ejC0kKsJBnkjn*a{)(R2IP_&vv%9j>He}(dBK?8SPX8z4LY=4
zPvu~BBxc<B{+O6~eULVmXE&@Xf_beH1|w97X<1+_{qqlvrmcx5oq%~7d({ld$0y~>
z45+XdZ3q{VDFq!}Od3}D4|ZZfw6UWWf3m%<@~B@Wa>=51MGBBXY9B9*kTWzp(Y|l#
zr%f1rBtJ}uIft(a+Xl^3wn{E^%wPq&DO-Qzpq{Acq0D?KO09X5{ATafPlx>6@(s8-
z0i4TiQOdb8Vc=c5QGemdXZ|N|fYX}{hZooJs=>nMQ}d*b)*jSgD(&H=2n*Q);8{RS
z8p6!NY8jrajbHq1mnUJ(O9SQO>~5h;{8;KUS&FL-M;0-3g*dM4%O}lf$xNH(u%fOj
zbpb6)e3N3MnBdmz7cTH|<648(stk?!E5z<9VOo;94jeXZau1F6nm3a2<5&zXvZeqb
zHo2^G0~?jwbkS=f7!N?snzfs}MNfbWMQM#Q4?$1$l#n3=`aT3(lU}k>=tQf6-Tm}{
ze?gcB*TK@ZP9J8-BoaRDlW}wF?QEEn2Ll@*gwooofDvG6v%u%EM_@ZSnqfD^tGX#N
zD{cmuU743gWyG7b-Lt8`x97FC>$pXFqi*qqNs4WoW1-%AkD^zNj<tF+|BM7(8OL)E
zT9`9)>ave{AS#AdVO}hJoq<=R6tmlguKW-G{EZpv;#AADE<29-9c0Is|IE@4+Hw<C
zd#FwukUjqbaj2Uh9CjB|Tm_ONXa*km5xD#nH=(8!oPHrV)-}`l_F45<c?j5^C})?#
z7n2QC4G5o8vOh6s(gpOE_6PbwVUS)hf~5Vbw)=V{CKnFg|An6{Wc_S+QQxoE_#il}
zd4RHHjLne>2kKCarXD`oFc%jc9k*voR?AO;?9*B^nYxhG;#jWhTZ=IXF+HCQghcOG
zuKU)ns|#RX`s9+-AXh*}bF4G<UHZRci~ERQrpE#fa)=`+txO+zJI)~ut%czIdnTLu
z5oxLYnxihH&U<$nA7f8CwOqO&msz&BmEKTeK!pLIIIU{ny?*9@f)m|#s*gsE0<ynJ
z`Z1&$F$QB&Z$Zpwv^HC@bfmY&YQR>Ji-uu0K?Q+*Do@%-q>Zw@$9A0^YD&aIRs23#
z>7l_ekJY;JQ5-NsX#mc%g<w(Iu->4*r)&!xPRD}7r7?8?!tlv*WHEVY-0**WE+=eS
z1b(Uu`7ZtTuK^9aPaAtku0XjYfQ@#-3)KeF-1JGDS3|`PSh$y679!@AlhZ`M%wkc;
z^Jxyx!wU)8uVozRMq%Z<9BB2xbqgWv-A~RXj?qI0cfBd><HmjP=%ptp={HHcpW}SR
zEJ5!g^hRfG!(`E^A81Cj3)QkQ8*giB#gq0tuk|T4V@*z)r@doH)D-0gn>1BFWk;fp
z#ixgeOTrr_5lW-lB~({B!B3FNqx)g9TP49bb$>vqTM83ye_!E;&loo{=ej*3VJ6f%
zlLt&x7@yT)tVo)3mkEfbQP$oB?oJw}^juK#sEAI0MfCH9ik)UlXX3lx^PC$5xCSoK
z@OjyOi!QB{*K7H@Wni979oWmRRd+52SG0n;uokSIC8@R~wjG~feUkhn!J_C6_N9ih
zCJ|D5gGfE7{fV}jZ_<b#!YPvbxYx_~Y^7JF{(Sa0z`M>G42$eHbk%BW5@&<mHp6*y
z2|v{?eW)Z-<rAZSGzh3|m}NLUiUavS;45PhKw<y#S6fPo<f`VNI*Ol>IAMbsAt*f~
z^2t5?MpjR%j>l)TuR_hbtTJJS5t`sE&aCx^BzpXX`U!-WEVJhQwq!T7XTq^ftN#TC
z;{Slvc_z6KR^3VJCBR9a#erncY6%3=0#7#45dHFpP5m|n*!Q9~co-RuqE@SJ*nTa$
z_y>6lm#&_OwX78s?eOvuHQcD1gr8ZLq=9HS+;$mZ_S(JSHkpQNn~gCX0=!yVMT`b_
z#*a!N90HNjQ5c}Yd2?t%%F8*C`}kSp`cMR1{O`g7$xUuAxUi(4R9JU#3|4ViR=PRC
zEEAj6U^(d(Ovj|uA6GIrX-x%Ls?2h4!f=WGTF2R~zpmdDOjH@>q#cwhG4hPB#Ll6&
z!D`jg<%mF(EwuvhM~wd-wt*ins*t16Gf~FPos18}&cfBK5ZZa@G^mzgWZ8e>5gr?R
zZB1B=b`JMEow%2EX<%af9r{&$4rVpk?nPsoMBt<bi920r95aQgyg5fq-0Ah=Oghj%
z+~VWH1Qf4Fo!cN(<yUZE7h?dr-<!xeTbD67CwYLq$uBxluO-Ntfc^1RZjjGcEfe-O
zk2K85#><P#Jwt}acHow{=AFbS)zEyDwLZyyKh@p?Oqhyd+vP2*;Nf=rdZ4p)uyL4l
z)Vi<j^v{Z!)=xbg@8>!qh0q<`zL(Dy!t3%?7|6J_K0L=k`d$#6=%B{4`>XBsb{o!y
z^Y7n7nEf-9b+%Hi@)9LiLnj5twr&Wg$I%K##;4e+rg&m%=@Xt1@YeGLbWbYCDa<yI
z3)22(6ckPQm`WmfwHi7-i4+y%V4a6!ce2nlSlnS%UnO(h<E75|84q;?Z}@=nf-dGP
zZA=lI)E#gCd2f_5+5MRH<pQiVJ5d?OT4kR%CmAS0q^>(SB42Bk<QzM&IZ<*IG>mZX
zoqp-OssRZ7>-C&aQ!EhMO_q7yilPE0{vAMN`D6*Ce&jZO0Mhgmb28a9L_}0r&t>5+
z*iv4e%)1|c>E)iX*NrS+eB7OfaDm#awcueu{ws{#G50rwohr%`#@XOQhGET(F>_UN
zjQ~S|Ks+Xv!%CLRTH}U>7$s631)(+B%rmoou9RgJr3-ham=KnV>hVpMy_XN&$#=o!
zmaW_L5MHOP3bJv;uKXaD7FELR!Ycy+?3#T$4hWQKuOIHpt*)|4H-f8h6$NNjwm>Di
zo(m(ZYzr^}t5b$NqjZ4A5I+M!_u32Uc~^2X@^gv&;YxIJUFKt&P%{J+Bqq}^WD<ZI
z3Fd;Icv#R+Vz}3*LZ}a|qi+1j@6#Q13NVN_W|~vUBmOhJo7%87SU-lcSRXp|`q)3>
z;dPsZR*WKMHAW4b5?FvUGB21OZ`!#FGnHA8&$U49!RQu}P;%~K!}`4A8(LoL=c#tk
zmp?C3tE!c8eWo(AUouo)6U0Qnk@{>1>+M-D%*P$4(X*g`1h$q^0_iXv0|ZAZixK-w
z&vrL;ro`Vw&{sW-$R((bKLRhZo^&9dpS2Sj;SCY~CM+0tL-x>t)hJlVNGM^j2R=y!
zIG-L_n;ibqqCT303mT2{d%1omQVv5N#!zZG-O0)Ho)>p_iR~}(%UzCw#oQ|L!Bbk<
z_@a1+y5A2UfHK!@8*wbwu9+X%Nbyd;2FRa=IH}wkveIQ!T<Iq7X`_+8gZ@3`7OV+i
zkbo+vUWhd@gC+s|IISpxm@wx&22yjQuv?%y(_qdU8p_;UUAIRXw=-aqRV)cb=eMP&
zVZUn`O;}6HAW#_7NjR_cz@szqTd&kBXuB3+0@lz;(hbR6wG$GISXx=Hw4nJPnkbh>
zRT7*20_aVRH$09{fqTZo^}1E=rXTQeL1P`{bH+RGLFj1e`)*qz$gXCm0Ui7<a8Vig
zouPG1f>zdr^#+xONR48!pbn`0uR+f}2WTrc4e}Iq?t$b)g>V|wCY&@*=guk1{<Ez@
z;$2GC0HdJ2!M=g_nZT-h#kqBWca~wT^jB9}K0?z@Ee|tN>(!2EP<QGwK}4A0TdJDx
zLT<;MEVTdnSTWLQ=5konVl&!#W*O+@WbMDeo?Ii@nc!kaSu&a~GdZ`q#E6xa+jO1U
zajt}HF^w``>K!$<p>r|r!{rx5KE;v}e`d%iZLrs(Uppbys49sH?bjmjf=;kq1RtHR
z1Zz-I?!TQP!sM55Z=YjY4h{CzVzzz~atVekTP%$68Qc&XHo{(*t_R!y37wZdxlY}w
z3#8I3{k%VGi)p^IrE7-SxCZtzd!xv6aA3hbB}Tc&e9xkb?EfUJpN;?k7-YAfn~oM7
zFiR&;*~eZ+J++jVH9+(2=S5;NrE)843Ww53{Qwn$T>mN=sVi!<=|QwbKk|7syzNW&
zrrrsNQB!IeFX*?r7cl}pF0_RB6=e6SXxFaKlF{ZaZ#Py3Rr*=!7M`^+Q5h|y^Q;-}
ze<G4aORvK9xV2wZ3HYSyJ+L|7avV|-@{C)$6wDH4Pat^IaN6JOLOg+megQp(9phX)
ztf&+vY2f8>$ZpX+V>dF}Dj=?uPo6rIIR-K&LCAU=x60XX=&Ycm!biy@F(VY-Wa2=P
zCe17d&@;wWFb*0Cl7wmud)Sw{Z2}RFz+~-`>EjS4V#B}JPg-O1xkenz%rLAry{j<e
z0Al~xEcs>*pWgBz?1{?RtZW@YV7+0VTKBn1K{mRtUUR{o`~>ot$CTk$*`BvJX)c|M
zYwNct%5*7s#U#x<TBCAabJ0E$U6r0KDhsB+WLEf?D6w_5c)B>e40Myd3pT#v2Y8So
ztBS#m5<PRMc$)J%`L&Bpi6rDckmqV{9Wa2phMR;1NqPZDv=PqHT<4^&iS$2Ep0j0d
z;QYeC<uWJ=>(`2H0eJ5aX3C9;T|~C@Xp2IE)%vEKZxk4+*bX<(D*Q#Se}9JM`LnX7
z=ejz2EH)-{PWDsPsC;8o@PtsS8IyI1E4lnFW^r^}U;`!HO;n?akC;}F+^|4fi?in2
z(jql1yKGTeJe)cjG4Cft4Z$&)fNkUABQz=Cdg33u_XIr!ll!dWn+wBN6*=sErjP*a
zM;Rowa5#Vezy|mvhv(vie7`&e8^gdKl+>A01YjPm9Wmd#5L5vXtutN|8^gdvSnEYt
z9d7t6824E_vg7m3ai&Snj{zbF0n_)<MvC$XGx{Lim2W2ci({!+mp6AgTaV$d2=IEq
z{Y(IbmD-qtO?{MksdZ5FB-_s69VWz1X>@dYg@3F`2A&*in_!5?eWhxM0|?xB14f(4
zY0g=B<Dc<n@CNJzDg6YCZyJa2>wN#Pih04HOdCuRcVxuB3Ie4YBO2#OXJm+E3Ii-#
zhh_j~U^in|&&n-fFsuDcr8JV-rLhsoZFi5BlfCVsaq9q~MS1d<XFYqpi{o)=$x2`m
zm@#$RLa=UUJ{w1;;*jrjo+^6BMk)BaRjq?>=-hhF9}d4u$~IzVwHouW@^_=+UzVfO
z;hjGw>p`V-vZC28uCfp_+YpQz1e6(9RO$bB{#mS4*^bOq5(g|HJEv!I!WOGRZPS~q
z?{r&sW}Qi-W{V7X?YnlG#U%qHgl!V2l?|{OZwoxVHOuS{z+7(b&%Hk!s04RDc_k+%
znwjF<vVvOayRExtg`pVEw1W{wxzTMz_2VG?$f9wcrEp-4j=mw2`kM(5d0bDxpF7aW
zgMftuXU}fv3^<s={y88ci%HO~{A?mv*jYn7$q*+ku!9l{B?n;Jf?86TtOs6Vm|?P?
zqwxjH^Gfd96siC|3nX9@BThXul$}a=)=hcrV+^~49XP)6z#1UU`bS8z75FemIx9v3
z=NTHxtR1k@4bPYg%*X#stpI9Y#g5U_t4o8&a^Xwa9FHAuB>O3%DHK77lfLnAGSTV`
zMD5de!0k88qa3(}B3$F4hmCjF>95@3jO302Hj+8bSEw{EyV}=OJJqAXh>b$M=b5h8
zH3`mtf^y{wZhkhthi`JsS<+qSBeY)>P%v!XF?Q6O?6cXRvJmh7XNRLM4-E2*qF_&y
z$<Qj&M53brIzQPGdUQLrPP}RDI)*V{bC<pzOZ#)P7EjzQaytAMR9KD13IgW2w8{KD
zm%HahpHD&sK=OA{xjqG(cW=wBxpR%1A3#MG^w`PMh66mv8(y8wsPDg@(-5{G<~0v6
zJY(5YdP`+zwSV9@HWP!QsA`2-IsJU+6{8C<EO1h@kMDynGy`%W+M35UcaI>Ho}I`i
z!?bhtjoa7lR%`M^A^Uwc0JVeq;T<feR5CurJlGgQAfJj114v}dn#CwMpVLpj#auLJ
zGGlKYq>8_&XNB!@%<CR$?1x%s*M&g_0X-RW)ljsB0cL30ssH}`vmbG-GM+prtg`0$
zoauvzB9xvw3|Cdp9C;#8uCrjwU0Kb#hF01d4&Vc%P-H7eZ={<#g4O{E5%%sXv;sub
zwe9Wwxe4ATx%wRXqAghmGT$Yzf=2S=^d|f1u;~u(JmYR4=VqUFK3CUiP+V~|AwC??
zr$Gf<IBYk|3ft8s-)HxEV2pWfDDmxM%JtUsU>DNBNv({v{~$OQxaCV-@nG$AIyY33
zxi8nh)1o}9r0|Q)q?!6+4CG#qp##WMnV{9+cZP^F#qJjMks1c(#O#(x#)+hGgoYu3
zFL2srguXVKuVTzhFO{`itGR=EYuaDnw60PIpi+$YpgaaAF;x5{8_d=PbkI{x4kiRw
zZHT4>d)EH(oaDbkvV1B_E!|uG@k~r9>&8k%FIUujeFJQkyH0MB7rhV(&oD?`=O#F_
z8Lwa~ypuq+_<RAAu!5Jf+`(IrJ+G5dw!!Fzg_&kgV2PirG5>V%Abe^f!A1&Yqx8%+
zglm$injy!+z>4VOy6qwijoD(LsIP6g9k()7pZwuA-zmmh79>&M*7pFFLhKm}Ln2J+
z4FXvFQsE>lTp8P)Tl3Vwn{K1SNIY$ZwH*?K3%>RBzh%5$wYBL$lJ1!$d<%;mjc~^K
z%KvXAqrSwU-@V=}adwjU=9GC@$_#`OFng6pP$>I9hsU=gZ!wJ-Ws!+bxdTK0b$G2r
zohR_+Lm5QC`Oa4s!yrli-Y)#1Z8F~$&^5ggjR-k9R_RtqPSj#9Oka2Kf#8`9TKdtF
zXPF%;2x!Cm{9m})!`{`>)tJ?y^W8Mmqe<@<^tWTFNW+%0KF(WU$LjDqZyHQI8?Tg5
zhz<9TRaG`ua$y8_oUW3Y-<X5|h*z>tCn#sc`*NwiA-2yJG%kM0yO7=nTs7mg?SXCt
zVVSw5Lh`?aO%1ZP^62W>O8N?w-)n7F_4cw+!T^?hR6et@6xJE|Yx!vq5vPok>mJd<
zZ=+DXD1^g6Jdu+!fvt*5=Rz}SzvjpR5@jD@-aeDfyFZlbA7`KT1R-e}xZo~D+<0QF
zK>y1<>VeCtw#o8OCw5W)0vM0%2|n;I7qFcY(@9#}E#1uDB<C(AxcWdwTo=$wJ%48*
zkjY~UYosSDaBjPsW|h$t*Fw5IV2AUTdWVPQur!}DneMbJ1tNKfLv;kuRgZZ{0+}3W
zEx0ddUIuwyZL|(?j5OcrCsixnfQl-ChNIoM^1OMw8Q0eW?h6WzD%3q%&UA?}a*H&?
z6hLX~_=%W+CQm(7CRkQUlV0XO9j-`&iDAA5a@MeK_F6pGLp#^K%D45-ke}ngphi1k
zKjf;f#rs>qCR{xYfY>1(`ioiZ>@$kbiMwF!TA{SN+5ltQce6jg_+X;m8%a^{3lBiY
zZr=6mi=I7VCB`zpnkT+HaHevDtlu2=TpNOv6Hjb-Szg&TTpC3_NbK{Q7()1w0_Z6n
z`>Cw$%|qh=Y~@U2cY|q-YM1%B=L}r|**FJgrH>_xU#34GcS+6LqcCYrRQefa_KcF|
zJrxe;6^hS-?-%dS9gB~gIV_DZv_qb4a5%tA-@s+%3+fN;BmFs)A<6RF=5;#fI*s}|
zdmZxWvq5n36tzy_FQ8uF0eX}4zZJMSciKKc70PKoxLD_D?zy!tY*tEX8QN36Q{{oY
zu=@1LFBjj)uymQlgde-m_E{-EM010FS+}j0KE%A<lEGFX=1E^it>M|GS=R9^@U=Ce
z=WXN4)ruk}k*|n<e-AGB1v^~6-k!_u^>~9*{4G20&%6hn#N7L4qLMHkcV^~-C3~a7
z?2Qc_UY9b!93?Td-sW${ybI)lhV*KnT+3h#?k6pBJw}7sqA{WmrwUOO??+}Oh{RH)
zf<OX?uVk4n!yI$N<LI(m85wV5Uv?1Ovlh;QFg77~gmANEm}LRCR)w>(xRp0ru%4#(
z7lAL{mTPWI#?R+(aOq3dm&IJhs#$c6SK~jDA`901U!clU2Wm!Rlr(zUS`$(3rx~xu
z9%8WQa;^+I;c0C|lP!c0C*D80*s(d<0}7-^#u<v{zUXnZgYLVf4Ej})|K#+pAFLQ!
z{H27Qh-{vQTja;(8wHxO)6kc*$lNxKv9kRi1lDahDeL(JdmICeT6=?pyudPjbd2BT
zkxx&{xL~W%W|>TeI)ULuwZ4*`07{NgP0u{6AA=*uyc278rFzW28U}QJH)T?)rWwtB
zFqNa5W}2%3tp2<^j)Lr&Lc<K|h!1CXTuvP=AU0FXfg+8vzLvn6(Pf*>eOQ$F0z<xF
zo1#<9NUyfXMR(rF_WwR)WzkK(rI&5l8fVONk`5OabFt(p!bR_|M@J%e@T8{9xRb@G
zipo#7?fJTKgfk)ZMCu{4F<hp^i>`O^bhWtw(cXK<uN{K(Mkj&j8CoyHrif0!*&V`F
zi6Y|sph2Sy8ajK`34X^NImi$Ot$B7hzoS1;o=0Znm&dq)GPg_80CGDYUiBRx&k^K~
zrzC{7(^pH0g49Z&iy0~K)jg-;px}W3>MzfwS+xjM08cX0%Mwl4@?og#_$#&{E2o_>
z!^pxNg#ejKzvGhd#bo*hjX-CILWZ119PwO&Y|bS`b*T73+H%qgP&MDJP=g(@4SJ(G
z^WqB#h1f81OV3)luSdikukNuDo5-~N2=s)%3!ZklPg$>J3TPQB1y_nn6F?U#7+CR1
zN?r;yp!9>zw{Cgi%qt<E=O0A%=<fGcwMr?GS^e==VvpM!_iketPJ~(LD>fV|*=(a`
ztMO&B#EH|_ZD-9ai4Xf7t{Js=kcF06{*AQin$vHTF<>G41&Y2sm6DjRs-qha*k6Bk
zr*)WJxcN_Y;0RZ4_+D{CqVnyh>W4<_%J{elm>@y7D@;M+IQZ84N6@86HYWH&Oa%e7
z$4Cd}ChH@fDU)^R%}r+xYe^tGy#;+8!cZ{Qy(&nmdR8_p*I;oC?65WE>0>*#6d~mk
zZOA)7ql>Q+@X>PFQ~2l6{{aAite=!iE`QfDafFlNC6krI@n_c`9xMYIqOA(KoTEoY
zm^kK09nzL<DSjM)I&9a~H_wqt%wGrBC8=#R4Rqu*-c$H6UIX9!>gcE4Ov&0bSlF0_
zy;|MgnVzorWy4#{^n4<FT#(#&{^!Nf7BoF^cgbZVJjVQ~Bli}v8|C(4c%}rBQ6qh-
zN*SkAPl7U~0*e(5t2#~Y&n%JrYtPLu1(kzwTfoU+bft^6TT9NsCXYR*h`<ZpTGt&=
zxSC$XGw*H6Cj{tj+mP!vb8Bi!7G*G5x&{vV^<ELy^erMPPc(GC0UVMa3HLmXB`y+Z
z<S2@@*2_-pBPltXUS9{(qNT8-bSZOt0X%-88W0hhQ^(X5ex9OzD)NC8L4r2wF)Dk4
zu{wT`H|kaq-iSCt=yer<rEc;NVRWnB=S?)?geTWg-i3N@J$un_?_~vFLP_aamUc}u
zU6V8mUC(r@Dn^8U<dXlF$!z~VhAZjQe`VhEHHebHLC)72$^vnuAFDH^XRx>lxXNZ9
zBtV0n*FF1_PE-Qco8Ysmhjz(iV^~Uf?)(|l1D`pttDY|fjL$#M)9Dmbo6TRWMDv0I
zo-Stq^%I_%aCP$J^}wc;wxVj1lP*7qVgawlCUJO7OkFK33J!VqUMphmMTZsj@@W4_
z+-|-XR?gmE(vLV74$)xqlK_ai5}HDopyMX*(pm6j=?3P7_b%p&w%~XmC_^sLJHNNp
zI^OW1jk^_!R8b2&IX%G>pD={?;vHh21`0sZyxUyCW7%*1@g&QBJo@Ed=8oo1;jZ8l
z^LmE@V7-wmQ8{yR5N$_EM?S&qr&)doUv6whx@(LmOI<t8M-aA&%??%Q=M(>?KCk|T
zD2%{E80Sgix>P2}^$IVLr-%q_*J~QfytxIVJq~oJ+LWC@6DSna`78w)p;gm~DwT=U
z=PfI0$x5btVB%M20R8z8RFbXROeTSMY6f8M_c?&_HbvNTtW}Wl&8N*a``eHRdu2es
z75YX$I~tl%<X!PQ*v=m-u~;SRzIYn5xV)H$;ukm41k#)L$97<fcAv=e$~Z;B^hOsK
zhH_5uElJWqI&u=0^cUde8O!myKoTp_(ZvnC0_I{IIkDd4{pN`C<Y8#MFM-bJbJvDU
z6+SxG0sQFboP8k}dRc)IX{L{`0s2+5#KelqOu{Z^rxLvZF*ngK1!{Y&CeKZd_?wHF
z@ETmz<CTlDd%2J2_HY%3D7e!))BpSYK|CR`@0WmrJ*AEF6#l^k(5DwHhr{@>w<6(G
z#v5u8q4Q?a;ER-z{l(0!^PbS2%1=}u1^l+pM5?3#*nQk6R)UUZt>P7)(c-RvNn$Ru
zNg+#(KDHyN*t=t+rA@|$^L{%fSzoc7FkHJ%W<{&XB?jx#8mJ3@SlMZtdcQlMAyC#n
z&enlqRsG4=x0A(G3>6azF!;=VnjBuP+q&9JYZslQOXRZwdaE2aG?~O7N<$V*Gc#V9
zUp{t?={!@4RL)d%KfQ}~!#B^pDQrIbZ~dJws$fq0q!{;%yy)l1+s^A_7u~uBy-gBx
znsmq#0OA@U>d*Vq7@0&*4iKIZ-T}i;YW46-l`)p9&^HybO7hdqr=fP4NGG6*)gm4^
zn}ek75&CIPNN8bn3;xZl^fEIYQnCNeaoh*UVBdCFsG^#Vd?P818`*=Zd1cJ)6uI3P
z0Uo{Xljvq+g~7OPb;=%ix8PGyQzFWBZsV9J%&;J^3F8BV$mu7zRb#bvJsNZ5jbA=n
znLi;kHq0&J{vr^3eRYD2RrsWvmK?4c7vJ&Q^cudf*Pkww402Wg+^j9|#)zHG(@e6}
z#8we*ATX9!krX5M54wtyc!%X#gq)xy*i?BD>Ey01TrplY3Ua$*`MyjG|MTpTop}cG
zjt(9J`tb}L4!Q;Q+pYGa)e+1E!ee69e!pVQ<a?)tv*R2XXHnDoogO)BEXW-+#S{H}
zLGvYhb9b58$s6F_9U8C$^~=xVD-v9ih@D7t-HRZ)_RV(`t*7KFjN+Yo#6I$2X%)ED
zhu1~t$Nq3@&=GNbdFnyauh|`yGb5uAN*&<$+oGp&8wvN&oZhh>nmM`rpoO4kZ0KFn
z8_z`jV7NSefw7fmA9kW33eEVkA=lEsmJIWggptm(T(m#-xVX_fQcuZbk?b0?C~A{1
z2630>+#<Y8sB>lDp9`OHaKkY5=b}0$t~4yb0;lzcF?mr54}KgvofKa;_b;A1=h8xu
z03ss3a)xDi4dlu3@E}yiva74I#ucn691nahFre@Ga(g?RYqQ4JU~97W#K{?FcaP1T
z)?SqHSj7Kvrg0ih=8)tm@3_<TN@uN+Bzv>3&A{Os5xESkR{ksr%raYjwX`$;gkXYP
zP+VsR0|L)`AbFqVX#Xx6la=jxz}=^zaBXv?OTAxwGygE95o_&GMK%NqF(Q^fu{zI%
zyFT~H)#B6(`cYhiR-sq3&k86Tj_YEdf6>~h*-~31nC!|%v{36;U>bv_&?aPM_v|D0
zezsuLcGz1rH~111{IUYlIndo5TK}G)rifJor7FCHE*7+)Otde~B4AGU9B`jTzWr3~
zbE9m)v{~F1TZ@NB_-W$j>#Hq>CYTI{Ads}~#bjN+C2}2P<w~sIx7?b<S_}Uc!DrbM
zAEJ_)6ly3VjF|t-Y;C2O?+<Nb*CY~Y0<KP#O3~qw<^$uCNzuAS`sOMVi4Yqpv9)>B
z5aOoDnlp~iS&-0x?|TVyy6}S5Q4u1_jREtEt8WhgTA>vo<FecX00r=d34nlr41m=L
rfPjDu^CW<PfDGF$fPjDu@bCkGz}*S}3C!*<ax|ck2><{900dcDng)9G

literal 351900
zcmV(%K;pmsH+ooF000E$*0e?hz}52wfPjDuApsTu0001bF7i(Q|B2yhT>v^5%B+TH
z`=|ooorH?HxDBcKbl(%zwkj%05V}X3Q)r6E5U#AcFg!GLltxEVHb2a|s`rcJrUcZ0
z<5?mAzD$|TXh-|Ff!HW0^{`?w?m!-d-ZVaNPfQSEeKdmS0Fy~{doE}>Ynbx_E9mjv
zHExi(X}!bDj;V5icY~+Krp>}3%}Mdb(lwQP*u4`;g6UKPbckHP*Oz5P?a7oQEr#>N
zl-ns`4ee1xcv2g>%GA7zOBTF-REdx>%V9QG7+Y8v#H2G}S5_4n7M65UXK7!2rIIIx
zjOawn#}K`p)#47UF@i5?m~<vc5_?9H70?J(`LuQ+h~n*I*NFpb2Ezx<PnaN<-xbKr
zf`w7x!a*?+vuPADPWfOp44eQHEr-LOr^5J5!wLm_qrenSpC}1j^z0R*C-};A_$^6t
z6FPB)oz%FK8mulS*Dgt|!5`kN7}OXng@RD&H=JMH3R#S|?KQsw(z5aK4v(+q`gv^f
zX#X8yeiqVQwic07NeR#tSpcfnPPdBsK0lQnh`NVr6Yj!{q@LMrfvK3Fr)VO^_>!4m
zMDSo9?f}bp5J76#WW_dd@#M6s_X+$rsYKb+RSpdV%f*g5)7=Nx0vwYdl#opgUOOOj
z?J*%%slfgy=ZuR^z>C)(2kfl96U~FmYD>dGs*PttHm5X9!bwf0T)q$)h8WF199&o!
zeK@0P5+_o_IJaRfNao)2vn8lOawr=4As5p-Le93{H!TM05QfIOk?7C`*<4Z_+k#o1
zT{JrrFwTHa`7|6FeFURVpo<JP6bA8S@s$<!cy#3YoJz}K)}2WI{MraZO!kNjV`1Q=
zAB))vw7nr;*cJSm-HUg!gNQx9UFJZu4o1Z~GAz{+(9&^YO1)A6vZOVJU`=PvqPvp)
zV~iDDQ)yP9Skg13pX$CG7lh@NbvQt8?XctSg;94GSYbZgSRSt=WhJfz4br``QC(a}
zJN7m780D$&-JatTSo6852GD6vbKWmlU&3s~M(_AZnihn!$n3Gp6`eyL3qEqJ(g;CU
zdPHi9a!P}fbEql(t5j96H19j6N)P&ufM~rfgNqHambU02PJ(HR))Nd4RpM#!taj`y
z_H|2F2VS=^!Qq96r1lmZCpAM~1t_p5W#xU+0Ey-V<_8f$YWnSXnY+j}fvc>782~9{
zUjp;Hd=-<3=;`n7)Feu{dh?~C#jB9GB---SqPd|}(kA^@lyP$Y!flF(K>$OI7d;=V
z4yI({#~1@sD9(ViX~mbQd&e~A5ebGue@o|P25^DWx6TK<U42ED_T2OL67v^hQoy>z
zE0`O<-YWbHkpG_81Byn+Ieo~iBX@-GtQk(^5XGH>R&F+3@<{9H3iBS+8Vn`oX%0eG
zTdJoWf<c*@TnYXkH9w%EqFq^dh(;Gv5F2F>XPqJlbu%+jVBPMDukvrRD-eck&CI;B
zo|CUlZ#`fj@yFg8Zx^0wF5`+;F2b~iX>dqV&5#nN;yUJLKl-`@4pnI?&4rSy$U4H4
z*sQTRou<K#r=*1y{d6MtOrVhyK+8OBF`HH|7sf7_7B|oXtFQ6pRQ1Z5EZIdYa`C_6
zGxzi&jN)7FJ=h6w@dHhny7Ly8kqeE>iolZZ_66SnR_Z|c<gEv|`k8tv4tbt(KdV?$
zm3P4Hk>wn(ckOw{_O$^}ujA<ZC3J_9V{xMfH^Vh=eyv_Vk2Sy~<Q$9E?|JVV!vS8g
z24^1wCp`bAgXKB8$;RCHd+Y?TS>mEwJ!11(ou)+PFwjLx$cuWifU-_ZeSve2$STCv
z45Fu*6LOBcLS`7ZqI>(no0OOsloo7yT)qrA5k{~QK=S3RCc5QLPddDN9W0JMF?7(!
z^Sx&1W0v3nehLe3HJceFOL4*Hq!H`v#)lnlix`e-{gJ_~is&75ZtdwEZ=T1@0O@Fc
z0oVRtiY=7jgdXu2u^Y}+H?jiZCgord0PiGZ-}PNHIYNeM+Bf<uV&`6As4?&EK5p-G
zS^b_#U{3t?yc2W9T1gw%pJW<X`cp&Yllpj<W-Jej9W1oUNtPDthA_<J3qM5cSV^;A
zK~wPEt8Km)!X~2qkIKoJa5suABmOP-zob~7R(MR36fT;B#(qmVP6dO8>g-?%`UJsw
zLoQ8CAP@D@%Y5-JWOs+st?=6poZIe_Xrg}7MOrd%G5x`Ga=|<i$A$ze@C)q<kQQ^T
zXqMcYRPv^jYiZHnxQ8N|H-}}q`C;Bc-`|nc@|xu7e3e(l^YALw^MrDyvftgC!UPIi
zbCmG@b~f6euz(GjJ@IM0_~?|!ztM$xUYCPNx~#$>U%B-CBmbhYaBrksY5V~5&4^wF
zSQ86a=!M<6L2#SGYJN)YJK@u0h%qPK+^32IMIex<R=C@tQ$+j(p}OC2hkWp3v5GX%
zvqa-xK<_RVYOS`t+=j)GO{q5?(6Z6?Z+0l=6Sq;(f17u1rs>La`rBPMHu2@W6!P5D
zA_*4usH?cmq2(F!G`Iu=gUe)AfopG5a;)!blS?`VC?Y^TAi$a8;230xIkPgYtFydl
za`5f<PcbN*LuF~}PL5!c8Zy(1)oWECb$41}?Z`Xd>xtK-H8(i=AcD(X=dP7UCw67S
zV_Bz%IbuapzAXZu{zW&4=<1}x0=aRp&nwC0nwpfXVRkzrq831Lu>>)RH;%KcEODa^
z@i1^k=@gH9N1*y7h^v2PeS!p-MsrQ{gNM65Gs+)%GYK}UGungAe3oN^x?$ztS*gtC
z*)=W6=qA9Mm8SJVSYcpUR3?@Yz)NqvLh6Wql=7u`RV5B6UOt%-PdTH!>>M9o<3-Og
znlI#+gxt>gUqyO-Xr53f3aoy==V7Y{mFrkb&d#0Y@XRgh3;2;hC?f5kP@rq^AEpz_
zpC|lp*?M^741Ej~*@tW({X|g<h{qJ@X!N4Pm&xytsU_&LjXRG&CHI#c_8YJK*h@Q(
zca~%p$rXAAme29eXR53piKJDRL@nthUEm+9GlH_&^#-->)}F|+0rtJ?bm%4ZDNKXI
z-_PU^tb}mp)0F6%+{@w~f<^@qz_Gcf2@Vb56F|y#D`qun;}sR4$Cj7qQ0yat8xL9v
zk@uS1+Y^ukZK6t?#k$yo&64wJd7q8=6EE2kXWjz0+1(t7-j-}Gb2r^REy*z96q@Q%
zAPXPGb21poS9YsyH+6TZc%@~dJn;$2xvD#nd+clE>6P9(kPwo)aa$?mN1fEdV%W|p
zP(P&S6Xpn62wzL_={bq+<5{cbDH|8K$`AdM=MlF4mfqR`BLAi_mf|X|WhU8qIrCaV
z4*NSPKFD3Ft%O>&TXWMWveZ9ywH;;ih5w3T;d8}3*hQmkGu_!l4QmI826!Mq*BxDS
zT@%GyPIxa}hw6&_Jg2GrbaJmJMB{1e#yU2~-EO(X+hjYW-rVmfEwk&M4&c?m1_TD(
zUE&goEMz5_YG`3uo5#(n3R2QhX8mJB!w%JYu8%?F7UMRe4#&{T6Y3q;xrtCC8*fzW
z*&fE<D+T<xYw&Xd1Zd(xudQ%rWNrL0JMI$wV;VA34&X{vU&-C;Ao{=D=MUby2OsPZ
zC5PbtcD<{2&8CW=xfyA27{9^CSQC6FpUC*bIsPC%P-^?Q_?K50ZZ-fkGU#fcnm_{P
zdb`PCGkxVxSl$Sw=4|n4PpN3-Bn6@BbzHt@9A_-Q>X8G1%SrIR>ICvz5L$qqEe)cV
zT(Zx1ut7~0-S;^wQHl%J{sRs8#tFU+&&<<QqikfuEhuq#7}2tTMuiv>BB%4_Qp2e7
z_Ow5|S!dms0%qcy=GYKHb{Hq!6AfX8qtk05dJ{TA>Bfy!V(le7=J^&^2C8F_o3Pk0
z9wBo2$i5uOoUwq90_xz`#$Q#)s<=5dYdzfhBjef8-E0df&}g?&rlXt1M52{LlrZF~
z)|&5e3Ga{9ndob8H|33vc~wnI<6X;!2!O|xbj8>4vov7bY}4@ll8fWXHVYFA3bin(
z9RL+NgAlVKwZ|=mV1KAWxK|VfDwd2~0xD=~F=7J-L-+3YLfJ{%8I}>><1IPV`pHl*
z%Q;sb+h1XC$Y`>QZk0UEvL?Lj0gVnZq_AQ9yq(L|4d<1hL4OV%(KhRAO2g_$7M}kH
z)u|);n}Z<vFH0`NnN^gBat@t*y>1kvWqrQ>I_c_@Kl_cjh$S(fB1b@Q2GO=JQHi%Q
z)0P)mOzT*G{J29hdbtyM+b-VJ)b9bauE`5zpJ)T~OT{sV(^+b-P$FitDmLg1OsX&m
zU#)Ht$4x#hAKRvMoeQZPX1*LM4xZP1#@Ny3d?=B0!;zB9J(<{|Rc-YZVX$Ze_Ij@~
zwGGqzeGg+ePayx_Jt6z(UDWU<_3SX!i^FM4J4k{bstaEc4!~K`|Dq;oA<JjVI0FW%
zHq`>}*!lK=X}<n$yHmgHpJ22R9qEWXjIaQ{4g;+!2DIeJU&?`lf+mta*lY9~>$?-1
z6|&!aDEmpnc=%>`_mN6Fo&tB7VaLW*a05=i?+0-0E~{z5SF<*1_rcVo&CC7M=@74E
zs;D5_FTP%$xAoh*Rt6smn-}yR0!2{wXYptEywtD5M5f`FG@9X07T~sH>>2S{exonn
zMr9c8>)*4T@-Low0YKJ|gXBq9*8Tt?+=8^y<Kv4U`h5s0?XZ-B_ux>Zn|1re2_g_7
zFykfhqal9kCt~dri!{=7w{I4hXe&GiWyf1SuS=j|4oEAN*w26wKTJ5*N9N_IK_`&V
z_^DC|3@ZMg@=Hy#KKQ%w53_fr4PKU3EDxCQs`O<N%5*;RRDWH3>dVBIs%wXIVuK~d
zoPwWjvB0p$`c~_cvr;*t$7)WtxxwcJvf=>fp)Cq1bOeg^u;T-LJ9Y!*u~}j7GD@98
z>v<WL1rPe~5%IrU{>CqeK&$H+PXj>Hpemfb7%yt$Di%nOF?{kkgvPW}lwqi=q@Rc(
zDYB`g5FgvF^|a6;2eeUL5W;c<S1Bck(FDo#P^slTVoR}MfBe7zSoQjkWFKeg4g<T9
z0MC=lknw;`2JFFXhaHEllp;{=p&oVD(rBgyQ7w4_h)$CotEiR(72flHpALpOT-h=$
zGcj5)z8T=mDuj;H0T!8@2dx?PG>4<nf1ZK5THu=lMc-Kc5!zvb5Y5U~6D3{?g2)8X
zRp6^)&;Ni@e0f?CFsW$S5y=>a9Kz20b#LV-8iq6a7nbit?Dj`!c_=cXux+vMJmeLL
zf~^9RmsYh;zA@FoGn!-mmX4=1t)SXVn(OCf1th^wiz2h(-aQe=2YKm`<rW;;YQ1XN
z0;K|Jaqnux!RecQjJYCEDYKfxP3mWghEEF$YB@_Tr#{03##S$omup52ihka>fRINN
zehHvXv?Z_khg(uSfk*yAQsq~nc)>a@*AdQqr36<HBEaMuOoP3u#|{iJl1642tl!|L
z{;s)?c{{zkcDdZ>iI;k;r!6^K;w3kcE)J*Is)h1TAMRTTot?x#(C}FP&LtLsBhTqq
z-=N~Dk54;<gsWRFYg(|Ov&P?9oWrU}#J-QlXnQ^f>E*!Ud9k<7CN8_zd-iL+#@J+y
ziH%s3A~RN^(}sZ-dW_l7OXwFJZEe|ff8YZ*I{O-xkT_ZZx*LQ>NT%ky;M{<-s__N;
z1CZhLOTF1{RNv>>UyzZ@)0P|=<|~o>H6lW;^is1ElqBANMBAo(je!hUZjw3rgL3(-
z*arT~GUXtTvKc*FV@0iOPh4*}$bIw>?<567$SzLmS4EKo)&CoQM!XqI$JzF3FIzm&
zE?422t~CZtV&#y(nxAy<1}1_Zp7$i>PuZc0r4l~Gko*z`8t^M#BaXkO`=L6bunox0
z^e_{(EtGWwc;<4UFZueOhW7Dm9q8xJD3b8dfJ^4q=sjW3Me}zA%ixHWyZ+B<A<P6^
zxj1ZMFf0E#%Ry~n%pE-4p{2B65<p1#hV#SQHP!>1xObWhl>9eo;fPx9FvOq?Ct$)1
z6|N`FjMF21$E4{-;5B9Vwb#siZqss=#x#ypDm>(Zon!At5)3R@@%C|mfSK`~tn74U
zqj9Ry2CgiVzE5gm$5zm@yO26#T$comOy*iy0Y6YEV??r!@uwplc31b35cCvH-Zi4T
zenCra#iRCq08{^JfX#}Z@O6uchajs|lrsKNh2wY1!=L&LV~|%MB_D7_<Bjs0roild
z)+jjGZWen^QIgp<mtl?)K|qCNxE@U>*z@(L<!eA9OWvwm2>dqMZ8T@h-tOGPxO<@7
zMDu=sbko>TH@KXtHf6_glEib*<4vAv>}8OnWB<NiiB+v3(fPM<nV0~W5zT43LQA>0
zTjeH)8*SyJcfm!5pm4d6ZQ28EQVH-#(aFX{ax0*2Fv-OIHVlMSwwm7{tKGGCz$qO2
zyaw6K+yQj4>>I<-!V^o6L2J6IssZ}_n<6$GL2&h@0MiO}_!`b2FpHJzS28(2+5(Lj
z30xUDRc>RQbdH*HRE<2(Ho|p(OBd$qSL{E_-B7d<qfoR?Hv}zsPNH(!X&0HRKgVZ9
zUS~YfQnS_PEscZ&3ed!!9<McOTCvZJ48(WJ3VG})qpYN1?o3&g!y*+JT>~W_>)Qcv
zlXtAVh$_=bQn@wl6|I1gz2qaL;COj=V;tW5C;%dtbns03j+|D1t;W?4`HJt5Wj=TT
za=l|+)D5T;oHIp)m%w=n`Z0(PTNBWm!~70@7gIS$9-C|F1%wX5h_!FKqmFhLG9540
zvQRY#aLUm*+%atLG(rp{R59F6gu_hF*ET*;<%I+`p^lGx_B;)ng6lhA!V6zXI7OfV
zE5e^|2f&uK7F=ta{i!1rpMvCEQG*eAo`y{|&T7EnjeQ*!J2hvC<`#t<gg79|hPP?`
zjE>GJW@nCBUl@gq7Hjj~C<2wOz<mlM)9-Q308&5rU<0iCRPA7XTr^k|c<Fn|v5(dS
zdr&qOx--CFHz4If1I%3*Ak0-a`HAi89UxZY@a5lX1h2jWulAkOP5B&lZ3z4n^kmH6
zeDD7Uuf45J+CU7?!+z?{8|?J#BHA+)pc;7ZoPh#Af{IPJEbo3El_hoX28lKwK1<_s
zt=|`Y^$@%62tytPB!NW35338^Iaf=|E#VY0Xeoc3vh*!TzB*POcv$6%?u{o6)=-x2
zj&#Ue0E^NHjwnfmMptNT33a?kydh8omhr}XV8WhG&~KwUxS)Trwt0!0mpkK15hy!R
z)qQ^mvQKKnA)ZLVe2%-x<0*R3|8m0`3n|@?6o3Le!0K9LpTv1yD`}F6s61~lg@|(R
z1-h^^P*Cb-c7Ra+q$#Ac=F;+RxLV-WRrR7;Zu;cvL`RIT3*oSCy+N|GVoW`F7fX68
zI)IP2Z7!SXHlAb9Oc*`=Bxpj+Rgj%QJb<-ms9skDk#pCfU=%8&-pB{F-1QJ@MxqgT
zCb8J6Nm`h=rCy7n!7z6lhzbI2{I1}i$dWz716TFb_WEcjq{rN2`bS&(YuM4ref%=M
z`hM#pmb*zO^1|4I@2?_KBbb%i=mj0a2J)HCjjSq-dI;2QS08qJ0Iwavc+~9)Df7I@
z>vYw{agm&(k5ej@0GR;BD3Pa2(j+ToEvrGeC%Jg1x4SG0Uz_$1kp!T>z>Y;7ags0%
z{!Mu;h{gUH0*7Aw;AB{>fY~C?$W+Xa>PQRWi}w<3Bf{wP2OVdc;kqlRI}v~UsxqYu
z@RSBFhmK^Dc+oN5JyDT6>aI~ceC=E?KKX(Pe7Hl35@>yc72uQ1i6I!dmFl~zVCXDg
z$=P+M^~-kMI2TzNR&&2oio-itBjr|0f<K6GO9uwbCo{i{izTYlpM{l|8d&9}1L9Oe
zIjm_LMP-Z57)P#Lf&vx2dSm>^{_%YzA=^&-bYm<Xk6lmS=j|OqgeMks@RD}<3)+hp
z>0l{Cy4IsC!3BjTCIhZ`lLUsx6eJ$YQX)T|91*M@1ySoBFwUZFvV*Zsg$sVayDULx
zmiY;aT3pk|Ktf-O`g)DbocBOB9L_2Hen@R>=3xlQI-LkQ$PDe6@8TD`u#L7jx-A&t
zrWpA|=FAPOg9mWjdc{{1Jks&+w5BCDOukm2g%TPF=h?C0OsL{$9@mmUwafiUXX+Fr
zB0@|lBkJg@G4+lmm(I`tlsj8k6Nt^%1ijm18$BtM(hj(J(G}1xO3xRvF}-Fnqam=d
z3zN=1?Y|{ru^(&A`_h=#_;P2Bu_Ht@J*c{f*&;~xF?dmshoK1r$9a@V!9X{^C_WpK
zR4vP0ol)BODTG@YQfAd}SO|JM)NOO%`?w=;iqk;x#$>k$`xg#O`kst!^wrhXZY~p|
zWrrOC0oW0P*9o)aJ~;doj8`d=Xz4dB{f=4!Pv$OXFzP~`eoV3?i>tR7e3)>x905y+
zV)c;)O1J4?5KUNBC$GT}8%YiJ61X-d71%r2aRJ}jmOXIu@KZ{*CW|p<0#a@aUzcqT
zyP6an$l51l#S31I0BkX;TdU8C;bLC&m&BVnB$B5nFFQqryOL6jJG`RG7eybLOcNI6
z6ZiM!@fKOuxo~i=Taa&xO;Z-sc(@Dz@Ppl`PoI~cy(b>R7DXwXial8@N2wjv=Gw4t
z{M*XJ>aH}0!n7964@W@lPE`8;KQOJj*Abe`uj?cX<T}r$v0jAk%(a9A$$&8O+q5xl
z4GhD$X;(sYVJ3<MD3xQzcX{a4*2#QbTu$otxlDaiA@R%`{e^9sal1xICI!gCNY+yy
zvH#~Gpx2{X!zoJlo)bvNf+_l8GwV7KpRYZWaX@!o2?~%{XlBJS@JC$IC3Uk=mf}6p
z0r>xk#CyfhTo+*V0x$fuMK}ao2*aQhUv;<3Ceyu2KildY?{6c*a7pTiQ7?r?d&8#s
zEI~#E3|_sccKk>*C8D0g8ov;y6WYe@9J_D0C-UwI&LdZo>q4mzwQLM|IqqV|W_3&|
zbCBl7lQa}QFna=t2l7FICdl@kazktu5_DH;m!lInwJX&hbW4Xap$g&)EytGV!sGt@
zN=~fA_Uwy49B3oT<r<ui>ec^GX47cIz<iAF=`Mvzu(3((-USPhJ{!eU+-L)6m$OD_
z!@;&ArVvY&l>=3;4&wYE+%>zdF2OYe?X9G5bPsi8U{{Cxp`9KyxRX{6TT{J=wg~Zh
zd8811>tI$A6-M&Zb$#dSJs51h<-c5NEGwDp+2cj=XO2<LnfwVO|AqizV9)SSr}uKs
zX{}GKZ@^$01|?YkACqM8wm>A`mc+I4bHPUoqDyzpzR<hiZTFgED<4ng@SRoVR<=D1
z?B5@&lFKGy;}`oWCY`d|yLGAu-Gmwk)kEA*i-u2u6$C+QC0#-<ZFkh6+%p)$jsrD!
zxw-#_j$b9J)`OFCD0#Q-ZUpS>A-|c#-l`hi=B;Uu#YM~dX#s7(f6up~xw7X(mzc97
zj!7zHoA5%b<QaNzH~N5XR1?OE%Lnr?UP*%X^Csth1iG^oo#1$1$#6;J<aKc3<XDFR
zb#1|)aZ{`G;Enk!>UqEjNGE$+>b9W?C<;C-9HH=VHpXJ06z+zg?@}FJ5`oXw;ni6s
zN&Fox_=2u(H=X^=DN7X8-;4$N0k70}5&L#JMPCu$igH+p4o7C|KpoA9i$ME!-Rw?&
zG$TqHH>;nkl-ajaYy1#@3`+mGnr|IGEc#6CH{e+vrS*=ct>0}uL8?Gu)1$Z2_PDQ!
zQVS$pf?9TC|DOC#a8T+J`Pn#<z}z8)!NGCUXnMWq4~3n|{4m<~mKA2wEgokC7iL&s
zH0zE!`2xURjkF#vuOILr_ir4xab0BRaByvsIn)=KFzuxR75{IRalY7>1C201#|1(C
z);C|D@$9B@1d#wRb`_oQxD;R3Y3Dr-8fh#D@NM*m=}nT^M=T+%NJGBCY@M;Pb|Fcm
z=627<BL1WQa67(wQSiy&3eOh@9&gdSt8AK!^77VZ1|?|@G{5FmQfI3df&r2d4{^EE
z;fN(hOxZcw-0bEs(XV>KR1D^AHD?~8em;@uO=&pI$B=%#?C{mbeg+fz{A!dJNmmQV
z(nMe&(T1|JKyGsuxRV&sataKKg$nv9n9pWG1uEcclC_vEV$JcF--`aQums8z5r??X
zFr+S6WS9DBCFs^@p~dJ@BQ))JOVK#b^fk@F34C2~R%?+u_UFOswtgU>gR%YR1YD_>
zGDK%WXLwtx_05mVSo=0GcvRTtbH9VYxav$LZ;L7BiA%@!0gV^Hw3fUjC$TF6QY47+
zz;s|GLd>t~GgKbiO|z%Kc>?^TMY}&s@|;lrUiahJxA`y_-<(>nxm!>y7^~+dmN9tw
z?S;!t8!#L3EB@|85hn=g_4l`Nh}j$e+w&(wli>;&1&okOpA9t3)GATDbRd2w7Ods{
z53k@UPHw$VEfj@ekkQ*NiudZ;;`xw$S(3RZ`Z^Wksp`$S?%40=^Zrz*fylRx@7U;}
z8*q(gc0mnSjX-J0@p>HZRzeKf66lX0je=^Tx?0tM<gNtTybjC>Ky~J89M}6;(zG@W
zK?)xnPQcg-V_S?$3yjtzvvov#3pGt%_OHjy`TS#Q0D4}~fBI*-Mo|oC2SGbEXC?6r
zym2v1nngT0gT)A%i+^OwEFRiK`q3qZMUxkVJJjSzG|sRq0WD(SF^SL0RRsi0Q_Oo*
zG&`gs`ET52hzA?DQB7KkEO=FNI(zBiH(Efg8^uLHCU$0m43IyEqTw6w?{E7aqQhOh
zbY3Vo2O;na_?z&Iq<HO4?ppVEC!q_}h0{RxNi|KW)y2KWY#sByu2gV+#R5#EyaKdm
zEEqPAUgra0sdg@-hG+L;ltm;rUvz7|$96hxU!HHRINAqu7CqA0caHVUgEY$lAaosy
z&#^&DIBjF?Uj+J(^-TLImXKC2$62%oxL6m+$OI12(4nx;g0&lRD#^e^><Fw=Z;L6@
zDoO5cGoAyz6s4a7Q=N{Q)jOdF)Vp}Ba@!97RZ}WhEjNjJ+)YFt6NPFw6?4I#AfcH%
zA${CxAx+hH^Fs^1d%3xtUV?Gf>7tl32;EUO!1CC54+yjpFLTJZ*9FLsMGq(19>`fo
zpeo*Yr|&jJGT^$^b5?NfCJ;&VwXCY;5WwMXFGDTJT0?+l#)axfA%oHY9E`}V*nBiN
z%$WPrLu+P`Q7^;_^2oUU8>Vj`zgEBaw<>1E<)kPv<|d3yb7wXQC@K=mlff?1o@**(
z`vov5mH-0{t`+|iZG%g)WzKh>e-Tv?p-^N1YG|vmSi@DMkF%i5HSDTi)>1`vu}Brn
zWh6rr3Zpgwh^~Ze7u#rYG;OU<JU#fO5~dm;2nn*gI8ipsNN}A$d@!KmHln4qsI3KE
zD_~Tr;hco%kfo3YD*zQIoU?`UF3xX$_@ec-%1yUdL5Y8}POsB{t8nytQ)ZT|d}S7-
zN-+ND+9_VCQJFXdkpR=NC5#LvJoN)`CpAuzK0K)Bsy?E{FZ}V*%tQp+x66k{SY6&f
znbx#}7u=6TKrqZKhA6LLBZPV&9b5NnY85+b6)0jNd5u#7VQ{XNsB2Fj+Mg;LjwfB;
zohVOXgzVCOt+h0l+T3pJ+O4Ub7$d@Gxu~x0+8X30TZn0#nQi!t0qkvnvQ!BTL5yFQ
zy*FYnYElYB{Le8wx^}K~e9rny25;UNTkq)Yd|y#m+KZynV(>`i*LfH|A9kv4Q!sXT
zXhB@+<0k5Y0=s!j<oaSIPR-5^8LRbcts0BpI2mrf81alWIm|`)Czw5xV*0{%5_bIh
zb%cmHYM9EEVI>oMqZP+?rrmyOF3Qa$&iE0W1XuYsE<cJFO7N;S4`bMbsqa`SFf5xQ
zN%a#^h%0Y|v?5IpUl&7hX<j|=Tbi4If89%+Wf2%LPkAV3SMjn~=?#e~ay~o*QhG)5
zh84|4*ju6O2K1~1sLoJO1|@i!=CoEye&?5$;OnNI)XnMG1QJdA1_?j>)@6Fg&hXN6
zgg`o;>&`EWY(b1lOB$18*Tk*QA2<+E`xfuSxJsbC9PSv8HaWnZ-!<N1ke1Gw#SHT+
zeB>5P1=oqROR>uSP`Kdk!Kj*y)N!;8rR(hQ&psh2c@Azs3HjI)ebB_QTe_Q^Y+FZ9
zf1)ZzT^$xqzHS*u2RK6P#mC1lz1&NZ062TCBIpyyEzJ#QomKQ@;<6j;%!X)GYWR+j
zH!h&|VK}D7_tg@{w9xeiin$iQ3p2mywe=N2$9Wpime&x|X>fHshL*-|6U${NbP{<p
z@XB7aSck@D6U!rg5LMuDvz7hryXL{U6mmiyKnXNWsq=G~qNbqajwde;W86_s2*A>P
z_r>gbRrV-*bi9ZNvO7?8qE2Rx3Xz4>o6?0$O)OkP1+j)aPS;60I{}Agem|~&oQfZF
zT>1_+x@EI)qS3J76gtv@4qL^543f6tc%zFg6fB@2QPb2+oKE<ObMqDPT-Y5_?#!tE
zyQ`+!9%N?`kG}4y9&Swnggkh=blw7vO%=I!qC)L`l2!XBnpvm8a{#aVQcMIncDT_?
zOF+pFdNmma5JW?T7Sf)rh^H}msj6c9U5c`Kbn6cC;9-Qy{+2$!expj1IzXbt+!w`V
zq(M<|%RFAQjfc_*fbH+xdYmua46B!5c!gZ~x=xYC9=wEgH5tjuM%i@yWM9=>MWuIg
zm+z(z5CpT(r-yBU9UnRGdyVUg%6lQ#K0!iYxM{I7b8+X|#c{0vf)o`$NSC8*@aPuQ
z@9lm=OQCM928M8Uq)J`Dy|W{%hCKe)j$Pm2b9?1l8nhAN8C|rxMq*tvQ_6YEx(<d&
zp(*#N&!}R;h|JO|f{fue_RUX$mnm&FH>L`lUN70@8gii*>8m^wS6BoPEU`@N={Ewf
zcC8_nK;#Q%UcoPo9EOU>Li`gA6^<%<0W*6MM++Kg1gMo5jJ=2y>cU_J|7PodwiL&b
z#YWq-CVeE_rGok-r86p*(&?l3YHwXU)jid;c0}QJ2UJOXLR~x<I%I=PLw*UslH(z>
zM3HW)*k7y$<L)7`?A8Gy0m?3`&r#YK+QRVAyYyV`StRl+H(o^RZs6t*?yK76sx#_~
zM&{9lGG#F{Hb_2NJKdK!<&p$<<%@l)_VQ1%K6N}-EchX-p_yy<wqn8G>;9Ti8kr>#
zZEe1`k%+{JLy1uVe|ng1uAF4UVbwEO^r;pOZ;a+2p77PM)>p+!dcDq}?Z7NSlaRhF
z!sGLNIrh!{bxpE{%{Yx&EtJQ)%Jmu0q<YW7rK+c{AHDev7>2i;r87AWj2rHfv7cg+
z1mAeb0<cI6wHWLVRz}>nV~e!|VCis_u3P_f7G%rs%qpO{O*p*1$c?l49P^P~or6;s
zjhQKd*%vso!ZED07NpF_jS(%EG?%2?Ikbgq1xP$G<UoWThL`m%vZb8XE3zkI)AlEz
z^VBkk+>ZhM{le6ipDE#cd#8<$2lar%@dn<b){gTK*G7rPN!@TpLtl7+B@qv7NN;C6
z4;|H!-@2L&9ma-$?Jl+?$?<vazbGRs%j2a7B!~*Z86EXA6(f?*Gw69ulrFNIZo>)Q
z3svPN`6SiTD~XyJm2dmt<pOSY<CdA22Ql-^<%^MZdJ&TsLMUm7jOM{7$6unvmZP|g
z_cN4uov)lD{H|<0zWl!eew7RC{T})9eX91-dkRQIWj;!rtoYc#%3Y$o&ZsSw0V5Ax
z-sfIf`v!@LUsiL1o%f^5Ckl{5xfD@@c5gV~zQrrQ5ycwy80B~uWV!;6x`*z<ubjwW
zu32&+LHrc)fwx54NIgrVX)Y#MtQfGo6Mjjvs0Pd>yum&06aaIIyfuh=@wgw~deo%{
zi-ZH*@K`yi?R<Qd4+(`tAL~v9#YZi0MOTkh`hMQoZ%pjq(kA`dTX~P^URyzo3LN?9
z{=jd~FvX>ql9QBZgptp69)xl!yvM~Ec;@Mr-y=h+jpxyU#3}p<nV#`!`Z{{bl$obV
z{J9s6ka!0f{hSvF+zxHLLevTr1E^mXdp_-1BGZ7(;5egS5S@_gVHIs-%%*;MA_Dbk
zF)DBkXY1v(3b_!iJgG&5ilp0yjD#(8ctmm0>tSH8q)k`>;ID68s1>sk9-+_qP-~h=
z#JAWl>Vr=WVpNqY6SzzSx-E%@iai(p=pS1i2#P9$n3Hl7=$3drIBEsz3NupWf{!0F
z9BDObBezeOEY{jpqv_JeBz|Gvw86u~1UFYeFsOW_!EWLBdYc-#eW^t=A*eL$1vh1R
z;En--Hj%x12oIS*20bEXeEQ*sWvXZJTq7O@ZI(Ng2uQ?K4T+5VT}xwk!uZ5~a81tR
zIVHIJy{w`69=qHIfqAm<0;27aD_hu4%;-`}s>R>6wn?cD*_}3sA-*9qLJ(IW8PB|<
zshGvzZyZ3nM|gELXSj3je*4FjRm0q2@{n}vVc~M=lb=<w(%Rr7>u4cqF$7fO<+9YW
zXy>tiHVZ>f`u;i#sl9L!*BcQ54{uf|`bW?|_xQ5IcL5KfjRI$6YIErx7+NQ<!MMF(
z2=xZEd`YZ+WzEx&ChUVLxD;=|lK-r7m8o`4Mn&C`%Ttq3<}@3P#Ru%6*gfoMfDt{G
z4bnF8Ql%}du7!vWc1l_!GF*b4F@V%a9ReHVKr{YuZq!{<C9yaAA$GQQhxFH9(*bm=
zg2fo})f}b0yHA3C*p|HR%ao!KCHZ30+^dI)UHs@Tt~PY<Po}qSmIirwoaS+Hm9{VX
z#p6<GL_QVg{*bA1d4RBE$>c)2pNBGwf(VrLr2q^Jl75BxSc0h?ZLivYQmTne;k2(7
zc!u?*z!($n5}lVNFHzE+Uu;NtGHzoUEs&_+MD_|<7rA9O-U6=?gF2&WOOAlVQ#NFR
zpX}fruJyWktBPvj#?Kae^wc3)@M6=2p5S7jB_#hv0?Q63^CkS+<PXU;gCO#>?>@&9
zj>=fi9j6Kf=Jkp>#O1Mr>cSL(MVtmi_lDmV7_)EA+?iq-G%L@-?Z>0?VBEnhH@1}|
zClFPwvqmhJ>m>XpjNNu>E%yvhE7j%w>H4QUJ}{|ev$;@IB0E0fXQ3`zwG6lS)Q!6u
z#?W9{@CW0Pf1+6D!6tnwSQ~-($4J-8(m0BkIj(aYUi&=Y^PEO=XEs%!a?9^eCo^PH
zX(Dlfy!Y}m;p@;lT*K?cCxA*IN@DZEiNM79dk`dwJrM8{dskTl5Gt%UpU06_*qRAJ
zmG;usS|=JwRHl01<o68E#PV==avZ8?EdR!BW_&4qe0DHwGlP#v4^z2nV$eE9xBVV)
zyJP*{-79xPCwp?$*xebyxv+*v7Wq5(B;X=r(N^4#6mc-jw#?c(A%3bMKpPdPV$Nvx
zHJa+XwO|v*>GCfIb?v^OlS|si;<LUP-slcIdG<MG(mMROGmmozlp7qn0chAbpv-i0
zF$NXyyEd@`$8}{XM}Hi1B5n&%(5V%inOKsBuQLm8)<uGwFI~Sm_P=UXZ7mUhbYBzv
zpxiCKhxZgIi?f4MAJF*^mJq_7PaHrt-$ENHUPYY>C*q@v!qJ+9F%>{Y*1f-{vSxEd
z^_XYf_$a|3nmO}PhdlS-ZK_P1`A9>8hNOvp!BC)}aQbY3#AVHj==d2e&i~96OWoqJ
z>WENbb|qdd12v})0J}QVef{I4ngRFj=eGoQY^=eXuFU(O0@QzL*75C1Kxlnquvxo_
z#t3Xr-vf$PARZZJM`4mld3JMJj*@#7=AT9H#{~e@I-^SuvnyEvME?r}d)AK0idZP#
zlEEO2mE_z|hI~sUpLn(JuGBwE9S$6OXRvM=xxI}}c4vF=7Bk8w-;!}^Ppt?vNFSVJ
zd8cD}Q5n5|bd>g_npG2?p_?`pr<u1Tnlt;1EK`#V(Y2IVr|-mUEfj1_KDWm34&<Po
z4Hv$3VQ53=Q7ez#@atgOqeM;1(Ygd^ma7it`5W;cR35TEdelaI@U68k%DCStyQ7<x
zPJ7=zVC84J)y>Nc*~U}<4FdOI4ClKQsC_w?8du||nuxDiHQ--pmj;=}#3T4nDWTsH
zhrFB9yA8IGNMZh)Tcq_&LeCciw1?CwqnkfPJcH#mG}<ZdO4KIXv{0jC9{EADAcH8Z
z0BhVvs<E{mik_nh2m|aU)k>5};T9HAOu+gX@G@qng~@#x!F0sX!BQ(kJx}^A?zZGj
zjs|qjST^H)sS>)6o-D03hCY@#mPfE^&v@rZUGMG+N+RN-2Dph2LNDivs2*xakhfz;
zNeUmK3bjVJDeU8Iw~LE#*Yf%7kx|?Yy`bA4oG)9sCW3CWv0YurXvL#KC<+dL&G33*
zziBNYlp_MzdsWjF2U!dEs>J<7`ZWL}Hi%#_xd<t%e6Z)FD_^97=Xm!B{OQ^-oH+mC
zszTXh(SWBf<ZvgqQkU9=uwa2L9Ja~nj8?R}K$-xT0VnPF0uNmn<2UxRn0zVd(8jI=
z=TO~6m;iiHFp`X=>L+C7VHA2Eo>OYPfI|~z&j6dV;R`@T!pKh=T4PM**g6lzAwys_
zd-bz52(lUf_o7QZ0DOK%$6n`6o7WmqnThi6_>0)2uXLy|A#iUjKIM)c6>v$Q9db9S
zE|?P|h$I$bSJUklfzxTDUxO4vZAA$2p7a@7`!19pC?8o44&ji1sfar%_{Oira57zc
zW$c{kzac}*Fp4DtxGdG$2-|8_-_9~#YHCkC+Wb$x`YAcvODe-x;EXi|Ym2{`!CpvG
zt*Pd$V|dq{>d_0&Sar!-)Avg~|KFh!LqgVAT+s`X%9n4v2pMA2h5S?`jWAVXC6F?y
zB)&_K2L9X^@sZ-rA(Qg}i=2kS-XtGyf6#Reu5UBkShgSV?5axX?+_~_RwEO3werPW
zJDln1dX0UE->}A~w*e^1kTDyI=ef#ISwaad$c@M@I)cbQ@_s)CVy~0N6o#69;87Bu
z5uJZRU1Guz;r!$$(_cf)y9Oqzb3(%g`AV>OSry-+&jG!6nmG^HOaFFU6<`p!j?n3#
zzF#e1Pt9<xW#|MxAf8@|tr=>hpJJkE9{`oG>ovJ{-n2$7;HDt}K)X?O=WfE{{h_a!
z3!rKHTTaaS8~b7jj+Kp7>vBVdX(X?<y~mqYE)|NSmmkntc#9<CAY)9EHz68Qp<CkV
z6+&qgOk)baizzLG!;lyVM^iO1oRi{cHQ(Y$iWZk(tY_090iZvRyXz~#(PSA``9;`K
zM+AxQdiL522UGEGY5YSjzrLQZ`2vb7k*24;qd0qFV~+`JEDjxKT@N|si{c!76r1Q9
zM9vgjAXq7nP8tfATZEWQ*+$Z}2h@ef2vwF6Y6p9C`6`Z2$<exhg|~zNDB@vJdK66F
zXa|8|5>;v(^)Tym(~&|s6RwL_K|d!2Hkm=4R9r~j`@z}}H)<x3?gk+`gOLrO#5(f%
zKMP{Gu+M@k%Rj-0m2od1(2O!$7L|)FA6<yh+w%s;xJ_?IIkLVSeW0)-W$wxxH5399
z^~7@RM4eL!0%oua0Py(7S^~Z;KPOkhwHrhqo%CZ6{N#{@JsGwpgTs#$`^ytmw>H)s
zvdx{f?3rCZoDb033A77u3&p1rZ|x1*Nrgwy?VT=8mGRLva@H|iY+p>??nw|CAbbUZ
zAv^vw!TTjL`<+CT+dHpOI>1|Zym8{Bvg8A4p_-Dk$6}Wqj5g#)&rF0U@RXpl={XAb
za`nq}lqT^8&D+>2&`y!<^Zjkr$&4ej75jRqY5;DHh3IYcJJfC3R*lP9>$jB5?F?3u
zq#FtumG`zT$8Bo?Ba<@!O+i6)c=1_PW<~j<wvD+rPzzT4=Y#62E(u(?@t098hf#*8
zXLJtFYpn5^Yc09f2na?6J|*V8%#)S<1Nw8Mk^BBfm6gTf1nv2rnN%>}zLrD48q0Xo
z%t`iCSRi0||D3TKWM&appC3i)DSfwC)jYEbMD_d*dG%pgGkbCJ20$!LB2L?C6#;?X
z;gs_?ULVkdDbgw<q=8ne%*58qJiS9YW^}CmhO1f2RNCoumyc1j_832l#S<~WN$}<l
z+%mnjQ>HwNhyG@%Z2f%=<Z%3r(9`n+*_kXw*$^M0*?nr(1lQ58y1nkbANT2d6)SjP
zT0}W01Xv7C>6daz$|Q>ZhT;kMy|unLg|?oD-Z8Ld_2394bHR=8Ia`!)KFOZ(b3*MP
z^oDnK4n){`{<xF9%bYDp!omI_<}D#~MNZm@@Y7khwO-)LAIlMe;iniY(@g-b{OU6Y
zwg)V($e8j1D&n+R&qtUVtYkWVnfkKvp79R9W{qZ^#wFNg2L7?2d?_`yzI=6Z;z0-i
zW1wVTi4qhc;4hK&lEBeBD=ryBH=0+gtWT396sFqsU6_7a-)Jb{vopH6M54lEQ~)ZK
zm}=Y0#feTe<y^Q3{&0TEsKx+4yI3Lt%rt-ps?%bhu%99OY2SYOck7K>^>QMko6>gd
zoa3*6P(c(>gQ^h#X|*kyaF`6R+Xv`P-Ho5*8s@i__l$6uhOe%>#JDy_vjkRzz(Hi_
zutYh0v0|C$(RhcnFDvLzTqm@da|>Dg|6Xl+$7EA+5yN#Li^33Xz4s-hjhMM0qWDj;
za>iMgtW!0XM;)dwE1W~&@M^b^o<X%-WnFF3DFV298AV;*>*#tlGoe${L>_7s7olFk
zyGXc*uzsa(42uqIQ3uTqT=+*i0lB7La7Cv38zcY?Lvd!(XYLuSgTC^kM=ztd^rKZT
zUGo9Nkr~$a{*~<9dU~mPjYmg(x6U$#I3OQ}9*=z;yToCV7wO8;hHZiXVU92pU)V=b
z3-9ax`+Ght{mnZ>*W#qmassCJ3pE{Bb08;#PYkFLn=x}9I)Py3ywg{O!fb5a<vg13
z{I!MayTUq};5PBZ8&&CGoy+u1KRGyY;XxzLi9)&V#pG+SUpoi@{0mLyH6S~3539Cm
zQU{&O7LWnobRjP$p#5X6hVj})%n?fJ4Dn*&?$739_Es0r&PYolgfC_)1sM?{$`Keq
zagTJDUAxoxrYVlQZ{vRl6klREmOpK-FUe}cVLIIk8bkktlT@bT>ww69>xGGku1MY5
z*)h|Jhx%nioELtmE-hw2OaiU|DtH5!)5~umtm;n%z!Eb1d{O$Vrn!y)XqUK8CG)xL
z`@b+RHZ7qDq|cJg>-$~eO<xhZyDyafli92bu-x?{pU6{heJx)jgyS~$S3?t1S?m2P
z1=(Huv4Ed@FhM!%f{B*}uiDX7oklLm|CCTV_~X^L<Ashvu<m1rWHcYHw)WI@GihUV
znK97^c2F7+NG%-~EQwG~D%raPKRsX9wlRq6)TV_2IDCGA7hdSiH{D)BGLeBxbf2wR
zGR{{P|88Dij3iK%@SpY~E31O)=j`cCk(<?1Kn5%TJ|fTBbMUJ@5hySX9W;hjMqGQ0
zSvyMW*Lcg8WbIq$L-)In3pTbpw)kihs=4~L1Kojd=|@NSzvd9(`Wf3<%K02+ks2-N
zg=Rn#i1^NM_DLlsn5y5aGi*^i6G|rAg^{<$;En&|tNRXe33+)^0VWK4-tP82l+hUr
z!=31Jgl_%+CTi}DJH{|&?A;sT!VvWUlvI7W((SwphvTx?9IU(vigUX40_s~_^SXEf
zAFTPeG+DR${0}#mn)p3_Z@EbZ;fjDIiMZ5lx+;7eA1`*t`m{XX3GC~XPtbfm$w>_y
z;SC=?ra~ysZnc>dc1$!~cSs|PYtQC(1V8)cKsz%VFcQPt;a6Nym=UzoF)j_o+9mkN
z1vk;SFq>4yt$G1qF~duNjOs4Vnb>zk<nv@!3Z>1ju_@ox8_}DZ3QLx1;5jCLhLJ?q
zQu}+N@a!`Cv0<@ca{KE`z>v`y_cDHu9*n1xN0--*QIPI@=6>JKwzdI7`>Oz`PD3#{
z$r)FT=>U_t5=-9OqR-I*d9ACEm~nrfRVMc6jP*z+H%5bY*i1UuYSpbM*gUFUKafuo
z|BRVQquvZkt|a1uMB58Z*;*9&FC2(+T3vV$s5^@<DfZ5o)L$EhooR`?fqaD2xxyy8
zYozS(E&6bcy1F-Q{e_oL9ut<eX4Nknhn0$Cl3B0oPa&~GMqC}7EQRg`v@T$j$P)uC
zo02O%2=_X?UeC|L$eLsfk@$e_8sdC+q+rRzca~%aQJT|}`Y$lt;P*i$6~{pC4iV-4
z0Z;n9plZgZ$-A!}bj!!zDCCLSI^<FqeuTm0pE2^ZWR4)L>rv#2bu;%4EY6wpZsAyO
zM`uPZ3`^Mk{@@0csv)087pQ<g14}xw`Obcc7Tj)_zE?Rue2QU$xd?0ehl-cMRmT_f
zzt#^Yt5T6On!hQIw{Ic@JQum?1g=M>`&68rn`{8F5WWFLtpxZUs+zqu)d$!yNvxA2
zxc|ihXB?EdoK?V+aP$CK5hlQp*#k6n+^k~|t(e%U?o1@>;}FgCp0(r2*mWgjJ043a
zPdei=KzpsKAOmG6kQNvil#b4R%4JE8GuI@-1<qEbU5)|esu2tg2rCl@Ya;bby0ylQ
zvB-hv-{5{I9uO`v%|MP%+fTW7v<qf|GC6w{5-r2kA+$WmclENk5BkPv-xq`KGIHwn
z^Wt_u*=nLpy#;n)$<y8g-GPS3mWP8KHqZD3>IX$-Rzc8YV@Xx70Hx(fL7*uSe9E)%
z^t52|>$+;8YgR!nt!xpO=E32@nKVN{tXh*y;=LU<)$KL2R*P4j@dhM37B!Qw_)jb_
z1_xmd+oJM3p?FhMr@{r0jZ!ka&rt0k;@}*>k2P4*RBAc0X`S+v10%iInkr^o#!D<q
zb5g$9igI47Vp!|64$H)aH)HS_=CC$5-rY#2l&8k%n?Sk|fHc_5fCw+QO@e*&Z~s+q
zjCwXtXy;EZeam%*Rlz0yk`&PprHGd`A{&kpM6|)A(B%28#5lNCUc0!|k5mtxS_Ir#
z*v8%w4$DXF-}A3g<Cx+dk-DNL7a*$FvL;1OD695KQP;cN%THl8I<MuvdH?qqTDUd&
zrun+>881;8_68f_z6m@?ZgeAUG5Ca`^}6SRZMgYATJcTJ8&Ax}X!vjvJHPOXd8~=A
z3C$3RGMJ^x+p4-H=MHtVGl3^+HU*vRvfG$Kp^NaVSO72JVZC0XCRkLY_Q0{|P9(r`
z9@B8E{H1TUl_oaPpSM0@kW|Q7^B+LR{%V&ufB;AtcWh+!#y;1VhB3sy?m;&4z5o57
z2FJurhA<#GCJE|@uSOqs`o$gE>ZCG<wMLX(HwN`^U2x+Z@XOmg4FWo^pqPsHwvigf
zNl76jH!y=T%4j2<hF;-_QVw93Z7@=Rps4K<fu>U66A3SnmBiUflwSsp>P(mZ7N75~
z0<15JUf4mmXhX+8JfIU&R;x%oBcK-4vL;Ji-2!(i4ITy@y+Keri-s(ZeWL!i960!R
zR(fo@6+dnN447CYUoXm69?=hw;%4Lr(JUDa(_dap!&ahY2aI{l?)THIbyU2mh#4w-
z3ydW&+z>31eqnEnBhTOHQdMW$j|ONI{(WFjmIH;z_bD0j60>n*acxu4q=O3}rCa{u
zISromco|@kI{asqTy$;;+;O9yus8R_-Dt(SOzP2Xy3_~1WLI&NpC~bWln>!l9xe~R
zvck;8?Zs{Hg{S-q9Ytb*Z73*w)o|D$(MdPSu{!`};vGE;AN54G03|@$zsvz=PqbqB
z_90uPWRYT`DKb^LAgOM~e-G_7zVWnX))E%x<hSfv*=oY##pR2Bv)H3aK#3Xsipi2W
z#|H_`jy#VJ`N>qEb1J4UaA^0wWhLxx<k+o-AiD<F`i&JpOvW1jUFYJEdD?h=s#|Nd
zcIZJOX}&c<IBS5D#|7FKmxBVtJgn@3cd=+d37}Q1zd#IRO;^}yN%w6YSZf-o$n|0P
z6qFnS^X@3GYU?Rpat}OtH6A>D^}q5$%1S0%Phca+oL23jNT-4qAwJ@&pKqo2pE-wP
zJF@kS7r{_XKmQfa?S(loR^@%;rupv5R^MZ)lxWYvOh3%DXKTV0!mqw!M3p1cjs+4~
z>k}=?k`79{6K=$fM~HE+!BVoJLL3E@>Ix$7D;__k4S?*DJp^n<s&Oex(1{D%!opQb
z1o3)gqs*wDm2V&Bly!K1znvcIS3GZ!(-e5tJ>Sp*qydl8v}rZR<4;0~wcOM`|7<O)
z2Y?2NrB)v2rf=&<Max8lY^T4n)=ACG3fa`fl@~jhMNjuI<CKMle%)f%xH8BU@Qx04
zDSQr6(I=;hA_|}nVqz!(RZ@RF)vrgnUXkKmN<^|}My_y=sib4Do1|m>W@D!fPS`6!
z36&*>2W`1WChpWb!RdN;RU!h|5%Gh}W?j7#wRQgXqqivoqYfX1?+>O3#P|fI015O$
z;VqXjkH;#@TW4z4H4Xo5dlofB7GGb@*wU%%@~s7fqc4BNWhDPS6Zr&4>$Fo{W#ZG3
zTUA(29YX$|>2ED_6ps9|IlA&-m*G!lkci~ze>tJAW8gHwYq_nzNG}fgJV(CtlQdO9
zb*%*AJYQ8P4fRZo@`RiD2e5|)>^K=oCH7f1D;mbpFhDmsN~#76^Ka_8zVh@Yy^Ecn
zl)P!zf<3`R>6z$<_r*?UGvs>?$s+)3`l64BKs$}1pBaL&C<+#7J!@AiS~{~UMB`A?
z_0ZwutEnLCK!1mr2Y+n9m!dPik%SFtgDf^085kR|v;RA{F47~Ta<wk;J20&QzPV#H
z<D3p<D5+8QwLb^j!7*s5&e|}m2y(8Jo(l##ilv5A4-}XM|6_+io`N1D2L7xd7Ac@T
zQ(9TABzRT0p!#{roy+kny&wy_%2A;A9S0aNP)lO$&YE*w9z;^JuhZ|q6}-w=-y<pe
zbvqHZRmGL!W{M0<2oK#^u`G?ke`|^@NUL<xboed&7LXctsVNA^-)^17l-Wc!Ng0J9
zV1G`vF%n+wPUyBb%YQlevW3kqQ;h^HVkXd}w9Cp)g^AN*f~PF=wB*m7i(K%8PASI7
zRKJwZB=*A6&7hU%oFNpIUtvvmu5x?8=<qn9=0-G0mw1C;@~@4n`+ep=+MI<S4YOl!
zVacyQbVNYFbT5<NwPbKuGi8VTC$TKu;=l{)5?RjkQQ7ZAx4rWszQ`v_OkeJ-Osr_D
zyQu><#dnkVUO++Yc<)TF-JNwu2ZrqR-c-zp4SyHb_|)+W%)bykMxJxHHUX`(8{WfF
zI{|($q_9MH(_$O8+|-44;Z-l%P`I@va)?X22`6+_j8~p<&2XFMwHD3Ss6RtdpYH@~
zGhkA<`0Zv<IbFVbJ01-wHu0Rjv;JO>d~;Rr+yGxET3c=Cjk%dR@q3QUk6j&$GH`&s
z<hRpCCMNLN{i-WjLydMNVQbk&A`V?dG+jHUt}8l~8EyRh9JjJ>ucmc{{Z&Cm1gTvo
z-eG|?qB3Y<IkUIv!T}UE7m}!6|78;lUW*7bN(&bQnoX>{-kL@iUmhAcHmMc)GB*61
ztsKnn_uKV=Hmb{F-7yQX#EUC+E*ln}=qMqQuvn!6sjOVx*YdKf@)KPKRCoejlC20+
zW<-X&HY$WuZL#Rr_cQ`ZJq+3b7^1dLfTP+7Azk0iE1u(O82X#^7r3^fK05LcaBq@t
zwD3z{)Q*5)5LGZw!MQg7P5{JxYDrqq!3|-)PlY*QCOgr$J76AhZ|9!Oj<&GLVUrSm
z>48D4F)s%H+)=hzKOhZ)coFF}F=vWvVb|!bYGaXp5a4sky_N>P{I+R#x<S`IslmYH
zVV<Qx*q^N-sFHYN|6#oZ)%}4A<I-%y;N4j)wYoSYWHyAYRZFEf7{=L3To*e6zcq=4
zJEq)o-r@?L-RbLbYq-kX*l_HJivcHvpb;C#l7Pg_c**I|fi&mvnT<VyGESabJc5{H
z0tnQ|cpZ4nOHRPzCy1(=F0}DcX1rw4!c#uPgDOIh&V4@e8o8T_M6L{M4_qEK{()im
za_xQ2pvHcWl@R?OR0S2ZK4;@zs?eC}^i_RJ|J7*4X869gmGKPEGuwRW+8I*BXBnkL
zPBL8U8K<1UP$MjIz(P3t+KHOPvkDhEWVzQ452Wf4q3#!#WVvJH=q)ix1*Gw;IC0V^
znO(_V=vp750z}L1<PYdHnfM@PWg!i=lK1nqrzY(qQ{OCX<6?RoTWx`^r_qGFLBxpY
zervw?;dkY}mq7&X<glmN=sIAHybzIdLzNJx37#8}bJ?p?jJmDs|3+Nkgc61+Th_L9
z1g2f#MIvkuznMqd5Do->L>fmg*z=YiuKG8fi&{dDmiVKbBqbC|;~`lZ@ZFCwrX|J#
zg8?XNVU{Zcich2hKfVQ1sL{;rWd{XxUzP6I1!fB|f5?WzTIjK)j_!@RoN%?(NvOS~
z7&uP3|MuWl;RZzN1QBbcNQ7UHzMu$V#`^jiO0D69Zv_}i+A%}_9f{|kL*W5xBYm=d
z-rb3qGl`e60RDyL8FVCS#V(Te1UrXaYWuFvY0k}V&?dQh8`v9B=V@C>kcp|v6a5@c
zo+U^e-}6^tWEx*L!Mx~mE+wIfPX-4fi!pR6L~+jrm(N<OBoIeovQh=X3{HCz)NXwF
zSP{~;t=Cmfc@rM)u}IG5Mz<;mWpk}RdzL+Ro!%dStJ!m7Cc`Zpjp;b^;^WXgUovab
zHMyQe#;psiaM4tYqA4)x|Lkm8#vQhI_)!A_BAT;oU6NaP3Mm|CAt7xqzNoFvg)Lnx
zWfy_Lqam`ZY=*~guf$nKh*;eS%DjJj+}{M_xkT`twN20^<_BN1OX<JAWK`!mY-ntj
z&*t<E(VL0&VL!jZg;>Qgr|t^XSWoQaGI_FnC~)ahN7|_0FN(dyoSBFy5?>l#zpmvc
zAb~$+xpQNO$T`GCsuDJ$t^5?NZc6b!C4wK&Y8{M7-d%lvI)f$vJem#Gf)%P1N@5Bg
zb}tvb3T8QtUIBVY)=E(7IR+hPC!H;3dyoHx%YqY`e7*N><F^k=;Iy_?K>H%}@}U_w
zy5aPz7%y0Sypu6>hxZK<bQv(5lb#$!{}&|x&x@|gcCT3W;ccX#5aDo5m^gK$3f(hS
z*TPsw>)v1O>ZsS6i!&0*zKjK|*7YmbP0$lYcdh3|LS(nqC<-<V<r1Pw22>#npOq&}
z7x9s}^ZQ{t{{bbJtzbo~!`bLtx1B73<<w@HB@N;XH)_A)%A@7OT?Icax|=V$YN#G?
zoe87?E4G!kEy<dZJp1cYJ6Ko2ievLxOm%#0ka%53YZ?|_{a@G&J;RpgL*D!;J(Wt^
zMKHgn&4p0o_YuhMiug>%g!ueZ5c^=}g6_ZQ<z2L3(p_1!XuDHg;K*QiM(HB63{GRN
zC>1I~I@SK`6{RL!^I&4!$PuSPq$9>TAZlJ9At%Iknt&Ot9*!`s|B9h8ktLN;XGV8-
zE4ysoz^rc2h~r+oCZ4@I3s+$qcNu1=*^3Y+c38g{yWP8C7^VM$Q(s}Dxw_F2td0mA
z%f>sL=Y1pvMsc0_K~l)%<tVeRBGp2OaES`dH!RIS_y-PP*Aj32mKm3aOx=;{#~T;)
z;Zk_y*O6RqsDd)VjCr`V3#2<)j=a%%D2T*|E%~%>om)U-VamM;qWW4y(mW)<t3>rd
zKIjZ*#d)IJ=*a(L>F4G2VLL9Np5$d)AX#U|q)z;Rp>z-<411flQ%AhI4evLsz`Zq=
zLTrD{%xZSz^bHr@ZZc>v^{h{DO*W<iihkvhV@>Go5rPczVlvd%u-kjQAZa9I=Vl+b
z#fP9rmYG%&*!gU+<-341#1w;}7(f&>Aoa1UO;xXcUvlIiz{)4LV@pt+j^@e9Ah%NG
zVnG;@s-)r*C}w?wvWA7q$VHT41^t@zO}e3<-&%YALb_ADJl+vQwFq=xh2onZeT_tT
z310w2h3Yu-?I+?06RG{E+>;-yln43){KeA(A&cV<gv7_r6Nn$yTH#~(*3a$JSuRqd
zQa{eEI#Yg{-19_DtB^ch2U&ebd^GYuw##9h5dzPaw>YDX6X_3cn8ZXH2ac|egawyl
zsM0ji@T?Aq2I?dJ>XVZBB%k^)C0g-_)>?I7Jf^sdM>3-~?C8W(9zSp0EVg|rD4`9a
zGwU*Tf&g?!{S})fLYIO$9f?FH@h#J#q{!mjb2S0l(?-IQ#U}!}+!??i4o_sV^+oyj
zh@|VS{O_qmwfX>U^HlX{ih%*XsAcxQp*2euKT=d%=o4&+nF@F_zzpCIs3@%)MHg?7
zn?*COepU5eNhrFhdA&=c=MIFzCu>-wsXE0l$ky8ebeYUq*v1aStXmyuD)LAt!~rDi
zv;>om;V?D6Uuz^3%0n+m18fp7vA(T>x~=jtk>rCIt~4Ubge%79Gm@>p{bnVCrGO{<
z55bT4`AI;k;B39p(;7wmUsJhO4@(7<X1@A~cz4@C)NU%44P^uL#5Ll`IL)C;gUqQ!
za}-ashrv_)r&)!F<SpHiIJ12X%D6LHy)i{6yug}0uR3d7RDtgrM)phKUR*`t*Gs;L
zOP(JtP=pGRR(eXrhsnvZf9ZLui(-x2?YGD2)@_KSp2NW9j3mZKZnCJRFhr{V3gnA=
zq4|rIxL{MRirAN5X-R&$v9wt<*es;y!3=oIkqjU(sFh9T6ZI}hR=GRak8GU9#?hYm
zNfGHRqhLSvUw~qXHL;?_ka31#)p}ro1%4U%ll%ShcQrC6-_$=Qu`E?1Pf~1Tez&Lt
zStm9rZk&m<r#+0l+0k@ziXE&lQG(=X$(supfzBD;0w)N0)X};6qKkhHK8Ds{a=7lu
zJ8*ei7o`}N<Tx(`Zk%2Y@dn6Mx(E6`yRgDs<<=f{;kllf9I{TF{&yuPQcBvjNvAcW
z!K*`tZA+D0UM$l6P28T5&(TwRX(G@1+O0_!mKoE~PU=TQ;W|IepR3!nZ36d8QL@&W
zH2fw0yrW@)3w8Ra22%dQRlqUSZ`BW^Wrun`%a`>3Z-;sX<)Hm$j0Lu2Q2G15Ge*NC
zam4|OOmHVEg1*@DxcimFt9JT;nY8Xp5nW~U;7b$<wCZwZ%YF;QhJYK}^yY!qVh%lw
zG|<>(y^V_I8G&KkiG)#u5W0w0)7ID=!DT!2=;P!1P})7-;?;#TUrUeJZ@SiGd4DW(
z=U*c(sgO>7h6mqSL~i*l@&-R(l!)q5@~Jr#(@U50($^f2J&sRZ(aY%MTK~9-!XZeb
zTaBI$E$nzlP>9n@?OTQ~MrP0<&Kvy)Wq}8P8nRN4Le!r<$yh%AKKPtUy{JuwrZ&Z|
zaUckV+LChExByLC&?zeW-P&Fwp()<sztd+nrrQjde-#7qZ_F28o*ouut(!O)r++E%
z_qRD?d)%KA{AH(eNN62@DbyVF7Iy)ywck@W5&rz4jvfBOu!Vzo=nNGsmUoco{`YJf
zW0(?uft|VuSWMU3u!Iu^sGok=_oXcNW(~{H09!yK*15nv%DS9`#DpXC^8_9n=Ih!v
zNU}0~pE)%Y(^hh2z~EPMew1g%S+4}5g)n4qI%%5i{4%+YrJHzoo=s;%?o%%%myF-j
zG|)W%eY^@?HBeG@)p`}m-blfd9h^r-!?I<%1ON42>6!g#x<6BXeTPM1hgR(f<J|QA
zIs7|+c6g2zCAGl!;x(U0OSX=u+&oS7B5|nGv>UpOZ1b*Dzi#Pzdjpy!rz8-&q<7-F
zKDWGrvRZiP4mz^~x@Ui1Bbi>4K*@z4Md}W>87}EEx(J+1AkvlLMWx5z(o5Y9rv+2H
znJau}&}&TV()#!cFhh<h_9lOag4ALn;CKr!2jEBv1SNA+dHPhRK5uFr&HNrauCFP+
zCSeUW`vn_bGRnUZPaYTep7Di*^@jv?pX*B#4d-rx-nvG5%zl$9V9b80hX8y`*;^uH
z7ANq7h^|c)$N)<K3;N1hL93?YVvadnE{#n=Yjn;;3$jdf)CGlb%Rg)wAt_~JAQ|)-
z1?2NsWE5C$RtWd<`A)Uo9qt!)xliu!$Ojxgs21n86Ayk?F|6d0_j|x8Pt49sUSPT)
zwh2Dx+0B?}Hw10!+tf{#(moKo=mktefz9PE)rN%hl*rk77`Kep4xdzsuV#3Ft5SSd
z#I~KMnh#~BGN$Ah_AZmwSb&w$%{GwY_bG{fXqCCcw;lPKx9b(hybtf@hLo<lR7EGX
zLd*(2fGc6-I-A578qb5DVJ;vbI?x=KD?t29u-CkQ2riJp?J`X$G3m`Cf)gT{x*d`y
z&W4h_q4*P;3<Wulfq4b5BCdv7f8vDB#kyoUrj;EwXz6=My^5GKPKKgWy@1j|)|o2z
zZ5CJAajLmUij}Vtb{}HK4=&sy`Fk$IP&cC}gM9jBY7$aTp)rlQ@p2Kd1C@Y8Qux|`
zR~aSa%`!s5CYy~m^SaT6HLnOqw4ukph*nPw-R(lDZN5;XPacvc8zC0qCF*X7S<s1r
zHMYe6K-X{;TF51*Wn?(zvPY&E3jW^$&fGc+bDoKa!}i_NMMave2C;`HdRD#Ki!`#$
z=jaG!FO!Z7w2B1cn;BezX)pKi*j(o%=PgRTzF3lw(b(KOjK`Eo9BBlHOSMxA3mkJ)
zue0}VH>??tFQyV>S{`-6wL`ahji~unU_8WjFFTufx8ySCq7KL|3iU~O7B;igx1&uP
z(D&LWLba;YU(7rL7C%gCMP<H)1W?ufrEdi&&aduoPS&e969Auis^APTabUcZ<>{~X
zcsC)q!3e;=7}Sd=eI*=@0+c%90|1;GQS4IstjE7mQra7K86<VY_pyzbykx?RFtTvl
z!Hda&s|p$1>G6F76Ux*dA@Tj1Y&bin%9*-FBaV^9K0$HT{TBlp%qfZ&u*trv;&{E2
zT8QcQ6j5gOk&FT%+^B8{IBGCqtSd(VQk?3_4<AamF41~j4i*$V*yCHfzItsb@-FV}
z7!t_u<Ke_c0x6v}+NvmRhn!7{of}PjKx#^tn20l~hg;LxD;6VN)AkN4r##dsH#>e?
z`%vqGP4NxLPK?)B28q_OV{I(IAW$ojW;c36U&0({lU>M?s3PC}-0NRKi^SbP2z9D6
z_(^3fG$s~#KhhlpC4($YTps<Cj{t?%@6f)3oS#dij4KZQ<<y&-5zy?iaEBcH)Y%O)
z;viiyz1%ZvuS%RyJeVsgAqvV5fps*)!tgeTPY4uNqv}iE@5|vIjB$fvk^K`QTWwrB
zne*p}4CUDbSn5*B;zIddH4QzXh_v2ER=``p!*xWETcS0keh8|b9o4<~Qxb?F967p4
zm}}V~!d0a=p)6^Myw@0{zaE*(Bow3H|0ZHdsHI8buQXn_SltyjR=|05LHys|l{#U=
znh?>tZa}9+<o3^39Z?w~f&NX}@@*9_i?^_XY^+CIsB(x(AFc{%0=qqOv(i;q-xmpK
zXO^pP2idY=tV=pZ)^i2~j|!lFTo`eQT6~IRo`RJZEanAqY;x0Bn&Xs1n35UirOt?<
zs44L*k&p{9Az-5FBv=sAQ_*LNMR)Pbtj}z+6=EN$q{mw4=}a$VGVIgF-@70mN74YZ
z9LoAtnGnUz8AeoG$85((4{E#FBX^YlzwGQCXTH!`DwCPidZyuz-y$na(SvHHn81NP
zkV2sp|6;9@-a-7~4)fv@UAa_=5Q2T6<#(L`g^rjf#h<DPJD^!Niz?n`X-bz(4&!R}
z-z-%dw=u+<ww<#dC|x!v3k?jlbbkBz!Cj<C@k*>R=@248X957GEnZDysD9SfXLU@r
zw}5>E2E6W7=eF9;Q(Ej({-N)sG5Bx~_{waE;>u%r=Dr6Qjw`PX9vl+G`ZT;Dg{1WL
zkSFeW$ufN({wTr<j#wK<-+8o3vke)34_8;ae{uN{Hw?1<g4>OGZ|iFT8nIbG65uYu
z6tGPA+*J+`0(iKgeKx~t63WlVJT0AT>Z_##dX5x!fFlZOJ1W=x<*lpzEg!yDXCMed
zc^w1r*NE@WM$#uF9#j4Bdsl-Jn{xO4R!x~b>`-MTc^?)X)55QAU5b}jRFJd{dB4O&
zFfzPp@1FZ0Sd}K@!|W5Nt8jOh+Q{(od;q3LsuGlD_w^#L-R{j`vxdE)zxC%LUqDPF
zsa0$^G;Nt1-VPQm@%QEbSG_I%TaDI;@eOntr)Q#rP}o65*H)-2+zx&$9VL_q%B?@&
zUs_+tQnxM%@c;zA9y=SzBDAK5mc1!8xqEb|^f}sZTdj0FQsJMM&ovPNjYx8b5vrd0
zz-#ZK!a8$3F-4Yv5O-k;mZD{xf$gVvgm>gRIo9Cr&%#*-)LN#Xx!V?moMFgE@t|gL
zX55V+7{BXKb>|;AX8c}j<t%eTRa!y`l@7#yBRNH1CV?Brx>Fp`3WsL^u`;WQ^<b_H
z6^0TS?99fMg{NOS$Pche!YV|Ds5gu!ZvR<7aG1cgpo~Ndp-EMu-wvEE1oS*?Cx>2N
zYqcx{D-t-ZQH&5l>Q<=VjP9pxcokMm%S!+Nk_=AxnlN_vb)rE`BhbgzU-zpC+%ViI
zILCBXsZ7v2U-GOs^>S-n|4Xvm=}BDkA4n3#UyFf3_mNMhL;IbTO#p+Ftm<Is3~!XQ
zFr%D-`lKxeGZEL;9O^-#UvY3)Y{cVl29#flGZ)Md64S;?5DU;xNW)+h!pjS;I7BhX
z(`L7%{ezc9thjYUJ=vJVYoU~`E*wVa4`m5llyr`5!|Z2ce5OF9X%bo!vFr@HM;U8T
zyB*hwVh1#I7`$sjFcc)eg@g-hse%Ls0XdXNy1hwIho_pMhjTtXDiuq%nw-|38)bw&
z;=n9Y$q<2369!__8bE&dny0*>B=J}7@yK;vA-d77Y)O^ZenISN7@;*<=IYl=ecFf*
zt&l4cls834y3x7+aoraTE@cIp2K%RAZhV-Nx<WGREiq#zeHl)&1~nT>9K3{8($;U#
zF6HsMG^?*HfB2&7sw_}0hqwf}x@2-F#rZgUl>f)V^04z;i5LO5C(A__9Vs{#aO_Om
z6B9z5S92;K=WbB>G*=aR%nV0ds@W7s?b_LJC<$-jj5ejw0Oz7gIN0XQN^M8}h`|R|
zY3`{b-vSB>kxIGs3$iAL^fBIVGc^1FV$)288g#oa7zPsQTkBc94sred@079TYvRNv
z7i2-@zOqiq7yFNd=Md2A?ji%zh&YWHDdbYd42`hSVoCcE()MLYZJt1Q!;_h#gV4&(
zw2R(8=BglZ1P(>GEEo*$YKC+*+<zTf3jPA~4xlImd=r44-yLUfV8`@1J+J8|>5|ee
zDh|9Yn)LfYDto{OCFU&FIzezV^|>jode1~>G*Y)qaW<0OfzL_E`*V@$FYSj~*xLn&
z`h7dGrf}FJFA+Ed`0#7=u@aX^RyL@W!t9F>Dn+lvD)8BeQtdMh@?|tdEq@B@OJ~ra
zF#l4^R9=TbXxd$UA`QR^iW2oH0En4HYbqPL!^KB0IHM7JDbsDksDE5%+l7%Pza*0)
zWxx@K^KzC_swc}eGsEVRtd-Uq5^xJ9|Kh~2pY>vt-^p---`%7H^ixa2F;b4Vi&l`+
z*ZdtLa}Oy`Wi4k^`ujw`Edozr%u<d5LGp$*vo=9g)Poc(bO}o*3Rqu~<<Gwq3SH3o
zRk&pm@nr{9DD9B+q$smrn%k2n#<^hvSN5k;W@~+XQt>{jkBG|qg)73Q2Po4WI>KWg
zNaIZFE%bbGKCk1G>7yw4XlY1|qQF<3i=}60Zw3ZI84n1%bzKpSelY#`|HeiA0#~kh
zlr716f=-V<DCa_I*=t_v=Dqm0ivA$mTbs~eVTap6ZP{L^oWGi%3otprd`|K3z6K7C
zthLE^{wtN);jok#SjJzzP@$U|Y!bWbUjMp-G0J0yNTx=8g+m46)jQ8(Gvsnmc0J4V
zot-fZ`uuT-pUg7-BV-@R?D%>cbzQd8MyHvX=Z}hPbW^E}P^D02{x&e0G43zEiyIhg
z*%Igx@GO$j1e%I%{T7f80L{}Ud+w4_)DFazZed*uByAKyqGQW$$e=d2$omZWX{1)M
zb>fDC<f-9|lKHHDh|ffM&{SwZXl$Y_OgV}Nn+#ml_K>l`3_$+fCczx{c@q(X!g#Bo
z#ktN5rCtVd917rzSD{<MwWE(G`5XD$aUGeGpOL2L;&C>PBNAX>P2XN(E;)Yh&C+`e
zSM2Yc@PArGCD<}HUtE!M4-UO4g6sAZMm2}sw@f2!PBafUvZfGD{0fX7FIen5byX-z
zlQ{IhWDv|)TWs2OQA_$tW~m7K2#v*m=J)iF_t;vsT#_vPk?{ML#a~zu*j;vP){`vf
zg8z3v+%RZLKs1Ue)2J^2o}5vBtpiSCy`kbJ>mTv*up(j%dx@YFEqDML@5Ap6Ll69_
zxrRUkZmFg}@pXGWqghfnkg?z6tTUI_STtjdx2&&Oyc|j~;7ue>;Wb||aZvvj@&;*6
zyK*&~(GO4D+Q0LWiFIYquCG%3T}S#dkoHOKARLDL7pCq`X$X)aqQJ%rUi|MADXmg#
z-$N0<6HI%6Gu}GF_pQN4Fhkk$O=;AD7fc$2^IY{bMS4Y$>3`2m5^fMUqhYpn&Lw=F
zX|P1caMEo|Xan#%T+poMbFw0FKmRqs<^1au>6m62T6Z`Z7aA_2pB8gMs54MSFV?w(
zOwfS-{e(?|fijgme5%f>SlNqUa9|04=t74nvDzTHkRz?R-`uQG9A_$+SDptCokC}9
z4CE5j_smr2)S8|y`9j%@jHo>21(y2MfIqInYbHcx6S|IDPMcO>z}q$(@m@UB^e?(8
zy!uHC>H9{88;DBXi3g5o&L2TpA50$LW<Q*eO$m~#Mv!1!j>@YThkrWJ!v*U_BDZEm
zk*?+H!_IEsiUudzHr2wxsCyh4gZ2eqd;t2u^N;^CU-|3(u43l?8NGKDW~<SkhDj;l
zFNTcYvGaz8dXTTymggJkfJCRxcZ5KGt}!9bHdg0h_nuXw09^gtcjWwy1(W57y?=#7
zM5LDi!P}{ZjZZ!!U-+ylgj)mF38$3~a(XP}Vdn+<Ncmi27<0*e8YM>}0(Q_xm0{?0
z_^^8j^5qROD%OWZg9>K{K@`2J3kFh1le{q*Ul+QQP3~E-Q5WhLPn<#){u~C^sauLf
zWi%M^R5ty*k9+f4gG$D+ou8V_L@_X@nOmMc;Lzs2J@^^-9v0O?_Mzn`GVm(csBIG}
zl~2@J<l$JQHp->{C2dpHiL)DY-OIPzMP1e{X4Xe_dn6)-6G@Bcaeac^J7gS^cYYQ>
zIC!s2zq?Q;%7xUU_7P^TLUhVzKx1SdV?rX$FkD;(_rKwxoWcqri6XxJ39;3>8TMT~
zBwY-h;5@lwkyVzCf9RfY5d)WU$eJqJ{Q&WIejB7H6Qu(85}93V7#a4xX^q&_J~;hN
zM*my#aU@rjrT23PS2Cl>LXltzJA-^wgYhk*8&d#v_)?{$fBfZT*Xm8+_gXaVq!m!a
z%gF9$FRxT*$^(!&HG1mEYjM+6UXX|#kLZbWAXtFsbaBwme&^MMG1GmPRHQ~{YzI7T
zUlne?Fu?(s$Y;Pm*I>2HF8&A5r^23i9T?X%&DedicNuBkE)3)IhI*os5CkviDOJ)?
z!)GF)<OpjP%0A_*GIc7RKctjYtepib8aSZ?KR<vrb~e21GAjCna!u7g+nj7WMV7D*
z4r`?C7Jo70G~dxb+lrP{JkSc~58g%GiX&*HO@ZhQCiKK{+9ptg|6-IgFkVQwb-i?E
zc6PuPu1?YwtX7uT1>JqDUU7t^$)m6R!AU1?Yd`WYRVLX<wG>!XDM@tO))I|r6CXuG
zo*NjjK5>R!oa3r<l_e|Rl7L_4-KcrO-3-LzatUdip{}Q~(vu>R9sn0F-7BOVMB>5_
zGcQz3cbqjT{R%}Ay2$n0BNB5m(^w;GlOh5z7}0XUiPJrt1r1RDSfEE-F+*j>Jn@p_
zeFv1P2fB9jmS|Qs34Bhp#qJ8nc$9Wy&p2pSX+w(Ber;E<VRu=zkMu{OvWPR-31up|
zqTA}KxM3H_LTQYW5AQ7h7=qftXXlO7HxC8NGiQCz>=Rq5!H<Xt=EN+LM9Y1on72(f
z*lXz#&VwgrtO?wr<18kOcF`Nn`|l*SYGcZ9CjWn*!{zskWO<}ci;}ASY8Em#VEs6U
z_t8wTP{ID=Ut@Pks^F_VIz;ISeK&A$#Z8jy`~)OBywfj^43IpQ5?}?mzbDkGQvPUD
zJAs#JMt7_f3|&~?)xy|4j8V@P)ekire#pH8-%Wun<cFB(HiVdr^H>{lFVus<R&WG|
z8Uth_1~iAaJiR)!VZ@KxpXB$}4a&UJ!npHqaOqybo)pP8m6D=wRTOi7<O}S|U7hTP
z-BnQC*?wKcRPfIw%jI8%+I4$XS!6%&=q*9B4PGbM61aDxB!!JiwI5siVi`N^N(&rF
zv_uiop+9m+mf^Zkt>d|N!ECLK_oTQ55!N*SV=qvV)qTXSJSvCfXhE<;?4)FzrW=-D
zNKxp^82jbU067+;Fl9K|>QqQAA_1CH*R+X7UcWN-g@<^Flm=lRCr#=V6NskBOy1nB
zjwTrus}J&YwFN^{oC4}`DnU@3xEL%4u<EQyea9E86fRX!^T$Zo*5hS+gvzdO42R6z
zw5tagkj9~!T6AURMH}Tm`n2Lhc!m{n(<z;VvfWLBJTL-3r`+~%u$-UvY`yTtA<b`8
zC)MF77+f6WAcy+D{6D{oQ+~Iq_Wfc}N4b{{Mti*KK&mbEzML8!KjvyMFC<F~r#BU6
zrCtIa0Zb$}0bJsBh+jXP`UAvZpt$bKKjqQCDVKJJk5Ci-&RnxFg7S~!w{_O9X~AxJ
z_(LSkG=2OxZSspu1aPt?@^0N<HRf|D8}J^da&-Nx@gyWX=b@U=TbbE4wOWJ4I)Jz*
zwp_a@Cuww{3TZ8fPDJ5JO@XXf;){qy$*(66+=8oe2;gHKTAVx=b(ZG&OkQ{Qb#1DP
zS&@AH@_hjhCsw4ZIF|)qeB+sY3CC{fypfflB?A}X3~tFd^wcrO&Mqf~c+<;&-s;9b
zmwBi_oCLX4{q&xFT+E$L%+@Ac#e4Bq&^u*O>WH4dFQ|U>v`|TNIKKc6=EKnqiZF<v
z?|dne%GxI^ogf4XEJ&1lTXBlF;2sjhFaMO3sbRDTNl)Hryd4%sDGV<s7}s5jApT27
z;I0Y@ZU$bC76!Mfs&?SLo(jC_SabMPXQ(n3ER27Y{Fjz_P4y=I*ef&LRFz@cP4NQL
z3`-v9b*HT<$_$5@?UyHvbus_GewmnRlCDltcHS9+s3pmb%=iF5?GK=~;@IH>EeTQ_
zo0DkZ&KtPtE*Rg%{p>Dhf*VX?Va0!S<oz}eZ`|nlFJ$CAK%)?DkhwCi$Z~9E@2M#!
ztmun)?QUM$0w{iXFYBdrOg=!G2vGQ2CQZ`hp$EkcbQr2H_{YXD30Gn24M>Hw-B0|I
z##4zPI4N%#R#$@;kKU;T&TDGM{C*{Qmk6;a;?WAJwtk*dJbiu+i!R3|UqT{O$r6so
z!gC;dKE~RFAI6dTjR6k9mJzAe4LSRiU8Huk`HR#9VWmk{%j2%Sss7e0ZBCzykUW|?
z?QQkH6uCHuckL2D2Z7ss;T9h?Ir^03=HOL~a>q`@K#JM+b+-$?8Um+bB)#{|h2veG
zxT8Fq_MZaL!C6Kw1q%V2kPQ9Gc5KKFvT(JBt1e6ytCs`sq9g$eK<ss9to;+ld!d(0
z{6VxzK~3|l%bn_rp}RSWhHR8S@G5j^L~BeCev`J7Fme6G74>OJxf(Z&*hbo`Rcr2T
z^9`(;*e@}huPtw_)c0M{baPnPfvx{)A8#^Rdf`?{{R=?u1`}XnS*?3-X2PBJY}KL6
zVQ@J#Rc{M97U2iRTW$m?-eSSM_UjrIP(nOwgRqU<`UYa`28x|0%KPF8`ES}Kd<^a-
zGJMn0IH!t}O;hW;WA(;!nJC)h$f0FdU+ipAxKx`fZS<bd1tK-~7Gagf!Xe=)Mm2i0
zDH%U^71{zk&?t$7t>{PlO8Z-#yhz6fG7HrBkp-DrqlXR(quggE_zgY@)c##`m=MI@
zEa|6X%x>R{M3s=<=o1V)2#4|c=**)3fu7IxeaL?Ne~+yO4mTF^U(5#-^jv@<qRC2W
zAZE&GR<J0<c*r6``1i4;%~_O)L4_jF3bs7ZGr>#QwQqJn7gud%^`wfQ%s}V~Tk?2a
zR)8}3`BOfMG#Dv@xS|<e5I!%?b+|jQf7HxD$~e495Xf*D270`J^{N+fv|G8-zWhUk
zQ8A{S?irRI+;=M^MVo1{BHS$~(}M65l)}u>JR!)z>1A*M_MKkD*JA_tPIAgtp@PdQ
zmqb|ixhw%j@FIRwDPGb-=44dX#s^<U8ix~E{<|6EnL({Ly6H+9<FN{B0U%(T`VFXh
z0CPmeLz||q?vc9{qk)r?tw|IOON6iom@0l+RU3+}3Lj#STG8Des^EzL0^AH9@LHUu
z6{_Z$P}Xa7^UHi#>-;^Nhie-D2;hV#tSE*LuCc5L;K5-Sa-^?fh=-2cHwXFO`)rK}
zZgs?nZXoF_ISI@AKP;FWN)dTB3+o1!%#+uY`ECMnO)C1OEYzvuq-R4=qVvPbRx<|*
zI=pxHmYnJxVD2M)flo8V0c@`!KJO)h7F@`Q*o*7nCI&?*5WD$KXXRc;hknO>$af5I
zuyeD;880<Ih%~(!<L5&S7qt-2x0!%t#yYn9YgfXwAL=-TTnlKtWW71FV9<zkrjj#-
zeK(2_RrWM86y+A~^T-f+EWXY+^JwK0rBBE95tQ29YmE;lY2pFa6x>K#9!f0TWK|dV
zyqLim%=Q6WlgAk|;Q?~sba<|*PyJX=a6!WNcsswR1PXJ3MnLz^NCg06wOwO%34rT2
zsl*X8Y2I;S;iG8H1`P5P+7*~<d-0wf5}oZ<C&E>^J7#@3HF|QveU7ih&Up-jPdJvR
z7ioEyiZLs9gflkJ=_V_YOF^4E$pfT4p9xcRR`)aZ{(DeDm!a_+;fO|g1l}!fR_JW8
zbK6=o!P`ocZe9HsDZf;xHpG4c%m+sHrQ89j`@wTHL#IcbX1VPjgRf!dj(S`mGPvud
zt4pi7<~K;y@^^gEAQJ|e>*1|h`EEOt&Bg~{p<->reF|mtM&_F`2=(p_gRl#o<d!hY
zS0Ec4^yvAo&~oLZ9<O>}I>Y*c24BM;RIBO|OivK1P;5OxOyT&IQHRbSxj})XB~mdU
z$-}JKIk3Y9NM#@EM;suwTJXn3gKrsPjadbgyWC^<L|-~pu5WbzXR}+(z=a99$dI37
zEfsCC9cRbx)J?3BbK09rfy6fW_t%SVZaB<kyl}onOJ0GgClUxpGJ%?5Sy%z6itV?^
zX>43U9*f8-1oYLtz>78LqD5N@Ko~{~4ZJiadg%%E!d-V=BfL!9LHPX8LKA<{VYH_r
z{&rojT$>%BN3#@f+Su7ZW2GIqpL$+9W$xlA`W*Ws9!gYYb&I-dgI3Q*T1pGt1~)6n
zVy_}W@D-grpp>dnuh@CmJB&adehz__yI)GWTZ;ARe>Ov|C)A-#d-)n88{SMvYz80o
zk;Y{^B0&F$t_1|#{uGG5S%vc<H_kD9sFrZL`c%}KzS}2&K^OZ7A?wON@<7p{am?~>
zd&E??@|DdZ2I2Gv_JEniVk7Z>k5NXfd>BlSlBK@#WP3TsNdhyESpr0Cm9t!`-GvQ2
zq${hqTN<BpH%pHo*>fRG)9^F&KS9C%N-m*yEC2>jp`$qlZS`iWhbSIjI_s=jpH8io
zE{G#|`~1$zEBEyLL9Ac|O}C%*btPQh-~R?qEBJMRs(2sWD)(cBVQc<L)u>oJ<vX(^
zm12iP@8uC{^}DERrEoh3Lr{7UYse?Za~4Uiuw`<by;yPy!8&J%oMXQ~pRA&`xHxAf
zces<i58@-@&pOgBx#-5G<l3{Q5LVAOh_F!pg$#?%OPEakc!~|;h;jOGqz?#yU44tH
zTd5P@Q6!DS6idd#GyJQZwYn0u>~T2#BA8vuzCY*(lYpZ~dy5tHdR@`b=+@H|N3D#B
zEHq*yHHmX`gI7B7B78Qi-vz>p@ZLiI4;Ho@Hw=81!t1pVE;avt<T(Y33}Wq;`$%8x
zn!<Yoq%uW)pSb>C)sd)ZE;n+^u=%OsNN|vylQ@utc8`LAS^66}Ot3O1)43$N;8Cp<
z?tP&G@cu~t%CJLLJ?+y{6F6kwygnmzPGh#I4FX9%|0qik%I&6Mw^}-U&e2e)fq6M>
zn>(@x2l2owre6|l2p+R;o|G%1=vFRFI-P93Vn;n0n?z4JeUhqo$a88G-U`>%Au9@g
zH0SK7r-#xK6gDcY9%}+D3iJ-VuV$PbwcCBc1Z+SlmNEImmqa>rMgawgw+UENwM2`;
zl+!TDuDKf>tv+(JmW)%S0l8R_(1r(RS@~Cc&1ZpyCokZn!^$UrDGX%EoiwfusL@@b
zSstW9?I@Js>D6iigCKVHVWMh~k(O^K=Emz-=-c%kZ2+yGdzK#$oYAYdsGd`?n*UE(
zyZRK|-gf<tq+a{k8Y6L5bqC~BxE<>J-{3N15ZbptUVHCZYM3JoVIIb_g-6ps;L5V!
zMg$U3>@trM^QpURG$I@1){f`~{`UEvTNDu}2?)V55|niSqd^^|wEIaiozKsxM|zXa
zW<Dt_LxT50ry_UKK9NJzS%;UN`x{85$8u}(9^vs*=ee;W<@J(-c^Hq&+JJg7PLQ^X
zY}5D_z^07BOB18fY0*y<ihXgs$xmeWtwT*y@eRyn9fB{fZk$&r=~$%p<lOrS{XV82
zOJJNY08Se<lIdq1GqE^KSayD7^PbF3GQI(IP;z+uuP*BS;Wi|?7tL!_0;z<-x^Xkj
zlmj&p&|~dp!lu>m6a)h0qOb<WqX!lpUXHk%aMPXtHrm$MZ?r3ePB{3dH2rotJj7)^
zp<~a@Q=KRh8b3c*U1KG&Z?qy)i6=5{li)I;80T35WerIVD4#i$`=pm}%=yR=iXLKv
ziI@J15-zVG3*sTdV`a05;>jMcjZeiVzoh@_e#;zalb}VNA!m|%(&<pK7x*g`FaXk6
zxBb}7^k!3(?yV4uc^kk?e!aaPVz)$A<D{YjV3}XOuDoyieE(Uft9r4)JAs{cdY%B`
z;icpZ7Vf&ry&g`j;4asHpDvz?8QdvvLy~F&2Ut_#q<ntG9#oR)>j-+{VB|>twKN!o
z*3Pg^0+Yb<c&HqxWpFu7TM&=~^%GqqZ5mwt#6(i|MOvM+=1;+1BNyeFA-=btLz682
z*_mxWA7tN24p%+VMrQWU;Tdcb{W*s~+O|GHZP@#rfJ52ZQbGJzEg4PyA~{8f*3%~S
zE2b%G6K2WeuRSN3ChlWOad+pOdx*)QPNRQ|$9X}c`Ml%2&%#{6SLKs8SH-r%qbMLd
zRfp(+JdqIG>Nx}^O6y<nFmQlNpl;|dubr~4d@7q5%*49HTb?5@r{$YB)Jy9@z*b`I
zkTaB9WEgo?P(fjFKepgX$A}0mZD4_6LgMiKxs|szLk|}r-Cx(+r1$7`aa%$|u?A8M
zX&W5MGjeeD_JE|tdJW$Z`=kCk-I&nWUx`K^cu`JtC=ZA`EZafdbAFcr!pG2NomS><
zwVfE+@Tc{9F$9?(Hp45$0GFEwEhIUMGR2mX^xL!9+NfNv3Q%r!Qvr9<Qoi#xoX7l`
zSXPY|C5tex7hW*p?iem-ajTg>J3U_28kH&#dlKv-=jA~eR^Ub=tPxnx|NcMX{6g?u
zwQQ$Qxf)FlIsVbfFbj*jtfT{toKA3zT4~s36f-Y6FA4Mv+t+`|b4{HW|72_8G9NB~
zrC6?AbZ{NYD&<3?9^CsaU%I7s!5}6Az*5@bex8JvMRR(k1d5pFwJjrd`Kfhi3`h9d
zhmhZzNaCjSsBl5`Cb;5t!@mA@SDs&CX{G_Kjrxk1r(8;GnI8?+sZYR3SlF}c6G-UZ
z_n1na5bIRLDO>4bFSx3q%$KluUbN-epjRfmTU`0e<ADbF+xn7uy(7TDlt32{Y2lSo
zDKOK7aD)N=!6B&ZI1y@AmF4m0e?5G&>BTBBu>tBkbRF0fl!AY0G>4R2La9J;!>l7(
zDrj<Csi_*nlvsnn{$YoGXxopIT!cYro*?J@N1{}+nV3YCHne$0@iEcZ6+YrXA|h|_
zFSVqsPY1e5Qr{JzTgrAq<Fx%5iVy9@sKO<m@8c)42N_X#4{Vx=0}y4G#(-@o(+zDC
z?@3Zpm}G4V%el|Kwhm&VzA{ti7u^hJw&mMFjm8=`2ZsNc7041(<YHN3_HENUsWFNv
zjDZy?P6;<GRCPQrSi+nHMaWXPJXa51?6DfEyN#IKuR3DxCQDtazB6ZTL9N~N4-gLE
ztBdYSduWvR#Cmu8Hl3d2)Z>7_UHr?0Dl#y(bkzVY!47bn8~3$vD$g&_rigSvr+iy{
zym00xa=g*I#({$crRgMS9`T;mKCQuQ*}Z8KC8vCB36m*l+v>?_&<D$;IX*N2*xN;=
zGw1gx=7^H@H`+2Oi02`b+7mma=<=;g+Qz5d^|0}#{0oLeT=+`Wa}_*d+(cP(V5*7g
z-J$BGj1@*3*TO4Y882`<JXkuoR0IG;P#ZZGxQ$VM3)8xkvIJmO->22EJQanwprKBl
zo81&WKrq|V&;+piHd3Ufwlu`O7Bh*NvUSa|`g~z7m?HH;^g?A>Rn*wD*u%U+k|zyg
zK_GTuPB4U9MyNh!<N51P)^1FX<_N7|5c61~jy_VeLGsU}G5H_aJxJ!yb|9#$4P^Y^
z%UUq0Hs7l(yGW}~fq~@2Fnj<N^S^$t<<vq8)S37DWpg>0b<0vGTqAA;M=u7LI!lec
zohQLM$b;zT^<1@qMVLJ2K7*hG^TolgiFaH=kmSHOOxdSQpQB!b0nys9@KGgD8D`6%
zz6)&9Z~dYV*TCWsCSGmu5tR~|5*RSP!voowv(>NOcFF373-ix@?B@oidUKJ*FL9!T
zxQy;1dHccGyXyEPo;#Jo1mfShQ6b;Wp`4y$QKW!|UiK5=4YG0NAk^ohd-v;X+Yu`$
zMXNR`69GqyKPrbb8r%NAC2R)`%BhHAwGJjfP~zLTsQ_TV9Sh}ayY#B06VO|LkAW9g
z7TD|YA0y2<h&}?Ux(sfVdGVSHRkfU=wjB+BPvX=uL)p;;q4pf!tB9|#;sGt!iMoSM
z?6*V&MDvNIZQ<PU!uTTgmu&N0RasmcV1^1j&Hnl2D5({}|Jxg=C8`@<an;;uAgx=i
zz<Mwzv$=TvB<EL!v=@v1cAiJqlc{msHn`?;K<FK7FJj#Kb(C2%$t~f^s7m4=R__$K
zZH?J#CopTnpudT+^S(rb2V9gom-PqVxLFc{@y^DhyX6fZ?ELxxr<orhuVw(RJ24L{
zg{)^;ou)P-uaeu>7!NR}&OR~i@pMDrS<bvCI$$j66P6u`;a~53Ao8!-J9r(<W+Ak~
zfcIqlwFd0QAuX6o^4`&-zDLeU+2yQ$r4mXA7sJ9wSs}hUN@~cv@1^=Ge?&}n^7Rg)
z55aoMZd`S_t7;ELEP}t!ASWZA5$dEJWqu=fK!H^2Z!^?5b=}&rYqnAvek#~hD<1`I
zcGO)ywSqNf09nU>4^|rC9o8f@J@70SV_HqP&Nbd^ZZ#N@3$7nn)e?OMfg9mC^s<Oz
z@Xfgr4K%O#lHl(3#aQr_oz4mi6z3Etl0&a=NjfkLZLi>hn3Tsx{GwIH0Y+bLon>rO
z%8N;C7@hy*Pw)~pm&3?Bi9<0<ehO~1#<ca(h-c7U!+O;h;C(=RIS=YnRzst4PI99A
zu6$*L=zh?vr4F^U`RylZxLk|KiG6W>+yblWHK%ueJs+S>T+_yXjrqMqN7ME~5@U`r
z#rjMa5`jRy{B-E8;E|C@HRWP)Im+ZVBB4$@G_uJJ??Q=E&d_5vx(v}9DQJ%svZDVd
zOsov{u@rk-fGbRsZzg}sBDzRqp+8qrZQR50yRef<Ig|fGK;rq<ZbR1k?eA>aD2uU%
z7ZTL?q>O)8ul27-F@ll*x`))KMHbPqbTWm_NNQKFJxHOu71mw9^l~_72Oci)DqM5N
z<2!R9*SDu4G@xkKk$Jpn3^?S#>jqc>#xAW;P|AXth-Vhj_2{DQPWc$)v~}KpT^j|a
zh3x8<-oF=B1dBpx#JV)+{@jXjI5vw|c|?47jw?Dx(h9rlK9>l-XFC(IZ*}s#%ErmE
zF_A45cn&&vjO$$jn;sj|aV<(F<G=gM*sa+>%2n)F*a>b#456{~#T3*qSufYs_V`PH
zuyDoX(^Ibcs(jb3o3P?w$Ov>N99B##*%J3Q&@kajP*j(-c~CQgj9G#*{|}pBj<QXP
zMiGnyG#uO}%_3YV&em|zKtWSrL`o*@S+=U;pY&gdn)?46DNO65$CL?yPRM49gP0zO
z1qC$zHA#04$;qErBYgd$V&B1kE_Ctx;PKO(V$Q1dFW1-{rs+z8g!WVoOn>WVr{z8n
zs`O(QY(3V;%7yoimn4Hp(5=VQ$Gg3A&~@M+c!V5G0Z=BcT^6mEd(?OsY=TV3?#Zt?
zbcY0CED`f@n}$W%ENa;v3E99rR5}3f6$qv~7198i8sgDRwr$n&OU+PUvzEI?kcA)i
zSZ(!y430t6@Y1a>=o~y%ApgTCO8C=%tcJvPbty7e(<oAW^qaV)Y%oVXpsj#^RI!H9
zVAfHdBW}Es(>WGsv%r~~{SF-AxI&O}qr)dGP6X8mKeH84J=Wbny`)J4NDd-Gke}eB
z)F+h;DK3}2{lh<OEZ~aHzxThx?v%p<?r3IIz%CxHfw|GHG0MKwx&!%4n2Hr%<bBpZ
z5>>WG;RKy$w@uA2`t#r+G9oMcmD2X*&xFqNie~o}atVFb5=k<z&T{-W^Fkny=#EPb
zBh6{dtdYRS*3n6d0C6>!+;M6HNG}OFMA9c_Yy{|iY^%>e(g6pf{Q(c=yj_NYtJrsP
z52j@#u;)PX*v=7njNLkdiENN#R&~^9VYx@{&Fgbc04+?pDePb>wCdh(c*LBj@r}S=
z#L;)QbL5d2Y2{`jB^CuE^f1V}#zJT3LjQZ9`?Z45WMfNEwy!MLMn{63D&B%~@s&Wk
z`(<H)$Cx;*b{~`X2h@njVD6<G82mnFcxRV~c7;K=Q<p&HS{lMB8d?iD!DtceGA2A2
z;F*c3m;?UQNZZ9nP)>D!l%P!fHkyB--#W~u>av52_we(jADOXgTyn0pezc7HqmHfi
zBP+!tvBe@MqA=Kd8nXvh9Z`1>=DQTh4<6Wn^nAN_szMrrb2Ph(K^9BHv^3poq96h(
zBw*Bqk#w8T(D2Kf8WpS5<}o*CHIRn!c26Bm>PIl=U_1anK)}CCe>1bX+JBZEsP2?3
zC?aKnRWVl-`pfY-|7z<Kg>ipaBOFv%CYt=wnd}8S{a+_=<zt<YgWYdtLKT|NzS-g8
z5m@fr5ZE4Eq9pekvV(E*#*lhq*_=&}yY~946tbw{;q`&j8^|D<Nxk<Le&6~*J}%bI
zwXsZShzWOF_E@xcj3n51itlSdM*l&@?azN3U@w9XSF%(!-Ia>rx#j02N|BRfJR~md
zR<NxDU91ofZR$|mnN+2~VU~G?i@BtQ&Qq}gYN}y<cibL2H5Lf76b%hEAf9vk0Cy27
zEN2YTetAih?(3!KVp!|<tfA}=qfv|@WuSwSXtp&%RgiwrccGaEbW&^RS&4ehzz^ea
zy_=rq(qQaj>Ztl|d5XTr@_fO$5r^3e?QimucF&Jo>ZOFqUI_Rzw!3Qbg>)Y)#-|*N
zUH;y?>AENF_;EIF#vkUkuuX{n8&6C@=&}y2+vn}u9mFxP5T=vO2Gp}V(l&@FH!LVL
z!f@_wmvKR-Uaj^5gX~ekt3yx&fZJ);Ux5D7iCUE<jneC^${p7QeKnzpyNtf-pH*s8
z3+VI$*W(JW=cJ(Cby(+xBfkA<il<;UUOsybesv)R?MI$lDC#t)k<PP(z-w|(OmLLG
zC}#wtpIs_f=l#KEofu5Q@&zQs6lkolIxN~pc(In$QaoWKG#2?jZH$A@qh<+kH5Hoj
zD~dB&_10;|u14{EDF+=!|JVVTXaw2YKP6c1sISv{uy#JjXIXly3D)D7UZkv3Cpbdj
z#OEINKaD?jAx~!fgKP#Oj9JM8##XgXkBC%*Rh;2qHSGc&f+R4>>yP>8Yn0(`@-)Wp
zIKwidl1Ab_4b^$bLo^m99Tc<$XrhEVAA>8dO-}9JAK5co5p0Jp{v%}r%)o0|@VN&y
z2@%fzH3U}ASP%M-(?9RS;zyx!*Mo+2WNGzR2V-uv8BB+^<H#V|J=S%B!unrG>25Hz
z#IlJ6iO-#&5MtVrp9gQwmPJ*o|7>_tVS-aPY4genzyXr+F5LB%pwiN;#ACZr&Q$`v
zbMYlu;Rx-Sp3awlZTYR7+M8{?;JxTX$;i--^wv)U^S_o5S-WK|hp@!(ddenDpb}?W
zGcLv!Pb?oIZd$Efq6C)MA4hX%Gq4dGuizbH>FnWw#OBd<`YJ2WRMxGx-iek6a^sW2
z?k6a;-UZ(5gJ~G3<;qYxQg85vbI`N(B-MtM9vyA~4@sW;OLw@T#-M5L3U?NofGVwC
zNgsJwQO81SzbnqNsaIY{m$jLUhoW-sd#KEzm9#vgnOf5JL|rIK-$$}l&aF!q<M%Hg
z;Wh-j2(W1Jgk#+&>HOruONV5bbi&d4m=gjCrBt-&(?NDohtU+81R&QG{a@4vGRoKl
z2v}b1+pNbUP`xlIyb1p6lq%+L#}9Pk&QQ(d(^Y>Y)IQ0-C#V5Hr4(h$p$29|I(dCL
z%$qf_PUy-He7rPHlUz66C|qNs%&k%=hENh4H^@eRQ=e{?)M|qQU9D1a<1=B>ZX3Ur
zEayRE3#`Ahj!7&N2Bd~qx|+{#;B_NKJI8>rfmj2@@_yU7dmk;E^VIHPiw9-GYDw=A
zqE=@9B?fOom<&gKVM}c~bRGnjQ%BqPs}TOC@tbk5v{h4H=4(o!75_1nU(n+r<S>Fl
z7PDdMZ3Pp&Xq&dl!#t8H(_C;amYdEM6E3!!0Uzt^`aP1~`eF@|@sUzo;7+k^Z=B)`
zTev(@kfKr7!zI$WgmPRVc|d51t=oarC>1!$`DXFn-d4j#NT;>ZwAd)T>_XskY1g{l
z*UFl9QVfd}+NcA2Tb;LR2jG|0Fro{n+*^-7w{~}@r5e&Phkh}lbbG~@7CRCS=G&0$
z+SaX9Mc}1&HKqVE0)MGhaBFN73d;m|+CpA}y%<aE46=)LPrtds;kSD)s{g5m@e5hc
z@~K)e)`AlFl<UX2mA!CUanAVTiNrBTZi%Y*3t*fYjrsQnx{=b~$c7kblOJj7otNd0
z9(5{F!}oru6NyGeR#266QBBW&uto)Y@D;6d)&5-Yyz7a!Q)6y_Rq-b_hA?Ut$3vWC
zm2IqKaXMu;CN?zAR2#BDm;J0B7p=BZ%Z*FuE!0i!T$I?&zfKEKigRGkr%Nk;S(Ibp
zG?VZ4i#$+aet$4pC5^_&>BQyS@2qxkc~GZag{1MZ?WR_?GTbrsfkW=(-<U}5^jp$S
zBYC3GyiJF3Lkm#QgzGpgAuy_|fCK3LgPd7CNfsJ@&oKmw{-^FxVPDYzEh;#a2Dka=
z`=%Pt=PpIIdG>2XAk1}25*i7`?Jzn-YHGUWn|+nbugKE@5rdBH4{{8UyxUz5_7r&5
z9=;G~UE)aKHdyc%85_|WzP4_7dm1=t;y;JgQknviPLV{wgm+Gq<XTJ3DKU-;n<&-h
zwkm!P5dYm)^@aBD!~oq`zc8pHCRY7<=@_4<hL?7H<=dlIDS=(*xDxfd#`qrLZHe;i
z`IF?Ga_GcX#iT^c5Pp?vi{}UgVqQPlEuNk7EuY*lyV}c%k7HHCFGiVk)pw$2dRVC7
zAend^Y3FE6SrdtMs_W_A1>JZjnM5=}Mh>i5^5JYfauZ|~0_XTYCX~SxdUP)}shCKn
zo$8s^Gi_y6ub2im*b}4*EDNJr4k@dHcB}m@(hf7r&o02R4b+ctI<4?yAFR&HMyNvw
zUy@d_z}J)z>yY#r0{&rbPNS$mt1d=<h>NN-kx+k2k47%j-P_Y;qT_Q+tTza9nSPg9
z8?~-|9w?)6S1$;k;JKrcG8VZqwhW_jL=%%Ubk{mffO1O>`c&?}mLrRQe>7hxkm8*q
z1=|UGe?_T0*Ct>ZWGsnKdozu21I-W<4_HW}XyROMvTCEh^b0QLNrV~j^$<eNza@}3
zZ9OSN!OIl^%4sHKq+JeYWf*%(=mOZoH=H|a3R$_;dILhD*5--)#if9fgBL1)Jom_U
zf6AC4Ra7){o&F^}h!r-*UQ((!?_sht<po-WYqMvgF;oYJ+{8BQB0Ay4$yN1@zZo1S
zMUgDU@uZ&Ez0((k*S(SyZ^cH$*_%zR0S+$5fBWBX4z$g1ADdxp=pBe#aQ$5p>C8u-
zL0->gpwWt7@OpyuXd<3PJfgwB-k>XC|Fpxn$3ups+bk{(qzv<L2p#R^z7Ep2L;AjP
zQ<U<zZPL*aaK*_N2*<wn7RN9brFB);WuUl6LZ$d%8>7Q~IeQ;0x<K_(jIn;n?|N%0
zntdwo!-_6bYK`WKu6|_R=va`yr<Q;?y(n!8USiIdK4Cg)xnYqOFOoJQ0yI>b5k;B(
z%!1ev4u0Egv=g~ejg0AU(}8No^LkIXwC7^Jz1>@j%wm!W#8qf4fp2FfMzvBoQ8|5q
zD#w$rD^4G6ub)p&sD7N1D)|{hdBrp<hzul$-F1H5Q*m?Q53-65Df71atQls1IIOH{
zv9bp016g2SgcNkh#W2HGmBLD_HLePpoyQ4OHGfq0G2Dj*@2h^1!Wd6xIObuDq~tfJ
zREMGP7jd7Y4tEssT4Ba}I`{K#SGyI`HwkT+;8#N7scoi#=`8DFjI0voiz`v`bx7)i
zc;KJqrby5w-eOQf5_v9k7>!_VDsf=C*}DZ^@y>L5an6%~{dNgIpaIpsc~(k9yh2H4
z{n|`AM4u$BEuFa2i$De;FFbw7E#rLmzncZa+=6Tc6}`#g&aINu6y;M>Dnp*ILwvBb
za}TO0m0?IXH)3g%doH}?7YGPxY-PSQV!m&sX&%s~D9{YeC#)1|qed}U_YlaBI1<_z
z<)U-uSvSbfV$3#n5>HbTUIYY;g>xj+b8BFcv0~GYyUW6~k&-Ej#kpZvhyWbdvjZ-Q
za{uof3E5eh1epvCzQR{cbF&qpNc4MfEZPGTh|Z;?oEco*r<)n-Anr}u;8;<kx<=}Q
z3L|8Ed@WZcJmcPQ%RtGNgeMYVs%N*M#icAA=3ZZ*NZYs7hyWCK*0i#RcI^gRD7ow{
zG)524REkLXPfCxi&|A*^AHa>p1096oM-yH9zu3^)dOW#@$hN)I`f-{1?rP}mP**DO
znNlT;OcvDoirxKP#AV+c$N`Q~d~W`d)rR^4U)&&{P20aamD?M0IFJ;@7j{*VXUM-A
zsdui51RharA@9Y{uaLm7!Dks~o9;R$MZ-Inbki}X=29swsjo2wH^H-t5Pb88&|P|2
z1C1(4g@ZSt(yqk_2?$e-AcLpJLLa}fGEkbcjyy81TjBcvlw6Wo;nXb=6*=4^Tg*8U
z3$hy7mvNRBT49%#iU=0kkSN}<C6BaKX6T+qjhG#;ks60nDO}yK2ok>OemOK=6Y@%t
zA!I(Ou{7Bl@3kb5e?&V<+EkN#>s4DU2?N;ZV9SSx`PBBUlY+c{vB6Ycs}$HK@~XGp
z&$dq<BATk8@cIm6NiZ`VL;>jIw+5v=)&*}>51AqH+&o$Tp^QH|Y3sHRVN{Cg9ZuZZ
za|6ch7S0w`CYzAyWwwXMZJE#Q_H-R&*9iJYTnVtFie1(-2tnV(#N|(PbXuo>C%nC!
zSF-rsKqb;!P=I(KV;M+soQ7&B^%gVf8H}Igvda``6{u$2-%;Sk$+V;Q-OCJ5ocoQh
zM({_BS!ReaA;K~@#S}k*RpWt|vD6bZV&;&UOW)<;;~ya2tbt^^HnfpMHp<0K=}3v%
zViGlHNjmh@C=Ww)=`(N7LT$L}4Ku99N5ZN`O+WRPO3y2VmjHW%e(1-9ivPc$ly5av
z04}Xr5`Ntx>R&>2Mfg6m1j75sT*$vqiHi2BIzpS?>?Y3B^T>$E9ZL7!`y3tn8nM=@
zo~e5-=4KZDP}y=T!dDj={?8gKe#}q{;3$WUAMe)iz}U-{h9^p>14H3)Nj78)Z&l@L
z_1TA@1gAOdB>G$98$Cy4ssx{M&jzoIZ>MBH2Z;@u69n6&Ou21NnR5xXZtrfpf?loI
z54MLGN(*n99ntKAU5vY`sI<0PFB#K4RHkC>#2fB+H45@x(-b{Ri>)>uul%~MDKeaF
ztthjr!^oiXel`h1_A3?zqS5#(A%&XTLhi9ePI&pBsn9xHt74{Nec;%F6~D?Y+K=7k
zFVBIjOKFXP3n=mV0?65?(mlRcLr&SvqoeGAi%>^Q{xoK<V4QRFbFqvIwu~4wO%F>>
za!OB6_M)Fxi6|F<8<5az0!Z1#*IvGAyQL5q0~P(mQ^6q@%Ww3KB2c<GWaWFBJpjqB
z`*`mV6uLW$SlQ>D+)`7DjEi1U%pxEy-uw{`)R6JKf*4nerZk2Ib2=nZZcCS4aRYg6
z)6;rOCm`MXR*jONojNaE9^5=~$jI?A1|vhht(7nKF!%})NTEWL#_zyG${y;Yt=$oC
zQ&u0)L>>Rp4P};+%TU7JL-}E=8lp)$Tebh4Vz4T~0EU~(*}d240<NWN#tjd`V&I|M
z+9H8h0g!!xgp{aZAo5z?E)E*sCvBe&&NDET4|-s~EBwN;R_&r|dIFNtp3wP#w09V9
z*5sZQWF659HVC1~%D=4HY;68H0*!+pZEI4~rx8TdH?t*zc)7qWj@{N~^V(o14XeZ-
zj)%AM|GnWzrG;VpB(9KVECR*Js#NPcfp)XI+Mmj;JE#wCJOw%)Xa>RfYbi67ZFkUK
z2aJtEuHYy{mWnq(Lk@7-(q{*6dx0~#@y3p|agfNdAP@9d;ev#tk?s-ju@`rN2p$6L
zlku3_aAg4m?js%n47#%UYEJ3Kkq6x+zTTZgxOv}gOmWoI@r{QXc((v3-yMN<7=fcJ
z5+8g}?AlvZ!#MSEXj4Zw|3sqBgVN?^_rW;=A$FQKKi>UO2Ed9473KM@PQ@nU$=0vJ
z<STt<U`4LYZNL~GktnjINa1_Zts&T3t1UTHHTOTmMT*)54V@e5DhEd>iE0#XB_@Hs
z{1%MGzjPL^hgZdNZ^Ah4uY6OKpkL?A?4nB9pD1Xnuk)C}A@v5Xr0?OOXyYy7OWgs)
z7&s$Ps$r{1e3TeO(i=9z^f*x%x?TdgbAQY-pek3An8eHiGqNIzyrykv8=EcWjj_Ag
z9M-#NA?EMqnS*hC9oqIBpHKfJ6f=YbNr~y22=|kW^hsmV9pUg}8?N<(xw@YVcThjg
zFc~>r8uKX)9%BbWmsUIcsTbe}>^%pmbO~ot<KNm59(0Z8{zcNs{oXLRC;ynzVq3(a
z29j03<6Ry+N?C3fWLoK>6Ja(zx($ldPT6vH(CY7t-ykUtyk0JNYN%`8Y2>MhM!5Jk
zwb}+*Y(Aoc6csc<1_Ms6g%4{Ap<E_oSI35&0)~n)^8~&tJJ{_L;xN@%KJdtM5z2bR
zrVuHzf|s{&{JD#B_iv9stDi6Gg0%B%(=5bwx%FkA<;9T?@8JZ&&2=CQdM!wPf2q}$
zGvS@iiga5tGB~j5C={TdPi3&9w7QD-bGl5(fl+;-_SjvUXsl6Ehmf(%heDX0LCge^
z@6$;@yU%Dj2sQuVCBX0BrG{NRzmR2Nw#T+f*9QQNWop6c6aa$()rHJ~>OZs4xuU}y
zS5y(xU^;+}j<K|5ZBKYzIs7q1P{ZC1`kpUglxyUj;B@4)^I%U%bn*TSS3j<JF>w{$
zw6K*=t$%e|vaalzDQUoD;>)2__!(kfBMAWFL(!Km^Ov2}S3;N8J-g36M?w~-+Y|mq
zV&3T(*}%ig>%_k3dA4dE$u4LIy!wxGSMU`bht(nD+2wKOr%F;~oulBcfh+y}Sm)!C
z%cZ1=X#dcZn?77}%&Zd@JdNt|%R_At!(;yGxoz!<_%?h=MJ5DC)1rwmQ*vw>Aq;({
z4`{u0no!0lSz!HrtQW?8f!9<#+=6;e1^{bxnTEgvOW^vL>gt4T`r`#eMPuA$c{B5S
z>w|4Xz?KonCHH34&xWbrN03n$Ja6z`uS<D8TjAs{goP}8IiKhD`cX8J_R8B){=Z%i
zK~-rJ-!N{Zve>@<=yzq%D)MzG-XQ#3%4IL=-V7IU-2=^_riV?<aWzA(E-$OJ^-*UV
zs7!q)eW_8uMEt$Mxg1SsE;(9zDcLS>Fb+9sFX$J?$LH|-69E3R5Zl}}M85RFul=n}
z*-QN=f;T0u^TXKsUdb%uhKXouWvS^$L@>$9#EdjUEn&c$GPa(;AC%wVtB;YQsgjxU
zDI!;hG3B=9pc0)9A}pcdr?B0Vu`7>lxt7W{6Z7yQ-yL<y^AH&czDo|^<z>J#i-GXD
z=AQY3>t@4{5ii@xQl1I70!9n0hNlR)_BjUb*ETkStl?ii9n7RtS44pEzk@+Z<PMu`
zIn||W0R^^QTI0uKxU$+Z;)DCD(=L9=l8f5#Xr_FjSuG22N#eln%_F<DLJ_gXs82W9
zo^GcCIX}QNwG+wOL?4W1=vT5&Vv*xIkD^i|J96N-vg~-XaGR};BprJbtdbR8WQx`M
z{HD#Imqd^=Ds%l#ctiwrPM=`pVxX@_1Nna<=xQd^rS$Vp#&SPvwXN-$|9)tZ_$)Vq
z<s<#YTLO{P3?}0xLG`^Jn@Cle?$%?<W89}<TUv2!<V2cbxP{o&KmySNKZ)xXczlxL
zJ5`pSxhGu%>h%6h4l}u6X(d5_?y1R=GlDjt-RaGF&YUKPd4%z{Q4`iJjYLiuHr=2T
zpJb{%wdFW1+s_L(Jf$@=u5{s<0_1MXr2Kbpb;&agIjCHK`;==<2%!dH>q3yCa`GSp
zxTCQYXeC&xc0kz$h8WyrS{^XI6%ak4QVkQqaPg!6<W)Y<<e^<*94-8sbG!t_UU!lQ
zDc)Ttw>=QCFs|8-^Ia10M$R+bkt-~>9X4xp{Rn&-!;c`5%xh+KxCC5n#8?!cB*fAb
za}oiUSO&3FfCK4EDgSmBA9}SYg7uex;JOYK=+f3Co8+dEL{E_=MGH}T`WAead*7I@
zrH;nA8Gm~@zQ6c3`Cpnm9aze0Q=lQi%(h@Bq|YlBJMc$BqyVM`$pMGv0i~*8IiCg1
zF{1{K{HN>5+O^-{fA;WMETYI8bN%pv`+AYoV&o-oLf4R^;AXx6VeHgh!hCK5=Y6e*
znGx*Z6WNN?`q)Y&{@ECcPAEwMcYj@Z;tAs&l-Q-Mh=~!kkQQjF#Bdi!S$%+E@wkaE
zb(^B#B~!s&?J*o9%cSkMUQ<NRD8x@b|0ouM_cI22@ST@Y(Q*GWMTX}lheysVl&#ao
z^I>SmA6j107@_hE7Buw=n4K>+d=EFE)<I0k?u)kLR`;Ho-DnM04G{{Ri=FuAyui2^
z-L}}`Dv;lgH?@?y%V9d`k=HewC(cZJQ@sp6+nOp_CkN`pI_xI2EYTu-rU?H3inyiY
zsrf7*^uiSE8kHam{>|%2THi~hUpC&QLXYV>CZ(XlN$e)<^3@AklN4yO7W9P<KKrfT
zQ_{URlIVjTj8Z);Xw1d~6_NdB1lG~uDoI1$c<`TF(OWeGfp{Ce6Vd=j^r9z0h!D#|
z4t|K{m#Q2D!B}l6p;m*%jZqp>0%3=_@B*K=ikfPVWd$PttDP2i9njLIq0jZnTGC_G
zmyw{1a{bg0coFH>A$glDW3;d+1sP3E$aV;^K4-1YhsA4ObtSiahB`(`W6#}8(jS}{
zITRrV&${w`Zwp0ogeTeoq}!7v)`T%cl*c;bNd+hMlh?+DMwB7&p@gfqy|);jBdX5R
z6A(2*rmkc@uKQxSXW*p+#*Lpx7S7%Yvc{Q;4iZDfc!#oJ+R4-$gtqlxU|tWa43+6!
z1&A@VRc!fbK}Ejx2fA9mn&q|T4c6cu44S=S@YyhKRZjCp0dUVca5Jz~aHBc%m{dhY
zqYswW0pEX3#ZkBUm%Fg8+sYe<z(sWn-ar_4<mNO0S!#!97YQ{)N|xqSKx><^Dm@|P
z$Fm(i0YW=qeX9#0mTG=W2Bj`Dxe(EZ$oHtyA5caC0iy1=vOLu9kkH!r)b7$(ffElU
z85Q@d;1*>oUMYW-u7ssH4`<kbh@Bl}>6@Bra1^#sb2Z^4&Tye3ibd_(CYrA#`-O?a
z+?)=Yot(u;*=`+W-G9tur^+|xhS`qmiu@&Q6%Ct#{pDuH0@ykuOx))H28w>8nQTd5
zn3{xz#(1;xY|-uLV`@M%l#`*eKK4Mh<G`XjTHA6Jjo{6^cxyyOBd7<}$giMKpGW){
zf;4zi-0-YwqMNel76zpeVsY#|<hBgHi!M=V(=avj<QB@Nf-^PVfcs`Rr~KBomFw^P
zf`z~&jN?u>B%B5BvOq{NG)+!JsK4~$2qJh&Hn%nBEC%K1N^YII1*EPg4*&8rE4?3a
z{p8jd6f?4ef2=W$vq93g8#$S8_y=9DxkvC@HRkUEiBWh)Hw}7(B(*kP?_YABsV2>R
zY|*d8`ibC9w4yO{KgU-g^l}PM)rnW!=RM9eEOhOjxbv3d4g8hWUR>#)e+E3jf*79Z
z`916_9cwvH2=hn!IERh24J8m41K$n|Ao!q#3%TND48wqC7+wpe155z(pAbo4h9jFr
z5nIj9Vd;4a;vE)qin+}g4-PgR_C)V`>sgHX(pJRdVK+TGyY4tRnZH+n6Ik6m>e*=q
z=69F@v|&J3BME^sj1J)7GhTvJ0kZMFtct6bqYk`P9>HWmx^MM>{c1Yvibpy}AD(^J
zjbNI>u>Xk7NTZrfqM%Ew7auG`mPgwP+usn@J#x7D#*$lo?qQNEyM=@Tk?xj*2piuG
zcSeLIyiCScRDHCbGc^G)I8aYo%o4`EGV#7^j|cmGuC*kcR)7%^NdJhqU&|;<L=;Q;
z`=VS+o%g+zKV7|sA2ygS4<VcLR%<YL4n}XQ`1y9maeJ`ba-UmWbsSIRY=LLO-Ktgh
zc?hIHJ-$L?2mb_RyKJW-B`}T>smv?_jm$!&hfK$0sW(=W`KqwNu9x{pDvng;LLI0q
z0EwrcmW3PVw|-ljpo|#WU<k7YL`lh*qtO8zh7+}kmktA|cUqr+cee`7&nrA`Yc`2G
zLnqw(=-)0c$30=|hQ~OrJQA`gdKddJ^E7l^kKWU|kGA+?7Q!%srF6hgSP^U}*LaXj
zZP!e$$gw+#dUae>wrlVQ{~@O_b?d<ywUy9nKrOKpyZ8BS0LHX2FJ}pMo}rQjJ^zXQ
zL^YaT^xsZW6zenaZss@Oi$$BwnRxc@O+rjq{?U32ycvQU1Sh_*Tqpr(_YGu1eS}-;
zW}RXHy*ftS<+O{uywHH#Ho1IA%FYjAqky(??B5?3C8@8FD%fv&N>WFGn!d8o9?tjH
z9r!wvu<4Qii-vBSFO>__yzNJd@6i7mE8DT6&bjC)X4XjTT2)a97T$3+H;%2-Fn@%{
zY?I&ZW|NN`E%CdGgh7q%FROvm+b9#^+HH7|Sr{y>ljw_Oqy{s88#2up*^-4SwW_o;
zrC)yYdcDV*mFhlJWLe^HL)7TCUNe;R%#nV?Yc*5#rf=_G?GY}=|Kagofcv3&xrpUK
zz&ngDQB9UP>14-w9=c-*S4+O=Y0FJE9+zE)>h~h#Ty739cr*^R1*I=ubKLeXG7x=P
zhdk5j9?<JZd2LYGcBs0rE!9_963udAtx(31g+A`duU;<dE9tk;BoM_fEhVi>lJ=^M
z7Xyw>I%LAD%A#EE{Oe=NTE5C`x+lh-lkd~xMfr*ANa1D+LmOZ#N3Iy2=*{5`4DcZh
z9>)xsa1=B}R-VTf+GC)@n=+;rMx%_cCd<9Vm6La~4EW2ktLm{gZTPFB#t{)8Z&utA
z3;xp7WX2->f!#B3x<zdcA|ZA6*qBJf{e$Y5j{9-Hkl=IVGfP;)sV2(yRslIf{zci^
z{;}&Cub=jd&?)q^46i|v8Vc{i^?QtnrK8<Sva7%(9Sf{+VSp6T{^1ufU|$fgxlIi0
z6kOa~?WKY4JrsKppcw4$&2bn4`fp8=39{Rtx<>zAEt`SUgGaW+K5g)$oXjgx>Ty_|
zL}MQ8JlggZ6c$${#=JgQM+&R)0HIQ1b4sfroem<?tz)pQg=bk|_9EV4*+ji?xPDSo
z!3?9uRNfm<c%FXyt3G&VD|ZJXba<O0M1lvIUotE{`8wF9)Kc*P|7;(SRNP+Tjq<GP
zErF~)yMxGSoKEHNJufi56JD9L&b@w)<r{Z-@~6bqnFevdb~4`S9wlbb%l%37El_#1
z`9qavqxIzzQIGW?8j}K+Lb*u)owJ=^Fce=tL;aR$$K@KDAw+JiBGuIPa_PR4?u%s_
z+KRkurbw|8ZTXiCa+!^vu^l*^lQ_c#P4bH@^GR#En+^ywhdyTPhEfjR0o#EwqAP^|
zrP(p?)=`>fSix1ck6y3=o`2}LVO~{x2MC~+i>{y;bk?=**k)t`NkSNyZ=W_X;(#}>
zT}&J8X6c`%8}nM#uwm0RV}M5N6t82SnC^bA>Ous0ftD9Wj5@~PN`F5%CmJ$|dI2cF
zTNtI1t>oH=wQa^Kf1=AR>B0$DPcf}KdTslJ(p%0v7O+_|4FHtqjPp0;kiip1-@GWo
z?4RM)g?%Av{Bz_arPC-O&aG;y`@V8H{jFmWR25V609}A6Xspzp!LIg(y8KC&h|WWS
zxOJ9+{!5>u+jCEn6WP?iNTG%QZ5>R{-yhxys3JCWTKQ>L-TgDTDK;;cZ+LwmqJMs)
zL|95g7b*uQA2xW+MdhKu+Ej(-yq}D&Aawd%Zok1Z*9@pkK|f=L`ZBU<xdjK$?{+w+
zbO&A>#p1Zc?USyUQo*tCc@PuE2YGR6&hG-&>y{^0V4TwUEd1vGNn3Nf=VsIk1nwSK
zxYTTBaRmwr3dn6eeBJHo*66dZbFrGd5kUJphk*JRFXazwPR-8|Jzj?yD2m`V3ms;(
z3Vc>jV3?6nY*F7tG7xsPOrtP8sS-w&_%Uj^tJNpeQ>yQd=FhP;H)@tNJ66=Xr+tuP
zEhf!!rj<7-cDs!(FV#aJO{_c&?t3hGQ*h65CoyJQ^KU##gU^d38#@jmpjr8$L)>NK
zqieJmj;|+s644*esD5tBnoW?p(VRldn?eS-75NmMZbXbWs_f^R^~CA^1L!;e9SQEx
zl-uaRIew5z*DBA_ief@}2M@qZw_6iWzwIsVpRQ~23frX14mBdHi)$s{dXCJo=CiiJ
ze`b{vj<kj63H(GBI{g%zv9x5hgzbDO-@m%F_zFK3j|hofGTF8OM&(1$hjyHBfxd1=
zMxN?{hC%)C*thgjkri?@V`K>K=`{F|mcu`rK2V==qWSHxWCk1q(pHvyc1XLxD%N&N
zc7gzT0q^3K1F$$rGTf^1N3II&7rmnNy0BPR3B}(^v2Az@-Oi5)v%jQ9NgMtd)uh`&
z(nMka*HkC+!J-+uIyrcf0J1lq;WKM&zB1-)(lBnBQc>Ft_-!zTL>iPg6NOy`x?(6m
zZj`){!*y=8cwU{@{9ePKC*-BLzH5|%Q&V>os-Zcso+-!b_sW&0qXvB<QH^qMeNgAP
zcWLF6_LoP<n-e6zdZ1+n+A2_q3ks7I8h1S98+V*xq`fQ@dQ(Blv^f0*45asSrEK3p
zl!^a+nA^e`OOb){Io-xL79LZP*uDLqgp9qqM+3t6Tbv`PuUD3*^^L-O)9Gwh`)v{3
zR3t~i-)Ya0yYC2717s2joz?hF&F?#P&j#*^0dgbBFHhK`6_#sAbpXt8wKd#&?E->7
z5|_g{KKo{RL}F;kWacRyQ$<%q3)Z=~9FMH!ra!7pVV678xO9N=sg*Iog*Pe`ahwUv
ztkB+~m_vg50@>NqehV~8dH&E-^oG!7XCtR=&{O#9;rpt_WoybOh})?aoi&VtonjdA
zvnAqs0)6@V4Pq}g_0ski17^GS3)->Zu}5yY&=>hz{@m-B!(vZdC)8+!R9_S^f?C-!
zSMWmRq}|Rhb$II;$)_DY=%0s~O(JA{H^8znYeWd>dLBtq@x`8z-qw*~Zkula+^5SX
z^z0komO=ft!w}2S8%$Wzze#1oyefly;R>P-8Oz$u3WI;_KC;^SCjq9*7B*iMj~~yY
z=m>*|ocp?2_d0UYcG6gSW)Ym$#L%0tIaHW1*zdRr%|%mk|FJhcrAU11Gwo?Sl@BNl
z`AnzFw*_qOxH!OR%ZHcX0y-aUX%iqh*fC=lEk@gH)x#NO7l|sd8ru5{!Qv#5k_oHB
zAz`X-fIznN<HJLULLg!vJb=b7VqJCv>4KU21}femd1s~J_*6Nf%$s(wT&2Q(l9-cl
zweUVQipUQTc@T))JgnJpFUMAJ?Z=<X44~fk_ET97zmyDz_BfGEV>I0_Irk=f+bvut
zY0%p*SHRl{v7Ha}wN2WKMbB5_Oj25DuUhIXoZLtjc9)f5BMMF}Nde6#Pvred2^V1Q
zes9(TJ8)fQY7WAWxM&>1TU*@R#qabpn)d-W)0##4vQQJGUKiRx#0Z3E+Sy>jQs4ma
zwau5$P?FiE@_mA*mEaw^sHvKR#v;%4W%pTYjZWM$NgW_#U7I4r$e2SQQi{f8Qd?!r
z<y|s@AXU+ypv;?deh$Q~Br2noNL(o13MZr!E{{4x*CCwaEcDKcjxy6^*k~5Q>Af3=
znAKG#k2VU-f|w|Xy<NW|2lz|uXR}Vt3wA)Cyd}Cuj$F9IMZyOdT(+-;n!x@G8Dg8F
zB{qK?)ySL_k%FFJkxWa~;U-8&SlzFS03y;0shlL0`n8ZV{qcQ;V7bLk`?7fy;*Ez@
zmS-KI$?a@N*K5<FentfTnWn~%Xp<@xEVCAxwj3}60;IqOuyt~lt!wjV(l#&43R{%0
z+UGl|GKlG$Uem+`V2o&VUIQk|k`#I~_PRFG&=9Me7E=Gh)e8card`JOZ?E4kM$GVU
zoDXzFIxueKv{a}izr#;b>5ww8Y>pH3z(lZ^?_)w4DiuchWO~O5WL9h7dX+dwWXIFu
zsR@ctYsqR)A4hRzNw1;+4arSkc96ZD_D~2tN|OUc2_YGuVHnkdoFlE}LX0mrE6k5B
z1vuIx5UTLDf};{38DJK?j@+^gw?(=v(ZYLT^{}P#BX@{k!4-Yz>R&{f&qAP(ETXc%
z^0S@D6X^icMKzjYE(auq+=N+QVIrpw-3r{$XTV;uoVK#jordH%{{ge6C>i}KEbI$|
zS9ZEKWmFLzb&s&@b_Taqn~riu2m7x!-G&dFTLPMIxBQ%X=IE3z?&PMBXjk~g3#2i!
zP9jwL;r?})dElX1>kJ|~(9)}JlZ_J4<=McgXkq+<zc^PkZ>q!`r7Es*wBnK6l7eNM
zbtE2tDvm4soYQ+jdzvY$w5^~`a&q!MGeaGc_ZnO!7>|&7jsA<SZpQ7QOUy1qBW-Z!
z-Sg7-J*C#1AgUCG=!X+FAr^6sRI8%}KO<bRl4}CC?QAOl3<CY+V}Gz5f(M0Tt2hgD
zvwkP}6cev3D%E_N&{hx*YKf@A@GR22U(bx@NY?B%s7Lcw&0{k6qARG?pE72YVs5yc
z!qmiQDlKofWuY}A6rO>6o;CJ%@JI3kA`2x2lYFXU6RLDmD2?&=^Rdv~ion2Axs-(?
znptS@psdP!H*Oa7LmETN!#opFANcHO{<s&?j{P%76437MgCT$4mp7#Sg<{oJ>IZy4
z0PKS|!}2o+t?^Ys;4|qPwRIAdTy!cY_9cjMsG@LFT&v2@6MoeI$LZEp!($5<QJxo*
z!?yKY2eX1I$dF}xa67#Ahxne`?@7dSXQnyVu1<V3=Zu-%41$hCUHR{K)M9mI&j9T4
z-}B;0Tf3T}hYt}Zw{s`)!NYM|GnS0*x1XWZ^6rFhWXu<>&pz{=DTUf~xiGTIy~)dl
z&vrqYrD{r!$a_Y6E>bVPm2%?yp5Xl}rdACb6pHU-EmuAJyk13UCe9FVR~T{OsDx(`
zhUwPB1m#5J;0|si*tF{mJO&sW{}>yvW@R&3Tqb~A{nyOq@9-aVPx=P%7O<{JBI;a~
z=>Mt=9yX92lv}h>so;}`ws`m77kE8&$j$yf5Lt-02skdf1<OYxHbX}JDm6cbqb!O^
zrBsz11#g|e!VSJBFJM@nc0)sor(ALG7R5;M;6BEuD=wqwj(v@_#rCMK5KYDQc-+%8
z4nPpe={ay-L0Fn-xcZm}n8&{{D3NMtJjKm$WeO;mo1eN$3B+q`;Lsb31w5GdTQ$1h
zA*cs^<GPP8ck}*WnPxw*^!#b|us8a2mwX%4Q9(nD66O&6=Zq2tc^6>CyVa7%+>foz
zNq=$7a?b|@hC~f*|HBA?vDAQlk`Jp#O#}TB+2YCTVx6)}vVSG-$-SjOfGS}LbX0AK
zBjDZz={iKjJ~vrrsx-@b)NBXQVJbbjQvt2yH4$J*k>Gc5SWo?%s~0fP`6zF}0k?#k
zJq1iWv{(29PgF1y=cl{k=w<dOb_bj#;^ELibe|!u0jm8(y{3jT=Uh$h-617kBZHv>
z?*`ZLxahG2dr)mXzdIe(EK{mG)=sGzKt)=OMk22pj|8Zc%OMQ0l9u`+KkuzN{|Iq|
zWdr2lA2h6iOI7hJc&^Vn0c=%9p*fU6mdLiSce(q?Jl%jY^}qNj$hVwV$bDY3(c+KY
zIIogA;`YKw2nig+0D5P~W%0e^zDp9@?`@pAO}(`AvN!2&w+$nAL~tB*Sxh&i05AR&
z>hfh;M$*W?F<-k1yn`KMMyw}<(XZXde&@OKvTb5v9*O)b_I^9)%~GUiufe=Dy<)c%
zQyhdXFnir`%3YbSW{Cbj7rP%KbBT=|J4?u-9Ah)j$)w|rv*p&e$R?<3%4xU}V_UMt
z?wi@j&_PFfLNJTG=n@&VfvMP9?YxvBM`0WN`)03jze!vdLvVx&T&h2!Y76F6TBW5&
zQH_-*?!@I;#!ekn>sSvW{imi=jYjL2`b_X!>#5U0wxVrzt#6ryiz)&IyQ)zHr-&Wp
zyG)=aVn&#Mdo?lcMoMU|7)yQSl8u}VpemCXGbM!V9)o{+(-_b|2V``VIU8#<N`KSz
zH*FyNMO_UGma=%1556F>T{V4Jh{$xzxf8{W9H;ke6demxM#aot?uA_y?mMerkhe0N
z?gxshRB_ugrUbQG)1Z+Yg_^oUKlFhST&<l)l`MHJ^bInB2UcB^0wUjO<*1OWz*Izk
zK-NNPHzs}9v}=4}x31+)Xy`W8yyYGS93b@H7tj_y)+i^2fL-6e#Y3n%wN~al;A;Cb
zl#_8&@p7h4OlJL5)1+uYJ7ineKZZLtDdDe<k0@?9*ut8;y$dgZjrlvsaICq$*Zf}j
zdVF>o9`?P2^NC_v-m(gF0INzC{bx3hc##s|{8L=hYTKDSeh>s91^IS0u>x%vxLF4`
z%=*he&QVOh8PwFxN%7TRZ_?f>=sLfMT3b9LmVarKtJ*2lv$m&VywD^|Swt&!g-}7z
zBLy%Gcxn+>E)a5w5MeNt%I2~ZO1e{j@Yo(YW5b(MRK@V0q=6o?cOaL2J*VDc<se9|
z*`z;rKP&8aB2;qZ=FxI;mZTYNR3D>(QGB4o^m+(p8nIzCrtX!ocanma6?i8MW>UIO
z_-B#9Nn6F}fkp&1uJwrhVTMj7F!e34vVXutE$2IlcPbGi7~(>Yal)A-gdY-HejP(H
zL?h&Wk)&dbx}9#()0>}TuJ8j6`l|6F8s9<1AE7nR=+Cw&YiG*3*9QzxY_eyN@mxZ<
zj#$Kgmx+1QIJr3z;!a66a<xN;`PIWHT<vGiPvC;PtW&1@)FFh9Pl`@t(<vV!=JP+X
z$|fb}y4~eHrtto>3$eA2;MDpK>}S6(yFbUB7Gs<P(%NeIuP%bnhz^WN247y8KA@t9
zK@Vc~zRe|(Q*GCcolQQaFAou&&5K9PYb<<bioDK{Qy7fm?8y0!O~tu$_as!Ov!8Sk
zdjR@|u=&ESZ4^o$1!il2nw#ZomD%DVRo|(HdbS|l#H&CYi@1@I`-Lv8tV~iPF?UZq
zeA5Ka2E7+YyTKCkRe=9hYCgPIckd*VR8w7XZ4u)#y&4^;qMHY7;rzn01>Mk9NlYCQ
z*$Dw5Ey8-zcN{sl*+=3$RGVzQX2Kzky)gwpDpm937P}qr$~-6CKGd!m>a@8f_CF}(
zw0TvW0aJl)ZRao8ais<-YI%v;tN|<(bNw2w7I8aLdNcE6ECi^vuh<(){Wu}1?vK4?
zq|kV&1_e`MFdyI8nigi2li0O{sqM+us-adwFH87z%FMNnL~WT}JM@#^N|3Rb%XRy<
zKZgCA-igw2K6J;3zC&{T?{goS7GaYqC*%s+%x`(-;4<&3Hh3kb2A&RBx1pRo5TV*H
zX=?8m?xLTuSO@EHx!9<qQwWXYwZLdRV$~I!4M8<h=kupau@4l`11M(UQ)A+Y@sKWP
z%A8@U-H`nO%Qdq@-Mj)!=oPRjkUjA`rnR92^9uwVAk;9(tw*1*Gw68(lV(W%URuWB
z^(r57lUdX>xLDjr*@NFtS*Riyg+el^CmGI0|5%7^4xb%?)&b#vOL;SEC5-I9P|O5L
zSSWRIBk*gxlBFF=f^|IzP=JhxXi(zL&R6R$N%aL|=*%@TF$MvE)d+jlQiCk=@RF_I
z91&q9F`LGu*}G+2+Aizi6|Y)<j<=^}3FSg2tE=By(9xzL6#_(n_-b_2>c;v@18hp3
z21}JPkX_-<2$puMc2#8M7THqYbtIJ5vEV@Z62$dB0u2*WNpv>*Z=z(1X5*YhNgNb7
z%_wvqc~ZGW4CeP?xw89~dd^PHJ*n`Rn%Wi6hC7uX<ed1e;-;=Q=xU=f78ZLEP1^OQ
zIU{J)kjm#u>fb$(f$q10x7$Nk*?-8PKa|}kB%E!h#tdGYhhlB;$pv|=XXFN2IO*bQ
zI;Z;jv`cmK_Fb^MO*C@l_6E~U0p=MZ9SJojc;X3R%~ERg!ZfPkN-C~TxqNA<-Umc+
z>sGVhuF3aK9LocT3puuMcd;Z$6h?2}1kjg#-z(?+BQ2^jh~0iTFIpirccs?3*;-*g
zLVV*YG`3{5+esq@10KgVfux7D(vSBVqylaa!Q^=NvT3x*H_1!25LFgNQuJlaPev?A
zpyx(FVBDkNI`f+o%#2R<!imQs?B5`=Ripd|FT2q#>f@V#P~*_h86Cx)Xzmggem~al
z|GChw;V0y?2-syi@r%b+2aE7^P?07Eeb~`{ri-Pz$A@@n+QPQF^So-NmyZ?5{hzQ-
z>4m-LN?DB2=D?sr^S<e&i)oV9g7D;yu>vKtvMYG#U~c5*I&&B|=#iVUsLp%4tS_7@
z?2gaZ&rw}Xg)n}J_76Sj>hjynm%e?bo$YpwM@GIWvpZFa1JZ4py`T+0aoDD0YC2<r
z6e{zroJ;8J&LODLK@~3xnB3uzT`r$KjZUTjXb~?|A-Ww1@p$|tA}b;h+v9<I=j)6F
zTT@c$CL>ww*pf;6OR+;1@R@(%vJ>QqLHNV)5+0EadyWQRd{Orp@<UEU)>3Ak63(EU
z;9nc?(D8^1pUP;?RJKcfU6R&VLh9zmCuKEQ2g^6dPiYt<EfT31Z9&485d)F2;%vNa
zcRwZq6j0G%yFcc-+xZOcB-3t5O=8x_zpD^Ren4mz$FQTXb8IICfb7(x9RgwDj=^4|
zd7{Pb#g&0={0*fK6`=>S%4Qpj9cDO`S%PH7<&GuCZDy{K<77aV{^kWPnzWEgt<wO8
z#tDk7T11u}`O2h<328Yq&o<7DEgqMH{B*`t5|BRpp&Nvx*4Eq5A9<a53UbsqMt*iJ
zxMqs4Ge8ptAgdZm6lEob`$|yG3oqn_xw7ukqw;LBVQa`^SB7JC2-8srWgCd61Jrr#
zSej*H4Pml<g+a=`dtb0GRfW8EP>6#4gH-?@_t5QyK&@Qx+Sp>oE0+E`4GLt-W1k=c
zv~~R+Sbvu%b^~n0-)p-I3)t>M@RHM=fGW_HrM-C&nUlcIA8oJNT|8vpLZnTCM;813
zfKJ!iR$$<C3yGaQlNAp<=sR6Gt&rGGZd{{<8FliXZoQ(4qdJa20t3_hL|@n{2VBwu
z!4E9Y$$|;F7(jB=Sv|j(omX74!*KY#f|2?Nctv(Cl9C&f_R`c32O1>obnXnu@Z0Wx
zNJM#=g+YPUeCgnLXtc(-UC_QG!usvY5}^%`RGW2G`;=nT;cs`RNsnYT>Hp$AZs|0^
zy~`Vg4m@%fp^GZ%$udd32Wu#ym@2?u8!MXayf*(9tgd=3a1n^8Z-soSd-;PJPwg!$
zP(4Ol7lXA(?DNDF9k=MIzYn1!`6vvx1I$DFO4oofQg79K={Y-N2ljF%%=y#j`QdKW
zxx87H1PP^MAL3xo^Z9aYkLIn3@03(wT;z-4#Pu_W93v4$EphS86i&Fbo%O~ql+DUF
zXrcX%TMXmugWu^a*Aqm(+8bB-2IQ=XG~fA);&r1W;xkMvGDX7c%A<Qzx`yig+e|86
z%rSTS61)Yq4pKq~M3(Ed9QkFO7*l>ijySni%J)H#xXrauTEuGv(f*}3$j`n?mmLBQ
zOL&8CTr$MEuhH07>NxC>q;R97<frt2dkPcL1{hZnJ>wFNqr_n?sB8N7t*Bw(4v7wQ
ziq3HkVyeyJ#z?rwTgHw^9cl@yjSlU(9NJJBFl|<==a`B5&JJM@X>!~^gfc#Rcm6m_
zptHtsdmLH%S%8G{T!gU@6BE3~yizImS;)T|R8kbgg~Hyn<=3lW7-C;FV48cl^Nb!Z
zJ-vu&!C8K+5)Ea>NYd2dTB&#C1JPU))Xb`av$Ub(^yU7GhRj+^&E!U>PwuRUqdJ`^
z?lr^ffjzuBoDeAbch=cN64|!5Xf+YMB`-3Cbf<<{w-H<5>0;P7VVGL?vGmP!CLhZ8
zVNe<xQgTt|;34MAnP53kZ*^Qt`nAQ@$0rRu?{#4Go}0RU)Cr0g@L}TGmX2pQz2dZG
z)e=nak?+gJrJU2{Iq1@WyEAF2hY?il7R^&}YoDRI$~of$6qmjuY8pLxdfd7yE&O)%
zTvWj{Q5;mCeCMXei~^W5q<h(+V6#Q@5zYqe^k1Ha1&C=RSp}WJ2}WnRTt$%IhM;Z%
z@E<b;{6*#VBJjggBmX`h8EDB11QQ%_Qg=4V0k<h7X`74XqUQ0e%Q~6_O&XE!@;uB%
zMNBZ1wzgi?M8uqh44{OuqFr`4G_Lf_b};}fpW}Z(aT%2M(LKPlqES-43kiRij0bFj
z%a&qSsT>V+(0?F@E#F@ka{#;v`^s0uo_$9I-GOl6Ja{{kPw_L<EZOt)(mQ6INh`Ve
zykgDd&wqq-oRvL!?ptOYs@@SlEZpteRwzP$G`=9DBGue4km4zk5q`X}x2h=~q+$(r
z%zq{+js#XGChTwOj#e83viF02+F&!!{PiuG{fe;&Vim@zzpb1rB7>@g9R{8hs_?!K
zV5fLtniDN!?y7WWMINa7Hf0IeHEx_oftd2AOUq1h+X5w?3a$2X9yey)5&8KPagZ9;
zO#6k{&ZPX6qG~_y*4w`6Tt21jA0b<E*EWW!2FaM0H>^`jw>PDWlABNdV1zK%s&w3v
z^5+JE%np4ayN*j9Ta!S<GC1T1s(mwl2hFbXqr2KW$p9D#P)jiK3BMc@8H15X-ZYJd
z$k{>BkjMIj<tG-_yc|MHvIh6IfCEZH`|n*(ptACJ+}9u+#ON+95&9u{0WMV;p10mp
zMIvTG2ge^q3L?6&#rQvW5ZLBUpuDaLrFfBV@u!=Y3pjkOE2u)o`ZJy|d^`=AsBKZa
zf=I=E(M+m0Cy@#gn6lRFS!Z;;+W9b<FR_|s1$$1Ak*x)TYO7XpM@ZZ?@rNwhbtJNF
zpfLX<8R$0lj{+5Rf}p!I;Kf+q2wK!;!0WJY6kJ*N#3QOM^iSVoE<b^%MwNzGSpGUF
znSgz44`0xRzch1fL6*r(b^H5k=r2aPEUJU+6GTUq`~J(oJq%F~9~JBt*pB*`<vK|k
z;1?+4Qxn+un@;Hc#(z|^<yXBI9T|CCLW;1Qqm1<UR_ptTHj0Q;A`2oye_|C$Oz7y|
z1OD)3I3bn8pAy!{Jwz>}g_0iBtGwsbd!u+;KT#MTvs{QG4t-k8MJ@mGFwck$8<-tp
zq3EnWU7_k&wq{_jCm5ZpelC1tf`*TW#gKF5=96J#OL4Jl!C+Oo>p%HIRBV}1m01p|
ze-|i%?0krZg0sMV(KfjKO3vbG5P5{-A3`5KKnWIk!?za;_+9np1N2iDTK+RcIm@oy
zo7{nD7a3U|XoYqJiO8@Uq`g59^dLauj6{}yNZJ7(RO`&nHf%oN8mT9<xFLZsjfS<P
zk)>&quAx>gai%$If$+_MArR<6MoCTewce?--gdx;)K2;ys%YB>ok(rY%;CzK=@zud
zB{g~uqIM0BUwsRt9BYtVul2^!CpTE%OygjP*6`4CaQNg(J(D|t+dBV2E}HxsvS<Ei
zMC0FW0}f4I&v*KKq?Br}WY}7mnGWG-)(?Yx<zvK1MOGjnM5>a+&0w#xT`8auE|S%G
z7ubnNrS%SUuPk9}2-M<vXsA>OD<$H7XQD!5JRitvynE6~@mtZip!ja?i3|IdD2k(m
zlaY9o+@2L{nsl4bY5n*Y`6==*!=6c^+!Ctz<vXk&ztX7SbaItjl#E~3EaFEMCxa;d
z&Fjj|SCL?zOs+oXGeXZb*>3{vzR9673M1*6Q9b9>+?FPBqFLS2mpR1u%FGRWsCjX}
z&BNUQdo4Dg5;gO6GLE%xxG2b5XVbh~^{VdAI4>I)uouD?zssfG@Ak)SAFYfrn(#Aw
z);<6?K*+z70vKEv*0XTngvWY(3y4lTvX?-WsE!-p+e0eCVE3dq=0)C$YqWsjvB#9F
zoUu0GFddt^Wk3G8U?(P42UC0K%6BrnLqm%1QbavEu~UD-5!;zzdRT{*yY0C@7w!e?
zZZ-^UWhhX4DCKTXnr+7ld=kb<Y-rs?)a0+_XX>56(gk1hacL1t=B_-O#lTaGCb1}x
zXa(xl<HLaD^`EH#5xH>fnOb&(b?11wEgB{w)J-f$Nd25njm;<;9I>56HRvif?$l#H
znSF;v*;tqDG9w>9A~n^Q+<s<zhT;7878vqYeS{;$yX1E2lxcXsPB7lu8#1*PF4DE?
z1h@(3nLo(@4DmvXdTzw+ljviEto`X|z5s%RC3!xsgx!)Jw_gTZ8{@kHnn>^`ahj}o
zwZWKSD%EH-9nC~Q&jM0in&>D>V*wzwT;9S+3{R0XW(uM9u!;Dt7Pl-Ke6=~MC*J}=
z^8+v4)Ik(YqTU7$cCQF1KuU#Fh&A;+T0xR@ay3B+Z9#<RdY)uCX3bM}dCVfclwEuo
zW|rfF^n&t{@g}8LLi4vLd?gkMwXq9-mzq_0Z;+ikgX=s(yfO7d#APySu7jXTKA0Iq
zetFGY@&c}2vsO~>^1*LEW2L3?7%RhL&lIAcJCN3dO|)uq#;+Kg(jp}S%Vq!5kNzg(
zf7u0I3Wa{&)%eB^m}r=PGYS{*MIP`zz1cAl-@!&9>c5G>jPZ1loPWI$1_zAAM?h=$
zv0Cp`0<7qiE{VTdHa*8JWyzH2eU1hKAlY(^#vLw<*o8<xk0TChuBjgqi)m|2q@bqB
z%SJLhY8>m-5l`O5pxRffT}3<kL9|Z@#R#|5e^2qN2vrH7uxfXxa4TP|c8f3RNEum*
zym!z_n$*1}Dq*}Cg<sm`!FRf_J^xco=b5LUzHIeVy{b5QIPgq|1#}hl`(z^P<wVLs
zN)!_;kYSGAjFgH2IQ<sOZk;%)AU;ItH5W3q^&Q5e;yRlbYze|W;zU6>QS(}%<~Bo4
zraQzWOaSeKbhb#raqBgg3-n$rhY<}ve%T(!&E<OVvsnLzufMhe1IKTQ#AeD({7%Zg
z7^-y(%%GwFi4(X<DWT5;={lEM5AG<2)!LT!!?JZrs~i@uZ`HIfXyB~Hu*LOb*z)1(
zq*W{&DG@m;+gVx1IOVCrdL}YbX~vzIw+(PxiSrQG52*~DT>`=^X1Q>WwXE1FEbG#<
z4WzfyYRR*h*4Dc7Rx6wHN^8#8`fHNhNK-Bm{b}%`g%+M8(=pSdw-Wc#6+{U5ow!#7
zb3UOm#{Zc;@ht@CA|N=eDWy(pNosn;p!%r#AG;ektWxwBKWK}>mO#_Ea4$m?SirJ&
zk7mjDQ)2P$hiBV#6MGj`8^6`3>AJ^?e{&7C;0hYO3*$wm%{)@Fe1ntk+W-DTvhkpU
zsGm~?;>%JQGZn|rUQFoi)swc*#Y8y*fOi#-#lZ6y-k{p=SQ1$B#t52EnV(}L!8+9*
zygoA=RiZ96;pohxVF2=N6-^qqHAU9+{Pk^%1emW>W)s>x%6TizwN)U;HW$WeTTSus
zbRt%haee%1Zna&53_Hbdp=S(w&5zeMlURZP-v3MWx+_K=P5ZVuR+Y8s2;lt@775VJ
zR6btoK|ojTw-GjWVaP~*Q#LK(p~w{Z(M@Tw83VMo+m@5&ZBX`X5f^&w?g=T?OJVa{
zE)xU`N5CMe&_BNr%D+q7z1vmDQqxK^nd)h`(L$N&W*fic4baISV*`07mno%8)6^oH
z&aw4rR(nmo+zYd1TOXuc{tH8(2X_vU5EdPXJi!PYH!V(N6xpS*H<aEzMeAk5gTo$%
zmuZ|~4Iu$sp<ImuWURl(rZ^lzhdTK%E*b_6-Mvg+Hq)Rg&VSzTJIeCu;V<o$_VlG>
za$005eui+w>AMlDNvmFA_c!~DMi7;?X5l;)5#q(@1{Nb3sn>UU9JBEB1>|JYLPnbe
zW5ARh$vI=t$$(K|esduc)(_2X5jNhtV!?xbr*o#d2Fw^Kv^)BMkf}j-rLmUwfAure
zjp6~Qn$>p*u(hRD6SmcY<C4OV&@jiWqp8pgLiTJHVd`q;rt`x6cR98$IMB2Yccbcp
z&m~^Jp?li#s%?)Jq1@hXdk0k9T!^wY>z>mXmtZzA*_xg~m8yPuU&~=fguX25(rG*V
znGw|KSl*Ro03q5y6WgMH5&-u#F4sZ%2U*V2Zw^4Oz0PaQ3Y_|qL_$%cQ`z2&5csD}
z)U2d>x@Y#3GMfsTkC|+j+}Uiuo-=f+)!}g>AAT3h1dUv1t;5K*yqT@$<SY#qHH>lN
z@qV*v^$o~kP=`c_?uISfJjY36fe{+~aPTU+f(W@UG3-<T2Rm$A>hU<ZWYTYHvuLd}
z7isur)uS|@^)4{6&V>|EJxMblx`YMgc)i)1vACzs!^!)=z&96?Va)H0VW7)oeA8+p
z2fO9eN*!zs01pD0WV0~BkRMlD`(E?{0@PlEG<>d@V=2&Nctitt!+CUmVI=8pTc%E_
z?Q<BmuREn<!F(`YC3<|elpjB1h%2f^SeGdk4I-m+l;Z4xHi$HpIWe>Tg|#`!GR_dn
zGO0pgc1~X3^M_%C=HTL!np2jF(MWc5J~<~M0RyWorrXiSjrIBl1yRStFXsuH$hAOU
z!lI<h1v`W`4es@kT^byzAH>HAq8zl_OTrP1a(R*Q<J|8BFe3R6Q%HRo;>=;{h#P3>
zJ0}8S$zQ~|!A&h&(Oq12GicF8)I@#R>|uZ|QYT9LD;|YMd}xi@LXHI9&J2c69|-P{
zW#Yx*&c*P&`rwFTaWSstcL_l6G}yX-`>&SYcn(44O#BZE3$1RZZ;&cqct|BShzSdi
zQKm+pOd<}$SypxWvO&GJ0>bfS<xBQ5QRwlW>7Ir3pEo^aBbt~~4SUfo4L|J8zjA;;
zRlsnCoUjk?*_EQU{GYing~Gek6*2uoAOn}^UtAI@@d#&)#~KySpKyNPV1eWPqt^ig
z1tD*T8_{7a45};6hF;en0;Bc{fqOu0HVSf~Ij;9n``m|R3lON2Es*e~u9w?8#4i#W
z(nmnT(&)hiqCs^wo?2>C92Ch52chnQaswY38?L<eY>Y#I^Hxbm96D&fReeTiOxLtZ
zQVo;4HIq<Eq?SHkO1uk9Fp@NiGH0>4-e&JiI%k4_SPgPYMkF89m@;0N3&zPf(WDgf
z`E?@Ol1HRXAgzlH{*?}-i5%Wt=+}nv=r;cFe6O$8cK_3Ad%iFKc|-UWb86fpUklu&
zgOjrVJ{sa+<A<(uFiM$n_%lvfXz!vksy9p5w1%`{z(keB=c%RA9$n<95+oU%W+qI(
zS*ktlJk3x<rNnv)UcYdzc?eE9r***dCL)%Xf=p)HC4y41gLE{=Wlcy&h97})<Dm+e
zEiRTG4}-4i_DhTCP;bf6<Uf|@%uSatk5eJpuCGNRE?S%){>53d>{;b=lh4}t5&!s;
z<I+YsP=!Os(ATdwnNSD8oIr*kEuf+|S1k!}BVM{&vy(UV8u5{G7k%ASZ#Yyn-o{#q
zyRmGC{^({@evz2PH?M-rO6o=|8?K1GQx2s2BjfMEZA>>}Dvn{HQHf1qi6UL9Qe89y
zRV6w~74)rK5V?1r4RLru|6+n`rJhP>@mEjx^J?s}oZWE1>n7|#-`xCl#m5JfF}aqc
z6ta=)-SJSy`57#8$m%4*ll~A6aZ2?Ja|sMP9J>!4BGA&Hz}vOr((|A1R@yLPp)P;O
zje9bK&k)xBy$V0y9LctpFmv61wT%s*Fbz{ZM^n2mCml(4!gGV<#<cMH_jl5zuSn=)
z4P__FEFWzb(*>dpy6cA6>l&6pMid8)K$CyF>aq1#K-n+)fTnSlG3;r{;Wi?%XtZTS
zUV2g}yL_oXib%EGDSwp4M&KdcaY_yKwOm3+*-baqWhHUpIbn}xNA15?#xkL>vAQf+
zD6}F4A1Z8n4K&i%PXI}o>E}Xyk+W2NPQOQtY!0nv9<%Y)G#QTs+;*|kqo_cy&*R!2
zsW)+9Wm|jln2TT=DNj<iZRV9s3hx`mDoauvz}S3n--k-6^fB*qOWBtS2#xt)jU=~R
zTQ0rGh~aHBH<e-fM57aH(AyL6$5nc91#AIF({U2l2p&s#OKi8a1@&fM3b*$ClC-Ki
ztLx=~PJo;&`4ep9wb#qepu%?K^g^0zuY8jN&K7$Rl0NI;vXAhr8`tfVDu(=-5nQ%m
z|7gQ<Cp4rBeCd)@;7u5*?6^1bAG}+%F=~^+h?tdtB-j;9H!gIHQcE?kMhi2bHk17z
z>XN^{O6cbPK39iaQMCH5JVZX>=(o+-S!WmYhIpJpx47iG^FT58+F&@LJkoe2)$kGK
z13&to!DDc4Q*5!Wj0KKjE^02r&2`t6SV^BhBX&~Ypkn#p#IkalR_ISJG{@tiVFf?c
zo{S2^IV)ay1spI3n%gfZ4XEGfNZ!{By3~+v1Du?-o(>}S_1bc9GWV5oAFs!jRC@S?
zI0VACtl^0--81gNKwKk@Ia+77ot=^!ct3OVRm&<O>uM4<y2rgkvOPE}9N_)1EX9=H
zWCA{wUZsj<rQ|3E3(U-s(3O02`GltN2TfW6<9K%=bTTzwtuxxa*ZSXK-7?N&&_a0%
zru3$7N{AKr;X$4NcTwR4Wim+(kw39Jf+WhpcUZjWj}!<s+Fqhx4KdhvaI}lFgBdBE
zwh;Kk6`8W%N@f{Epy1>Ez~Q8N#?_f*hDoi~AM-*|%0_%W72LK66EIq0f>9%!pz=#g
z+ExKUG?mX0ntGih3dzt^@i?H{+*<+nV-Hp>5(;{yGK~JMu?_8sZx-jHFvC~KIM|1p
zz*tB3KKjA~S|K_gA5ZvI$mGLSG611B^Tf@vTxKzNqVVmRo;PkGI1fJQxag2cW={GA
z8s*3Gfl6GvLIavLsD<DeB2qhOf{gqd$TdAlVYx7<cx#TaaU_}AXm0+P+3gKY06*FP
z9>wncDc}@Clk7k$N$SW#04W{RUfa0cY-~@z6IQ;E!_j=}JQruSJbZ%8X(M*>S~~EL
zC4q`K__amTY=&wZ)^T-Lm5?oCmLQwfStE|EsLCg(1@BkZw!T6YV6c3){KM(opWHBD
zVP-&p+KrNR!GUQWwsgJR{e+t@2Dv9(CSU1sIW5wRt*h(38gZNrh1V-uIIIDsD{46!
zTT}d$OSIvdM5;2M*(S+igKB-k(WrccogX2py^=~0C@;MkWe(}w)?GVUsLmsz?p(g!
z+z-wl6j?E>*2qB{zjA1+IN^uI)4mWBrCR*fn9&~c)=E-I=BM3VB%oOV8&$rQ3AV9^
zr0iN=Y*oH@sv2w=ZTe;;3LDppS&zed4^agZvDP9ncNU!10AjgR8?S#njWK0;O@9-%
z<jzX>4D5D(-{f@$wMBl)wJofZ+Q?+_Cl#5o`+r5n(gU>@Sz>Q~5il0N2-ey+`Zm6!
zp3ebsHQlm(%Uc|r(O|M+Um(#BxT97`55ecY^TIaF)_Wv6l?|hbRt7J#5*voJp$kEh
z`yFV4I-QvPm!$?ePcZ-BI6aE&+479Wq=;V&$`J`^?ZXaH+w42r!1nJ`ONr?agT`!l
zjgh!^sI6h^#tIF1doYOfb_@O|6lbCpSP9y$GarNi-t>OTWv?p?nR}}hq}Fi}2}(hQ
z!7UTWbO9et&x6e8=KXD`QW1m-s6#^mew-Ci^fd_%@n|k+O(pw=kcX<liC5MUb<)50
zbGpR(LD9qqV{OY)zHVF3>zMc5_gMx}hN{XhBs0UcSgHyV^U&QYndoO`k2V&A4N=@L
z#=?gc%gb|?Hp5&!eSwweSnyY`1=z=RKch;%7MC7tDYzeOTH%$&dR+bQIu&`OqC<!M
zfmlOr@G*l_(hQUD0NhLG9xalIAi~-YR_jkRLSjEl9B)0?>Y_Wt60D*j%Dgb||LJ#@
z{x{Bz#b5GaLaXPywl3&9<b7o1=Jw&Q4J`c5GZC0Xen=W)S`nIob-e{YFDb>;rLenw
zK9SP^ooApU0!mTN8OJ$Cp$e3X>FLX_&=d4oZ%07OkVvdHxJ|YyP6)VM5%k$!)QM;}
zT&l)i0wFt6=o}CPv4gK5HJOyo171XW%(I&RFxp*#Vg1Cs(<Cp;qQB;H81N72HMq_5
z+<_#?WO9iP!HZjW1@y>%*i1A4jI?^OFS{kOqjp-0knk|mCLT-g&iFT?dPFV@B8|PF
z%FspJCKAKwi@!r-T#|1iaqlt`e*d7{g>{=SM^d|c$;SW_(J$F}WP5GPB>pL%t$%;w
zE4cZCKPu2*m21G5#EDTBdFV1lIZ%~8W6E=-puc>3ZSg@)tdk>39iJIn3GD!V)%6x%
zqou@z)~zjt#WW;lTolWF1uD@h_thT`$+`Dk=ZTKuOPy4wFxi7R$+r&ZGUsE$03m|A
zcKeh0U#?Br925qr7?`sJ5$qKr<?uQ$cRVWLOsLF;D)RWUt{&myT{Ht6rgJU@dr3pG
zAGrxi`_WOE90)kB&?uUhU1Fo^MHxM6Dy#WC0UU0Aq=!Hi&E=SwbQDh@1X~kqiXQdG
zyS=wt)gknIJjqHFJmboV2q0z4GStf(>I!~&5gf`{wiaRZ3TIto`KBH}pyiZ9abB)c
z+K|ibAYKCs&kSq7lHpfDjnC{cdCd_W135!$eQIVLpy#v7cU!qf&i8E7M!eNkx&d?g
z)(OSzqZp@rk%B&MwEd2sOym&a0I<^{z`ghWfoyT-*!6JZe!n=YMdd}fn^5jSOAy_1
zx~6F33?0@V-j3+wkj>B|f_?;Yn;=cX328rEbncK(W*eD(he+sUy#?%}KG8~2F$`=r
zJ-1Dcdc&6vFXpu@P$x~R;?we#p|An&DrK(5YsW8U%)b*Y4t=j9t{a@t9N9=T%TDTJ
zV{HC`wQ=?^(ugpnl14!|@1<(}61{Q|<^ws8#@Y9{3OX@%TV)K50NreZj@Gspv|tWL
zb)-R*1UyF8q-je885y~$ISe{STq3Vts&SP3&JJIhe$HoQg3BhUmHvnA_~`emH($EQ
z$Y_6uR(sTY74pLnuc`*fA)1$}5nTIO*!VnaJlotb)~s!~IHqnNlPSMz(lJitLhHF<
zt|zq#ln5uh3{vB_fO$pMm(rk#cCwE`{_`Tno-eG7S}a5|4hwo&N-9)P=zfFH+gv`)
zdxD^Gt0{45(09Je>J{rn3n(etzkr$O;vBSE7{K=UvWI^-e6wefbOUI$QO4h*$<ggi
zRZQ))Z;7sCF)>}MzD>@ZR|7~BoX3j8B4Ri;zz7tayz#T9Ky^;y!s`D$!g*9I3(|P`
z+KlqnXPDcAG92u650BdI?RI<powbsnF@y$heCFkO1DM>mVTw*ocgkE)A0C#2W@5h<
zsm(xp6Ji(LpfBBzvwGbdi!&yYs_GoaSqSjfWZwjRu59^faMb~`cmdy)76y^os>pZz
zHQ*Wy%KeR{&OIlX){!8BPQPFesHbch`@i@$5Y}&fJbkeOP-{l}HIIq>P3u@qP~GkZ
zN9-QMVcUR5qP$4QEL2gc<iZ2*Bi}{3(tou^35AncF<WZ)DUZ-J##9bqhNs3V=9^-n
zc?yGgwGGwz4j=6cd?d?%wcy1S;vVKP6lkAeRA2eD)8ZL-K^>65>TQc;1xN-YM=dKt
z<)+o>IZYcC&2qQ{5B<r(SuAEO?MR}F7pnZE=;=5LU01TY`%C3Z#5NJXP7?~hTQr64
zn#eSkHTf+fjq0>Q9Z8{Kf<WN`7C&XNT|W(=WtjXQ5(v%QVzD$x$vTWuAPe>4yTM!a
zSC+9B{fNgeL<Zlk4E`eYs7{J+)U*|&<yz~}IyJpHum`_OB^@mvOn0W4{J6F$r0vTl
z-9+~BA1ur9WTBApwzOhjq=;0<UJ_>&-^be#YLM4Ojbt%#CBI&L(ImI((;tE>)TW8>
z&FrqUYvH?D@qI=%310G(7K~AQzI*uqEuJ^9WU9lJjlnbi`lb3(;zv!<wmF=|&o2@;
zN|W*Bw~t29+L`9ooYpChd29xse%3;H6H)}w;fDTL0)x2@o5d(({v7v#3R&Ze&F13d
zV(RW-#fZ_Ev(B~<Dgeywi`m}#?5VBM?e0a`W>}9LC7|E;JJiy{<baW0ZDH3zZ+bcF
z?qx*~Bo%f39n$HG*J$^;!ayyXo$8%7>#6B(WqFc&3sc){i#NhUz1bJH*AP5}M#AMi
zV19+z{_&<AH;G01wd)x)2~&(H7;|;=n4OH@WAK4M(ZdKo4Y2yp{p(jbJb1<arq*IE
z^T+UmHZ-syFS&zcv7VQbV>tHVWzr?;BuRdx<C&jic4yg2WmHbP`@-5TKbl1oJe2Cx
zGKJLd_T>tFopt`V)e+`o>#D7_A`&amkn1wKy8EW_7-~e)CcL$wpha}%DWd*q#=qob
zb!}1SgcHb<TCEC1>k#W3j&wovl%08vRBR>^(p-LBkR%~=I1vaTs&&5$eR;rG(~fyd
zfrp@0`z)^ayGoMH_g=VOZ!8AlzAN?hD7<{&`omsWA~QEzP~^3e@nGd4*zS~JFP}yr
z5ak(uT~m@yOy~Ge-Gyn>dpst*6E0S+hzh?BC43Xp!m3p1Y$o@IeTn^8AZB<JR`RMf
z`Eb<Vqow4WlBXjbS2E1NKp`qXA6Zc1glGSntR#Jwc&Vg9THje0oMdiHUw>v#%X{v$
zff*vLwg3U>#HnOKy*?`3CYrN_Q$Gci(O=+f9Cs%fcfbMYTjOlYC2O;u&vX5AB!%8V
z9hR5>c?*+_7+aL*g{TTQCixm-9@D5{Za<pOaQ9LyJnWCs`_x8P#4G$eyH2!ojEYMx
z%ftgA4wo!FAS^|`{YR7Ba3w^k717&UF83CRaDVAS)cBn<ow_2o4w6N4;s>oh7|{N3
zGTq=8-@N2R5hlB-rjKfh6>}EdFHlt2dcK^P18H(Hl#`i#*gq}jQ_?4$yYGKlx!n4D
zVP1ykm+CajE{QAt!4z<UnC_2B4|eqUzKCF8S9Jgf2xBM0Mt5ssljj|D^>1gU`@$1i
zc0oE0P(tmD>^Jd3_z?MM(Ni;sPKs+Qo}zVW{>sKBCLR3?#Buv(1CyT_X6)~h35DUd
z%CyHMyO5=&wFKNKjnzdk@qtET^`WTB^SE7A0K74HvfA^M!C255<H{Si!LC*VGEw6K
z#k=l>Qpfs%kiw0jnagKsB~gs*lvCvyN9rx187(IPRcYuSn@Xv5_{H9BTpWTd9LswV
zc0#1Cvo>GaGs;bOn1f8BYE;0~InM2%I>1xB<(~fZC#xMwP1?0k520O#1?uS@2Ccxh
zeMra;1ZirAsThbG`Vl>ck~^=y5|&lkRssJGc-M+M$kqG^{HolLI?F6z(1pa?{iLN6
z8*Il)%A!6yGR$kEDr>fqzd$#OtMJ#MFa!+C8vNlM+!IA2Ti5#<d8Wb+zA+!5w?(Hq
zqhAb6xs)*zDZqjDm?G#m*7iN0j!%c$1V@B-{rZ1=W2+DX^5I$$ml7SnbN{a+Oa%9b
zZDlMX7I!Eb7R#P8iw)}Ngpz0sRn5z?>EfT86CA*BQylqF!_vxflE+?B$P@qjH*UM+
zT>zdQRI&iu;ArU19K#G*8_NV!^uo;(NpUMFws}^Q8-tkk*8@tm3mH(cKhW(x?BAch
zbg)|hR4}1NcM#`JYENzFXkV;v-=-%x@ei$bQK(e-O{8Ph8H=8^tAxElbX(D%&B-O%
zVriR*9U9HuQ$8`lZz?(a*`nF|o2DAb3xQsx8|`6DGT05!SBNaXi&$=cZD~H`lH71I
z!SL3-{@f)%C@|1REdbR3D><NEhzCH79PNr;9t;^>nSvRGFbkc!q?>QUV>^8>WNTAr
zx}!fsL@(s`s94LagUIE<tE+fRaXI-}jka+uzM!g_VNg6OBS7>x)EvCqr|U`s598xE
z@Wr-x)1kjI673h((s++OVlgHU%)J{F0}D5*v+<#0F;V)tcCs}Wz7t*%Jzu*7G~*wx
z7EZNX_~g9p>f$6ti@p~k9XR3vM?`xbz`(s&nK?7A@k{e(hgUX@Bv{k&{~NEAgfa_~
z%6q1b%>^v4-@M#(O`TRvk`m=dp0U;OLU1~!cCrN{y3+cgK_XCEBhGEUvRtri?T=n_
zk&Y<BH-Gv2D8*s*h@s7uus7(pGj5zFLC9LQl~4{D*nYRVd|sZY@eDM~@uH5F%kGyJ
z(RMn@(Q=vhjw~#m?|dP*Ol!g_+<T|1r@5>LYQ2&SH0Sye3XjA>_{0s-Is8Ul%&$Sr
zxF2QQz4E1BB}}uFx+Rm9*Mv+A%Giu!2hEaUREpKK7m|+Y@z}3->iaf#sLZq5*JH1-
z0xl@7AjN4aTEg1xZgs6}yQ(Dqv%TKkAcoh(u-@d=emlL<PiqEay|iE7Y5U)aK}~FW
z(h-&be5t8NZ<p$80ok$p-jFWyj`X5*IXYmP!1}7eA}WS%#_E^3i`@FRi})eHXpyr{
zOaINwJIgo;%QBV#{0Up3|KJtL@X1L*!J7>rcXG<Uwg5BTGb;Y%*kA6_{lqa5G?^IW
z_kkm?#QEL5Uam<&i|hwp$WiJHyZn-#&Iul7q)!LEB#+w!sC#=JP1yPJAAfzWAms=0
z*<c;b9IW5po<zN9sbp29pjr>1T<@u_TCtSCB2w1*=|os$b|G=h8)FTwCjWW97ta(G
z?(<`=HXL!QbX%~}(v^&TT#IA&pP+^P(xbF3Ll=s)ol-UL5!OHWFrz#)O()9N61z?z
zvB$)z_RRa`ZT4>CffQ1fNGt|nRTfX<)_7E}eFwx?0JYAd6I%)8VVSmJO`->xQt0BQ
zpk_OA>7}VX#L1iT3#A6Q)+GU>Nfv#nI|L<E3;B2k#`C?t!#;(ENo93KZc0=()B7(d
zFQmeAED)fj{3XS-^2=v(Ex_wb;;WO%GN2i&ZX|byaZ*f*imG@p=x1K&lDj*0`Tj>W
zz46X`<>>$s6MixmjoasXkbSK{-$dhG%P=7~;1d-+vEpD4Z5dcbsK(-oy#T^l`KX2t
zD!sMF>tnP?Z>oM;O-N6P5#D-l5O-as;DcJ$o5kOflQPqsO1S~^{yV)6g+$3PGcUEt
zn!&tU>tPHIWME-Tx9LaG?ljUCK#3S$FObCQFR+nD(wSK|iEWxu?!D#Jta7ZM|1?6(
z0Fj82GlSzdv(s;=vMRY6xSs$xVTnw-2y`(1lbA3u20V{9Hro8mCSPoFfPY4`5)3J;
z!D;FK=`}@iJ4w~ZU8QXUyJoFNk({%C{w}bRv4*Kd6N8yeCilWC$upHaQ#9CV-AjnC
zvpHQvAPe~Uq<bFmN&z*JbZdTx4x)`*TOTpbkP0FRFIdODMH3?Ggykow(R=mj<_K3v
zqAkA-rgnT;t<D_Wn9!9-Ww?HxH|i<TaP7HPQ^DzOjQ}LMGr2KPtK6wzDX7zn)Czu<
zXP~~1eQY$L0!Q$nl6r;mZx#R2vsM=Q@>QD@C$#%}9i|p(i2oM_^XW&xH+hhMFmE3I
zf#t5Z$nmisMg-D;j(2@BlD8u!uB{g#UuZ5^LE<MRTh(M!trXT<gC~k<YtyUil7h0n
z_p2FB0FEai=bktqLHA)-KmybZ<7@x&25KnoPjCLL+LC`edrKzcY2;@m?E_f-^xjvu
zI%X7P1Yr1s#in$4D5tRpuFLVgD;qBK>|fhBwtBtj15drV_b?*>$`AVq<S9ItRZaVS
zY?XVP?gzS2*fb>wj-E!FBe5OT7VS?!X*J4S0AcH+tWR%jB4G3S27^&4%95=c53IVW
znnOo)h9{{Fvm-hNXL0Oeq|s!4L#bbuN}O$vCGaUmGcANoN8e{`NuPjkIy?htL%F3#
z;ulW}biUtche_E;#uw!*Sq9CA>|4C7$2^5DH9!NoNY`n8(u0~w%^1?_2Cr+i?)Waj
zi&}3J15SxbwNuz+lkk40LJ!=^{hF+a=OQdp`^o|Q2=A1-swqb`J>#G4*(}rJHj4c7
zKVQ=A^h{w5U?d7OtCJ9#^i~#9-kp=2k6+e$gDRhJ66o8{$Stc7YkFw$C|j;T#GlwC
zG%w2hd;S=JQh4)hMvu>K`W}}W6l|t(;_{Td%vya+pdZ$kfmJdNG?_^3(A6WH!GJE_
zu&c6Oi1pV%huXumHsG1m>3hh4IXnIs(OH(T{{Xb>4W*U3JIon$c_0E0M4$x0JUc55
z;$%7~{z3+egSb@kBGMori%@;k9VCtsFk(Gb+41w=hxa%$zvM?x$Is(H^OTOyk?er3
zkc{Pi4bdhvRG2yV6Z1c0DWO{C{0SRB{K!uC66b&E6WKFJ-=S7YrtQOFu*{Phdc_I1
z0T5OkvXRah0oh&K-VVs`S{qZuDZtc*??7C2=8|&6)F1}22^PIiv)QNXHNIM^81E)&
zoL|>#Rx}u8oXhSsTCFCubYg_y>z9;!e)vVQu`>2@v_N+N$*(b!4w7zPZ)UMwh0bZj
zs_Hev@d7bUM@LNznJ{c|O-28lpJuM-ob7GM=aV;KytP>%mc4STp;8Z$5WMBk?>lAW
zm-(F1>qm`qI+^B4jwQnj3OzBsnKtDVOZOarOmt|EzlWtepfpj4Br!bN(2IG>A+mu^
zG;XPUM?ov}yse(ql_}ZsaEeQ~Bq-1Ef%cHcbIs8M8>CfSG682A6-hJ>e}kg*$wqw(
zv6mYp{njl5Q#W7wZ|D&jM4<T(B%I@ZBMktx{zv_$R+&|;&MfjAvz`BcB}S&3_FyIp
zAbRG2hhEYZo&Cl`gq08=G|=q;lB-=zZRZ?KW+u<il^@90GTq&w$Go|7r(i!dPT<Ik
zv5-$M7$*T?_bg})1is{s4$#&i<TxQ4Q3veXn`)(nQ@q+ZCbsG87`KRa1S0T3Rw1oG
zmZUq85Uir|Sc+n3b(f!FsieLm)oBL}zr}QmqT_sU1bhTE&153~B;SSIN^<1E<fVqY
zD3p5fgY#h<las50>p<deF(h;>N=Iz5TX{Hner`WKOBn~{MGFUjb^~KbQ^tqw-7lSZ
znb%)eC_el9dje1RQjRMu)1{i{snVHS|79dfk{@DMDLAN?#b5RZ5A4vFHbZG@MYy6u
z$$k)>OBoFF1fi!@w2J(@-UzbbBv{{IF;4Gibk;3w${%XW;eOUk^%C(E;Y1f+BSKqh
zKm_?=B~E)k%E20%2?37!CdP4k;EX`cB`S>RnA$AlOk2WXTm+f<8k>fgcXwR)kyacz
z_J*!+V({AM34=(F$7OtAjRFGsy>Y__i=Xy0&PCKIl&Xd~e^ga=zIo1pW}-_KuF?x3
zr^oLTudzb4w<u$ddyuR@Ab&RVKXn^2mtJes<NL(7e}%E?l!TTJ?2+yZ-AG)xT>6gT
z5E^VcuP{h3+;0NzGP=XG?dI3y2M}-rmJT)h4<5}VOk<%?+*`bq>Ay`8{dffI-7*Op
z&U-;`^C+;AbO$r`M-}BS2{ueTAKUIHzd<~Qv?m|4W3Xe=g!~s*_coROu2!wvM-X5x
zwjp+WOPkfKjVuFaajHY@@I3yg?aa&PLU2Smx3}d`@g}8UatmnEDwWE{*5h_?Bo+t_
z4E9H@3)|VJfA#!RO3a=HrKB;$4_1sqRdz(H5nU}0M3MG{OLkjGt8>zH(*{AJ#7%sZ
zy&7znQ;oKrMyhfYF6Wf5;mu>eIiA=Y3y;Wzt$Z~<<D(!!P$A1!gBtv9f;6C9Ej3vw
zV(7~IHiNH{n9Ee~OV%U{oo{CqEM9f5PNZ6Z_6CU8>i(~3yCYJ4QpEb2Tsg;(znxQ|
zXZ?ktGt~w$=dgg1l=~fENEsp(9fx{8DM{L8%6gm&W_N^XN>t^YP%~!I`cyW?;OMoU
zGWKF5yrM5i{JHNUEesK{lltgZb2H#Ui-}vgayLtn@e-u{YEB_TQ`Th5^rUCU`7*|3
z`(-}5^sloEvSxQh03@fMD+zclX7_F91s?tGHO)?PkF&oQn3Xy&BaK1?ULJ$BIAhAy
zm&m~t^}6!yDZy3qSSF$_)!HvH)0++5`osVj2Q&P*OlE~2vpM7Jin;e8CqS6Yi&X|)
zO$_g60sMV_-}&)$Jz(@EuTrE@ED7dD5Xl(yX;r{Ca<QFsn9e{x_|kBZI&#>gSNN3!
zvOr4W)~JHk###cs>h4d=ttssrgP(#+-OnF=k-3{jRmk$atIZO7^}DxrDC5Z1s2@U@
z^j`r5{h|Um2k?}ir5X7x&J#qLS-9C<)qAcnlSJna{eA#Q*em5{mX<03I1wnMjpF<8
zBYr2!_*rR;;I2b~I80=ZP6&9*wN%klX*{b{=8$$G5kgW@`l5l>Zj$hMxwONZ{_O4c
z^Ln8F&g~Ob6ya*FDJ8#kRk&FRrTt%Hvpmi^b<^QXGTdz$RhU|@L_wv$ID6l*9C6l8
zKcPs7Tve0_*cc7wWrP2y_X)s0TfVG?NL|!2Fofdnw9G-VN{zYlm1+9cLB+C;jDoSq
zf@4fI@we$)pFyM(%#4o7@uB&Wq$<6Fwps|xbbS&ofApapaE3zTyzMFX4In$RTnDpu
zDVd6bYb$8QM9?uFN&{vZFjDCMV0iOi5=9hK<qC669yK+4xd_A5%6B}W+f>YyE!lud
zmzylona|Lm_0QvGogf9%w|^q*-4=@Be+_^!<9h;{AY7bqjqHBD?j^C@94ye_-(>IO
zxlm{+>AHEWQ@$DtwV25y*DZv8#QuXc2MWmFl2X188?gpEoU5}%Rddi>GA*7QlNyEf
zF`$96%yCL7f9lxTLMYr8Hfxo2)|ON~<jR_U*{yv50pSV&YglL4)R`ldy)5m${+B;)
zY}{1S+`m-4`1Vh|^J6HD`I!@bU>LAQ5Vu#=v`V@QZnw5kP6}tYh@!k@UL18dQGy_2
z7v9kfIwP{;5R>>tI6s)qT*iwh)MAwJRLC*_px;TWuL)FEWWD;%F>aVYkB#JCm7Hbr
zJL5U%3xX$Bh5_0(SMOzbi<91F|0zK32uRqlu=h{nJKLncHZeU#T%Nb)JBmD!N+a^K
z>B|d$Pm0X$XXob+&TN1_(Nl=3H(rei5~U*Iig-W0l6W_4JOeSY_vpdif<Zgm0yu8<
zlMr!z8!xpTKDk+}kw}428I%UTEhV6a-B~oEm%nzXFr#mzsNz@>8f?Y8)DX=*{%6{V
zp7B~Ywq95V3+pl<QI?vYOo#~Q;m0F}-(7)21yb0ht^+W=_%|^$7o5B##(`oUl9jj4
z$=cuqdcUo%tmFDFhZ6&QXU*r?ohwQzOVaHB&D{b`#>zIVMTZeOgZjDU;fCWod$4?q
z7rCGBNT{)5V>_cMrF@>MmloTIBq#0f1j()Bu-;s$Q5xqorRnO{z8Z>UqFiJN1%fWh
z&4X4j!*onylAW?A3+UcXE`3<N_&wQ`qntVpuM34sd}&CW4NtEf>zI<_!`3B)Faz*>
zHp%kuSL(vFo$Uz{{Kf5A+414-n&PvmZ_3qUV{RQ8!LhDz^(zT|K)SUL@;r&{6m<OC
zK)welnNWGb@U_mTs43(JyiCb!glPtngPd|$Zgs?Q@i-3wC%$BomRjru#N^9r4Dvk(
znPL*M9|<A#=Y^u{0L0$Q_dl`z=JwOd%7nA@#GieUxHswHP(xP^Cgx<g|1v$9Xvd{+
zqLucwm4e@1Ih%sM{yTX)@LzH`%HbT->C?czDy9BPdVak6hRL&@+*<~XHIJe~_m;XM
z9H4keWv$<gUTLL6W{aFM$0bln+^M1j$w?9_R$pRj8@(`KD$Rq7nG|HPAWR)32os`Q
z|3IeD5iRAm3X9<Rj5*`9FAr6KQoSveHiJUrwTkmBfaE<%q%eF0s^Ah`7p3yy0P#8s
z1NqOFsUecbuBMjA4c^34f%o#9KY5wB4Z=;tCT{hrd8i^I6Gnb>tNgn)Hi#b8v$d{n
zdxqBem~H7G&1M@c^zdclnJl^0R06Z&!mt3ln{|}d>?C%z7<~i;emWJaXgAY+{-w=F
zpWsQca8?2#B|TA_c!UrUZ|wvCKb26Jr+C#+apT}0Z*@}16iD=CJ8lG5Mr|}mtA{8j
zQHCDW6rg%w*P0w;Bi^FGCZJ1m!6Un~625qGAck&6--)3j{Y8@X%~iK5i=VjzKTi+u
z&MtQ1p287p458p>G3VCHs1H-xXkW2@R3GW-@yXhs`DMx_S@e?vdmSnKT^zURow9-=
zNoj?WGpgRP`9K=}zSYT~t2o4z%1(XFy=8JZ3`B&PNhHt|R)n>GSE>!OJzA*1x|P_Z
z3d7~{Dpr+nvxh;}Ysdn=j-mf<5{wBoNGF;oje_eHX`fru6Y_a%^56BK0Mlt2^uE*0
zJj^2Dw1(16dB&#U=%2>AS{NgMoM|nP7uGyOf10dp&<r&_`vQ&);5P~>RP8OHY>hh(
zt+~?N`XSJg0p1rCJ*=!_*J%ikroH86i7EF|slLbFWt^1wD^X_l7c7h4BkV)b90gOL
z3~p&9J3SXc@JfSt?IZDf4S=ZjZjWoR@OcLk#Q!$OEp--f-K{jeP|WzVm>>Ip(2)F7
za9FD$uuDxMk?2X-VG0wJe!IP9`2a#xNp92*F|;=O0k~qz#%6Utb!j-u7R_{k9i>sU
zIZ<}zHPwzR8MMGPbqe-C;z=$vvg%B+W#Yn|OM8vCH7r9k*e0K&W1Y*9IOCXPd6HQi
zI**kw?_*J_Q%vXck@j$gCJVUG(Vx4d0aTBPFnA4GQmmdbJ9E^r)<V3DSj7|>OrZ8h
zP5V8|u5%*uVhaIk^jwIIHCv&>T5`cDkfx7rH#Ox|R4oP^65mP$AK!0^72D9^50n@e
zC*1}}4&vG`wUdr_v`En8L6T4PWh3<%$Y*ULSAk0^Jg5Hh+kMW;#08DXUZ@CO#J!+L
zYQ40Gj6rL^8u4qLBfS)%5Kp^2sXbY6RM(Vkp|hmAaHndSDU%|&%~E)P=xSKgM8;#T
zp-%ebOyASX_>7on@o-qR6>W;~ZFiF+?2WUZ6q6`-wJ{&^_j=^YzZo5N7b3?toSE!|
zV+1KGAxs<SfSQb^dv_1VDz}{>)l)b9mSSn8D$uWUMVudR>uM(GHn4pV=&XZM#VIF<
z((j6*`Uzfd{O}&0TGQ%|-%uqrwYu+bUJdnD!1JdV0iM`}k;-iYC2#P^3TfhgC0cVt
z-r&&XntRVi(g<Ym$DLTgr%gw(pdsI%oWOx}hvLVt5+5ifgnQtNjKWode#4e}gtzQy
z?9tD5`ZPP0r*eCNU%>4&Jd)urKXUX3vi$~lRo>*8U5#}_e`zed%$|i$(V;8sFM54v
zG@WI!_UnF}dSFR|5$H$SuXmW~=PK&A5VYGK`g65vb-E~N9P8hG_xpF;BE1gzMezsU
z_A6gsW3_;z+|-+J1tV)s0SM}iJAe9Hbc&`WJWW<8+53E(mZvtxET9e-pu;R?<u6z%
zy{n^z=ccSp^#i*R=fTnc3@3gJk*g;m++{4vC@_NuE-QwYN)9IQFJ3fu$TXo6)Y_JP
za{=H&&|;GL0WHmz^@fof#2|$(hWh5~S?AtZ3q|st)jJm^l7ygrHe!1Z^N8a>%&9LH
zA*(*CMNX{pQI%-`zrfr&xAdIUkiHu)+}#pdK>kNt;>_tQ{(g>OO>Hz|y-yusEw<;>
zU6S04(vQ)Wz9P@~@Hi2QsS+k7moP9I@X7uo`M(R^r8I|}hH=9qbIWMvyTV`Q_8jcf
z%9?sYjC>Jz<BP%muCLyeIcw}9rk(VN@P+1vs6z(Q2WH(k`$qRiS$UDOs$gG>Uq*M_
z{^~McOPrshfbed~hC6-4yI-%%KK)xB@m(`tcQ={xG$cZFvn6z(9qRId+;yzXi$y#;
zfV@yL!QxwuQk~@0!bF9iD`jJ2Dn5lxOE6W?SY;p!=kMpaT4}@KN}YOQE1(Bnw(|cN
zE<G9q<lH_Q#vS!fI!fJS96UfBK{wc1@truoCRxqvR%^@*8_&9{bfYYUKhr+hjp!Ak
z=Mk&QmEZL1alP1S=~c)pU0;GhvrRJdtKCragv)@LRF9cLkGKy>HGYV@mK0UKpU3v%
zB{%Eo@tqvEuB!*x0uSDgs0%0Kw_`n>KU>KxV^?P4$r)%8Z<!?Bg~TtdqXszbHOZT;
zNuy6}cb)W<r!f>##wG2N?)=5d)7;_&0kzQm+REMx^EM3c2w|<CZ;#{IPJxofn`-6a
zDL-b|m%~PO3-@|KAF&9jEl}O0wUAMQn|kM+7CPd=I88}RYr0->=osEgTI;yOyKA8C
z(z(!<TPvovu|)=_bu-=R&N~xUlr^iL|1Nn1&EWLRAE=3xZM}6umS(v!DT^^<blyqN
zKL=BMD}@1X>@pu~7k1iBH<!c*sUdgh_jbz3ujO*+Rsw14>)>{LUol4sT#1n9O-=<7
z=W4~-mdS3NTKg`9fq>81yq9NL<_l-KcEk8nN<JibLk`LGK_1@P0ULTSWMWxh7bZn~
zFRt_UC2u2O;!0>_-ZeBse)pxv8_$(C`!C-!#$f+XIJy{$aJBt7yrKOo>s$v@UAk6l
zb9M|St0kvNfZ&)AM_m<}M<%FY{l3-;(N@DZkdkN*7S)M_M9RMlWX``+@-$>RoB5*E
z+^`JwZJ#z3yy^ag9phIem!y4@M}RO*Qq}rr@)*uQCSA|A9QSGtHjA+Jb$5uS-2%$h
z1UjbnE44uFKpu!L&gDFla{3-nWzV>+9e!1V0~rQQlLFFyZyiNtaLLTku%qVwv@}YM
z=~+AtATPe6Lf=pnq0uzQvw-1&2N=^F*9o52*{!aI8-uxiy8G5=9Jd{y)%EyWM(s*#
zn<eZOCj1TlfKapTzl&@2V{f#m%!q<|Y3TSp!5IHis&{2jsw48Nuyf1GvOo?_f{DhK
zOtVxRVB&YxJVYL3KkqycvS0#h{#5(hIDqC6_f81AUr89avb>E2qQiu@>+&0^jrC(?
z0gkV638}>ts6O18Yq;zbNL63lyf=n&d1JL^E|_X$WiKJerafYgrMPm<))F&i8(F<M
zWQP;$<ZT6a$e80IQE47!5yFod7S`1%mE!OG_5U?KGe&;^Klk>WcZkF4R#;rU=!wEb
zfO{O7ErPv!4NtC&pX54QsY9buJhJC}>^tU7uXIlq@N3tgQ*kcN=P3r^n0UsD3%9}2
zPq2vF=Jc#o--amC-ILz6il~=rFC(VZD^F^~8ag?@g?+)iurPk{Xq6!<th~mr-{QOb
z2SEJLSfKaXnB~oVjsb)x#o$N%2Wr~)%;d!8SbVH>S@%kAtMqx&6XB{Z9v_61lh$1$
zfrN1^B{906MC_&pes2&<8~;6VZzHjcdz@0Ns7XO&M)d*KYJsy8ZHMH1W&*;oynf+I
zJ3BJ_%9%!oVC#{ny(o@cliZft`qC=0o%F@d6UDHw7We%m&-J3(3Zb;UGLBq0<E|Y(
z*{-y~I^_%iv(AnGe^G#QWLyP0__x5VYtqQ+MGbUFBs5JFuKgZj(ai>mr&`sTusp-D
z(XmJwG}hBd#}QpR+4CmP1UdL>BR5zz&P4nriqKsF*>X34wqdTVx@?;tXUnt^dYROL
zhH1+=a~_871v4p-w@S;V)Xf-zSS`2RC%Ry&s6MUsn3oVprKMENmp@b~w)dQ~2=+_$
zDs0U{bEeGqu9&7<4+=jmYQ<ZFjf=JoL)yT=vP>$Sm7g4;vm;yJJ3Pu_?+AV$5(}W6
zSWTSB(l%VEz1^JfWl-I|9(7e9`h4JDyvV)O-_$94V&o;GmUHkMuUj4P976ZV^kdxj
zK&j&h5iqNu5McRG#+KFwM?~+^zu2>tzz){-DL09;bgxuyg<wl#cp~v27rwQ?hZ*>k
z#;15y2A}y52hC>yrrTsb=8VT?`DV!{FS+ZHG894Tz=*;XZ7*YCgww6rlV37`moi^{
z1i{d1SI`*!q*1U);jt$Em!DhR+3`tC29tvoD;3*$$sX$GR$#XjHD3p@f%kr~#xOcu
z*ER6*Qe9If{yRfNES@CoNoKs;3x`G`lSv$?l$F9#zj+wzgR+;Q%VFAl01xzKr2Zh_
ztqWDUnXf}F!#s}Pqjk1FeDJ}IzpA0E90MZjH8iS@OGN(c%;%C)lxIsuW=!@u_`Kt>
zx&u2OVaOzb+-FJQV>%0gRO#}S?I_x!<?4djSZu5rdr<HV$D%~oX#JcMN>@d*)rv^a
z26M=#Y+I}RR6&QHCKDRFFy&m@8;r_)KM)rkb<ZuIWO!OyZy24Bl1GA-(+lC&P!H;B
z?VYlD@{){(Mn_nCLCe9yN|8OZ&G5U?=*5PryD?4LGyvIGifV;$-P*lMz<z;MvRi#+
zXStA~(z#5{{n%OvC9`~4dlApyzQt^qALnH5l8EV~wpPLgz#R?yuiQBwIU2^Fl8j3^
zB~`9Mr$^7`m8H&`VaKVqI)TV#%0j9Dh|tG%I>LXmyvSyq%Xcmr?rW!He)C9MuEb~o
zz`H>Fx3s4B6vOJDU)+M@CnG3A2o(}S0ZR#CgP}~iB0jg}_b3wytctx|xF(Y3uEy0n
zGAO#&rrA8(TWYQLUbqiCK0vGCc@KC2lrI%%YV!AKT*)&+<nJMaKF&Yw<l5lqRO(U+
z-p{%Pt#HfRav!9mr50FHsV{kmWEoEuLlW2B&atP$fZJxWo6HMuv!~jGhHDsnq&>O?
zS^&#iivE*VB|VutEDl`yy!@UJjBKwwZU)#wgg=qq2&MtkYLWASJ16WIJF7|iw9~lA
zFSc?+P0--}Wthd>b@fN>umu_qD^KBG)7Rs`7_N8Q>5Gw>;Cw}WyDNZK*_=k0c=+EX
zPs3SiZLHJ8AE)<?ug>49XRkTogSI{d#!eCMx>Uy;HxMVyeL_P9Im{08t6DK8rMIEL
zw@D{m-XBjDmCD*ycL^t)wyIm_++=G{@%Nz2rE#+XO`M+2wOwJ6Mky+b26SXBhrhRf
zB0Jgpc#sv1TpOT{m&StIvS_<I=1O5T3hvQzI?yj6{&Nn5(~Rf#nDXKK3%0hh1KYS)
zeeQAn7N3N(OCI98wr=W8&uyoi>`*QUzP0=%i*km@y_@VMS{_*MC~i6hzIR&$lJ*u?
z-?;=F&gEkUXOis1do0*rP|J=Ev7m|{&sdjkBW3`WvbV~6U?$oiNP7ODv3l~h&ENee
zaFu-nyX#>r)ah=$=jcwpam-u*9zVK59{~ek-3~rQ^4!;AxU_YA1C~YSCQ*WPztP5L
zY=(|{VEh4T1H56N{olb<hy|%IDiD^A3ngVTE?LKzH(_KbgM@xkkLJs<^A#wsW!e}J
zO((=heZfJ5qvu)nR<2B@?omN7uQy|Y($`*Ny*`Qv!}>2OJeq)+bFc!=W_bK_gP(q6
zids$pA_ddWgi0l{1H<J++*(>=+@!8Mkan^g<+aUn_3>>CEI?{<YV_9PU6$J?#BulH
zX|JCM)gN#TtCrRqQWf*D#5L-ajRoVz_6!EmSpp?R%a#|uyNa0+E&@s|^8gdN9=2YJ
z$1Uzd0&vE;yrhSOr4^@Cw3$m!AQ&h2ET7~-dMk=_iXV-IboNuvpoUUY`PkDcHTu+9
z@TuuNbEq4O$XaJdQ0z<pvS*h7pgEGu?8$o~X1q`be-4@z)sDFj`xNLV=bX9%i1V&K
zq`~j>vqQXV?*tH5{nl?IeU_|AJTsIZ6|yxEczc!^;ydR|i#bvnrlX6fy((DuxO$R{
zhZ+baT38LMut$NLe5>qzW3y;M)7`P{du-dbZTlYEwr$(CZQHhOGq+NyR6f2*C6zDF
zFPL3x_ssNkuU_lB(#VT8s~6`sqy#57{lTOgtoqi&{zMQx(Dea)qI3233<(gZu0wo+
zoEo($)Q1oIpU;POQUKG}`9lmlcoV5B(#2Azu8NvwZ!aE@7(7ny>$$^o!jzp1$<pw9
zP|aO)h@OI|Yy5^Edi;2#P<KL^1df}LYFb1c-!cBT9Uw#6b25<%@871u?r>I)GdVBF
z370d^X#5{7UrNiN@+?TNdO-XGW-UL^YCKl;9Uv?PS}8=;s=fC)I3gLmmPfzv(+f@m
zxVlpD;PqXpO+W!u+KKf(2$i9PUi|6N_}Z~<C{t!9wwKQN;x*2dRWeXfvFL3^0%Q??
zGt&b-sxouJFk|r{3c?je+hxg@i!=N{)xF&^o|G}b!g1nm(n6#)K$9bHR=aXZO9b&A
z2y-z!a`b(DLP!#53`g)qlXMx152%G%xTPHs$8F3@&AHtp>@Kb345a;G3~!F=f{N%*
zI)X(*Ev$V8!82&@c_8;N)dlG=LZ*fOrc%8|j;&5z-4e%Z%{xX~I4FEMhJ9WRsFLf(
z>rZFlzo_6)O^OgF1hx*tTJC|~1f#8DgOn15+`wnObtg#G3NtDe%{&`Hj0snrr3omf
zxsTsn7-{wAJ%@-ag@n)<vM1=-ag^J4a{26@f<+fWqYK+k=g)B#4x=5gR+82YxDGL9
zN6CK}L9vQ&BG5nO>(J61PPOf%0WU(BjGTr;1gV(r<XOM&s$|wM*ObXda~(KfzTY}u
zXyD>+v*_e;Xwo~$<0QL%QP?%er=?Tjbx4^`MtoQCxiY1U%)6+REgYXkbiZ)kdfHoK
z;<-?G1086UU4~`M18Q8JuL}FuQtNknB`5ioaXQF=iP@NpG|Gd>))AnLxnNgF6Jq0y
zLvlD$Fqikvg%S}Qax3E$b}x~8k~?T2tJ2PM-bmqGSgkzma)m<^9!-}_VxCm>VigK1
zxVlPKnrm_U>xXhK&vikT*_?%A&rpM{Ez6Cjr;6z&@aJ9k5_*$)8oHTyjL=6tu$gCu
zrIBeUQAT+A1`%K_N|-HwVTg^MH*5&2G={zm5Dd=toZIK4FRd1Vfqy!^m}a+IC}IR8
z1rDa+|9n&XWYNXtHV)=9NZ=_st+2%R9UV&l8^|^jy3x4kHRSURd~l(~EYnBAv=jLa
zLianKN^uA2&u<kl21l%rhtz7h4~{l8pECIRsyXwvPe$q*MdzlwJWw|NcwnrQd4ZbU
zuD*YhmbYAX-xQ4`iASi3TG_z`3Bw;r%3?Hsp4LK}GXm)uN{xhFDvhmEsZ#AMP05H$
zo6Fe;0|YS+b2GYh(g79iC8mL|uJ0b$B2M;;EqxTTdNK%{XHSrBDTqSTkNWERwjt?-
z1p08y&f;#0hmfDL3xf)wZ3OYX<+B(h(<BXI`*KL;J34nx3|Cg04VzBJhm2#(wx7SY
zi}W#`$|wtE9{Y;WoSYUCnW)zsf2%=$3h~0P6905K#I=vPpfbh$5$%&)Dg!16WV)x2
zH^=MN*=DORC*RDdz=abtXn~@n{q>CAh$DkMYhtC)aGjN->cS~xc@2=NAq}^a>dQR9
ztqGeky*^j9o+%i)_2a6coxQ+rOCOfuH@$4zs57x_DsZBzXh*c$+ZwDZUu>x889Kvi
zt>}GmE~SXy5h{O8lF5&v#8CEo?>T}Nj;oiG&j%8rp(Oaz7k15wdcEd;Kv*@uhJ3Hd
z!0W;J#keWH^ttPKF^$YWG%=w`W_iJ3A}Ix~Wb1o*g#T$Q-(7HNQ_PTN^VbFA29H0&
zsI9;kL=2F~f0dWlCxWUimqz}K3PE7a#SIQ#;&)yh#&ZP=*i$i8zG^7J<4OTLkLw|%
zgE8SYix8kCE^fG#L;9Y>`?PQtvI1)j_!U=1jlKx!J5%#g__?|h!8X^BoIE}LD7pi5
zXy<97fd8-93Al0kRNP)*SpNX`nG+x)?1%`~bNohVEuFk=PkzxRx#{&QXwn`wJ{Ja;
zt8ti0hCbg6LC^=WuAjLd?0yWbL`Pyh9)?g6p9+D9XAU)IOOen-AY6?CBi8v3I@XyE
z?B>kN<?UKjpcfsQGjHH5U*>yuq|&;Oc)I()adosFF_H|QHNO{jma#lnXhUaG4P!hA
zZXx5c+~iNKU^|s^@MufZ%a*A0#Z<0H<lEgZ5*#Om!|mrGJclUZ1vIq5ch4on0Lhzd
z;8B)d?wWW`T`ATo1=GmZMA#8$j*?V|WM?IGVnP}OQx|Jv+S8Nis5LpApOZv@qMad1
zTAI!tSNSCo>)UwzD)3NoP$7O|)q_%(BU?<Ji@s`G9ImC=_SPD4D-YJEcv24$<qi-f
zA9gZqx_ZUf@U43b&GSymQ8T_k-yO%|u(q`!#!lbqyS6%BQc#DX`E5vvyFx?OfOCPk
z`KA*4Px)fT<z?@@O@->X9wRNB67wUaHvc2wnBJ-03{E9gXFO1sv$KcCtp`F9`2q%1
z^AI#-Lez|&W{W+w0!QmjdKEg4CurBO4Cc5+7=PGwC}b}g3qr`XuErCN8=`Fz4I9r&
zlXsP3=>ykKv*G>nydY{vZDdXGuJau(#zr~oA-aWljLMMQt5xUVnbHo2?dBvVt9DWm
z(l)$1;AKxv6Dk2D`8pZ93-Dm@6B2Ls?K8Z}(r;9%kt#RV`VKO*?eLE)qBO0|Ei3P`
zn^3-C5y!&U87~#-zs;jlW}qXh*68H%z*ue1YYViO&$wU<`}&;RO>2Z}3Ct%qCSj5I
zFtGS*Uxi`R>}8he)Q;4Y&dvy9iDpk!^Sbs;X=4ExONsCS%*VWbHuN-73p_^kh`39^
zq|6EPXMyld{BPwr=y~?gp@G&!5xD$->i%pePUIiuU2Nm;;WF2LvL_=9?%*t>#V}Ry
z+47rj=o*o6_26W6tA0d~f?uX3$hHbUVmo+h4o82eEqDlIAOVs1qO5>7mw4$ek;sGH
zl?iSmx9`U!uKGnhYsaFDp<wmzMlwfP<J7_ADRFauuMNA}qPM>-=_9588fyw4vklDK
zu<qlUj(@xVfve`;v1$NnnT&x=RqrdIl4oyz><d9tCZJpK|6_4mH5$a%(6nkE0Oi+>
z5gY>|8UB^V((4iX6I>F~3L(g0zjY!3-Mg|5kQ3)-cB&N^NUczE1$q*f9V9yhTD>y_
z(Q1rBr5|#r0i(ETL_WB~*@dgT_1Wnjma!3PCf?ze@~GNIomsrc@`KQ8!-s%Ez8^0c
zPqPnCajY~BpiGSwO>aNF>IDlEypGFaM_%tFX!LRbQ&(01%9$QODf)al+*8sqSNE^r
z`m!v;CD2PoN5cL{E243=ZE>tzD`h^lcid|0;9XI`sH=;2eR#S)7MnQ{Qh)KPHNVKn
zJ9E3%+K)H*see6hJAW4h=&xJJ1l*pR3j#j<(#j{Kb+VGAAm-^{NKIy*5zCh9C@-An
z0;II@N{ne^AVcNS(LgR;o8X<U%Bwg{Y$fLj-Gw89{tXMb73$AWI-l&N5_BjmXG6ud
z%P)LCC017gm8CRSk_VK9s93@(cX*(B5Eu_;sm%9d5&2CD6B=e;_XxauN5+-b3fH(e
zNT(ggwigb$Nlz_JNI;QeyLgDdbkpS%Xt(SEl)vq&H#MN9<LOdQWfM5jpuc7}+R*d&
zr|CeXDP8Z-SB3ec$Zs$W`<Gtmx8M^0cdE%tm6|QFyIrK;zsy0&ZzW-nnfA8ocIubj
z!&iF<xAYCN*t3CRw5@%>SDHzeH&3w<faB0-f8f)kM^EbIh^VS2fW|XDJlY3o?Q(8Q
zmWTp>k%4cFZW%D>;5H+L-WQ++K`kmjJQWyJud9wkX5#C20IOsmyfyb&ISq3Zn3!rI
zon@_<95uV706{!AokInhfl7?Kn<TivkbA})Fjl{hGrTIUZ=GpFdnrM8<_3e~du|9@
zZm$_(@MaD<ic6wDhlOz7@}I7Ef?1`D&k|LusInMpB#Dre?`)EmaN!|d8APJ<L}E`V
z^l7-PLocSlPoaVq2sFoGi!4CLfib;{`qUF2PZm?bZj$GGI2EL(f}92OaW5%T+{Fwv
z1uBLh?G91=(;qRc28HU=6JaQ<kR-BNKd=p$NLZDPx**9T#Yi!-qo3u%j-U%^Q$vmZ
zr2S!HlXPjDn?GWYP*jr|$Z%m$i{H)Of($IWJP$GZtm3f!6<sz;4GRlZC<G1k$MR=Z
zPMLSKuu+XkG`(egr62rr_1LE5TJ#r_gBBEi_Tk+5vA<kxm0eN*zq7qU*sZKKQ|(i0
z-+29o4%as1WMLpj(YeIPJ{?QWF??LO2ssPJRK^$Nsvf~`{qw|t!b1~Q?kGaAyJ<+n
zR_QCn35#cpR7Mx4S(zZrrPfyW@mf4bA61Wq@k4OL>2=v0Yj#JMDS@$DsX6sJJ%IcQ
zV}%$IXt%p|L<m(-_-NS7`&rVh4>7Uuv8kD!?Zxye8+dX30QY&Acm*9B9|${tjxt9}
zRw{^qAG`Wr!<P}hp`5e8z>WPf9_ba*52#PjEMf~tJI1G%GlW!uL^6HJePQSD&{o~Z
zQeM*X5H)@@Cgo?Wd!N<=v<gba0d~9WgkOCf4{V}DKZQ7^e)MmCGgX5=MUNbDEj`z{
zLu}r&p0Ka@UM##QFuZLm{|trzT#+ep66l&K!1(_@%+ZMYWA60IBf)Ly98#BF%Rc9&
zN1pY-IIYmC$Vu08z=Ux(*D?EBR%qIkh=q(lM0=I~0Co3n@%vND0*=yMPHqk#S2)RO
z!*H*nLF+bPGR+wp6z9~PZB1{(mNhJhh@gl>faWYdj<vNkla@&Q;jQ*sF|6=wppD7q
zy(}=90^y`nMgU!V4mtZ2Xy)*ccI$%vXQU=$DI%I|_0ke53%%#+$H1nkNfMZ2QTtlx
zr-cZ|?Rh8io<qxwsEIsCCD3Wq#5``;j;Z!oI~I0g*3!Svl=!Ghd<ES#$y^#(w>efl
z5<&kp4Cjt=Gpthk1)mL(OFY5M3?bAFUU2Vaww?oCq*&6yueyAN^T`<yulpXUNQ$M4
zqct;pD;ZE?w#^MA;a5T{8t3WX*HR)^($ttH*!}&0jcndY0V>sMv^bQ=9eErw7@BLl
zsKET{KY%TXOXQb)zwP`+9Lp*JVJBvyftKn^5k}@Z=<QNM$c5a9<L1OwYoMkEC{goD
z+cQ~^6BDP->i2T@o&GBNfMSV4;`u7h-uF;Wez0SQ+k^IJ#9(UcAGcd84vaD3?d)TO
z&Hnce+zb7Ps^VH**>6`#>ElO3trSG21R%Vv*hR17`bY1N+a}n7u!&~+P=+52UFtZ`
zDoDGcMLRV|ibe`K(J^)}-93y00cdbkOfsefE8E^-dbvGZ$tEwuWaoUrqB|;C#)R4P
zaDbBAhcv_|_YGiHh?xGMq*B{qVhdS>LC{no=RNkqDYJlTD3FUnD<Kj%zz$UP>>yq_
z9-29=IDslA{NTht@}W1&FGQw2H9q%WnZ_SeD}hg2+pWPjL2`yw31xAhkYK)43jK71
znOy>Zxd)M!#1UAw&N*sNm<R5l(e~&Et4)D?c}E=Em5B5Aht$MmVGPeJP6EgyJV^;-
zNPP8lCa>60f%?IO46zbbCvsSuzJcb%rE@R!1u%<+?VK$EGp7m&tJBxOyN{c0;ID_`
ze?qkAoMY-X@kKUf+bp9(pG&@9Wg7<?xR^fqmcx>dw9Md!=9pzwJd^PjCNP>g%;XVm
zgtNMReAGxr<J`p(G)D_Io&*{14n`gy)36&@*)Ec1S!?VFl*|$DxH`_0yz=JspLITf
z&?)sr*V&oiAiv%0=%E@b5~>Rr^WinyKDaZ~+lVnEr&vehyS=F+TI1zocz+xbx=qgX
z5}-%T>EN@?j`m|&r=QL&$qcu5d2AhVh^OBuH-EeGJ6)qturrdvYWF{2NbWopjzGXS
znBC<Dfg>rbcrBH@DC{ol?5%`!j86d|(oNpwXaDjTE_`U-@Mhsm!ht$ET5v5?&}sT?
z?c6cv@Dw`h6&*0>8RtsMYU?Vj6h??PXGplq$Y6)#tQ+EEgf967P~_FgCrUU2&@+>h
zUOO2%1*huX4LF#q1R{2~P<9w;vzFZ};pe(+$1=3pp~`W;#n<<3sXF{228-~f!+pd)
z$8qsWMRUvD90_VI2U$l`w8;ZxnudWa73+WEDvt-!bnZNF01JjFZp=>6s}SdjzdmME
zx~;l$R1d{<tW2R{6SGF&PXErU+q4lD;2ipz0;u^s3p(#Cf)ZI{cCOW)%<z5fs0W3U
z5BYfmcwu**=bl9A)E3#9ix&e$mAe2}|Eq?Xk0YrFa3yaBjLg4MlkcJ&dWtuOp~I8D
zs)lh(AQJnWujlH<I;_F;blHzBEhNh{ZnlbRIbIjz^f<54x{Xb6;h}qcYTuiiuy+pk
zBg}JGK2ZizNOZx{kaDltXzhUGBV~RDEf}!9x_DXESlaF2R$eT080YX~D!SV;CG*oC
zZzxXNes%<`dNKY|j9TJgg!6Rr@`DwU`)1<tpwl3K2e!3h`3=8-nFZjyFz;NEw_E0;
zc0M>@g0|I$;t-dGcQ`NW7u9$CQQHHjO(LeDaMM$4gb`@Bze+)lkz**IO~AW2<c6!v
z^6Nukgc)RK+WYXAIdid3FHk)tknYdI7;T~rPS<R@Cvh7!wO{$03!hB~&rgkx;8=B;
zT6qYtgRKo~vy@7gPKd*h(kigeltf&O>lA$VLWJAO0nTX}I>rKY&eUG;6B|Bo=j>RT
z9pSUQKdK~nwg^U$3H(`!%PCn$(hru**77ee3X*DM8`6EqOH~EyM1<^n&^Nmrv~d{c
zO|gtIBrCOq9i~Do(5eAl(s%e%SWD;Ku5ZsKA0M1f=6r<PotM2?lzb*1Eia%>o765n
zeHnX9UgLO#<-8rKR)zA{_TSNb+Y|KyP_I9y#L&_?R}3rmFkoW--;SDpt3~W~{~mN=
zBV>x5%x$pl*W)ru=Um%)>(jIeP0jO92!R?HT>U|nKR^~n8mzqFJc@)9l!+5?Nh59+
zaVR3F<wk}BD)dPWmEw_+y|Z_eNS25KXz}mbJUs>sx5IlH1thsd#pQNp$;{xJu<w?1
zu^?f1bxU%kSI~n-+zG?M(4geM7gwPb61qg=c>I}WSfE*xqWOW-R>cc8<5pZtq<R7O
z6H-NBp^a4EGM8-7bzLdzhqG${B3S2fR2!HKOn73y$wXF=d60+anWRJ_Q}N=)k;a%n
z3h9Y_>mqjl)#ni3FpGmlm4pK6>ngZ6HS0D&EVm80$ammOT^qb|EsnB*h2DBiE5^dE
z)G#+Kbf}I{AG&xA4zN7&<;F+e=>{EKwl@EPCa^+(r;-yn(nvBxU0*z+ZF4nd*JFeq
zbM9S^E9Q=Bd4m>oBX=9%s?hx>R3REo2!1pbnK3Uflq@TSr^rc}H0W9x$;vvXKp2On
zzehS>SFzENfeg_50^f4EX5@wL^kgK`$3z)?;;?BMErcO?6?D<K(XVq4<*2#!O|}7t
zY2M`~C0tsQiO7-x=W%|rV5oTwHDz8ty+k9?sw;5`ynQvOcCsUubeiQd%Z?uvm$^d>
zWc||%JlhgMsE2m!stNf5SA`0uS}SDZ5U4x2b3>yqWxTXa`>Z2WlqSJd<<3>FRPF;<
zvC=XA7i&HyJ$UZe^%&>7S>Oom9>me_VK<`L-s!pEslB=RL6x0|fa7QS?b>cN$D*NO
z#G}#^5S1AP*G%Di$(WXw^}(|Z$VM(=GM64kkI&Mdko&xAS^H#ec`-Pk1j7)1z2lIO
zW1}1*)zdIsF#i)pu_DRGN`z!Bdsn)fJYNfc8$5OERXzKCBXcW%&JBm)Q0+b!x51B6
z7iqv|&9lZh(u#yt*3_sW9xmB`-T9oV{8uSMTqY1p4fT1AU)dXGt=Fxi7AL&X7kbaK
z1aFd8jF5M-ED^%bf}-3CaHU(g?I#4h!1iPHspMCwHks9JnZgQ!cLF+jEZtjxSBY?}
zD^L#rv;2%LrZMN6V>LfWr0ra9F^Dw=2(t-{$X?|MS)f4sEc0B;TV{7uh9wZvkF=Lt
zcsh(#!{Z0gg~*E|C=UuWlc%Rke`~BVFr2t){p}m-%iI3SSz8`Qk!2c@Ub`mufa~wL
ziv@+bBL0NZc<PG;6-4!xJ;oDI&Oszy&mi06Wxw98%iRpKu@Ey2f0p0XEV*)b&;c<5
z*-$&pngq|G<{EsO{i|-}dM72%!hSjYW(pW(1VaX~vHqP^VAUsqMFYBV8E<a>B8@~2
z0L%F+n2|2jY^7svZR_|CpuO^&^)#<1hm86FZon<Ki>smE8460VES7IYyU~doXa-Ic
z+3me-3g9k@^SR`mL<ar(Kic%;)KhRptxuV2VpZV;Yn<}y(GTu<J1ZLZC>3QgRnFMy
z7PtiZf%<*lo{e@`dEtcf%c^Aqy7-Pxz89prbA4$7#pnRt-Lts_2%~p@(T%Yjh5(0(
z9B5&1M>zakG0ZzR1NV1Es=0qHZuYKrurzxY1#Jrm`_6^c!NoOG#h6};82%yh_Hg4N
zS>H2qH9vTYE_L3G&P)I9I_F#=PnmdHHVNK#C!Dih4SM@sWzqd<Jk(LH4iMyq)k&iC
ze72TJX*Iip-$~Vwcm>DC<{@JSS~ePTDR37#@}_(>8z&IrY3?q3+vNCdZ|_{&I`H)M
zQo%AI8)H;ujlgn*jr;mtUG%7iOv8>DDu8Db?<j3QCx}X%g;W4*Y)Xbf(SfXDwcUa;
zaP}Ip6yzsbYlu2<=OKx8h+)#@#D_P1PauU%eyt;dQt%cG^r71bX6O`fjrRs|x%L|g
zvB`65OzU#<UwUsJJ+uJ7a_TM9OzKAdvNEu>@V%f52;3!qKr*BVW+++>ToL@Sq`UN@
zw|76>sIS9N$Hmk2P5SwxZz9nlo*u%%%8euDxFqo1E~F%vQ680TC3QK8tsMtYnUb;b
zVn`m?MHPO}_J0(0JEN4BvosKMP*7#OAVRrhfP>Q{8N<=ZOUI2D2-;<%Z|t8YOXy7M
zh}y0{vpLNKPd{#1-DHHRss$|pp)knK?oV)ADGEJl2s-JMKh9%^Dhs;)`4)gJkHq4g
zPaE-d9+1^y-%yS&VXY}@RV_06<~X*WQeg;If|Fr<+5oY0vbCh-N%nX=vBdj!Ii*B;
zSLBny^T}xuK9unfWX`XD`oPj;(!SSfm*e1vNR-~5<5?L%i|cM|`|V`JVCLfyE2{Nz
zI%ew0Ftjy7&P^26d(K^|G>(q7Kq1~oH>zjTMp}l?&Z0?B;c$YhSfH#If387ZK;^OC
zIkNZ_egSb8`4G66O?`+|Yqpt{tKm~nK4`D%#uzG@s>4cLmMt8_fX$-xRHwcP<7f;0
zN^Pfuu`1<WFJS=(p?#fZke>g1156obane&)S=^g%#+;L8+neHNrV4#4uri=STvHyE
zj4hUehYez0>tzVK<Og3-FA}dA9DE_ypa0k_3Kr1g6N^w_TJId}-kqJA87$d*tEBPB
z+cOEp=G<rZD6l52?)<7&_Z9cXiW3P;^~Pr4;4r$VIdq+UV?CUO>p&q1`fh~1O2`=)
zdz{_gv?Z{L%iy8qH?w3rqR%e=bSj2Vw9NY<@Nc5uS<Xe@%CNVi=5E25IeNJDs>TQs
z`+krrF)iy6>t3o7<K5rbwYD;+MbJAn0m%l?EHAFlzx;iWJW+aEA{t10F{~Uj1&?V9
za`gSiLd$Ce%Nr`#EzH%00@&Vh5T4~}JViiC+Qu(blW9Rcpn-~E@|+LaqL*Q-6hE|i
zo75W>7u#CGsf8#GcVFG2Gtz97P!7#^+x)nbYlPlh4$4<@lBLXz7>V~|O%q2akZ|-o
zLaV==RK*)kZv{O$Lpe$V25*dc9oni{Ie#%#UY1tRq8?24%d1X?n@}?UX05m|Bv+M@
znTZPzx+gUd1)*i7`$xiEX_-mg#c}Q7{R`;x6IE=!;G}RDj#nnwu=FjG)BXBIY7R{a
z6!s%Om816rOt}6VeSr|d-!P3Qg`>(i!HyVedn&y1J6u1s9mO1#SLREA!5oKj&$I7d
z<&w#iIa{CGI92r2)7dbxZ;SJeG>F*yKJI#QV~8j~EgJP`+TIGcvB>VI?)(72+8IY_
zZy4J32iN#<(O3~MD3N9J>^NG_lAeEPFb`)Onx%5=x9hR-{bZo=?C}!QG=vHyMJR%X
z*E&Fi?GyA1SPx`uvn_>I^Y@9cc(I$O&y9~F=}4)YrC!+v#Y5HbCTiV(*UuB|HWDx%
zd@HstRZ!+%g?%f<2oU#`=Y+9Sde~Hm*^s$B6rrv?$Dv+b685da+WiMLJ4{@Yiedrh
zK_>N_dtBUrF>Z#MsM$3u|K14itH>EsOT3Bq6$3Eunb@md6qVM%bvCADinA_pV;Fx&
zJEF<ivgH1dWd(D_Fg7RK0|h%3Cg?aXW$=c~l~1oWYadh;YuuxVALl_jlYX*fS!2@k
z^XW94_>qk(v1Uj+<|3$-uLnThzhi75AF7b{WY#~z!tnE8Cl8H6P}PtVnu2Oqv^FJt
zozP?pg~KYlK0XvadAY>aM$O2Sp_BcufK!`<V|tuR8#5qPhk~4NjHZA=ZfEhcH_#D(
zEP}^z3D(*Idd9(bSIo`gkEQhR_V&Z}_*YNNJ7?5b2^ySs0dW%nh}tmTlZc@(PSel2
zEa%}XT9AvoP3dy0N#9g3kU@!kclkDt#8p+aF#)GvC78G@R;dk_Yt)Ewh3bAM*SDzG
zEj|^(h#2m>?>>&i@*gWFe-_uO&mmcQ+<1#%7EyhI_JHKSTako(A<GCFievsYn*l@s
z0^zoYH?EmlAP?0m-0l9>k1^SD5C~icyoG?(6EeFv!ROBE_c}i8r@e?#!R0-D^}i}<
zPKL6!tIgZ^XyPz&)!MuF!ztCTUC5H4E!k~SU19TD#7FCAeve+|p8fSA;WZZ#vL3Q(
z9ZvXVS4HB?E!4DAnapVzxGnh$_0(!_X<`o7<UCs+e30_s@9%u%9h+{B|0Fc}a+GI_
znTq*SEMTXzPnE4t>rh`CNHE9p(=Tj=XpmLib%bUowfmW(p!ZS~xya{K|7guqK1rmE
zg}(@Ix>1Jaew4ubi_Q$bA`~C8#eST-iysU)NmRKIB!dDV+2~aR$Y!ET6}Y-AeE|Yr
z9UR}uz^8)wi3@X^jO?h36MvR5<5zHKKRL}OJjEcM3h;4MU1sy5486f6PHW^ah6L|J
z7@OyF^lKvtta3EoZWC`N=rJoh5r>s7+IOMMtJ$K!XTv2lIy?To+P^xP*D#@52^U=y
z1Oa#TqNJ$$5++@@NC7<y<J{qT*j7*L%%wYat?c&q>we8AA!7=!4^BlMx~$}790BWK
zna^fz+x&XklvkI%=z0KA-tP%&Q<N<DrKUuLKPQ<f;?5KqP0oo~+7X4MNIWL+&PJQW
znY}(*`rEvOkvpZGdn}K-GcThT7YR5&pz+X5Ab<#CE=Ax1Z>u8e#$<bs|2!*?{<JEQ
zUvn-qC)!H<%zoptwSn>oMC)O_$-q`fH9t@o&b*Z6kvz@*G^g5NkiFdHQB6gTOUt}#
zcA*wfM7V)(t2`i`<z~tdEXB5@*q-=z)*5;SO8ZSilGWB=BD^6B|C;!sDzs0v8f<IK
z?eDMzRlc}FUs)~KkY`Dt4Hoh=%~n@ng|SPQx@YJ$&6N&MG%7aVu<^24E-uJ!w}{H^
zxgO1XB7Wi)^ryM|2n;JFo;j2>sQdYK@mPQrz2NzYPpQsx3OhY{>bmcC9MsZX%wZ6k
zXyG!}0>m-LQuaCwjS}F;3R+}j=#9%JH6L5m#T)&Wr_iS53f<jV^HaSTbrlUEFa{Kk
zZ5hmbfcD@32)G%**aL#ssd)VoontgF11(J4ThwOx$z?<H;;)gn<X^cVDrwTtPC|7g
zUe1f9x##z@pw|Qy741`M#}r>U%su0ec4;ad(@b7ru4{I1J(a-Fo)KISP!heIQTeAi
zMJ%Phwr>ePpkLD$%J)lCw>v$z^7Y0gi9Ok@N6SdPS$Fdcovzx#*P~^RM_v>q!~Zpb
z`1(|&a+=1~!WVqsR^oZ1FoNXro20bbZRWZg>ZaAJfajGm;qLuj&izFIqyo5dR4V=M
zsqtdK%x#Tku=#(G(EL}vM=%Z<?)Tqxp}m{N8}#&VGPx*x`IpzuX9hj3YF}*dW1xSZ
z@&7?C^?z?^1$e%O{{Z&iW9Ps2ul@tr|J-c<0qlQy-u!1v{%^hq{{z^60Q(=e_J8dl
z`QNTM{3pWxKSvm-<mmtXJWN<I!8%y-9zf@u2GzPXs4+m?RIh%sD7=FM1NB$C`pFtX
zUYHJXMhZ7~Mq57^8F2lEn<4+=bq+G=-KTg2`i>?{nI0V6?L<*;l=GPX$1Sy|>7>nF
zXDzZuf*8^lw_o$|7-onQd5z)1PPR+JO>B53K(AX(`yg5v9XarUYvU1GkcIPj@`9XM
zNs>a%AP(rq?swa@J6MFp6-|@HH+<uf28)C2t5zV>@n;hL1nb=RJMbY;R@Hg(!;xsR
z0n?S!6)d4$tkZgn0WjZ){B$<rHSJ5!h~s@8kK0wV%G(quA@GIgKFc>KK<rb`1V{((
zm^!V$#!GKBos92I>x}zYx|gFCEQ^%|B&D4<eK51W#I8+-m7Bx;tZN|=41v?(vmBx*
z-8;sfg^UgC&&Ye}`bkvGT#7@J4j>~7q*6*NlSD-ERwkQ4<pRhvuUI`mlM?Lq3l2-r
zbFx!oO0Zp>`gml<;wC=bGA$x|)U{72$GNb?6{h!Vy!H6LCkc>^&9(?1k_$@XKd-HI
zR)Y@LCsqXkmLuzH2>_)=dHuyv3C49B<52N}xB+Z5V?#cSRj<{Pnr^aQRvR1Bnz%tD
zGij<P%wY*ns%m4><}WWGUAw`b`Mb{kMHk%gR;h#To_7+Q_wsEQ4g38f2F<G>)8VtO
z2m}ewT6w?q$|MR!e8iUlza3Z-o-d{S-St~W#(+c?{LI@oYI-E}i$6~>({~K}g?t;%
z=5b(Ds?Sl;K`KI)BNJc9NG)ne3hu9awkHrwzTEqhD}9wUEEv$|FTQM8(<v|UYDiq=
zOAqDiIQV4*U!!l2j|bBDR7_5Ur>(*MG*8iJ%oa$)Rlx0Gc>`4HMFCN4JfR-3HQ>?c
z5~`YkKD2@1>3;MJc7!4PK4Ut}{5oTD7n+Pr3zyq`*bC9v8jXG|#Je~ySBaw7*pwfJ
ziri0rj-nAB7W?gSUmGOc%^jQzj)&MwR8XS~?FgF|f>)iD5Wl?AuThotEP`ZFX1g*L
zmJP#kBw9Z&$wiSf8OLBWw9=>Xd37oNMs=H#PBddEbOZ8(;*q@QP$tI*kDJC&O*xPZ
z4r)QLT^v(T7MbK*Z!)31)h-)h+LSw;iY#^wRY;Z95$j|AC!#>giVh8nJ(CCFmN2oL
zGMy|spn@{0T*e<*OlT85-7i)+)lCuneOVnytEuUakfIp~r$Gl;)aXz8KP6MSs>lHA
zJ4K$N-aNN>3i!6aMFD0Q+CHV(%Bck(VBAwbGWx7;EWl<Uvr=6)y%!>n!TQLW&U9RB
z>%y|1o;JbK+V~SoLbkJ|2*UjB_o0cCu_fgz&|gr&B*$+QzCy!)K8ML=uqHP_6+uRD
z;l)NAotuu(E;&SWTchh5yfB!@bj=hkt<Vg!Fx45NC(0;UeMi5O2T_$iXgd`QiJZw<
z-#NTCFgv<~oI4xk@+gtS&?C}dIoDh8-tTMUKAm#oj23a#O9=ua&a8|$8K}1;&M7Xp
zEavI9!C4n&Rb!P%aPVR<7aFKZkJ=eJh;@R%@zaUM$g@d;&|c~R4epKft*ey`=kF9J
z0DwyY(0xUJ%@?vMua|WI&yrOpVB&pJhxSs-Vxpm+*ODMG`$|S~`$NlF6})MLEB6y}
z=bR>%6B`U3QQphHRAuhgR1M&*HH<ChWltVIpj5fDDW2G)BQ7jrWci`h4TA-p%P2R3
z*kOz1%nSAcPq{yAa<5vFQBL$ipPS&K>=90NjR4|~%mD0*4x*R5%Crj*qYIiH9{)gN
zw!o{FL;&Olch01FzVqln^0~)H7;k{xuOb=c8f0F#1JXP}MU#RI-u>$=1t=&|Y)M>L
z1imYO1?PTIS`|?Yr1R*r(op_@4}VN&3dVsHmVy>qxra>Nx@VF9a>dzm4_uUMiL}J-
zL*8JS#B*UGm*S!>N8>BtM{uQ)uUTpnk3r%~{}ASlfz;Z)*3?^ggO+NIF=jB$sD_$F
zD3HsAWSIGbd4!nDTC#}9*LYV_v%D^xSWA;=@CL*ac&u7z?FeZikzxWZvQAwap-|(u
zIE?Z)7qPbEJ%Z9J1r9plcJ0j^ok-_fnEt_~s`LntDfPWuvoY+mK_1LTG+AQsN7#xZ
z<^1j~!s{2*2LK-lv`{apMCwNddgd)73q#=VizMB_yu5RE7Dj)8VoaHWLLeWW2op-h
zH4yoyy#j#*y2TPP&7N}+y5m;VGQ*@2Q}_e8-Tji%S$yf{7|c3p<>EqAdq2ZX;*;f-
zwx^KD1s4=}mk!_q4f>9p7nH)tN%{yi`NCz+N32hUv+U!H^^TN)C!AuVxCGDSut=cZ
z&q>+#P;l{&7ZtuRp7zyeGdA#PrlR0|YLc#ow$?p}c>RY0#E2?>Wz~5VxE-oQvqmuA
zs<1eh?e$%g+A^cMc_9NZ*ZlPRwp3#3GYXGxyQ(UCB=Z`QIXK<Cu^Wz~5|uh)HnTW^
zI~)y&lW9O4>8(*_WY+GE|4T+Ct?*ruRz5?1)TC7uHtQUtiYwI&P$T!$m2F2A#oU-t
zM>o&ck=;UOduln(yx<0Tl2h!mQdi4D)y(Tdqb$69xhk~TPrh9(rzU?qXa!927Hi?i
z1!LBsW26k*ajcboH^Ju!FY*!$$LXra6dHofvvF?tkzmn=e(%%dTMk*vTt$1gzk+P6
zNc1M5jDe$tZ<%s@adHd;emb?J=n)&()hU$W6c*eV^KE{%kur1nT5QPZ@afkou3wBu
zdAb6WhB@u_LDZoVa6B9r%}(VXgP17;;8SX+lP#!w5+*D=ERNl&CzI>7cfXgfOV{Pr
zEEtl=P^djm`_1e~{yOv>j}Q3WbwUjgD+;d~3P7n%23T)A*S$9*FiKQrX#FcJWRA5U
zHm)n*rAorwv}{bm?AKVi=Z>4dsjaAhv-1@wgl+(dA#aaB#vr|z8i@_EiI)yxFQR}u
zYMiP(v%A+bqzbhA(8*(-=jH3IGF^w1Q}ur3D!wkZbKT&iw1~$yiDQ%XLbqDQ|0He_
zVL9Fdcgh49q!gGqEyxa*)GiVPlwp4)?5?O;zAI>_zGjFUVJ7IYa8x&SEQBECgVu}_
zOshNuIvEB6QnC^h;MW>ewJTw6D02`smsiAJ=o~ZBd&N<oo4`apm02BcY`n|9x64a2
z@vNJ;PHiyAe$*7#_0QzRT|qzVFh^@k!eS4IVjh%*3q)>54L9m4%F7GO*q7ouQF=#5
zzYdQx|9iZaQjT1DNwCP+7Z5$QC5?T-AFn+uFcg+tck`SF;S!(_l;MT7LRGv$M{d;5
zKi4ahQ3;L8?&vU~w;a;45;YIHS?dZ1egE1(U9oyYq=f}B9>X9wQRW3n@JRCAS3s)o
zz|7i+3?o)ne_u24vi9V)FK#s{NO7j4`$oCyt>Q5X5O|((5B_N(SN5WgrTqXEA4eoJ
zV7Vvqw^#~EmWWabF1x<NED|PnOA+`nb{2Z8%?i3xyt>4(zEMXt<UHH>P1@nDjU}5C
zO6uBq<#-+H9+wn-h?S7%;ly#d<e*uIycwUTPIp1(zKms|PbI}bVe4p<mIJc3uKiPb
zxMM@r-Zm_mAD#h5+3Rpm1<_v~JqY^!r;tqz?ME_7L<!;Tx9y9T@?sSO|FPltgi`5+
z=OEDg&^9ce^;QWhq$8u&Q)8*^10YMWT=0=Ygu(|4S{uU!HK=^qMM6<68<}ZL`#6S?
zUo+gr#gHCJ-Yd-JrhqqZFor<FQgnjL?$a&hAm#75*z<uv0nZdNC}@a7C}os;*s}zq
z%gl_{H(^fFuofe$H_-*A(Y+!0Ef>ptiiKM#Nx4EcQ@t<`t)`T+N9(!vR#**ch-Cv0
zgA#77^As++YX`;*J)QbbHfd;OT^<bd<~>3Bz)?zLNJyXiJjGUH^)}AOe!d|5sN!{5
z4|u|$&y;CFvE9T3E=Kb3Ny~G|wT_T9!+Jf(+vINA%Y4ib6#3V|q37O^&!N>;6H1ow
zt?*L$PwhUvnf~YyIVXZZvk*=NNnnak^<dx;03P&9+J+_Evmh6um9~}h(JLJ4i#5Wm
zTst_nmUrPmk5YyWwCI?TG=_`vTBKIzw!19K<iU*w7MQxIw{<%JBE@L?>KKhgO=p=W
z<UCO|_RhDA<7r7xkLqg}P9}JWieNK?OS~!JIk&!Hu!(5@z53<B75yF7Ln8kxX<l4Q
zZm^Dk?%K2U%W$@U#KyDmL8q1hu_?SsF{(e{_Bqz&ASWS^INVX}(Y0tA+#aRfjAXY#
z0-9Sh(}g>;ABCM1twc<M^I#Z=EktG+rlyHE9IX9;Yn`4%nz<oFtRe5Ur`e{koF}mY
zRA?7-awY)_iOf_`AW~ux$CciWF5tc~Y=ayDb<lMHXk>#iT|D+Hs(q86wc|!XgI;yu
zwqZa7au+u7Q6{zp+U=;;uYz<V;duOxhx&VaVD2`8nn7mgZ`XGm&r;FST>05jEljE+
zWj)cbqINx?wRN*Cd2Z7wMlSV}j!k%&OkR)oKuX)E_Obt|UGN-N(BG<(4({X#*s~51
z)}$%I5fPB>0n3QQom-?nBLS8s84jD3sFvV`4I=w{>~1^8d5Q6_l*g72$HeHm!c_Pd
zOM?|_`?Wp!XM~x3VrGYfR%DS0po;0I!`a{Im?(i}NI>`iR(=f;a|a4lFHb7g+JXc=
zPNo)d)STWH6NnJA8nVH#jE`9a$)GO0n>5Q_&dAdCBj~A6MxwTYUbWN1`So_$Yx!AN
zv_WjmMOy&Tz$=cfH+%|=1W&QCyTM9ed@nnBTfVRKTgxavp&gp#+!m^<4SB~%O;T-@
zZ{QeJHDg>RTv0@p=)_IRg(T}fwwgMU<Qdc6?Vf(XJy2BP()Y?wOg>wQ<ytq5>wmpd
z$>U|+CRCARVoOQYyvEiO26`S9ZWF8Lb{xqj*cX9gm+tAz6yp$Y;47d_^6xuVzZ%rl
zGMq)@;Dz5AamJF6QOKAEV!h&k$G)X>U>f=<HW~|q!d+GZpS0tKwg*8WB~Hob*#cJ_
z8dJwpP;bPwW7c_-@Q^9k@6vePa?=_R8O2KQ8V=&H5#m6FStu#+Iok5W!&JMEEjL2d
zi-gQCOl9rSBw3Z1;KPpgJ>w0{jkxa|0wD>x_IP?N7Y@5}=Z$1ItebEPNql|{u^S%*
zA4P+i58zC!!{Y5;iB3Y6!R~%!uge_k@W?&?DS;=!tQB4m?x6t~Cb!A#*`e$(k8v;0
zgfDB{zb%*u8ZMI{5bG%kM_7`nfPPS&y?V)hlZ>xC<x4OKa2&}6UB1{0sBa%HDasE@
zsk!2yPbuorhmC=A--EV-nX$Lu%;4Ai3oxIL%`>?|Wk*k=hNJ<g<K2+jw79II8z*ib
zzQJ1)TS9tHuk5bb3L%I#GSV(7GXQH=+dXij*dONcHsDm7HTg-@jU1tIq`UpoBUyHH
z@a*JvhAgc!#Dl!n!1gN!r!`7d`PIGag^5h5opp;az>RweRdE?`PqL`q{xmfg=QV&3
zBS;Ra27x=ob0mv^lSmcwsa^}@372#Ao*VM^h0>G_V-OeV?;CT{hSfWFym^th8w70|
zk1^{_e+@f1J}=640QDKNZD=Brr;mYX$Jp_G{uGNiVA;on3)*3!YJ3$Ax!#v(uG|~=
z)FA{Q)p0}^l$}G|p)yayGH?pWRikvYac?4YCo(OFisQkqix|_AO{Wfq!*gbQa$TVr
zxvsA;xzJc`zMYb?*m+ZvdjnlyMy9H2H)~w~<q9mO>~~L>xF~8BqW7Q_V~&&qzD}mq
z?}FS}^B3ZJN*%T_AZh~I@I><`a&H`BjNjNpe9uPi@W<Y>Cpl&8iL8QZekHtNZZ-F@
z8{~o??T9Fmee<QdNQJjybD>f?jVgbPQCAF|_TP__^{n|Z#d{b=C(Iq}penL+TP+_k
zRRpW)8GYFdcDxOPtM6mcapt5gCQ*3W`QC~Kf>dtzY;=};A?Km0{czK=X@ktd5pDIz
zGyGAerz;@V%edz7Cz>i<8`X;?!HK*Gqq&zEz;j@y;=p(cpYXCrEcnbopwSHj%>ka1
z^}J43$V`lrwf}<V(D>Y5=$jkQ`&r1a5qa#?x1RX$V~xU(yEu;IZ&e)aaw45fT6i*g
zhZgDal8&w#;Ztvj0kGitTQ#MqM4Ld}Kq|y9l1ipOo^!f2MOCF+pcERhSQlMYKVZjQ
zzKjQ5LtPyoSO|Ya8=AYthK{8y|G;Ai9c9dCl9-x|nYCQ36Yr88o5ZUxlZ_FC!yhK>
z=L0pk8N(<18>MoeCF}28#|rpT%!;9SJ$#tQC;<sz26e=A5}+lEF;KW@3uM@C9XnWP
z9leo&cKWbCqIikvbZR=)piPlKW!BtOeJ0Pfj9x_UAe+N!%%54s9<6OTsnC0Z1Nquw
zie7p;t$i-n(aY$Y2PJJA6Na>hU1aW(%=pmnOgo~;wWXEjan435K*n2y=UAZ@7(=5G
z+CYezKEs<}Tp=Kgga00%bPrz|t`&I^yD5cdPQd;UwrT1xao}=T#o-f&42rc^JSfq<
zfgK6TXMz)?iqdzP5|>|RC!ZCGe$YlUgoXjrv9Cd&Z3}q@i7l@9axf;2eM}?HrCxUH
ziexvJXRYD(tm4mcM;vt`*DjQl_-2J4`lj+ZRK}y$<MlgrP*P$VI&~N?A5>(a20fH7
zK@R_sMB1j^q_QG|aYEJ2K$pjKs3msT_D7Ia&m}F>{$z1qD9q5AdOus7-$0KpmUASP
z1FNPw7Q6w=)N*)Zp@w|b1FbKUS{)*r>f<J}klEfE_%d_#p<KmxfPWe%5u(8Vl1aL-
zC?jmum+g!NRWoB{RcaS{t9Iv{4k}1&*K?)o@5(pjkp;^8r7#dbyLp8bQ4M_+Dp^=B
zD_en6@Tdka#Yes3LUIhq5&`XrApOVl7G9bKwCM=i9g+09zfu`kCq5&21I`|}^s3dj
z@dgmYbM<GB@(cjvz&|7fH{2tFmeTTGU^sXK2&z*ZA~bNK%5cME1h^#HII6Ev&4%!{
zV)$VtojYUE4=|chUI>*=>7P1Ahe{%Zm2sPxGz>N|^YS00SGX(OXaNcHW{>J`B@Ekv
z4~?HkMZ~`fz7?oKKj{advWXkDCCA#EvSI*m=q0L?0UVXyWEmIwKo*_iKdB=q)4VXq
zTUUi)hN>Nmsr*q)lEid3ml-iD>o%OqFQ@jLXMEEu>|`igxIicMMSS24{o=9Bv2cX}
zh%p`0XEs!kX*R5-MJ?H!M!8Iz6(pv0snQ9EEkaJS-|~&ck3kE>MKPzg<)C9oN-cLF
z;eNzS!IeHiiUVqgPtMf+d@|YkUUU8ecJi4k5x4Y9nx+t!<*XjUCcybkonBvTSFPch
zM*PrM2j&I*QpYnWRp{sW=Z4Gm1A(i;w&p>}Cw7<bWYRH8pTLyUzJTUzc>(m1N1|}n
zbpCoiC%6@6o&|KNew{V;QAn#Hv*-hp&^iZ~@d52FC5K2EY6|&`fVfra&j0D{lY!TW
z&pDSv*3?gVTy7g7hirp|f3`9FI)}NcTRH2sT0y*kl{WYPcBZrxyVSz*`SiGj`*S(<
zM_G&AImiqX_{Yy=wI5cF$PL-?+6WId$v{_vB_-7acWK!EE=z{Ka~_avNYD!zxYZF=
z-fbS@?Ks|4Y0Wan+gUhEuWvHqu>M2fA1BfTlUaQl;ZUL{*HWNOT;z6a(Fzn|?t$w7
zL?cOtA9Ew<1x|Ps$O(mnsldCg1e8I(O717C87Ulg!chZFASa}^z6fyMOnLfb>^Y&H
zVe0Qu5v)vQ)?XGA8_lcdC?_(c+amG1U)s{N)`rC5sfXc+o6%@c9*jErLNktZ4{J>!
z@J=yAc9|;y3K$t3j=O@hI68Z#49n{4Czj!OYlewUx8TySF(1!*4E1BH`G$A^t4Pgc
zANckw(u-uR==0rELUFw)SRJEu0w3k2ousT(l>L=nX=YAZEUTtx_7(DaXvqQVwb){g
zsrWz0mgg_w2BINLEtpC6iI}1DInuP&>LvH^j_T#4N$J|OyFw1?V)4~J;!XZX#TsDI
zGpifTa-7ZM95*;9rhVC7Fo)pNXNlzpXs4$W*l<|@1Gd4E6WZ1{96P_OJUfCLX5LoF
zgzU-%wYo@+1<os@FC<ISG)~AsN-s)hFK68?ljU}F0Qk3nD(`*&%&a>Agx(QxzdvO}
zN?tQ7>80G7+HWPMXnH;+n^BlxDx$huxz5=ZdCZ|`3xm#=8~HERa;(=p%j^YNL+Q>&
zZfvjSt1?y-11&jFz^+JlxxITfsR+%x81B94ln||$mHv#Mc@K27OpX=n5MEth2O^+r
z(93!`wET9Y+UF3x;fS9i2H*=SrBupiV)V=N?6QxHMBkmRI?cF1hLpTSt>jF&i`>>m
zMF}-Y#_^#@s+h%Z9zMS{X>5}n-iB2uigL4yM#(DOJ015Ryy;jVMBDxKTS<l>|JyE<
z$eHmQgiB};Qxnpn4uWk^_q!7x8)UcEy%^N}klmmzVi-kJ4!*+<nkqJGq1kEx5vj))
zO3BK4sTW1W*2Zl-=+gC;bK8H|Q>J^fp(j$((0FNd=O#vK6ScVd+e7czGVpJ1lkz#>
zpYm3kW^urWELXlNE}nxqlF@gvhf>A7VcW_w<1qTnFO8uL2e=sw0)_}h4GK_t7~@dt
z$b9y@azJt18cny01s*-N(?1X4trooD9hvzZk^McQHh8{+&D?s=LUC*yIy?hQp*1s*
zZeFH@c6EfL?bA3fM8H(H{W4cWucV#fDwMnpLFiSa(4>?n)cR@3n1R2Re~Yq+R(;w9
z7_A<DfW$A$1i!z8wx>|&@_qIIa&MZbqPl5=aXF3QE<t_x%Hk-SN#U;vLb7UQ??cKO
zB0KM`uWS~6+eBG;wrXuzBI77Y9j1@30D}-Qx!KY5bDCTS3D%){>ff`CM(4SpPN%2@
z8PL8$qJtD@+4L3Hz5GW5kO;}3QD=VIs}bQMf0$r)`IXkaK3JMJ!C3k&vH%RBPwuR(
zl^Lp4Xy1{^4qQs?mk;e*0_W}hJ9YwjM==n@fhfhcoRh9!U1M*5*&F(FLX4)oyTpp@
zB>{e1cFZk-H_KzxfAy`*qc5d|45sMVv5ONQQu~Bva2447>MI)QC_0WU9nT$yPYG0=
zKHsRj-`rD4WJRQF&VS^>`<`k6(W*?U{Pa%k5^OkKhrLs&bswq{LoO#?9?rdIF3ib>
z5wXcFre0H2K2}X0nSRKKK(<HPODI1h2@{Hn8off!l}<RTj!Ff7NW6T0KN@OU0N!u{
zpo{P(^^XA(2YYze)v8&BKrJhmYG@@`@4d@Y1pVm&jLVlpSJJ`P;!cN!JZ2z96Pm|r
z`+%IN8)-E1Vb<P`qX8v&_{-j81>tGWDeKhXZP5AfPyTq1nKJ1B?N8&EG4}mc7$Z@@
zELlvm2so&?A6}o>O6^d?pkT;r`6#rmQ?Q`g$hW17i!i2|9FRYncOLEER${Lu$`ylJ
zbE!d;+x-Bn3oc;UGp+!n{pVTU*Px1XZnDh4{#W`FXbtQ{;Yp3cZP2nVU$xA3^keUo
zK`3uHPte7Xd8fzTV1Nh0lJd?6B&J3kQmU~mR4N|XOS`t)ZAcbq^1re7kFl0U(ZVjc
zZQC|#+eU5Mwr$(CZ5y?1+qP}H>vYoT+nt*)=iHp{p4_C?&-G^}bB%Y*ImUR`^Q@bw
z`Uvg&h35yaPHAyvFLMFDwv)Y$%&Vo6n(76Xy`+@oPQbHw04a7w+Mwr*@Z}bfedS$0
zzF4UC1-}sQ-+jJVO!S=<EE5;NpuXJ8uglEBJVx1sY%bwxJ=l)OwvVaCPn$C$+$4iw
zVUmggA9`I%-W!zmGM`+?C!x~#s4fE2q+shS;OyV4w2$YsJ5oj;L-)!^HO^jQ4hg8H
zLH6oHwAl3q)K=>9@k`II`;cCImr&rT4?Q*&AK39Y#m}vx66-Iboa7D5a*N7BCq&;P
z_LC11tq%IVDneuoOdSOU)v^*MS8FW-@NWm+d%odg&5lfIjmWnzbftR??k7{3w&kL~
zq+FN8zPBW!*L2^Vj`KiK5Oq&!)4qP);kQZP?*10hmgIbZGw*Ba@nxw!=~jBYSs3S!
zuCzW>NE>qMsG46Muv;5rbHxW@KNsFRxsPhCqEvABF)ZP09drb<IS?y6yH-j@Ea-$(
z8-tyKtMob9(@-{V2&Tm|7o}~Alr1qe{zCxl1t5!^sHSgFGnQ_(3AX_xNX`*6^vPJl
z&hwjN=$*dqPy^t?+TK$eryb=sZOJ8w+wKqXTDb`>7OwXzf{qkB6dtv9!oWN}77Bib
z8=KK`N~3o|o}11WZfak=;UKlClkPQBxJ*SDuL$}D2CN0-GJzN!r!T8_Hly-|I{ZNM
z*#0(Xq7tBI9vY|~CdqVZn)vsUpTVeSXYeb#F1s)v`TLw{wt&61J0`BgfLC@t0v1({
z+5;UPqyVC^bsf<4mS@thJ>qOzz7-w4tjiybR6ty+nMeZUZt?bT4W#>ZJ1ch%A6p@Z
z38LvCTN2<|G0(_{0Rzygq{tdCB~w;sy(Lg={A*mf7FI)(%^iHl`vv0!RwBI|IwN_H
zZYOKt8;ndy_3n3)dLesZOqXZFKbL0eN-wKRtAn>b%=!cH;{A5e`v?tJ%+H;oNC(65
zq;ncL?m|fKc>%e45di#;dDMY;dde=?DH)zTI!f~S_$0Wuj2TF#+d@u2ucKw0YW+qM
z07P20Tx`4(0E3w&>mh`QhaJw1*sa5E!WPkWPp%>Q?ruqZH-IZvfsLx}nG6E^+cG8y
z=`^=mrSuXbaQ6G5VN)`^#xRDBV;1etIPqmmfa<gttDQ;LT@;DvR#O_b<@P+7u{z>E
zk8PqY;BHGh+Xf&AOA+^nhYO<v1R@^eI$S|Npd~{H>mo>)j`%9Z{xu+Q5D&pE1PmrV
zZf{hT=;f|&a@|6VCt^R!#u0%Fed~Ux!>DE>F=(FU8{^#8gin4TenEz`8g)5mg8M-w
zuC`9)BWk*mO=n?~$ydMX-=neqB-L&26HsybYbNmd+?6LEG<`YzU<I-80BLl7I9Sr9
zILpZr!E0HNuJAbErNDLz!TmhSF7ss6^2SSBU*TPAN<G*O?_c&!Q>T(Fi{3kcDfN9J
zR&oJifZZm({KWaWXj+*?cZ4W#j3VF{>i2^&3h$-1iLTk)^W6CB^IX#V)K;xt+4hn1
zIY-il+`*kV;F!#WNrr!r@GSSTwO6oZV_(8>IU$UI4{+J56#1`g?&zY(@w8UULRc@t
z0z3?g3e&yAx2M(Kp~I(Pa#0n+T!!~RU7uwa*sg6rgGcj---%!VH{@}ub=A;MMiwxb
zp$sG%;zQGa0pdcv9WRi0*R2GG?l1l#X&lVy+8cITd8c}ZRF~SfyG2rz%y^;y2?<3q
z^a*XjKh%5a?N!UhP7?3K_qo6FeL(b#p{IIILNm2OULWz95Rt~>2-j5llG@K=34Lr@
z6X)&wrLpRix7ckH_P%RMz(Buh1<CJ#kj@p;tcF?V3`GRHdaa@e1+75%bO>mn3{tgd
z%xv}h;TdP6loZi@1uKOF>iY7xP{nv&vrYpew=8>|Wx9=^T5uEPgKvJSp};gY+K7$H
z5dKw_0W!Qjr7oqZ#0Dy@wB*h>dL>0Yya#9!+38(0jZxYPSTuExI}-qX(b6v2h?-Pn
z1-_>&y;5GqmFi~#Q?=e+3p|(%J6?lAi=-fn3hR}akMl|foXxhgcA7II9T!mk3RoP5
z!p5_&yRWrF<AZxNzj-~ZX|zI*FU|zP6}HWdT*u}2A~6;fr=9O=d|u%r!WT$C+>6C{
zr{?Is{`{<Mcfue=7`&_KQ3Hs7k4}S1?rj!0Ns2|Wu7tJR)Cc^;3+BpVn?9@ySwi5c
z0RN|zrPs$!!VSY4YO^QS?2$Y|0(FQx?7(oT)}LA&_{v2?D5W<{Yr=KbtG(-46`Tt<
zj&OyBEpF$i_A_RZX&QWgXV7SD?)#gQQcIVP%Sv)h4Wq9C4doA9;5?O1AlAo?gse{X
zJS8j2Bwnv_L=q0Nd%!0F@)tI`f?)Pe*VYLwQi~Qgmj$vmleu=>26>><mqTXIKeQ^m
zHvC9@9^i;RfdRfyD+ZY36b<QX%;rm5ydI>@@8V6%%yhpyO8A(*%@(g$8FCgqF*ep=
zh#t95r2WgTgCOXjulO=8qWnWa$%3uoq|Z@98@Sh*(1N6}X&g9D8ug`@7b`tFJ%aX1
z4^AN{%Il?7#HpVm-xq)9D(uK9n9rV2@Y3=np@lyTO09HiNEDYdidbsYHoGC^r91fi
z>BY6F#ZIM+%3WGw*K%kJfOFvNI_s<#*=`5rvvFS}e()|KYxTzfDlYxaend}cMQQfH
zIZ69a%opL<r1JS!Fb4nQR-P!gMqWgFGfJ7vozejcY^g2C8rJI*W!5C!>ut7GEI5ay
z@-unH9QAyKaYwb=(<CKakirzkBO3vrnl37}iFSi3bU^|2(2TUZs@W`gixdpJJ^g3^
zG%5C3=G{MSU-g(eDor6^>A?G-1mu#SNT`GL10rTYg8|T2A)}QN!-Iu=YyJD}*1T(A
zg5&cG+1O0UK7O5w<eS<8z1FP`@*5doY0b)u7NwPrOUea?`^8f$XI5BKfW1jl!=7>u
z?Yb>Gs@pkp(zHP0D*h%Gl#axWPMwv&3mdQoic(~4(CKC71iSEBK{$iwwbf$EWs6b8
zU{`|2WiC<lIJ_U>6}+GeapQm&K=@iix){vK=kyZbR0PFHT%lG(+mbKdqpN{Kb-brp
zw|YdLx0BI<raJMmH~krp+0UE3`uG|odW^5e{D@rh!3cqPZLm>R^UU?qH%5na89!2?
z*sD3}DAGAn&whn|bxbA=Gl=8>9KX%ux^?`(zDbf2A5uO>7ngcjC|AJS@{k~eqz18K
zlp;0Hv09Qf3*zS1?-9NgG7+~6rBj^+#<5Oz(XT}@8{W_esUwhGR%{!Y;0fLGW#!$5
zna><C3e_CyLzc|{FmCAQIzHECkoTcatKotj@kXr#U6a2vsLiOaDc|3uHhzF$H=K>w
zzBT3{j)|WF88IfpOb(+D?J7fZHS4P8;3&Ht%FFndO_Aa?<ot>;lTJ4ZX^`aLx*!J?
zEXy{G*@O|iYSdG^xmE}p?<xZe_>ZgcZ}p%4G_r|Lgarh|CnIvA_#3Z<LBBEGO%|=p
z`&Zio%JnQ=EsllG1$XkLiI$j0p5gu4SxvGTDWu{*=;hBiH<g17M1B)h8uZ=A#>@~G
zw4}hpj`n<sjkba(11h0xZ$B^qxmmXZv>L?-){yHDaf4;W%&YgUhoaj;3P3H+^a49h
zMsZ(tf7(&-4^`XqsrAe>FjpDe9S>*uSxUyZH|~JncF;A<eJu=WdLQ@o5UJpS<c<Z9
z-<dm0EG96)BN(fwn&=Kt&86abc@2G8hQD(_!4%e7$jAh~K58pYl;QQh6JY~uz2Z9?
ziyI$LmtU6i@6bUs?C#0$$C{H((lIbUB2IjmcqgYDL07`avq8jx$$;&miMA*~i2F0c
z2e;Q8%e=UyG?e%uC_(lK#^pgEAd3VA*frBCuy9lBuCQ#H69>@`{E0r!th}biJ-_>>
zD|(;K@+?n|6zkso_n$J}QNj8Xv*gxoXznLrcvUXtk;2G?$4|7+xK3F;D>Kr6#8cVS
z`#4+m%%cIp3e+w7J>f<PhG)2g+NgU=%1fj3($dda)I#(+D}HQzU{T&)v)V~bb3KsE
zEmuR)B|&FPU0g3eBu5#=^`$pO<7OOUTWLP^Dk3+HzReMiO>3tZXdrGtDbib_IYs+7
zaMujGzn-$Qnt`kIGaSesv`eR-Jr2R9M*=7@!v_L*eVsA!4Jd;_Zg%KrV(XtiVX|YJ
zbjEn;j3ct_KK3tj{1xb~jpqAzZ#DP0Pxb{fnLGJ~(RXj#X%qY5l=-sXSDQ+|^TD3;
zn!^=?BiXOy4c5|&&|g@z{6aGMW3}H(--&W5#*|VX9?CG<ldx+B`E(sFGJ<$HdPGjM
zb+ANeNP5(mzlO7Y#E6?bEg?KK(JOWewgIl%c;p~bufRu(dH1J*3I_W)mY8gMWK<xg
z)?UObp1EhOPaUt_lBpr*5*8tVjKQlKdbb$dqGI1P;tXJy4;fH<G<xh6=S!8+t7jWd
zOtf*e;vDV>u7E_PurJpOu!5vXrd1q7L242?G7q(?Z-Y;o$4PAkUHg}T*Y{E~k-1TY
z8PMg7Vx3|7*5hIU*fcqyp|6UZ`wsumD0$CJ^0KUQZ}VZKxM`2d;ZJO`1{^TXGm1Y>
z$WFf2Su#$>tu7&*wr@&nJeQ1|#h&S}ei6;=%;hY~&aTuIxU~)+Kl(2C)syt`jV|?O
zs>U<=DzgvF&q5BH9Z_^Ob)O=M5ej^kT=f>Ywb4lG$%y-KU{t(dt^5&P(b`2Y(MWBx
zod$2<an#`MkzKJqp8h1-dId|!lh|3m@LkCsgNssX7U!mxvZtE`uBg7r^Ynit*h0&u
z_86wk^R6lnuLgwfNe|&c6+h5S*mS~Rf2Bkgu42Np3RiVKvr=M>a$5PUGQ+07=_QS6
z&EyfN8@syVzX&H0q{7kPUaR)1h`a#<kB&Lv$`O*aXERT*bL?tLdHNz;7-Fixf*GH|
zIhd%gI4;KIl#q*N<m|Kg74pC!kGKY`Yvx(0793>ZQF;IZV)C4yx`K8T*-R(kgUfGf
zmmjqd*hQoN9SD4e1L~0`Fa2k~r({R**7ZVB!~H2>Z=iiwXsu4qSxB?9pYak>RqMLT
zSB&@1H)r%TCYA@&4QWipukB;@k5ZOJ>70y~+VW^dGQrhGCfwZ}$e44CGYvBa6fjCS
ztgTgS4^VL+X$%INtNUuFqX~2u1nwxqUNYsEpYf;-{$vNlZ-M^A3i?HVh4Me+V3c+*
zUl6@^B6!2gXQGab`l=~CLZ16BG<Af(lDZB$BU>*dUN2G|S_+2qZy-xk5j97(!$wTR
zmL0Y9Tom2JKWaI=Sjw&Vzi2LoWv7Q!ZuFGUnW@8wLjYOKj$nX~zBMq_JD@aFmI-O(
z4nWbbrBV=p6uqP_ei8WK67d?=w7*R=4*ByBNpe!gee%bHQ0kW`FCtW7`o996?5iUe
zszq{0tYsD@gUN8)K5m{b*MXr8UXCU1>Qa~v{B<uENYV(KnbW~BIw3Tx^ZAWh1+Eoo
z=bSZseNKk1)mn#NF0m?p7CLJFbqh+{Yg-ZJ?2z)$e1%QsU{FXZMophj>uT;Iv9;_`
z`9z{KC~0)#E>oipD>pXdr(PNlRl1#~^ir+Q>v_aA7EmA@bq?#$XTy9ciz>IoLO1~-
z4Cu1EdFiY?0O$slYd)egMd^`V@34VrrXC7*kdjiQM7&R|pX8-SK<C0k#sPm7aHjcu
z)bxpc_&CjOk3N0a1U})qT)Dgoz1nRz`z^yo>aq`0@Bj>c%1~N+<(_u)?IZRqR_GzB
z@X_s+apnh+fQHr|155g?^;9X9O18~3HC`GuFj>ndk4+B>K^x@ZeLU;jJh69v*|%OX
z$(&d5MbdESNz;-Do8Nll@8B6d9lZCR|6#X%bSZ8iOUFa~P9?$z&h<AO$7DRAuo?|p
zO1Q;16e*P-t3t2bIhd?#5kMCHgZQ<QoGR6GMI{kBd{~BZ;;g_MZU{$J5-56lVIfzi
zqTTz>kaqPGW}70&&}n&R2C#w#4<WD&^n(zbePw<KTl^JWTIOQ>!F9T=6=zIe`_w2C
zkC6f^k?g6IG5K?WerIqq+qF=U3Id=^Q8s?12kBNC;rvI0<01+^r96U<C0u|ajtH1N
z(E!_+Y6x#rUbN#=mDrPvCK04*7Gy7Y|75=#o6u~U&?BfhZML7J{3a$X!{$lHM||0-
zH<wFKRyM2HO5fPNyi#jWg#i`W6}_6#`fm>?7?D}MAHw%FxOeH}oHUABZz4f?C|x>L
zXaA8reB`yq{q4e5@ymEW?5Fk%xe@=cHm0h*SH;-5m?nYqN726Ki*WtLwGjD{`e6Ch
z4h(N5y<=3%gCBMPK5g<shQ5vF`iNE^c<xE2driIjHg<X$bjKjguea)CZY){1QR+Oh
zn1$Ghf%Ii5k9unk^TM0wH(lwN0W(7+QTRp&|5dLo%6F3*<m6V80>X`kfNK<C1ysE=
z8XLjAEL~}Oy93psiR8pJ=Z^a;Nb*yj-2pt)vWvUEFoqwm6RTMWlndH<rJ}YmP{$<T
z^AQNJFXD}hT3SV7eJPeZepA^W(*9v%JhLtaF1WuIymc3aSyk#MlSM=7Ig<i^4<Jb5
zC3vM0HcW{AK(8FJNY7)B^>wN7?iWRIErOq-bExr$mZFxG{*zznYIqFMyk~Q<OF4~X
z;K+RFjs<=3<IVBf)CWp0P?=f3zUE-*&Cza3Lyo*ma#NpJ_dpR{T1QwN@W<G$m8C5a
z7Wsl_&)O1`6wa~~M~yVpHG_XGOvYX0U47x%2yPO#{+WvEX*Y_B0yyUyZ{DAE_`WV;
zdRK)1E-xbq02xN`Qh0E^PhZP#qU6@JHkdy_-iaZuCX|}XOd=$9gEr3mzQ=KW58r>o
z*W>eg600pJf7$voFH#lu(32axNT*@^8(!#XB{7|lmx`@AYpM{n&mDvPAyLK>HC#YF
z5VJU_L6-Uq?$jt&iLlM{$l0BBYzqFkz_1^IgTO6kZa(7J?)47j^=&yr4LQzGyLU>E
zp2iwL+MP5#B&i$Mc&<7S&2|%A4h|r@Ls`@(RRv_-8>OKDjL-WTN(zy)k}vv{{8qj8
zywBVze6W3f4+Ji_aC0U(`KqAJwaGE^5N{>ez?@4%4V0ZHahqf1_ViIvHhW^CCr{*t
zhV;V88aEsJLIFKuG84uM%8<_qZ?#)!Y5~FJx?z|-Q)rjfBZ?LiE~Zp#T;VY|t)IFo
zD8FspAXxJ-p89h}<*5&z++caV?nq{GpyK*>Id2snRKeucgK2i-q$RSLr<6M`;og)*
z4>bXbX*|S^J;J_E07^xFnJ;7Jw)<~#a}B?f?6Yed_*eo6wLKHzql3GkemH@+<1*FX
z&8>FV(wE#`yZvjn!Bo4O@EGUkI|!mmb9Bzs$_rsH<&9DykaJ9u`2#UVK(429JynXX
zK@!YL5Jhrraia8kN(#z9Cu;r!7)CJ>T>=Tc8)zaq7|aL{oXJ@>Wp6Xg0c9w}WUy8|
z!$*QK*m2uCMz7Y0wDaiD{6$20wkRms06HLW<6U6y6t|1aeKKo8@lmb=M{t9+_&5);
zks;ywO27txUxI_(e?u`0T_9fu#}2ibAvaX?bk4rp(8;2s<iD*N{T11-7*BHEHF8Y5
zl|DJ_0zgR!en+{B#<mUALUo|ISwAXefsbV^Sf>2sFX(8EfWxanT=lcB5#C4|6$E}3
z+BL?u)mSy=AfM$7o@TnFw;^G1&xka#@~Si2DRU`%jZ-mPnWj?FPr8`EwYi5RC-%DF
zBYhjnO_^E;UMb1fg8Q|w(=feLi9oRNTd+oC?f%VCEV^rpKW4A;$}}hP-OA{bUtNX#
zZ<^7~82rBRa(r$aZg;|uc$Q$no~w_FI{Jk#A&gQWOlgZHMPJROvD=IL6j$At6)E0f
zpw-ULTxJA$_zt@+RNpTCT;mvTkivYNrl>{ZcrL8lCPIjqN^jU;6r4ZXD?U6(?O8+;
zvQu#DHnTBi=7rS2?A<^#lZ<$$PkCrbqn&kxtV;<8BDT1-P32y`&~Fpa@XID;`&`QC
z=}HTWK~V4`Z{H7g#=c->o&-0gYrW^1Y;})$hynk)ZJO-*307wKxx`D0pbvmy#H+X=
z=2nG$V0Eaje0Dm_D$zmMoq4us`JBHWSY(|MYRI90W2_4$pwS|yDO<xN83EMkEBE+F
zfail`|M1O;<~q*IMf>`NyOvy;_?s@=8=JuxfWp{B@Qela78{9k__iMR$yBNM*w%bJ
zra+A}&_oW+O%a5|wkl|LKjmBk>w5QGcX(CAPLf`6a;s{P(z;0T%qRBY0QUJo<}ywQ
zv5S+T9gNDN2xw%{{b`o{!P*)x4P1%==nYA{6y0OlwIe%C*CL8$WUmIGiC%k?tqMR?
zeEiQ9@Gi(0kEInZfHB4Ok;V_wA@fp0Qv4&Dhpa%$vz#DAJAG(p=7eHsrOY7&jYQT{
zV~nUtckai^TGk*E{QmaU5INRDq;9di<m^YCFBTYucE<O)!3Oj578vhCrHvq_G|?b%
zG_!Qa&SOUCp(E#svA2?Fu#b2{%ghAYC!Lf3H8exq1*-;z>%3dHNYqA%Sj9XnsNVpt
z*wcY{T%pqJ?GHi;1Pz2~7yNh@c%T}P^7pbTFFaS@+yafOm&022(H^R-8MUJmQLT3%
zhB&e}g26QHYk0wwSTUXi#(e=IS5L@O?`TdeevWi466Gn|SY0caLvigE20Ob(7#)}Z
zzk#3B-jTVap&C+ZAPhaGs8|pIkAMXXX8<xdZn@@|*J2;dTfUfu#4%>=!)FQ=fPYY2
zL}oe!&YNx;r#*C7btEN{mG&!~j)1A=l?QJVjV}{lQ;xl{geY$-KR_#rg}DZVbGL`i
z%6Bsp>2WM~QFGpEh*xg1Rspy0K`MfW`gVvs(dHuddbNB&D|W@nXx3EbjD+EERVP;&
z^DhFp&VxU4?WpC(lKnQdctHyc(cp{5AUybWp*a~`4hZ;sj2|cco}rGa1_<pNeZ2<p
z5srHX9?6Z+T;I0dYD)n!m`uam<4a|cq0co@Onod?tc!*b>@gH770Fgf*}YYME6``n
zMjgs@F`y`5+7_3P6O>^EPGM~_mQg>T_Mg00Rgy?FXwX(kWJ-&U+J6Kc%$$D>8A)8v
z#v+}=x&wMU=E>OGD~VHqqHh2&F!xzSEXJMtj11KPjsiq=7M|r0m;dIkK3rPwoom|}
zh)$3#`)-^YeS`<7=N?^-_1M?ltlrM0{w|ju*{8sbcTzghh|$q`p_}<Q5&5F#(ul$?
zj1beFX7jBbk?Vn?yQ6b+p-tK~6B4e$(Qlf2@>00U@9|WdZ;x9fnV;g<#4k!3Z&uX6
zDSG$7qt#MuAWo8ywLtcp7-}`A5%BN<hgq4aUQYd<F`}f$$ABAxTimO<dS*UyZp(X*
zzf3m3Y##0M+!P38VN3alt7f<OL#;3s+5Jq$LUmna$mhta&{@sy`kfPzxi|bQ7&V+d
zw7%9AcO}fM-nN5NtS&mWL3BOkW#>f|sC_XP!EC3=i%DRP?6Q&b1CPAGuQ2#9z;V5@
zE)1zD0KQLdF>OBKn7y*6eQcWi`?A(tIO!yA7ihwDx<<3Ob2<j8kkEs;V1LX%Jo$G-
zW66+>mgWT3ugKc;2d`31wMA4rSUFyP3*BC@!~nbIaV8L~0SQ~W)Ez*{bh$*nwqqb7
z5hqyeVr#V*E)QbEvZK-mEj25IfpRJMOzA|rBYdiF`A(PHswEJYy~NE*G$ytJ0OS&O
zJ#9lFA*)n$rSfk^8s(I$FY(Xnbk^VQFK7VpRa#$Rg!yn3WIbq(t++N@)@}$eCe{qW
zYdEtU&i0O^v<L2H-v<o#ZIAhJG1ioQ!?L_~t}0n``voS+$AMaY7NSzfcu)PlYexW$
z*V+C72Zd6O@mM^g<Ab$NNA8;K2QQ~A23$H!-qA~|NhILzuZUN05Ae2npAQu0lA!aq
z<%i21{N>p$4)3%JVqwA$)}Roj>Iy%Bzu36fKlBag!!9jJvUrF&H+GaK2h536^e2x)
z)%;U5p}xcu)t9N<J=(^Y!ZZC%!w$GlEvYN4`;f1A&^2Y3E~H^~lj37&adZ;0ZJb7P
z6SxGai@W*_Lh#3A5koylpS7M{6eOX!CU>PPT_W?buRd1LK=!cvDH=7Xg*1YRKAfzx
zG#QrfmQH>vJwp#qO#^+`^(aFoO7MdSIs@7?8^qd3u$_+s@ZR0^LQ!)=soho}D<NpV
z=8QwjOsqHd3FodP#`=o%88xjt&EO9KGP2cnFMPamk_JR-FdRyK$*qughj-(ZcO2yC
zVw!_<5<G<o2bT9-@an<4U&|YRHw3#tMs0*bb(-Nr(Wiydkesrp@Q+a~gLn$NZ|)su
zT`m$a>=#%AiCQs^-qbh<Z2KWD3u5mTWU158-(Ds?4*3sfQ{P8owGm8AlL+Y|;+Vdv
zmHRQRCHtT2dM%tKslYS=yoESMx(?9pgk8mK$M%Qd*=Qv?WQb5_Cou)v^w1flTk;|b
zUEwd&Ji1RJ+VxfWZ1(76T2!hTbP4g6h(OyQ_DPD@avt?v$iVD7u28OZ@f{58Y|~k)
z(4FWOflLbI)z)+NL4O%7)uo4JurTP_Zy<qO8d&rGa^6qQU$#Y1`YzsUO>>fS#v{qy
zUX2|Q<3GYThY_zc?;Tlz1}iqPzNvL{o$*YL@^F4)!RpsQ%WtZW*6uNndbeHWj%4Rk
z*bXLAtLal+CR;ddtv_oK!3GUs^JpEk>SfE%y5Kl6X)q`+oKPmXtY<9Gk02`(C-vBv
zud94~p;E4wRVeRhe^CyuTpgxxXM9<fV-%hPva5ldd81<YqN2$%->Rw8TcEc4%$_gm
zrSs`rdjtg<vImRll&*gwtkuI+7Q886I2{HbUfMxe^Q(jJ{)k#skaIOXhbm<h`I_XO
ze0;?~iau{9a^>*HF$Gc}hV^MEsscP}g2)#~bhsa6i!3QF$G!ROSIAMKenGimv5Tjn
z!oHU>dxf6@F#J84tXj#1Zr0JNMbi8#Sb~+A5Z{c1v|lSRxZ4g{N0P<6-rCn1b?rv9
z;7GV4b<h(jS*;%)Pi!;C+j)-7X1trj5J_E5v)4Feip@4TCaCChzk7X{xW*akI3nSl
ze3FNwMJoS(wq4YNj>h%DP5L`)=x<iPk^mH+w78#dz`LI#kw7Aob~?7t#38&MVy2!<
zAJtSvMe-N1egG1A;fp&7p?F?Ru4P3P5Mw}j{W2(!K4;zf5)g`*FzwyJdi{{i?V_@D
zZ_5Bb-#dp24Mr9xSXcm|cS=neXJ%&`EdiaZj)37AwAa*E7{hm_Vj7(r6k|#Sjw-7`
zszA2qU(v;{oC))FBuCPooMPZ&9?Vjc(%8Uf7!5N!W1gi*aM?1eIBDRN@W&JQJS&sq
zuPcQ7>@?_50zZ-3zni+w*y|02DfI@6>akAS=+fu@>YKixs+F9GLqNv2j1A)fz!gMV
zBm*9`H=)16%;|}nc|!0#P<hasYpjt(?+L#<wCDs`BD`7NV|LdH=HNc?GSO8=;?AWZ
z;N|!s?qzpID1-S--iN)d=L|=9ZDm&FiIt-v_R|=ka8}YP+|!rZjn$r~2_2)yoIZ>#
zkq^(BJqI!ZW<pgODJu5k0Eq^XJ=+C1DSa5asiH_e<2jb?Ia=fG{S>cpd{a1f+NA#x
zYO@7Z?<lh8vLMX^z20JLb^Zq3Li3cCa~wPFkV*D|7Dq-55y%5VF|Vs#^E=E_3kBGg
zD<bM~p9^S0J|O7H^!ZbG#Ull>CW~*|dYM!?T$Qg~g|8`+#I{W9Q0Ae^ko1XeqjT8`
zJd2lr?^;`y2h30g>X`1MhQtt<@_N~OfB)kx<!|EeOQb1|-R}VFz&u*<$))=<ZiG~K
zXMcC?>vUU9b~J*)ctzck$zS6fp$tyH$)kus?;{U{*$d5b0>ixq<y~K0k9wO<kaRIz
zClq0}RgXhTxsgk7U1^QgL+J%VXakVhA)YHMj)r|qK)#@y1O5S7y2ywY-sf6ulkuW}
z8Bzzkx>Edwiw)v03|4en>m?+J#fdAHB30`CX6g?Y%MgAYkjp7|9mH9$FBPp-W=Pqb
zF_g4x^9TyQ|BbK1eK4W-I6$@RAI%&S4SH*Nff!RIKBWdp5YtSUEOHMa5;a-LV%H7~
zLZ0q8Cn<cd&I1_etUG_3*_GKNfZH^LPPmec+ApiIgqHj0E~$2nqKlv;TtmI8&1&%4
z9QYi^Qt+J?z<KJOo9pE(Zba;grX9Ajjh4GO-RO#?h-tI-2^a@1`Bw2ZCM~1^)H7<w
z%8S0L;xmPsHQ|$GW&_+rWZer$8HF?vFn7?m^J~m>Vhi?zKOTx|9AE81>(5oiPUeAL
zH4UmQ5ABq`QS^bvLmcF+1+V(m*)E&KnsYSjDc4|!k*`E7&_39ACp%meJXKC4=sIfB
zHK3Du%G-9nxBUv>*77FQ^jjgGI%w|i1jg~RvMv`2vG2IXhph7x3Jvj6(g#9}HBUm}
ztWh+jp6bNIR)T#u)K@zcDtw^0;i#y>ffC`HC2EA5NO4RrkEEqcf{|-APn;U2!<P>w
zGwwA<J!nV?Ek`8{CmSUH)P(w^?yhLneARq>!!b9gr$H|x>4$d}7|55$i!dBq>`AWR
zKM6CE6^TQTql+|S0eA%$vm2;*C2-e?{6ROD)a>WMyL7<?{as~MZrO^g=o;J<FdT1k
zzRNXY&Q@TG-2Ir|p`{aKzYXQPWcn{<ixyb?kAvmP|4N)8H`z*5AR?8ptS67XvY<de
zas6v-&0*ZPPlbg=8HaG<oi&?W?kGm-V{)P}Q@5E&hMEY<-CidqjyV%}x_JRMMCfRi
zodoFY!1$$m+>DKap?N6%!$3u&l3rm(KD4%uSx6@TVgx8c2NO;mF8d^Rx@Z!u1{OZF
z%7)K(M+MdcUOR;QaV_8R7t<f=mIoZ5-6AwnRy3h=f$!MugDfdBa(H2u{>&6st`*UK
zJM@{+RDCW2+l$?Vr^C;>kC^TaS6oOKy6g~in=n5}=-~fSAQkcwwK~SPR;Gb8?aV4C
z>k;>qFXWs+()S=Y&O{1xedNzuwI9pE*PeI)?&nFeKn^OmzQjV~1v!I4dTxW2A~i9@
zjBT-R%6O|DgbbkpU)ZG{B+A$a{wOL8MthFUcXudVak_PWH>z79&pl0O5{D!>T=IuA
zUQuy1(QBBXk*h+SZ}|n(&$}rtCS1ULnI`#i?)0+}>OMc33y^ONXwe5lZyPzdIL%L`
z=B(WaH<snJ0Q!Uw35r)+-tnQg(ehC5+6P%U(~cWf`GcEPt5IRsCtrB|2QwekXwL0j
zTi|AShN9~E9<_eI{%M4W+Vj&PooB62acHvx7Pov>Q|5_aXuld?Jv=={SC{jRS6i4C
zviqt(v5o@4CL{CXQ(*M;U0F)uWAt1Z04<qk)o|jPUS3Hr-AwihR_2J#I^GD(!i5MV
zpOa)Kk3Ib^(n4f}G^dc};%FE@JJLha;)XjoVfP4JfCimD6;8v|0*tXz-sm!O!%gxk
zl-FPv?susn%dCfw1U>?De`_NSUE1iTXZ2<?M(C#CXtDYLaQ5j*p{92{AV=iK6eaY_
z_#lYNr#sn}SY&-{6xz86)jaW`vo|mr4y2o4tXW^W)ne&aS)&uYQ5U}hI`6qdjIbg%
zV{gSR_-&e9ll2GkdP_a9P0B>XmVrGNAz_#SNXQ=lSOr20G9RwKNIV)L%_M;tW;z_R
zO5F7{R^)<veCi2%zoFI4M#BAcvtp^{J8`YarAu0^v?7S4m*`VsN<zZ~&iEmD1GvUY
z^V}lK&j_3%xcn?i8j&r*Hfc+-fJ5IhuH?=35KFQi3RbqJ+zD<uy!tq*y)fw7-n*R+
z+q9wi@pdX8EEwY^y<0`4r$9;#O!10fFr-%6H=W{6cs-~GC;;fJc2;W|Qd4E<hu6r5
z02tVLUmA~^H@klok`f&gxvP&7*f18uO1{$>SeSw~>pl%hMg5*hJS?UQ!x82JN9bH|
zi7V?h)8)LO+Zk~6fm0kyVe}*DS!$g*p*^xhw-IGRQfK6T0^XHW?z?&q5Ux-(OEc9w
zVKd209CCmG#}?T4KK++$KK|b^;q&4)9F_TG{S;nIh2!m6m{D44F7^8Q>B%04#2hD+
zj~{G2uL3be)WOXXP0l$tLuK|BLql7($#xlhQCyNpi5?)7=sJf2AYDoMO|&#CF@?vY
z!{v94gMx-LlI0-I{pG{#-_iIJ$4hyJZ5It(ai`Q<vSqB2^#Zl;=iBS6{Ste;iopGK
zw~JR0MF&fT_2MA`hu*dyGFE{1D(Ev(K$W}%H$3Pzi1V!d^r-eI-Nv~8k*}^%5$hGl
zF#M1UJ5M&q0cuNKH~%(BjS=8Ai)atppaU?d1l08J`o4>0?;yKgC5_PyK-ORK^v16?
zAHaMh@D~7>6k59zPpz?`OhT_~^6E4oXv)u~>=PCFh@gtN{+k>{TLNk5z@(`ln8LsH
zXz7~8yd|-XG>Xj~3(1y~@7_3Xno|g!p8YbZhWQGc%2_WyTB&3l5g36E2k}s<wXXDp
zSjo>##|o1EoHWduM#ePF&E7b#x~sdLU~bck@;!Y@$3erzD@;(!fm*Rd1LMEucMPX)
zRaxnW!65NixMVTYUI|>d<ujhwUVcwp>0pI1WK{Q#+%P!Z>KLhKYw)iPnz_df8L(IO
zAQ>5+_CiBu>3_wAY?J)zv(9`3PMHl`_|pK<@BjcRLEG?i0z<e;SGM>b<RP&RfLE<c
zLi>j}B&ew$c?fzwf6Z4_Aa$c)=d&h#hG~?LMnNEWm|Sm7xYW^UnO6i3LptNU*-%mI
zRNNZvk{Aiubf7$G=6k(!{KWVirdBCIgdU-J{Du!Zxnzd$lz}iwHt1dwrE|oz-e_el
z5kC!g7;PT266)&uFT^74Y7So@$%B_UocS(gQW<?ysMG$1s~>QvBMxtSmG3^%a3dV)
znPBKNhvoq;x9uWh2RxNvKTO~)xB=UtKUcdpzny%>Emru>Ns`?&e=ie&r~>dFIA%*`
z8%$xY5DVTXyC)$$C~@ig(GK%O(1=~<jSj>vXNje@0m4kzKEKj9T?5PQ$=~!`1NWN5
z7t;~6oH6U&(;^R~M<l$DqDbcDEEU;vv>LmDB*}kgo>w<Y*G}aw`7Cv?Huom2xxx$h
z&+x`q<Z^T;rGllq+@jrDP0ULAudZx>eP{S1x~oPYbc@Xwc`#z!J+UTHUq(_eRFr`P
z0mn#y99vd$;@}c+y<{E`11IAgSg3smJn*MVs$Jz#a;e5E(7`O*&x?ib50*<X|2%U^
zyX}Ov-M_+YZ>KgvM0U(G#xc^zr%JN@1N@q(j$i)elqwG5tc_nJF(J@9R0Vq9HmpJ1
zgg{f4BCN%}NT>!_X^v)jLOG6y_h&wmBJ91C4WhCz^8rdeQ}Ct+8%T+zs7B+5cZ|`0
z|A&Z59;0ZIP4o8&843!8pelz7^`==i&iLO<)*LlSHvGrP{4X*x{h;yzKmlgJdQ}1b
z<AZ{Wia?%u@e0zLiR<U*2SW&m_W%A~C<49d=LZqcN*e&c_Uq@Tu;oXTR}9sGLtnl%
zf#SF@1pMv#5HDbXZitf`P_o`<EFwaht`K(3x8xv-7*TOo9b?EjV&C=kPm(W;Menwg
zxY7RE-<BcB>WeT;r7o<s$l1}r{}Ay0zYjn6-%7sg6eB-Y`xnmt#c=+&VgEMl|KDiw
z-}iw3g9`tH3jd!uQ~pKR|1iPyA4&c%RR2GR=lz$%{^hWLIqaX@;eTQ0_|GMh|JG{f
z|04$Z&n^8QIm{255daKe0ll;GKMK@8%+o)=YSoiKdb?@=k9F&sefj&py7m7~ugSl<
z_5Z86`Oio5zq<9mT({mp%KopZ^%RM<8|-G;*JK;npkzYWd_>m`s=X^XjtI6tq408Y
z<ZRE;(Y>XG)OszZ5UJ?xVo#b@T(G0hV?6BDuSnHUXLGB|l!=z-a+R9h>}orLks)wp
zpefK;AYfGSM{?x)k$^`o&wOAwP~?y)eXE9Ik)PTsR72x5v5PHt(vjAg=T7b!XrcZs
zU>h!L7$4Hop@&5EJnt*fZq~lF@<qUbf{qZR-rnGc2eq|&A<G8$XO4-Fuk5lxO59|P
zd3+h<ltQ(TW0mb&v9jG`(6%+Htpk>yLtaaRkaj{tc@~e&Q3rnl-nxr<WV7%kCTof}
zsEpNej=!Vj;73ddBP>$ik*v%75!jnAjdxpncHFfS^D1iP5_py0mbOm_JZe|pP+Xcu
zTpj#O+q5F|?3a%WYfqYDNj7oyoTB-s{F>2|nyV%O7%#P@p|KP@Np}IEUvQa}txbBU
z7fhQxCrdgLLSX8_hKT*qgIuPQl~`s#y8sf`z>%pGxJ^(Om*kFvnz?iJj8@>^C28?I
z;bXGH%9f*5>6M=CgLg9yb=3Bj+3ifz+7=dJD91?Ag-M|#rTs2zg8Uh#m;l!$(1>o=
znf$u3_owki1s4KgK=)16YIwLa@z<}eOS+;2V#A}ko|Hn#x8NIRblcOC7^vvpO0{|9
zZ>$SL0>SMFd%Z7v<=j*B9m8@EPr`|(t#pqAMTAGe2xYqw!c>o&IJrV~nJIexK@Mle
zU&ZX9G1nL1x8RA+LuM*B!xJ*SGy2GFmFwYC(W-!vkIy;5Sl?r|z+n9zuX?TFjW7L8
zN*fw}Uq#CCxRifcn2VErdiIjbSuD3CD84t7VbsEH`L+J2IsH{*V(A_ek%{$aWl-ks
zK0@z~X780Fyaclb0+`W_tu8hpf@3z1^G76=woUmaUTk!J?Du;EU7qbCv!)?6cC(%p
ztepX&cz4d%;e8Y-Su_ki5FwU!NjHF{Mq6&<ecr9Fc?B5fj0gv+e`QAeV(H8Xdpx#(
ztqYi!w5D@V$aEe*-r+fmV?xO@q&{;4O@zfTlevUsCo?!N;Z|-nuR5$*@wxmZlMcC(
zk+r1}lp<_qGa9q;`Um^_5;*}B{!laqQ@3t_ExF!hOcw<j08+?;XtU0JKld4%V9vNb
zoC=m0!(v#Fi#>5DX(Pe4s%xnV&t@0FLl&b|Z!a9LGR@)w@*N|lp$Y(ys!}238?q+p
zT^#LbciPrryo7N<BhiBtCi|ll%%m3H*MW*J9~1f9IY2Ah_Pyc|^IZAU6TpS&ng7Ds
zQy`usktd`|s#h(Z)A#7o!cwfv8uC>73lPqH+^j3^UZK;?U-7IQS5TU7Y6_T$T`Ev<
zea?acizbD?^7;xHOBGmRI>YEW{!KRHnR6rGG2*%t&sFgx591Sjomk+FH9KvRk;;&+
zMARp{ow%}IRolA8{|RMGJTwHFT5Brg3D@zgBKeMe$OfU1U9Q(Wd`}6tsw}g@$+Yb~
z)jJz7trz8&!Ahf&SKD55V=PsFu8QG&i#W`JacCgYnhFpqw}jZQh6Vd5pvny^ku#u$
za5=7RXlpl`>@m~!AxPjj#|(1sGZ#&SHxhO7ujRrbJL^=08#yp?xMQEo1tBs$A4V$T
z5O$66$r5)D*wZ556QkR8<<V)3wPI}kjIWmsD+0LwzEmxL(oLMlIllgB)!M{0&EdBA
zlI>?K?)xRYDAml_yX_BQ4MWoPV<hDV7a)iG1;KXn-lc)kZNH93(s3uCuyLeiWd&X*
zIDF-7DP6t&0u}q2c~jQAIT#Q4b^z(h8kBoCoq)SR6(_$7T2<$4{{iz=DP3lG{tYi{
z&j1%sHK;c1)+MPFUIQQ-*C`Wo-7lQIl{MTHmCuf;Tz!BfK}(TNBc(;x$iV?KZb_ZA
z{<D%QO(?D4k5flEplxRN`Fvy)ruiqQ>r*wLU!Rapl*!`prUXb^5}n;e6#;Urr?SUK
zP2~=IRhT|}=IVUekm-EBHdVa~RlffF87vKCdKg+7w(TmX;zt(0o<o;DPz_i>?T#>)
zP4H^!db>Bj6=X|lze;{f%XEjxJ+b$XTm(0E@4-m<hn{{B^XZx#p`W<h*~z1vfpYcd
z46QvnxG%uVzwox|)L5V%ftx54UON4pO*&<0SAlGGCO#a9tN*NUB~JkZ<RkGCrBC>-
zY#e&mW~}f!q)+Cdt?`RGGoOJ9L<FlQ5%>+4=VEogQO>w~HW&*?Z{yUB-iQ?5=Alr2
z@o^fIO$nKlxI82&B~W4QF1Uot-2qD%>OLyg1vA!WZcshf>PoPE$Z*@>lg8zuZ61JI
zjId~BdFd#B7m(qtM#VE?pxHWMP**apQWpXo)G$vSU$E&qnN1Vto<cE(5pq8n05}t0
zQElzLz=3_;+sg=c(fXI=O?DjyJQQ7@d5eWsU=Uh7yf3i{#>r5QcJSOUth?1Bt2!f&
zuQ8AN04s#92CMaf!mNERDq%_&8L8E6finVwt2d=qQ<U&Z%s+8I9A*Z%{W^EGfkRKW
z{zd7^Z222|=Mb`%RIiEuIbN)VX6UO9tfZ}u=4Qm7gvQ&p;>2>L_b-~fj8s(B&M7%l
zct_tRsQNo7cn-6D&y0y}vLplI9Fa@SQ3V#HC`Y49ZeLDMA^l;PyQ>9%;n{k($p4Ze
z$$A>Xi15#vqX-vcGazn()FQx$+mwZ$N7^_HdSVq;<jZM?))u94lsN9JDmy(~UH8?}
zbKgiFbUBrmys*ss2dW{J(V1UM52xrczwSl{$>fG&wg(8geO{p_j$iRGZxV%x^K|_Q
z8FASwSmfH1?=mblpSNpeAPS+)-2X+};eYNL_&-=r{arflYu7j8-!1gNd<*^8dHmOT
z{QniG{~HGU8wUIn=AD`R?;FGZ51y3&rYHZVC;$7WCw@?he_zU)vJ_?dkKT5~GiI@H
zWCH?7Z+kGr|Dm~!)B=j|uebfLxBbss4hr!$vR?h)ck%jn!2B1p{J#zRw_*Q#kHvox
z_W!g9ixD*aU(e^L;_u0wUod<BsyWiWR%@5y;0H<n2Y=?jO9!eiv8{WmE|e$$LkA#$
zIJ*Lx(fWC^8L7EEwxl82NHLhs6@big%pkSv6l^j$8Kl6aez$@Ey<ZRPemi+L+aD#m
zto+Kz2=eYc3PCM*%t3BjYF96L3CCw~wzJ#01v=sqR;3gy1a&MZi*WYtswB4F)kUHF
zy($M)&Z|VHi7yUJ<?&D|PiqQ{Vc+?)%U*29L-uvW$Hy!QW`Y~whc&e9dCtq&OZVDp
zkMyV9^tT{eSd@+lGxzxy_pfA4oMCpPni~e*FGxV`pOF$#TGUs*j|i5`b5=t}zwYHU
zfA}lU3D6>K{S<QcPaS*jps)^JBi|7vYZ&X<TGN1v$~&?KHHP4;tbi$Cb_9tq458Xy
z@HI872|z)+&cpQJ`4bpnhzJA#MKI&_<1?ue$Z^C`uqg}V4Iii2-ABF`(6UwHdJCS;
zTBdKgG=!fkAyfucLtOzwBStj!UYCP9Y@21+20Yl;W*MD_#u(uuGXd-r@a`O>a+pNT
z@KS;EWAwkigqhu#k?smj;)P{M)ME>glEF-1YeU>S@h_p9WcPS@y5F{wgRusr*Fn-&
zk%<zpNF#b1S_*KF3C}y_q;vY7rDJK@fiDGR;j_Jrqz)HB6En`9bx)mzw?yL6cV;q<
zbYt!l!iqUJk3{C`jc({inZ!`LEjfEl#K;P@2dJ!l_;_u1kD+HzmR{8+{A#S#-CB8-
z&WB%UatQ4xix9ZFy5A(i8Z?1B-K{52M+5z9zw<YKmFj`p4dsGE`5tOi2f3#?Yu@$h
zVnnt22bGGHXRG-K(6&k)ja=|U3R=j9Q6Al&%7KsjSPU~wx_lGQ=X%wW&`aMdU()F+
zR*E2*^V6EqEekyG$b$y-=>Mf2ILF6G<mh-lmz<nN6Y0*W^pp9^c(`?Ok5igE8Mb_s
zdwjgA5dHwMpzID&7|zO0%fpOyQz2$+pz^zL*zARXM}0%Xbtf61esws~&;nUn-ZwxK
z8hJnMk7O4);FSUc(BJbgeVH&!sqN28n9Y#{b;jDH{gsO2$8sZ}^6SwGVIyjcMF#@3
zoV<g*-k1Ne7MSf64sEH=NrE`Mlzx&!;v<WDa=5xcQ|yo9%1z<P*J=8;U>>U6AU2Yj
zrutnF>Q;u4OiL%K16WCBVZ-luwRMKj3!*kq7sVPaI3#=NVz{S=LVWc$4FFn^T4qN|
zw!#UGz4Dj(S}g*crF%!%L0`H4G;2w>PL;_}^V?uMW2{D_Hu~`D4?8TQ@!;EHL)vc(
z6J$0e!>dEIdpNpTkm3ugf}YA>#vh^h1sGNfm7P++(=pjo$!m+(VcQc%#U@yb<t+e)
zrUx_8ZD)|5j3_dcwK7k_r1j!5kPTMWRS06O*+s2*3GH=9P5=pN0sYD}!L3)ofU>|*
zkZ3n$#2ffFY`s<Im(4KDMvf)x<GFU59s)<wyuGIe_L>ZIDq;yNh8nLmDn?Z`pllY)
zqkP6+pt(6kw@)I{!bm3lYLB3bA8l!STL<go36Y%W98a4ElHNdY$0~=l{%c6L2B-<k
z(nc_4RAr4=d%@ayf-@yE^o}f|t`kzr#krGLPxGgWfz}bAN)kn#77PNTT?b0v5!{TP
zZ<Tc@4TO9aif)_bA+QhFp>6f}Oboa~exFo*ND%<0Lx+``#gsqhi-CfM0V7KdRG5$T
zxba;znL=)$LjaZ~RFp8tEQ5R%RA<XZjlX!x)y_VpJJXwCFQvo^u==>I#G3QfWcF}q
zL1*+fa8M(PFTSbgmZFD4gq49>J|{gB-z=eYie5+s>X()b^<lEkeyYU;Tpo$det}zy
zi~Xh@UXw%PJnj&*1pF>}{nLR{w)b<AefI%kYE|Nu^*V=|=bUxI>WPA^Beo#ayvjP1
z+A~@E#IyXJJbiQ)84UQa85`yE&N_JNxekT*<C;aBWWA#HD$!b{{DedPyRBnHv3~Qs
zZDv09iCLC(jG@SFw>{G-i>&R2_tvHzs`R!M#O*>ahr-c1F#drKHzo#~km!{4j5l~P
zVve5aV6Wdg``Zv*Fh*cz3#{OtUV4ZO_X4W818KlN!2;^;z}^Qd^_pOlw5!`I85Eh}
z-50FoBXhjNGc0c84ASkAaz)%RNK0^nfs~$}n6c7!dxqdo<TVvtf~eCDi_g%WxK>b=
zsUZZ-J)vgR5LO<;&S$zsePzU}gJ#9|yVhQLlq8tDf&*VjhsuXiI$KrFN}edOkOGXU
zX-^>*)RS;x6s?)94sxFOF=RYX__~8lOz+7~(>ac;he$<<+vlrZ`}93c0UI<nTYnOS
zY0pqV_w3Erc30BFVBru=g*`#UF8DqArZx=<v5f^Gv!I-)%en!LYGi~}r^Dx;ITzyB
zlP^jBpJ+^M4Ba;=braI`S_z+*O$o9`9r^)WE-KBp2Bs;NNx!EH;X5FW^B+$9oj||_
z18E5sh+p(K65|zu$}Y8PK;N_5iSdxyQWIuW(aa329L_+U6o&#7vPa>R-CG9=PC7a8
z(eJ`pMEUT@w-lSX^FUR*uJK=&U7@c@+2=!QUHQ-Py;gxH%eEkb{KLVk_udl@vYS)G
z%fA71nS&^BK0M#ykQKh)DwJd>^CVt2spwfzy!dqb{=Dti7&PY;Q@?WCSA{oV#<ab)
zx~u$^6)OmD0=Mz)JZ(Ae%JEQuIgxQ&$hL-C$yE62qR?3?Y4H)avsG12g@SJP#9d=4
zt!Q7Hz33r00xtwkL5gs0a)IZ$aW4{VhgwpyKT~Bdy0iqDa38p|$oq+@I(Jlqkc>FT
z^2sd%Ue$m%+X9Cvn9*gWiCm$S9F+$tXnj()-L%t-F(=oGmKlo+1;V5G@L_^Sj#?a-
zYBnPLZ1@_r?gqBGg@j^G43&f6$`#5kiSP88wO--O=B+V|veM~mBtQw8>QpMC&9N-?
z!UnSk#KO7;Pe%Y|(eXtV)ZZ%kXF9t1zBk3-u{(_-VYLnCb)QWImfKE<odXoW-H=vn
zQZAvX$w?h7@lf3As$8puz<)-AZvil3ik<1)(?8#b`YHUs06Rd$zhSY6yr|rMp@R%v
zuPgk&i)CIW4~YhEyv#Ch8Z=jRV%&cVgE&Jh1fPZ5$z3#BTcVDexFKS0a8eE<9mc7I
zmW4K4<$m9BY62Ys^~UnyRya(b5~ka!C1l0H<CHw{&6JB;|AV7~rf&3E-gilf>EIv{
zAEfaEC=C<zQr|?7(;cEO+eE(5ebKFWlV4(Bfb-YJ8qAK>7u{wea4A7c@kBfWxr<dd
z6)okj$=B+6W`U)lFc<{<X{0~}@84D!=C*IEjzWUdP$g<v)O(&#zp{BRq}W{vn7%gm
zCYVUj(!jU?Bra!5K;go2%52AGRyWxyAQk@hl1zJ~T7BM3&$Uf88{C(38cJlfG(bL2
z<DL4`AfbGYOf3}0fCyjC=wOPtO6EfT2|}qHv~7d--#a%Srl!Q)bS5SwjD@~osa}`J
z?Z>o}ktE()uuvgrc!%L`F!-8A!Qq9#tFMY_U^4v3*<#zKSpqf$^xJmQ6ps6PjHIl)
zmDjESQm^p(f_+>Ev<&UVgfJ3HYj#S4CMV4D0i)TIGNnk3ozGmH{GRJ;4l|}lMDGR*
ziD0Wj<%uZweJUu*(b1j1_%v~%R2roe+b=y9sAUh9#=HJUae@+fj&xNcl2YT@^r3Gn
zLS|ZHM|rUFdbrOrS~%{dSCwUzsTQx^-0Msf*EV>Dvwo*&O>B+XK*vK77zNLms{3-w
zk5i{qaW~RLgG{6rK*pSs+Xes-K{VB6=B|avw}SFR144SPp!|$jlR@6X!|tuO-@T;E
z`%#N+lff|bC#6qET5jVLYn))psvc484m;dpW1^@8PJ<dZi31$IgEvg!b?rjiqgF)M
zmXPi7!Yw5H#>KpObizLNSnemnjY_3_rRgMSUtx~u&jn?L)+V^&ce^EB>m;?9cXA&U
zv1!cm+}xVTMmP+uhhnCgzKFT>c{Ls>eQzA_`y({Tfxe&r;BIk`G=8p4=m0CpLn2AV
zi96{3gSzkeEDU0l4SPyL0=QN##e*%uKiSy`cX^=Y=OXxl*LVXS#-Ot$nmNtjvA$O_
z>`?3THvso`Sey+X!9HvZu6jaY$KF>`^e(G$;rspFv8Q)GTL2{8d3J$fa#{8Qp#YgR
zm1Q64azip8znh#uSFHK+6T-j#APJo38p}7-5ZTCmMtFIUFC&rg1Ng<Mk5X=gC|uGv
zCJ_z{_<h^jt)V1xXqU=&<ro<jBG@>7!7d*O8Eb0nl_h|tkCfNhupq`F;Aj{f>pkLd
z7X6#utuMwUA58+(eI{g1+u}q|WE?X+YdWVmR_A2CrXrB(!X$svx$HwGG*6ndhb}u>
zcWrVEI5<v;+=kAOLAU-r`1dwBK36YBqDEbS2C`<mF(DWy;AY+DtPV4Un>RxdG!XET
zX|*jJ@jut6;cu-~sw2|I)Mo*dD+r2M1`SO-%odt&0nVdQJ?zg-xW>}%m_~QzBfGRm
zFq!qp9Y4}H1IADNIhacbUY?t=|A#3G!i^fK^%#nK%t!oM$gQGAecTrmU*e12Im-UU
zB9b2$5C^}{@6=n&4YOF$-pmjuuZ_%*p^L>hUR4H+Xf?1~5V4V3s#&`lKgP;qOg;9>
zkQ(iic~R&vE+%pN(gsrARmz<Q#bq?Ro{-T1+5n)0C^J=c)5I*n;$K8p*kcpTMt`bM
z2}HC#y*iWH{-hYPK%~Wk$gaH1=BiwyE(Gvzhc$qy2tMC)2j1y|4o$P-ME^92xGNwe
z!p<Aw9e+x5<}xf9z>CvFQC$0a1Tc&NdM}7MoA`k!51a)TDfGbk>ClN)28xJDc}>SY
zW~;H0^^nGMRIUuGUqDx(B2F?p(_&ydp-bwjp$Uu;DS<Yc?Z%U#+_0o{fUQ%<AVc7N
zm66U@BJD5)Hh@hiCXuN$$V(~a6KbH{M;z9AC~-W_F4JE&*$oaN1TG1wl%N~8iP4gg
zNa--s<mgH)KnCdz`_(DzmQ>WYHo&?UBHkjBd3e>dS}>-{7XU=8I}iZJ0&e;6P)aS7
zDria#TP9bpRdlG~r*tigSDA>1vm1(~r<6Vxs0DC!IOXL9|7(Ww*!-Q>Rm4g#X+N&h
z4}J!*SiOLJu^XMnf47eerRk3uIUWIJ+MRVHSK_G5UgcDDr{VkQJ(OthduUt{1{PLC
zg#M2pe%IjR<h$NuY~gWsM-BeH9v4l#l6egqc}=OCZN@WWhFnTnh9s)2p!_P-qFgLD
zg|`|zQ+v?t2tH<jNv^($P=W}OemBd?Fuk1YrMT#!Wx7ZYo0^wB$F2W7dSTT|iypTW
zI}JQ#K!FB;-0-&}0@?Qe$f=7D^^eqs=&#k{AT5RJfD_$RnfxwZtZDU+(kkL%b3d!P
z*X`t%y?&ql9fZr?y9Mgms1m`<k~m3|;}}7xeBm-Z+I2|d$WSzDAE9odo{?0ZIdDnD
zj8Wq3N+C~PPVG2FgzRoe685`CT0ecwS6f=6AvE|~bDB_T<{JiX`(;mlTy|i|0vT$t
zevt(JZ*l#2u_l=8wLYK5F}h*|TcQp|gSc@*IWbN^z!j^e9~at8C<&DjP)<Ooz@Z=O
zm1$=>Kvugx2VNr9%@w`!pAgLQ=eA}lraGM3VPaDE<(PSLTcit@7sy>X%WXOQq=5_?
zqlcKzxu<3g6g$8KZdS*AKzO{-BYMVf-6Q!O{B>v8ILMewyk2o{EqoE-Z2{vAF$!Ib
zpSH`v4-$m2z*J1MT+$|~%Q$$`Aiph)Ol<&E$nB>&Y5FyWp4<m(3lEw-=$;O!@8HKY
z1TG^akm_^x?5yTIa!$L_ysavY;3RqmcbdRa^Xt$$5M>U&7#)7y=En6i70Ht9WnL~g
zRz%UL?Ez&D4w=(lPd1Aavfik8y@Nxah@+e6VR)bjs%Phi<?u3sRnYjh_CsRFx?g?3
zO2MsorWuaybZjKS!b^9rBB&F~_#t@|@3ms&3<)H&#Cu5f%in>F8-<qz7iWZ<H-)z-
zbBDrlNR@S6DW7lm-b_Q7aa{re(1o^GFM0J3RH^EAIr7eGw02ytRI7P8YCP&+A0Y-(
zsQsz-P>d}3vZ-WYODRrM_ey*~004h<-qU_rs!A|>EX6IclQ~kH{`)&lVjBmy9SGh?
zCoK$zjvclET|As@GCQYX09p+R2ad*}G^~J3g;DMXqn<THNzWEC$R$-It)^e~QE`U#
zXFn*26cA2`m9Sop1~gm(J-w8WdQ<)s{ar$CeE~s150$dwXkB^<AAb+b68#n*<B1)t
zH2DN{Z5;dwnFHO{V8z&^H&ePLxvPwXp&decZ?bQZ_40pf9V&1hzghU?ua)H3pYOss
z*<c=bd1J`v-yzh_JSzb?SivcY`Bz+d*c@5_siA%Ty4<xXuN65{3hvSM0+VkeEn?c8
z(ZP){Jl-5oE&ZX0qZf+0w8z%gD$qas&f{C5?ZC&8OBwt9qXRld%=QK*;m0;I>E$($
zZ;2@c;8wiq9uvyNXu+_?=rLiisUtM?%ylh5Qvk^LgN;eP{`?B2*^I0wr<0nP87#um
z<!wwRFaHa$hle`dwlF)mxi)uuKzdvv>Lba^?2*sUGqc29@j3<8-t?oG)O_cH*06~v
z?0({t$wF^_;W=~%s+Z;LiakLAB$1w^R{5zx*$1w*LUwVHVVjXU9z9%U*#un=21B~+
zuV1UIt@;Oxa{wjR5yJt0fVccUmdw6MSaGZ=%k(1(pb$?e9T|{VFH#d-Q;j>#G9*&f
zVc|??jv*v*O;p!XD=UyQ%aMSX#`5jEWwez@Vnl%ENxmRGIkr(n`pwu6<#CNpim0)=
zAV_K*3n+RsOKSmB$dTm3j2E=}lyJRJ&lvA9EVX)8S~qv>V~erxRTEMYLiDt5m83DS
zSf}*&{~?|_Q{zd|XZ8ab*s#R@NA+WTZC7dyh5?wMkIRSBRn3TtF(I4{?9Xh5*n|s1
zBkbHk*%P<EuMar^=KP&cDNF;qBNwbittX8xqeNtvV@`ppou$UKaUvM6?~9+;fKGhZ
z+csrK<M%y*_|cdb1?z=&JDAm2QE-@>K2!<=2)MSQBG;`g!_9jSFAhx_EiMoKxU`ii
zT*#Ad$6rjZ9Gx7JOwp^~nU3eXOK2}ZRd5$aSo?GMEW4dSw@j05vw--;l0vYA?yi1G
zq7S|A8l2jQOQC!7@Xy9PtmQOlI}@E<@2z&1VlqM%<@G=aq)?G++1d>)@E*(^Lu-cN
zsR`V?|J@<>#|P<UY=1KsHS?2&RO-bJ=QHz$Xqu`aZ7GJ&%H=#Dr$Pl{VFr{K{t|bq
zK=zy@*<n2iqO9B)ans@|Up^z?I<~7p`;6+Nn`VWJBL+Wee{HTNR&^AP4OJo#E^6j^
zPKgl9chI#GxO1UPv;b-=1@Ykp6V%W;7E<p>U(-Z#@231}$C@O}c5lS;)eJ5`VHs{<
z+UUh7zY;dASI)nmpUQ!FZo*{CAjR=~p%**)Pjw*W$kV3uuN7~(X|0x%$NrK#fvev&
zY5I1>c(2`12t9?QoZqPsiow%h+~Kv>T1A{lQ>P_B&+i!HJm%?(6F-g`3pA@9rIuaE
zI=)}7OrGMRY#36}dQ+?@NUJMaf_1`T-Z?vsQeU8yGiRnHiF*C9HBPQoE<nJYAln@s
zWiveF%Eh~L^CE0Y(zpm?<U(0_a_@?rr>-Li!G%#~In=N3eWp~R`0|4&nC19e&@j!X
z4c4@RDaNZ=O>&WxV@yIoT+wH#(aiVnu>-hv-E~=Tz}?IJ^-a16YVEJP?~#jXcL`VH
zyNLD5kK21~?$;XN10*ac5N@5hY!{}inEz!VWctnh4Rw(~-wd(j;Ct*KY)cP96af&h
z!cVq6`PlmIJ>8yEM^9hnT<h}m*EiUjXG09!t(`y<<TX2KD#1>tRT?*e8^^Uq5b<tB
zq<W0h1Y(k($G`G3-)S!@{#E{QJIXO`oo`#^fjrzpW^ACL$lAOX6Al5_XLsReHga{r
z#kizT05xyM#IVc&@bsh_j$*l753y&hT_MK<wW$J39gvu?q!;(_u+AWzCX+~4ymL77
z;^Fhb_H_0W5wQqa!bctLscGi-x@qo)vVNsmZ)FGTX$1f?H)2^Uh;e1dkncPXmgoYb
zdYE_KkYr<_nS|Zm)&)sKn7&W2$}430_n+?hB5N`Ac^o76F))b=l2UvLiky^Q;Z8Sa
zK6g+c7##t&zJISV!F6CbzXq1SJp{c(lMc8!@b$N^eUodHS;_GVhL(wP5&$^rQo?Xw
zkC=`vhMM_J?|owz;-pu)e$d>m3JMblM`OY(A5YFiin|5XLy2>o{l=4uxU|qoZ8(cb
z9~HxjIa;(x#MbAH^H)fF^WJ^zw)Lh^C+sMqIkS5``^Y(#eE1Xa=Edm!R&B_sHN05$
z9d};et`Zqa8pPv%a+*YC^PQ~=S^|)2hI{Ivpoh`r596dKBE0xBnSfPy&)cpj#xuBy
zOJq5>WB=83oR0}kY4YpSHAmQq;&CH_s3qomHn$S$iof=#3_ax6oPR)LoiLcF_}T#F
zHWE`1r<+cu!`?Lv=e~X!Vyz04`T+L*#avE=u#I*%ppzzM^|<kBXUW=4X-htZVvFMQ
zA6&9jsO;sL5VLuG&Pz2oX0g^mj#oLNkf@j=;h?SDSBn3xYmZJBqtjA3q)h76ogyAa
zKg*xrdIJY8$BA=M$z?Vfnh1I3?w(^EQ`N%l(1Mu@pY3UB{-;^&M$-!^yuWl(u#})o
z)jH&H{X%YM2F!+bO3OlRFV!}>4T=}blyfQ5BTN6ev5eWR@lJY&Bmh1jD8b(!QF0hY
zEcOnqy$gn@T+9*2<LO?n1_ys1EQfdM5Q<v@>p}p%<&c_026Ny|RsckaGfFkqrL;?L
ztio6eUlZ+{;s1fUIH?xy4LMPg$Ohl5D%s<?SDt_onI1GwGWEWD_>(vCL`CLi)4;gl
zl?s8OQR%t%!P{YR%9hIXXdJUIc|93iE)KIi`y4NGX;W$8s8CWIv2iCF*EX%dCUf>;
zuldhiHR|LRM#{JL>x6~1QiDVtrc+F6<Hr3u@hG7ymv<^y1%RBgM03X;V@n6Hh*j!T
zFwtO?wF0-){Ao4vuo!Zo(Y_B@$A626GW-TC0t))?%IaRb;YV<uum-tfsVKR15#8&j
z6EI!m#080s2C4RPCNxo$0;YB>^~hu1h&TKFA|sb_=6rE@+X8z7`M~n}i=7t{_2*4i
zf{9O`??SX;QSH8ZD_hp0-GfX&4S?_yMTV%l(Q+^0XTTKyD2XxC;Vx1MKw~mzu+5eR
zP*c=PBh`9)l@)0FG3FA_P{z>A|2RZBi4w1RJ%8dRl<8VWiI^d^FIqnH#Syz#7Oq${
zNQwn{NV+=2QIm^Wr|<=;khlQq(4*ba|6p`i1|L7cf>t6CJb2zsPi=!V7i{mz!pq4B
z^w4|Mwtui|_eKfhd|w=>yhaa%=>Iz0MR8JXvj90vfkM2{htn0TGjn(8Xj*645$(ZR
zAR8z13j^_Gb4r5adV0E_t?CpU*aw@EL!24K7}h=OG<XbfU%||vs6>5_5Cq9m)Xmk?
zn`@8Y{k4VDkuo9k`Em?tY<M<U>r`-s2yCJN_LK9mq)>Dp;YV!n<}j-Jzy$ldH(bDd
z3(`t%sL(<mo|XtaGK_tD4S=3l%2HPepnkyV?I36Dwj6n#4TTfE7L;CTnG6~s*0loM
zB4Uh@$1UX*1C4s*%AR7tGt8$7b}5mta20ZKOlhi30C%w5_rUQKRsmopbL08hJFd6s
zyZo7Ycm?|OMDDHpF}GYz>+y3Us38`mce_!1@G`-OCs>dwz0gBJ($gx96Kz*nx-r53
z>rP|rAC!7%V8iOVD`8)UiJdw4dP*@*Evd=JGRYoYykvKNWF}NU%4*{%0iJtUKVF+C
z-eR@D#qR|=X$4f+<k%J>71Y3ivzvSWOM0rKoEEvMQiYtZg?l~lK|M-udW%BtrC>Qu
z<Qa42=(`Sg38KNgJtWO8!#c$g*tse%w(6V%2id}g(qF|Bfo<4#aqfPrltqRwA^rYF
zoLxQ3cIgU(Jb1!qWCGXPTx8?=v-%{1HW%C3+racQ6S~j`ivO(o6Iqz(#*&gcJc>t`
z<`1Bq3|dgtKHvUx1UAUrj+xcIff>lSjPLW2sGt81t`MMjV!~Gi8`k6PGKAS}KFXVY
zXWW;vJm`QpS|hyO5sAc4zhDwh2SZ<CzI#zraxZQjj^;5z-GKc<&ZWu@G$-1sr6ZI|
z6r_P=i+jQoLCr(|ZWa}1-$w%hu#D?Sb<}W{idKKL6j~{0PFmCm1lMQ>LX6A3*<B;}
zn<9h^FC3GI7A9>WDm*uJAKbJ7f&JqgEzno|eE#6ULI3<|xvHHAog3|3Z^;YbBg9ya
zcKw&uT%BA66aQa%)9Kv|N~%W&Fn|n?b7zBii}9cf{G7|aB+4^G3(0<2QU4Jq&?@TB
zDXVX>X|ghW!VVdZsWxbRm$P?WaZx1#5{nl39sGZ1b|MN|d$=P-RuM%*c9(9cT>vY%
zw!c}Av>0U>@IbV}6FpS>cG!?O6By}1{jboBkjP?+BFScr=TLaIHpCCoPpqY*Q9h=z
z3Pn&HH%khQ=FRS&{YSCM+-fb%<d%3$xa$9K@f4+}%@7kdX>rR2l%8s~FUQ6h8@<@%
zB523wTf96jfiVeoh-@sxXS2hV5T*uI#{dufxme~+no&6fBJA&c?p*m%F9C&055e(O
zbMmNhaWjNc6@h;XA1(^ga?C>*c>e#gZoxe+`5es)mK?hpD>Yai^pNX9S_CO{*lP21
zbEjE4)|tlYX<?pKOL_BD-QKi+(nynh2KWmKQCh#PCQPIQx6{_wG%oJqI*P(FRZad5
z$ogc}8R1xHh=hVlQPBoQeN!(BQvgNDtYX-Se&D+-PgT}l?VCzZkLSd4saWcFK)E|*
z68C;~$M>|j{#Pj;8}y6U-C?ag9fkVE&Sg1w2Dvnc+rZ9@C8WUYdB#)7$rHT9%Q71$
zJvG-HM@)xoM`i}~9ie>;CDj8@&|~L(!J(8rC9bf(<E>vuzpw|&XelxR&poJ)btP2P
z6m*0AR9%oq&Zm)3j`ImtYLaElaqF2_aZ&S>yoxyo26BSWmVj3b&P(;c7clKaJ4O$Q
zp2ooYj%w>q32KnF4e?Q&WY~Ns!Q+Gn_uNWRD3;Nd#Ja4)oN^^QMmyN1Ctbhpn~$tB
z&17pGO7~L=gHR<U4c81Y3`BtJAB@r--8CE-tQzci3SWzQSq*5tL6}1+RUokP+w1Em
zWhM8V%X}GrA=c80OW&>IxSQ`9ZS+|q&?=lwr4ay_*K{QA|4vTZ02{$#@4G*+koth^
zlZSk8`ToGE&PFZg=#_zrs$g3W{?Zwq6aR=$*xsVtS*!RaXA>dUxKBHXZ(+`6{#~+@
z<!RYf&ZLTOpn@PL)~95gHdfzsf?G^vJzJOLKPsLsd4=?$Xi_}3Vg7~p81C5zaV70B
z);%v^nKZ?4CG>$zptx&O?k5sck_GhX$BW$~*Fo<wI_8DP0VXgJ5BMFt#|0Ak3zQr$
z71b`+zOv?WZq<esV|i3$e}_AZf3CN@IA~GgZ50g-WQgQB@Gd5hMow_d6?G5-nuHgA
zEd25An&n}~No=`MqM8OVGgPw9#M;;E$wAiT*#U7%GYswGp3z6fv3y;;Kt0YK`ockz
zi1^vRvN|oYY+t|Dmw{In$;Y*vLRZD?3t-_MJCI+h;JF+z*m9sxvda(?1Q+s;m@k7J
zMR&9aPwl-7!*;In*SAMl5F%u7v8uN$S!3mpJo2uo_P1feI12OiAUAR@u-<s>)G_a&
z3<vkBZi5RXrS_l}*82ieU5;6yo_yG99lid*BwVhxzJcW88uEp0avw5Nol6eO^>L;Q
z7)C}wWRgMdQ;|@z340oybqa*C9K=fefWT?DptuBF<6Kk+NKkZ&aSw-H#X){2s`BF)
z_T~U)_0_BFqU3vt^9n}WhjFi(SniUIH#iFa<~M8(b1132RfQ1bXI}KG1cHqg9f|Ld
zw#iM~X+8_KRn77I_%4DL{L>3dFB7j{xO0F?wvz7I`<PKF{*?{<^`OzgT|58Z{ja8b
zrPo9N{dgIHM<Z!#Dg@HuyhN4$io4I1t%YA(TZApUs|<<U6m<~ebN=JnYFQCtIpa`;
zbr$RdbZi_o{wM&aKCEF#YLEBNH;^l_lQy>BP=_F`Us!h{pjI+8nDa|c=Yf_X5rmNR
zG8ZxztJWw7v9aH#de_GHFrn>n;zfK!H;JEj2+apad0L%Bt8<+~Q8V^1Ee`L(uCgV1
zpzjeg{QOmL9gK7zvZri!*_bHg*4S*3aJfkz>zrCQoxdp0<ato=HE_j|B}X3s8Pm$Y
zcy*}gK-*t<$P=D3NQt&n|4;`IrOhs3RzmD_Pou`e32@fV@tXmvS-Vr{nmxB?NPyD8
z2xs-u`87|C-UdwE`2or>fO8CDNK$<R6o7Uy%e;a*6S};sqC^LQDnB+)gF&sqb5_Yp
z$C9PF_f&6q!je|vE{B;*dN~@F7<;q@5x(A6izK^_y?&bASWy<`gbrZXq}B1(PV8&8
z&uXDj)ux8^6Ue}KP%e?F=;$pq)%c0C44|KbaKkVhUQb^2Tc^MQs>;*)4_~8Y8Q^R{
zQ(xfT!MMxF(@*39$7ou!j+^~*NG6RNEM4}y?3dj}5BORgmQ~T`H05*TfgnR9Dy;zF
zKr3EAxN)spOeZi+Pi@R049aaFfe0}K7DK=iG>W{WbIChNvvA_y+|*vktyX5q$^F11
zV7QmaPAPDpCe2*flacUafy@?n2O7~v={oVllu6P41&kjA>e<_AvyG3iw@9PppWvwF
zzx{f5(K11dsP-}!_pAY%3%!Ld1CNXY<mha{n@fbqHedh?)^O<>!(A6q@@G%*%>Enp
za7{H@BnN#jyEOy@olgYnoXu7Ch-MX9A(kRA4y5u{rt2RnB*s)y=z~c)Y4^+0ff-ni
zvKQrArw$o|F@(iQaMpCg+>?a*g_FC21O^q~D%!#$gr_1D@G$Z~4~t0Q=L`}16bEEz
z{=gaIE<OXqpL_LR<L4dBn2f&^d^Eee%2FW9z?fds_)~n4_4UK+o<AwCWlEkW%&bpC
zcA`pC*FqA4gaUa_HDYmHf-N#2N*6C8>d?@z>id#=6lpG0Q#<?in(jK5EE7W!*srQN
zJFts|w`gcm7_SLR+)M{l7)u#2^Op?uK?&sA50f3$CX@=V3q#Z3x~`k4?ERuSN4WLK
zOEgiJl-DhIjWmJ-19o{d%I-{IMNosgH0f>-KQu2+W=SG4SI2o-to$S{GE3?HA+rg_
zN+8E+H{`BXxJ46;0I^4%Jqg1@{g-Kq^jFC3W`T_L?trIFOX1AG&x@O#O7p35MNDOn
zpT+UbJP30v9w4pW%iLF>|5|=uJS_O97z#^A$~fW6L!pb(G>-onS9H*oHVK^rorhH8
z5pKnUGq^u8<&+(5P-?Z<H{$ynl~l+|9F)S5B;Ku}Gy4qwE7@u0|0pQBsN;q1S<%>k
z2|qp=K>N9w;o)AtkqvLSRYrfQ-HZSX)eC>n1R{&;rwI`40!4y*<zqk^Mqyn-kgbVm
z``NbgwW|^(vdbFI%6S{>b95=PbDK>+^8}8=WKKwtEO+S}S1+Eb3`AzAf9p}B`W-qE
zX)doDliPbPQpLoIG3`1g*3h_)J<5(!^vxsG#(IIQVMOPJN;Mf_>0{Ajr|EOL%3u)s
z30%`!D3f{(H}Wcm`F!#bjV!v;xfAk2gUj#tD5)uAWHUSns?iYWz;o@A5q&8M<Rr<+
zL`#W*_fwF=&h}35gf<n7DojCw_8U^e`=}T#cIs!R#Iw}6)=X(`*2UKiP*bJW2<zTy
zmbO~#4yeQA9-LX~+<0>H$6K9YYevbwySCb=D`Hdjq4a0qgUZm%TIJt$S$x1&-|F=y
z>>?A5e?dm7O)26?+iH>D<<!ar8>n)bS$|}ViF=&ucX`np=d6^u?~4mKqF1iL2IS)#
zzt#bKCzb*v<0Jjem9$(dzUllg@FPjZa767jAECdahbAX{p(#-vDndLbYc`WI0BGZP
zBp`n}QM~F<Pyc+iaoa$@6oZC}`y3;135_gsNC+>Cl?{+$eg}jbXDxLGSh*Y8`;>ES
z_)n~@kgZpK>!TypZ=x}iX_lP_l#7W5qI-JN4qx7TAw(I8@ThvtOjzdBi;$~3nHF0&
zJNhrE)18Vk^5X!^vtS<|LR`{A?oMpNKa|5a^$4}&&2V({vYt+2Brr2M2A_MBRBuq{
z#YG-{PgGlF-QDy^SA#{As7FH&PEx>S&z&%bW3RQzBhz0&t?3-k%;vwYM=M>Qm_g4>
zkf}!^=@E9N_x^&riIPbZkSW>W^_2Qp>tBpQP{^JMwy9I4D762UmhV&9u*ZUtLWS>F
z@2Il9dkCHReU{nre*r()fvH@9DQAdD`Y!M1(QuBvB4U@)+qulHH2e3k%S#KOj>~|p
zlYP$T?H*4f_gQg|$7=JKzSVw%yN}G4>`Rh;N(a+Yv?ivmppAB^$s)K$rbJXRjH68Y
zJmBSF<c%l?$b~4)JX($d?^n3dCsDGcCdFa$Gh!ggZwL>@b??^+h~9<gA!`Jg{Nv&!
zn|BgLPZM7qNy2F9se{ohIi7lbK)%YOPuz|1rf~;f;g0B$YZ|iF)Rd=PpATlO3=Q0U
z=I@gJ8Ih-f|0^e6$y?e=PPn#N&X{GX0ObHPO%0h8Zh{?URan&wnx`&gEr-wchp&|^
zBS80V3LeD!LZitB5qL}cEfeM;28@nt$pVIG(-(j9PS3-k&BapsBbhaW&Fn2mAlc!O
zX0!lQiZ~?>Hem7$XeMVs=q*j~7-9{cUkxcgt?V`4<%*%Y`+c!eh9~Y#6#>j0@{y#n
zneVqSL%$20xl1IVq~?Pxo@Jmrq+0G>NXtmAVZtm$0MT~CjvNI?EBp0%OgHiQp}tVF
zBgMCRo%~X4V_ro_t(UT{Y%Eoc;$9XXj?$FV){=k_zo+}anvFRFVU>>}_N3<jK;i{|
z!Mt0fP?4z>t2Fb*Hh@P|Qfd7>@?TACyouYkS|tkk9h8u=c7n49C$a?p(|jR`3(F1u
zlE$n5`9~Q-m?$z-guBGeC?r~zVc~$UDrAeihmR*debC0IMX!~_#E>uHKD}d}r!4oV
zqfYwOR=Mu4zN#Q7{js7)utU4UfpwA5ZZI^DSn8TL!(<zRpV#K@#$90DcGE@Zk%sSK
zo1mYH$K8}hu3J%3U+JajFB(GG>;0ob4~i)YgW*4r7w)O9FeizP+(4n2-pZsKwh7DE
zDuU&kAS^#a`NXY_yj2|DeFaK!Rne^wP3#d2yRq=bcsGc`fV{NkL{Y$c#ls<zLmQG@
zOJf=kuVoyTi8+Ccu&u*tbaD<}Qaf^J(ti(`o{F885gnX{pm8x{?}1Dd*&0b&;<@&|
z;5C@*-w#~!H(G~}twdMX5#K}iv7vTyxeRbudA1@F+@e+7mBaId*oK0p63*G3x&`|Q
zD*W)*dO~1-Ktol#PQD;u#`;^EIbFh`l_T$-YF8qp{aLNN$v(S-d>(`@KmTark{~|b
zL1k$YAY`?8L%Gt^a^R|JEY5N9=c`%Pfzq0dk?f$CVZKPD!5F6_m=~bNIjD*Ox}SOL
z|8_VxuERX}sPZ+JzEzWGJ6N=Qat<43?u|z&pRRQzczS{TjbfRdV>pcO#Q%E1z=7K%
zrXMniwyW$yEbnZS1Br*otP6wTw|EB00wgTny&dHI(4Lw4it&1sqj*j83v9yYyH~~0
zO?k)`yva&EuLaI>*$f&7zi`kI#c~E9Z_;xjOqRU;Zo=;%ZS_o(4YhbH5K+j^X$2#o
zWAms_T-F9=d2yZ~w))9VB{uaFiWVutv7Psg%8Y}!ejoj_nHC-XdpU;rtZ+$YYruj^
zvUDPSJ^6NCFzC8Nt1Qh2V+@EPd*Ss}q%&*aqaC8UfmmdoOuqO{H=|@5j@05hD9l8u
zkc-kK4Y8ZjN2iv~Pkn(aiNu6w%eVUxUAdBzlG=gz7|Lpy;7uy9qB+3UeN<$@=B5(o
zstN+9*Y7~}g!R=%=LIfO-HrL?K@5mO-)7MX`US%cbO7|tV~-hyWL<qN3!J`}iJrA=
zoVc4X^noCd5^j56r~(uWaLa+1#d#>02mktZTSi^R=$*EGXVlHYL+nn5??0>QVRUQ!
zPqtkzeAamv8KY0Q@~=y^BmEi#63>D41vu~rH#V0qvrg%67nkwnkT(!PwHE^csjde8
zLe0z8^})A#^lBpOn90F=kt*GEx!X35^V^ZF_aAJLHsgQ2Fbi;F>|eyYn>CLhJqc;V
zyh{Ye&;VP{MV7uTB`d|cis*+cagQE~CF^AvbS<>Z<7Ie_ui^kv3SxvffqsPzm+weO
zbQ52uPiDn<Rh7RIUq9$sd{E*A<u<5w#a)eTiU3Kp!)8aUfPDUD_$FCkL{@;gMN?|2
z39W1}dCtp?U{-caZBPhKb-m4zRe0|meOKQ5SGzb&MrOt(<RKIQ{W^Z7CCfA?@+_b$
zN+Lt79%8^F=a)#Ao&@LIu##oTE(}iuNW$6Fu<3O?kLOmrTO{<TcA~TqBb6KQW4D-}
z0w(Sre7Ff*wB?ZOUmkIZG%JW0QFMw`JHaWTp1>%ghq)^&F<qY8Oad8GpD3ZU_?tM+
zv<8mr8G#eJE1-{bzZ$q#-;7CYnpN6q7X5@4i8{^N<8I3%YzChjNn|SqAfAgJi6j8#
zl;KYNk?n-=akE9}lylnl;-x`1bUsC!2_?x8zfbRnKV(WY(ss|}g|R9J26a)KiqK>4
z4DWszIPWQW6*skZo)5?4lMf8RL$M^0+JSIa*!Y4_{@1@$*)@Ez-!PyMNk{#ZYe)4S
zCA}bg`xaN*7k5w^#2sv6Tt4o1h-C6xpy>!=;)mm$2ai*vc6ZIA^zH$aSt9EsQ03wk
z33G?qXvAqqhk-l48`x%yy3SvsC_Y<?I_4d3fboM9A%v3da`EUt)d7JU#zzjg%GuT3
z;3@N7kwe?$(B(iSigxG8PGQIkBj_BuLNo7)tZ{fv@1`=Z7pgRv=~?i<`vOb2ua*z6
zvP2XNlW(?qk#Hl*b81BRzs`)tsKWdQ%-AblICrQ)P~d1bzlc)SLJ95i8bCA;NT^yQ
zIkUBXqM^!m(=a=24FuW)+9U2S;pKlD>f4u=X|D|x$zynCv>f$>d@4h5R6ho@8~Lzk
zawd^+f@S{Y3E4HD>Q-a5iSzG?+d5eO+e3zCd|clvo6I0No_CPk!eqT)7~g{tL>mm9
zT#q@aL@X4?`=C@WNoR7t_QX~1Z*SR-Z#0+;#J%V!4lE^HDSy<gGqVWRZ;{X0`v_DX
z@U$a{gh7)U?L>UjDb@P4ByvBdvibI$V$S{W4-`xSw##Yj=IsIDVWpqfZ@V3F2Xq0~
z?i!8Z7pR)paEMJ^2T|R}Dsu*xbem0r#arZTn@ZEh#HcCMZsNpwQ|#_k-irgQ&S$A;
z$lo>=nnI(|PJJvDt$k@WV9ELCK8-F?|5#5F*w~REB6}$Oo*zkQuRzvwPMii(3Tpzu
zX2V_9G|KeMTE@YQ@|G$XCeLY;GolswQ8aWK#%o<t7TthI(Tb~y$6SDo@UUkZNyQq#
z{QGn|6LY7y(91&7$Qe#TClWUpCg)9>@1Kr^gqS#sFwi2$FYnWzM^79><}(VE3WUX`
z9ey8>PI|5TV6>L>%-TMhH|UX*TP$lsDvO-w;8=)tjOiCz>5`!uc#5|#D|rsj5$@m*
z3X#l-gQ~n;?Dkv30>GDWdnrXy8~ApR!XWj1__xm8zrsYZ#<2veyTw9+TIRj5kdSJy
zK_vI)-}{)4D*a<|vG+qO!h}W!*#x+%nN~TQbp7$hbh3=JA}PF(^EfY;C|{?th~hX&
zGbv^MhQ!tXBb!@E{D^AT`|etlmP0`Np@(b2)J+2NRbGsTFH|;Ad%`a3`6TT7>AL+w
zW)TEs`{JP_xx2*?|1jl-OMIYo4=v(){ExMY&2!zGM4xs1`!W{SUK--+c?5>A;_7B?
z_~T!V5M=6a_m&s9)(8G>W3nzJ)sW)Ewbw7uE>9scy+xfu&V&|2R>lO$bS{*XU2a>}
z6Be={CaOYndu)9bO$NTUaJUX++p@@R6Nf~<cetJV^J9w-bQ1Z8QvD%QD4y!-f6*08
zT$_#EU0k9eSx8#xIMK4Epu&5C-yHD*Ue7?#xuh?ee67}t)64oLw|V>}7j9gR@}YLs
z>9Vdwx12a_xxx0__yW9KCXtKz*|d{E>h=<8ae=>Pts+KyQ!a*FJ)oi8w&2}mOVp?1
zs_zfHjG-9>XLUSyn3&nTIi07iyy2O7>Y`<%=u!lN@SIH!g?twq@)G8%6b@Pn93r#<
zd!4v@A+JKHzzJuD(&Di=IT!Smz0ypwEm~e?J{qTUA$2|WOYbSHqrgws<r)lXu*9n@
zQ<LZK#w8vu*{Ag(ijFAb3F{4{9BhCD*`c;?9Fl8)lAx`YXoJK5O502+=O^|qVS$@u
z8+u(VZWirDN)s9@I~w2%1TszTKIU+NQodiExTeT465@t+&Z;0jd8ivzq>!&H-Ns~a
zVwnK4v%<o3&Lk;F-*Z)6Ii5#ZzXyK`dvBVAgnvu)`Mq~qQtBuOO^jYW-VR49OK+T3
z+1cUlJ>b>)k;zM~;TL5Y&6p~c^gSn?Ak@xGLFClsb|%Z3nPNLkMMay;*&=IVfBhV%
zw#wjYqn`HZ_4-M@HTs%&7K@`A-Z1?h?NIonk3AEZTR;B@#s_$P+!uxieUxTyjGC+G
z;OCfF!O`r}+PW=*Q7@H|&*<8qGI<fU%;Ezq)?E}Qlt|z$T@!A{&`Eya0@9r^G4Wlc
zW3Dth@IP&nz0q4<$00YhQNZ;=$4fhil3!{D*6va_jc!}p5*4(1ZY=6xzHE9e@`NyP
zuh3%?H52G&+K~A}yWqIk4e=oz=KPRmDv_(ej=inueYD~4!n3!#Zr7If#5D8FF(&wq
zA1ni09tg8iv`!|MzIri>)^omJBMQQ&JprU+QesZ(SQqJ+%2UD+j1dIA8vi8O$Ctm#
zoV5@ex)%1^a}>@)!{Ic46Dfk*4duA=)=ar(Trm&2A^E#srn(aL3#hqYS~c*FNZr<O
zKo@7~T*}~T`X{jc(;jGmd+#f-x;xI6RgkabZb@Q9%jFRA?lsa<13DeVCgP-)CTA4v
zr>ZLEt+D(mi5f9~{re$$(u%SQ8tK*0K2mjMv)>BiK*!f$ZH)t-imFImopxzWb5NpH
zA_7?`Zg>*VjB6rv9bm%!MF!v#x0%8XTIh0CMJ0IW0U8c1B@?FojC9)+zvq9X08U-k
zWF0O-csZq@Z#bv)N9_eji#P(;^Nk@U$%F3Iu%EL~Eo&0OBTdC=zT5kosZR<+I4DsM
zJZLxK9`cEcy5kx%zaNA@@1$bZBbrX>Gj2L_^m;b!j)8u$ITOH1OQzKsskHQcpPfa`
z;@Y=*wOLgA?w3{7U9t#(EmGL6oj7aJdxMsxMa+jCwY>vsqfEM`H~3wkk*F|+Pr#t5
z-@L}77f393@wikBJ?4Pv_?giur7<=$@|8GKkpJ0R0a8qSu0)CyXx&uh1~$~%f28tZ
zjmdbDOs;G5-R=@10nR5B2V>FqLk^vZHnwb6p2zT42y>Q4qZ}qit3UgUC+wVtW<OgN
zbofYbiysPNZ65VFV5jKQK)9sY`?)2>5ANZIYzOKJanyl}zrbn^x5S2#Pf5&{JeO`~
z`1ET1;#=_+Qp;VKJvz8RC|pf{6#2`%Y>d`LyM2%{AO81S{_j}fpA-|srrl*qVwnft
zG+7M3&~@QHG*OtiqfHGp-!di^JG|te=<jbH+dsFNDxQZ(v(JiXA|9_@Fqk`i8)Cyt
z5VXMokdE5sqRHDpp(RZW>jk-lk{SrVW}5Y*{Won279-*TU)E3c=njREL$SGa7`D^?
z*Nl3xwM)FPH%&cffqfCt_7v`$ASLcnOV1GeYB*Eoc{N+Vi)8+nLatz=VaD$;N-JWW
z8t=9WHXf;CWrAxNK30fsy3$u;Wu7bH<3AamoLTH19~d~_YZ_i=*gyBJ3YuBGg%$e;
zn5DM+5_WM<-%5>d;B!I@z5mml>J?~W@QPL}*ZQb7ieQ%W{KPc%Gf)Nhm7azDfII;A
z_qO=KdOa1a1N^LI9j)jP8n(FjD&(2z<eaX+2KSW@qzLGw76idZ&lhVdKNM&N9(W(+
zAMg`Wl!jrYHQ2TF+e&A7J#a0ncAAgHw<{dx6t%CKYj*a7D%<wmLFhVB5{l1?3WSU>
zkt@n;sWM%&_zU?AeyVFbB#t%8<Gjlr%_EwV(|9_^ZQms|I_!k9N8$SB=@nl4KN6ah
zoO^HYrm_;j8U)?%J2rcCFb=H4^j4Z#PkHA+;N$DeUB9`~B4?`KXDaWhb`OGm4hj=t
z5x2&+#Zpi^s|J-}BUo!dm&wU;X$-hg+5J9=hD8jWM}jwNAub&|{LD~yHE%MLGU_k;
z9HotMYbuKv<JNGWVOTwm*Pts_rW)@tR0OSKJ-Z2bA#7MqfROrz0u+ap@h`i{bIi+=
z+#j^S?=C6cVSA1f`t-y^Nyy8Mi(wUQoaHH;VNO~UB8h(&(Wq{zaU+2>Y?av}_)!G}
ztG|FHz79_N2V+faVmjhwof2{-wDa1v5Qi1~H6bB~rb*v-7YvHk9=7cm??U$=g3WTD
z9n&$`@a;-W)Zl274!h;MlBVW!;-Y3IIzk;6I&(YAqxeDGUGQ#E-&o^XzN)-MiG;aC
z=NapS>pi-~LtUK<%}gSLW5;t%7%0`0$mE6YZHVuuZQC<Pif>E1J-niAtzOU$P_heX
z9Ji-TnDykh4K-S6Os?19sAmbuvOrO8&yaXM!}pK<sa^y#8xx}R*|%p+oAHZ<2|igu
z>U3Dcdb$06{>W3wH7<_=l8vVx$|P)??T~hQlqU#NZNFY#fK5C^o(g9dX5&la&{u@P
z_q2dZ4ho;uv~3Kp&Y43~bKyR9f463ud3q{rzD{L#2Vm_D9J`GBopq)tu4b5N+vncH
znHXWoGwwI}aM_zdo){<uWI~#590RvHf(&@Qd<Y8({<y7~_1U(n*?`Y29QV(6ONr(h
z6N`_T7<IPSFW#}b55R#Tby_2_an&b0{VPfQ!cY*qXx7TEi$vhmDZ&2YlOjT+A3M$!
zW7lN`qvr;y%x<n$XS{Og^+CxD+kc8J2b4Tn9n_I#B>4fw%e=t$V0cA%_B0MBK8u5&
zo0PrKI|7tT8>&{h?xIfp-)98TOmIqjcg%*@h>_SP0fox&D?=T&#j$eH8*Y?Q*Du9=
z0Uul=KNrKe#9+xR5;4L$$mrBP0s&`(A+DcZYRFCoIS>LCjf9M}VZYh~ZF7+WUD|A&
z-80%vLuQrhwo6p()1v1ip?YgtbE^FBV`)3RkY$;{*Ps%c1*n-KeZCW@E_6Gz9XA6<
z4S7W%4)T2gq`k%QCe(tnFm_O_fg{W2<ife&B|fsx_Yt=@!yt8e`WqG$A$3<ut(O1&
z%G+QujMRFe^bGW}1uwjXzy)X;i<q6Sydu839?Z(j)VIpci?av>z1S4cc3R0CmEr}g
zlWgnoH6>y!NPgx@!BIwJ-OC)rq=q${uqL)|sx6KuE9oAah7I%<x*)^X9`9KtZ}Khm
zlMNFu?v&|LQd*RGLPWCIR^O169dPFBI7CU!-bmiily8w3Y?&69QK+*TU^`k&4J2c$
z`jqoQZ&Z4YFyr8?-=|vn!60rBjC7y5S!;^JYn<WJjz8V?_8Oj&-O4KGL6n<uksNW;
zJNCfUIA)Jsv|g^^a}5LUWRXW%jN*d?>1NFN5MolEq&>c&&VX(vtaK-Ub<fQV*}9YY
zrV$2b)877IfajG43p@6UYh6LC@STUM+#m@Kz|FFMrOWcY%PkI-U<4Z*3t$JSF*fm=
zHl-xzxRS83h_=@ztn?_4rJ5KWRfj%b%o=h<?y{@}6#*t9FYx%GZ6xX-mA~&wyrszf
z=8OIN{hq-^avp&^_4v1le|Nx#V-o9LMF=P4U@|X(%9QoO)Ym&D9oxM*(xrWQDaa6z
zrHRWAzl!><A$7~;C?$v(K-RN!8hn%e_PDRi5)k?ngcJB_BONRTz-EbnL;w;l)P`I(
zwu|i_6I}ePNirr<1F?ETe1$WCmxnl?|4@QV0PL%|Om2Y{18mCY1!iX}pwNGIU+r0q
zpplX6zwwG|4vU)bb2-KYmk%tt=t`a}apYmJ(0o`XsrJ1mleRt20#i4V`z4!b6B@mZ
z+xW*`6LA2_RLYTY1WZwc!V$Iacm(3>mLpmRYgc54D~&^(cE8e!#Qh?;s8styl(Gl_
zd`eq4Z1VeU2u*@XT51DYCn0+`eRFqR?i6&@9-C(-bP`TmAUfvR0Z3`L@l3u=qQ$J|
zw2R6g)L@r)Y`OwTu=kN+msx6C1F~$idX-g~r2v}d(j4f8y=uKsbpYHXta!-}OnAB#
za_`GQ%>iFI*pu8vuYnn|sDydJvT<yR%9HH<zy2fGLb&UbG+Bz@YX*_#6(vRw_}77;
z%tJN3L5L_6k;1X_bDl59RqUyh)LHl|M6a;?A=hCgvEP&ov)WcT`rvr4MkTV0rj6_5
zdN*ty7fht@?OC@5C`|U3R?r#|^63av@JAIV0NeE~;oWZ&`{G&R_U7$W-w3qp2F~3?
z_7B>D1d4sZ0I*qi&|yxSm_IRqHOwx&n?HL2yaa5hiUIC5CTx?v(dH~qByMAnW-vm<
zr?n{8=x_8MZu6zr-Lt}JP$FSgH1j6;jekB}5p)=y$ek%4)GnyIn&9D7dp9;YY=Uq<
z$R0f0v#zg#&MqGdkm{3GpF(t>BXSim9B2G|v_hSLP*JCBL`93?aWMDPkm$vMj?w^Q
z-Wr}Lba;nqRfqCGeGEyu1t{80J97pEcswbil2cs%y>-G0&)6w6nT0U6_6h~wTIfRw
zr(_PQ9JP-&R3x;ZyfpnWVjL0WIZYxYR3fRF14nox@@5-uJY)jXCMt9)w~r_^8GBfd
zDmJ1J-u>4{*-3oIFY^VQsSnrX9}u_o(x1VhwaLwoEj`u?sUZ&{rdMZiKF~@pJ-+V*
z&F+#D2xHF$EoPonWUwUcDorS4RlU<-J{k94hvV1vkyEiG2?AL=OXtB4R!uJ#LO`sI
z*>eAFw)$HbxNQV(wUp3Jxm65nN`CpWMrL6$F=vk@CU@mY$=>4{oWI!7`!VRHlpqI`
zTPdZ!NRMDxLH^uKDs@=0WimuRgO6{+4ioGbgyYmncGb{|Sr@M~hK(U+Ysl%t^ErOd
z;aJhMRjXOE=D3*`V6?@W3wUHa#E~tUO3q8P<5iO17+y!QR6qxOVGYNZ{++sHeOLO!
zB$_9z&;An~3d+pMq9v(9PBt2u0wH(xnF&e>-Cijg9amwgM?3wk+(&CAeF6@RBLq!s
z`4??JY1c|f>hk-S$3WSl+r={2H^<l6$+7DP3)L0<9^mHrbDB*}kM}dMDY9k?&v0G3
z4^cy3JRu0RG3TgC>u}pD?c-MduzyVXY=mBK)hi0a61CcAl$l>`M`xjJuG6SD1f-u8
z=NAx?K(%=IfS!qd3+wU4<iE2z=JahzI>$*UhEt)VSlXG5ZBHtK&o-VU0XRD?4*|oN
zv2VhUOy_Q8T)}$B(ZpyMnLV9?xDR6~=KXMSEOk<Xu7wzAhlAT~dZ}sjt7r#d;!REs
z#)@6A6~t6b12h7}(ZRnhlx2H%{+ol2xSM$s$~SV(D#14$AE1uI>)4F_uWV|ldN|zh
z1X4E{&t|v57go@cPtvQ!+Q7WOG5NQ(axK1N@!f>FgMrq0tw<H*SQB})46gnyO@8wq
z-P@(*EHgMVsl2DssK21uLJpLi2Mq9kjp+UDxKHAe4(Tx~TGkLekmUCbS@SKT@o!V9
z350#F-lGfr?=iFQr`W-j1!gW0LI!qzTXe5zyGE@0&X<!eLtAPq1^H)n+tfmS=zoX`
zgKZjT1G?F@-$X`48CD~w84go=b)M$KbC*S$AE2ZPyF^3$u&Addr$*ZfnvrjEYf_sZ
zuWZwVQhXq3=u7qTTY670ckF909x(T5TGBJ-!Dq8F#X<hwQHQl(T)ru{H?!OYde|Yl
zwIiZlsHCZzoa986S4jyLAgD@vNvgwjxJ=$tFZjKL_OVgfBtSS`F}dZA(WfHp@FALj
z(I_5{j9X6%Q8Ppc56Y_j)2qbCJ;|oV_^;=YqcH%T=>RU$1#qBKfXH}H``}fVx2UPe
z@@0ZQah^o{P0@<i&bC@tsHGJa=Lk6^RK2hSKj*))$nOrPgF##LK!%ux%47&7sO714
zpP#dlR<;K#|L<LdoK4U)3kJGSIUNjv@}Va@;$Y%)-Gv`NKvxc+VfHj0=-g5-RD@3u
zJAsWe)UE=_qX@?|Xk3(e83z685nL@iX8R2Z-Zrn6NXEmTSP3>P)^6&_h#=i);nCqh
zpTx4n_4pTY9X<Y-BK}18MAIlNLqJy}V}^3>aiv!8%!$$pggm|S6_se*e`;9cn1t><
z3u7Yc3eL7?Ef!^}SapOm*}3&kK{hO`S^86yw)055q(PY!ez>M}@rc&Ej6qZw&OjXi
ziB2#YgDvy`WI*=ezDWde!j2UekAHYg#I(3Nr^?*VsA@r?%ueWm8zKmo7_l3L1_WWr
z04YG$znATGla<$ClQOzMBz)8g!$xHx=R*fDw?zoi^|DA^@-PF(VD`-oC$ap-QB6=L
zq_`+jywtlO#sd<-L=SWC%HFHDzVNpM<J<t^hwHkrCngyKqMYl~@#&V?c!Y?I9gc1F
z>Rd$n&HAm9*^Ty6&wCvqKG`<c3_9K!gPJw$vsB45QA%V7pMoX_)Usqzd~n)F2a#^c
zbtY5D{`Rd>D&KsiJFs>q(l@yJ2q%8CD<{%q^WXx*ktZ^J2`&s&pxJn#0gD$43~s<M
zmUjKdPHeiY8|4~f$@Uu|gEi*EGyf&-n@oo^=psr)0ixx~6|nPK73UcRXqLxTGj8!d
zTM()R6`(IrtJR6;aQZ8emnUKx?0hC53D)Z{E_AK9OrnFAwQ|qZknlt{8fKB7u#e}H
zcYh%u+6y4A&di!iNxd*x(WrXeO9{H&?<(<gc#e)VKy#$p6ejk88dKiMmay4bCO(*j
zkMp?;w@DHyk&2SlrC56l`mTQ>drql|h(N=9y%5$zeIocyvV!l7?;NR&Z$_;M!)Jv5
zTY9r{_KLR>`ZmuHY`Zv*J4ZHEg<+`UY5nJR#u}G>FE6|=8pk1?l$sh3MW&=s#{pp$
zn>2IKxbUn#5U2HZZ=l6vtO2LZ(M=STYU`|KJ0w){3(8=)eGV28{n7tCQ_r<I$74lu
zfiE4tK+LndJe$vY)FjM|riss4IJ~j^@`sO6q+caNz_py+&8H_^>fCH;STG&x>)1Gq
z%YrRYHaNV}vSD-<%}vhYMP`?95lzBttD-hi3IcxZA{2Y~r_+MxpheVgeVYkh26vty
z*n!ls_Vj6z9!S=XR+pHS2JFRqeS0u`60PQdodMoLdb3|oPzCk+JMG@s{_}3G&xVW+
z^SvgIlzLK+8MK?0EhC#w5N@sd15c`>c!`BltFlwj5&OV%hjwRKh9M99Ya-9M_`~j=
zC&<Ti|0tJ?Z~L_diHzboh<~M>b%bKyq+XPZr;6RVU?o_Q9K@f5Mon{y|9l0b0rde_
z<EdRfA|5fK>X)HH%N8j-3TXoDCGHy0iR$&G2m#zMXQO@n<m%~gvlPaZkvBYYX_#Lp
zlBWTd@WXjnls~I1feegBw(r<ZU+M1MWfSTqu3{Vd&YdE22Wj-K2{PB)bMr{g%b%nt
zNwX_}armxqJII`;Oi_0EVKx1iEnLYuk>%qffY{Aq{(0r?4ae@4vS)?HBQhxP0v9ZX
zj2)!(0@3I+cHzdZC)&ywiw&}ldrW$=ABC$4O<FMBw?`)H%fiS?0hJAT^@CwgCAQcb
zO)e>HF6AsP`%e6`rLz3SaOWOiz)3}3{1af)_6|Q$($jK4Bpaw_h7F$Ny?#(OrLV)g
z;dAP|A?~PpXZ6iFN2i}8Z@_x4fOMeT*0K&JZ2dB=!}d(`-B8D<&?8Sy;Y5fgTebyr
zr9mu6(YY&xY+q#)^5zFACRU^JGp{HqpgJL0H#n6{m7SySxS;pqjNjX=m=e;gd&QB@
zxzGCsDNPEIwk+D%tf!tIz!4eXIm+6AATFi?lbymW50N@&d52K*5sEIt12ej*2{kLj
zs+<z??DG4Md=~-~2(DaO)C8F=jTr4v{TE8F^5XC}F;Hr;+}47yiF@WZ(hn}$@e~y0
z@UE#S{_i(f*4;j`Py^(ZwV6R}=nYS*C7`8$32K5Dtsv_q-^u~^pF8JnU&oD~J!7Zg
zh$dk0AlO|c^Hhd<XPNv866f?v99?>B)Gg)9apwC_c~w++e}~;2{MWNzX$mUnR1BFY
z)X7e+l5_rj#I8x5$!?tHbGdu#Fv3W_?5#hFbWB!?*n}Vp)#HIBRnTlzZ9S<=zjnz{
zatIuTABqUdqvj&XM)Tl;(n+I@kdyYC0pf^H@FLc`&4N0`vCL*t7jWV`)#VMOwVi!j
zg~SLXPSN^9xsKxnK7vFJ8tDD~^s(OL#(7pt+fO)@bQ#_=buhM#C-Xo^>Uy41xwukt
zQ2bb((UMP<G9NDuj(MS}FhqmpuA1cyeWYqC8Jb1h3(oGYaF4^djWsta*H+oHc7pG_
z)rcbJ(S-?(QQ2Gs%?bD#K_b4zCP(`~{>h}{{5J*8Z23d;b|vMmEONyCi#b<x!*-}K
zRiabxUyGhSx$x&OSyAXii*xbQyn~mkUqCX8kFTKSuTRjHm}Csq&-MFTF8$nsZ6LnK
zbRo`7f5^DRiGY#p9no!p@sFAXlikYIg}?a)0klxx6{qexFPe&q%<gG9#^s&t>RWb8
znP$+a4Jp&2OM%#_m|BgxYEBe|sG{#J!H~eW%w`58LSTOyWcLP{0XOHG`O}}&0200{
zvN@P}o5tGSlid;AFQ~EhBIe{4S;ueb>>kl~sbmaf!t{20HwR1An(>^D0`5bL^!YED
z|JSA!OUL1dw7F?A0#xKGhiBX*9ORc(T!i<T+%Iu81kjC5>~P0mS<s|Rp0R}5hEhEQ
zGrEy-2JXA5uX1d9ty+MgUoS8O)c#GHFT6pKFsW!Nv(n2@+S{wzKUMpK2)$zSLr_`n
zLAt+BUldN?Z)WIyCP|}=`1syF&9pCI-O1w&vsR1QlH+21qy#Mb{fJC)`z0L}SavCT
zfuggcqcfBDZ5$n6#2ftPzXlvp-}_0|Hvb7ALUe(J)SJyEZ5VUtEPX08<y`{+y3sPa
zu!g(c-hOh>2oZWmW#;<_hM4Cvcb5B+($VM~67uVt@YZ>g4fuz8r`&j)W=qMc(p%YS
z%|Ug9>&z%Mc{q{h;Y9@R;9sl0_PRRaSsfZeyZ}!>9qeqbb{oCa0}SSUu0U7%S!#$P
zK3~dsP~|zeeAG4b?v3&xm5oR;70O~9x&=sq#gG{V$L`KFG6n_?1T#KXBm<O!fTA5g
z3jGzETXw&<m~|8Z@z!)dg1%jaVcQCPB}4#$gD?9bW9Vmk#$(t5@Y7bnWl50A)74-f
z4p6np0>VQ(!&I<hG6Wq|3icOy(Eh_My0w6G3en<tLp&0a1U6ljZO(P!r(qAC0Eyt6
zrZt$oGqDQWoY?<jfwMB`{3m9@*~o4eNa;paODoOWkqhQ?2{d27@Ni{AvfC`CAkcoY
zmS#n!+Fk-dc5&BeGCzX#A$BHRD1?<*nl>hw6NKiKTYf>D^uu@5N0s>4Z%dWv%KjW)
zXW2$-VUdpkD(l2d7J&e03j_Qu&zig}RTxRk&2dqP%A0l9np?BVQHSs}l|3N)?A;m)
zJ%Cf)ZE8!K;JGZmxT-EV8li*xvfK-sNvH0q(Em~n4uk$to@;h+Do(r?<2ugI*)rO+
z)<0_2-;DmY(<^%b_<^bJ0E@D;jS?o8GSkoC*Er!f>@E%^kneNN3<N1lqO>;P9E={5
zd>b>GZbW|gl#(K>bp4=htyvbrPU)`}Le3q9;5t(~M=_WcTjybt>_;$5kQlL6ZoUzn
z=tS^(!TlR^m`JVCMZY598c~ITjH*)#by(2|Z`L%y!_|%KQ)~vT{kA8(Y1Si)n*u2%
zHVpNCaHC;pIOq+tvRdl+hlEv9197}FSj}ZuRRt7QmddWfmq*HC+`Up%hEyqy{&UzO
zh#`xa3nbzL^7inr2&eA$r41^iP5GnN*Q^TS-eq<PbgWNS+KZ-%S$TMNTm+hK^EOiL
z6C;#6c70*u`n}{SEl#d0&np8=VF}wCWw-qckA=Mn<C^dXzAw{m3^CLBphC`-#dq?p
zH`%`dgUmiWQJm)L?=ZEt)A}q2EHLR`fFl&n>&G$Lhuep(+3;<~3~ZH3dt7K&8<LJR
z`R&Q^x@Z|dgi!7pbN<yX%rk@F@*=j+K6Oy*Y;Psuy|%iDBeR!xtr>BkP*EQHxMVqy
z%hb;jx}D7Z87i{B3r6$*`U6pTna9@XB6z+o$(d~7NdP<Mm7yhRXSn(YueqfYjF|$0
z(rz3uV>9V7NX0F9z}c#-9!NpFW@I){@-BRe{T!kv*QEIcY~{fCaHGEr@UNSN4I%)=
z>0L@l2E;%n?-tL(K&gWFUmlr^Q&<HT0r>NjSRwKHTxw2hQLTCNXgzg;G=oX6o3$$z
zf>ge$u-Tb=Y^Km&V<tBW?m{OUbSC*8Q10zQ{rML_@JY8fC!+C-;%IL88CN1G5=E60
z@YI2pt#CINHojYXApGWDYhU@N2LHg#X{tmp)~HA(r%eHt(U_>iLXqLk&3|5WVn{mh
zD!gowdP8XhRKuz3(eH;rR*e)SFh&wNQs+$<n0OfZZpt!0A%d<8cK5;9W*pP^Z*^pc
zcKv7Yag*tw4&8Uv`j*o911dcrU)&Q<7mwkHltZ{J7RPIN?)BX8c{*%3%CSan8v7{L
z)AJZKcPibUV1Gr3sH6tSA@fO?l);D}L|GW!+VTq`)NOLpg~sDrLuR?$ax&7F8FJQv
zO9r#HcfOLyY4%lG*ykL?pnx5~HHiw71h~y#-6+kd<l)c#Jqrn-IAF?lI$D?jrU!w@
z^s+61{GGdehnkgLVKpnj=dsD4zR~)Q3Y=ftgF|A>N^M1Q=3gwv&+m!{@PIo!s>H#A
z<C@KCvWVkPP`**kAoOED@8$pzi?y<mW&Qh5aG*N%1697L8W4)1LLic!?yGyp@q^T6
zDdrxGT6!<^b%r6uzNYDW*R`N#LRIDFG9Jx|E}e__Y7doBLy@}&n!toLpA3Xm;Lnp6
z$;qHTxIss8sBUW94dvETl*6NWz9}?m3`kpqC%`3(HyMj{&3-8k_veTC$9x96`6o=s
zK@OsYXYbL!@u5Z)U8elTx|WgD^*-Qj6Dvel0IpR)@i55bdR>QP+n1`{B<nhXppNaX
zOEw!&?oWpK@y!Kfl<&U~tBi9|t!e6uNfvS<kJ~6I#1MV=X5?E11TZWQFjX*jZFeQq
zQ)71<1)GJ&ZzBc36#~>En(VFPO=~?+n2H)E($j!ikMOz<!>`Xw{DP}_Tq_EE<ls^4
zlE|-5p~x*NhuB?isqn^Bb<CEYx*CWZ<G&|jsx{NIPGCMP2QKWcxIH@fzl;uxk1}`U
zJlUg+%m@t%evF1cEukvhl?KXpec4lf<M)$~RI@=zW&V8E^sPzf+1BcdS+kFy<zExd
zprROCk4-tUcSxY+drJbJ+F}th-9PlOgTN?P%nUPETeq}aA=TrRn?Mc987Sf$L4Szt
z`j<e>pzEb6`U6yGzaHhIap~*EXnYR90e?Yg>EaO9{Q=dJ0MXOEgbnb~?A~I3rd308
z&154Ojw@`tYEMiaL>7xmEVW{9>}=!w{!>Hdc$knZVp#`LX?`*zlUu@6Gj;c94_Dvb
z%Oc4k4lM)UkIq9N{TE{RN@D^tS&>ZQJ)Ma!z7=;$%f>gnW24uwDRq@PYp&y3J#R&N
zGw$XsCyu^SZ|SE${l7U0poWPB&8Q!O5F}H<)f%m%-wjG6JI+xNoUpY==#5z+H^r;1
zyG}WK^pKan%EK?(2}&1&f!Y<R5o#bQ-x-9OWb>l}-7igPExXX)=0gGf#1ZL-x@X;d
zoRAq(DxY!HKfxBd<;sbgO)v99{Xdd0OPitm)s8u(OX;;QdMMi!0SdIqRV7~nlCweA
zmN-I6QB2P%`zH%T5dK1A<GZO3@EHflG~{li`|>OVxVkmY4M*$1LuA}6pOX`SS1}jE
zekgXEbDGP${_%4GS&lj-p_ig4d>uVXgMA-^Q8Bw<?By6fuo0-&nbB1R!xc2*&0`jk
zOw`@dlon^yTi(5aVQJkiRH1i_M`h0ED#|QN=*xZ49`e*Zdy=kZSa>LRB{3d|WXPyY
z&ZlHm^1<wKUZ;eSs7qDNkmo_5&hHQfHgMQn2;N%UtclE+nN?%%@#&h6xiKb81<bC3
zm1caEaNBcF%|X0Y%gAcjCW!?Tt9xbkGqY<Y<%c)AFf6y_4oZx_Wtrogw#lKilcvTj
zk9-<q)_1x|-)I@HJB%eke+a%1);Rz40F9zEX7jr%tlhe8I>wvIsJ3h1S8@d{f|*lh
z)!5^GNBe_PnF_}rZ`Qs{q8XI^2ITL)W51NhSS9;U{cwsQ@ISv4P=wg&!Ne&oI6~Z~
z-EWW;n}dHK;sT+@@b422&8R$UNek0djW3qz;J}^+R=0WAwH&g6%vvwo^jKq2lsIRT
zFch}sxaBDOyO09$j%sQW_#8C@$S>xRu5Nquyrox3O(UXJIsX<1V>iZ1qN;Mdfxr{`
zz?om2=_|J@eD+wth#NH|mA&z$0-74q33AiKEP4F$h6)*JJvJ4fsZlT*%&Vuo)@QwR
zkS9)eP#u%c;dHw8sb6oZ_8?w75B4?FI2;lY<Mf~olCGU*4Tn@z-CKJCZ{i`>w%xi}
z%bq^#)9fi%#Ud>WX<M$(aAb;jbEFk352J*uEw;{TO^n$wqk2CMn+a!q`Q%xswxJ{a
zLJwx&aC$!GtfJSlTev(3D-4QZ(1rP_BZo&EBk#}{+z^?Th@m5?K{4=9zc&i%R*w#N
zF<tN&PBs65&XD~RKI7;0;byOFZUEKDs}V3a2sHllcmDV;`-1(pwNdXD?Hrca|J3<2
zL^9CUCJ)hlaR8tjC?+qo(`p^@DP!In>0shv<MSaLgBW4%_g%?Q?N|W{-IoN2b+BJ_
z(9Il%zyC%JlBFz*-zcqaK<cB^gAjsEyo!DH>`!tC6iKjHW>5Yq?s3rqKoiY+=w5X^
z^LsaL478E0<nyj~U6c*}Vh7`uV4-l*CS&JntHL-BMC3aoA7Ac#DJ5poKbcbhY?)gR
zG`K@dQ~3PztHHn@+X|djKPrEzc`fDGXaX|J3B!T&UuU+#u>dq+ptH#W@$TfJKrxRr
z+&e*05P!1`B2Ji9oj;V_QVv-NSnWMjrEY5xZ}D&TZ0HlH4X|%glkKp;DkJubJsLTz
z&-MS5A!QtAP_4(W3&rVKe=W5eoz6FrLl2*idw1Ht64Nf7U47i?2UIuE&v7ui{B6ze
zt+APLhj=seGAXRN8rw0`pd8jpA2qlFRSCx{)fvd&>ZupS5NM|mu%Dm)@$=$^cxumb
zBPq3Bli{@Jszx#`Nq{qgx_|UVM={Zg-?vM(_DK~9uIT98pw6fZp2Ox#^y;|}k0>FD
zaJxT%;o*b#x9#CWn$PBS_6PU5+cj0yF}R*LYrYCa!?VVv8xA}fBX(!<{YL)xlv4!<
z;!f3y8n&4(q?0@*RUIc0S%8`}?8Jc_*$QD&Hf^zc-S4wbx0gWXJcQs>iYSF1_}>Y<
zMfaobC(7rLGfuCzt{4m;!`;42zkk}~ws$nNSCn=AmRKVOF-?<HI!TZTTOB_`f={ln
zFN#me)0&s8xG^K^SRoXPiW)%Lsa~GbMfCrSZ3FQ;6Q<Rc+{*nozoa{2tM}As{Xz}V
zUC4;uU@ftDfXTvhKT_24kMrS=Z4QlvIXjcsA@1+Ho54sFAn!DIs-IipvAv@nwKFtf
zz*=q@QZ&hdJG(WGRYC!mG}T1LY39hC;&a(hq_t!uJ%~4h4h#UlCr(psrbWE_LTmhs
zHZX>eHJS-{_>*68>m4rQv&X=xXum^AGEtDHID;#9=Re;aYHM;u;HSY;yh3pFHwARl
zsFlZSiapC$Ob6}H?nqwnReRQ?>q?<>5u-Dw#m5h8Rh}ty|Jf;@Xcr`GZRUxf4BH3#
z38@0#;q`Dd11aFiv{G1kz+<S#RW5H1nIot~$#x2WbfRh=FEk4q{LtNF)#Vnk#rmo+
z&I<7dm<Qw)#5D_J79dQLF)W5mi@tgAslr<7WW?xsPsbZ{)5*g$i88F19F$8+(*^;W
zI^6$}eN4iG=9HZv{~EgI1PoFYeWxgu3p~FyCQOg!1ZF3^pTY#U@Li)V3Bf6BMDJ1T
zhSnTJBTc+2Y_Q!iAlf&g=>BUr>1pn&gpui+a5R+x-1*XtTA>-R=FjXUxxh>3OhhoB
zixrt^F)eJaY1pN9M0$eh_P6>Guvs?@S&j$Q9*^>5oQ-`s_zl-ovad4f5HZ8T?l)kB
zN<gxM+o-z{vPx!@5F|8}c5T{d#Lh06PluY7robQS2h{0TJ|bh?uSFkKKyL2??_<}(
zwbxodvjSKk1U8nE)>{EX<|S|Cf{kflLG9JM;bx&4=thk?k0mKcm0sjH<>6x}Vo3E}
z=#~?q;2j1VaUAl;36BN6J(H-+9`@jXo+EGOF$}og5q<E93ioo?aafubD8m}0SgdFL
zf?}lU<4x0za9;*ZJ~Y}rCO-+Lk>R;%Au^?&M$08L5gSVZ{9>no#xULeX}7qlf}3J-
z?J^2@%*4st5BipoD?7`D465XFxac!^P-EMlG5)xj8nL%;YS|SL<1v~9Dggt5O$00o
z*76k3i2!LF{r7R5aH-fq^*d~T^4BX>9P5vf;8K_H67Jn37YY_v@!;LB*@u6+p6|z;
z0R}DaS!%8<X;RP#lWUYk&|FuyqmQVE=xH|j205w9Sw)siBYL8Y+sG$3C`nXg_C&Wy
zipQ|KraCf$Pl_nch7*%`n<6}V7DY4<H&li)nCo8mzLi2|&!sEBa{`X)9lf`+`QV(=
z=OW7;5G%^bDp}9<<>M7^T~z;l%vSgnEiy`R_IhGM$3DTKC5Ey|%WFt4quoq{F_y}J
z9pHMw4f=0E_F;M{x|SH};Vn9i`A*;A5{^I2iKT!Nawno)iHQ?y98?XH=i!4yS}aR_
zCyEGSQ8|bZ%4-Dr+S(k;AD$$gTn{~hbVy|O>wa+Gj+`Zg?0#MsB1cxN8lo~|fTUsq
z?U?MER$D$CGSr*nK`-{-v!>Xw3uqYxHFYlK+5P0sM7%KTur~ZPkB-g#p7oUjf(6&d
zR{mEqW?-d9z&f<P+F-9YEVw$HbSlTj5^&ZqQZh>?M^)k&@!cg7c`V65Zgtf~W8#f>
z|BnJXUjE4h-hMOxl{Vb8f?_?``dgleZP!LXb3*Ts0ssb0W0x512O?r_3@nu>4*sK%
zZYTM#x_d*094AOqWlU_N?tL?yjt}Q%S>&|*KKm8%Tw=GfA-dT^@bqMJz8Npm?1@&%
zACW(QR$VZ84#%eh|4W#Po%m_pjwU8vprUvzIr=<Jp}MbfKjz@0jLVES<d-uPKs)ei
z`3nxpe=S2zq=U~|;!r=&d7tI9t4*uWpfZ-)Kn_Ogu+U&fN;!lwazC7dX&F?FIk9(P
z3#y_ia*|8RhO}YhCEt^C^~?3^RU6qTY|?0UYIoUZrWy5@-|eYHj`h`x+ccRne#KWo
zmcsHd@>3vgJ^oPsS#Y|wM-kf`RQTQ&D=3Uh!muqAPvV;Pu)T-#f?@z-cz`mzyYLKE
zgvv(9U^vz0kKyRBg|iA9+IX1#Q{n`TZ;2gSUnJu6!59Kw1@)WqWAC5p(bWsqE<U#$
z54@VhknkoJh%l!G9TGiIx}GfzKrBaEuw+_=CGXW6sUbIZf6K&Ic=y@CIg-x$HX<jN
z3(uJKX>T+2Z24aAR8nSd%-1fh0;L-sVvFgrOPD0;2B$26tEu^L^^?}DjW(JgN_(P(
z)yKe?Rru|e6kausoM<W?<Na~H2sUzhh;Rkye?HN!vqE=;XrL?E<PQqnR@vEfVQMRq
z+|BFO$Y?R=x#PPegHPt=@c)sPjhj;2+YbkR1%ubHaui1+!6M9WD{k_#$AW4wI;i=|
zFKxfm-NEFa_%HtF3oHPOe5Qn3_wYe+UMUr_*v`cr-g;uNBH6aXkho({lcuPjF;c2`
z()vk!4&2Cbc`1{Za!&%X0H0SN*<Q7{B(S+&NkT;<M6M^C?v2ul#d2rpee{vspntGB
zuBDHix#>k6@iEYc3Vov33mrKuv}8&7hn-nGC;GhzF)KzJUCa~-M1_&2$B^>bKpd%I
zFwzc@R)*RjO#%E8Hlvzndk-Yl5UKh6gSOAB!Cb)3xMRZqB9o+kpVbdrX(fa69@1;f
z*6{|3F>Uvqmmu8;Jw+(=HSzG@NXT5HeBM@eG{n1`z*EFS;$NVkmve05p+Ls9nk&|m
zySfUAJ6Q%ID8V$94xvQMbQ5WGFp0XdO7+;KRMe{|)GSi4%`b5+uP<yyrJa5B|0OQr
zuk`2PbXq*FZ&Ch~dfH>;_qDI^%2`?Z3EF{jE=XZuGn^Q?QHwCO;}sVBx{*sR3i?%}
zcRkQS;6;%9N^%cP_!KH-AXWzy)%0AN0ohKrpnAgFA8)yf9N+F|8l=v^pyOr71HYkx
zW>GMfl;bBgmH%cYMa@_*V7E-|nfeRABgl-Wt6jyM%?P`|a-kfHQfE8&<l=9&ws<M0
zu2uLMG<KP^_?m1+HPc%>EkwXyhj?+OzB%&5ju|+3JH~qJ7=1gyt6f(k&RZ9hHc58f
z--4XW>~khD8BgvJ19wZbISjylU#lBarZs7b&wp_12boqfr9)gZZ=j)+VK>+t*<Mk=
z&TPk9Y}2_4$io~&6iKiq$lTwjFRp4s#~E4he_X;{QAbk8M^CzlG<2Vyv~NPW<ySQ&
z8p&r=RmD(P2<J6Rc0KGamvcf`FkQD)*Z`H)8mo>8G1Gm*26=*TV`w!<;iB1TQx3_G
z1jH!}I78b<-F9LGz)Rile}|!o6z;Wip=>zsKUFs?W4M0O<DLKiusOT>A~woFb<P2o
z@p_F9?{RPmF#{TH3T(KFL>AY7a9%Z0#T%W$XCHsJ0tnFz9ABSg{MEn7sgeSPqkYu8
z?k1XbUi`X=OpeR+UJJGC%!A#kf*3&T!R4$UuPJflcZ?SXl!0^kOTw?dnK{B~00JTu
zk|cXG68faBT045RnCf?xI&}f*^umTo&<H@uX9r?W;e(;Fw@A+npTFURrz7EA_3rQ?
zZPL5oktC`d%qTnza^A;e;uKkwmw%et^2IbNM@;mxuQ_BlpAHt6QEqH2HB3X}QBIKo
z+)7osgF)!-3W=?onIQf={|%Z;G}LmP_A3;R2ki>`l*S2Uq(J6maF01a2#w(w-NQ`~
zOC(gWwZ=^aH(~uHe=K7{761Gsb?sYCbt`v*=XLb3uF*p+yJ{H;X+TKt+`g1KM#WOG
z$yY(7(IGWpV{=gX{>^na?<3|%odw=|JdLlIogLQ4LNV2Scc%<z9YsPzF;)F!l!rrm
zlx_0&#!Bvj`~XmzY5oaDYtN=ocPZ_9($_zwiJIq>9(?%W{MN<>mHN8qHl^gy0?yzu
zyF0QP9f>e9pu<Fxafi-pm{5bZF~d|x<VzI8aoCLwzdK7P2Q`O~-r5=(mv21CXLtIy
ztDFkIV6tn4&H&)ZDPSLbjKknA?BB*4b8hUB<_MD~>UcJAzL!sgmGS5DoFv7W%M`{~
z2q8TJ+QtiQD6$hdg!<UL_&=3X<l}FjmJ*EcP!+&B@)HSt?W!Ep?3a9xKO9@vl5JpK
z66v(vrDr-$7ec%A)#m;_x|-{{2RKra$&xqJ6{p%JD~|HA85S8SWmPRe78!6HR)%C~
z7V)+#5(_5u<S|n0%rU6(UqJUP8^98iJ12Gq(jsDHRd71xh<pX4&xR^#OfuCkRV$4H
zd_`bQMmMESfZMfpE9jZd{@icWF@{`(p}I+(E-7Pv`78IOXSTtwj{_>wL*4b@O5F&p
z4wdhy(2bhM_>(^K|F;Sj0|K1&LnP)py5v}yLz_3$9_~w7B98tA1}!h}P+mkq^@R|Y
zhQJ8!n&#e+r(<6d-5seco@hrGs%Y?p*9i(cK+CXn_SOugq}C{1uCBEBrudL;EuA9#
zlUk|-N~>(tg_QCa9+l7fv*iv@BZP)Ax6W)hIv%Mb!EzbR?(b^4B6Lu5z>pz2s(GJr
zra_@2MxVYEB-8(~D(MzJ94YRzEIBMt7fkY$K!9YD&2x3mZ6o#Wj#c(W1gqRRbF_o(
z58_<5Cm2*~1{oNL<GJyDd-t&EI9kT=1Zfi}JtY!S;W7nLe6*&|vkK7Ke*ANF`yxly
zv<w@1qFf6yJKKSH*|Muz?qCvnjMWkf)mTToJbq_#QB;$%mCy`PkRezqp9@QOIlX4$
zEuS5;B&9OFZu~y?k6KXM?r8+s3ZFd@)B~ShgO*v^$AlHVw=7j&!tutQO@&|qiMB<-
zw<?!AEW}#GCI3VEr{4b;?8!znA0DbO{fT{O$sHR{|FnjNrQ3b@8R9jP8sx%^negqS
zDWrGyOl3R{vFbXS_X^?PnfY#wRb>0__Kv5!l@pE5fB>JzI2ukEhr+|J5l^G~%<Dm$
zYy}6AO^u1Tf~@rh!QD#SC#=>EqOux?2~Sg<bH*vwY-33+%$NSWC<TPaQRl&TZWS-r
zzK@((EobA-s1?NBoY3JEbCItJq%j|OPt176G3IUGl69(D;<{0Sze{7mV-W6Ya1L)n
z3*W%BjQR8Q@4xP`O}*KrOi-A#f$qVuAg!h@F4Eu0Y@mYtUN~WTXNmEW=+ZqiG0+4U
zFdb)6iJ)t!hjNBN?~z<>aBRfGfOH>p`DwXOVGlU5jP^`&7}d;#NI4J8Ry1)ew<|=U
zw?w$z7}n8p0q}bY_H#_c7(}w9xNhIlRVIWij8G3Y>n`FZb$LAgUKV<`ja7&Sdt(Fj
z-*xpQo%`VoY}5P$$oKFGS6zlkmTmsm5UT5kL>Ru9)*~_tSfeMK#wX$nUTDMgk(n|%
zJXT>d{CO*=4}jqM>GzbZts)$;TtV8()=)Urh5%7M)eUluHPP~}*JklDC|GA{y~x?V
zA!BYY2d%?=AD$jQ=X<}nW7R6~*&EdXh7k7%&WXveHeld!zF4xY719AP+Jim^jD`2_
z{w}KSd23*cS{_y7Jo$_0mY|XfG^s1E1~U2A|Cx?}X&!-mpqZi?s&u31d{Wk+@>&5t
zNZuS6hZ6XaknujZ7lw85?@>msU#lD_L6oxZYlC`QYl=bAzu4%y`x&l*88%~KZKDnL
z8<EC*&jWn3m&|6cgr25P#)Xb#;FGN`XI@3l=-Ld+XRA4HiQM;HuA6~8jX-$7r7`bR
zhmB`|vn95%95;&x(^3GghhAnd?knV8+zoVjd1Us(aK}5lv7XztC9w5`V2vs6^<bCU
zS?5FRxiAJtC+dIO5C@Oj2T<20Jf86`3wpAvx7Wq@kcEbzh}io-zvazTI-HkopOCrV
zRs#+pkRvWN=1IAJki#H;s=N>oFW+z9EVOlLqZ!!V{H^92a%R+()5m_=5~Lg4?hXdP
zV5=xwX4U1TO^=sH!C)2sWpE4>0`%QLFJxmpXC*mu$rwR*Op%6L|JbM8Jx2lYe46u2
zlV`AF)c;`uGFEj2BQ|66K$aJyr!ox?epi#VT&U}1te=RBv<xQgw`NI^HY(4lR#%iA
zkL+x?JBAJskc3sfULk~RF>GNPf1rl{R2$Yl5nJ@SOJVgOiseIaNZ_*3P1cH*MIToR
zo+r#wjf{GVT@dX@w2?k2%36j|4=Rih7LV&3)2<b@XSzafdG92t$?$VbXA>9HCUI=#
zGcAHiyC|WyTOG<UD!!=oVHsbHxyb#}`h$#~XTBOQ7$1l$t-Vvy7{xK45Gnd>0f+V%
zlvB>AdcsXHHN1zg&X%G{0m|$O&=3e0VDBBUqs6C8;|ugmDi}<TV>QHB8*vp;xmDn)
zb$YAp17B+Vqn>-aZ^%c)w=sJ^h!`@}5sIfX@4O-oPHa&5gelrhh1{Cg{L97uW<-=Y
z(kIf5h-WsUzI>?ZZ7R>t13xpdwc^azoEU>C!7J33jB5M?EMK|C$oR>fD(;Tq6*-vU
za}yzf)1qXE!rj~-isET1*>Ls(RWvB9p;9nhfo;R7<POC0m<Aiy6-#48q9JhpmHxA8
z7+Nj8x6udySU8NPt|XW|`a@}ndlK~*9*3PKE11?G`-AHTTaa+*Bt?X|<8$MdT)&<<
ztu%{D2Y*BqbI}8?qb^zJN3KTB#`J-zZ|?6(oNLw7!8du6(4dUcfe)8F;6Pu6)#vWn
zjL_x|$Qi`@@e}^@LiRZhu{w2_J#53h<a1#XED=7#8`1)ytOJg33#QJZuO3Uka?qqw
z+)^1v0L*1(Sn#7HFO-@X>wP5Ck${3Pb{)W8-QK2pR5^Q)kF72!iWd(6qXC>2H}1w%
zZF1McwP@dv+oIBxvb%N2;I}qxi<z+>ius(~)yUak*z&!x$x_5~kI_PDk+GzArV-tr
zREMXs?Y$%qnQc)iy#QTaqK2L87?}V=BeCg0Fb59Rsw@(xMjd`0*AQ__0wls*nAq^v
zop!L{uC|*2<L*{(E`t^_sr%YvBb@TYr+Pvw)jaC;yZ_{YIkfp%c?k*w-!{;ocJ1?X
z869)!rdQL5Q47Qw_k<Hv$#Ep#Y#se>uOvCnCaiN&Yf@Q9V0V(eIeN9RRp33A7zL?2
z;|*gG%Tr0OFoNVUw8=+ZwcIc#5Sy;e`u?%RLhk>Yp!Xi=RA&0}T7XT`-i|lwSZ*gO
z%(Axo>R4v|dptu{h=BW^X^dm=DOBnY8VuJRx9Vm?`HEcXbjlU7&d>-V9+I~~_?=;E
znCAM44O!<hOaC>;HxH9$%91JSfj@y}yLk_H?{bNSQ_5fTPir(Xs(ZXHvG*KKv8=O2
z7pMOOIKt(G?O1obOiy(^b|Fb#-Zvu7&$Z6FJGzBKKU&$uMk!JsQ{ag&jGV-{U2m9t
z2s+|3?0)m9XpAN;ajU*m=@|}rF+buphx-b!;u;kR#g;H@GfOU88!`qctt!UDp~!rc
zQM?T?o^;X8YVc$BQj6-=R&WF|%vt%oZqvTes-E^&B}!+v-tB#pW+clKGHf+>tv#l4
zj6~RS4i5=rN@H@yZ<YMCCshF$us@Oj4JG3EvL8IpLiz$_VQ^U?lW>Gcq>mp>SPU7<
zn!0hZN?21(7aFkX+d|+H^rD;zDGO><GB#Lq!axNPVc{{sQ&5;@y6Z=tjWZflO8xMC
zY>X;f3?2vb^Z{7rZfRi7OKTAp)q4d17pnc4lpR@$HL5@yebV8%kQoA&pIu&pK8Go5
zxVyA@2|n#C@}0ug7~AQXy`A`dSlH3ZXKOW8*!)yKX>{-HHJt$>-z(#6nNyv{<}2~S
zaoW@G9b8Dx@LVnMwII2tXrm~3wb5V150;f-lW58I2Vj)Z+FKkL@N8dHz64-nU>8NY
zqU|$tCt{vzs`JwM^(c@1{<o6V%>ZPIV0{M;MB~hm)m2@ncKV~=KL@s4{Fr0kF=|Sx
z$}Lx=;|#E4NsI|7sc2fc7He6~OaE*yT3+X2$>uw=2?a7$pd&b}FMS_FaUajpjK6!b
zrUh>n<sc3XUIH+a?eQ7~=HpL<1aT#MZvxVf{dFb0B(pl1H`$ST(To_=+?9M2K+Evf
z+|UW{QVmR!R#y_d8yu`jMp2O(%?7$eD;>YS4lrIba{btyI|GW{CD;@F@h2`kVe0E0
zdz=0Bu4(`JS>oGWfr3y#R=sj+GJ+VYoU4a++o72#VG;I*1wRBdiU1rQT(z-^t3?L$
z<W1dIFWnWeGp{MsDt%UZ2_Q<p%-jnhlQ$a`Bhja=Dt|8d^e${1JnqgU@5R0-caVGU
zOj1SF$LKH*w)$)_#&o5BF}^CeG;Ou#yYZ7vF^`hJWAYM}Z(bUGE+5LXA)YM8lGlMq
zQBJb`#@Z*~JY2uSPAu67MthGLf@%JU1$j+Yp&t0v?yKU&iXSWI4V4D1#CKTR+^^iZ
z2C_juCjvUET>sMmGc>+Ho(`5w<ET7ZFacbEO~J&7`znH<qP&dA>N5+*IE_m*E5o52
z!L=2;3)~*6Rqc3ds(2J@0UR%%gjtFWT-TG=*a{tIgpb8J7?<O8bKFsx72J<DRo#C%
z02GrhI*;nGH`e^nBK~onEbPW)soh<UEo-i)nUsXPy23C5ltv_N&$S=W<h6vwT$CA(
zyq<CC$%fGKK5fD!hGe83=PnJFOPG^P%u!dU-<E#<hwwgQF3KSi(OXWKt{UBJLpJdj
z79fGv?T1lw_kiWcmP#H#If%3v0IomZ)T0!(?bO`N0VoPR!sRF^+=C!eIr0BAAfGL)
zH-ZQQ7I#S}I4Ah9Bb>Nqq%sdn3`|WI7_;#+9P+jgKvS71eL6KNA>el;WK}<9Adls7
z3uyFS)Y#kONfENPHF>X4ryulG^i)`pYa$iKn17h*InO&c)flJ?AG{G^z6kK=4@xTH
zN-hi{8vU7RJndTWvLQ}U5aQoUny*YUoW!s6-exsk7i*_J=ydS;Wqszqf+||4*sRQq
z?Hp?as4FZ;EF%bigR<`xfo2&G8)+=+hKB0kaMy<5sX?GBF9z3%YY?gTu{XEpr?vT9
zli8GysITLhsi{Z3+Oo*f<}VSfZ|4@CVLD}oxzR?DUlsP1wX@+)*QN88%u$ljsVoxa
zaz)FwXes4jE8%5lzD0YVaW281>0G$}-51jHX@f+I6=#}OLMW#1p0~G>DbTL2)-e`P
zVh!s{hY}aTgf(&Bqo1mcUqT$V6$}=_6d>v=nby$YFv+m=SJJ9vAq1T*=4Y%`Uxkdy
z8V9DFVhub)$R?%-SAEmi=iim$Uz{Agz1e@n#&b<&5Y%&Z>%6IMz8!*>%XkaHpQqMR
zUinWTp2V>$Cppl`M_6W)j+V%n&wIz}t73gXJXkj0bvoxJrAo}sC3SbEp!5cu_fEYg
zxa+Yr|3!I(JXu;RSeyZ{`{XtH08~_Mf?eK#NWD$=dMM~>kF9b*2|a6#BQkscl_=`E
zwyn&f2|0O81n)l8gx+T)n_XlP{lAm!LZvHtL~W15d<NefKln4u4N}TKNgB{RWSfvv
zR;sLyVaa|H(>i|}JQ%wtNlYzXzP%1}a`QtSnOdU_;85KQ)U81;)uGKBp6V<u$Pqxo
z2se?6Z&ISmpSy^+JO&LPPbSDeF^&Im#_xIVD!)A_sf4!?J>kh=a@F44qm*^pkucHi
zI~~<bOFt;$<b9djhuH3!{a$0x!0~-~_Ut*hZheE{GxqJ}P7xpnPub?*=U@$LQeBK|
zy;$HDV-V%#gTa}-yOD=Gn7x$7r+47Rt`^P34mp2BJ3|I@NIM;<Pk19v2e+KNl%m;8
z{EY5g!u8L8E4fWdV;%vo?<!E{1`TqBD>Gmt+z27k^G}aeNN-06dn#fZ6^a?0E|E=T
zm++6mOB)649z3r1P!XI(2DW$=&|2+LJbROd)!E90I4@EXK4aOP!uubGcahw_G7_2C
zasE~F5h{edV>@=Znz!Ni1bWivBoVAKMFTP{vX-ZR-0S)~qU7<P4PHc@qN@Cufit4a
zsq+=C(_XetZOcd{&XrZs{74tRow-u~_kSa-<W8FZ_hLg9Q+yAir9#4CgEm`(uS4cO
zj7|3A5P}E|YpBSX0C>B}VtOGMaL0SIB@F&*{{r;MO3T&TB98?X4YK0-W3_D6tns!F
zEPg7HjF6$^vGQhc56bMQi~amyvKTK&Kebl8MSs1@{H-_>hsQq4R5U9v_9f7<Zr4Ym
z;0dB6efvuzGV34ZlQfweP_aewBh}Yc=G4A$2+j2*FiB|AC3x!<d2AcsVArUYuiqG>
ztiS*U?%Z<VZ0F;X1bs=Kri%o!O9!e|qiDE(6~5<R>SDqb3NP^C6CE8AqZu|jJ-i&>
z$_J5q{KIuBuPJI1tl$2Jm$+)Jr{I2vy=9#_r!-5QQ`pUil8dTjj|&{8zKI|C+Hw=k
zG{hA=1i$7X5tlN<QpA*iR%B1&ER1)(^j_OCa<(=<h?U^UOP2sTnW#ywwpf}d6|sE&
z7Of$J)=8b1Gx=V3tMNOmyV_bkh-1y@icxj@DCqDcC6A}S$8#NOESPhVyJBkQN*Ep7
zVgB!w5*|La6x<~qo7PKY$M(ejv2M3YctdpMU)B#&@2SlG-sAe0OjBo1t!y+GYbk|;
z8k^aaTM9~Z-gJC=`fDVs+bS@q`GK<e-R{^oN&pO7Ri1U%Zgr3^8z2GYj;@{Rr65Y$
zNgqM34m!ZCy}-Gp=UzHXX6b`}axZ}wWh}^RG<PG)lNX6a)R2(8E+x>ljF~H#M*22p
zrrlj(%D^^FW@iw89Q?doD0VvZAQWN3t^JjN+L%Z(2F*Go{akf>0XT3vB_X_+Nk8v6
z5I)9T9Sea5_Un7(jrYoN1G|Xewz#g1K%>?IVlx}j6$fdjRf+xsLt>=I^b|399MSCq
zfyO89)YEVtaH7WTocfyJ3Te(ldKh=v$q!hH%hReVZ8?U@Aiq;OZPDqsH<dle4`3=W
zDA+7|E;jaw=M_wG;xR})MuEobjv8$fAdVj(lDWT#;GdRu9?HK@VZ2YAe4>e+&4-ss
zg+G^7+dgtiRA-7;n&B_$s@i>k<hyk-86ty+sDVuD#T3<>IHtxZT##dsf=mgu*AiSU
z86_uC=>DhqJCw{&I1S~6z%jkF1qiR)5?$EaiMd!MOhVWvRT1|88)7cs(4)dOUw&EO
z`w=vZ<=V1?-1ubbQ$*RUE?HDuc(PjIF}M(*-z$V9-i|R2w|wCu!yXX-z-kgi@iI}U
zR3tbatKY<A#Y!J=j91;Dn*%GV@m?sln)TdwPup7~Zlz_Ai5o74qZ8Z5j2YK{a>}M^
zT!H_o&EvW$NYsx_+SgjhU|?ffRsRvWDmClG*R;T@B^$*4;OW&%W4rB|leo((7PBzr
z2vt7$jDo=;Sr%SEsa!Ewjfz}R<MfNA5qKo)k`qw|d5fOr+CcuqQ~n!cPes5~QBn)0
z4%j~`k@SKa@JP`|{HO^+uSwYHUMK{9F6gcc6A#WEJV;=P`QI;(VbpC|j@Kv#(-rpz
zDjOSwD#s3n%(nZ*+61lZ@|(arXmPtY<J_>t9bhnVP;IQph$C_E|ND8$n2@T6{_itj
zq#}`@bTxEjzDsP)0eFMd8ev#BJsj+R&Q2kSPz3&-G)Upa+=g9;j)E?Oml1xqryGbV
z-k9szO5Mop-!{w0>aVdirwACDc3^TVTbI%K{KA~dAQ$mR=M62bXTNH7R<deRV{)N2
z`&1L8dSfF>rLMf4b9adZej{ZAP}>bm5F|Pj5zyPEdb_*;O`c6VM*EIrn)TlSf$fDw
zUo|Qg>r8N>ErTtbUrMeA!`XPJkFwva*FXDDWJ+Gz$8j*xmc$Jhv-?eGta`gsifVj&
zulCs0RX|%{5=TKx9zO(_WKL<K)Le7_$ml2|>@2X|hpOr_m5eGh0Gm=2xc=vW^4Gc`
zY}*a{v*NtDoZELK%ZbDhepeYkpPkuy=dAfjjJj!2U8Wt6iytE7@V|MtCm~Mz6J4Vx
zg%xY<22k3!e%<dg(_aC5=<S>fKrNg@d~ms4fA`22&<;h;nCI&O%gNWLJ*xw9S$Bqs
zWK*jnSJzY^BlngI{wbaxoU5Tt>LSDlhs5`l0LK%AP_H&H&V26V7xxsA2lCU;IO9OU
zToyzQXzJqs73XeQ6>PnOh7ob9%3$Or7}3Prss<P7e8jmPdgzFD6JtO`8@wrY#|ZuR
zp)0-pB|za1S-&h)68n)F?;2=elLHm^&-FW3_qBe|hLH)gKCO~v1<8P#NLJAvlBL@o
z2V;Bn(WI_ksdPa;CTbwOiLaA8_^2*cMjg5)Y7(_U&siJGK@(-oMLrr$s3Z`bh?fQM
zr5z>A#f!OFJPYE0<T8<Tepqejj{zX4vhj5}cMgt{-)5J0IEW5gTYwlPgT0Wve?Jt}
z@_k&C%6BIg`N{fyxVGy^LSuk*BsFqe3FaRuzbt@ru}S<6!QO|rW?&^nNb(x7HYL~q
z8MZL2c%cOWT~6K$$2O`0ifZ9A(kH8bTMWQ=eYkqm)oUov0kch|i3o34NWc|%#2>tA
zzgC#wG{N_es9XNfsCTI<$xazAZF4-K?I_Mf$Tr59kZG7>kw1jhw1Ta0L9{c}z;1qb
z9vl>8g^M0N0|>OP^QrBd>o$5DCy68mKCUoGg9wR$Ur=q4{sp06N-A&_svqdr<rrk=
zj#8#gZcWF<DFJCYx-5W`A54^>VVzKH&XxXBrzR<)h`x2Ga(7WqXmu6qB?Hp&cRb*C
z6Tzy^=~h!{cXZBck95O|E!kg&qF0=jW;y5AEp;LdmWZY+hTFmadiGG-PAft_p35|;
zi6SRXo8m0`!+jiT2BsHuv5OcZJM}SFIB}53A#FUsHvKfTqFiE4zIZMxv6VZ1D*lc*
z*=27s%0U>U2ys#F4T#^=a8l{SLAv`HEgGzCFUe3K5L2%LmX9wxy*R;~;;=a1PK+l3
za1$R+)k8;L1^MjB!ln|u*&xP?Fk>17Zf$lVCfsm-3_i`k=}qTpadt`u%BNuRjl&-p
znA~UDgE55*5N9O4KsYbp0yHTK6L-VU1wJv4KUQt&C%l>wi{w~>%8Ks;FiDyMasO#S
zTuo_=`aVol%Gtv<|A(0MSLIxn0)K!YbGU6vF4<+Chc)~NF9L^8deq`FEbFs{bk*KF
zEnkD)c0ozEDnNK~`y3dgdrEOMJK>mq+{N<hQB1^DAC(6cfD;USA#=VuD3md>X2+ZO
z3*Vm`my0aeyp-UZPlzEA$DgBv`HJhnOH#f&3`h2APWbY$FYX+eeQlt1yJanF82-DZ
zu%5=ZtEj7P5_e19vwc{TtBG(?n%SnA`{|uufkJCDmTF7?I>z_<OcEXTte(mjj*2R6
ztAn!^%1buq&WF-oxAY*RN&WXxJ{N(3Lj-4ltWte*D_JiG6JiA)<yR~ea7cW0!szH~
z9?=4H3VcvWMw~z8NGCZ|5ZXw8=Wbe)30>9-{3<C|96NqEQ&Zv<=Cfe=sMdH2*rpeA
zP`h>mq?y&jV=?F_FmpHdTBd5U!;bxTu7h`9RiXh4Cd#bxh@<a%Zl}un4PX|8YLUy0
zVYRSQ$~%_*2+j8}_AP!#Usk($R61s0UeA&aIUj<_Q(c*DydHz!L#Z_{X1o!0F11Na
z_@4yGR3gfj%K#_S4;~Pv^%i``8qFD^<sQ?bG&$fv*5!_jO_p0VxTnLBI4nb~V(4d^
zt^5@zIN6ffKTPUyW|9;iN3a?`Qa3>u{#X^16$JiUp<x=RQ}+WA-qXK<snxox{oe}4
z)3`HO?W;lASTB_eOpn(HB3jV2NlN@D)tye`%lUIo*`uE8QuAjDe9FMdPKYZqp#Vlc
zO#EuCnWEM@j?|EiZXrSjBGZvO*nGV?G$*1zJW@!0t%XM!5iL(2rvQ(U$a=n176=fw
z0O3cR!d4tmaV+7&Fcf<1=rfyoP8Rv8=A7e>RPnX!<^W}`J6{=Ek*P#MAQvF-=V^b?
zZmbm3VXCY?Ohb*RM;I7h5%eQx=jwYt?XVQ1b$_hU?fn4~oQ<~PwnR90iYcTV%ytxx
z4j_A;5Rb)<8Mo09ZKauH0K!<HKh7K!Nr}jk+D;b}!ozw9&br+guqQ(kHzNx%i}FuM
zY97*@bozhpwX6Hd<}IPwZlE1VYSt|BCs>npk_g!i(P;NDYxz1FJ=O*RJ?{f!Zw;hV
zs*iHrBB-ppU9~Mhz^xz~2Zf%P#PA*r_eDu2)xx<2f&caJ0R|4l6Xm2#qJ_gu3hs)?
zGMbAvoh=iC>k8b&7<~{BR!f#Ch`V=P{t7jq<dRz5P!ql1a~%BpyjhH#Frt#ls(3uC
z;5Yc@nRsEg_J^N<WzJHkJdajRHgrqZEV-T0EPq)eeUfyLppDJ&I@Xs>+cgP2Cj`~l
zs8|s*FzNnG69PMv(q@SF-=)`t^@vmdj>&?vcDWN|VjEP}^sx2!u%Ec<VJhwZbqS~q
z3JZUe!CYFDZ`mLcQGrm^%3caO6JTX8;#$CjZPQa+^r|T90On`VAMPEz_s>Y{nXUjw
zK)AmeYez#gBj!9Po%0k27mA$^kub&Vl~Qc^2Bg2hbG|d=Xh9_7kX)Q&c>gS{>Pmp-
z(P3ff^_Yg9Op+*|odr7>X_kS5;#@z}X2Z`TpU(GFZx@X+Picn~2Tjvu-3i?dw%<Ap
z?^;gDzTRY|MOMc1th7Ldyc_i=O%y=-Ga1{ze*x@TRaP=hx8O@NFa!XifGnp*sFo8O
zjk2bI$aqSRqyFAe?UIt}Hm_daNu^;#2taw4ZuvC*q;)rp@LVO1vK%`6{1haVEz0Q*
zQ6{X-D){{sGujkEk697B-5&|YbkeKU72QfAUvI=>kq6ubCThNw%^)7n^d^_^%5>_Q
z5cULAF?gaD`U%s7W~fm4nyduM=XMI}Sj5=h07st^TOF8B(|!yj6jGIa#S3{DG1`EU
z=Z|A{-fvPW&%mT1b5Ch7n}2qT#`p*n_X>D5jz6hijtn71(xGZl>mZdM8-o11P(!nu
z-Ep^ZIzd{HnBN;j38gBj&!|&)gE^(_VEoU<3c3cd1#H*}i@u)8M3xM>%pj&5?>sfm
zD^av8;w*OIF7o4q<0Fo9pVK<jTRO{5&ZE5RTxFWwKBLL*E^hI=whBthV=Ndd_wR%X
zyxqJnPiBxuMvN4g_(u)2h>8|;Px&X~im+I3mzU<<^vZ57cEy58*U=TKn<EWwuo8S9
z-_fcbh#-Eq;k3Wss1uIy6f)Sm3x0vW?C`#Sf$`S*2`zTOflbt-KPd~D8!fD2y#bW9
zWS99Nw$RDo{>*6cD}^->W`iRaI1#e#*AOC^ot{JC9)c2M1H5T>Lp&6pWMYi~cgxZr
zkN|JWCD8h??Xcqtr0v!<Iv$VeO(3HHjK;O<t_h1frNN!|TZKqy6UCN1nd78Sd<k&c
zR6|9-hDap}+eDJ!h2Z}LRm62|=!RS5?TybB_&0Aj)uw)?^$M#xcxSFcI>T;#58S&D
zFLXN29E#7<edKq84pFY;XscV0o|kAw+j@x0XSh4g#4+&o4c#fEMNmS4klZL+a)AYO
zPs%vF-8-+JpN@>VF7=O^o=Zh+oaE8JBY!y=;$^3gXZ~p@G*Cw<zY;E)Ye{7v&|86!
z6e~!J&`8P^b{MI7{4+A8gS+S0YsF)L4gXD*enHw;RKZ!*?_=p!WJsN--lJh-qDm{j
z-I9_~Y!dbV`BC8054g;c&jm@3BP)$P*~1^QTK6UC`OY0WkZRS34SYGfWi2O?TW5Lt
zkFSTM@fJ_#aMUhyxy5$*)413Ju7<<<?D8}&>e96ZQ@@(&!ZD;C2b^3CfodMS${C1J
ztRpiqqedD?OSCZ*6GWZVHtO7*PEF2AHiErRV-2}-!SghLd~Pr-&O+v)-#@j{hw65*
zQltEj<SE9ppLcE3BM0POjO=&(RT;N&@SxZ8L1meOwZOlMDKaHz10(Yi+vHxTAa$#@
ze2hwj$e6LId-iewcp#mCv3~M9cAJCzzPm$>@~*VTC)5~O>Z<X*R#Y4DX_|3$jfY#q
zjl^F_ugB&@$7>@@;+8!Z^qk|u>nt=O0aLY?820`b%*cYRTQ}N(6`Hg2)2NBCClo0D
zU3HR}!&-=#IKcIoA-mF$fxIZ_leOtI9dfu3dAG!@Q;x|N2gbwY7~i1l4lRJ;YIZxp
z?v;l<$yIzuGX5_J`gZ`>Rb#aOu0V1M^4(#KlbVYk`Yh-vT7a=A_O5B(^2ZEBgAd`@
z0r3RD8HY!SV$2Q1gM7<Fl7q^VI42yv2^l~7?$&;6P2!3foK`u9j`|d1oTD~bhn*lX
z!*5F#eEtX0e-Ub8<Qaj8GFI=3D2i4^C0i%QKv0b!o%N&U$y~N*K%Pg85%znL^1DBY
zY{0}!ptixI$hn1?_eeVkb`Fde=ub!mt{0U>iN!+)Q_%|h^tpT1u0vFJ4+QaSn?fef
z{*|%$ZNlVLSH<xNcPv%U-ZH%CSwoyZioIN7vob?o75K5d{e&OWT$*f3O$U6n3lrnA
zKRWHzjG5D-Elsfcm4jw3yy-EEY4!VAN*&1qrR_MHpDh~QDlx<mlD;pGukrq%vVJuv
zC0MqHnoL@s6&IQAV?hQ5wQGFxvP_w(;u-ulVhDv;DT}0mj`bq6BjZIbd(89HaL42$
zV${a;-g!|{FTD!_+nyn|rolJehXWRNK6Vhw(<kt)k~qqz0h^}!hLU9;EoxXxnN$_U
z7wxod$k}_Xp&T_W%$Hb`Rb>AB@w-0|(Vjc`7u(2@-M`G<CV^^v@IS`@GprsG^N*4X
zA5_+}0Z&{!vR0okCXk?DD|M(;Q0hKwFe7OjbKh#;>MZQ)qOMB1;htG+lpOF|7{`<3
z)xjA~K`tw7bRv3`5`od5OncvwD)6$H`k7Ud^KECoR7TTyqtHeevA|M#vV&ESft`N7
zxeD^0TkSK$V1ZRym3)ZWcRy5y3W7uO&+n5U15T%lTYh%Sd!{H*SDry6@;BS6h>sDw
zqyYa-jGcb+6M(6N|50hsa;bxFsIo(Nr3j}-b>Z3shF#zE<8$1gkPm}cBADd8VL_B5
zhl2TI-WlG-69V=@ZO@Ibd9IG7-M2K%YVn6s0__+`wZk*dilUZkh)^3{V62rYI3^w7
zZMiVSC=B3T7f213?^6+3wYAYV>f<d-0<ZiPij5FsCe5Lmxvn}p4(Niq2L2K4;2W&_
zt_iw=OJ15JIl*|&{o<4c2Q2>;@m2t4C9u96Qw`TnY>Y#tOOsHcDcT&*V&iL`*7sVZ
z#ucO3FbJbw1$2|*J-%fD^A-6hml1hpu&vGsVz@;&<d~-E%yTQASz}u-;NM$<N%RN0
z8BBES;Xhe33l7XU?xx`6DD=0Xl%pR0DfZ<aF%?Xv%L#{8@kt^L{;U)Sgmz>wIX>JC
zA5wmulF>!<$-T=Oei)D*6vFXG3F&1`_Z5Zz>sN7>69-7)zW0*%m#V1`f_2KF>#43x
zzGVu{Ct%CwhpN-I?nBFGfTSSO%yBp7Gs+8n#<2@vF>D#&BBP~mVHD~=2kMJ9f#UB+
zbA&Fv;;b9L5FiSh{|GZ=Q-#Ako{guCP(EmkQWhM*u;7L(bX#UH|B!cEdjOav?SXo}
zp+<Lf+up!k<e-lZ8yJy1tHX(eXw~C-TK0gcXLpVp#TCiNS#^&cGCrLl;Hn3cGIEek
z(CU(8C0M0|%;f;X=m3=ob9)kT=@=yUz>qtwaI)vrbBd(p<1@JFfm?qKNWo_U7OAza
zP*fX?tV!`B76rcq^;?$HOQ6;XgnrQYvH@$%rk0IgY*DzX;mXL3&hDUDO8wwqa2S<y
z7SQ~TL6@<OW&G#u1(y?9zdO7+34dD$iSM1G|6&Wo^^T0PQ7I_!qp14L<^9^3|2rG_
zMCf@tki?h~2CDtw7c_ULclDMFlkeb8R!CJQ<8Q(-Pa|Fw>IUnT9pUIxdiPfJ+plbL
zoj6V9jM;o~s}%!I)Q2d{&YUe>VzQHj{k_iIu$eC0;AHTHmVT%;+2X>=1#?+3eCr$o
z8htw=*5p)XgTQNB3o-A(te6ilxx{nISoKdyg7_|JPyhJ=*C+c8mG=93T>2NzVefO;
z5~7i&Tm(N+s!zX%P+y3BA2fSdLovte3b?CCk<s<9J-+WMKr{`dfZX}+qIivo#aJ2S
zZajN?CIdmiIjR23i;{0}0K%>IxRe!%zwFs5M;QnQjRPM@B^FiQBg-ZN>{5BiNf26k
z77H0tmx$*y5_rC!*kFNl8c|@nd+;&7h?U^yI(8`+DvTiRdAt$a5!~>~(A-~~^^Zo_
zi(7A$&5reZn45@6Y!8o<iO7l~0e^oBR30@v9GU$()uOYf(GLT>)o#Y6*Im#>;31g$
z#2D12lyuw9o?#;@t<@M;Qveg|^I4#LdcUSkRQ!hF^3V@YJJCqwfyU1S{%o@7mUe}h
z=_O;65_v#k(@CsPyt|u><Vr91FAKGNva-;v2#Z)5#<m9#E7&#)#SkgaryQN<5_{SH
zhxvz(^-$nA(AYMWGR~0R>7(%jzl1qlslZ2kv@>t;O%?~4ifjEMx{L;@=uwY#-4y1R
zNz{bH_3Aq8*&pXkAn)@P9cF7_B5=HPTpr0<GF<;wKtTY+K4ly>lV!=>f^nWZ=69c9
zY%i2LjZfzs!W>d7U2l!k%f${CW|m=e=tHW?dLK(o0|C$KSeXp!3B1@L++d#bHh8`}
zqaOHHv|2^tY)UUqxFAM5e@%Ghk=ifD!Oe(ez*yZ6_M@^Bu^fYUkP-$BT~5Suk90gd
zn?4HO>j(MfBHe^7Ik1AWekSkSD#~c8jazqlm+p=J**#YNo@jR;k)r!QWMJfp(`@`(
zP3sh31%nuMh4NG)nBhC(7fmyYdf<d^WGR_%(1d@+4DU1(u?6uvOy16?w+G(Pn;?xj
zuXP?aHWpJd37x-8D%jWUtU?a^W`-*Ds*@${&Mc1u2O)uif_n$$KBdn)Wx~Dt<Q)n0
zhNdEjiWQYfYaxJZbRp$raX-W?HwG6*R?0Wi_YpCi`D8=YutHHVTO(gA!;}=Rmh|E=
zQyOzs$Vn|ZM#hP)qZ3>D(Qj$r?K=pzT6+byL*Cqkl~K5P+9>V|6Yvyqk#tW>X8s&$
zWp~@4$IuR29SVpzW5rt@i(1$R{aNnIq_UgzT%e`2Lr>`GyzD@dl_bMqFHBM+AyRPp
zqeTM5T|(nS@h~9U`dYS6G$i$${li-ct<&3E8HczXOM0?$Bj0kEj{9*X92V2-p>8-l
z^1C|(+906&8BP76kEyZb!10V0&nh>yJ%NvYTmo2tbEeXyp)}r44qF2=n$s-uRANWq
zaJi+kV4yJ_?{Z00S55%i(DZP(_%LYQ&%nT()0F7*29bXK?o&}Y2@GwE6dKSCL`fj;
zPl$+cLJk2x$RJ&zxl8mkEO<%kB75@{KGr(EAzOx^slBDn>mwIEtW=4PKFCj%VRgDI
z#fPzx;G0P|OBnPEY2)WhhyA{-MTdOY%$1a8{5Dn;s}Acni-*hwf0d^coT5Ez$8m#6
z%RCRPEt;ep8(xgSt~u;xLpWV8psitk9TKnr8-Hcyy2XQl@00QH3HGPU_KIXlrM99T
z4G**@a&hAFwx?j-s^|`B2Enw^5jy1wEoN@$zFyGia$|A<o+w6uO64#keX_+Z@Mf7J
zzKg)KA8G2el8V^Vm0u7ZkzRq<CEJDur=~%eo%8Rh%6h;Ct{i_8`gA#`;J!7fi`z@`
z^^#=2y-5%!qKSjc<(X+FFx1wq&8r}Z4_CMMd4B$eV`XI;Ld$}5x$p-Tg#xM{Ri|3J
z7Kmc~haWW5wx>!>Tl@GRPGuRl5wAF>$na9{rR1^oAn7RiQPM0=NPI`19uFd)29wO{
z?_>AG>=!!UPA@<1fE*e|J|J*0Y{U|?2@gMQ%;bJ1$+~1)hsx}D=J=zR9}-Z_FTB)e
zay~wj)b**@23*Y@C}7z)UCW&*WKHzZC%Aa8scke*MxI1qMS7j0MYUB0hvuMd$-hz6
z>GH5OD1@g;>h1_M26*bKPef_RBeb=bd~+(36I<SFm}x8xOrSjVs9<T}`8+NyCDd@x
zkOObrOZ*uMT0IK@KhtN9Yyl_gh<)Vwx8<x{-M#@kA}6XyT-HcgaO>Z0&#49yGN26H
z6}+Qme9+YFkbi8?n!6i~9|w*$Gy{Can|s_E{G=VG0P>YTbt(rAS1`p<n*R#aU`Hpq
zV$<0<Y6?5IU1WP>IhRXcb9yI;acCnxizxTgAyaW0+WsKXYP~acS!3A*=lE3;&`Z`I
z7jwoaWV1pe%|u$^<aF^(iSDoUg*1vf#Ra0raU<1Ug;I!LYta857C_xyr8GuZFlbD+
z+1uAOe!h^XzpK@RxsM*$kFB$=2fvN<w$?j$y0JpA4rQ)4RJcW)5~o@^U6%cO7e!zh
z-0WdY-U(thN3_8`5S93pU9P|L2T_U8H}YSmnunkSGCbb%U#ZI-Wd6!yPj^nzoOT!)
zmEVDJaT!xOOm!UP!bbhno$?fISIdO@@<xh;i`@4q@`|kVuH60xHpQN_2rXy?tvWws
zgbrf70JuS<Z*VYiFyd?c1SzJ@?Bt5AV)103<b>>DfEAuElHXM1q(}A5?oQY>r&kuT
zq^XsNDFUGwO6^0Mm?ULyB|L51vy$I4tLy?kGP?9H3(_uRkI)e?ED?p;;%>Q+$5<qI
zF#Sv(Pd`#aL#Q*3)?c9X9cJ{W2sFP%IVZ&Tx(h*xWcsW)bn2(|_g<1)Hgp48wDHYz
zeFu>-#Td`B26J{i94Oa%%38cv7_8Z*!)K_V=Z)UxFCKy4SV(dFH1+jSRvfMOBjY$y
z=>Q0ke%+t<*ssNQCeQpfF7h>_nIbI`!26(RZ>^r7uxNo;HHZe@&eTO*qxyInITNwt
zk&d53zG6XpmVrNGjim6(JRaFn$~#!C5ZL-n11XFLXgmWVEHC%wm7RgLxq5)h)x<>Q
zC08dt{_Pe!BtP$65KSt8?>SIUif>g*c0{qJ%m>=b2gAq~A${*^oLsg?A6Ir^mjy(Q
z%U5;b93uWd%fVa>*Rb=)hePb9#~>h;BK%%F=RCzhDpnKhLHH+936*m@Rcg@vix&bi
z2_v0F>ibT8(E*9wO!e5jZj$@{R$=(Cn__P6Y8$|7FKqxl;nyFv<=B<+K>3+Z3PWxE
z1?nE~C|}VJmoLkkYUJ;?%Y93?hZrj|rEE*kF>IV{S=!IEkACn3cD8?8$sliz8*;zi
zDs7gF{fFL9<{!ba!2`@Wp>3F9$S;^yV>s!h$szAx#-}KzN~8qnRCQI>-by<f1$<hk
zPr@?rVx$Mbh}LoFpY}|g3IOw@^{Vq&pQZS4dwAkS$Hw+@SyYh|yBnjzJQb&p4-K`V
z@^+I+w|cSxeDbAt;p+|-3%8@aZ2qf-Ppt?q>F^-e@K&4RAJD+mA<5{NyPZ9FwkFNG
z1-%+<V@(~A<c^odl(tfeFK=-y(Vuv-$w3S=huDhw-|;}J)e*v?yT%McNwq}o*lFe{
z6~py}y69KF0mU|Tc`;z+-J7ESCPyy}eK0tb$8r9L_Lf@X4IazB1y-#UB)cbg(CCK=
zm8QA<f2puJVjyr)u#@qxb_4ZXoUZVkoYcWd7kE)*7f1PzpG}(i4w6OgTyGGN@ES6H
zpn!0M9^cgaaszr$(U{Ogz41Fpa39rlB%wz=GkiJvN&d^u6s8|<NopyYWxA_2q64Rc
z2@bWFnbVbb9d5nZb4)#uyDLR&3f+D@OXMVK8WG^#P4AO@Zr^;M4pq>7(z=B;RuuVT
zr1uaeaAd|6_Yo(XixxK6W2gLqeJO6ZU}`#`k<lK6<j{T+q!IQNg1B!DtZ#aursSuU
zdMTs7<RhUN*izHam*|(GD-erKddx;glZ;ZE(UihyqF+OskHZgf-Wa$0MIxSQ!CyUV
zo5<bL?^bF39>tP0ukrn_BpP%6V4;zC)mS-HC>+S0R>m$T4ZTzkz-i4j0U`by$`LG}
zh`->!-)ORdE#HBq6sf>q0s4^czU3qUL8zQ9flBoiIWLfJ&IzYrTRGS36UNM$4h<FG
zJlO?>?*4??HcHN>c7y~ycV}Mhb@gyB)aQSK4<^Yg)t8}C7(GGDQ__#&g+$_!r(pes
zf8<s^4o&}B6%3aw`qCB98lMA-p0aAtG)wFwEt%rhKh!Q%N@U#Sa=txk{fnx(2jfHP
z5_qF+@o7_zbY-3R!H!PK0O~>O$h#Y50OkS=y5AAc)hujpa`K8<)Sr`5H|QkF_<IeK
zqTF7U!7`PVrq0c~qrEQEvm=GEVpFqqa-=07Qx+T48|0W*Ooy_$?pF2BKSIk6BHL{0
zXN#Og!+aAC<)k1&Q{co^>3?Zh*sa#VdqsD_LNSXBuX;(s;cWj3^YdI2t6;`W%Sare
zVRlVKawysMI_IQB_E1PRnO|TM`)@!ZQyZlR|HoGbcvG>lm&;_C_@0k<iCgaUU$H2~
zL5~~DD7$GPbR&ueUbdd~o#p6SP0PB^riPO=K!~R{5!6)r^q2>#{PUq!<f;@FSTc92
zIp+y14tU3lu_b9@n_hV8ob2e}$@NUrlwmQnl_&jsKKSkDYa!DHXuHu*i-Ry2dclzI
z-^>#HY@bZAk~@$m)EC=V+`%%(V}1DvBR#+!ewk!x?ZQOy-;!Zs0pTX>s3nUBk2*GZ
zAO}z&Ms|*_z3%9WisX89t45e8+2Jty&S(;=34u)`9r;-QJ~l8_(zr`r(ThnUR@WXq
z8NE*9fUTjMJh7`Oy-hrG{-{>k*@Dq4%RhI-o5>=05IF-n%wUg5nN)>*;?tzWW?T0u
zx7oP4ixv8U`R1~A=}4G>nNsZ+U%WYVYe4-zjsyV@kEup+-v3q4y0qIpdKSU#>*9J{
z%++EGtfCoGfcWU?2V>LP9C6wo%mzfW1)U4$kNDb<U=Uili_CuH^6%zS;`C6Z>_^;4
zgF=LP1TQ5EXx=IXvAj+pwp(OzGmoX5g#wo4<O4%KL}sSP4BOUi>@@7q!n$*Ch~(Wy
zFyj|VQaXfR!UvD!tkK#8;AK~~BU^Mbphs;MBoiW^xzgho$GQXlEjg7JpcOJ0BWhT$
zq1!JBpN)zBtwdSzJKrYuQAjp=Ia~q8o=5(1+-~TiIVphx-IBmasMG_|HmT))@w;c~
zT_|-4;9E8U7Bg3nMzz1TshKoqyoRys5@ek9Gc|+{U1ZAnfQG@EOkJ&5Y&Z7}<DvVS
zQuxpj=sPAq-HRJ<$t(lPQ^mGmuZ}90HIKYC4hZ-ORDn>2^C91~$@BNLx{Z44K5a&3
zj>rTvN|}rOoIk$iw>4fx2gIbNq2B289gG-XQgVzLH{8^eKXOITXc#oi&1|Q4y*@C@
zjR4oh$!Td&*rN3_7@J|PPPaD>8BHh10u<!wk}ddJ4R%mNqULyLAGaW~SkXM1IA?3J
zRmt1ra=5=}MLbIMnHrMGgYM>B1oN{<M}B!hCi7PQ37H~D;1n9j^HvEJm9_kZnoXaV
zT%WA|b|ooLUQ4v9t+GShhOCg@&#MxB8B!K(yHySiuslae0iyNI0Ouw?8kes!kN&_C
z7>Ri$8oh(Z1jTkaAnhhnf-54!!&ZoJa~<2OCVTM>(Ib%1L|>6C`AwH;V-u40N)~<=
zQg1Az`!Hm*eeK@Lt5Pz_>U*_byKfrrw><p8vYD+=l@e8omKlU<a;^5d<bJSXD7VI8
zWf#i<{H~)diYbZ$a(Vz;E}EW3bv~drnyF2ORclGg37&JC4BBfMrC$uOUiv_=_6b~(
zp8|2F9Y@0ylB7&~jDTicH}o|YfWsQI1b(e@4bA~ZZ_nVeX|Gqsq1MFH|M|@$VJswB
zid%??vo4i_LUJ|yevsFwvMPw&@!!I6-I{V?(pL^>^^8X*+GL1jU{?L3bTjtf-3~1V
zdT3y!9oImRL}Jqq#%>0}Z=ko0`J`dVwNLmJg-fv7oh_QyQXCK^-s!ol_dE7R)_pQ9
zg#vMmz}-rJ09Xy_yY=7&9d6A*ryI9|{)iYmTnIkxCe;&N_wItbS8&3PqI&OuRo$Rn
zJ^zRK-Q}hUu+J5Wv_Dk^EV(=$40nU;hez~@8v2G%SQ&Dei2p_SiS14yTU4XX4FFLR
zHlx?q+GT)2x-LvR^EDq36Ksv67U6`+6Pdc(WVYMfdAv<h!u`O95DH~b@?}fP=Lw6o
z2y;2`!_!I0X4Na4|IviGTz=<umRDL9;f!eGUr#w?rcG2(O~4cbvSw7W8^9Zv{!~ud
zRTm9*c^34sUxlp?_{mn*H~}WHli(BcsA_tofMK~0b@8itWDtn^u7GC7Q6Cjhf0&0B
z`1|MSIwpoeKq4qr(3#+M4(M(C&833tycrRjE!|76KZ0lt5cxFqMHz87qbsY#UyBew
zWZfLczI2u}e}1!}8}Cb_%{3Wr=qV{Gi~yrQLmTvM@Gz_Wt;ov>ffx0AV-3hY#mXDh
zqkwED3f^IL@ms;kG&0$-ZE!>7j0=WkpsCYV3@u0!0H)9;uUu77C)O!!)*Xju4|yJE
zOb<jhEz&_hTvO#*WEt7v)e2TBUst&Mp0`&2AvP_D&K_U5`*(^!G(Rt1z&Flw7h0v3
zsL%Kk@ldCk!xG1JyWstBe4*i8h*t|kq%DoWa#PUYg77u27-qeF*8JyTc-EsKN00Zu
z;>}k!Q{y<6shu0N)GWPez&(3a_frpNHvp}{9{5pHBmr9sHI5}>*7+VTi;X<LvTDFi
zoW!W>$md<R#g43T&9rK_L*ws>nih1f9xbTi{3_Vb{#qFE*i_<@V8}McSPzxl+pu9;
zzS30PwS0)amWRp0(_vl%sPMx+I;0G6nMxU7P1)a&ms%tX9&1&J`FIU+sUh)M8cQ79
zR?gJ1T?_q$C?!;=GRp))&+epm+|fn@_1gPQb$tX|i0M%LVVH}DAr~Md(1CMVLJy&@
zZCb$ZW+QEbXGkmmvbP0Q;gKwbc#t}x4VIJ8J=?!O(WI7Qi!PYE0KMe?mxGoqfSyI&
zpXE;dg71d^F8nCin1&zKXRl$CmbM2MA2Aa18Veb**ZMdNRNOZAv?1hMeZhKB?%}V<
zzNr8z_PcS;xxrlQ626TIko)Ut4wZK$Nb47GW7A9==5XCRY70B>mCvi|O*$<-*?s~a
zy-W69T2q3;Yuj{N>#8hR_<<rn;I$($@RX+5s5z~>r|#rgs0JSOwQ0Mp$McJ_!x|(0
zc^(m>?u_Gse0@`9UMuBX0%rlv?Cd5;j^%Pj<*0)piyzb&IDs|T`n!*|XOrbew@?1l
zRCV)2?SL-x5i+L?5Av%~u%gO4IIlQ^UiCG#4^<!<#r6Zl@$D>t2jy&7d@X%d@(<4C
zC7c(wfk=8J=(#*+9(kaGXa|u$#rXHBleXCz`x(A}gy15VV_{=z|B63GkY-Ayhol^0
z&A-Qzg$5~f-x{>g<v`EL=!s|f<MZ#8*Ni^CxOy=yn7&}URV=X|g_{i44v@;_W?mJ&
zc9x7=8rzZ@2S^A;3WC$@RJ`#JNakZhgoMs%E2mi=$V4B|S!{fLE{PY(r5J;L{Gx~O
z03+ufaW9Net51k~;kwio0&h=D=F)n3M(L23V%Nq&`zJc7it3oOse{(VF>pd$BAd}D
z2}A8Ls0t$u{SnK?9x6xl3IlA|fcAeeZ3Qy)?dDaThorwm`)7FVarCP0mkwgtGJS1$
zT9rIBa*DRI3SO#>#ck4*YBVeenV{)E=}~SZuMzTE(FF90My3b2+DS?$DwK_c6y5hF
z@>*at02=f)YzlGvi05*bwJAG4D+PU_NXPBrJrlAIbzGM*)G;3;(Y|`nF5$uePouvX
z^j!bV2Vp&uo1Wws03!Xjm3b*M1gP`M)E9;jmDb=|_rcGX#pwlRhSibtu;KCE6ZU@M
z&aq-^l~gQ3vy`muxQv@sxEu`lwQ}ddK%${M=Q4UWLI!QUEOP5y$iXIr+4?Z(TDWp{
zO8&S%yM$o|1m23Y%gZVx#|dWDDJh&!)NknM^{KitYBcOmR7qCAfvj7or-~d2Y+F|J
zjDz<$pMFn!W3&~wNC!x~7&w=O!LZ+1g&X~1;vYjBhVWgo{AW3>NW?OfHl&<JIrZ!?
z-rQ}G-3=}}c&u*Z0B0=Kz=Ayd5Fm}}E^3bt;()T@lY_KYq9mCFzK2|`8PQZaVs8wB
zZW+#<cLR7eQ;mOkgBne}k89idQ3+;;eRiTh;N|Lk2giV20l=-IyAUEsEv3K&X1qY$
zrYJ(U%gy*6<%AGAB7(pvC-MFM*V%mhAahp!A;Kdf4Lyn;3A}LN6)NK36dC4XJz(c*
z7I+pCDH>OqR-)yJg{@7@9wEROlrVElY32Z~drV^7y`X~A#l3VUn#y}51Q+iVzU4w?
z>v;bI(uH%*aIeD3BC!S1y*Id#IkH0RX8b}=yz?n~K@=-2@}%~??wxUDjufT(bYSp5
zW)K_kawIhpGRr?NLz{fX@0Qm6pqSbm$N$Nj9Ox|a1+ComZnXfzVJ$jkAyH3}@0A|+
z=@L+?5qQ%84FIT3Sx2vqNO-<s%j^-Q1GOHx+;)9XGZ0+OvRyC)E%e`<0kFTs<87n-
z*W+HxbxF@`NI<t!)$Scr$C@X{%)A|bV3)@CanXc`fRVAk=lhsPV8$)#65N@LcypU7
z<G&$vL-p2*OZyNH+s)Hi>A3{?m!&L|)-4ffy;8(LZX&7tXje5^x>{4J`a)gVwh#!t
zR~c<o6dq6>l^(f94AIOI2;y{F32Bcql7nq#!9aJWuo+JK)<=OnD2q;QCy%<6Qk7qA
zkodr<%wJ~ZF;n5D%=$DMkWK9xC+2l?U5g&cNKN(Bd-elPfkkK2aWZCNR|CK*7tYRo
z4QPWTq_8u(m-d-Cpp#g>mlG#EjIcI2#8%YkwvjDX9LT%0l9TQ>5V<fTLjkr|4OnoS
zfD;fQjtvTi)qlHSIZ0ZF&yBmGmetzMN9Ftg*In;lsBApW2VbR{NzlfJ|9{qh$p5d1
z*Uz%~v+2HGOb3X$ubR=F?LRply&5b_tEJs{Ma{rQKT3y>znO&v4;u{&6`?oxOW3Us
zDPr@UM&`8FP9tIDkd0{nTFL7`+~9Ocw-?WiKeN1EtY3Rrjxi@C0$;*Xtl@!el}75#
z!r?com7aD01-g;aogR&_u;00Bnwq!i(Wi;@ecdW!W6kyaQ(XiZk7l{n*!l#WKC9rz
z^(gi01qlj}KE7*E#oH|ksAX&cw)RERT!-t#&jc}R(UU_><8JbBihiCr3CoMb_pN-y
z_B&8NG!39%yk(tcEG-e)xhD2XulC3zZt_seO#%#%RVklFJSp51dHV3i#7SCMu9>Yk
zTYjm3Q;97Lec)DJkc*h=9M_;IJs<!Z5SwYqZKHHi3o{P>&dJ^&m5WFb=3oJCk$wAR
zPRVyZ+lvHFuw7TETm^Z%Gl70N0~R8dkIjq<D>W~%$aWHs4~GJntb&wNw^KIkV!bBW
zLP9JcES}`#r9a>-&sCCCQxn=ES+jzfhuD!N%D)aD2hYI{JfSY29_Aa5jUt=FSYV9o
zmQ+mx>-NzD9T|XVnTni%*lt*1lX{NNu9LuGXn;FV*x`?Gv8>Gy@ep_ZCoYd~M?L_y
z<0a*^Y9@c&N^lHOby<S;AJEAX1!9uH?gkHki(FJj8&&lrF4IjboF5Wt)Z||dU)nby
zh8CkAsgV=V4?d_s_18u=7P=m^e-(#ij6KD-(iR+Kp$!Vp4il(h(Z9!Q*pU!g;W;Q8
z9_2%<jv9&*h9ZLfxH6r%JG66AS?iQq{QLmjlK#NC$Solm_T<eM8_tpzaKe!}vH@+B
zhdk-MDOlVxt_mkpSzD!+*4|I+c|q&gU7%_0x^h^`AVU-MwXL8XOB(8%{zjTNSRU`r
zl9#GFw7vVi3k7iZZi(9R|3eTk_7SrujlD~9p=<_|$k^h4)?`kFo2dgll9*lX<k;vn
zTU2xy#CHRO=@0=Bk1!RBTV0y7yULhpbiFK1?oL&H)fQ?P8$c(@2s|7UXI3+z6q$q?
zVmf6jJ98NcSo*=Z%7EAuO9j8F!$m2-pk##9%B{j$v}-G}3BR@zk=aJXLUoi%;epO-
z!T+9lZR!hE-p|@_vRwsF4I>MRFHTe-$?nhO8Fv4~HvUAnx=>WOJ*m18O!n*GP#7C?
z#zS25qPLo5)K9qnz~|T`lkx$@%guXRl8|`CD?Iy%;-EfVN+Kq;Sym|6fe3}YohB{=
z3un+<<H?PXGYx=w+6&d0ygQ-&G&CB2Kb5k00*|8#^bMG-jk9Q|urXp6#gwChpNoGC
z7CQH4Y?O*L#pmm%_At?oLA*u2<)$`*_UWmRD2^YsI$2AuiOe!H%b?}KZ~9hl5}sB?
zr{_ySNhb*JkWoc9^59OpRCIxKsnrrzjrSH^86dqd%0-)!{Q>l{ar!=!s0_SIyF`%e
zDPZ}3k&q3KRV7k&;Qk`<h;wofZ_5~x8nPvp*0iuiX3}^HMsl}}hG!3)!9X!AAaXYM
zXl_!Q2KZ0KI46(-qxLlLoZ>@?h6vq21o=0v#bX}$sH|43-d7I&z&+xmm~e{YoyJD!
zOP>9*vDZ1v0%1T6h*m?lN-h3;(%Du4mLk6z*v06D<%^{eF@S5A_hlPqJHvC$7PBX2
zj!CR&(aCM206%|sVxx7`wE2Y6K}FftJNyH1U#iv?@7YGwl&W?6UE08I6;p&+kV>od
z`mis@136IkN~t9O`8do9d)&s@`pOuR)ZkLU{n!-5U^YpmC;LgVmGObST>l@pCT2eA
z-EYHt!|deEUU`!!@*h;w^Tw(0v|4_~rfh^I>Pu|YFNU#XZAfra>K}>@-h4X8VlKLQ
z?<4ISS&kqrV1k?QsAD?Z8H|ObduI4>R;D2nba|KY9o;ARv_-LibEqp}*(?LReRAXu
zNp(Sg74tUI)5l9N`Vlu<y0$S06PwlZ8mZ2cwoa>SkS)QuEL0nuD&;X6Edr=qzuDus
zABYY%)jHk~b>yFL{S`<qU&Ahe?oC*~MReY!m1vF|KyKg_N>8W_&dHC21kbwi@;Tir
z(2eQ+LE}5D!%}gW+TDp4f?jnvsT>q#4UXC_Qi0UXvF38sE{o)<Z9AjV9!1qoD4dJr
z<XkGS8%t`!S|>A%Vp-1hx!nO8B@af%YHi~>-4xKxwChA9GSb7jq}CuD>=Ac|Pq)K%
zd9me@b#p9D+W;FUEp-sK(fAgm3pfOM3W};=4DJMDyYBi8vh|`f4_suCbcQ?7%Wpsj
z%SY73jZ?O^A^Yq6FBK@X)3Yqg;8ZL81-kLQGEa;gupO1|{;g7Uq>UEcOC(33R?Qpo
zT4a@>mlplq{e3V=ixE3%60JBQG^`|v;QAU_0F2I#+-DSU`647#`+j{*vg`D5-qEI?
zDlq%B4iD8ObO3}i7A3zW<4xl5?v5?XZY&5z9~KKNse%eee+aZj+=AB)kg|?$KTvNv
zjt#`YSk_l2ZLMvHqTW#I|IwprUHsIJK!G0X{Xm*^hC72Gc>Y@ldDKD~yH@>~eQDez
z$6|<OWCue(L%>A9un{*us$>x|xnqyh(wacIj~)@4)NveEZMYpyU=CtE3qJOcbIEHn
zd`Rd9CR)9>uwb03t$8CVd>G~I)}iiuM&+~Vp!g-f#-zTHD$L1%M>Q^6vY-rf7!;6k
zOD&sc&UC%kOJOg-)GT%-RTQ2I@72nQDu41Zd`d8L5A84-0bO5Co9x_x^;C0d+Qabe
zqCvtXIgPAqyu`|bg7+@4O$;FdFSFVeUlvQUEzj~F->yQO0{a_3`Ip&l#^b{Hv`_0H
z<c&4(ibS|!vd>fs0tftOXHxl*kY;XHE#sJc?nPQuxIJT;N;`Qf9ayT+9kdwTPQEu#
z^|1_;$*Jfb4S+qSX>C*l$FxS?r%Vt$paG6T>zw!IqRT;-R;!59$JZO2C<LT9>5p~z
z{n#z)INl$+jS+UUGVKkpY;*Sm^|w9(ka;$c-dr3tNy+zZKtUZr1GuGLLzE>xJQm!1
zNZOB3_yd$hq#(;I-FCM%Y)^mUk{I~$8aWY#*mEB#5<5hIU6P>fG){V%#3bgy_b9%L
zr0qCgdvD$Ta3^#w(o1&#Y%Z--?0aqX!>YkkOPGA0JAxV0D@vmIYz`yoX{wW(IZ`8x
zFM(CQR}X%oSc8`;745FPdjz4dnR8S>RxvNO)7eM0Pc3n-K@>(1RR*DblEezVAVW-t
z3dNIYP_NNk`R{6xia<RAG{ufqqmfc7%GSM>o}W44mGqtroJQ9Hp}!(aW*5G}a)au5
z6EDiGV{H8-DBGKpyBz&<RJLF&iVq9X$!%eYZVe%KyNv2O`0Rz)v1ifI9kIbRb~K`u
zmrVK#k2mfh(DH_^2ig*<8k|IDle3hB5U8%nZ;xm{-v@`Bh_B;;n5*e;e}ogP(9ZPx
zmk)9Bq%{c<%-ndkn7o%f$hdv`CxVuUZG<~Toq8{A<T5YP6bG#8RNgrPIAp=v7f@{S
z=)wU>a$R~?9Z#o9r*CrgdRHmSOagg4e4Dkh7u_Dp3$OL|PwgFf{Tj**Czk@Y+Q*K>
zE@~ATp0a4S=8|5CHJ3m#kui@n&Jly<?vzs$u0Bq0-tKjOH8z(s8Hu;xs=Ib`n{3>O
z%^Y$;q|<FgLxy5dme^Q1M)2t)zUG1mG`%uYwM*@}kxR{L?0Pm$N(J9@OQ19&*<@N<
zS-gC5-g4qy5IY30o+!cXG7c){xqXFoAL;}va3Hz;C^H8N)pHTXe5w)4hh5bivCBOu
zqab2UF*bQOH%N$kr#1=+R%$oE#Rxb`ZFy?n@Ob4~Pnnrtvs~2ea7i1&)9<@uQplrj
z!8!sciFFviiv%CItF161tlQ0~kp%4Bktq}4-P^3gzORotA0{oGEaoibXxWNoD62Wn
zYgcW>L*+liEn@28bbr)E{mbb32uYw1_5BRxtU9Z1vZ+UQaHXzzRy5(iANcdxzY_<*
zH)8&TiB_mE_+9e;245dt0%pG9N@^~30pl|^Qv(m@u5YY=Men}1+yJjE%G-l1@bUg@
zJhR0cPI2~I4;W2@@oc7z8U<YD8TC&nEdotZJ9MI4X?ZmXv)tC_G$q0B1CM3pvO&(5
zO*C`B2B_+xDCm7P*x{2=rh3kaEG~2B6u>nbMz~{qFXMlg7F+$q5gf^OMt`yY_%z$n
zVoGnb@C31mW|0gx*=)O}!e+RB6HI~V3=#W(5tFoRqLvE2MERuqp}tB5SXUczH1ONP
z5>H$*rQ=3X6EtdqGnLQyM9A$$%qyv<{CHuvn^2hN;0N<kcDM>{@7<Qyax9e7$rXag
z^_c;DN_tT%@S^Tz8Z~)?nVF8bnB65s+{!h+!W7~wB67rPXLNvqFOndrZ@06QzZ>rI
z;UX}opO*ahDKgNQ@V^|%DlNJ!X1ve#`T`U?FrlpX587M{X@-)njdsC6ujPOq9aY*K
z@Md^JdqBg>7^A&?^3_$HO{Ws#G-54^U_{9wjTA9XcS2Vxi7D5rfQlr>jfQaY=mL+_
z9bD`zQt?dmm}#=6tlXHFg7*g}DMxF;q=BgX`z*M;$#ou;r`WO40ifedf@tU3b@7d)
zqhcOZ$c^42-en28fKQ%7B~e9l3O!zJ2A9=qObO}b$+ES{9tKRY%xA}(vc(Z7-WV8c
zh<cMCJDC0~$THjrKOU<+d)UeA2{yJ+=(}GHjD>NzV8ogGy=?6ShJ-Mq8335o<Y>OC
zo+*w410zndNjaLS2N0u>1`t9qkA*Wj4*c^C?;L~C9mpIrp)z<@^gP*GqkJdAR+Nm_
zyw_~fN3`%-Fs=f7WHv!8s}_^W65X;#nr_t=P0<H3K&Hq?{I2yeAuvC;SJbf5Z@>t3
zpLYQ})=|xEn6ej?=BLQjRq-6$r2@O5=lkMjBA7<<hcgzK`Gws$>mLr9y8E=c@iXWq
z_8K0*isX`vEO8N!N>w<rHxh>e7U&<Mo^96QuM#^kLbbhvV?yw@oB-Xq0=lU4SPNR$
zsrq4}%l|WIXJd59`&pNqAX(W|!(be8mxXT}ts;m}zerUcOM!CA{G>qckTN_5{U6{M
zFW-8O&a9zOSnW7O*vnq3fawj1MB)P}%Lu@Nz^pH;3e3~#*<j&wWdBW=YN&hmS)py2
zo9BfXcosZi7f(dH%d6}ZJCRpdne;vT=U)I2`v~0|=f2H-MsTE;nQ*rAWwXKOj}M8z
za!*O69j|GIAIUs`lxFO}J1qXdkG~2r%T8ZoTR8;d9Pdovj|%I4g}Dci_Z*~ey5HD&
z{tA6<ptufYbM*K8@=N=bm^F@L-X1#zZa<)Rfa>qbevy_HaOTgT9yjsk3)%TMbcISl
zCdI&Dsy6|W2HDi^fXpB1WUz0(fMwz|>4EG}`bd(`LIfC21I{TWA<Pq`&05A-B8AJy
zXOXVyhHYBGX9%T(_QKO;LVz=!lGkFkS4?ORwyTe`;<jZpNW6=6j($bMK64h>t5Fz5
z8eO75bJ20aA$DhEZpElWaIm4BZgr)$*`#JUn&F@UGKO8NArfmf6oc*BzdB?lgq*ck
z%ABRu6EpWr)CT^Gb__+Cly~uG(ON72$^a^*B&yZV2&lp0n$?|*J9!kI8GhJ$$Be}c
z##^;zutew`KMKpO)|_+hviT$5V^5>xzP2fDJ@(UvOmdqicbcn(NWB0L9&L2-{u0C4
z*}NgTMz`*Uol5cKWd=m^t+S(wf>eMS;zLZgPZUu`+|wtV8lncS#znpA5PFR9qY(eM
z>xOLpRM1{9Uv`3aWgS2!Q+OdVk{eR^A74JIctLTM-zIBr$@(H!90VkRXWsAy+cRyP
z#S(k8bjCc7b!|!vc?2HUU4O_l#64`)+ap|SqBBk784{xj#Ru1VND_%yD@7nn&Q1!O
z=^D?36hbzX@dI;*P{3sm^S<Pk-Qh{S34p-)WruKLct5StNwTh`z!-D9NUix4m4*(Y
z%(IvK$*<01nX7(z*JE%zDL1trv}JJ1IBFWFj=d|?;aW%9V@+*Xm)=N#_S8Wh5M<A}
z{1I)ddBPzxQa9waos}05>}dz?*5DNyL&G%X2c;>4nP7X(b}$4K_RsJE3S!5+8STsQ
z{i|7clB4p!Th_>AEyjH*d$ABMU3~oC|5w?P&ooUxYxjy6W>xVR?4m;12&(<#TKE8Q
z8(Mp$?i=qJX__ecn9c4AwpX5x;f)`~V%sh}a`b1VX4fQ3R-GY!LhMF3hSI=wXVd|B
zZ}+2&H_-`40+c%)_-gKgbBkxmyDIiXt6o`PJ0oLw?VPZjm>DKq=;u0gss*1$pbva;
zh519vT6R%!*Vn}VXy%B}Y%>WI<=|ldpBSSv-fOp3lp9Gz;KOWa<o($h#7pIZUrEJD
z(E@<`Tf|7<3%!0NxDcBv%5NO;9a0pJRUFHRckah&E=S^-do%G$9qfcRjXOd}u`>^g
zbLxdyBUYtBzM<GDALNBI5Uv~D2w^lxjP|@WUhHTdLmXM1P%s%<OQcz_9zMaedwaKC
z8<#F-K~6lakggsCM%%St-`AYsAZ_dMC<E!mfRr@%_3rNhD({F|1$-H=`kocp)`0UE
z;7W*sy4m(uRO?=TY6jfUKGoumw6Nz%U!m85CVG*oXT6;j)(UZk-#lkS8FaL8jsv$o
zX7(RngwMm@kd5Wgwkca0S1l1wXbu~Mo{l(1oTRTYMGKjA^I+0c7+s;?XnW;k==Ptj
zV^#|~i7pBi%I5m+B(*RUB&RIX;-&9ZjD}|(9iQk3#F(e_0)ol$b{kW&eO`-v4;Er~
z_c~r33;f`Umt&o!E^H=%1htizM(qMMvS9S`r|9&yqt5gz>P_2YPQlLIaf%lVZB9ar
zcSi7srE$~-V|?=PM5zo^`DonhC$LwIJojlvVlVXF3ov*pRbLAJd2JkYTm;g*{|+-!
zsVY6<L(f-RD(UMsJPm%$hZ(MZ<1yg@ZGlK6u#v6oj~Pu^CaNi(7HW48=zySmL>f?O
zm+1v?B$0xPsRhD6w#wJ%K*ok4mR|d`p{mtcf&oPrXy}h;*tm#<+9iEs=3ZqHUI45W
zGEe2j+t)-zDN`ot1Sa~$CGK_k24EQn9lj7e23-h)xSeNniJYLF^l4e*n!`t^;SzR?
z9nS}}x=@ZJg#scVm><!q4x!)Qw=ol(-WmBSp2vzfBN};3%77R|Q3c{=VFK$NsWCr#
z%f@?PnO6dm9yI23s-|z*tMjz|ozP3XfCW^kv?u^zEHc^SGs_QO7C~TXDX(_2900Tz
zWz#WY3>M^dAdz^GqbCqwNWWioSxHFYj@;7%i$+L$+T7?<^Igpc(`GeFo$&{(a(ifL
zo0<f$2&?Y+g3WiI|HQXq0P1)(!@lzga{x|CUR3auB}D-Mhjj$|L<qd8p#4wU4y7_a
z4)ij5eWZ#RX*$n14oxkK6Xfa_VnPB+wr%)hu&SIwz1Okp$daIaZXuk0<cJ5=x`5pJ
z@x|3iV}J;UY{4ruojOW^aMcf)!;!<FV{*hCA?yq-sMQZ$P-|nkKmXbBT8$x>IMr(u
zIbT9E+G6wBK~Rc)t8o*uonU-%WVTt49a@=YhcMxK)9!D(@~U<%tVJxOH4!bbdpc3+
zj5^K0P9`ATiaeuWPK3It*P+e&>!dorQZbLZLOj^b`i|Ak3Pp-#vuo4WpuCacxFbM;
z-5;*B*<T;N2K%fBrgk@Z))!n>D$l<Jj;I%@)IhrD*y}aTdl@h<BGlqdj-V|QT&Nod
zSQ>MTzA&pY(4M@l@)Ilr6|qrVp!|wJJZJ+;5cF0oF`QDNc-<hK^!r-T1ySdOE5eIA
znjGL@Lmup({NM_p@8JLdNZ6s>$F3j+WNoL752n!6Ods6K>$vJc_UuEzV;=z^c2#=E
zRNTM-iNx|#V?LXQ$W~1(Qs>{{gLHly3UXdMY3g+dkbd3_k2FD%xxR%=@u_nYiRGHH
zjxoC7N?ep=O+|;tb#JDd&p5|z?2oKtoN@RVv*+&+q;k3bH7_g2zB|VIM4{1k#44S(
z>8o6u8*D50n6ArC3SN0C#p~PdHcji`^#OKALG6uQz-$G@_$<S5>@vBK+hAjl7mNwr
zJOA<9_s0!WTQ6U?tDVBThriike^fa1ed@|~Rnug%H#uy34d3tH<1yRXi@})44w8cs
zQWbRlq3oKo&ETRh+6yaq5_;~THB=m2aLy)!cYnakAB9=c6k2#imBG=c6}SZ}Dkr6K
z?e7=@M;Oa4&)0r;xkj@d4twK{a#!VcJoMS$kQGml8GG-d36^FS&1|+C2(r(%RX&_)
zO(5Xm;K=GPQzJt=IdizPs{>~y6F2y1SVEeMOu?USv%P`RohvbPdw-Q#`lHgw1^t{T
zv}yO{R)0qHh^b(wuC@zC)L=7U{)gli`TCT|h`G_X>{lLLMWdN3k=2X<c~8}4$J-si
zhS<j|X&VJQfr$#}5#WYK_H;m8^Z-nUgYlAkn81*A0->&;dA)KAa@9F$=Wf8?U>t=j
zU_KiPY!ZL7=q8d!+;`?WI~B`T#t_-5+EV5ZA)xfhBrHJ^iO<Li1o@;qq~2hg_CYKj
zEWwhcVqB0=qTV?^2n}k|1!0}WQJO>SO*(1SANJ-RF`_wZnLzG**eMNa5S@9}CL8y|
zjEKRK<DIxjuCzPj%l~cmTs=pz)v~Ixxxf)*0bEU?FuUp*SR#7!tX2!XG5I@n0Fq5M
z`yPi+bV-^0=&f<kaBu))`VbYH(<y7+(rc;Qi&a<Ii`w&qbvD~1awSubpnR!S!=unn
z2XEKn{q6$)oPj&h2!k2j#q;paZgjcKH%gcH3IU%;<lNrcH%ahHUnbT=wQV5ghMZ~v
zZMdM+jo}01QHk}3aicb<vZyk26%~v_=W$o6_d6o)#BQpH98CMIRusC{dQ)HNMb9UM
z+!a!T2;%v1xF>vbh0EuC3?qq*gLY%h#>rQ%u_Z_>DEZ;Hb+-Il6mkh#lBt<y##W?w
zqj7n3{UaU#baEn)Pw89*AX)(gY!C<96gsxoKoW>Ww%}PEvi0aL=Ea}Q_1(_uW511L
z&}GYt$nxU}+{b+Z*!Qs8H-lf)^NdaGL5R7Ot3Cp@<l?L@eRpQlZP<2x&`?=PA0Hxd
z6c9Q}dkke1e8MdU%6W;S*8PuRDAD``=FbMjV%eFi0CIPQnT$Kgu@TsHW@mO)JVly=
z!V5E!#vW}y?%?puKY`HoEwg<~qa9rTyx#ynK)}DgZGueA0rd1NkTS)J5I3o~XuRD&
zH<OWyU9!6`GR^T)d;&KeN30{H9yjCKVG4XbD2Hgf3@}l}X<KzixzkBPLcx~ER)@)$
zW$6rMQ3aHc-l4<F@>#}2MXyc^$(K7XsyEMl{g|=iI~o#bst{fLv=864&9c|9CnN*h
z>6h}5fIE*%DlntXD2s=gzWt5xH+D!7?Wak+c@RTVCa*f)6#}b06+tQ5yDT5D#qRXO
z3-9_VTDJoHvK1$KmeQuBG||Ky5{xz&&WiLYUO<QVK}uO(E`0RlX24dflr02so}_Sg
zhgFkv5_SBr0T^ArQ*sg%|Ijro+B|OgndRbAm}k5v3&W-xp+EACWgxgnb+?vCK6j4~
z$&{2>WB9#MQ7L353b{Ky2*TG2>e%lI<>Rq?$_L!l0uP^R+D(Q^fKP%v8)F(RXfT4i
zLOl2@Wil(881Pawc*5_v+cj#_@@_Pw^2{9)Nr><b*q%e&>CP5o*4&J@uzzO1kpF6X
zS-g?I#&l^lI6u(PJln>d$@0rx&yXwGEP~>y!0w+IbN_o!?ec8;klb(=k*vik4jqzg
z(=E|^w*pg_$b*U4k_)1$;0@rRy8|*?#-Ib|f4@pO_HF08q{U|q5PMj0MH}qcq<%<*
z+1vi~^*Nkb$Dd9N?=QfVB%y<~76So);IBRjQ&I!G9;1*KVOOwPWF((g@((+gZ`CK?
z=Dd~GwBeaA*cK*63NgC~jHORt5GlR|*FHs|rh_5rfEr=cHI)8B5HNBnwv4D4sN!2h
zkCb3hGBefwJc7S1cJO6YYuY3}5Qd~cVy8H|?^$YJCMx2yb|JpX(xg41cf4m^jl+HY
zcy!)SEEY@8_JGjduyzH^P}4?oii1!CHLGbGPA&}gTqoPDksgVz>+!<bLDL>i7x$e>
zDW1*?zT6)Sd+`(r>g0ix-JB#=Jn3g%7%};zzjjp!+px#2`IQOm89~xYaL=yrGN)4{
z=%5qu$Ez5@X)4Xk9zOU!aN0_O1Rict1)Y}P><h1@mE*(9?N>1O4mt8*Vu4zY9_Rw$
zO|gJ2GxVpHC%D)Ue}DN_eAL-|Nq{F<&S%Fa_Tzcd1xZI=nylxrae9q<523@5Z={Xp
z!ckLOZrf%}5S2JTTjtB{GK8K`8Jw0697>drqZ!N_ehN`u*<u@~|3N`gg;xa9V9hGR
z%ngonde94mQ!)=dqLqj)Do`gqJ?gKl&jR==R!mMH8Y8R<8X$<!#nx@W6+9;?5ZlvG
za_j-gUPP%09)y^Az42zG@LJXrbn-T8tMZ@>wf{qJ>tka1yduHVoxLWa!0mc(=9x!f
zfaDcD%q;7Z{3a5qHfAUN{gybSEy8p-;J%jXdygi{)GG-O#SIcb`lg6|IP)GBhm!qc
zD3*g(V({Y5cyM!)$G5j%NWwjvbI4Lu#q`J4NdySvuG(eDmqCthhua$4o(VM-m;5ZH
zx*-{2P+Q?BezE;1mEIEz&yPq`b4)w_332G(@%o5QEeX}D0+#BzN)Kl9x=n_GIS%r4
zMxdP4PzYt;`~`!ANIm$=$UUmPDz_6`^m2`?E>QZ#_Iu&RuE$cr{dzwF57Mud$<@#R
znC}LVbRffcldy5BIWEmex?V4`5&70ST9t{uwRdX9>=>3M*;m*IuV;z8_am@HhGWW{
zLf@Bvv2S-jvNcr3V01AwLZ>~x6iwFzHdX5P(ka0`|CkVys*bkco0bN_;?hU5D#VeW
zre~g)mf7+f2bz+JYNgcN+dFMj8!0U4=izT(TeahY!CUl5nY&MKzZmxtJX4Y4;I=76
z204l1EDwzYEEJ)RhI^{Ra+|x{VZ27bqo!%vxg)QW)F=M7$Mi>w=ky@lb_VEhWX*eB
z-tKkvz2jLFJqZO}jz<-h#o1(Yq2E*Ms8RJFOrUzSmSM-WmZGJn<dJ$Wn63uIWEVSH
z*p51_>w(EA2uKvkMDAw7hL($$`a&?C8F*<pVzL{%`R^VpqWap`ZBc<=rJUNN=tulD
zu<-ThNefZ#mpV5FI|fOANT9+7Za~4u)N@r(0LY;tTTD%j52ej%`uQ|{RQmC%2omgG
zM|J%r?z`-G13tY+T5AChG_)dB4_Ik>8ctCq2^NJQjHNp}N9_=xDmMwirlk)zaOS1+
zD(n@6>%w%i5c;HVlSvq6OSkKm?73LZooN}4MZ_I{w&9)+8BBmd%X)=~(L9iXg2QXr
zixfQ(80%smU@-yK8B#CcL}Sy(@@oIlx=hypEw`|c(ZoRypthiafmLh_ZbCEb{LUa!
z*biJok4V+SDo3<n9pwsl|6@V5TomHvf7*3MTym*sb@9M~!2{46BIifDgA1&IH(PV>
z+!IovC?hLradQpc9;fi^XY~4C`YQ|lNNH_-u;=`{Ls$<l^E75m1Kc&=4Ae&P`MnG*
z&yNPn@weFtdGefN$n-0auidwD4*Ef2MB#>#tr`-T0m>)>l*H;y4P<Iwg!wu2$7?sy
z*nXE8<!p%|t*y(|i%!aS$ufswm9>6uWrhqvI!nrvffVtp8EB$8d>WL;CO6R+=wnWm
za;ffa%S;vPR;Jk4m=$n#(%<}q_~4kc=Eln}n-Cu+CVA$$!ZEV~yw;eZda<P}fY5Ey
zj>r_*3lThHBbp)ti}pE6{a<5Q7?YffzlACxqb(T)iNZ155h6%0a288U#bZh&9WdXb
zzBVz8=VM3^S%m-sde(QxPn#9I^fjRe;qYSREnRd=tfy-lgBof)71|`T0;9}S>?Wbv
zO>liN2+7JhM-(f;2$l$z|HYo-=Q!I2pa1k#OPRkX(``DYAhGprfCMIo;BA&XcTv#p
zLeym#ibWa`b41Gm7dHdRkQXcF0=~-Q$nZCz-;%^xf;$R2$zh)9*%Ho1#Zl>;{F*=A
zMY{0yE=mxzfauc|qe^So2N-P^=smbd-1Hw>=Eus8SKGr8B)##jv2;{W7R2?x8R{HS
zmyxdPqiX4IR|iv`fpqolmlRtOspQ$LVTTfY^}x-pHu|6KJ{4aw39X@Hwtl+{K9UaJ
zCp}D?aB@%<WBj}sN-ucn0uPJ<$1-Zlqhh%$A7^bVK>DMc<GJJpAaw&GziNb<M+h{;
z#zC^wg2=u<1;!<y%s5l+o>pJbHeJI7q#Z`EGSIC9+`DhD_^D`a`b3w(!N08h0=|n)
z=J$uvvhm@+?4XqbdQv`HBRZM<rA8BpOKU>;bj>tffEoJ4zDlLR5zMbGZVJFoNr9)$
zuDY{6_B6Nv@RKFWp7oo;CT%-3w(ZZy1{ufXIaVBW&qL%v9d)nn>colhL=-?}wAWtq
z2Vl#fjd9WfTfPQQ&@|v!K{dv};y0y1G819UE01W-?g?}(y1bE3Q0eLAi_1-I*G;?+
zHF9;ry0E&p@N+Yi_TT5->9}a8HMFh8q>PjsrQ66V@N+l^0=I{T9!gX?Iq_FnBykob
zXm|K?@VNN2j)X>uy{-fc?-z@k>!Q#oPk;W_-SO426QsQHcg_~}2ANx%o4mk5*CnCV
z@bTFrEySXhiv!eV=A}RQ5_Iu|xA~F2&(MeHzHQ$M^+pr&6k`~Av33IXGd1hmUodDE
zrw#f)V&zCMT)0mQpd1}l0*-sDdcXKmnsJ!nag{%g-R!uc-*XqC)Tb0TVAFowVOaub
zi;L-U41?-^^j!|hj}e(X*cpz60|6C+K^&>33nn`Lq5FAqwVw-2F;Xl=NKPA$ZXVIi
zVLHU5qg2FH1v>q>O0X<tnlWwo{hUm=pjw}NY5;&u9khL?#Idf8^*KsmXjgCuiW5w^
zy)|c;qJPN5XG2GHAC@|r;yU=6;9b7;v`7Kz!)K=s)|aRFo<;FioLkE^iRy~U7CPLK
z0h_1c_!)f0i<M=Y=x@92&VcbK6zj`A0noG@3yHBEm94Z;KNPo~inb9>UB>>#B;Dq6
zCsr1<?-oj!sB$}KN@Ade!XrEtF9@hl4ULNevbjRjxWOI$gQ8yH+u(6Syz`qg@Fp#S
z>l4=@1Zy*#vS5)EQB4#4FW`j&T(YBm1~v@of8j9^n+P5mT%QSKl{DtnmdRl<^)fZ*
zF;x)kSy{dCZ)l38IXf@5f?XlM<kNBI;)Np70Iqc|5jz%lUteQaFPkiy9p&d5drF1&
zj-7v5Q6BGN9tgR!HTTvRf%|^2x5FjIq;YBSW#63kf{cGzsP?!G)X|N$v7a0np4J%8
zqz8#5STi+Q+vFUtktO!$I~`uDCep3$M2W(CkSPE7cg&izFG^CQwFcbw1?g`8)yPy;
z?=%UDM_wx}d6pefPPHb0RWo=3sLv9=p}E+Q|9IUy?@G+B)vTd33?wsLAH1m2-$d4)
z&U+)DDYCCaXieEP_b|@kqkrzFCZaWt^Q!b(!@KXs%GV$M`F6yBDvZ!KLLOZR1?;vf
z6v)d5e~%=vqZm~LDl%HAI21%Wmi3WUET)k|qBQj#&Q5mZu`oHt>~6cK64%A(5c1tE
z0PblP#}9lYuUFv@{dS$u&QLUkG_MnDV?}|WV(ef*&%$=3U1RIpS70sK?oNgkVjv+S
zQph<JmQo3ym40(QJI<lS|Nds6KB<#}&P+wu3BNpCBqbC&-rp>G>~Bp@lMU3339JAb
zJhQXu2IKvU_17pktFdJ-y71A2rmDZ+&*wvOu~z~SkWOW?6stl%9gR?L&h+Ic>o0CK
zl@fCI7=`FTaOrn8!d7x1`_W}m*CPMO$a-HOp~*k!wEkvWT;oc2?(}KQyHV;U8Q!fs
z>k<!c4~Qsb4Z}=dWfEv}1PCwk^`%E58sjon{5VrX^!l?xH6X%qth|n=(0f_#=)<F*
za=0}$MY%}M&SOPCYnE*f(=3iOnOW;7%-S(bCi{~p6O%E}Y__@uUGnv%!(8WLv;Y?$
zvrTIfA{gu7EfIGF5XIQt32nbKByAnQUPs#+rZyC)G@0yP2?6#f*Wuzk_FUnb?^W)p
z<Q2L9b=$G?F?2AQ3i4I?KV^Y6k?HDX*Tw7|8UTknC4|_fFc>oeg8oW70@lJt5za|4
zfP5Gtfa}*t5=BBH(iMh9**i{D8HIFTdk+Pszx<%H*4xi{i$2KK;;YJ_Uw8`ha3&?W
zoG@}bgORMQk$N(XsCDkhDldwteP1z%3aG_=-iSJiOEANlRH-L^@=7W{G5s-@N|(&$
zMRQ!J_Qj${r+fA#-5)82fkgue5rG(i`kp!6Td2?*@9*d(W>5A*qaT4%HIql{yG1qz
zP1*HPZJ@UziV{+HI<ZD>C&PtvRtpfBT!iiE;!HYX?<C<&DiJoX4<lGHQScX>B&VCc
zF0L4Mah{&^!6fUj<4?S75f6=?$Sg!GJ(g%C&sck$=7x^@yJwFf2ad*4_%O&W#Z<0k
zJCM;W5^^%(s$f<tFROygAhTYEL=OG}Dmlj^lM}D!B)NNXl4Co|nq^<khmZJQI$z8u
z9gQu1sj&1Rag@0HT?-8Kmy1@rLHqL{;`5AM3-1GG`*`UR(5{WPbYa(%NACx|ar(fd
zS_2q(3(#_Ge2u-f=*_V-MPh2_-y?bH*qV*j6-S(A&#4!U=GK^Gg;``nku(#xNY@#-
z8%#bx2V^5{?(4Co6OFV>JVi>orG-c=TK6I|CQy$jt(x7!`)WpCh01<O8wl2}I&^#W
zJKWCDx6r7`cB$Lp_7i#x<C~Y?)&iSUM>m-OyD7Tys+AT{#Igck%{KK!b5t<FCJpqo
zS#BHYr+KqX!@cdf2ieZ3VQ!!Nh=B{f;lgvwE{AZqJERCJ#jbT*7$ZdiH0Vg!0NU#d
z;|PzeRDS7_Q+Xrw%)m;7wmv|h1p~OINEa>lFE4R*;TAy`G2$-d<cLJ!=k17^rL@K?
zQBrZ>iPd9D`Gla5M9Y|;Vp9Au>`$j<nh-58V=6UrU97>X5QD~&bGUzYfdbM`0Df9E
zz-2r3a#@eiklmz*Ffj~SP`pO#RQQpB`$7#*My=Jqh1M+aYg-1Q1plqTK9G3N8}2&-
z`UsrNgc#+NUY)u4u{HP;dkgf`Tf+dl`OcN={8YWxfCPYa<JXmQ)QYzydT6QrnS#@X
zk&=h*E6hi?LR&C)A^WLE$si+s4T3@<!b+{`TIUOvCfp~_$}edS@WRW@-DP9t1YU-F
z2D)~b?JCxA`72caE5ju`Z3z5gx0Dq*QYY~x+?G=yIqoA7R7z~iNv6O)Ypc8F+N@}8
zB8xJ2$cpfJpcv<dqsXF_voxDiZW8tjKYPig1FahMd(bbc^^p?F2VV0#RjKZXhYn9!
z_>{hD2PrH<qD2<qzak<Iw}iQ9ixx$L^SiRST$x>eHt5mt1}w@Yb?kM@Msd(j?)C2V
zbJ$1;Sq_JB6}X^w2NaaY?T5Ip+FblBw?k~~(&hKoc6s?r|0c2b{dx}4km_!aP-0IN
zwx}QB<gh8HY6g7g9FA7MmwEJFwD$+a+o15?-$;YP+fu;n;Q!RQ%|%AXyOYCcCmjQ(
z(Q28Av^&tKOHW0FbWfdH!3F<k|4pO)@N1lZnX;|VNrMwkZ5{o%h{lK@P(fpc@IVx3
zM8fhpMq6eN{L)e<Sj7a5zt5gi6vCFfPnqW1T(Eh)9l~xn;<8>+`Q+kJO50|sDWL8=
zWVYe`45+!?VP!>qN=TaWt`T8}??(B9qwzPJpgA5;d9JkP9Qi)wJ(Quhy(vYNv{sTl
zB*z0v;d&sCdyMVLorUdcF`LTj%My`A&(3v&iq2eFj&fa=>A0b7r`KO7b47}di{y4P
zFT9p?uBWr~9+xBQU$q4g2%GGD#WwQ5-2-E5l3{o1L9F8_T$pP7dv2s@3qfa}7l&Hs
zjCewfAbQ!^1Q&N<e1J0iQ)s(|npmBVZm#!+%M^z|Nk>M2N3PO1VMIL^N9?76`-x~d
z#Xoy2Wk+!HQAS!iD^q@;x^Zv%ux>r2B6%GG#NHB18)(<JVXNU8i%!vj;RRtIjqvH8
zw{~v%gl?QrlMiEFGe5%Q5rTkHRdkHg4pUn0K0I-Mdxm%ZTe!UGALHz9QSM;kLt!~o
zNVNuIZ7{q<k0~fW6XJ6ox`Z@A9<16<v&5KKglCt}uz%vod|=m0$R2*S&%yj~c=8DX
zxcdXY6#1?7{vy{nWeas%{dM*sQrvp_{i54XSDz9KGtxW3ixBUYN{qOQX3C0Sw{DrJ
z4`c3UjR)1Us?AV=fB#unL5jilLp%)u#6D9!(AE$DeX-OKKM*ffIb414ej<KUqO=a#
zbSE++0ukLGFd6}np!5Zs%%?c8|ECoPfSZh!-9R=^rJESCupVEdnFvk^+Ymnmr1%(b
zS(+6sYGx0(26Tdo=PexZM0t4ip-2Pxf5xDX=<OP<a-gi!`na_Adu=+Fr&~Q@3nS0q
zd}Gk1rX8O}&&N$la^rBdkl*t}9t*MnLfyin$ZN5{go`k=sFz>l4bsF1Y2pi<)#efR
zvSJnH-Xc~8FQPkY>WccnESC=1MZn2t4xvFR0Je}*0KPxqX^#@OURihV7t<$RK@XJ_
z`rVX=0LxSVe069~sZU{6&B-~K6!71`71?xN-#pl2)*BQJZvgyvnn}o{ue7l^c9WY1
z0(UNY>quT`2W~ILS4;Yafme)O0LGtb!*FC{U`*-As|;hPd5TO!MAI8gF9`kI0rg!C
z;<^^QcTUJ2FFc^OUT_;L^Ww3hMFn};rnDv)!c|;o>##Z+6ygki0+s3Bv-4_PFc^Z%
zB>`rQj+l=2V_FhX;YzTu@7h@dq3{P7kkt2b{yd=<r4Nq;99t4&y&r&Vc)aY$>(wTJ
z*6c@5sRD}?Urbj1KczQEag6v9AC;${$byR_{Bm{N=}t){GR{E!oX6ViN#<OT$^(g}
zQh;bW#$1g~^nq8p;m@5kY8&G^iyPE*PO_v)s1O5O1mU*2Dnl}L>UzpkiVq(~Kuq;j
z$k7oZPzDv+?%!R=1JX=IM<*LxCO**`gz0hDtF#(elLe#lK3@h-8Ial&NWE#=!RW<#
z?%qey_BjCDGjvFwAuPJ{rKcgawM)G6MIS<u@rmvhkX#&=5&Nu_KQ@S+_Fs@oKzun;
zNP<vl@aaf);fk}$=7z=!fZ!rDauiz;6(}7w?6exC-``F{3E0G1rjqjxclyExp(>{K
z>zT-@lBf>>1kuz{CM{bCWTDnW5Fty&chnqGA-?Z=irx)PWa@RMX6wW(2{iqIoE_n(
zVy-?xTCFw7zAX;KZ1T|{lADt(XN)5m`W<eZAnN^;s#HFm*4w2esy}nrriE)*sKC?`
zyK`S*&L;NJ^lBqthMQFwj@%>bs1?;%%qe$ruBFWj2O}EOC6xJ?l0!QI6-kyQ0#H=#
z`F6pcZ|v`s+2>0RSc)%B4q(Gn1@~YdLt__|T^x!^-OYIQm8gxtF;bpArFZ6a6@<M#
zH#r^0hTn(<Si9Ls<d;P1*lBXq(7-XMiekrbIeB(WYJL{nSbj5ua2Z|(XQUCi4Gxn|
z<KE)cN2q!kzAxO~d!MzUynd2h7n`Q9c;U{DLwl|o9j1F+)edW$tYscvR|@{)e!RQ1
znp3%raL}+-yDNmn9yEy}Dl~**_o!)uSr~t*!jgD|Sd|gGRI0T5KhWI5(-Gv3;l`@&
z0wB3M>!meCd+}{hmEpLNMF|Qe5{i&_0vD=EQ_~1(Tg|*O{V*zbcNMP*uVS$My|S43
zw_we{>)mNBufko`aq{E!;}vOk)j?(T3p5?TFMdYq$6M0P(HHEH`RMelCI<;d6X819
z&q>ZpS*h)+OOz1QN`rS6x`s-Sd(;^qNL3d)=Qv|;DN*)Z0nW5CK^fn1#Hq8O->UqF
z@F}v$dWR7TeH;hg+ZC$~-B~z-(vOorvkN<UPGOB8pQlrperUUjy~-N(!1<c*79_h;
z0s@Mdo05BsH*SST=_z}*4P#fhHQcbKpDaJ8>G%%@V^O(W@R3lj)bVmw%(T^j5y!X_
zeu&ipV;MhkMFaBz3w$oh>cNS_W8@MB*tXc&>Q~-kNa4b&*aS&&_(6w<8myds$wNFG
z*c+&rjANx!EaA1i60btel@&aJ$EzdXc9GkXZbyhIVFhlXmkn|P#6F1j&j0c8(&L98
z%6x|U1a4GKGY8Zvuz$5l^z#_r>RgQ49d!Vzf0J3Vrc;~X9~Da&$f_kVKiE2boYw&Y
z<G=HbDGrHpQ5Ki?HV&LWp1O*Ss|+=A*^s1@IGg5r(V8jAQRuf)ohmo`Y`w`e%GeGc
z%q(|86gPT3W>tEFp_vrzJj4L}R{ukJNhEVHH8>Fw01FcLF~xs~_a=I@zWD6>*moQq
zXqn}90T{1Rxc|xqRr+bZ!0M82m4y=DB_<n9rb1akq3n#ub)O~?AE7WBIt$K!D&yER
z`V&TLLBMAP{+dCixMTsg)=Mug{C_@agV>5?+^X0)(M-)O&1)IsN~#twMc=HI71_hn
zLe1UPNa3~skj1`ywmO;?CAn019hq0+n2$^TIZn2ox0XIe>e%RhZ+wq7eS+-4iPqBs
zV#u&&>>Qlxm`~#PIMomE8*VTY5*ct(I0*hVi(LMw)0Zf*L!Eb$+Yr0h)pjUxdeKQy
zjad=gM-ZG;$va|M=m?%QVOI3A7Atpiz*Q`032rOK93P&E7thPSe|=;3v$s-V<ydT1
z4>Ynu8>NqiGWe<35-eO)w3c#??Pw(B25SO{OQ^@3+6W$on$tX!XujB?Cz3m{U-5{E
zn_qei1bkimihJcvk|AF|5@S}%H*&;|kf>yF2kay8FQQW-A#xyK{r6O2pFQhaG`P|w
zM^*W|Vrq+(@+@?%zP0vqxFmMoa=Ga{Kq#OEm>vq4>bk+hj4xtJ=}e9c4^-_B^=spO
z#r$uo<&X0H!?}V9dEA%VQPl@*rL^CiTW7!;)D2;IdTjm1dKrCeH(mR46-pPM?omDq
z1ujq(CEj<dYf8@hU7EIQ{9`%f!@T}UC-^@QW&0L=Ioe^+aOe+5T=@hq3SgD+?1}8(
z^v)pB!4n?e_kl{KlNvYmy@qRB4yOkAnEjhcl1!G{k)1M6%itkiv`?wlD`=Xv@~|ZN
z2EVk6vw$ZaG(&~|rcnS-D{iWY{nY14`_m<wAx$I{YQ7uu5V(-;ZI%inB1e7U@tc);
z)^ADTE$k#8OWU8~9Wx(#$x$&wjVW9YlBJxgTi#d}JHdvS7$qd#J#Zk%G^;O8f({C^
zoIL(uI{BW0Dis*+xNSL{P|B)HwBnp3&FypjMPy=AD?cj5(FURTwLSgH3!EmM;NO0E
z0fvjzOpcW#`)^_)X2KGvbu)@7!b6I}2#+jD$6jG_1?JA|4YGNC0qfFzm~#_mQUtM5
z3N>|78~?<0EReW#mXw4_L?TN=BJ@v^T_~KOG`ltRXy@BJyBo<I8}#%f57c;8t<Vxk
zc3E#mw(@t-{ql@>BPQA;*>VW<2xpo@<0)%K+$_#3!xI8zw$+qZY93TEBaV&M+I^37
z)4w5c$0W#I%4%)hLU&nO+)2lM4bEMX1xDkF@-6-2cvf;Mf%YUZE-;M4p-h;YZ&O}0
z#Nv1e1R{SUM}Ttl;W~85(4zQbeB10B&d?d7n9<hj27c?brs@yLWE-Vbibpf(GEp9(
zyWHLU(Q*^<$M*w%Kd%>_TUg}1WXG=ngced+Z}vBq*a8f@8TchkU$wR3DhVV69I2jM
z_0F2G>P!j8u0&!2La1{mR_2>bUQl2Bo=90mJZtAUW^lwjZ>}qiNS7_|^3eTbJf2mD
zZaq3v9wzV3+==7l$<k+G3GeDZOz&B-G_8k6^CsU*>P{#F`lsHz6Fm!6ye8G#2uzu}
z_J2<dk;9uaN#6Tr5J0?%D-Ys7cq&KAli?N8u!o8u4nY-BoeM+b1yCaPbvQ%4VzAeq
zm?SNpNM0TM&7{KXh^)P;PRppm7ThnqRg4H`#v)wXH_Z@E8%HNaaSk;u8uciK2?F0r
zwfQbD#NTlU|L@A88S_${=)6nPW1<^{hl1o}N#(nsmysY<+t@@K726}Pn*H%){N?HI
zja06kw&ao&Ci3AByOYh$G-uD(DNZj?5#j{3SnQ5eL<5y8!FfMHPh18$jx=^5Bx<2(
zw;LlH<DJV#`be-!4gb^1QcKL%<V=qJu4d0HOq@*f^gL9{P|86?vHGa)KdhCtzM2+f
zcQalL-g=>yZaJG+2iq9;3+t^)IUscqHV+L-mV84MWYs3S24Ri(!#Z&TJwo(gn+dc(
zK%QAMzylvyO62Q1FV?1u<3cV0K!#e|O}*JL-~^?4B*vp9YpK3kXDC^7OhVyVwY_EC
zs-e2{5>cC>pj$_0Q_Ev@`L>$;-@(IiEY~%K&iLIMoGKoaZ(emGj*JQQNKGY2?AO!)
z8x=Y>2ZP`E5~DJ-dMrMvkKM6$U=ICwJefQ08Gi3+Ys%hx3CG*dNPd2vO@AiW<hQ0r
z=joooo$aT!i=Nksi|wL)ITz3Ig#BllUcW!|;`#lAFqU3EQIG=4_?IYoAJ_LC{irXu
zL+VV@jW_z@*pqULLOXFK*<*FvJK>GamXVsu3Dlep7y{#an7fJ2#)ugIx{yo(Sx9~^
ze!nnxhqgjf#uaPYLeZ1yA>AsDt4wn~YxoPSj2{Y50RX3wM73cB#9~^?ar5|VoWy~c
zr&Xcf?7uDrt)h-^&DIGSX~^5qd!;NZH2aDg8WhiTudyk*jbAJ?fTXgJ%hyNGa7IU4
znAno!<7K?jKfcWg;*vtlWE1`bFPzT)8SE@E6=ZB>MaV&2N05Ql{T)l58K~zD2PLz5
zHM_cd^S+DuAB)I=;pjGGyPfa4iWP6B4HkDcVMUAUFmAN+me259W1@2Vlb~6_dYPVb
zd0&N)G}3@RW_cpI*t~qVTA)d1JhNMCTh@?6lj7Ny++UPUi+wAO%=%Be<0eohr=m(h
zFJ0gTOI8IxfLHxgNs$fM7K}uMKG8z4SBE7CH7KBNdn+V*^(q)A4uX<jys)h8(=;7J
z%)TAN+(=3k@rDZ$HFw^Orie+Z9HHp@zHFpSK`HC9lu~|!81O<V#6)6ruh*gUuLmuP
zX!Up+Z2Cex$Jm}9w9eXnmc0J*rumu@atpU?gJ)AH{uW$kRp_R1!L3D8$xAx1qBW=t
zb{8gWIOmr|gU5z9TDLNJ6d`z6ew-G1lt&u}#;#`c8`0PnUT$?}M7XylUh0pszEsbI
zKc*;_p5A&h4ootMp>usD+j-|lKt3%W5%i$peJN@guFx*O){8Dm(*NZhyiXmiEOD#z
zL^NKqb4TR+;)yEca5xssTME+eC$$euv5Sf8mVxZYq9tMEZg~b7iMQiI77xN{+M{^?
zAHA~$jM~us>$`3@)TxEb052@;`0|J6*zBw+d;to@4YWE=*L|j$O+R+AC!`1w?f~7T
zi~;4Tqqri44QZeL-#j5}lo=qyi%?k5B5NsP1KcX&!jcdxvSx64Srlkll<7<9SmwOA
z`6rs!WeHHUu>kEQ+)8a_qF>#-T*#R02wn8O$|G6pR9f?oW~rkR1abzRCl@emn3%>3
z&Q~42g!CLKu}yNuFy_GjZ?LA_Zk&a{%ll>OPX^AMRvn-RDEm`$GLMT#e`F~{nTDVt
z(WP%enCT_a*N6dVrUf5qS<!LLD)}S9&6S=6{)PNbT+CC4=0xV0SQ21p4US#^%7OES
z#tZHZL-;QVfl4dtx{p`rLo`>gZFNZjD={t&>WP%3P307;qM|DkB4%+ew2W<<L`(rD
zSB|Zj2LlyUfTQ<->0qtFZg?@gLwmcmBG{-lZYj?qW<i#waW7!;p})u?pcRqG9wf%^
z2K&XU3jHax6pSRNX}W<Y5m-?n1090=cI8CEXQzx7-5B*pTbK>?>K-hcY@{fYz91{f
zTz@;7JZ$^f5O=MkRXB^3Wf9{U;}8qDkb7)k+FY??EgJF=@PBTY%%H951@Ibv$0!hO
zC)Wk2Vp}w7NWqWHqJ@hrkf3b;;OEdLfMf={<N9y=GaQ5p>J8$h3!LeKV&T{}n95-l
zXIw+bl6r(1K(w?11FV{+=f!r~QaLD;FWh16Ggiy&sQ&)n#3b3XdFZWv#_Fo%<$Lnl
zotqZX<|aHB#LQuR6fNOCRKf47{jiY-1eox=8fXOPdCqZ9?*K0m5`F>2c`UmK-zWOJ
zlf1GWKE&bfi~)m*c>4Pha_;%!&0Upda+t-4rliu}IgnmcKL1Pbj`MJSThT_muT5Xy
zm_N)0by;qZHFpz;LF(fv@DdYvS=FdMS{HL2XUQy~xjZ7-7Si~ddF;vnVMhXy2xItC
zVZ=5)!t4lxzEKF?rIkX)wzf;tIgui+MnKXXE)Prfu3l(Q<Lzs0ArWuV(IkbH65ruO
z!>FFGC)Dc)jfnkv%zOPpYxGkBGwZ5*3XiDUMcn~8+BouREt|s<qG9&o0n8C?-8&E7
z8rJ{#R>qCk6i7lO5~5T$M^>5>9BwM{VHT>V3Hj=uzR@a=1~BQ*8SF#t0)jBUoc4!h
zJ%Jj1ut5l7v=VCAzk`D53iUgAMrZ@S{t~pt_hWsVR5Pbt)xIw?d&3$kVD~_F-d9Ip
zGcN2g`1Z^8(^O|6(W3OE9hPQNc_<!jngqlYIJ%oRc!8YE!eBq7M{OO0;1~~6LQ#+y
zQB@-~rcEzp=MR(?<@PtZTdkcC>$Y*(?HJAmVu`eZw_LIysY_Fr!fEkH5=G3m@NGi6
zg<5SLeE-4)R|KV}qEQ=Fh&*okJPougc0s8@ANAZKRy{34HA$L(?^tat@c?3TIY=cS
zPn?WwW`*``XkC7g8#+mC36sVbnPM0=RcH|u_t8`ldWtBp^?7_p-7}`z&_7*&q(z{E
zfBalrsO<J0V(nS-<a~{@-G1W32^sXt4SrP1;@c4tcLG#|!GRgrn57L7!Q44Mg5_`C
zOUya`tIm;V%y_;Ok-w{TDl5VsBrX?o7YgyYQowuMn-w_`vZS_BW(psz7WGN~&tq&I
z@uK)C8xiWC-@Mi=n*ft#;ghH)=F6Eu=Z;s|R@rmG%8CI-&esD>&U?LLEh13N@Fz-d
zo@}U>K<%8ISxI;vB*cv>H!!9Jj0pwFF>kr4oTot5{Qj0`X<rnMD4Jo7PAz2WQ=|Hz
zHdIu|syu6ej&n#Jt8DpPh=-hSC4vvrrG_L&CQlPfBYGPk!c7#1l-O1{I5~$k|C7He
zCp2waYNBfXuF^-Kd>Ticm&|Yp`;C$|_-YElN)8+Izwekv%L~#VR>pO<@c~iZ^Z(Mq
zPxQ|oIlsY_{?`l9qO9MtSmqN8EjRBa&AX(vqsnme3ZkvJ%sro{fSJC5(vIn+V3C!U
zC60gjOenDwBZO;kYs+b+A?r4Hy&V(PiVc&x|Ni2TowSXW5jMaTcTk=b4fHW}&qkQi
z>Yt=%Hhq0R?_X}7%nClrzpm1-{;KN+oBIye(&?|qbkcR!NPS3wx$OFN+5HeJx7~SD
zzTeve6lWo*nE(I^cuw*2)PZU4YcemQ^Zee6-g9yg1$Fd}SSqtl!NIM?VVxbU>$Pe6
ze_kCXqws#MXjfj`5~yW*?QsG1q9x#m!GtHqMzwzccXetz;YPcwrWzT75%6yO&iR9X
z<R0#9L~Mn)i=H_z%=*^_B0xv3K%UtErKpN<t)x``d7ovQ`HGoIW@90@lqHaL;#vR#
zyImsSielovzwhW2Gz}7^&!(zr_hHr(=}32VBPqk^L<PO2|BjjPa_yRzgaUI2x~IW{
z9UK@2fEAiJh!)1I4V?cUj&;;62cH+7(Zzj|WK{nox+ScTnzN06Zc4f>$|hu!etM_2
zBJQ{gl_9gFk@fFVMOe^bi)X8Pv|xH~x&UO1Hi=dyo~oKMIMrQ8GyhR4+;{%+w~>9<
z&WB2U%+S`{!dMW~8n0f#=!+wz08Q!e!k}>Je;L9Ux?Sw82n+lLUMC}yg+!fhG=tG!
zZ=bT3+zd!$6XmrLIUU~h)N|^ATj_v&IW4}lbv~7MUqH|D(N2%A9=zOzVjQo&E70kJ
zgsj(ED|6^|=VI+-Gt<=t1+qfnN)UTiNC*)TV|Xx^V0m8>X(A~n1W14x3}X6^M^zQW
zs2IyT)Xfg#H27@6PF0ME0r>9G$6SRL?F?{h!UATkV2P&S=o31GAuP@h23-AOnU7=;
z>H%11Q6px`N%ALjQ^rmy_sdRiS?KW~WZlvj<cw87No}+~iP+oLRgHjgLe5t%cp2x1
z#KB_=zqD}irVnxth60)AOoy2BF|C^yI;fz7$j`0rj=gBqIJ1#Sp0u>EgQcaPiecF$
zD7G@&@R_&gma-LfpL69iYD;TyqiT5#2^gtDT2s?shy5oQHVO9C89Q%w-Or%cd^V4?
zZ?@4>!;p*}{??rf+X(oU<J2XsyiWw_1L7PacTDV@&?AI0c<#rzo<9Jf{c%L(!4#PU
z=qQ{g`Kf(5mR8}~TkCkB?7UX(LW`0oj0d~!tKaf(3^D>XRc@)f%@e)#HBC86u$1BP
zuqqzsW;*$jk;ZzdELMIbW${^9q8_|>C&n5qeEG);uIL=#7w(w$6Tme)uTf+43Eg2B
z@(W(M2%IkkfOSkKx%?N0r3<z+(b_d*O{B<s3i#&#aQH7urh$ovN^=v~O@q~BdM)0v
zqmPM(9lYD_9@^z|ndX2)Cffk5Uq%tn&UOV~1Ia3qQ*<MgLt>l5!>NNIO8jf2Xm2m)
z6ZTMZ&2HK*;3vW=@-iY0EEIiKJ*V501!X?PwWZfFjLqP+BS6bvqohwk(3%6J{tbe;
z#iH%4K6Gc+RG$@{cRxtZeR66&p~{Z?I7XEg1P2c(?LFb{#0B*pvvaeL1-iLOtqv}3
zJ5+y@Yl~#05?Q}&ei%X(IOu9Wd<}2vz?xul^j~U3`<_|Iy@Ys>-@F6lY<Ae9Y5Y4M
z$SJ*@dvrK>41|@j#`kqnLf;2nM?qNRIIO`zfm$l3gZ(?d2Yh^0UDfO+Tz@$8!nROp
z02qqNa%HpjSYeP}^C~n$nN4wBccJXvftx)@-jbeJyVd3x4#9g4yJeRw6)VM#BZ7-h
zi5={Khkv+}N1Y{8z03T8v}awg3KuiW!YlS!YiCRmdnr@J((pGe-aRtwsjXgMElyz1
zsq)b*h7iF)O)GS3Hn^W`%)k8dHVH(sr7?Wk`IY^OFtEDC(B(z1_r$NdbfWzBJwJ@*
z+6YVct~4*eVn?jqk6;6?9?&g_hisk_l3%mGXh-(y4VyKGK)jbyDF)4)sg{0(yJW2F
z(D1=qBJlwaK_$klhV4}m$xppg$i$ftMP95_G$VZ$?3D(@p<Qpqv-5dJn+u8tul>CS
z9kpz~RAVJv7hR(hUpJN_r&ex@ccorv!^!AVabrZ^=kYQbV^}(g?~chOMAf}C)<~1G
z(0*%7S}5~yVy>GslDtI1=kJpvTbL__3{6(O`i1v`8RgR7KOxoDtQ^%syDPggeo2P3
zX}pj{Y?YJDh-Fm2AIauitf;(f|1okD`N@gO?kVt|bD*4RC<W<}+dV;aktZ1-dp8<d
zsp51t2M{x`Ymm3W&g0q|!c5ziO<he5lIEpZ;h?`AZ`GQ--ioAT<~lB4zmPB|>W3ij
z?a@qw?~pdCQt6BG)R{xo9>p+;%Z-YmLnHeBCz3znl?cVybX2-=v4G5oEU(k=p;Ads
zX9%I9$v3ufNc1`)J9<7K6c}MyQ`CirJBp0Mru4O?@kYJ=0bH()ZJ@W)FtC(ikgG<V
z>JIX8=Ncu~Vy3EW2YAiiOT8;obd6(2Bc?XN9~sJib^Wp~4tc#YOV$tr=Xxc~gY7tM
zChqMOG{W5Dj-|`$y{_IOr_-cnTFPtPQCQI@z_mvr7u>HIYyn0^g$5<MMt|%rm_u1h
zw0lOh>Ahir=;bM?6%giiteK4G;eT7v4fj{_w5Fr2pwLuR8i6P7dU}4`CiqJy3g_VN
z=MZJgIP#P#An&r4Lynx|B$2wk(+KA@=v(NsbiTA?GBF0B(1$`2Y>9`5y3=*B$l2I&
zr#@Zb$<ZSKZ(x63VH~Gx7JV|^B@8E~<&B>I_t#%d-;;dG{(e+v@+&(mkV(aqI{VJ=
zR~`!v9TSHt?L?a{T7u>tSH0Z1>r~2ZeRVJ}`8zYlAPe8Nf^Pue=H!tY`_>zgp(_O1
z{HH40cF*wv6dTRj-e5lk%Mtt4AT}izH1j$KkNJ2VOFh}UBG#zXrOY!0p;%EPlvK^o
zRkT_KD<Z;3Jax*>ugu<&aIvIim4xA;3tug~E9|ver_avVa?p|6qgJI@2dO9x>zuwf
zZK_9T<c1!%oOkN4_mO{E;eU1OtMC!pM62v~UEXh0z)qZ%%{L|%Rf=SOtNdKwVLF5&
zHw$!2j|~<4`h&0rJ4^6R0I!<@zPs@Vdu?1$dh1;Rvc%lSo6Lt>oo6d;93C_yETyW|
zvY(qaNNNYB$y)>pZyIL6?^<atoty81ntnIy1n(vkD(?kk+>v-M@o$cWW_?Kp>TmxP
z7tELCU`f@K`jM~a0xEyjhFL5WC5IR&GdOk07(NWeTjygIa4Kcen1HmOm^RLYLY347
z2XJSXPPva>e1OTi*e3h?E3}KJr%b=%g6nis3L%JCx_Tv9T`@|zudCitpK52nnT8xL
z65ykarK#i4TN=7VmJ)4OClodDqX0Pz3=cP~jSBxks2^AI$zD0+3F^pqIaOE*uUzgB
zXsl$Kdt|r03|aA#Bpr<!j7GFBzwNYWOrR)##FUIkB(iuYS23we^eZOV4F~4${e4QO
z36hl1_#Gi=Ea^sWVyf)W!*Y)T`h^>1+5YicdWd*{=d_PY6th-Lv#>`@3#0KER=3jT
zdDR^kdC|cug8w%W#qR5IBZwIeCgaSX5Fp+J$lEf03GJnQUVgu{x6k@)Yos*b_&m0%
z`NxsOfB8zO0mNz=0Q(Jyavz#!BXU#+wxMb0L~LItg9aI>eR~va2ZofF(4K5&9`Oau
z`iM)Mmb}Jw&5f;<3|!}|+$5O^0abhpPPmA3e>KOpeGieeWT6-w3z{B|sh%KVD9sj!
zGWhhALVlsmoz0X_u93j0hB71%-N@f?0bujUi2s>uKa#WTKNr0<>P?^ORPEm!$vH#Y
zrptbXl3V%u1%@O}XyW?s_3k()xrwV5g`}%bA7eV6ZK5usMPru2Chabe@d(Mcd0wSf
zxi#r`){(=or1rX5yn&fn%rD<(-&n}WCNuzd`06!HlIZR_3uavLV&yMP<H&jR*V~X{
z?}6(T$#!F%<r{%)#4L96@Pj(e*bz;i8MyCrrPo%>JFF3xVeCV^+b!TvQ+oWdu7sdb
z>qeQ(n+OE$$M%gZ607*7sia<%Q~5C6u2ydYx2m3;t$M7vS>2yw#fxr&1rEPV5@0@{
zHm@KGpq}Qd{j8<hzi3KE>#|kZ=`p6sO}_R?^Zp%0`%m@eIHeVPw$?4VrO!8BWI5^+
zMK4&3j|y=34Tm2+x#cID%<>=h{-HS5o1DeRimAtD_78R(H*by%*}q{(Z@AIa_~pqE
z{*#_vl!~DK`Il*2H47u#R}Qn8hf|<;kw3snevr@LY=+}nVB+MYobq65V|Nopyp;Qk
z%UGH!>_*;{aC)7|c<r}Ho;Q7d9aH^LeUWaTI4a%WG)n0)w+d47>>WWttHF(?!XLnT
z+pPjz&Ro3mRWVN^HU1n$<JE89h@$KNJ2PPU4ntA`qaYU%yj7oD5Zon-;O2a>w!<*7
z_1CD%nfm!iC#hP%%IbImg#-WK=)NrzPGWgh;1^-Ti<vJ+yvSu#kBq{lo$c1@2MX_~
zm_m8%JtRGP7=*!Li`oOK313{FO38jG4qN-JaWV0cBmQ~}yB3qF>PC=a&29+j1^z<@
zu=rjV3STJih2q7N?R$7R;8Q6QLGZ@Q5zi{2sjRXm?hc<zFxw<hXx;{WbW!aXs6XB4
zs`}xc7B||*L<$q>W1AlLDqK-f&6Z58N-6x>Yzh*$&qoUr-bgdFOXl+L4Izqo>FmMm
z+Mh(s%YaFKY&=0lZ0}eNaUb<Ih_#2#F>}{gG34HxC!_(9so;V)bb#$^HY{G_Y=6=S
zJKk&hRNcQq>Fa%PxEs$=A<d*B()nv#M;PTxF;b4?oU{bOn}v>j^RVp1oHJ%&tU?gs
zC1cw|9h!uz9jK!uZ^-qa%)hHG^y(fsmF5&6e*M;Bv&Yj+SP%(J6PT18FM?y^YNOi^
zFdULX*KKNgwfs_8Bd0`Js^?y)%3}bBia8n|((iQ{=y0FANr~jIT?X%hxffQbllMU1
z3}FI|dz9Z~z_hEk)&KNQtZBKVl@ojdY<nG}8Il7w50}dDI;Ab36y|V%{Y!Y1n8Dga
zNHX0m=*+~sBzC?@@jyMPj7yZFE<4x{zwYu$vwuGrgH*ZPI++=w5I*Z;R~bQ}c5DAe
zpcsW-)VVL`irBVqhcITs5!obbEaNU1BXkB^v1f5~ERb$H+nxhX`e{H(&)Ut+&Dt6M
z$H%eu7$rg4ttc?dtM9OE4yo+hE~E?iwv$chtQ<BVR<8b8l3u&pXXz9IWRT3(@!T6z
zy3f~W5ZHn{`L~uU8a*6&B*Jf6nzNK1P!Ml5-{W7zpc)1p=y2dTg>KL{u89v(gq)O=
zVu;Hy)yMlft!{Z*k;#^KIDMAC>foZ<&@zB)G!hklp-@nLJ9Y?I#8*W3b@0FXvhr{<
z!{8@&@6olK$5uMP>zVTWhGihBD#Nt`d0}gJQbLu+=9Kp=EGBUVGip+Mq<x{q=fL&p
z0hTpRTf}yK7TXk5KTXgkiZ+Z5hR<G4C0=Z9Q|Z&#Mq>U!Q|A^xQ!X)UK_tNIa5N+&
zlM;&5^-(cDCV19y2PI%YY@73-f28Q&_&KO>*Q<rVcy)}T-6-nSz_Z+2o|;M0b?lgT
zZuyCo`$1tDdVE)&p)J5jo;A{Mc>vaT?1+TCv0yrupT;4fkp}Cm5q#~PI&@w+kuO!Q
zyr2Y_-Ka}Vx<+!JXJq3cm(d_u2foGAc~hm2ZH`Y4YDHP>2;l!i_eg_HPb917D9eTN
z*~QFj*2=IGSciy;qL=3=U|S$u#4Q+RNo2Se^y4p>A)2RyKFZ2zYnhAXs;WZ$TM1o+
zi3^2MH-F*J2C4i2io;E~#Tn72ohKHPzH#vLK)2L3zEZR&28R}dgm<d5W(G`MBeE5=
z?hP{FmA$^Bj{<aqkd<BNHp{RZaprzAm4(Q3;%T@47hKqCR`@FAjM-dwu+=PuDfe(!
z>|ZVuGcGlT_`^_Ga0Ia{{deO_EaZ5lvJw_5E{oVWJ_z!X3AwX_+JFhje@oW&kbDw#
zd(x9BC>jdzY~W-;V=vq`P_M9?HN3TPD1Qs#eGHdbGNmK)<*<RhwrW~1?y5+%Epo5A
zQX=z%_GgyIjM3g@NblA$*eAZynTa}%EctR5(LX5J5Rslk8msVYaClO#_t{g*p5Y?-
zPpy1irHDSI@>45i9+~S3L#vDHIOz(2^PV{S-*(gK+Nf30BTOJG-Q7K3I6Y2(PNbYR
zia-2;hDFM*^yLdPZwVXB9&lyrlo^c~)Ca_yK5ap!ZO`bqWX~n{o2XEcLdqT5YW?iu
zyGB*6RP8J|6Q1jB3$RO(O1#l~+d@)R6(yg6vag_PeQx1*jZD<1BBnq-+a2qgF8`*-
zvI7A~H~Io6%uFbY;5n(q2FmwYt^iezIMN0*Gc-*_Mku>OSAOXX03b=5N;|7+t5A@K
zDD1U69ZS==2INc8s$R78&qK{;x9rn@-`(qlZ<<nFf=H~8Q(82?HrYZo6sj3vB+uZ^
z6{}^2AEy6~5a$EFCKEGfusI8d)h-vH`N`RrK$jzGzFFioIvxt}tqnwPHI05SL3`x0
z*V#}AdB`#f{920*Xnvixve6LbL3n!sMEOrZ@IeH9lnyxwzc;7%FFOruUVm<F^hE*u
zok-4xss(6dEns_$4!N4XGqnj|G{T^T+eYTEal+h<L+zJ~d=Z<I|HrGTE(DU@e`>Ny
zvlHyHR-t~dJ$vOn2qlXmBE7Vk{c)4Q$G<7QNZsLr*_pb^ww_YTJGqol2Wv6`C)c7F
z24V*`*NXelhBZIGpZqeAghPv9MvUYH+5%p+K`K2&n@zxtywDGDHxem}r>Mq;rQQj@
z*;<(v_JjW4o*s3Brv>d&n-!+Kiv<H^?6zq#VM*J&tOkjdL?f|X$D#Htu_N-VtYLh=
z@%GW)Jig(ZL*NW!#JSt-XLJ^17-$E+hrZJt@Y4MVL}xmB|0C|G1n)}ts$I$jt?mgr
zI|tt=EI(H{v!eT|?k+!gIFSm9FUw+ex-TWo<xNMe_tASP$GbHiU(3f-N_lkM4R(iM
zT$NV=hs_=kq7udr{)uk(F^w;43O!&v(#^(H#J;IK|K}AuU85ftw9l{Yhx?Q`tl`PP
zIpj;(b)dzD;_D^(2Rt-}AvZL#4gGIoejctpnMdic2>#@}V5{BvRnk|nEcWjX>zC7K
zA6lIaMq{{Y<>evXEZH2f*>}3jMCht;1`d(Qahc2>ujJY2P^0=`))!(Q&7|lr{~s^<
zQ3la>l5Y!!c!!gl%(q8#dV?{BBC!wb^i$BDf}8}2oFqWM+`&E5xrEw8-{FzSbTL-U
zVjk&K6yjz>yRR3l!Xn#V#ledBr2=neQy(tA)9p-ZK6b*MYOoW6qS|Cb<jXA;!DBdf
z=-j|e3@1NcWl6nb64|aKUnDR}5%k^NK-#0_sKdu-9LnCjQG(g{R*%HAb#MSWK*hg6
zrIa&-U^*=%4W4hKVgz;@3M*bHldns8YTeJ1+ioZ=ijE^0>Q;qs34~*J3^nUv5knCy
z1CqT4|KBf~CpN1Eb9o_6-1C3L-qZz8V8`JLA({4Bzlg`f&H)ZN>hLK-)T|&fIlEHw
zWqb@PR-I;hORJvYjYS<%DuOSPg?$lWi#&dBCPHSMuL^s}TLtQ2T~l7bq+=(fR(5?1
zwS-)?NcOT4JXC*(J0*pjz#C~!^NecVY+B$e6l7q9G~eo3XTO6o%~&QcK6$-Mu6Lv8
zhVF&J^8CU@xHajY;(4XW|F77|B=XAmBJ3JoeN*5XO<L5KcYU23n@nWLVW$QmQ<jR<
z1{zo)*$4Dqly+1w$h<KEjlU~RBPVvWl&7*Plf2b~%xfoJ|99<&)@BxHWI&Gh&x&BH
z>cuwf(tyT@i>NJtq}R=EvMjVsv!=^Cqnc_qEdHXqj8alESeCK1O~=@7ea(;M;j47a
znu%Hmr8yiApx+q1V4xgJIb@jy!vg%}E97NVt&=<XyLFW;mhXfCl>^maLX?^ba2`{q
z6k}>Ax&sh!1D-y*vj(t`mLH%xq<L1;_bb-V`w+nVzb#KZ_pyRo!o*W5Nta2fr53yY
z*3t|i)Zn^MANr{QP{DlhQSx$L^y{!kOwqZsvHo{re}|t!rzp>l|8KUa$MvKRAj7XH
zEDtd5gTqZhb_Vy$qSZG1T8gt5FMAo6^vXkSy2)uuYn!KNq#Nu5%pcKE8F!pHsJg`=
zaKsKVcSuHW3+!Y{Oe!4g4yD7YjUF4G4ccF51Qy_eZy`2@6Xk8AO``&5VP39PRE@J-
zbM{atH~C3XZh;BEzl~QY&}6ikZ8L7cWVeEDRG#CCE98d7QZjCQS8b?10o@qm<U3FO
z%8cj^`~rGF1=os7YYi~;4-<)$^G2n8<$v*t_z-yOT|}jB%{{np?rBdo>3S>%WmDJ3
zx>ZI6ssT2xOQ~>3V(5j=gK0B4PzAc@goH$3&piGgMcgA$C+v7`L$6gW_Y<@Pjo&n;
z+sXCrlMuuSbK$UvD**~&7%x{tnc@xNMEkYp{{4!9sV4$98lOh|s2XSu5l=*oExB`o
zp)C5d@Fagrqie5P`R`C+hH7gXGRdaLVFGEjDao&n`Kl>jwjufO@##juf*YyDz#R@2
z2WM;OLiY@Z9o$NI@tSACFVn&SPd&2q>m}jC*9SFzqt^JKn>%I)vDKBOs*7mR@n(^7
zkYT2|u%(ik+(hZnXB3}FD%W`ln1NF98v`9cvk$+3_9wyYSqpWvWHfO$F#jl`+|VRz
zy5xb%VIBY|w|N3DZi-%(MJqIGZcZ(JpJkL=%K-Kap3i>Y@L&I*@6v+U4Nq=V!&<d~
z@aSua;fE9A#Rg_z)%iqP&F)zb*Opj4so$E?#~{*0Fou@f9{BRp&L-%o4Fq#f{oi}_
zhhL!DpTZ0OlrRCxc<wdlWy0^6-%-(yI7_O8NFdq&f7bX@!U)kA=E>CrCxWt^?AjWX
z0>W1$$7bl2wA_LWg6-C(!60-SFIk`45Di8uv7O_l@F*}ymOS1>m7PHUhD<Al5PY@b
zyt}hg73pT2tpC$h3qJ-x>ne_KR!oi6OjWnJ9qrvOH5oidF&SOK0;_7gB4{XaCH6@Y
z16YDI6{>u`wQ-%=1)xW?gpIxBnS9M;$pHa5-zya9S<U)*OL6+#nONYO2j?2G3rPd~
zfA@Tt={M%~%jv>A=wwZIKM{M|XAhdFhf7iPD7r(M<o%_K56kQDS0cJ=DYkYZoNY@5
z_Y{NGiL~M6>d%%tyC?)M0EMC^w_TTup6XF1e9}Si6WY7-guxISr$g#NXZ`*r?}lr>
z$S``$A{S*f7HX^Ow}b&QF!6z$H&g@%z&T2Frd1QTff5bGltu$cv6Q|_#@)*0MkqmJ
zQL}GPqeGWBXtg=*6gi`6ko?0u-VXC9%d(FN|1ApU;r<%mbl7QIsRp!Q3#$lsAdEJ3
zPQRkm?;Kbe@_rWK^z)!i6^kRUYQ*)Aivh>Wuw#fQM4s7wgaCi#<CUbvs2#@K5g?En
zTuF1zPF2jq$L2=p_3s=ebp8!?pU_uaV*TjlM8u%-oh=32Bafr!DTJY}(HGMG8}MIx
zs*rE>Oh5&U4g;NvBk6D&+W_{*D2HF+F4b>R22g4k>0s)QhcE(F%;n-OiH-y;b^TX4
zf;(BK9cXBMMs^i4UE~|QN2?oCUliG``k(}jk?s90;~#(upp5F2I%FtI=**PcxI1Vj
z)x7Z94FtuGe8MS%si(L3q$DoSw&(_Zkqw=60q{GcDi?3}c^|X|i2UKQ@42z%gBB5o
ztRR~PaT3L+(=>{zaB0b-L-$tun6#RpX+UAVe|XjaQiq^B6*cL56VTo(3{XZ#Vz0ij
zgK4j2?<TIb0`@dSFrlKyR-ns4ITs>4y5VdG8lnK}2ddR0eKs`@6QmaRPXtaaXHXy<
zLXO>^bp3?(nZuZC+;_}@93tZG@N5(#hlMJ(l8ta4Wex}!5w3U6mOo$hHa@;q@6AG$
zCxr@|@pU^<M+EV$p}Bu-h4v|CS(T@*xL;-Q`D*te&lT4kUo#My$?S<g(({+g#C-K4
zDX+7UF-%?&b`<m4-k*mRwB3sOCFy#KLP(UK$=*#waMgozgJ2AhXJlslmuG?yz+v6*
zW(U>5aq;)HJk%RylESY5%k#4Qmu)`}o~@}`;U6|&{GZ!OJ)yd2;0|l@QV{<v918vF
zh_#uF&1xYDx71I5AHPhhY2$i@t{xK>N3k8J*DkVTQyZrWtnpJ4Z3^}Ig<BRKi6?R$
zSiuo$;GJ|M3!4+#{$f&fHqaq#sFPzDR<RV2)cyLJ#yyxU!iS&|aq`CVTQ07mKG{Ly
zPVL0P)vTB>R$f{I?6-}>PW1@Bbu72_Yk9ysPxDUEp9Z);6R4HqF~C<449E=1BToiQ
z?jJZ3N~gUmoPHBC0J6hBJ;#{mnZ;lRl2F%`)Zg;wWKBR7WScE$Itg*`8+bweV0>Mx
zqP2+}%MG{Cw1@^~mYtv+(CGx@l-2D;J}f1oSOfhTwiAbyLix0TUV5xU%4A|ZoYi#$
z;Wzh19t%muKanRq(|2f9?}$k@B8gW{48TU(&+;5j(dL@btL)Y>?yChLT3c$2i=50b
zb6xXRRfQ&YAMReu3cAdCE6egAf$1p)jd-Zm*4;de^W>BA1!NpVqH1~psruO2stHdf
z%K)kU#B2#UrO`=h0o7ZX@UCh!et<tFMfoR5b3;yqugm0XN>R?esi-EY4gSIAMzVqM
zoxi+72-8PDv|qh3|A@hFCq1g-Vph3-F7F`7XA;fde<eHXZ>27glR^GEMOyGyyuI)V
z(BM{3=+a?+6xSl{&VJcar01M4Y`57z@i71fzOF3b<-XmVVy{ujvHkL3Ix@b-lAz~}
zO`vkIrvmF6o(->@ihFgE+s5EX-_Q9Q^&s;zlp&WizJnl^XTgqH44`CXl2ziQg;q1-
zhHICV@cp@^te^KYJZL;l))Pcb`01?QaZ0>jISp@3(?QVm+?uK6_!sRAcap9llLVN0
zW_!QX6iA@T+SPPpVnHGM`#;z#Zo(j88mlu-b;W!rg@8Kvo0G)^7f;{}x)&)JG_x6H
zVRg{a(g6A41J47s4&+#eaJw`8QK!5aYvU*-S;fF;XrL-Pk+XCgh%Z?dM!KFQnPVUj
zarggk`j%V@F^Sb7=Lck$^i-XdUHKB1UAt20->LgnsRb2LRj?^`>kpPRMD+)TIR8J}
ztVq=qESbqPzuaa5DnIylxQRtCY2D*v6(=_sGUtc7R&}D(fI|C4*UH8XUbt4GINH!y
ziN!lj9`#Gzw~iI0d|Aed&xlU>j%b~2Uf@w?NGFQ-U6KF0Ck+IYXB#<pjlaZmO;A$Q
z?1z|4vrKIEA!vq`B006$A@f49Al+t8#{=FuMUq$_ZCi}aDlHSOtAtzJ?SvFV2X^MK
z@7GvURJAwl=g04=9{Bj1Uk-6Vb`LNHsF%txY1M>OKu)yBs=B9;E*)YTYESX(?$m#w
zJ2M7VOj(h2{$y$g$;W9jsWdUdyY*<z<`}??d>s^b9}Ki+l=3K?w}ix>rgDrM8>3tq
zSw8c~Adx|PAxR3R*>!ib&H!nwEyIixO}imP0qR{z@F-*dT_z6ge4bF;LM97tbYt70
z<OU~|eOTTZ=%p?`ef^>k&_TV3Z-&l*fPD4lye`&cJ!ccyFCFChz*^QIU+HY{iHzIp
z%b5T05fN?jH`q3erHevtHk_T+R3ottFv^n({FIHp%l)D967ZN0As2bpJ0g_Ly^Kv-
z$q3w@tI)j#_0=s87EQqXr-GnsSIy<gfW;ZsYjFyH*2m0#3VoY#_;vpz*O!cSRzw}i
z&H0VF26|39rn{0;Ba#3OwPB-McN1phas**5#`~@-(DP7}3|q>hY+-H#BVY*u&P&Yi
z;4e`<G4?#}a@|?9Eg&_}b_!UCnK1`sU6Y?kK?-Jk<A$T&YeH4)IpCU$MfMs2MiKiX
zc?Io-h=fWV4=B`a9chnEZC*zJ&WLTXv($`coUuTsH>la4p(<Y=b*w$S5v)%p1`9c@
zt-yn$JVGHzTibx(e9Z9=_DPwR%x(YW?{Q{)URyZx+YUSTHR{JHiRwV=Uw~9|3QBa}
z{TsoG72=z>Xt|b`0|wWAS{t#h69*A)=5QvW)O3o#RKU!lDzzT3-SkZ}r-R|qV{3Cu
zX?2NfZ&OvGUkz%UJB=KrjAnWs-T#0&c@LlSS*oZ1-yb791f`<_0F%JXjZ&_CQ{zgd
zQ8j3=z@eBx+D0s04e<SONfSK89rv&*qwd2phOn5Tg0YX}^ks`Zna6tYh%zd%!x#2>
zkRSvvdYuMr8%XNFS+z6>@d<Ho{HS4~H+cVVA3Kp?fKJG!CTtWj_x4WtB_@cWqV%EW
z2wI2LbRX68(8WMOUzH7EO<kwo!c*Xsn$J|cRm;0VD=kMvYQa7Iwj$kQ=?}lPicACx
z1p2yC0@v5~%&^xRSoRnU_AMuRz@=X0;$8vLyCON2L){t*)esGlowH6kpY0FxJ9~GQ
z-tM3J+ei$?^uc<9-N5G4mKti`ga0_6155~L--_^TP-jx5jU6RWWQ&hXb63I=h1IdK
zb8%-zd{ZXJX%C5#kV<OtyH0bm=bF&%;ovV;?smu;v=}^Eh^_3J#h+<3%J4ZVU&uXW
zm4K;Pd{WLA-K+3%HGFZ8MZ#vhWD^DI>~Qy+Ub{MnmaO;5c&%pVA#8UdLt8(W54GQ#
zx^Id|E@WiT4{Vp?>}frV0Y%~97&~0E7jflH$BRH!b&E~tzGk6O4b+f$G=s<4Rie3m
z=2$Ip8eRML7}^Vj3)W4?C6<rYNdT!O6j(v>vrd4MM{webog`e^Y>FY&OFUr>*ADG=
z=UULktPNi?Pc&O;zC}+Q4)f(!+^THEjII=k{n)~L#OAgX_PZX*IJv_uR@k~BQu^m}
zhS*7>vcoY|Ytep0lKyc=_uwEkS-G9_1xdVX;bZ*>j5#s3w()`J@spPjiv<-{UX*?t
zhNL<4w;wgqg%AxQwEu_j2yX%_ycX&EXpUWMNO{#55!Ai}#~EGAckcfeKUGLRy|!Mb
zl<)N2)FK?HKN`_Qxf#VWBp)TFqn<4hGMM|jknDg)UIB=8nn=j{Q-me*D1$rNF$got
zaF7%P-L^=L2cPa^>Z$?$`Dr_2%?h%z#D<<NS^m)yGDF_2bCm!eG|y~C;jWQDSRe|N
zm0$6@emKDPkvEI^eSHpxxZ8nhF9r6zG%nly?^Wg2E<eMRn24zChYwS;LoY={Hrdj^
zZ3Khz@;TiaEv<f+mbG1{(7o*|t~W{%VPy9dYE6o%WzVX{TKA6>i!&4{TePU%uLJ>?
zL-@xV&waaHlYNA-#JICuW4nyrLg4&yEwx0X8v>lD&L=j}(hpn_H^cZ&b@Q&8+H<|n
zac?TI&z#0i^x=;6aLar?n&?3Gx>g5R=hI$2h`HL4TpQf#p1Nv42@Wh*|3Jf*^6j5p
z4>#_Bp_?Hx;r_Ek*5|{lZujRNz=ahsHu?D@4;0b>BD`TuF6Y+H+M=8@0|447LlT&p
zkT;9S3|YKSRgCwqxCoT**1u_f@PRGw)4Y&&R@aY*NT^<o$EK75mHj>zwsW&yzeT@Q
z?bO2pL=*Dpak699yrZ{|O-IVA{sdMvN<g7bNh7rpw1k0(oy3yIe-eel+V83xi5t#&
z_b)P0ze^qe9pXgj9!~;DYz|U!uqtWx7;BQY%=A1gCamZMdB$tTQSY!J@I;*j1jl@)
zlos0p($~b8$6<MKz|z<HU{@X5CXCs<WTwXjsM_O&3kJ*(ImgeQbjG=ibj>unMR@2C
zIm^S9fSJ!2mJf&Kt0r)F?&yeNmm7d%7Pm)zbMs)LZOtk)UriD&w|-{geL9Q6EIo7g
zQPZj}D(<6zbKT-h>he30Q|tU77ATf;SEkD)tXarILWz=Hx~=^S$P^xca(dWWHO|{R
zJ9$2NS!jNn>hp-AsrUPa^>9#8dA>>;z)G5w{RSA}Op*_0N{;dL6IVu%6`f-n*leI<
zJ&e3J&Y$`IbZ>)LbkQuYJujMj19_Xy0K|nEy+u8v1DC&|b8+s}iUWs*3-dwJ^;i_A
zofGNJb!ME1lH|v?1%EIXhz|zm69aQ(C4R1bG`m~oJ(d;O*t|NpOm;eJ!Cd;TjeOv!
zsok-f&W!8}HWe<k`Ytud$&E91l}t!%+t17inq{+d&6IL|URz&f`P>9br!60{hAokI
z(>3_65<WxkAQkm)&TpW1U$cBnRY}+%M$FmIK)2S5CdwcxUs<qpbeEPyh0B+oDOh(8
z2d|VvDJisBz8^upMOqtDoohnJ#_7QHbrFNlM-}-tWq^CmTnA!t4Gxe(-`SN1^@I$8
ziQbFuW6A?r(C9CdkYwpzor(s?xL$SEGz0L~(KU;IqVuo`JbZdKbRdliO43fEU`m6K
zjcz94m|CfZ*Mus&-|*}@tKx!}9x^7JNMp7g@vUy-8ubb)utc)Qodw&k+=ppWH-Yr2
zSoXZz+7=BXHM;#G#HR|URfzEB^<IYl4kn4_e3>6<1T;B%WC{lZ7^%)>?A#Av?@9PQ
z<>Y$FlLghNEeVQOyoj4In*)3rlkH{xCO3~9;%o)}>9oV(dj5BnlmW=i1y+Ss#~vF<
zAGU1$2;wliCr&L?p~HQa{aM5Er5uBq=%_>DAi$DQw;+*fYf`xpCUK_kDBS92U6E~h
z*hG}F^{%ScMyu!iToHDL>4228>-ojryYQ$FB#U_*m!>?4qeLLAe&dKx{*#%iw;C@=
zvTH<V<IFzBbJCjWs{T1XtY&1EdIX((E%4EN#GP9H@Spj@XMs2-SPSen%XmaIV+!L9
z?hOj_@1xuGTSkk$Vh|5VDpG7l%nM4l&Xh$1HyB{n2`OOq3)@+`z9VCpogbFtB247Q
z2%9Cd!t|lPblIY>ZejW7-k7J08Yy9mL!SKI6T9!RIS^tfvVV)2zfg!wcw8IxDR7xD
zBIfEsd5$TH<iQ*fRmPnJfc(MjljZ?%0t*+aF3ht=^l(Vu%C+yRN>?QYTv;;@kQTq-
zKGbPxaFI(U>fnuCO~rZ0UbRh04;;}UtA)L;F3+nkZ~a3Clx?9PW`~p6X61*ShEi%|
zs<?6dhJ<q~2SG2SkkS@;l;K&q6<d8<Nu@+8|04)$&FC_D0Ow~YsR`a$3TJE9MI_rT
z$RiRe7Y2~(?j%|kt}VAie`IDfh|xHD*~lng;BuCfvGVwUG{^JKH$A*ulIo{W9s(bx
zt`VhorOEZGBx|#+MUpzNfZNU7{N-NuN-ANw&@$(fo^Yr7b9yd^Z9RhF9;@Fz2w;nB
z5j<ulbvddUNZZ^RGIUjv1)tbk?A5zqiHj&0!%Nx$<LH*SF$Rff!9_=2XJkp)x}-SM
zg6Lftq!`seDpbl_L~LhH8lzgrN6qg4C5DWQgBW^wA}ugg6g;kVVaOks@%bGPUK9FS
zbYI~4jPQ*3sdEblJiagYf$p+U54rg0IDyU`C^Zdss*9WMXVtVpiTSv#!0X3Fp-3<q
zT-ysB0d_@Xm|a^cuKzssv!Ym1I{$tq<elipoZ%Erv77=$z^wK|u{Y0z2)X@wqdw|O
zYZZIm>1RU6gH0chLJDCAMy8UxHir!CgFL=XW&t;FyQ&I()uiYu*U@SG$~sk59Whjy
z<+-|jLhkIf6oE@8Xi$Z<KyC&>K}oiu>(%EXei->^6CnHo*(Z@k6Zo&|oU7I13$_Y2
zou+cKRCD0%5m%7k3G46EI2i6N*L{_D52;5<H{XK<B-N^%3@qH(MdmLn|2ni+^E*|t
zIF`5}KQs4<bRgKC03o5hht?sTwpX$Hg}8p(sZb`1IV)A{l5eF0w<YF2tBlar!>!=(
zHw3UKrQ;ePG-lBz;Ytu%zoW{TR3DiYEiJ~Kl{PaO=;3<N#_0gyTv-r9rJfp8!Kh3x
zIZcnSB?b$%Gja_%FT13Psq@a)F49f01CXD>T7d%m5llfecE*PFL_23=08GgPll9%~
z@2YYK*>-~#b)dO}uw==uzAJ6T5OgzvW9elcVDk)cmcc(3m|yvOINi)|;@ox?9WRb6
zuKRN&UWb1JfUv!y$+D|?GMtyy-WJr8wf)V1%Ke7GaXU3|@#(Vuy@7i%{%gTna9hwB
zq4}P?(CpFm0#65fKK<Nq(n|<IwO14j{|w8~)cJ&RrHfr(Y$NzFz>|1DA(%-4w#xoq
z2JC7Av&tD4yVxs~er(cU;q%JKutK89x;yx_X9HiUou5MTH)@C=?cZe(Vyll+1ht`9
z1L07mw+ddcuc7+mE3whDBKOjMu;Op_={q>{2d&Q@Xw!zK@Rz^vFw|cP68z*Z_MLHR
zyXoAn#!F@n14D;^YlWMyjue(1Az5nr!2|r1ZzVC^V{gG3qEng68;EdTnB6f<@4QVf
zkVKQOEDgkF3cMO)K%;IZD%5rF>`ewR(4dcWJ)OVbd>4^3oT~QnSrDy+4zl9V5d;yn
zm`G87fuKPh8}=My|9j^(XW{vu9PPyy?L$jtpFva#-o1ktPf_<)EX{@p*~S5SWR`<y
zQNzGrz}O&7?$xcErd*Qj{Fb3Kih-kV5kkLUy`NhJawa!VUlI2@f70npHVU%17D6x}
zMQs0EEGG4k-X-t-@c!!uAQ=6<PO6Pub?o>?@AJfL4OA`Hn>oJ*(sQ#(YEpo+htFlp
zC}iRxAPtLPh-CG691l2KOvU!uT?cd8j{eQ~YWowIUnZr@l@(Dfu#Sb&Zmj7|t{gnb
z$(m>8vS(QDu>@msrt69DN?_7b8_i#95&O{|$rgLz7X)G|H(O+pL!V`r<Vq)S<J(0N
ze6FI8c^&R!)Htx+QcE-U7OGVWv&4GX(o4|DAu5kAvWcL#8b1dZmj7<})(-#nyy;_H
z0iMT)flDzj1hn$h*$E+a**3h?)(Ve~H9W|Ubf)!Cvr4lCP*e^Appc?`znN=WGQ<S8
zJm@&Gqs7{W?e5Iy+rN3c-Q0yTgs1@jKNuzQx8=_L%M1F}KeKlyv7jQ3Ed0qlwtJMd
z^H-%EWrSh#_d?7tW**P~9D!wtB*@`REat+Na~B<OddS)ke&-y?vwEsb;;EK!OUA2D
zmbw4h{)VfxAMb>Xzt+mF$X>P56);54jXTS3`82?zr{Dlj>VgHo-s|#CG=qitK5`L;
ziT#~`-a02ykaOAEJXH(-4VxM0OM=C?7qN&x^&R73+fA`ubg@VBN!pLD8(Z9PMDGx&
z5$L*$bYn!@@qOG-kyhZbh^N!MX$;UKIOO(ex%03M{uG52HRzh0%*c<Oycj8*^;cbo
z0ROgZc1*x_De0W8NXYEN9gAs&Ak=xRi5Tu8BPrqP&;!Hbd%oFNJ&|D2G@XILo|J6)
zFQB&9|5P3Q^2?es$yJ}Oc@Nk85x3!YtmCX`cCz)TuwAxAm#dhfgB6J5Z7I2C<cpO7
zv)48))c3<P?aPfcTuSAo!X4OXt`hfg648caL>5GQZ0~@)Yt^KR5(Ywpd3G_(Xe1)!
z(kfBjBi&uZZv2PS?@;S#ERZDf)yCBHvC~`~?J=>yK%M&u!~UHVSIk6x`O1G2;v3lL
zRcf^!D(|!DZ<2*&dodmne59H%NP+T}nHCNnMoS*MH6v{XV*JHZ!cH267fJL8Z#zQq
zMbmt=--Z`Wy&21{JlVoj`RSz{_mj>^N{NNnzkJurkwkLa&12Zj%c)&zOEF*9PRBy}
zI!cvV(6{Jyeaq8HWLK>28)uqd{8el?iCqfOUqKp7-jKL;(IZYeMU9vX4l-}U(Bf;)
zO179ppg`dy@T;HE+|0*nOi?`i<Zw-h#S8Ifvd-}xAHBy$*+4eAJ(i}f9i?KeT=|lB
zvtjYG5Ab45_3O(YyWrKgE!D3e8g22ilF3F`K9PR*)$xS#$4r$YRWJ?$?l7UPJ&Dlh
zKJ!p3llK(xS>ojFgF`@|h+%mKcoz|R(n0wl3gF@OupBw#p_2m?`IU`pEITa+X{nDQ
z{Iq^z_%Two?ePX|wlzv=gz&@^r_L?8-crzSnc}9B?a~Wp5Mr%xX#9NUgXDr2K64uB
z4dY#|E2~0B*l+dywiNa#T;1BLasq5;1EBD6^_7D94N&sE$TF-JiFY49XI==)4jL7u
zTgWy$@Hg_NHh7}Esr)sd`!hJN`E1bA#iaq_dgh;QMd2=voDdS<_T@(w$skqQbyx-?
zh>D?Xllz8iY<mM&(_#ASi+(GL$7auJlYJ4%pm2&Nz75Jy=`A_78_Swtqa8q7sKqo;
z#39b&(?YQ-lVnN(yrWUG7=CUH@VFoka@B?}P()I;=TB4medV9zr*|pofab$7daSd<
zydI~3T_ngzSe=tp`cgWr02J>})Pd<GBCuQan<rA057~xZB`EJSSgF}!a77Pr9<YX%
z9h_X!Ub@;cj7PLqa>K)NGZcgUVG)%OGqU0u*OU6TR$x;QbvqYhWs;w8<VS{h4gGT*
zyN5EOZ=cmhtpVrzTaC`fnXHY`zNmP|3Bo+nt;7L#*+^-h!2l0I8O=J;?wQX*w8n4K
z3lf9blHF0H^|1q~#h5=oP6N(xXd~+VKFsF2EB_H$lpp)Af)*AOTu#FM;De2Y{9Ppj
z7?6=&_>|RAkqS~AfgL38TT(V5WQ(X$976glBg;YCqdMPovrgc>242n=PGRPEvmrJk
zd0D0p&}J>&<%(YSe2JS^w~Iq8=CFIJQ3MP=60;vNbDu$=cfAxn0^=?5GQ_A7yWauT
z9@u*}m?p_jt<OU+N$3MMc23mIQpleQXlx7=nv|~4!+gMFGQr$Z^h1qY*Z?3p#%MxB
zt?&hZrWHKDZ%72HPqX_KW&j7ExhsBZh?GUuEKUI6WPP&+$v|Oy4k4{MLLl8h`{nS&
z`K~NHLIx{F0t%rDXoEp03O_-DD;L`FUPsj<C+oD>{~KlF$KwqFE$#uqps)ASc~B+|
zp`ZB7hzlng5BX%w1-b~F&-PoN!eM%Q7>t_%2*0{qCPGs)+SHBQTf1v8UAN<{SSPW^
ziWqSPC*W+$lEH-*ve$OhGXbvb3YR7t@=1Je%lb0+rt}af(g`{e$H31`VZcr*r_!d2
z^ltikW+vnU?|F%j^dzi-&{pMi969RMi?I8GSlo{7<n?Vs|DDTp{05nyW0%z8EVq*r
zV>B%3ouHah0qDE7^1}@tIde4@m2ROmEwk(7%2Gw-%`jyv4HauQH<b`VAt2K$zz+^M
zyJ?s`W_@h$*$Y#De4VUZR1r>*1MpmI4_k!u5$Cx=#015ZYgb<RqF0^kXCwd}(7*|6
z#1yZ=PaMfzS{@f0LqM&T02@A*`lBZ-dH|*d?pumXnHgfY%sBD5mULROkfQxyRI?=;
z$cdE}J+X53LBY;p!a^Cz+Df<Zib(nPrp13zm9>&PR3lUI2gWTKv-q5dE2JB%i*3-J
z*Dxc3d+o<@_j~z9G%0Zshc4NXyT5lm0jbo7$tkSrvZ#q=oH@&Hg$YgsCR0M9{od|1
zTt;t9k@yWVNz_=+cJBpfyYojDRm+AAIxVHANu~YYt6<AxTS}1-SXU>?7KO&;>M{y4
zYF+#(k0%LZe`iq$=#`#o1!g_$2W*R&DNNzfpr(6D0z<d}wMUQ8K#_zc^;RWPyQbvD
z$&E++s|1G*5q}VZ76m>q^f7%*d0qG=&vW=O@mZW%YG^<xt=s#J1H+oNaWxD#+4Z=k
zY0<#?i?X3xg6p>d&+Q!+QzBZl;5VtwtXSP?5gq88O|j8~rHBr%okCSEWL%3pQWm|w
zm!N5<&qu9s!OM@1>LP)Z2sN{CQ*2Xo49u6b@^*Fo%7-IeWlb|HD~sL#LB^HMD!MAq
z01WGaxK6*C?wQT$#jf!)db^}cu=dHehY`%vB>#aOYTgqy`t<(xs}jLMT|*}QSmTSd
zqz^W~5Fk@1FTgaq9wwtk<U`k9k)o83r?*m6({PUJeQFiu)ut5p%!x5f65TN#ZBc68
zqa9YMlyv}k{-l(>oO|U8OzS43PFx5=Ti^pB8Asx-Z!yAq!sKqJ^Ni0#pnH~=32YJG
zRJcZmGVOKFjOWJb%aDWxZ@ftC3Ro*pU@kdsT-N*99v}ow_|7kl>lbgW-qh_Mv}o|2
zuQwM2@`q9rR8(hH-7LkBE;)dz9f~nc^6Hc@$b@loMoWN5wuSc&%2u;Wg0|w-KiApG
zW!q}orCqjkNGgZ^F}hQpAgM?$tz*UgPDx33<M6<ghKH$E3Y0;HAJ)k8rPZQENtBXq
z%dsR*EcWS<47U8qJn}En9Ss`!t~82IfFEVH_$#6d5Xn=4WE|mN#%IrUbqJD`nOF;x
z@@SS+C?H+08ze@YqW`F#$6mb&-anDGNpb_+Yd;I|keq>g?z?%6a1_HBY~L!L;ko21
zhFpMxQ;~PeR>fxNri1Q8#}PpRg8Fr)>Lct%Z;=RyG_<mxo|q~(9@TcZnfJalsW+Qx
zv-C2bQP~Zypx3ilr0k5U!t<XnTXwA*K&3C~8-<#L4anLsO1^l2mQGP<%Q^;XYst5<
z`UnnVh;U~ns^GL7#DSvZ8rpEZuX@wyP6^UBcC>@*E6=FjRuH2GJBw7$-jqqSh^N1v
zzZ-7Shp)!MW-LwPv6>E~NGUg2+wZBaiY}6$`+$q>BYzrt18aqnNIZWxv0b{g^IXvW
z+HJCymOrn)B71fsb7HeG);yTravdfPl6+qjc=DNK&dQ3$DKv?k846A1?)I-q8jvkU
z0NJ!lTDHk<ARAD5mz=I?7Jk%!#GE-f15H25xmDbQQsSu08UL?C+TwG?Q1e0u&@woO
zIlF@0*3CVCv&Sy~*V~EoRDiQ7Z|APb>X&_)!Q3K;mAM$|j{~Uzn7v9)bw|>#3iuab
z0YbPhpHxbZ2&`l=p4AC&OAsftfg!8%$TrQ;L6Dd#p57`=a=}AcK)6XrWo;PXL4bv)
zLAt8Ng)u4Y7f6;YCo!ayx?=O{1^+%j4Ok@KfszX^+JXtC(K3J#z2o+AM_N%VL6_|m
zU0<pWylv=m`EA}~e3-}(`tPi0i!w`wJ>EWO`+Sj}ej3Z%=KG@fyg!(si<PQ{RW$W)
zpTlnLJ{I6f1hXk0G<#W9BACiUv0M;h-xC)t#KOvJ;fowGmF2648<CwoR`D9c*H1xG
zz!FfNc+&bBB#G)Szs#Owx_g2+1K$lQN>3Pv(;65PDeAA%$b|0!XdxDP4n<LwbxP9%
z%XB&%0z{|>6C6=vNc61kUpjkfR1(k-mL25~#vKybpH}0KsXCV;n&snVXKRN!-sgyk
zTp+hU?xqprk=eu^woDbRbD>jqQH9o~6_yxIK1;w{UmXP5tC?-Fe=xt1dZNyO#~%O0
zAyjr)JwyrTsB_O`?`p-Q3A4C44$@h^n`VrZ{yl97P45*Ubb2+rV~^~hf=!B>>0nt|
zoKv|4?jfe`|EV^5Lv|*R@S8<xH2(Oo{^)%B(5ITN%6+uakSGv%Ik0g84fE4X&eGRo
z*io7ZihBr$(*q9IVf~qep9q*|@9F2EscJ!t2S(GfUs7lt0!2z^I4Xtq{R4NlK3;$2
z6J5)&2l>@ud>Zc0N!RUQ)W^H?SnaJF;GjpA_S5;o&5zLO(UkoY$HMab6EGKhn0^}`
zGTLYNPk8%?bqH3}uXo{(Ga*(q&lMy;XCyIAl?xJ<%PwyG13HP(Cu}=T{W|VCek&x~
z7`)ei`ke7u+EoO~-^r=OAJ9iz59dV@^ym4>+BY*P9Pm=AK=sql-#VHjI;$Cp#eOOq
z#tvN^Y^U*~@gLcs&mT^+-`D6KJB`_xYBDfmzyX8wehIR?hh%7XSm0PQ$!|nHVu)X)
zO*1B6tZ|CX-CR6bwq)a9P4VRKwE?e32Sw<(z0~33X^DPTt$Bjm1{IGm86)PN>TO$Z
zyBZiGUHVTm#Q5nG2{UbB*6KydZ%TDed`Vt$oACxpJ6YuiI!JnPt^#r_!QH|iCA8IR
zF6ojU$<No)D}qLLEfX559;Fe0M`wN#^H<HKJ;S^dtWzOR%B0~1Y5`#5E;ah*n+RNX
z{%j;f8`eN3DRL1c%L!7?hxx#C>+{H(3o*$d=_V9k*1>jt+xnjQ8t}AB13Z>Nk_Mns
zO%}3V4$CDJwmPfsi)5_<j%dR;`~DyS7DwK%UF)4&e1XS56V!+<lsoSmmA!OVj^U`E
z^fNa!K&D$_v7;Gmm79GYmKHD)P^cs(rvIPO3JO<EsjQa}h6_`D@}PiTXOs*taa+J2
z8S3|VF2nc_`8BvE0eBw#pinj$CWb`JITp*)hj^R&+J^}xNylk$rw*J0KwP4)qQj|6
zrxOd!KhXVSf(KTi$3UI0@KG7Y``mrP`C*atkPj{k+Vkj09g&;+h|-~jy2Xp@COZjh
z+<Uu~<+TJ6XybVImHck%5s-GEw-K7<2Na9%Y)O^9Z&3f)e;k!bX;WhB%7#SXZG!UY
zW18Xr=YFwVUYRp#h=<a$ocQ)mO&j{hTl05`z}`;3L_MWn?SVJZt*Do^<~y<P*VG(}
z0Aq4`5az3OM)s(&Y{6duQl=2kUn-NymXwXBAQd>F-3Etlf}GM`v5}ze;i8Dce~?Nv
zOLa(~HLd^r=tqQXxM#g8?~T+$ch=6m%g^eqUDs=HEG3azKT7STxhR_UO~Q3&o0PW5
z^0TSk#qNxr+d)n+VI(X(VIDBOuPMhY2<VqgZuPRg)zWAOn$>?lwE2T_&|k1&lt`*~
zkRcql*aN^@R3c&ZBH3SVR^U4=cqooP2^JrlJA^ptji7)s=G_rpTthTnapHQ-d6*eC
z0Zj}~>R^6<5FpIx-iPqT-D2pAXeQ8_PrFKhDM1HMe)~T!g0H@xeS!4O?A&U8PE`#g
zmC3mE#(U$0B!_{??95hL!>f2&!JtWX3e(dEX_k7?GcQ@+H|$FD0w+lUuU-ak)e6nt
zLz`jjFL4JDWK1a)x|}R!@Q5nbAxJGHp5VMJ^D$Ly?H}bZ@%6ZK`+J|30v5G;5-#_g
z(WKT7hSggB`!@0=5Yw>3hRSZ66Vl$K>kq3bna%0(X|}(TYY^ZNy3Th!{UBfSWxe;1
zJmu+EctN^1HRtbaCKCvf>%d$cakctC(NtRcfY5dTH(K5E!%{M98^A{ImzYq=>cQX!
zIhfu~v~I(RL_4s1-<wuU(r*r$Rv(E=sGmi=QjZWFJZxlvRfQ*{Rka*`6eQKIK5@W*
zo&|e!wljdc2EOQ)9C5_hLIk4vy}EX`TZz&Z-rvL1J~Aa(5UAWp>0aC7WXd3n4?F+w
zkPtaU&nyih9C<L@3o%&QTf|8GuG>rOc7#=Z-6pPAGx++XkQ|UwL+eMc5G}ZW*Z-|_
zaP<j%2xLoeMr?#P#tAs})g!Q!Jb8p27c$_oOiCtJM125SPhuzR|81jEFPU@@?EJAh
z<SS;f-~zVngCrcOjjX+5LdY&%&YgRe6DXFghwP=AUmdql){cjzA=o4Se}~#-{wYp<
z)rbmGY5{m7`Ln?+X=!WXF{OlP!O=@+YgMP8RJB)wkD)o3YbLd?v>LoYU*_^k0SWvw
z`jw>y9-ey|Czqd9lh;P%0$a(v5Xv?37=_dW`a-US@QTe@loVb<iEK{)j*^ScbDwC2
z?kwsyie};dc3B?CDAB)_=`Wu%@VSI&_C*TPuE7-XKn7zBBlmzUI))jo#uBmfw42Q!
zNpr`@D0Or5f2T^YFf8M94H5o-bW+i3Ex0-qItI~65x==YR)cxI+hw19sk3?ftop<p
z1Q=9tvGGv+gs3N}<dmu&7VuOz;QM26EiELH)VYu0F=oBXUSV*KSO&Iu%g$Bp$E|+V
zU#l=<WK$s`keI~aAzzR)q>lAWJwU9&y00oPY}ujiql#qd$#6qWywZ>7%7k}&nj&gz
zmvw0?AKmhUbnCX250OW8tB$C7A9)Gq;(l!lYtbpmyjr5gcE?PYcrvdl<rTfedwj;{
zK}X~qTe*1&>>h`_yf8rdPVT!2bETDJHPv+Th58vH3kcxNe24B}(v+}!$K$U6$<BLY
z@lp-@p4MLe<`8aXs~(MiLJ;_#q)48YmEd`HIBh~RNN`PB4Hk^6Jz7$1sGMes$%|ad
zdVlTw#R3+_$8oNjn9MtJhW%NdD*|h-XWKNOYNN!YG>A5y2jkVCaL}ne#1TyG&Q3$z
zaEGcal2Jlu)u-?^pXovjSt1<7QVfKr0r{(argdUhuv7(*=^*<cF7cdNDan!qw!AI&
z^oj_1A6tp#=RU51*qQ^=Q|jGwT4sW%c&SLy1Dpz!r^ds0!yr@hk#Equi)FL~L{^wC
zX2%yJHSHQ-63eOXOU=1kqHt*eX&;vv;pFH9AGLGT9q@$+#g?XFYUl$C!P>O*y4}NK
z40L)*r-n9_#4u@u63FVHAx&8YNhJ&6?d}Flk*Y(1ic`=0->jmIr)_Hbs=6OaIf}Sy
z#y8u5T^+i)N0+(hnqaNm_;YJ7<MY0uKBEOD&0G#aVgk{oy{SmvL%PySnDuUV0k%QM
zu6imA*!J<bz|`(sL@9rr;Wg38l-a9<8e5tVQN+ba7VL{KSS-U&4y}JC_yF*%oZ3I!
zx<cY^0>5v>5Oe7d(jlThtKf(7tmOh2GQG~?e`SOgWns6P8Oc^*<Qm3X8AE>wZJnC2
z7z=A+@VD&t`iUCEk<Eryv}NIW7&&q<ggdQzK_#m+702yUOx3-^Dr%%yfzH*^eiOy-
zj(7PSKBwnNg4K7qJ@)|Rnho?J`MrQiUf8bp7~pCaPKowO^s~A=uv^cxM18iqtvZi!
zF7bMMwWpjxI1Esb<%u3Y6Zd3l!?K0@G>=SUp{;?~<U=BE@LHvt$l)S6k}q0Jfd)CP
zu<Y`&-dNl`ev1|VlNG}TU<AG@&mVVc-#kK`RJ}JJsz^KDG*^LnPZP&%vS$W_#J|fU
z+{qpE#aL}6#Ts9VwG<E>raS(`i%O+lakB_V*3Sn}P@>c5C7EH`5Y#ZcJvGI&R`V{s
z;dr`ZejiGaLzH60pr@6sPfd?BR5z78GRSb2pl#q}#vO>)*&uC;!<2*QT8A;^y%)LF
zG#uNJP6Oz9bg$O%VrUO=IFJ6YyN!A9t;$9Kk-jaYjegz=j3V{%P1ife*D<_9YE5q1
z;Bn+j^v`^Mh#KH>P80vk$*V)ds#)|%*#lzk4c`GPMz#6mtu##kIyrtSNx{j)u}=O!
zirtU)-}*j3Z-1@gC>ECHdt(2u7HetGXE?eG*^tTbGFkU=H6I>U?O%)2>>-w~JMJj>
zf?<_QjxdO|&|4GP%QA8D!HmrEnZJgMS@tH02iPv|ri%KLeInxErG4(a^$~*RNb(*j
z=i?d$P$pH2a2d!hn>H^Y7>Z4$)MyqLj`gY=`Dr<LTA1K`_RO=QRc3at7q{<#FmCHr
zgf;r-<4EEQXOx91gGlN{v07G(K|BQnNQ?wJuKfi}b+YdKoxFrnx9QadNqx&V)#o~4
zfm!6J=ZYIsi$D~SrdK&|n(nlUb7TOMl6F5Mo)H67EVVe-J)lDdWz#4+Km~Ua6wP?}
zP5m!-{Cw{J-2pSc<;5<Dy>SX=3t%U!u_Xxw8DYdsRZQ`dxt=|wd9+m9W76ZqU(B;`
zxGUYI11>!0ld}J^sA?3mX*^giR9;hONb&x~JeuX*7Lgg?m*)MJz^RVuu2$hN#o<wg
zH;V?*C*QknaA!s-&#`KIXdy7iK$}(<4=q`e`LT9^s3D-oM`zAzlrmimk{C~d9cRzf
zKQU3CCt|ecS1TPYQScU4Ruh&@$UTCXUaDvVKliF;h;11BPaOCIBH~8*TN9L|5DIi$
zTE0{8arq}xoBV*pfEc1iP5rLhK$$ZLFWUtS0+8yoeCDEZU52#p+c(Z|vgMCZd4wze
z(Wc*K=9y~F1kn~HCiF7=30AOv){z>V<I=}XUFRKIh~oFXq1OEuv2smuG<Ld|yc1u%
zD0N6_;qZuBL*j7c3uP-^mxGdu23}gR1hI>5%`3u8W%6eq%V?3S91tLdx2?SD^nj`o
zH_BNgvaFUMwt@TH_-MzboHC@96^1C!Y|C{U723t1LS3&<vjZ)XNBq#}{@Jf@+q)Vi
zTCFi4b=zNa^n^U*KN=CqisGlQa-r4+xov!si^{@0Ow^<21M1c4s{IzUqeE#k6u{zE
zJXOPNJ&4D5c0$|M5B<>S`WVL`NngvB_J2W!F3$xGq`|p<S^0RjJEsjuN+Y<gvz0}A
zErwgoco-b)eGw;yB#&of$02@9116;=A>flhL4<|AmDAKscWxgIDSuDQv!|7Rh_eRu
zztOTeXVbKU*S^Q!3E`X}W}9b^;=mX2LOZL|AHNfTwbux1{8bqOgpSUP>M9gv00JqC
zGXinel0h>v<d!$vtYn$+c=fB%o%cmG+fgygt^A`uBC-p;;@B#JT}Bmig1PG*Dmaul
zI?{Vbx~9GFSAnFAs%(boerTMtbQk!RCgd(q7T$yKP_f8zHjlIURFKiJHFAnXaqN1a
zQ3_Fy_ZKNsZX)o`{(lYkB!wXh^Q#bd4)I1}NHo{CneJA#$saip%_hLQ0Xh?^{>Z{c
zILt9bi41Z)nh+*ue9j7KBi;{Xq+}3VM4pb`7-oyvL;34`&m8D<yd7FibD_AQrvRuj
z3Qr{Sbl|Um`RcG}Pr)P~9PpaX?WX<ldJH}hh~_n(EwmPIP8k9aovh{N&E`5Ui<0OZ
z>5yi;J3=O=`aXTUe%)|?I=2F;r(t;9ZeX|;F8ny`pX9e>HT)4RKYQ++k(o4J66>ib
z^jlf*TWu!4(rgP#J=O^wI+1#C{N<&Hxk?E;JoJ(=Z^zYXq|$yhAN#sR#8zKRKaZ^<
zA%dtG&V{4|396%Au=*<gHGqss;VOtDsZx)O0w<;w{#WZ)ILz}xO|L^ycCkYQAa4le
zTjy)Cljrf#yEEl^??<V(TUUVH6^lj2$Up0pXu3c!K{b9wSlhD(%NXPkae?wsOB0sN
z@X|@DuuOUwcpE%=YMr4h0A_+f-9vU|ePpsawPyIlE{L4?oYMS<DyA-eudz=J<yy-B
zUbv->8-Fb~2HX8bFO-HoP&h}`sk-RgK`4%G_(C0N!G|75z)cpPuitWT^b703`#b_%
zDa3FaDPnKPAPA?xu6zph$JzDv;o&r7K=%L0hZH7GQEQkuh>Ye8Ou%40QCVb6?At|W
z(a0)eV)f@^aJvqD1W=en$t}EPsoP<Zpn8l#%%R`Ps;u@V4CzUv@BqIlAxvTFnitBR
z_U!HOtJPUo-~-Eb6#Qy}lob#+CurV_R9yoL%^15|sJd!{k9uk0XgsbdE*0}>FaFa5
zPLaM6vbX{_k-AIc0NK!2AV#m!{YwcUzDvicEehXq!L+K@VIFrhtTS(NR_ODhM!NEj
z1LyXFrCJq3Pc;Y4l2Kt-;SaFw2GowmBp&40`wHR5h#Zetmiq)_Zq;`L^sAGPEH$0>
zM5>&T7hW8KX^F&*RB^gop|>YVaFYnDg*YHP^4nqLnz`rd7~ZXia`mpnU9tlripB;<
z+gi<G0Ra(ruMXJCGeMoXhwTFoj=TY$wrR01f2)jwQfR$t6TCKwt9F69Sg-&(_xKz=
zxV_VM+A<ztnGh`<^#qx*+$>9T1>(i5>Dq{xbR+1AB!~|_IXsLeOQeEmb(Vx1ZZH7H
zm*6IMkFs((&)mUms+yOA0cJn(LxOk9=JwdoPKGWzhKO-;#s6^)E4e+SZIezMl+~g&
zhNKyz0`gQmvVB}zx9yA@2~5cg^oeVS^|7Rw&J3wbm7hFa`b_@~;q?R2n#qRHfDtR>
zhT9X|6kT?d+jZ9eh0{9RsS^AA)Gx|njPg&4T0c^DzqsL|HS(m9P)OB>_xgSo8GCJQ
zYJ&&>>^`y;*{$ztEeXHLRRcxO5>Bw|n@hHw;)e08V7F78blsL(`<mQ~CTJcxOf>xo
zl)|9oDt}IE^--yD9X$Z#mHrgE%=p^q;pTccCP>!X0+C`nRyN*<->=zv;6r;E3Y@OP
z;YDfn-+bJ6;M7cT3F+7p;8Sy2e5}B3nbWXV;Hfx|^*0L%i|Y@ca1VJa3r$++6hLS6
zx7@TPD1}p<c|?aeLVig%7ETEV^>C!dM&sXjSj7}|bWh(|5w@@VWtsd2;uC7S=en14
zqeVi*oz9h7(nvtvDYm4ud`4|$>ABCsSr?O6VDku0Oyoq+XUth6My3j-pB$!D;ObbP
zne0J!n+)5>P=hRB*H%UUHX1{XeitDMF}OmL8dGony-!uR98U%(6sm)?p}Kp~U1AYs
zqK9V5LGi9=AeSzFP(!$%wBDtL$8`NbXe?Kdtwt+}So`D9{i8wAAh8+Xqltkwsya{~
zrVVdQEH(YhJE*fWg=?W=Wz>Soltu&Y&OK1i%`x*d6CvtEuwwdw@xR;VCW;JkDasI}
ze}p2TQ5ZCOzk=W-L0!cs^?Y^fuSdl)K$9sY1{6Gwg<OU-7r0K*adXu3SScztZ}x(<
zB{i&~*oh0)Hf|=Hr{s0WW0qXuV}f*3P~F+|gqUQ0wIlKy@i0FN52B`8Jl6qwisfoG
z?7xEto=(FQ_5B_K@izlVB4vTWsKC%LNbYlJ5`?n|y*{d`Wxa2WcAskb%V9;33lk0y
zr7TQ1b)>qme<8L;<<H^|w>;2DiCaS~{Vl8Pa4<BwIG9@(Th9}<-u7wmi?BOth&@rH
z_+gzYd43CjltqVn?XU%ZTNsaK1y9dW1ne1`ZU&YQJtWi@c7}D1<^sv5e6$1GpbQ`R
zE7=VqzOxn1oIJhibq&Os2>TJ8GBYZTVc!s*=WqzVWR{gr@~Dte?Dqq^DJ6F<zDGfu
zt|nswaI9kVmJJeMau+=>hp=!xYd+FLp5PXQW!m*@J$_1MHHlsuiVGDCZRa6xO+1eE
z|Ar#}n<hC!UyjlAP_$zl^D*MKH#mV+3P;Hg-MA&kO(M{et|AGygb>{bA0g&5^7Zp*
zViBgx^9Tb>ZXBv4lfXcY8B{FS%9nd{BU0|g#z}5JnIt4NTKbWD%G&AZEu<z}xQr}X
z-s-ej3F2C2XDg&b&f!!1oB~BaI`?9#6)>-r{F3FHXix{oy+pcBq7&39xojGP6oRd?
zU~R&q;1x{EfB->2zQ4RS7=g<VthC=1;W<e9(mY>r@i=Pa5~Qk6Sp{UVw}vF%Y|amO
znSwn~{60Ln+0uVvCj_~D??hH4f^~CAbLdcdopd34J0t_aNw@mHxmA_LsBJ1x8Vb<l
zvq27`8GvpR#K^3b=#!)waG8Vi)Kc}Di%@rs-5l9&Ca&iQ`r)%+#GWm&JO#sE)VzJL
z3LcCAj)x|NzwpUfwe)w1<dH`Z!tNh0?eR5ztnOwK$WuBDn*yDcXJY}a`5rn0GouVx
z8RSPop#1-aT8u(m#Htt6Z7^o~n4E-{UJ4JuhCMqC2W7zaXTWNP3q}!y9Y=KNpZy!M
zoAwaK(QBNcl3{wNy_c+5e4}4$!W@(v@GpU}90xk?a<~f$Or#Wk;$|N8`-cZX5Ug3}
zPRkg9$Z@sj|Mau`BiHI9<pQB43|!yltJK+8>+@Kmy4j1~-hi!z>7va2@^@%ghS(Yc
zOZR-anyVDst88p%-KGK-kGWDAp~)<oymr2{%BLrpuXjTS#hv^AVu#nr08;VoKMIeY
zMj&`aF`&Qn5c?{Wn8uGI{%lqjY%Q7gB(v{}^R3oU<B}qpp#-@N5&wl0t=i-W*D46?
z;g^sRJIzJjQ7Gp5(FxyxRE-;oo2#=ib?5ANK5idb*?Z9{6@sD5c69%2t29X%03st3
z;?v~hv?}Mg)A{c<qAMxx)RT!HP?Kx<nRQpOr|AwrICy<PYm!a@mTop06w~He+3RT>
z6IH729IW}(2vCWEll>`po+OfTGk;@Rp(0?Mb@)w%@dQwP5>pCMsxI?(rX8ogzW7R~
zzE@<MlEhFA(<z@rZP0C-Y<R<e$%Z-H1#F*8N)VZ-f1O?X^l|H{VhQA}Kn7ughoi@+
zXKq-~DI8pQTkruUbROLu-6%6F<CS-EXBmtOJ?Xy-uO(!jxvE&M@+CUoQXc3`%Oa#^
z5F9?_eMKls92TW+8g+R+xGf+vM*PQjLOVMM>Ul=HYK0GJ|3cJ|(b|64y%+iFzM(lL
ze2wcVv+J<%aAyq9P?QKu0%fk);fvIR^sDR?Jl`C%ZWq#nC*^a~0am~b^DwRTu*EBX
zzqHM#k%New(30?HaYpv&q5*IHiJf%%t%IjZRgS0bdYQpXdEY2l0qq<IFc61^<*7DG
zzhNf>DZ0Xk8~8{okT)_|t3uCpH_IMMm;>Ft(^?kHGYxL9jPXD`Ns{d=y$$CZU<9@_
ze}~f+Vck5+tP&&tbpL`Yyy+!ZxHGq5qPXjHA%h=6`CU#4zB6@R%dDjI)Brj2ptBrE
zBy$(?v88dLAX_*m!_wiz9WY$bD-$#%AH0s`m)E>&WZl=Qkg`WN3il@<Pa!nhbnGAr
zJJzWBevFB(fm>e`fW=K~`k0-DS<unxALMY>jhC3c+A%?!0ye!gFdX6X3TYUOpu?gU
z(QOz$DVg$phFiO9w+r63L!7eZe;n>@1|A9Hq%f?&6oqCuL^1ZuH?E~K6e_8oeE)LD
z5{@1fG$<-F+3~-M=m<Kypm5L(8_c&L*9zdCR4oI6NiOP&jiXtXh**lq(|CN(!@(@q
z0V8nd-nal%JUwn4Xqdv5oL5j;`cw$c+K(&tHe5H3_z6hu;DzMZapX&I52Rt;SSWIk
z%-P&CgmhSH$;94=)5opRp;(BrqN}cxvNk+y>&7zOFay_Y{uiupEPj;>VrBM`sosXM
zvMLHU@{SvzV6zzpPFVP--#2RS9oXDoFQFauaU1H!Zr|=*b^_jXx8wkb8WyHnSZywN
zhL^M{ps|vIR&nf#e1cv7XV(`r+Aaujd`)D-%(}#u|0jTlwGo`^K3*5%%$iCQt%Q1Z
zxkbd@KWcv6jaY|>NA&?%BiOF*FcRk!0wn!XsGVg?vF{<kRLHjSa&9*FoQ-zlrz&!L
z2jRx~1z|?0B0Sq$J9En7o}Yx8gH9`xrs89)R*BOqH1o~!a)MEH=|J(2831&7jw27J
z(6%^e1w(Ii&a9MIalBloM~RP85M!0CEB6-HV`5I7447@{O|6qvM}d72T(ROJWi`+!
zm2>3q%+)6NHtqIO&&O{K(dP9uFO78FxV`y85k>?@F~##t4+H)1vBd5~>FT%BBu??S
zxs5Rh?5S<qepO-~0YUW=IVSwH9xR&&%9q5M$wYB>PxoN|0M&=#;Yf7c&l+wEPO(9U
z=v*j|qu;+PRIUMZa>J)fP;QW}Q)so&%(g7Ghl`T)yCd<GFo+?+CW839pOa7&-I^(~
zmn8)+>_o7nszyndBnR>%y1$aGGh?HvrOeTVk@!1a^xhGd>@HG&t4TZ$)U`(1;o{=Q
zMylqwCRVQ4RYg>%sUzZL-dJxOd{IP-i_|S2oi4pkP1W~)tL|%@OADor-)Rb}&yVkE
z<6S>)#XqKlJLc>RLo7IOIFpmYhDnl>^J0n5?Sb#q=lV;JETf|C7bbec_+*8Xs0S4p
zN|2{Tyq6Ca+&(+8j4h#$aqpK+Pf8(;Ux2=0loq8o8E|xeIu)Er?FW5qG9&sZ&8N#-
zD#g?qRj5M(Pby<ZzlAbCL1q#>S+`lfeHqn|b(O>@LQO)$+v%+%K*7}N?yC^%#qVyD
zht)nRyy~xTyGdsArR9+>TZIo3aKV`q`Wnf2d4)1cUmR%^H%>a{7C5rUBN0Qq^DULh
zXwkq@)kU6=0}-1??J7aV!D;F2O=N^x=>uC!)Yh_oM4aS+#m1;o$ziC$QxDbn<r*cW
zevm%_5X&3xqsd#I^S06BwTee--;^XSAglv+YT3(%Ilm@jvG>PM-lZwbI5tTNRx0^{
zOX}l2jaK*UhZo6mmxl}U!GE>ywN_LPL{yUKBtw$1)Tt7O<{4rQ>cP{=@ib^b%T24u
zX>4{P>VkgEklRGN!H&mjGBpEZejfYV#`6zs-rTTKHKf&s3#k5&)MdH!dI57K>6I}p
zZy(nA0dbFa9pl)yp`p_^v8_PM%#zEMuniQ)bD%epl|p+vyg&RfODyyzKUIO3b7%0J
z;4+yF9}!&2@|zXvdMoZwMQIikok)c{l7F15TPn8?CDvI><4C0M4=R-?B4*y*&uQJ3
zeF3o{w&KC#QBXxIO{+E`+QN)CcKbvEQ~Q5asM+s@3T)I@fO`7QICM2pKwsPt1x%El
z>K)v}AZzI-F`~u8PjldFOSc#}(RBkDanLH8ov08mw2ujkpAXg`tPqmQOD!+2Q!e-_
z!i5-cT(e(QUOEXvzJlEbga0Rqp=RN^HaCZ-2fl>ZLZK&Ek5?^g7sQBPi(sesll<DL
zG`z3v(<U_kx#&mC8*;-{P3<EtdcL6ezGtK}P^IncEbord&U4!dHI-I%CspB#@*H1l
z4$tKGA8hmnd?}${BIlV&6ChmKW3!!gkGK1-*G>i#f?@v+kI4HG(UM08TK<?DKG|Tw
z0BvKrc5$#-`#gcHSec<l>IrXbSA8!&4MvG<=zf8%4(p3Sl!)0s&XtbATC`O4&4OsC
zj29*~h}X$moF03?SJ`Td^RKT(A&gKz@7*5hx<U7VE)bfyK!LbY&=D(AXv2B@Csu4z
z_W}wgB`+et46_F0<l6-uAJj4#=wMAp$ZnBbVp<Iwif~9QxF44cF%grugp?!+56Isi
zWX@SFGfSIA#cg6Q;?lBsC$#I0F42V@T7j*)VqUKYXKnzTPe?oew7ZH33%+!vwzVOg
z;XoJ}Q$X@Z;+`aL(ar?9V-Z%QJrTO4n3w->D|UbN@+dtFnq4!5df2H|-DKYfq5bUD
zf&^!Z`4ugW;i1XW#yg>`Wz4sh=l*DHAmAxj$ug;n{|ZcJuDqP(NKZ><2^udEdPv<I
zC1G<5vE2n-9Ai~0Y~E=a^g4``IQq?B=mh2j#y6gt$;hLnJd?Lo8gp43D6~SOB)m;>
z{2}rll!fL75pg}*diV+hoKJBHT;?o;0)0d8=wwtPf~JU<=MSL%W{X&r_}Cw)#8v~q
zPI@?S25_Zbe(BTGWvtH2{{chao$9dX_9PKOb%)jh{L5m$K%_P52HC@j^cw2AyLrfb
z3|%ff$!Rl)QM8uY?(Yl61gPPO(3tKv;Y=b0dcplyQYv;gozH`l^SPEe*ZnAYtwCgR
z`kR1cc%B(Mt6Pw@pTy`(9&YDs@i1AW(d#15M|g`{foapZlm42lWMtt%%b3a4ZG4%T
zay9@*AebbM^0^tDX{#fGNOsc8r4cUMgu#f2N2^C>l6l@{5c$%L52qfeLofdLKUWdi
zBZjV2a&lDp{K$^?h-fQy%>NkpZ^7k`!EwhyBz-UcH=&tn_-Xlo`$&}s7k7oC=sE5V
z`fYB^_P?-?NF?b1k~0~{i<B2zYy)Swlv@HVNo@6-qz`&7)-yis)V%SgTJHgg+W1<#
zpV@r(9Yu%_K!v-}?Bd9LU(-Z5&~R0v38_52%o@J<Xr4&SNetgl{GkZhQptYjW5kI^
zV_ctOhg{;kb3Az@E>G`=B6BI0ZOQ@LWkKI}bQvI-k(b`Fra?+)*xbYnPAN<#hJs6*
z0G#(}Nf_1fxFx9?3V1Va7VW=i<Obn=a?ZhA?0$vz#t*y~zl%0DC_l8tmJJFKuR_W>
zF})|U{09^~s11_uN2IHX>=dOV-o5c+scy|{wF7{p>v6h=Y(6CGHrQ}|9@RacU+?%)
z=G(bkzc~jL<PF&8&+#SXLnb~5kydzYp1k=szgAh)UfJ>Jqzn^gOBQPjwll;up6W{Z
zFp4f6IEH`qt~b4=Hv07*+^8i<PmI{K#B;(~u=-dmlx|HF7mxA+_6XX#E#0OiTqAs3
zH5e<6H7?hK--ftbZ8^IuETe;G1AX9|AwR6Qcul*cGy<xekQsZ>ILYt48d8(Ek5NFZ
z6K#1Ng!o9!K>7szLY)fFn|^r3kRxq5TovD=DUoM*>}m9bz&GnU0^OHJIUjNS_^7b2
z5+L)4K7ewQAEikfybK9Ni19GeB0E=|%-g0eOq&WtV>Kg3n(HH2_-m6>(HG#qSrP3K
zAmDz7@L6j*1qgcGeRyjOP()D-%9aSg7S?rU_)!2j_sRk@n;5`I2k79u7z90YR-vu~
zjwqe&27s!QPIj#laRxr#`&uT_`FOlLczSy#OiAq+xlojXZi)ITyQ+Xl!2|)hMUOwW
zW2V}*me4lmsuN`XvUwgS2qY2cLwh56Kxl4?>fk(BmZg=rp9fUAm2Ut&sbbUp%f%uq
z&7E+Q2HdPR|0vj>%p;e*SUjKOy;=64f->hga)l3klm4PLd^8<JULbAfgf-K4+%cZ$
z%kKllTt+X7g3WCe3pT<#=*}gJYUZgxf0)nL)r_L-;6vk6ao|v8tNI5A(qA*<MdGaZ
zueHfX^DXL!;5FR-UypX;XVaN$#=UpE*3FhjC;{8l5|uO>|6hu1N7S?d^xaXtrErQK
z^v3mz)MH&nu6lc|A;8KKLATp!rTNF$f<hB%6g-TPkomjlq34ksKheI*RTNTux7iwS
zM1g<@EtZ<QQ+vb`vFN*@JE6dT+%m*27B`o9f&q8K5q4DNL1bJK`;Q0e<S%a?mgyUj
zV)P*-zIn06nHJMjCzLI3&)s4H7l1WEP?mXv6#0;|0&I^!I%>5{Yop62-1Zv&ZDZ1P
zED52UXBebsH05zJ7_wzJ4oBDzq{nR~@fkEbwa4IXC@+m`v`#%a>GBhbIpnl~`%Em*
zLT`h}^Bs%f&b$q^g){o%UzkhVAhD1YqN#2;lMT1r82!-`x65bn<-O&77Y~Vdn}z*Q
zB@9Y+y43H-;D)hDqP;1&6<8YU1@%+{Gnr*$r<DdmJi&A;$_|-LFggn%{Xb*Q>@LH2
z!R59wzLHJNcCUrij+brLryK3PJAl0yZ`?^{?m7+Qu{n@25GoV;u0k=$6lX`;jbCl^
zOmj2M1K_}S5J(L@Hi=fcpO?~KP!w=S1S7$tXk)00h5UkUc_nGe`x`{LgavU1EsXoS
z{A;8>sMU-f<gWLnTM6R}(!GV=hai+JLvZ8hJ}&c39U<Paaxoe}BrzN~FMaUDP%e}d
zBE<}mSN}ig+H$lDf=*^~?h3L%x8j%(%{v340UB^L=0yFrE&++e9FLW4u~S!=pm#L*
zur&P=*4fTZlI^sPQ4A>Ik|tdOb>Qg$-KoBcCc2q@P20I^9=mP`b64~%rrS!T`2AHd
zS%8=N?qx)wQ4X1Bj1c~i@{|3I&v1&~anTlD4f<B}RpkF}_OwX76#!WN56B$%9f$<K
zS2Uhp(*lp{nrP$S@OThb?PV-fL}^e_u5#-yPP%Syq>Ni)w?&=)E8`NJ;z>BHrQtbO
z)9pgl)P<P2bUCspZaDK?<1>kQSEoWk3Vm)Ho|JB99l@}1ri5l+pizN;WH%S7=zvDP
zU9y{vmS6w~C0y{A4#P0i8qY5{7ueZC;!1+b#73zKc;1Pn-&o{`0<kzPoFt&1)tR4P
zwnQ*yWf443e@S`<Y#0d*0v_#i(j~xy=()<ukwVz9`<R_-bfgS$M8$U&sUSN>uj`AU
zRq(;iG01r#X;JI=GZ+)n7cdP52R$;iUFz;GRf^olY@d)Er72wC#smOF!E_>(7mDKy
zh#zzbCnyQbRJ}iao>z+eq+m?s0#I-#`@|a#wS6%gO@_!hMAFL7ZIkY;mZbqON$-Mc
zw!JW%fHXqSKVq_kyo=0nA`3QH912`bOoyx6#>*=qM%~+kuw$t0kI~K$r;1DUD5QsI
zAoS+6YXJ3$8t@?NCjjBjz6U|o+|z-n;-Jo!0TA1h8tb5BbAKjKSv7m$fV~Zb?tJcU
z5vTGC<pK;1^PTGk6B+4QO5_XDt`RyM_3bp7AD97vCc74rN#Sh4h48rzj5G8qDw8I{
zg={exR3#k^{*V<EKdc%mol^9>pJ1Mvf*5{X7oyYJYyNuDzM0&P3=KBmm9i$w%ukl)
zFBS`StWxej1u!~S<)4?vUzR_^pAIEe$|vx0w)PFDylbG`O|?j)G#>a-p%s7t5Z-f{
zA+@s<R+IFe!5m}4VZ7qeIdzMrjOA~k+nLExiv-<Quqg_PY74au{%poG&WZUZ&&Ws~
z+TVpS_;wGJzw7iTd!!dFjF#2cEKj;lgXiX2;#@z5;A<Ck=_>h~K(?zBHl&%tAztYl
z;9pe(Sb>|rRmo{z9)a|;nlXn9T$B9eaBGp}l6vUhOvaq&*y#bX0RS-B%l4gi2}&eg
z=apK>F;9vi^muhkY9#gQdfM}vOF-W%ea<pz&2`cRvXisqL6dlL$(gl9(%&u)cBP!=
z^{hak5vlhe1vH5mcEFP$QV>S_<dO7=s&5mjb$CwdM2zp^o3czP=}rNU*v_mB@}OE8
z+$P%Gcqv3Nu;-lc)Vm2@4FyMFdkR?t_3DizTHJvZecveKFSS)#y8+aXmkvjOrX!Lb
z@v!a}GefyRV3G`w9;uFSUbLe-oG4rIS*LL+J=ph`1<}yTY|!0U>bYe}I<P-8bB7H5
z#=Q=#P<`!^6+-l+iSu<&wa1wo(rB8>OBp@UVyZruJeQzS_CLW(=_{~X|1-sO+02--
ze*ii?=*kRSVixj94shyxNZX5n(6N$`+Lyr7=;9HQXDyU_Zf)eS#--L1ykX=ss2cE~
zFtqomEp8FF47#$(cJ@I4KhUYs-30E@l<mw-3Dbltv~qT3Yd4Np9Bh(^g$yY&imRl)
z81>^zOTVN^!ML^83OWJ7O+3-1zc?+%*=uFFxnr}?vW?(u{ej9usGclrmR^z<P`$)A
zXqXKL6htmikkykM);|-D@)9;+-1#hJ!=Vd6&;$3yxt*?f$XpX7g;P8&-oDtfLRpbM
z7j<vyU06J%;JaPPKVBo9<CaX2um5FKf6S2k&I0stlQy$oz*Hdp3GVuM+(3F7>d$<X
z=@o!b82)9QCQw2fu`UM!Rklua8we19#5Yq+GUw^b?bSQmO-5kP#RN*eWhle`CIH9-
z+&h#9CjAtIFUf05YKIY4wbi_IX!eP;Lw_$Wc~?rHhzLR|gcGOqgLazweDC`F6hLa-
z{wq}zNqC$?e%*zEJ<<lM=CB_B4=pa#EN&$8uZnRiaaZIWbmFCvd-W{~OeOFa`lnx3
z=wa0RTr@1^lu;WXO&02;;hyTW&he2sE|`ob;2Nu8xYzCWZ?_61L%5a`L9<B*TSRa6
zul8_li9f0}9=QWGDqzx*_44M}QK_7pE^yahd);a&1FzC?G}d;r9tGXJFglcaXfiX8
zDa_|9l~97|bEb0sDf&c|_mE0we0q4cL74u?%^ePade(Kd?E0FT$p^K%k{}kb7s{Wy
zoMqJ@%7aL>=sj|-1U_r_gZwAo@?nZbVGf%Fzbt&~9Ht&56_~RqobIi7^>@>*1@F~?
z@!M{+jVRu0FlSf|erXMrPs`snFNZ;UVyA~{hTxkduPOsYvfo(IxKjo)FvD-tm2ynh
zXX08Ea-}LEN7qCCI{<37iAP5<^v9)v)*USi>^md>AT>rQQqb~Y5yDJCjEGT`R4|o^
zq*FY@&MpVgWjO2Vwu{)eoAUJ`?h{FsVn`x_J_x_J%?n7U!=zZY*w9$k#C=|=Xdw{6
z8o<OI7$^LQNzPxQ-8fpWGz45O%>4-aYH>g|$C?btZzuzXq3xZQM<JW|SRoSI+RhIX
z>td{kg)7ulgKbA8S=2E^n1hTr6!tVx8*HO(d;8Ulm1;)En4z6<rW5L5$~@1o>%dfN
z%0*kTvM4d&k$!dG##t~36oM>}(%I{EMqA_0Hql_yW<5cNz0Sr~P{iB&t-~oGQ5)BU
zs{wMpaD1$uBFUll?g3Dj0ySt<&sE@sgQROvBNooHUxqCL1kSn7yo9!V6KZjru!DAY
zAm#ej)`#jZ-|Xijs4B-80yon9pFAg?ciBF>_#U1s(S#czuy6dcMGG-%l(@6=qq9OW
zy*p}+=4NwJWhxm<1W<_zBb_>Yr`ioihnr=M+>A%U%oSWao23{S%9%Z1r~uQWzh}bZ
z63TSW!xwq}PPGdy=n>pe#X?LGUJvbW)`>ZJx1;@OuymZ~O8Ih0>^?zHGKXv+oYNQ@
z=~EY}%Z#f)VW{7v{=R9;OFtiWM@|y}@=44hX{vNmcnCmycx?4YuQ-TVF@10{eET2L
zXuwWZVoOuA^iuE6Tw+#Q|HP*HGzRbE4i%{-pt|;eoliE&!k-R#vQK|pb8|ylI$mIj
z@@z&mzT*U2jcuZm5fXqDiG3wTK7Bh)1a;vbiynT`9oS_C?=(g+b#eR~%#EdqO8wlN
z;6Oqj>X}9InR5G#s3f)x?J5kiGaczDL*=(%r=0`n@)gepks<KF^GP7Ouey~0twLpD
zArAP(v$0G-k7{C5GS{S79^M!s(+>n1i0;_U-}sZLDl1bijsZcLs2gyc_PTY7m(Rqv
zjB^2M^p&}*zYcj(Qx19*SmJeU>`eU^mJqU4f$0K-?1(PgEJLQyN@Iq_%bUX!enJAi
zfpY6@m&bWOBHG=8;|VWn$)33&)gj#!9-*<qBXVkp0&%C6ukWF3a{Yz}tw7MfPm`1{
zFkc(?;8f!~`7U9En`J>aBl~PxCSf^NSh*&>*hrmo`HYodtju0dQW*?makRW3`oST=
zuJR{A(;?n)0w-8l6LYLHglG={+#;M{MNby$(?mHD)gxD|t5TPq4Pua>DA<p+xNkaa
zdziuBjUiaTgp29}+~ih-_$RWmQ)J0$(WuawDxtT3;&O%`&6oUZLRV+(42pNLUC3<c
z1F&AO^NvYY;nSAf2;$gcqqc$Cb<N88a<Ic}iqkJ9!RC?FdaNxOX-Z<1GerJ!oe*id
zEuSVRz<<N$5Bwi4?{Da!6o+u?gXFa<FAM$VVJwQKRKil{gdDQ=cYz<eNQ50uX0P3M
z#B1W8m4<#JHS=Eem~a@k+2P-u5@a79zu|C`Aj(>1bGl-fDAuUDe&gNGM*UC5YNOYp
zT>4{wAEB@#7u58;LJK#Ao;S>4V)~C%GEJcDDD(XW(v8WTzJ`q{N%6J9Tbrx~Sdxt>
z0w^04KG<uGxopA|s&vle#lBuU?QR$c+&kP>ednb^uKQ1>@nR#vw42l3T-gM;8~HnJ
z*MI&(UYdy$fg1W^%P#9{8sVJch#o%5tJyP7UeXeN7+dX5sNQB{qn~=&?(V`4U@0p-
zQ_DV(w~LYW_|5%Siv_Y7=xp{nu|6*I_oE$*XC^&2!Bg{TOHDf;4+ph#>G_JMb{ine
z?~w)OD8h%hUAhMjPqtgv28Ve+ne0X|JK01dL7(d~1=KKuFH6hpT@}{70s2bp_nr{q
z&wFI3;Xf3QF%d`1@Uuo$Jp_IhaJo{^;+wG9mFN~TcbT6GLj%*iGQzBrscS0F5TFUH
zMt%o*@+@);=gz`QuEmUr+-fM)NH~PU#kUr*_#-NNClt_wP5G<M`CiC9bWQeHwsk(2
zk9(QPj{<Y}o~8qA8<eCbLToci>b_J|{jz*hE4A$pWU`H6S5$H?3L6pp{R|CZoZ6{F
z1nm$i(>943oL;Cn2bY`sWXI4wf3N-RKvLq300yIzRt_iOrys(kA^;3{?_cj!<!3+B
z4(hF&Xy&MuwqQ7Sy@r$&j4b1AK@YZj7U643^>j{ykz@fd!37H8ps1S9aR0#}Rk*2}
z&;0I}O!NGH{!|F@{o9NRlh>%TfZ|qn2RjD<VZWk2o-eW70%@NTfaRy?6z^IkCymuJ
zI+xu6?f1pU!_LmeGz#J1v0tO|!T|ay25nIgv(o1fNm@u%0w=0IbQ=<--Fbh+&u|Vx
zpf=6a$6Pd`fbE1bx7Rh)pELeYDp;8W45a?d8I_^A&(tLsTcUp}ptm~ILA?-E62Yr2
zX=ngekA~7zgEl}>nQ5535HZ2~WnPmp)KH*sK(*VleQsrZ3eED7ey+ziVZmie&mWuh
zYbTaucHRd{?U1wG^3-$ErtFC-=jtgvKNwAF{^~=YLH;LjNfQ`&5<VrlD7Gi)vD#8m
zbc~Cd=votQ+Qdhe6vr1uF^>1;C-f=OKK0<<#lMJ|Ghz6XOVXIE=>i2R#VP2ukrcpr
zq43v^TzU7@VZGEb>*`e9=U1?@bJN|=lOIjeF8TQCHJ^Jp=hecp|2nH&_9!R-iZtlo
zJ64(~-S$uEd8nyfszuq6zh=Gm{=@XzPASmJvY9s&;IP1_gh}adny|U6aTpAR%yuer
zH4`YGU&1ec3zATEHFtuOe+&*JJG&B5$!cTC)bRwP?tKrCPzrAi^jF4M38fn_u-?E?
z7{5+J)@fNxtPJfcJrG5V#G}I-8<||ObH?Dtk|<j|-ArhahLn`d?{7f-^IdQ7w>-}B
zLmG?fL>&6od5qmVph;uD@*x^j%-~KP&X)*U(~Urv4oZw=KH=buWqVwgMfi(!9WI2C
zT3@n$0Qz(L5d&t_fLOfxjGW_yi(tIa&DD`;hZ!k$j}RXi-355-CeWV8!W*vf&xGkK
z6}A(G(6V;e;fpIE!?G+M6pyqSS8PnH4dvED?fX(J$fi_J3Rljdu6m$J$fMMCT&nN!
zCg=uGu?Wm7OKt^=0IemM`W<-Al4BVIs`hQ`7;>s4dZD4eOlN?=LyDa3hIFyI7E2f&
zMMR1ZYsXmB_26C0Mk!2D?3G*U<4xlXYJ+AN3@=O_(B2pba`FN*t)GD7_5;+DQYKk{
z4(+k8Hk;(xOp@&K!SnR!D)sI7rNW~)mOvmxN8A;^4T#6-WR6>y7@nGxnOPWJqKZcA
z#!|B@egBPi(%G)Q#gG+aN&4}bU<Z|yW<Ngs!meL^%y+_o6TFrJoepKAlA2mFj#H6=
zWM`!i`VPchs5u6sG#Utqbs5y<(0-ZP=!zvh*F~gA<0KNmJ*B;arz6>#^^YUz)e-}`
zNUMSI&Aw$MhGc^z+o%_^Ur_}9p{sSz-$~`eK=!{=B8W+xI8-4nj_`yWBe}NwPMs|u
z!44vKZ*q0C^>PR{sVv?Q?}e-S3cF`N23RTNYl(fZaVY0x>1jO#@<fILBVfRK;3j5O
zI}y<8#M!_<b*&}9?6-rW(hQaWw@6nDt=B#qmurP)4sR@c=dw`12qK?Te1X;kKF`w!
z-bNtoc_rDBsy&9fbY8-<=kr%6?eV;;DK}W}NXGv>Ym|3$@Co^A?4hkJzm~rNQZ4Ay
zJ4Crw+Jl>fm8C7&6{boV?nL2SSjyIw3YkGo7x@{X3ld>36{ECNXMs)VySP(>Yw^M%
z8=impS*ycUmB`q(OodJcY)D|``&qXBKflgM-7%_nKO4RuIMce9V_AtdXn#o_SY|mK
zjfJT}sd?tWa0B4n#vWy0qoyyzeXo#V{EI(pANOnM-|ymVdv?SaCt|)42WKpr_j<S`
z|2p!wR%$c-p28Q;DOCv?BTEN)Nc$9xy8yOQgFG*Yk#BuqQ@QSWtY*V+9{Dlw<3Z4?
zGS?B@o?OYE#zR$C+Zcs6p{egwXB7cuK^v_gsGPUi5(&LhZX7f+n^t@(A<$wM-*j2N
zqChMGLi@ktNg1Hj8IeJd9|$s3qLE*Ls6bsti-jv<PXWmfnGPp^kSNe;dX#N*HT<_n
z9J|-FQh8iEpVhzHe%ZCdr$dEHam-n@&Yu-H!wa=O?d9DNp#zwaghlOxJ5ED~g;mU#
z)8?l|kGI1r0E`JHO)<U9H-vmnr^gzeqJGJXrx`K!mE(*iu2adK-IU!ln0=LeoskKZ
z6G8;>lq|d*h9wb^gP0X0_CUttY#BvV&()N{MDJd0pd@Xm$TQq4{-dhcM|0L!CBZ5k
zh+Gn{ocxCj+)6rR!ayCI6a1hfWVR(#hwjc9npugHgkIX|V(e#XeZ>Ml$d~2xO-rOl
zlcEW?ii97LsJCR4PN+=d#=IL+`WGzE6exjgl40uK5Y~NPjDX=lcYIG&?{1dMhwQHh
zlY+Y%!kniTdR*+MQiBr4TsvtX9J*~`_?NYN)=93(xGtlzaeG0F+CFDWaHC=@!lRFJ
zMJNN2LVZkfnJ)W3TU64*nx;ZDvvvy@JLH9e5y%!vaZp28$u?<YVtZ(Jdei$-Cxwfr
zTuWF}P!L>8EslOd9X+6Zm@IdMu~*jj_zUFW(JT%8-_EvYlOWgwwQfb&@;@k_TeI6;
zU0(iR8*C?Idc|XRuAl2=b&$&;$e!LM#$1)O&ynd)U%@zXz5=h_1b%XYa-exzvQzMb
ztACV<duyy9JO{oY;po0$41LMbcE%xy$C2Za&Apd2lgcQe5K1umLLmZ-Totu^D1Un;
zNCdbmR(iZhej-2z{eC3LKOm#G=)^Nxb$c&i5ndr6k?Mq4%PK8LtEpbNr31_H%KRZ2
zpF%mo*}2dJEDxjgrQ2Pb_l)eDnXU9u^KXSv2v3$Mf4_(4_QaR`(Co~x56k-}{0Ts)
zRL$SOK&5qgmbpw@kXI|Q^YAzJGwv~NaSs&*kx~3_k=M^<#Aw6(YKxro0L4GSl(_91
z_!#B3nB7t35aV4A)V28ZSmTq1Iv86wXNE3iqwKF7xD9zuIK9Wd4@9z?)(~~|Lp^^2
zVd78lPaw-w>-Hk3hJg+>f&r~!Z}0>jsQwh||Lt1G`=wM;xz5eGv0cZYknA|m{Zyc8
zzOgUZPG6wDk<c~tx~h--u8DYk*NZVWJBddoG2bQ0d;xqCDbfaH2EzDg*qaQfm<_~T
zkVLOgDmWmb{_%vqhtYTN;(CHgaC)oEp6sTL1MzW<+~EmtZVUlB&HZegEXKEZ`g=_i
zev8iz@;Ll6(yU-Zhbyz4jcb?9<3-vj^R8}4_^!YcaU<|Z`<E#Gl($Sf`T7-U@MS)Q
zOse-X*P)MEw6}eDYAVP7bNc$i2D{qyE;BlOqAkTnLk-|~VNrE-GcuzJlXIQAmoK2w
z?>%qw(COjO*asv!09UITgefCt;%J+`=4<<?x)9abz2f2>Y0+WC9fddl3a!$kFRC=D
zD*zaGN3Swj2<&0SmMuTLOoT~6G<G=X3Df`Yb0BvK;~;d4K!7toMu}`(;xJc}wgNN;
z1tT0cZANF~*v|zsv$=$#9DhkpKVartUynP!7<h^Qv6ZPmpk#Ew&i$sNdUc8U{DxTc
zK6a2k^}2~a5ZEx;KE84eWm5<Ck`G2Jrk?AX-~;uVrqeUQ7>!Pbud3(j!YAlbKReuG
z=$Z3K)6#Kr*q(uY98sl%Ua0dW_dmW4>G&MI(W2Hlios1~a`*g#G*omU55+9JfT;;W
zZF?xX^J8p2eE~$y&w=S1W6f!a_ZUy!PaR8(nP>Y8a<n~Ip)i0Yh+?apR}`&;8C+*_
zxhTx~D8BQfI>?5{4CX%L@kpu~A?O^Atrm*suR-IjYTU1*gIVsBfY`KXq1mi~BO8UL
z38<YMle@QzBGYBNDGcR_0&{V|p7kRQiz#9oDac)@jqhOI_b1q9a(c`{k{(HGUq~5b
zV7F?ELIzYO*PJ3)D!hm~RW0FuQSE#WTFDdRh-lf)cMr<sqqRf7+!VU*_d>a)0&S_S
zZ$(5}C{Tmq*F(oJT1kpQf#j2mtZVxO@0u)KJp@CJ!?rlFNo)DZJYIadddd1c3^dp`
zQWwy`@xEF;2&`a?Cxn3Enp~z2BrB)PS(Rl$O@Pk}^M(~I)Bw5P=%6hT*1&)iKQR=j
z#EABp7YxybD!f9eFpp~hy$|n*g3<>iUktrm%AU>(4pkudyB}%)M_wD;zr@YD?<ley
ziKsqJow0&(V>}rokC=_j$4O#(Vh)`koh|hAVw)1x$X>E+0CG{3wET*rd4e0dwzufg
z4S!4>dM~WU4%X$9^`zf*O{)O$-Noeo?I;K(8_<cI(G4Kwpo2YEP_~L_67ff;)K@XQ
zF_dG$FCq^sv?y|t+OqnoNi(U`Q!svWr4O4tuswo3PhSR&fokc`#<A5CE3<Qm1cfwq
zs>;t3UKK8NUQ%5`@z1^RsZ%d0!5~$4ZF@CPcRs&K>B+ejJIT^@-kIc?#KK)cDQ8l~
zXUw8n=F4ibF`Jb4iSybCY++wq)koJyN~G{9oOzh>*U}U8?DxcJt|sGCVlHXPDH22&
z4R3ea`Y}ryNf<ks3N<MysBlaCIl#ryR_MC?SFp?dh)31fPw2g_XsxLEN~ui4V&@75
z2k;2RxmDhH@}0c!7{!F;X11VyVMLgm9<I>~qKT0IE}CM1|I$!gK6`*G0t0A}d}Gax
zoZ}s_5KlQVD?xZn@sCR>m_4jZ(-+Rs=%U2rnySJSpbgR<-&>c@b~Ed#H2bu_d29V8
zLNo_Hlt~?DWHseA(tP<T?}mxg?^)m@tx$3C!SP7^sMPf+lAO9n+&(A}U(KnPko0jg
z?yhrul3Kj_%1EAHrI7v^>s_`wPHP@>>~QgkYz_Z#;X3WBEGsvZuI%DnIBOJwMy=dq
z-Q)CYQR7yBqAL<SYv3)jgG%HSeMs>krF^&+4jgc~+VIZ^?J!9$>Zok@s7q`X`$>NX
zVL9AKfkC*JmMJG!c3%8P7EUNriv?!9+!K_W?iy8fa*ee?d#aXP<s3z!Fcs_d2A=Gy
zg5@Dck8hn>1hSBq;wH|=myCf8qj!a1tp27JG4t21G4LnBKQ`Mh&!ZgjM%jY0^a3Ku
zq#Eydksq~HxyH^;q|=eD6dyC8x%QX;&j-f=3)dpBK&28Va5%zG7dUh^N+uxlL0M!_
zyxI;=CUAKo4sBQeRT|O4KADYjNNOVj0EQ@73bRiNrUZ^9(_-|Q-F`Y3=bNEFk(Y{%
zP%<GKKE~DTl$ES5B!$}<)j3sx$$SuoBmh}9p;`I0jq~BAn=elOl!wPQypzBeA(SE>
z@;=-YX+69ee=`9LELtRwG##O!;YoKWw&TsW(ZfFULx9NE(^V5ceqo-`LtZEJ7w~v+
z+3DYqIbitAu;%W+zwe`yR=3}Gv0;pJ&@3Kg2$3mE*z&O#<Q!*~M11IdJa~i_Wg+Z5
z9y2Hi-OP%eD{Ma3^V~2qafryV8WTMx>CMj7s2#u6s%9t`dPTFA8H<K@9LhkoLSd+|
zUA3VhT5r`rg)bhBiN2dQ^ux2Fsgv`io9Y6tV{lm2(iI54Hp0?cq!Dz2oWpQ_Bc*_M
z@<i6>H-9fRB|*y)S)u7uu|Q^zcz12U-HU119fOKVS_u&V!KynqzYVB>RiW%Az1;ks
zwIL4MX4U=?LOtU=VT1fCg>=B8zkx2g=S{i7XVxA)+}!{PF{HTu(b_acC0kh{^^Efn
zCL=to>$;3?aX++$RX2=qVXTx%;UK}rKYOpHDpr~niL720$Klwaa<yTIh(bb?r$rIA
z%2IVpnH4WGY3rkf#Bz~V9sK2mvwE<>yg-iYrY3vWgUQh8M&h*?Nij|~c>;~afF$+M
zZukT4v64%}%UKu^*mwg=S}0+n^xY4b)CJa}*=M?vDE8#9C<Ktz4kh%8e2E!qsX|Cf
z_VOB^%8zn{Ece}ayR$XBUqV|)|AU(FpZwczbJRcosYkJtccsv(4l8I><U;0Z^T=Aa
zTx^%;X?IWxbFA78zBY*TWlNV8h>E9lK#L6|y+g1=;IX+l&~1#o1D9>QCGds?9rs;)
ztsPYST2+nc@11(S-)ABfc5Sr$Qhz%zlp5CA0+8l^9!R|;9%}K+zJKsv+TNpusj<Fg
z!c*nvyiYRS{UI{injE*=1+m23j(y{j-bh@VN1e~N1_e`k-@W8~+r|I7n2$FQzm!ED
z^x3ZHYt3v9puxt|Xy>4whp*aUKRciQV|11P?Hyw+kBy^k{RPNHP5&J<n`niKy4GZ(
zUbF3`g)2c;l$}3LM_GaVIRHN{0?|-uRq0zK>B1F%1#re=JWB|VNL^F?ymXOX`v(q@
z2}PPL=4?oCF?Lw!dl8qb(L{;&>pyKutAv1*Zu`DDZhK>SJGkCMeDBpg=)tpmyp(&p
zSDpzQOLB8cS;mEgN}M1E#s6N6spqz2K=&xKUpsMa@_v}7=+x^>hE@u@&Oyj141E#7
zt!8+;)JSBGe1&XDFDMU1x(`JOORrG4E!z~cU4r2%wmOYO><GXrM11E!yA)=2xT7(^
zs>;?%uJ5SI{e3&Vs2p>H1aFhCEOmE6e|Emr@*#h}r@z%Mc5+e`$Y=96UDlkX<7N;{
z9##U%KTT8f;0E1=ppv5&{JHgbA)9y1gid$^{ae4LqUG!tDcvURp;dS@ct_o_zSS6c
zc2Zm}H>rjGX=F8B$8vxlJgRgcBm@$tTx?qV3(&hxxweYl%J7D`&MWtk<uE@{F|BL3
z*<xE^;e*Qlr9U^63&FzXe#iG}R9<jbBuCG++)X4xV(w?8t#h)t7Bva#YT>;P)pg`@
zSPsJ>!4mXIXHUW+#QPp{5{2Yg=Qa75Ev3b9I3AJpGU1@07mqd;c;8e90HewoTedoY
zps7cO_=JO*$RufeUIg02@0pTAPVH@g9HsE1%rc?)KgOexIBOhu?F{CI0kRxJlAN5z
zigOnp*EV)T@(_SWGX|s^b+oyNU%wPv%1JcSoV%8)oO=LA#1EB@MvOtjWNWK>ZIUt!
zZ~+cac|;6@W_;hf^*FPvb8v#OEUs>~kXsH#1b#5FBSv>kh7z#GAqf_VXKN+bKCd4G
zCwpd#2{3pWExU?rA)Nq1udAmBiW)#=#CT4|B@7k`+}h5W+yodIzahH$H<q&#WiS={
z<Er5|%x;^I)Oo`85WmPA*r^rDOj({FABAE*oA;QQ^X{kYbk?M{AygSp?rtg~h6Lk9
zyh1$S;_L%zcFe)Y_57;C%5ic)2~+yja{&MVdHxX03xcuYj;omg;!S^mu#$W@p-CjA
z+r9^=%scaFbp?^Jggo%5?mb-AbPgi;+P!JEy9z5UasQ)8+VF;$)6}<c+1|a{o#5Kl
z8M+qH)|w2LMDJ=0pp7Dsm?TbtKBscJBWKeZ1T&a_#S?LMRDEX6taIF2uvaAe1G?rZ
zq9~oQ^W%V>V<1SJlt4nk9zSP+m^$Wx`0HbsXhB*U(=0hDk$rfxBi1=PbJ`3inn8V?
zkaU@!6C8(WMrzUP%d2Ro_iW66+6@XSjq~YN6vj(lw(yS@Ao_+Z%_Q}VoFh&07wNlB
zqAI6-uqVuk;MO=!9=lpdR_h1|KH(hE_dEnXLS1WL*05hCoaJKI5d%ZqkRW`>>Yfa8
zR)s=IT;+A5VpbD_Qhj2zA+TQ?p;R=H^ji#PaIz{5b<HkN?-2@PxES7NLvRBfquJtc
z-k((6K{%}=oc4%ylf=?ZV}4gG+2lPfD!9h$58a?8-te`LjBtBoEHa)++pF$tC4V!6
zvhiC6JN8DxG~39Q-KMvDyu~_8?sm)f`l|89_MnTwQdpypyH7+v4ekRd@!+MSTKezJ
zn4vmH0u2a@2@6H^R|NQr*Sgm!IDJvlZYghmxrDxws3B^gL#Z9muCc3(kag|H1@YW|
zKh-|>A@ZjYxWxK7?3__Ll@R+^arzgPXL-PcK%(uW>G`;Q^g(ytOogr9pbsytTrMti
zzBt5r5o9gQ%0qrzA4%6@k{()!#jxP_F%X$X3%!$EWO!eQWxDMUOe#gErQ_tfAD&z=
zvO`lh#_^=6LfUSej}nf1^=}NvRtk3hlah2iZ${O>BLc(Fa%`brN~SW&12R*O73}TU
zb;6O=eJ=X^IDs{PPE&K}cqBuvJ5zpT#=Lf0y<~N{U!L?RU-y{8XMbKrJI9T{?5A*}
zZRPVfkgwTH%K#Loqu>r~)bOFD;U*zd)>V>CEABN5(QF7XSJE+ol$n?WzNWWlg%l*r
z-W%j^AUwPTe=dfRgTroz|3;GTZ?=RgdE|K`=;^_f_NB2%Z6Al<(9(6L{lE6FnZn62
z>k3R(pky@qKH%`1OrDY~=`w|bi~Wrdx<dPA+n<}H=8Eprl+66$$NitNvu)L4@!KWR
z0Fz{q(`GS+5Q-~pGdOeyjSLWDp4rgsN$iWMdKDwLB(FsfF+M8T;wN?;4C3?d=6^6s
z=-2I6M`Fl#M?Bgux*lW$p{Yc;3ria@AWtg5Y1RUJ(Za-xC@xqYVmr26(4<%n?Rahu
zxO9SmDr&|E{zqa^1TW>O&eKDEYgUXF3lFm}du#1Aaa6yT|4KOyM#p7iL!4N0UZ|_6
zrnB(P6U`@zjuw2TsIdSjTcn2WW&$xvPl*q#d3W;jv9Gp37E)#@Mq{EfczkJ%A5P66
zIt)8TwERD)+zD!f+RXj9Nx`Ij6Cy!p6vC3P+<gB})z-P?!ZpRvG6-;?BU|*(?5V`3
z^UNL*IWJyQ>gr>yCFPlrNKsC+%}-bmoCKkq#VG5;56cPxtsuXWh8cv{EHYiHq-rm2
zNrl841ws7I1ws9lbgkPa9;KEHgOQ6yF;RPDA4%C?{BQkQs218uC7pJ@W7{xM<W~0`
z^6*T97Gmmm41Dtph_;Ymn+w$bk*@nJ5oP2-)^v~Gbf2Z#Pm(y?y4v6r<J6uXD|fZ?
zLj##-P7)tXzf_O2o*WQ6n8kNY@DS7}=wM6-$xJsxTb0was&|fw4!Qi*P(M`Xw!Z<~
zwWc;6_K|EH&B(GCd<H|oO(LMv`D(yl{<W_({tTS@4&7b^CNzQr=Aa`MWBc|#r9qk*
zE5CBJ2{W$<FV1s+Ubj`6gMb~@r!&(3PnQ!tA|)s?hGLMb><ZLN403G7(Pv2qRm8~Y
zQn(PS!OxK^Mt20x8_>5f#Kk4B6cPXxxM>L(TpMj<2Lb8XxvA<5$z*u=FCQVI=P=Th
zw~Hd5ecd0L074s>%RTFsCWmhunC|k;lVTWKR?_uDAS*o9E_aEAMor$3a}5Q8I%*-6
zLAXf|tQzu;N-{tV8uLaw3xVcXQM-1M;IW|+RB=B=&gx!62$=u{2o0Y?9<him8}H>e
z0Bm3<gIQ1P!m}iyZ9BfDogficzQf#lTzOaOvg7ra8M16w=ZfXm<`ozd5Xd8k(@*u+
z8mKj=JsxH@AbROz?9cHo*fR`avb|StK@h=Ti@CA+i*yPU;+6Dey~U{G`-q@>VgTkE
z5&SqkT}PBQ9SVm0Aay>piM3}mhbNGQg3CzEov7R$Y$Abfn?KI+ybkC@9@qiB>(rm!
zcHm4_W{d%F{pArP(@xQ{1W>q<{)Ycm=nX5RabM*x6GMRwl2SjYaCEui5P?ttvUK2Y
zZtsuhHivy)RbR2UM<*_CzC)lK0N8hC6y9b$7-CeN$n7GLD9hiCzl4$D#HsWlSDbeX
zW@6jBjO#4$f>c4hM-nJvX9z;iB>*I?k=D$!(u;pAv0MWR197kz(CahLOlE{|p2e?!
z_99XYtqMozPMn$zT3#m`WqssN_2Zzix9Z#rN4~QJll8ni<SL+JX||pO?0`go606RB
z%toRSZ@dSX287Q)Zw;jt>Mq3=O%1e8GiLz)fAhD(wK9{-;jML58M@^!Teqt1|4$^8
zPa-eEI@rnGlG{GpT~)ogcd*eK01k+y_P97|eTXz|FheKxb1oGACfw)REAMu7+XpM{
z`6B4OQv;&YoJlZUEHUurd!hg_o(<XwZaI&|d_I7pxIwe(*V&P)2B;}cvI;T~SEdE#
zL8$+gkJ(E~5Geb>`XvwA7c@VW56PcVi;XFM-~VEQaS6N5um$3hLsGG5^5!f74xL_w
zCOEm{!=AJ+UFG<@e1D7q^RhnPbH`B%ik;&&pT55oq#(c^!h8FtagT+eposT?ZgSb>
zy?)Uxq&y_LEMS%EkZ)2F(hWPojjSxT<21w572_)_S85z@{aEoKG;`hmv7$D^EYt?U
z;+p|c3F`s>tpB{PjZhzlcSlBYfnnXAA>=jOKwRvczF4>f`0t!-Cv&*5@jizs6eeVF
z33lk52TK<IZm-J0dp{hRLFjW|Vc-Ab^QDZhNN(}Q_&VP{^Prfyryf+IO>!%~-9Vd*
zq>hIFyJp_Vdd!&`P7-r6Uv-(yRUIJ}Gia0PO?a4uc{DW>SZ%bML|Gt<rt;ux&{#_&
zbjJEx(X`2f!!CI&$4{9E9b+A9R)ZK9wyY@gB6*2YY8y#<?fGE76LC9l%I*}|C#QTa
zTOu~Cr8lZi&tM3;M1!LU_TP7(FY?xva`7wy>^sCJR9GncIBBvWBo*P--UQuVJh-7v
zuipTj*=NRmJ#4`BRU)6uJ<NLwdi7SDBi^JnydkIjtWzht#7D0hl9HvX)h0+dUc+Zy
z_!u|-Np_qX$j6HnEN9aWf{wQ)a_JwS!Ko{{UGFfatbk}k0Zi)~3d=6H5;HkDXbq`U
zSS*d^2a@PuR_~(*io(pj#+VZNmM{+j;WL@anagvMr<78Jfw&kn4e&g*Wd&fM$3ZKr
zb8b0U*2w+Rf93K@?;8B%2?8!s?~ShAfSQKf5`)4JgB^E_wEiQ{p6BMA6T?M<N41=?
z+Z3F_Xb@^pE>7t});o04O(DIkp~gLL<!zl{utW9p2oP(%UqeU9Y%=FddKt^XbwQ~e
z5N4y~yS2Fnm+0Eqb68`}_qhJOhouISKHJus4{h}5jkm<Ith@Svt~Rwd=rRu}P0S(|
zg#^KFwD5AEvg&(z-W^NzU#tA}MkG~Tl1xBI+}r~61&&d#moDR6uY^?FU)jHy;w}e`
zk!&fYue~Rf02V<s?7`uRmwluFEzF8covm+6WkZ(YQjII6h45q`Ga@jSL?G=KNPyAe
z;GL?3MViz+LJ<6m!Rx1|Tf8TOI~m(W-jJ&sb(h-nZzRbpxYYQ*1mV6`>s(kWN_8<1
z*dU%r5JUbQ`&CstDhW?#nk9AF>w%)dXs*pZ85-9BH$ce0EdSICd)Vw(Goiz0`u{of
z9U69LK>f+W+@;Dj*tLd>C21d*rb$S$CVwXCkIj;;oYeE@5zCm6@#o)*Io|uHU!#t$
zUPiRDg#fhvosf2346&0&HwffHR0AsRnqaPzSU`f&3wo~Cc@I`GQKyg{)aE>$h0!LG
zwB~3^3=gA<<jSp3r=e91gsdK62D6+GB$LfNKI0V=2!gLLW%YJJMq?e(Vp(_%hB87r
z{c81iZtSn4NWix!wvZ=C<M2my)sv}OL)+Sl6US!uId?p(Xl%&+0MbQMYFEot3n17g
zX=p)Y$MGD#$e18tO>{Bi>V<^66Rn(k88&3FsaB0KR8~1QwGE?Wgy-e$-X#h{$(?FH
zi(@SBw7-P`T!%vP)@m3qR$p1U>^-0%`wP`pf&Lb$1BwX%1>;%ZwrVx|M<j@r?-p4x
z#>qZk8v$mOI@Ab7qO@y4WT^hB!URV2VWIp0;SiLtG2!kckUa4%Hg-M!=|ob5LAZlR
zNL4HZFSd9dcxK0oR43s~%k1*yEbhdalyPkeMYD1Y$kKNxwL5Gg%PYa|H5SP{X&+ii
zj~3^cW~`p16mQ+vxoed;gQp?Y6Ifl^Y!y7{Y(z8lO|nnVmYzZuBuTMN-6j~#=4B*Y
zQk8)v8cpt$?3Pz_AO->KyWXG}OKLfI*&>3rWLb>Jd~1w02bWv*-NyuFc9#8~AAUAu
z6kbs7CDZ+kFOtwSM^$HaJT!WXTI|~wzepFHRg`RD%{Z8`$sBg9pal|)PY4>i-_Am;
zh-qSfVYJHicx+48x@V#P%xWuyL-qYh!hBgXGu71H;xI_~t}c*mH(|Qy$n!#3QFSb&
z>V4j46Jqt<QbA?k&nwU10KK*^_gMr-ULOHEDfP`ILqnHEi*-_C3dk%R=DYfr=XBb!
zo8g;)lF|(dHb!G-TSD7N@15ZZqPP3MJWj3CW$ptq=By7rnDysWTZGBGLeJC>82c%I
z&B0L%1XjyDF?->`#2-K%i?DeIE7=+8Sl<UU!eZ-YEl?WEtk&C#!qiUSNWaHF4Dcd_
zZB?<LCN`2&*c&Uv!N0Qs``*P;$hslxnkC03G&ol5=LkfE?1?eeH=7Rl%8yJ%<}*C3
zko|p69gKq`&{DYmhIwaezl!0@>Ci_J^X`giqH#@`W?e~E#{yA~R^}+VUoSP~5Qx5@
zsgUD@gh8c?&N8LzTRJQANqk(4sv_Elsvqq2L~n#SQwfZ!PF9jv!v3fH=DOZ+`@tQo
zwai_N$X~I;o^fjZ1SoJb!e`f`DrstPV_*q?`#~wb&l?8tWIBMYQ)5<ynh~Dz{W{<5
z?lr2;%QO;akD*Al1v7F>C(&I`WfVmB2YG#@AbsuU1*APW=7e2v<e?ApSVcrcnJ$YI
zyl%(dhfNLlqkrWXef?WXD&N7xwMLFx+jAG4kTBLv7`y);@05aGVY^Ph4=%I`Zd~T8
zi%`1?UILqShR|^elO)E_sZ!zAqDjag9^&ui&x>6`PgFY*;2<UQs`i@I8h?}xuSD*O
zJ-X2xv&xY<fGEkPP^;WtT?97cmA4G8s@U^Gh*&f0`Y<y$KtgcTKUiiAK+b#7C8EpA
z#TN1|YdM)pCc{2Xcr`dCo_*6=L{vJxxwc%saPsziKERE5gF_IZ?XIE9nGtW#NT>V(
z!~s7gYHB4nQ`VPOb_9a%MdmGh<TjEztx^U>NI8=hcpe!Bn7r++)1XH>cg$(=^QYR>
zlPUpj1bu`3hwslo#Wx?G#}N2`);hALO*v%1fU~v|E({Z_H~?j`;ypu1qOVX@w*z^8
z5xB28AU$E4h8uYp$f)goz^82xsAW?uR(5J$%c!p2Bzo(dOI)#h+cB$SAV)dj9MB5)
zz_W-&ZO&KLzvOAhuIf-821r$x_ZFQyb8X?&7*$>pFz8NrV>{ok$tF$_XZordwuoQ>
zv|K!JrV9P!YLw+weTTOx7vLd)jzm%>CH__#Y<Yvpb}ZAG91TikCr@CWi9dUHYn1!A
z`6QlR4EX#Ant)m-!|4O@JY@btKp=uZnx$fpGu%LQ8F+12&O9a<vWlF%GqLF09Kvni
zx0qmUmS!=r+}^z^EO`}#{i6RA^FPBz?6Vw9(5gb`9&ukmWEuzjXq^TJme{IqXM&bm
z7Nszq2@DeE<6UVXSD+o6fXUMWDxORE<2NaR0{tl`gRWDv+CqowWLct}VtMQFtI@I4
zVWoF%eEJuu*x%4YeL4NVs_O8DGsku~jS@MJD>KRW{(-{1v>&lAIufHCp}boQS?Ch5
z)sa4*0o7nlG^<>SAI!cFLS{1-G>B&0tdsKv=QHP&bDo1Rq_>y+N=ct{LSk<ss&tQG
z){$eJax!hjRw*6{$=yfu4F`q1D!VegDT*ZCUsoO+!$&Ur4?DeRGM8E$GczY)b7`}M
z^u*8G#I}4IdUh#&))ED-y5)OtmDz#rnBLvyQ#X_z$y%5<Z{$7SGypI-I>#hOoQZus
z&izx`v<q`E{Hd|geLYv>-WMkhLt2h)TLZ5c(QxXv@zoL#F_kEyecw6kNcgy`L0Qb|
z4W!RAIS3yPP;!@uX>}|+0{GZrS4F?R5m<<#?`Rp`x~^g_leA`agZ%Kh!l|Bi^ge60
z`l_!w6+~_R_i!^G%I-c_?FjBU8~_@iXjN{_A;|Yyt$;-ps!Nc%PAgN#oHz|GpN4dF
zYI<&nWxN0>?S=;baf{db4|(IoW;4$()+%qCCkebQ>6F+Z%UDkPU!Sc4BZimvkzy{~
zVp{g_gK~FX*)~fHF`{^F0|PokP|#qQM`>LV8HKMVqr+PtR5-f2Js#RF?kRX!AvNAh
zlT2K*afO(k?f&}=26dH|fE$;uy#=7ixdUI8ma5|U?!nCx)&|ra!+q6X;6{2jPq$Of
z$7I9LJh~+*zk<?4sPc~=(3<y(sS5UC>qs-0=dD>#F6qZ5BntY=3@lM=3dt1}L~qD>
zXQ0IPGjh*s=g|?#Rhhe>_^wsEtV!r7Zl;+2!Ni3Yj1z4R5#Zal=6LGejWH6D>-57!
zDG6yaOb#u}5oJ_uHtWJ!+OAG?L2-9Vly7H9*MoxR!2yb^Q)p(WvOx$WU$iU&wY^V!
z;z<i>e~QryzlTlb&gEkSyn@&)@1_!3ngi7?{AS{K{&9K^SK)ZP@7mEy*iDd1QKL#5
z1uRw+rbY;kHY5glPt7i70|;++PZOsX81f@VVRo^{J@Tx5qAeJ>2f|1?q@(a?z1=?u
zWz`V)cyUe%v8$uh9J#`346<v2dQ8!ruGFmnDcSVb_dPF)u$spK7hjT$1!vdQd8>DE
z-ob`oZB`SqnX_55d@iNj2Dds#-FU*42EZ4sJTW0`ovRtMl?X1YM-^@s+Yg1}LSyYH
zFZZCI2QJS@nAA8Lp4CZZjmEOPQhkP|R+2p8q7zvMCODLWsEXa8-LlBQ-|uoD%^J>K
zBq_BU0qfagfh*#5S&3(+?wTZ(KVlqO#jkM1DI|ve<0=7h-dJUu7=0l<qPg#W<q!wv
zGW$<1gZYWiAbC|PgV8X6O?S6Jj|19_j2=K!nyz4R*c~gd3ufZ06^yW+l{AFrGC>MG
zuzSWXe1**891`?Cx1Tyv&qyE<oK?I8As{(}A>y-^2hq(_D88ppFqSne@XEaUb7KB0
z{G*;`gc#)$M;yWA!URZaQNfFZnRWXtka8z?*#B{m6<>tQ-1ZQ3u|z;WIs&rs!``>h
ze-kUNDjk9TH_W&ay2!EFY|obdoWd7z1DhM03M$?#mp5aT0t4eD!5eCo9t@&@@lZ5k
z7QHuAvZB*RN?IQN+H;L`|E?e|v=+?4Vu4_usa61Q$=1MXBrGqdTF0(0W0A@8Prqw=
zD#yKDODiI8tz!!Y+iJFa2OI&$XILMTvIU1$U_8%d3JTb?C~un8&$eC!@`L*fZ9))x
zhtx)e-Q<z^xVT^#U;`qa`n>GePnW0o?0hgI2#yZ9TjKFvDhgf1kroc8>E%RP=mdU3
ziNI$^V~ZB3W4vyjSCXeE`Wmb06qK-G39X>MKi#77PylT%*L_L>&$^-DxElr=UX?0Y
zuH2>}6Gt|_?dZDx3+WtUbf3mf)7jB`ztx4ud@SXVuSM5G!QI>yTHNB~GcuA(Q}&7%
zHDkemdm*o;j^3u+wk7t?)#OD~o9*=mEj2m)3kcsdf`q6nj!nGt7gvX+^t207<EUO6
z6z_F%&W;vcrk#!7D4B0UR}Od_2nEht3*Aq*d>Lfkf(p}qHuN~$Uz1sV#_c9z!fb1j
z6P>9=-@##>vu2&C1OUI&o?nJr{cG;FMzq&EI6%xLH;$%;3v|Y(yo>`XxoC)&Pt1-T
z6jS?L!ZS(oN1#EfXKZCv)oS>WC$ffMyAL}HGkmA-k8terwnx=-De!7pvu+~ESR}md
zl!w0*AaFf*`9?50&wiMUuQy|As0Mw%LnCB~jKpzQwi2e(z%fa8ZC#sdKHGr~PSaow
z+*kM6eec<bl|aoK?tCl1Fx!4Cv;HiVgoz4umwUi*^|vCdAe702{wbbD^m|+9iH$q%
zu~CD^1u}isk<#5K)=uheB`$5J4}~9fsf#3O>reV;JB_frj^&W5`-ICHy4QsKj@aCO
zfY}uJw!L$6HTGK+TnEg;6DmXW?y=tvWyyf_#KI!f!v;;V*9GX4GM6Pd9kJaq#VGIk
zxQf+YsyGct-rf<%ISRL=GVTvzVC#}VrZJLi1(%4FbICRoHtxQn##U5o(=s6*rn60P
z(Yvl>Vv4yA3DEB!-=b`Pkjj&7k?gw==HYBRE+$U{Fnc#kBq-t6FvWFKAG;C)&7A?|
zszy&vbzRxL7I|yNkBm}NdwE;R%Er+-SM@9cC_*mAhP?H|e#H~;j_QZ=EDnXO^0zIs
z*X)4%)iFtqb9-z%PQ_@NeXLiiVeZ+janG<D<NA^QthBM+_PW=ERpS(yRnCoq!}JMy
zU|?w~@a1pHyV~6gupo$f+v^GHo@2Z%D8CS#Wdoa6>3f69`&*QsMKo5%d}MbBn$K?>
z{%YAXVpC)mE!bC_Mc++?RDlYg)Lw^l$l;ma8ZC8Uc18#rR5%-$NrXXs^uJak5QsT1
z8LvvuwJ4|S(1wj2Xs{joxzmDmh(=LZaXp6$shfR+C2>p<z0xL_c$B~T;=qA6!_trz
zN)L*8tFLf?cxXVniNvt|g3}f^a39Lpg;tf<m;*j1?S`C&^kJ?$<Ouq*RZ}Z#vz(N5
z?TVEAQ{*Pm&y4r08FiOX%YTUEAgXi^CS=`zU&@)~`Okmdq%q-Y<65uaWUl@3L#80v
z;|Vu*cg3HPV@Fsk6r>2Q$HT}5-x9lls&`5L`eMf`HX1DXbaJfBiiCd(u6E?k*^ad@
zH3Z%0y9I@4ezuPmXyizd9^8W8MpRzshQPIAaHV7r7@QRoxG_G%E=GEVya#Q_(Q(bO
zzQ2L8w}G|ut&D15Op!u|uP<z!JCnWR(J!#txG>cHw{wA84Q=j|S`DHo?XXh7H?-47
zt8u4LCIv1P%jv>~?Q|@FNHf0OjFN9cVGwjb4ea-pR3K$!n%@7`7m=@=s3wh4$lEq5
z6)2?5yOAZs*7TQj1n*8;!9}TKxg1dO!;;)uD{k&VEZ|gSVKkeS_Bee$g`*4~$a+a+
z8oMI1CfkM*lP|R<PoS_^?-m(z4lrmte_34)g1%f|lC?I$M%uTOi#{)$N$u6hqj`Ev
zW3OZE_--JLxzmrA`NSSl00Tob*Bn9R75B!h&NkdH28iOYTP!&H7dNA@a@kf!ByH^&
zsS?G<I`8?6rDX$E+25cM)9;g}D3J(C`c+9FtW~Q+&$T@&OQ1MY@`qB5I(`ZxAsjHC
zyM@_Y|DHVushu8Phw<{Ke?@SA;mk)5CE9I-?}xlNDt4fkFAGxi6gYMOb_`)DUcSi>
zABdEG*E$!L>&VG?{a<2k!Ns<o*6bUAI+07wZLj~}O8_VXZ`Wyb4r3DK0%|uHD6R)N
zT8|<O?IRpU`c#s@5WOIe<i4GUcaXKkCub?(G&6O7^R}RXCGMynmUGcy1Y=#2;eD3r
zL6FE=M08R<Jh~d@1d5E}qAs!<Wq?d4M*CH;?%Sx+D9Xq{Ev!ZMkcPgR#i$Vo@TtPM
z#9|(($c!<eD&!-aR!ZdK6-L_f?(Uai2}CxEm);#E%5!-SN_UbzJ9MWRF0Y)Wk>2rV
z3W@~tNcIp))5Yk{C~hiHLMsx-L@p(k<%#fVtlAJ?OVUK)c{#>jR$4;L2LRD=MVmYO
zd^*FEe^6H&C&VduG94VRe)I}O6h^Qy2b;(%WZeH110?u72+&X7aUm9SS{gvgYxKbM
zi#H+5Ctnoc_ot!>gejODnOSf<D5>m%7G8?v*Xx%P1ZI9J?&;-l1rCQvy#H_ER-OiS
znq16@2;gWloM1X!zqCi!*A$j@9!;D>7v<fJh8^^iIIU}4l!@t;?HBx!cA=)59GTgo
z!yib6wdS>Sk>K@t5yp@~dDJBk{iIF`=Gm>#C+X=~c?!Gjs@?pUGz)G`ks&sQnb4;?
z%HJdpE3E0wq0MCb!sCj}x^ku_M|IBBwd=sU)V4htv~|;$5F1xJ0T;2NaUzel;r*`n
zW<)6>cxbz|kb%J|ld{3B4=J#zq^P&d4z>eNaB8d8U!nNf|I?^v_OH+=w0fmu)vqeD
z4MQV9sM5QgsO~l@>tEP>6!dL*%Zd;yHw|SfrxozHKZSBPlq-M)+Nksko}F$F?1{O)
zVdW#hF1&yXOjGt214ijvY5|*ci}Cp)i;V3?dRd7#*#Xa)k!ot~C)CO)=OkjaYl=WT
z5?>lz=_Hu8?@%%6y<0ngnY8?4I)|Wdfp=*}`~Ipb4IpRE2?AzR4lw8?5KkXf!wN&h
zadguiXx5E`363VLN}#fNal(C~IGrcB%%B;Tf`**7Q@xsk{65s*%?vWnF$4Jn(Ex_L
zGjU%=<<CaX4ubk)_lxbvhGsKPii&s1$Kce*<Ds-k*5X)qESE@k-YQhKnU7|47Y4Bx
zHDK)1>~u$4n0livQ^=O5vemD{B)B7E`o&1jvDDShxI40RC8xIva8_oYL_jF593B%D
z8?2+efq;Bnr_XX>VAb~Ik9Ln2J1I^o4oZ&ciMbJEPeSVf*i%dS;5HjM1P}<Be_85P
zpV+oySyL9`jY#x-su-Hs10hOWldMC%fm~FC9TyDBMzH<Fp}P~e{~!#hu`8r*1-{M)
z56&{Vsxsb|w6+XnRlc(m*IE@}TEkz1N*!l8rZ$i4z;Jegvs%l7`+bS~lBD*N%!@P5
zn4h6ADT|spPo`mLs2a*osQq3gN{e0-jvQs^Zs7){WYf&!!Dwkl*?Z{02V0@e*qLw-
zZG3jp8<b$*5~&reEt6ByCf{z(F519!=<9~K`JTM0)Z6Bs8yc1x)Z#Nn9*w42ME8h|
zmhliFwkjcbKy5|hME|e1Gdk;2ffyS)&&4RN0XlKoG=Fb#m|bTD?M4%eNRB?ALz6Q%
zEPw&g{V@#>yWT@lz~x_<4}6TrQE)l#h+a(5bV-dT*T<`L&dO6U%>xX-)Xz+7$<frH
zC{#-34?ci+!Eg?#he3B~++MM!bK~&`QwLjE1!5O}Cd@75oFkameEB9wba@ENWgJ(D
zxrwQHW1Bgg_0lIXp?w3kPE8UZE?mUTs8<5X37i+yYWg9YNm1y=aX64beT0<;dUKZp
zjcsTq?1CT{`1}?QkxvcUZrF^q111G-n*P71RWJq3M!8>zB_2HL_8?(HSV7Q?4wHbY
zF6Oq-^gL_pNRJDa?MK>t=1m5>mN9_e9>!8|r-MJ$$$O~}=atBki=PrIuYbRykN4v@
zG9$@&amOL-?&tG1o0j8qBsuG3ds8uPold@j&~qRRoXWlKtK7<tY4zG_qGUMEB$Tt#
zBG#D_r;d?NcYNonPU?UEQ6b@*$*6=8*L}?-TC42DUwP#E-IrVfAlQ=|u2Bu6ZYXG7
z=15jc7y(G*DIZTgRlNC;^sW>RyR6kj8uOT_7rduaaUnE-+Ep~X<v2KddFXWTg?Sir
zUvAG$ZSGHD&FUd&u4@R%rKZ!zagn@RWDdtnH1AHbxQ@zf6)e6I^P#W5Belfh?$H-;
zS!~5xpeEC@@|Kw}#7gus)c52JBJu#kbK3HQL1|&E8SkM%$06VH=5AdrkTtqxEGDe1
zCCJjC5Y-%A44nIg?D#Ns%KGQ9`vM2hRrnOE2_Dp7k3MDSM+j?lA&INZ+lMt{Cm9Z*
zHRM=+eljXZ5Mv1dGH3J7>u|6iJdMI<F4n=f-&^<jBxs&k47kv&doH6<95fr9ELhrI
zo1HX^OSH|eB?9(M8)dF<lMq+`%r6nQlV|m4#GP$}qiSl0XrH-atK4$mXQ}p9l(j3n
z{UcDp1WOHk^`viAcY)vXxDaHSGbZlV6iG9ma!W(z-7H*GbuQbV>u{bj5R|VY-4G@b
zyJza2zHML<ZQ=$kt*6eokwar1-sBnW=+GQjtc+Qi_%IF&0HZ;^zzr`)7TROekAK#X
z0ZeDnjm9Ld9GCVlHmk-hGSPpOa`w-s#{sxo8=s4CY!S{g`?x6qPbcl)iSIGdc>08X
z;R5{}39Sv`m`_WxyY>u-BW7Yhs5Rf%lS7lBVhbOehY5H7zC9VoAJro%tW=Z^nYeWc
z9U^>;2zw^IlYT07vu|wdNk7~;2pShZf%27R*tI-Jva*wv<L$~HA`dT_REoux(tQJ9
zPMamU+y1{t<n;t#0WxviCv6##za(M?1(m&t^L8NQkH@uD4H%=QNa#d&$T$%VTWgZF
ziKTXCs%!yHcd9}>FruY4Hw%^$^@S0?eRG-J9A8<vl(D7W=Zc#vL?cYbw00)@;fGnq
zG<L5mX`8qJ%zRd+l9zRnFKenoBO%{ryI1q1xYU3Sbvq*rT7~8+J)){8ynKx?(c%@#
zF6d<dalasc4cxpq5cL%fcW{j7i;fQ34f47#w6%?p#68P5)P-z+Agha=9k1Y%OFbyD
zTyLp&ttexykMuI`XclIj6Walf&;7@%KdA>J0{Sk(hrh6$_oVip@r{|J*Dp*OrYJs=
z%sUri9GX&a1PLVpTI1qRiMhNpiCUGvhgg<oYT4i@Z+Za3qL2#XV(t1DIA42cw&1lW
zUsh8TQnpvmkZRj^btrQ%b6$qzoOP5V=bwV<+zR$rxdXaMPN9QO!^?(Y(BT<<V$#$&
zo%=CD<(>0(SkTh^;uL_eRb;TOE8uiUnUHO+TXDwKbdyT_qnm;h1wh`*<f)VydB$A!
zY7H>26k)MCpx+kpa6i8Mo`6;X^Las9K;2sN3bwI4?J|9s=<R3n38(o@%D8n@nDmKj
zV;y$zj7J^$+Rx{mf&Wv@%QYz&j0JGy1wYPd;#-`9RGQ2Cq*jld3C!>j35FohFOAng
zTppQdaYDHfi!CTXUk^`vdC+?X<x%q)Z!9Si+8iA&K9=LPXH>9L&TZVpN!u0vjN>i<
zO^L}0-v_-&z#(Wn6!VT%#SrfLs@f_`$?W)VRf}*2nKcgIpqElt+a?qcv<HlbsM$B7
zdEhHi@j47tz!_07<WENFbZ46#9ugse^c=pj*p?}AJB{tw9hHAH@B3Sf|81E}XS$<F
z@+2(4&lk2{PKJ*X(8(Uv_hj3;0EsCSx-mX_p5vksE-mT%GOhl(gDmj_ZM_`IW9sUA
zfTw6agD|=Jk=yq^ZmV@0T>{Rv(RFIP?lnitUMIrT_W$j%1q%^boUQ_}8E58NAbh7K
z+lP-;gCR96Jg=%@7_Xt8j%_(-kDYrvBB8@0#UV4da0p8vjZ5t*Cy*0^_vSO?htX$h
zKorzd|0u^&v|tgN35V-u3DMt`RK2**55{K&ey61FtKx8K29-u@DIpMl>Nl-am8t(&
z7UVbg%NU*wVn(2Wi|z33=2eJRx&zd*YIymu`PI@M5e}^FHI+tKII0CUMr}CbRn=2(
z<u7vOx!7#WV(#S}w&8rl(YWOAR93RQk3AFO41;wL7H}kW;l9nDDP_zb)emfXIW_(B
zd~jp}b!Zlj%N#<P#W1yyjUlYcCzD)HyErwMxjdr$x}GcDHCbr)tn%c{gxY{BH}A!(
zS(qoTsRmMV${^)tFGZ|OyF^2`n2~pYqi#}U_NIZ5hW62ezifrW4mZd|_WjI68Uq)4
z*Lfh=DPZ`PJ=t`1$V`hjKC5wnKo@*NxeY~FlMl;1dQy}MluVPER6mn1oIqekj=FYk
z<42&~W(A39<N#smaPF`-JSa3J$V9RR?R#reY%GSXX9uHWxk^NfDPP;9l%RB5I%mdU
zlm}=HO++f!`3f-9An=YfZIW87JfkCKoy%|l@(7LleuV%kx)mklz=4a|oAezEx8R>=
zLWPI7M&5w58=SmQm-044gKAlXX3tNSap4qz34eN_@y|~@@K2V6t^@%$dz@y8O4!%9
zQ4f#`tF!@d#$JVBIZh)~8K^cR4N;5k<Ur}1hNT&Wo}?&Ye{xKsjgfr(LlH4>z?vvS
zq$nK;+sH)6=C<WY+xonu$YY2QzxkNh@#~_GS2fkg&*?_yzm<anw}i0AS{=l8^EMVO
zx@8!K^4t@~wQvi2CMI@)wLQafrqF*?OJk<*KBAmuoHIFC>U-Hghl}n{_HH_J1`2E`
zZj-n?3FJZsuxV{sxg_9O&?08Y?U-YP){PKL3Q++^e~`20b%(6E*#chclg9P~kB6?o
ztM*xg)0Ou37ary<<5fK-X#d~z5LXLfh$zoD?E-E4u(_URzJY}FhD%C7E{9{{lG=!x
z3PKR`87pnPXT|7oRaXud?%gSj%HR#c(h8P>&#1ucjFfF2fwL+D^}v*&v|x<|KzK@l
zwl8Ayb8zRu@?E!#22-mKbG>B^X_mfM5EmPRn3~h{D(GjRYzn?O(ds+C@T9PPFzJL1
z&bQNZ?uaJ#75(4#wnq;d1(^;pm%lfHhTV^O@%-N31#F?a_op#IHHu(AH6aHjQSl?E
zNn5s{)ALc$pq|BALDNgh<@wulEUDhX$UE6eL6yZ(yPc(HIwV)H-o_3gIAE_(0s68E
zp;E(=b&-464A!H4h7vl}2&}D0dAzw~URzHLB6!*_3OMr^?i4)Xf*7w=T2T_4dSe$%
zs<gs|4(z8nb>mI+)M;Tg6}+#B6HxEIbVc(GC0518AB}8!2KGes&yU5Edg94}-hGmZ
zbf2NQSrS?}$Mo0uUw<DJOVj<1orR<ZVrxEr+f?Go)Q0aL3uAlWi(iu-8ZPd=_(!x_
zM^aq>UhB6ZG50P~3}BdJvnNNoSKc#36;*F$9R@}WcTI8`7)ujPH%LPgD-{yB6km<8
z52!Gop`?5(-ab_ex$5n7-MoI@A{ZGXx?C(NX^|a7W61G?SaxJJPAC(cNL|xUHypoE
z&;GiMC%96=*jrQ5t+a}gXN0`R)HHR`TNR&VkqalEe^@rgfKv<7HZ*xC%6HDg4ELtk
zz4!$)><Y&jbDqw%77vh~d~@=XUtDcyjZoObuP4&dI8hzL;gF7Hf~vpI`QbPrzRf2O
z#MHjqzNznKWhLFK9==Iq<!2@T&<PDNSWj9qfGwYwp<e_jCNp-tJKwws7Y=zFT(V?G
zuLsw0*A3@b*1?bGNx79E3&#lco>^D)-w~-S$a)Bo_GwYf;u*%&wU<JMGKy?9Y?M8s
zEOKSN-E6Bb$JrddSB}dOHt17MPwaj%@JZ>Xe03c;(!6|q$pP5|k1R>^H}oFa8`!H)
zf~le`G}@yB-rMVcEZvG%=j2<fj6qy;{lqR6aDguFgfzqWWA--)m%!`M8BT3Vw@~+S
z3kNDb0JTIdWdxzqw$<Nz2=U!}!iA3q#B_%K*8xftq9U&rB0rTca7N9C3ZK<bOfOz-
z&BiEGD+#~7pgxkFmMV)GMIh^#Hz!Opgyq<Jmp6UBvy`8s3m>nEB?lBH_^tSqk(61&
z>~Rkt`X*Ht7w-xC{njo#y{f=8vy_usZFz2^gTqoAd7o~31UvROjposWLUla*T$%1~
zi^0ih9HnDRYF00)hRho<u4N9mwHI^R{k&TXTN-iHF$9N;ER0id{K=rhcx7pSeutS{
zOSqzG%MHrrKIQ=niJ_$yya||2lI89wG{vw6O3ilMWgLIQp7~S8{1M@3E|g<&j&nTI
zA;m9vP4-D<dTY6C=O3nHfS}}%LGA5CRpx{ItR)58V%6~RSk67b3z~s3rx%@Nl@DAk
zUD;?b{%$KWqs|V|*A=dA_TBwwW6^~s74Z)(ge#2el(1<`g)knNfE=)*g}{_4;Sama
z!U^w_dG<)Z6L2#-Qf1stop>DG7$B_X|GCEkF7i*?;!QfvKdsNDw-@`3rcw`r)^15G
zN$Bw2ri<G_jCJL`Rkz+ded1%OR6kdksOzUh@AFc6-N0E`bTbcKvAY5DG3OG1NH)=)
zt`z-*3or+WD6n+zNqtE03XnUAZ15y(=@Mtw`0CpZuFLRyLfJd<^7r{xC^6!JtZNzS
z+fQN0shjE0jj7A)*s$n|h;*tk<%liC>*ePHdjKpsAJEr@VnjDPAogpGHw5(^bKe-U
zPXR&ee*?wxiA)Da@+A4p;IYEU*WSMwC9^$+p$T2Mh?qEs$xgQz7%(Z}h-SE>K;d`{
zXI9K}Zv|E<q;aWh0DPE(Z_2vU^-;V^^+7fX6=X`!EscLBJX*+t#^<!!2H!Qc<lm!d
z`zZud^B!x45lT`MWbELQJF}*p6oBpHin46iOL7>*Hs3{7kuK3W&7zyegfMbkF>EL*
zV8?_Zhwj3)k&Pau64fR@@mhQL!j!oE{f+KUS&vp-E2lr^^P1Afq$G=|N+BAmqxAy)
z$Z7tikQx8NH8@Ce;iAuxv$V)7)W2p2<CuX(OH5^;57d|ugC$nQ<T|F)WYZdb7S+Q%
zEyiardFVuS&!sOXf9E`n@ZC<(L|tI((42rVR3q~wev3L(V>!Q^<_@_3&i>Jov1uOO
z&ski}Xcuqirqnv=a0i$97)+9;a@p*e)WiP=@^HegqShx(dvt#z0i}{?B?PQc=xznO
ziypCEbHbnDeQ{H+W`W4#a6&2v8pOHrBruk4Rq<7j-nNA2!xVyy1*3Pp5u9FOlq-+c
zwkJn`!9oy2GwXul?EzXI3rE&Bgu0D8rTKxSamkHJMpL#zaF)wGpJ_ML5J7?SF-^W2
znjpN)@j1g>^I^ZrI<vI<db#lAcs%O%1S3PF%?2-jcxwdY7`QqXqwCdQqJSTSFOiV=
zkwG=qPcV-G<x9x$3GM(HwLRCkc}?ko-)A^sSHymwIwezE8>vv3a&Re$r|3u6^@A2h
z2*gOneXNp`%-8p-Dj*zOpKpZPjgAZr#4h71`B+bQ&sn7{yQDZx)8~I#5I?l7LD7wB
zViSkb3=83Cq{ulWU%}|L5(r($;*9*8S&VdkiOm-JmNRKS)Q8{$Zq!Zpog#XqrqbaS
zU}&<Iws$FW`+cgA7Ar?)ZVzfY<9kle1$;2;GIl9c$3Q=b4>++Rm}0n~i6q&|hr}@O
z;mJi*C(Nm_8-k4wSWa&i+pLqu@eyr-^gu{ghW&tN2r+~SGw9a@da>kq?;ma}18ark
zM{gSB_v#9KzgBxUP5n%)7ecYQb3PK5aRJWhgZwF&!%qq4j}eXO1nKau7^yT*=P@*o
z&671jiM`=eo1$m-YR=Td>E+29l%xgCO$sW5N1mqEV^I7U0pTV4WUM-INo8!J19}t!
zS7yt?wjnhCNoZ0b0v<I(a$2aCMIv`s-Wz{jnx5dcj>(ne?O>f#VpHnmJ@-~k)2P>g
zQl&m=MZ;ntFg(C#E&-!J+rl^$AapSvl|38V@YTeSZ0|(cfj0Ykpo@j;V?%(9sl40;
z1t!pg>nCTC*|0Ljq)5U<y7~}YZIdi@krqM2SPo!npxaCCZ2lYiIb)&)&v_6RcFLZ#
zWqa$`FG7s;D9OLTk2wCOW$G9RzEJQ>5TLOxrugO7$n1~$wqsjyig}(1OC`4ku$QzE
zt4F!?GTP9Fk~n^4W>cKWK7?hPRet+n07i)@ew|K-N`TCA0Z<Q~_(PhT_Crg9aVywN
zJ?hFB$@^BDQr1OBJV>TifX|4mfW{u%P(Sx~bY7dwh-i;VLg{*8ya_DDwG!5w9BTy4
zMi8;o>Wzei?>=M$@T{&N8`0qP{Nyaa^BtU|0*OpQuh{5;{Z)XUX(9u}#5g*B_b&*r
zJCzwml9z3IIt#_rKf&Y>wXEx<*ECN&ZUww3UZhjKGd*4ZGx}X>vWEcz0eVRhf^zE{
zATpTBYIqbO4SL`swTwb+8kX73VHRwsN^kE_jpi<;1Y;xRYEqOxJgqGk0ZyMNvYb3t
z#MjIQ8j0PaNE=3h=ZPULmaDwbvDra%ja@`5f7MC@pmEnlzn&u73thDjMO!X)fZ*3c
zkfifF4%-@8?F8Qt7N7J>0qVQ-pYg6{O`w|y$1F$j@oezvw)mmR@7F?xU?g2FT8L~W
zQYwKpAIOF;pat)7#1?OYg)1LO(t6u^>&M;{XTm%f2|Xmx$?vJa?OYJ1iYFY^hqzor
z9lED&V@swy6>%6&cxI`^lK_t~Vwl}0qN<-N<vw))u20u(YmffmVouy)H_$o6ASg_L
z=@Pr-SXh?Ka0;c4_-bXwUD-xTCp7~ziwgUM`)nXY_)j!S(DH7QwR~J^hQtiQsqI*4
zL!>_<gim&`8qFYWh3(k6(?2Y|A(>?bDjen#`5iUOt6#B4JjTUAsTu3bP8-cQMW#Uj
z7yMxv8Mqs=6XQaI$8n}CiF>7*wtj9rd^UZxwt}Lg`Mx;^nS-3L+(R^vI+K>`*wR_>
zDa96}79Hy=`X!(EyOjvMm63-O1)~TNm-{RXMBxM7>-dmGje@DcS{tvsX@3;id-}s4
ztO=lwRLwZYs;tV|8t_CiN4LW{VDg@_LC&lcwa#!UqY9KGSx0g55aepES}oq}mr1=0
z8m>uakE)dFAE5FY!EyYO4%~u29yUk~?sUJgj+nu+50j->5c4~i{Dz%RxMQ?#y+>K2
z`i<Iz1A2JF3d4JT58@&m*gR!4l9$&l(S#Z7aAR;-Lun*L!CA&Lc-t=Ly;2($-ld!h
zV2c|C)qq?cR410^ZY*^~IyM(IfI?{mJhTPd#e*%vXsjeBo|y8hfA3bc1Gz3ZK~?CE
z4Z$_3-?*0!U>8emzMlT7u59N~Ew8VOR5W9@2}(OS;L~RjRI-{Nc43WT3Iw|XU_D+}
zN~UyPF)LZFMSATVbvie+{gBrBfx_zuG0(+a_4lUydhoy|%2}Qo1@MIe&TMyUlAAx`
zLl|;7=xovxiNr>5{WLU)*FsI;IsL%OO@Xfq%J|dx(mML*fD}$P2#K={_?xlg{}h17
z6sLGM)px^IUuQ-bKRYyJvb+d+_J_<kmg5UEzC?sy%Iwoe`>bSKs{S;qa_zFHy1(}Y
z8r~ff72PN~CtFvA=IS0}bNV(^)qYt+f<zb35W8}w+riNw&Mj;zO@!ANDfhjlPB94#
zVT8h%c^|fxYZohSX%S+hjHn*Ns@-zPHh{~^koBn%BAFNmiY+5H$5hJ)Kn`zODOvT@
z1C?d^bynaCUkP7cu_cZ^T}Iw7eQzLdAHEd6C6+Be0Prg4YL=*~XGC#e$#I^4@7LMq
z5x1EMziw#SKl*SGZp}^{6b=Bu1h4&{CxS1+y?bNKsw3<lHdiuNnL!7A4zatE%S8||
z=XtY3N}+MaNjp>t0?3{4m#*(xG6!#7?QaPGj22d7*6Ta&VpF2<Gc~6V1Vy;fM4qm)
zI?)Yz=T*!ikA??-YlAwo->+!p{;wwq&2dZI3pw2fL*hQCEICXCYa3Po5YhNpPDagv
z_`btvko$8qL*bxUAkO-CsM1JeUb<+BKU}Y#1xfg5KQ{|@zaffom6)*p`>XG>Fh0Li
z8oB1dP8^4MpGwnL#bTS?B~c=?#g{m5zB%oW;%mA$*2h{R54YI^t8OTaSQTIYzZ!=7
zhqW0DNI<g2XC|Bjg-$&Bv+r{)cLcMu^8GR3-{|2z^}|JP1D)%fg~(_cFZI`DBPYA}
z-O2K?4U$d{r^j5~!@lU%z`1kGZHBV|@9>!FPnCiOrEr;{<{U26n-~f9<)S4$kCQ#0
zXwcpI`w-bQFBkq8bKZRInrwx$L6SaID}$w44Jc9n=kFUkh`(<%#Vb36qOR%4sdS^*
zsj6;$UfKLTzJtgfv~~UMw#s?lp%E>W03BbOi+W1SzcC0c-Wx;<PeL&G@R0N8B+RVn
zHlX&CV4}NSlt>iJkV8E?o*A+DE#2el-RAnKL8PN(gCnl9&ne5+La-cbVfRi@*}TI(
z$%MwJSkV3q_z|P@u4{i9`o!7<^2}9b*l@o&puC((rVvUvettqZ!mNQ6C{zK+Juo;+
zhjw@YVZh!R==8MAL?8-DK5SMpp}HZR`-DHlR%ok7AdG?aOFJ12r`w`0xaAa7>jt67
znyNc>)N^fAr2`i?t$$3JHmB5tocOuyUjOPmKNJvk<Aca1f^Y-$qEF}%4WQclb8kd+
zi{Q<QH;&kc_-lF|?U%A{TSC)3q}>SOk+lAe_p0oJ^5#F$y@YY)%Da187pi5H=>YO0
zdTlX`IXkA_VSB&nE9k7%6%Rs~!l@_aX~HYxFsJ)6+zj@IV&UQ(HSQ||O-4)4vWW?n
zLm-&mcp9Ki1$84ou)KiRrvJ~T>xx}ZL<mN~hK8pZ@fuWiS{1;MHHRYy-%Tp9e3Asb
zKFKX!pux<}fj<%+rXq5q8*D>KK*M9J-G5(b%%j16;1FpCMLe0%XYV#Bdawff7qXJi
z5-p;ZRG8C1W+pf)A2g}>@=SWSNEB0m!Wc}*#3NuVFtOs`jxr}fI1!FT3R4vDcY>Tt
z?4@{Z;Zi%69~~a`8rn#DQqI1O!Nn~nmip5Gez6tFNn+p`Eg^lSV*1e}>-&nZR{=1d
z(dS-WfrH-#cM(`%hqaFcxE&XQOD;Q?=5Qr>8xp!R%h$F}bRuB)$e+t_2yOWer{kmj
zvVidWWhrQ2&4TI4+La!^UQcllH4T|S&;w3uw7ruFyjp)YQ}erzURFGpkdV^zTIpk2
zjkNy@ezQze@%v<it!hw>iO36tG(4@z;=6Icv0|zs3E*MkrlHNwIarP>PgCwG2My?z
z)8cjB)ygIy5rg`gkTt|{yhs@&T*JAKPZw2L$)I6bJtwt7@OMfk<4>M%S!e16?0bRB
z7~B$FMgwV9gSF<sl?y|MJF3ChiuBo7&a}c`J-CCg&SIwCwn`@ATH^hR!dsQ;{e>I`
z#~qOKnT9oJG54sHQBt?Q!G?nD8LF;{rTd)7ebz*^esP5Hny1T`f>0y&ma=GGLibr#
z$CuV$+}KlQ48_+ClL9axFeN-k0-rRa2SZSgF~>(<omLKV!zMa*&)+tU<^iQhFQo=5
z+1CQJ4YBeT8(S7!Y|{9kxQKNJL$go|h>4<Z$`5Q%T_dbGz%|lzh+2)iMN8o~0Wea9
z@JYMRlLf;sNO@1A$uUG#DR^Qrm^RH&AkGwct?!4D$zFLSaB7_hz%Zqf5}k&>pA9E@
z^Zyj)!n9=syGeo>#LBAW|GDCfVEH7a5FRk7Z@h_%de?ruv#x&3x<Hzf+xS$vqx}Us
z!jP)kWM(o;Z|C`~+Ark{ocJKuym!!B4I&lf-~$|S!VnZ_#!ND}@{8^9g^_*Kg{@xY
zu{{ghL9PX-*EQ73PmGXl*+{E|1URD7h6m)VZOMvf=h<KAfLhp(-5N6zo=PcHDZA*?
zrV?s}P6uiW+`kwF!Er&o>e-&REY)1xOng+bg^f-@;SkZrPj!(pgHjD420mzl(tDh6
zbxV|+Wd-3=h{c5$Ynd;a0>&h<rp3L7j~_p7KJa#u2?<|#3vO`FhKm7U$sa<uw5!_a
z)Q1;aicVnKBd3^KcYXag3WO~zWKO>6&J#~<HMjU6@u5pVvMGG?3H1AYd@eI4J*=*|
zZ*2xji|PELaT-H4U9UildQJs6z6rVsiJt|AJgS^|xL}e4Q=US&j^hUFzZQf0I8nH}
z?m^58!ijM_2F|PUU5)jGM5p@E29ddhU~Z8RQ`LqlQbdT8b?p!0$VO!s>^Y+qk^yD=
zbw}F?kp`MjhC7B{V8#L3a`S1N{RDqfZJ;G*vAoWW_`Ss8<quWvE!@Z1n=jO|ebBQN
zwXq7qu*2BcfdOLTs~9%9kjn?2*8Kq(KQR~!ZkJLx6Tr(8f-qg|#KdbHPsMzZ&9h+0
zN6e!R*#Lwi%6Q)l1$s~xr1Gvm#(}Ka?ZLYQ9_(7Q%Hj6H+Pb&~-7k{l(C4tKLtk<c
znU<jftrH1bv*4T4ErhmOSvPpJ(Yv_^u(8I3^6O0p<KEhKF5ojm;9j}I4h*4VRr!_$
zkOtDE@Q8+4D|~OR?;{?^Zq-Jkc%CiRzAPATNcgheBxXYm>9$lIO(yW6R!i=)ek?Cy
zFRt@lJ5P#)q1)I(!2EMv-NuLwn8Evd@(k%?_nDX<2D~;hK}U=u5o}O4JY9Q}rCFqe
z1DA_5G5pn^M^f=MbXQx|<@kY)V4XN1QF!R3fYglwIEy{eXYr0#LjZ!q)G9#2kb0T?
zgdC!bBC+x!6*JD!nobQ>4?%|ye%Dh`{i}uCoPQUF=Hm>!$Lvfe8N+cvsZRSM^2PSP
zv93dSA0W7F^6o~oAE)(9+sz2R=RhgsA9!)na_WIb><vH**_?wWRTWyWt`U^3KMg-N
zf;}4^x^^IIm8c18w3k7m@vLpA#`*kTvEUUM<U;f$xVzh^NOF@YH#MZE5Kad;GGJ?g
z)XdImX{6rnq1!%;C@d0rKV;B6C0m!ey9k!pl@)ci10ALon}@IT(;=KU{5l6T#<rR;
z&?7pKc9++%&kvWxaJH8g{xn%CT}SQ}w%7};gyO1ZYQOI1xTta<#^2T|jQ^MzPNDf$
z8&o{j&*GN9zyHW8UpA#3UuA_G5V2dk^)Md76oLcVuzkfseC9HiG+Fwsg`Fz()E4$>
zuhD1+&CofQ(mAFVgM`afoh^>3)LS=8xQ%`Zn#czX0k<wEz3MFI_DdmVQ{e>>sNj0R
zTfZq$vcN5I=NB)cxUz5Bf0VU-qte3mZOxRJnxwIH%7o5Jq1DJ+YFb-mMjS&A?SR80
z!hd#EWq90$r0410pOQ9aFB<5BpftGfIp|gvYF*o}dZ!tPV@1F2$2_117r!ZbJ^m{^
zh#x&RV?wv(_yJe?d)L?#i3X`~{*t3mpA68m1VD{Y>Wbua2o#b7Jx@&FgGXw~k=`b1
zRF;~y4Gc>$M9bfg&pS#KZk+^gY1V$d*rt3?r{T$Qll^V{ULiKl;5<Tm({bMs<Vw<L
z$V^xr2DFb%gCiEhB*VMtvz>=R-LVH?fv_JN>sU}tE_aP>#bjIvCW$VvVyqwxBZxv(
z`I^kY3#+pbwj?I=P;(kRMEI&Q%vNVcZ~4DqGHxyVg4U0;l%bTdJsYT6uDRNuXa(dT
z?NH=G$D+^K6)>#9s2XrU_x)W1Aa(ax5Ue}W;A$I;CTV+F-S$WW7C)-y730&a<`=KN
zLy{<@tX9oV!2YleRMgkqDk~7oP6MdP6HvHN{_771JuR)%>S9&DM;qn-81h5Y+G<D+
z_{$Cgo>Tr{1UPk-5AJVNwG8%j%yylwW)mL{<O2ZU;wp$W!2GJXBCaCWM{PZq&BDSx
z3~|kp;1P?+lcy>sPBgn$W2l*gEsuh(c@T!tRWCGFVG1dPST2~t6Fm$svxXR7$$(GH
z+Lvg7tomVuVKVDzTYU19<*=_J#_`u9-xhv_ztSV;cBnLyM&=CY48*Ck)8BR?=(e=F
zB;B;8C<5b5Ch=ntoKs7tjYOsIr}Sd1i-(`pqCIRO|4n`5>PZ;u7XXgNSb;!M4c#nR
zqJwZV8||6x=mf<2)8{(4CoFZv9;!vKO4&^eH`TdqJn>4yB5O4NEyhK*-I#_*yyKCQ
z=@Ya!W9ub%xM`sQ#}Ts^!;uv~TpSCi^cfcrj?S!q=9lW5T8rwVo~0gYab06r>*!t-
z=CxL4ew41GM7Z!F-NM6!R!NY@^(BHUo?jr{%4Y-uAhGuP5F=*6%x(Hg{1U7&#tK5T
z^RYP6PWh-`?g#`HkSVh_Ewv&0l^Pp0CHmK=+L3uQS*iOS4ifR`f}jkgaRX=caC+|n
zw}irn_c`c`PaL+L^ELYDEUGm^+{HhDM}sNILRbS~QennLM0>gCbB;C;KSgnJ*I0D|
zDVP9oBR1&-l>;Ia`B4BQMwWXCL>&HLdbQ>PAe3a5Oqr@vIozIJ?v~D+er;NvrL8(I
zS`vU@Li&j9tOsL5hBeV_mBsikopuUF>OpP?7)BU;pVqBC$$y+;h9H5{^BT{4uxZ9F
zh`!$j9!e=yf^9}R0;Sn6{3qf-A>%>c@5GahD?B4hFVt&6ar52d1QS_D>X$>ojuECs
z8WcmcUsHdOmxeXCn;f~@2H2<;6#7l+@+1r#fmvq~#f=GGhs3jPpttu$SIB^24Xi&7
zWI{5O?!jFTSime(?hC~oq%kMAMZlrlYXVv+$MSV4^>d?sX54r(4UnXCO6f=qgzf$?
zFjKl`pv3zao4DDhJ(@S$62kk1KAW@$e;wT*8UCXOcdl)=>%RqMBh|2+YTWy7D-FEu
z(u9~+?l4*FTF+@Hj9VhSasdR0#T>wmK_Vso5_@r~(=plS8{}sV@Rkm7x|xYxPfk82
zZ5{YBy$}U|{elWCRWlns*SzFA8$|BbFm`Jhw)b+<$vn-P=lE5?0q}#~@+3v^Q!57%
zA$>iQbj`+=>v@u-Hf0wv+o{VMvIz%LHW#O(tL6ADr7frMSh!(#6`6-+dv)-lFabCo
zUCs)MZR1gK02>rrPD^|qYx0@=0)0NBkIR1$Sx)?y=a2M~oXkk><Z@YHkNkE647$Dg
z#!>VRk<t#KwQ<ug>J*Kc_`ubV>|6j|VV#p4&(b(No51AwU7s)su`=39(^t(5*W)Zt
z%p=f#?t*p`uj<4vbVap8u~^faL0O|1TUV=5Cf@(M%&o6M?T7?8FCaT-Ok6rhOC$Y(
zdUP|QmiNl`{#*wd{S7GW$ra3J@f0G5YGfspmq-ermnG*BcusW^QaN98(f!~_3bAIF
z(#a=+t7$Zh&23cX4HI6Y-qhJ~NUG=|F<Osuv&occuq+c$mAp!1%UQLTwCG80xliq4
z-w@m?42tyskBfDHjq=fQ+#1RPrA+BUgcXVXTk5oKJ_6=*-%8l-L@NS^V5tHx?nB~p
zieMv7EdCqoKJAaUStAF(xDJZYG6(Ow{ND2(qfxhRM}xca=St0dRXih(Y1EW7QM2mw
zc{1=>yOBV^*hA#6#!;CUWnKxtuy$);<V>g3{yUhqWa}*;4LbAiWkrk%*-KRSq2Fe?
zfdlB;&VPW<DlLX0h+2@_0;66?eVjV7FK;$1q(t_yO&FIVW<VVELd?sz`lmaN#+CRT
zTtQUyD?yd&S)+f|uzW{2-ekMadb}+X@H)QpVc=&Vp%AgZG0_Gy1QiA#Vvjo^HVoqx
zgT^*g`)zkUdX$L_dY8{B7RbAGp%_V^i4uLOczn7i;^k+_C2*kcKZ%5V{F2BcNuS#!
z@q|i9;k?O5G;1=3ydms9M9CAZH?<u@@qFTgV|6>amnUx<==64!_}6Oeol}n}K)a>e
zwr$(CZQHiB+qP}n-fi2qZM$dxfw?#*bCQ|KcUw1=tkRp*dY^@BO*Uq+r)^Q?p7Lk0
zJI=Dx=noo(h7&UfVwmNgIKgy=h)SvtLfJh}Rcz2i6{yNAcV16L+|;MbpQs-;63at2
z28kIj*58^o_3B?aL(i32aU_nZ?($+uiWrC@MD4?}c<2=uI}r0f1iHAlk`wg`v;*0d
z=Jm~TZz9wnoJ6fUH0J|<j=35U(YEuD@Ro;|>mFRih-Gp8ZL{<cgXTJd1oCB1aj4tB
zpf*$RS|29NS6!!`RQ|ZnZtqr4B1hqV)xsWcPBOZcH5Dsqp54&oSZ581-P|B*R+U`X
z!*Dp`oqWlHrq)`j$~Xu{d5im%RDXqscWF!U%sPOcr(YiIWszaSB1Y4QNb<gbM$l(B
zK<kLM?%(kq<AF<=w@K<i9w5Ydvs`z;`&^2`9B}zennSA$OFGql0uB646yvvl%OG*^
z`Fjr}pVNj)ZnBBGR*PL7XnsjhXNNJ`;+6LB97<4nS7Fu(q=^FB-)|#lb;Iho-yR;M
z0&!tM#1un6K_?8BU1jr0l8y&f{z$b#i~k%6vbLwLDOwTj(U~22JX%9tckI{*h6c0L
z-8gHY&^*fC{#)(QYPhi-ev=G1K~Hk$_2AG*12Y~+QbBZWD(IKzz}jG?{<ifG7B^|d
zWP{95X@sudrTh`5a;)jLk3g;<Za)XmA`221@|s*_0S<4#p`qGLm~X&=u3I^Dz|}=@
zw>E9FwxsvF3j|*IMmelGP|>8uajFmjy8UgI;(s70LyLCKMy?jyNXxx*<6SwnJxf#9
zO#GKy%3+CRfB~Q4IbVdF<X;+|y<&$X4S2hq`cmrmMZ@+(B~q_&sFrgQPz);oBtc#&
z=Cqp}{hUnr;9&%B;-h}weVaFFOGtLtTv2v`#s;%%IGh#=!P9iA_3}lnCVJ7E*vUr|
zj!pz(5Z|wpqNe~Q^tJdJkOoK(4HJ3hJrV=5l~xrrirk%}4On)6zaawH3ZNe9^dP7D
zMDviRbvBcnJtz-Uwlc5Dd6Bm)=cx7Ud&o<yFTk}tOQlkk(*eEGQ}ZchOH|Jcf4By2
zYE$YIap02<!`w`(#6SWL&#6CaGAd>BKnZ|jj8-r8xXao?=j96*v0YFO?7CDQbhZ7$
z!Ztk963G?|uY)VYw59;m6juB3ieRUbphJIp=e3+#luU<u(8;>HY4hc@UHE51M0*TV
zvf|M5Cf&7;ObPD|v3ivVMv}s{?I_C%%+o_%_(lW8Fv&MWSJSnw=4X~Lt>G|xf8g-l
zxh#znSNUdYQUpfcCI@?J4BCPp6AP%)q1h-oVSUv=uG$M0q`&TuXg<rR$Sy!8ne0Up
zxP%!K(<JW?d&gTc?lB(hgE_Ei&`P#{>GbKfT(JZ>_$i#x$tg{Iwj|qDQhi^t%pQAn
z$I?m1z@(c`Yq{{TcqoD{AGu2+9@}`v*K08cJ?H27JC>Of7ctM;*JaE;sv&ij3)km6
zh6AfOsWN!)A@0(6zYlC)^n5-x{HKOO&2x?t)zbZ@f#6Q=W9_(M8TE*tt{99t?xHPT
zzLdEY%?k=FXi(LpqiY)<|61>B{o&H*Tg5{coEX2G3E4KyBcbB>e5v?5$RKuSIw+cO
z6T#b$_C&m0KYn30g{d*0n=>MXoZ+DU_Cf;2Ott5jditw4Tc^oMM1|eqI9pjs(Hn-(
z7c%H_3l}37Ht=~RO}Z@}=d%!!w|PQ&s<-$n5GgRqu6Cs{NCwjMN^PXNm-HClDvxt{
z=f55l*>B=L%<PEOY7Egld*Gz{q#xPU5o=qr_t>AHwk2mhd58Ge`bQH88hL<+$<Hk3
zB;HF#m*fBrYl<sPu|g*Gj|Z?&4GdDh4OwdUQwvQhs9H}QqI&s8;7T;Tiz?>hGqg$(
zrwVaNG8}Td>PGNeaSvRf(HDxgP9NmlzqxOAxx{uCib&{}dA82L?+k1Y$+wL$exWst
zN+Yl%IDu>m)n+<ouOG&;=Byr2oJs|W*<^0CIBXTxxlM$om34DKxl~zKJV8XV6~;7?
zOF@#6aObe{b(_WeA{^3aA>;gU!m?Yjt<9QP#M44FDUT{3CTz?DX@vPAdxq76QTKjt
zf~R&s_cMDb$W#nb0DFi#{i?=lTM#Qc-iRM{F`$?Ly?uVqXb4SkX86vg-nDrUjg+-3
z1mrZAmbUOre?z00yP91Gt+J5LT)a6!ka8h(hurm!8ircK#{HUU6t14rZp$nU6s*X+
zkV%FO`Obqlaicj6T4h|t&>FgAWLHJ?1B|k#gg4@wjeI=mu&9s`;XH_WT|p?!!L&h~
z*b0rk+fdS^3k%;$a4MVNE!yQOWwc1&8n>Ovm7N(oP>2gfCg5%1k?rgm5wzfzI9?Km
ziu{%A{7}N2m9?DwVg~xhI^=?zwDh=k3|v7BdzWEW2_!~<2a`IHGFL$*aU(II9qc!Z
z=ZESrKeeCIF#rN3h`6Gx80+H-1DSO|QGj`#fq&FX=2fsYX5Uf5i)3C^K{%*(iiA<9
zaQ1kvxg}WY%)^-eF7lx?%jYo*%Mgi{s^7i&3%Sa>pP;e?P1#C1D6&*dB~loL2pr2f
z(T)(WIIj@P?<;*Nfc_dLJHvpfXuG3$X`K(DLT%H;w&3$YRM&BZ1KVVx35O58hFjA?
zw2Y4>;h5%W3+<+-V6M&wXC?$L*Dn|1W`LmQGMLT`Q<`6XCh1UolV42%sO<q)Y;bkR
z+ICMKNC!zrj<qdBU|`<_%z*KB-cK90dM~?QB!-*3X8%270JuFnjF>z%_c6hal{D)4
z_-MiyR6rBYO>EOUJ)L!(I-{EN%uv9!$tB3ME|BffYg$)*{|KSbSkxpW`63+=z#S_H
zv8=K;$Y6^?EKsADjK8bl7%Dct_Fh#lSEMh7I6VJU`&2tFU&1xzB90`i@%eFBdr2_2
zWWS=C9e|NcJdBwAV|Yd=)nL7eRHyQZW4FU--K;#NJKKK8Z=9L<Dz3J7L8h&RA%#@t
zr6=%&b<!(g{__{Sq_qT86wH>^0qOib>|k$y`Bxpo9uxxQ??f4~D*#Mi31dNXr5r1Q
zGwXqN`W9i0bt@0dz<XSfK^iclU*}rZzQ_eavGr<079A!`>>Elh!=e={_$XR(_Mtz5
zUsd*=RRC%$R36Zp!jYTBA8F(p2$bi|CwF5Glj6emT#z=a!Nv;qv@VcrIwhxvAtTo6
zyI43-C%dk9G_J=+t?T1d%plT`y&4(2+P`=-aG7&ME9HBT1ME*9IE4vz-!T^das=w8
zkZpK#_1YnC@MXA|q}Y<pfG=AOTg==;ZM^z~SZk^G5s`{{iS|ZEuQY-oNlIBOn6%$6
z#T4@&;Kmbd)3k$=Q$|`mLe=sO#>`-s7Ayc+iQ7W$r4fziwmdsN#8>4?3*_P=TR@YC
zpRhM=NMyM-uTv+?y}z76;G#~q(?ZbKzHhRz+71MR{W92mt8u8o8z`+awscrlmOS;i
zJl$QY3zh;oP<maj+?x}A-O$~l3(%nxRxm?>;=x%LDIwZ_p_bVzkyH-mZn+KUPp3gw
z%3yCDKj&f888obf8>FchRKRgYv>_jvi}uV|0Vp0RTIwv{*+kh}Q!?nY;+H#^-@@K$
z;GFzX$Z3MHA=!GqCj5xNLvIq$s4?0a<0m30lxUMalp)qsuxgHk5=~1m4Pb-kKLMZa
z)pZfwLkGDa9kyxQw`<BJHl(T=NgScOC0@igN(KEV!DG+8$DjCL?o~Qh2&3RF#*U+B
zXh(}<j}JGT`O9%X?DifqMec{$-ozA%kOj;3_OjwbW$UJ0;CrV{qdS^X%{W|YU!n;}
zgi;^f=88-|HHtU0iJC(dXirzjt%z{33*rP;-0O}JG{=5$O<Q>+Z~IoBmhKXPq)LTu
zSJdU;B8`%|T~=~DU6!a3$o^~<PrPa6+V%S|=JW^-4t9&NP{~{9QIkhXBM4vmuV4i>
zPty8crQ0&9rNq#DYK!g}Ns#aCy(B)KW)?z)8A$>Le?$JD7cz(0jig$uMT2?vP7zhU
zbk1xtbD#_}SEpgAOzxtbe9V+IiWu<UM?{D|Z@N(1qAJ8I(5$cQSMY6@_+O~+_qG2;
z`mDeuZi#!j*0W~CfbY)?ceec+L^QTtoeP+3W1vU2C$->^otYAU%zT9;XfIL|ZN^sy
z?!xmo#8e;^4!(E*rK1*~TCEr|@v60(gennrb<^DsJnkSZ!uum=aKxZ;?@kn-wDl}7
z&#3eM{SYtKlSLt-&tJ^#`toG>J%Yv#QKdaBuC5$_&dVsNH>n%OFPS&#m|WjZnPu=k
zOe5GTMF*(_5P<J`mUh*|_qz}su7cX0sT7Gp6D<T_*QniZzmd9k$W=>hS-wlaYYPdt
zipzUOe-i>nAKGEtq*I4PiNix)W^u5tvZ62*C~V?8vy;1j$fXp`GF`@+ukBfD-~MNS
z(i9f1$}5EU$f$Y-UtMaVRu;63#*r(}0o|OYL-;WKiT)uJHD^*yKut^kmNH!9Upf>)
zB5ZVv2sthzrTZva{OT_XAkSfL#~19nvnl|NCNIWToL7LZMBpKusoG~urJ%vJ+QQAm
zq<+&CQLL}a2tWlY?U(y|LnG9eF9q|5p9>=Cz0=ow^`0s{Z(Nx^r}RYpy_+HyPV@B3
ztEQ}`H$Y{3{2VS?Jy^-kcz@#_$D>dmPD)*4l8U)~4PK_W+dP6ULrV?x+5wQE`&8&f
zXDr`8KSrR}GK$D3d{5G@FaIX%>O(v5s7CfpMhg>-eJ;cPOe=XPQBu^iI@;n9GwZn9
z9x7;S>kN9TQa(vYOG3GoX*B}=0NiDhv!Ct?j-sP1M?(XMyH8S>p2&NmAa`{-N}_6$
z9$xoR=gXE@7N@fel);6bEnP=;4KROF2&?{<ao>uK910gq4`py>=HkxZl81nruF7Uv
z93Z8=H)$aRaua41SA+&afLHik38j9CClZTmkp3X1@A47<*^%$%?h;S$sp6-b<)q}e
zDw)6cfHxOtlXi|R&(bvomSSCYSk~KZ)ZNZ!0D0OWe{lPPY_5loPtlhs#?B;2&9R)>
zr{BsNap$(!tCMnylL1R$h6|w;f$M$E2%cSFe{t19xme{^Q}$=HLlH=ri~WL+DKdSi
z{xvsqvUcA7@lgn0f_6DR@Vl))d3o&by#+C<Ky^bKo~n#1p#)L_D0Sin{g+tjs5s46
z3o9|OM<cJ^I`JG&KTx8AKNlxJD%!jZwBpy1wgk8)t<rRF^(n2d6Wh%iuw9s#+Mv>t
zVd0N+0EWw+*M+GGIEvSv#_Fmu?f#(5xaLgi)Co<X?XusAHS^{h;m~Dk7DTU4>yws}
z^&BTDXp-K>f~!NcF0_{cIU2+<dtzIV=W3D|3oOFw-9NCW9R`MpEilveg60C|gw`XF
z7{L)T2aooX^qr4D2A=A<MD8f>mN9m6(g>KW+G1i1S(an;Mv)hDAlaQ$nRXs3p$z-o
z6WL4@Gr-*OcNVqqFa87$e2~8#pH!7jx;As75Nw~5hBLU@YhY@rk)K32v5aTNP3BWP
z5Rj~u=K=8e;GU0~pR2JCrxTE)SP-TBbfI|uOrDeCGiC$LcVPRKkrjsfau~^Kvi9d=
zelDSIUC{YogN1|#km6PTmdqCWcQdvpW7rU%l?Sxh7!5wS;G%S9nv$S&??pjY)BOoK
zknCVUvm2}U+2=0GpaaD%Y#RBtAihN*7*ZBPe8$*22K!uEVP?t<xYy?=^D%4e>{N9H
zakUbJvK@G!m*L&$0AIjs85WKHMR|+Ms%S1Vxt()dsT+{46i-I=LR5Gl0=;>sVkLOl
z=T9d)bEUEz9K%|;3Fo?ee;a#;_yCQ71PWwv-TfYkBhfHKWT%2$KSzYLo{YMYtFl^I
zoVAEDPr<^~C6KeM{wQ4ov2=m)kD`X}TcrWGEV~O@yN^V_e!aijA#<6(zUm8Zfqk?S
zJ;Ex0!>Kq~RbXP@w{-7<p?tWaMsy||3HS}Uhz*F`6WgS6(_q<FR=ubCXDZveM?)#4
zM}|&G)cNrm9Al7b%LEBl<PKX<X_{j*f;@F9ezqbMV)rg2qdm`<w3b-%-6|&G$Vun8
zv4lruQF`a!pY8B%+S2k|R0gi6(3oVn^0iJzNKPmlneGn){}|yLx(ow2-7xq=_Q)be
zYqGuE95U>dfE~wV_vmpgmP+}qb_CG>_!!R2c!|RVio#J5;qKY<9_J}JD;-)UQSS=<
zq5OiasqKkTP>4}wA<SQmIT2Dj?6C;EnLcgGuTm(Ey@_>L0Om%bPJG$}D=fzU{8+<f
z6V*q43KyZCD8RpRCfzBG*RSDAy$As@U_yC^*2C=8S-4<pOy;3`_7baM;J9CMSU!W>
z&hz;-^zhI&(aTL&R9Pc_CmYI%_v0brxWgfo56Re7A#NprhYR+QVIvd<#T;SOQo@b#
z5)yeCX+aK+oZE@@GG$;LgeF*-jKHUw*|MC<*Bf{sG@DPSb5OkSVCU>iV0Dsm{a;M)
z+FGo!NnjGL+2V@@HYGA-``Hk%PWK6-(k!&wmEa?*5_aJ16R3HSR!*<+Z3nl6>TxBz
ze&9W=GXO%rqlS=m@d7$cy4A($#&S`QEq|MUQ5Z5}^d~|la32Y;d7gu~Z0=L8rp$FY
zs;ARDfXggbIl{zmQ$p;WXQ46p%s!j&Bh=AEw8k}mP>+4Pb@rFYaq_|;9;sscN)y!S
z%3ETgc}I7BX>+F&v~A(JN%Bhj=}3Pt2d=QN3T|f)0JcYv?IyuQH_XgdB}8A&4RQ!A
zNe%T1;x5aiS5hE@4Bj{sf-4^u?ZBTmWXRu$*Hkb+*wjKVX&}#CCyfLzfAX#V(1s_=
z9>s)<VBng-oc*3XfEaHwYWD$-3Yl%R4gnj9Z7ep|R*V~qjNtNvkAH%q_7T@0a91l{
z+dBN13qo1!DWpW2d`Qrz&(`?q2F9pBJH_PbLwed0Y=kKezE3+TC*{BJ9N(qO+Pg6C
z3>eTbAKW1*917}5u)BKBS~mvuBFZs6A^`@^z`f>$V_#j7<LoOklRi&Gh*#GiY>m=v
zbbEjv*Pj)U+7L@eyi&eQ_eyHYo>XfB(2>z|)xC&9kMVvC<}R8=?l-EF8a=Mg?ZPLp
zcrLDFf#%)5FBqhc>-zKyo2>+Vs3V8RA6#_G$Kzc{{UBQ8iZMi-ZoWlPc7G-2ch6hw
zUsdL<0a92bK+;~a?jkkFr~1!4-&Ct8`35bFAd-18(FA7plyY4Ck+qTS0t27Hs5COM
z;q^ulQ?Td94BK3>oXjF>==*M^6ml{|ON~-7Q-JP2T}B}?cE?mw^k(N7h5h=xM9Z4p
z?>0f2YjXsoBIu9-l6haN<XFQ3vSj%aUR9gX=5^O#D<31THQ`@&9|9mym5Wl-dIici
zs?`l`K&+s4El^j(d}N+6*30WHu1D=0$MPo#xGq>qaTvO4_W_u#s-FYoPQM2BVGR0u
zVPASb4zxsP0#Hj8ZNb|aMYME(B(+~YW7cUFTB~Dv)?7}+hT{oDq~v(Ww>+W3DE^bM
z5%~6ZI!hb$9_RtIG#;;bVPf)moafg}?X^lcI=SRyxd0w~&s||}7uyfQ(*)3Ip^3R*
z4Khs=gc^WYCg{hgYQMPLM&6DoigD}%F||yAv&U$YvlpX-iCn+Ln+)DZ&?1X$izhz5
zEDgz<`Y%4@B=9+BnW8n-1_W2mx_oVI0e)M5@{rzmfN;7AXOux0zgjdS6AWT83&hE;
zQ>oYw<e=^5So4XV)DW1pKf<&Z3gr?4^%jiqNd;Q?9wuQsB8!BRg5f%1)tk!g+aM~i
zilFJB^-tAIf&-b-ynno7#L9aQ^Tc#BXeY{zsR+UulC-&&lYvDz1)eP9x)zRFYwDXB
z-Q!;o$pWS482ggHxl`e%xl7FE;A~WHx2GSHlf7ZOv~bh_vPYonNnly>sz?N;>VYRs
z%m3EV)~YUB4ZLe<mQ3<mnfD=dIC5lM-PUD0WPV;-S)rRG(Fr!>)t(zvQN3kaIgT$Z
z0&HB9A^jMB;&*%HO)@TT2($A?3!W(#DVz;x5ZV<KW~L|4IDVD+H_ScXHkm`b<&q|6
zIyiU|VQ9d=yisWy;r6U9Ye?|Nf>0uXt`)vZO{#v7$yZC2)%@@I$utv^^oWXVwS1+^
z(EGSwrIs?cAk4PeY@Z$Ej?(0v#Dd?h7OqsafcL{!gEDGJD#t0uB0*Kw6%>s4Ii`w6
z*(s>VtUOjH9q*4+RYV&g@atK;7Ws;aVy$JE0{aznX$(RLO*>Ro&%+b57`KQr@A`Uk
zlsTLIA`5Ca*OxsB7&#EGKsP7%8(OhMtr2WVc!bpE2c<FnR^4JinTrk@V1sR=d%>$N
zPS1@=LIkp-guLA*x8LWH^(g()qAg-LgoTV1IC}F}hhRVKdG|wcc;`ob&dAd;3zU$A
z!i4k@!sM`o$d1Ra>@9gJmQ<se?>mtcAWhYs)l984+MKkawDp#;RZKAebhdv%#?z4q
zdyCY>-V6w1#$8waWmz9OAX*aOT2@z)VPTRW)tAL_7wV$`l^L1BS8pf1%uak83(of>
zT1g>`g7SxF{O_+N+6%2tmkb%}H`F6O0P{ndKRhL2!#J|L%Fm_>HPZpkxrF{(fEae)
zEZrn$bz)P4+MD&-r7tnrle>|`LfuKkK!s})w3C~jixM_`*Z~)8EyfxwqRZnLA|Wfk
z27*#DWH$Fk<C6~u=b-cC!|#0c1VF2SQT_3JQjyyp1o3gq%p)r~+x1-n_p-lNZ<2aY
zP#(S#HHgB8#15!|3qO<mjuUgPt@@E$Q!)$Q`XOVBL_}d-RECHS4An8Vj`SHF_UwM}
zsNCw4m!-t@`pOgs1XcT209SD!IQFz%ysEx;IKW#WcwoP5M%4h}T14?=v$`wn)|kLd
zCIvq>2k$EJ?aLC3eTWgGeEX!!MXdg<2NFF=Yz>s|?-^PGYz&_@U@%w|LBwg>M#bHN
zSH;UIiKFY_&*_<`hrOp&T29$>{a>@#f5^e^jF+&G!b$}76xKM-8{R*tz4xNsd+AKz
z#oummLrahA(Z)N)!JE{DE<9$lB$sd#W!$qHo}D2Q5GACv?Xz&bp#C3ED0=y8jJP3H
zsjE`NA?!JB!ZcV(iRFQjg6XV?;vs<0R^g?9M3mPEi5tJ%!7uLCKgxf$-sY+(S%M0H
zQd6MOi6IU!HxZyl&=TSmorOjnKNle{4vEMY)c*SYqmX_0U3l$B&RNi4r}nwC<(TTM
zaHF*0sU9WstT7smMv9}@(GTwioeiN+xm}%U?v`rJ4U{9*L0^Gd!~$WAH6r=2JCR}e
zSX#N$#cdoY)fOe6M(f#$YE8bEDr?6mNm(wu(MgTemao5(>nvg7rsEc{4WfLKeH#Bl
zW7`(4<Pe>!1}!1B9cI2+8waR~C>vU{Ludy8bRoV_lbbudde$(@?x<Cm*=}oJPyTbL
zam@J~jHCPQGTFUHK+vZB!AiWtYY<8i`sfJG&;{pcxk^B8^zY4$e#!U)D=h@z;9Sfm
zz>+@SVNm8H&tVFo@uTg;D0?e2#Py<HL@+!py)$By&oTtRh-#-+K=|Px3CGyAI8P)`
zxx-3;t;n-iAw2}x`6uTr+;dGZQA{svn_%?-z~!GqZDSBTuOuTm{QKrD;2I@O87-C%
zP4-UHpKIucRBaL4obSU<2CuEqc2#%s6b%{ABnT)G%q6T6Zz7&BtAq0XQ7s(+25cqx
zLL7Pm(&0w@ZGO*a&++&3Ub$cJ9Ke1w>X_IqRp-qMp|K_RJH2)Nj@0{j5g@YIUi{k_
z*(%9h_0EM6e>*KTiUbdhkszp1fiZ2PatenPHEdnDPq7OLpT>`8N65v9RuFc&-CDBS
ziq^Njwk+FS?Cq#`fj;rj(}P4FhHF=}8OTU%`M@E%kd^0Yz$yQs*1O&%ThESgtz1IV
zzBF21(MD->$@MS>`*L6ITfp<)QZPP;d>>|p>vP9ZLkOJkA9<S8|NR#tt%#SAf-;qh
zH3sV;^^e(yqQN;@$Ogh8J1t8-=!R^?MAXCDGRQ^F=?5GZAW(semKehnF({UjlPy6#
z)<J;N@pSUGmQx|tVE}aN#N1WNDEQbN|7kD(n>SaVMc5y->!r8fT3LsbUNXkFMEEl2
z59Ja^-jUcb%j4uom^KbzOF{yV(BbDMLL~RjZ05Ru-|dKRw{#D^X6%HP+tl+4@3;-E
zb;(fE;vOq=nKOx9TRUEb-uFPP<g`i!u3#y<On2hi<5)eZfP@|SdwUhPS%*P3qls+h
z_aCL5eBnIn@7H%nCqXDe3C5N&!K0hgAekPp!~?gbpz-ZZZe@7pfF2g^(lY+MH@X2|
z)n4L{AFxaG)LW>2LvMqArPCRuEpdTKCFW&QdfN)Qg&3HE8gU1$$~8lh6M%K|(i7Ur
zRqelHJJtnDK~VixU7yJQBbIN3P@JH%peVX+R5@BZGLV5ge^^7;E27-|x4Bot*1x0!
zq19U1MJ1&f|IF`)LAhCak5T6i-)0mI<1-L@Nn5LLp;Zwio;`E(dK%IpBnpiWYDby7
zEPQ#XPUWRveYR+2$(z1rczM`@EgI*Yey2g*i1}QYD}t7FA$5pf4QR3dL$mH$jjZ6A
z$UEVKvjja}i?YN71;2@a^;essVFIMbGWMd}b?v*K!k$kT9S|w>XoL~Y;i(pbr;r+>
zP-mHm`g_J*$l}U#S0fttf+}Z%=cZ0%KX$399B_^e*+K0E-e)I~gmCYkvj1vPfQOcF
znX5Ou+PwtSBv$-zK{3RQEnBr9oHiRmv#N{;TmVq~f`PL&W;;(O*n7KoI-<xuNuJ)E
z^6B<*s&3}RFp3j%Q<WYGAq<y2qt#hPTv+Qpkl=!1?r_P9GQFMe2w5v@FXnu%MV;z_
zhl*kI>4EEGg`P562Y-0@m(7BnXW%4Tg+q}(aa)B5tAo)P7Qqdk9!{WYZ}OxjFtMdi
zRUxfA#(0KrT+&rD5SEF?|1AYoR^e>vsK)H%(m<FM7sb4HNqD(0$NEI>S(%BZ+|m8X
zV|o=&)ptK_wr?u8rF2=Usevo4(?0$3r}5-_YGq1;a|(lYq-~%X*C8)LhKpkBg2kcU
zN?LtuZBksPYBchd!+eV8W*J)o=I>|iCDRYT%PNx4C5$_`0agr!Ef2{S=*MxK;ws(X
zHWy_r!7Hyh?>o+dMD-d?2Fx&ESIW!LPWJ6X6YFWzTlbUNCN`$H*&Jmj9^;7hb?3Jm
zT*MYa(vP1)E~=11nk`*HA4)cqv|UNB^ah&8S<dp^pY6u+SbyuKE0N5Y>57bhs43nR
z4_mIN;Cd3O#+btg)f8jnO2eCTkO*qtW61ql(NgaV7uq<ELo%scs|hP7y^}wmtZxdT
zwVY__(z>USOXp@(K3J8y8ZDD(Vy$SRuz4-8>e-f<AO_|=JC7qqn7y=%>UCQfiMg&R
z=lVQvFXlp1Bl{u=5!RzRaQ46&lESGONHM?861D4H-b8nT2k{OzT^><!#pbJDG&#6)
z_Z{_itR`o4f-wC~fV&C7SmAss7fT@}iR$^R`?+A@vb76N1upMm^@feMUM8i@O&DWI
z7H9U>zp_v2(hGOizTav7ROzKBkj|42EU5z?S89>sm}e2J6*QY8$vavRKs-ef3@^=i
z!0T4#B)ItL$;D_PBc;B<p!U9gMmP9F?_)E<8_%#VZU`Kygh#1@Ms2(PH?-w)SV4~^
zGB-jqF`GV5(g(9)V4=(DX=@!kaW1!zMhSyVj}oqjV5AmW5@w6njDWdd%-y$)lbXSx
z?-&U_Zx7?IE<_co2{46(7RT;;nby43{Vo9{irl(ZK^D*RA&2=kJXL$D7466A5+25P
zz*NeglZ*<lRI^$_@!!Np3kTUqXXBO~ZNNVf0-!!v4Se8Li>Jj2qJs4ZpvxTo59L8l
zNVN+-P4_{W0lebCP|6T=awjpx<%)BjK@v=|Qp&2G<V;FNN2#jJV<Tcy3sAU#Ac{xM
zdtZ6k>lxQxDr-K3s-?Ywsx!!mWlbqCV2e=ZiP8tHzOlBs8qCoI@BJQS_Yy+xN4!Py
z<&88#gB2qL@UC-qse^L#Z)2S{_Qoz+DRFZl6Jh`i^j)nb*f@*@%L_Qk8r7w>YPO~&
zODGy1e2LB&a7~MveHlbm8+e%?All~gQL0;XH_UqS^$osts<1h-dX81!di(|h4>2%&
zpBT~-BCfmL&xEyq7Km4_yny({nCkt>cKVjKX+><y?W;Inb}aoEZ#EnlXjMip&G@<Z
z10KEO%h(QQ{<a;7Ep>wu=PC+)uhmyE*PCFJ3w4jk&|fV*dXbK`W-}!MAt6!9C>hBB
zl#a^11y@UUs2Yqr^VY`2xzb_Pk^Uoy%HujB`_a9gvqadZ`6S2V?>|BvpmQ(l2q^||
zrosB;N8Kle!n&eA{w^y9ozRyyt@VBUI3pLUehPRgYUncW`tXOnhLbB`1BzQ#Ij6~!
zR1FbFoHRMQ-ZCHg3=-4T&$5)tZeED3hoS0P;Q%)qfu6@nG{20}XqMYA)D~52XFf@D
z+X~*V*{mByJ78!Xf~2f`g$+|2W2`KlcVgI6o}%N-9S--PR@N%5!|e(O7TrCtAv=Gh
z5G355&HDm#?0QkgY}-xUt+M@|*5CW-nNX9{wY`h98eEq;?8xc4Q)EJ=tJtkZO@#C7
zGk%WApCR+M9r||?m%o8Utv~y%z+&_NajyzOA^gYotJ=%^)q|7)xN=r5`|hdrVZ_R7
zi(#~L$Sot*zoM87nNLZN^rcF8Aa{Mm>;p@eP5)l2TaJexB2|8SPGDmMEvdh;?{|<D
zhnY`6tgKNZ_Ohb1zE0gx3!6L-@x-3*C;R%_R>;Outsq70j*e7e<x9hdN?i?vNAB(`
zg|s8v1CmC-`g6oV#Jy?uo=*V=2)1HSIV1LayCwtUi-NWh*c0o*`J*^@>pb?UZ#hg7
z626~?W2GzC9_YDAhcm&UXVX^Pa-b>+<|bD;bMU0ig&alF>g%Yvl!(<o9fm2cm71!P
zMES_q!Ql#HuI>oqYb7PIHOEz5<KGn)d7l^rK;@cHow)7>-W7!=uuaNDq_H}z5gEZ4
zOGYRg8=vURKaP)>1p_jJ5$G?MfUq&R*#Gh&DNTKOG|bYyw0KlF2*=$t+R<xdm~p)?
zy10**r4BFEVe_ZSCPcvkgWFf>Z~!EXaT`#HAOZ6OJ#+0iOU`2X+k4}K4hu`jvZcOR
z`mfs0jE`--4cW{Qbu6Ed@gh*vAO+e5-++VYRRMk&x(~uE&x?U0Dz<l!drRAKK_0u?
z5Mj0t7ph+47q4YqeY%Kl6j9v40tZNyzHnp;JcBs6s5uN{;$~<(Qgk{ClEIV#QP2tb
zQDF95WH?*@428vRRl}^O^*LZab-{7;wcgLg?H0=X_30|SIb)?{V~|H{OY!F{*@{Ge
zM_gGy@7U%`Slb8Yr*%C0EBLr$0A8n0um0V!YpyY~w=qrrld$om=FPrPewA+p;;lqE
z3JMaF_Y*A`8yep`=g<O&N)xtD{YsBdUBthno7}+jrO&SZS9a|glcKvUzbE7eO^YmO
zdVmzP=L7tL3RKMWezd?&Rj2*k`sMc&JjC;wncDry9MBnEn}^AQvpH+P($R4Cv3Ty$
zh<jLShOPuP#$e>qGIDobF*5CN-*`|HTj#Et*0`_?PIi7~Lp1GF76O()%O6w~8p)e+
z4p0aC=Z8dxLl-J)#HI^B$NYqs+mCT|-3YLD&WJd#0*f{@KXv-7ts{Fid-|w9xJnj^
zuLnmq^XDrb!?)y}Ooo^!WSs&MDS7<@_X9qmpo?$p-h~tq;8TNzb<P=*Mn8;xH}1|<
z%H=%OhK~x0#F4~0IFg?ogTMQkK}c|t*@`!Jd){=#kV6eCxYkHKn)qhO6|Sp(3?Rjp
zY^`q(x{wgj(uEtjR=$`e#mL(V^bv~8Q1n6Jnx3?PRiny!Y}CSm_gNYh=UjpHi(IAt
zNuxf9B+72fgtkmzKhF{v-!jtAkVBEmswYtK<MK!>G+{pb*GYu=g@KGLfBy(_Ek?WR
zPrxZ(uEYi=FGQ9y=q=Di^-GnxaGUibTi}7X2Wo60Gk{a~>`T(Ml*Iawzf**qWg@EO
zhvV^kft~S3$2>b?TLuN^x@&rA=w`AD%o~+L1vmimJbIEf!L<N)9m`A@onh^a481{h
z_wjESU<saUYM<x{C0s(PvDwlOuzf^VQQ%GnvT91^6T4Z;v2zW<^?ji`aJ(|d;91=a
z69QheOk3rty|oXLIf;s0ZDKO&;f7X1ZdMZE0({U%H9puWbLMks%;$~CLM#)s_Y%6$
zA$lKUA%W<Gt|IynIOlLd?ZCEWM_UA4ze|*Q)K{y3)xtH%1OQ<LUZX!+Kr(AE$NO_4
z&5C*AIgSw(#yk7w8tj`&;U*DXS>{i=-+mWV7kOcczUnmM(eL;GlXMxHE=F?6mV){y
zAj+@=^ZhWOLJRB!7?Ih0&MEp6{o)}@%p)>?G+FJ<@2ez@(%-mod2y{gamPgs1RU8R
zg<oo!Ydz>bLS{*LxY};9qQ2{P@!*Io|8sVCVh3P9wo5rl{v&Mb7_lom&qR0l&A9c4
z+r?N<-27{X56A#pf7r1W^E9|npz~unRKdg%yl~)^Hdh2$J(iGPrFQEaBec9Mpy?Rd
z;9)aQLkuF16;qvzfi_QMH4Tkv#P1mn{*#$9Lp3qsQquW;V_I5k?koNq?0zJi{B9c(
z=rAfHH&a#kGM-bDW>0M`GSW6qZoMkFU8dlAy)9}-<t<@7Uv#4f?H`Klo4RH$_EI?3
z+o%aop=E${BpgExG3(nQiEPi--o(r!CJ{glw>gvF&1?W`R6c0qbfu-0TDH)j`5Z>z
z5atKth2?*Ipygvw+_$*Nk~lFCrgA};$CMk3<*(D?L_b8Ocw=!}t<cTJvE#~{B$OnP
z33Af&DP(sC5G+9|s}h;ey52Nfg9%qSq7yHZ0un(>7()H@AyyqqfM?A+h$|_%vP{aU
z42FKEAq|M|nMq0KY4NV-WA<gyrP|si0zLFjEW5sijF@UsIJn>eCduO^U+t1&cB!#q
zy6RI`fo%9?+$4-ehMp?q@_e}TYym-&1<u{dK9~wbqpbxHOT2c3a;^3#jyU(?mFgM@
zD}51B=>lZ9$|T7c-jcdx$>vf`ydH<n@^pdvMj12-bzXqMhEBf{Kase(V^6=Sq|}^}
zz|UQ77N7Wg-l*)i-nNM-i$r7a2X`qWX=pFLznLKg3@XDf&;@$5*@QK6IqDo&H&zDA
zGO|+gu!PaDp8FDmHv$+9yN{qh{J2$HzcU`Vk&S~(Gg!W5i$l<W`}|B0D|AXa7_b)k
z0~}wav(VA3__1{O2PCE<*wdF9-Md(?Xg!)sMopH7Xk-f3NlHefJ&L^oygz%o{b%f+
zSH`1a<fZ2QFR&yp3#8p4Cs$lNx(^<>&@S^F&tv^#-A8ly5mO(O{mw>=7KoE$-Q7d3
z2GCiZ`RaQOwRjG}l{iN6`TpTiHH%h<JoTct3GOr~<5GUTXe{lW=28~mLH61)GLKDa
z8m>p>@mm4DWprF806M?UK?5`bs(*T=|0I>oZVUI_P&b`^B|M+BnNU13+%H1Xo1=&3
z8}#&V3WXSa#h1^{XC?!kT3=kqV^Bb!>HntoFu?7cX&}eY(F{E|Q_|=;cdOPsI@Sh-
zcpu%U`TA6%cA3W0CJ=hxR_1-9G=b#)ADUVzb+W`C5+48*V7QrM@h<=Xz+pJ9p6}i&
zAV}Z#E0}*@DHI_f+P`4{l0S{czrTopHo5=+_TRt1MQy+0d=jWmoQ8_+i4-SAq2TW~
zM|gpY^ut^{fYJ@V<B^fF^hL1iex-;1`Vy7*G%<!<BM;o)T9f@?ton9bBux&^b(9-H
z)?P(ms`O!P#m<ih-NM^a)vH@&_bqYlKc&MFY=kDm`E>x|=H%+gD3TrVdE-d-|C^=W
z{~dDwmsYw<g8W1y?-v1(`u|Y5`~RQ@|Fwgr2+!a6AHn_$H`9Lv`!8PQ{}Jpzg8k3F
z*#FsK|E(PcLnQeB@he$3WXUV(RhfCX*QH--s#zeu>Is@>(K_nZ;D7CWiP`nf&kYrf
z{#hpA=|1aODVfD>0{CISo`jvRQrSr+!CFJZoRTq~iZUZsI-9GhnA|O>c0%pAI3~@+
z(-Y)g<+-;E;HK278jGF@uWg%Z5~L6AdP*SoNIu(XRS7|S$Ml%%2|bgx7-3Vld#9If
z6pk`t1ytF#C7CQ3Nnk5ac46CFs;=tmrW^}6b`i$&l~1573=HsnP7k30-=)4IPF&`m
z6Gfu~e{bwto(~m+xR*PAgqNmMIyTqeGEdo_Rd-3kpY6b4K0(|NGh~PCDKWi`&+5Vg
zZ<Z#)F33EX5ZQ}ulp8U5C&;x_oB1j~ZE92bF_2>^{;(-&kC}z+`!j{%ftHREscR}^
zFhla9`t4OV;PBS#DY@_<>j|JoE#)C^PS5lFiXs#abYI%b)JKdADIns^KktL9w(=fN
zHq|KR0~VMIJyR0N8R@WmS1eE3nP;=6(HYTE;==AmI-Nlf4b+}2mvi=<Bs)qnHcJf_
zS9%_K2Ze>BBZtAA6Gm0MZxdpzE7xB$6ol?Hkds+dXZYevNgE$0<@T3l@(pFMh_E){
z9z|O*rW4ykH3=rjU)bWrDS=>>?sKHahvnmlc<``Ubjfa!0iN)H3$1Kcq_YtX9`kT~
zWpxZ+tY=Rpcqv8VZ*e}(J|M<YEo`rXf5lj8gmNY?nI8H*?6bcFYQ9x2_!(2ij(C>M
zI&x@69Z#v+L}OW8@t2fwH_1RrUkx=yM3t5B7y|9aJLtEbJw<mUPZWOP(m!~vK6*2B
zWGF&}^~@!LjmQzsMG-NtwQa)u5VJ9grOfKselE#G4`J`NRb02!H5s=6_3?e$YOk(4
zm98PSpO}v6xA{`fG$L*i55|b%t4{O79zw+nt27=#Xtf=<HE<|x)VFWQ^(J~cUpo;O
zlIbkv6W_2~)z3D%DI71!S#oT-`b0&+@vNkU!50oB{Wex>eR$G|4u5IykC^=f<xYe=
zAKGpkRlT<6uWo0So(152aS@Lv`hu;EkS{axkPPT09t-b^wiVoNCU~Ao2Uuka(=M#I
zpcOpKGK*F*CA!!kwhooR75_ZI>`u~~)fMHb)Taf<rdWx5JiwZ@D|yealTU+(W(@@%
z7SM&$0oE6FJYeYw5QW9zAJk&9-&wKwov9qx@X(7t(pQ4r=pLXIMipL0e&#ScAb0_s
z&WQG+l#@P{N%ul#{&&*|%;G~flkkJQBcDz?tP5?M*9c#7`*8b!b`2HwhN@t_+1n)N
z+N#nNOaZ$wKF%h8t%(>1$gbFr_A|bBBW?T;KQ89Sz@Fpo!8r~xKK{<w(DyHP*(sZI
zGx?jAljbg^WBELOKi>mZJ`{;^j7MWIhn86s0QD0fT{zYce=6D!GV~YwmzX7?+0!JT
z$}y49dvr<~vT>ulq+I7{l>pC!YHWcc3V{JFLUK8}58A4>DZu4<g3h4~t$6_14=ZvP
zyF7J#p@-hHogB@QKT$bHThg%azIH?1jt4dJSkFL@>*I91cwdHFl!R#SCg6ia)Cy$^
zZ#Y;h`s&~{Xb{uhcB?X+=L!Yut=8iB_e?nQtG`8400={`5O*^t?V~Sln0o<w-4NJc
z3?{au|2>IRk8$*)+&ak*9`6a23ji{H7u%|>4T!Ml<1KdZHy)#x=&oGg^%IDsEAz7~
z$G$SKq6o0h>|M*J5#TO97|gY}*HgQKut|9={fxZRZd32VDh-zQMlbjz7dxsiNsGBd
z&ll7h0Zv>2LmHE21<UW?9dirVI4<MBuca=3N$PNi=?ei0$?b$8UrRQP%n|-1-=Sqd
zG(!tWrsajY>7XKRkbTXNw#Q=^ruE06=F=)!!fQ5B;V}Q6D?*c~aINYnh{y)2yDfny
zqMndS$UT|1kP9ZuB=ZWz37-V`J4_s2`0`hRq5Yiw1>QwtnFnG6%`+T&I3tI2AC0Lv
z?Q&B=ia{4<mP=0k6&N1N_GhQk`)ZP{zW%+@nLs<DGo_n@OQH}jZ2)%^ke!qfzud00
zTw0bM!Sk|*tu>L~a(2a`eTj4`AOnh*)Rp9KlHx%e(ggLjv67o9mb*;spenqcdlQiD
zg10;W;bu+9O0h@^0T*KpI+4D+cuZ(hTC*80*I7t^Tc5~$1v{BpIuU|gk9U2YbO9Z0
z^iP&tPlpPmqnS~DpwY}rM^X&?BEAvKs=z|EuAgNFgt8!+nUtbG1jPuomfDgm&yk)&
zAykT7)8+n*knx_@Gs*LuvMe*Oi!*Q)Z4{g7zCD{Ojay0kubyYc6W`RQ`|32TTQ1{D
zbytn6DIT6>^MU0md#pJ@VvODNc2%<lZ(Up_Evr5;J3I3;YoKIgQ)DXdh~RUW|BeZV
zvY?R?gf7qcVl$K3SXmF|2}wRrh}?V2&A86;${L9w%7ahte7C*tjov47k#^HfsuuO@
zsqMMRdG;?(0_rF3X*sBt*X5M^_L2Z1RFCv)ukdR&MSa5*WRq{7w&6`fq89@ZRl|gy
z8;!suD8bTemkH))fB^3AH$n++K`m+m!+1yod-GZlHFTfM7*+UU@J-HVRCPB&6Su=S
zbCT|x%bkLhw*1QEr)c*?DB)ry!#{*?)Da_yyG^$;14CvDQ#!sKj;bTgL%|GCWi2Ap
zZJm%?pDuOXDRo=xxc6Qq<4LHd@O!{oSZZ<Sh>Bs$CAZ(ahU4T6V-CRm%;i;#CS*q@
z`^Ur`j-cOED2-+}A>{#S&q9<*Fq)GKBXohUr{z9X&Ge7v6o+WloeM=Y@sblj2!WRj
z<H__*qUTG`0DO<+7F6LKsC{?xIyF7RNnfSQ*R)Zu%06duH3#me7Y@`tS%c|^t;l|H
z%XSJa0sk$-;pWGw5piRkaEU*DVli)yn9!5Vok2Zyp^;a!E6aI^u?R6;r*e#^KIH^~
zWcuqx*js#ewY0S}NR;~-ME2_3Eqe{M5?nc;(u2V`1$t@A?wfS9!wQI!X;^zN#tiv{
z+V0@S{8*I5z1J|RG@=`AAxse*jj?UV;mNLjm2NR=Cs31HP?A2Kg{;o#<mCt|gs;ts
z4^SWOgG*lXLd`t~oAW06KL^8j>$Us&*o*Rd&u@`ZdVBWRyLJ1k2)P}edEojj*}Uh}
z=x_}+tCmWN^)z@qq+J(jl*|>mx#b;o&~&=Ma~{ee(#aH(sZwmy&lqq>)G#^;=D!fi
zfpiZJ@Jq4Z({@i+1gZVB$t}`72ZJikQd)HrA9#tYm$Q76vKoU1(#KLBHqX6DzR{a3
zzBqUH$T*l!r^egh{XVBxST^0qC_3>-REB}4ciV*@kNqwKsl)v|A4Z^RRNr+y?u!;6
zte@ZE!GB3D_AXku9D?`hfrh$s3@mg;`*}7#p6PT47Z|B-g5UP(MHW!{+ToFJjI}6U
z*^)CElCpabMhG_Ttc&c4ugPavoz1U#+WJWNsws#O7im2hG;o##Q~~#~T_f1$L4tHn
zl*yY%n2Bh%%2m@}F7aNMDvOD+?oLiIpFU)uL!W;HC(P$x&g0fh$c6cFb?Z7O*mtNZ
zyjTDr?vuTNh|>iXivefP2W(oY1Bq{}p|+}usVp`Oj0ry-YjN?)71O^~?1jqiMG0Uw
z=0oBa$a0@c1xjv*8;7y`E$%Sb#VO>PTa1mG>5?@nC)4A%$<H)#N|Ds9Fh+URV!e#I
zk6lb-g0u!KFFcSni5PnZTiRqWWy>HC(JV6?@O!zn8x+uzWRtt?6Q;44JxE2dz|L1&
zogZCic9I@pH^yL@-MuWxSa^Py;jUntn9#>gQ;2{G(Wgp#ewpG~$R0svKScnBAKB-w
zZ+$2Rf$S<#*?C+y#l;4$F^CiG0#sjDBcD~m>l+tT6htBw5O-p$+B88LV;^TTAO_cg
zu@pdlk4s?jrUNBVd2ZQTOIvpM^={U$QsG`MTjO2n?vByaQ~BL)nH#CphJW7EWMuNV
z21WsHP@0njI4C1xE#jW)OCl0u!q;Gu{9QB|DL;8J3asuBhd?glmQQa5U8I7?mH4vZ
z4&)RJFK~fEvaXtxukyxp<HV6j%Id{P-8$;;(~}ZbDA+e$7qNVLa6bo0usCuNvVatG
z=F@3Vl~YN}Ro=4nZ31Ta@Z7D$G<x_yfZNhc5KVkb!`+{D9#rF#61Vn><V4KRltn+3
z{)}n8MPr+081$XZX=p%dc(ZP*pYF*@_3J5ZE(ncx_5(7bSLtY>R96*lqdnwr8~P`g
zfw!C+wy3Lj>_#4>wa?w9nzdSFsDVw&Jt?b9+&Sz5&e?dpuhc`d={`DZSnkT&>7-SU
zaBc37c-NVnh&WL0g)Y^IiVE93S7P&^^Du;Vu-OU8%F+NR2d&b9|BwL%V4PgCO^|vd
zo<8(i;K<6~rHF%$a;ev>mu1x6B@#)_s8IV1l&R#T9DyJtNJ{scxY=exN3)sOyAA)6
z(6%#X8VTEJidO=_2EsE|8&vWe4b8!aSG^0-*g;K1A&I!=8p8H7dW~24yfCg;%3;*g
zB4h5x^=`Ri)JKgGPteJ2qLKG~5RpuiT61X>;J-c$5QlP~9?}V9Qj<(E1e>e|;l5>$
z)#8$-8_o^mfC24|yro-VSPQjwn-J#JRXMD|x}d8$h_#})B4c9puZyfns2}sPsU~d!
z4$Q^ey#y*tddWwmf*IC24EN`oI4`{=DI{(LYJ?aslv%5B^6pU^xH9S-oe;QdArvn<
zbj)M-VaYY^^0+^KMq_4spHBYKo`mgSY_h%-3J))DHSxB4zGp?JgB8A~K}HabI?g%~
zL@B&+aDn`;4%_%a#MSbSq_@alEt2HQb(;VgzIbuJZ=;eMBgIUgQp2^J_;e)U@<yKe
z+qPfuoUSzoA#s3}>Qj*_X42$}{SM2UL6?v0a^@9qA)4usimiyF-1UQdWuPRmbn+L+
z*F}BBsisohZ@2Rg07bCU#7jfgUY*KiEAa8NA(T148d+0{#$%Qsycb<g$7&uHr^ood
zXfX)XRb~T|WNrSe(~LV}P=LC^#5UYLMWRc;!NUjeH7w=yvq_L`eo3*$IN>~=L<G;+
z!xUh;<fGrp*s}%-hu#=&Mo+g*>Zi)M<uQTzBw|-5*9iPZU<3HkFimBWq)N{)((M5q
zQnYiCYWREIa<175rEugc&d%f13_vPSQ#Mb6R{HrylP%MER9?^Q-Ut`c65m7g`Q7ES
zQ}r@@rr~mUf6F9v4?!9f%8C|``ef=?gbOQoj3v{Eh-m7ACV3I$0Y7Wwj<>jmkt@@1
zxs+?2>pJ?#B_QADq2r+YFffnhvgP?Ld<qFR4|Y*4aLlD^PHZ<G90V9g;#v;n6w7r8
zOfIVUQf-nWO;+oDd@)4cQ*{=xu&Mpe(_-_w#CBd57@1(4E4utR-%dpNdbg9vv4o84
zsYPLHLD#({2jZ8lgThC;KKk7J)acsOB529WQ$WM6P2!rH%PKb)RcL~iKpI9<?vFg}
zIza6Q1ciO2gAci&hk}Z$>n|*@K#NsIS9xTmV9J>@E7WoKAB}c@`4f$0TJZvRK4s+E
zOKb-#aoo+85j8T#5@x2mI-m9U)+ZbM7tAbwG$bq)no(AZM;B9`zG#L(5i7~Ir`hcm
ziRd$uTtS@Y>-|ldcV_PgaFk1EG5??2fz-#Jh5%KTn3a1w+j&Laf0>{+l-6?P?Q5!2
zXI3Tm^$`3I*dU#78__;M48tbL^HI&q?bYFO=&)w%9{Qj{0Un}cfT4$giak+RAs#ei
zX7+bwE|;hO3q3%>zt2$H@2kW{ZC<hWglfcHvJ#2FuAVlg5-lwDpwG3#^-?L`j096M
zdHA7Ag2-_bRn;gCjz3q3cuWJzsP!O(0JJ$Mn*Dw96BMzu=%|b+9<x>r-}8*Cy}m1$
zTkX7AJp7)yDFs#@R?m95%qJ%+oME%5qsR4ayT&g?>grdDyswA<tbwrQpTHNOg;6bZ
zB-o86R*-xm#VSu~0j}Ufw~&S;cYI?dc+a5XUq9YyB!u6<@6RIqU0H?x;tg$(U1-h6
zt%7#qJ3M><)@{liD8qU7zf{Orgc%OlTOI*2krUA`z+S<fIDs#S4jxL)uelJ79sV5V
zj1rlCd{gW$c(750@1K?X`y!cLOgc+LdK<3I2*0CIgi&i`%4%az5b%M(?F-0dakb35
zeFi~j1$vzu%l_%v9*v17isNwp0z~QS+-PNm6|Z;t>3eFZxumvG0zo44)!t_KxuvdL
zw6y9At{y}oZzDtTnA*7kpz1kyx7TaYThbz`$K{Yj3jbkI&lU$;!It@&dv(&9iJrdY
zrJ;VUk61>+f195B-?4HBQINcg%acR_x?qbFkHh;FETv_FESftnS$;ccXR+V2h|oPn
z@2xbT>0;P8qEU&)jff?DWB^efcy%>PjSeAtrG6|FQsqr$SxKKC7>1pQ%7$v;sgJWP
z#MfJ?OpB`D-E=qpT+q1>il0n>a@IDc8iQ3xZ$D3~aOx;9Clo$+hsv3&WSGbXz=#Xh
zRhh(B>rC9xF6cGskYO=tG-<As<OToJVxkVuCsrCvN^<RPXtt><cM2#aUyYj|`&q+v
z=dFcMl?O(#Xyc*qe*ode_H2#a5di-k(x&^{{V`~+2d5M+&NlS(>dlP`Vvr3X;-SJ-
z*R$IM_?YkP?A7%uPgj__Nev%}?EW50UymN5w)@r;iGC642oHRhBpva4pFfJcE$W*|
zl|AohH<``>qLjS+N@#_ZC>A?HT4jDBel+>UF7TEOFa3jFoHoiUa3*g5#=-LgvjJyq
zXg73Q+NNt#;ol}CfO43jV(+9b5OoyCn)R<)`y)=kOoHEE!An2#!(e7qryw2!kcY$f
z;n7Jcw+<5KiU+i$=JW;|Ftj(BZ~Ot_H3`}&m-;QTArn=D7j|%l5udF;gpw1C%qwOW
zmrHpor8R{a#-GA`lF6Tn3N)kWGwPFY>y@j$qg@o16^vl#+%ZOB`>B;s@s5pZm;Xb0
zVkzWqVq-TztfbC;PV;W0EEI-i0c~pBEVVzEJTA(}66DLsty<QxJ;TU892q|3Ex5UC
z<XMe9zgqNZ3S?+XNIqWZvU7-JjT>LgIWaV$dwmlpBHN#$OIN+!{NRhYynowjJ?4M}
zPDUlL?#<aC$Gx`}#}06y+glATYLAGPLH+@gnIt&Nvger#9o!18?d?OG+=?2j21~|*
z-AQGWJUv}~E{GLCU_c|zf}~sWoO@lb%o){p@lTt*_GQysfFmXt#C0cj@|G5wOOUv1
z-?JlkQ8rc=OB3G<tILQhSckDlb_YNyEtv9hR+e;F-sNZ_hVXS~!VtzX_6O}`7W#_%
z&^8?&5_4iAnmr&?l03ca<Z0T!0Eso3X1muF%S_!}p&OYotG`-2h?-3Mm!!^Hy;IAy
zEt&<~on%Zws|V_mP=vpe^PYygm)?EXJBL8qM(4RzK{4Uz%CjoaewTTMz=Q0TmaIxp
zIto(rdo1Sal&weWanI>R5q}4=8abphvg)*!+oiXhi4WVnR&v@n>icQ07U;@Jq~KFs
z@X^?SM{mOxGVYH*e1;PR{rh|%hC={+U=D$_xH;l*+@-3JJ8k9IgMf2KvJP42{-s@G
zNg<RYCnbx%G|LA;Io|PVgOgd<=`YJV1ry2tvOBxo&d&}#vaatWU9NyR(Dc?B0fg89
zKUB}Qi%HmwhDWSblFk~tKM)v(%rN!So7or;im<GC(mkl1?PK5us)sfoj`|4%Ci2`M
z_0$m_SukE=HKv)c>c~N|-e}TzogULOKEr%y{=i&gDGad6(VNl$a{x)DD7m=}9?ekN
zd^|9xP<Bjr&CY}B>0t+`JpFfV4H!yME$u62`5(mXH1C~PVQbsl)#rJ9-6Jyoe@J;C
zR@sWPZ)txpOWKbvf8s-qYW%!Ys5{LbYCG7%fKP_vuwsEs&e~Or6f$~v7l7CYGBG@N
zjz?M<^~Ee_Ezg=Vp|IMBR$vdYe7e05$*&LOnqZStj?<!W=`N`amgbuVFL%{?;(gv^
zJ#s0z<rIy4j7JeQ9Y|xf{`oq&%E~UK_%Jt|c$ETTU1TsVwEWU@YK2YhD{JgoLHF>=
z_cilb`21$7UQIXwol+mOxS@9)(@PvHpqx_V;<|o*mr7QLG&e0J^<}XQT3a3YQk3sA
z(yA@p7W9VUn7#_)iR;^9RaMF7p2;vuLj45?d%KN1&p{TF=_|zZd`eR@7HFmgj5PsA
zwU!VOJK1#~;c&OdPYWt_FOaV1C_F0FpVO;r`?2|l9ZYST<hSERUmOyirSRw2_=Xhv
z(&;@s<p*+4BKKMx2UICMxh3As?%Vs%O|hgPAP*<FtJA35qWS7OKo;aL8g*p|)1odz
zeS3(Nz7bsXa^Jm9LqSM^#-9~Q0;~%<KT%w;g5rT97pGaLzDk?0A`F-rO?uTh`Ci9t
zpDtqJw_+~z!sIRFpE)4Mhvh*zO6)2I{wW^;OWSKuTtU=C#$UqixX^Z&A8;S%N>T@a
z4TF?R#l5{GJ%N5SFxq|=)&rHT)EtRD3XAzeRR%9TQd9IgyWXS|Y$HYPJP$wayVuyG
ztyW!Oj1yqfaB*4Mo#o}Gd<c^k45cI&IZ3EAo)9Incv7b2*AF>L&xn1*&gcO}JrGvK
ztHL>%RTAI0*@VxtN4*(z_iOL{xx}F~T^ZC`(|X`&_fH3iFsgYkPs?@mY^CGuOOjvK
z1r`WQ;tBJyfN&ZcAYh(sI5@sCJU-&>&4?=0w|<!Wymwy`_Ui+OnQ2J#j(bs34{j6G
zmsZi|J5<k+0~5Z=mn=&mmRKsK;iKx7;m;Kcb7{N{(=`Er0>~-B-~fBW;&5xGats!u
zN0PO+42Bs<w;cSrciD2i;OQnrvg9}bBgz8fW}n8#<pq=8WNC&}))ai>^uk2gjiKN{
ztvFdY&y*;9I0t}S_&3j9NL8Vs*yGO;D&Ro{fBHS{=jB~{%X3;+Gdq_pJ3EiB8nE;`
z82w^vn|dQPYCkH;$^&I=gxLP0Bx|1w>G?K5MXxf`58;>KymN#>oTVZ(oJFDQUsWK&
zE35TFR!(S3)ABPyTSY{2B9Ifrxb%setCOc5pZ8G65>r4S!%?1REfWoeqX}r%VqyLZ
z<-kY8oxBZ)DdPQ!bmzRYD~#7g&bgTFlTa2<=$Cf*>3lEeh_K4ui#$$MQ)iM4@avy>
z{=#v<9H%}!NCDwuuNtt3d*ZV{*fsiq!jE{Bx2QNr3O8lBb*knnC2R{xm7%*X8VP|*
z*83HNXmnGt86CeU2Ta{(LVAaq|HC^Z@2>276AAJSDBv{IJ<<8i>nyyDZtf#~p}!N4
zMbww1%P?8g{U!8iM#%sAv!t#?cl66m7I|Bg@Sc`8{vNlZCcW3^DBtr2QIpk8<X$9+
zHiaf4ZJ)$$5iu-_vT1%***4Mpqzw#c!WL;$(v+){EQ3q>#PMr*Josd;Le3j~r{mD@
z5U3i9UWE$#f|%m)7LG^>sNk9|0O`INcrGFFrEm>^HSgZTNfSl(>-dXYE-Z*&9*ldn
zJ^LFadagl8{%7z8UC-m1uq(Q39Zrx~WtQ+(i)wT<Q;Gq<A(;8PVPihe%Isul{~l8f
zu@YCk-vh#YM0^^77lv0obyAu6wBI2Fdj1e;?_MKKHySkSj&R|Hm4#jM!$%gsLKI+#
z(QhH~cRAQo8t;qoKX&;X1zD?1FNHi+t}VB=%|_6?1u!{+Ag0ru68H!9-$C$QO0uqW
z<nn1wFb#?59twjEpQKQ{6a%MgoJ9_&Ol6*1Ho`u4w*_c>2c4Z#VN8=UQ#)}D)0S)V
z2K##lg;039>z>uKg&AUezrM%S5eG~7QifrJQT{Q)z0_{V{ViEZecGiPCc;uZ=Rb}b
z%!KK0?>>O{?N+YfK})wGTj`%5b|9X1BCM$IZWW8nu=N$95C!%zkQF-*HsZ$1domt6
zwPT>7^7dhFPec%EiI6gu94R+y65+KCm5E0Y8w4c&aa0E>x<Ljm6a`efgn5zXUS*lM
zU-A)EV&}#RVojAOVf{-pf$H9B900Gn%A4DGS3}%x@V>+i!mt5rs`~LVA;yzdn2Ds^
z2_Ov<GRJ!eB)Yiz)J%a1Ij9mrMFyoW5|{zXirTMc$6TtCoS6{f8(N0TA1Z%b;xQ#6
z;f{T>^ZAvKW0R9dVA%AZ#_pVL`$;Uv2iJ|`XFAsJZbvW;RSZeFCz!~8h|_*{&gGT^
z%qOAK<iNm*_J$IqJonZ=r+a6%)FCDx(Ka6*xh$M$E==U%!9s$Z4jPrr{a=`e8EKB>
zG}THI+W|N_EUZcZ3n|@SF3)$OMc4qVd*Br02h5HPI+(b8_;bRs>gadNok*L(kKWyD
zNTzMEuk~rdN={e^+~@APR>K}0NHo)vz^g@#9$)OaNO}=^66Hh*w}|`xgALT9-@OZX
zLE>T$!*yZ)Hml<S+Y=w`-q#nohZw;N>Y4;Utm<hf2ZT66x5^3zaXbWfvkU-L%OcG6
zfthSFx?QkaBD97{tcJ4gG{LQ43|+)~-2Au;RPw6)0<qjQTug4`8eNcg-TF)y_u}b6
zmmaCy%ZW3E6cj2xcoP*=XQ+Vs|E~JMiv>0T%@EbR&RgLI+F&=2#pw2h1(21MaF#0C
zC-ldl%wRxb3Kuicio#>v&C5pBFP&hoCL6)(*!-#-@O;_tIv3nLY<ghEAqZSiY3Xfw
zgV!km-n<uh1U#pt*lZSx{3;UI%8EsF43@paOhs2?8N?xL7p01kWeMJd6qm2-IhXV@
zsxY8yBXeH&v9Vq=Oat`Cj2{jk3b#up+SJQ4wEepWNv8lKM~+*c<3y!gjy3v4nV;rv
zc_7d<sxtZ7T*bWSykPNZVIB=ZN(;@`JV?lywti`?GPGY{u4Tcp#d>h0zZFDrXD)bl
z^xEOo98nFMVMHzAS`l1FF(RMYD$sahN<ByfL;8**UA=u{`gzRUf1*3z=Tz?ubvTfv
zEj)6){72CXTgV9=po=!=wUqf5MML_#@QvM!@lf4BSV}R>`B#8pZhMXl?Sf<#QILjX
z-Y9j)a(S4+Ksx1})%ieI<el~R*AO-@Ihmf{1?fl1K0!QrH_E|kAJXc3{>MItaZ@`J
z7!HNb^)K#1u;dB%^`MXvE9rD5#xInK3U&%HhAcpxhY)e-$@p~nkwJ+jutIy3@MFV|
z1whG2w3EH1g{6b@;(y>yJ&xBvS*!X=Wr22W=F*GMGHt9U4-EFm_hd#ih88KiO7u&z
zv&wt^j+V4bAFRRlAAM>af1ue|2%V%#<x8#Kb^4EW`}LS}%=dJCT!uQXnf0IlC#|Lc
z?88;UdDlpdNtnzjM{@RFu<j7}YAV&%WdbZ_F81N6nvM>09%K!kI0NhuwL%W<SL^-a
z!LLT6Azwl?$XviQ0_U+|UN$az)q^az!wCe)&I3=_hAFva#aNE|khH%Ixi>Wk8!B*0
z2hu)%8H?>6mKz_CaEBk^iK}ajyj5K<?;6>PdB4Sn03{^e@!gS6yT`IgIyqf#e>rB*
zNJ}J4LOu)sy*51TMc1!?lCgeMy!WkcH2UiMs_ib6!0z68v=u_mc-iO#^mhE*nBu97
z{V2F*RQxc1SD^q-1XBM2&M&=V%_1Bc`Ow2yhV<)C&Z8&9_fGmbvqKV=A#jDWJ-}=i
zjJ<C{JN^$1Zui!-dr8|)VTC$$W+da*gVe)hoXP}Cg4kVA%V7ya);(zi?oSCn0eF~H
z%Px12EKLwH)W!Y$&r_-=o0-U$47Al1$w8(o$OGVrsx)RFMaIY#r$sf-yPmX9uH;J)
zJbHSNDqDSA)}m0HBlEBr?X_PYaneL1JLDyuzv&|ahI!qRGXlq-EO+|pGzfYHJ5Epv
zwHM5jL&d`Juzi7*Kp-!yuX`7zxdc!wv_Z0-e~H)OqA9`w2f(-qI@t044MM=Ge(W%7
z#V>}tb8c0^`!_zlfQR3p(&ZcWS~seyEb{b>ouz<PkNmw|tpTi-X=r5IZYvWTQ*4B!
z^u|tsP}4Qyg^U*m_uH0AcmJfskQ4OO&#|4SE7cu;g;WBg2N|lOxrE(xbGVP#@K%E8
zJv>qpIN@BlUGUU2cLK>Wh?BktpPjK4*Nb{Aj@4@edSg?Dz-?ji@c}%=M1M;5RoiVI
zh_DRiWtWysU|gUYq`cZ1QloBj^EXbZS@Tkp*6}S%e@UfBVBy!@?u^)UB#vI@qlX=!
z<Z8^YsxA>xWdxmxbGp_~-Z;^#0@Y}@n1EtsrB=aO)|5LQv;Q2GDScD3jn^$6=TU=l
zKS+{NUCqPQK=a3$f-1{UN^?Wo`^#ppHO214q;5ob)J$Mt#26F#Oa8uABrnK9(%~>n
zNUfx*xvP(0K)Bur+gCj*-bj{-P`EK;0nWh+tsJ+eic~HOR{DN+HiHqZgDgA<(rtQM
z;07SEg~42GCain(T0-df0&jXAe4p{`K5J#)8=`LF5J91>djoe%(t|}`f^&f0#MXj*
zN6?)x#fltPcunoG?wQtE88^O&+*YpB0fHkc@I&L4oW3?HfPn`Rmy=mfT+G-`aP)2U
z8@^~#N;`sON~n00fuheh#092B{zXRX0fes+y*0Kod$W`-fasudyIz>F#nc!@7KeqW
zWH*tAz?2=DaLm;-3`dr?Qb%1Df;;Uc363J50cF!GKc17a#=w*qym;dBO@Av&Lo?HC
z<8c2{NOJag-B?S;aJy0yT`cdI2ip)IG9t8Q?-HF<g*T?h%>O}CqREQEiGfD%fr-Xu
zUwC&mVhE}hm=X)Y-$%GZf#P}EK`vPH&zqgJLI$Zg1NJmu-15C>h;a}d*V33;tbQ-#
z4AgSJM)hGX^0LIC+ieYV<0-AA<~)alMjGZ0NKdDb)<^tsUMPd#1tYVdy#a+sq=FM?
z<2iidh~ckDP1j(qp)<ZAN?8&Kx1MUw20E1zAQVaGfXzbw%2T4M0?x64joP;IoxX2?
ziE<!QuvuDz+~0RPJ`#+QxxUM&IXXb`*nMgkQbf>$?h=aNp63gfbk5xo+hCq?a7~pF
zDo;Jc0-J(_py2K$u`&am6c?B`kWb&;u4KzK5LhZKQr`&O-k;lHrd%3^fTUXY_r+sh
zr4k9T3?yx23lE73Q@Y?jbiTRENL_D|SA8+Rv+m%u*|4xq3R7f69{qB_6ZtFK_jeVH
zWKHz!uyp50$IODARFQ(7>OTfJ{FfMkRv(^QR7xI-Pc%sK6Y4;CP-W?)@N-`Ssgh5s
zIrPgZDAvd}K7AjtuKM1Hiyd8CXhtSkO{be?@;cmxq>4HeGt+gF9`r8Aox$#Js%inP
zo<Xr?O0`GG+@c`e|HiQ8c~V?4&mam^v-AH>V*lFPgdhL%do8$v#jY$_E!~|2RC!Sb
zRbYhuIvLPa^K7a;*-utW-RF7wFlo_|^NLcP6_##j^)HFgz#`;{d_HZ<h|D8kN=-|0
z=Hsjp1o(&w`qBJT>zFknsCI0g-joJ@XVe^J2_2DSRX(J-<bO9;{IV;(aEhKQ&F7V}
z)Fh%Bd$!j~1U?@D?9U>JyU={o9qqR3^WFK2X`V}ZWalcDl%XcdOhxu`BN4=HhK&Wu
zY0ay57U*%EDMtG2?M9HGkihTjXa}Qnku-_YLW+4-gm)5~#EpO}y~}`-5U*f0l08f)
zkyGDE`Eqn)vst2AnBpu+qnht0OnX}4(l79+t!f{&{WrMPY`~y(<NV7upHqqfY=3_p
zyzKS<dswsbkcNvWHu@uT5kq{t2QE`UCrg&wETE?-e#X2k>vpf#98FDQUGgD?I%8uE
zlrY9hwDD)*V+C4_P!>!g5}Ee;JijX_CI3p2IsbSxwHwIH4AL(u&y)Q?_eaqejZjyC
zhURrDw|G`%!WW6R5_WZGLd4lsFgUx~d_ds^M|nbHP90G(m|E6Dk`AlaF@czk3tsO9
zGd-okiTDY=LbCWP)0*JCD>^OY7(HaTRhZ5oyp372?j9-R({6fgSL%}wXYs?J5uk}1
zrB!_cFQ+lVtK@kk(Hqy9>CXsW<yqt}z?)Rz8_~?+dtxkjXK9dy_Lw>5chY*WV+%VN
z@`u6PXd2J_`2OZW-ls_4pjmw-WJlH<*&-#z5LtH*779ui|G!)1`h9T)1Iu&o1O#on
zt*Gd&NZJMum;4k!QkGnx$0<}1PtbeeIa6?_cfb5KALHV$8E7@k-)E!tgRZRx9vHw-
zp+sm5Hg5>A)hwo7kaG}+$uR#~TH$Tai68_ZKpBWQV9TZMvUFAQOy7_!yfj|W_4f%1
z)ZbxmnsXNAu>u77_<r%z{pMpbaAql@`WB@@JW}bp+dZtN<rn5qG4$9$AE}jPs;K{=
z4?6+3DyxtToa0DKV)`=Iu(~Q_XyWpMlHr)M0372back;M4AL6febSD^XO#IfZArP^
zJjO38^C5b;A+o0O{~H|@5K|9w>0hffN<d8sD2F4a9x+Arbd<p~{@iemI&Xe6f{7sv
zX$;}<+D>jeDd}Q_ahG{g{PkRnJY*UCvgXVBaclPp@Z>FTh*B1HBBvjA2h}EMdi62V
zEEp9m8Wz$a7TyeRI)KF0DcAo2`&P>&S*zSPxPNzOUpb?X;z|-c9X}Qr{7oY345cCg
zUdHu9(YXI>GGa{=wf4d`a&zT-3kc^tvOTbxEg7X}QcQAC`5)LQI<Se(7|>yIJyAo`
zcgK$k{!e8QnqSYo2q4Rf-Eg;W=?n!%&bCNa&=6d{&k*;1dN!E_B?bXYqda3O`4F<!
z*ylb0VDko;y*}L6%*kIkIycmcK6NPDwIMIIBqgaMJAi1iRQ6G!*VNvE-L9MDTUbck
zSVv)rwK3q?3__i2f!v81oFY;u*z%Qoe@5Knj3U~AS`0{D!@J8FmMm?4z|A(ts9Qhb
zm`%Y}2lakVTcXOGmATTyzjqfk^AqnWRPk<=wq5);M7(!Lnf<@FXbaYaPrAaNFvm+=
zZgX_#EL^GrD|5#C8<FguKil&t+{tyz(SPF`n1Z~S1RBblDNNZFBN)i(MsP5^kWTY?
zLB;-m#SK#c3!zm?s!0S#U=tszP<=(V5RLl2ts&)%$6)Zo2)#O1%BZ*24!@n5Whwr-
zau44=8xOk-D>xrZLf;^>YhI)rfnp1;T-?(CF1?@_VWPxzqtB@2wPoClK_pz<Kp9oO
zZ`KVZPvF+<v#@PA@u``_^GQ+^4D_S~w5j^5$O%*fY0GfuG#H|2um?bWLH{wdV&A^G
z+Hj4zpH!B3U~BRoo~Swi^E`Mw8=vjaX+~em1bHb(S?MdBeGEn5TV|->?34jaGe@dx
z)28~(s)rnEO$aQ;#3w)Wgyw|}0w%HjrPHh?juP!-L?G@31g}8c!rb-kW!=3Q@vQ}l
zteu>~m$OS`YxA}$Nas&8r40trD8gIw*+Bttv!imLojJeW>(L9L`iw&rP5txM7_c>V
z&U%F;=O8VyN0IDdE6)xA);FdJKyvh$l`4YH{T%hsgM4x|wJ!Efv9;q4R&zOo%}nEp
zl4ND@R^x9Q*I@|Gfh3_97J_54QgJSffDkKScS@sB26QRjrl8UT22b3KGshZag$)V3
z552DEi?*MmcLN|t9oW|&YV~s>c*nLwMr|=$fBZ2;zz_edv-{(e5!>YpE9Mc*6N-LO
zbDZZzV_+wJV^*`lrgeO|R=XJg`)4i?tnahWv80v-wSLjF{+nW>ocs$3Uu{F7lz^@f
z+&rv;L9~+bUb9So`(^n*s0r2S|F7lwVSi_r9sf6K*={}?>-=9bWVbCNsGSdXqK<;*
zhwHAbSl_)ODeC0w!S?Tq@#_hM>)*_e(?m6n$5{fbhc!_-LqBxQ>QHJFP+4qAUQ0Y$
zaNtnXtr8irT<8oC+ME4r(6q~P8)LqsZ%hH<JNtc57{WmJYyd>9iZp<%5IFIn=AczL
zb1{&3MHOTZzuoiXB`xH#k<8OW0?Wl*6SNR(#E-{4KM{<BH(oKVVSb0AqgHbB&E2{?
zjb1o6LWO9!a5lT%bvU#4;$a#K4s$&7JU{*|+wA4b`?Em{v}>mfY&iBh`sK&3#(Bk+
ziCxeSAAy_?=A%S0<?6d<wanO4<u+PsU~R^ewLTLR0u5Pu`><Jkt5NQw%QE&vU#DBD
z2ANn*2Vc7Qn#ytt^X?A5%+(T~;nmE%=*a=iatlv5xhHzJoe&92LSQF<M7@=IG^smx
z#YF7Q`oU7|6%xZ$m4eQ4I|w`$KGDFKKij@$dOf-E)+UZE_ek1rzX$fFm37H<DOcf1
z!94M4=Ix_s*#u0EgG<q~O^o}ibMn#deDR>Y-xlJiMBp8wp2>h4$uNl`@|#Z}@$VFy
zTtiMV^0@u?ji|#g|1!+w3;l@|GW=*{*_j+(&0Sf6Y7(3&YVw%|dLyW#1c*p@YW7%h
zB=NALG1aJjISVdrq5_$4_*q$37mmKBE^lW1csW%T+3uj#-+6c-E)$O$qIl*>KUn3P
zyu=@mocvMX!1bf-%iI-m=NAc7Va;}Tq_q^FBjj~Co`ZS#fyG^nu-f1S<{kH}QWN=I
zNa6{^Qp5co*?NxGjmvpjI!A-94S%u%AD0a+^>>0>Y7x}8T#-@qIQ;m&tywSiymUYG
z(=qEi=`w+xHa(R|!}9-Lu+TK_(iaL!P`Zqoq0XozI4Rx}>ZWTUlN!_>%vCszf1`Py
zZ1`ps$7{zfY}o_JPHMx&9mc;->c@8nrMqkl&)65*gW|)Yt*mc6Mc0)HUw(iNRe&AP
z(9V0-^Il*~_?EA{)Ie<A<$;^#jEPc?pG(y*HIRt%*J@^msmv|>buiRF(1=#KiO9BH
z=#07OJaQPT1yIb8)6km~wJkH#n@O7@04G!m3K*~W<0ViY7>aD~?ULb^aequdGbk0S
zZG38LI{9O8bt?aX#{d_bY*Hx@v4Z;r%y4{qR7vxqY#pAb4OTnvN(a>a41w*yyB_}A
zr+bsOyx}G0dY%|xEp37=PTY9ue!ZK7n~-DZh7q9_3)(GVY!0}<@0p%8&x!r$uuz++
z(=Z5eY7XrVb754~L;A0>Yj)7^8xBS!zo#K9JhGx>8AGMjr7$`T-CcQOJc>R?Tsg;E
z$>AV@dnXEhNk=gI?mp^Sz1tMbWQDZ<T>vo3wD~~Nm674eyQ$Hw?}sZIRrL{+Um2o8
zXwX3~;x0c=N*JVTl>4%_B%gx}2I|n}$3DDkxgTT<F83T-O9>x!Y{_d&F+*LeCnuxQ
z3yH25qGo<!HH7)0s{Gvp!}PZLCQ+wz5Ip_!`$b*Bhpvu!V+q0T!KW-!{c02B2gKdE
zuCPzIe+f5MIlAH^2H5x~q}X|0X28^LNpc-WM?48lJ{MXQt0mQ_@gktaOQ&u@(a`Z|
zTqs=pDBdP}^)^a^Mh>j&uGt5so2^_K$vP9s8WluGPU|^z7_Ypf?c<%D=!U}P6_nzf
zt?vAhSe56KCHlx#euAaV{S)aSz-}^kg7{lQW=f?eMrl3lMG=3;ku=GYbIsUjybfNc
z6#;z^vw#eU(nX$!1*SaDS#?Za&`mcvWjJN~w_-#Cd|!L~(N6Jq^fAV{1eWxK`9<16
zM_L7Ij~<)I<xrk3LbG1bfG%`K9i1M*v?ihkYaTUv{egX3<m$v>#g~7!ifMdV%w0n7
zHY(pgiyjK^mBol~prGN*BygQ9D?T<c&kyItK9`7QMh_}6@YIg6!4aZNnr59uPTEZD
zy}JuI{5EWZ%)i(fzG#(m_XvDr3}P|IGSK?^J5#)!?M~H>GkNTI;a&&YYBDI9B>!Rh
z;hoVT(Hu6skp6;+QMu~a`u!3r<vA5+|H=IzZzWJ}*vE*Qdkw`ns<wGKuXA~Lwk(2h
z$Fo46&?->Xl-_DoFm~*1=bqhy?_}A^iZz#WpCyG#(?%m|Nq|oo(stgT0c#~U{qO^G
zBsJ5H$shd0veS{g3Om7aJPlMNXV#vCpK&%4Y&2y3(jL5PRV8QN{-|VJ;Qh>F1F)N8
zLLO0qlI{WmL6e+J{?0KW8UCIYLE4JyL8qlT45kwnrd$1xEBHBEa857D@wL$www9a$
z+5;pazD;<?VU2;}bwMkV(`=WSPaD4hR(ybl`B)Ir3)gBOSqk8vAvEFnco_t)hB7LV
ze08t|Mmx!~7ejty+g{c(C&c7)#a}%+6G10C2Y1Y8HNGv3nj%GoEnfA7VTHMah+_8F
z_6rpXm&hPpMi%jdE~faw7b9mOsMp`_7BQaQl~U`m%6K-*Y}k3iQ#FtRN3FC0+0(e(
zW~38Pmo0D(l5aW_Flg)VCQAV%63h5ve)UBsD+8^=nPg_4ZDh~qVEG<HzXM7+-$^lV
zT~$2Sq(x-@fXP;Y2R`_c73~@jvD(XlnSC#u3W7Y0U;nC8yL!pEDXs4d$xK>#hPOeP
z+`POTJ7_+-7_!7`ucj5{ML_x<ry+M#E88N|tSrIl3OdN9a`SaNvq3`3eMD0@?pLOj
znf3H|#yk64vtM(Fzia}`(vpGLTXypyRdShUBQ9%JU{w!mb#+LS`a8_oW3|1BG<Y5o
zb?0xyhr1m7{6@&I$)!6>gb`3zc%=Q;pPf+(5nKo)e-_%;Cpt0~Oh|(=6PXq#uhL8K
zCPxiVmqv%jG!+m;2@==@(A#&nq}!ATG@iQdGPb#J_t!5k@wZD*PdWF`qqhYBsQMQt
zFl|=_J%%`7TwK?jnSnwNBwN%UM;w{=sUKoatOU$O+7gPeH-+B;LMjx3Z}Q0HmsO79
zbZ_8D;Iwxi$|Mq+zEvn+&U1`_@Gv79H}&L6lhb)u`v49fb)0!Q(|k0hRZv_N2TdjK
z1#T7@W6*7c{?#=c5Z(fR&wY+MP#LC2Ffs?FTc(k~ejHdbfQaGUMZ)Je&(UVYxXa!C
zd%8yJ2YrAVAMSrea}ahHc8vn!9^;Z5j1x(Zm_x@zmFawP+KQ7;nfSmP(=RUgZtYe%
zYoZHsu0zMWPt`u1uhz;8|FN6e1-kG$F&345kkemZcFBhe|3**^=OQO|O{FSpD`mWp
zEU)rQ41S_eiQe-N1)Pj|k-~O5ouzUiwa6WoO7$C1uIEuL`uqY_g8WBTtx5<w0l^lC
zdh(aJc5a_*2H0raDAms(xn&Skd!s9(i*-Y+YD)CB(`O|Gy5`Ed8v%3o2>4*PNH5;W
z7G^2vOi)6Y=FXvJ5}yDN({ryLH=08NzgBcJ>GI^BN-$O5oqrj}_pf|rJPry{H+Fti
zw>2GNbRIF|fLb5AH9Fq5IPOY?k7k_AnekeHuSVVmfGFCuS{K_M)+I)f*rj+!aObhS
zbq@y%@N`#x6!YFHN$L)*0%37%;T?v!MJM=F(Fth$B7T%<ibTmS)tkqrR;}PK7#uE<
zNhRoTm_Y8Nb0f}7wNHGyO{1JNgtD+@B20{@p69+egk}UsKr7M{Zee7=uDWaU$OX#+
zucBnG&$3W^ev3>o*^<)o&Rn#IaRno7yo>8_!%?}Y?K!b*hFY=3X%$dmYz)pUBp05G
zU2TRr+WwqNDvXdAl>_j#p-$Ap7y`u43_aw^H^*<K#qv3%pMrY75|cNbSsOhL*u7(`
zj7cE!YPnCN-pI^<BCBdlO20p^pH9+_`H-L4$-&PW-TD^4^YWyz#Wf|X!RzYsDMoK6
zsJG|^u{(#tLNd1Yo{JJ(c4^%j{9gKVBP*z4ro=g+<nkUYkBcb#)(;WFsTtRB*{p3S
zc7CVrE!(@KbIcWD&p+7w?Q5W{sM3<J_8aAjSU)4M^$AAKt(^0_zn_y#+zV9TXNj8&
zj8Xo%kyGuxQK5?+d2~LCrwst>t@3K13qsKxRt8#~Nn>a&3f7;`Gz0W}83@OpqKuc8
zCLQ?_@4s0_uLa*G6SCTkS!;x7wHDFDM7LUD)xvou4XYjXcee4GExboy>p;z#*_2uA
z6H@yn$F>J9`=r%1S3=8!biO*T`ot|YANC{HzTesB^Yy{fj<grpRVi;yDp9t>kNuJe
zvjKR_O88SYg0VW77on~xk_4X;m|xDap9O{t<2N8(ZN4O4f5&mK!y1uGUzzS3C8>02
zQu|xe@gk7uX)$XnMneC{@jIPK&%m9#HTflH85QzB-8gWNYhST9Fp%pDtyt~ZjAV0>
zPHdFD^${~eO&gkAPmJhh3&fRH`aOY#3Ah^{W$=~+_5r6?92Qe^5d<bm1^_B^u#@_K
zDA+&^K4nhblHr8Syz56qtv7?3lJ}caRLz6SkD-p<V}rC>rJ@RA{{=(jkA#wGE0`?`
zl8>#tn~e_pZ-y?V@+1IFR_T8Dz(D@0>dqy|O^xn>U^1_{;o?J)R!NEbx+_9r^PY(o
zPjn-5JON-3bOF)m{7KkiRr~AWCaYB4+fc~Fszxa2>f;H#O(|3L9i7Iyx>z3IyZ1?}
z>a;fF(wxVpeF<ftejn;*O;=_KtDi*z^>#9>fP7?rvO08={)M)8q&YmfsD=QgEA~@Z
z32}Y>)<RZT$0BwjMhoTRzfPKPbILvLe0MUK>eNU!bzI0vnJETs-GFJKwgUBDb$9Ir
zdx>jb5mP@}ZrL~gd>|!ftio<IE=Dw#PpIHZp@rdu3z?Cz$I|p7n=yjHWA<Ec=a0m|
zXX%9gSghVzQ<Qk#EMr+1(J*tWr7Aah_F)oPXYZhkj38Eo+qR{>)s_Vh-uy#-;<Yu%
z{PnB2=MRM$^=Ltj)G*J;fe0OhS@Mvdmz^l#pDtA|(BrFl>j8lNdaR~Hk$PUwurrQf
znJK5j(NF@Rno+{Pl%;0=9r$fTbEHDMUxkdc<U;AebsB4HoDOT>H9{0P&K0gGK-t36
z;=1D<oz$+#26Jv-4FNqIBIn*1OIl)D3c4FtbodJwN{dkkyU7e5+%ivMVl%Ob9V;>K
z*15uE(V+X}!T{6E1=dl@I7U7<(%$S`T5%Oi6nS4%3IV{D$M;_}+19?bsM?-CSd>Bm
zW!7b(^xD2e6yGvOU3}Fg0z{Ybbe}Z@p4R#1f0wn34L!sm@UR2g*Vf?r*9@;+Bn&^g
z0Iq4KK4Zp)f#QyPWHFfuL7SEUC@|6q;;`M+aEU#R`d0B>k1+~dSv?`?e~~(SG@Upg
z#)DBJ@!LUF|167Hc5SX#yUv|JjEtfo9mzm~EGn9WrO2g>8A&^3Ytc|zxa2KdsFH%D
z$#ivi!XKk$;mb)=Qy5{1&E#6CQgUul+EDnA9|m2TYaE?0m%Br)pTj7Yd#}twDa?e1
zgUHttnwjR@ad=_FNjn<&YMK{dj03IOp0k#%<e(cz!YEW=ZinG43IW}md&cOm=T%yW
zYhu`P+K0bwoD2)k7XlmD6?Z#GyIm<(NOKGNWMM2iRNGk#l#Y{tHX4=LjS|3ZZ-Ic>
z36j2z<@F7Pvz?W;$RC#3PEmH|tZGOOR;615;brD*IwEpux&#<EkH?0_R~t?vZxmf>
zR51_sXl2m!<Kz)`e{{=@nff+XsgTLS5C8?rv3i7q_OYR^xt-m(6y^f)?BcP(0<(}P
zEypIOjWFx{bRbf;Zx$RFMWgrJC_~AV%|ko1j<KbqJOp%9hOb2!H7x2^kY72p*m0RD
z94sZ;&0^gO=CH^6gNI8TaCB{C{YcBCsdi(wa#meku`Jwzv%!D2!5nxDcvga4RJ4OR
z6(m@b_i7W}@Zmot<BRCz72!C;>=jT2M8<>b)F6<&2&wqCHNR5Ct%pFoJ6N=$^nzD^
zmoPjv`gX7ssr^Ke?)+p3dW%KQ(j}cUl1A_E)!Vnu>#z4@#hq#iTH|<X{j^2Xtjqk9
zdM*lmbcFcmwv%&Q8ldQ$GA1pX|7>F*EODLDM}uaw#NSXHst2>I8OgCj4sLmr;OFzf
zT9}NFbhQt&eIQK2N0sIp8(3#&xr<sJWJpiJOISU|fSepszV|ee^TU0>#2xMH9Rtm-
zJ`~O3%8$RWAa$E)rWBy02Y$&qv{}k8k|_W5eYx`VTFsz{4BB?}p`0WF&~Phagnhr0
zoUQ*G&3HSyGpfLq4n#aI2Eh!>6CMKxU$Q;@=5Ix6U!;%P3@^|xbFw-tO~v2@owh+J
z!Ht;6ZI-orT?T!G5s~HOwwJ#uRJ<Y-^LxO&_u5i=V8-a{1%rzUF5zZD8N}|~DWrnG
z+v(2p%*K^r(l|<+n*yw%^HN?H#~yEH2al;tA=m4x6OLQhbaUU^ev4uRbjm0JCxSOg
zV6CG^Irb{M*1Yxq@&a_Zn%If+ZZEI(LfF5@w{?A>@j+8!I{y;2Ctl%Qx9LcN0{8rs
ze%f-j#A~3rbgn*4n$b&q!rd6N1?eW&C_6bLw>fQrEUI{Quki<44LOY9EER*H*A<Tb
zx@i8mqNR$O-6ehXJ`8Dh2AX2GN7SK|-`w<!q^L3?GgimH^+B?x(I+O(?}%xJqf9^S
zVZT<xFV~2|@{%2Kc7B(FGbPd6<JNiUt-o#AhMD>(P{y<?oID_=B!vMe{_yl1Vdp#;
z?q_arK}@`~70X4ok*{c2%sT}z<6fLVs+YpA!eO1()*8A{Q_K^gws(Q#J6czcy5EIj
z7`R6&4F;9ZkSY}4R$}&}+2=L-Ngt#FM$b7n^M&OgOGhHH<H>l5FA{4T(G2p~>nB%l
zP>-Q%CmtjyauWzxnINP`d(*VZ$_uZNgNge!0q%xmKJsW5x1KEsHbkiiGCW930>h}4
z&^JAusZNMc^k+6mVG<lf_jz0g*L;WQ#)S?rsat-u@oZ*EIoEX0z~=Wz!@@a}qKi2-
zLqD^Y=%lW+aIiz{nq^?ETau|I-4tHB?T98I+k-sND{sQnJ6#AjraxC=%KFf(^DY7j
z@YI~yMjoM{sNgTFmtsQ5>@Q5oV`D#pD2MP7Z#1Wf&WExhA7w&rIe?O70zD1^TR3u3
zAY>Zt3G2V>2KkgjWKkU1)>n%s!(|@Wa-=WuYG8={h7VgGau>6^_r)**wB0FtCPN`X
z8yBXrDEi6oSrIn`;BcU{Kz&M{Slfh^r6WIWaY*JI0p{1RNQkP8Lq{~On=p?f=Jc?7
zGw2*~v}Tr3a%J$m2VQRMCXQr`XFLa1|9m`-Dc+tQC0EpYUr{<NV&Nx`UsAwk=@%^4
zg7{HCw+ao+kn-~SFKzjG5|`jiNOw20bpWOzg}Ln-V6FEYkp>Ps=XJ+&jxVlaTo;B_
zhmopxIHzJA-of<B_MXi7Q}HC8=umJUc(|jm-{9}D0g19Ga7BCSA=>yzNP~_4rr$3k
znlu+cc%~jx#fx^j09P6ey(ukeVu^pr;xyx+GpO+FuO?WL$mN_C2=gZYj}K;HRT^RW
zY+PxT&tCM_lO@=T$hK=gI1o!0i^X$PKpa1+=O^nlDOJF9=Qj|fpeC#{^7bm7%8v9B
z3{~#qV66jw%F|XeMU<nVP#X;ye9#uxwg~<pg5lijIaaHuv<1^S0q88?fD$OJsXie0
zyg3IBA&SY8$Z4BtfB3mWuJMQ@o&mU=|70$fZRE-YrPq=0-8kcqJ#3ods3OSDS1G2q
zVU9WJA;*So+a^Y33os>dId<8&h{^sBAIO|)6X+NhODCQ=)PEq1MjGMV;o;}LDi_#x
zZV7O*e_a6nP)wfRE!Z}kgkGCRz8QC(Vb_4)XP|<U_vN^Wjlcfy&+EE)5&i+7b%(7m
za>`Y22tR0F^NSElRV4V2jEGmPMU&oZ+m7fZrDb;McjVNw8%psnG{I+E@|*~RBz1pE
z$-i;s`tu>wX)dQ2q>z_7iPdzrMvCj9h!BP-+@a_EEhc8b21#GGNd1hOr^1Z;YGh3`
z&cqPNWzV}A*M84Z7K+3#Gu0-r&CqYqT5$OWP`e$AqPNptd;n^Bqtw7pDdmPaVooqs
zHLq#K+bfX?GTn0e1q9@HPbR&ia^cN9|CP>pDCg|cI-~=lhc}$2ibCfytWlXzl?J|X
z!#T>pZlIOYN6v8Q&W%YE1ci*l4!l$`&?4Hkbs&nkEM2p@&F3zF<KS8!a1Li_<Sy<O
z&+<~v^H?E)&1h$8&#{bN!1O}?9h30E%dPh&U=fLYMp?!h;0()@6E7r%b7_OAvYGY_
z>aZ30YWs&5U!a|Qr?QCmPmUQ#t=hm_#7}A;2bIjrd^19H+jAJOnqe>vcoHd(S{+7K
zuN4}To+TJdw9L2E&T|ns0L@q3-n_GCjyB@z+%jAQ`w`W5HXXr$p8qa*l9^)H)jGSU
zO6*9t9WNJL04|sPJnmVlrp~ZiTlm)}E{BfNN3+Arb=eVBWkk8fmPJn4et-?wf+&>r
zw%%MwXG4;0i5t^BGSv8WPsV3;q&0ZaJ{nsL(fk)6Pz)v^8;+w~$()jQI><za6szAw
zFn^|0x5~0s1n0k8zLN<Cw%`oaJ1@lb#e1Eg8H*hqbkA1y$?WQoO@#LU<T+BX+z}%W
zpH=`s#sJa3HATRBZjhq88%Rt>m6bm1=)ZFp#2>vLeb!Wqqi}D}xCY2{N-N1PAV+_o
z(230*Wa-9}u#SmepFlp}dMP*SgE9khS?u{m(c*WSR<Yi6fgntgMYX{9S`GP*L#N_p
zXjwp)M37sbe-MHcGG+w&j8E2E3UVFpDm{73Th{}qG$f%kzDY8xH(rDO{I>mHx)3e-
zos(_dr;kw~BRkqOcvjVV3=Cw8lqyZqeG@>D0fM02;jpUXI?Qu_&iSgSdXmS!EpG~6
zrZ69F=#yG}9~~rv5X7pOY%hl6iA>i_Z`D=z-6A>&J-M3bTt`fg;JEY>B>6eQ!NjZ7
zo&Cc1D;*MRN%L@S(;y<fBy4kIp41*{$=wGN?H(FW7jw5W-W<&iEs3_oHNM+SO#`~m
zRaP^f=Km|}1>(Gjc7XN(7uwqghlRBUJUY(RMU?@ow!AAPQy5uXvq&VZrwc6q_WchJ
z|Kbr9g`ZYbby&h4s~Zeo^opN6@`z4Vjo9Wy7dZX+WhSn}+RRUM5rqdW(KiY>#|DFG
z*MEH9UhkD8dfH8HMS%h#^H7Q>rU~{C;@QZkJ<N;RSE+NYG8{{-%xtsA%?+sGRx#v)
zd&u}+t`WYk4g2dt;YnM9-uYB|2cUpQHO5Vm#GL}=l{*9aUw5m#DU9VT7CUtIZBS$%
zU2L;K=-_vA6Zw?32-7{-aX=whPX9srh#Rj`BBFpY5`KRpiCVpORWh0s*SH-h9KVys
zjimebe%r8^b#d=|AV2L;w7XeC5mS7)&Fu+W8UfTVla&`bw@4x0T?3r%YMI@0_GBH)
z$U4a%F!h98w?Nv2BPTb;{6ph4Fz!gWHl!je1+3m}0bLx3QK6&YPCOCT)g$^rIxL*h
zvw`chD%+>kG<pe8FXu&gmP=`<J{gGkF_H$d{a01EOp<#@-*4ONLb`rKsSlT|{ndXz
z|7DzF0Lw^s@+E2m4X!St!aEt?)dvGm+CS$kv;2srrA0~%;WWD&DUW9NmFbH}jI3bE
z&VK6g^@IT}7{<pRaXjeGSbNcq3VnbBygC9WvAKobFpg2$>q(cFgMr<v4{sQER0qw6
z>z_Vt$x)P1+Is1&_eE9E^#U6!`}MwkV23w`swDaCLjKU(0(4H9suZdhC+_PzX2I=n
zOj>LoCBFbsn`%AWCCXshyc%%UI2xo@FPi#DwOASQrLvfoKvC99o)<)n`ThEEJ4Xac
zZZMiI_D(?-0#{Kb%7CRdppvSJb1=wt!TX)$imgV#jk8Nzw_zbDzH)K4hsDOL8@w$-
zbKShPyf_Z7xKNhFJ4kif90wcmG(C466t;;&81j-)1v|>ueZ-)5uEAa}g!%j>D}MPg
zl#!r6jDFGnb)c=r>Q7sAJMnb~{LSX!Tk-(0o~P@@x&onVkZobJy?p#Hj(@hA)!xM-
zkG(9r<L?hR?bz>2>s1=Ha<g<EA8I}}_n5gGQUh2%vg{U-A5WalolZF!telEuc&5mn
zBAjrUPvd7+pY<Q)MP<TeOL?mA0cpJznH6)XlY}RN-KleBV^qT~T(ri~t9{aNdM`VO
z1>VPmCAjhIFXkzr*?=-wP;bh|^kkwQ_ZKbjX^Jq<jh~<2V=n!NAGn~0PEF(+a)W)G
z*fvcIOzt!+1Dx9J9l+)VD2w>!gwQ<vT4IOT(S=IqtekAg<9s(;L+^BJxzqv79H=-r
zCZBI<M)w3xGi!ZMC&q@wxItbpREM<iMVG&KU;P#Kh~H&84`eY+7O#x=_BKagHiVuj
zvo*UXtFmcEi^9`YQ+E#|(EpO=Lb4nQ%`&x=HoUXkMx2iIbP7eu_gB&N__(q0qR4mY
zmJkGjoV^xqp=_a1nvzs2b0w}8EUA%l4ww7d?briFaP2;+r%;QT(2Xrle?U!$Ye=SV
zNml^zYmF=lBaE*t-!24A^er4I79OdI$NQxV1t%7uUGTGiJL~8^k`SLfMkF!@SM{yb
zikc&iI+?VkKk{q;%=6f?Zy0AbOTt?Ea?>cwbm^ES;b4gnms&fcE1LiX!6Uu&$p$++
zc%RpZ^#^Jgj>8=~z`gxEYrgKYx4b8w*{+{iP^NY0bi%~((xR4420>@3jKDWqK(W6>
zKiu$T;1++WR}2q<rlHXCxo=UCy%77nO<cro;I?VJW!vM>w9b6CdsJT7iDxKB%%Ml=
z_YE!Gx#Wkz5^~&)V;z#l1W?F*|ABjs9wK@7Qo|m_Sxb8Gq>ox;iu%`^VqLRxE@W;P
z+g>pwzrxeDH5l_MIwK3{Lvn&@rs?BzpWS#@an2+ZKtP3AL59YLU%qw*2|z}(`!EPk
zq`be+E@6GaE5NCZo!9|rv^>gp(?h~|Ek=(mSDH%&dJ{LQRT`{pVMHei4N%=GK3RB*
z<w4%8gpK~bWKLsDVKc}mkD%gnefoKw4fo+4G=CAzQup1BwQ>wwJXzMAV*dV`8tTO!
z!Yzwu0CiA&o$HzF5SG|0jph|h2Z5s^rhbkM{k_gul^pS3BIL2DeV-eZH|(6_{SRc)
z7J3=ZhUdg)N)h8z@KGl<LVWqfit%@8<9NHjml0!dTxM`eCX(cYe8^ReuzqbHa-~TZ
z6ISQQGGZNIe9F4e#z#q(CzrJ5G>MGEmpET@?Ks^y@!%o8r{msY&ff&3qSE>{ECQQ=
znw6YYx~`Rvrh$e=8Znd-{^nj%nsOgcE12Zl%YFsa>_mEj&ML&G59iU(=}grhU|mZM
z!a<A}HfRW-@OsID$m=km!><87TdP8dUaIP@Ai+4`FPh^09UVMT&d`JeZjdn-tycvL
z_~y!XLCEIR@f1$*Q!3&=D&5~xWHA5lsHrR%+Eza2Ku`2&%Fv0}j0^3cOo=|e14%uM
z#HARFn+8J}YEf8!bA=9Tt*2!aP+9F<DRkKrEN73(A-f1!WZziYLsw&9wW)CNR)-0i
z4*OR`D<}6)XFCsxpgY%O?x%r%@WQI>U4sYR*%am3_xmhJUw{#Ren(L}{TD=Xk8aig
zemT##hSh73y@1)`HOjMNVY-S;qsLyvdqo$tiQpVbq0~(b0#S-_w-DiePF%C8NA`5T
z^P!_fk}PEsQGYxxw@ajx$^|G2EcFM4I+FlZK&ro@LCCDhh~6j6MCTm6QA+CXl%7pa
z%R;}EurgYdXy*SS{HgnZf{7af&AqYhZV*fW8WsSV%kOd1bVy<UB47!pa8x({&qv9c
zXIsP@grp$maz)nRvFqEA1Xm_b`Uwq4UYpVLyBStF&hhSO>CN=uVYZhv^+uNBRCeNL
z>XGQ)5&O8qm!+prF00er)JJb5MbZmLw>nPlOWPXLZRFOsh4BRt<TbI^wH=?7n<c``
zPz%51cE2b%q%)S&x6R#3D|VkJUZUJIA=!!$FRnL%##x%Y|2W(3<ejI4rL_0~=B5>+
z9XWE^8dPbVJ2}MJ`O>!$!XPHR<h;M@p3@9maCGIN0aP!>m(jSd*bH?Q4VTg6b88gT
zM-{beTR$6W&EFu}dyL99lAeI99Z?4c66s54xa@@jb1Z?XX<T})f9b(QMihmh1&hNV
ziHL{#Z1vb_x}9^4C|uQ_9x<vBFf6g5qP8PP7~7Ye)+VS!Nv@Th>G2sh4Ns0wVr8#R
zJyYeKhJWflmZl)2vTP?aXm-(bHMRrYI!gub_PsyJoRow^FNT;8JV)ke5>Jy#8G@-=
z?xdZX%dE$FCaPkv6P<mtC0+pq9t;`QEC?*SN=9s<?V$b}9h>vS{wI_CAau<Yr{J16
zd{FgIx_ua$7AWJ;Ok%f-lMrUvgOLYf5(qZ*_O~M5odo#YzChL9?)%inN$J+_BkMnM
zjrgnLd<s)BhCZPJ6L@zHjq(10gpZ24`H(tTVF^!#)LM&-%u4ZzQUHcO-zr%hP~}M4
zeG0Vl<LY1fg?&W}xQ53XE$Y0QoF17z=CG6J`5k{qRF+&r1SwOOR3lsb?_!o*c{vN=
z(ZGF-HpbsM;vVpy+!$J*RBQ}yQWS7u85E+rdlxZKvH#g`Q{UKbOKv&IgYxg;HNRrv
z4(^mDxcu>yFSn~jc=ZnC1#A9#uH~=E$CAi8_qjYokfo5ppS13XOr(T_P*2=~vVDE^
zOUsIOpiVGyGXpu?ffM#sRq0hhMP<+2HE!YrRaAud1gVO1rwG2`Z0Aw?IEl1Tm2e(i
zx1^dyCR#=Y*{G4kXT_YaJ28r9x@muH`O{`uUD7Iy@93L~7A)##5fza|DkHCnR9D2C
z<ROE8tHrBXwpJCR?ES~a%*XEh<fx-o$d;?R6o*GjQctLO4L%2oOJ^YR=W`ocRs6#Z
zQr!iIYz@rFAOWSVaS=0xvj15WHQWS^1x7Ikk#<h&5JCC5MEZ(zKB?6#D%WwV3e$Nv
z4gT;7!fZpkMO+5G8_vsZGPw=TXKrO{0{U}^18d(lH!-lt@BSps4oLmReB3=o<4NYC
z<)8FbzB+WML@^^aSs~2uv=Tic4u^=;RU+<Me{kW30j2tmIEauQvt0?G7Pm&?c%opa
zBuqTu66x1cJbweJ4$PfVD50vm+#rZ;_9gXa{HuJnvSrzYzfV^)Fj~8H1IQti8n`jP
z6}45omTxh<<8#xnjRV(6<7K>zu__;B`i2uo$UI;N%G>(Pw<KI(N?E|nj6=O?Ttc3Y
z7ddtM>&U}tfO2Z62}K&not*X{z4pFuC(~s8*vc^XD#T6;6a>qrvO8(USq4)EJqJoL
zMhwGxSeUE!^SmYcwn0M6G`jj!eIu^gecBHWvsBWw@cgqz?ACmkVec@l(cPYN+2)j3
zCc6iN;AGDACc-H~U}?Ukaf+!P_S{3!oQt30RcghXr)+Tl{3XPgCgy)tT()%DpYSJp
zXpI6V4Q=OxD9MBJQBNRzT;t)n@akQ>M}pC`p`niyC{Y&+41F=GDwsr4*M>oxN3C_>
z>zwo9z&dY%j9o4#<KFeeO49Bxv)|}ZguPCDvyB1!a5EajFaH!lFF!F{z*YJNKMa|0
z7!MG+**kCI?BJt!>V*Qe*!S`nNpX9V%hH_7*^c)ViO{@vG(8gx9*4Vs6eI+nH=Q|$
zojEaJb5V6?Vn3KccWDfz#E|%4i4DfuN*;EY5;Q~Fl^Jw@X!#;yE!Lq5WP|0_Qyk*8
zXg{j*Q||9~+kShefY5ez<w)Rrr)!TcljS$If6bILvo!M`3Jm;ik5rDc<S)xO;y?MX
z!Z*@6fmA;u;s~Kh{DR226=R|e_OQZdfcUKaq6n9giFsnA5|I2=nufUPW1fToub34j
zf5rUIu*xEOi+mWr#9CP~ESL?Pw^XCtz<f$;Xm#b)M7SLA7+zOn!8BuBw?@cprIJWH
z-uqc8z#*=F6@n6tmI^Y)NGJJSbp`>aE6HJ0^J>WZqmX(#pFEk)!`!@}sEMb5l%l3*
z<^9e!)GF+#r%d~l1kz3!!{9?{)Ec4o!W^ZWv;2_j-3~TT<l(3cdRK`KwvnK!*uUPC
zibAV`hz5TnM4-*^9u=t8ANhWm3v{aSKa@n^r6E|)(kM$Xk?WRcK6@*%(Wet4Ce;R!
z3*+L4Hc8I2y+q$33-pxD8lF=PHbcTyT$G=HrGS#90W~-`r5KB8!^E<mn2YW;XK0Kl
zJ2TESJ%~BWL$56gk*eL&^|@L|5qw4*XvdOf&HW+PRX*<FkHcw^>Sr4NqgepYR&Mj<
zc-+XtE}OxyRi$3sd?GH(4DlCywmg6)+LSj9at{Lp`ysu1E8J=P_&mv_S>I84)P@vq
z8wh?(SC_}d>HNUW5#W-K;IAa&^5Z{LNmX}*LSB2Ms(LvRCNq=NEMyA%8M$^M@^Cws
za<dIzc#=hr8%!&6k1g*&4#KwV4)`F(IJ=!*J2jR7sMP>U@s4n{u8z?p)Ah8>#4m5r
ztr1Q-E0p<optv|b?E>SHgUZZOmjbCF&r1nCk4#c5p(fs3MYB}C_pH>=Vk&pHjUK%r
z7Gdh~_4uqL&~`VIg)k!2>gNuM!=+LCzCEGnA7wN~dRN%m{USNhk8j<C`@gghB!gB{
zKjmBK-yudfyUrm``EpD&g2KDBPFDB<D%@3(m<d)$00uShmZ_y0QbmR^3yRT7A4*_l
zE0jaLNr~wD9fC=I)3w;iCjJKo49D2}Sqjy~um6x!_IQ(0<9bbBu<}XN`XC_-xv4N;
z4|l~Dy~~9taW4PVi(Y|IfDvSRjsbpZI}pThPX-^hlCoWbl|j?e%%j0&+w1`&xu^%T
z(pyUFWfL$Q5WvmUfrS46LJ!Vhe5k}P2G1csK^&ti99@+Wb$ZMhdlOiWy);Ad?F|Wv
zAE?;lg8DOHwAL`OTrW%;@8=wmCBM}T3@~z;;;^UB>S$0i<>2Pw{F}pz`K=PkN{7}F
zsenKE3BxHHMoCM#Bf1Ec7-JWPtsLd~M^H>%1XS;b)T4Ua4fq)){VWkv>#&Nz5;M>d
z>1nE7C8qPJT}L#(&&a?-Szw{3gTis)96jpPU@p=T5iMi^vLCAVsRr9NCSh4!%@KD0
zPsHH>ieI2^G1H~&;(L|8!T>IThqTU<FRuOwzfa4d0)=DMN{mOjbC)?sE~eN4v5+GP
zQ#ENZx+cQ;Zm%NYhr`fB$T8}?Ov>1zHi|}~<ValQMxq<pm)jX%@GbHfJ{U`V_d=Yj
zPlGQIj*Ev4h2l8dP{_Ik<&X!`aixYYofoD*)c5~|V>f9lCMwvvO7}asHRFaaQ~0|@
z79A>NI~Jo;Y)l6&8GIKyK?nzdm`OGB^E-JhGrk)bpp=M5Q@N55Ota9s6HSOr1sC}%
z^%iwe;<K9~qaZrH3H0PUYGwEYiyf#}x5X-+kFFTK<(!+CdPA)es3&#>ANe5EI{`?t
zjWwk0ZX;6jm;@JM0!5yty|L|_yZ!!{zmH5^o_awq8Tvv~;;UjB@O@{aOR#KsA@!dT
z#Rt659@zx5E9cj%z(Pr%yvf$|UUWd0;L=E!=EeysU4}u_72>IbX2D9?Vd<1&wgWY1
z)=u@QsvIN>-#jiHQ0Znch=vR_iCjkaG)-mW>t6o09!|Q`<yIyi_IRQ#zM)reV0fvU
zA;g>EC*@9xr-PQ#vGaofc!1R<w~ThSXu{V}ZKn`)5gXyFsFY=hR;c`AZs(vU2%gXY
zZXPo~S{x4<xw0@hj44+})wh%_0{5-^TQED#l&?3U(QfHhvwfa(5u!}`^tjqzS7Wqv
zIk8<FqgaK%OSah@UQYge-cDTM9~8K<r)~!)^X~4*Y^w9)8Q7C8XX>?YU5hkFa=PXK
zBK%&R+13m>>QHU_tAU$=w3QP$dG7F6nfh97k6n>DPEUzNmCRfe1d~sCEsk&b91zL6
zvy{fm!t!5=S5<*N6l-ril*)YnQ&iMG5WWi<%=!-s9!|Fbn2~`76_yLn`f|rc$TJ9(
z;WVcKz^Hq@Xc8J~w;5<RPS$de$e8P_oBvWN37zm_0c#hJm$hz@-_c8p2L@-9o=}|%
z*P}qW5d%|oH|MB?wm#+66&~OnE${xQaGA0Yo$(VR4#v|6W4Y0m0fHoIsE<NP;8XSb
zFz}2l-R8Z5xh(EAt%R<w{3q%tb=<xG6=hhlW#OHIn|&$GQaHY!k<7J2d+g4WkN;RR
zQI4?b*W+L6-<>)rQ6meu8O}L9t^O8-VQ~(AcpNXG8+WUoS88(rGPb6@m7z*y&;{5*
zGuF^W=?l#RN1J+Xh*T+)4?78k(8Z{@7#@VJ`V}=uud;gJwyks`D2XKbVj2?pFrkiY
z^4H2~RT709mSkjW8SFV84fZK>C@#vI7|;+V>;IT3&K>5#_~YQfARLvD0FCZH4@yNi
zw#W4Il^OtBjY3gUGMg%>{YjTg2o_X@##+PmXNJ3jj(_}%<{g49afcVXfI)KvdlL1X
z=#|_J{o1u6>-UHq_ff60_HS{s@q84U`{camW5}R0Z*8E;R%-!Zc=u$2CppIq`CzSQ
zW++K01&HT|-D@;*QDm6BhoQ<-#N!*(0K9fU6Ij0fuOXb%iXg)aX*~DO8C9tP4U9R%
zgGZ3a5%p?MmsAjbJctv_g|*5oVon^%_QxV}P+I^CY=EJwqZ*Va-V3z%ydRS&lhJy0
z-a~qALQ=+Ic$J@T0khcOF{e0Oc=7?_Ve2q%EV(ztwUd>;kMt>#&v1}4VnxJ@M3tx_
zjU?0Z$H`v1L95BgL0BP9_MC2$msFbU4W6t8UYZ4de0ba>XD1`f_F1jNwOupr#6@>}
z8ZK3L#!V~V1@63CIlmrM-g_HQn|^RS3J!E~wa21pw{;$8g7%Bjw!r=MQlxfZH8by`
z!|1%`+<{!_;Zu%Pg^#^PVuTIn8y%(@3F`d5Dk)5MEF(Z(%5xE_q_KG@WwUyV9jivn
zedB}+L(J1O2b51UOFRg6VWv(c9Bbxfm^8uOL-A1@Vbq~EE>-{OqGN&08p5nns=WcO
z4oPG2%FqU5<%<3^(Y%uk$&_!!_Zfu?XuLvTvI>2^ya+CQGG_Va|BzFdLI1^Dhx?}U
zlau`Z)i-*(<s(=^qCgdxwDz;M4|Hb<Esn%NoQVh^IRfu(mzpLX(bS|$Eh>b&BflSM
zH8jG90axOPc%ObZM4@QQd{rbj0+LdIz6;#v8tfq%891UOuh+95-G)4YoJXXr|6#1H
zRoBHpkSL+Q)RHSU0{QloF(uLaXAQ5=0atiNptP3fW2I=%;M&|vqUI6WTk602eKe~f
zK;a~-p$qS{5?hQIPqIU^_n!R@I&bEpW<d1-kQN*cKY4I?dV&2l@_)qpIur8gq0`mA
zJZH&rJxMJynUjUqqYK#fxcyv0&pYUYuCd^=`%A=<Tez$^hg<#f;{i3=AjR91&k5*Z
z!Nk^qd<C&?Sx#Vbad6bU;rM>hg@n&JyAmJm=BuRR&>g}P5?$FR#f(G^PQQx6dI6%K
zt-Wc;*#dw=rYjpU=%BGf9jf(<?(hL(%6<8}D)iXP!-6TvjX25OAeziYBo>*}V{Oe*
zm>@|z$UsRr>dSL&%QTKPWa7fJ`JFGcdZ(<6=0<jK`~hKmH=P@hxX11I0#Y4uYM}=-
zsL^C~wE>dEoCNZ54E!PUGe0Za9K?_S+;;RdqZ3l7Zep?p2MHf<C@zv*F}O%7Fc~uV
zlNe0wE?EQLdh3T9Ubj{m!Be~01;|C6o(YKP5}G?qyS}Xc$}L~jujT48VLawKlgKGa
zAQM$msc8G};{?eO_HLoQjoP|v&Bq0ddo~3ADK#EGmj?Gyjbt?eExS)V*@M2c-VUV5
zD?R`;9Wbro0O2>BP8}DklDcZekDdkP13#k1X$3X+Nc)Jdv!?dE0)b36@j=g-{y5YY
z#G(rrt(bs1oAQL~QrCn?CGy8nD1us_*BFGbD7gN%Y$C*Y(Mjl(Gee|7F^HGlBwY%6
zUyDk3ZUMKSzC(;TSm{{a>Bb*nQP-WvI0x!Q3raop;9}o7RfVJ?#X$6_22gF5O2l1I
ztG$N|Z}m*AX1AYD_-L@lq14G)v3#Dd=j#Ndd6sfes&B6p!?2kfNFe;!z-U4j>g%Rm
zMeTbaP<*t+#i*ra(7jN5OW*<yr_G$jIaG&FQB#rK3cSYwpi;v+83z0&6x02qF<}H-
z@yvS?!7vwjgkyzamEu>Wc=Ipep@thFX;}!uYD#z;0&k*F{+N1lO+*eUm0peNp}Jn#
zYNergU87<jvlMg%W4|*oYURKqIIkV$If}_WFG~>SyK}IF7d(GHkwCB$&VQr!s3BmF
z_}9BJwnEHM6dLi(0fR5*Fg*C7P1<O%@^;*?^~;1)h~93sMSQEzQPq4J>By(i#!}Hx
zk3Xi4cZ!zr$-pB9AHGK;&O>>duOuXbK?FFs^v+n8nkl`mN~q>?QE<9cS%?8%kHRi5
zq{ZIrfUrgyR0^Kjy@?*5=kZ=x<M)Y^#09MIDpILyc_U3gdq;$tlwHq$UJP-sgDiwh
z({}S=sheX^K^6vc@>#zMTxq9-!qEptfle?@$8hLyjDN?E%&bU@M4}R1AuLJmF>ywi
z#QQ8?)TB(Xx>@}53wD!gGl={<&ztFs&lnyaIP|l@K_?OdL;F7s(5BnW93<|<`XJu8
zE!XyadKO*&TL?m(meVa%t&)HtmhDg{yd{$pMXODoPiLJZox_tYXAmvSU`jF(Nf`m<
z`hDdCl1W~tv<ZatU0LxNXBq-5hs(p<_JmzvxZ$<CnqdFf-9W6^VEOoWf~DeTsQ4yp
zU?+j}?h2iUf~(0@@sh2ZuW6j59t{R=Z!~Xv5I=#Z_UzXQg0^_jqsqgiW75jehbKtd
zL4ssk=ePA25%RhCxS{O<=C$>t4b+Au{1%FCWjjv`KUa^~TIG2r;=z0{Tz6LEjP!|n
zPT$q|;s~da@lh#@I%>Cm516JTsrXw4H9L>lB@~TjJ6nJio#xi+yF9XfCjs_Z6U2=9
z>zZ2z5L*iv2Wllad|g(f%qZGczV31rfT|@LY6YHNBs1sCAaUg44Spggw6*BU`Zs#~
zjcsv#=Xeu;Tz78UU=F`O-ALK&DNYb>XLekb7WxNNtkq4BNs-sBxp&>zc+c=5;G9pG
z!z|mjHIrxgLB80!jL6#kig64-(%Y6tJW(5}^X@epm*jF2C&Z>be#j0BUbxu$(FM9M
z7N~D-YDK5NUw`$#K|o^ga*($NsAXp(FqO<cFZp#9Y1k2R#shBn7u4<6l1g&iB<YDX
z-2l)@m*ntbk$ILxvaQk^KaKW(91uTV%#6NufOV%6o*VqS)$U8F)uOWd1D>9Eq33+M
z(x>5aOxvs;_)(x|O4Rk*(pUgM!9F%vAizCtQK^yzBs#;WoBDOO4mLXTPW0=F926!z
z$LwkveNF=83EEdJ*$c=FT$vArGbMyof%#aA=8<$=!WEpL?I(Y$AmNDeA2CVI)29Ia
zdgYmpog2g!@F#1-A^-iYdT#9>MJFBxdFEixu7FZcLHp3G9i-OE#}t%2YPVo~#5KOZ
zst5IM!DIg4tx=e$Hcb{Z(;Vz+*b3Hw@jxC8=cSxUH9t6hHXne66IA@Go<6u%Y$&lm
zoIo7TumuiDC3#2RUWkV0a2sUn_99Kvns9eY@s4J?ct=F<=$Je@+l#4%!!h5PI1P0P
zy6QZr;$_^M{2%o)E*t!!V&O|8N`*aI%01RQY#Zy}Cf@y$J2Rz?1F$t_vT?f<U|Qx2
zs%wfc%&C4*sD>F?c28ZV<#uj+r^hi4-9mlo0%*LB!PNIRu6RUb)9xt5>B>xgrTx|;
z+ZU?~Luh^5-bZMADjgjiUl!M%7WMhD?po!4$ufPco91ab|BHz{gJ?q+ac*K7IoN|T
zbmD%#UuFr4E(%4ME90{%qX72s(um7+_TY#TnI8L>$wDXh_yyK9@{ROubX!B2<ZpuA
zz)>bi0I2YtHn=Z^h+8|o7iG#KZwO;ki*qhR0{ShZe8PY2kS1;~4d299rqzE9N`9a5
z0y9i6BRbobP3{noUN_=z-P8q%_0Pe4M0I;JYhlVvt3*<b@O*jc=+u70Y1K)1lCXuE
zoZc7CCh9HZ+{%R!GXaTiPil@LwlyPFTT;b<)V;u~s#gbelfmJQdJ{_yw^74YoHikb
zpy6w?cv1mpM(P@$1^^#~(eZ?1guPWJfE$^qTlP!;5<yONhIQSG!xOe>2x~YX*P{((
z25M*i+X{^EOWN#k?08s%enP;YDB*`!o%ry#^Z{RCk^V7EO%k8x+z_OzM@pkLkuo%3
zn{<o*Ot`0PS^*XDruDk4kz>+HiK<xVl`<D~PejxB+zrz=lP3Qtn(u!n!=XAzn+3Tx
z5GiqN3*Pex*YDT}L0W~0GYVlt>p-|HEBm{-TaDi}#I;?I_4)bgf%KX&X3)~L9w1v;
zJxf~+xTpJxPK`N#V(9bcqmR5;_pM8$rU$#A4VhGtD}(QLd6%g1d{fv`mk(Rzh8^7Z
z*VYlfeqb-4t)DTD{mcdJ>2AiRi7L;CM^lZ|(RUYJP~nQ=Y!PxGDrC)h(Ty>q{*Q)q
zO<yg<7I*9@@c5jW+dwPOeeZYbJ;*c;T*8x9H=?$TpVMSUW$iV{98=W6%ywfepI{qT
zAs{ZC*8VIOogW&E5CMZ^l9de`#gzQCXt{^GevQR=4Vu8~`6FAzx;KZt`Oso7!ooif
za*VUf!k5A*v6QK9P1y9mXz9ki_4^hE!4WT6kwzUj=myQ*T;Tm)BGVC*_RHXZIp&zM
zYI_LQH@LytQki;?Fhx3GyAxEaE~9lq12)S(sc(IA_p+M7`222<N&08fe<~+!{iJ}K
z?zL4D!o@XV-M)U%LruT~uF8ybQllT{4By`RQtKPi6j^tzu&+oKctC|CEO!&D*hg?F
z1`eN$cnW#Ym+N=%w&v7|(dZZoI3_BuY+Kn@EvDzLfs%zM$Rr6kndhB@ZY-I5uW45*
zTr8A=v3T_>oXLy25%$!rV2SfximZtBqI@(r(ITxV(L{%kj1%UpLUi=i%zz3W`C_d^
zt=V-ztQ<a%uF<93og{R+P#ypaR-pERGz-pjA>H2C;&zSAe?%fZ!pT)wHAOOVx_w?v
z?F1~OOn@Ep$AZv`vx+I$?BoBV9z7s&>9FJEF}4@)W547&SlMW^(yGzHC0qh7qRb~=
z!2CH+vb67h|1xztV$?5)@~6!mspSBklV4~Hx2l}iC%ouf)Gf<m7mdwTj8cdsG&bW2
zrl*I>6G|ZOK;Y5<kNaW&^D`J@+nrdwY2>tM$_t`N5lS<5mnK|{9h(aCiz^7;SRdil
z7(sZ#>Iu8V)kat1xUBF;Xfcr0)rbK`<>S+L52DllDkjW=akC81i2%06KE?8P=Km|+
zzJl-)Z`xBxQnXll?=qevS*c0so25jN*zCsV=8Q$xh6RjW#22tX0-RtK3O1{ji)6yI
z_9A31JK3m1zQSh60R#_Q-h-1He*f^YQQ?>bjqmlJm|TV>^wN?8zgcb-=M*dL26<KD
zR**>kT=q!B_keu!aK>kXx66X_n6}$<R3L-cO;he8eZIoRelUcv@%9ft<rt}0qr$T|
zFafLMTz~lTsty6v4VdI3W=&*qcuYs?EuPaH%bV0gHT$AFJfB|YkhUn3`?C<YDwr36
zI~vF(N`!q>mejKYx9u`C23e{k$`@^||CS7SU$$h&G4>hTNgUKf>go{#ksE%fvswqW
z(7)8M)<i5dTPJ!^^Ne&8Ft1EVYz0NhUmGa1{bIMuHa|4pn>`LjUyoxFhb=bYYycPb
z`17+N<>W7Do%oXgddwrgo2gqYhpH}#;zQ{|E#WZKSV<C)UGc0JUTTt+QJoO?Wzv-j
zKO)Y`&}gy0zy)Q$o8Z@JC0L_@5)emnDjxHJUU2=i<?gfwFx^M`&I}VldmRIvjH854
z-D4jKaQ<{-LjVqMheisZ;V}dGecKVrY0|0vYnHS21BNTnOg1R*Gf1emTa;Ge0<z8%
zYd-~ri6u;9{&CC~O5yUiy_Bj=={vEC-H&UHzDmB;WEJN-Z&m8?opmyrwv*T?oQs5H
zoY9a)YUhbA^aEQFkLHq&qso#pxq+W$9n<_e(;ou2G&3m2GHMWp|2Q@fz7xqe8a!|{
zL&j4&V&u`*5Im`^2=+K9m;=jFtC2GO)G|-&kT;((6&{5Rrm{nz^nevRW(2n7MVY%f
zRVKd8o2C$I-x<%-8s=#6>RO-MHH;LCueJFbBKw>S6<^w+o$za^kv4U3{z7R10{RF*
z(fI}7KY-f%BY_`uCO{uU)7h6sTB&{~kDVfd!d`seSVTxPsr2<vDOzMSjSY*MT6Xc}
z8KpK}TNOX5Cic$Bs=I;<+yy5!dtv)FT@gn6L~R|PD;NEGX0#A8ZE@V^?Te@AiEj%5
zOs)};{ep!buh@wjI?y%kLq)Sdn`UA(=sQgP3@*~{RQ5!h4*pHK95`SbWeVqfO;QL1
z)nFN_fmPiSaAq!n<PQaLfEyODsP8#iU6}MMy%C102H|ycmpqWR+e|j>jk&r8SMP<x
zkwW2Q3Txaoo2G?peRF^^JfZY5yC+G1LLlW5(=rePAv!mt85tgDTBLghRJ>^N8W0B~
zp|~5y1Rr;9MTuK!p8UeV@L<iO>#+IV=CIINyJGwq8Zf#YiqO_hTLb|w#8U7HdJWrt
z+JlABwu&xSF2xck=}R0KLCZ2(bpa>z{tj3Vt_GIP>P$)fE{S3!K3F{ncpTN7O`yjW
z=x;(`LXsfOF1F*JQv347_*?X+T`0z*@~dd<pkb%e078d;AeIEAth2DaXoo1CB6|kE
zgs2JOs!!Ia!XY&=2KJ54^;9`7+Y%E|`S|p5XZRFxB<mWZwyrvy7<YX3YZu~lF@aDx
z;SAyi&C+Yqjs&x*HjxI)q~hYbjE%Ec+aG@(0u)1cIf)~3K*slWF`@6TPcD&Y^vcS(
ziXH)vCq=%+b%%<)!!Ntj5%eL6cz4jB7xLVw)&7+9d1{~lNKZ;WSyl=EN@|(6*6C5Z
z8|e8g25PfGZcB#su733zYgMtOf8l@}<7QBOX+(51LE1O^c)5Ho<)<hAn{`?zOH0Zd
z37KpkSph&~j}8@`f>_5r6ZhGSsK&A)&%<oJWB#3VDqsqHs_e5wn)i|Y13-h_Tkbs{
zv1alSi)Ubm%%(QeInwv|fCz>6qIyQWt=k;f^KYhb+`sq;*Lw$w#ngqIQQ!q1@{b>;
zYOxUEk3}n;4Y$ez5d;>7q7f#%WjD_w_OiM}Lm&`u_)7F{OUr5z?u-$^m!O;n(hTH*
zQ<KtI{}fvy^VN!Q9fF&Zf*y^auqTq6XrD+XNJ3PbT&Gmco2UgjfpCm8+KsUkxCo$K
z(A5s%W;y!Zyn*>e#v&L6<%{wl17X`97JSux7s>w?*++tCv!LpvktON|#{y;(KO<6A
z9exGE{YR1XARwmQrXh1u2j#G$IVgiL0$5zjbr;Fyf(GZSVlnu!2;j7M0kOUOH8v^^
zKkl6ocLm@n?Es#pi~v$73dR3##$cT<ZCe5RS$;rpbUiwyI;Di3ERvD6fs_ln*i<U|
z7>6Fv{51lpx9%yB(UiDFJg_MJBIjD{XO-7?K+8|aU)IasdjXddPX2m<Q$Uib7#rA@
zG!ci3K&U69<nr`vK^iLAe~Z2B{^Jf*bVf2^wJU+rn!G_%0FI7N|3(5l-byVtRd8L@
z3zh(dT%g14RaR~I2W;Bqmxll5Me)cx^7z~@d|j?Vu+abXyS8u6i0FWXN<op|H<u^l
zG%q5bI05=wAY_X03voc!88K=xHjK@js69*i10io~&~|fx<t#G_1KhpMEa9czA`x+A
z6^g7YZ^GoB6f}z;H1T`ooPv%%nyl>ls@XDA@h^NpT-S?UPKgPmtb*~b_jfiVvilQd
z$pL}lCuDgx6sxxDQ8E2VI1ofZz~xnPB)z>Z!qeF#D-Pw}4t2tx?rBtZJ~_q%aIo8l
zTtzv^){az+|CPxJ+Gp|?$btTP=EKA@^&3;4#wze3s6HR56e*idG7BaIOkNnkOj7V{
z*(#H`%9~8YBMv8kbWh)>nf&^WnSUzb&v>><@xprdM|Yhm%oH1UtHLno>1Cw;WHw`{
zG)__`=t7pnzA31y=6O3^bqR$pONd%bAgqrLAKiH<FN@5%(z*m*?QJ1s_Dsd+WpJg?
zG@O|-cD6scz@M;nG<81Ogf;2rOJgz3efmWDw@{aeZ{QeNSCItJ`B*0GE!iA&q}-X1
z3%XnMB<qKoMV(;zm;cfkwrXI}DzFC4!Hz~kwEuOZY?ErxeN{6rC|YKZ$4QNE4V2Zk
zuJG~RxW0b^Bep7#Ipjbntm8z3k9v~=5Th>?mryd(%D9*MZ9b$#pg%(YMi>m^Eya+p
z_e@)=cB;XBBfnq-(ju3P+MZ|#<P*FVsXd%maVh)Adk@l9w*B{Q!7p%%4wVyby^gG{
zOCXr;WwDS#wsGD3P*T<!5;8G6Em+V4Ao5D%khLJ1Ro6`*fhHmFb>RS2ckmF=g{vR}
zAM$Gg+ddAbbG1g8?W0{cjkeAiTIdhMLWGkLLteJElutte)ps2_wGX^ZXgr#H;qjO`
z7v+vEs&V!(;W7~rL`m=zF&yZmj-Dz~JZ$d1gWiAC$M|o@;g+Ahw72p1R+(yLN}ZIB
zY4oHat}H=Mn8(c;%nq4Sy-q`7mbM*DMfUNqZG&gm>i@VXzMl-aMg)bt1CoM!LyuOp
z^5QY_+m+i0T*LHBqMYX3YHDRX%WNn72a46ecCG?6G!b4-{yO1u;jbpgm~^8#Ab-kb
z(n%`|ui5YUTl$xU0Wwz!{wp#90B0+%wCU&l#l3XYkp<NMa4JDNyvis%qOZfQpj01N
zE_vhO9dV+aYF>qGra)Hg$Q5Y4L#88T?|y%^1HL()A7Fv%WyBFCJN`WxLr?0#7G6G_
zTYqoBy{c`U%pJi&o$XfZWzrY1|NWgK1{kAC7piB2iw9WFC)urg=jl)HeCch_I0SO2
zvy=<!3}69GmXPW<5fj_S-;K99Yf1_?9-nzDlc~Dop2<w0Ej(ywBp<2I!L{Lrwm0;b
zT0?s~(K*Mg<EVwX+3{nepTItIi_8>K6TgujevzkKhflWS-~ZkE@gn=%J)%l2e2GLb
zb?K;A_r}LQk_ht22TFx%VwsUw40MNB+I5OSUy@9#{veg7>c2KfZfiy$Dt*|=SwKW$
zI*YkmxhWbw+qZl}3|y!zbUE`3dKJ_Iog)Brw_N4tjE}mxxcWZW3iZwm%a}+#MX4yp
zGC#d}fmL^&{7fWVX7e=4^zew2{6bMFijAg%&IoCXC*Dzs4H}VuNLJf->QiZB^5Uwn
zcP~v%PUj7mKjbNzT&s)Q4ZIfDjbWYJsIvIJDgoD}I*O(n>0_0yrAc+-(G=l3TW}uR
z3n}dr&i(>`2pSm^&NmK98PE}2zR$tUM>`b!z~Cv-!(M89M-@@Wrft~0x)Q(0Bdks7
zbYKK%<7x@-?~>_f%wAss8J+MGzkySaN(88>AMVm`>MvRqP@0{u&@{f9nEhUcfNd*&
zW(Vm*iK5u<r%?_5Iu66bz}8ac14tx8>MXHz*v@$DJem7lKSnqd8FHttqP*FhBnMww
z-`S{Pi(8|AKzX{9RNaEHl=pJ~$EL)2mU<@C^#idzBt5+<gNwCP!lCd*P>}DaAi_Ah
z`qK}QeCM?6^o1h?{+f04%dY@=MC)A?SO9thvt*3tu$1st_xlCxa!pxvK1ZAL5k8!0
zev5eT32>YJVYUxY7QMFn-TG&OZ+@gw@0n}|r`nVewKv7*v8;nTsPJ8OQ$J0-h{9gB
zYD2sn(z&*luxsHAE#&5-y16fHGA!?PA%dCx(dcxnE`U4eJ@TW($_+cMO7CNFI>bf$
zm7+i#-9EYOjuZL{Rjx)M4IXQ_Pff6sSeyFsn1HU<`CMCj36czTA#PmUqrsV*g00e<
zC0~mTyy=Hk-_pjLGb=5<EU#1pnzSQTaVQAZ%u`mLV>lJ<SbCgq(`vZ$W+Aer&;Z~&
ztX#|aBwF~Bx&^b=0&)A?TrC1I9EDKFsWCV9v%-g1=2STW+ac+;H!3t8w2IDkWn~vk
zb~p|OD9pILwsMDHE{1)kU{bW<gAzov>s-2(n;V#e3;nR@l#j90-MK`jDMzjH5UQ#l
z;RR8~&=(`&a)8vh(qLBrG}wK_J4H+1RjhNl5j2+mF<*`;ZoTZ!k#LNi<LcZiX8=R7
zQzOQ;3NJ<wp}Lkf$XTnu?8(x?jw!+5@R{!a)b*O=w}+LAcHi1#wm~E0(9oR_ZBM?h
zFgPekG?=GXcPdP$?x+eU9JUWq^^?XPH*BKXa~Bi1#FFqOkz|Z@w2pI!xrhzd*K@F6
z&ZFysCiOX)o0j}^0@N9|dZoS0Mj_w&|3e`-c>uZ{k>G>OK@GvJ4VM~mm7=TE=EG|)
zdd;Jvy?#8)HO;@&az1Ri5nV$iuP7rqOp6Ho=A>XV%k36eMeL+}&v6529$BUru;WP4
z+)j+1LTi#w4sW6vrehV3A$>Cq;5qzrUxP$Na;minZ@N;B)$~(wTOplBvjZ~g*Fou<
zjUnXs*^}z_Tri%ySsWHYFX7nyJt%0>B&B#yg}~c4JP95Z=c94^I|rYJTbZ6F%TTkU
z5>%QjV881$3c^=5>NxWQh907@@~ZX_B)cC|Amhe>U)P6@M$YuN-Zy>Fd;>2FtI0Ei
zGvI=w&B7o@eq5M9lAcw91RILAUUGoX2x=^WtP~PbMW6auSAj|n;B*{x0ts2JOyGa5
zaQul4svl=P=8R}HQl;1;H+2rcprUcYnmB9E?ff*Kc&8$C5}cW^fd66D_w~L3zR?+h
zF66Sgmd)nY3CYVfDT!o4CX--F7hCIUtU`WwSu^c$sale19_=`kkL}#1vj>=%PTLp1
zHJ3EjCYw0Xu3RJ-ri}euMpJT7HvnreF&ixPyfJMj30o#Q73WnrjF1LsnAj>iirV#P
zjffQfs&^3I9Xzk1Z{wgbtIr1l*Sqv^!l>Bo2w;~m<Mgu=ROTs(49VarBp#vkz&?Ta
zAeOhpv#+GAL%Diq^r1*vqCp6{w?A`@oy8&Ab-AYX6poNQpqqt$39xJqp(eaaNPw=H
zXBKQp(BRCO&V@Fw;OFZQJpC2zBhcdYD02ef=()nK6qqx$c)LVPaH{7J7$7!H!LLLL
zL)u%?DjZ>IjZut@E5u05%z^T3j4fO&58Qijbl<}AguSD%rG7^}^*d|8O`wr=*-fci
z3J90|5S>Fb@Hf2gX)NQW=h(45I4EQ%GMMm_z|Ke%{>((Ax%P)2)EFp<C-+-xM&ycJ
zB-HBOhsR^DEAC0ZFUt+t?XJfLaz?azSi!=HhFVvqmxO8&-R=bnMvzhXH(9P9n8l1%
z0i69+{0|`CN+(HA7d9DpFnhGDinhML$-RE?_VGz$%fWX`>1)=!j(*7<sxf`dwwx9m
zHpT_6xA&6wUuw8L#a1S(2Q-<E2-K{IvOyMGv5~1C`_Y8fWWPO;J~DsW6H)tYfiZ%`
zuM*L@$nbIeW4UKb4*`pI?M}mdQr`^Fq?Wt;+zF!F@!2{9KfW^&(4}BgR76QsEdrQ@
zt^;mD{M-$K$(0&*leJbv{hL6$g<e~oG|_P2gh!-a0zi6rRCy`#`n3}vt4>($AMC9g
zMdW#p_ywm>*T{;QrtQrylkt>sdAdT8Jt7kHN19un+F=d#eL!zdvGt$Abde@ggx>Sq
zTs=_yBTWY3HLqg=<I9mG<wlRnZrG$wPf4I9_Uq3o1KjJj`@GYn#XV*;iF>0BWOxNb
zCBIl0rLxZ~I(Bd7S+P84cbgr=^tWvry}hr)gjY?#7p0DDR|<U+%kGcmfrudeA!hkO
z8Vhs%4?aCZK+j@)k4a#}lUPGRyla_d^+Ol#17A>c34+y(ckpR|N2i|%={xN$B4wkL
zT!8@f3^TfpG3fRlg5hBn&yjH6xu2Cvp6C*Q&Q2VPFX+Ov0}k$OJQ5U_K+Kw1y)hM>
z=~RfvN%af1C?%#A+7Q+#Y5Vb67?ZSfE)45P2B=>a!4;64k}=3;8;gd#QGxk~NSdY-
zwfL;xJTt1Wj_u63hM?I#-VC~_PCN_P>Ujbos_>dx2W{N73?a#VF*eL?ZtH~34%vjc
zc|xDN=64*1TJefP(dO#2u-tYVk>Tg1|3EMZ;7gfi0?;2&g}6EJzGUrN&ejG>LO-nj
zHngRz^VRTkimE&R7q;IQq;kUvGo`fntnCIZ$%LY^(0rb2xPZln2;t)g7;It1w-^x`
z<!bib$VC13YtD-5NXFo9yTk_Q8;HUtI$cYs64oXt^oU!sD9YqkfzQF`EXR`W<Rx8E
z|BgKk<>U5X89XRd$6JaMXc!TESbyA?Ld=soHYN^IfoGL}+tSqLCA>z*ySh@m_)`VC
z6zkV;Ht68rfS;We%}&&A(25U~B5VyrSsi7C3|!N4g8)81?D2ksXC@nbfy>M`K0R%o
z=b<h}5xMzp1_yncRt}XTHU#ek$`&M17hyvmW{_RKy^Iib6qjmP#N&acT^=Ue$Q0zq
zLr2D8MRQO6mNyJCbcU~jntueQ_tf@f%&mgth4}5Hwm5Z*(b}~?`V42#y5qDD#QxSu
ziq8Fe%f-2**?32>+dk=XAVxu7`AL*piST6+02qq#usCvSg&EX?f{ZOv$YGUR{z2%6
z+k%(ZoqnI-p3}vm4$|V-?^@}<R&ybo8;94l2EyN@>VQp`LY8cIUAK=6SdYKXzjL|n
zGIy<Ls8?QZ{5RddHh($F8{q8d#@Q5N30CDcaBJe^lLn9hdtq_~6Soz%=L9jr_tGC;
zNo`EG_#_l4UW2Es7}HSRANE%OU&BRc3S&B?h|3hqGDqJa?t6nzaM(LAmf;_9RBeQ{
zhC^n%Q>r35R^%~&wp3LNou(g_UmnMc>x_x?NisnLaJCnoH2k&?{qJh@$5)S!EI#|H
z#H}A1%cbJ|+m9!S_sWvS+L62RSu~`TvOvg9@C{4&ho4;|`2vA++0GlrVrY|Qa<ZMu
z2m&RB%e`RzCd2DyLR+ofT1|{FEuf9{l4jjdzoJxDGtzpEpOG4r_(UV&-P^QupZmoJ
zBkM<>QAGgfus@|6AM{TMl$?3@b4(?39w2WVn*x{*yIt55a0XE`?Ii<r%C8yKW!MvV
zMjYu*@mo%2Ax<s~h%$0$l*9_-GlE#)D^KfL8wiV;#G7VXMQ1uXd!lCGtvA)7vkH<z
zv8g!bU+r9LyO1e7oA9bd<%NmW$<B{8bf7z4HT=dBRa=&|$b)#_TxyqxaeK;zljUOk
zy=7#mnun~EEBL8ze9PS1+(bMi2W_>W&Kx1!7|a}~!Xl#XTxM9oA79eJ4a392GTJ}{
zuce5aXFg<AG+YkI>+dk}s#Q=;*K>*YOe$Ha(x>gq0VQfYdDF~!U;kZb#RK`Ujh&a-
z1zDt}IDI4HcuVi6J+&mM^{w<X9=mzuqDB6uvY~`O`)Km)5K@5wA?jAO)DzrO2A7+6
zJbdHiA5nn<y9U11EH5FG<#*3CGdaY)7TLmOxjmp&!Eo2~WJDgayti4jiKfz^8N^fL
zY9%=Q<<-r(a$4;T)enR^j&!E#|C?`O(-U5NHCm}eV8DX<+IzpiiQKc2X14eDN+E7x
zO8d6qE%Dn|`e$0ZI4CL*%glAD$1{8|n%cWS?g}UR{_hPW*{{#PgpDMt)^lF^T@msr
zTFqWEQ+$o_@Jt?W6}BCRjDlbLyNw|CVuL8|5wHdNcpTf~G~0lKGkWtfd!=U9oSqQ|
zZ==Wx;d)+lb2#=pJ8D>H<P#d^T-S(B#$wuk`)y&@u=v19Pys7RcL}ES)tq_WwSfS;
zQM6|c*b;h5vU2K`gfLppt;KV&U`=AI;>2*gGjnC>_w?nna{`44oE#2wnI~Iz<R&Fa
z+*)*Kq8xLaiP6eB$tRG85o4-3cF7~1Dfhq5g<|@=Lg_1OBNB!wniUlHIC##3a55C{
z?7PtjtFWCEx$6J8;4fOWwP@qC)>4TOcg=o$yM||6Cu2SPGu?>K6WPA#6qmnUY-t=@
zN_@T&yYX}ax%JcUQcRC1ZsHf3={Zs~`+oz7>zQod%MqKFAz`(c!xP#=IP2C;4P{&Z
zA^+p2@F+7T*wqT7?NBPWG>viU+ny!Kq8DnXPT$Jn<GqwV=%^?}P1S3)S`Q&Glu1+L
zXC>YM8ANnQnp(PmwQ8@O@Nh{hU5VN^1?d^U+%#hzUw=hir>?l9P!bs<^t|4HC%4lG
zytZK**TNt^E@<y~MD`>CSS~);+Si(J13#Vry5{Jn-G+>S=?~z<qnSaYQhLoI5_9=-
zb|68)g1wQa6mAg5=WVT~SX_BVUX<D5K(u&FtLUQ)qFwUW5u@-Q)z#@}?i7dUEAA53
z+J}`DNc6zYZuHOjF2x+6ajcUi#HbrM;pTkhi0B#{Y%UN6D8>5V&IMGjrdfyQRNg(C
zG9<>N2ntm*ZPZ8l29YEg_ScxIME*?9gMhZVNZ)YNR`kq9BMdi(_woiS_4JeYAc#u!
z4EB|6Q5rHi?6=MWD&~CDeSwIkWG?sMW3QF!H2pr9E$E=`nGx7e(T5Z|H~pbudqsW<
z*rSG~p!bg=KDD2`ZWr@4jiWfDk`s2^uPFI>29a^Q^OsS`PVCZ<i2;k&-(lGaNJxfb
zQdfYK8x&Zr_A_z5vTncvh5|OA6bb>l`iqT(t$i78$SgLYZ+Rp$J#P46aL$D@$pMQS
z8@&tXWHZM<aC)HIhCu0-gWqRl(bq^uW9Ik*#ehTeM)!`Yi3sBY2B6Mpvw@*&M=W;(
zHV833{SU$JSUMcb3yhWsRhIRM^uqT{%qecW-N;2ow4ZIY*!u!2r#!>k{L`CAb{ZG(
zOj1+)Q2RWLQuhhMlc#;)Sfw_yTuae@$K-s)-o{~Dk<AW6qkj`&k96fXQ3G8+mch$>
zs4Zf3jc+qWTo;IU1O07bzxOO>M4BUZl~jw5ZmcWqow`N1vVVzCAbd9?Q~*#rST-5z
z&tS;LJW8TJukJ$*IzmZIBstLE`rA{s5|Ax(c&<n$*X771(*}$<x}p!WaYbsIg~J%S
ztp5*RL;Z;sd3;xyQa|w?hSr0l3TMR4MjjFYAveIpad#oH+N`6<*fD)FX>xRK;3@8s
z?@hd~+O{KT;_CR*GEfOR7JZG6$Dr@(GQg*P8g}GtW-}#iAAi_Lcc8$i{T#8^EVR_B
z73pR;bPlX^*h8!h5U1Po=awL!!DSr25fiaYCmZ9<lPq`v6f;^JZXr{fP6bJXQ*Wcn
z&}g5;VmK=eK0~Omm$@v{aGEyGKK+3t*xbIj2tLnCEi@v#lHVs;_F$i3g|-}M^l43c
z2~K1C_sdfOVn&~+$+H@3&6Co16h__mI4ZR*nNeH|bFUHEB}~{)%c!cpb&_-32NCv&
z#+lME>cNYk+9Do^K`GE=3t?furlV)^`qyZp=U1Det6ZW8x-PX3i_~JKDv?;aziW9P
z_;b%SG9`+!@G@{{N0cp4gopC=7;rZ5`@Qvj>Ol3wunHF7oXUYBIwQe1n))eL+rzSe
z=mu&<(wBK3LFAxjxsT?eY2-kx4Z^qqqyXao)#jE?<YVOH3qADS&LR~L`oDV`%i!9a
z2-BRH)kkWJ$2Xs27MDOAZX7a4)~_*g(ywr~FVN|7t2~W3<RzV$A@2x#zUE8pNVVB5
z%E2~;x>y`4a<K~H1_PQt;9=!jDDBMNfuB^&ch`UAY^5-Brls!%JEJ+1tupo{13|O4
z9z*R@iWXwxciWP=>I#7O2}5*<enz3Zo0tq7*nrTiiD%QhzDDJ`fy_2Va~kRp4f;~}
zSekFi^g1v5KI&7_k>a~WNq*$T3nMRiEo*e8L0QGx8o`-iFG+2!Y@6`luq10r3SVO9
zPjRX&pKBHB>8sZ2-Cns|Wf%&4Wg?Q9q9rHmozC5yei_mJXy9kK9~wd@t94~fd#<?{
z{}#TK_ln<qy?L=Q7p0hcdRb4#nVSQC*<{iu5cefe=o`D^KvPd!D_%y1N6dokx?O2`
zU?6SPZ=;;9>e>~f87)FcQ@BAend%daKCr7CN$spTT{%|zGVbnE{0((faS%LZx$*r_
z*!XoGxs6b8SCd%01FEVlLF=>fwSM~OPIMCk*cdVCqG`Esq6>i=M2$YyWG)cKC;=OL
zoOWG$(uL+;{+!UkxF2{eZGG0z&<&oJmQ6{cLGx}(cYwg4-+(Cm3$OW$9<!!RJZme~
zZ=%HF42$W)$9Rnc{8JGP#7)|k^zgA$e>Ju~%4wodSZH~LN-v^KQv;nlYR*T=>cNH`
ze^w!s=alowNDwFL<|!a}M{?3v->zU$z(cMIWztm^d&{T}ol%=SS=!SeIIN^Av%Y6h
zy|vptf}SVvL&-l`m{zZ9YPmsTL(8?l3LWn0ttz<kB_f(QHmLJ?)MVIN+raY~yuQ{`
zZ?QE01s(Z_EXmQ!vY|l3TY%mb;&X(R-MkkM2SQ^k)^64|rkdJ2i4@!ULg?@#{>{eW
z;7uumy@qeQTIj}S*?Wcb|K#KixuYcIp96e=W?We}EB;lLm+eU_^ov0FdH{$O&Ju5{
zV7DPOL?>>H{%%^Cg>UdxvYx^GBvnAkC<J&qZfY{z&iKjJdD-S5&~%@CnC5b}ix3#m
zVdHEGx({#Jc!RxnJ6}KsvPKnmXhOssQ8x&=$E}*DPmHZDrMJH-A18QP&y?ON$!x+1
zs*gK9A+d)OPe01W>kWt+BW*n*O<$t8hX2Ydd+u$9xCVzso#574@1KoLJ~VbQS~A2Y
z?Iw?HAL#}$s1Vd=fP__7IynO*$4d|pJ&`Mbb0I4nEQk)*R~Z$>fM+^LK?DnSq^CX4
z)^If>=e2EO)YHl|e^N@)1ire&$K8p$3z+HoruFsOEkg=j%Kckzg0?&3jejFrEvfd{
zCDTqP0}CRWS?YSUX^s{zP<$%9zfxhjvI-c*#IW7*)35QU?^qiA^=t4(--|M-l6+U3
zBk878&E1m}xm8F64CiDpZwe2_1~p4Mgc_zdcux)R#JQkn1tet1#`nk?W2F%=@XxbD
zx#L}Vpsm<mWUQnE++NjdxtxALwueU;i5Da8>{V|Kvaq=$ZdxIBy}d4fhwT0@Q>Zxz
zOsuvZ7eB@@{gS(49h=_nNWQg?_CC_>`<sLJvzh{Pc~=749OvsfnX{k@T<eOY<@58j
zCd|V<t(VoZvqGhAQ_an`n98`Sk!ZqEAz#L<Dvu%lC?=IS4}e)a%J&rXwpK1JBM-cg
zc&GPmDDJYnyoIqc`=`!F+a9?2QTsb){t>Ib!l^4PDK0!I*VfjfOcB5GqlwPr2Eb!)
zu}dEeJd^w{0tA+|GrnZh07pQ$zl<LJ?SM?!4VVe|j(+E}LmkSy;yWK&wlXFoGjM&K
z6eXM%-x7p46-?D1QO->W;p1$b<Drri$~^F6-FFK}PuDlARLwRxEwzPnrG=&S3}5Gv
z%AcjPI0KD|14uBVMS|9LrlJZq<mL8ed83ON{6)K6vVvjz6<yTXQyVeb_C@FI|Ez0=
zS<K63T0%kC_*~FZzoCTa%_Q39KdJ<>r=1zbg47ESEm##;scB4thjt$f;MAmJde(C7
zHAW(aggSEk8{d-FvqSHNf63T%HW*S;A=r%gDEgRq&#`xXoc7Hw%4!P1=S{7I_br7!
z-G+G@GFl~SG^OmFNW_#-lo|UyFb?PlhvQaKc~~j#J6R1O1vbvi&~zyOQ97gqvxoLy
zAE7mNu;1LN+MW0%2AfjXa^+4XE0mVW=wK6M$rG2Jkp<9bH5PsP*Vk73=GYd>L`^#&
zBTb#!aM*u8Be%3x*(s_X1LXi+2IR{GK0PSygrermS56QHB^vcLUX+F=OuQDi<zdjj
zB?tq>gPtG3{3q*P2NGqef*pVtza|SC*9__N&@`dBqj7~xJc9uEupu(__H7*vkq!q1
zlwo30*tp{$;nTVVYu`Ok;X%nQ$SFq|!JBhVY1S{^LnC?}Qfy8JfCXywiz01|e0Iq$
z(}*TfA5(FyzK4klxkl+qe4sszF(8XLLCy^dV{W-g11mUR?Q6YZ*eCeBF0<V-Ad(Bs
z7#JZ6N_^xY%d)izCP!VhJzOHv@|o{{DcB(fe#voXN(;zai$fSW>g|I%XF#LJ#Hg|R
zHZ{doQ0T1_bq)<kqa_w&$%PZ={kLXlA|yxkvY@hLklehYHV^^E90DBiq=f&sk;Lif
zGxD{+SBoJ0q8gNhe2%<~eeG6pLp4dNlX1A?$a(F+uTFHboO)S2GgSu8lIUu@&^y~&
zKVG)_w>f9;yHLijpy?kkW#T*&dM-SY%fjVN6Kq~^8Y_Nq%V*>wji4}dTZmz&kUekQ
zzOQvb@HvqEO;-?yQicYWZ?p;Y3Z0yIU9V~LhZ*Rr&a~7jE{9xO*PH&!OHMZixD9{R
zUiWy`0-o_tWCV;NqWcn*QjrC)jlkPk(=)y^roltbKQfQHWWp@r>w?V6-tc|e)@S*4
zF7cQ>t-lYqS2rl4?V@@LE?+y8sSUsmX^d?t&XPi~NPrg#zLA&x^9>(5R~3<o&}%WG
z)D07N_`}Nm6SJy}ARBQSp5YsnFH%yXD-Gex-sAY%WRA^2<{QYh!gLuwk9Z4vJrSC$
zOh?IBzFV|`!9rdxRxDXii;POOO34pK3*!}U-ub<tbMn{r(~dqFASxUHQNy^IWppH3
zeb##4V&Jt3vNxZe&I12Z7+vpsvxQ#q-Jo-XT>Xz^+miYpW!wlNs-}PF6t;W#DCI1d
zrEEM;o2;en^ztl1F2!^u5M{?a6!AuVo%alZ+H;Zhov>swMxB*eshWnYAk8FSQfPEl
z?1`mC`ysySTf|}VH2gXH60e@gLPfkMGZjQ5x#xNT#y1nXZJqv$P8m4cl`9iEaU!G5
zqKB@E^=TWMc6ns)jy3f{sMu8C33dSojYCPixjwbV8$(jxx+$(k7cuaMk%k_gXZZ*F
z-+oAjwQz&^8B;V$3^TB=s&Rp#hws8}E5=!ae#qb`BlII<U+}9?S#)E}M1_V7SJj9W
zEU)7Cc#Bhr?@1O`uSZk73oTVI?-KECTqySKgqt6{I0!#CDx9C(gKQj@L08d-u0ib%
z$8@-@VcK>WHjVCBY72@4w{`8NN)>GJ2=~xV*G+jr_-Mi@Q@8uLFZP0gLT`fFaqw*x
zVcy#TSn{jI0Qkq5F!!h|y1Q$7Gm3@o3l*I{iTNKR0FR0|P8ihxS1RCyWJ{lepNnkc
z>LWc(r^sh~3GL9Kw*`0tVh-Pu7WzdN+)!6iq@uhnw;uA#+nn22_<TOX&n@B!vv0W3
zF#ux(IPp4X!fV@$ieDR=86gxAh!Yj6%67xMnZ`9%Qp_?2LatYlzGHuak`JNivYABA
zs@3Wh9XrC0t@h-N4%@bIv??ragKl-3^2d~PH%gi5*_=3qG2+w4@{8bBj!enE*RsX4
z#(kp~WuC1cVyoG*9WG$d7Ee5N;j2)9{|MIC5my7?21boV^GB!hZo@}BeYVUl8_7{A
z4}%GdD}~?WPjGM1*XVE63GU}M1ExI%-(I*)6#W^C-4x~{S;RO=BegvJobV!Q3xgB1
z3iQLXRj`IE)!YeQbZ4_@zJ{dPjxO|t1FfyrPMK8e^Alig=2Op{`(C;PTOniG{Bl{g
zoYtOa22XeV_tdJpv;7GaLtkUAu~e2-eIaGR&<@Cbd$`rWfW&NS&W7DyyH-8UI9Y=!
zG4gE9g0P<;Rf@>14W0EQhy5%M7{MeMv`xYSksPDON`>5J<U<qi9zim0G=($8PX2<~
zMZ<DIG*$FC$zBtbOaCRc5xs|#_E^~VX)h~6b&v*y9gM^~=JwqGF_~xKxS3pFEWpOX
z*R2Xs#}o2iWMQf0!YI5>B&E-Z#ZYZ`xKk38)UxL*<e}kbPg(Z!usx%JRvIVNGkH>{
z3sY%m3GvO-$<LH^ND_xcmuHB)IH{DDtTD>NY(m(Y%-#wiEOn6zQQEm)pY1>nSoS4~
z7wmr?LMwY-l!G<}z!D(!T4uFN8=JT_DSIt#Z(E(9BtM3hqtA9N7mYWKeLFk$_M#@@
zxWfw}Fc*32vKJi;fC$nK(-ewDOw7gZQ#}`a)_H)3f9pZN+<&u{dDO>~r^6mM&0o{N
z!=X?%$fQbMkWO7L&m=+uQ0{QB>dpbNUI@4k5DegDZK<5ox~He3h+XpQ2;EM(v-S4O
zOU@j~nZ=@ejP6s3$@b~-ILt_4AY%*%8z~n<hQi_re_|1X%M0nGozJ6OmY_^wMX}Gy
zpxGD+yjyijR~Po^1Mo;SMA<?3@UfLiTVc^xw%ZR;&J%P7SA3YZKM^e$yktz}?T=ue
z82yKwwTqgoi_RBTmgp$JWnY&k&<s%#n-u9aq<fK^H<i4nR|^p==zAh&(;hvvGSV1m
zRI0VyuAq@ePcb$WF^e)zB|-CO|9^{pFoNU{2lqH>@owCqkUhFA6#8?OCmTZe#3$3h
z__hCyvRGzegRI~yIv5pbq{=}1yt<;GmKmkHWfHv5afAyWo7=8B)v8{&<1e&Q+QQ`)
z7|5z0u)MP=A^r=PU(zpd^lAPafHv~TvObvQdgM1#KfvxLYGoGALpM^q6B*pj5UleB
zzc8xwT5A7$NOGwXOb1>nHZpNTcR`_f_|sax4JbA(0U$v;6X=&RIN?Fd;cX;@M2Dll
z?Pj;C<ysa{9%z8_JY<elR{ZWz87Nk7nKa0f!>pc-A@Q2b4n8*nJD_B*&3!<jU{fNk
z)(lC-x}DLkq_t3;>PLR>^wcs|Qsx-jg0fnB?_bV+Xn<QAt~AUx+fv}5llHd+8<YA{
zifv7|z}1*axQhB5Fmq1Q!jB3wYhkCM@OC*HAZ1v7CN<a2xal%*I@5<9>W&!r=MXeI
zN1dAGA{>k;H*4zVd;q+UZB?)-hnk+@(3IyqSdj}W0(H22^GsS@>=nlzSL4x{`FG7Y
zSZ9Mxgz<CagdsZ&vDsKOJ!eqQD^i(}bC6TueJ3Fwa3p~XLMHi)_%pAzhOF1jkF}ow
zK96fzNpwPD>vU~BQI@-7mp=p+JciE+JVS<`iz;mxk=gpmP&K-*9cjnX*H?0F7XS9P
zx9!XC)sT`gK_Bl($MhAYi1ZN~Kwp=jLegY*5ToiGk}mpX!4T&)&tjzx06+lo_+XUd
z<D=Ddz>%Ur|Fu{|>Y^QZSHac|9qqDM6>0m>2+YL($+p^Uhv>Lc>EzcHM6I6yyUi&N
ztT__VQj__Z@*y_U{9G)qUWczdI?Y=j=b<ERWM%ZZ>mK777)a4GYt^P>e}-eXCXt$O
z9J?7z&~)z-(?row+Xd-qImqCNTc)f*x+^tA{0@m0PL%N7(lXiK?L2R!=Q6kbv1ur)
z<>B`kuTw*KiTP|5C=gXZ<~4f+VA`pm+TJY_g`Cgn!f8Ua8j=nacfX&4fW?oE6Boiu
z(|84sI;Wdv(AELlC+!$rUFf6{F_@PgpUio)wbjqv-I#xTk^(eZ8;A+D(xh4u4*{wW
zBq*^rt_usu=)&$MwTsI4YH!4mEXhn4!S2SB;zo|KedH<1aiuqE??2k-;+S?fv<IT1
zNGgO?I@%IjJ~SXJOvNvEDkG-S?A92NvmYHA#e$BXv=c$3oUfY>C|QZGe~R_gU+!l4
zkvwsqY($Fsk#0Z9Fd<O44e+9rJ6GZ+j*2<aEec2Ns@ZxgGfbxWH52S@&h}N;_@pK7
zRz5-n$Vt%iKM0ykb|+?#LF~?b^3ot4xue=l?B{?z&zY2jr<x?sN7rQ`J$j+0sBBuI
z4m4(XEBez*J%^FY>YI;4M3hTq$tRWq(rf?{PF-5AX*fsTmLxXoP3vDay=X=){sb_(
zVm#sa{(G!)j-XHANLJsMMi5eA&2uN+CwC_|O8F;hahZnbQ?pv>w^&ooXRFnH$+4~6
zJv520f$OtcpF{5XChcbk1Id2R-yf;KG3bmlWH$;Jw|TQ=*h&Tu#CF97%SHIc5u_Pt
z4N|6UOa~gvgH)nqH&#P~6q0Z3XjcXc#7%bkP8Rf~(1L;9vf|K3OY~kSJH$09K7lAm
zJ1cdI3^6T;25B^xg7;TC>Q)>auV(|1O25S^&e9L@MdCu85-t<r%BnT4vX=AhGry|V
z3$4MX|HB69#VfCEx`j1v;9dD_c%wlGr<OJ9J%};6B?am=IQ-geP!&4zU2Q+Ft`PGw
z64OODllTz}CwWGZu<IzJ3c@vEM+$rj#*&`)miags{eiUp(3RQ=fz3n1NJOOLK3@vA
zsVX3Mw1tcOldwmBpK!cDf<LH?KXDN~LPLc;!V;QVDzb)0j0Xs3ijl-8UJ>G8eAcT3
zu>4^4&ngq3)6oD;Y?W3CVS8`zEmIVMmDS?MeRq<dj>o^a=(_jrC}f=4$n(yoed1s7
z;g{Rw&JADq=d0ts#h8G$OyIt`t)dYD`I?u~k=3&AgUaoAK@<*IZo+m!oIA?AxK$F5
zH~-7*F>Gf61an-yXi_-2{=Po2;7*L2<=WXqd3Ny+M4i8sjXSt%`r2Ow*D%z|8G(U-
zpr=!NjO$qyJlkXiFEg&6nB}YQex)0Eo9_fvX>S_W&CMkJ_e<{|@sX-JMqi6URm5Pt
z(cvB*&975RQ1{aiJ~~^UuK7A7=bG=5F98&dlAK}0*2s{+`=#&9)hPC8Btcu#v$q0K
z?BvbG_ky#s$Q%O*W9%0iE7_s)ZblEMOjGqw2u6SIVV2cO6&qc_5J(#W;szfp7i9R~
z!e!7{5=~uEc-_8uP;F|1oSog?tUCuhjUcTa(Y;Jk`_ha6v5T@km;NWE*U$yKyeWo~
z?NV1h)Nm4MIMKby#Lb{>39}KLkQm>s{b7a08k%Zl_rM-L4;R08i;7o{A*j?v#(!-T
z3^KvoEji?0us6E<#`FiL*Q@5M$&n#DuZoH2L^@+dkMc_g$$KJh?-g3El6%R-4idj*
z5LOAhe26}<(tL+Lz+!z>GBn)k!r7{OFzl<n-lzM>Y>hiU@HJWrNn>_<`~@j>eP*ub
z`t}L28y)ms`G0>z<6QT9ozDt@C0V>Bc5uQla<TjLxodPS68%T{h&L^AX(Do69T;i?
z)01wxUIPS2+#o?yE(AE2d@z&HPRZArDu;eFCQe&Baf9xqsK-G{H4dvYpdr+1S4dNL
zH`;xn6+vy^(wC9@?~>tCp`ZmO#>IcOHvn!#jg{b=1}1GAzy9R=wka?_paX@wX*y(q
zYJ;c>et=w2<GfbJchKNp?hvwo0QxV*XHX4_XOZ4U-UBNElL*fLj>onJp)KdY1;E#r
zEYdV|0fmFo<6=(P>MExc)sX}pRX_mb68i<INW^iZy4gK=yZQT<b;}>L6(Ta#OhL8+
zao^;Gc5d&jUDSZETb<4d+#X3E$h+f3YR=i(#fY6{$LPrdCc{GDFm=`WSVYGy1p1i4
zy8@0WWXS)vH9#}P{C5IR%>(^*a(~Z}jF3#n8_zv|qU-myGHlATbT(NnO{b6HeLvCX
z85AGq)thR$VZqW8;^n>vs8mI_LOMdtYLyn{@Lnw6NoL_2PFz3P2Ss7xYe%V7sk^@8
zJnv8wZQEbGpxo!ptV&P0U1T<QJ88`VSquQ_x6%-oNV2=75zyj;gp<bsfUeRld$$4>
zfi(V~I$jD+z4$vabSV~*s?p9txamGnC(_)zZtp+iS&XTvc9YWyj)nTxv)g!Rjx-V>
znlu8rCh~ENwj40y7Iphk@Ry@ikGz5`u>_(DE}l6B>&X-upankPGa?=v_ZnZ!CZ8cT
zl<qdepY-Yp5#i$dal^_s3T!|9Sk1`tIkJqL9gMRHIrJD3?kSy*IzSP#*1v}Va1FP*
z&-loH<D^}ra!<PzqbBAr>l&vJv+9!M*Se)mw^6hIa|(jUnF$~DuQuZ9|FK9m{NNXv
zfT_|V$}l?yd`=}S(U==MI1oCw{ql@4`eVB&%{cWsUHK2a6bxMzAgx~}HGpD&QIVk}
zcZRcZ4~q>)Z5;hR<rX676wg?%XHyz=M;tOBz#dFvwl`Rd)MC^|5$<6JjY{zUT-Rot
z1H--ST4|3oO3gd`C)KL#@_7{n@VOy@g@P{0a*F{9a7vFQ)7dD3KY*gva7kN-A-&Kp
zM>xO$W8Jkki4=b}1fkj)UV4!Pf#P3y_giod$}&4*mG}kII1AGN{~-{f_)|e}sI0wC
zBr`jYY7)23GR(7=zMcaBhkvB*yUy;kKiRl(4NmrbCM{1Ccq(Md6h|`EioHFo_g`t-
zi%Syjs2uRbF9Z_&YPx%$qoMRp)j%?-DMT#>X^NA0wyUcoOrg%3X{p*`CuQ8F?~E^S
z()OX#CAZZnL-Cbw6+iZ>cah=7<u4k|-M3G?X?P%>VwX4Q^N%b(od0ae_!fcp29tTN
zT^JKoQ0y7B(3am+q!1<1^s4K+h~DgBDu*kGliq0IfUq9%YYtLPF2OIv$ra+5`@7X)
z>NT?dp}^-Y*n7zQ$tWFMIwLI%!p)R5+Q98dzaIRegE#fDk*ct-$7oJ&0^~ue?pO(o
zC>r~HR=IWeul&sIoRa&5DOdZg1M`%LoG*vr(p*48$%5J#vSPpztFpnxaO~w7g?3=$
zboaU!ys1V{0kKoUxr1><qkm5PI9=wYgmVm~)2&eRU3vfUG5;NcsWyyEeiF9)l5$O#
zB6TWQnezu+&G*Nf<EA()HSAc=%#$aBPtUdDuIni}T!WmWPoLapmF-UbEe)^vKM#DZ
zH)#PUZD!WdVv@hdAwW9H2dx#p!#S<XD;A+dg8_rtB})VyZAW6}b>?Ewx-VGwEL&EA
zn`E-USU__{Rsj1%Z@CEW{pZ4ioZK=v^eQvOh1ppf6hi-ACMLLbg>jtOA^!kHBxd3>
zN8d==^9v^InahLi{R(1oGPvu4*hB{dQ^6S{fEfb9Ac9POZ)Lz$a6(~;Q*TdutWToR
z#K~v-c<-I4mt5I2=*9sT;Z+D3x1iEuw^u{18wHx0k9M(U@v6?hS`YX(`c0E)A0NFk
zRtQwaKB_{Pa+p=bpE(vhd4VB}#)mn%;R>S_f+8um+J;_rj@wM$xSAP~uaf_LPTs0r
zbC1Xs866i&>-DFtLK%p@beCOc?!oG0!RWXLdZ-mE16*;(H1)Etd~_+a%POUrM$ia$
zs=r$nZ~Q<w1PbovBGgVoD{7UOM#&=Ay7ngnBL{l>rq!$NR}YlWfdm7to?Y`6Y|apc
zRova;1vQ=Jffpg51{ttjZ6U=uYA-+eZt!gn%es5Fy0wCg!)$Dx1>jpDLZDab`YybX
z8%kk&^i3HWfo!8_oRgBT#>$c{Bwo-st=*eNqui>*JuOV$*$UH`s?G+Ziv@D6Wp`o?
zNz~YmmF$2OuO`6`ye&j7BZiCmhtH4E`T4JaKd$gmw3M_H$vQx<74NkO>SD^0KH>YB
zNPuSe4>Xd*!F^c}@0k{wgWNQ_;?h;pUi<%$sWWzV)awUb#U{E&zM-hKKY^y4P|SMo
zGCcB`qC|NzXgN?lI4O-?Qm3xKAnvW2Ci|>NtpmmEwHx}mlF*vY7LydO5-qJ<$4bxx
zg>CpZX)D*YAh;&}4F%Fd3A@O+jFQR?3|E><w71L(%Ie2DbDxRuE7Wy_2~6$ss_<|T
zd~U$H7L;D^W~}{btv5bLZ>cU*ssVAc<*T;WN9)O8_&MK<&-?b|k{#A{w*x#PS^B8^
z-AyXWik>r-Og9}tCc6z2iF7``*qOhHgPJ<*#}GTx%q#}7%>9E&x0E_mE&-xf;*VuV
zn(RR7e1r|QD)V|1TDBYA5&Ou<cJ=0vpRM>~qabuvS*k0t84=<O064IVL5kdsDlz58
zC-#o~iG!*0KVS)jM1m*Zdtw-x^Z5^mSSr^c;TYX=dKXOo<VO!wW;~IaLSw49o&-cD
zCiwjWdX>9%HC2c!<)K{l9IeTer|%IPa$Ie1M>sz5kjM~HuYP2h2A#>9oaacvm8F^c
zxf-alt5h`OO~sp-_61;c_Gz)X*iiHMf(2AFf|QOcpsUF846khw?*p&+1A;#+A`siN
zCE~m`NaG735|kqVBQUIZlkTh2C~CNzAdp)@wRIUY=@iI2zhY9YeJClg<Ql4Yb&3;e
zri}~4A`V}TjLz|AXy<hE%&doUg^#BeBe0m)Uasbw4>yXEwl=LJ10jel<dqHDiV|Wu
zck`*{Ki|z!tJMwD`>q}gw=L^jL!y97naC7=8k}RRyGCF}6+qo@u^=){#w0xOz-qg2
zQJ5RNOY1x2z;!Q_s00M4g66?*GdhoTf`A6LD-^QIlqfuJ!i=^^UR(%rzP<QdfVstt
z0=FSSKLC`M0pfEX8G>nhMdsf}@-t?)<6e5|kpp(;UEwh&m&c<N1CAN>rCflC>_!&j
z{Lw0|k(h(A|7h$qQ_TQR#uJz>DD&kcR#u(|41G;f5#UB7`4J*LRFMq#m3H)EUD+WH
zZ1AfNYpKb5VhmK)4)>dZlpG7Vm)1qL3&AA9oEps^<ML!eRf`{^`SG%QKKlvQakKVW
zM3A3gp8)Xt(~+3|{ZT&BK>=)4<rDRy`I-u4XZq5Lp<3n~apperbR$~Nb1eaj%YGqE
z{Y8-b9##_VRY;3O@7Fr`ls;RZ%OM5Ki8;C<pAKT<0~q^jQ<fF|wmu#zL&p6mI$FW*
z3blKNPMsMtF6u=QqCU>Tzrh)7$ukm0MUyOl6q8DP9B8&tpFLXVsrxs;B#?b$l@F8M
zI0k^P##uL~$}byv1rJ?1q+T|k(K5>9NzH}ZfmSZT302+lpB6OcTB!;-teaCmxTwcy
z6eUa~h~eyWE<wk4JXlTqJ$Z5xu^S9>1V!L4%}o@f$+eyJf;-`RLbvIf#>K4Y50h(!
zkf_`{Fy;9R-asT^banxrR#0yVrTiAynYqPvJvkl^@W#6Fw7@R=0r*RjD*XMjrxG!n
z{Um=x`t{DK`XXfr8$7V+TLaOWL;(?(p%EH1Uu1vLD6f6M<ez`#Sew{Hp*gs97@ZqH
zqBv(akXastNjyb+u~nQ$|Bx=;@K#K^kAL3z*RmKxevExqJX!1m;kYA06VJQF7_6n_
z!Bc8oii^j;mdeic{RU$F5uI0NrU;~y(6N6;6)?=xEN8D5g?(%;hU#iYzQN2F<B@o4
zd`#ES4HIFf8nKLR*~CeUg(NY~s@stvr{C2?`=G2z)@{h>-Blua@9%O_I%rTwXqc~@
zgTpi|uFkI~momM&=66=-*JTdIE<PbdJ2EGNcfcXrF^x^`)?c~Rxo;T*QpO5*YI1<9
z<;?afE$H(g(skqQyD`sknD(Y_a((}o9fpRt6j3HX7SJy_BAf}hw!^r4ML$mk_)ZzH
zd*q(vgDse#;ctGdu{+9Ve!#!w;i693VQW$pOfYi)(+{<D0a&Jh;%u#}!icvcQa`On
zIx4XuOy&B&-mM?PA^pfxxhbAI!|9Z7-9vl;vm6?Ugv?Y_m(ZsLNOINIHCT6H?Ct)9
zlpui*rsm+LEjv2Ts4F^w+b(Bix`FZCIcUFhO6FWwYh!7%55jl*)j@t2ZdsFkn#Ta6
zaR%sW@_%w;9$xqpV=^U9aYPo?<lcfHS_St`dec|-AIOw6+$Tco;kcs9B)z1`d8T00
zg~SX^5WgLve=HEB*dl#I)I^0t==vPTAD5LD`p;i#drXV2j6s+Gl){MJY{svDyNNSB
zzw}XZzE3)O(xUp~7$OB6RD&Dbd4@O=omdXjDb6+OMyh-^Wc4Ex2jov@8lEmml(Mt5
z46|`jss#y|QDy??ukZnSG4w%*uU3iHHCbFHt&_5_Kv;E*bz7s<vl~IF<No!^6AUpD
z`j@(a_5X{kxVKj^0qUL*gYt_9(+zEail-enG;8bsU?&F6uIc1)MTtqSNpEHcQaHPu
zm30=zvn?$HQGIMEr!k~)8FJ`3_(7KZ_d6!C?gcm$S&ffasmNBnHb0NlDW&<bxn_#<
z&=u2@Fu<~mwwm4K3^cgwAN7m`!7cY-a4b5Fbjzv8YusuWOgyWU&xR!-`E$98``@oI
zxy<Cu%Z+*9``<}kD${;&%?GW{T_0yv9lXm>nsec4_Uk|fR~g&ZFnj8z!{s)_?E=Jo
zf_@LnVr~@!ye02xEXjGTR>nqwH+Wmd&9C}cVSAFy5}c;5(u6So8SIGz!b}GqS&N;i
zi9KI)O5*m6c4yT*m7H@tdVf;r^zb)><3V+ESnr^{85n%JzU+khrx_I6T=cC{BG#49
z41cuJ^up3%z}2x*NWvR~hbhHM2qABuTOJmI`mqk2qX7h^!WmgJoYk;{`Kqf$GHh^$
zh+<ytf)=MXVq$X%!k-1(-io()ah<0$)VzMG4r$jiYNixaJz@=>QF^X^0n_Ge{}!$)
zCi%+XhF*F~xUeI#4c<p}7M*Juir}?xS?7_-z;Vt#DZrHlySfi}{mMB~Yz`t2?SC>;
z;b#dZjI4t7VzocAa`#0VNDX^G^7$GF3Hwtx&d0ynBhNA8B~?Z-r7NzlhWE^j&Mo=6
zG)%(8@~CINo$?93gYF@Nn)oW_BUi~^we+_7E3bM(9M;uG+N(d~zpznLJNWo@k#?SM
z34qbFM7zRz!aB!rigAyo@a_v#WQ2Q?q5YZV^402Zpi<lxQC%w`9kEai&?Him>y?P@
z0igKvl8`JIa<&acf+x)T<WD8qN+o(2KF4$`Sc;q!zI~rpRu+2^aT6C}8>t<AWdcrg
zYJn;LEG<~92XKfOWPA=glhdY6CR}QA8Q$}e-@fx|?N4c^{FyRvFulTa455Fgid4nl
zY8ZZPjjIWY9&;k3Ki5TL7lAI4w&V_KSm}kI*sUesVn3RiIM&@G3_bye`8@HO{>Z_3
zBNI)h^-T^QDk*t{zO7bP6)E?!WbF_K4TAFLex2I;4%MHTT+pAPpdPW{*S3t)O|%GD
z${z60SIIO_y&~t%-$2&^9{|u8m_koz?zZayuw$G$Y&$(hEe506K(7m?7Z{M4o*T;2
z#4bFiKWC{p$C+bKEKQFVLTF^|k6A)h02tVQmhB?(iIo7=?;P0vXT51aHH_i}K;*Jk
zY0rPycl?ylZ?wa&;KoOYv0$~P9e_>z>|xvt?b$STuO&3Zjdv!sLvqpNLH4wBl%D+2
z@5X@n@-_bzf%G7kSl!g=BU197Q%ul^DZS)LC*1n=nByiW9RHOX^ge2sVYzskc}re%
zy_3;yHJ|+Qcn#?<wde3E%m}|(J&>BkurGOqknyBfsTEwm8*E$rz#hat7URop9g&H@
zWnTgPI{jdXg5z6xJmh=ELPC!M7>egE6$Mu|_#RVSl}HRg$7qEL0aYnRDq13?JViIH
zO4UF6BBIIT1+|!wAiy33RpEFoA)E(SQTY4@<1Y&ha=US_?Wn~mjNktpmUpBoI{qBl
zP?8$VE4`*h84ODSAHjvG7};9K^uNpo3#Skb`D-*K0vUOQvXAD_|NjG??C+os@EX+|
zM~$4t-ZJDi>PAIsJJ7QmHOEpwtL#|NB5^FlEMc!&AJ|OKnpJ7Db@w9MP!;P-;g&eq
zjE-#;v#ubR$56X?Z*5iZU)FvQq)?-gs=8|%GjeeS&hE4%HM|Hr0?y;q{pAHv5bkAo
z$rhDYSO<N+T5Zu0bm*j<G&??X83TI}zQ9{ao%z=5AAu*k-hv`3f*Z;mn`ZZ8-8t;F
zeGP3^m#R9ybz7D?a*Fay3%P+_R~K&fgFFB$J6|1Wf^K07e&`@=Nb*I0mG!Fb2MQ;X
zg?S4FWhMJM>OOR$Cw<{;x@c!gI4gaxSE)1CZcDZg5Ex6ZKB2qpwWluT6%}J%jLPrE
zJ6&4oDb+fxnJW3XBV55I5KKs3J5fDdap}7Qd-*aLF|_OaySdg7DDxHeAP3q;T?&{<
z^XEiv2|qpeekqm*&X%{0F@LASoJ88Yoeg%5RQvwQ@WJsJ?{mz@b5Y`3=MJMx0{o5!
zURgv;ws%R#vI$V=A!am3lwVUiR;9QP)!i&of~57wwo`=Yu2VlhQRm8P_4<bHc)yi)
z?RRC{5iUe@0zB|VzKtJrEG!~XuG~mLYfYQn6IzG*(2^P5KZJQRvdYybvV$}og_5wQ
z8JWSm4&3CxB;htay(0|F9~dz!Zp5zV6s<IsmngB!e25We9?US&X`d;s!cB)HjCcCx
zo~@qtcbOoL@&OlqY8wY}<`z5BLmj1ev>3-MFjVskZi8E|O8;$}+vra~d%`c|nj|q9
z>YZfe7&n7gb0LQc(Fg{0ozbNg@GU<QfOj44lS|a5ekl_MVl15BGf^(X_IdMC0^E$Z
zSJ4r1|IomOJfOY($qh<5Ya04I=qbztov8JE`NYCRMHIA>QJFF88TB-x<SB*s@j#>V
zC$96T-c=%#EtckNh%A+l^$~LLe;c?Pp1{MK&DCT7r0S=K317NIL8B!CE3l*UKm;1t
zihlFG3)o3Id~A34r(>&rBn|>jhs${!DkZ{%)GwIQV`*5M<o7?_>7xNY45Jt)JUA%2
zVL$ULZVgUdZ*geaz#8@tG@{N_IGN!vmzEYYH_R8CrWZh4B@3~9{ETJ?^olH;$TJUe
zJIjA3<sQV)SN_A}*+-`SNh{kuKUxB(wCbvqkdu5VjofhEN9fowy7M~YQu2g&o6M{g
z=ha3t`wqkOSW;<gjQn1)<~s#%!$kXc9u&?rwT=mL?V{%AO3eZ4Y;Vr<9~i{<8SNV1
zz<g|2HG_&%UHt`l?X;Yw5ysm1kJE}aP>BSGi~u)U#4o4H^k&#)`1Rg9mp2Gt;ateO
zVPVfWwKHrJ{5sn9%`FSG0)A6U?%$UxcvAn*_0{sbFEzGzm3Sc0;73WUN;ZJgX)uyj
zE3IBIDvQTaBK-bK{{aIqdw9wdqG*c#sv#p*i-FS}H&PADf96TDc<$D%gKrnvVl;Jy
zD%2%-GXO^Pl(e9L#=0+I?MrLjR4q|8xlbUjnK6NEq?(>eUa}_a4kR9Z-53H<aCN{Z
zm_|>jU@O`dZ{+a}42L3aOT>FH;5jb$2lA#unq@6ixTdKv<=*K}Wl0K!X<F(oHOp)f
z;dOs|ACajd9Z~|-M!nIYLhpw-qp(4veL4rDjdf2h4B*SM(!n`qV<I#|DxB!>JF4l8
zC;c#&ew|@OQQ^fZIj2R|km&Jd<<lD>RJuXpTi6PeOUcH34GYK6s}AefKLGBeJ?MNa
z6k317_HcD-LZ&ZVtKM+fDEa~4zeI8YB!H$+)$&E02<U_@^QSqckE;RW-wU;by)v=f
zQwf8t=$NvzGmSR2KKS5xs{C_N+Ro8DRjS(B5H$K|JYXwS{wxb=DA{3hr8$+g1rvHc
z1A_&=;?%wV+M)k|Q%L_jC8ytTuv0IouzM-hs>dnllU;<U@h`~{rXU9X|60jDvr5tv
zE}gA8QXx6tj*F<nK8%3@VW+0!^D8<gQ?}t=m6p1>0)&;7@#XoDq_d-Rt=7ALdN2pl
zRPI;p+ym%+pQbD=uZ9s~DXg2UHSQS`t6_3Zew-+w7fcwRz0KtdPq=GS^0@WO832Nl
zShF%eGoWcd+5nOgM#O>#Nhl^FR?HlmK{Zl*PC(NG1>GqqqSCOW8@&r4HqAqrwDUI`
zb8DiOr_-s7>o?7`vhVs1Ws3ivS#cO$S;GhKnN=+D5VH3lI-zq(=y=&Vd)<Q0mA%Xi
zUe1JS1lDl>TY`Xzg2qLgb5%@1?GW4^1~}QmwJ?6#^FR$DN)Ib^)78^R8tk|X^>f*8
zL*`YzhyhdeH*>$cZmaA3_Z1?j!0*LNjQX$yv6~%fe`^G=H(b^2lc^b+EJZ9WE7@P@
zgugw|d@P%5-Z4R`<QMjBjRbv40a!y~*}`9H8Q=Xp{hwa7LVQDY6BKT#tQR7sF;Bl3
zz(%5mSb{Q24dd$R0F{Um#x6=s+oX^AY#~~@%Jm*;PVh53<ci~(p%(T)hieHT!iiqp
zKNPqa!uwLP;K+wT5i?xjy#qr>9*bD6PC@VgJ{Cu(<c86W+T7Gh><cmwwPNwp&9fTw
z%J>v1iup|hb@V<i?}_qPaSBn-Rreekwf*~P<`$Wte`Y7V<WpUe;_15&^t#mJH4<T}
z`&}{+h(r@enl0UnpAEiuaT(h-A(N5JSfmLNg4KczwLi+W+Lp+9N5HmKi{3y(Rd|F%
zQ2|z*d%N%6MSzi6s;)lwa;~9Zi4V6EBtxHv9d|(eE~W5Uhh;a@{dA#*_^MIj8*SNw
z8rB4ZmBq&=^wNptN?$*+wqA<_9kgu!2#G7QG3)MaK{wtVBB4^#rNj?ml!ACp7I+I+
z-wmgs(6is6tPJAp)>AJd&+J}`pCnI8xc_yG{8eKQDX8175U8BetLN_;>sk54s1p^=
zYAGyAWkF)VI*N^s7wfov$n>0FMK!Jb=Kwj-VRswB@6fqVc4-M@C+l9|&)lFPX7D^L
z`)yH%&Qi~pa#lF$rwb6XpxzZkH4WH7fuHeGtTX!Mvs#Uf?3=Z1`HowZ?hqYl7RLnO
zD5Y|7LwNWU`MYV#K-e8<ScZB4?$XUuYK2FFVPt<+0|#1`^|K;jOT31JFl$3jR)8#4
zbsGElPJggyUXsEi!;iR15J%XSNYK~k_993z;0I<YrKw(EpYZ_}7?^F@^uHT=)XECx
zVkt-O05qc0s(cm_d~Xt0${}?;>oqI@NOj3O1&C3#3(@EdknfofBd&t#^>dein-;XC
zcqAZF6HBh%`i~khqAZ8fyX~H4ZPBOt%R;l0^CtYt^{iPNokgQ94dOvzlQ`xfF><e+
z&<a^7(W!g&wD}P}n$e{pTkw+W6nrkUqhlEybrDJ4(0DY!zY;}idys$;Y^GXquKk~n
zqY)CS0onUF=A)f;jd#b|++<fA?Lvb00g1}n$Fm^2I&*N=yyKo*jB6n_1pj}_I^M?<
zgpG6@I=lob37`d~p=rprJ9%~y;<%ZZdW;3eMu}qM84RZ?F9uahvcuwav)+g?z`~)Z
zPsf6oiarEcGuddDv+)MxN7#~(-H3<pdeN5cg*a|{=ec|Rfl*$}W7Sw|2LlNiq~Opg
z>tc1^b<X<cKd;VONakzTmHv($?M9iFFv};GToD-a1itIk8kqU}%|3$?9f%A@36Cpm
z6<!!PFovP8%jFWPC!sIk#k%ej_u-MH7m6}8?dEWY@64D`2saPxOBa?q(xX~6G_~as
z2M$b0`p%ddqgk7g|3VGV)tb<0HB{yx9ojA>TLxe46k93#{ghy_1N!B5PABMpmK7}K
zjzpl(HZSK73Pc?km8DXb(;YbKi8)z|LAo0!;Fxv_(#L3DvBqYMODtjo{Q*NmsqUnG
z^h8SWu6Rvr31@F$rl?4y@C4pbKCrbyDFGRKJ&8D`R0{oMrjePwZkG;IcOKTuzykEt
zkPD<4XU1#{{!g?r5M*-m1t#am3Rzw)1;D3eEI8-~&u3JgPn>MCfXF7q0XKm<4jdWl
zp!P_X;sf4<des`3YxZ-T=2OI4Wd;eJN!K23)?3q#&n6sGsgD%e@!U{mUGDefo*`n<
z^%)dc7vxUyT2%7Uy(g!?#vDQe`{Z0*_1KpH-P^?n9v}M07e6DWGm$($>#`Ey9PCH>
zaI^kn*(VW4iYW-+1$0d$F?%pydI$(71>XXjEWWj4i|3z)%^jofSn1xAbdK)e)J6<B
ztK@XxXgRO|$a5Few4nGc@><hlPW1_C5%b(k8-O_ng!0s%#Rxk&U^-DY8FeFt=OBs$
zGc%MbeNgb2s5t+C5<w3>^Rx$ue^0>TnT5q%6sMTR-37Mw?Z=G*VbadZmC6>I6=U+>
z>h_X97k6XpbU#9B2RO+-&Gr<BLdG8cZP<)dadALaN+QHvvY-{6c6#^lxqF2(8_WDD
zf^P+YyGQ$FryWk66<BJ`k$X~0J?57xEW*&e@>>!ut5aauX(5K2Hun`b;~9*OR7?r0
z88s@1>6pa2?-U#yr+VaCI;i|sio!W@H#;R2en5xm6K#;7GHnSu2gkKAuoq>lh?3^`
zB_?-YZ(yg;D*&06-VB8w(<m6WGcosg$`gOC-nRuKJ+HFaX?SW}DmzChskLh?Acr~v
zLW1*8G-j_6JjS51lTY8Qa*|i{3u;C4Z6r@@*z@VTd_l3jkjRO?ypX7LqDZ)&ddg~@
zo{7ozPZN~Ih|@y)oT;k<cKXOk6KUe05UL9(ou$SBdTHMcy#yTD;Gc(~4k?!!`&UK0
z(S@datgAJc-B6_LQ{ymeD=RLj!JWeVE|zwRQzy`QN&qQryF$;8UuF7k*lYyOHll_J
zPdJK@W>KNc%D)L;Oib~tSal|txEl_y4&`e!BrkWY4h`;3@+opx!T3@j0J7h2Ej+d2
z*mB5gL5iGZseqB1QQQqR7S4E(t2ruy^9XeIwV3I587asSY=0*8f|V2)CdTj1HY>rG
zH{B@#u~Y~AJCwLYHC$CkNhmF#V?($5SCN`wq)S`D=gbiOnbZJv>eM<*Z{Y@tu4p%1
zUk{8zY|8U-Q`;GNTX@yUm$*?C_S{FS=NSjCANW$}Z#J8N7*H7YHtsLCKMRr7<irvk
zlKf4ASF3_P>@l#t6E#?Kv#eq7ptF88DrsWcpG&VB>z}wi6{OOhb~-XD({{WE_=;Sm
z0sRUle2`nFwtCnj%0-fqeYS*MK+9Ha%ko~72!BVaR7)$P=&&-wmFX8|jZUCsm+diA
zl@|&#W=i!;R_nAE=D9nK^jXp-qbE64`6Boh&PqX6ZKwqeAYUmP5IJ?z;C%TmB;W#J
zdcg})r1f12V63dyfb()dO%76s7CM+!Lgl{*yEWtXcAbxS0X@ZPj3chv@dDWJzWTM&
zy;wixOdNN_9~jHx&``Vlx_$Rt??B;>%>ho@*qFhnQChLnaP0C`ow?)X*m5jHy=df3
zWE?LYuDF^G;fPuPxiBfQ>_9aJhRFFCs_qm0|8E_g^HATcl||oL+=z2EnI<mX=r3PL
zW3wgOCCGoH(wA>Gyr_8b$uFyKqZHVNp;=|o^ySAm&qZ1B++?uzZ&NJlbl1P6-+tJB
z-7ociB0N_uF&EEoJ39p2(|C#*wS-Im4qUYM6yvmyg#m2vVwgsMHDL%9j%R%}tfOwv
z4)!lWx?I`;xHOD&rLi~Rxeh~$-QiT?U2#(mG~S(s$G<j5ZRa(-6^d0Nj@HOdK~Ib!
z#>-hrigD5GJ8P#8N|fG<@*}W{VK3{`a6l`%UjGP3pyWN%(^Pm$9SA&{RX1>-c8I_g
z_1IRAn1p)c=GpgC`W_2sqT(a0!-V~8T}jZ7CVJ<se*l#mYljA!?FJ$CzvS1Q0{ZwX
zpp&*3TBnsa4pafghL8Ct3drXuSKjV+GV8?sCet%{GQ=(&k;VbA?_cnB^4l;GDX`yA
zPGiaJO~kR}C(X^@X7DC$hHf%KZT(ksoqgvWZZZe4Uryno=g$J~uJO(1Q~N(O=+cIN
zjFP97v?^f?U-}=yTCJ3t*RvmpGOkSXq6cLuWyD)(HhwdVOG_C3fHU%U$%RH<U{gqq
zjlXxGeStnzU<_ur#f9JbqE+>LY1Y`M)lJ*~3|YDyB59Pgli!8af{`UIxsP{e|Dfo*
znnY6*e0^T^iWN0`zj2eZ?8tBt>}}T(0(2m?Vihg@pFniFnCRVj<92PL^(gNEwu!t9
z^W*3##1C8y2VYy26;{%(iCVSuT@t5=4MQRCWp#`gxW|Om3!22>J%ay)R~fXczTxc*
z?CE!`qxfWeB)J;}d*j0^7-a{Lx;Jndoyv8b<b>DS@xi=sP#A)W>o>HZ&m}7^!>A13
z!gpuAQ@dRR{<y&NFi}Vo8#+4BWS6TP4TOVNB8+DTtf;_79lGx_h?ckoqTv{@`@%;L
zkC0k%fnuTdZB3yVYVbIYAs^nbF<$`h29CTQinIeE=!(eUx;t|c5<dsx(Qz@@1@@zy
zOn*$iibU{`!@c+p6&b|uJ<f<A+{7Htvvi{Ft?SXvObeX(NxoLnIA#l7PpsplYup5l
z;Xblw(vCrN8E2tM1l*x3hz5N=4yecSJ?!8Pb}>8E`*dgxxEbptzx<KLKs4lN>@BKO
z-WE$RyGZsf3*f(OR<x*5bGzU!G(#59RV=8>Sw4ym;z98%kOKp-B5bLqVTUim18!^+
z<l|{gnmT0TT?Tjs?T7v@S@or)Z@(R9N5ReoaexaG^KONOhO(yE5c@_r8)3k&t6RG7
z8RqLKXqp~JUW#8QgC-~~VjwD+-$&5o@S@+vW2tsV5i$&=Cj+cyxo;asC*Im)VDzNV
z1~C`X35CRYq4~OWSL=6d2AcwJ=yY-44&jC>6u5=Rvb{RGR@FZCfKb@Pq{vmTQhdiG
z_hJqWwO0wUG-i;YFCklS8z(D(JP{678)`z%PI@53fPMa3&R`YaYYpa}@|^QlhIo6(
zcq6$Z0ac&pgw5;BXu}FHsY$nRK^=c`ozj1FL6-f0WCvMv#@QIO@3^sw=*x_;Av;i*
zie{AihtFeDh){k}H}V^Rz$7SWPOpv;(hT#%9t~F?(npxmxR<OfTUxM`n}Z!NlZ2O+
zS7;Xk@!5xred<ehW*pMI$2NmCcY_>TXDa%a8)y`8;=G&|>r#ZW)gm<v6vgCO`Sy+0
zq@7hGFa54IVP`yv5E<u=z0jb~mXXS0^TY7=JUg@~u|qGf|GU$pUcyu^7$X-8`)H$s
zKHl%?5-ka7$iKJn#zAxMOxNm*{rB)N@0fA{!c_+URZ;jf{0$W~%kaaWfRHb9GcMQw
zx87wn+|%r9i1-m;t7whFkc>Q8{$yIbr_IFU4-T>+%q5j{WAfj^HQQ`)K(z7z9Bv~X
zZ=e3Q+?hBHDX0x2<Diz~+h4`j<nEPq>;u@N!_$?4-LRhv2+UBn>4shhBc@1BDgltp
zeOem(>c=~;wrs&VvVCX}14l=5MEM*$uFcy5-133=aR3!y92QDfxpU{oNaJ#Zg4Qa_
zz(WKzUZY=q$FqLo@b74xBpMrIi!~U?27R`rUOP7`V^=kP>SEM<!NIpwQWrV8PKvVm
zzB9}ILQOLOP6crR?sTyCXEYiNf+5{JlO>hpbMOHtX7**$hFOQZgK7^A8P|9>dBp_c
zY}O39@(e0;XJwV*ePI@7+`&ptgtEIVLO&q?5+`$3U_MCW9U|SJE`_hXVa0Vz3K-%n
zWd&#AmB$0Tc#6ScC;Z^QvQUykmYR{-_kp`46ew1)EsMbOy_6qf<Mk#y_L8_zg)RTw
zt2pV-czQHr9wtGEe+K*Xq;E=0HdR8G`W^ts+~-cE0ap}5e8y#;pr=Qm3L2^5OEmEK
zU8NfK;H?h&6WSoLJl8_iT`U*O1`G9v?xvYou{rsiiLcM(LG;O{|FQ#iFTyzy5c?<m
zmG7Z;L$Pg1^ypIoE9r(8qLSg1TdFG3FaF#JhJm6CP9nx|kX857vzmbW*Yu5@<#Trg
z`sQE-OZDIK*Z_P$UO)OFe*IAxZ^HeO*sh8Iaxby9QYL><x;I@-V?k*ev`#Fw>4I7z
z&;kcAy?Sh@J4y(fP+0DIQNChCnDzK3fNAx(nZc>^QWB)twX?NR)Eo3hqwg?bZ&<#z
zS)pDQ|2HgWRXyD#cJFCN7UZ4Ly@RuN#WT0Yuj|+vfhp+XcKAf069J8Er`5UH5(5kg
zKW1f`hf<MfhL)I<<aaZe&O7FQsffiYn?rv90lVsHWP8mrJS0<NuON46o~#CAi?i5#
z03#EmImu?FmAZGEKqvD!7EV9)KCpm-tw^^PoTzF5OdW>x%pZdPUfYzPTOpFF-TT{$
zBzDZ#_D{6-&#`xgvvdnwA-Za=Jt(0^v8+IaC+WwGzg^u}G@D{!Tv`4Fv6G}<;{5!E
zle{X(g?>vo3(fThf_a|k{UI8eP=c{SK54`{li6u$@Ag!O3x%*79mgty{>#r*@Fa7-
z<+8WGFPcu=qi#3MXjF7MLOb1le%gN7;RAJ<U~V)xO^gBvJE-GCxh3C7%|X!G+{<CB
zJC*k@p>hdL%V(&NXmhlPj0U?t>lBk-DSJ20C3}V~lR>Qi52jY2&)U`v&#s}G8|SE2
zB}I;Y9p#yB`vd~y%6v(dvgd5o5$w(dW!KW?AVrokH{9q;(;PD`%zJz}zkJ1U{Mn|+
z%!3dkpZ{aLA^_&G9j3Is^~E!+S5l@p<BO5?zoh3A*KCzA7$x5Pn_2R@m<bAzBj%^j
zK!gyE+D1=xoFp_={Df@uSh2cjfOGgg#*8;@HDG@CZNxaXI-QM&6XhD&dO{t=WzAcM
z4#Zj&7;L|Yd|Y{mU2VrJf*IJ{Q+r2g!OjC*R??>H`Bei1`yVKU;!y(SC1*H~215$c
z%~gWN>kIbLhn^a_8ZGcwoT!c^o00u(MCtMx4Yoxf5W^;Lc^&d`z3>&A9!bOe!~Tyl
zJ45}*p+)c$kHPaSfy}*j?c%V8bOn@f@J6m_eq7S@rchAAf+ecfoEGgh)&!E?i5opN
znMk7+iX;sMU*>NN{vDjKP1o)m4$w>@q$BeV>Bm!Db?bfI55n6XffOX*8nB}sD;}V^
znA^VgxS&TR2Q(%`82_PIcExv;Fe=`JN@0ks&eX**6L0udS$}6c>71N3KqO%)coSWv
zzfStDdk)pvS)6~4N48|}qqV%u$Q|ftQ7lnOkYq?VZaP6(KVr~;8JwjBKg|tDc1mV(
zZDjfmXx#0!PN14ls7VyFcbcnnzoq^(_OE#8)89am<cu&SXbjndy-twCQ>zKN5CSF^
zfrp(p^|;Kje*A1o$vS6?eYe-XDPfYW=GTG!gtLYNGLLGyRt_y)nFBQcWoWcg^Gn+e
zv)V29iz(+bg2YTJRe(%0C65a4lU(;_yhrEpEONkY=zLhcDCujBuH`MMT&Cfq)bj13
z5m1y7dGF-K!5%mcn!UO{<B2XrzPfzv`tdhC=A1g<lNw#DO??$d@T2$PKtIcdH@rys
zTt5^Ku>om9-Ps8%rtH432brpX&KEe2#boFPWprj7Gum!N74$0GUgCN`0FqSgPo7cy
zEbvv4+|lVIaNTyKc0a$s@)98>_S1m+fWsJ41bah83ewK9jn>>W-qhYl05d?$ztEd)
zX(()nXz%<nj)$kgx!G}qJA(9#?%@xQz>^+_0h}5V0imIaOERMexGb=Q#3S36eQ6)7
z&ENSiShWRx5}ng_7MX4j-|k4$jj2(ls(-&*3}zAl?`LxDWLxLBBT(U0bdp@pL_s@L
zBTs+Uq3?O0`+;p5uZ<(wA%sPJDpUrDHb|ls$p{6zLGPu12CpKAE~gyB3O9^BfmCx2
zN|J*}j^oFFNg^2eRZ5NB85$%&pciiqsVE|?!N&(0E2*=F;YkaY+LQw-+`pXWv!#`T
zStV#E7Y5Yk$DZKYX&0u<sNp%C?;3H^C9FXq(hJx*C$I>4emN8xgx69mbkvnBe|3*l
zdtuhDIY^WE&R<4E`h10LZFj4|2TY{TLP4Os*juS~kzb&bXmQL}h0pG?oR4k8-t%pi
zv!|#iU9pwq=$+N)&P?RUOP!b6Ce~gfS8c-zF^n&aG-_nN3=bc<gau-u*QOR64?;r#
zx@Y%mgpT*{WT0|ZiXC;Mn_kZ#VxXfA3ax6A;>);FtkpO7F25Pq2@_dbcb{WAMimq-
z9{lECo~FXyPx|=>3dmp*e9k;zGuu}2UHJ~9v!bb9h{1!qm0Z8fZ}Z%u5Kl-slF->(
z4rcZC0;DcfY)*;Hd58!+5M!$hw#Vna9$dH^69Z{e-3{V=R-~P`NL7~!xzBI7`Ub=m
zYy%kuL_wrZ&RkH#7J6%xEa@-B1P0h@8!J+kLj^rz;RhO*?y|i#tloS~1?9UP9bdi^
z)q+GcL=o*C+V}%SfQCni1NAAF=P_rr2V8+qixnOI8N5@EGpaw{9!z}$K%&si+50U-
zy607S1(e%WpC=aALsjsSL=?IpYl`G-;zDVXNh!uno4ZtU(}q1Myi>Vd1<;`{BrL2#
zCM7Cv8h;_BNaylgR#WqWQwJ3&dX(Kl4VE>xpoevfS>7~QoE^^tLc13A&t)J-D4=Fz
zn>SFPD5196a6Dyw!x)HP<F;e}24#rTCV>gR*7lTa;M0n?EY>?`ZH0ZGu?kn?RhnYf
z8k7cB3(#R;pMWWR0dNb~E@7OMex<W!F{7VZ(VhAueYCc#ylf>#uUYC;zi@9>(SCqy
zb2|E;b-vaq%z&VkJqj5rc#1k*@qu&DkJrnh?#dVlve<^c#eRF<Kd7EXOGzS`md-b^
zT2gL*EuG(zqHuAUH_6QcUOZskkRWS|#0Fd2n$mlP&(HkO_ba|J+?a^)N%olmHkDLN
z1?$y2!#WrX_x$>$WJu<<D>qX59+fXiLP8}R6p?xGJ=M2+FdM#XL!H8#NU>M^_UX`h
zCnf>zHLcuMzxZ-q+cdt{GCr<dwJ$TAs~157EU8fPc_kz0%VS^rLDTb0waz&q0<9}N
zBgt3k^*p4bi3j<lU^|E8Kno)T*16E_B2VF<i7|{ywSYUQiW4>FLa;&TS?YP&=Lm;m
z#Y3yOY)60#!+SbsJJ;Y@ui;oyW=Kn?3;(*oE2)K}(6WrgliGQMX++x!<STeTRN0qA
zNW=ZO8Q=S;a~E(@P=ATEXW0uOhPiXifKc-T{Rh4Q-dAPozIzwDK>8Y$Xe;Gy)iQO-
zOeFRRa8YrdfN@Jv94T)qjwpKaiGUeO&Ns%E+0!VMX=LaW(BEh{a|nNu&4Y-;>Sk^L
z;%@rnv|ieEuGZ&QtIV8XK}#%MC}{)ig;9o-r_enER#bEIW1Tncq`jBSfa%$VOy?gv
z(SSrU)X$Nw7Kf*krt~XCQL4Oz2y9umVe9X%OTmyfHhT7e{G{8-KRP4>k0u@Cu2^Au
z;dfQGzgc|*5JA*fhgI~0I&Q^a6gW2gei$1>gx9KleIb@GpC}tr;$64bIh_mT0tp+?
z6yDu0!1~I1sOidJWkk^hz`5pHMOi?VZ@;O3F!>|-nH-$i!}NW%xE-F5$!o}-Y$f2j
zu--*jZbFo=RLuxrkNL6$gd80x7w+h)aiTHc6kDD&3(Etj6csT!<d)Pxffu8Fw;gQE
zGrHEeiC|W&(`i&c08SF5{*QVI{Q2W63{zX_kfi}AN{jObFV%cJ>{dOtW_a2gm-F$B
zJbN#dm)EBpJ*7QIqNpC>n`?1obFj*P%lBtX%`ir-<iM%-3}ni&x~suEs_))Si6~Ia
z4(@KkSc5wHd{GQXKZc4cKp*JBwAS;v|M+#biCCFoI7GB_#rsbjvcO|w)8Y#`l8(Zj
zj0`O6@PrW^K?~29`cHne6vTc{j2$fw`aRck>#To_rcRp%mB{xS1FEDx<DR+@*ui+Q
zqm@sj#n2&zHRRntriI1*&F3zmIh5j*pRM=b>zcwf#Q4IEls+#t0t(M3edZVTYu@|t
z%gbQ4l_Ss9)w{i0!3r4t;^SJ0dn%EfrTo?)PzfPk<NV|oK@+eTs8c^9X<guxGB4tD
zbk*6Zo;B<XvSW^e&IH}5UjQ#B(>blX>>PR>Xp~{Pt-TJg1oaw-^+X3o3o%tj2LM`)
zw%jcP*Dt^RzF9ATm0fVD7?(P?u}+@$G%e6X!I2~=5A2FLBuB=jp4Zujm`SRJeu~8D
z+%Xa#B5|?v2yA|k#pL9Pn9zsX3o`ew<>5-#P<w7p6(h6Qv}ke9J>9@0t5lEZ*-{|=
z5$%x$T)-Q!jV!XeWY!|wJljZE`G$6(aqw{_+E6?23`JTVQD-pW`|gVrNo8`+tK)4!
zNqtVH3nDFo!fTERPB+3b)WzBLJQOK$399F$vm7=jAZlBiiN^GmBZ8#fIr6#XSJf(!
zSC}GLA~}?sFCl1k=b&HY7%VjKsQjU=>1{`I<wRqeg*)mfqD`bWNIf16gkvUV8B{j`
z45&U{fABoof1=G<=ALYwlVlyOr+yGZ1O$@lr2dZ0UHF|!{Bth-kp_}Ivsd}fx43Sj
z#e+fBseB!ecE;lINYy{hZ&{0ka)XkYbGdq`x*^^gcU|I`ug1r-VMV=7(dY>5OvVog
zW#*1nfiKjF@{dDh5RI3jubDsCJt?Oh*dza_w=NN>!%6ab_R1kiE>hdqraG8%6C^D_
z8gOkdFakiy)<ycE6R?qTcQI5IBTenOkSb^s9{-4a>z8fz>k<)qQ%(aiH!%@V$49yo
z@DCW5ZPk@1nI?Z(B~QMuG@ho%SbxjMwLrsInpc1}zN}UUPsA}d$4I;3ND^gzMg^~%
zt4p<HX3uFBkk@xgoKH`$x-ux#54!!hA_o8n(#`e^B4-zWe6P+1@eNnGt(!)^z5JC#
zm`Sa+(%;ucwtjwP>`SVZ<-&Bi(o(MZ@D1PP-z@KU)V!nnC)s1sBJgvoA$gf!BM~_W
z^~j7&aw9RZO=~ZnWub3a6<FprT<OXbp>Vgi9PgJAHg%ELf!w4brMo9*ZC6KM`2Ag(
zeN9}jwTxkkI^Sj@gFzvV*-}t%v<VUczs2vM1{)P?IO!lV3-Jpyu3)rJe0QmGC0z{y
z(f@^*SKv>a+0@KLINRb=DmeaFFMbMmzljN;YyG2uqsQzFwr6&U+q^Gh1RX->#2&xx
zQwYcJ*JnF<$yYF0%-a(dhbz*#Ky7}HfpOj#um0?xa|HO%;~b62_l8&Vd(v)Uc5@Er
z6$(V9{e?Xf$LOQa_z8Ye5VeErO0py7Cw{=vei8t19}NTT^DI0v-nhLpJ~pKrBz0>s
z*7GKa7>K1L03N(~d##18`9R{@361o_(t`b6VN%VTFtmw$9h45?<3S?pPEO|&qEL!f
z^B<PJBc9z}^1=~I#c^`lK@&a$?x{2b?dfSoW~UCa%QCA?aUTq~E8<%nRok85Kj^*d
zPjCtI_%Z1Q%B!jsZmo(akbZl_`Ys<qiHo$(P40@_LT;uwA`B(v)KD|!fkmC5WxF1B
z)TVD8fwewi(}-#dGme<~WaSThGaJ*p@!=?N(oz39-5KnxarC3$8ZQv;d3AGMD&~)=
z+~vfbVSe9A7YWR&*JTij*~|vK%me)ZK}wc@GM*vZMQ-Khgl1S1DS&|_GAiL1^?@#Z
zMP^}D8shdycf5%;A4~lCj9Ry8Rvm4Lz@QMOGsfhRt^Pf3iI&=IIdw}i)@FajrYe>X
zSe|$e@z#6#RcW5`oi&9Mc$2Lz$OQdY^ZK~Sas+2yE^30a4U|d$wxdT*^1pq#{-G{R
z+gqCO>T#Qf7r@p?#S9Lyi;4pIU*qni#v&us++-h?3}Xxx?c=Y{G)G7Yzz@S+04uI#
zxNzExpRJZCDmfOgV!<JyPZO+a{TxRXEgH8Wd(75v9-dDkRw&P-r-r{;(Ts<jf)h9W
z^AEHL<_-B#R|keRpZp;0>^W1?U#x8X>owww``<9X>7<%K;GHq0K<N~Kj#|Dc?3@`A
zC2mqGRtl9<${#=(ywP4?(3x8Rzvw7}OZ0+#-DrTWIUEPkDY>h{ki4JE@iAY$6cJ%H
zd*12?fKI45mrcNP@3wb2?`Rlb3oKOLtBs=m<gXnsgI+Q^4!zCWwE`0Vfygr#{Sm&;
zzON$oeDSwVS#t(D9m6cC=#94TTSv}(wNnV-F3&lpHran~zxxGyaa*+W+hJE22pT;Y
zJ_su#<B{K3!w8Xk)>x9v^M8pGo@}dS)k7)4@5{wBGoKT$u0<B9fbAFEq)vvn<h{AF
z7W<I4UdP%@Snqb2TT2cKzkV7{O4#HN9lcok%xA-x2$KH1iBPVACu99SI^7a896-hW
z|E-_bU<zjz0MsV<T0gt(ZvpfTu^IA&0aYO>-4@2pQeb;Qkcmd1_d@MiJ#x}W=*asf
zpR%hfV$^rd)!WUTI$1V54HeKe2T7BU3*N-uHluCk1QW-_;B>HEz2^EE3Z%rfN$!}$
zQCaW4I7cI=1iwJ!yvCyt4nOoyNmcXSvT6PU!(#a*HXB1ct=@OF-5St%m@9e}iBpU0
zn+3Iut-JJsHh0=Nb+N^CCm*SIrLazBeVlXIxP6-BnneU{e!HokUtuu!)Yd+O&ST~B
z8w{Bsf-&=}A5%)J$hz7m{K@jd5Xx*v!-LZ~iu;*C+kKt>rn%uWeu0)1A(^PAx^S(`
z)S(oz0%!aeXxbUnPg9{PMU2Gw79%X1Zoe#?l-sEG$2{Z%M3)nd6x=YAe4aNf?@f_7
z?C!c_@%4y1;X+9$`ZbBAPS=k=)E*Vc&C(8;i9EH8^;qR{&vk=&)CXdQJeewK$2;zx
zPn^>s*;-Dw5Oo`bxfnv>=D_u_l=L^pv5ZKZ_whHPfLKNGRhE`XG^&m{dXz804+Nj^
zP+qA}R@|-i;8_nl8z9z89v|pS&Zf>m6Jck*iD3&z6gZ}oLS&v2-}Fi6fjdBgS2U3a
z8Zc%VsjS$Z{&JRPlTfOPX;EIOQhi08Ey#7B+e2Zd(2(U)`k;{yBZb!|(0z~(ar^XI
z>7`i%&IvC)Gf#=csVzfamw?sh$|X{z5U*8jm2~qO!?>H?yB?adNXze{;vT+qAQG?%
z7q%&KCry_Ni6Pp`P5Nh7{3#w>ixmMDjaz_?oX2Luu=e+w1GCuUd3n^QMApK>@L)o<
z#t+Y{n{8JUtcZ!TV1;Bf=2%?AAOHinWmv0~N8%EIl+01sV45}_RhZTvF>>9&@UwzF
zF4bRz|L?kAu({LUj}qXo44F*lux(TO*^b+zhI34@%XsrFNLj(2G}C-@4qzR4`GOT}
zzc<o0mbABQY9{kwu)Xwc3!m?fvnbm^ne1^Ip)JLI_CVZ^p-Uv;oqb5V@<E`TT*J;p
zcVcNtrGe|CVjqpj{wz_}{mTm8RA56hLU4x~#Nz){*xLODBy<7XB?@GJOA3<NM063T
ztd4`L9(}_DZYJ51?~V0Gjxc9^LF(Mo#oNXrIK=(xkRFCgj!8AOZ?m4%Z2a739nkyI
zF?pwDZR$Tu2`3`zoJr@^|6S9xmfdC2T|De`XrZ}t!Pr(TzC!GwnGcmtTGPZN-=&w7
z(N(@}fh-pddM&l&m(>LgSsspY+2g(h+yPoE<2I^bUHFyLJvwp@(Weu#>EA`l^wMqw
zhb`$&@j4%<j*Se6vv_3Mk9M%&k<3*X^?wqw$Cv^5Ud$X)e{wGF;zhe^C2)Oy-5$3M
zcxPHmR<I}cydfwVJ)S^wcEr$$exxQm#SU)Y8GKLNd?SWgz7$#EU)V;-do1>&X{_MK
z9C}rxoDji-nK@2jFl?<CIJo6|OXW+O;$rAC0y9Vw4B~F88+uo<@^BkjEim3<ze`LL
z4<qxq>}`7$GLdUN*hmnau`!mD86-?R0#)Wk_@WqpX>KeIiOzf#p*p=Ze9i~YkBe|0
z_bLK#br;8!mq2NP3?%&-Yv`ko#VJ~I0*0i=EuVhlJ3EKM#N<DW>m{2Q>9a5!Tbm=3
zwOVqi-#QfyiZ^T8dO9U$;S4g>D9L#*PvU*zS;Ww(n{@r#&l9;mRCT=bMwylv#mjl6
zcS7;>N78(DkmpvwDiHG>Izw16!fp6ij;6b!8`kkV%LLc+s4A`h7OC});mamwqo*oh
zb|<pJ4+6TT2lySu;WQsm&`e{fkkv_aV~BY1s;;ViBoZ-Yu(8zTUc2}PT^S*4De@Yj
zI~1TtVR1hz4v)E}{(FpssUpG>e!mur1K>r!J5>OD>pACVmGDpu7oj;dUq^xxwDj|t
zh#i$+&ddIKmsUN0V(Hf;;7Y7Lpgrootn~q(l>)x%WF&Iq#zEV+^9_BB)3hV@8Je~T
z^MJ|-*?sPP*3`wbPqAagoDt$lXdY25gf(i_*(LqAr+sVN%>ldmB$FpjcAFxkm+<w6
zq~g~7W8^pw4Y|@}qE)4{`C;R_{Nz1auV8MdRc)qsWD6-EdB1}tQTF%NaK)6865>J;
zm$s#~uqwh$$?c3!U-im2>7bK#p@L8Rx8?HKM;+lRODEwV|JKsJV@Yt5BxvH&h8){}
zS`#pwFYH}DDZMDQbyJ*rDSGu~m)-7BFr*$ook$1vcQq#`s%dv*8SVplW=VaHxsHzL
z3J)-P{-~5^IY!+=Y%Plin#L*;p#Vj5=^A_6-CIR*cRZdoQ5-~zEAl^|hF%A-PuMlo
zvUNc#a|m$5<RV5Yi6)M#8PK|!^rwebhO?P=$4^fWgtFmK^9KFd3gLoAa=&=fVb1?$
zQJ&k!)pB_&If@h=n9N8vzsY$a>ag<0^GOL1BXQUTE92ZGgjxm(t?zQOSM{GrvfG`~
zlThh#Q3^&^@#O80><?s%dTB9~A8zYEL!j2aSl?|#*t%r9b43RS$v=J|-f_}iAUiBw
z6g4@dsgx5Za`n43(@61PYsFFwP@G~oK9S2D{l~`X^)=3$B3QG9FjHCAH*N01SFJ6L
zzW{O2Y1DEy>GQ#_MBxWb5~V>*0(Tt-Ra&>za~B%JQWVPlO-EgHek8yIY#Ew!%n-k;
z)doo%2oC`Vw>8~7MDCp><U`e?r0>1h&~D2*`_IxH)?hd-395l)5Ox(6fkO?(7I2Cn
zJPC2Z%j<@wwwoh-ZRrc}y5h~J3MhAvLArAPz$i5cy)xE;=TN2ry7jaZY#Fkd-BlO(
z>vAazl`q|*P@J}zyXr1I6f;z#8*7{0plQ7lfNAJOYUXxPkBT$`L#r7HYQG>al;HAu
z3WNlXC%xedX~*5d>|w3+N(enQh~jZ}a`Z?2<&z84xz%)lQEj;`dXW{hVdRP9e_qYl
zRQb4!9`2`lyD7!PkBx4sj~vUvzw%AqZJYxSGP`~%2(et97RpQjuGhNNGh!8@1aUtJ
zON%_gGy9_9;r*nHA(RAci}i#tBpVwj|8LQ{h&6CjtoSH)Jb#*?;H_xkl_`znK5a1m
zD<r$tycDR_to;FXOS>R>7qF94jx~`Jz%hF~a|qv^0|Jk<RDnao)g9sImrXLc&dDj}
zm9?X&GSlJZ+f@>8`2MQg1OP$adI%^*y8DUJjCZL)_NJkw69Ve)6B2^LocmVzV!42=
zF5oPrIQ_WWlYE;|YHodR(T(QOb_Sm~n6i~}>XFy-Cs3Dyw7eMV_|W%(%^ye*wKP3@
z3YRaj>!k;>q3PHlprvW?aO*(d-91723-VXvIf4dSAR{QYs(Vg4u+sYraE2Lrmu$S0
zUd{jCj;AhBGAe8CLjI`I1W}h)wv1HJYUwPk2~NS!4TPS1t|IGx3DpKi|7!TKl@|_R
zH`Ulca9JyljT&|C+L^vCKvg0|ryZNS(kzZ}jOyni0}Ch-Yr-gcW;~tLfOaTZ5i*82
zLO^d$R~z&OwAZtJEy_?BE>iA%X|UE-Gk6g*F$?-msv|C&G)z3!Ysmt-GVL}9-t4rz
zL&*d{xMmGG%L_gcR8He84-<@`{Eox1=ZOk~I>mB^*@*dm^($<WM$Hh=Cp}POV%3n{
z?(s^TR@_A1_u&5oq%8(_ff+O6$fkVX4je!W8$V-;%5@XRzH$=3UvD=J({VWpy7am_
z%AFcqH_nTtFU^Z9kK&}pGGT!J<U{y!ofYb<g#;x*Q}|!SP{`^?h}q+iLG|h!_Bs~+
zfcoB#S{l#IyA5`JszJ)@lFuZp+A8O^h8Ow-%Q~=hzB2>2xX#RsCn%JEX#~uyXy!FP
zDX0vp9-6juHIj5y7BH(>)ZKE=CIFS1(5o#Eig>eZa`Gc1>}4{h=(I3Qd7vi@njbZ5
zWv#J~OnkS48<As7|5N+0fwY7yZuDIIoK|W_7tqoN{@*XYgHB$am?<h{&8M03X=?)<
z0h~rYc<qXD6muVN-kS)Zp=gmDrbuv%)P~4Sj;#n34B!Flho%<1iNqyuazH;PwU^2l
z21g%T^S%ik$R=Q!6Pd`gdZQmZuryfS7r?RGR|So`n0>VNbFE#^OoT^mA+>nj`!XS4
zlMl*&$D^Mu%`GNpIsVOy@1QHw*LngJpCAx?A2!I&J#4Q~)RtyV2^lq`rK=aTi2WXi
zghqJ0l)JcYc;kkDdGlsH9l{;8QZulP2|}pk%S#AP3Rxgc24W<J(ZfnTDb|E3R8p9~
znW9wKLe*83c|L}g6yvw1zKWm>_uNW-t7*ExThkJ;@q$2G;6Itx2U>K>ATp60+D)D}
z0QNMXMk<ch-k47UdLYm9pbGIB6vu;uJeI+G3NfFnsO$1zTtHxoO)qJ78H6}Uc@w~j
zl<{sZGD(p2g9M&l+a6>0sNm5X2^aTxfkLCa2`zgxnQp<4J^X1|kl?1hE!R~bnE?&9
zQwDetIj$z!T4Uu}cU?nv_fPj@b9?L|hZn&(LeWEA8Ryx|B?Dm6*dXzViwH%=;E^(a
zuA&0vX*GoLId?hAHI1+r0uM5HWAenT0mMU7x`0?Xw=0ayKWtI$_Gb)O;jKL60^Ej&
z4DECo174d-OZ1$43WGni-+}?^f-~B#H9g=A>kSn>y1)F*L4&c`7SEn1(k!rCrb{(g
z$*|$zU7LT^W&AnC9Fwp_twvBj%e@}K2>}S%R!9~F6O;6#C@WKI+771o@m+!pr9WOv
z{XnbL5vzS!mq#L6Kr_kHB3~xqWAHH(w{6eHoHC(D$0?%VLh}fhW^vc|a?sB)C?O|6
zHwx0{lGz$)ky-}ZRLp-5y<B31&1aCU=A^1%NUUkf-^e2U4!DZFs*V8NKi#yaaSaFu
z91-B<R^oZR_G9?+=hB3Kfohbhzh3)kb5|>CR0xEuBjwBQJwy{m0}9{8$oc_`z;i^J
z-@&tl&9Y|088x-&=@=W;T1Omi{Jw8XZpSfs&V&GCG}&;$J$uM{qR(A~Ki5h}GG2`q
zh>UR4E|D+Q!DmpNA3yOeIB!A8+|~T<a6z+hE9zSZei87;2+IY)d$x{iUt8w#1VLBr
zo>n3M`r6yq=NpkBZTGHvna06`k$2X~vXg83(Rimse^LwK?9vY~S1|YEkN+__$2Nj+
zDKlFzp3_=|%lujCsV^xWM{>+{EA_OEND%P{A<m)|e4D_wh@VwNyh$h$lOG!q+(gN^
zKx*Va>+(M8-JgMl-N&2*77H7Nz!Mp{?ZVItsdTm`<eq;=BAa`L_$x|*2;6d#5Ms29
zn8YxkmYM%BP1<$psPKGPdNzdHpNZeFLzid5RDoc`zACm1;{|aE7Vc=IQ4)fWRjsl%
z5IKI#alzp2Qw|9g<n0l<msYgKk)o}xDxJs{m2%P272E$&i4-}H*#DYdzq({Ba8^gB
z_={k_kx$bb_$LltkwQ5p1go<DC`er!DG=Dq5FJGciQ3Z=x(fb@AE>xc-n?tY4&)}U
z@R4?V9|H)5o@bW-oel5_$x-TvqIz1%(t~Z4&uV@`!3M!K^J|anT5^j?7d?4PeT(~|
zMK+E!8H@#eFk<cGUVju7r(6oJCgB#Y0t0j04NTAjCJisu9HE34WzrURu5FcGL)ypf
z#VsCHoaY<<u;|fEw6%4LkB(^L8@Us?zWf;Ia$#)S>+?8F!?PXbf?@vhS#miU@?nKw
z{n#pl?*UC}6y{FkD6VWQM<DfL*rh<8pLU$q$MG|bpD`9nI6s2Ws*&TiDfe#T=PmS2
zA8SC1sfQC@TWn&nhR{Zx^86mru{8jf!e*UBaAepD?AMySorj~b0YdqVd6WN}cUL=+
zEO{Sh<OKd$*taq)Yj~p57{Q&}g8I$mR8K(}bI&BHM2p``aG}fJmr3(Ie1Y7hg?eP{
zb1}3G{6H}cRgjw{T-9<huyYjnsZl1R%Nnps8cdo7H1?GQX?I@0w4w&rf*B~HC|e9=
zgIB!jV6#v1HO~H_u5btMiUP;;In%Bkx?1H}euzN=8L9Ma=6jfFgbC}x%(4}VGJTs9
z^5To*r*s`P+i;!3@ta+m`sEyvL_Pji^|s7HwbzkUn2=Wu-I;(7Pf$YXfG9y%;nV^b
z!6*k{2OR^_7D`bS_S%&e4ghrzRi!yaMx4aEXO*MgF_?8d`<nRCbj04VsSK3iz4>TW
z%nH%kbz!#{k#cL)cy^b3d1h$Jv)Yuc8doCZYuVr$T9T;^x5L5mw@-2O;RtC2x5*}B
zMGM$qANZ(+RfTzUu-GA0db-JkPb*U2VYgRLFRqS??r+g>KXxOb2HDraYen!wUb~@%
z!iw=V4YS5a6q`d^riTp+th>`rG=|-7`a{;&55)$(HzwB@a&$8{qf*BlqsF{xqJYcW
zd@;|YiJ`oUjzIqc0(mVekp_>0GTSwf@gs>m`H3zMV)d>8&^}K+DtDPU4j|qw`izui
zEW+JTD8J@54OW-0H%%?jn+@TWxr+@#9IiVdfGa~od8U=UZj1#TVOI{40N*ST-#=-J
z2x{Ip8_cN$^{D^(k>ot($}j#ZGcjQ;Sc()(k)LtQ<N>7n<#&_&{U6Bd_&Np5`+CW~
zJW_=6A&V)BzFa*dnu>IdK$Qw$z6Kn9;iekp?pO#f1ei{lfsLBJ&hI~KC0oi67EQ19
z@ov+LBzibg?x@N3vQVhD0Xg_-ajK&(LlV%WqzD9&6avVJCty-jEi(RihOXMg=hb5~
zcv9P9e?YZz=C^ufA7(%qku8LQh*L{XtkpB@gm+`s_#!V*q$`<I_04o|w<HsV8gw`N
zJItCE?RwGSA`@l6beX5yVxI!7UcHfQ#RQytw_+*LTODZwvZ8_T_Um43t(OY(2COHI
zfat{qq?%k-nt99_!DG9xNz5j|Ot*9Yo#<Ht*)#3TVgGS;9#$z+K%4&QE(m5Xa6yC{
zNtDYuMmzTTcGK#CftgR}#a)xa(Yt)x6M_?pRPBij%eg8QTuvczAjES-RbI9&eHvq2
z>+#5=hhjvdVd?D>`Wnm*@CY+=>4272nOWi$#j0StTq2o+sIhSP>BZ8z<z~rY*xrTI
zo>e5jj{oUst7jM2(t&gH1*NZVlhCsHQP%jhaiJxe^SGr;SZWM4Y!b0UqWryN%%sCT
zT2vCW_U6+bruct*LG~grdCI+2JA`^JR`2!ldIn)=b;d4fZfToZp+uHoWWr0Lsr<AU
z?1|<#VxcnadFI7<Vu2VI^t?2zM<3x#(M!5;Kdp&>U`NiD0W`>C06XC|R=lYjPG}WA
z>gsGHL&2bVrm?ak&KTFL^0VT1s^V7(YHx4rl0zSV1Y)DTs<r$$u2mB?^bP(^d%!MP
zmD&=PJ=u2vg2{wU)GwmQLT<G|3kZz@Za8ADy44sWGVNdh=Xco)f114LXMO*kexwM}
zyQNc4iC?gu5H8`?0KGnpeRF_0B?+-?Q!Uwr>1%4al^&{%H!q$QY=$cq|Bs*iOD%d1
z-q}=(O$q`!4f|<%BfMfH?a&S?ub`H{W@<FHp8>b@p?(_}#ue$ZHj`yG)BhTFy0`4`
zQwJ=Br&{-#dY|fiDB9*`OMY`$GTGb$p))xpzR9wa0m=2F_@`h^FOUfU^GUQp4EFij
z=l+{yItVPpkNy?-$#=OTQcLIazgld%A3pw@%_z3FMpG1=L8Hmw&-Wr>NcWEcXObuP
zperXF!~?^NcP2WTw}X&Z@7UQOaa6}tzy10|XfwX*_^e+#bn5u~_O5Z8t?1rkzo~F_
z!$sNj6YeqpHyWw95lb<kYd1>w`_1IPBU@Eq>d?z8QOEWdz^zS2Uj0@taUuS6y>qHO
z(k)Nlt{TrCinzm6v5pXGCrp>IbI{5TW&QEmL=0nPq(9}9o$vv-O80Chr31WxlRC;e
zD=z4^g?|Aj)%y-$>dVoT<2e!76^y8#Cl2A=G)UJUUL4Tm;42Dg77IOy2xp1b+kAwM
zFKPcJ*VaCZJhR58^;>PVay$-}bp2L^vEXCAD7MUI5SPxIRiW`zofClrDklEqwN6cF
z`h-)`5h7!I2e)^5H+GIa)mHBnUy4Tsg5-)m1*4*M4z1z+-id9z>N2h$f>XmSJx#gI
z5@gN(mzO`ao<qDiE23rhoEv4a#0{EOYe@hJn5-+%2=9fEqc#XB&(RLwj^g{M{ypfy
zC>I*E{@Qi54_XQy1ZM$wJE9P9eQZZS&L@pOz^atF{E28|<*z3Z+Dm_h=eg0qdX@2c
zqP(B;3$>KB<0jUA)<L4{<8=@lpxOtJqxcKlCZwcUyY_#L06JT`2U-R$zT+^44!979
zzysZ{5R|da9{GZZ!J8Njdc^{mMY^B%x0PqC;3{8IEY}}$OX<M`j=y!Hr2yQM9fmSZ
zOPPcQiahj&%9PzfOYv5b*fNBdBaqG$29+jzNE}~<LnW3~)(7I%HgMNtYoSY(ro4Rn
zFa~M+5ELDrz3lc5)<)vWEBwJ-G~4sE@-n{G+A9kWuI=OX9YcAl>t!DzsY3yDZmh2B
zKc_b-E;Sj|d0uT$t$<o<vQe^n4eIi|CIM}<>(pXOnlA+2Qz&`3UifxNdQB^g8({a>
zjn70#)tYtmBu^1Dyv{+w63u7wC4W2Hno=O7-~dso>vQ%AVvN#FF<A1{Ekkymy)4o%
zuqu7EG22vdG$y{~TU+}pEI$h4<;F9b`t)XvR_0%LoP-B{;b-c;$gI+4s%Wn-Y>r8$
z;eO<`oCuXACK>kPOObKhTmY$eocB9ff_Nke&SBNoD!`m68Q5{GMf9}p9jVNsVt5(v
zuy*xd4XA%bgP`wtb>CS$4ZXKxi|7p0Td|d^JrHo+M_lh=4PfL|>IZ^UObr;4j$uVK
z4gCpJh!0}J27h~`Zax<zY$7{;dK6l^?q>5t|4RZqS&G{$9K_educm{O_?NX43RB3P
zs#|#o*kQe5WeZHupMOnm$s{f~I=LYB3^}8kzV^#_wueu9$rGiUmb+=WtP<G3SPyWg
zUrvphulR8^#L+z!`HMFOGuY^o*UVn`=S?MQ<?%&X<~%(!Nx@;;HF7*gZ|d+cRh~h7
zdOTWZkn#yYl^JRvh+lYy9R9BUgvVpS_uV3>ja*0tHW3WRHouexF3>ILyL&j1ux5m1
znm9ZTIRBV>?3*39?h0wP@4;-+_mv<ap=WGR-Wo5Zn~g7Lnui!FFh~w=O4U`&N!R7z
z_}U-IM<wBwFZiH1o>wbrl(yf$8)oZ0|L>4ST0xd?bT4Q+o8aW>nraR}K9=_bW=zX^
zDkqEAWqS^ZOxn2@$71m~y>V+3Gl<0g2)K$8h`ul(#M@dCSGBAx_^48Z=Cu?P@F?-@
zq1Dt5_~PXv*dl<e4u_Q*1Ig#|%BK!7ilcR7!uJKUe_b4ZkHbqtmd8Y-^~fZMZ7oWX
zP~o{l5sSLmdBM|66OK;GHAd>*)F?2Sh#*hm<WQS~3ZM(X3g(Uz>dN4??azx`p(o<e
z>6D8mZ&AzwDeaq^{Wnq>OGv00A<H)PA1vbD?&)=A3_D$Qiq9p<^P$Nz1sg>j5`=v8
zdEt98H80h^D8G{<w~Ungoia}y^W#r9GJf76baAb@aUQxVg{6(m<K~IT-dD3;XhdK@
zk}ePfmzW<w&n`&stO-84`aW;HyqP%hzmjGzCar5H0w|EzET-2a@_j3ng@K2Ydw>7B
zh!Vy5DnYnO1DMkhyjIqgIMV2u2=8ykr4cDKtP%_-0b5T_05rxG%6z-$6|*n!y3B3u
z!D?`0SgoTM+*gP(2eq5`C}b_z#?WJ44!<Yj%`87t9=1&OCsre2gx}$S?0YQqv~KZG
zLkuzn${G06N(cCBf1J732LKF(ueu$6(mVSEab$ZNhfj(zgJmY-A2ikLtpWx&!jzdm
z5dlz?0_<@{J@CRW!G#NTAjZu&&)+*1Y$cVq(CZO{*z8*|UR>lq*uCL>bu?3nJ|qGs
z`~H%LPAU+9<9rZA5;sm3brc;TTV#=WTna6H$ukrBNs<%LA4Q0?*+Sv-^=@ji;>?Gr
z-u>H2dAKL1<SemCgTos--6pv=l~y(Ro#+7~{T-Cu`0z4b>tFNKDaj|LC0UVPU}3%9
zfVWNHfRY=f8$v9gCx#M$fdAzJt|wd&9g$hVY{eQEnxr@eEA-HCtHOzon|tU$N;+qz
zMT;EGCB#-PIcaR>BQRM)K>e5hgtZ0m@B87G%Ck&&daHxbem@w}4R93SJ0A<o?e|^M
z`0?r&`(xg8ZOJXCAY9ffYM;J3W(15?KQ!RD)*cZ2UzzeOZdId~8R9qgJ<dOKdVjg=
ziTF6jqmX~5eEE9m{F_e#53i_W9bbV(FoA?>IcjTUXkVLyuFmMhQQDn2g#T9mjGXvF
z%jy~Jnj0=!ZrKo@0ANL`P659Iu8Rr5v%-O+#8I2+d1PASc>qFTpuBf0MK^hrb@wF9
zOLVfA1?+66g{RjoU4hH!+iMh+oD|L)?g86(g>+b5P&Gh)(_?Z@6SeIkXS@$xR2oIS
z$C!@@1XgQsHJ?efUQOpl`1kjG0S3I5OSAl%ChFJBK4b^YA~3VGe6jm|8R35DVWDh!
zZy<&QeH#m3_wih;jn>7~Hu3Il|3pz73qB<@)OLFO1ltpLGybbW`C4a_<SM2$jsHgf
zt4;ToA+K9EZxb2Aq13@YH<CQMs~yn}3k86#yr*Vj(wZ|&dTCyiG=N7AI-9xVwHY5?
zdvFMPWW}AxE!6NGUx){LXdsChv-zhhl5yEvtEQ-*O<xjCa8l`cR2Z|2Zl)94hkxL%
z)NUwM-lD<sTa8SpbFf#G1efPWG1Ja9`f>zhNNO^)e_d^)$dQkx^&>8fn3e#Y5UFYY
z%_X?`vorFsu4@{9eg&u%9bRtgZ@(syuPXi4`UBSj-J<_2DN#<J`?-W4_=Uq$_HjRH
zgD=@r)X{D~a@A72yc|Ur%WL)hv(N=WW~>)L9T#FZ`PbI@X{|*<W^=)dNVo}GH@LK4
z)exF2r9AW#U4@^9Y__^nY%J1+*KWV>ba;w}10T^nrelUq|Du5|V<X7*=~*EyJFKQx
z0{3OlD&A02N3K2?JJdD6R|f;!K=}US!9x7B#UZ}1J6-OI(3QLW=Bi{E5<5Ic&x`}~
zwY>99sp$aW#mub!$W3S3v2e<&%K8@&e9Cj*+^VVAIZQW{HnnyKe$4e)ilD0%7)Uy5
z-WJ>q+9(%P++6|0%jJ?2<*PKqnKNnE`$K$Xfjf5O_JnI$NruPU<H<?P_<(nu-o>b-
zM}hEs5Ob09elN+t4(BjfMet~oOMu?li79&(7&ZbOan~6mrJn^mxck3US6-~=EGZ-B
z*dh-|2Li~U2N_b4L^=idTSdE$YDA?#{0UKXvjP+Nw@-uw;LZ&GdH^V(A!(i06+;s0
z)+`i{zwZYp<OVK716n0^S4bgOSKn%3A*BQSnrJHbBd89xg)W-Ypb!79#CM&Vy~nVX
z^B>muc3GMREF}rp|H+jsfJ@x*3~0WR`%2h|*jY8vj`yFcO$Mb$HD8cmEY%pSa+d%X
zP{?b7*>Q-4Lt^9i6$ijr=mu*_vh?_SW^@8F1+f9N6=&>>@$Dk~HU>XNFGJKdCC@LI
zhEDsHD=!xkS6}WcoFSjEGwa|+er0Cd{EHo<+u?66hwH-(q&GKhrU!|+D!&F^Fz~<n
zwA+#Q#3o$mK&2<V|G?3KGA30ow4_JIa6$+{KQFPsb&whE@y^-HIV9l(iq%mJH@}`n
zjp=#$NvCX(jFOTmU3W2S{qWFRDj>?aIWj>*)-%WwQ;m8`-6AaM7az4!o+*b{>Nc<T
zJE~w(UMxU~3q=~PLn9>pB{>b0ZF)7jZ)J=9Y`dFDMq^Bpkqvmrgi`G3bjBMEzn1>6
zqJ)!LB;S_sB2LU7!NKcVc$BMjc*bWX+_oW)(+L>N-hg9;aUK;NZyj2D&vhmU@<D{p
zp<<3-;B*=-zex2881%x)I8#;}b)$YE2u^omY~Bx#NK1oVSv!@;wn<=Bf1>B~@-5S(
z((S7g!!;~+W^!KQIr7m@8VSU=AOu2~jA?4}zt~nek}cm4I71dKL?nHDh<9tI{|6}K
zC_~h){B+yK+dx(DH!5*G`WcD~^_`$sK6{TRiP7U31v3JPx($TOuoG3iae>EnuoRUb
zxZ@O69u+WC;U9nxcESQCEi&}5T70*xqmkFlx~Ok>!725KS1i)`>$F-KTXl|=57j}n
zwGbyST}uLeCjTKa0T1KH@2zUItdq*BB_BVp@_#7pT0~=-6&-2#dy2NoUJFz%F`-U9
zmadvx-4B{(<F?t(cy&An0hrIgU0bvVH?|u}%+o91p?={}A-`Ag^Jm_<p~o}XQ66sl
zTo?|%@4mP&6W^N<Qtf2^lH<$<xl+pZOUTs82Hm^YgFf2BzKe3Zqtb>oBLIibD?Ksj
z&g1Y9(0CT`Tihxf;)b3W$znboIf;EGBqPkpP0EB~x|IveXq7MnO1M^twioh_0t4my
z;$i2D^uf@JD0{h8a{=x$u$WTr)eXf3+Q*xP>}Zfquu$(+OIxlEQRpOU08SvDHjBt2
zNH>JogUJ#oU;wyJF;*Cg0;L^ySO-=avsME$^!#0(LU*&<!u6r@uF||^XWr$ySqir&
zHwO9UlOMFc0jVjY-eR74lLqGF#Jw?^G-e)*h;T`+Z%0RTcP$(Fktb_<$?`OwvoU`u
zN-cxAVGEB?G3GDPSf;Xx1EeVBj!$ES<#5Jp9pTjkkWWPAUgA%9=2!GQucAQ{reS>o
zGql{$(2CPT!T-G=7t5fPg};uJk8xY;STgmgx@JfqLOt&{yajdXLF}CLVs_~gj+UgC
z(41Ls+Nscbw%6WIpMnoddKI#e+~3q9-=(ny$@z}G{@I2v>oC9TFz4hSXbl9RjT%_N
zRVzhd$Z{c~gTudk=5{}RPXTE`1dm@ut-K745rzNYi-p_y8tow9*OfR54?WcdMH$c@
zBf`a}I@Z^?MgUYNk#*e#WO%dOt=bD}3|nh>e9+S~YMBcc@Ze|d={S%~aGCAaM(sOi
z{dgk0x|!NjuFz6Zkhq|j+_BNIGMTUnW~WQ__9f<>5{~;>o9AS31b&15x+$Wvuy8L#
zP9VTljVzhR@XLP@gnPA?S8sNatj~%U;?KqcV3H8dP|UkBa`Ua}v{Fd}R#+N{x)aMn
z1&XoRg4BsmlPIU=sn`g@Ro-G0AOTJB=AQw9W<B}$PTG5_H1wS~h_eI3sTCNf@IuF;
zO*vG(0b(x7YKafljs}9oK?9b;J_?l&XBtobLwaUd7a?J1k<cVb&BGDYgn}zlr&uEj
z^yX5u2lSbi>rKDd7GVwcJaTK~tNuV2hm`=2H}UfvYlVyEwsFLH^|L)P9lxW@_=o#&
zJuY(#h5gPU8uICif=D~3)aI7+D-3z;pL#c*F=V>psjU>fuJi|8iR~sa?XE`bD8S^M
zx#N^OU@rctMow4f+$}fR^ZNzxtTbtnk;QvCdUqEJ$1GBLW<&iq*t+{pU3V?FM_*}0
z>p1!;f4U^@RAi|`x&TVV!*|35Fb6kq8h(!CIikWAEYDTQcqJ7v#RzQsY`M<|9Rlsn
z>~$9^sgFT-r-{7Me=ciJt!89au$EE}-4RZD$ON-o@;I|sbdLW}=LqB?Kx22b#9HsT
zF%3^UfpeS!BxX!DHVW{3`Q68?)X>3&uZdfyEgb_<^gzH0QAW#vzWl(C&meoX*6c%)
z$10J*VUuF1kIumg+NhflUgUB_*LQYAR?8H|66(e{j_s&}+6g`#!+cmAOS}ZCdM!&`
zB;lc3cq`*_`1OH7Hg`tKylj(O((<iL1oA9l#hNpgT{EH-gjCXd*AJSUEtd{Gs~Mnn
zYGVwS(8IgYQXM@18jjROlDrtPRjsUZY<hXW#tg_(g(-~~X!>z_>Nc^Uxyf-JgYH@O
zk5aP<#mohGcOp-c9N6fb(9yg5?o0roHw0X8*9Pjo{ji;eXhTLNSpO^fj#?0*!H6&`
z@EWNQXKyvl<2LB~SemQ}+j>n1kng`uZC%4WYAeQou73Pks|p}lQf?QMOh<kS4&FhC
z?Wjmior+=)kde`=RW39D&vq4PL>E6*_HpT{YCo=x`Ch)kHh@>{F3uSW&kfuK#69&3
zB!t(}vrCpg*&!rVn{&*pwZz{UK_Q8qwqp+6H*Gh*AjRe^lxWknn7>6`ws#jh(uD?2
z$am&{r7y*@_U-7v2=>CIuc|5mGClY<o?gAt8(lqCu{&Gc+M^%PhxF6|ZpZdwD;FRN
z$E2|pX6N=e;D_NVF7N>zY!?R%4<L1@Jys&UxL9ldmDtLSIk06s!H3R09i*`c0y&-n
zXNS<z`PLzxf}?;!cevJ<&dm^&FHgCHO(B;4yqD-jZy-@GFW(W%YVUZ3FlOSinI#7t
zB!1!Ugw7{k=`R10e+Q0y5ps+<8p3r8=ouro>P2c^HG=JRHn7$LSSN7Li$#|MBlywx
z1S(p^R>y$B{I(31kzbH7DgA@EmZUVTa=i{2N@(!ceiALq<fQZTnQ2tUId(Vp9CZKT
z)%-l9$7Oq4llR^IzA3n=^2%sAD(1J3DA2~$=rDJj@lNd1(cFYueVy=xKti&q-OF|R
z5g?jb*ar6cg}O-r4_yahs$t^6@Zz*Y4v*bl)X2a`nmTz!go%EjAS5q~GcQ$@%~d3w
zPUM#-ZDKR^qJ?;IvCVBkWb1U6=PH$$gqxh8jYN`Y1C9P+n`v{!V2*{PxCnY{Y-fxo
z<K22vJ08fDhGmm??L??uVsq#xdf7>FCk1HEGYP<1+BDOaZz#e!eXcV}J)P91QAL$Z
zaETL%r^GWy)5HzH@!d>ZDmCW(ZuV7-XRqEPb;m+`5GKU4O#3Gk!x<aZ8QON$(;n{s
zaBRRkq|6p#U_|4@Eo(2%4;~&nsZ33FepUc}bJ6@qP)7n|S8SGEP@qj@9}`@HWk+OE
zte>%x;!-X08(*={@a{^|)$6LUt?(G#aM973cZ3|*5>DZkE*ELc;@!MH>423y^hQ=1
z!ohR-3Qeir8_E^>3_$$gN#DqDnLSVKv>11COs0X?lDRpvx_QdIa9rjVF<e!)_s*3}
zdInuNpSt3JzTBz?pp?4qqIfCsTz+i~kU7u8#(Anz@>JAQel4{iRr<p~r^woTTr73Y
z5S8Ueq>$GW+^zt51)Df9r>-t{%wgmAAlWqQR^SoY7Y7Hd&AYiRMa7k*{sYP>j$`d=
zv&r}+O2o4fzObXp;}(&%8hGzPpcx++k2F^GBEmm95~>lkE2`eil0QO<b;^6dob;Pq
z7550c-vnVKWR1;c2ygT&H1;rY+Zn8^3g6!(eqG#rkleTwmkJ|zGe<V^4AyJWa#ptH
zgHb#~MA9srUvR991hK>O^<f{@PgAHwXt6a!Bv*(vvH*-#;N1y*EpTfw&#DgH77L;1
zlR|?<#!4q6ba2MlBgFYQ1Pi04BW*j;Bb{SdD2_&xq>0-n&5@lvk$Sd(3f(ZkaVu@C
zOV9Ig?s^OV)_ea&3$Os45B+#EKu<PhhM~A8(O5BWC$JTv>EIt-<+DUYk%Yj6E#QoE
z8=ZR#*gz=H(<Ann68SGA=nio{bd&i7howq&srZMA=F!zeGkV0d*H9A%zt{`kV{Q=1
z2{=&-H>sCX#Q<r56t{SIi;@tI>2DJ9A*2}RR%Wx`tjdlIh2=)UK*5p<=jz9EJeG3t
zj^)I3VrwRlo)J4XKH(XRP?=Z^M}N~R=I7%m{3(=js$^u6xvEgko$66a7WW1T2K>;9
z?A-PFTa+-rTOPsh=(<eR6;=IK2l}^=QQ&|V2quTN3CwJI>PNuTyED?<GdSd-Gt0L}
zR(@iwjH4aRXscZI#}!tw@e{Bv2gc8=xp0gdHea*aT{T!fC!&~8B9_}jWg_pA^gG`(
z|K%M8X?(M;M2vgLgz=4HiiCDR3(TI?=C43>`Clbp>xuUJ({&@iy*tT%k4Lk$YWDam
zX5`QfY`m@Z?N1I&-ociT**xcbWeHjWiwZI#DJ6`om*Ze28T;mCrIzDGcjLj+M&8%f
zn;~v#?=T3zZ(iAA0`oRqibid9Y*ZwUmQvjNmY6!;e=ZheC<W0?2IW5Bs-m*i=m&I?
zJwYs&i7_TdiZx8@a{i=qu=uPRZZiBV)FVc+E9`m*kgui>zRF&pA~G;7;5RtJS}wJe
zy=@`WlCn7{3R(uzt#R%<dM6_cWi+ee*$d@fZ!e)wxn6+Xs-ehc?u!uR>6z*ef;`lK
z8jqPcWOSMqN4P1c$1<R4fwkf`PW<V1OaAhHl9%gDK+3*|Yq?0gg_awU@Tcc>4b=_M
zR#rG?S=oie8iEVV+zLT)4e76bOlUIBKjt8wI*h^U<@2<sd1y`hCTFkFc~Ht3$E5Rz
z|I0r`LQxU3>&>Q_^|=7?xGLgZMl8$6e>BB0oxL`=BYHI>On1Q39HfR|yST>9-cd5C
z&@2X?gIbD-;oLX8?vTPedL_7c4SlyQs^zUqbY#y-x6xsEz|^F1ivQ3h^y8Zu#oZ-p
zEvev{fTx$~>#hk2>KVQA)_ZBJb0s&7c3)d&IrvQa@0<T5tfNJ8j+crd9<Gs{B+r8;
z%(aq^puizV7X-yjvDjplEvaQ^L4SV`58pud${(Or0N#-v4;Kc`@C=U~sC|B{28nBI
zF@1D?P``hy*#T%Ua;Dypfi7g<dgMTfb}XvE`omgCA<?A#KYCuL&)$8=SSVUiVYkmC
zxE;$gYxM_LFaCTQh)&zJyxmX0A8%Sp@HJ)xF3#B!Y^{DxLdf?azG5dvRPQ5$fz<)+
z52~{OV8K5Ow~s)BlNWd*Vn{XA;#?;!@GN~4<fQIDz_OFkz)B$S%?OJqq;jjmZTy-g
z7?aqPWcp654E*_-+Jz;3PXikqz`+7#=>c3(-V8PftggMN-Rj2vo9Jq1Bg%sP?`sDz
z>(HbMu1aznzqRSCh8E~)Pc~UIk`Kk!d)u9|#ia{}Omo&uad2LZVi$fmwIL>Q#bC;#
z082o$zbuHq|J<4*@+bKG7!AFYQ13jC;t?cLP@pIlYM-tfea9sWwUdK%CP?EK)vU2U
zDMoq#S5PEqpdg6m*4eGnd3jakjvl+&z8g&FAcEOhjAG&=MOCxcu5oZ)`d%pUe0B>c
z-RE<Ziy{17wA=pm5)oK|tMDbhK{`1t@bU=fDd*u>|1B!MjSvo#a45KLks&-m5VYja
z0-LZRWgRoWm-_ID?lBe25oj<MaFQW=KjrRr6v?<bles<ESzWq$j+q?s3*m{5OjR^b
zd%-+Yuy@8gApO^QO=_+)O=NtOv#?)U^DsFw2he!<$W)^;BXq1A!EEaFk42rXv^gPM
z;@#m6nM0pSC%Cp@ovlqwMeyaz*u|%CCdG+moUa%GBPh;ewoh&`I#vT>Qds0&ml3Lo
zQ)q)**YIh?t8Ze^aSvzhfZeOja_5l6Xe_N&7iwOO(MM)Hr~Mo8i%NlPf6!C*mGwSZ
zLyH`cyjdqZQp_haDUnG(<QYPlZ(VxT3o@$Encd0l8decIMZw^FZgk9g4#tN`bgVTC
z+&!n^%zp0u0N?w>+o%x}70%{okVjznEYreM!3`CdaEkGBk-p^s%4_Y+9Ml8d*f>bP
zuMhq$uzgmv1CEu{MDv1$UX#G9NaYp$6q^o5R@~XKr`?RFY%kGq1NQS=rZu{bz~TMo
z2OhK*J80+KVwl!Z3K{lmU#!+dJR$M(w@X|pUO(6^mLV*uli-jWN9Olpo-`ZRy!hym
zIZ{dZaBOrvJM;~w`>?gfkBZGeRWnv$nyIX7=3Kk`t9+|Dj6ini_Xa{t2O9&!%1Rwz
zW10}X^5&v)2?T@=<QeZULjbtz5=|A0o0JR^SWZ67HBg!I!Q23hbPie%1++zf1s#;D
z(<1$!MFnY359xyx>bs@npwWH9#K4VtN+9fJX|u5Y+0jP)FP2sv2`wXCVtNEOI7Tp}
zbRnj7X1TTl`?-=tbU;T=E_`4?FfwD0K+xUGnKoWxbjq{&+%iC)#$5ofvT0!c;Db2g
zeLQD}SO2pG=IZkTbk0A-iNTuj#g*32^;0IGolc$`nNTkFGL7uouE@LQs6=TFrmCO`
zGCm91`-IQ+!v~LSG$2)jHdbgq`>}ZUosYt5GAN*IA41{@Kj8cblWb`DxAvEW^6hX~
z$}YPhsn!Dn$$2Y?1AgT|<`Re?{0N2#GoyA@6)CjPm@1@jfKh{9PTP_tF14J2ySt5&
zI+2xELlsS(s7b=uX<!&9JoC<I9R&>!fvN>PjPx;huRdo1c6&Jl18ha^#5r26f(^%p
zYO7%i@`;R$RstW2bfkBO)1xCoue{VacMSe&Ss+vM+HySKEqKD?vS!)3w4*py2ilC&
zO3CU+0#*8{iNuZbgj7)+Ya~$iZJ32{1k$MgW%L$Dk8>KolhteFX$@zl)s%db?Hjox
zcaYh$*#OK)rUe&B0w@Sf<V6!8x|Mc9QihoA2`z};hj@S#kRuCWA@KICnYA-ux9LE&
zR06`2fDvaLpQFDU|D_FyDJ|oYBXJ($P^91wPHsS!Ma@cGUmk-}*uL&Lrz%1pD}SbT
zyRM=Q4S&hU4EUmuxF50Iu4uZgPq6W6fZRyt5u3-%d>k~4e=bSO8X0_$uyECjdP?m1
zT0-x)kv3JxhZt%xFdNPu!KOL<?cdpx>Qz1)xk9#>s?rT~0jY}keQnxkz<e2#@WA`U
z-}Ap*o9%FacTO|7WxP?YX+kP0m<CL>@)vCm^m)Z))-YC0_q$YXO~bQ~(FukR4wezt
zHYSJEv^?nEO<qwOsF8vOv+S!me7Cn+&zY?j*A|K7+?uhCfw;E7kA>8wxO$-e6a8zj
z6|c3RX_RMjD-avTK$lCr@m1w5sd-$8h+QF(b@z%7W-)O-No^x+cBz7D;~uaRw`A%C
zKW=QI4b<CfixFaqEW(810X|W-qEpb0;_g=&jnaKI|JE`i%GR7{B{ZYBtDM$t*peJn
zL!2R%1^Hc?1+Jcg^FV{pJtN>nCx?&QI=$MuP(0Qo?#$3(Vx*63JQWsW<po{<2i&a4
z(X>ZtXZ$|Hmw;m1U(d#>e8inXq3d-%d@0Q(mWHA8p56@>q$ZCmR1s9yoAPT2=q+`5
z(~Y%RV7F@l#-aF}+g)M0PeTtMn3|@g>o%R<hf|#aN09tyg{`kD44PweXs7dM?3JK6
z4yjZqs3gjR_#||mLU2Mok%Ga;1{lFD>6~hj;$l*dM_?EWnV9&poDu&9D?W|GiXghF
zKX$Cq5Lboa%0SU*JY_sGf+gov_tmU-`yTE|G{oRb((7ee!K*b>--l_hu5qNAbkAr(
z9cOcNvaE74raqNonznReq?x6+q>pAHpw#EN?X4tXzrURb@`gr}i^T(|EhwtiZS!9|
zml1L{PqZ3*-OIV>rl0MGSkjT$+M%zq6uHlr$>JM&%41%Aq#)5y)PnCH9V{-fG(}%Y
zrZ0=1l(LY^wzTJDrIF;=Ba_}~nJf~w{Lb2lLzGp9pEJHTH~PDAW!pC-e9<Vj*bq6v
zHk)tjUpv-W-2NI`){{a?C;p$n&*S9-K4D<hhQ1r9tD9d6mXfC9{Bojkq}y0eVpl=P
zKKH1t1vxgS6)W}C-{d=ibaa4>XODRODg{Pr#70&au%pce!xM{G4*BWBLMxF~;V`Ex
z0~HM%R8KfC_MRmnB$6coW!@%)6$QHd42l{u9ydS|1Xyq~bonmC3l)7eGJMWd2kF#_
zq~N|$qnL^z%H()uxS00v)2gP>Ed%e{{h>AuKhJ20Q!CNu+$5O^zAj{d3YzEr%Z?Wx
zd*0=nSufW9LO50lCr%chBVDdWrlg|wICKcI%dtvw{@Hb(T;T~xBfX;+VyA!v*Yd)a
z8ny6>L&37g%d(De85Yr>+`GYk=UVe2Y&PF0dDi`G_;OepfzKPxz|23g_RS>af1LuL
znD$s-S9*bY)U15BqY2sU2l=Hxb>4bt8lv?4d1pU?sLNG_PXDqSk|(AK1$SI{WWyRS
ziE*!R-WvQd+Ig!|KX3wiDNVnaWh9_=$oWpA(>w?veu{>WAEB#61tOGyWc*9@<_m=5
z6mHf~6SjbT!APv0GZkzIQ(Bh<o*|cncen191C0uxm(D2KB6y|$d~9CR8RSSr5#D)2
zE54f9u)BNsLJd(@Dp53(_}|X2Df1H$RK$^t6jL-!2xk(6nCmw>NVvlaJ{F=3*o4Jk
zWp2Vc=6F{NF?pBPgBgK9!gg^^Wm-^0V3fy`2Ec*(1^kSZ>s;9QNz_g9R|8vNm$hr~
zOCukREq5)JfshBEnmh=PC{!$!7xvxI%(M{h-Wr<6oqtyvzi6oNt`}wLeR(1&IvGRF
z=s^86Q6U9<@`!qNpPg0~lZFI)IA(>mG%zS@&TzH<+LhLnNszmQF58F++7~N&3B1p$
z2{8^P22I%bDE+r%eoW+b*9CNiv1o#gV|+^d<sQzKRsXQMuw(U|0QXNBQl8{;)hFQ#
zbsH{krX{I5Dp>VVPceeqoxT2x*UTyhu-4(&>DSo2`Cdfuu(N5w^m10|Pb!90bhgO|
zGUbQ&pD>rv{Et>oReMlRX0@(lX&P_H@$)ok%UptSI}KOa?6t|646TxbwwD@KET?Os
ziG?HccKl*?WkQs^8UiQ+7H<Fx`aG0U=BnPL4O&kk2H5Pb;?3N2{W1Jl1uBJX4h?Ty
zfzkh3Z>195)R-6=M>1s0OpngKVGbtQ_JXeCW!J4Iv-GuwP0%}2pgey<T^anwKi%_@
zS}JhSGOkekAz;Vb>*|o&p7CZ3^Qn7mLd^17SOjQLg-e&69zb{~HHDfsqr33IvK$zz
z0%33>zU4p>k7nU)AiEn7G9;Nq?5j88%>NI%r`WrYc`Rw~9Mu5NkA$;T-qQ-o29eMS
z#9&GDb%P+BlcLwW!dVuv;+O1>1pR<@wz#ZqH?sX)jJrJdkt--TrUs5vv<Ej35707-
zy^)#+{RK96ot4(+BXaqBds8@#8(09?MDaHQUj&~>`DJ53>W}mqESa&~o~%`?Y62Kf
zsl)&X;<QxXxq|S5ufnR{gF*T7TPO_9$#3@ZWJ)OjjU}|o=!*%eG1t))MMN%z-mZVJ
zp$^+jd|@@hCHs9(tf#G2wM;ju-7@Fpb~Nce$VAFKQfWdRhscP3N_ZL*Zr?&oi|{D#
z0IiK>5T7?owim~=h=sXldRUFih*RQeRfiCFN$29y`)7^!@A$+2dBEy<44W*J#(h>^
z(SX7^$#w#nA)^77iDt{Qvu}K`e&zXr))7F;Y4U;mWVP27OEolIwkxidvc(YB7(-$h
z5H-Y87E9Kj2OLoO?>r(89;MYo_$^}?IxAF;5sspFe?a4aSnueKd8|t273O)cjhrSO
z<&*_sORYI^@yolCd*h<1h=C;$HKXPW$<$GZCi)s7Wd4x{yrt3tbkyqy=u->PXs27G
z2oeQ4jrYj%`iovzzW^ds>3dxz0ffETn?9rZ!XjC-R0S^+_{3}w<*+s*ttw~T$0-W9
zg<E1>IKfU4FM<*{Dv)+j4a5$iMIgsETR#Quk~|hUvFI?ewvDo^xmm9x#8}Gj#!%Ie
z7u-32_LQHN;UtGR*>PdPFa3l^%ZzIgF!6_Zg;dcMbiP&rK65mx0c+m`7(2kKgMH)1
zmuE?D2b5Shdp4@{ix$nkL#or1EAqf(R{<>5!6T>a=yM?4NcY}GE23yFSjkB1ke2Rg
zUG;xpPHDc~9d^*HO0WX<lpn;@dioKsBby)9&5csZw`k@}*Z;*I25^A4|EpHIvstWT
zn4u+`a(&HcqcN4d0n1NVTa)2mgFlMUz7<6Zxr{y^30VKTC>9YY*z7sxC3}v8^+|4r
zrN<;e9uZ7sJSrhbA@XcY3zBHr7X2X-{%$1^@Z7U0dl4Hs1IK}T=19u00MBkH%YI)9
z-k16W61QqF5)~*6pXJW)DMUXD*BnRV{-zP9_ewjPwR$dm0@cp8%`}oBQ6fZ<Dz!CR
zdn_Z$W%UN1f4xa8OU&N&4IB@y?Z69iL8H%2<(H5d{n>(0I4(%;qUuHecw<6WjACc#
zx=Hg^Lw<mB_teB8Xu%<|%Wrg+Fn(nE!*il^>9R=Rz_(+5^x?@Qt`q42O%E)5wT4$u
z)JV;~htF<C7&LLZFj|$)#d=nocAB%Njh)pVBXV<D9eVA|S~c9LrqoE~Dp!VE$l~<y
ztkDkRVlV5YoUo6Au}F%<3X<X61N=Jw(Tw?*6*&WRer*Yn0e8JtVyuX+1jijn-HTbI
zhvxH+c}h|WF|-RG{Hl0vC~~QWgIU;|^JbBmQ#IGX)#0VxDfdEqDGfaTVmsN*S?c+M
z+K{uydQ^hMKdB6pEbdIi=jsc+ooBz;%ptJjnMps9CYG}mH-bGgC_T)Imv!SAm}4@?
z?p`)&+`AZpO1iuaj2OQp(<VQ17F8U^m76LBtOF;68Ygd+h=`~e_Fs{Irlz7O`wcB$
z<9olB3eRdSA5)mo&d6G7a+X^|rkT}cyz-^f1jv1*B)b(`v0P)3ruOj+i?2sm*gf=2
zH#qW~Co2KjG`9sN$N&KP6Xh_jkKUetTU|smC`?L@;=qj~a0vHHLG>Es$TI!1(C<^S
zuHb4&_WhkM_}TjK`#ltYjJYK%{B><uxRH5TPf6;#7FaJTnf_Q;;S=N+6}%eJi?dax
zidPzVK?ze`C^Bt?i@^k_=9IncfV@Sj7nVsl5MJr<1!ITuTd~0b4~$J1OmZN~Y~&CU
zd(K?s9@X|zuxR8WD9cIoLd$0<+<yy+ead9a14+Lpm3QB<xn!!YH`w6L3r<{Rh=x)Y
zG|f8t83`lEVd@Mei*K*oxQ`{cT1qOaC4;nXHZ2L|@Ity>^zyw8bU#@7|FEXb3MgL3
zYp63z@XjV|{^9r|C!Uzagj6Nq9)m#ry!ZE=^ryyDB5HkK3&hT6BzJh-(QjQ?H6n^O
z5S7?2JB!>X%RJ{1i4MmHO567_E&OYP%Cjn-PhhK;TQdU&p|eg{iwY#JG4SizvhrOq
z`M|5g9_WC42?Dky+QFLm)d?|ljtQ}V9fbrk-yhm`w>~&_g=hHG|G-9!(lqPThA)zE
z(ogYb4LYyIM8-7Qo6pp#mvOxG8k%NPbxjm9AI@(*Lh6kEsmCbM4Za}WeM2H)(#Tw4
zAqnU^&t?b)04Q{pP%^l9BkzZ1Suga9n?7k!3ohSLx|ug@H}_tS!z-scDHlbV91?Z8
zp6*iZd8?5JPlcjH{l^D-)`Dzk$O##*`AFa5oqZ&HL&+p;0S%73!4Q)llS&<+@_8pd
za!IGBfmkUw%lqWTuD#)A)l8s8)Rx3OHPNqk=&|<41=Y&euaw#ckx5}x+FL(W<Ap5`
z`gu`O06w_~f4QpHE3-fHCS7yU7zl7TaaRvxK{OH=LGg^X$f-IU+V6>JT?pLgisxId
zzEB$y+}gTZResH6VD|D7g}(|KACaTgMAv6zIgd{(-wn@SF>#50Rv8{z_e>Bk>eE&G
z3wf>thdDk9AR*>|XIG7OQFotgi_kkxSvOQM6r9Dt>eUyF@1Hq6S10j)mfc|?Lf)T_
zQSf#&e?}1+VGQ^fNv~RkEqD`k8I%&a^N?oK*_OoZKvw<@VWHphX~wZuC&JCJ^c4dy
zBzh(JimeQOm<EWrap7DOZdLI=bk7FljxoU0#r+U$d6Aw;5c=EOh0vaj*W8-$@ko$T
zJhw_90|SY8p%67&i-FyJsHT!a{bFbXsX-$+R!_wKY5K{%6<fpBG`?BC0r_*k(J;gy
z8d7w>V(f4{<7Li@%Ftjl8}~Xmh?FLg5O3IIbTY3&(x5VYkWI#QafKuZA)x;#F_#sH
z`>;YgQ41-6P8XG6EM|4Nnr5l!55^oLE1iI7{t`RdS}1F?9^6(rh9Z?B^Rtsud%9g)
zzvNJPhN82wz7_e#PTrqx2VmyvS@&^A)vxB{jD{J-o*~xLC2l_&wJU{{e1B-50Gy)p
zKp<yu(wjTb{n#8qch;tH=Ka2HD=5D7ES{D@G^7AHnsL1CjXcrU=*+U37`Ndkk;ph0
zN)U1EGC2uPay)P(2i&!Lbr+5zSn_FlaVN9rN{6wlFe(a!cDOQYM9N#il|ibH`f>89
zoTlx`2|8Pe<94L!Qp^@6lt_HBTJ0j*>p@@;%t{aMVwn_-t6iKqeZTZqT@YZl2^09m
z&dC2G6$4oo>)@paRR{9fR%op>&B{`$Xr8NAjps6s*Wax+GhEW>(vKyb6Uf*g%=Nzj
zLtc>|eRG1xTj%mRs#rT{#?2Sx&LSM*{g^Q-2uGM@4-HqJyk*W-PCC)`wsek4HXpcX
ze>-lilEY2Bj|^VsTW=Agh@P}bk#7c}9yHLyUovb075_Pm-GRp_lqNsG-^R#iAu${H
za7!6>0n-Voijx|KQXkoucjzy7yGi4T8&b0@*Z3a_ikq|cKxko-Vd~mT$f?wRb_@F9
z{j{zTuCgnGVVs>EFH#Jun-wEukSsLu@R;vm3oGQ&ioa_C$yD9MVW2x<PdPPd4@*nt
z6j)Gu!)T#>M3{<s*?YC8{=lwCRt~2pEqDp?lBbso6wPdV&yj!3MyHW;6AI|nPcMKE
zX^P?cY6FThu{VE&|DVvU9+<(qSR>%8L(t)R=*SZD*RuzD%j|$<F(_7CPw^@A;g)){
zgO(*fO}@_B-rvLPY9j@~2`QfA8)*)$=LKKHnboor*;n`VJ(nIt6WXb?^rq{<f1whs
zyC{j!d@<-?^JF{^dcTg#w(?;AoU?<e_!1B2)yTR2V7{f+&f1u-ju&iGjsP;Lk>vd+
z&}p*7Ucy9SXOA!B|N8u=rs>s?OkN<QSXWdDd{2$PfVrn<?%3+RXNh6?6|C7>76o0I
zXL8n9@S|3euvau*zVn|vGo6K-tfH~2V@VG$Vzn7%_Mz)25)s$UAo5kOA0s<`>RzW#
zuW9Ymyq(k51{R<I;ay%zRpfZ~)uFOsP{E#s+Vg672Htjic?UD*iQiS&w+@alZJqMs
zn-AdKv3M{5|LD*OSwK$87XqBFd<ey;8g+O;zlnu2I)&`@DdMB;GU+cl^G*W%#Nohh
zG+`VECpQG_Q}m58c>T(N#$^3kCf`-x^<@aD@$_`9n6Qr?1%Ll0x0rvn3W_!lKY}tE
zR>Mf(P49>K&~8hJg)u$-lDM9+pvg;t9G?7nzqX{`2$2DH(JX{o+w=%OF8cBLFO+H~
z-Hu!_1d`yXYto#p!A2lej$qzvY0EW4t_3blmG%NyY-Jod1`^?chL<COL)~c?+xl5Q
zkFEuD!>mZ+XpY};N~HDA^1)wRd&*{}2>ppKKp-AptAtE_LMVmD=6^jZ*hp5PL!S!U
zq;kBDPU)|%m7YhALf*#~ei>PtQrcS0n`#I#pt7Xz{*7kpq9dZO&pk7{@<<+x1SzT%
zc*cwwuqn41e!qnv*ZBkJ?W;GC$GwOI>JN#EVQ&npS{<xNE9}OV6XxQ_x!a<t(tOQ2
z+}Z+A1o;SzFkxNW*u1=!Zfca`M-|gXj?0jV4yq~UrH11(o{)Bazi`<(0oM^H38v%6
z1X^>C00Hfybs|Mx9JTd8Q|DG$X!-pKhX%oIfeC;h*)b<@4!NjIXhqRM(4|3T5PAs0
zPTP-YzvGHCUv8Gul6uqrd3$6vahjOp+D7710S$SI_@Gv|&HaHV$s1!zn27fO8D46{
z#G;~bwBenL(y=snTs>UAQ1#mFaOjhSIb|)UFNmEsknJ%{N#L}~D<q?5-^5=sAml!0
z3_^qeStXoH$7m+>-~hrLBs#IApumEz_t<?n0&GX}X34mH-bOYVoW@BWS23Ye$Xy5V
zqb1v@H*YX~lr3>t8&`bL<81^-DqpHHhR2uVO)TXz3T3lvyM9s84Sh0bB!WPF{&PG1
z*+)egSY!$9+|{%2cKpX2P^Z1NGVt7X-HER!&{79lw;`hpl8#QNyW5;vKs2zaGO6#4
z^eiGm+8i087O#l3F^j{|8LTD{(@J50W~*dvK}b{j@EhOh{@hkqEvpRkqykxAy>x}F
zxZ=PG*`R8Q|Gy|_BPWWE*}-p9kUA7EdLXduS4fTf(AYKw5W6ZnPD(6*QTa7tNc$D#
zVo}0OQV_JMPHlJY@ZE)kc$)DhI(-Au#<uz-B(V`Jle=m90kR4bRi8B!ApZ(p-XW6<
zE+Gvub!x!{5MG-P02+*D+i%4NwA3QSN+S$bS0hZc!E=&Cq$LD;Fw~z+Q$15AZFc?|
zKme=5MSdUr);-MfgfLlHI_8?-D6bNfj>f`mEGgnYR95Vuob|#ztgmY&4APNPRczF>
zE;1{dYM2ag_QF-)C~E!ZQ$F|Gqo1{cp9dZII}sn)Yr<IfEEy5slrf$w6~2L$RL0o-
z%bLn`HDagsO_@_VRNUZSEpPbmjzB-M3vkX2P5%KZP6Ny)=aLS+uW!^2!Mx>3s@aJM
z=qw3>5heVfBa`*{3?;_7!R`$##j=B1^d32Di`FI9kTCY!uY1>9BRk1m-`p4#5~K2b
zY2l%i+^<iN_dz8cHZ#+e|9K_MH=fN3x)!9B5#cFdoa7L4qOs2KPz?-mVp0QWE=fVm
z_^!TO6wb);UK(;xEb;-PKav&xty`m7#M24R%45sbq?$p2Mu(XEtEPoAUV1N0I@OSP
zW(BxjMf9<u?3v>vK&tPQ6Knkt-h-o$<CXvd4zY^&|G>D@0hi?@N=!cbgkL#prdQQ0
zcOo;9FjNINT6BO*PZ?A0Zxlc=6XIu$k2&_{(x)n9C6vdrx0(`$Ch}u=D~1TV9*j-?
zMa%uTf%O*nhSTvQYToD^C!flreJG2?8V#2zsq#;em1U-To2yZImwH6aYE_)baDe%|
z`yBHWyF<tefxN6nVmF6{CulCOZUU7Qhee%h6K_WK-+|xYXN>qE0!b2?jlfc8lbL#r
z&O$*#8*Vzcn$H&#QCf<XF&Y5770GQGQxqiKLl4_u@#r*hO%Q>p$i#;d;eZ97Zd?C8
zquvpRLo@CDWTxf}6|xa?cUvKiOgRjCXB5<}IA{5}l`M<vH17esJAoVbZ;#b?{c1dP
z^{_rYu9)G;Rm1JJXw9M+1`f6)?8@QJeH|2WfJY2$-cw=XnyfqjEX{ze>EyQ>=ZS-#
zen1m`pb4Ym!zR!;>awDXc%FD5Vr1dv4(sJ>*IJcgBB!Ld;Fx;}f#L#JSmMcgp_}{x
zLNsQM5~SJ^at#VVt30u71|XL9G!JQ;_;oXWA~A8u!s_`~8;u|M`hf!h(u(zIRyJo3
zkG@Jt`gP%FZSmLOje5f=3a6A;(N0eZz}t2_Of8D_q5p;a4vhkzMSEPB7rls)Qt4KI
zzfS3_%sOMD?yXsq`Hl}iYiQicPMOipH|0HbLuP$zwh2ZDd!hy8<i*#Z@akkDy{ko=
zHCl|`hI$kD_LUSl>E;TjaAaXN0y|d3ACS~HNPQL)VFzRT0zr}~u=0p8*k)CO!h4RF
z_af>dG16ipz0;(8ub0{UN}Z@1>NS~rNL{{lj~WmUM>wv7uo%os(L4U!#Y8z@YJ@kh
z1d#Tnx<SS|-=5Tsl;?HOQ&4meWWW@+#Si4v)_Gq5<8K45<q0tNSLGZP@?t8vYELrt
zTWivnIKdXMD3W;$0h(O(Q2?TvCnz5*7y;&o(g&>2OgaJq%t^Zb+t|?-w=ia(^~=ws
zw&=I&GO%^&w^@W{aRhPwG)AJz<uz^<+h7w3sic3@SJzgYCGUW*_oD)`;1!9eKP+f>
ze2GC_VUMs5#DqIS<wnl!ybnYnNb6I`2gG;KmE27dP$+iPC=V-`TyA+xDkg*dk3iES
zb4Y*ytbQT?9o(>wrpjYn<UhyO^Byl!1ODz=xeEXr5!TSpyiS3Ain<aJ>^*n!h;4DW
zZSIS0Aq!_2MbL#L_Bh<}0uo_+W!x0D&2K4e%L3x|;}kesMld`hd;GhAA!I^|4g-48
zyfGz2USRlxRsFy;TRGLsXtR1l=VOHARAtIHMh<1Wq1!ia&G}teHmjbEvLJ?qRn8S9
zYMNqP($h8xyx4g8DMZWc{sKA}m0%+`Yw~_XEccQ5$UU_)+A-WRKFbrSny`&5UUQsS
zCUy=rCx+(*Uq36x6VM;EZcD(Omed_Xax$uGG`}>1YNVZPw5sPm@7+DZ#>|P$jXVy+
z7(#~6cMz$6B00|lK7t?BH#LFD=0hS7I|^{d>jPf&#+*Yi1_U*rxLxW!nehymIxB<@
zwc-9rp%HSm=?D;ktGOzOHSPh*TnjT-i^<ok9Ckj`;SmEU3Bxz!PGJW4-i&-N#ax=G
z`3>tAUA;5oh`;j2Dv3RVS!IU)Ckq!5#|$=!`9g}moO^V>l@zIvxx(vVQuMpy)SjmN
zl<?=1u1J9yhlQDn*chH-EDUTF#H3F?V_oRDxf{e3@Kv6^3unS~w#~Y0y(?0!|CO91
z1cChz%2z)>2VF+1ilH*$HNp$hJ4(%5x~dE4y6y2;d_=(mU)LTEXQj_#!Jd<)0u7+O
zcBh%bZ%I?gf2DneuKrW)#WUI)3P55h8EsiZ{f13YYL%$*K)(>#YD+;;F1!Nvk>-fU
zRM_q-nsl;TZJ!3}7klIfcMKaq_-{qBI|oe>h7+KMI){IquPnqP?}sdu@Te8h_#B;Q
zJq-hX(V=R60FHle)QK}_TdLozS-gq@Gg?pJO@dp%njR}EbeT{P0scqy>l?30h})_r
z`6%q-Ornr^9|-(JUTva_fKV$m2JawS^rF`O+-`c<hG!ij7UU{GBoXD-tEMb;p?i{X
zn@*b|zxFsNa^v=6v&qBB0TeD|_=Z)6))xU*6OR(RnnL{@_Z7K}7-H@C_0oOx2OR|n
zQ96k-PGvYST2{uFUP!u%)bl1j4o}H=HZse=@%sjjT($Z?3DVp;IklwXf*$a_>pYhv
zP%KU5;f!%lF=BWG8N?Gqq&yI={~y>_rxthu{#tKUJ|WYP)H95e-oUm~(Wxh~KhF+S
zv)wJdA~5{j{6X`DyccOxTc+xCwp#;f4!ffvbbV?~d<aJI^CtXqYdHkP0d%?)cdJ(X
zsS!lBf^;0NoQi|fV?3p#<lqD9>l3Im9Pcl!PiL^(!vl2bkVq|}kevcU(#81YyqNA%
z?5}Fyo#I|Ls3>nDtU+7{fLshWEltO%R*^8FKOzZ_cnlaSQ#glYW$ss`bu*m~?4NVI
z!`!1>QcK0O8F9OB*B1eDzB2WOlvIevj52}W)|pZ}e06hZd_->jdVtP!t^jA+YNc_O
zH!WgNA#s_NOLFz%^AqfBQ4sfCOxurk{vEX|q>#Lr@xt}@j)M8T&3&?a1fJfu4E@ph
z+veS4<xb%?ppE+eoactFm7ZaeWfozMPAW($0ZX(!Y;D{jQN^L3n>hU+Yi1`FU3tim
z5{Gz{{@OV|RHTmcx96?@NE;N8MgRRCs-6tG8+F_y*_R>mv*kJuTZb8c))Y;o;Nj$_
zHW3|v-88BQ>{Q>P6mIn!n!0g!hdCwrlo$%ej`KpuU75!W*XjEms4Yh74hG>Rah01=
zE3$%f+BVqy3#KeuoYLK-x-Fpbtac8kuiz3XjzzdMeTiBi5Xk4U7_`F8IURwcM{g`=
zW<ghChJT&hH`Kn`W%%r*#sV9(>r5GS1LODj10rp0#CNQ+63>w8%1GwUe$VU@Bf+m}
z1{j{|XNaya1J!#k=IiR<r5C1|S|n;0wh9}?G)I6uz!K&uZCd;X+{*P1wV?lK>CXnb
zGd<m6gK{=TI1cgM??YoZ0vqvZG>FfQfD)4HXr7ke)xa^bXiZl#Q)|b@x00g&DaG#I
zcc?iSSwj-)Rb5F$Hd6RS2L0m?ioW3!JOcqc{Tv3&1JjH__UEV$&wJ(>Z#&PXQzW{R
zzvCOb9k(&Wjsx}+rJo^!%uAgkAAISLv`n8&u}iT$pZV2l<EgJ|9rT6rZ$;vOU*u)y
z^Qw7hj`u1f%)Z~})2MV9myljK)BH9mzOTb%&x7U*mCgwAaM(P7sTv+-1srL;cvN7v
zBI`Qa*)gf^>}fd1KG3$y%w9J8516y%Y(@?6iO&K{5l!!^m~?7R>GJRfj5n4p;GD8x
zW2fzbh@QCNej?LHahc{D0Nah9j|V7Fub7-JlkyRziEcHO$`tASCm6wS+!)zvqV#K1
zl3d%}O8>W`16IwlkJe%ylfSG9&mR)chlw-3?oW7qK?%sFZK=naT1bCTkmQsR0WLHZ
z_!eIB#D*zFR>v;@BZC#ySccLPQn}43J|yXoFrk@<>ln3^-bpY7PE9gNqwXN@U^|xH
zYxohXXm;*bb4E$Hj8@l>cd0#|K<&};3B^P}%*Jf(v(qI!l(;Q$q9F){s8L2s0P0=2
z#&Cv#gBff~T3|z3MyR~0Eg-rGPv{OI(=gg8BW#kZb=A}1XCY7|^7oku%|Ycl-lv)h
z!$xs)BLF$=f#KPJz)Oogq^vD`f&$cDxtJ&`n9e3xmm~b|asdV&-*2;dfSXbje1vsX
zA<BVcv|m_p%6%|uSwORJUn(-O!;X#;!o#P!toH#W;m{5j;a3#oWO%}hKPF#DBd;X>
zp9;^S3yJDVk|9E6wPY0B@Hs~~gPk?_e{^JvN)hKLD2*hUs_3H!%GXNy7w|t0ypXlP
zFRl76d>LDf>pi3?Dlas)?nAPTpWLm<8B!}*@gI|XTNIZg92f+-Jus%m`mX7cg1(dv
z;`(@bQt<%z^*@~@ho_Zv8hm1b_|fM$xm`cKI)FX&z(tn;^$&?pgQ4y%NkmVyINJwy
zs_nraJqvR?z1Zgs^z?Uh?K)#PrLFI{NpR+*D(D1?L>QewsHE}0>Bx%S@e1l>6FzAd
zku#QO@C7pV`uFTPi9l#8{%G;|5A3QCy=@2)wk6d7t#9j(t$&>o)2qRi%Eu{Yl{y#^
zeA`*rZKvqMmWG)U#w?bN+P~MIhcO<p&zOqU8N4<@TLhQLKGgb?@1!w}7B?BJg#7$j
zZ<~{%nNCZgEr8>MzhtDB8cbn(NyD;QPcs2=R<XcE7sO-y0DR@-RgM)+b%HgDDYam`
zB+gM4XLT@}P*|!5tK-V6SU|+vO)SrxHko7cpmw_R;`SRBG+*nH>kpD*jt9z`!*RDT
zdoc7-KCS%7{GD5HqhCK<zn9ME<otO#t5$HR1w;FpBIPGv?@+DRVy&v}qPg?XV%50%
zdvsG<(DG76(^(Fx4FC$jDsVyCxyyaBPMqCO{i}4!utcTta2Vdabu^D^jIzG5L4t8Z
zl?rPG*Q}}5nOD#86;gO+G*v&_;hm@CB)>waQ?c=EbQq|zmZENx<fxEV#eh|_XU6x`
z6(%tdf46^h28Mvith<YTAgNdac~f+Fw6`ooz+9ZFV5qt$Yz3w@Op5l=BUe>uoGvE=
zrf`wB)I)_x4!=;VH%E}J!-hyrG+9kSq4sRKw!XY)v9<QZ0cqbl|5dcoGmaVIz}Hs7
zQBjn&L!r4{PU8Lrl?0<~UbdqJPvg#I-}PbA<nKx9zhA<69##C==EJ4Xn`c-^Ii8l<
zxzHa4SmDYq(8=W3m3~%I+9ujfwN*1NeL%f61MPITye@Yjeh=@3Z+)HLz4{%V%D2}N
zr0B({LVs}Q{r^gX1t-4`-K-_2G<fs>!h2cmDT~^czJ#Y>`Xc#6`G{CxUvdmD#L}U-
zE?Ne-5lScNRyILU^ZT5t-A`5bkBoK$Mkzm77=|;rQ-UhodyUoSsPgjzwP{|n8XNm-
zHgw#3T3C*m4bClMLKPS2JJ%F|Gd%b~yrr?@?q384!yn)6Pr2<>;hR~;T@Osr?~PMX
z&b|uUF7snL3RNTgp6C%A+W}JF%e%)SpkPF)8FwoB<w#N5@-8KUB`1sDHe`u<=lo8g
z?dPX{wu4zKfFGM<!7oW1_1PXwou|+CPO8FrcGx;*XgF3!gNm=RyIhVLfA}3DOD$9=
zYIH{J4fUaftq#zI#-?i43;4zGivc|Jon74^xtD+E7Y;J1gJMQ5s)Yz?{i%Rd-&!_3
zyrw0!jZ|cs7e?e*&s;_oQ*w=WjvxqS4_aG+b#Z9zXq6(|s*f!6ua+3|{W0t$>$hQP
zt}-l2)42S-5NZQVehYLXYZL=Xm$Y!`fl^Ua6GR6zmKd&A+-76Z7E!4tuH3E#uO@VK
zI)o(gPof=>Hj?`02a%Fm#xai^T_mz>;EMLiF3eSVWk-kFfB#_5l~KOYk2ckk)gczo
z?Uv#H|4(S`r;R_!BKj-41i^_`)ctN}&?0CRoA6k3PB?3tq7aEbw^Eq1itzPa30hqh
z<t%h%`XOQzScrW@Z^`=TYzKrPXl4QhoE4b`$?b<nfvIXEPcGp*M_{y4hn8G`nU48&
zk9-{mDsaK|xf_Z#j0fN}pZCktX>0*&ur*-HNo5y*Boa<o4(u5aRi|neXo@WV3v192
zibu3>Z@4Q!sSR4{FM?>GtymfHlV^>~vY|<^iOJ^Zr-2vf>{?2xG_b*1L1~U~5BWX%
z;@B79oJn7n0trQucg9l8c*HPx9`Cx}N}HzLcy1nuw@JIG^qCgNl2SG)gY-SW<#BzS
z&A+pwUMSs|33C^Z`d=|i9a9TNX*rE%>b{6{t0Zm`oauS$qb8ezrwVNHNsy;0daII&
zzo{0k7pz$rV+9`q;8`lCk8LSFM_nA+@j?!;xSyvvsax9c#PWCAmd<S(*_Sx|Dp)NB
zU94T1G3tY3gdK$GE8!q!HorzonEe0+bHe-qi1@8fd_{JmMnRuvCR*cplSX@Z4)yt}
zq*>Plo&eMW(ijn}hLj)g!g`O?&iGorS+!$5_!K1D^vM|AS(j0w<a}kQNHc-B7++%X
zDPSO~_V@!m_T&a15Zltcw?a2r;G|3AqnxhTPxMAUI?^{Mx=sVqeqM2iPzH@iBYQg8
zo(+h1C5aj(bbO$bG-wL$nV$a5i!rI<KBAF9Ldy1R>)%qAZgDWiQ&kf7WJxYcI2(uV
z0t`UaYqUf?5*veq3wWU|_sW+=dmnBM(dUfAfhN`f0DVsmpRc<@P(h~0mV(F0_MuAw
z;@{-vTcqH6%u=GtR3K^iDa$du+qGo%MtRJ3X!$}#{7^VRVAb|XC>*he%cLL{dgdmr
z?m{f~`-PS^A5<yM#iD>A8yx|0oW8kUPSi`@7ZOLdY3-gVt&CiJSL<$>!+v=Nf!sG_
zhHy5>#vs-bSNVT@!zaQ(wQhl0)}QYJbFE~%dRK5n1hpvdug-)CgNt4-Hi&Yi14L&m
zszXGw4t4!w!uRciAK5kZI;zc%1l}R%n=2uWBq|D%GdjCpp>__$j0f^Vd8>iQ>ISX5
z6F^!@eO9|}FTi0A>xJ4_xF=6|YKzIo_|(87p=9SfE`Y0;Z9H#1x$qG7_|rZ^`ORw4
z^>dPi2n<Mv2AhM7s}R{9$+^`_g8^)z7FyHCdu(>rAs^2F$vc3Qzk{G}&#lJLe~%#f
z9&suOBVrAFm>P2~9++0OT)<2rCXOn2ZpVYu+-o8wlk9_~3~k6_a{Fil2Gd>f1x1DY
z;ybeo!|eDE_WzT%-4yg^B<H`ar4TB$U6Q$(fXX$j|Ct~zc^pqq^d6KBjKohqJV{^N
z;m7AtjIRZ-<`3W(arcR;MI^pOMAkY}lF{%2TJ$+Id1<1F;0cB$K+VP56@J~4Kb)no
zx%~4=fXKiDwRdM=ZmvVZhpuXPGllUfMMP&Fsn=E)$s$Y3X=W?LnxbNtzB=0j4vw|0
zvgI8kzg8ShI}MNckJqC>BBI>!*M_sh7g+a^&u?9oG3*5TUli2grM$MLG}DKrc03+S
z#&K3-WpZxM<Y|S8Plr6`aJe8O*=<Dnx(+}oCL75ab{QH7mE>zYHkL9i{nf$`W9H3S
zG#U7N4YbB$`J_Ytn;|28WvZZdq0ie1h}-ndXO~Go+&zimE^!5^pS2li;B%=YmSLMc
z6bsR`0}_dEa8Kq$8+Ychi9c>=x|rF^a(P{Xb?|L=;rM9$1S`+*5$rcuFLq<t=<7xP
zJJidBvJG3dLH~{U4ZL)|j%+qw4*jLZpT<ND6OYlb=`uiy@b;KyjaRGBNobTdaH5SU
z_NiwZ=PoA&lAGM)q388}03c0KFD*=H<C`~+!IxhcdJXO1=|BUlG%qO7sBg(Pkws@$
zL))6Y5<cNG!Tdq><^>uBX`Z6>L4mr2SwVf@p4k7AgB|$V%jd*(2=VOAbPRy++;Djv
zg-aegN2IInENukXXkmvfyzvWSA0k*aci~yaFC8x&qyZ0c4deG&)M2ZyY7H_In%u`r
zoo>GYKTgw+D5z|~n`iCoqnlkPg~s?1x^E)?eE81fyjWlnlgkTr&n&X4o6S>I=nxTJ
z7+=Pf5w72Ob||Vf;kThirP6YMQlHG*_WqQS6y@rA+l)JjVLD_n*O3U=Nyjx(KTc<A
z8^d!-6#G~}5kUj;s!%^(Mb&nU*Z`|R6lG-KlCv&QQH@$uejiom2+g%7f=t6FdqX#w
zU(l95DnM;TiprSn2QY=}M<PyAu-$Q?fSfu#!E)`{tlixBDcGiq)?t;-BbuHPRRuo_
z`>AJp%B1Jp2XIzDnd=A1K%C`HKB^P>U+>=UtPvz;-YaeTohhY9(nX5GDi)mu_bgx=
z(wd8gi$v!kwmsgm`NH|k)u>(9-{U4x$fM;}Z5lTyun$xXV@Tcw*<#6P-0i;v4<Xpo
zr>%-SRdFhY<1{f@4W?>Dku}eaM$WrwWhmJlD9d^?uQCy#FG5Zt!m3~*Ws;hk*CF&7
z#<B4ybvP$5h>8^E?B>s+c|-NXD<?Cf>%UM8<frit=l3AOP>+!RbTCZ|+J&nd9>5;k
z**Efv&bUCw0gk-zFbdQjL>n+vqWiZfWxR~%jNv_p5KR`A^dAH0j;$00AG$)~FP?1Y
z*|NC>rvt>TQ@T*`Z1=BA3p-1howQL*I7k;O$=%wuJ{bbRvO5tBlauiFqgR79s_@I3
z*5QdDL7zV)DZOTg;~6h!bE`*)1i{$gYtvWep8*G<5yCi3RnMNEzve=g;gVg5L4Zsc
zro!`P;9JVcn#oK?oXJFYUXvFHIPJs08x9AyK10~$^`(6?n^0-+O5P@XqesyZXtMZ^
z?~(v4ao&wALFm!nt3SHyKFoPGRwR@l!24G_^AS)oY_ABJgEuW{ON?MHMmZnFDFBwV
zvO;rG)Qt==^DieKC`J5)#MV|!jH{0Fp%2qC=e2j%u8`Uzs~SC81jEx21xBQ|UFX>K
zo%tPuI{=d!XFrS++;z#~2|o_H>;jP6y`U(+qBgUWvV*X*NZD47BEfEDFj)@HAuAnD
z4M0y=Mp)Ut!Dy(_EAtk{n(eTU(+0_m72?kl>_z**xst50X`FNY=|&Hitc;d>!F;Fn
z+ea-N<c;!gdMiz$=|?L(&a>m0h>q=L!4hU^3elgn%Oc%QphtJ*G9OEM0LvX*C7_vY
z0Zp3D2E|VE(>4m5{ELZN3Z8ye=VK{TucPoAAK#~Ysvx;@HViHavxEAHYEeKVP$Z0I
zXDsRyg;~us>h#CI(?PjeLdh9*WvVc~zy()g>1!)!Om!pw!|aY+G-P2;ri9vf=h@5C
zX-k;&;VINPi8K)FWW=I7KoO!tJ_b<Sg0Jq9JlOZxCijBOQBjYwtV;S{f8T8gLh)1q
zB_1wu?Mc_Gn7A*@5)uNYC14eti^E1qsmH8&+TTE<;lJ5ma}zuX%=oLTX;EZKvA!mn
z8RJC5uBPG{p?&#EXSWC0oCF9NE9KQIK1};BK7zyPFTJ8(qJc^}Vjlxew58A>(2>jK
znsVH|{3|$c&)R9lmLl3)4#I4cQ{~35%#``wII&MZRl&d|zJZN~zQ@MannlLPM2S$7
z9(HDkX6~jv@B$2egT&8i=&Z%|g_D<NC+YV2X2{DC{gDA3zyyhN^CLsBdw>~YDMx0G
zKbWTM0+9Mcu=c|?-+6w;$Om(9QV6X9r>Ae4%M8$;H%|f|jiyOR?Y*j#qqWU}vQHV;
zXW9HF`tT4#IOCG<%}+VH`xkgJ^iCWaPb5qq|9NoA2(<)Qj@$R?dZYp4H|Nurl%9z0
zK>)pFyF(^Nh++g=#1)o}hUKw4(n$21%XiBU3R<d?MW)JY6QY0^=83m$bk0gtcgnT&
zA!m;uF?5$vwJZ~?ZFF6wxAB;EZ6a+uBMh<HhHb4BzJ$nXyT0x(LF{q65~gHMTY6KY
zSsZj0RmCdNUtdBe4_qWRzF%lKK~r&nt(-rXTri@b<ii|9$uUu}*J0-Wu!-{hb|{sM
zYh_~!bzPHwwo81CQ%?x__u^XkZk>-zh+vf*k@yCeWJP~ofJ`;Vr$a<}=R8h+xbdcD
zVF`wiYz$Jr3{zAK1irsEk4GbvDN{%h;V`qNflNWz3`ikuWnHZ&gNWy)n25to#F^mB
zYVYSF(Jl9)Eu_9lLD6ie+zPlF$fKmyN#d7QSu2h34=xJLQC%%+QVgj#??0duA4piJ
zb-#u|caq;x(m8=<ek!tIW)g!S+&NJjzU`|kRk)pKpPi9a*ERNqZt5h9mKi0BLx4m(
zLamHX^x!RBgSAXtod1|x@#%Iot?9?dT#bk)rhHvZq8^KF*Rp!Pqed(VL1=HYZY|}!
z;Rq}A)BSN<6#S3)v#YD%?ttJK&gQ^oVm}%O@H`#pfrG{q6m=#OY#cK2*i%iCA)gGP
zxI6l#tGtTMN#!0Psqh+1g;1b)CA`lcy&em)0EjDmBK2mJCpxl8l^g^tgNHL7%8iJ`
zm;@$^q$J2M64Llw27yr={eC%(+{b|_no?#6^eIq8xt-k~pLN9T*B>#*IBqHeBn(y|
ziyJI<dvf`pM^}FLpq?`weOjO&PPIk1xKKf(ukG*f<aeH%M5N!8LTLlQ^GR5zB5I*o
z^QMGEHvXr65@=miLZ1e|Js>yKr-1I=yb9(mGq=2MWC3p&=_Z=};IsA9an`Ls(pF&k
zJaXfoDRQ0$D5dsGN00U*%IN?WE&h%_)?cbRJ+jgI1?1tVv4sG6!-+I&UauPj2;$<r
z*0y16GHC!%ETjX;^Y8Y|vUW@2^`h{BdlO1($CZku7YUYgcs5Ma#LvJ^gG!o0EZUP#
z^I+Q0W%?eFOHZCE<z-U!L8^<0<toR&-eT)HF?(4_aL|Y5tH*QAoPIb@(~P2d@CbE0
zaaR%i<A&D89y5{U!OZ8zsPr6HKL?&cSf##N*KWQG;g8;qa3R<o^z$e#=6p~U+*D18
zMDj#{nU7BV>07s{nd&vjhUskB5mfUbBvAq@8HFwf4*IS3AavQa!%n$8B~Ww^7Z~){
zGXzYAxlZ6pY#uJw%b(H=lqHd>sFC9<vmWA0VO}dgiQrhu1m{JHCi<n8psSrxZ;b>S
zJGw&*bC~+M0cX_Y8{EFH=jMXu<<2^?M)@x;J=zPHVC{R&<2f{-rXt%es&&y$|H)V|
z(3|i^R{h4)N;ZcRTzgKEMqt&my<eY-D$Wd|)9nxR$m169ou*>vB?EumI}NE&+|pQ^
zJXqNOyVEba5phcL1wJSoH(3G^w%(>F&*=H?W$;tvx4SSmp)E{@-*i_2-jf?1kL!Dd
zXETscEfZf%4^gSxrgS<*P_e;1I7*_(*#G-KWRJhmIMdZXNqvP=YVAmq{b`;)M-340
z;B<$_`k$Ncrgz8EWbO#gI!VJ!MWw)Cm)Nf>LuSxrtA}g;gav5p%L-t-Beb9w@J`Y=
zNV>xnG&q?Ke^Id*kt^s8EuOH8I0L>=sUH_{e0|6NG3>S?3fCn+&?Wi;q|IT1qTH8&
z_AJ4F+;E{bX}Ie>8z~g8cao&sGl7rRs+`ITDkGe+bo3GdOUGgo*NMd-|IGvPHb8K}
z2W6@ou*mX5gA3FprZzzlNcBHP>Dpb(QJ;j@kCZT*fvtpLZ+Ki`(0^Nviyfh9!G|?l
zrRaX7Sec;q=9_S2aYPt8m=PKERh?i85&FY}I{C#U$6+o)tvJ|0{l;X6G1>|oRNYbY
z=aU92fj7GG4yrsq6(Mk+zcFpj0K@C%nwp;9XsX(<zJiNGFi*?F7qVQ;s8|cGHW^`~
zGn?&TJtEWuCJt!WD3sC^MZ`jS%tGnTvtyKip=Xen57B7$n&RAp@|#ESpQ+DCz$o6?
z%Erpf`W|AK22iHnPOr@+Hh(@YA=5MqvG{c+BaDbmeaa99#y}Oe26-K`LK%v-OX_P<
z>R18U2#+aN!qX{vPA{mlT#ivSGWP0-IN?xRSNta)`Uw(a2*-yY0k%DNLOA>72UV=T
z?2NKYdsVu29rInQ24o_hM7yAuCSH|jK%RWAklU}Fz(053H7VH*^e>Cj6L!IbRJ_P;
z&7sF5_cpC1FvjFiLv%PmIWCckMlDC9AlSja7qjSOxu?3sW!*DVo;=!wDYI<{28MU<
zI0RJmkQ=e^nM&FqmkLi*shftM6|F!0)F}IWnL=@Iog~{sG~+(O(t)>*ssi5nnye||
z79HW=3hnUgB4rP2234L=?K*v@AROmJ8UITobq1Qp(Uv88II4f8H414U3^w=R{*Cr6
z1Li(&6EtRaA#yRFqaj#+<u>ie+rJjY9b(XESkOhz78oWD*Pvmq>3|^lgo(rs22m(E
z{&oa6VyiORMD&jtCwP&_Q#>G?u^O5QDK#t}6$$|SxieUAgD2ESgko03UwQY&&=L&r
zDF(l@?)z=u%|qd%J;>tRLM}CGV6Di_3LgKx){XB+05Cw$zxHCVF8m%ZeF=qU4|iwH
z!S&BRgyZF}ykDe`$m@96M|P`}NAI>_Kt$6s!LPZcl3n3z$0g1oK-%v(&;7g5P??#f
z{2rfnzn4$&@{?G=N|=4mf9~lG$jdQkUSvCQ5NC%zyX3E5<91&`y=4|?RZs~{<Clg4
zzu{LkV<fKP>!f<}TY6@}^}4V7a8ZLNhV`h%sv!mNl>m>YjGw2PBBQ(~pKFCNu93$D
z>>{<JG!;2Pb@ONOgS9&~D1pZDX5-Rk7qFb@V!(*EOq94QZ?zRQC}3Yq;^(vES%8nU
ze6{UnwEK$vuxobwlDaKbbu;$lJ^jE0Kd-puU@}=uyN_E?U~K9*pUY^QGtzgKw}h8~
zUF#3wr&|!{s7nR`{64$zL4X_kg<4y@_#YKPb8&&&&KBNN5aN46>vd-sO;4)|M|#s!
zzx!u3W|(GPjLO#CMAObdLhyW|@~?*gt5A5sao1O~Oi0_mOyPV)RJj6eMPXLGeE4lg
z^zgBx%hK;9Kyp$MBv+RW^<O>`L^<%7=ahhKGTknXL5r{n)L=#9cAM%II)r``GLLT~
zx!RvBp6@7RJTFsZ*kiRtMvwkxKZxxx`WkXxkYxi2%$|xKlyR5rlV{>8W}OA<=I#y^
zLvP8|EP`(EUx`!Ulf+dgH}_(zn<pKzcJcO3avsCk2~)?IzVpq^n4JEMj>~@^4BHZ1
zMbNi&N7I>DTZcx*U^I~Fb^E?`AJw>4{nzy!TjfUV1`uxH;)IQ>40AR7c@4j@cH5B1
zfx`bONVK^F%AQ&7ist<{W^khPli;_JjzIm12+%}O#GY9Ukqbr&ckNqZvj~PDhh8~&
zT*uvUU+V&Qd~?P)OD0M69%}eLQK5PWjyJH#)9jIbt255B(io)LSQe!E8ift-kIX_D
zL$#24&UD+7kmHc!;~;7@<^98%t~X<ML-i-UV#_gD2=C^z0V^65fP2SEa7)^Z2>yWm
z?sRx%UwLUI;+a`xl0W5L^$FC%Fv8q<(C8%8=x-aICY%;Xw|T`m6mz{f1>sg+B1^eh
zPJ9$0!2YfPG`<3!38S|wsruzMDTI2g(+j)DMq*&7@`arA)}^VriUO&xZfxyE(;AoW
zmnMfGxBJ1geI#ciBll%CCEAOPIelYtls_sp6!DCj!#S}P529<aXUO~#B<YI!SLe6u
ztCqnm=g=nGA5b2;qo7(I!3-U@4j{wD<$)U+3NG6E3>9Ya+u<a{OXg6i!XuM$9FW!K
zY&pM{7sI|W2rd*}0jTfGG!-$up5ufqrnR3`-1zePI_nXhrL+5kbnF#*dJg@WAYM1W
zB^2P9_M8wszWqt~>{;K|6u7R_^ZvFpwF{IYkG;vD$(c|Nq+(7j?d<JL?m?aLJdpsC
zGFgRqmY9*n#c~7FGK3a*XLL6QAoK$XAgIjrOSLAqNZnJ)!+>_6yJk#y8L%WtD5THr
z>fASmzl00lx|#2~;CWKC=}Z28+*G+NI8Za`kz&Y61Wg6)^w^NRM1LTL0tG5QVxybR
ztCCB@^xR&>_akMkC1^?qy)ajBIy4yYdFc^M(;f9ieFzQo`tpUUz(2XNYyy7qo^GTs
z^M79Mw+k+}?WbTCACY8FS#zm*rei+UleDulu;rm@T?6|#pA+)38LvIEj>7b<$PM0>
z1&1t)s|#6z9_jem#za)`>1N+snHvvSHS{}nOMV1;E9aiukCU@{A^DjFZ5guKr;1Wt
z_<CLOticPQQ;M}h-l(Fe`gee1aPP?*>4!^>yEeo}tNZvJS8dGz?54faJFCvv%pPKI
ze}0qOegMuV0`DF%eY9I#I`JL7rXd`eZ4x2D;8bo>0*#j&&P7y5W#KR|CrON>K~!o^
zWAMLn<9#9cty3`li=qUbdx(rjP*j;VK`k4_<$ZnG%`%#2yCTX%B7GI4Vd|V^G3-aU
zH``5sPW9YO7M@%RvE=`aO{hl3>UO+O+0;P&3abmQVgEsnzWKsUsZ?Om&7D!!kYn`)
zzgFR2GpA<cw=@<|;M0)DL^~RTkuX#3Cf7ukK1rrVZl{o|Q7dyefn^h3*W5Zz8x|Qf
z$apY1Y%prc;M6iQQ>9=Iw*W)ufhL^I7~{`kW<hr)3)wqoXc*ag9e@#JM7XOWqkUWo
zJXl;`hzDLL^AiBK0KRF(Z_i4~<9J%^ADLXE!_B^K?J^C{?M4=CfH3_EzG;-fW$afD
z3K0Ger_>g^a7@1FbEz5T;v`Mim*<y^rg?ws2A%7Z3vRvWR0-=6W(0`v0-gOwuL4Cu
zA2v2U;Om7wq&-KX&TPaquvg!y7dNKa0aA4~(pJB9@CtAiq*)~gZx3AC;G+<NKSZH>
zG{!O9WNEVh&PZOl!|uO`2@M*}b{@<ne{KM}iH735Zj!~X;KJK?pmf6k!m~s;<fki!
z7i(nz4cv?DTM;CXZSkX=H}4=EqV5$}Au5%?fYe1f%B98J23~A8Vn4+;1_MDkdJ_n+
z!U_}w_+hdUk*>}(Y2qvYI11!oLDqF>Gi!8w^udMwwS_g%ewceCo6mzcjGkg;j4T9R
z;6t8Ik#c{FUb2lXQDw9I=H$}MOU%R^+XKC-wY@huTVl;-<;)0)Bf*B(hj9<$>&d_5
z6rKJY(Q7e|$P)`AH<)eNfn3orkTi|R)ofgYIHwxmDps%SpCaFxl(Xt3w4&B`5s)B?
zmB8kODs(M8=gdQ3?vHlu$gi~O(|C82(s#*M`dR%wUDuF^+IThY@{X%?GEH%U5{_eN
zCRYa>P3A{G-O@Sbj<*#wVfD)UW`U5_Xg`!wLYY=f#R_yg&kuAX;|NMBuBy7M^18WS
zGK6ZORhO^ei_&bI5o=u2J=6(5op2AIJhP)H3i449s%23l_9j<oN=PV*Kr!Yj4`Vv^
zLK`k#LKpU1p?8kox~@&4Hzq>n3t=(=-_OZYvkQ>x^5Z7Md5jh4-&KE!Svbuf07#RY
zoTc8rveG=U5h(n+JS)l&*ORTFco<hj*BbZ-Cn_l{2nYJENY|MHMy}!uO6YqD>8bV7
zG|ephr3*6-H<(>V;af1ST-6vasp<Kqu<YjDbGd}RAi)oKoen+hJ#=KE{#2rb6wnaH
zNj0N$*`Zo!g^5&v#gLo2iNT)Ao5#U%vXm>GwjH|;=5lq*W^d4vrun!z9sTo7p1J6H
zme=Hy8B}8Ul7Em)X)bi%Y{D7>_zL}pgkra5j#p2lIH}`03&$vq8ZaI{8d7;QUmkLE
zfA7)aot(G2c9(!hW1rQ^?;{RT#Gf5xM<`m5mh3J?IXE`_d1&d06o`dk+yIigPJoG!
zcBx}H($1f;5>7e^$J8S+$HhW!t1ELFvy<*nS#;}=IY#k~>c|@$vaXib?Vm9A%yE;`
z3J~sjORD~*6;s3>37NN%&EQzPsHv3SmNt+$tG7-oK@<W@ZKFT$CptNnSN{}2$#oD@
zTb))Jznif&!<J`iOq%uQV2#4bm{1dB%H4<rQ<(f=&UGH_#9Ej%R;q~~pWxa7>`@%A
zHF|$JE$)67azf?>-(JX;lOEwNBAWxJHa8=Ef2WO`(z7($I@E0t(VweW``puMRBrpV
zIQ)5rUYR5`$*J~+M@m^z6@G1k_RAjv;^toCtWER8d`$WVOAXIY13U_1t!^Lqk>t<U
z2YlpphbSDMMJ_T>IFw+ky+v{M11;bF!6B|gPKOH|=gcv0jw1g$R8GIv;1ej=xdv#i
z<<L_IJinjaFiqxMFC9^7k_0cun}qf0^&ZK)w0y`RC9+Fz-%SBOvJHkApj%4xG@GNn
z_XgS4{U7*sgod>ol%YtVyK?PI%UZdx$yXy}8-4bMK`^%0zaS?uv_wU~-KdpzSivKO
z5=j?6B@nlkpVuZ*XZNV*d0HGnh=l>_9KUiIxbDh8BKfH7i`o(`jAA1B8~$b){2}M2
zc8uOGV#F5R1_isOTM$L%_Z_7>T}*l~`JnrG^b74lw_H7@>WzEL6sL&SS{(T86tj$9
zk9SSA@|XY#qk~7C`my)aT$0yq@y_1g6}g|q>3o%hTYifd?F-A02m7qqX&?WSb$OfV
zvT4-`a3OiHwcS5zBFp^MQIs-@C^#vCb^LyCF38!rc=egK(8o~kNqs0H?ZxA|j(qz4
z<Lu7<gv2hD_N$kpYhs|2!OUI6VPc#lScFtpdjo2ydl56GkO+?%&^`NETcA~iz=F@|
z3dozz)oeoKEKmTxjL(MaGA*%z55;Iz0BToGpvv^YAE+Ou$QQ!bb?L#HN<QZt-6Zex
z9gZiVm(1kk0KX{30eSZDEvKKVRE16m@Ck+U>{8CffZZh#GXJ5t!4w<$AMPBNGSPw$
zDgaMXt*y#$fzSU27gf(nz9045i*UTn7*y;LIXhmB{1&$vC~N2g6LBB}yza+%xbeez
z|7@x|+++c`w~R7={|dCuP&Gu==B@!^zbmQ88p(y!JN!`JgK8!0iihf5YU=qDVdZVC
zZ>lTiGchAI?vhndF$M%8Ee=3fG~a(y3e*Tmcf5w{F$0Y9YaotJWoeH>*+}QRp&kW_
zPr&Izzj(eQCuN0E6wV2*u61xblpi^**+y7AewE7Qqs~CIF|N1{MUe(PcpI6Cq<G`4
zIEG<IS^x;t5bkV_K=V8pz0Yc^QF~&Rupe=zE|Ms*>)$G!V0WzMHPT%_--=Yh72CQh
zw+Y=#z9+WqavU9DNDw`LbJ^fY6$I&jLHnt$6@CjsrMAE5FnY43^NN#J1<Z2e1@s;K
zvVCv>5D@5BPTDS@!8o%Z$waA5&YlkAcS}z2f$b&_300|2`7GW)962=JtGaE`6e}m#
zH2wncm{bG&gopITQybkh93Iun3TjIE@xJuFR5MEwQJzLLp3kZOK6`4yqF_eyAqTf%
zbxWr{xH)^jDW)s6qHjNpKcuw%q9CHwX;a8C<!`R`Cx@A~5b!Cx*djVFZK_<F$aXx1
z0czy6kOHV8kPMm<c7shZ=ld&v<&S4T5ztMSpXin(uel#IPEruaicG?yQviGikF`UK
zeD;2NtPml;GH`aM^@{I|BwJa9@z>^3M-n}YlX@2=PBfO=?NnSX`(V)@(JC^UbIX^6
ziO0z;jZugcbBqA;<mgE_c-K@6x~={j($#s7P=EKX%m*wo5;`o$;H(tXZUwoX2`Yf>
ze<Vm>lK<wmPY%jz>Qu)H5m8+=S|i?C`Mo<lk$|CU`h4g985{7-X=$VHyut@I3<N%C
zc?mA2l<xATA7Y*Z+wg{dte;zQSS*#IzqjSFC^6R38x|FE`R?!Z2$J6oK+Hr-GbAm~
zVNF=%7)^g7)IJpSWSaS?Tvl4XK48TM_pFw<j7!Xc#>(7B5uUgA4G_v2*ilZb;033W
zvjPt#`@%Rwr870g(bg|WXaaoJ(!jdxKr7cZ01+Gf-XhUzMwb}cEfyY#+D*2Lwh<RS
z^RbMIMTjl$HUo|(wH?5lucpd7AS%uZr!&z!C2|PUCQNkz;EHNC-he_~-~*~KiS#?T
zg=*NAfVE>`8b~n{oDaY#MpN}MM3YL^VQh1sZ>VONrIw_7gJ`AjL~GQ_4a>J9%i4M<
zB<IAQi+1wF5fx%XqxYwZ&qwV51Q*Tk6cch*>OcMqWU)AmKMD4KacHWWZ}~Gbm$A}a
zH3Io#PNJv<(vTcFmbdQ2mveChQFXDSi<|U>_MKyfB*!)%<Mj!m)IBE%Draxy7~f83
z>`6879jrWx_wkmjl(Jy$rRz!1wlCiE<|jq5n96Vb-th+<d<0UokOqb}L<W%A<dAXS
zn|<T%u<)e4e#PV@8!DPKb!(hhZwj4i8f-HEdRv2TuwZ|qD~$p6sl;V;D5ZFxVOG5D
zalD~C8U{v5XaDkJY2U3r98u-@+i9tV#(3IL@K&q<#Z1diKEq1ahB|oeV01=FHn-+y
zCyiRX5=EK%^L5F|kb4FjIATOw=wi4BRAl_k(qw5j%yN!hIdsEvi^pr6QJF&}XA9at
z=EwncwR~j<8cibSrwM7B7sq}Pn@oW3l8Vfd{Z1*>{vWJcWlT!kbZtc)1UF6)F8Y=z
zN1Mq@j!E`GdipNFwLKQR${$&kqTxb}?RB`*(bVN@OF`dZ>$D0fXwo^AYbwY&8SnlF
zUD0=&yYix-^dNZiM5l%scW3tck<}Q-5CC3ntuuMCGBJY{dWqkj19S4;nE48>FnLp!
z$;B(i(XhQn1q>+PO^|RWRpq0+lEgvLq7J!#t_`s;GR{#q;q%lp*5m=0$(pmp5B@T7
zFMHGSCK;zW&=G&eNu@ki##ZLTTrN~I5L$<(jRMZJ9S$8aL0!Vrwr2&u#bN_N*K0Hp
zPwiUYt91#y9fXK0j@mMb2K^VjAM7U_VnmCn#?T-^!Z;op0<agsc!{ND7EDXVk+-E=
zOIvUovKcgnvP>>%rhQ4s6M`czYWBOdnAnA6MrekM-WQPdm_P-KEu<GE{s8B_V>Yr^
z&<k(?cT<9hZ0CA!>Yke(blhc6vLt}CWz{|CZI;OOpw(8@*mv%xA1h@LONRUs8qg3d
z{curA%3uibIz2{2AB!1!29tnEDV7Y{<Y-=xMV7w<|CznR{6MFMh0#J@(BZK;cG<|9
zS#hcJQ1D8MAx!eyot%$Le7~fStaW}mDhe>p!4VB73(I?%z*thXjS=$GRgHfS$FmoF
z9HhIW@BR1X5NjzNM=H!~f+>{*s|$@@r5O~u6cLe|MxD&$rAz|nKF;`r@3gRetj-~e
zUfmzg&-;R%;P%AsIfR6G{Q?gj^=)qz*q&G*XvN}=p4l*W#wrMi*DHhos>)_!27%sz
zaZ~E^FEUZDk2{E>C<v;CxJJnw_S|~n+qx>mO6j?p;1hec?w<`fhHe#`bLk%psrVC;
zWVxI^Aw?K7C3~wlxVI?Ag3q)MqcHhMe=<hXU<z(}tQI`zdq@^gpzW{yvH>#r{3+<m
zxRx)YxvjVzGtw?~b4fCe<k05Q4>45OvrKsr>MwO5?Pzf|{XWoCTp6Y$vFbe*EtXn=
zFuL4bIxR7=$tLcG(cb@ZWvZ4^QqMb3(6d^Kx8-@*SnJ;$m*-~pnjjzWC)d5RCRc{m
zbpf7hM3J{!u^o#Uk8@!<rUJ)jig+|Md?mtFT61bnA#D<4(QiRCQhnpmaD#y3&ELNM
zBqoLB17}@djvT@0Vu=WO{sLmxHzBXBJ(SyPZtj~GIHv}NhF=mP_tz)C&yMw>=%S=e
zBIgmsx_v~fPlH3N)cQT&5*Q*=abxnx!$E)#jgtP1bU6dXqg3gQ^qXB+8~z*BA_EVr
z=a*|mj!ohxT01JY;6d|_zI2(8$BJk;<WXZ2&%i_d8uX%C^TO3g<+O}&b~iI}IZKwI
z5Gn8jez&;89%9EW{&QThV?ONAisBX};990s!AMXr_OyNxxXCNM0=qYe(k?;QR7Wcl
zVZ7p3ZF^uvlacW#*7>>~xa?^I#4}el0EHlH{)ngvGdFd7mnuC1p8El}u{>Y;P(H0C
z#2$^fvH<PdfLb??B-%_3QX_V49hsmFp<Czx04sr{SwJjmuIB-4Kvc|u4%;ak)+N-*
z!$4=crc>LhxIom{re$ob5nGL(#)@D$q`^dEfQI9^lF88pZ?DDCx}1yXhH*&AUn_x{
z83R$b4QQM0j2~Sae>KW|X=PJz)PqeHbez&w1ZReF?>|l)*|GuchKg2YN@uEg56(`|
z-;Cf6MQPsLV3S4H@{>}(jUat?d&INP1Tw)Dwaz<~w#3#kFfdOGpJVu?ju1^Qjs2yI
zjeJ8~2?=|w1vfE}OTs&V6Bzto8Um7^vsyhy0ZCR-#d2pq*q_3?X}@sGc~T*t?m5U9
zKFZbBOj`=P&UR@IXg}DbpVQ}H_!krcN1RDUE|P%3Zo^r)Jmo9o4@s0O&NM;2pNAF=
zb$c^s_U6X>?15UP;dvBwZ$+(d4)X3o7!$;OKsIzEarSopS^55;hAkR{$~TWG&Jbci
zPAgYDcu;|g_$ag;KhYJKNsg=NX{$JB9o)!OHI6TErk+%jTvF_XGGb<J-TJEZDlnco
zhYPhXK$#5Y=$`Ry{-q|G8C}(CtsJlG{@tt9$g@S)q4o&lUHrL61N}OidQEa@D^;NQ
z1(|;@bkN2oP>|M`!ih1$WDV>2TFTP7JeQY-Ae-6XvjX)voKwo5u+|m|$fFf2=Wkgs
zx@@GOb^{S*rryiF=I7&U3X6J$qoz;RWmm)qM+v8e4RkZC_s9?ZoZ8)Z&p2Z@Rd_w;
z;Hr06tp(z@ump$zR$UoKzMKznLe$jbGK!ZIuAvo`r>;MciYzn8sA@`t<D8}b?x=xu
zk)PNX2W{zA01#Y@fdh!&h&AS{2PTdn3}Vl;j<<I9XOe_VwVI6d^z6VzLv?z+M}nb)
zHlM(E?*U!sb=QcSe{L?#gH5Tj2(9ODt<zuR_QNtY|M$CfCJ$$-_w|#zI!L!u4eTDW
z7kl+L1xeB&mjAmrMhYwr!){^-cUU3IG40))O9Ym&#NxvZlvF)`liD|s-|0>+aa+st
z3s$XUhC6jo=Tc8Bbn!6%5HQ0`u1{pb;6S1|Q|o7Jj4W^O%r)U@IodcmJ$lhzJnV~0
zAliY^KmHCJkeNm$g|7*%6EjR2SQHx}ZeP^&XrYQ10c-`OU^V@zdHaKEl*_aPOgN?k
z(QQKymQI>d5?XX3%`6BR?iKmyV6cA1StX%r(91??wY|Wl1Lu|9DR#>%@c*xosmkR^
zJQQs(th<h5s4bo-9|uE%#OVgoO_b!q%?IHa#-SX;-I(7X$wBPGfh}#J|FpBteP>vL
zdP($KZ2IBmmGzno@nomOVAl%H+i=Pw@wZB?07I~0j}JI_JY1Q^aZPc1=q;W88(|oi
zKSOXOX2`I1DA-ul1$=OYcVzE+MwYCp$e9|uA(a*kg+T~c*Nrvb!RwOk&u9cEK3eb4
zh1Uq7k3P~u6Lqg=u{pfcT+TdcAov9h6pRU2RyDIMDgHJHPJ+LoQL+on(k65M$>2&t
zJl68*q9maxYE{p(%AztJD(<IE#lDfd(l_clviy^9y2yA&?LpOvOD3I2$;I&_Nm(XL
zaCy_?&bU1ifHH9IK@h8a#umF2x>j(7)&a6N<a;GU4MD;bUBSM`tQDjsa=toCRxJTQ
z2ouIiqR?7GlCB5_0RMtjAvyMpG!CPchTyo;f~6+#h6sG_(63(84WX)1Lc^qVL9tpg
z;(ls%opKR+Swvir$O1U|{<l}Cb}r_5f)tX+yib7o-sYq2C5*R$u_=Ai$wa%Qx(dDf
zGakT{8k>X&_?db52mRCf7-q_B+LE{IIr%!t-!uZb$4W|1Ok{9dr<UmdJv7;4KgoHk
ze25^tBSj$l$Vii56j%svR`t_?e2RoY>b?#R)^5W*uBz9l|Ga-ubQt~SqB1jiMyt(y
z-ifAOZZA4L%F+C6Nw7+#7*CabhK&Z}<tR6hEx3YUD&jylyM#Cr8o`E(!_LKv&s-sG
zz}7-NW2efu`^r~`95tu&T1>)G=eF5HKhab_2a(_aP?Y~wi=LQ8QZt9~oX5B{Cu8=C
z9(JBg${3EUfQaa1ivTh~9T*((11sd{n|bCqB_z)F$#oZfr*yd#B1pAV*gCxO8?>A>
zwfFTbjnZ|*+{u+Pw=qWUH7oFVZCO1?c=V|`rMUpej?jy_x|FiH!6{C_`jimI6I}m7
zdq`LDeD>T?LOl9bRid=(M8f><roN)~FM$7(0C&NCWd-7x0Qwz^1sQ#%SYMg$Xi~jB
z?}n#2*&{vwyz5*9p)U~lNu3bvQF_wAz}ETj`d&(b!EjWs008dyZl&=Dape5rC3#?0
zCd3nC28J*ViNeg)W(0^2I^M`80_@)1&cmkpdiMup6%TG*49O_Al)|fi#q8wJNd%7$
zv7FN(k9Ydahsa(#z*T;chaGU@-W(ltrRzq1Uc3ceBP;wJ2Aa2oZ;`HBZPmlfcqPnP
zN%X1rL@Yj@K%Tw&6n~GGouxO|UAsw7z#(@39|^wMYa~yfRM#(Mdo$7rXor5C*oGB>
zHjn2N*10Umn|kV?=AisEv*Nu_>pHgA7eX08XCM+eS~(b<$m11>F#xUwYTF5!l9pyJ
z`|jhk*6xjlaqir}-wIspI03D*(a<gH4_9e4kiHf*;%EoF)$gRCXX)dmGg=aVdDZTb
zr%|u<%|h~FIG?@c@_8E$o;P51$4*!Eto3mP@G*24k2f5l;?vcd$QwTvfm(_2Hu;dp
zsV>EYMeuO-7$4?uyx!_;DHJ}_)AYIdRG_1s%WX0~o#7`PS^w^X366v$=2}?an4k;h
zKDvRk;~@S$@DUsT5-Sj3xB4mWOB7;Il$!2(l)`a56e4@7dq9|TYin?52ZWy$V%L1X
z4v|wUp@)d0VolimE&Z9o11yi4oDgQ&g=%O!fE1y~*=_}^86SWo{rSgK>^(RH`AcEq
z2F6p7cz%4^VlpQYR5+E~l`NY7>-kf>V>nZzFMo8p9W9*V&C9_VkL$9%7ec`>!Qy(5
zw&mU~aX*gT-Wz{HJ@BX0SctL)WN+@ejKS|6ied5`oESLulu$PW1vF3Vis9CkrPlsC
zp+)wG!pMUr`ANwPSQK#4xpaq-)16#gW2(J7myMss`)mE9K+-0=6JjhT!v2*lT(49o
z;%%pEdFqGV_5X<{rygeuy4hOZ$-ohJ*6}MU`ibA_qMI?Pz>~nU0VF(4>@_{T2bX0P
z&g=Nbf^s6#@H8;NK!$B46!l|^tBuXT!l(%$^T&{0{EYbgQrU>Kjcdre<Cp7$ZB=Ba
zPs$1;)vgNDR?y>SR^C|fJWOC`7uIq_7r$Bs_~43IC@Fs_gXDfgSnli1$$a;UV4pS$
zrQ>Ao(X#pz`3dMvp2!Rv0-{!sE+C>!1<snX{g16`av)d@qtMrWvo>5okKW5F6Lyzb
z(Y{|z#&$w7wXVF<^QEo$$m94h8b81&5#J(ae%cV>z%CTPm}nX$%ksv=yMe3ON+{V+
z$|s!#69kP+c=N;jvdV4f;ufqb#0`rhjICoHr&ZIl!MCPG>c_{=0NFd^oC2P$D%d(d
zNX$9h7qaW|`-(}e6o+3LOSa@eg@|hJ;^)TDjN@L3oJ%pY|IZs1B0GY(a)a9tZ>8Ij
z+yAZvSBew<)t+i6cC}}4kndzV&4iIJXF$y@7|4%?4q?oUXt^;m^!=M%bT0Q9(XLbS
zu|bD<-mlL18BDFs(tJbH`f)pZGeyt+N3^dPcr-PVR#&847;{c`W)ej}j&a61b#ef#
ztYsT#CFziMyg>pT)%ITHHHNoKy@alt?VkH9&*5<N5eI|u>J&1$Hyo&|4qjwCA_VIP
zAeIi}$y5mVik<tCOQ90gULx0=RBydfUg)N4pB_w9E>8}f%#t$3&VmD)1lS^Q<qQ6{
zi|0tJeS04fwYNVXKdzp|)Jeb}tSJqD4>7JpPUGb$QjlBHXkz0)m*AbN&N}pwU8>YE
z7Fp!-LQw+2`UF@`qN&D=Eb(zbD>uhvnv&9%9uNb}t8}&xGLB|wI>&1PijB7)?)xBU
z)c%r?ma^@9@mBK66k({*Ys>T5S^+Ajsx#L?=dEe}6OidMj(_b?AO7MP`fVNqW3^GR
zL3!m&LHllLGIMeG8sXHyHq&N}(Z2@@RZk-ERKnT>0T9V!rwc#0D{j7e5)lI&z$t=D
zOtZ%)pC=^okmkLDt6yv-K~2a;nyP~m_;Z_?usJPV((^@AIpc6G30FU|8TYL9-ja!c
za_$4nDtM%>!66bK8lX}Ge}RCw`mPKT&S5`nph}v9ejp<_bZ)n;D6<RFe8gvuHW?Q|
zS|`q#T+Yv{^3cl>NN;~YeaPG_0s)u`yi|ELDj|ia3KXDHz~2Tvr)V5HnqO;206yhw
z>q6pHajNjOO<*J)m0m&iJ)lNEibXry#d+eDl}=Fy`@n~4O&l0!1}1tB*Ynti&f{CK
zXH|>urV_C1fD|puid9Se{2=_tROA1_-S6@b>IB%&N-b8sx+p;IcMkZ_a~aj4^QDCS
z-Dw|3jyw}ysC45Z(jCsyLrK9fETO~9PteYS%lMJOB!aOtCM+Z*_6I>SE{oQ&vPVxu
zicz2P^loLd;A7Lt=*91RHdlD4if5jjln<7z8L)NBTNimH?RCIeu1fyvS|Oela=H^H
z25dI8s<|O|Z%Q1VM#PcKuRUThKh?bHLs0&7bJ^Muv$b@~+%7+Sadfe({JAw7pr5&~
zfV1CFcoGh%^u=Xo`)dyEoH0)8Kg?RzxkA*YQlx}3GaZn2#120-vtL>EhWr)gJX%%H
zeB(NGKrv~Yz^barw{)du(UkPn9rzA;9!DZn2J+1!D9s-WOT$G39#r28$yfi{nQN`<
z3LYUu{pvoIOU8qew{hga0t<3AvAL#1tilyZU~q&@eAT5A*ZVX<Q8KB7i+e#X7*m6&
z;GC5bT9j$_Q~F0P>G#X|=v{0sJ#TQ%C}9cVLA)fs&p?w!$&<#fj}59ThBC1?g@xA#
zzGPBuUfIUVJeBaXaqHsW{V1WU@#jKAGxV$9j~Mtl(0fOjTKyCU+Wx&LWckr@+~!L<
zjKa%m<rGpprjV(Veuk|A*}SlRTwq={VIMhgu|d{B7#gb|sxxIgA3@YUBZ)7@C}*x)
zw3!*|Ks`nA%>INAOm6QnFJc9)u)rQuwR1oPKzIUD;`1_otAy~D7~nU0w{L3NlEveT
zQ+Tf7UCf90Ji56VK1r3Fk{=IH>V5ZNaYAF<9=?@+u|GFM3@T05n6g+9?ysTubhG9J
zKWfZCu>d3@DPK4&ik=qF3{Mf^WHB!=BZ_O_1$VU2l(wOVyD#&xNFJGQlD`#|u0J+m
zAA&_tZY=b2TGtcTD<{QuaWi7Prxn9M*T!Jp^pwdis?UJ|fx>FXe&Q0cU1tQb>NLFC
zQ2191qAi6)8lLEtsdqEh3?U4$02)Ry!2Vzlg1gv2$S2?dN3~;=4r6ZxG5lR(2pq+7
z$^W3B={Ra-FKnRK+5CKeczGm{leyP2!Bu|i1Jsg3tOdI3%}o;0^-1F_@6TKLV|QxD
zAIaEA06Ys#9RS_S$td*^8Y}*HZPUc*x^&`$v@g~R_xp)Hj&{s;M5CR*d{e~!J*G&?
zl$QL;FfoKdQ$;N(ijNR#<0>k8H?op!G(MM)InNNTk%i=7cEeAN#xrnZ8&XJ+)R~Lk
zdyMShaY?j<OK}i~+6fw^z>SSXdltiquTwV|Zf&$sI<5qa@)@Vd^Q0QiO%NxUC7$yp
z{N(Q)@?BIKl+nA_TNz5orh0RuYCNqJZFj?>^q91DA;*MNp5HW1k)mK$2+ta=OSOph
zvn9B6)$1T#LRs`Z*dRTceQhvFbcPVVgsj|z=15c&e$V%eXUJa!4le5X@oBY=EjAb}
zS=zolZpiUxT)$)KObSaMN36i~SYN`W6FFUbX?nG9Jo&tY1W=Y6Na$%JD-JfP^5<!`
z+DK16UsxJ0E&h+QoM<1u?i%_YfG~cumTdGOZ~4NN)u9`TqaCD{soQ_A)lar9)0*Gg
zslXTeT}K|`?&A--n3>CY{iOL22`d17{Uuzr17dgM_}jsRpy)>gU#?I}!@eWYM5SQG
zyXZ3xJm#*t3N&{8yJLyTL)ZupIP7`wJTh90es??4Mw7g=<rhSMBL8P(^Fv%iM^*SS
zV2U$o)+3$#64GpteKp<=bo{zCR(S?Xmh*9>bIu9ump4B>U!AQYX0YAOGLT7TS^=)l
ztNVW9<3-^`P6C~)z7Q8(9APF@8ookZjjv*a7VWq$il?5fA<Bj&Ejo*=!#MB^m~RqZ
zhqTT~UT3^l;)i86qcd3_8`T3E>SJGXuyR7(e`&;Arz27%#&S%!JmRw|FNo*ZZ85=L
z)NFUY%A_IM|8&sprIH4@bjx)jRaDczti`D-=O+?Qvs{fUx`L9Wss3!hLFFeg(8$?~
z<dUz>Kca40L+&9_E(=Yt^%yN$-~KVS^w2&NF|iG@cD7@NzA!QIU-t>2b~Gp7bOksq
zvwzv*z#>86hr(%w7JdYI_EE2viS%&EqbXFm^zxoaw2W9VzIGEFrgZiRJ2kYiu=A~l
z82GA(iY5)~X9nFJ3qf{Aa!Pf-KT(9l_2PJ~(JgoOMNdw#k_%QL2+$gfy=uk;WaXyI
zNDRXOeFp0XvA{clLBfiE-DB|+l%=cotf4uw8~No<!I@*38@a(mVtH%6FC}$=1!dnj
zHH7Tvf7;_eZ@2HOoi6C8-wUU`|F!Z<ZS?-A2l6-~Qa3x8kWkUNCKQ3hL|87lodyd}
zB#=qDq-u|Ljrc%--ty@S!5HcRDSuaeRgVX_O~(WbuR>`ct%J2|{5`v<TKTfmJOb$=
z_@3$vrXHJg$AXBnNpp8_#a!{W5T-)8`>1I<5qCNc*r@D{5F{}yX^Qqu+rZ+v+#MxD
z$<rZ)?@6h{?Z}Y!C)ZB_iY^PB=aF3G*e2Sn=bUBZeg2~`F(xU*o0V17x7s-;0D|_5
z^bYr?an@wAd{BCE1Dm_!RlI^Tv$q&AL)vY3%ToVw8X6>T7BNo~X}fv||Cz7cit!_9
zF{7EwkW&dez91!S(E_|^Z6<IVPVADw4UI7_HhQ>bPh67S`52@Zrua~uLI!$$AM<)&
z>9rNu7f@_C%`Kk16;BmS28$E7V^&MEsK!}!UjZo(j7FL9`F<5L9F#ug6P~SZ<=5N3
z=6AdMV?-tOKFlh9bV+*Mjwjx29WK>x)O<0+G(m%H7P8AW?tJWzf~-1hsJ_fHsLJ%_
z-j>B&(S5axg{EP%MXcD#gmCzf{#_wIHX#W(EhFE#zIWqD$}fSao$;-Q@bCsJ^GL)!
zpg{{CF}C<fB7+c7VS3-!z!%NQ_%HYKd+kKIVadi&$+k=K6egyA%ytJo_g5&ebhc#r
zQi*#N_o{Dpk@kpC_tk%d_#rC&xH6kex|x<hx1`L_`PU`KbK~{XI=961OWk-$_%y!o
zYCxy!N8MEx@l?rOlgp3&k;3~1GQg^Zd+|`n<iB5H;HJ2Mw$=qR4i_T<Lx9dcP3Wzp
zdne@4P^Pefk)ko7$0>`qUZlpx5pbX6fKzB+nEMce@$n87CuE&-()c8a#gsqCxaDrF
zMiSM+$=WmBWw;p*oew-MYdNBEu+wa9C)*ujRQ&)C#HH<#3gvfDe*KPmEK=(Vi=|oi
z1&qj8ZMok{88)xwToztzW6;dg*R(xib~Yr%>l|=z3ZnB-y>V5j8KB?o0i;JnORN-D
zjJg7F4lU5T<CfH?+u*lMYl;+h?)D^+{%&m!f-{v2>z2{hqXe5m_c+S95z*eeZp_o(
z$8|XBl+z8lkQmPMJ^a_OT+-H1;vr9sv8p1oHObxr8QlGthuTlaW$TlGnt`PK;q4ib
zQwNMg+tcMHT8$@t5pbYYK{6|nl#-cKu>=bcxb|hsvrH904t}9T_FJ)elVCPQJ1gc4
zQX@m4fFasU{-7u~7!XrLNNte!J;xH_y7fI$Mkb#(*PmB9FKZyKps~Pik*%RZBQl@#
z2Lbyx*TVcJa=h;wfn*~0V)}>cLi;d&;j!5bFVB{ZsMPc(9yuvI5&c3Fpw00UsF9Jm
zJL<a+9(|(hP>1{W47FAAU(-V^tn-eD$jgPuFHp<)Wj}#HLV|UA6Z|Og-Hp)EZ9l_u
zI~eDuFl^#+b;Da4&^<uN%RxE{h3=_rgfwIKqf*qtc~5`Dd{&=_^2U}w-3G_>+wx$%
z0sF)kABc5QO=Ih!FH|xEA-vd=AJrJFNZ>$iVk9%KUrd;sL}=pl0gGfrY6iGF<ji1j
zyGCva{e5|&=9{=|cet<n`gBp5wHDM8$beel=9-2YaDEFs@b68*qk$V3hFIrbQ)HSw
z9C^tUTjRDzH=rC+y)wWOE^WW#_0UCy(gTgHL-cek5=Tw%&Nlwa2erOew}RLsRdA+^
zJX@4@Tr%FhF^X3!gN;%q%7}11=5|Ax7Doy(TP{1b)CZoEH?NRHV?V)DZkTmtWx$=|
z1NXD%eTzP>oW7U@!H$P{x>8Zh)|8C2Uclk0q_eeK&4IE{Z?k(W&jui_38PKdtdmWq
zN#J8DUW317X-zdcvrA0&&wG#6Yik|e%k!YCggQ?6%oiVi#*89%u^S5?muC9+u^P-U
zsk{Ga4<SydV^=l^iXrX#kEE%)yCDg>v^cT|A?BG!KBB4A;w=Vu|GOf>Tn?sHEN)LE
zg8`$}VHSB1T&xL<7zqq~NNwd1k4m9nI$ot>slzK)Et!?On&D4<Ox$Zv=l7~0cOLLg
z0pYpV<ul)(V&mZnG>ohsmEY=7#qNQF>;Q<3;X=`{__(R37IBP^Zt<~2$)g)v<#1^v
zLKEY=r649IZLo_h&)$ZJXmgh|(&pL~XP8+^r1MaK*ta31MclGB(S5J|vy}Fy>*{aE
zH4OwrQah3qkXTMZm1cY{wF5&&?of8^Z+k|UhkFoG^(5A8v;K&}jse*0*C0rvj0L?C
zc3zH<)mr>Aq4ew*M<VkWbh2e7!yB4ZrRV<2CoT=W_=e!VAu0v?EvcKQ&9Fh+&F?xi
zeuLT=){`{%GtmISjYG~q8mjDq0Etkf>380Kymu_M53Nsdvf!+2bX~9ixRYfD@>g1@
zf2A9jB(>XjT|a3l$P0vT53m7fi=9D4@wJMiCBwyY{TD9o_$D@d%%3A;lCNeVjIAyJ
zdtxncSnSG(%V2N5cLCzPA4AdyYiOPlc!LyeJMK5Qon}w(CCJlg`U5-jX^;Ks8-wnf
z%K9xNSKGt2|KQ*`cNDa}h&gqR0&z3l0&Kjbo~0jZNRuffZ1*cefVxOdV!##Y{|$lO
ziP;Q8j0l~lW8qpJD6NFbL5UKGI<J8e7L*q<kx<#!ycml)&<N_=+pEtcI*NDpe^{uG
z!II*a1G?b_?t;pjI5|zs(~}`y*gt`%A_LZ8Q{?&*Ev1u<K_dt-zMAGI?NC9{{*FIt
zHlkx5N;9!JkY2wFWE;}&H8Dvm=a&_P;ZY*tp7GX+B>zsrLH*qbYt9p1y2ZK~b-;#1
z8QMD53|X=cUXoYEFVGXQ^DAwuvhB?S?%^v9ysk)PxMY2_D5W6Rn|_Aqs5D&@k95T*
z<za=snL%om*unaG1Kc&jH^TiVhb;9ff|W(H77ZM#tsgEas2h$~dZ;Ja_T0z?)5PQH
zoBznx4LR|~K_p4`%qHM1{40F47+sE8#g||LhljCB90SH``Z7l7nRt#)q>zxA1a)O#
zPP~2xxo>xBmrnq8oGb6hget8Y+%Z;S0ztD3*V=;G?QB|&MuGF18p^`eOU^j|1(*8#
zz0p6(X`B;pT~L;!Mc2|$u4&5Ql>#q~v=->oi4#SRcwTWwNQJ~T(w}-&2#)OB(Xknd
zcN9uSJRbw@)fn<%H7kI8dV>%KBT1)8KZ(Hiw2P}psB4=5hqsho{i;3u68&i*gO+UZ
zj(>P2b=*fj=NJ$xb`r5zp}<EW4i@`bmcsGgb1wwkNq&0b4W_f&K99K#0!oIoHZzc?
zg|cD0L-h&9gz(w^OTc}c`@#;d2J`lg-YLgq=YX+W-wD`a;=wv$z;WWC0N$6OO#N#Y
z&WxLs2hdnV?T9G9Q+gFc9R);k>YC*I&9R(BFp4;p4S?QG#>9g)hULU1`#>1reWG$%
zGq9HWujOW{>xSlcsB5RRmILnj-zoWoWvAch@_5(%)C;EZerQOb2p(kO4E@wvGT%c_
z_)te>8+71YGim3NTZln+;d3gK3TcL!xwkHCxD2s1WP5>ha9A&yh}TpwfpvYp^~R(W
z-P&Xv>qd~cN);D;mE~>*S@H|JT!}%5ZX<dOAvw-aKCj56(Xde5Vtf+UbC1_yQ8v|c
zet?&Fcdl+D#0EAf!K|!OuekNjvuyD1gzI<T4m!1WT$heD_w$5S$$r$QkvIHY{?$F1
zp*|oSf>MtUr)O)vh1y0QLP+*OAL9Ur>eg1D+MmAGH*XzRoyp#~<<1osd^M8`>UuD{
zpa`8duU{29Q-)I4Q!_N=Au~M^(`Y8Q!>@-RrOYIG%kk$t<pn!cbWDb_@hyMw*T+JT
zGjOCV<AAIuQq*5FckFS(^yI#{ptHw1pi<qKuTfQhWSG}VOsh`iZLtCoFry}~vftT&
zrVMGR$HiQOm~y9}U6f<M`NA;kWqzT{Yg*ZW5@oRp%mMl+YAQ@h(o-CC)b?-6mDxDg
zD*vPQyj(EyQQkGtR*gZm;S;%f?9etA`>6rDv6QdBVPmKML{1wV-^I3^)2Y~a@#xrk
z@Oy`W<zToCBH7e4!@sKOJN$Du#wN`;UKcjh{rN9hfNi?-W^!c#@>A0qNe5k`7_2X8
zS2IgGk34atB(;W+d=n(?Q_qbD&Vx9FdlG(!y&sUjk*Reqc;j6HFKaLjBfXYtdnDr{
zW4`EMVIwy9?;*fVN|n^8TvN(MG?JK&UNz}DG0RC+WXRXT%F~fD3$l4X{NV0#dSAXw
z_kyKZ@hs$A=T`)Alo>e+0XM;zBOY_|?+r#2=}D(Scle2)S2&^EoDz$5nT;6OSJc7x
z1_Vs%&}sT|UEtV9lPMrm!xXpleWRXGH5l3&=xAt3@z<6OowM#%3B&mWn^+gk{+{n*
z^t+Z2^)D6c;!th>kQ8dq#o^`G?l=a#OMLj#yQ89f(kq8K^Bgt?tP|#D6sH}ROKZ$H
zL+uJV+omQh>(*3!ZtizBn(0HG6^|362+kw=qM3bO`#=Xo8U$6a2fdQ>WTk>8W-H6w
z%8$;%B-sw2Jl$=dhZDV~QngBByY@=ka`AOa8<C5Df(=3qd~L)|*-4>Fh2ImVP8Jbw
z9og;W?o0nJZt?xDU+J}txzvyGC|L2sdeIe=C{clyv{8g||4I<{P5G@gP)O$%wZzlG
z=~mG)@pEr}RljQzk@;Ht-h^FB*4#4oNHWl#FVe=cgxFl;?(ZQk-$^ic)w-9qY*csm
z90epnUg<YZbl8i|jh1{&qo%qZaJ1SnSDJ!Qt-n_OMf2D37DbKohqH!>R9N_mNB`?n
zqY_Yi>S4cuxalJ<3(6|4A;JC&O7Wwnd~q3JFd~_G==^%_!~rG2AEsTNs=zDs$<pl}
z;hmXKsMHM5vK}7O;S`>Sxr?;R$Ob(0(11;pah$b8?vGWL<NUTF&^ul-C`zqs&T%0d
zpTFf{Tl>%<j0}!9Z!wt_&d=gL!uGx5EURvWs^g}L6XQaOsO~2s0O9qagO0kHs{xej
z3_h?bmw2*JHRda5H;EuX#B6(+DJU|`mML_ItM9e*L~$*T@&e|zXF_P5PPuEvFVR~d
z@V;{jvdfv76T(*_4t`NuT(=+Bj#~6Y)lsPRRls#INzsJAMJbx<kvb$&yKovI^ls`t
zSN8LW%`nclLKncnBj*EuM?@<3eokzMHq3I)gI@xs5GA^F-4E3zem1V#p|gIkzOWDV
z#Xp|u_Fl?bc6+^Ho$mmBh`L7kHh%{%5zuH6n9mtVr_r<D=c|z8rmNPtX(S`oN-L`*
zMtR%Rokz%?wZ`?2os4wc1`g0p$Hb8Bhpf<LDFWxZ{+-zBVy_3=ed!@%8G(>v=sl;8
ziD?3NCmR`h)zOkkBl`LSFjXKI)ow}dYVlnBy&sG^Gzhpjk2H%I$fO0XMMPxqaBLi_
zn0pn?JA_&{cuMoAxJ=z7I_KJqjCHEQA<CJFgD)Jk4T&h_`D;leNb#_^X7GdZ#Mx2;
zbp0FQ@$>;SiGl{MWhsOPI)ILKMTsG=LosNaq|CF%XI<g<so)JWU)q^f-PUnY6Kz^j
zGIl<5R#^!pb+jFaek{Ox5S^+O59B$YR!DhXJll0J6d3->W{95YRe-EnWYpEZo`75Z
zmbb`Wi5M(5J)JZ`Q{<H=*zrPQ$QM9qIhe84<Ey<nr3BOD8``*Or7qA8zL)q)z(%+I
zh`}ybWP>nJxmqSz658#J{AOP;^YpC$ZX2)KpV_-PeD0{!>&NavzN+$*p|dTJ3NOaW
zR=8e4w=R98RjK#Jc-im^aK5;SgJ-@b-)Pl44%Li!HgcS=cgWi4f*l&0*n=(Lpzcj%
z)Ozz|6(x<>#DB9)LMuVyFhmUi*GA~$eiEzAZ4`qReLo6m8XoH20)lCh`9l>pHD{*f
zZ9CB-WgQZZRxDP*U5f&YOFKkpoF!(vr6TfoZ6|&#1E0uqyPE8H4VaF<Koq%L9^F0o
ztf~(dTzr8<HCTkO&cxt#6!ryG-?B!9SeoRw_3b3iq2(%;jVy#CW6TGF#n-<7aVPbA
zn0#o}okN+d=f*k_Hy+lAU$%N#z3x8nl>?O7y8Ebi#9HKKZgzppDbx#g3>{At4SjAg
z(nEDN>1zpEZN}vOT;#hbkz+O8zk#H~oeoo^Dnv8=9B%5+gN_ms_9%Yex+CfeHtwAs
z*VB2tz@Y{Dz+C=FZhHkC2W<R2BxJT*kbc*sITtTkq#E{J);#^h2%`DL1!`^V9=m@x
zS@jRDEuN4I_e-BeBnw2<S>1hQMw4<iyj}o3BBP+B#$i>|VXfuYWk<hYyT_~q4I(D_
zMxUKh@6$9p&IU4$6O5nRa^htpnOyBVDt|iu3gRBK4U1fNt)hc=Vzaa^oIh&gfwSsn
zW9-$%jg@Au69oq-obnTif(8W~*E`OK97{=$^)_XG{Ji2@8QeI8)i(!DN>WuxAR8~c
z`6>TCAsw+|UNLv&y~ZDaJV}V$d#GDsb_ZqMGL#xtsnj81KIQ>_4^7vC6I>^GEuuZ$
zkHI{vI0C8V%NPVyDR~{T2lPxnRAJrx`@*4tr?Bf|3*mV5W9?p&&IT>g4SmQ`_J!b9
z#q{l+)F!dAb%K#qnIG-q<nArNzS0O<0Q3cg26_48PgJmxJm4o!6JOn(xC^|}^1xdM
zql^)q%p`hiB}-n(M+IsLc&ebDqS#PJqvd6CiT+7}3Z`I}SZvQuwCXh(bF!A+MCdG-
zM-&!g-d4&1?|03>uw9(K6QazxEA7PI(ItTW$kzh<TV)exN!R~UTkQ@>*Jgb^u_*r5
zc<Z9!oylA<>=zlrH?CH23K1~T9e_I7XqJZbE|(^zFfz-jL(v1GEivt6K&F?fR{<nk
z0OJS0;aYZ<o2_1{;UdOOW0*<;5)@d+asa3$*oA}RuN2Z9=53!m>uQ@-zA=#e-jEfZ
zZo*7ExIKF%qIX>l)<uLR61{v0t7-l7jabA!R#U0sVNg4vUu0o*YsPc=rNSttyeG3(
z)0;BoH+A@b?xeCxL4ncH=D8<s1?9YrB-je{8yklslAS=d1hM?htBymZ;QN=;#~=bW
z$wq5F`Z_d$MG<sA$h`hxIvE`;1@NS}8AUH0)<wbVmoF$|yr||c2?4kdv`k9YZbF(J
zgYf_&=_HERcZFFU3)bm@e1mX7AGWOBF$=Z9V(okauaD*`=kVkXx4pQQJT0mqN11Zq
zon;gED2qT6k>EF*pB+~bt$vYmcWxS}NT!fs3n4Ot(fl&(Qr}C!_MfF}R%OyP1VbUm
z(-{~aEg1CG!<s!nk#Cy((<V=qq-~u8sx6P*7tHq`u^@Ywb>?#DhtZf79Z-S@^<#t{
zooFO{a`~5xx2F~wjdMmK<jJK9N3YmDitW?25*pgq!H>!!^|$1-;H^DDZ<otJc|#d9
z3eYl^BO7XFqGr2ctTB%ZplaoR<%K(6>joOx7LdV=kL3E-3;`A(>ECEz(X)@shzJd$
z%ko{3mY}2P>7G3%!aFw_KogZN$B-BTRYAKG*>F2pJ-W|X6JMyi?&S6b5xamX4XE7V
z2(B0Qf`%1#&c}epnqETj)0DJ)=Qnb*Q^#boOK8qJ!l?$}ZMTk;T^$8l<?8fj6>GE#
zGAVUWHj7GOL{<}Gh;@3uU{thQxCZ^KyjIpMtX5`7TYGVQ%INO<)m^T9DLjuhe~TPA
zvY;YgkyH)S9pIm<e_BKA5|VM(l(}hO@}yMIHy!O_@C69PO_Up$;bC`N;CbV~Fr*xo
zKbN^-BUfV`HKkS1WwgOLY{eI94-2)%tqRD!u6Kk2u8IVv+;giPd1H~*NqCFP=dc_s
zVC(VN%$(GN{@z)ifG+Z&vv0HX&%^Uk7W>{~WpYv$l(rT|Bol69rPwXlW$uUXn<=|V
z5-KBjHa>uDSjw|NCA*z{Y-r5p(O77OGshNL(0w@T4TsCeC!O(?k!*C=9pV{}R{z_a
zx-F|tP{R%0Pyx&OZpX`b0Y;*$(z5(mGF>D@+n)j(4;EqCU2{_Ij{z753R?Vkhg9ey
z;OO9$Yd|=rph=Qab)~$<TzdVZu!6zLJpZ$7AfB;&QO}x=!({#t+(5XFdbzoBOnmx+
z>1~mX6-iART}L9i2^_MW2<tR&Fz9^AC%m((n~>bMS_jyCi9K?KGw8x$w0J9UqZ=wB
zO12RQBW+8u)XM5zVYm>Gub+|JN3xJ?DwqB&-Im8WPDv8(-G9r_@lF_W<!FtVuR47N
zaLF^)OF33m6D47I%jvZW^M}I~bVQL+VK!X`vMid$LFt`CKs3<!WZU(Tl1ce4tRr+U
zVc|7RXAQ||{r(N0NlK?OMr4skL+E?jqR@G<{l2P|4tHnmqd(Egu`uSa6(O?=*9_PF
zRExtn3~0PK@fHdZg*CvxFxF-5elIp0P*Z7meQlcqd0grW!xaNKvb#!HYTOiLIQ0p9
zJy7^faa_Wd&DrBKtpu*4O(FR(r(q$UXMVo3QLaD)sMf6I6Ab8wt08+Nta|gzYpo=*
zulb3qf#86f4hgp>`E^`ZqHeyYprurRVk1pB{$G8sb+kjii$PX0NRmmAxqZVtho-nj
zo+~UQzIw43m@9L<E)f*eL7VL#$177UBD`V+T-SXIWH|O=NcyvTP9Nk{;bm0WlGNQp
zbmX0}X&Db^&i+{A!CIJZ_s=l!i!yx+{qp>2+MxElworZq72<H^tl5ZB@H~7LmpU<e
zP!rP*d5`6h+dOso`<4uD00eEM#?K{d<ajvLN*vj%x8GQkInE{RbsRytoAF#)P(~He
zIfK;h);>hZ0!NQ4$slnobGf|j$foM1)MHY+wl1qBw6H?o9C(JT1La{kh-heCA4j68
z72*k<*eP%1?oc|18b720r(Y8)%`?r6e_beNSyr+a4uOJPiJXOXZ-1OI7ub0!ro;QC
zQ7+DMn;V^+H%Ii%JdmEUVlr`j-}D<xSw#FssBb}Fpc3`51Ek>s1KC&xTg!61V5Vy@
zKH*AB|E{>cdwhvdZQ%}Ng;qq|U+fp@2^vQxESaR?<7+Fn?Q@sIT3M6iS48%xpx}ly
z@y-EiqI~Wd)QsZ$#UY~#FJcl|Dqv{r^l!TV!RidD9$@ujixCRRE1sBjzbm)tnksxb
zW_*)GUm|Nla`E^tpwI|aZ;H%*q+dC%DEoSL;WVE#$B(;oldcaPm+3?+7>VwQw2b?_
zj(>i7QN<mgZ!S*;`vI$<uKF(G?p;ogTPV`-R$IcIg-T~CwBdP5!MyZcMgWnNbcdn6
zv{)n3Y56`%Ht$oj={ne1gj@7ALr5`vcLOf!F>d-cu2rczh-S^s4Vem#kPE2s*oIDw
z+UVX4kYKh-1$x>h(QfpEz?}R;GXF0eeHFmH>NGdE<+1n&DrEXM@<&0l@PADIf+E{i
z&)hN8d~)2+DFr_IugTsN01LS&jd$Y{UF<YB4&%w@lgiEes$&aOmz7y)Qtp>^i8LhF
zAL+85#SK`;oNkW*@FdqV(Y5xq6x*$6`_xe^I?q`VJjQ0Lv@u+j)hvlHzs?idiYNxT
z@0RGz=sFK%b<rll^o&@&u>+~Qe}plzXa%$LqIObF%RgVOtH`ZZ7g6O{B>dHD9I;Kk
zV^(^gby@-NKu979C-1I)d}{Av2jPuA7v)sCpXlrQyiV?L6BPLwl0UjC#dNKm*sCG!
z1vIp>aU+vs;!1SCM9wmniOdb~YvWG5{B`LW;|Y(g@*ZuJm`8v5Ww8UV^=un)0Uhh_
zfQv`M@J7sTYu$8gksP+);5D%uQI@}eLC0w#^GTP$A{q|wkCP(rW1M<X^GF5xQ`|?Y
z(pEbr1?B)2ldiIl^1)H5d^McgKk{?~(t53HQfoZ0F086{xOd)NsYB?Jg~1KMR2-&q
z@C+^j3(MJWp8XBT6x}0{rF(F4h1PjMQ#Qrn>|o68$L)3f|M4h9(6#j8cF@iLzj$3o
zk%C>*0pt!<442~(!}fSY{K_sKDAU+$&Na1Urt}z--W)%cqDA~XW+{O~Ox<g)ak`Jo
zEXd!^wPka5%pD9}8ZN5jU9u|_q$H1~jV9N({Q`*<S|ll_db*u08>HsI-H?GH3{;7o
z>rs#PlaxW;(8*;aGxQFUrFP<y-y3r7xEQiYF0?zX7!{Z;>{RA~ysG{_JTL;MQOMi`
z;UbDLTU0yg<BN&wS}y2PeGmyrYJJScVV!x!7Z>~6RxrGTA!_c3_SrNn%MAdH*~3c^
zB#NxVY}`?@YBS!W#1Taj&6}|-8xg(~*&><IeZ+z92;fYIC?XizAPIRWu#!WwX#0Y}
zfI3+rQ9D0Gn|;yIXC5V=&T4-X*b^p+5ZN6Q*t`GQdOZPLOxbY>{%IlRJ=53%14vGo
z#Q%%*J8GipOYC*p{33*|^rCZOwl7uzioOG0%5+ik+KHkuwbxJ7+<wR7S;o-yZyMSp
zwx-@fZ!?kXY?f^o8NbI!=#aRb5bm);v~*(8d(?bv0;p`UYYN=FgSo3Y%vZ`x%H1ax
zZMZP!Jl5!q<$jzmX2m0+8inn`=!^UBs+N57{mx$`YnOeNF)05Q^V{X?cq#|x+cIiR
zv!H=igc+B~Cszh$M)phzdksny!l`pT0kk&##GX_Vqay%u5wmYYvvP2o0lY0}Nf5@#
zAL!Xw2Fchp*;xa30*iD)ZT;RUL{d8jfnLpK-cwv9)h)L9_HI7S&9FzRfl|#Bvw+~Y
zfS}{oDUASB3@O;vuV*zo8A)1a-&z;#d-vZY=~?O9EI@-$Q7`#a9318rw}!#Hv|~j5
z&JJNus`IqRcdom2mu`%b<{drM+*qggrIluor*<K$^qEU!48~OP3M}`Wu(_qfCFeD9
zYC~d~0>i*`NgIYh(@{{Zi4}Tah-h%=E3%}o7=4{NKQ!JN+)%cBAx6)>zRy>!Du!h*
zyYg%I4Xi!cfmvpR#5-VU!FDwTxPW0c8*F!<IVUYO-H7vp3w#_&lK?_V(jqW)R=gQ~
zn05HTT0(x{l+fy(Fdr`QIUfUx$M=cueC<n63A}?qVD`U7R}t2-NU}uok%mr{fytK@
zcuK*|3lxQA#lJG9$`OUF8B9e2jQm3sVT~v2n?ogW)|h5gJzHOkUo@!z{J||<T=p;k
zw#kA=(I@F3xH~G|&)c(g=8Gv6Br|8=@=&f8z?~YKX8Nf9Z7ltHpQZRNf9xlN`^}uv
zP+iQ&Vr)}<=;2m;Bz)wh+^sy)`5?trq>mO6$t)Y5lgP~B5=J@bWm-gD#a6aa2d%w@
zBZ@w|LT6*d!%}Q2Yv0jxiH!^B6tHf2G|7K|QpPZ1@6~uI!KBJ%d;O2x{^{QSYW{Vx
zZ8j*vqRz-%gCA@@-s1wOuBwtskntsuUdFt>T(!-XD(3?BuaVU6Z5Eln0JYOz**}ui
zAos>;aCmbH{Nh)jCJ##UH%_|~#JyN75S&DzeB*-m>p1?a{CC?Q6vL9<Y;t9^3AGe5
z$RXHwwYT=E+W?REj_$P6pMv~%>$vtfYZ^qm%w9mR3KKCEqi6tNKtF+ihfrsQ8=;Pb
zXw^(D<k<Mgu3<?O;bG4!q;O`>e+U3AqYh~^uZhNiy2hsKo?_2oz-JwT*ydAbVd;so
zC>pV7jFkNa-Y8T%BLiiGPC6p7mhZ6te)Vh>>(Fc}IfOGdX!ISl4nPl1m7;2<UxM8~
z(qCC8^r@sex2i-c7}8NZ=TjKPwA54$YR2`$WuLbaFo+sZkMfZd*D-?6V<9v0!WlCO
z)I8diiMi=)g?+2#-4h}Nn>p1?af3zwaVp4OWgBgg*+9&La|hg{Ow528*fvfo3iC;{
z&g_}yB`fKE)9`5H)#zJDVJ|>pDm~A4cmEsIII!%(q_p$4h?H=uRV$pTpq0dIz%O-*
z%GVbOGdwGmTldjhQS5u9+|OLQH<}s2YJ9;C>&DT=5K*Kr`Nv&6b}AmZyVw4s6q>dp
z!Q=JAc+<vzxO}K!;Ifw2(ve5$0;Gxk&>L0m@jLh6WcRs%Ju-QlJd!-6r6e@9wtfJ0
zyAUUT_k4m#QT00Xg73ZlZ`vLD^6LS`o{CoiA?FVe^KnjHy7=sKed;ovILpf=<M2$%
z4{h&Dzc$Bgijj~Znsr_kgTCn@akka?Q-u<AWmrMO2nDyEhwrEuN|r2ScX;SA$tbQ{
z*ChM#*@eb0lAXLx+IbX}>15>16H>PN(!!Z9?qrE2n4=o6oq}UE8y(|EccFce_X$N$
zl5hQ|&X_L|qa-=;nE8TckqmmchTHTS|6QfpSS5<^Rt_HBIY(hn8S8}3m&@-J#B5!g
z#O`+62bN0uho*8re~<kv&`$YT+y{BF>U<;PX&#=K-=14$rTES_C~6<b;LQ!9P6Otu
zHL!eFM?07(LNp(E;!fI@tthjwJQpg?X#Cd!blo<^Ac}(Q<+)BV+D5OZL9dr@{k`nQ
zS~QXruI`g#uo$W&oDc#^&Z<!MbN0xc|G)Z!hkokY1Wts7F*AZN^eOl@5@LDx+KRBO
z`guiRx0mvn-$meEaV7$wX)&%?R1&i{WLWq-L(7kSR^BRRk5N|*_6Qh^vs|p6$sr!2
z6e}aYTs2$X9*i44EEL+;BDIj4C`#ry7O2`m+9rg1chR>_Qtm+y@Y-=UQt%0-=zP%b
zR3K_g2n){Uj{>1N#!y&0!@$;|bgJRZsy)rw=!6)2Gjpz_Avi9x?*&L*B?q?W!tHBC
z&g_ueL0uQX=2Bqgc%o2f4(b_mqU6PtmJfF^0tUzzs8=ya%S)XvI@hV0L01qnS-HT6
zVAqa|BAr4fOf({Ac8<KKW`d-bri5by#@h=qrqwt%J{|KYGzw{f=TrG!TMicgds+Qv
zEM-u8fhQZvi)d!sXoU4rr1ijV90@y03ER-;M}WnDQv^(W1ApS<>HaQ3ykw=S)_(@T
z`xEJ~5)@@pIfHyp^nx{2Gdrys23xZ8H`qPAesHa%+j5fs&n5btI`p*2x5ao;PW{!l
z6HrmA#w3*Z^pt`Fzfx#t_BKGMopuqb*JPe+MNA{3vWKKa=5V(fQxkls@*C>38XhC~
zle1t#@E37r`lu&3er_#Hww~2w&GF{&>93JqysJ=&onA^;((ljetA<><E8TQNPZ)C?
zoRjFYXS$DY^Pfo0P?W=Tp4gy^%f?A&CqO#811juYlkhpTIEY!G_^0KS`NzKVG;YdY
zyy*i2aK{4q#~RQgHEqcGA@3esux!Iw@y-#suCTKutMxgz6*;%sTvZE5I^-!$kE^ne
z?79~QFxtg_E1SGsDtX!_X6X*bp6Wtl9eChVvzwzS2ZYUp%D}Iz&7(!iM-9~0Dm;7_
zCDa@C6<kZj6xXB>>!07*InhP)`o-*~{lBB_#?4^+>(VuLr2&<ADpUx=zgFa6fpKZn
z05_5zn(t&B14*U-pZ3@8$zo?aloe6l@%al;$_`wcSOczMZ4r~Nf-krU`Am@vI=pUn
z-2{Ii(K4*XbD3f=<W0e`CJ0mVMrwad{xlKma+hkWYjNHju#C3L8kmL16K(#e?iOWe
zAdjcD%vb0^jMqO~Loq{ufyiRm#xQ}v_cuEi`(`ONz-v5}<v025pOeF_LJigTRv)`+
zq#Z3ToBub3foMmhAH*%N8opHL#sn%tZc>luIJG0JdNbZ)e@1*B+?7zn+c?k^YSs3+
z4(BhlOO}Q=+tsY2#my4<9!jlH=V<a3^)PscaUMWGzWbC&n_F2qYSRGQPa{j8whmYZ
zhL1`1X0(NovR;~X$?BN-LC>z0YjBO_Jz~At{_4BCuiOFZn2#Rk<>Lpu%@TX3+@CAp
z>+beh)GJE<?eB5Mu8CNllh-MGXE?TTjO=c86QdTa9%{avBJ&vWjR$w9D9rtRGH>+6
z^kcPj6Vg#|Dn@e@Qa1ID3XQ93bgsF-h==+gomJDd4T&%czEve2+1uPkEt7uaDBHdu
z8P8YMb6*#e&3Iej<-!pVn?x?KFi6Ac7IK!3S*xn#XM>Qm_Z(m06Pgj&?6?ClVUuvD
z&Ek`?Xo5prPK?*_)L*kTUy5WH^1Hw569I1V_TCqyX~75C)g@Cdr)T7USr`HBw^65@
z=}N`AKy8q#aQHXF`ejab`NShShx|fW!~J8Kz40t&w~F<UMP~(2Ze5C-th*0mQ)r$R
zH`#Y`J}Ii{0U8Nv%S#WH!)<r;819FNF{X{Cumr-rb8&e=Ixne*TO<If6<wonj5NJ5
z^>d&phvc=+VnjAOroy37<|^DQWQ^oqu4+oEhWi<4sVGD(pEvP8`o2pe6ul6Wuh596
zfT1w!*gSxnB1bUSI>BwXE_-k#-qpxZ;aC2=FI!B!TTdYbuc@S%@5aaP*#KcG^X*bu
zN3dr8FBq{M0xTHvZPFeTh*M~|^J}X8aX+S2|LhW5@zcwF-nyrX|8zy?fvOw2{1G_)
z-lpOnf<3OLxiep&O?e4<sM4hionpQD9b@?GIh$GD*jj3lQxO?oKQg^10K=fu>aCsX
zo)?&eBbb)gYQGtZ7e$g&WWXm9h7Fp&ZTUdbdVIE=#8;Q=Q$*eMGsV{9<p{*KFD|Lz
z`ZaewPX**PS^2}<^MX_S-{sc+n334ZEEm20VmooXC+fIs!s7@vk0oMilC?d}(@UPR
zFR`dF(OBN|HcrZ^HO$Gt6DP1cikL+6ZNP2%%b>{BNI=oW-L33^kj)i2p$gZcbb?xB
zD_5wIByI_k$Eda*emVhZiUfGQ^_7f5aeCCCC3HaRwynyQd>P7kw1pdI$Znvjm`bSZ
zkU&W#RkX<I0RpOlB#kZ$ydnziGt@ijU^aG($!hO@*fW)+XO*d|jP7b-%ffdUCqe=f
zA>JV}kJk+;4-3`s2l;ExnP=(^{=7CT=uBq)IQttY{+(YUY3V@rYaq!U{4D1VsgKaV
z;S8abY;?F(NKf4L(v*fBrC!T~W)nhZ?gM^Csv8_mPrg5lK$L3)zI4U#y$bW&#5w1a
z4XijT?%dwpomkCcghOjXSbKHAj=3+J5aq`mTrjO>F+F!b`w`wxM^u(FBhv6Xn91S~
zqnCk_S9Kr#w@`8dX%17J;Izq@`aFy2ixMJBGavs9`MoQiGH*W$e`M70yni<zx&B0g
z6@~JnRrYa9rhC;A=@t%&htj4)?>xu2`3}+6siR^ppKM#%8O;y}>-)0e*Zu4-0g!tb
z{F>HcU;26o*n;5lU39m!;u<z{ZCt-^Ga+?%R78yea*{M8e;*)lnQB?9IKc{z7VGd|
z%67|y#5BRFV7Y#Y;hamJT*`<Y?Nw{~zR!Uc5c03CEz>l}!wI0+?J&YGl=%&f)E&C`
z?~ibHFlqWgXd@D!fg;0hc&yd~;?dWJ#OW=PAAiaxA{B+KOYX!xUl9tr@atOOj#R3f
zM_+*tr<f#735aUQxy9vuv8@yND9@;@Q+39r6>B?dpX3=P@I@U?&71c~??Icd9l%%g
zSp_fMPnFV20vrkfWGC4CXfP=t7^lA3M=uZ7q$LGjt<h3oEfP^15_b6EBO=?-tq(HR
z%DxL=nEVm1MN>`0vUec=EW#kNw9KC;GJySGfzGs+aq<|8RrhvN-d1r=eh1wd+n2|+
zz?fn6bkUp;I=rkTKj~;}Db9vI-%3O$?5KxY{9-Ij?j^_hfSd46qG>A}8mX=Jj6jk+
z1?VHZsmeK|57#IvMxC{?#ByJxEA${Uk64Bryhipy>D6pGcwj&Q9De4;sH|)o{l1>T
z_i7e>5I$Raq&Nm7F(b~90X5r3i9Ls7nfmI1rVs5{R%gcoAqStPR#-KO)+2ek*yy6^
z(<OKh!nIg^rw5f<2{%G7Eb(ltI#`CTB7GfXbmi1AENb^@9+_yN+%It>#{r0Q59C?d
zwz+n~-^KP+U{c9?K-P8jFh1h+qpmsFzrjFG)O+T;-Q@)N$zN!U(EK$FzR}vdpef*h
z{3lQ*3-mt%vjvkd%a}ckb`ayXPJw)`sPFfnI}-g$xA0@kd8}z@Ef0*83MiP|7E@>+
z`PxsXd}g*F4Tkw|w$HiY%&3Oj=XMdBr)1{IKiq}kXarz|Xl38ViHAeV$K{O1OXtf0
zX=P)(5UHQQ$cE!Hs3fuk&UZ%s7XhdSl%1@74x4^}q*ny8^VTzf{@pW$89@YX#@=_O
zG8QZYqrVzi=3`K1HaWIiv+NTCa8MpeF1T)(4qE2mjzq+<U_8^0R{k4wl75t))3>JN
zr?gw}_!te+Ma)r@K#`(pgz$L8l6oU^W>@`_wN^>~RQIs#)NZd1c1aGeFUQ5PK)GUb
z{};?pPeMa)_st83HRS`r8)76akJUp0<at{IPo{@h?HO4bng|5g@%?73_#b~U1L&nP
zdO$v`>E2}hr#rg~b4g_gHdkG$@_f*Gg<oKCJJOGPnCo%tvge!TWONkIVP(^|fq$VH
zWM?C3^XVSI-LuXWe)*SZ5MRB|5Cyd;9yH=KfDBiJ6B?)=YxewUgSTmT%Mpg9Sqv&L
z4I{RG@qTmDN3tZbgA76Y#R`bA0jUcS5NH;s${C8x>luP523t4Aym%~F_tNB*UMkOs
z?Y_`1HF%&nH}x^+s7Dt)eKfON(?1JocZyO%2WQ5Yx)txjqRcnDNU$!;JxwfnHg=}?
z8YRQ_4yn}nFB~yW0+Wb~4Hg^MM66k^Qw1apc36HmyF~`H_OC(~Fm3BT)6U(s9WCvf
ztVb!GM-zbWaG&(VvP5N(+U}=215Zs<L*izpA~<!FD0Ckp>>Zs!mLbmBJZDzf`etSB
z9Flwc1exuHdh}CZOq9Uyppamk@@b6)oa=EbOepnl{x=YW42tz8nC*F1;^y@FPnB+r
zR?fL`F_O*Ff~v-wH(?d;D|p_D7DPK4Q4&DD8>0Pr<KX?srhtR8Qf5>W60(4CxeG;S
zR}lq9%TWH2JOM9jh;laK6}~}>2*{G~*`IILk5vVea=DY;{>y=@*H`63_-m{qhYDmL
zKJR;$Bqwjc2|(57hrLf4*N|7?7kCl($*d*zRG;0wJE5F%yLOPbqQF6AYSiV-aCk2g
z9&W$aZbv?*qtNp@B3GVkZ$c7E)Q2#3nmU7KEN7j+5RV6Fr(Usmd^e9T`*R+s`Y5}F
zc^jd7EbUO%k)D0gXweiAnKgWnSHEB7uOx``OtIXF!qyfIo+GdB4xUxu2O5x}6_N{N
zpWKHZfDSoAbquUYJY~SkEt}a%7<c!6-fsnFdwN19bo=cin2y1d%O+DZO?(5_1~;1=
z$JPNgx^qR8S_XvSKc!?^*JPvpX`p^|mTg2|%izQc_<%xUpe3fHHw6(GTdfTPGdTF#
z?{<Ep!U{Z~V>sQwpC?FBGb8o%6G_+OyS*Wq{D3<b|KG6NT}8D~V58$PZoV5l3S9z)
zqnUG-(C=couoLmMe!yW#*W&ngknV2n>geUpK{j!E+v9}N$RlvK@XYj(%wTm7u_QZK
zb~*0c)}?SUC2Z(8s2>if@aOG&x^k*T=cHs=^&_O*ly;mGCBW;+ZZd!2r)*%OolAMl
ziyiLUi`_XI8XKjdJ+0=v>K_a_ViJT~Def=w@0ITFYFhYM#I8A$)h5@AB_*fQk#05Z
z5KbzIj9<?<`3#L>wJJ>%26jk#Et+ndDHtA!c)$ZhB;;YqT}4+S|Ko>ZAWWQNo-mZV
zwYD|JCvgI(4Jq7;NNi*piE6Xcgm0Ba6x>7S0SUQvX^CpKmtf8_^f;EJ?r(O4tq<&>
zWHgT-Dp@)fvHJ>$EFo!vh)+6tdu5i^@PXnLrLgK<j)%Y>OWmF^rJ{C#7o#*}{c;&t
zbX2iM^q~cJe4EJXJ@s0QvX>BpAFa1bwXFB>Y6f#8dp92t8x1WjoXOBp!EOQr7<`!I
zs=VomC=!%9Ch%Dr%Qc?DVMVYt-5(W19KU9qMmqRTM!v-)lIz>P>5s?lk7fRvA33>m
z7CB*Bch&u<3`>%Y)TvC-wz4*IoKzuJ4X-ouxZdGZeYU+9=WE3j>);kb?=!}n#!&@h
z-v?6$?2*CSpr#rF^yx8K4HPwTWGRbHL?wj;Q@0el5ciXpb=3gPWWDRb6(jAYL={xz
zKU7H0<hFF=NZcYt1OPODp}GwIO6u;nt>RX>TWDbY)`9^GC!ftg7mb3yJ1nS<k>@zW
z0MlC`ae-CbH{w%9rIU2T8F)82r21{?&SV_|cvOn*339tMYdzE<&+o$+onvDb<7F7)
z3;#+W9?8>jBor&;bTLs)01O5%H{ErU-okiU00000MiK0X*)}4300r^$1%QBn47VMC
rfPf6zEr5W44AzARfPjDu`S%8Zz@`cS&}p}cax|ck2><{900dcDlEdRM


From 994b6544fa50e7e12e8929bf9a2ff6428b5aea26 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 27 Jun 2026 22:25:41 +0200
Subject: [PATCH 153/244] integrity: Fix wrong test for shift overflow

The test for overflow should use uint32_t, also the real
calculation should explicitly use destination int type.
Otherwise shift could overflow causing UB.

Fix oss-fuzz issue 528489064
---
 lib/integrity/integrity.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/integrity/integrity.c b/lib/integrity/integrity.c
index c1e050acf..92da41ffb 100644
--- a/lib/integrity/integrity.c
+++ b/lib/integrity/integrity.c
@@ -51,7 +51,7 @@ static int INTEGRITY_read_superblock(struct crypt_device *cd,
 			sb->version, device_path(device));
 		r = -EINVAL;
 	} else {
-		if ((int)sb->log2_sectors_per_block + SECTOR_SHIFT >= 32) {
+		if ((uint32_t)sb->log2_sectors_per_block + SECTOR_SHIFT >= 32) {
 			log_dbg(cd, "dm-integrity log2_sectors_per_block overflow");
 			return -EINVAL;
 		}
@@ -78,7 +78,7 @@ int INTEGRITY_read_sb(struct crypt_device *cd,
 		return r;
 
 	if (params) {
-		params->sector_size = SECTOR_SIZE << sb.log2_sectors_per_block;
+		params->sector_size = (uint32_t)SECTOR_SIZE << sb.log2_sectors_per_block;
 		params->tag_size = sb.integrity_tag_size;
 	}
 

From fd9384867e1b522a010910113716504f8746e85e Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 29 Jun 2026 22:07:29 +0200
Subject: [PATCH 154/244] Update Readme.md

---
 README.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/README.md b/README.md
index 385efdd9b..271e52ab5 100644
--- a/README.md
+++ b/README.md
@@ -39,6 +39,12 @@ Download
 Release notes and tarballs are available at
 [kernel.org](https://cdn.kernel.org/pub/linux/utils/cryptsetup/).
 
+**The latest cryptsetup release candidate version is 2.8.7-rc1**
+  * [cryptsetup-2.8.7-rc1.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7-rc1.tar.xz)
+  * Signature [cryptsetup-2.8.7-rc1.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7-rc1.tar.sign)
+    _(You need to decompress file first to check signature.)_
+  * [Cryptsetup 2.8.7-rc1 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.7-rc1-ReleaseNotes).
+
 **The latest stable cryptsetup release version is 2.8.6**
   * [cryptsetup-2.8.6.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.6.tar.xz)
   * Signature [cryptsetup-2.8.6.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.6.tar.sign)

From 38f95b7001c7680d29093e2a73aa389467deb9a0 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 29 Jun 2026 22:34:41 +0200
Subject: [PATCH 155/244] Add Release notes for 2.8.7-rc1 from stable branch.

---
 docs/v2.8.7-rc1-ReleaseNotes | 93 ++++++++++++++++++++++++++++++++++++
 1 file changed, 93 insertions(+)
 create mode 100644 docs/v2.8.7-rc1-ReleaseNotes

diff --git a/docs/v2.8.7-rc1-ReleaseNotes b/docs/v2.8.7-rc1-ReleaseNotes
new file mode 100644
index 000000000..faf5a0dd7
--- /dev/null
+++ b/docs/v2.8.7-rc1-ReleaseNotes
@@ -0,0 +1,93 @@
+Cryptsetup 2.8.7-rc1 Release Notes
+==================================
+Stable bug-fix release candidate that solves several compatibility issues.
+
+All users of cryptsetup must upgrade to this version.
+
+Changes since version 2.8.6
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Changes related to Linux kernel AF_ALG crypto userspace interface deprecation
+  Linux kernel maintainers decided to deprecate the AF_ALG interface, which was heavily used
+  by cryptsetup, with the plan to remove it (or severely limit it) for security reasons.
+  Libcryptsetup uses userspace (primarily via AF_ALG) for processing LUKS keyslots and for on-disk
+  metadata handling for other formats. Using AF_ALG ensured that the same set of algorithms
+  is present in userspace and later in-kernel for device activation.
+
+  While libcryptsetup has a concept of fallback to userspace library, it was not used in
+  all situations.
+
+  In this version, libcryptsetup can use a userspace crypto library, AF_ALG (if present), and
+  in some situations (LUKS keyslots), fallback to a temporary dm-crypt mapping. The last option
+  requires root privileges. This ensures that most operations will continue to work even when
+  AF_ALG is disabled or limited.
+
+  Unfortunately, removing the AF_ALG could cause severe compatibility issues if the required
+  algorithm (or encryption mode) is not implemented in the userspace library. A typical example is
+  the Adiantum cipher, which is implemented only in the kernel. Also, ciphers like Serpent or
+  Twofish (in XTS mode) are missing from several userspace libraries. The cryptsetup benchmark
+  for ciphers is no longer available if the AF_ALG interface is unavailable.
+
+* Keyring handling changes.
+  Libcryptsetup can use the kernel keyring to transfer the volume key into the kernel, avoiding
+  sending it as a parameter to system calls.
+
+  In previous versions, the volume key could be stored in the thread keyring, which should be
+  removed when the process exits. Unfortunately, the thread keyring can remain active in some
+  situations (such as when allocating a loop device). This could be a problem after calling
+  luksSuspend when the volume key could remain in memory.
+
+  Instead of loading volume keys directly into the thread keyring, cryptsetup now creates
+  an intermediary keyring linked into the thread keyring and loads volume keys there.
+  The intermediary keyring is now removed in the libcryptsetup context destructor
+  (usually on application exit).
+
+  Note that in previous versions, volume keys persisted until the process exited (even after
+  the context destructor was called).
+
+* Changes related to possible LUKS volume key digest collisions.
+  LUKS on-disk metadata uses a volume key digest generated by the PBKDF2 key-derivation algorithm
+  to verify that the decrypted volume key is valid. The use of PBKDF2 (instead of a more suitable
+  cryptographic digest algorithm) is part of the original LUKS design. It was retained for LUKS2
+  for compatibility (it allows easy in-place conversion).
+
+  However, PBKDF2 has several design flaws. As it is based on HMAC (Hash-based Message
+  Authentication Code), it also inherits the weak-key HMAC issue. In HMAC, the key can be
+  arbitrarily long. If the key is shorter than the hash internal block size, it is padded with
+  zeroes to a full block size. This flawed padding causes any HMAC key (shorter than the specified
+  block size) to collide with keys that have added trailing zeroes. A collision means that HMAC
+  (and PBKDF2) has the same output for colliding keys.
+
+  In LUKS, a PBKDF2 collision is not a security issue; it cannot compromise data confidentiality.
+  Moreover, the colliding key has a different length and should be rejected by the underlying block
+  cipher. Unfortunately, in some reencryption scenarios (e.g., a header without keyslots),
+  a collision key could be accepted, leading to possible data corruption.
+
+  Code now always validates the expected key length.
+  This validation is now strictly implemented in LUKS metadata processing.
+
+  In the long term, LUKS will need to upgrade to a better volume key digest algorithm, but that
+  will make the format backward-incompatible.
+
+* Support Aria and Camellia ciphers in the libgcrypt cryptographic backend.
+
+* Fix pkg-config library entry for the Mbed TLS cryptographic backend.
+
+* Better document CRYPT_VOLUME_KEY_NO_SEGMENT and CRYPT_VOLUME_KEY_DIGEST_REUSE API flags.
+  The keyslot created with the CRYPT_VOLUME_KEY_NO_SEGMENT flag must always be unbound
+  (not assigned to the default data segment). The use of the CRYPT_VOLUME_KEY_DIGEST_REUSE flag
+  does not make sense without the CRYPT_VOLUME_KEY_NO_SEGMENT or CRYPT_VOLUME_KEY_SET flags.
+
+* Fix several possible corner cases in OpenSSL cryptographic backend (based on AI analysis).
+  These include checking before casting from size_t to int, checking return values for the old
+  OpenSSL HMAC API, avoiding sending a partial buffer to the caller if the operation fails,
+  and explicitly checking for buffer length overflow. Most of these cannot happen in
+  the libcryptsetup context, but the cryptographic backend can be used for other projects.
+
+* Code hardening based on various AI analysis reports.
+  Including a fix for snprintf truncation in libdevmapper code, avoiding possible leak of JSON
+  keyslot object on error path, and a fix for reencryption temporary device name.
+
+* Fix jq (JSON commandline processor) use in testing scripts.
+  After the security update for jq, it no longer processes JSON with trailing zeroes.
+  Regression test scripts were updated to avoid using this scenario.

From 8e7969c7fdba7cf5bbc10fe92309bcd8caa20aa6 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 30 Jun 2026 12:44:44 +0200
Subject: [PATCH 156/244] test: use scsi_debug_teardown helper in reencryption
 test.

---
 tests/reencryption-compat-test | 21 +++++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/tests/reencryption-compat-test b/tests/reencryption-compat-test
index 8a7c46246..b609a4973 100755
--- a/tests/reencryption-compat-test
+++ b/tests/reencryption-compat-test
@@ -36,10 +36,19 @@ fips_mode()
 	./crypto-check fips_mode || ./crypto-check fips_mode_kernel
 }
 
-del_scsi_device()
-{
-	rmmod scsi_debug >/dev/null 2>&1
-	sleep 1
+# $1 path to scsi debug bdev
+scsi_debug_teardown() {
+	local _tries=15;
+
+	while [ -b "$1" -a $_tries -gt 0 ]; do
+		rmmod scsi_debug >/dev/null 2>&1
+		if [ -b "$1" ]; then
+			sleep .1
+			_tries=$((_tries-1))
+		fi
+	done
+
+	test ! -b "$1" || rmmod scsi_debug >/dev/null 2>&1
 }
 
 remove_mapping()
@@ -51,7 +60,7 @@ remove_mapping()
 	umount $MNT_DIR > /dev/null 2>&1
 	rmdir $MNT_DIR > /dev/null 2>&1
 	LOOPDEV1=""
-	del_scsi_device
+	test -b "$SCSI_DEV" && scsi_debug_teardown $SCSI_DEV
 }
 
 fail()
@@ -89,7 +98,7 @@ valgrind_run()
 }
 
 add_scsi_device() {
-	del_scsi_device
+	test -b "$SCSI_DEV" && scsi_debug_teardown $SCSI_DEV
 	if [ -d /sys/module/scsi_debug ] ; then
 		echo "Cannot use scsi_debug module (in use or compiled-in), test skipped."
 		exit 77

From 2a029d7448c8d36f66b4d7a76a40fba8c177a27d Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 3 Jul 2026 11:56:58 +0200
Subject: [PATCH 157/244] FIx csmock exit code

Also slightly increase required space.
---
 .gitlab/ci/csmock.yml | 2 +-
 .gitlab/ci/run_csmock | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.gitlab/ci/csmock.yml b/.gitlab/ci/csmock.yml
index b4b20fc33..0ece6e24e 100644
--- a/.gitlab/ci/csmock.yml
+++ b/.gitlab/ci/csmock.yml
@@ -1,7 +1,7 @@
 .dnf-csmock:
   variables:
     DISTRO: cryptsetup-fedora-rawhide
-    DISK_SIZE: 20
+    DISK_SIZE: 25
   extends:
     - .fail_if_coredump_generated
   timeout: 2 hours
diff --git a/.gitlab/ci/run_csmock b/.gitlab/ci/run_csmock
index 707e0ffa9..d322b0816 100755
--- a/.gitlab/ci/run_csmock
+++ b/.gitlab/ci/run_csmock
@@ -17,6 +17,6 @@ $CSMOCK cryptsetup-*.src.rpm \
 
 tar xJf $CSMOCK_TXZ $CSMOCK_ERR --strip-components 1 \
        && test -s $CSMOCK_ERR \
-       && { echo "csmock discovered important errors"; echo 3; }
+       && { echo "csmock discovered important errors"; exit 3; }
 
 exit 0

From 977de819fdc1da1d40b7c47eae005f516933beb2 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 3 Jul 2026 14:59:37 +0200
Subject: [PATCH 158/244] tests: Fix compilation of api-test-2 if config.h is
 not included.

For local install test, we do not use config.h.
Just skip the defaults comparison.
---
 tests/api-test-2.c | 28 +++++++++++++++++++---------
 1 file changed, 19 insertions(+), 9 deletions(-)

diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index a6b82d187..a93c828eb 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -3244,25 +3244,35 @@ static void Pbkdf(void)
 
 static void TypeDefaults(void)
 {
-	struct crypt_type_defaults defaults;
+	struct crypt_type_defaults defaults = {}, defaults2 = {};
 
 	// test valid LUKS1 defaults
 	OK_(crypt_get_type_defaults(CRYPT_LUKS1, &defaults));
+	NOTNULL_(defaults.cipher);
+	NOTNULL_(defaults.cipher_mode);
+	GE_(defaults.key_size, 128);
+#ifdef DEFAULT_LUKS1_CIPHER
 	OK_(strcmp(defaults.cipher, DEFAULT_LUKS1_CIPHER));
 	OK_(strcmp(defaults.cipher_mode, DEFAULT_LUKS1_MODE));
-	OK_(strcmp(defaults.hash, default_luks1_hash));
 	EQ_(defaults.key_size, DEFAULT_LUKS1_KEYBITS);
+#endif
+	OK_(strcmp(defaults.hash, default_luks1_hash));
 	NULL_(defaults.integrity);
 	EQ_(defaults.tag_size, 0);
 
 	// test valid LUKS2 defaults
-	OK_(crypt_get_type_defaults(CRYPT_LUKS2, &defaults));
-	OK_(strcmp(defaults.cipher, DEFAULT_LUKS1_CIPHER));
-	OK_(strcmp(defaults.cipher_mode, DEFAULT_LUKS1_MODE));
-	OK_(strcmp(defaults.hash, default_luks1_hash));
-	EQ_(defaults.key_size, DEFAULT_LUKS1_KEYBITS);
-	OK_(strcmp(defaults.integrity, "hmac-sha256"));
-	EQ_(defaults.tag_size, 32);
+	OK_(crypt_get_type_defaults(CRYPT_LUKS2, &defaults2));
+	NOTNULL_(defaults2.cipher);
+	NOTNULL_(defaults2.cipher_mode);
+	GE_(defaults2.key_size, 128);
+#ifdef DEFAULT_LUKS1_CIPHER
+	OK_(strcmp(defaults2.cipher, DEFAULT_LUKS1_CIPHER));
+	OK_(strcmp(defaults2.cipher_mode, DEFAULT_LUKS1_MODE));
+	EQ_(defaults2.key_size, DEFAULT_LUKS1_KEYBITS);
+#endif
+	OK_(strcmp(defaults2.hash, default_luks1_hash));
+	OK_(strcmp(defaults2.integrity, "hmac-sha256"));
+	EQ_(defaults2.tag_size, 32);
 
 	// test invalid type (non-LUKS)
 	FAIL_(crypt_get_type_defaults(CRYPT_PLAIN, &defaults), "Invalid type");

From a21fa23d0223a15eb547c2d5daf9db987e2b7b1b Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 3 Jul 2026 15:00:56 +0200
Subject: [PATCH 159/244] tests: Make crypto-check work in local install test

If testing local installation instead of compiled binaries,
crypto check was not compiled and many tests were skipped.

As we have no access to cryptsetup configuration in this case,
just compile it with hardcode modes supported by all backends
to keep most of test running.

In the future, this should be completely rewritten.
---
 tests/Makefile.localtest |  7 ++++--
 tests/crypto-check.c     | 46 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 51 insertions(+), 2 deletions(-)

diff --git a/tests/Makefile.localtest b/tests/Makefile.localtest
index 89ce2c395..dd7bbe8bf 100644
--- a/tests/Makefile.localtest
+++ b/tests/Makefile.localtest
@@ -4,11 +4,11 @@
 #      (append TESTSUITE_NOSKIP=y to avoid treating skipped tests as success)
 #
 CPPFLAGS=-I../lib/ -I../lib/luks1 -DHAVE_DECL_DM_TASK_RETRY_REMOVE -DKERNEL_KEYRING \
-	-DHAVE_SYS_SYSMACROS_H -DNO_CRYPTSETUP_PATH
+	-DHAVE_SYS_SYSMACROS_H -DNO_CRYPTSETUP_PATH -DNO_CRYPT_BACKEND
 CFLAGS=-O2 -g -Wall -D_GNU_SOURCE
 LDLIBS=-lcryptsetup -ldevmapper
 TESTS=$(wildcard *-test *-test2) api-test api-test-2 all-symbols-test unit-utils-crypt-test
-TESTS_UTILS=differ unit-utils-io unit-wipe
+TESTS_UTILS=differ unit-utils-io unit-wipe crypto-check
 
 ifneq ($(RUN_SSH_PLUGIN_TEST),)
 TESTS += ssh-test-plugin
@@ -24,6 +24,9 @@ check-programs: $(TESTS_UTILS) $(TESTS)
 differ: differ.o
 	$(CC) -o $@ $^
 
+crypto-check: crypto-check.o
+	$(CC) -o $@ $^
+
 api-test: api-test.o test_utils.o
 	$(CC) -o $@ $^ $(LDLIBS)
 
diff --git a/tests/crypto-check.c b/tests/crypto-check.c
index e39bb2973..e3022f281 100644
--- a/tests/crypto-check.c
+++ b/tests/crypto-check.c
@@ -6,10 +6,13 @@
  */
 
 #include <stdio.h>
+#include <stdbool.h>
 #include <stdlib.h>
+#include <string.h>
 #include <unistd.h>
 #include <fcntl.h>
 
+#ifndef NO_CRYPT_BACKEND
 #include "crypto_backend/crypto_backend.h"
 
 static int check_cipher(const char *alg, const char *mode, unsigned long key_bits)
@@ -79,6 +82,49 @@ static int check_pbkdf(const char *pbkdf)
 
 	return EXIT_FAILURE;
 }
+#else /* NO_CRYPT_BACKEND */
+/*
+ * All default backends should work with options hardcoded here
+ */
+static int crypt_backend_init(void) { return 0; };
+static void crypt_backend_destroy(void) {};
+static const char *crypt_backend_version(void) { return "none"; };
+static bool crypt_fips_mode(void) { return false; };
+static bool crypt_fips_mode_kernel(void) { return false; };
+
+static int check_cipher(const char *alg, const char *mode, unsigned long key_bits)
+{
+	if (strcmp(alg, "aes"))
+		return EXIT_FAILURE;
+
+	if (!strcmp(mode, "cbc") && (key_bits == 128 || key_bits == 256))
+		return EXIT_SUCCESS;
+
+	if (!strcmp(mode, "xts") && (key_bits == 256 || key_bits == 512))
+		return EXIT_SUCCESS;
+
+	return EXIT_FAILURE;
+}
+
+static int check_cipher_kernel(const char *alg, const char *mode, unsigned long key_bits)
+{
+	/* Expect AF_ALG not available */
+	return  EXIT_FAILURE;
+}
+
+static int check_hash(const char *hash)
+{
+	if (!strcmp(hash, "sha512") || !strcmp(hash, "sha256") || !strcmp(hash, "sha1"))
+		return EXIT_SUCCESS;
+
+	return EXIT_FAILURE;
+}
+
+static int check_pbkdf(const char *pbkdf)
+{
+	return EXIT_SUCCESS;
+}
+#endif
 
 static void __attribute__((noreturn)) exit_help(bool destroy_backend)
 {

From eeac53bb0838f85258e50dbd533999bb374da3fa Mon Sep 17 00:00:00 2001
From: Petr Pisar <petr.pisar@atlas.cz>
Date: Sat, 4 Jul 2026 18:12:56 +0200
Subject: [PATCH 160/244] po: update cs.po (from translationproject.org)

---
 po/cs.po | 1019 +++++++++++++++++++++++++++---------------------------
 1 file changed, 510 insertions(+), 509 deletions(-)

diff --git a/po/cs.po b/po/cs.po
index 2c10d4391..26ca0cd59 100644
--- a/po/cs.po
+++ b/po/cs.po
@@ -33,10 +33,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-03-30 14:18+0200\n"
-"PO-Revision-Date: 2026-03-30 17:35+02:00\n"
+"POT-Creation-Date: 2026-06-29 21:30+0200\n"
+"PO-Revision-Date: 2026-07-02 17:37+02:00\n"
 "Last-Translator: Petr Pisar <petr.pisar@atlas.cz>\n"
 "Language-Team: Czech <translation-team-cs@lists.sourceforge.net>\n"
 "Language: cs\n"
@@ -105,7 +105,7 @@ msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Požadovaný automatický přepočet značek integrity není podporován."
 
 #: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2781
+#: lib/luks2/luks2_json_metadata.c:2799
 msgid "Discard/TRIM is not supported."
 msgstr "Zahazování (TRIM) není podporováno."
 
@@ -152,669 +152,669 @@ msgstr "Požadována neznámá kvalita generátoru náhodných čísel."
 msgid "Error reading from RNG."
 msgstr "Chyba při čtení z generátoru náhodných čísel."
 
-#: lib/setup.c:248
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "Podpora pro Opal je v libcryptsetup vypnuta."
 
-#: lib/setup.c:250
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "Zařízení %s nebo jádro nepodporuje šifrování Opal."
 
-#: lib/setup.c:266
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "Implementaci šifrovacího generátoru náhodných čísel nelze inicializovat."
 
-#: lib/setup.c:272
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "Implementaci šifrování nelze inicializovat."
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Hašovací algoritmus %s není podporován."
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "Chyba zpracování klíče (za použití haše %s)."
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Druh zařízení nelze určit. Nekompatibilní aktivace zařízení?"
 
-#: lib/setup.c:395 lib/setup.c:4160
+#: lib/setup.c:398 lib/setup.c:4177
 msgid "This operation is supported only for LUKS device."
 msgstr "Tato operace je podporována jen u zařízení LUKS."
 
-#: lib/setup.c:432
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "Tato operace je podporována jen u zařízení LUKS2."
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "Všechny pozice klíčů jsou obsazeny."
 
-#: lib/setup.c:500
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "Pozice klíče %d není platná, prosím, vyberte číslo mezi 0 a %d."
 
-#: lib/setup.c:506
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "Pozice klíče %d je obsazena, prosím, vyberte jinou."
 
-#: lib/setup.c:531 lib/setup.c:3875
+#: lib/setup.c:534 lib/setup.c:3878
 msgid "Device size is not aligned to device logical block size."
 msgstr "Velikost zařízení není zarovnaná na velikost logického sektoru zařízení."
 
-#: lib/setup.c:628
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "Nalezena hlavička, ale zařízení %s je příliš malé."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
-#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Tato operace není na zařízení tohoto typu podporována."
 
-#: lib/setup.c:674
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "Zakázaná operace spolu s probíhajícím přešifrování."
 
-#: lib/setup.c:806
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nahrání původních metadat LUKS2 do paměti selhalo."
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
-#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
-#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
-#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
+#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
+#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
+#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Zařízení %s není platným zařízením LUKS."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Nepodporovaná verze LUKS %d."
 
-#: lib/setup.c:1270
+#: lib/setup.c:1273
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Na aktivním zařízení %s nebyl nalezen žádný známý vzorek určující šifrování."
 
-#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5816
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
 #, c-format
 msgid "Device %s is not active."
 msgstr "Zařízení %s není aktivní."
 
-#: lib/setup.c:1532
+#: lib/setup.c:1535
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Zařízení nižší úrovně pod šifrovaným zařízením %s zmizelo."
 
-#: lib/setup.c:1614
+#: lib/setup.c:1617
 msgid "Invalid plain crypt parameters."
 msgstr "Neplatné parametry plain šifry."
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1622 lib/setup.c:2672
 msgid "Invalid key size."
 msgstr "Neplatná velikost klíče."
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID není na šifře tohoto typu podporováno."
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Zařízení s oddělenými metadaty není na šifře tohoto typu podporováno."
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
 msgid "Unsupported encryption sector size."
 msgstr "Nepodporovaná velikost šifrovaného sektoru."
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
 msgid "Device size is not aligned to requested sector size."
 msgstr "Velikost zařízení není zarovnaná na požadovanou velikost sektoru."
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
 msgid "Can't format LUKS without device."
 msgstr "LUKS nelze bez zařízení naformátovat."
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1707 lib/setup.c:1959
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Zónové zařízení %s nelze použít pro hlavičku LUKS."
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Požadované zarovnání dat není slučitelné s polohou dat."
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1754 lib/setup.c:1984
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "POZOR: Zařízené DAX může poškodit data, protože nezaručuje atomické aktualizace sektorů.\n"
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Ze zařízení %s nelze odstranit hlavičku."
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1805 lib/setup.c:2164
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Zařízení %s je na aktivaci příliš malé. Nezbývá žádné místo pro data.\n"
 
-#: lib/setup.c:1843
+#: lib/setup.c:1846
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Klíč svazku je příliš malý na šifrovaní s rozšířeními pro integritu."
 
-#: lib/setup.c:1847
+#: lib/setup.c:1850
 msgid "Integrity key size is too small."
 msgstr "Velikost klíče integrity je příliš malý."
 
-#: lib/setup.c:1856
+#: lib/setup.c:1859
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Šifra %s-%s (velikost klíče %zd bitů) není dostupná."
 
-#: lib/setup.c:1897
+#: lib/setup.c:1900
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "POZOR: Aktivace zařízení selže, dm-crypt nepodporuje požadovanou velikost šifrovaného sektoru.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
-#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4497
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Zařízení %s je příliš malé."
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Zařízení %s, které se používá, nelze formátovat."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Zařízení %s nelze formátovat, povolení zamítnuto."
 
 # FIXME "format integrity" is nonsense
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Zařízení %s není možné formátovat integritu."
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2151 lib/setup.c:2629
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Zařízení %s nelze formátovat."
 
-#: lib/setup.c:2191
+#: lib/setup.c:2194
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Parametry zarovnání Opal nelze získat."
 
-#: lib/setup.c:2203
+#: lib/setup.c:2206
 msgid "Bogus OPAL logical block size."
 msgstr "Chybná velikost logického bloku Opal."
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Chybná velikost logického bloku Opal se liší od velikosti bloku zařízení."
 
-#: lib/setup.c:2214
+#: lib/setup.c:2217
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Požadovaná poloha dat není slučitelná s velikostí bloku Opal."
 
-#: lib/setup.c:2221
+#: lib/setup.c:2224
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Požadované zarovnání dat není slučitelné se zarovnáním Opal."
 
-#: lib/setup.c:2241
+#: lib/setup.c:2244
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Poloha dat nesplňuje požadavky Opal na zarovnání."
 
-#: lib/setup.c:2254
+#: lib/setup.c:2257
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Požadované zarovnání dat nesplňuje požadavky na zarovnání uzamykatelné oblasti."
 
 # TODO: Pluralize
-#: lib/setup.c:2468
+#: lib/setup.c:2471
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Velikost zařízení byla dorovnána %<PRIu64> sektory, aby lícovala s granularitou zarovnání Opal."
 
-#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Získání zámku Opal na zařízení %s selhalo."
 
-#: lib/setup.c:2538
+#: lib/setup.c:2541
 msgid "Incorrect OPAL Admin key."
 msgstr "Nesprávný klíč správce Opal."
 
-#: lib/setup.c:2540
+#: lib/setup.c:2543
 msgid "Cannot setup OPAL segment."
 msgstr "Část Opal nelze nastavit."
 
-#: lib/setup.c:2622
+#: lib/setup.c:2625
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Zařízení %s nelze formátovat, zařízení Opal je asi zcela chráněno proti zápisu."
 
-#: lib/setup.c:2624
+#: lib/setup.c:2627
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Toto je snad chyba ve firmwaru. Resetujte Opal zařízení pomocí PSID a znovu jej zapojte."
 
-#: lib/setup.c:2644
+#: lib/setup.c:2647
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Reset uzamykatelné oblasti %d na zařízení %s selhal."
 
-#: lib/setup.c:2664
+#: lib/setup.c:2667
 msgid "Can't format LOOPAES without device."
 msgstr "LOOPAES nelze bez zařízení naformátovat."
 
-#: lib/setup.c:2709
+#: lib/setup.c:2712
 msgid "Can't format VERITY without device."
 msgstr "VERITY nelze bez zařízení naformátovat."
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2723 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Nepodporovaný druh VERITY haše %d."
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2729 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Nepodporovaná velikost bloku VERITY."
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2734 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Nepodporovaná poloha haše VERITY."
 
-#: lib/setup.c:2736
+#: lib/setup.c:2739
 msgid "Unsupported VERITY FEC offset."
 msgstr "Nepodporovaná poloha VERITY FEC."
 
-#: lib/setup.c:2760
+#: lib/setup.c:2763
 msgid "Data area overlaps with hash area."
 msgstr "Oblast dat se překrývá s oblastí haše."
 
-#: lib/setup.c:2785
+#: lib/setup.c:2788
 msgid "Hash area overlaps with FEC area."
 msgstr "Oblast FEC se překrývá s oblastí haše."
 
-#: lib/setup.c:2792
+#: lib/setup.c:2795
 msgid "Data area overlaps with FEC area."
 msgstr "Oblast dat se překrývá s oblastí FEC."
 
-#: lib/setup.c:2884
+#: lib/setup.c:2887
 msgid "Integrity key size mismatch."
 msgstr "Velikost klíče integrity neodpovídá."
 
-#: lib/setup.c:2935
+#: lib/setup.c:2938
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "POZOR: Požadovaná velikost značky %d bajtů se liší od výstupu velikosti %s (%d bajtů).\n"
 
-#: lib/setup.c:3048 lib/setup.c:3150
+#: lib/setup.c:3051 lib/setup.c:3153
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Požadován neznámý nebo nepodporovaný typ zařízení %s."
 
-#: lib/setup.c:3064
+#: lib/setup.c:3067
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Zařízení %s neposkytuje položky pro inline integritu dat."
 
-#: lib/setup.c:3070
+#: lib/setup.c:3073
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Velikost inline značky %<PRIu32> bajtů je větší než %<PRIu32> poskytovaných zařízením %s."
 
-#: lib/setup.c:3085
+#: lib/setup.c:3088
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Sektor musí být stejný jako hardwarový sektor zařízení (%zu bajtů)."
 
-#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Nepodporované parametry na zařízení %s."
 
-#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Neodpovídající parametry na zařízení %s."
 
-#: lib/setup.c:3647
+#: lib/setup.c:3650
 msgid "Crypt devices mismatch."
 msgstr "Zařízení dmcryptu si neodpovídají."
 
-#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Zařízení %s nebylo možné znovu zavést."
 
-#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
-#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Zařízení %s nebylo možné pozastavit."
 
-#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
-#: lib/luks2/luks2_reencrypt.c:4240
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Zařízení %s nebylo možné probudit."
 
-#: lib/setup.c:3717
+#: lib/setup.c:3720
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Nepřekonatelná chyba při zavádění zařízení %s (nad zařízením %s)."
 
-#: lib/setup.c:3720 lib/setup.c:3722
+#: lib/setup.c:3723 lib/setup.c:3725
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Zařízení %s nebylo možné přepnout do dm-error."
 
-#: lib/setup.c:3765
+#: lib/setup.c:3768
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Zařízení LUKS2 se statickou velikostí nelze změnit velikost."
 
-#: lib/setup.c:3770
+#: lib/setup.c:3773
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Změna velikosti zařízení LUKS2 s ochranou integrity není podporována."
 
-#: lib/setup.c:3816
+#: lib/setup.c:3819
 msgid "Cannot resize loop device."
 msgstr "Zařízení zpětné smyčky nelze změnit velikost."
 
-#: lib/setup.c:3860
+#: lib/setup.c:3863
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr ""
 "POZOR: Maximální velikost je již nastavena nebo změna velikosti není jádrem\n"
 "podporována.\n"
 
-#: lib/setup.c:3926
+#: lib/setup.c:3929
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Změna velikosti selhala, jádro ji nepodporuje."
 
-#: lib/setup.c:3958
+#: lib/setup.c:3961
 msgid "Do you really want to change UUID of device?"
 msgstr "Opravdu chcete změnit UUID zařízení?"
 
-#: lib/setup.c:4050
+#: lib/setup.c:4053
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Soubor se zálohou hlavičky neobsahuje kompatibilní hlavičku LUKS."
 
-#: lib/setup.c:4143
+#: lib/setup.c:4160
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Svazek %s není aktivní."
 
-#: lib/setup.c:4198
+#: lib/setup.c:4215
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Svazek %s je již uspán."
 
-#: lib/setup.c:4224
+#: lib/setup.c:4241
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Uspání není na zařízení %s podporováno."
 
-#: lib/setup.c:4226 lib/setup.c:4234
+#: lib/setup.c:4243 lib/setup.c:4251
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Chyba při uspávání zařízení %s."
 
-#: lib/setup.c:4249
+#: lib/setup.c:4266
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Zařízení %s bylo uspáno, ale hardwarové zařízení Opal nelze uzamknout."
 
-#: lib/setup.c:4280 lib/setup.c:4457
+#: lib/setup.c:4297 lib/setup.c:4491
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Probuzení není na zařízení %s podporováno."
 
-#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Chyba při probouzení zařízení %s."
 
-#: lib/setup.c:4301
+#: lib/setup.c:4335
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Z klíčenky zadané uživatelem se nepodařilo odpojit klíč svazku."
 
-#: lib/setup.c:4423 lib/setup.c:5603
+#: lib/setup.c:4457 lib/setup.c:5637
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Do uživatelem zadané klíčenky se nepodařilo přidat klíč svazku."
 
-#: lib/setup.c:4522 src/cryptsetup.c:2721
+#: lib/setup.c:4556 src/cryptsetup.c:2720
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Svazek %s není uspán."
 
-#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
-#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
+#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
+#: src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Heslo svazku neodpovídá svazku."
 
-#: lib/setup.c:4787
+#: lib/setup.c:4821
 msgid "Failed to swap new key slot."
 msgstr "Záměna novou pozicí klíče se nezdařila."
 
-#: lib/setup.c:4885
+#: lib/setup.c:4919
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Pozice klíče %d je neplatná."
 
-#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
-#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
+#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
+#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Pozice klíče %d není aktivní."
 
-#: lib/setup.c:4910
+#: lib/setup.c:4944
 msgid "Device header overlaps with data area."
 msgstr "Hlavička zařízení se překrývá s datovou oblastí."
 
-#: lib/setup.c:5131
+#: lib/setup.c:5165
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Přešifrování již probíhá. Zařízení nelze aktivovat."
 
-#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3725
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Získání zámku pro přešifrování selhalo."
 
-#: lib/setup.c:5155
+#: lib/setup.c:5189
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Obnova přešifrování LUKS2 pomocí klíčů svazku selhala."
 
-#: lib/setup.c:5291
+#: lib/setup.c:5325
 #, c-format
 msgid "Device %s already exists."
 msgstr "Zařízení %s již existuje."
 
-#: lib/setup.c:5298
+#: lib/setup.c:5332
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Zařízení %s nelze použít. Název není platný nebo zařízení se stále používá."
 
-#: lib/setup.c:5310
+#: lib/setup.c:5344
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Klíče pro přešifrování svazku neodpovídají svazku."
 
-#: lib/setup.c:5327
+#: lib/setup.c:5361
 msgid "Incorrect volume key specified for plain device."
 msgstr "Byl zadán neplatný klíč svazku."
 
-#: lib/setup.c:5353 lib/setup.c:5414
+#: lib/setup.c:5387 lib/setup.c:5448
 msgid "Device type is not properly initialized."
 msgstr "Typ zařízení není řádně inicializován."
 
-#: lib/setup.c:5452
+#: lib/setup.c:5486
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Jaderná klíčenka není jádrem podporována."
 
-#: lib/setup.c:5456
+#: lib/setup.c:5490
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Jaderná klíčenka chybí: je potřeba pro předání podpisu do jádra."
 
-#: lib/setup.c:5511
+#: lib/setup.c:5545
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Klíčem klíčenky %s nelze použít."
 
-#: lib/setup.c:5724
+#: lib/setup.c:5758
 msgid "Incorrect root hash specified for verity device."
 msgstr "K zařízení VERITY byl zadán neplatný kořenový haš."
 
-#: lib/setup.c:5765 lib/setup.c:5790
+#: lib/setup.c:5799 lib/setup.c:5824
 msgid "OPAL does not support deferred deactivation."
 msgstr "Opal nepodporuje odloženou deaktivaci."
 
-#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Zařízení %s se stále používá."
 
-#: lib/setup.c:5798
+#: lib/setup.c:5832
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Odložené odebrání zařízení %s nebylo možné zrušit."
 
-#: lib/setup.c:5820
+#: lib/setup.c:5854
 #, c-format
 msgid "Invalid device %s."
 msgstr "Neplatné zařízení %s."
 
-#: lib/setup.c:5967
+#: lib/setup.c:6001
 msgid "Volume key buffer too small."
 msgstr "Vyhrazená paměť pro klíč svazku je příliš malá."
 
-#: lib/setup.c:5978
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nelze získat klíč svazku pro zařízení LUKS2."
 
-#: lib/setup.c:5987
+#: lib/setup.c:6021
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nelze získat klíč svazku pro zařízení LUKS1."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6035
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nelze získat klíč svazku pro otevřené zařízení."
 
-#: lib/setup.c:6009
+#: lib/setup.c:6043
 msgid "Cannot retrieve root hash for verity device."
 msgstr "K zařízení VERITY nelze získat kořenový otisk."
 
-#: lib/setup.c:6018
+#: lib/setup.c:6052
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nelze získat klíč svazku pro zařízení BITLK."
 
-#: lib/setup.c:6023
+#: lib/setup.c:6057
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nelze získat klíč svazku pro zařízení FVAULT2."
 
-#: lib/setup.c:6025
+#: lib/setup.c:6059
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Na šifrovaném zařízení %s není tato operace podporována."
 
-#: lib/setup.c:6210 lib/setup.c:6221
+#: lib/setup.c:6244 lib/setup.c:6255
 msgid "Dump operation is not supported for this device type."
 msgstr "Operace výpisu není na zařízení tohoto typu podporována."
 
-#: lib/setup.c:6601
+#: lib/setup.c:6635
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Počátek dat není násobkem %u bajtů."
 
-#: lib/setup.c:6909
+#: lib/setup.c:6943
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Zařízení %s, které se stále používá, nelze konvertovat."
 
-#: lib/setup.c:7217 lib/setup.c:7361
+#: lib/setup.c:7251 lib/setup.c:7406
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Přiřazení pozice klíče %u jakožto nového klíče svazku se nezdařilo."
 
-#: lib/setup.c:7241
+#: lib/setup.c:7275
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Inicializace parametrů výchozí pozice klíče LUKS2 selhala."
 
-#: lib/setup.c:7247
+#: lib/setup.c:7281
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Přiřazení pozice klíče %d k otisku se nezdařilo."
 
-#: lib/setup.c:7478
+#: lib/setup.c:7523
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nelze přidat pozici klíče, všechny pozice jsou zakázány a klíč svazku nebyl poskytnut."
 
-#: lib/setup.c:7551 lib/verity/verity.c:333
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Klíč se nepodařilo přidat do jaderné klíčenky."
 
-#: lib/setup.c:7742
+#: lib/setup.c:7807
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Klíčenku zadanou jako „%s“ nebylo možné nalézt."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7872
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Získání zámku pro tvrdý přístup do globální paměti selhalo."
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "Soubor s klíčem se nepodařilo otevřít."
 
-#: lib/utils.c:212
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "Soubor s klíčem nelze z terminálu přečíst."
 
-#: lib/utils.c:228
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "O souboru s klíčem nebylo možné zjistit údaje."
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "Nelze se přesunout na požadované místo v souboru s klíčem."
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "Při čtení hesla došla paměť."
 
-#: lib/utils.c:286
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "Chyba při čtení hesla."
 
-#: lib/utils.c:303
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "Na vstupu není nic k přečtení."
 
-#: lib/utils.c:310
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "Maximální délka souboru s klíčem překročena."
 
-#: lib/utils.c:315
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "Požadované množství dat nelze načíst."
 
@@ -996,7 +996,7 @@ msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Zápis šifry by měl být ve tvaru [šifra]-[režim]-[iv]."
 
 #: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
 #: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
@@ -1010,13 +1010,13 @@ msgstr "Otevření dočasného zařízení s úložištěm klíče selhalo."
 msgid "Failed to access temporary keystore device."
 msgstr "Přístup do dočasného zařízení s úložištěm klíče selhal."
 
-#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "Chyba vstupu/výstupu při šifrování pozice klíče."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
@@ -1027,7 +1027,7 @@ msgstr "Chyba vstupu/výstupu při šifrování pozice klíče."
 msgid "Cannot open device %s."
 msgstr "Zařízení %s nelze otevřít."
 
-#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "Chyba vstupu/výstupu při dešifrování pozice klíče."
 
@@ -1117,7 +1117,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Haš šifry opraven na malý písmena (%s)."
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Požadovaný haš LUKSu %s není podporován."
@@ -1164,7 +1164,7 @@ msgstr "Režim LUKS šifry %s není platný."
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS haš %s není platný."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
 msgid "No known problems detected for LUKS header."
 msgstr "V hlavičce LUKS nenalezen žádný známý problém."
 
@@ -1179,50 +1179,50 @@ msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Chyba při opakovaném čtení hlavičky LUKS po aktualizaci zařízení %s."
 
 # TODO: Pluralize
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:750
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Poloha dat u hlavičky LUKS musí být buď 0 nebo více než velikost hlavičky."
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:701
 msgid "Wrong LUKS UUID format provided."
 msgstr "Poskytnut UUID LUKSu ve špatném tvaru."
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Hlavičku LUKS nelze vytvořit: čtení náhodné soli selhalo."
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Hlavičku LUKS nelze vytvořit: výpočet otisku hlavičky (haš %s) selhal."
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Pozice klíče %d je aktivní, nejprve ji uvolněte."
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Pozice klíče %d obsahuje příliš málo útržků. Manipulace s hlavičkou?"
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Čítač opakování PBKDF2 přetekl."
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Pozici s klíčem nezle otevřít (za použití haše %s)."
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Pozice klíče %d není platná, prosím, vyberte pozici mezi 0 a %d."
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Zařízení %s není možné smazat."
@@ -1243,56 +1243,48 @@ msgstr "Zjištěn nekompatibilní soubor s klíčem loop-AES."
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "Jádro nepodporuje mapování kompatibilní s loop-AES."
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "Chyba při čtení souboru s klíčem %s"
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "Překročena maximální délka hesla TCRYPT (%zu)."
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "Hašovací algoritmus PBKDF2 %s není podporován, přeskakuje se."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
-msgid "Required kernel crypto interface not available."
-msgstr "Požadované kryptografické rozhraní jádra není dostupné."
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "Ujistěte se, že jaderný modul algif_skcipher je zaveden."
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "Aktivace nad sektory o velikosti %d není podporována."
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "Jádro nepodporuje aktivaci v tomto zastaralém režimu TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "Aktivuje se systémové šifrování TCRYPT pro oddíl %s."
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:819
 msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
 msgstr "Polohu systémového oddílu TCRYPT nelze určit. Aktivuje se celá šifrovaná oblast."
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:828
 msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
 msgstr "Polohu systémového oddílu TCRYPT nelze určit. Zařízení se aktivuje co by systémový oddíl."
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "Jádro nepodporuje mapování kompatibilní s TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:1146
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "Bez dat s hlavičkou TCRYPT není tato funkce podporována."
 
@@ -1650,8 +1642,7 @@ msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "POZOR: Oblast s pozicemi klíčů pro LUKS2 změnila velikost na %<PRIu64> bajtů.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Získání zámku pro čtení ze zařízení %s selhalo."
@@ -1711,79 +1702,79 @@ msgstr ""
 msgid "Ignored unknown flag %s."
 msgstr "Neznámý příznak %s ignorován."
 
-#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Chybí klíč pro dm-crypt část %u."
 
-#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Nastavení části dm-crypt selhalo."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Nastavení části dm-linear selhalo."
 
-#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "V hlavičce LUKS2 nebyl nalezen žádný známý vzorek určující šifru."
 
-#: lib/luks2/luks2_json_metadata.c:2691
+#: lib/luks2/luks2_json_metadata.c:2709
 msgid "OPAL device must have static device size."
 msgstr "Zařízení Opal musí mít statickou velikost zařízení."
 
-#: lib/luks2/luks2_json_metadata.c:2711
+#: lib/luks2/luks2_json_metadata.c:2729
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Šifrované zařízení Opal zajišťující neporušenost musí být menší než uzamykatelná oblast."
 
-#: lib/luks2/luks2_json_metadata.c:2716
+#: lib/luks2/luks2_json_metadata.c:2734
 msgid "OPAL device must have same size as locking range."
 msgstr "Zařízení Opal musí mít stejnou velikost jako uzamykatelná oblast."
 
-#: lib/luks2/luks2_json_metadata.c:2736
+#: lib/luks2/luks2_json_metadata.c:2754
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Opal zařízení %s je již odemknuto.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2775
+#: lib/luks2/luks2_json_metadata.c:2793
 msgid "Unsupported device integrity configuration."
 msgstr "Nepodporovaná konfigurace integrity zařízení."
 
-#: lib/luks2/luks2_json_metadata.c:2791
+#: lib/luks2/luks2_json_metadata.c:2809
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Dm-integrity zařízení nižší úrovně poskytlo nečekané datové sektory."
 
-#: lib/luks2/luks2_json_metadata.c:2886
+#: lib/luks2/luks2_json_metadata.c:2911
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Probíhá přešifrování. Zařízení nelze deaktivovat."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Výměna pozastaveného zařízení %s za cíl dm-error selhala."
 
-#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Zařízení %s bylo deaktivováno, avšak hardwarové zařízené Opal nelze uzamknout."
 
-#: lib/luks2/luks2_json_metadata.c:3020
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Zjištěny nesplněné požadavky na LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3053
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Operace se neslučuje se zařízením označeným pro zastaralé přešifrování. Operace se ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3055
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Operace se neslučuje se zařízením označeným pro přešifrování LUKS2. Operace se ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3032
+#: lib/luks2/luks2_json_metadata.c:3057
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Operace se neslučuje se zařízením používajícím Opal. Operace se ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3034
+#: lib/luks2/luks2_json_metadata.c:3059
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Operace se neslučuje se zařízením používajícím inline hardwarové značky. Operace se ruší."
 
@@ -1795,22 +1786,22 @@ msgstr "Nedostatek paměti pro otevření pozice s klíčem."
 msgid "Keyslot open failed."
 msgstr "Otevření pozice s klíčem selhalo."
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "Šifru %s-%s nelze použít pro pozici s klíčem."
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "Šifru %s nelze použít pro zašifrování pozice s klíčem."
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr "Nedostatek paměti pro odvození klíče pro pozici s klíčem."
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "Hašovací algoritmus %s není dostupný."
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "Pro novou pozicí klíče není místo."
 
@@ -1827,336 +1818,336 @@ msgstr "Druh odolnosti nelze zaktualizovat. Nový druh poskytuje pouze %<PRIu64>
 msgid "Failed to refresh reencryption verification digest."
 msgstr "Ověřovací otisk přešifrování se nepodařilo obnovit."
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "Nelze zjistit stav zařízení s UUID: %s."
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Hlavičky s dodatečnými metadaty LUKSMETA nelze převést."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "LUKS2 neumožňuje použít šifru zadanou jako %s-%s."
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr "Pozice s klíčem LUKS2 neumožňuje použít šifru zadanou jako %s-%s."
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Oblast s pozicemi klíčů nelze přesunout. Nedostatek místa."
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Nelze převést do formátu LUKS2 – neplatná metadata."
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Oblast s pozicemi klíčů nelze přesunout. Oblast s pozicemi klíčů LUKS2 je příliš malá."
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr "Oblast s pozicemi klíčů nelze přesunout."
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Nelze převést do formátu LUKS1 – výchozí velikost sektoru šifrování části není 512 bajtů."
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Nelze převést do formátu LUKS1 – otisky v pozicích s klíči nejsou slučitelné s LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Nelze převést do formátu LUKS1 – zařízení používá šifru se zabaleným klíčem %s."
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Nelze převést do formátu LUKS1 – zařízení používá více částí."
 
 # TODO: Pluralize
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Nelze převést do formátu LUKS1 – hlavička LUKS2 obsahuje %u token(ů)."
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:798
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Nelze převést do formátu LUKS1 – žádná pozice s klíčem není aktivní."
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Nelze převést do formátu LUKS1 – pozice s klíčem %u je v nesprávném stavu."
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:815
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Nelze převést do formátu LUKS1 – pozice s klíčem %u není přiřazena."
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Nelze převést do formátu LUKS1 – pozice s klíčem %u (nad maximem pozic) je stále aktivní."
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Nelze převést do formátu LUKS1 – pozice s klíčem %u není slučitelná s LUKS1."
 
-#: lib/luks2/luks2_reencrypt.c:1198
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Velikost horké zóny musí být násobek vypočteného zarovnání zóny (%zu bajtů)."
 
-#: lib/luks2/luks2_reencrypt.c:1203
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Velikost zařízení musí být násobek vypočteného zarovnání zóny (%zu bajtů)."
 
-#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
-#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4080
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Obálku pro starou část úložiště se nepodařilo inicializovat."
 
-#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Obálku pro novou část úložiště se nepodařilo inicializovat."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "Ochranu horké zóny se nepodařilo inicializovat."
 
-#: lib/luks2/luks2_reencrypt.c:1623
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "Kontrolní součty pro aktuální horkou zónu se nepodařilo přečíst."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Čtení oblasti s horkou zónou počínaje na %<PRIu64> selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:1649
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "Sektor %zu nebylo možné rozšifrovat."
 
-#: lib/luks2/luks2_reencrypt.c:1655
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "Sektor %zu nebylo možné obnovit."
 
-#: lib/luks2/luks2_reencrypt.c:2208
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "Velikosti zdrojového a cílového zařízení se neshodují. Zdroj %<PRIu64>, cíl %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2310
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "Aktivace zařízení horké zóny %s selhala."
 
-#: lib/luks2/luks2_reencrypt.c:2322
+#: lib/luks2/luks2_reencrypt.c:2323
 #, c-format
 msgid "Failed to allocate hotzone device %s."
 msgstr "Alokace zařízení horké zóny %s selhala."
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "Aktivace překryvného zařízení %s se skutečnou tabulkou původu selhala."
 
-#: lib/luks2/luks2_reencrypt.c:2346
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "Zavedení nového mapování pro zařízení %s selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:2418
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
 msgstr "Zásobník zařízení k přešifrování se nepodařilo obnovit."
 
-#: lib/luks2/luks2_reencrypt.c:2615
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
 msgstr "Nastavení velikosti nové oblasti s pozicemi klíčů selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:2751
+#: lib/luks2/luks2_reencrypt.c:2752
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Hodnota posunu dat není zarovnána s velikostí šifrovaného sektoru (%<PRIu32> bajtů)."
 
-#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "Nepodporovaný režim odolnosti %s"
 
-#: lib/luks2/luks2_reencrypt.c:2824
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
 msgstr "Velikost přesunované oblasti nemůže být větší než hodnota posunu dat."
 
-#: lib/luks2/luks2_reencrypt.c:2866
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
 msgstr "Neplatné parametry režimu odolnosti při přešifrování."
 
-#: lib/luks2/luks2_reencrypt.c:2888
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "Přesunovaná oblast je příliš velká. Požadovaná velikost %<PRIu64>, dostupné místo %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2977
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "Vyprázdnění tabulky selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:3063
+#: lib/luks2/luks2_reencrypt.c:3064
 #, c-format
 msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
 msgstr "Posun dat (%<PRIu64> sektorů) je menší než budoucí poloha dat (%<PRIu64> sektorů)."
 
-#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
 msgstr "Zmenšená velikost dat je větší než velikost skutečného zařízení"
 
-#: lib/luks2/luks2_reencrypt.c:3095
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Zařízení s daty není zarovnáno na velikost šifrovaného sektoru (%<PRIu32> bajtů)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
-#: lib/luks2/luks2_reencrypt.c:3664
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Zařízení %s nebylo možné otevřít ve výlučném režimu (již namapováno nebo připojeno)."
 
-#: lib/luks2/luks2_reencrypt.c:3332
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Zařízení není označeno pro přešifrování LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Načtení kontextu přešifrování LUKS2 selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
 msgstr "Zařízení se nepřešifrovává."
 
-#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
 msgstr "Proces přešifrování již běží."
 
-#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
 msgstr "Získání zámku pro přešifrování selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:3471
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "V přešifrování nelze pokračovat. Spusťte nejprve obnovu přešifrování."
 
-#: lib/luks2/luks2_reencrypt.c:3607
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Aktivní velikost zařízení a velikost požadovaná k přešifrování si neodpovídají."
 
-#: lib/luks2/luks2_reencrypt.c:3621
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "V parametrech přešifrování je požadována zakázaná velikost zařízení."
 
-#: lib/luks2/luks2_reencrypt.c:3723
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Probíhá přešifrování. Obnovu nelze provést."
 
-#: lib/luks2/luks2_reencrypt.c:3744
+#: lib/luks2/luks2_reencrypt.c:3745
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Obnova přešifrování LUKS2 selhala."
 
-#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
 msgid "Failed to initialize reencryption device stack."
 msgstr "Zásobník zařízení k přešifrování se nepodařilo inicializovat."
 
-#: lib/luks2/luks2_reencrypt.c:3910
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "V metadatech je přešifrování LUKS2 již inicializováno."
 
-#: lib/luks2/luks2_reencrypt.c:3918
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Inicializace přešifrování LUKS2 v metadatech selhala."
 
-#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
-#: lib/luks2/luks2_reencrypt.c:4033
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Na zařízeních DAX (trvalá paměť) není přešifrování podporováno."
 
-#: lib/luks2/luks2_reencrypt.c:4062
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Nastavení segmentů zařízení pro další horkou zónu přešifrování selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Metadata pro odolnost při přešifrování se nepodařilo zapsat."
 
-#: lib/luks2/luks2_reencrypt.c:4122
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "Rozšifrování selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4127
+#: lib/luks2/luks2_reencrypt.c:4128
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Zápis oblasti s horkou zónou počínaje na %<PRIu64> selhal."
 
-#: lib/luks2/luks2_reencrypt.c:4132
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
 msgstr "Synchronizace dat selhala."
 
-#: lib/luks2/luks2_reencrypt.c:4140
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Po dokončení přešifrování aktuální horké zóny se nepodařilo aktualizovat metadata."
 
-#: lib/luks2/luks2_reencrypt.c:4229
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
 msgstr "Zápis metadat LUKS2 selhal."
 
-#: lib/luks2/luks2_reencrypt.c:4252
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
 msgstr "Vyčištění oblasti zařízení s nepoužívanými daty selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4258
+#: lib/luks2/luks2_reencrypt.c:4259
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Odstranění nepoužívané (nepřiřazené) pozice s klíčem %d selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4268
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
 msgstr "Odstranění pozice s klíčem přešifrování selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4278
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Nepřekonatelná chyba při přešifrování bloku na pozici %<PRIu64> dlouhého %<PRIu64> sektorů."
 
-#: lib/luks2/luks2_reencrypt.c:4282
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
 msgstr "Přešifrování za běhu selhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Zařízení neprobouzejte, dokud jej ručně nenahradíte chybovým cílem."
 
-#: lib/luks2/luks2_reencrypt.c:4339
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "V přešifrování nelze pokračovat. Přešifrování se nachází v nečekaném stavu."
 
-#: lib/luks2/luks2_reencrypt.c:4345
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
 msgstr "Chybějící nebo neplatný kontext přešifrování."
 
-#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
 msgstr "Kontext přešifrování se nepodařilo aktualizovat."
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "Metadata o přešifrování jsou neplatná."
 
@@ -2188,7 +2179,7 @@ msgstr "Parametry pro šifrování pozice s klíčem lze nastavit jen u zaří
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametry pro šifrování pozice s klíčem se neslučují s šifrováním pozice s klíčem LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
+#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2216,7 +2207,7 @@ msgstr "POZOR: Jedná-li se o režim plain a je-li určen soubor s klíčem, p
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "POZOR: Přepínač --keyfile-size se ignoruje, velikost pro čtení je stejná jako velikosti šifrovacího klíče.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2227,9 +2218,9 @@ msgstr "Prohledávání blkid selhalo u %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Na %s byla nalezen vzorec zařízení. Pokračování může poškodit existující data."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
-#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
-#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
+#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
+#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2278,7 +2269,7 @@ msgstr ""
 "který umožňuje přístup k šifrovanému oddílu bez znalosti hesla.\n"
 "Tento výpis by měl být vždy uložen na bezpečném místě a v zašifrované podobě."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2302,9 +2293,9 @@ msgstr "Nelze určit velikost klíče svazku pro FVAULT2. Prosím, použijte př
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Zařízení %s je stále aktivní a naplánováno pro odložené odstranění.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
-#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
-#: src/cryptsetup.c:3262
+#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
+#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
+#: src/cryptsetup.c:3261
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Cestu k externím tokenům %s se nepodařilo nastavit."
@@ -2342,31 +2333,35 @@ msgid "Result of benchmark is not reliable."
 msgstr "Výsledek hodnocení výkonu není spolehlivý."
 
 # ???: are aproximated?
-#: src/cryptsetup.c:1170
+#: src/cryptsetup.c:1171
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testy jsou počítány jen z práce s pamětí (žádné I/O úložiště).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1195
+#: src/cryptsetup.c:1196
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*sAlgoritmus |      Klíč |       Šifrování |     Dešifrování\n"
 
-#: src/cryptsetup.c:1203
+#: src/cryptsetup.c:1204
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Šifra %s (s %ibitovým klíčem) není dostupná."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1222
+#: src/cryptsetup.c:1225
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#    Algoritmus |      Klíč |       Šifrování |     Dešifrování\n"
 
-#: src/cryptsetup.c:1233
+#: src/cryptsetup.c:1238
 msgid "N/A"
 msgstr "–"
 
-#: src/cryptsetup.c:1258
+#: src/cryptsetup.c:1241
+msgid "# Cipher speed test is not available.\n"
+msgstr "# Test rychlosti šifer není dostupný.\n"
+
+#: src/cryptsetup.c:1257
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2375,27 +2370,27 @@ msgstr ""
 "přešifrování je žádoucí (vizte výstup luksDump) a pokračujte (zvýšení verze\n"
 "metadat) pouze, když poznáte, že operace je chtěná."
 
-#: src/cryptsetup.c:1264
+#: src/cryptsetup.c:1263
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Zadejte heslo pro ochránění metadat o přešifrování a pro zvýšení jejich verze: "
 
-#: src/cryptsetup.c:1308
+#: src/cryptsetup.c:1307
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Opravdu pokračovat s obnovou přešifrování LUKS2?"
 
-#: src/cryptsetup.c:1317
+#: src/cryptsetup.c:1316
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Zadejte heslo pro ověření otisku metadat o přešifrování: "
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1318
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Zadejte heslo pro obnovení přešifrování: "
 
-#: src/cryptsetup.c:1381
+#: src/cryptsetup.c:1380
 msgid "Really try to repair LUKS device header?"
 msgstr "Opravdu se pokusit opravit hlavičku zařízení LUKS?"
 
-#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2403,7 +2398,7 @@ msgstr ""
 "\n"
 "Výmaz přerušen."
 
-#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2412,169 +2407,169 @@ msgstr ""
 "Lze přerušit pomocí Ctrl+C (zbytek nesmazaného zařízení bude obsahovat\n"
 "neplatné součty).\n"
 
-#: src/cryptsetup.c:1436 src/integritysetup.c:103
+#: src/cryptsetup.c:1435 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Dočasné zařízení %s nelze deaktivovat."
 
-#: src/cryptsetup.c:1484
+#: src/cryptsetup.c:1483
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Čistě hardwarové šifrování Opal nepodporuje --cipher a --key-size. Přepínače se ignorují."
 
-#: src/cryptsetup.c:1497
+#: src/cryptsetup.c:1496
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Volby integrity lze použít jen při formátu LUKS2."
 
-#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
+#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nepodporované volby velikosti metadat LUKS2."
 
-#: src/cryptsetup.c:1507
+#: src/cryptsetup.c:1506
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "Opal je podporován jen s formátem LUKS2."
 
-#: src/cryptsetup.c:1512
+#: src/cryptsetup.c:1511
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Inline hardwarové značky jsou podporovány jen s formátem LUKS2."
 
-#: src/cryptsetup.c:1521
+#: src/cryptsetup.c:1520
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Soubor s hlavičkou neexistuje. Chcete jej vytvořit?"
 
-#: src/cryptsetup.c:1529
+#: src/cryptsetup.c:1528
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Soubor s hlavičkou %s nelze vytvořit."
 
-#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
 #: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
 #: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Nelze najít žádný známý vzorek se specifikací integrity."
 
-#: src/cryptsetup.c:1557
+#: src/cryptsetup.c:1556
 msgid "Cannot use specified integrity key size."
 msgstr "Zadanou velikost klíče integrity nelze použít."
 
-#: src/cryptsetup.c:1575
+#: src/cryptsetup.c:1574
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "%s nelze použít pro hlavičku uvnitř disku."
 
-#: src/cryptsetup.c:1604 src/integritysetup.c:172
+#: src/cryptsetup.c:1603 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Toto nevratně přepíše data na %s."
 
-#: src/cryptsetup.c:1641
+#: src/cryptsetup.c:1640
 msgid "OPAL Admin password cannot be empty."
 msgstr "Heslo správce Opal nemůže být prázdné."
 
-#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
-#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
+#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Nastavení parametrů PBKDF selhalo."
 
-#: src/cryptsetup.c:1786
+#: src/cryptsetup.c:1785
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Zmenšená poloha dat je dovolena jen u oddělené hlavičky LUKS."
 
-#: src/cryptsetup.c:1793
+#: src/cryptsetup.c:1792
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Souborový kontejner LUKS %s je na aktivaci příliš malý. Nezbývá žádné místo pro data."
 
-#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Bez pozic pro klíče nelze určit velikost LUKS klíče svazku. Prosím, použijte přepínač --key-size."
 
-#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Zařízení vyžaduje dva klíče svazku."
 
-#: src/cryptsetup.c:1889
+#: src/cryptsetup.c:1888
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Některé zadané aktivační parametry byly při čistě hardwarovém šifrování Opal ignorovány."
 
-#: src/cryptsetup.c:1894
+#: src/cryptsetup.c:1893
 msgid "Device activated but cannot make flags persistent."
 msgstr "Zařízení aktivováno, ale příznaky nelze učinit trvalými."
 
-#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
+#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Ke smazání vybrán klíč na pozici %d."
 
-#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
+#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr ""
 "Toto je poslední pozice klíče. Smazáním tohoto klíče přijdete o možnost\n"
 "zařízení použít."
 
-#: src/cryptsetup.c:1987
+#: src/cryptsetup.c:1986
 msgid "Enter any remaining passphrase: "
 msgstr "Zadejte jakékoliv jiné heslo: "
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operace zrušena, pozice klíče NEBYLA vymazána.\n"
 
-#: src/cryptsetup.c:2024
+#: src/cryptsetup.c:2023
 msgid "Enter passphrase to be deleted: "
 msgstr "Zadejte heslo, které se má smazat: "
 
-#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
-#: src/cryptsetup.c:3253
+#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
+#: src/cryptsetup.c:3252
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Zařízení %s není platným zařízením LUKS2."
 
-#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
+#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
 msgid "Enter new passphrase for key slot: "
 msgstr "Zadejte nové heslo pro pozici klíče: "
 
-#: src/cryptsetup.c:2147 src/utils_luks.c:342
+#: src/cryptsetup.c:2146 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Zadejte PIN k tokenu: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:344
+#: src/cryptsetup.c:2148 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Zadejte PIN k tokenu %d: "
 
-#: src/cryptsetup.c:2208
+#: src/cryptsetup.c:2207
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "POZOR: Parametr --key-slot se použije pro číslo nové pozice klíče.\n"
 
-#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Zadejte jakékoliv existující heslo: "
 
-#: src/cryptsetup.c:2381
+#: src/cryptsetup.c:2380
 msgid "Enter passphrase to be changed: "
 msgstr "Zadejte heslo, které má být změněno: "
 
-#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Zadejte nové heslo: "
 
-#: src/cryptsetup.c:2447
+#: src/cryptsetup.c:2446
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Zadejte heslo pro pozici klíče, který má být převeden: "
 
-#: src/cryptsetup.c:2471
+#: src/cryptsetup.c:2470
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "U operace isLuks je podporován pouze jeden argument se zařízením."
 
-#: src/cryptsetup.c:2576
+#: src/cryptsetup.c:2575
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Pozice klíče %d neobsahuje nepřiřazený klíč."
 
-#: src/cryptsetup.c:2581
+#: src/cryptsetup.c:2580
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2582,52 +2577,52 @@ msgstr ""
 "Výpis hlavičky s nepřiřazeným klíčem je citlivý údaj.\n"
 "Tento výpis by měl být uložen na bezpečném místě a v zašifrované podobě."
 
-#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
+#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s není název aktivního zařízení %s."
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2706
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s není název aktivního zařízení LUKS nebo mu chybí hlavička."
 
-#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
+#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
 msgid "Option --header-backup-file is required."
 msgstr "Je vyžadován přepínač --header-backup-file."
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2833
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s není zařízení spravované nástrojem cryptsetup."
 
-#: src/cryptsetup.c:2845
+#: src/cryptsetup.c:2844
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Reaktivace není na zařízení typu %s podporována"
 
-#: src/cryptsetup.c:2895
+#: src/cryptsetup.c:2894
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Nerozpoznaná metadata druhu zařízení %s."
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2896
 msgid "Command requires device and mapped name as arguments."
 msgstr "Příkaz vyžaduje jako argumenty zařízení a mapovaný název."
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL PSID: "
 msgstr "Zadejte Opal PSID: "
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL Admin password: "
 msgstr "Zadejte heslo správce Opal: "
 
-#: src/cryptsetup.c:2923
+#: src/cryptsetup.c:2922
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "POZOR: CELÝ disk bude uveden do továrního nastavení a všechna data budou ztracena! Pokračovat?"
 
-#: src/cryptsetup.c:2966
+#: src/cryptsetup.c:2965
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2636,368 +2631,368 @@ msgstr ""
 "Tento úkon smaže všechny pozice s klíči na zařízení %s.\n"
 "Po jeho dokončení zařízení bude nepoužitelné."
 
-#: src/cryptsetup.c:2973
+#: src/cryptsetup.c:2972
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operace zrušena, pozice s klíči NEBYLY smazány.\n"
 
-#: src/cryptsetup.c:3012
+#: src/cryptsetup.c:3011
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Neplatný druh formátu LUKS. Podporován je pouze LUKS1 a LUKS2."
 
-#: src/cryptsetup.c:3028
+#: src/cryptsetup.c:3027
 #, c-format
 msgid "Device is already %s type."
 msgstr "Zařízení je již druhu %s."
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:3034
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Tato operace převede formát %s na %s.\n"
 
-#: src/cryptsetup.c:3038
+#: src/cryptsetup.c:3037
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operace zrušena, zařízení NEBYLO převedeno.\n"
 
-#: src/cryptsetup.c:3078
+#: src/cryptsetup.c:3077
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Chybí přepínač --priority, --label nebo --subsystem."
 
-#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
+#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d je neplatný."
 
-#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
+#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d se používá."
 
-#: src/cryptsetup.c:3127
+#: src/cryptsetup.c:3126
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Přidání tokenu %d klíčenky LUKS2 selhalo."
 
-#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
+#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Přiřazení tokenu %d do pozice s klíčem %d selhalo."
 
-#: src/cryptsetup.c:3155
+#: src/cryptsetup.c:3154
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d se nepoužívá."
 
-#: src/cryptsetup.c:3192
+#: src/cryptsetup.c:3191
 msgid "Failed to import token from file."
 msgstr "Import tokenu ze souboru selhal."
 
-#: src/cryptsetup.c:3217
+#: src/cryptsetup.c:3216
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Získání tokenu %d za účelem exportu selhalo."
 
-#: src/cryptsetup.c:3230
+#: src/cryptsetup.c:3229
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d není přiřazen pozici s klíčem %d."
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
+#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Zrušení přiřazení tokenu %d k pozici s klíčem %d selhalo."
 
-#: src/cryptsetup.c:3298
+#: src/cryptsetup.c:3297
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Přepínač --tcrypt-hidden, --tcrypt-system nebo --tcrypt-backup je podporován jen u zařízení TCRYPT."
 
-#: src/cryptsetup.c:3301
+#: src/cryptsetup.c:3300
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Přepínače --veracrypt a --disable-veracrypt jsou podporovány jen u typu zařízení TCRYPT."
 
-#: src/cryptsetup.c:3304
+#: src/cryptsetup.c:3303
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Přepínač --veracrypt-pim je podporován jen u zařízení kompatibilním s VeraCrypt."
 
-#: src/cryptsetup.c:3308
+#: src/cryptsetup.c:3307
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Přepínač --veracrypt-query-pim je podporován jen u zařízení kompatibilním s VeraCrypt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3309
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Přepínače --veracrypt-pim a --veracrypt-query-pim se vzájemně vylučují."
 
-#: src/cryptsetup.c:3319
+#: src/cryptsetup.c:3318
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Přepínač --persistent není dovolen současně s --test-passphrase."
 
-#: src/cryptsetup.c:3322
+#: src/cryptsetup.c:3321
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Přepínače --refresh a --test-passphrase se vzájemně vylučují."
 
-#: src/cryptsetup.c:3325
+#: src/cryptsetup.c:3324
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Přepínač --shared je dovolen jen při úkonu otevírání zařízení plain."
 
-#: src/cryptsetup.c:3328
+#: src/cryptsetup.c:3327
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Přepínač --skip je podporován jen při otevírání zařízení plain a loopaes."
 
-#: src/cryptsetup.c:3331
+#: src/cryptsetup.c:3330
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Při otevírání je přepínač --offset podporován jen u zařízení plain a loopaes."
 
-#: src/cryptsetup.c:3334
+#: src/cryptsetup.c:3333
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Přepínač --tcrypt-hidden nelze použít s přepínačem --allow-discards."
 
-#: src/cryptsetup.c:3338
+#: src/cryptsetup.c:3337
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Otevírání s přepínačem velikosti sektoru je podporován jen u zařízení plain."
 
 # FIXME: "Large IV sectors" should read "IV large sectors".
-#: src/cryptsetup.c:3342
+#: src/cryptsetup.c:3341
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Volba inicializačního vektoru s velkými sektory je podporována jen při otevírání zařízení typu plain s velikostí sektoru větší než 512 bajtů."
 
-#: src/cryptsetup.c:3347
+#: src/cryptsetup.c:3346
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Přepínač --test-passphrase je dovolen pouze při otevírání zařízení LUKS, TCRYPT, BITLK a FVAULT2."
 
-#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
+#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Přepínače --device-size a --size nelze kombinovat."
 
-#: src/cryptsetup.c:3353
+#: src/cryptsetup.c:3352
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Přepínač --unbound je dovolen jen při otevírání zařízení LUKS."
 
-#: src/cryptsetup.c:3356
+#: src/cryptsetup.c:3355
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Přepínač --unbound není dovolen současně s --test-passphrase."
 
-#: src/cryptsetup.c:3360
+#: src/cryptsetup.c:3359
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Přepínač --volume-key-keyring nelze použít s přepínači --hash a --volume-key-file."
 
-#: src/cryptsetup.c:3363
+#: src/cryptsetup.c:3362
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Oba přepínače --volume-key-file musí být ve dvojici s odpovídajícími přepínači --key-size."
 
-#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Přepínače --cancel-deferred a --deferred se vzájemně vylučují."
 
-#: src/cryptsetup.c:3388
+#: src/cryptsetup.c:3387
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Přepínač --active-name lze použít jen u zařízení LUKS2."
 
-#: src/cryptsetup.c:3391
+#: src/cryptsetup.c:3390
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Přepínače --active-name a --force-offline-reencrypt nelze kombinovat."
 
-#: src/cryptsetup.c:3394
+#: src/cryptsetup.c:3393
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Přepínače --new-volume-key-file a --keep-key nelze kombinovat."
 
-#: src/cryptsetup.c:3397
+#: src/cryptsetup.c:3396
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Přepínače --new-volume-key-keyring a --keep-key nelze kombinovat."
 
-#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
+#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
 msgid "Keyslot specification is required."
 msgstr "Je nutné určit pozici s klíčem."
 
-#: src/cryptsetup.c:3413
+#: src/cryptsetup.c:3412
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Přepínače --align-payload a --offset nelze kombinovat."
 
-#: src/cryptsetup.c:3416
+#: src/cryptsetup.c:3415
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Přepínač --integrity-no-wipe smí být použit jen při formátování s rozšířením integrity."
 
-#: src/cryptsetup.c:3419
+#: src/cryptsetup.c:3418
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Je dovolen pouze jeden z přepínačů --use-[u]random."
 
-#: src/cryptsetup.c:3427
+#: src/cryptsetup.c:3426
 msgid "Key size is required with --unbound option."
 msgstr "Přepínač --unbound vyžaduje velikost klíče."
 
-#: src/cryptsetup.c:3447
+#: src/cryptsetup.c:3446
 msgid "Invalid token action."
 msgstr "Neplatná operace tokenu."
 
-#: src/cryptsetup.c:3450
+#: src/cryptsetup.c:3449
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parametr --key-description je při přidávání tokenu povinný."
 
-#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
+#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Akce vyžaduje určitý token. Použijte parametr --token-id."
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3457
 msgid "Option --unbound is valid only with token add action."
 msgstr "Přepínač --unbound lze použít pouze s akcí přidání."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3459
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Přepínače --key-slot a --unbound nelze kombinovat."
 
-#: src/cryptsetup.c:3465
+#: src/cryptsetup.c:3464
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Akce vyžaduje určitou pozici klíče. Použijte parametr --key-slot."
 
-#: src/cryptsetup.c:3481
+#: src/cryptsetup.c:3480
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<zařízení> [--type <druh>] [<název>]"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "otevře zařízení jako <název>"
 
-#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
 #: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
 #: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<název>"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "zavře zařízení (odstraní mapování)"
 
-#: src/cryptsetup.c:3483 src/integritysetup.c:558
+#: src/cryptsetup.c:3482 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "změní velikost aktivního zařízení"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3483
 msgid "show device status"
 msgstr "zobrazí stav zařízení"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <šifra>]"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "benchmark cipher"
 msgstr "zhodnotí výkon šifry"
 
-#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
-#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
-#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
-#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
-#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
+#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
+#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
 msgid "<device>"
 msgstr "<zařízení>"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3485
 msgid "try to repair on-disk metadata"
 msgstr "pokusí se opravit metadata uložená na disku"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3486
 msgid "reencrypt LUKS2 device"
 msgstr "přešifruje zařízení LUKS2"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3487
 msgid "erase all keyslots (remove encryption key)"
 msgstr "smaže všechny pozice s klíči (odstraní šifrovací klíč)"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3488
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "převede formát LUKS do/z formátu LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3489
 msgid "set permanent configuration options for LUKS2"
 msgstr "nastaví trvalé volby konfigurace pro LUKS2"
 
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
 msgid "<device> [<new key file>]"
 msgstr "<zařízení> [<soubor_s_novým_klíčem>]"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3490
 msgid "formats a LUKS device"
 msgstr "naformátuje zařízení LUKS"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3491
 msgid "add key to LUKS device"
 msgstr "do zařízení LUKS přidá klíč"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
 msgid "<device> [<key file>]"
 msgstr "<zařízení> [<soubor_s_klíčem>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3492
 msgid "removes supplied key or key file from LUKS device"
 msgstr "odstraní zadaný klíč nebo soubor s klíčem ze zařízení LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3493
 msgid "changes supplied key or key file of LUKS device"
 msgstr "změní zadaný klíč nebo soubor s klíčem u zařízení LUKS"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3494
 msgid "converts a key to new pbkdf parameters"
 msgstr "převede klíč do nových parametrů PBKDF"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "<device> <key slot>"
 msgstr "<zařízení> <pozice_klíče>"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "smaže klíč s číslem <pozice_klíče> ze zařízení LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3496
 msgid "print UUID of LUKS device"
 msgstr "zobrazí UUID zařízení LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3497
 msgid "tests <device> for LUKS partition header"
 msgstr "otestuje <zařízení> na hlavičku oddílu LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3498
 msgid "dump LUKS partition information"
 msgstr "vypíše údaje o oddílu LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3499
 msgid "dump TCRYPT device information"
 msgstr "vypíše údaje o oddílu TCRYPT"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3500
 msgid "dump BITLK device information"
 msgstr "vypíše údaje o zařízení BITLK"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3501
 msgid "dump FVAULT2 device information"
 msgstr "vypíše údaje o zařízení FVAULT2"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3502
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Uspí zařízení LUKS a smaže klíč (všechny operace budou zmrazeny)"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3503
 msgid "Resume suspended LUKS device"
 msgstr "Probudí uspané zařízení LUKS"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3504
 msgid "Backup LUKS device header and keyslots"
 msgstr "Zálohuje hlavičku zařízení LUKS a jeho pozice s klíči"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3505
 msgid "Restore LUKS device header and keyslots"
 msgstr "Obnoví hlavičku zařízení LUKS a jeho pozice s klíči"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <zařízení>"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "Manipulate LUKS2 tokens"
 msgstr "Zachází s tokeny LUKS2"
 
-#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3005,7 +3000,7 @@ msgstr ""
 "\n"
 "<akce> je jedna z:\n"
 
-#: src/cryptsetup.c:3532
+#: src/cryptsetup.c:3531
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -3017,7 +3012,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3536
+#: src/cryptsetup.c:3535
 #, c-format
 msgid ""
 "\n"
@@ -3032,7 +3027,7 @@ msgstr ""
 "<pozice_klíče> je číslo pozice klíče LUKS, který se má upravit\n"
 "<soubor_s_klíčem> je volitelný soubor s novým klíčem pro akci luksAddKey\n"
 
-#: src/cryptsetup.c:3543
+#: src/cryptsetup.c:3542
 #, c-format
 msgid ""
 "\n"
@@ -3041,7 +3036,7 @@ msgstr ""
 "\n"
 "Výchozí zakompilovaný formát metadat (pro akci luksFormat) je %s.\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3547
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3049,12 +3044,12 @@ msgstr ""
 "\n"
 "Podpora pro zásuvný modul externího tokenu LUKS2 je zapnuta.\n"
 
-#: src/cryptsetup.c:3549
+#: src/cryptsetup.c:3548
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Cesta k zásuvnému modulu externího tokenu LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3550
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3062,7 +3057,7 @@ msgstr ""
 "\n"
 "Podpora pro zásuvný modul externího tokenu LUKS2 je vypnuta.\n"
 
-#: src/cryptsetup.c:3555
+#: src/cryptsetup.c:3554
 #, c-format
 msgid ""
 "\n"
@@ -3079,7 +3074,7 @@ msgstr ""
 "Výchozí PBKDF pro LUKS2: %s\n"
 "\tDoba iterací: %d, nutná paměť: %d kB, souběžná vlákna: %d\n"
 
-#: src/cryptsetup.c:3566
+#: src/cryptsetup.c:3565
 #, c-format
 msgid ""
 "\n"
@@ -3094,123 +3089,123 @@ msgstr ""
 "\tplain: %s, Klíč: %d bitů, Haš hesla: %s\n"
 "\tLUKS: %s, Klíč: %d bitů, Haš hlavičky LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3574
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: V režimu XTS (dva vnitřní klíče) bude výchozí velikost klíče zdvojnásobena.\n"
 
-#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: vyžaduje %s jako argumenty"
 
-#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Pozice klíče není platná."
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3660
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Velikost zařízení musí být násobkem 512bajtových sektorů."
 
-#: src/cryptsetup.c:3666
+#: src/cryptsetup.c:3665
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Zadána neplatná maximální velikost horké zóny při přešifrování."
 
-#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
+#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Velikost klíče musí být násobkem 8 bitů."
 
-#: src/cryptsetup.c:3687
+#: src/cryptsetup.c:3686
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Zadat lze nejvíce 2 velikosti klíče."
 
 # TODO: Pluralize
-#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
+#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Zadat lze nejvíce %d klíčů svazku."
 
-#: src/cryptsetup.c:3739
+#: src/cryptsetup.c:3738
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Zadat lze nejvíce %d klíčenek."
 
-#: src/cryptsetup.c:3748
+#: src/cryptsetup.c:3747
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Maximální velikost zmenšení zařízení je 1 GiB."
 
-#: src/cryptsetup.c:3751
+#: src/cryptsetup.c:3750
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Velikost zmenšení musí být násobkem 512bajtových sektorů."
 
-#: src/cryptsetup.c:3768
+#: src/cryptsetup.c:3767
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Přepínač --priority smí mít pouze argument ignore, normal a prefer."
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Zobrazí tuto nápovědu"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Zobrazí stručný návod na použití"
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Vypíše verzi balíku"
 
-#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Přepínače nápovědy:"
 
-#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[PŘEPÍNAČ…] <akce> <přepínače_akce>"
 
-#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Chybí argument <akce>."
 
-#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Neznámá akce."
 
-#: src/cryptsetup.c:3929
+#: src/cryptsetup.c:3928
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Přepínač --key-file má přednost před zadaným argumentem souboru s klíčem."
 
-#: src/cryptsetup.c:3935
+#: src/cryptsetup.c:3934
 msgid "Only one --key-file argument is allowed."
 msgstr "Je dovolen pouze jeden argument přepínače --key-file."
 
-#: src/cryptsetup.c:3940
+#: src/cryptsetup.c:3939
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funkce pro odvození klíče na základě hesla (PBKDF) smí být pouze pbkdf2 nebo argon2i/argon2id."
 
-#: src/cryptsetup.c:3945
+#: src/cryptsetup.c:3944
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Vynucené iterace PBKDF nelze kombinovat s volnou doby iterací."
 
-#: src/cryptsetup.c:3950
+#: src/cryptsetup.c:3949
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Je-li klíčenka vypnuta, klíč svazku nelze do klíčenky přidat."
 
-#: src/cryptsetup.c:3955
+#: src/cryptsetup.c:3954
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Je-li klíčenka vypnuta, popis klíče z klíčenky nelze použít."
 
-#: src/cryptsetup.c:3960
+#: src/cryptsetup.c:3959
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Inline integrita musí být použita spolu s přepínačem --integrity."
 
-#: src/cryptsetup.c:3971
+#: src/cryptsetup.c:3970
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Přepínače --keyslot-cipher a --keyslot-key-size musí být použity spolu."
 
-#: src/cryptsetup.c:3979
+#: src/cryptsetup.c:3978
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Žádný úkon nebude proveden. Zavoláno s přepínačem --test-args.\n"
 
-#: src/cryptsetup.c:3992
+#: src/cryptsetup.c:3991
 msgid "Cannot disable metadata locking."
 msgstr "Zamykání metadata nelze vypnout."
 
@@ -4404,6 +4399,12 @@ msgstr "Na stroji není povolena autentizace veřejným klíčem.\n"
 msgid "Public key authentication error: "
 msgstr "Chyba při autentizaci veřejným klíčem: "
 
+#~ msgid "Required kernel crypto interface not available."
+#~ msgstr "Požadované kryptografické rozhraní jádra není dostupné."
+
+#~ msgid "Ensure you have algif_skcipher kernel module loaded."
+#~ msgstr "Ujistěte se, že jaderný modul algif_skcipher je zaveden."
+
 #, c-format
 #~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
 #~ msgstr "Z %2$s nebylo možné přečíst nebo ověřit kopii č. %1$d metadat BITLK FVE."

From a74fdd471feebfa1d8e2a0db21689ad66c368420 Mon Sep 17 00:00:00 2001
From: Roland Illig <roland.illig@gmx.de>
Date: Sat, 4 Jul 2026 18:12:56 +0200
Subject: [PATCH 161/244] po: update de.po (from translationproject.org)

---
 po/de.po | 1019 +++++++++++++++++++++++++++---------------------------
 1 file changed, 510 insertions(+), 509 deletions(-)

diff --git a/po/de.po b/po/de.po
index 1355c6983..6032d5a24 100644
--- a/po/de.po
+++ b/po/de.po
@@ -5,10 +5,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-03-30 14:18+0200\n"
-"PO-Revision-Date: 2026-03-30 21:37+0200\n"
+"POT-Creation-Date: 2026-06-29 21:30+0200\n"
+"PO-Revision-Date: 2026-07-03 08:04+0200\n"
 "Last-Translator: Roland Illig <roland.illig@gmx.de>\n"
 "Language-Team: German <translation-team-de@lists.sourceforge.net>\n"
 "Language: de\n"
@@ -78,7 +78,7 @@ msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Die verlangte automatische Berechnung der Integritätsangaben wird nicht unterstützt."
 
 #: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2781
+#: lib/luks2/luks2_json_metadata.c:2799
 msgid "Discard/TRIM is not supported."
 msgstr "»Discard/TRIM« wird nicht unterstützt."
 
@@ -124,665 +124,665 @@ msgstr "Unbekannte Qualität des Zufallszahlengenerators verlangt."
 msgid "Error reading from RNG."
 msgstr "Fehler beim Einlesen vom Zufallszahlengenerator."
 
-#: lib/setup.c:248
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "OPAL-Unterstützung ist in libcryptsetup deaktiviert."
 
-#: lib/setup.c:250
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "Gerät »%s« oder Kernel unterstützt OPAL-Verschlüsselung nicht."
 
-#: lib/setup.c:266
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "Fehler beim Initialisieren des Krypto-Zufallszahlengenerator-Backends."
 
-#: lib/setup.c:272
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "Fehler beim Initialisieren des Krypto-Backends."
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Hash-Algorithmus »%s« wird nicht unterstützt."
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "Fehler beim Verarbeiten des Schlüssels (mit Hash-Algorithmus »%s«)."
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Geräte-Art kann nicht bestimmt werden. Inkompatible Aktivierung des Geräts?"
 
-#: lib/setup.c:395 lib/setup.c:4160
+#: lib/setup.c:398 lib/setup.c:4177
 msgid "This operation is supported only for LUKS device."
 msgstr "Diese Operation wird nur für LUKS-Geräte unterstützt."
 
-#: lib/setup.c:432
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "Diese Operation wird nur für LUKS2-Geräte unterstützt."
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "Alle Schlüsselfächer sind voll."
 
-#: lib/setup.c:500
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "Schlüsselfach %d ist ungültig, bitte wählen Sie eins zwischen 0 und %d."
 
-#: lib/setup.c:506
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "Schlüsselfach %d ist voll, bitte wählen Sie ein anderes."
 
-#: lib/setup.c:531 lib/setup.c:3875
+#: lib/setup.c:534 lib/setup.c:3878
 msgid "Device size is not aligned to device logical block size."
 msgstr "Gerätegröße ist nicht an logischer Sektorgröße ausgerichtet."
 
-#: lib/setup.c:628
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "Header gefunden, aber Gerät »%s« ist zu klein."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
-#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Diese Operation wird für diese Geräteart nicht unterstützt."
 
-#: lib/setup.c:674
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "Ungültige Operation, während die Wiederverschlüsselung läuft."
 
-#: lib/setup.c:806
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Fehler beim Rückabwickeln der LUKS2-Metadaten im Speicher."
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
-#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
-#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
-#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
+#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
+#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
+#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Gerät »%s« ist kein gültiges LUKS-Gerät."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Nicht unterstützte LUKS-Version %d."
 
-#: lib/setup.c:1270
+#: lib/setup.c:1273
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Kein bekanntes Verschlüsselungsmuster für aktives Gerät »%s« entdeckt."
 
-#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5816
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
 #, c-format
 msgid "Device %s is not active."
 msgstr "Gerät »%s« ist nicht aktiv."
 
-#: lib/setup.c:1532
+#: lib/setup.c:1535
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Zugrundeliegendes Gerät für das Kryptogerät »%s« ist verschwunden."
 
-#: lib/setup.c:1614
+#: lib/setup.c:1617
 msgid "Invalid plain crypt parameters."
 msgstr "Ungültige Parameter für Plain-Verschlüsselung."
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1622 lib/setup.c:2672
 msgid "Invalid key size."
 msgstr "Ungültige Schlüsselgröße."
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID wird für diese Verschlüsselungsart nicht unterstützt."
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Gerät für separierte Metadaten wird für diese Verschlüsselungsart nicht unterstützt."
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
 msgid "Unsupported encryption sector size."
 msgstr "Nicht unterstützte Sektorengröße für Verschlüsselung."
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
 msgid "Device size is not aligned to requested sector size."
 msgstr "Gerätegröße ist nicht an verlangter Sektorgröße ausgerichtet."
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
 msgid "Can't format LUKS without device."
 msgstr "Ohne Gerät kann LUKS nicht formatiert werden."
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1707 lib/setup.c:1959
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Gezontes Gerät »%s« kann nicht für einen LUKS-Kopfbereich verwendet werden."
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Die angeforderte Datenausrichtung ist nicht mit dem Datenoffset kompatibel."
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1754 lib/setup.c:1984
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "Warnung: DAX-Gerät kann Daten beschädigen, da es nicht garantiert, dass Sektoren atomar aktualisiert werden.\n"
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Fehler beim Auslöschen des Headers auf Gerät »%s«."
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1805 lib/setup.c:2164
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Gerät %s ist zu klein für die Aktivierung, es ist kein Platz mehr für Daten vorhanden.\n"
 
-#: lib/setup.c:1843
+#: lib/setup.c:1846
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Laufwerksschlüssel ist zu klein für die Verschlüsselung mit Integritätserweiterungen."
 
-#: lib/setup.c:1847
+#: lib/setup.c:1850
 msgid "Integrity key size is too small."
 msgstr "Integritäts-Schlüsselgröße ist zu klein."
 
-#: lib/setup.c:1856
+#: lib/setup.c:1859
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Verschlüsselung »%s-%s« (Schlüsselgröße %zd Bits) ist nicht verfügbar."
 
-#: lib/setup.c:1897
+#: lib/setup.c:1900
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "WARNUNG: Die Geräteaktivierung wird fehlschlagen, dm-crypt fehlt die Unterstützung für die angeforderte Verschlüsselungsgröße.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
-#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4497
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Gerät »%s« ist zu klein."
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Gerät »%s« kann nicht formatiert werden, da es gerade benutzt wird."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Gerät »%s« kann nicht formatiert werden, Zugriff verweigert."
 
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Fehler beim Formatieren der Integrität auf Gerät »%s«."
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2151 lib/setup.c:2629
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Gerät »%s« kann nicht formatiert werden."
 
-#: lib/setup.c:2191
+#: lib/setup.c:2194
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Fehler beim Ermitteln der OPAL-Ausrichtungs-Parameter."
 
-#: lib/setup.c:2203
+#: lib/setup.c:2206
 msgid "Bogus OPAL logical block size."
 msgstr "Falsche Größe für logischen OPAL-Block."
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Falsche Größe für logischen OPAL-Block, weicht von der Geräte-Blockgröße ab."
 
-#: lib/setup.c:2214
+#: lib/setup.c:2217
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Der gewünschte Datenoffset ist nicht mit der OPAL-Blockgröße kompatibel."
 
-#: lib/setup.c:2221
+#: lib/setup.c:2224
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Die gewünschte Datenausrichtung ist nicht mit der OPAL-Ausrichtung kompatibel."
 
-#: lib/setup.c:2241
+#: lib/setup.c:2244
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Der Datenoffset erfüllt die OPAL-Ausrichtungsbedingungen nicht."
 
-#: lib/setup.c:2254
+#: lib/setup.c:2257
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Die gewünschte Datenausrichtung erfüllt die Anforderungen an die Ausrichtung des Sperrbereichs nicht."
 
-#: lib/setup.c:2468
+#: lib/setup.c:2471
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Gerätegröße wird um %<PRIu64> Sektoren angepasst, um zur Granularität der OPAL-Ausrichtung zu passen."
 
-#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Fehler beim Zugriff auf die OPAL-Sperre für das Gerät »%s«."
 
-#: lib/setup.c:2538
+#: lib/setup.c:2541
 msgid "Incorrect OPAL Admin key."
 msgstr "Falscher OPAL-Admin-Schlüssel."
 
-#: lib/setup.c:2540
+#: lib/setup.c:2543
 msgid "Cannot setup OPAL segment."
 msgstr "Fehler beim Einrichten des OPAL-Segments."
 
-#: lib/setup.c:2622
+#: lib/setup.c:2625
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Gerät »%s« kann nicht formatiert werden, OPAL-Gerät scheint jetzt komplett schreibgeschützt zu sein."
 
-#: lib/setup.c:2624
+#: lib/setup.c:2627
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Das könnte ein Fehler in der Firmware sein. Lassen Sie »OPAL PSID reset und reconnect« zur Wiederherstellung."
 
-#: lib/setup.c:2644
+#: lib/setup.c:2647
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Fehler beim Zurücksetzen des Sperrbereichs %d auf Gerät »%s«."
 
-#: lib/setup.c:2664
+#: lib/setup.c:2667
 msgid "Can't format LOOPAES without device."
 msgstr "Ohne Gerät kann LOOPAES nicht formatiert werden."
 
-#: lib/setup.c:2709
+#: lib/setup.c:2712
 msgid "Can't format VERITY without device."
 msgstr "Ohne Gerät kann VERITY nicht formatiert werden."
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2723 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Nicht unterstützte VERITY-Hash-Art %d."
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2729 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Nicht unterstützte VERITY-Blockgröße."
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2734 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Nicht unterstützter VERITY-Hash-Offset."
 
-#: lib/setup.c:2736
+#: lib/setup.c:2739
 msgid "Unsupported VERITY FEC offset."
 msgstr "Nicht unterstützter VERITY-FEC-Offset."
 
-#: lib/setup.c:2760
+#: lib/setup.c:2763
 msgid "Data area overlaps with hash area."
 msgstr "Datenbereich und Hashbereich überlappen sich."
 
-#: lib/setup.c:2785
+#: lib/setup.c:2788
 msgid "Hash area overlaps with FEC area."
 msgstr "Hashbereich und FEC-Bereich überlappen sich."
 
-#: lib/setup.c:2792
+#: lib/setup.c:2795
 msgid "Data area overlaps with FEC area."
 msgstr "Datenbereich und FEC-Bereich überlappen sich."
 
-#: lib/setup.c:2884
+#: lib/setup.c:2887
 msgid "Integrity key size mismatch."
 msgstr "Größen der Integritätsschlüssel passen nicht zusammen."
 
-#: lib/setup.c:2935
+#: lib/setup.c:2938
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "WARNUNG: Angeforderte Taggröße mit %d Bytes unterscheidet sich von der Ausgabe der Größe %s (%d Bytes).\n"
 
-#: lib/setup.c:3048 lib/setup.c:3150
+#: lib/setup.c:3051 lib/setup.c:3153
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Unbekannte oder nicht unterstützte Art des Verschlüsselungsgeräts »%s« verlangt."
 
-#: lib/setup.c:3064
+#: lib/setup.c:3067
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Gerät »%s« bietet keine Datenfelder für Inline-Integrität."
 
-#: lib/setup.c:3070
+#: lib/setup.c:3073
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Die Inline-Tag-Größe %<PRIu32> [Bytes] ist größer als die %<PRIu32> vom Gerät %s bereitgestellte."
 
-#: lib/setup.c:3085
+#: lib/setup.c:3088
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Der Sektor muss mit dem Hardware-Sektor des Geräts übereinstimmen (%zu Bytes)."
 
-#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Nicht unterstützte Parameter für Gerät %s."
 
-#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Parameter für Gerät %s sind durcheinander."
 
-#: lib/setup.c:3647
+#: lib/setup.c:3650
 msgid "Crypt devices mismatch."
 msgstr "Verschlüsselungsgeräte passen nicht zusammen."
 
-#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Gerät »%s« konnte nicht neugeladen werden."
 
-#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
-#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Gerät »%s« konnte nicht stillgelegt werden."
 
-#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
-#: lib/luks2/luks2_reencrypt.c:4240
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Gerät »%s« konnte nicht fortgesetzt werden."
 
-#: lib/setup.c:3717
+#: lib/setup.c:3720
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Schwerwiegender Fehler beim Neuladen von Gerät »%s« (über Gerät »%s«)."
 
-#: lib/setup.c:3720 lib/setup.c:3722
+#: lib/setup.c:3723 lib/setup.c:3725
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Gerät »%s« konnte nicht auf dm-error umgeschaltet werden."
 
-#: lib/setup.c:3765
+#: lib/setup.c:3768
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Größe des LUKS2-Geräts kann nicht geändert werden, da sie statisch ist."
 
-#: lib/setup.c:3770
+#: lib/setup.c:3773
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Die Größenänderung eines LUKS2-Geräts mit Integritätsschutz wird nicht unterstützt."
 
-#: lib/setup.c:3816
+#: lib/setup.c:3819
 msgid "Cannot resize loop device."
 msgstr "Fehler beim Ändern der Größe des Loopback-Geräts."
 
-#: lib/setup.c:3860
+#: lib/setup.c:3863
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "WARNUNG: Die maximale Größe ist bereits eingestellt oder der Kernel unterstützt die Größenänderung nicht.\n"
 
-#: lib/setup.c:3926
+#: lib/setup.c:3929
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Fehler bei Größenänderung, der Kernel unterstützt sie nicht."
 
-#: lib/setup.c:3958
+#: lib/setup.c:3961
 msgid "Do you really want to change UUID of device?"
 msgstr "Wollen Sie wirklich die UUID des Geräts ändern?"
 
-#: lib/setup.c:4050
+#: lib/setup.c:4053
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Header-Backupdatei enthält keinen kompatiblen LUKS-Header."
 
-#: lib/setup.c:4143
+#: lib/setup.c:4160
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Laufwerk »%s« ist nicht aktiv."
 
-#: lib/setup.c:4198
+#: lib/setup.c:4215
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Laufwerk »%s« ist bereits im Ruhezustand."
 
-#: lib/setup.c:4224
+#: lib/setup.c:4241
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Das Gerät »%s« unterstützt keinen Ruhezustand."
 
-#: lib/setup.c:4226 lib/setup.c:4234
+#: lib/setup.c:4243 lib/setup.c:4251
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Das Gerät »%s« kann nicht in den Ruhezustand versetzt werden."
 
-#: lib/setup.c:4249
+#: lib/setup.c:4266
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Gerät »%s« ist im Ruhezustand, aber das Hardware-OPAL-Gerät kann nicht gesperrt werden."
 
-#: lib/setup.c:4280 lib/setup.c:4457
+#: lib/setup.c:4297 lib/setup.c:4491
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Das Gerät »%s« kann nicht aus dem Ruhezustand aufgeweckt werden."
 
-#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Fehler beim Aufwecken von Gerät »%s« aus dem Ruhezustand."
 
-#: lib/setup.c:4301
+#: lib/setup.c:4335
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Fehler beim Ablösen des Laufwerkschlüssels vom benutzerspezifischen Schlüsselbund."
 
-#: lib/setup.c:4423 lib/setup.c:5603
+#: lib/setup.c:4457 lib/setup.c:5637
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Fehler beim Verknüpfen des Laufwerkschlüssels im benutzerspezifischen Schlüsselbund."
 
-#: lib/setup.c:4522 src/cryptsetup.c:2721
+#: lib/setup.c:4556 src/cryptsetup.c:2720
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Laufwerk »%s« ist nicht im Ruhezustand."
 
-#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
-#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
+#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
+#: src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Der Laufwerksschlüssel passt nicht zum Laufwerk."
 
-#: lib/setup.c:4787
+#: lib/setup.c:4821
 msgid "Failed to swap new key slot."
 msgstr "Neues Schlüsselfach konnte nicht ausgewechselt werden."
 
-#: lib/setup.c:4885
+#: lib/setup.c:4919
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Schlüsselfach %d ist ungültig."
 
-#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
-#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
+#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
+#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Schlüsselfach %d ist nicht aktiv."
 
-#: lib/setup.c:4910
+#: lib/setup.c:4944
 msgid "Device header overlaps with data area."
 msgstr "Geräteheader und Datenbereich überlappen sich."
 
-#: lib/setup.c:5131
+#: lib/setup.c:5165
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Wiederverschlüsselung läuft bereits. Das Gerät kann nicht aktiviert werden."
 
-#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3725
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Fehler beim Zugriff auf die Sperre zur Wiederverschlüsselung."
 
-#: lib/setup.c:5155
+#: lib/setup.c:5189
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Fehler beim Wiederherstellen der LUKS2-Wiederverschlüsselung mittels Laufwerksschlüssel(n)."
 
-#: lib/setup.c:5291
+#: lib/setup.c:5325
 #, c-format
 msgid "Device %s already exists."
 msgstr "Das Gerät »%s« existiert bereits."
 
-#: lib/setup.c:5298
+#: lib/setup.c:5332
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Gerät »%s« kann nicht verwendet werden, da es gerade benutzt wird oder der Name ungültig ist."
 
-#: lib/setup.c:5310
+#: lib/setup.c:5344
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Die Laufwerksschlüssel für die Wiederverschlüsselung passen nicht zum Laufwerk."
 
-#: lib/setup.c:5327
+#: lib/setup.c:5361
 msgid "Incorrect volume key specified for plain device."
 msgstr "Falscher Laufwerksschlüssel für Plain-Gerät angegeben."
 
-#: lib/setup.c:5353 lib/setup.c:5414
+#: lib/setup.c:5387 lib/setup.c:5448
 msgid "Device type is not properly initialized."
 msgstr "Geräteart ist nicht richtig initialisiert."
 
-#: lib/setup.c:5452
+#: lib/setup.c:5486
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Der Kernel-Schlüsselbund wird vom Kernel nicht unterstützt."
 
-#: lib/setup.c:5456
+#: lib/setup.c:5490
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Der Kernel-Schlüsselbund fehlt. Wird benötigt, um die Signatur zum Kernel zu übergeben."
 
-#: lib/setup.c:5511
+#: lib/setup.c:5545
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Schlüsselringschlüssel »%s« kann nicht verwendet werden."
 
-#: lib/setup.c:5724
+#: lib/setup.c:5758
 msgid "Incorrect root hash specified for verity device."
 msgstr "Falscher Root-Hash-Schlüssel für VERITY-Gerät angegeben."
 
-#: lib/setup.c:5765 lib/setup.c:5790
+#: lib/setup.c:5799 lib/setup.c:5824
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL unterstützt verzögertes Deaktivieren nicht."
 
-#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Gerät »%s« wird gerade benutzt."
 
-#: lib/setup.c:5798
+#: lib/setup.c:5832
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Fehler beim Abbrechen des verzögerten Löschens von Gerät »%s«."
 
-#: lib/setup.c:5820
+#: lib/setup.c:5854
 #, c-format
 msgid "Invalid device %s."
 msgstr "Ungültiges Gerät »%s«."
 
-#: lib/setup.c:5967
+#: lib/setup.c:6001
 msgid "Volume key buffer too small."
 msgstr "Laufwerks-Schlüsselpuffer zu klein."
 
-#: lib/setup.c:5978
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für LUKS2-Gerät."
 
-#: lib/setup.c:5987
+#: lib/setup.c:6021
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für LUKS1-Gerät."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6035
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für Plain-Gerät."
 
-#: lib/setup.c:6009
+#: lib/setup.c:6043
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Root-Hash für Verity-Gerät kann nicht ermittelt werden."
 
-#: lib/setup.c:6018
+#: lib/setup.c:6052
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für BITLK-Gerät."
 
-#: lib/setup.c:6023
+#: lib/setup.c:6057
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für FVAULT2-Gerät."
 
-#: lib/setup.c:6025
+#: lib/setup.c:6059
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Diese Operation wird für Kryptogerät »%s« nicht unterstützt."
 
-#: lib/setup.c:6210 lib/setup.c:6221
+#: lib/setup.c:6244 lib/setup.c:6255
 msgid "Dump operation is not supported for this device type."
 msgstr "Die Dump-Operation wird für diese Geräteart nicht unterstützt."
 
-#: lib/setup.c:6601
+#: lib/setup.c:6635
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Datenoffset ist kein Vielfaches von %u Bytes."
 
-#: lib/setup.c:6909
+#: lib/setup.c:6943
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Gerät »%s« kann nicht konvertiert werden, da es gerade benutzt wird."
 
-#: lib/setup.c:7217 lib/setup.c:7361
+#: lib/setup.c:7251 lib/setup.c:7406
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Schlüsselfach %u konnte nicht dem Laufwerksschlüssel zugeordnet werden."
 
-#: lib/setup.c:7241
+#: lib/setup.c:7275
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Fehler beim Initialisieren der LUKS2-Schlüsselfach-Parameter."
 
-#: lib/setup.c:7247
+#: lib/setup.c:7281
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Schlüsselfach %d konnte nicht dem Digest zugeordnet werden."
 
-#: lib/setup.c:7478
+#: lib/setup.c:7523
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Schlüsselfach kann nicht hinzugefügt werden, da alle Fächer deaktiviert sind und kein Laufwerksschlüssel angegeben wurde."
 
-#: lib/setup.c:7551 lib/verity/verity.c:333
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Fehler beim Laden des Schlüssels im Kernel-Schlüsselbund."
 
-#: lib/setup.c:7742
+#: lib/setup.c:7807
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Schlüsselbund mit der Beschreibung »%s« nicht gefunden."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7872
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Globale Speicherzugriffsserialisierungssperre konnte nicht angefordert werden."
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "Fehler beim Öffnen der Schlüsseldatei."
 
-#: lib/utils.c:212
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "Fehler beim Einlesen der Schlüsseldatei »%s« vom Terminal."
 
-#: lib/utils.c:228
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "Fehler beim Öffnen der Schlüsseldatei."
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "Fehler beim Zugriff auf die Schlüsseldatei."
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "Zu wenig Speicher zum Einlesen der Passphrase."
 
-#: lib/utils.c:286
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "Fehler beim Einlesen der Passphrase."
 
-#: lib/utils.c:303
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "Nichts zu lesen in der Eingabe."
 
-#: lib/utils.c:310
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "Größenbegrenzung für die Schlüsseldatei überschritten."
 
-#: lib/utils.c:315
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "Die gewünschte Menge an Daten kann nicht eingelesen werden."
 
@@ -963,7 +963,7 @@ msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Verschlüsselungsverfahren sollte im Format [Verfahren]-[Modus]-[IV] sein."
 
 #: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
 #: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
@@ -977,13 +977,13 @@ msgstr "Fehler beim Öffnen des temporären Schlüsselspeichergeräts."
 msgid "Failed to access temporary keystore device."
 msgstr "Fehler beim Zugriff auf das temporäre Schlüsselspeichergerät."
 
-#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "E/A-Fehler beim Verschlüsseln des Schlüsselfachs."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
@@ -994,7 +994,7 @@ msgstr "E/A-Fehler beim Verschlüsseln des Schlüsselfachs."
 msgid "Cannot open device %s."
 msgstr "Fehler beim Öffnen des Geräts »%s«."
 
-#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "E/A-Fehler beim Entschlüsseln des Schlüsselfachs."
 
@@ -1084,7 +1084,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Chiffre-Hash in Kleinbuchstaben umgewandelt (%s)."
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Verlangter LUKS-Hash »%s« wird nicht unterstützt."
@@ -1132,7 +1132,7 @@ msgstr "LUKS-Verschlüsselungsmodus %s ist ungültig."
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS-Hash %s ist ungültig."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
 msgid "No known problems detected for LUKS header."
 msgstr "Keine bekannten Probleme im LUKS-Header erkannt."
 
@@ -1146,51 +1146,51 @@ msgstr "Fehler beim Aktualisieren des LUKS-Headers auf Gerät »%s«."
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Fehler beim Neueinlesen des LUKS-Headers nach dem Aktualisieren auf Gerät »%s«."
 
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:750
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Daten-Offset für LUKS-Header muss entweder 0 sein oder mehr als die Headergröße."
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:701
 msgid "Wrong LUKS UUID format provided."
 msgstr "Falsches LUKS-UUID-Format angegeben."
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "LUKS-Header kann nicht angelegt werden: Fehler beim Einlesen des zufälligen Salts."
 
 # XXX
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "LUKS-Header kann nicht angelegt werden: Fehler beim Hashen des Headers (mit Hash-Algorithmus »%s«)."
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Schlüsselfach %d aktiv, löschen Sie es erst."
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Material für Schlüsselfach %d enthält zu wenige Streifen. Manipulation des Headers?"
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Überlauf im Iterationswert von PBKDF2."
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Schlüsselfach kann nicht geöffnet werden (mit Hash-Algorithmus »%s«)."
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Schlüsselfach %d ist ungültig, bitte wählen Sie ein Schlüsselfach zwischen 0 und %d."
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Gerät »%s« kann nicht ausgelöscht werden."
@@ -1211,56 +1211,48 @@ msgstr "Inkompatible Loop-AES-Schlüsseldatei erkannt."
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "Kernel unterstützt Loop-AES-kompatibles Mapping nicht."
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "Fehler beim Einlesen der Schlüsseldatei »%s«."
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "Maximale Länge der TCRYPT-Passphrase (%zu) überschritten."
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "Der Hash-Algorithmus »%s« für PBKDF2 wird nicht unterstützt, überspringe diesen Teil."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
-msgid "Required kernel crypto interface not available."
-msgstr "Die benötigte Crypto-Kernel-Schnittstelle ist nicht verfügbar."
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "Stellen Sie sicher, dass das Kernelmodul »algif_skcipher« geladen ist."
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "Aktivierung wird für die Sektorengröße %d nicht unterstützt."
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "Der Kernel unterstützt die Aktivierung für diesen TCRYPT-Legacymodus nicht."
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "TCRYPT-Systemverschlüsselung für Partition »%s« wird aktiviert."
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:819
 msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
 msgstr "Offset der TCRYPT-Systempartition kann nicht bestimmt werden, daher wird der gesamte verschlüsselte Bereich aktiviert."
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:828
 msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
 msgstr "Offset der TCRYPT-Systempartition kann nicht bestimmt werden, daher wird das Gerät als Systempartition aktiviert."
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "Kernel unterstützt TCRYPT-kompatibles Mapping nicht."
 
-#: lib/tcrypt/tcrypt.c:1146
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "Diese Funktionalität braucht einen geladenen TCRYPT-Header."
 
@@ -1613,8 +1605,7 @@ msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "Warnung: Größe des LUKS2-Schlüsselfachbereichs wurde auf %<PRIu64> Bytes geändert.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Fehler beim Zugriff auf die Lesesperre für das Gerät »%s«."
@@ -1674,79 +1665,79 @@ msgstr ""
 msgid "Ignored unknown flag %s."
 msgstr "Unbekannter Schalter »%s« wird ignoriert."
 
-#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Fehlender Schlüssel für dm-crypt-Segment %u"
 
-#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Fehler beim Festlegen des »dm-crypt«-Segments."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Fehler beim Festlegen des »dm-linear«-Segments."
 
-#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Kein bekanntes Verschlüsselungsmuster in LUKS2-Kopfbereich entdeckt."
 
-#: lib/luks2/luks2_json_metadata.c:2691
+#: lib/luks2/luks2_json_metadata.c:2709
 msgid "OPAL device must have static device size."
 msgstr "OPAL-Gerät muss statische Gerätegröße haben."
 
-#: lib/luks2/luks2_json_metadata.c:2711
+#: lib/luks2/luks2_json_metadata.c:2729
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Verschlüsseltes OPAL-Gerät mit Integrität muss kleiner als der Sperrbereich sein."
 
-#: lib/luks2/luks2_json_metadata.c:2716
+#: lib/luks2/luks2_json_metadata.c:2734
 msgid "OPAL device must have same size as locking range."
 msgstr "OPAL-Gerät muss dieselbe Größe wie der Sperrbereich haben."
 
-#: lib/luks2/luks2_json_metadata.c:2736
+#: lib/luks2/luks2_json_metadata.c:2754
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Das OPAL-Gerät »%s« ist bereits entsperrt.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2775
+#: lib/luks2/luks2_json_metadata.c:2793
 msgid "Unsupported device integrity configuration."
 msgstr "Nicht unterstützte Konfiguration für Geräteintegrität."
 
-#: lib/luks2/luks2_json_metadata.c:2791
+#: lib/luks2/luks2_json_metadata.c:2809
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Das zugrundeliegende dm-integrity-Gerät hat unerwartete Datensektoren bereitgestellt."
 
-#: lib/luks2/luks2_json_metadata.c:2886
+#: lib/luks2/luks2_json_metadata.c:2911
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Wiederverschlüsselung läuft gerade. Das Gerät kann nicht deaktiviert werden."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Das stillgelegte Gerät »%s« mit dm-error-Ziel konnte nicht in den Fehlerzustand gesetzt werden."
 
-#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Gerät »%s« wurde deaktiviert, aber das Hardware-OPAL-Gerät kann nicht gesperrt werden."
 
-#: lib/luks2/luks2_json_metadata.c:3020
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Unerfüllte LUKS2-Anforderungen entdeckt."
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3053
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Diese Operation kann nicht mit einem Gerät durchgeführt werden, das für Altlasten-Wiederverschlüsselung markiert ist. Wird abgebrochen."
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3055
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Diese Operation kann nicht mit einem Gerät durchgeführt werden, das für LUKS2-Wiederverschlüsselung markiert ist. Wird abgebrochen."
 
-#: lib/luks2/luks2_json_metadata.c:3032
+#: lib/luks2/luks2_json_metadata.c:3057
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Diese Operation kann nicht mit einem Gerät durchgeführt werden, das OPAL verwendet. Wird abgebrochen."
 
-#: lib/luks2/luks2_json_metadata.c:3034
+#: lib/luks2/luks2_json_metadata.c:3059
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Der Vorgang ist nicht kompatibel mit einem Gerät, das Inline-HW-Tags verwendet. Abbruch."
 
@@ -1758,22 +1749,22 @@ msgstr "Nicht genügend Speicher, um ein Schlüsselfach zu öffnen."
 msgid "Keyslot open failed."
 msgstr "Fehler beim Öffnen des Schlüsselfachs."
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "Der Algorithmus %s-%s kann nicht für Schlüsselfach-Verschlüsselung verwendet werden."
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "Der Algorithmus %s kann nicht für Schlüsselfach-Verschlüsselung verwendet werden."
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr "Nicht genug freier Speicher, um den Schlüssel für ein Schlüsselfach abzuleiten."
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "Der Hash-Algorithmus »%s« ist nicht verfügbar."
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "Nicht genug Speicherplatz für neues Schlüsselfach."
 
@@ -1790,335 +1781,335 @@ msgstr "Die Art der Robustheit kann nicht geändert werden. Die neue Art bietet
 msgid "Failed to refresh reencryption verification digest."
 msgstr "Fehler beim Auffrischen des Zusammenfassungswerts der Prüfung der Wiederverschlüsselung."
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "Fehler beim Prüfen des Zustands von Gerät mit der UUID %s."
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Fehler beim Konvertieren des Headers mit zusätzlichen LUKSMETA-Metadaten."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Die Chiffrierspezifikation %s-%s kann für LUKS2 nicht verwendet werden."
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr "Die Verschlüsselungsangabe %s-%s kann für LUKS2-Schlüsselfach nicht verwendet werden."
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Fehler beim Verschieben des Schlüsselfach-Bereichs. Nicht genug Speicherplatz."
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Fehler beim Konvertieren ins LUKS2-Format: ungültige Metadaten."
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Fehler beim Verschieben des Schlüsselfach-Bereichs. Bereich für die LUKS2-Schlüsselfächer ist zu klein."
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr "Fehler beim Verschieben des Schlüsselfach-Bereichs."
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Standardgröße für Verschlüsselungssektoren ist nicht 512 Bytes."
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Schlüsselfach-Digeste sind nicht zu LUKS1 kompatibel."
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Gerät verwendet eingepacktes Verschlüsselungsverfahren %s."
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Gerät verwendet mehr Segmente."
 
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: LUKS2-Header enthält %u Token."
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:798
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Es gibt keine aktiven Schlüsselfächer."
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Schlüsselfach %u ist in ungültigem Zustand."
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:815
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Schlüsselfach %u ist unbegrenzt."
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Fehler beim Konvertieren in LUKS1-Format: Schlüsselfach %u (über Maximalfach) ist noch aktiv."
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Fehler beim Konvertieren in LUKS1-Format: Schlüsselfach %u ist nicht zu LUKS1 kompatibel."
 
-#: lib/luks2/luks2_reencrypt.c:1198
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Die Größe der Hotzone muss ein Vielfaches der berechneten Zonenausrichtung (%zu Bytes) sein."
 
-#: lib/luks2/luks2_reencrypt.c:1203
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Gerätegröße muss ein Vielfaches der berechneten Zonenausrichtung (%zu Bytes) sein."
 
-#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
-#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4080
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Fehler beim Initialisieren der Umverpackung für den Speicher alter Segmente."
 
-#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Fehler beim Initialisieren der Umverpackung für den Speicher neuer Segmente."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "Fehler beim Initialisieren des Hotzone-Schutzes."
 
-#: lib/luks2/luks2_reencrypt.c:1623
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "Fehler beim Lesen der Prüfsummen für die aktuelle Hotzone."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Fehler beim Lesen des Hotzone-Bereichs, der bei %<PRIu64> beginnt."
 
-#: lib/luks2/luks2_reencrypt.c:1649
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "Fehler beim Entschlüsseln von Sektor %zu."
 
-#: lib/luks2/luks2_reencrypt.c:1655
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "Fehler beim Wiederherstellen von Sektor %zu."
 
-#: lib/luks2/luks2_reencrypt.c:2208
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "Die Größe der Quell- und Zielgeräte stimmt nicht überein. Quelle %<PRIu64>, Ziel: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2310
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "Fehler beim Aktivieren des Hotzone-Geräts »%s«."
 
-#: lib/luks2/luks2_reencrypt.c:2322
+#: lib/luks2/luks2_reencrypt.c:2323
 #, c-format
 msgid "Failed to allocate hotzone device %s."
 msgstr "Fehler bei der Speicherzuweisung des Hotzone-Geräts »%s«."
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "Fehler beim Aktivieren des Überlagerungsgeräts »%s« mit der tatsächlichen Ursprungstabelle."
 
-#: lib/luks2/luks2_reencrypt.c:2346
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "Fehler beim Laden der neuen Zuordnung für Gerät »%s«."
 
-#: lib/luks2/luks2_reencrypt.c:2418
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
 msgstr "Fehler beim Auffrischen des Gerätestapels für Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:2615
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
 msgstr "Fehler beim Festlegen der neuen Bereichsgröße für Schlüsselfächer."
 
-#: lib/luks2/luks2_reencrypt.c:2751
+#: lib/luks2/luks2_reencrypt.c:2752
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Datenverschiebung ist nicht an der angeforderten Verschlüsselungs-Sektorgröße (%<PRIu32> Bytes) ausgerichtet."
 
-#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "Nicht unterstützter Modus »%s« für Widerstandsfähigkeit"
 
-#: lib/luks2/luks2_reencrypt.c:2824
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
 msgstr "Die Größe des verschobenen Segments kann nicht größer als der Wert der Datenverschiebung sein."
 
-#: lib/luks2/luks2_reencrypt.c:2866
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
 msgstr "Ungültige Parameter für die robuste Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:2888
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "Das verschobene Segment ist zu groß. Angeforderte Größe %<PRIu64>, verfügbarer Platz %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2977
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "Fehler beim Leeren der Tabelle."
 
-#: lib/luks2/luks2_reencrypt.c:3063
+#: lib/luks2/luks2_reencrypt.c:3064
 #, c-format
 msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
 msgstr "Datenverschiebung (%<PRIu64> Sektoren) ist weniger als der zukünftige Datenoffset (%<PRIu64> Sektoren)."
 
-#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
 msgstr "Die reduzierte Datengröße ist größer als die tatsächliche Gerätegröße."
 
-#: lib/luks2/luks2_reencrypt.c:3095
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Datengerät ist nicht an der angeforderten Verschlüsselungs-Sektorgröße (%<PRIu32> Bytes) ausgerichtet."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
-#: lib/luks2/luks2_reencrypt.c:3664
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Fehler beim exklusiven Öffnen von »%s« (wird bereits anderweitig benutzt)."
 
-#: lib/luks2/luks2_reencrypt.c:3332
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Das Gerät ist nicht für LUKS2-Wiederverschlüsselung markiert."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Fehler beim Laden des LUKS2-Wiederverschlüsselungs-Kontextes."
 
-#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
 msgstr "Das Gerät befindet sich nicht in der Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
 msgstr "Der Wiederverschlüsselungs-Vorgang läuft bereits."
 
-#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
 msgstr "Fehler beim Zugriff auf die Schreibsperre für die Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:3471
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Wiederverschlüsselung kann nicht fortgesetzt werden. Führen Sie zuerst die Wiederverschlüsselungs-Wiederherstellung durch."
 
-#: lib/luks2/luks2_reencrypt.c:3607
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Aktive Gerätegröße und angeforderte Wiederverschlüsselungsgröße passen nicht zusammen."
 
-#: lib/luks2/luks2_reencrypt.c:3621
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "Ungültige Gerätegröße wurde in den Wiederverschlüsselungsparametern angefordert."
 
-#: lib/luks2/luks2_reencrypt.c:3723
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Wiederverschlüsselung läuft bereits. Wiederherstellung ist nicht möglich."
 
-#: lib/luks2/luks2_reencrypt.c:3744
+#: lib/luks2/luks2_reencrypt.c:3745
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Fehler beim Wiederherstellen der LUKS2-Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
 msgid "Failed to initialize reencryption device stack."
 msgstr "Fehler beim Initialisieren des Gerätestapels für Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:3910
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "LUKS2-Wiederverschlüsselung ist in den Metadaten bereits initialisiert."
 
-#: lib/luks2/luks2_reencrypt.c:3918
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "LUKS2-Wiederverschlüsselung konnte in den Metadaten nicht initialisiert werden."
 
-#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
-#: lib/luks2/luks2_reencrypt.c:4033
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Wiederverschlüsselung wird für DAX-Geräte (persistenten Speicher) nicht unterstützt."
 
-#: lib/luks2/luks2_reencrypt.c:4062
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Fehler beim Festlegen der Gerätesegmente für die nächste Wiederverschlüsselungs-Hotzone."
 
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Fehler beim Schreiben der Metadaten für robuste Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:4122
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "Fehler beim Entschlüsseln."
 
-#: lib/luks2/luks2_reencrypt.c:4127
+#: lib/luks2/luks2_reencrypt.c:4128
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Fehler beim Schreiben des Hotzone-Bereichs, der bei %<PRIu64> beginnt."
 
-#: lib/luks2/luks2_reencrypt.c:4132
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
 msgstr "Fehler beim Synchronisieren von Daten."
 
-#: lib/luks2/luks2_reencrypt.c:4140
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Fehler beim Aktualisieren der Metadaten, nachdem die aktuelle Wiederverschlüsselungs-Hotzone beendet wurde."
 
-#: lib/luks2/luks2_reencrypt.c:4229
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
 msgstr "Fehler beim Schreiben der LUKS2-Metadaten."
 
-#: lib/luks2/luks2_reencrypt.c:4252
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
 msgstr "Fehler beim gründlichen Löschen des ungenutzten Bereichs auf dem Gerät."
 
-#: lib/luks2/luks2_reencrypt.c:4258
+#: lib/luks2/luks2_reencrypt.c:4259
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Fehler beim Entfernen des ungenutzten (ungebundenen) Schlüsselfachs %d."
 
-#: lib/luks2/luks2_reencrypt.c:4268
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
 msgstr "Fehler beim Entfernen des Schlüsselfachs zur Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:4278
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Schwerwiegender Fehler beim Wiederverschlüsseln des Blocks bei %<PRIu64>, %<PRIu64> Sektoren lang."
 
-#: lib/luks2/luks2_reencrypt.c:4282
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
 msgstr "Fehler bei Online-Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Das Gerät nicht fortsetzen, außer es wird manuell durch das Fehlerziel ersetzt."
 
-#: lib/luks2/luks2_reencrypt.c:4339
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Wiederverschlüsselung kann nicht fortgesetzt werden. Unerwarteter Zustand der Wiederverschlüsselung."
 
-#: lib/luks2/luks2_reencrypt.c:4345
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
 msgstr "Fehlender oder ungültiger Wiederverschlüsselungs-Kontext."
 
-#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
 msgstr "Fehler beim Aktualisieren des Wiederverschlüsselungskontexts."
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "Die Metadaten für die Wiederverschlüsselung sind ungültig."
 
@@ -2150,7 +2141,7 @@ msgstr "Verschlüsselungsparameter für Schlüsselfach wird nur für LUKS2-Gerä
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Verschlüsselungsparameter für Schlüsselfach sind nicht mit LUKS2-Schlüsselfach-Verschlüsselung kompatibel."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
+#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2178,7 +2169,7 @@ msgstr "WARNUNG: Der Parameter --hash wird im Plain-Modus ignoriert, wenn eine S
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "WARNUNG: Die Option --keyfile-size wird ignoriert, da die Lesegröße die gleiche ist wie die Verschlüsselungsschlüsselgröße ist.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2189,9 +2180,9 @@ msgstr "Fehler beim Blkid-Scan für %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Gerätesignaturen auf »%s« erkannt. Wenn Sie fortfahren, könnte das bestehende Daten beschädigen."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
-#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
-#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
+#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
+#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2242,7 +2233,7 @@ msgstr ""
 "daher ausschließlich an einem sicheren Ort und verschlüsselt\n"
 "aufbewahrt werden."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2269,9 +2260,9 @@ msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Gerät »%s« ist noch aktiv und zum verzögerten Entfernen eingeplant.\n"
 
 # upstream: period missing
-#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
-#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
-#: src/cryptsetup.c:3262
+#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
+#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
+#: src/cryptsetup.c:3261
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Fehler beim Festlegen des externen Tokenpfads »%s«."
@@ -2308,19 +2299,19 @@ msgstr "%-10s %4u Iterationen, %5u Speicher, %1u parallele Threads (CPUs) für %
 msgid "Result of benchmark is not reliable."
 msgstr "Das Ergebnis des Benchmarks ist nicht zuverlässig."
 
-#: src/cryptsetup.c:1170
+#: src/cryptsetup.c:1171
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Die Tests sind nur annähernd genau, da sie nicht auf den Datenträger zugreifen.\n"
 
 # upstream: the following line should also be translated. This is because the long word "Schlüssel" for "Key" will break the layout, as well as "Verschlüsselung" for "Encryption".
 # To help the translators, you should provide an example for what goes into the %x placeholders, since I had to make an educated guess that the second %s would be exactly 4 characters long. This is an unnecessary burden for the translators.
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1195
+#: src/cryptsetup.c:1196
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s   Algorithmus | Schlüssel | Verschlüsselung | Entschlüsselung\n"
 
-#: src/cryptsetup.c:1203
+#: src/cryptsetup.c:1204
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Verschlüsselung »%s« (mit Schlüsselgröße %i Bits) ist nicht verfügbar."
@@ -2328,15 +2319,19 @@ msgstr "Verschlüsselung »%s« (mit Schlüsselgröße %i Bits) ist nicht verfü
 # upstream: the following line should also be translated. This is because the long word "Schlüssel" for "Key" will break the layout, as well as "Verschlüsselung" for "Encryption".
 # To help the translators, you should provide an example for what goes into the %x placeholders, since I had to make an educated guess that the second %s would be exactly 4 characters long. This is an unnecessary burden for the translators.
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1222
+#: src/cryptsetup.c:1225
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#   Algorithmus | Schlüssel | Verschlüsselung | Entschlüsselung\n"
 
-#: src/cryptsetup.c:1233
+#: src/cryptsetup.c:1238
 msgid "N/A"
 msgstr "N/A"
 
-#: src/cryptsetup.c:1258
+#: src/cryptsetup.c:1241
+msgid "# Cipher speed test is not available.\n"
+msgstr "# Verschlüsselungs-Geschwindigkeitstest ist nicht verfügbar.\n"
+
+#: src/cryptsetup.c:1257
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2344,27 +2339,27 @@ msgstr ""
 "Ungeschützte LUKS2-Metadaten für die Wiederverschlüsselung entdeckt. Bitte überprüfen Sie, ob die Wiederverschlüsselungsoperation erwünscht ist (siehe luksDump-Ausgabe)\n"
 "und fahren Sie nur fort (Upgrade der Metadaten), wenn Sie den Vorgang als echt anerkennen."
 
-#: src/cryptsetup.c:1264
+#: src/cryptsetup.c:1263
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Geben Sie die Passphrase für den Schutz und das Aktualisieren der Metadaten für die Wiederverschlüsselung ein: "
 
-#: src/cryptsetup.c:1308
+#: src/cryptsetup.c:1307
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Wirklich mit der Wiederherstellung der LUKS2-Wiederverschlüsselung fortfahren?"
 
-#: src/cryptsetup.c:1317
+#: src/cryptsetup.c:1316
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Geben Sie die Passphrase für das Prüfen der Metadaten für die Wiederverschlüsselung ein: "
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1318
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Geben Sie die Passphrase für die Wiederherstellung der Wiederverschlüsselung ein: "
 
-#: src/cryptsetup.c:1381
+#: src/cryptsetup.c:1380
 msgid "Really try to repair LUKS device header?"
 msgstr "Wirklich versuchen, den LUKS-Geräteheader wiederherzustellen?"
 
-#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2372,7 +2367,7 @@ msgstr ""
 "\n"
 "Gründlich löschen unterbrochen."
 
-#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2381,167 +2376,167 @@ msgstr ""
 "Sie können diesen Vorgang mit Strg+C unterbrechen (der nicht gesäuberte Bereich des Geräts wird dann ungültige Prüfsummen haben).\n"
 
 # upstream: it is boring that I have to translate the newline at the end of each of these messages. Translating strings without newlines is much easier and faster. Since it is redundant anyway (all calls to log_err have a trailing newline), this newline should be written implicitly.
-#: src/cryptsetup.c:1436 src/integritysetup.c:103
+#: src/cryptsetup.c:1435 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Fehler beim Deaktivieren des temporären Geräts »%s«."
 
-#: src/cryptsetup.c:1484
+#: src/cryptsetup.c:1483
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "OPAL hw-only Verschlüsselung unterstützt nicht --cipher und --key-size, die Optionen werden ignoriert."
 
-#: src/cryptsetup.c:1497
+#: src/cryptsetup.c:1496
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Die Integritätsoption kann nur für das LUKS2-Format verwendet werden."
 
-#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
+#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nicht unterstützte Optionen für Größe der LUKS-Metadaten."
 
-#: src/cryptsetup.c:1507
+#: src/cryptsetup.c:1506
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL wird nur für das LUKS2-Format unterstützt."
 
-#: src/cryptsetup.c:1512
+#: src/cryptsetup.c:1511
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Inline-Hardware-Tokens werden nur für das LUKS2-Format unterstützt."
 
-#: src/cryptsetup.c:1521
+#: src/cryptsetup.c:1520
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Die Headerdatei existiert nicht, soll sie angelegt werden?"
 
-#: src/cryptsetup.c:1529
+#: src/cryptsetup.c:1528
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Fehler beim Anlegen der Headerdatei »%s«."
 
-#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
 #: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
 #: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Kein bekanntes Integritätsspezifikationsmuster entdeckt."
 
-#: src/cryptsetup.c:1557
+#: src/cryptsetup.c:1556
 msgid "Cannot use specified integrity key size."
 msgstr "Die angegebene Integritätsschlüsselgröße kann nicht verwendet werden."
 
-#: src/cryptsetup.c:1575
+#: src/cryptsetup.c:1574
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Das Gerät »%s« kann nicht als Datenträger-Header benutzt werden."
 
-#: src/cryptsetup.c:1604 src/integritysetup.c:172
+#: src/cryptsetup.c:1603 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Hiermit werden die Daten auf »%s« unwiderruflich überschrieben."
 
-#: src/cryptsetup.c:1641
+#: src/cryptsetup.c:1640
 msgid "OPAL Admin password cannot be empty."
 msgstr "Das OPAL-Admin-Passwort darf nicht leer sein."
 
-#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
-#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
+#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Fehler beim Festlegen der PBKDF-Parameter."
 
-#: src/cryptsetup.c:1786
+#: src/cryptsetup.c:1785
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Verringerter Datenoffset ist nur für separaten LUKS-Header erlaubt."
 
-#: src/cryptsetup.c:1793
+#: src/cryptsetup.c:1792
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "LUKS-Datei-Container %s ist zu klein für die Aktivierung, es ist kein Platz mehr für Daten vorhanden."
 
-#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Die Größe des Laufwerksschlüssels erfordert Schlüsselfächer, bitte nutzen Sie dazu die Option »--key-size«."
 
-#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Das Gerät benötigt zwei Laufwerksschlüssel."
 
-#: src/cryptsetup.c:1889
+#: src/cryptsetup.c:1888
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Einige angegebene Aktivierungsparameter wurden bei der OPAL-nur-Hardware-Verschlüsselung ignoriert."
 
-#: src/cryptsetup.c:1894
+#: src/cryptsetup.c:1893
 msgid "Device activated but cannot make flags persistent."
 msgstr "Gerät aktiviert, aber die Schalter können nicht dauerhaft gespeichert werden."
 
-#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
+#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Schlüsselfach %d zum Löschen ausgewählt."
 
-#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
+#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Dies ist das letzte Schlüsselfach. Wenn Sie diesen Schlüssel löschen, wird das Gerät unbrauchbar."
 
-#: src/cryptsetup.c:1987
+#: src/cryptsetup.c:1986
 msgid "Enter any remaining passphrase: "
 msgstr "Geben Sie irgendeine verbleibende Passphrase ein: "
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Vorgang abgebrochen, das Schlüsselfach wurde NICHT gesäubert.\n"
 
-#: src/cryptsetup.c:2024
+#: src/cryptsetup.c:2023
 msgid "Enter passphrase to be deleted: "
 msgstr "Geben Sie die zu löschende Passphrase ein: "
 
-#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
-#: src/cryptsetup.c:3253
+#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
+#: src/cryptsetup.c:3252
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Gerät »%s« ist kein gültiges LUKS2-Gerät."
 
-#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
+#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
 msgid "Enter new passphrase for key slot: "
 msgstr "Geben Sie die neue Passphrase für das Schlüsselfach ein: "
 
-#: src/cryptsetup.c:2147 src/utils_luks.c:342
+#: src/cryptsetup.c:2146 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Geben Sie die PIN des Tokens ein: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:344
+#: src/cryptsetup.c:2148 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Geben Sie die PIN des Tokens %d ein: "
 
-#: src/cryptsetup.c:2208
+#: src/cryptsetup.c:2207
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "WARNUNG: Der Parameter --key-slot wird für die neue Nummer des Schlüsselfachs verwendet.\n"
 
-#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Geben Sie irgendeine bestehende Passphrase ein: "
 
-#: src/cryptsetup.c:2381
+#: src/cryptsetup.c:2380
 msgid "Enter passphrase to be changed: "
 msgstr "Geben Sie die zu ändernde Passphrase ein: "
 
-#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Geben Sie die neue Passphrase ein: "
 
-#: src/cryptsetup.c:2447
+#: src/cryptsetup.c:2446
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Geben Sie die Passphrase für das umzuwandelnde Schlüsselfach ein: "
 
-#: src/cryptsetup.c:2471
+#: src/cryptsetup.c:2470
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Die Operation »isLuks« unterstützt nur genau ein Geräte-Argument."
 
-#: src/cryptsetup.c:2576
+#: src/cryptsetup.c:2575
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Schlüsselfach %d enthält keinen unverbundenen Schlüssel."
 
-#: src/cryptsetup.c:2581
+#: src/cryptsetup.c:2580
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2550,52 +2545,52 @@ msgstr ""
 "Dieser Dump sollte daher ausschließlich an einem sicheren Ort und\n"
 "verschlüsselt aufbewahrt werden."
 
-#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
+#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s ist kein aktives %s-Gerät."
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2706
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s ist kein aktives LUKS-Gerät, oder der Header fehlt."
 
-#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
+#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
 msgid "Option --header-backup-file is required."
 msgstr "Option »--header-backup-file« muss angegeben werden."
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2833
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s ist kein von cryptsetup verwaltetes Gerät."
 
-#: src/cryptsetup.c:2845
+#: src/cryptsetup.c:2844
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Die Geräteart »%s« kann nicht aufgefrischt werden"
 
-#: src/cryptsetup.c:2895
+#: src/cryptsetup.c:2894
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Unbekannte Art »%s« des Metadaten-Geräts."
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2896
 msgid "Command requires device and mapped name as arguments."
 msgstr "Dieser Befehl benötigt den Gerätenamen und den zugeordneten Namen als Argumente."
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL PSID: "
 msgstr "Geben Sie die OPAL-PSID ein: "
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL Admin password: "
 msgstr "Geben Sie das OPAL-Admin-Passwort ein: "
 
-#: src/cryptsetup.c:2923
+#: src/cryptsetup.c:2922
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "Warnung: Der GESAMTE Datenträger wird auf die Werkseinstellungen zurückgesetzt, und alle Daten gehen verloren. Fortsetzen?"
 
-#: src/cryptsetup.c:2966
+#: src/cryptsetup.c:2965
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2604,363 +2599,363 @@ msgstr ""
 "Diese Operation wird alle Schlüsselfächer auf Gerät »%s« löschen.\n"
 "Dadurch wird das Gerät unbrauchbar."
 
-#: src/cryptsetup.c:2973
+#: src/cryptsetup.c:2972
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Vorgang abgebrochen, die Schlüsselfächer wurden NICHT gesäubert.\n"
 
-#: src/cryptsetup.c:3012
+#: src/cryptsetup.c:3011
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Invalid LUKS type, only luks1 and luks2 are supported."
 
-#: src/cryptsetup.c:3028
+#: src/cryptsetup.c:3027
 #, c-format
 msgid "Device is already %s type."
 msgstr "Das Gerät hat bereits den Typ »%s«."
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:3034
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Diese Operation wird für »%s« ins Format »%s« umwandeln.\n"
 
-#: src/cryptsetup.c:3038
+#: src/cryptsetup.c:3037
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Vorgang abgebrochen, das Gerät wurde NICHT konvertiert.\n"
 
-#: src/cryptsetup.c:3078
+#: src/cryptsetup.c:3077
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Die Option --priority, --label oder --subsystem fehlt."
 
-#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
+#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d ist ungültig."
 
-#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
+#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d ist in Benutzung."
 
-#: src/cryptsetup.c:3127
+#: src/cryptsetup.c:3126
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Fehler beim Hinzufügen des LUKS2-Schlüsselring-Tokens %d."
 
-#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
+#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Token %d kann nicht dem Schlüsselfach %d zugeordnet werden."
 
-#: src/cryptsetup.c:3155
+#: src/cryptsetup.c:3154
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d wird gerade nicht verwendet."
 
-#: src/cryptsetup.c:3192
+#: src/cryptsetup.c:3191
 msgid "Failed to import token from file."
 msgstr "Token konnte nicht aus der Datei importiert werden."
 
-#: src/cryptsetup.c:3217
+#: src/cryptsetup.c:3216
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Auf Token %d kann nicht für den Export zugegriffen werden."
 
-#: src/cryptsetup.c:3230
+#: src/cryptsetup.c:3229
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d ist nicht dem Schlüsselfach %d zugeordnet."
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
+#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Token %d kann nicht vom Schlüsselfach %d losgelöst werden."
 
-#: src/cryptsetup.c:3298
+#: src/cryptsetup.c:3297
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Die Optionen --tcrypt-hidden, --tcrypt-system und --tcrypt-backup sind nur zusammen mit einem TCRYPT-Gerät erlaubt."
 
-#: src/cryptsetup.c:3301
+#: src/cryptsetup.c:3300
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Die Optionen --veracrypt und --disable-veracrypt werden nur für TCRYPT-kompatible Geräte unterstützt."
 
-#: src/cryptsetup.c:3304
+#: src/cryptsetup.c:3303
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Die Option --veracrypt-pim wird nur für VeraCrypt-kompatible Geräte unterstützt."
 
-#: src/cryptsetup.c:3308
+#: src/cryptsetup.c:3307
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Die Option --veracrypt-query-pim wird nur für VeraCrypt-kompatible Geräte unterstützt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3309
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Die Optionen --veracrypt-pim und --veracrypt-query-pim schließen sich gegenseitig aus."
 
-#: src/cryptsetup.c:3319
+#: src/cryptsetup.c:3318
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Die Option --persistent ist nicht mit --test-passphrase kombinierbar."
 
-#: src/cryptsetup.c:3322
+#: src/cryptsetup.c:3321
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Die Optionen --refresh und --test-passphrase schließen sich gegenseitig aus."
 
-#: src/cryptsetup.c:3325
+#: src/cryptsetup.c:3324
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Die Option --shared ist nur beim beim »open«-Befehl eines Plain-Gerätes erlaubt."
 
-#: src/cryptsetup.c:3328
+#: src/cryptsetup.c:3327
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Die Option --skip ist nur beim Öffnen von plain- und loopaes-Geräten erlaubt."
 
-#: src/cryptsetup.c:3331
+#: src/cryptsetup.c:3330
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Die Option --offset mit der Aktion Öffnen wird nur für einfache und loopaes-Geräte unterstützt."
 
-#: src/cryptsetup.c:3334
+#: src/cryptsetup.c:3333
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Die Option --tcrypt-hidden kann nicht mit --allow-discards kombiniert werden."
 
-#: src/cryptsetup.c:3338
+#: src/cryptsetup.c:3337
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Die Option \"Sektorgröße\" mit der Aktion \"Öffnen\" wird nur für einfache Geräte unterstützt."
 
-#: src/cryptsetup.c:3342
+#: src/cryptsetup.c:3341
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Die Option für große IV-Sektoren wird nur unterstützt, wenn das geöffnete Gerät Sektoren größer als 512 Bytes hat."
 
-#: src/cryptsetup.c:3347
+#: src/cryptsetup.c:3346
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Die Option --test-passphrase ist nur beim Öffnen von LUKS-, TCRYPT-, BITLK- und FVAULT2-Geräten erlaubt."
 
-#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
+#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Die Optionen --device-size und --size können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3353
+#: src/cryptsetup.c:3352
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Die Option »--unbound« ist nur beim »open«-Befehl eines LUKS-Gerätes erlaubt."
 
-#: src/cryptsetup.c:3356
+#: src/cryptsetup.c:3355
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Die Option »--unbound« kann nur in Kombination mit »--test-passphrase« verwendet werden."
 
-#: src/cryptsetup.c:3360
+#: src/cryptsetup.c:3359
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Die Option --volume-key-keyring kann nicht mit --hash oder --volume-key-file kombiniert werden."
 
-#: src/cryptsetup.c:3363
+#: src/cryptsetup.c:3362
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Beide --volume-key-file-Optionen müssen mit den entsprechenden --key-size-Optionen paarweise auftreten."
 
-#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Die Optionen --cancel-deferred und --deferred können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3388
+#: src/cryptsetup.c:3387
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Die Option »--active-name« ist nur auf LUKS2-Geräte anwendbar."
 
-#: src/cryptsetup.c:3391
+#: src/cryptsetup.c:3390
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Die Optionen »--active-name« und »--force-offline-reencrypt« können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3394
+#: src/cryptsetup.c:3393
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Die Optionen --new-volume-key-file und --keep-key können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3397
+#: src/cryptsetup.c:3396
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Die Optionen --new-volume-key-keyring und --keep-key können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
+#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
 msgid "Keyslot specification is required."
 msgstr "Das Schlüsselfach muss angegeben werden."
 
-#: src/cryptsetup.c:3413
+#: src/cryptsetup.c:3412
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Die Optionen --align-payload und --offset können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3416
+#: src/cryptsetup.c:3415
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Die Option --integrity-no-wipe ist nur für die »format«-Aktion mit Integritätserweiterung erlaubt."
 
-#: src/cryptsetup.c:3419
+#: src/cryptsetup.c:3418
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Nur eine der Optionen --use-[u]random ist erlaubt."
 
-#: src/cryptsetup.c:3427
+#: src/cryptsetup.c:3426
 msgid "Key size is required with --unbound option."
 msgstr "Die Option »--unbound« erfordert die Schlüsselgröße."
 
-#: src/cryptsetup.c:3447
+#: src/cryptsetup.c:3446
 msgid "Invalid token action."
 msgstr "Ungültige Token-Aktion."
 
-#: src/cryptsetup.c:3450
+#: src/cryptsetup.c:3449
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Der Parameter --key-description ist Pflicht für die Aktion »token add«."
 
-#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
+#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Die Aktion erfordert ein bestimmtes Token. Verwenden Sie den Parameter --token-id."
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3457
 msgid "Option --unbound is valid only with token add action."
 msgstr "Die Option »--unbound« kann nur zusammen mit der Aktion zum Hinzufügen eines Tokens verwendet werden."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3459
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Die Optionen --key-slot und --unbound können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3465
+#: src/cryptsetup.c:3464
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Die Aktion erfordert ein bestimmtes Schlüsselfach. Verwenden Sie den Parameter --key-slot."
 
-#: src/cryptsetup.c:3481
+#: src/cryptsetup.c:3480
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<Gerät> [--type <Art>] [<Name>]"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "Gerät als <Name> öffnen"
 
-#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
 #: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
 #: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<Name>"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "Gerät schließen (Zuordnung entfernen)"
 
-#: src/cryptsetup.c:3483 src/integritysetup.c:558
+#: src/cryptsetup.c:3482 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "Größe des aktiven Geräts ändern"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3483
 msgid "show device status"
 msgstr "Gerätestatus anzeigen"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <Algorithmus>]"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "benchmark cipher"
 msgstr "Verschlüsselungsalgorithmus benchmarken"
 
-#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
-#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
-#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
-#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
-#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
+#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
+#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
 msgid "<device>"
 msgstr "<Gerät>"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3485
 msgid "try to repair on-disk metadata"
 msgstr "Versuchen, die Metadaten auf dem Datenträger zu reparieren"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3486
 msgid "reencrypt LUKS2 device"
 msgstr "LUKS2-Gerät wiederverschlüsseln"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3487
 msgid "erase all keyslots (remove encryption key)"
 msgstr "Alle Schlüsselfächer löschen (Verschlüsselungsschlüssel entfernen)"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3488
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "Zwischen den Formaten LUKS und LUKS2 umwandeln"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3489
 msgid "set permanent configuration options for LUKS2"
 msgstr "Permanente Konfigurationsoptionen für LUKS2 festlegen"
 
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
 msgid "<device> [<new key file>]"
 msgstr "<Gerät> [<neue Schlüsseldatei>]"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3490
 msgid "formats a LUKS device"
 msgstr "Ein LUKS-Gerät formatieren"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3491
 msgid "add key to LUKS device"
 msgstr "Schlüssel zu LUKS-Gerät hinzufügen"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
 msgid "<device> [<key file>]"
 msgstr "<Gerät> [<Schlüsseldatei>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3492
 msgid "removes supplied key or key file from LUKS device"
 msgstr "Entfernt bereitgestellten Schlüssel oder Schlüsseldatei vom LUKS-Gerät"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3493
 msgid "changes supplied key or key file of LUKS device"
 msgstr "Ändert den angegebenen Schlüssel oder die Schlüsseldatei des LUKS-Geräts"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3494
 msgid "converts a key to new pbkdf parameters"
 msgstr "Wandelt einen Schlüssel in neue PBKDF-Parameter um"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "<device> <key slot>"
 msgstr "<Gerät> <Schlüsselfach>"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "Löscht Schlüssel mit Nummer <Schlüsselfach> vom LUKS-Gerät"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3496
 msgid "print UUID of LUKS device"
 msgstr "UUID des LUKS-Geräts ausgeben"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3497
 msgid "tests <device> for LUKS partition header"
 msgstr "Testet <Gerät> auf Header einer LUKS-Partition"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3498
 msgid "dump LUKS partition information"
 msgstr "LUKS-Partitionsinformationen ausgeben"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3499
 msgid "dump TCRYPT device information"
 msgstr "TCRYPT-Geräteinformationen ausgeben"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3500
 msgid "dump BITLK device information"
 msgstr "BITLK-Geräteinformationen ausgeben"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3501
 msgid "dump FVAULT2 device information"
 msgstr "VFAULT2-Geräteinformationen ausgeben"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3502
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "LUKS-Gerät in Ruhezustand versetzen und alle Schlüssel auslöschen (alle IOs werden eingefroren)"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3503
 msgid "Resume suspended LUKS device"
 msgstr "LUKS-Gerät aus dem Ruhezustand aufwecken"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3504
 msgid "Backup LUKS device header and keyslots"
 msgstr "Header und Schlüsselfächer eines LUKS-Geräts sichern"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3505
 msgid "Restore LUKS device header and keyslots"
 msgstr "Header und Schlüsselfächer eines LUKS-Geräts wiederherstellen"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <Gerät>"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "Manipulate LUKS2 tokens"
 msgstr "LUKS2-Token manipulieren"
 
-#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2968,7 +2963,7 @@ msgstr ""
 "\n"
 "<Aktion> ist eine von:\n"
 
-#: src/cryptsetup.c:3532
+#: src/cryptsetup.c:3531
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2980,7 +2975,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3536
+#: src/cryptsetup.c:3535
 #, c-format
 msgid ""
 "\n"
@@ -2995,7 +2990,7 @@ msgstr ""
 "<Schlüsselfach> ist die Nummer des zu verändernden LUKS-Schlüsselfachs\n"
 "<Schlüsseldatei> optionale Schlüsseldatei für den neuen Schlüssel der »luksAddKey«-Aktion\n"
 
-#: src/cryptsetup.c:3543
+#: src/cryptsetup.c:3542
 #, c-format
 msgid ""
 "\n"
@@ -3004,7 +2999,7 @@ msgstr ""
 "\n"
 "Vorgegebenes festeingebautes Metadatenformat ist %s (für luksFormat-Aktion).\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3547
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3012,12 +3007,12 @@ msgstr ""
 "\n"
 "Die Plugin-Unterstützung für externe LUKS2-Tokens ist aktiviert.\n"
 
-#: src/cryptsetup.c:3549
+#: src/cryptsetup.c:3548
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Pfad des Plugins für externe LUKS2-Token: %s.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3550
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3025,7 +3020,7 @@ msgstr ""
 "\n"
 "Die Plugin-Unterstützung für externe LUKS2-Tokens ist deaktiviert.\n"
 
-#: src/cryptsetup.c:3555
+#: src/cryptsetup.c:3554
 #, c-format
 msgid ""
 "\n"
@@ -3042,7 +3037,7 @@ msgstr ""
 "Vorgabe-PBKDF für LUKS2: %s\n"
 "\tIterationszeit: %d, benötigter Speicher: %d kB, parallele Threads: %d\n"
 
-#: src/cryptsetup.c:3566
+#: src/cryptsetup.c:3565
 #, c-format
 msgid ""
 "\n"
@@ -3057,122 +3052,122 @@ msgstr ""
 "\tplain: %s, Schlüssel: %d Bits, Passphrase-Hashen: %s\n"
 "\tLUKS: %s, Schlüssel: %d Bits, LUKS-Header-Hashen: %s, Zufallszahlengenerator: %s\n"
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3574
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Standard-Schlüsselgröße mit XTS-Modus (zwei interne Schlüssel) wird verdoppelt.\n"
 
-#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: Benötigt %s als Argumente"
 
-#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Schlüsselfach ist ungültig."
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3660
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Die Gerätegröße muss ein Vielfaches von 512-Byte-Sektoren sein."
 
-#: src/cryptsetup.c:3666
+#: src/cryptsetup.c:3665
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Ungültige Angabe der Maximalgröße für die Wiederverschlüsselungs-Hotzone."
 
-#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
+#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Schlüsselgröße muss ein Vielfaches von 8 Bit sein"
 
-#: src/cryptsetup.c:3687
+#: src/cryptsetup.c:3686
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Es können maximal 2 Schlüsselgrößen angegeben werden."
 
-#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
+#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Es können maximal %d Laufwerksschlüssel-Angaben verarbeitet werden."
 
-#: src/cryptsetup.c:3739
+#: src/cryptsetup.c:3738
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Es können maximal %d Schlüsselbund-Verknüpfungsangaben verarbeitet werden."
 
-#: src/cryptsetup.c:3748
+#: src/cryptsetup.c:3747
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Die maximale Verkleinerungsgröße ist 1 GiB."
 
-#: src/cryptsetup.c:3751
+#: src/cryptsetup.c:3750
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Die verkleinerte Größe muss ein Vielfaches von 512-Byte-Sektoren sein."
 
-#: src/cryptsetup.c:3768
+#: src/cryptsetup.c:3767
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Die Option --priority kann nur »ignore/normal/prefer« sein."
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Diese Hilfe anzeigen"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Kurze Aufrufsyntax anzeigen"
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Paketversion ausgeben"
 
-#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Hilfe-Optionen:"
 
-#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPTION...] <Aktion> <aktionsabhängig>"
 
-#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Argument <Aktion> fehlt."
 
-#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Unbekannte Aktion."
 
-#: src/cryptsetup.c:3929
+#: src/cryptsetup.c:3928
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Die Option --key-file wirkt stärker als das angegebene Schlüsseldatei-Argument."
 
-#: src/cryptsetup.c:3935
+#: src/cryptsetup.c:3934
 msgid "Only one --key-file argument is allowed."
 msgstr "Die Option --key-file ist nur einmal erlaubt."
 
-#: src/cryptsetup.c:3940
+#: src/cryptsetup.c:3939
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Passwortbasierte Schlüsselableitungsfunktion (PBKDF) kann nur »pbkdf2« oder »argon2i/argon2id« sein."
 
-#: src/cryptsetup.c:3945
+#: src/cryptsetup.c:3944
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Bei PBKDF darf nur entweder die Anzahl der Durchläufe oder die Zeitbegrenzung angegeben werden."
 
-#: src/cryptsetup.c:3950
+#: src/cryptsetup.c:3949
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Laufwerkschlüssel kann nicht mit einem Schlüsselbund verbunden werden, solange der Schlüsselbund deaktiviert ist."
 
-#: src/cryptsetup.c:3955
+#: src/cryptsetup.c:3954
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Die Beschreibung des Schlüsselbundes kann nicht verwendet werden, wenn der Schlüsselbund deaktiviert ist."
 
-#: src/cryptsetup.c:3960
+#: src/cryptsetup.c:3959
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Inline-Integrität muss zusammen mit der Option »--integrity« benutzt werden."
 
-#: src/cryptsetup.c:3971
+#: src/cryptsetup.c:3970
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Die Optionen --keyslot-cipher und --keyslot-keysize können nur zusammen benutzt werden."
 
-#: src/cryptsetup.c:3979
+#: src/cryptsetup.c:3978
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Es wird keine Aktion ausgeführt. Aufgerufen mit der Option --test-args.\n"
 
-#: src/cryptsetup.c:3992
+#: src/cryptsetup.c:3991
 msgid "Cannot disable metadata locking."
 msgstr "Fehler beim Deaktivieren der Metadaten-Dateisperre."
 
@@ -4361,6 +4356,12 @@ msgstr "Authentifizierung mit öffentlichem Schlüssel ist auf dem Host nicht er
 msgid "Public key authentication error: "
 msgstr "Fehler bei der Authentifizierung mit öffentlichem Schlüssel: "
 
+#~ msgid "Required kernel crypto interface not available."
+#~ msgstr "Die benötigte Crypto-Kernel-Schnittstelle ist nicht verfügbar."
+
+#~ msgid "Ensure you have algif_skcipher kernel module loaded."
+#~ msgstr "Stellen Sie sicher, dass das Kernelmodul »algif_skcipher« geladen ist."
+
 #, c-format
 #~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
 #~ msgstr "Fehler beim Lesen oder Validieren der BITLK-FVE-Metadaten-Kopie Nummer %d von »%s«."

From e605a5e485da58f3ffe9a4c90c4c2eeea4ff918d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20Marchal?= <fmarchal@perso.be>
Date: Sat, 4 Jul 2026 18:12:56 +0200
Subject: [PATCH 162/244] po: update fr.po (from translationproject.org)

---
 po/fr.po | 1019 +++++++++++++++++++++++++++---------------------------
 1 file changed, 510 insertions(+), 509 deletions(-)

diff --git a/po/fr.po b/po/fr.po
index 5b7cadf6b..5acce7be2 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -7,10 +7,10 @@
 # Frédéric Marchal <fmarchal@perso.be>, 2026.
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-03-30 14:18+0200\n"
-"PO-Revision-Date: 2026-03-30 17:19+0200\n"
+"POT-Creation-Date: 2026-06-29 21:30+0200\n"
+"PO-Revision-Date: 2026-06-30 16:12+0200\n"
 "Last-Translator: Frédéric Marchal <fmarchal@perso.be>\n"
 "Language-Team: French <traduc@traduc.org>\n"
 "Language: fr\n"
@@ -79,7 +79,7 @@ msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Le recalcule automatique des balises de sécurité demandés n'est pas supporté."
 
 #: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2781
+#: lib/luks2/luks2_json_metadata.c:2799
 msgid "Discard/TRIM is not supported."
 msgstr "Discard/TRIM n'est pas supporté."
 
@@ -125,665 +125,665 @@ msgstr "La qualité du générateur aléatoire RNG demandé est inconnue."
 msgid "Error reading from RNG."
 msgstr "Erreur en lecture du générateur aléatoire RNG "
 
-#: lib/setup.c:248
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "Le support de OPAL est désactivé dans libcryptsetup."
 
-#: lib/setup.c:250
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "Le périphérique %s ou le noyau ne supporte pas le chiffrement OPAL."
 
-#: lib/setup.c:266
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "Impossible d'initialiser le moteur aléatoire RNG pour le chiffrement."
 
-#: lib/setup.c:272
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "Impossible d'initialiser le moteur de chiffrement."
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "L'algorithme de hachage %s n'est pas supporté."
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "Erreur de traitement de clé (valeur hachage %s)."
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Impossible de déterminer le type de périphérique. Activation du périphérique incompatible ?"
 
-#: lib/setup.c:395 lib/setup.c:4160
+#: lib/setup.c:398 lib/setup.c:4177
 msgid "This operation is supported only for LUKS device."
 msgstr "Cette opération n'est possible que pour les périphériques LUKS."
 
-#: lib/setup.c:432
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "Cette opération n'est possible que pour les périphériques LUKS2."
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "Tous les emplacements de clés sont utilisés."
 
-#: lib/setup.c:500
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "L'emplacement de clé %d n'est pas valide, merci d'en choisir un entre 0 et %d."
 
-#: lib/setup.c:506
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "L'emplacement de clé %d est utilisé, merci d'en sélectionner un autre."
 
-#: lib/setup.c:531 lib/setup.c:3875
+#: lib/setup.c:534 lib/setup.c:3878
 msgid "Device size is not aligned to device logical block size."
 msgstr "La taille du périphérique n'est pas alignée avec la taille d'un bloc logique du périphérique."
 
-#: lib/setup.c:628
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "En-tête détecté mais le périphérique %s est trop petit."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
-#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Cette opération n'est pas supportée pour ce type de périphérique."
 
-#: lib/setup.c:674
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "Opération illégale avec une re-chiffrement en cours."
 
-#: lib/setup.c:806
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Échec lors du retour en arrière des métadonnées LUKS2 en mémoire."
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
-#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
-#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
-#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
+#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
+#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
+#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "%s n'est pas un périphérique LUKS valide."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "La version %d de LUKS n'est pas supportée."
 
-#: lib/setup.c:1270
+#: lib/setup.c:1273
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Aucun motif connu d'algorithme de chiffrement n'a été détecté pour le périphérique actif %s."
 
-#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5816
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
 #, c-format
 msgid "Device %s is not active."
 msgstr "Le périphérique %s n'est pas activé."
 
-#: lib/setup.c:1532
+#: lib/setup.c:1535
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Le périphérique sous-jacent pour le périphérique chiffré %s a disparu."
 
-#: lib/setup.c:1614
+#: lib/setup.c:1617
 msgid "Invalid plain crypt parameters."
 msgstr "Paramètres de chiffrement non valides."
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1622 lib/setup.c:2672
 msgid "Invalid key size."
 msgstr "La taille de la clé n'est pas valide."
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
 msgid "UUID is not supported for this crypt type."
 msgstr "le UUID n'est pas supporté avec ce type de chiffrement."
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Un périphérique avec des métadonnées détachées n'est pas supporté avec ce type de chiffrement."
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
 msgid "Unsupported encryption sector size."
 msgstr "Taille de secteur de chiffrement non supportée."
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
 msgid "Device size is not aligned to requested sector size."
 msgstr "La taille du périphérique n'est pas alignée avec la taille de secteur demandée."
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
 msgid "Can't format LUKS without device."
 msgstr "Impossible de formater en LUKS sans périphérique."
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1707 lib/setup.c:1959
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Le périphérique Zoned %s ne peut pas être utilisé pour l'en-tête LUKS."
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "L'alignement de données demandé n'est pas compatible avec le décalage des données."
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1754 lib/setup.c:1984
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "ATTENTION : Un périphérique DAX peut corrompre les données car il ne garanti pas la mise à jour atomique des secteurs.\n"
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Impossible d'effacer l'en-tête du périphérique %s."
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1805 lib/setup.c:2164
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Le périphérique %s est trop petit pour l'activation, il ne reste pas d'espace pour les données.\n"
 
-#: lib/setup.c:1843
+#: lib/setup.c:1846
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "La clé de volume est trop petite pour chiffrer avec les extensions d'intégrité."
 
-#: lib/setup.c:1847
+#: lib/setup.c:1850
 msgid "Integrity key size is too small."
 msgstr "La taille de la clé d'intégrité est trop petite."
 
-#: lib/setup.c:1856
+#: lib/setup.c:1859
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Le chiffrement %s-%s (clé de %zd bits) n'est pas disponible."
 
-#: lib/setup.c:1897
+#: lib/setup.c:1900
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "AVERTISSEMENT: L'activation du périphérique va échouer, dm-crypt ne supporte pas la taille de secteur de chiffrement demandée.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
-#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4497
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Le périphérique %s est trop petit."
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Impossible de formater le périphérique %s qui est en cours d'utilisation."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Impossible de formater le périphérique %s. Permission refusée."
 
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Impossible de formater l'intégrité du périphérique %s."
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2151 lib/setup.c:2629
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Impossible de formater le périphérique %s"
 
-#: lib/setup.c:2191
+#: lib/setup.c:2194
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Impossible d'obtenir les paramètres d'alignement de OPAL."
 
-#: lib/setup.c:2203
+#: lib/setup.c:2206
 msgid "Bogus OPAL logical block size."
 msgstr "Taille de bloc logique OPAL incorrecte."
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "La taille de bloc logique OPAL est différentes de la taille de bloc du périphérique."
 
-#: lib/setup.c:2214
+#: lib/setup.c:2217
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "L'offset de données demandé n'est pas compatible avec la taille de bloc de OPAL."
 
-#: lib/setup.c:2221
+#: lib/setup.c:2224
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "L'alignement de données demandé n'est pas compatible avec l'alignement de OPAL."
 
-#: lib/setup.c:2241
+#: lib/setup.c:2244
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "L'offset de données ne satisfait pas les exigences d'alignement de OPAL."
 
-#: lib/setup.c:2254
+#: lib/setup.c:2257
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "L'alignement de données demandé les exigences de la plage d'alignement du verrouillage."
 
-#: lib/setup.c:2468
+#: lib/setup.c:2471
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "La taille du périphérique est compensée avec %<PRIu64> secteurs pour l'aligner avec la granularité de l'alignement de OPAL."
 
-#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Impossible d'acquérir le verrou OPAL sur le périphérique %s."
 
-#: lib/setup.c:2538
+#: lib/setup.c:2541
 msgid "Incorrect OPAL Admin key."
 msgstr "Clé admin OPAL incorrecte."
 
-#: lib/setup.c:2540
+#: lib/setup.c:2543
 msgid "Cannot setup OPAL segment."
 msgstr "Impossible de configurer le segment OPAL."
 
-#: lib/setup.c:2622
+#: lib/setup.c:2625
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Impossible de formater le périphérique %s. Le périphérique OPAL semble maintenant être complètement protégé contre l'écriture."
 
-#: lib/setup.c:2624
+#: lib/setup.c:2627
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Il s'agit peut-être d'un bogue du micro logiciel. Exécutez une réinitialisation PSID OPAL et reconnectez pour récupération."
 
-#: lib/setup.c:2644
+#: lib/setup.c:2647
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "La réinitialisation de la plage %d de verrouillage du périphérique %s a échouée."
 
-#: lib/setup.c:2664
+#: lib/setup.c:2667
 msgid "Can't format LOOPAES without device."
 msgstr "Impossible de formater LOOPAES sans périphérique."
 
-#: lib/setup.c:2709
+#: lib/setup.c:2712
 msgid "Can't format VERITY without device."
 msgstr "Impossible de formater VERITY sans périphérique."
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2723 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Type de hachage VERITY %d non supporté."
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2729 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Taille de bloc VERITY non supportée."
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2734 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Décalage de hachage VERITY non supporté."
 
-#: lib/setup.c:2736
+#: lib/setup.c:2739
 msgid "Unsupported VERITY FEC offset."
 msgstr "Décalage VERITY FEC non supporté."
 
-#: lib/setup.c:2760
+#: lib/setup.c:2763
 msgid "Data area overlaps with hash area."
 msgstr "La zone de données recouvre la zone de hachage."
 
-#: lib/setup.c:2785
+#: lib/setup.c:2788
 msgid "Hash area overlaps with FEC area."
 msgstr "La zone de hachage recouvre la zone FEC."
 
-#: lib/setup.c:2792
+#: lib/setup.c:2795
 msgid "Data area overlaps with FEC area."
 msgstr "La zone de données recouvre la zone FEC."
 
-#: lib/setup.c:2884
+#: lib/setup.c:2887
 msgid "Integrity key size mismatch."
 msgstr "Désaccord avec la taille de la clé."
 
-#: lib/setup.c:2935
+#: lib/setup.c:2938
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "ATTENTION : La taille %d demandée pour l'étiquette est différente de la taille de sortie de %s (%d octets).\n"
 
-#: lib/setup.c:3048 lib/setup.c:3150
+#: lib/setup.c:3051 lib/setup.c:3153
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Type de périphérique %s demandé inconnu ou non supporté."
 
-#: lib/setup.c:3064
+#: lib/setup.c:3067
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Le périphérique %s ne fourni pas de champs de données d'intégrité en ligne."
 
-#: lib/setup.c:3070
+#: lib/setup.c:3073
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "La taille d'étiquette en ligne %<PRIu32> [octets] est plus grande que %<PRIu32> fournie par le périphérique %s."
 
-#: lib/setup.c:3085
+#: lib/setup.c:3088
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Le secteur doit être le même que le secteur matériel du périphérique (%zu octets)."
 
-#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Paramètres non supportés sur le périphérique %s."
 
-#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Paramètres non concordants sur le périphérique %s."
 
-#: lib/setup.c:3647
+#: lib/setup.c:3650
 msgid "Crypt devices mismatch."
 msgstr "Désaccord entre les périphériques crypt."
 
-#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Impossible de recharger le périphérique %s."
 
-#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
-#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Impossible de suspendre le périphérique %s."
 
-#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
-#: lib/luks2/luks2_reencrypt.c:4240
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Impossible de redémarrer le périphérique %s."
 
-#: lib/setup.c:3717
+#: lib/setup.c:3720
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Erreur fatale en rechargeant le périphérique %s (au dessus du périphérique %s)"
 
-#: lib/setup.c:3720 lib/setup.c:3722
+#: lib/setup.c:3723 lib/setup.c:3725
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Impossible de basculer le périphérique %s en dm-error."
 
-#: lib/setup.c:3765
+#: lib/setup.c:3768
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Impossible de redimensionner le périphérique LUKS2 avec une taille statique."
 
-#: lib/setup.c:3770
+#: lib/setup.c:3773
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Le redimensionnement d'un périphérique LUKS2 avec un protection d'intégrité n'est pas supporté."
 
-#: lib/setup.c:3816
+#: lib/setup.c:3819
 msgid "Cannot resize loop device."
 msgstr "Impossible de redimensionner le périphérique loopback."
 
-#: lib/setup.c:3860
+#: lib/setup.c:3863
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "ATTENTION: La taille maximale est déjà définie ou le noyau ne supporte pas le redimensionnement.\n"
 
-#: lib/setup.c:3926
+#: lib/setup.c:3929
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Le redimensionnement a échoué, le noyau ne le supporte pas."
 
-#: lib/setup.c:3958
+#: lib/setup.c:3961
 msgid "Do you really want to change UUID of device?"
 msgstr "Voulez vous réellement changer l'UUID du périphérique ?"
 
-#: lib/setup.c:4050
+#: lib/setup.c:4053
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Le fichier de sauvegarde de l'en-tête ne contient pas d'en-tête compatible LUKS."
 
-#: lib/setup.c:4143
+#: lib/setup.c:4160
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Le volume %s n'est pas actif."
 
-#: lib/setup.c:4198
+#: lib/setup.c:4215
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Le volume %s est déjà suspendu."
 
-#: lib/setup.c:4224
+#: lib/setup.c:4241
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Le périphérique %s ne supporte pas la suspension."
 
-#: lib/setup.c:4226 lib/setup.c:4234
+#: lib/setup.c:4243 lib/setup.c:4251
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Erreur lors de la suspension du périphérique %s."
 
-#: lib/setup.c:4249
+#: lib/setup.c:4266
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Le périphérique %s a été suspendu mais le périphérique matériel OPAL ne sait pas être verrouillé."
 
-#: lib/setup.c:4280 lib/setup.c:4457
+#: lib/setup.c:4297 lib/setup.c:4491
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Le périphérique %s ne supporte pas la remise en service."
 
-#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Erreur lors de la remise en service du périphérique %s."
 
-#: lib/setup.c:4301
+#: lib/setup.c:4335
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Impossible de délier la clé du porte-clé utilisateur spécifié."
 
-#: lib/setup.c:4423 lib/setup.c:5603
+#: lib/setup.c:4457 lib/setup.c:5637
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Impossible de lier la clé de volume dans le porte-clé utilisateur."
 
-#: lib/setup.c:4522 src/cryptsetup.c:2721
+#: lib/setup.c:4556 src/cryptsetup.c:2720
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Le volume %s n'est pas suspendu."
 
-#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
-#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
+#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
+#: src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Ceci n'est pas la clé du volume."
 
-#: lib/setup.c:4787
+#: lib/setup.c:4821
 msgid "Failed to swap new key slot."
 msgstr "Nouvel emplacement de clé impossible à échanger."
 
-#: lib/setup.c:4885
+#: lib/setup.c:4919
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "L'emplacement de clé %d n'est pas valide."
 
-#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
-#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
+#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
+#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "L'emplacement de clé %d n'est pas actif."
 
-#: lib/setup.c:4910
+#: lib/setup.c:4944
 msgid "Device header overlaps with data area."
 msgstr "L'en-tête du périphérique recouvre la zone de données."
 
-#: lib/setup.c:5131
+#: lib/setup.c:5165
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Re-chiffrement en cours. Impossible d'activer le périphérique."
 
-#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3725
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Impossible d'obtenir le verrou de re-chiffrement."
 
-#: lib/setup.c:5155
+#: lib/setup.c:5189
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "La récupération du rechiffrement LUKS2 avec la/les clé(s) de volume a échoué."
 
-#: lib/setup.c:5291
+#: lib/setup.c:5325
 #, c-format
 msgid "Device %s already exists."
 msgstr "Le périphérique %s existe déjà."
 
-#: lib/setup.c:5298
+#: lib/setup.c:5332
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Impossible d'utiliser le périphérique %s, le nom est invalide ou est toujours utilisé."
 
-#: lib/setup.c:5310
+#: lib/setup.c:5344
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Les clés de rechiffrement du volume ne correspondent pas au volume."
 
-#: lib/setup.c:5327
+#: lib/setup.c:5361
 msgid "Incorrect volume key specified for plain device."
 msgstr "Clé de volume incorrecte pour le périphérique en clair."
 
-#: lib/setup.c:5353 lib/setup.c:5414
+#: lib/setup.c:5387 lib/setup.c:5448
 msgid "Device type is not properly initialized."
 msgstr "Type de périphérique improprement initialisé."
 
-#: lib/setup.c:5452
+#: lib/setup.c:5486
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Le porte-clé du noyau n'est pas supporté par ce noyau."
 
-#: lib/setup.c:5456
+#: lib/setup.c:5490
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Le porte-clé du noyau est manquant : il est requis pour passer une signature au noyau."
 
-#: lib/setup.c:5511
+#: lib/setup.c:5545
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Impossible d'utiliser la clé %s du porte clé."
 
-#: lib/setup.c:5724
+#: lib/setup.c:5758
 msgid "Incorrect root hash specified for verity device."
 msgstr "Hachage racine incorrect spécifié pour le périphérique verity."
 
-#: lib/setup.c:5765 lib/setup.c:5790
+#: lib/setup.c:5799 lib/setup.c:5824
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL ne supporte pas la désactivation différée."
 
-#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Le périphérique %s est toujours occupé."
 
-#: lib/setup.c:5798
+#: lib/setup.c:5832
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Impossible d'annuler la suppression différée du périphérique %s."
 
-#: lib/setup.c:5820
+#: lib/setup.c:5854
 #, c-format
 msgid "Invalid device %s."
 msgstr "Le périphérique %s n'est pas valide."
 
-#: lib/setup.c:5967
+#: lib/setup.c:6001
 msgid "Volume key buffer too small."
 msgstr "Le tampon de la clé du volume est trop petit."
 
-#: lib/setup.c:5978
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique LUKS2."
 
-#: lib/setup.c:5987
+#: lib/setup.c:6021
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique LUKS1."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6035
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Impossible de récupérer la clé du volume pour ce périphérique de type « plain »."
 
-#: lib/setup.c:6009
+#: lib/setup.c:6043
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Impossible de récupérer le hachage racine pour le périphérique verity."
 
-#: lib/setup.c:6018
+#: lib/setup.c:6052
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique BITLK."
 
-#: lib/setup.c:6023
+#: lib/setup.c:6057
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique FVAULT2."
 
-#: lib/setup.c:6025
+#: lib/setup.c:6059
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Cette opération n'est pas possible pour le périphérique chiffré %s."
 
-#: lib/setup.c:6210 lib/setup.c:6221
+#: lib/setup.c:6244 lib/setup.c:6255
 msgid "Dump operation is not supported for this device type."
 msgstr "L'opération de vidage n'est pas supportée pour ce type de périphérique."
 
-#: lib/setup.c:6601
+#: lib/setup.c:6635
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Le décalage des données n'est pas un multiple de %u octets."
 
-#: lib/setup.c:6909
+#: lib/setup.c:6943
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Impossible de convertir le périphérique %s qui est toujours en cours d'utilisation."
 
-#: lib/setup.c:7217 lib/setup.c:7361
+#: lib/setup.c:7251 lib/setup.c:7406
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Échec de l'affectation de l'emplacement de clé %u pour la nouvelle clé de volume."
 
-#: lib/setup.c:7241
+#: lib/setup.c:7275
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Échec de l'initialisation des paramètres par défaut des emplacement de clé LUKS2."
 
-#: lib/setup.c:7247
+#: lib/setup.c:7281
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Échec de l'affectation de l'emplacement de clé %d aux résumé."
 
-#: lib/setup.c:7478
+#: lib/setup.c:7523
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Impossible d'ajouter un emplacement de clé, tous les emplacements sont désactivés et aucune clé n'a été fournie pour ce volume."
 
-#: lib/setup.c:7551 lib/verity/verity.c:333
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Impossible de charger la clé dans le porte-clé du noyau."
 
-#: lib/setup.c:7742
+#: lib/setup.c:7807
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Impossible de trouver le porte-clé décrit par « %s »."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7872
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Erreur lors de l'acquisition du verrou global de sérialisation des accès strictes à la mémoire"
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "Impossible d'ouvrir le fichier de clef."
 
-#: lib/utils.c:212
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "Impossible de lire le fichier de clé depuis un terminal."
 
-#: lib/utils.c:228
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "Impossible d'exécuter « stat » sur le fichier de clef."
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "Impossible de sauter au décalage demandé dans le fichier de clé."
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "Plus assez de mémoire lors de la lecture de la phrase secrète."
 
-#: lib/utils.c:286
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "Erreur de lecture de la phrase secrète."
 
-#: lib/utils.c:303
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "Rien à lire en entrée."
 
-#: lib/utils.c:310
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "Taille max. de fichier de clé dépassée."
 
-#: lib/utils.c:315
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "Impossible de lire la quantité de données demandée."
 
@@ -964,7 +964,7 @@ msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "La spécification du chiffrement devrait être au format [chiffrement]-[mode]-[iv]."
 
 #: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
 #: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
@@ -978,13 +978,13 @@ msgstr "Échec lors de l'ouverture du périphérique de stockage temporaire de c
 msgid "Failed to access temporary keystore device."
 msgstr "Impossible d'accéder au périphérique de stockage temporaire de clés."
 
-#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "Erreur E/S pendant le chiffrement de l'emplacement de clé."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
@@ -995,7 +995,7 @@ msgstr "Erreur E/S pendant le chiffrement de l'emplacement de clé."
 msgid "Cannot open device %s."
 msgstr "Impossible d'ouvrir le périphérique %s."
 
-#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "Erreur E/S pendant le déchiffrement de l'emplacement de clé."
 
@@ -1085,7 +1085,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Valeur hachée du chiffrement réparée vers des minuscules (%s)."
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "L'algorithme de hachage LUKS demandé (%s) n'est pas supporté."
@@ -1132,7 +1132,7 @@ msgstr "Le mode de chiffrement LUKS %s n'est pas valide."
 msgid "LUKS hash %s is invalid."
 msgstr "La valeur hachée LUKS %s n'est pas valide."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
 msgid "No known problems detected for LUKS header."
 msgstr "Aucun problème connu détecté pour l'en-tête LUKS."
 
@@ -1146,50 +1146,50 @@ msgstr "Erreur lors de la mise à jour de l'en-tête LUKS sur le périphérique
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Erreur lors de la relecture de l'en-tête LUKS après la mise à jour sur le périphérique %s."
 
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:750
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "L'offset des données d'un en-tête LUKS doit être soit 0 ou soit plus grand que la taille de l'en-tête."
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:701
 msgid "Wrong LUKS UUID format provided."
 msgstr "Mauvais format fourni pour le UUID LUKS."
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Impossible de créer un en-tête LUKS : échec lors de la lecture de l'aléa."
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Impossible de créer un en-tête LUKS : le résumé (« digest ») de l'en-tête a échoué (en utilisant l'algorithme de hachage %s)."
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "L'emplacement de clé %d est activé, effacez le d'abord."
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Le matériel de l'emplacement de clé %d a trop peu de bandes. L'en-tête a-t-il été modifié ?"
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Débordement de la valeur d'itération de PBKDF2."
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Impossible d'ouvrir l'emplacement de clé (en utilisant le hachage %s)."
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "L'emplacement de clé %d n'est pas valide, merci de sélectionner un emplacement entre 0 et %d."
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Impossible d'effacer de façon sécurisée le périphérique %s."
@@ -1210,56 +1210,48 @@ msgstr "Fichier de clé incompatible pour boucle « loop-AES »."
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "Le noyau ne supporte pas les associations de type boucle « loop-AES »."
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "Erreur lors de la lecture du fichier de clé %s."
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "Longueur maximum de la phrase secrète TCRYPT (%zu) dépassée."
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "L'algorithme de hachage PBKDF2 %s n'est pas supporté, ignoré."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
-msgid "Required kernel crypto interface not available."
-msgstr "L'interface du noyau requise pour le chiffrement n'est pas disponible."
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "Vérifiez que le module du noyau algif_skcipher est chargé."
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "L'activation n'est pas supportée pour des secteurs de taille %d."
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "Le noyau ne supporte pas l'activation pour ce mode TCRYPT historique."
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "Activation du chiffrement du système TCRYPT sur la partition %s."
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:819
 msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
 msgstr "Impossible de déterminer le décalage de la partition système TCRYPT, la zone de chiffrement entière est activée."
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:828
 msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
 msgstr "Impossible de déterminer le décalage de la partition système TCRYPT, le périphérique est activé comme une partition système."
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "Le noyau ne supporte pas les associations de type TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:1146
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "Cette fonction n'est pas supportée sans le chargement de l'en-tête TCRYPT."
 
@@ -1612,8 +1604,7 @@ msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "ATTENTION: La taille de la zone des emplacements de clés LUKS2 est devenue %<PRIu64> octets.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Impossible d'acquérir le verrou de lecture sur le périphérique %s."
@@ -1673,79 +1664,79 @@ msgstr ""
 msgid "Ignored unknown flag %s."
 msgstr "Fanion inconnu %s ignoré."
 
-#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Clé manquante pour le segment %u de dm-crypt"
 
-#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Impossible de définir le segment dm-crypt."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Impossible de définir le segment dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Aucun motif connu d'algorithme de chiffrement n'a été détecté dans l'en-tête LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:2691
+#: lib/luks2/luks2_json_metadata.c:2709
 msgid "OPAL device must have static device size."
 msgstr "Un périphérique OPAL doit avoir une taille de périphérique statique."
 
-#: lib/luks2/luks2_json_metadata.c:2711
+#: lib/luks2/luks2_json_metadata.c:2729
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Un périphérique OPAL chiffré avec intégrité doit être plus petit que la plage de verrouillage."
 
-#: lib/luks2/luks2_json_metadata.c:2716
+#: lib/luks2/luks2_json_metadata.c:2734
 msgid "OPAL device must have same size as locking range."
 msgstr "Un périphérique OPAL doit avoir la même taille que la plage de verrouillage."
 
-#: lib/luks2/luks2_json_metadata.c:2736
+#: lib/luks2/luks2_json_metadata.c:2754
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Le périphérique OPAL %s est déjà déverrouillé.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2775
+#: lib/luks2/luks2_json_metadata.c:2793
 msgid "Unsupported device integrity configuration."
 msgstr "Configuration d'intégrité du périphérique non supportée."
 
-#: lib/luks2/luks2_json_metadata.c:2791
+#: lib/luks2/luks2_json_metadata.c:2809
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Les secteurs de données fournis sont inattendus pour le périphérique dm-integrity sous-jacent."
 
-#: lib/luks2/luks2_json_metadata.c:2886
+#: lib/luks2/luks2_json_metadata.c:2911
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Re-chiffrement en cours. Le périphérique ne peut être désactivé."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Échec du remplacement du périphérique suspendu %s avec la cible dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Le périphérique %s a été désactivé mais le périphérique matériel OPAL ne sait pas être verrouillé."
 
-#: lib/luks2/luks2_json_metadata.c:3020
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Des exigences LUKS2 non rencontrées ont été détectées."
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3053
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Opération incompatible avec un périphérique marqué pour le rechiffrement historique. Abandon."
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3055
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Opération incompatible avec un périphérique marqué pour le rechiffrement LUKS2. Abandon."
 
-#: lib/luks2/luks2_json_metadata.c:3032
+#: lib/luks2/luks2_json_metadata.c:3057
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Opération incompatible avec un périphérique utilisant OPAL. Abandon."
 
-#: lib/luks2/luks2_json_metadata.c:3034
+#: lib/luks2/luks2_json_metadata.c:3059
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Opération incompatible avec un périphérique utilisant les étiquettes HW. Abandon."
 
@@ -1757,22 +1748,22 @@ msgstr "Pas assez de mémoire disponible pour ouvrir l'emplacement de clé."
 msgid "Keyslot open failed."
 msgstr "Échec de l'ouverture de l'emplacement de clé."
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "Impossible d'utiliser le chiffrement %s-%s pour le chiffrement de l'emplacement de clé"
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "Impossible d'utiliser le chiffrement %s pour le chiffrement de l'emplacement de clé."
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr "Pas assez de mémoire pour la dérivation des clés des emplacement de clés."
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "L'algorithme de hachage %s n'est pas disponible."
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "Plus d'espace pour le nouvel emplacement de clé."
 
@@ -1789,336 +1780,336 @@ msgstr "Impossible de mettre à jour le type de résilience. Le nouveau type ne
 msgid "Failed to refresh reencryption verification digest."
 msgstr "Impossible de rafraîchir le résumé de la vérification de rechiffrement."
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "Ne peut vérifier le statut du périphérique avec le uuid : %s."
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Impossible de convertir un en-tête avec des métadonnées LUKSMETA supplémentaires."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Impossible d'utiliser la spécification de chiffrement %s-%s pour LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr "Impossible d'utiliser la spécification de chiffrement %s-%s pour un emplacement de clé LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Impossible de déplacer la zone des emplacements de clés. Pas assez d'espace."
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Impossible de convertir au format LUKS2 – métadonnées invalides."
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Impossible de déplacer la zone des emplacements de clés. Les emplacements de clés LULS2 sont trop petits."
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr "Impossible de déplacer la zone des emplacements de clés."
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Impossible de convertir au format LUKS1 – la taille du secteur de chiffrement du segment par défaut n'est pas 512 octets."
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Impossible de convertir au format LUKS1 – les résumés des emplacements de clés ne sont pas compatibles avec LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Impossible de convertir au format LUKS1 – le périphérique utilise des clés de chiffrement %s emballées."
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Impossible de convertir au format LUKS1 – le périphérique utilise plus de segments."
 
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Impossible de convertir au format LUKS1 – l'en-tête LUKS2 contient %u jeton(s)."
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:798
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Impossible de convertir au format LUKS1 – il n'y a pas d'emplacements de clés actifs."
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Impossible de convertir au format LUKS1 – l'emplacement de clé %u est dans un état invalide."
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:815
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Impossible de convertir au format LUKS1 – l'emplacement de clé %u n'est pas lié."
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Impossible de convertir au format LUKS1 – l'emplacement %u (sur les emplacements maximum) est toujours actif."
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Impossible de convertir au format LUKS1 – l'emplacement de clé %u n'est pas compatible avec LUKS1."
 
-#: lib/luks2/luks2_reencrypt.c:1198
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "La taille de la zone chaude doit être un multiple de l'alignement de zone calculé (%zu octets)."
 
-#: lib/luks2/luks2_reencrypt.c:1203
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "La taille du périphérique doit être un multiple de l'alignement de zone calculé (%zu octets)."
 
-#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
-#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4080
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Impossible d'initialiser l'encapsulation pour le stockage de l'ancien segment."
 
-#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Impossible d'initialiser l'encapsulation pour le stockage du nouveau segment."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "Impossible d'initialiser la protection des zones chaudes."
 
-#: lib/luks2/luks2_reencrypt.c:1623
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "Impossible de lire les sommes de contrôle pour la zone chaude actuelle."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Échec de la lecture de la zone chaude démarrant à %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:1649
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "Échec lors du déchiffrement du secteur %zu."
 
-#: lib/luks2/luks2_reencrypt.c:1655
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "Échec lors de la récupération du secteur %zu."
 
-#: lib/luks2/luks2_reencrypt.c:2208
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "Les tailles des périphériques source et cible ne correspondent pas. Source %<PRIu64>, cible: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2310
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "Échec de l'activation du périphérique de zone chaude %s."
 
-#: lib/luks2/luks2_reencrypt.c:2322
+#: lib/luks2/luks2_reencrypt.c:2323
 #, c-format
 msgid "Failed to allocate hotzone device %s."
 msgstr "Échec de l'allocation de la zone chaude du périphérique %s."
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "Impossible d'activer le périphérique de surcouche %s avec la table d'origine actuelle."
 
-#: lib/luks2/luks2_reencrypt.c:2346
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "Impossible de charger la nouvelle cartographie du périphérique %s."
 
-#: lib/luks2/luks2_reencrypt.c:2418
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
 msgstr "Impossible de rafraîchir la pile des périphériques de rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:2615
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
 msgstr "Impossible de définir la taille de la nouvelle zone des emplacements de clés."
 
-#: lib/luks2/luks2_reencrypt.c:2751
+#: lib/luks2/luks2_reencrypt.c:2752
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "La valeur de décalage de données n'est pas alignée sur la taille de secteur de chiffrement (%<PRIu32> octets)."
 
-#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "Mode de résilience %s non supporté"
 
-#: lib/luks2/luks2_reencrypt.c:2824
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
 msgstr "La taille du secteur déplacé ne peut pas être plus grande que la valeur de décalage des données."
 
-#: lib/luks2/luks2_reencrypt.c:2866
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
 msgstr "Paramètres de rechiffrement de la résilience invalides."
 
-#: lib/luks2/luks2_reencrypt.c:2888
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "Le segment déplacé est trop grand. La taille demandée est %<PRIu64>, l'espace disponible est %<PRIu64>"
 
-#: lib/luks2/luks2_reencrypt.c:2977
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "Erreur lors de la suppression de la table."
 
-#: lib/luks2/luks2_reencrypt.c:3063
+#: lib/luks2/luks2_reencrypt.c:3064
 #, c-format
 msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
 msgstr "Le décalage de données (%<PRIu64> secteurs) est plus petit que le décalage de données future (%<PRIu64> secteurs)."
 
-#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
 msgstr "La taille des données réduites est plus grande que la taille réelle du périphérique."
 
-#: lib/luks2/luks2_reencrypt.c:3095
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Le périphérique de données n'est pas aligné sur la taille de secteur de chiffrement (%<PRIu32> octets)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
-#: lib/luks2/luks2_reencrypt.c:3664
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Erreur lors de l'ouverture de %s en mode exclusif (déjà mappé ou monté)."
 
-#: lib/luks2/luks2_reencrypt.c:3332
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Le périphérique n'est pas marqué pour le rechiffrement LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Échec du chargement du contexte de rechiffrement LUKS2"
 
-#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
 msgstr "Le périphérique n'est pas en rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
 msgstr "Le rechiffrement est déjà en cours."
 
-#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
 msgstr "Impossible d'acquérir le verrou de rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:3471
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Impossible de réaliser le rechiffrement. Exécutez d'abord la récupération du rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:3607
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
 msgstr "La taille du périphérique actif et la taille de rechiffrement demandée ne correspondent pas."
 
-#: lib/luks2/luks2_reencrypt.c:3621
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "Taille de périphérique illégale demandée dans les paramètres de rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:3723
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Rechiffrement en cours. La récupération ne peut pas être réalisée."
 
-#: lib/luks2/luks2_reencrypt.c:3744
+#: lib/luks2/luks2_reencrypt.c:3745
 msgid "LUKS2 reencryption recovery failed."
 msgstr "La récupération du rechiffrement LUKS2 a échoué."
 
-#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
 msgid "Failed to initialize reencryption device stack."
 msgstr "Impossible d'initialiser la pile du périphérique de rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:3910
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "Rechiffrement LUKS2 déjà initialisé dans les métadonnées."
 
-#: lib/luks2/luks2_reencrypt.c:3918
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Échec de l'initialisation du rechiffrement LUKS2 dans les métadonnées."
 
-#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
-#: lib/luks2/luks2_reencrypt.c:4033
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Le rechiffrement n'est pas supporté avec les périphériques DAX (mémoire persistante)."
 
-#: lib/luks2/luks2_reencrypt.c:4062
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Impossible de définir les segments du périphérique pour le rechiffrement suivant de la zone chaude."
 
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Échec lors de l'écriture des métadonnées de la résilience du rechiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:4122
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "Échec du déchiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:4127
+#: lib/luks2/luks2_reencrypt.c:4128
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Échec de l'écriture de la zone chaude démarrant à %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4132
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
 msgstr "Erreur lors de la synchronisation des données."
 
-#: lib/luks2/luks2_reencrypt.c:4140
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Échec de la mise à jour des métadonnées après la fin du rechiffrement de la zone chaude courante."
 
-#: lib/luks2/luks2_reencrypt.c:4229
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
 msgstr "Échec lors de l'écriture des métadonnées LUKS2"
 
-#: lib/luks2/luks2_reencrypt.c:4252
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
 msgstr "Impossible d'effacer la zone du périphérique contenant les données inutilisées."
 
-#: lib/luks2/luks2_reencrypt.c:4258
+#: lib/luks2/luks2_reencrypt.c:4259
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Erreur lors de la suppression de l'emplacement de clé inutilisé (unbound) %d."
 
-#: lib/luks2/luks2_reencrypt.c:4268
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
 msgstr "Erreur lors de la suppression de l'emplacement de clé de re-chiffrement."
 
-#: lib/luks2/luks2_reencrypt.c:4278
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Erreur fatale en rechiffrant le morceau commençant à %<PRIu64> d'une longueur de %<PRIu64> secteurs."
 
-#: lib/luks2/luks2_reencrypt.c:4282
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
 msgstr "Échec du rechiffrement en-ligne."
 
 # Frédéric: Je n'ai pas la moindre idée de ce que le développeur a voulu écrire. Qu'est-ce que "error target" dans ce contexte ?
-#: lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Ne pas redémarrer le périphérique à moins qu'il ait été remplacé manuellement par la cible en erreur."
 
-#: lib/luks2/luks2_reencrypt.c:4339
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Impossible de réaliser le rechiffrement. Statut de rechiffrement inattendu."
 
-#: lib/luks2/luks2_reencrypt.c:4345
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
 msgstr "Contexte de rechiffrement manquant ou invalide."
 
-#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
 msgstr "Échec de la mise à jour du contexte de rechiffrement."
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "Les méta-données de rechiffrement sont invalides."
 
@@ -2150,7 +2141,7 @@ msgstr "Les paramètres de chiffrement des emplacement de clés peuvent uniqueme
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Les paramètres de chiffrement des emplacement de clés ne sont pas compatibles avec le chiffrement des emplacements de LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
+#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2178,7 +2169,7 @@ msgstr "ATTENTION: Le paramètre --hash est ignoré en mode non chiffré quand l
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "ATTENTION: L'option --keyfile-size est ignorée. La taille de lecture est la même que la taille de la clé de chiffrement.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2189,9 +2180,9 @@ msgstr "L'analyse de blkid a échouée pour %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Signature(s) de périphérique détectée(s) sur %s. Continuer risque d'endommager les données existantes."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
-#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
-#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
+#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
+#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2240,7 +2231,7 @@ msgstr ""
 "sensible qui permet d'accéder à la partition chiffrée sans mot de passe.\n"
 "Ce contenu devrait toujours être stocké, chiffré, en lieu sûr."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2264,9 +2255,9 @@ msgstr "Impossible de déterminer la taille de la clé de volume pour FVAULT2, v
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Le périphérique %s est toujours actif et prévu pour une suppression différée.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
-#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
-#: src/cryptsetup.c:3262
+#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
+#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
+#: src/cryptsetup.c:3261
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Échec en essayant de définir le chemin %s pour les jetons externes."
@@ -2303,31 +2294,35 @@ msgstr "%-10s %4u itérations, %5u mémoire, %1u threads parallèles (CPUs) pour
 msgid "Result of benchmark is not reliable."
 msgstr "Le résultat de l'évaluation de performance n'est pas fiable."
 
-#: src/cryptsetup.c:1170
+#: src/cryptsetup.c:1171
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Tests approximatifs en utilisant uniquement la mémoire (pas de stockage E/S).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1195
+#: src/cryptsetup.c:1196
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algorithme |       Clé |     Chiffrement |    Déchiffrement\n"
 
-#: src/cryptsetup.c:1203
+#: src/cryptsetup.c:1204
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Le chiffrement %s (avec une clé de %i bits) n'est pas disponible."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1222
+#: src/cryptsetup.c:1225
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#    Algorithme |       Clé |     Chiffrement |    Déchiffrement\n"
 
-#: src/cryptsetup.c:1233
+#: src/cryptsetup.c:1238
 msgid "N/A"
 msgstr "N/D"
 
-#: src/cryptsetup.c:1258
+#: src/cryptsetup.c:1241
+msgid "# Cipher speed test is not available.\n"
+msgstr "# Le test de la vitesse de chiffrement n'est pas disponible.\n"
+
+#: src/cryptsetup.c:1257
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2336,27 +2331,27 @@ msgstr ""
 "désirable (consultez la sortie de luksDump) et continuez (mise à niveau des métadonnées) uniquement si vous constatez que\n"
 "l'opération est légitime."
 
-#: src/cryptsetup.c:1264
+#: src/cryptsetup.c:1263
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Entrez la phrase secrète pour protéger et mettre à niveau les métadonnées de rechiffrement : "
 
-#: src/cryptsetup.c:1308
+#: src/cryptsetup.c:1307
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Réellement procéder à la récupération du rechiffrement LUKS2 ?"
 
-#: src/cryptsetup.c:1317
+#: src/cryptsetup.c:1316
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Entrez la phrase secrète pour vérifier le résumé des métadonnées du rechiffrement : "
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1318
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Entrez la phrase secrète pour la récupération du rechiffrement : "
 
-#: src/cryptsetup.c:1381
+#: src/cryptsetup.c:1380
 msgid "Really try to repair LUKS device header?"
 msgstr "Réellement essayer de réparer l'en-tête du périphérique LUKS ?"
 
-#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2364,7 +2359,7 @@ msgstr ""
 "\n"
 "Effacement interrompu."
 
-#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2372,167 +2367,167 @@ msgstr ""
 "Effacement du périphérique pour initialiser les sommes de contrôle d'intégrité.\n"
 "Vous pouvez interrompre ceci en appuyant sur CTRL+c (le reste du périphérique effacé contiendra toujours des sommes de contrôle invalides).\n"
 
-#: src/cryptsetup.c:1436 src/integritysetup.c:103
+#: src/cryptsetup.c:1435 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Impossible de désactiver le périphérique temporaire %s."
 
-#: src/cryptsetup.c:1484
+#: src/cryptsetup.c:1483
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Un chiffrement utilisant uniquement OPAL hw ne supporte pas --cipher et --key-size, les options sont ignorées."
 
-#: src/cryptsetup.c:1497
+#: src/cryptsetup.c:1496
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "L'option d'intégrité peut uniquement être utilisée avec le format LUKS2."
 
-#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
+#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Options de taille des métadonnées LUKS2 non supportées."
 
-#: src/cryptsetup.c:1507
+#: src/cryptsetup.c:1506
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL est uniquement supporté avec le format LUKS2."
 
-#: src/cryptsetup.c:1512
+#: src/cryptsetup.c:1511
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Les étiquettes hw en ligne sont uniquement supportées avec le format LUKS2."
 
-#: src/cryptsetup.c:1521
+#: src/cryptsetup.c:1520
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Le fichier d'en-tête n'existe pas, voulez-vous le créer ?"
 
-#: src/cryptsetup.c:1529
+#: src/cryptsetup.c:1528
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Impossible de créer le fichier d'en-tête %s."
 
-#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
 #: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
 #: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Aucun motif connu de spécification d'intégrité n'a été détecté."
 
-#: src/cryptsetup.c:1557
+#: src/cryptsetup.c:1556
 msgid "Cannot use specified integrity key size."
 msgstr "Impossible d'utiliser la taille de clé d'intégrité spécifiée."
 
-#: src/cryptsetup.c:1575
+#: src/cryptsetup.c:1574
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Ne peut utiliser %s comme en-tête sur disque."
 
-#: src/cryptsetup.c:1604 src/integritysetup.c:172
+#: src/cryptsetup.c:1603 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Cette action écrasera définitivement les données sur %s."
 
-#: src/cryptsetup.c:1641
+#: src/cryptsetup.c:1640
 msgid "OPAL Admin password cannot be empty."
 msgstr "Le mot de passe Admin de OPAL ne peut pas être vide."
 
-#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
-#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
+#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Impossible de définir les paramètres pbkdf."
 
-#: src/cryptsetup.c:1786
+#: src/cryptsetup.c:1785
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Décalage réduit de données est uniquement permis dans un en-tête LUKS détaché."
 
-#: src/cryptsetup.c:1793
+#: src/cryptsetup.c:1792
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Le container %s du fichier LUKS est trop petit pour l'activation, il ne reste pas d'espace pour les données."
 
-#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Impossible de déterminer la taille de la clé de volume pour LUKS sans emplacement de clé, veuillez utiliser l'option --key-size."
 
-#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Le périphérique requiert deux clés de volume."
 
-#: src/cryptsetup.c:1889
+#: src/cryptsetup.c:1888
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Certains paramètres d'activation spécifiés ont été ignorés avec le chiffrement utilisant uniquement OPAL hw."
 
-#: src/cryptsetup.c:1894
+#: src/cryptsetup.c:1893
 msgid "Device activated but cannot make flags persistent."
 msgstr "Le périphérique a été activé mais les fanions ne peuvent pas être rendus permanents."
 
-#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
+#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Emplacement de clé %d sélectionné pour suppression."
 
-#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
+#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Ceci est le dernier emplacement de clé. Le périphérique sera inutilisable après la suppression de cette clé."
 
-#: src/cryptsetup.c:1987
+#: src/cryptsetup.c:1986
 msgid "Enter any remaining passphrase: "
 msgstr "Entrez toute phrase secrète restante : "
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Opération interrompue, l'emplacement de clé n'a PAS été effacé.\n"
 
-#: src/cryptsetup.c:2024
+#: src/cryptsetup.c:2023
 msgid "Enter passphrase to be deleted: "
 msgstr "Entrez la phrase secrète à effacer : "
 
-#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
-#: src/cryptsetup.c:3253
+#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
+#: src/cryptsetup.c:3252
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "%s n'est pas un périphérique LUKS2 valide."
 
-#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
+#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
 msgid "Enter new passphrase for key slot: "
 msgstr "Entrez une nouvelle phrase secrète pour l'emplacement de clé : "
 
-#: src/cryptsetup.c:2147 src/utils_luks.c:342
+#: src/cryptsetup.c:2146 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Entrez le code PIN du jeton : "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:344
+#: src/cryptsetup.c:2148 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Entrez le code PIN du jeton %d : "
 
-#: src/cryptsetup.c:2208
+#: src/cryptsetup.c:2207
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "ATTENTION: Le paramètre --key-slot est utilisé pour le nouveau numéro de l'emplacement de clé.\n"
 
-#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Entrez une phrase secrète existante : "
 
-#: src/cryptsetup.c:2381
+#: src/cryptsetup.c:2380
 msgid "Enter passphrase to be changed: "
 msgstr "Entrez la phrase secrète à changer : "
 
-#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Entrez la nouvelle phrase secrète : "
 
-#: src/cryptsetup.c:2447
+#: src/cryptsetup.c:2446
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Entrez la phrase secrète pour l'emplacement de clé à convertir: "
 
-#: src/cryptsetup.c:2471
+#: src/cryptsetup.c:2470
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "L'opération isLuks supporte seulement un périphérique en argument."
 
-#: src/cryptsetup.c:2576
+#: src/cryptsetup.c:2575
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "L'emplacement de clé %d ne contient pas de clé non liée."
 
-#: src/cryptsetup.c:2581
+#: src/cryptsetup.c:2580
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2540,52 +2535,52 @@ msgstr ""
 "Le contenu de l'en-tête avec une clé non liée est une information sensible.\n"
 "Ce contenu devrait être stocké, chiffré, en lieu sûr."
 
-#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
+#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s n'est pas un nom de périphérique %s actif."
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2706
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s n'est pas un nom de périphérique LUKS actif ou l'en-tête est manquant."
 
-#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
+#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
 msgid "Option --header-backup-file is required."
 msgstr "L'option --header-backup-file est requise."
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2833
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s n'est pas un périphérique géré par cryptsetup."
 
-#: src/cryptsetup.c:2845
+#: src/cryptsetup.c:2844
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Le rafraîchissement n'est pas supporté pour un périphérique de type %s"
 
-#: src/cryptsetup.c:2895
+#: src/cryptsetup.c:2894
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Type de métadonnée du périphérique %s non reconnu."
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2896
 msgid "Command requires device and mapped name as arguments."
 msgstr "La commande exige un périphérique et un nom de correspondance comme arguments."
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL PSID: "
 msgstr "Entrez le PSID OPAL : "
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL Admin password: "
 msgstr "Entrez le mot de passe Admin de OPAL : "
 
-#: src/cryptsetup.c:2923
+#: src/cryptsetup.c:2922
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "ATTENTION : Le disque ENTIER sera réinitialisé d'usine et toutes les données seront perdues ! Continuer ?"
 
-#: src/cryptsetup.c:2966
+#: src/cryptsetup.c:2965
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2594,363 +2589,363 @@ msgstr ""
 "Cette opération va supprimer tous les emplacements de clés du périphérique %s.\n"
 "Le périphérique sera inutilisable après cette opération."
 
-#: src/cryptsetup.c:2973
+#: src/cryptsetup.c:2972
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Opération interrompue, les emplacements de clés n'ont PAS été effacés.\n"
 
-#: src/cryptsetup.c:3012
+#: src/cryptsetup.c:3011
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Type LUKS invalide, seuls luks1 et luks2 sont supportés."
 
-#: src/cryptsetup.c:3028
+#: src/cryptsetup.c:3027
 #, c-format
 msgid "Device is already %s type."
 msgstr "Le périphérique est déjà du type %s."
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:3034
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Cette opération va convertir %s au format %s.\n"
 
-#: src/cryptsetup.c:3038
+#: src/cryptsetup.c:3037
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Opération interrompue, le périphérique n'a PAS été converti.\n"
 
-#: src/cryptsetup.c:3078
+#: src/cryptsetup.c:3077
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "L'option --priority, --label ou --subsystem est manquante."
 
-#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
+#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Le jeton %d est invalide."
 
-#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
+#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
 #, c-format
 msgid "Token %d in use."
 msgstr "Le jeton %d est utilisé."
 
-#: src/cryptsetup.c:3127
+#: src/cryptsetup.c:3126
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Échec lors de l'ajout du jeton %d au porte-clé luks2."
 
-#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
+#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Échec lors de l'affectation du jeton %d à l'emplacement de clé %d."
 
-#: src/cryptsetup.c:3155
+#: src/cryptsetup.c:3154
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Le jeton %d n'est pas utilisé."
 
-#: src/cryptsetup.c:3192
+#: src/cryptsetup.c:3191
 msgid "Failed to import token from file."
 msgstr "Impossible d'importer le jeton depuis le fichier."
 
-#: src/cryptsetup.c:3217
+#: src/cryptsetup.c:3216
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Impossible d'obtenir le jeton %d pour l'export."
 
-#: src/cryptsetup.c:3230
+#: src/cryptsetup.c:3229
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Le jeton %d n'est pas assigné à l'emplacement de clé %d."
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
+#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Impossible de dissocier le jeton %d de l'emplacement de clé %d."
 
-#: src/cryptsetup.c:3298
+#: src/cryptsetup.c:3297
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Les options --tcrypt-hidden, --tcrypt-system ou --tcrypt-backup sont supportées seulement pour un périphérique TCRYPT."
 
-#: src/cryptsetup.c:3301
+#: src/cryptsetup.c:3300
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "L'option --veracrypt ou --disable-veracrypt est uniquement supportée pour un périphérique de type TCRYPT."
 
-#: src/cryptsetup.c:3304
+#: src/cryptsetup.c:3303
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "L'option --veracrypt-pim est uniquement supportée pour un périphérique compatible avec VeraCrypt."
 
-#: src/cryptsetup.c:3308
+#: src/cryptsetup.c:3307
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "L'option --veracrypt-query-pim est uniquement supportée pour un périphérique compatible avec VeraCrypt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3309
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Les options --veracrypt-pim et --veracrypt-query-pim sont mutuellement exclusives."
 
-#: src/cryptsetup.c:3319
+#: src/cryptsetup.c:3318
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "L'option --persistent n'est pas permise avec --test-passphrase."
 
-#: src/cryptsetup.c:3322
+#: src/cryptsetup.c:3321
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Les options --refresh et --test-passphrase sont mutuellement exclusives."
 
-#: src/cryptsetup.c:3325
+#: src/cryptsetup.c:3324
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "L'option --shared est permise uniquement pour ouvrir un périphérique ordinaire."
 
-#: src/cryptsetup.c:3328
+#: src/cryptsetup.c:3327
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "L'option --skip est supportée uniquement pour ouvrir des périphériques ordinaires et loopaes."
 
-#: src/cryptsetup.c:3331
+#: src/cryptsetup.c:3330
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "L'option --offset avec l'action d'ouverture est supportée uniquement pour des périphériques ordinaires et loopaes."
 
-#: src/cryptsetup.c:3334
+#: src/cryptsetup.c:3333
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "L'option --tcrypt-hidden ne peut pas être combinée avec --allow-discards."
 
-#: src/cryptsetup.c:3338
+#: src/cryptsetup.c:3337
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "L'option de taille de secteur avec l'action d'ouverture est uniquement supportée pour des périphérique ordinaires."
 
-#: src/cryptsetup.c:3342
+#: src/cryptsetup.c:3341
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "L'option des secteurs IV (vecteur d'initialisation) de grande taille est supportée uniquement à l'ouverture de périphériques de type simple avec une taille de secteur supérieure à 512 octets."
 
-#: src/cryptsetup.c:3347
+#: src/cryptsetup.c:3346
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "L'option --test-passphrase est autorisée uniquement pour ouvrir des périphériques LUKS, TCRYPT, BITLK et FVAULT2."
 
-#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
+#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Les options --device-size et --size ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3353
+#: src/cryptsetup.c:3352
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "L'option --unbound est permise uniquement pour ouvrir un périphérique luks."
 
-#: src/cryptsetup.c:3356
+#: src/cryptsetup.c:3355
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "L'option --unbound ne peut pas être utilisée sans --test-passphrase."
 
-#: src/cryptsetup.c:3360
+#: src/cryptsetup.c:3359
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "L'option --volume-key-keyring ne peut pas être combinée avec --hash ou --volume-key-file."
 
-#: src/cryptsetup.c:3363
+#: src/cryptsetup.c:3362
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Les deux options --volume-key-file doivent être appariées avec les options --key-size respectives."
 
-#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Les options --cancel-deferred et --deferred ne peuvent pas être utilisées en même temps."
 
-#: src/cryptsetup.c:3388
+#: src/cryptsetup.c:3387
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "L'option --active-name peut uniquement être définie pour un périphérique LUKS2."
 
-#: src/cryptsetup.c:3391
+#: src/cryptsetup.c:3390
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Les options --active-name et --force-offline-reencrypt ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3394
+#: src/cryptsetup.c:3393
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Les options --new-volume-key et --keep-key ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3397
+#: src/cryptsetup.c:3396
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Les options --new-volume-key-keyring et --keep-key ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
+#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
 msgid "Keyslot specification is required."
 msgstr "Une spécification d'emplacement de clé est requise."
 
-#: src/cryptsetup.c:3413
+#: src/cryptsetup.c:3412
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Les options --align-payload et --offset ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3416
+#: src/cryptsetup.c:3415
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "L'option --integrity-no-wipe peut uniquement être utilisée pour une action de formatage avec l'extension d'intégrité."
 
-#: src/cryptsetup.c:3419
+#: src/cryptsetup.c:3418
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Seule une des deux possibilités --use-[u]random est autorisée."
 
-#: src/cryptsetup.c:3427
+#: src/cryptsetup.c:3426
 msgid "Key size is required with --unbound option."
 msgstr "La taille de clé est requise avec l'option --unbound."
 
-#: src/cryptsetup.c:3447
+#: src/cryptsetup.c:3446
 msgid "Invalid token action."
 msgstr "L'action de jeton est invalide."
 
-#: src/cryptsetup.c:3450
+#: src/cryptsetup.c:3449
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Le paramètre --key-description est requis pour l'action d'ajout d'un jeton."
 
-#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
+#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "L'action requiert un jeton spécifique. Utilisez le paramètre --token-id."
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3457
 msgid "Option --unbound is valid only with token add action."
 msgstr "L'option --unbound est uniquement valable avec l'action d'ajout d'un jeton."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3459
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Les options --key-slot et --unbound ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3465
+#: src/cryptsetup.c:3464
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "L'action requiert un jeton spécifique. Utilisez le paramètre --key-slot."
 
-#: src/cryptsetup.c:3481
+#: src/cryptsetup.c:3480
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<périphérique> [--type <type>] [<nom>]"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "ouvrir le périphérique comme <nom>"
 
-#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
 #: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
 #: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<nom>"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "fermeture du périphérique (supprime le « mapping »)"
 
-#: src/cryptsetup.c:3483 src/integritysetup.c:558
+#: src/cryptsetup.c:3482 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "redimensionner le périphérique actif"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3483
 msgid "show device status"
 msgstr "afficher le statut du périphérique"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <chiffrement>]"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "benchmark cipher"
 msgstr "chiffrement pour test de performance"
 
-#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
-#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
-#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
-#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
-#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
+#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
+#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
 msgid "<device>"
 msgstr "<périphérique>"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3485
 msgid "try to repair on-disk metadata"
 msgstr "essayer de réparer les métadonnées sur le disque"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3486
 msgid "reencrypt LUKS2 device"
 msgstr "rechiffrer le périphérique LUKS2"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3487
 msgid "erase all keyslots (remove encryption key)"
 msgstr "supprimer tous les emplacements de clés (supprime la clé de chiffrement)"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3488
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "convertir LUKS depuis/vers le format LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3489
 msgid "set permanent configuration options for LUKS2"
 msgstr "définir les options de configuration permanentes pour LUKS2"
 
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
 msgid "<device> [<new key file>]"
 msgstr "<périphérique> [<fichier de la nouvelle clé>]"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3490
 msgid "formats a LUKS device"
 msgstr "formater un périphérique LUKS"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3491
 msgid "add key to LUKS device"
 msgstr "ajouter une clé au périphérique LUKS"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
 msgid "<device> [<key file>]"
 msgstr "<périphérique> [<fichier de clé>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3492
 msgid "removes supplied key or key file from LUKS device"
 msgstr "retire du périphérique LUKS la clé ou le fichier de clé fourni"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3493
 msgid "changes supplied key or key file of LUKS device"
 msgstr "modifie la clé ou le fichier de clé fourni pour le périphérique LUKS"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3494
 msgid "converts a key to new pbkdf parameters"
 msgstr "converti une clé vers les nouveaux paramètres pbkdf"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "<device> <key slot>"
 msgstr "<périphérique> <emplacement de clé>"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "efface de façon sécurisée la clé avec le numéro <emplacement de clé> du périphérique LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3496
 msgid "print UUID of LUKS device"
 msgstr "afficher l'UUID du périphérique LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3497
 msgid "tests <device> for LUKS partition header"
 msgstr "teste si <périphérique> a un en-tête de partition LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3498
 msgid "dump LUKS partition information"
 msgstr "affiche les informations LUKS de la partition"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3499
 msgid "dump TCRYPT device information"
 msgstr "affiche les informations du périphérique TCRYPT"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3500
 msgid "dump BITLK device information"
 msgstr "affiche les informations du périphérique BITLK"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3501
 msgid "dump FVAULT2 device information"
 msgstr "affiche les informations du périphérique FVAULT2"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3502
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Suspendre le périphérique LUKS et effacer de façon sécurisée la clé (toutes les entrées/sorties sont suspendues)"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3503
 msgid "Resume suspended LUKS device"
 msgstr "Remettre en service le périphérique LUKS suspendu"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3504
 msgid "Backup LUKS device header and keyslots"
 msgstr "Sauvegarder l'en-tête et les emplacements de clés du périphérique LUKS"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3505
 msgid "Restore LUKS device header and keyslots"
 msgstr "Restaurer l'en-tête et les emplacements de clés du périphérique LUKS"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <périphérique>"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipuler les jetons LUKS2"
 
-#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2958,7 +2953,7 @@ msgstr ""
 "\n"
 "<action> est l'une de :\n"
 
-#: src/cryptsetup.c:3532
+#: src/cryptsetup.c:3531
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2970,7 +2965,7 @@ msgstr ""
 "\touvrir : create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tfermer : remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3536
+#: src/cryptsetup.c:3535
 #, c-format
 msgid ""
 "\n"
@@ -2985,7 +2980,7 @@ msgstr ""
 "<emplacement> est le numéro de l'emplacement de clé LUKS à modifier\n"
 "<fichier de clé> est un fichier optionnel contenant la nouvelle clé pour l'action luksAddKey\n"
 
-#: src/cryptsetup.c:3543
+#: src/cryptsetup.c:3542
 #, c-format
 msgid ""
 "\n"
@@ -2994,7 +2989,7 @@ msgstr ""
 "\n"
 "Le format de métadonnées compilé par défaut est %s (pour l'action luksFormat).\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3547
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3002,12 +2997,12 @@ msgstr ""
 "\n"
 "Le support du greffon de jeton externe LUKS2 est enabled.\n"
 
-#: src/cryptsetup.c:3549
+#: src/cryptsetup.c:3548
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Chemin du greffon de jeton externe LUKS2 : %s.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3550
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3015,7 +3010,7 @@ msgstr ""
 "\n"
 "Le support du greffon de jeton externe LUKS2 est désactivé.\n"
 
-#: src/cryptsetup.c:3555
+#: src/cryptsetup.c:3554
 #, c-format
 msgid ""
 "\n"
@@ -3032,7 +3027,7 @@ msgstr ""
 "PBKDF par défaut pour LUKS2 : %s\n"
 "\tTemps d'itération: %d, Mémoire requise: %d ko, Threads parallèles: %d\n"
 
-#: src/cryptsetup.c:3566
+#: src/cryptsetup.c:3565
 #, c-format
 msgid ""
 "\n"
@@ -3047,122 +3042,122 @@ msgstr ""
 "\tplain: %s, Clé: %d bits, Hachage mot de passe: %s\n"
 "\tLUKS: %s, Clé: %d bits, Hachage en-tête LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3574
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: La taille de clé par défaut en mode XTS (deux clés internes) sera doublée.\n"
 
-#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s : exige %s comme arguments."
 
-#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Emplacement de clé non valide."
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3660
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "La taille du périphérique doit être un multiple d'un secteur de 512 octets."
 
-#: src/cryptsetup.c:3666
+#: src/cryptsetup.c:3665
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "La spécification de la taille maximale de la zone chaude de rechiffrement est invalide."
 
-#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
+#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
 msgid "Key size must be a multiple of 8 bits"
 msgstr "La taille de la clé doit être un multiple de 8 bits"
 
-#: src/cryptsetup.c:3687
+#: src/cryptsetup.c:3686
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Au plus 2 spécifications de taille de clé peuvent être fournies."
 
-#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
+#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Au plus %d spécifications de clés de volume peuvent être fournies."
 
-#: src/cryptsetup.c:3739
+#: src/cryptsetup.c:3738
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Au plus %d spécifications de liaison de porte-clé peuvent être fournies."
 
-#: src/cryptsetup.c:3748
+#: src/cryptsetup.c:3747
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "La taille maximum réduite pour le périphérique est 1 GiB."
 
-#: src/cryptsetup.c:3751
+#: src/cryptsetup.c:3750
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "La taille réduite doit être un multiple d'un secteur de 512 octets."
 
-#: src/cryptsetup.c:3768
+#: src/cryptsetup.c:3767
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "L'option --priority peut uniquement être ignore/normal/prefer."
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Afficher ce message d'aide"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Afficher, en résumé, la syntaxe d'invocation"
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Afficher la version du paquet"
 
-#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Options d'aide :"
 
-#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPTION...] <action> <paramètres de l'action>"
 
-#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Il manque l'argument <action>."
 
-#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Action inconnue."
 
-#: src/cryptsetup.c:3929
+#: src/cryptsetup.c:3928
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "L'option --key-file est prioritaire par rapport à un fichier de clé spécifié en argument."
 
-#: src/cryptsetup.c:3935
+#: src/cryptsetup.c:3934
 msgid "Only one --key-file argument is allowed."
 msgstr "Un seul argument --key-file est autorisé."
 
-#: src/cryptsetup.c:3940
+#: src/cryptsetup.c:3939
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "La fonction de dérivation d'une clé basée sur un mot de passe (PBKDF = Password-Based Key Derivation Function) peut uniquement être pbkdf2 ou argon2i/argon2id."
 
-#: src/cryptsetup.c:3945
+#: src/cryptsetup.c:3944
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Les itérations forcées de PBKDF ne peuvent pas être combinées avec l'option de temps d'itération."
 
-#: src/cryptsetup.c:3950
+#: src/cryptsetup.c:3949
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Impossible de lier une clé de volume à un porte-clé quand le porte-clé est désactivé."
 
-#: src/cryptsetup.c:3955
+#: src/cryptsetup.c:3954
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Impossible d'utiliser la description de clé de porte-clé quand le porte-clé est désactivé."
 
-#: src/cryptsetup.c:3960
+#: src/cryptsetup.c:3959
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "L'intégrité en ligne doit être utilisée avec l'option --integrity."
 
-#: src/cryptsetup.c:3971
+#: src/cryptsetup.c:3970
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Les options --keyslot-cipher et --keyslot-key-size doivent être utilisées ensembles."
 
-#: src/cryptsetup.c:3979
+#: src/cryptsetup.c:3978
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Aucune action réalisée. Invoqué avec l'option --test-args.\n"
 
-#: src/cryptsetup.c:3992
+#: src/cryptsetup.c:3991
 msgid "Cannot disable metadata locking."
 msgstr "Impossible de désactiver le verrouillage des métadonnées."
 
@@ -4350,6 +4345,12 @@ msgstr "La méthode d'authentification par clé publique n'est pas permise sur l
 msgid "Public key authentication error: "
 msgstr "Erreur durant l'authentification par clé publique : "
 
+#~ msgid "Required kernel crypto interface not available."
+#~ msgstr "L'interface du noyau requise pour le chiffrement n'est pas disponible."
+
+#~ msgid "Ensure you have algif_skcipher kernel module loaded."
+#~ msgstr "Vérifiez que le module du noyau algif_skcipher est chargé."
+
 #, c-format
 #~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
 #~ msgstr "Impossible de lire ou de valider la copie des méta-données BITLK FVE #%d depuis %s."

From 0664ecc802316d43bb533e15c53f9576e0b3e584 Mon Sep 17 00:00:00 2001
From: Hiroshi Takekawa <sian@big.or.jp>
Date: Sat, 4 Jul 2026 18:12:56 +0200
Subject: [PATCH 163/244] po: update ja.po (from translationproject.org)

---
 po/ja.po | 1015 +++++++++++++++++++++++++++---------------------------
 1 file changed, 505 insertions(+), 510 deletions(-)

diff --git a/po/ja.po b/po/ja.po
index 47d33e0e1..61ab865dc 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -1,14 +1,14 @@
 # Japanese messages for cryptsetup.
 # Copyright (C) 2019, 2020 Free Software Foundation, Inc.
 # This file is distributed under the same license as the cryptsetup package.
-# Hiroshi Takekawa <sian@big.or.jp>, <sian.ht@gmail.com>, 2019, 2020, 2021, 2022, 2023, 2024, 2025
+# Hiroshi Takekawa <sian@big.or.jp>, <sian.ht@gmail.com>, 2019, 2020, 2021, 2022, 2023, 2024, 2025, 2026
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-03-30 14:18+0200\n"
-"PO-Revision-Date: 2026-03-31 09:15+0900\n"
+"POT-Creation-Date: 2026-06-29 21:30+0200\n"
+"PO-Revision-Date: 2026-06-30 21:06+0900\n"
 "Last-Translator: Hiroshi Takekawa <sian@big.or.jp>\n"
 "Language-Team: Japanese <translation-team-ja@lists.sourceforge.net>\n"
 "Language: ja\n"
@@ -76,7 +76,7 @@ msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "指定された改ざん確認タグの自動再計算はサポートされていません。"
 
 #: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2781
+#: lib/luks2/luks2_json_metadata.c:2799
 msgid "Discard/TRIM is not supported."
 msgstr "Discard/TRIM はサポートしていません。"
 
@@ -122,665 +122,665 @@ msgstr "不明な RNG(乱数生成器) の質(quality)が要求されました
 msgid "Error reading from RNG."
 msgstr "RNG(乱数生成器)から読み込み中にエラー。"
 
-#: lib/setup.c:248
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "OPAL サポートは libcryptsetup で無効化されています。"
 
-#: lib/setup.c:250
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "デバイス %s かカーネルが OPAL 暗号化をサポートしていません。"
 
-#: lib/setup.c:266
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "暗号向けRNG(乱数生成器)バックエンドの初期化ができません。"
 
-#: lib/setup.c:272
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "暗号バックエンドの初期化ができません。"
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "ハッシュアルゴリズム %s がサポートされていません。"
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "鍵の処理でエラー (ハッシュ %s を使用)。"
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "デバイスタイプがわかりません。互換性のないデバイスのアクティベーションをしようとしていませんか？"
 
-#: lib/setup.c:395 lib/setup.c:4160
+#: lib/setup.c:398 lib/setup.c:4177
 msgid "This operation is supported only for LUKS device."
 msgstr "この操作は LUKS デバイスでしかサポートされていません。"
 
-#: lib/setup.c:432
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "この操作は LUKS2 デバイスでしかサポートされていません。"
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "キースロットがいっぱいです。"
 
-#: lib/setup.c:500
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "キースロット %d は不正です。0 から %d の間を選んでください。"
 
-#: lib/setup.c:506
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "キースロット %d は使われています。別の番号を選んでください。"
 
-#: lib/setup.c:531 lib/setup.c:3875
+#: lib/setup.c:534 lib/setup.c:3878
 msgid "Device size is not aligned to device logical block size."
 msgstr "デバイスサイズが論理ブロックサイズのアライメントに合いません。"
 
-#: lib/setup.c:628
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "ヘッダが検出されましたがデバイス %s が小さすぎます。"
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
-#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "この操作はこのデバイスタイプではサポートされていません。"
 
-#: lib/setup.c:674
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "オフラインでの再暗号化中です。中止します。"
 
-#: lib/setup.c:806
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "メモリ上の LUKS2 メタデータのロールバックに失敗しました。"
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
-#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
-#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
-#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
+#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
+#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
+#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "デバイス %s は有効な LUKS デバイスではありません。"
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "LUKS バージョン %d はサポートされていません。"
 
-#: lib/setup.c:1270
+#: lib/setup.c:1273
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "アクティブなデバイス %s に既知の暗号スペックパターンが検出されませんでした。"
 
-#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5816
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
 #, c-format
 msgid "Device %s is not active."
 msgstr "デバイス %s はアクティブではありません。"
 
-#: lib/setup.c:1532
+#: lib/setup.c:1535
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "暗号化されたデバイス %s の元になるデバイスが消滅しました。"
 
-#: lib/setup.c:1614
+#: lib/setup.c:1617
 msgid "Invalid plain crypt parameters."
 msgstr "不正な plain crypt のパラメータ。"
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1622 lib/setup.c:2672
 msgid "Invalid key size."
 msgstr "不正なキーサイズ。"
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID はこの暗号タイプではサポートされていません。"
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "分離したメタデータデバイスはこの暗号タイプではサポートされていません。"
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
 msgid "Unsupported encryption sector size."
 msgstr "サポートされていない暗号化セクタサイズです。"
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
 msgid "Device size is not aligned to requested sector size."
 msgstr "デバイスサイズが要求されたセクタサイズのアライメントに合いません。"
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
 msgid "Can't format LUKS without device."
 msgstr "デバイスなしには LUKS 形式にフォーマットできません。"
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1707 lib/setup.c:1959
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Zonedy デバイス %s は LUKS ヘッダに使えません。"
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "要求されたデータアライメントとデータオフセットが合いません。"
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1754 lib/setup.c:1984
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "警告: DAX デバイスはアトミックなセクタ更新を保証しないためデータが壊れることがあります。\n"
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "デバイス %s のヘッダを消し去れません。"
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1805 lib/setup.c:2164
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "デバイス %s はアクティベートするのに小さすぎます。データ用のスペースがありません。\n"
 
-#: lib/setup.c:1843
+#: lib/setup.c:1846
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "ボリュームキーは整合性拡張のため暗号には鍵長が小さすぎます。"
 
-#: lib/setup.c:1847
+#: lib/setup.c:1850
 msgid "Integrity key size is too small."
 msgstr "整合性キーのサイズが小さすぎます。"
 
-#: lib/setup.c:1856
+#: lib/setup.c:1859
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "暗号 %s-%s (キーサイズ %zd ビット) は利用できません。"
 
-#: lib/setup.c:1897
+#: lib/setup.c:1900
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "警告: デバイスアクティベーションが失敗しました。dm-crypt が要求された暗号セクタサイズをサポートしていません。\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
-#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4497
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "デバイス %s のサイズが小さすぎます。"
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "デバイス %s は使用中のためフォーマットできません。"
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "デバイス %s は権限がないためフォーマットできません。"
 
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "デバイス %s を整合性確認ができるようフォーマットできません。"
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2151 lib/setup.c:2629
 #, c-format
 msgid "Cannot format device %s."
 msgstr "デバイス %s をフォーマットできません。"
 
-#: lib/setup.c:2191
+#: lib/setup.c:2194
 msgid "Cannot get OPAL alignment parameters."
 msgstr "OPAL アライメントパラメータを取得できません。"
 
-#: lib/setup.c:2203
+#: lib/setup.c:2206
 msgid "Bogus OPAL logical block size."
 msgstr "OPAL 論理ブロックサイズがおかしいです。"
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "OPAL 論理ブロックサイズがデバイスブロックサイズと違っておかしいです。"
 
-#: lib/setup.c:2214
+#: lib/setup.c:2217
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "要求されたデータオフセットが OPAL ブロックサイズと互換性がありません。"
 
-#: lib/setup.c:2221
+#: lib/setup.c:2224
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "要求されたデータアライメントが OPAL アライメントと互換性がありません。"
 
-#: lib/setup.c:2241
+#: lib/setup.c:2244
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "データオフセットが OPAL アライメント制約を満たしていません。"
 
-#: lib/setup.c:2254
+#: lib/setup.c:2257
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "要求されたデータアライメントはロックレンジアライメントに対する要求を満たしません。"
 
-#: lib/setup.c:2468
+#: lib/setup.c:2471
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "OPAL のアライメント粒度に合わせるためにデバイスサイズが %<PRIu64> セクタ少なくなります。"
 
-#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "デバイス %s の OPAL ロックを取得できませんでした。"
 
-#: lib/setup.c:2538
+#: lib/setup.c:2541
 msgid "Incorrect OPAL Admin key."
 msgstr "OPAL 管理者キーが正しくありません。"
 
-#: lib/setup.c:2540
+#: lib/setup.c:2543
 msgid "Cannot setup OPAL segment."
 msgstr "OPAL セグメントを設定できません。"
 
-#: lib/setup.c:2622
+#: lib/setup.c:2625
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "デバイス %s をフォーマットできません。OPAL デバイスは完全に書き込み禁止になっているようです。"
 
-#: lib/setup.c:2624
+#: lib/setup.c:2627
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "おそらくファームウェアのバグです。OPAL PSID リセットをして復旧のために再接続してください。"
 
-#: lib/setup.c:2644
+#: lib/setup.c:2647
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "ロックレンジ %d のリセットをデバイス %s に試みましたが失敗しました。"
 
-#: lib/setup.c:2664
+#: lib/setup.c:2667
 msgid "Can't format LOOPAES without device."
 msgstr "LOOPAES としてフォーマットするにはデバイスが必要です。"
 
-#: lib/setup.c:2709
+#: lib/setup.c:2712
 msgid "Can't format VERITY without device."
 msgstr "VERITY としてフォーマットするにはデバイスが必要です。"
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2723 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "VERITY ハッシュタイプ %d はサポートしていません。"
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2729 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "サポートしていない VERITY ブロックサイズです。"
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2734 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "サポートしていない VERITY ハッシュオフセットです。"
 
-#: lib/setup.c:2736
+#: lib/setup.c:2739
 msgid "Unsupported VERITY FEC offset."
 msgstr "サポートしていない VERITY FEC オフセットです。"
 
-#: lib/setup.c:2760
+#: lib/setup.c:2763
 msgid "Data area overlaps with hash area."
 msgstr "データ領域がハッシュ領域と重なっています。"
 
-#: lib/setup.c:2785
+#: lib/setup.c:2788
 msgid "Hash area overlaps with FEC area."
 msgstr "ハッシュ領域が FEC 領域と重なっています。"
 
-#: lib/setup.c:2792
+#: lib/setup.c:2795
 msgid "Data area overlaps with FEC area."
 msgstr "データ領域が FEC 領域と重なっています。"
 
-#: lib/setup.c:2884
+#: lib/setup.c:2887
 msgid "Integrity key size mismatch."
 msgstr "整合性キーのサイズが一致しません。"
 
-#: lib/setup.c:2935
+#: lib/setup.c:2938
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "警告: 指定されたタグのサイズ %d バイトが %s の出力サイズと異なります (%d バイト)。\n"
 
-#: lib/setup.c:3048 lib/setup.c:3150
+#: lib/setup.c:3051 lib/setup.c:3153
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "不明もしくはサポートされていないデバイスタイプ %s が指定されました。"
 
-#: lib/setup.c:3064
+#: lib/setup.c:3067
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "デバイス %s はインライン整合性データフィールドを提供しません。"
 
-#: lib/setup.c:3070
+#: lib/setup.c:3073
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "インラインタグサイズ %<PRIu32> [bytes] が %<PRIu32> (デバイス %s より取得)より大きいです。"
 
-#: lib/setup.c:3085
+#: lib/setup.c:3088
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "セクタはデバイスハードウェアセクタ (%zu bytes) と同じでなければなりません。"
 
-#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "デバイス %s のパラメータはサポートしていません。"
 
-#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "デバイス %s のパラメータがミスマッチしています。"
 
-#: lib/setup.c:3647
+#: lib/setup.c:3650
 msgid "Crypt devices mismatch."
 msgstr "Crypt デバイスが一致しません。"
 
-#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "デバイス %s のリロードに失敗しました。"
 
-#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
-#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "デバイス %s のサスペンドに失敗しました。"
 
-#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
-#: lib/luks2/luks2_reencrypt.c:4240
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "デバイス %s のリジュームに失敗しました。"
 
-#: lib/setup.c:3717
+#: lib/setup.c:3720
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "デバイス %s のリロード中に致命的なエラー(デバイス %s の上で)。"
 
-#: lib/setup.c:3720 lib/setup.c:3722
+#: lib/setup.c:3723 lib/setup.c:3725
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "デバイス %s を dm-error にスイッチできません。"
 
-#: lib/setup.c:3765
+#: lib/setup.c:3768
 msgid "Can not resize LUKS2 device with static size."
 msgstr "静的サイズの LUKS2 デバイスはリサイズできません。"
 
-#: lib/setup.c:3770
+#: lib/setup.c:3773
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "整合性プロテクションつきのLUKS2デバイスのリサイズはサポートされていません。"
 
-#: lib/setup.c:3816
+#: lib/setup.c:3819
 msgid "Cannot resize loop device."
 msgstr "ループデバイスはリサイズできません。"
 
-#: lib/setup.c:3860
+#: lib/setup.c:3863
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "警告: 最大サイズが既に設定済かカーネルがリサイズをサポートしていません。\n"
 
-#: lib/setup.c:3926
+#: lib/setup.c:3929
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "リサイズに失敗しました。カーネルがサポートしていません。"
 
-#: lib/setup.c:3958
+#: lib/setup.c:3961
 msgid "Do you really want to change UUID of device?"
 msgstr "デバイスの UUID を本当に変更してもいいですか？"
 
-#: lib/setup.c:4050
+#: lib/setup.c:4053
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "ヘッダのバックアップファイルの中味が LUKS ヘッダと互換性がありません。"
 
-#: lib/setup.c:4143
+#: lib/setup.c:4160
 #, c-format
 msgid "Volume %s is not active."
 msgstr "ボリューム %s はアクティブではありません。"
 
-#: lib/setup.c:4198
+#: lib/setup.c:4215
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "ボリューム %s は既に停止されています。"
 
-#: lib/setup.c:4224
+#: lib/setup.c:4241
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "デバイス %s の停止はサポートされていません。"
 
-#: lib/setup.c:4226 lib/setup.c:4234
+#: lib/setup.c:4243 lib/setup.c:4251
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "デバイス %s 停止中にエラー。"
 
-#: lib/setup.c:4249
+#: lib/setup.c:4266
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "デバイス %s は停止されましたが、ハードウェア OPAL デバイスはロックできません。"
 
-#: lib/setup.c:4280 lib/setup.c:4457
+#: lib/setup.c:4297 lib/setup.c:4491
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "デバイス %s は再開をサポートしていません。"
 
-#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "デバイス %s の再開中にエラー。"
 
-#: lib/setup.c:4301
+#: lib/setup.c:4335
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "ボリュームキーを指定されたキーリングからアンリンクできません。"
 
-#: lib/setup.c:4423 lib/setup.c:5603
+#: lib/setup.c:4457 lib/setup.c:5637
 msgid "Failed to link volume key in user defined keyring."
 msgstr "ボリュームキーを指定されたキーリングにリンクできません。"
 
-#: lib/setup.c:4522 src/cryptsetup.c:2721
+#: lib/setup.c:4556 src/cryptsetup.c:2720
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "ボリューム %s は停止されていません。"
 
-#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
-#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
+#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
+#: src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "ボリュームキーがボリュームに合いません。"
 
-#: lib/setup.c:4787
+#: lib/setup.c:4821
 msgid "Failed to swap new key slot."
 msgstr "新しいキースロットを交換できませんでした。"
 
-#: lib/setup.c:4885
+#: lib/setup.c:4919
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "キースロット %d は不正です。"
 
-#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
-#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
+#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
+#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "キースロット %d は非アクティブです。"
 
-#: lib/setup.c:4910
+#: lib/setup.c:4944
 msgid "Device header overlaps with data area."
 msgstr "デバイスヘッダがデータ領域に重なっています。"
 
-#: lib/setup.c:5131
+#: lib/setup.c:5165
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "既に再暗号化中です。デバイスをアクティベートできません。"
 
-#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3725
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "再暗号化ロックを取得できません。"
 
-#: lib/setup.c:5155
+#: lib/setup.c:5189
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "ボリュームキーを使った LUKS2 の再暗号化のリカバリに失敗しました。"
 
-#: lib/setup.c:5291
+#: lib/setup.c:5325
 #, c-format
 msgid "Device %s already exists."
 msgstr "デバイス %s は既に存在します。"
 
-#: lib/setup.c:5298
+#: lib/setup.c:5332
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "デバイス %s を使えません。名前が不正か使用中です。"
 
-#: lib/setup.c:5310
+#: lib/setup.c:5344
 msgid "Reencryption volume keys do not match the volume."
 msgstr "再暗号化ボリュームキーがボリュームに合いません。"
 
-#: lib/setup.c:5327
+#: lib/setup.c:5361
 msgid "Incorrect volume key specified for plain device."
 msgstr "正しくないボリュームキーがプレーンデバイスに指定されました。"
 
-#: lib/setup.c:5353 lib/setup.c:5414
+#: lib/setup.c:5387 lib/setup.c:5448
 msgid "Device type is not properly initialized."
 msgstr "デバイスタイプが正しく初期化されていません。"
 
-#: lib/setup.c:5452
+#: lib/setup.c:5486
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "カーネルがカーネルキーリングをサポートしていません。"
 
-#: lib/setup.c:5456
+#: lib/setup.c:5490
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "署名をカーネルに渡すのに必要なカーネルキーリングをカーネルがサポートしていません。"
 
-#: lib/setup.c:5511
+#: lib/setup.c:5545
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "キーリングキー %s が使えません。"
 
-#: lib/setup.c:5724
+#: lib/setup.c:5758
 msgid "Incorrect root hash specified for verity device."
 msgstr "正しくないルートハッシュが verity デバイスに指定されました。"
 
-#: lib/setup.c:5765 lib/setup.c:5790
+#: lib/setup.c:5799 lib/setup.c:5824
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL は遅延デアクティベーションをサポートしていません。"
 
-#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "デバイス %s は使用中です。"
 
-#: lib/setup.c:5798
+#: lib/setup.c:5832
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "デバイス %s からの遅延削除をキャンセルできませんでした。"
 
-#: lib/setup.c:5820
+#: lib/setup.c:5854
 #, c-format
 msgid "Invalid device %s."
 msgstr "デバイス %s は不正です。"
 
-#: lib/setup.c:5967
+#: lib/setup.c:6001
 msgid "Volume key buffer too small."
 msgstr "ボリュームキーのバッファが小さすぎます。"
 
-#: lib/setup.c:5978
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "LUKS2 デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:5987
+#: lib/setup.c:6021
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "LUKS1 デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6001
+#: lib/setup.c:6035
 msgid "Cannot retrieve volume key for plain device."
 msgstr "プレーンデバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6009
+#: lib/setup.c:6043
 msgid "Cannot retrieve root hash for verity device."
 msgstr "verity デバイスのルートハッシュが読み出せません。"
 
-#: lib/setup.c:6018
+#: lib/setup.c:6052
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "BITLK デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6023
+#: lib/setup.c:6057
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "FVAULT2 デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6025
+#: lib/setup.c:6059
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "この操作は %s 暗号化デバイスではサポートされていません。"
 
-#: lib/setup.c:6210 lib/setup.c:6221
+#: lib/setup.c:6244 lib/setup.c:6255
 msgid "Dump operation is not supported for this device type."
 msgstr "このデバイスタイプはダンプ操作をサポートしていません。"
 
-#: lib/setup.c:6601
+#: lib/setup.c:6635
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "データオフセットが %u バイトの倍数である必要があります。"
 
-#: lib/setup.c:6909
+#: lib/setup.c:6943
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "使用中のデバイス %s を変換できません。"
 
-#: lib/setup.c:7217 lib/setup.c:7361
+#: lib/setup.c:7251 lib/setup.c:7406
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "新しいボリュームキー向けのキースロット %u を確保できません。"
 
-#: lib/setup.c:7241
+#: lib/setup.c:7275
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "デフォルト LUKS2 キースロットパラメータを初期化できません。"
 
-#: lib/setup.c:7247
+#: lib/setup.c:7281
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "ダイジェストするためのキースロット %d が確保できません。"
 
-#: lib/setup.c:7478
+#: lib/setup.c:7523
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "キースロットを追加できません。全てのスロットが無効でボリュームキーが渡されませんでした。"
 
-#: lib/setup.c:7551 lib/verity/verity.c:333
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "キーをカーネルキーリングにロードできません。"
 
-#: lib/setup.c:7742
+#: lib/setup.c:7807
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "キーリング \"%s\" が見つかりませんでした。"
 
-#: lib/setup.c:7807
+#: lib/setup.c:7872
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "グローバル memory-hard アクセス直列化ロックが取れません。"
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "キーファイルがオープンできません。"
 
-#: lib/utils.c:212
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "ターミナルからキーファイルを読みこめません。"
 
-#: lib/utils.c:228
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "キーファイルを stat() できません。"
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "指定されたキーファイルオフセットにシークできません。"
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "パスフレーズ読み込み中にメモリが不足しました。"
 
-#: lib/utils.c:286
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "パスフレーズの読み込みでエラー。"
 
-#: lib/utils.c:303
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "読もうとしたら入力が空です。"
 
-#: lib/utils.c:310
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "キーファイルが最大サイズを超えています。"
 
-#: lib/utils.c:315
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "指定されたサイズのデータを読み込めません。"
 
@@ -960,7 +960,7 @@ msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "暗号の指定は [暗号]-[モード]-[初期ベクタ] という形式であるべきです。"
 
 #: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
 #: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
@@ -974,13 +974,13 @@ msgstr "一時的なキーストアデバイスを開けません。"
 msgid "Failed to access temporary keystore device."
 msgstr "一時的なキーストアデバイスにアクセスできません。"
 
-#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "キースロットを暗号化中にI/Oエラーが発生しました。"
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
@@ -991,7 +991,7 @@ msgstr "キースロットを暗号化中にI/Oエラーが発生しました。
 msgid "Cannot open device %s."
 msgstr "デバイス %s を開けません。"
 
-#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "キースロットを復号化中にI/Oエラーが発生しました。"
 
@@ -1081,7 +1081,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "暗号ハッシュを小文字に修復しました (%s)。"
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "要求された LUKS ハッシュ %s はサポートしていません。"
@@ -1128,7 +1128,7 @@ msgstr "LUKS 暗号モード %s は不正です。"
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS ハッシュ %s は不正です。"
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
 msgid "No known problems detected for LUKS header."
 msgstr "LUKS ヘッダに既知の不具合は検出されませんでした。"
 
@@ -1142,50 +1142,50 @@ msgstr "デバイス %s の LUKS ヘッダを更新中にエラーが発生し
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "デバイス %s の LUKS ヘッダを更新後の再読み込み中にエラーが発生しました。"
 
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:750
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "LUKS ヘッダのデータへのオフセットは 0 かヘッダサイズより大きくなければいけません。"
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:701
 msgid "Wrong LUKS UUID format provided."
 msgstr "LUKS UUID の形式が間違っています。"
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "LUKS ヘッダを作成できません: ランダムなソルトを読み込めません。"
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "LUKS ヘッダを作成できません: ヘッダのハッシュが求められません (ハッシュには %s を使用)。"
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "キースロット %d が使用中なので、パージしてください。"
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "キースロット %d のストライプが少なすぎます。ヘッダを細工でもしましたか？"
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "PBKDF2 イテレーション回数がオーバーフローしました。"
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "キースロットをオープンできません (ハッシュ %s を使用)。"
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "キースロット %d は不正です。0 から %d の間を選んでください。"
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "デバイス %s をワイプできません。"
@@ -1206,56 +1206,48 @@ msgstr "互換性のない loop-AES キーファイルが検出されました
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "カーネルが loop-AES 互換マッピングをサポートしていません。"
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "キーファイル %s を読み込み中にエラー。"
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "TCRYPT パスフレーズの最大長 (%zu) を超えました。"
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "PBKDF2 ハッシュアルゴリズム %s が利用できないのでスキップします。"
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
-msgid "Required kernel crypto interface not available."
-msgstr "必要なカーネル crypto インターフェースが使用できません。"
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "algif_skcipher カーネルモジュールをロードしてください。"
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "アクティベーションは %d セクタサイズではサポートしていません。"
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "カーネルが TCRYPT レガシーモードのアクティベーションをサポートしていません。"
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "TCRYPT システム暗号をパーティション %s に対してアクティベーションしました。"
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:819
 msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
 msgstr "TCRYPT システムパーティションのオフセットがわからないため、全暗号領域をアクティベートします。"
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:828
 msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
 msgstr "TCRYPT システムパーティションのオフセットがわからないため、デバイスをシステムパーティションとしてアクティベートします。"
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "カーネルが TCRYPT 互換のマッピングをサポートしていません。"
 
-#: lib/tcrypt/tcrypt.c:1146
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "この機能は TCRYPT ヘッダの読み込みなしではサポートしません。"
 
@@ -1608,8 +1600,7 @@ msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "警告: LUKS2 キースロット領域サイズが %<PRIu64> バイトに変更されました。\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "デバイス %s の読み込みのためのロックを取得できませんでした。"
@@ -1669,79 +1660,79 @@ msgstr ""
 msgid "Ignored unknown flag %s."
 msgstr "不明なフラグ %s を無視しました。"
 
-#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "dm-crypt セグメント %u にキーがありません"
 
-#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "dm-crypt セグメントの設定に失敗しました。"
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "dm-linear セグメントの設定に失敗しました。"
 
-#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "LUKS2 ヘッダに既知の暗号スペックパターンを検出できませんでした。"
 
-#: lib/luks2/luks2_json_metadata.c:2691
+#: lib/luks2/luks2_json_metadata.c:2709
 msgid "OPAL device must have static device size."
 msgstr "OPAL デバイスは固定デバイスサイズでなければなりません。"
 
-#: lib/luks2/luks2_json_metadata.c:2711
+#: lib/luks2/luks2_json_metadata.c:2729
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "整合性が有効な暗号化 OPAL デバイスはロックレンジより小さくなければなりません。"
 
-#: lib/luks2/luks2_json_metadata.c:2716
+#: lib/luks2/luks2_json_metadata.c:2734
 msgid "OPAL device must have same size as locking range."
 msgstr "OPAL デバイスはロックレンジと同じサイズでなければなりません。"
 
-#: lib/luks2/luks2_json_metadata.c:2736
+#: lib/luks2/luks2_json_metadata.c:2754
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "OPAL デバイス %s は既にアンロックされています。\n"
 
-#: lib/luks2/luks2_json_metadata.c:2775
+#: lib/luks2/luks2_json_metadata.c:2793
 msgid "Unsupported device integrity configuration."
 msgstr "サポートしていないデバイス整合性設定です。"
 
-#: lib/luks2/luks2_json_metadata.c:2791
+#: lib/luks2/luks2_json_metadata.c:2809
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "dm-integrity デバイスがデータセクタに対して期待通りではありません。"
 
-#: lib/luks2/luks2_json_metadata.c:2886
+#: lib/luks2/luks2_json_metadata.c:2911
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "再暗号化が実行中なのでデバイスのデアクティベートできません。. Cannot deactivate device."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "サスペンドされたデバイス %s を dm-error ターゲットで置き換えられません。"
 
-#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "デバイス %s はデアクティベートされましたが、ハードウェア OPAL デバイスはロックできません。"
 
-#: lib/luks2/luks2_json_metadata.c:3020
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Unmet LUKS2 requirements detected."
 msgstr "満たせない LUKS2 の必要条件があります。"
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3053
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "操作がレガシー再暗号化とマークされたデバイスと互換性がありません。中止します。"
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3055
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "操作が LUKS2 再暗号化とマークされたデバイスと互換性がありません。中止します。"
 
-#: lib/luks2/luks2_json_metadata.c:3032
+#: lib/luks2/luks2_json_metadata.c:3057
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "操作が OPAL を用いたデバイスと互換性がありません。中止します。"
 
-#: lib/luks2/luks2_json_metadata.c:3034
+#: lib/luks2/luks2_json_metadata.c:3059
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "操作がインラインHWタグを用いたデバイスと互換性がありません。中止します。"
 
@@ -1753,22 +1744,22 @@ msgstr "キースロットをオープンするのにメモリが足りません
 msgid "Keyslot open failed."
 msgstr "キースロットのオープンに失敗しました。"
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "キースロットの暗号化に %s- %s 暗号は使えません。"
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "キースロットの暗号化に %s 暗号は使えません。"
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr "キースロットキー派生のためのメモリが足りません。"
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "ハッシュアルゴリズム %s が利用できません。"
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "新しいキースロット用の領域がありません。"
 
@@ -1785,335 +1776,335 @@ msgstr "耐性タイプを更新できません。新しいタイプは %<PRIu64
 msgid "Failed to refresh reencryption verification digest."
 msgstr "再暗号化検証ダイジェストのリフレッシュに失敗しました。"
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "UUID が %s のデバイスの状態が確認できません。"
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "LUKSMETA メタデータ付きのヘッダは変換できません。"
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "暗号スペック %s-%s は LUKS2 に使えません。"
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr "暗号スペック %s-%s は LUKS2 キースロットに使えません。"
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "領域が足りないのでキースロット領域を動かせません。"
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "LUKS2 形式に変換できません - メタデータが不正です。"
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "LUKS2 キースロット領域が足りないのでキースロット領域を動かせません。"
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr "キースロット領域を動かせません。"
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "LUKS1 形式に変換できません - デフォルトの暗号セクタサイズが 512 バイトではありません。"
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "LUKS1 形式に変換できません - キースロットのハッシュ関数が LUKS1 互換ではありません。"
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "LUKS1 形式に変換できません - ラップされたキーの暗号に %s が使われています。"
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "LUKS1 形式に変換できません - デバイスが多くのセグメントを使っています。"
 
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "LUKS1 形式に変換できません - LUKS2 ヘッダ %u 個のトークンを含んでいます。"
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:798
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "LUKS1 形式に変換できません - アクティブなキースロットがありません。"
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "LUKS1 形式に変換できません - キースロット %u が不正な状態です。"
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:815
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "LUKS1 形式に変換できません - キースロット %u が unbound です。"
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "LUKS1 形式に変換できません - スロット %u が(最大個数を超過して)有効です。"
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "LUKS1 形式に変換できません - キースロット %u が LUKS1 と互換ではありません。"
 
-#: lib/luks2/luks2_reencrypt.c:1198
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "ホットゾーンサイズは計算されたゾーンアライメントの倍数である必要がありす (%zu バイト)."
 
-#: lib/luks2/luks2_reencrypt.c:1203
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "デバイスサイズが計算ゾーンアライメント (%zu バイト) に合っていません。"
 
-#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
-#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4080
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "古いセグメントのストレージラッパの初期化に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "新しいセグメントのストレージラッパの初期化に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "ホットゾーン保護の初期化に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:1623
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "現在のホットゾーンのチェックサムを読み込めません。"
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "%<PRIu64> から始めるホットゾーンエリアを読み込めません。"
 
-#: lib/luks2/luks2_reencrypt.c:1649
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "セクタ %zu を復号できません。"
 
-#: lib/luks2/luks2_reencrypt.c:1655
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "セクタ %zu を復元できません。"
 
-#: lib/luks2/luks2_reencrypt.c:2208
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "ソースとターゲットデバイスのサイズが一致しません。ソース %<PRIu64>, ターゲット: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2310
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "ホットゾーンデバイス %s がアクティベートできません。"
 
-#: lib/luks2/luks2_reencrypt.c:2322
+#: lib/luks2/luks2_reencrypt.c:2323
 #, c-format
 msgid "Failed to allocate hotzone device %s."
 msgstr "ホットゾーンデバイス %s を確保できません。"
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "実際の origin table があるオーバーレイデバイス %s をアクティベートできません。"
 
-#: lib/luks2/luks2_reencrypt.c:2346
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "デバイス %s の新しいマッピングをロードできません。"
 
-#: lib/luks2/luks2_reencrypt.c:2418
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
 msgstr "再暗号化デバイススタックのリフレッシュに失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:2615
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
 msgstr "新しいキースロットエリアサイズを設定できません。"
 
-#: lib/luks2/luks2_reencrypt.c:2751
+#: lib/luks2/luks2_reencrypt.c:2752
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "データシフト値が要求された暗号化セクタサイズにアラインされていません(%<PRIu32> バイト)。"
 
-#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "耐性(resilience)モード %s はサポートしていません"
 
-#: lib/luks2/luks2_reencrypt.c:2824
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
 msgstr "移動されるセグメントサイズはデータシフト値より大きくできません。"
 
-#: lib/luks2/luks2_reencrypt.c:2866
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
 msgstr "不正な再暗号化耐性パラメータを要求されました。"
 
-#: lib/luks2/luks2_reencrypt.c:2888
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "移動されるセグメントが大きすぎます。要求されているサイズは %<PRIu64> ですが、使えるサイズは %<PRIu64> です。"
 
-#: lib/luks2/luks2_reencrypt.c:2977
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "テーブルをクリアできません。"
 
-#: lib/luks2/luks2_reencrypt.c:3063
+#: lib/luks2/luks2_reencrypt.c:3064
 #, c-format
 msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
 msgstr "データシフト (%<PRIu64> セクタ) が今後のデータオフセットより少ないです (%<PRIu64> セクタ)。"
 
-#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
 msgstr "小さくしたデータサイズが実際のデバイスサイズより大きいです。"
 
-#: lib/luks2/luks2_reencrypt.c:3095
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "データデバイスが暗号化セクタサイズにアラインされていません(%<PRIu32> バイト)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
-#: lib/luks2/luks2_reencrypt.c:3664
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "デバイス %s を排他モードでオープンでません (既にマップされているかマウントされています)。"
 
-#: lib/luks2/luks2_reencrypt.c:3332
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "デバイスは LUKS2 再暗号化向けにマークされていません。"
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "LUKS2 再暗号化コンテキストをロードできません。"
 
-#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
 msgstr "デバイス %s は再暗号化中ではありません。"
 
-#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
 msgstr "既に再暗号化中です。"
 
-#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
 msgstr "再暗号化ロックを取得できません。"
 
-#: lib/luks2/luks2_reencrypt.c:3471
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "再暗号化を開始できません。再暗号化のリカバリを先にしてください。"
 
-#: lib/luks2/luks2_reencrypt.c:3607
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
 msgstr "実際のデバイスサイズと要求された再暗号化サイズが一致しません。"
 
-#: lib/luks2/luks2_reencrypt.c:3621
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "再暗号化のパラメータとして不正なデバイスサイズが要求されました。"
 
-#: lib/luks2/luks2_reencrypt.c:3723
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "既に再暗号化中です。復元を実行できません。"
 
-#: lib/luks2/luks2_reencrypt.c:3744
+#: lib/luks2/luks2_reencrypt.c:3745
 msgid "LUKS2 reencryption recovery failed."
 msgstr "LUKS2 の再暗号化は既に初期化されました。"
 
-#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
 msgid "Failed to initialize reencryption device stack."
 msgstr "再暗号化デバイススタックの初期化に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:3910
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "メタデータの LUKS2 の再暗号化は既に初期化されました。"
 
-#: lib/luks2/luks2_reencrypt.c:3918
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "メタデータの LUKS2 再暗号化に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
-#: lib/luks2/luks2_reencrypt.c:4033
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "再暗号化は DAX デバイスではサポートされていません。"
 
-#: lib/luks2/luks2_reencrypt.c:4062
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "デバイスセグメントの次の再暗号化ホットゾーンの設定に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
 msgstr "再暗号化した耐性用メタデータを書き込めません。"
 
-#: lib/luks2/luks2_reencrypt.c:4122
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "復号に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:4127
+#: lib/luks2/luks2_reencrypt.c:4128
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "%<PRIu64> から始まるホットゾーンエリアに書き込めません。"
 
-#: lib/luks2/luks2_reencrypt.c:4132
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
 msgstr "データを sync できません。"
 
-#: lib/luks2/luks2_reencrypt.c:4140
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "現在のホットゾーンの再暗号化完了後にメタデータが更新できません。"
 
-#: lib/luks2/luks2_reencrypt.c:4229
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
 msgstr "LUKS2 メタデータが書き込めません。"
 
-#: lib/luks2/luks2_reencrypt.c:4252
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
 msgstr "未使用データデバイス領域を消せません。"
 
-#: lib/luks2/luks2_reencrypt.c:4258
+#: lib/luks2/luks2_reencrypt.c:4259
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "未使用のキースロット %d を削除できませんでした。"
 
-#: lib/luks2/luks2_reencrypt.c:4268
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
 msgstr "再暗号化キースロットが削除できません。"
 
-#: lib/luks2/luks2_reencrypt.c:4278
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "%<PRIu64> から %<PRIu64> セクタのチャンクの再暗号化中に致命的なエラー。"
 
-#: lib/luks2/luks2_reencrypt.c:4282
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
 msgstr "オンライン再暗号化に失敗しました。"
 
-#: lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "手動でエラーターゲットに置き換えた場合以外はデバイスのレジュームをしないでください。"
 
-#: lib/luks2/luks2_reencrypt.c:4339
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "再暗号化を開始できません。予期しない再暗号化状態です。"
 
-#: lib/luks2/luks2_reencrypt.c:4345
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
 msgstr "ないか不正な再暗号化コンテキストです。"
 
-#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
 msgstr "再暗号化コンテキストが更新できません。"
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "再暗号化メタデータが不正です。"
 
@@ -2145,7 +2136,7 @@ msgstr "キースロットの暗号化パラメータは LUKS2 デバイスで
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "キースロットの暗号化パラメータは LUKS2 キースロット暗号化と互換性がありません。"
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
+#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2173,7 +2164,7 @@ msgstr "警告: --hash パラメータは plain モードでキーファイル
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "警告: --keyfile-size オプションは無視されて、読み込みサイズは暗号鍵のサイズと同じになります。\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2184,9 +2175,9 @@ msgstr "%s の Blkid スキャンが失敗しました。"
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "%s にデバイス署名が検出されました。既にあるデータを破壊しかねません。"
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
-#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
-#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
+#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
+#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2235,7 +2226,7 @@ msgstr ""
 "暗号化されたパーティションにパスフレーズなしでアクセス可能にます。\n"
 "このダンプは暗号化された安全な所に保存してください。"
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2259,9 +2250,9 @@ msgstr "FVAULT2 のボリュームキーサイズが決定できないので、-
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "デバイス %s はまたアクティブで後から削除される予定になっています。.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
-#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
-#: src/cryptsetup.c:3262
+#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
+#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
+#: src/cryptsetup.c:3261
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "外部トークンパス %s の設定に失敗しました。"
@@ -2298,31 +2289,35 @@ msgstr "%-10s %4u 回, %5u KB使用, %1u スレッド (%zu のビットの鍵) (
 msgid "Result of benchmark is not reliable."
 msgstr "ベンチマークの結果は信頼できません。"
 
-#: src/cryptsetup.c:1170
+#: src/cryptsetup.c:1171
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# テストはストレージI/Oがなくメモリ上のもののため目安です。\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1195
+#: src/cryptsetup.c:1196
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algorithm |      キー |          暗号化 |           復号化\n"
 
-#: src/cryptsetup.c:1203
+#: src/cryptsetup.c:1204
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "暗号 %s (キーサイズ %i ビット) は利用できません。"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1222
+#: src/cryptsetup.c:1225
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algorithm |      キー |          暗号化 |           復号化\n"
 
-#: src/cryptsetup.c:1233
+#: src/cryptsetup.c:1238
 msgid "N/A"
 msgstr "計測値なし"
 
-#: src/cryptsetup.c:1258
+#: src/cryptsetup.c:1241
+msgid "# Cipher speed test is not available.\n"
+msgstr "# 暗号スピードテストは利用できません。\n"
+
+#: src/cryptsetup.c:1257
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2330,27 +2325,27 @@ msgstr ""
 "保護されていない LUKS2 再暗号化メタデータが検出されました。再暗号化操作が望ましいものか確認してください。(luksDump の出力を見てください)\n"
 "そのうえで、この操作が問題ないと確認できたら継続(メタデータのアップグレード)してください。"
 
-#: src/cryptsetup.c:1264
+#: src/cryptsetup.c:1263
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "再暗号化メタデータの保護とアップグレードのためのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1308
+#: src/cryptsetup.c:1307
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "本当に LUKS2 再暗号化リカバリを行いますか？"
 
-#: src/cryptsetup.c:1317
+#: src/cryptsetup.c:1316
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "再暗号化メタデータダイジェストを検証するためのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1318
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "再暗号化のリカバリのためのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1381
+#: src/cryptsetup.c:1380
 msgid "Really try to repair LUKS device header?"
 msgstr "本当に LUKS デバイスヘッダの復元を試みていいですか？"
 
-#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2358,7 +2353,7 @@ msgstr ""
 "\n"
 "ワイプが中断されました。"
 
-#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2366,167 +2361,167 @@ msgstr ""
 "整合性チェックサムの初期化のためにデバイスのデータを消去しています。\n"
 "CTRL+c で中止できます (初期化されなかったデバイスのチェックサムは正しくなくなります)。\n"
 
-#: src/cryptsetup.c:1436 src/integritysetup.c:103
+#: src/cryptsetup.c:1435 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "一時的デバイス %s を非アクティブにできません。"
 
-#: src/cryptsetup.c:1484
+#: src/cryptsetup.c:1483
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "OPAL hw-only 暗号化は --cipher や --key-size をサポートしないため、無視されました。"
 
-#: src/cryptsetup.c:1497
+#: src/cryptsetup.c:1496
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "整合性オプションは LUKS2 形式でしか使えません。"
 
-#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
+#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "サポートされていない LUKS2 メタデータのサイズオプションです。"
 
-#: src/cryptsetup.c:1507
+#: src/cryptsetup.c:1506
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL は LUKS2 フォーマットでしかサポートされていません。"
 
-#: src/cryptsetup.c:1512
+#: src/cryptsetup.c:1511
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "インライン hw タグは LUKS2 フォーマットでしかサポートされていません。"
 
-#: src/cryptsetup.c:1521
+#: src/cryptsetup.c:1520
 msgid "Header file does not exist, do you want to create it?"
 msgstr "ヘッダファイルがありません。作成しますか？"
 
-#: src/cryptsetup.c:1529
+#: src/cryptsetup.c:1528
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "ヘッダファイル %s を作成できません。"
 
-#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
 #: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
 #: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "サポートしている整合性方式が検出されませんでした。"
 
-#: src/cryptsetup.c:1557
+#: src/cryptsetup.c:1556
 msgid "Cannot use specified integrity key size."
 msgstr "指定されたジャーナル整合性キーのサイズが使えません。"
 
-#: src/cryptsetup.c:1575
+#: src/cryptsetup.c:1574
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "%s を on-disk ヘッダとして使えません。"
 
-#: src/cryptsetup.c:1604 src/integritysetup.c:172
+#: src/cryptsetup.c:1603 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "%s のデータを上書きします。戻せません。"
 
-#: src/cryptsetup.c:1641
+#: src/cryptsetup.c:1640
 msgid "OPAL Admin password cannot be empty."
 msgstr "OPAL 管理者パスワードは空ではいけません。"
 
-#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
-#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
+#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "pbkdf パラメータを設定できません。"
 
-#: src/cryptsetup.c:1786
+#: src/cryptsetup.c:1785
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "分離された LUKS ヘッダでのみ少ないデータオフセットが使えます。"
 
-#: src/cryptsetup.c:1793
+#: src/cryptsetup.c:1792
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "LUKS ファイルコンテナ %s がアクティベートするには小さすぎます。データ用の領域に空きがありません。"
 
-#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "キースロットのない LUKS のボリュームキーサイズが決定できないので、--key-size を使ってください。"
 
-#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "デバイスには2つのボリュームキーが必要です。"
 
-#: src/cryptsetup.c:1889
+#: src/cryptsetup.c:1888
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "いくつかの指定されたアクティベーションパラメータは OPAL hw-only 暗号化では無視されました。"
 
-#: src/cryptsetup.c:1894
+#: src/cryptsetup.c:1893
 msgid "Device activated but cannot make flags persistent."
 msgstr "デバイスはアクティベートされましたが、フラグを恒常的なものにできません。"
 
-#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
+#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "キースロット %d は削除対象として選択されました。"
 
-#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
+#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "これは最後のキースロットです。このキーがなくなるとデバイスは使用不能になります。"
 
-#: src/cryptsetup.c:1987
+#: src/cryptsetup.c:1986
 msgid "Enter any remaining passphrase: "
 msgstr "残っているパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "操作は中止されました。キースロットは消去されていません。\n"
 
-#: src/cryptsetup.c:2024
+#: src/cryptsetup.c:2023
 msgid "Enter passphrase to be deleted: "
 msgstr "削除するキーのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
-#: src/cryptsetup.c:3253
+#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
+#: src/cryptsetup.c:3252
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "デバイス %s は有効な LUKS2 デバイスではありません。"
 
-#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
+#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
 msgid "Enter new passphrase for key slot: "
 msgstr "キースロットの新しいパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2147 src/utils_luks.c:342
+#: src/cryptsetup.c:2146 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "トークンPINを入力してください: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:344
+#: src/cryptsetup.c:2148 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "トークン %d PINを入力してください: "
 
-#: src/cryptsetup.c:2208
+#: src/cryptsetup.c:2207
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "警告: --key-slot パラメータは新しいキースロット番号に使われます。\n"
 
-#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "有効なパスフレーズをどれか入力してください: "
 
-#: src/cryptsetup.c:2381
+#: src/cryptsetup.c:2380
 msgid "Enter passphrase to be changed: "
 msgstr "変更するキーのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "新しいキーのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2447
+#: src/cryptsetup.c:2446
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "変換されるキースロットのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2471
+#: src/cryptsetup.c:2470
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "isLuks は一つのデバイス引数しかサポートしていません。"
 
-#: src/cryptsetup.c:2576
+#: src/cryptsetup.c:2575
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "キースロット %d は unbound キーを含んでいません。"
 
-#: src/cryptsetup.c:2581
+#: src/cryptsetup.c:2580
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2534,52 +2529,52 @@ msgstr ""
 "unbound キーを使ったヘッダダンプは取り扱いに注意すべき情報です。\n"
 "このダンプは暗号化された安全な所に保存してください。"
 
-#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
+#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s はアクティブな %s デバイスではありません。"
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2706
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s はアクティブな LUKS デバイス名ではないか、ヘッダがありません。"
 
-#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
+#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
 msgid "Option --header-backup-file is required."
 msgstr "オプション --header-backup-file が必要です。"
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2833
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s は cryptsetup で管理されているデバイスではありません。"
 
-#: src/cryptsetup.c:2845
+#: src/cryptsetup.c:2844
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "リフレッシュはデバイスタイプ %s ではサポートされていません。"
 
-#: src/cryptsetup.c:2895
+#: src/cryptsetup.c:2894
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "%s は認識できないメタデータデータタイプです。"
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2896
 msgid "Command requires device and mapped name as arguments."
 msgstr "コマンドはデバイスとマップされた名前を引数として必要とします。"
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL PSID: "
 msgstr "OPAL PSID を入力してください: "
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL Admin password: "
 msgstr "OPAL 管理者パスワードを入力してください: "
 
-#: src/cryptsetup.c:2923
+#: src/cryptsetup.c:2922
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "警告: ディスク「全体」が出荷状態にリセットされ、データは全て消失します！続けますか？"
 
-#: src/cryptsetup.c:2966
+#: src/cryptsetup.c:2965
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2588,363 +2583,363 @@ msgstr ""
 "この処理はデバイス %s の全てのキースロットを消去します。\n"
 "デバイスのデータは使用できなくなります。"
 
-#: src/cryptsetup.c:2973
+#: src/cryptsetup.c:2972
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "処理は中止されました。キースロットは消去されません。\n"
 
-#: src/cryptsetup.c:3012
+#: src/cryptsetup.c:3011
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "不正な LUKS タイプです。luks1 と luks2 しかサポートしていません。"
 
-#: src/cryptsetup.c:3028
+#: src/cryptsetup.c:3027
 #, c-format
 msgid "Device is already %s type."
 msgstr "デバイスは既にタイプ %s です。"
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:3034
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "この処理は %s から %s フォーマットに変換します。\n"
 
-#: src/cryptsetup.c:3038
+#: src/cryptsetup.c:3037
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "処理は中止されました。デバイスは変換されませんでした。\n"
 
-#: src/cryptsetup.c:3078
+#: src/cryptsetup.c:3077
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "オプション --priority, --label か --subsystem がありません。"
 
-#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
+#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
 #, c-format
 msgid "Token %d is invalid."
 msgstr "トークン %d は不正です。"
 
-#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
+#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
 #, c-format
 msgid "Token %d in use."
 msgstr "トークン %d は使用中です。"
 
-#: src/cryptsetup.c:3127
+#: src/cryptsetup.c:3126
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "luks2-キーリングトークン %d を追加できませんでした。"
 
-#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
+#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "トークン %d をキースロット %d に割りあてられませんでした。"
 
-#: src/cryptsetup.c:3155
+#: src/cryptsetup.c:3154
 #, c-format
 msgid "Token %d is not in use."
 msgstr "トークン %d は使われていません。"
 
-#: src/cryptsetup.c:3192
+#: src/cryptsetup.c:3191
 msgid "Failed to import token from file."
 msgstr "ファイルからトークンをインポートできません。"
 
-#: src/cryptsetup.c:3217
+#: src/cryptsetup.c:3216
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "トークン %d をエクスポートのために取得できませんでした。"
 
-#: src/cryptsetup.c:3230
+#: src/cryptsetup.c:3229
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "トークン %d をキースロット %d に割りあてられませんでした。"
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
+#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "トークン %d をキースロット %d の割り当てから解除できませんでした。"
 
-#: src/cryptsetup.c:3298
+#: src/cryptsetup.c:3297
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "--tcrypt-hidden と --tcrypt-system と --tcrypt-backup は TCRYPT デバイスしか使えません。"
 
-#: src/cryptsetup.c:3301
+#: src/cryptsetup.c:3300
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "--veracrypt や --disable-veracrypt は TCRYPT デバイスでしか使えません。"
 
-#: src/cryptsetup.c:3304
+#: src/cryptsetup.c:3303
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "--veracrypt-pim は VeraCrypt 互換デバイスにしか使えません。"
 
-#: src/cryptsetup.c:3308
+#: src/cryptsetup.c:3307
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "--veracrypt-query-pim は VeraCrypt 互換デバイスにしか使えません。"
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3309
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "--veracrypt-pim と --veracrypt-query-pim はどちらかしか使えません。"
 
-#: src/cryptsetup.c:3319
+#: src/cryptsetup.c:3318
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "--persistent は --test-passphrase と一緒には使えません。"
 
-#: src/cryptsetup.c:3322
+#: src/cryptsetup.c:3321
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "--refresh と --test-passphrase は同時には使えません。"
 
-#: src/cryptsetup.c:3325
+#: src/cryptsetup.c:3324
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "--shared は plain デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3328
+#: src/cryptsetup.c:3327
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "--skip は plain か loopaes デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3331
+#: src/cryptsetup.c:3330
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "--offset は plain か loopaes デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3334
+#: src/cryptsetup.c:3333
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "--tcrypt-hidden は --allow-discards と一緒に使えません。"
 
-#: src/cryptsetup.c:3338
+#: src/cryptsetup.c:3337
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "オープン時のセクタサイズオプションは plain デバイスでしかサポートされていません。"
 
-#: src/cryptsetup.c:3342
+#: src/cryptsetup.c:3341
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "大きな IV セクタオプションは plain タイプでセクタサイズが 512 バイトより大きいものをオープンする時しかサポートしていません。"
 
-#: src/cryptsetup.c:3347
+#: src/cryptsetup.c:3346
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "--test-passphrase は LUKS か TCRYPT か BITLK か FVAULT2 デバイスの open にしか使えません。."
 
-#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
+#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
 msgid "Options --device-size and --size cannot be combined."
 msgstr "--device-size と --size は一緒に使えません。"
 
-#: src/cryptsetup.c:3353
+#: src/cryptsetup.c:3352
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "オプション --unbound は luks デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3356
+#: src/cryptsetup.c:3355
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "オプション --unbound は --test-passphrase がないと使えません。"
 
-#: src/cryptsetup.c:3360
+#: src/cryptsetup.c:3359
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "--volume-key-keyring オプションは --hash や --volume-key-file と一緒には使えません。"
 
-#: src/cryptsetup.c:3363
+#: src/cryptsetup.c:3362
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "--volume-key-file オプションは対応する --key-size オプションとペアになる必要があります。"
 
-#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "オプション --cancel-deferred と --deferred は同時に使えません。"
 
-#: src/cryptsetup.c:3388
+#: src/cryptsetup.c:3387
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "オプション --active-nameは LUKS2 デバイスでしか設定できません。"
 
-#: src/cryptsetup.c:3391
+#: src/cryptsetup.c:3390
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "オプション --active-name と --force-offline-reencrypt は一緒に使えません。"
 
-#: src/cryptsetup.c:3394
+#: src/cryptsetup.c:3393
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "--new-volume-key-file オプションと --keep-key は一緒に使えません。"
 
-#: src/cryptsetup.c:3397
+#: src/cryptsetup.c:3396
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "--new-volume-key-keyring オプションと --keep-key は一緒に使えません。"
 
-#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
+#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
 msgid "Keyslot specification is required."
 msgstr "キースロットの指定が必要です。"
 
-#: src/cryptsetup.c:3413
+#: src/cryptsetup.c:3412
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "--align-payload と --offset は一緒に使えません。"
 
-#: src/cryptsetup.c:3416
+#: src/cryptsetup.c:3415
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "--integrity-no-wipe は format で整合性拡張付きの時しか使えません。"
 
-#: src/cryptsetup.c:3419
+#: src/cryptsetup.c:3418
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "--use-[u]random は一つしか使えません。"
 
-#: src/cryptsetup.c:3427
+#: src/cryptsetup.c:3426
 msgid "Key size is required with --unbound option."
 msgstr "--unbound にはキーサイズが必要です。"
 
-#: src/cryptsetup.c:3447
+#: src/cryptsetup.c:3446
 msgid "Invalid token action."
 msgstr "不正なトークンアクションです。"
 
-#: src/cryptsetup.c:3450
+#: src/cryptsetup.c:3449
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "--key-description はトークン追加には必須です。"
 
-#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
+#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "トークンを必要としています。--token-id を使用してください。"
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3457
 msgid "Option --unbound is valid only with token add action."
 msgstr "オプション --unbound はトークンの追加にしか使えません。"
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3459
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "--key-slot と --unbound は一緒に使えません。"
 
-#: src/cryptsetup.c:3465
+#: src/cryptsetup.c:3464
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "特定のキースロットを必要としています。--key-slot を使用してください。"
 
-#: src/cryptsetup.c:3481
+#: src/cryptsetup.c:3480
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<デバイス> [--type <タイプ>] [<名前>]"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "デバイスを <名前> としてオープン"
 
-#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
 #: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
 #: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<名前>"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "デバイスをクローズします (マッピングを削除します)"
 
-#: src/cryptsetup.c:3483 src/integritysetup.c:558
+#: src/cryptsetup.c:3482 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "アクティブデバイスをリサイズ"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3483
 msgid "show device status"
 msgstr "デバイスステータスを表示"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <暗号>]"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "benchmark cipher"
 msgstr "暗号ベンチマーク"
 
-#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
-#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
-#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
-#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
-#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
+#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
+#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
 msgid "<device>"
 msgstr "<デバイス>"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3485
 msgid "try to repair on-disk metadata"
 msgstr "on-disk メタデータを修復しようとしています"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3486
 msgid "reencrypt LUKS2 device"
 msgstr "LUKS2 デバイスを再暗号化"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3487
 msgid "erase all keyslots (remove encryption key)"
 msgstr "全てのキースロットを消去します (暗号鍵も削除します)"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3488
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "LUKS2 から LUKS もしくは LUKS から LUKS2 形式に変換します"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3489
 msgid "set permanent configuration options for LUKS2"
 msgstr "LUKS2 の permanent configuration オプションを設定します"
 
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
 msgid "<device> [<new key file>]"
 msgstr "<デバイス> [<新しいキーファイル>]"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3490
 msgid "formats a LUKS device"
 msgstr "LUKS デバイスをフォーマットします"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3491
 msgid "add key to LUKS device"
 msgstr "LUKS デバイスにキーを追加します"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
 msgid "<device> [<key file>]"
 msgstr "<デバイス> [<キーファイル>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3492
 msgid "removes supplied key or key file from LUKS device"
 msgstr "与えられたキーかキーファイルを LUKS デバイスから削除します。"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3493
 msgid "changes supplied key or key file of LUKS device"
 msgstr "与えられた LUKS デバイスのキーかキーファイルを変更します"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3494
 msgid "converts a key to new pbkdf parameters"
 msgstr "キーを新しい pbkdf パラメータに変換します"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "<device> <key slot>"
 msgstr "<デバイス> <キースロット>"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "<キースロット>のキーを LUKS デバイスから削除します"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3496
 msgid "print UUID of LUKS device"
 msgstr "LUKS デバイスの UUID を表示"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3497
 msgid "tests <device> for LUKS partition header"
 msgstr "<デバイス> の LUKS パーティションヘッダをテストします"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3498
 msgid "dump LUKS partition information"
 msgstr "LUKS パーティション情報をダンプします"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3499
 msgid "dump TCRYPT device information"
 msgstr "TCRYPT デバイス情報をダンプします"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3500
 msgid "dump BITLK device information"
 msgstr "BITLK デバイス情報をダンプします"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3501
 msgid "dump FVAULT2 device information"
 msgstr "FVAULT2 デバイス情報をダンプします"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3502
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "LUKS デバイスを停止してキーを削除します (全てのI/Oは停止します)"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3503
 msgid "Resume suspended LUKS device"
 msgstr "停止していた LUKS デバイスを再開します"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3504
 msgid "Backup LUKS device header and keyslots"
 msgstr "LUKS デバイスヘッダとキースロットをバックアップします"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3505
 msgid "Restore LUKS device header and keyslots"
 msgstr "LUKS デバイスヘッダとキースロットをリストアします"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <デバイス>"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "Manipulate LUKS2 tokens"
 msgstr "LUKS2 トークンを操作します"
 
-#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2952,7 +2947,7 @@ msgstr ""
 "\n"
 "<action> は以下のうちの一つです:\n"
 
-#: src/cryptsetup.c:3532
+#: src/cryptsetup.c:3531
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2964,7 +2959,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3536
+#: src/cryptsetup.c:3535
 #, c-format
 msgid ""
 "\n"
@@ -2979,7 +2974,7 @@ msgstr ""
 "<キースロット> は変更する LUKS キースロット番号\n"
 "<キーファイル> は luskAddKey でオプションで与えられる新しいキーのキーファイル\n"
 
-#: src/cryptsetup.c:3543
+#: src/cryptsetup.c:3542
 #, c-format
 msgid ""
 "\n"
@@ -2988,7 +2983,7 @@ msgstr ""
 "\n"
 "デフォルトのコンパイル時に決められたメタデータ形式は %s です(luksFormat で使われます)。\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3547
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -2996,12 +2991,12 @@ msgstr ""
 "\n"
 "LUKS2 外部トークンプラグインサポートは有効です。\n"
 
-#: src/cryptsetup.c:3549
+#: src/cryptsetup.c:3548
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "LUKS2 外部トークンプラグインパス: %s.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3550
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3009,7 +3004,7 @@ msgstr ""
 "\n"
 "LUKS2 外部トークンプラグインサポートは無効です。\n"
 
-#: src/cryptsetup.c:3555
+#: src/cryptsetup.c:3554
 #, c-format
 msgid ""
 "\n"
@@ -3026,7 +3021,7 @@ msgstr ""
 "デフォルト LUKS2 向け PBKDF: %s\n"
 "\t繰り返す時間: %d, 使うメモリ: %dkB, 並列スレッド: %d\n"
 
-#: src/cryptsetup.c:3566
+#: src/cryptsetup.c:3565
 #, c-format
 msgid ""
 "\n"
@@ -3041,122 +3036,122 @@ msgstr ""
 "\tplain: %s, キー: %d ビット, パスワードハッシュ: %s\n"
 "\tLUKS: %s, キー: %d ビット, LUKS ヘッダハッシュ: %s, 乱数生成: %s\n"
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3574
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: XTS モードのデフォルトキーサイズは (2つの内部キーがあるため) 倍になります。\n"
 
-#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: は %s を引数で与える必要があります"
 
-#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "キースロットは不正です。"
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3660
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "デバイスサイズは 512 バイトセクタの倍数である必要があります。"
 
-#: src/cryptsetup.c:3666
+#: src/cryptsetup.c:3665
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "再暗号化ホットゾーン最大サイズの指定が不正です。"
 
-#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
+#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
 msgid "Key size must be a multiple of 8 bits"
 msgstr "キーサイズは 8bit の倍数でなければなりません"
 
-#: src/cryptsetup.c:3687
+#: src/cryptsetup.c:3686
 msgid "At most 2 key size specifications can be supplied."
 msgstr "多くても2つのキーサイズ設定しか指定できません。"
 
-#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
+#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "多くても %d 個のボリュームキーしか指定できません。"
 
-#: src/cryptsetup.c:3739
+#: src/cryptsetup.c:3738
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "多くても %d 個のキーリングリンクしか指定できません。"
 
-#: src/cryptsetup.c:3748
+#: src/cryptsetup.c:3747
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "デバイスを減らせる最大値は 1 GiB です。"
 
-#: src/cryptsetup.c:3751
+#: src/cryptsetup.c:3750
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "減らすサイズは 512 バイトセクタの倍数である必要があります。"
 
-#: src/cryptsetup.c:3768
+#: src/cryptsetup.c:3767
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "--priority の引数は ignore/normal/prefer のいずれかのみです。"
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "このヘルプを表示します"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "コンパクトな使用法表示をします"
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "パッケージのバージョンを表示"
 
-#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "ヘルプオプション:"
 
-#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[オプション...] <アクション> <アクション特有>"
 
-#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "<アクション> がありません。"
 
-#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "未知のアクションです。"
 
-#: src/cryptsetup.c:3929
+#: src/cryptsetup.c:3928
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "--key-file は他で指定されたキーファイルを上書きします。"
 
-#: src/cryptsetup.c:3935
+#: src/cryptsetup.c:3934
 msgid "Only one --key-file argument is allowed."
 msgstr "--key-file は一つしか使えません。"
 
-#: src/cryptsetup.c:3940
+#: src/cryptsetup.c:3939
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "パスワードからキーを作る関数 (PBKDF) は pbkdf2 argon2i argon2id のいずれかのみです。"
 
-#: src/cryptsetup.c:3945
+#: src/cryptsetup.c:3944
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "PBKDF の繰り返し回数の強制と繰り返し時間指定オプションは共存できません。"
 
-#: src/cryptsetup.c:3950
+#: src/cryptsetup.c:3949
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "キーリングが無効化されているためボリュームキーをキーリングにリンクできません。"
 
-#: src/cryptsetup.c:3955
+#: src/cryptsetup.c:3954
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "キーリングが無効化されているためキーリングキー記述を使えません。"
 
-#: src/cryptsetup.c:3960
+#: src/cryptsetup.c:3959
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "インライン整合性拡張は --integrity オプション付きの時しか使えません。"
 
-#: src/cryptsetup.c:3971
+#: src/cryptsetup.c:3970
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "--keyslot-cipher と --keyslot-key-size は同時に使う必要があります。"
 
-#: src/cryptsetup.c:3979
+#: src/cryptsetup.c:3978
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "--test-args オプションつきだったため、何もしません。\n"
 
-#: src/cryptsetup.c:3992
+#: src/cryptsetup.c:3991
 msgid "Cannot disable metadata locking."
 msgstr "メタデータロックを禁止できません。"
 

From a6ea67d47a8915a8ec827212fa70e5c1b28a6163 Mon Sep 17 00:00:00 2001
From: Jakub Bogusz <qboosh@pld-linux.org>
Date: Sat, 4 Jul 2026 18:12:56 +0200
Subject: [PATCH 164/244] po: update pl.po (from translationproject.org)

---
 po/pl.po | 1013 +++++++++++++++++++++++++++---------------------------
 1 file changed, 504 insertions(+), 509 deletions(-)

diff --git a/po/pl.po b/po/pl.po
index c72e7c39b..d3970610c 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -5,10 +5,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-03-30 14:18+0200\n"
-"PO-Revision-Date: 2026-03-30 17:31+0200\n"
+"POT-Creation-Date: 2026-06-29 21:30+0200\n"
+"PO-Revision-Date: 2026-07-03 19:35+0200\n"
 "Last-Translator: Jakub Bogusz <qboosh@pld-linux.org>\n"
 "Language-Team: Polish <translation-team-pl@lists.sourceforge.net>\n"
 "Language: pl\n"
@@ -77,7 +77,7 @@ msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Żądane automatyczne przeliczenie znaczników integralności nie jest obsługiwane."
 
 #: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2781
+#: lib/luks2/luks2_json_metadata.c:2799
 msgid "Discard/TRIM is not supported."
 msgstr "Porzucenie/TRIM nie jest obsługiwane."
 
@@ -123,665 +123,665 @@ msgstr "Nieznane żądanie jakości RNG."
 msgid "Error reading from RNG."
 msgstr "Błąd odczytu z RNG."
 
-#: lib/setup.c:248
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "Obsługa OPAL jest wyłączona w libcryptsetup."
 
-#: lib/setup.c:250
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "Urządzenie %s lub jądro nie obsługuje szyfrowania OPAL."
 
-#: lib/setup.c:266
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "Nie można zainicjować backendu kryptograficznego RNG."
 
-#: lib/setup.c:272
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "Nie można zainicjować backendu kryptograficznego."
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Algorytm skrótu %s nie jest obsługiwany."
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "Błąd przetwarzania klucza (użyto algorytmu skrótu %s)."
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Nie można określić rodzaju urządzenia. Niezgodny sposób uaktywniania urządzenia?"
 
-#: lib/setup.c:395 lib/setup.c:4160
+#: lib/setup.c:398 lib/setup.c:4177
 msgid "This operation is supported only for LUKS device."
 msgstr "Ta operacja jest obsługiwana tylko dla urządzeń LUKS."
 
-#: lib/setup.c:432
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "Ta operacja jest obsługiwana tylko dla urządzeń LUKS2."
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "Wszyskie miejsca na klucze są pełne."
 
-#: lib/setup.c:500
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "Numer klucza %d jest błędny, proszę wybrać wartość między 0 a %d."
 
-#: lib/setup.c:506
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "Miejsce na klucz %d jest pełne, proszę wybrać inne."
 
-#: lib/setup.c:531 lib/setup.c:3875
+#: lib/setup.c:534 lib/setup.c:3878
 msgid "Device size is not aligned to device logical block size."
 msgstr "Rozmiar urządzenia nie jest wyrównany do rozmiaru bloku logicznego urządzenia."
 
-#: lib/setup.c:628
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "Wykryto nagłówek, ale urządzenie %s jest zbyt małe."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
-#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Ta operacja nie jest obsługiwana dla tego rodzaju urządzenia."
 
-#: lib/setup.c:674
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "Niedozwolona operacja w trakcie ponownego szyfrowania."
 
-#: lib/setup.c:806
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nie udało się wycofać zmian w metadanych LUKS2 w pamięci."
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
-#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
-#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
-#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
+#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
+#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
+#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Urządzenie %s nie jest prawidłowym urządzeniem LUKS."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Nieobsługiwana wersja LUKS %d."
 
-#: lib/setup.c:1270
+#: lib/setup.c:1273
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Nie wykryto znanego wzorca określającego szyfr dla aktywnego urządzenia %s."
 
-#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5816
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
 #, c-format
 msgid "Device %s is not active."
 msgstr "Urządzenie %s nie jest aktywne."
 
-#: lib/setup.c:1532
+#: lib/setup.c:1535
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Urządzenie stojące za urządzeniem szyfrowanym %s zniknęło."
 
-#: lib/setup.c:1614
+#: lib/setup.c:1617
 msgid "Invalid plain crypt parameters."
 msgstr "Błędne parametry szyfru plain."
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1622 lib/setup.c:2672
 msgid "Invalid key size."
 msgstr "Błędny rozmiar klucza."
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID nie jest obsługiwany dla tego rodzaju szyfrowania."
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Osobne urządzenie metadanych nie jest obsługiwane dla tego rodzaju szyfrowania."
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
 msgid "Unsupported encryption sector size."
 msgstr "Nieobsługiwany rozmiar sektora szyfrowania."
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
 msgid "Device size is not aligned to requested sector size."
 msgstr "Rozmiar urządzenia nie jest wyrównany do żądanego rozmiaru sektura."
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
 msgid "Can't format LUKS without device."
 msgstr "Nie można sformatować LUKS-a bez urządzenia."
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1707 lib/setup.c:1959
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Urządzenie Zoned %s nie może być używane dla nagłówka LUKS."
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Żądane wyrównanie metadanych nie jest zgodne z offsetem danych."
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1754 lib/setup.c:1984
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "UWAGA: urządzenie DAX może uszkodzić dane, ponieważ nie gwarantuje atomowych uaktualnień sektorów.\n"
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Nie można wymazać nagłówka na urządzeniu %s."
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1805 lib/setup.c:2164
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Urządzenie %s jest zbyt małe do uaktywnienia, nie ma miejsca pozostałego na dane.\n"
 
-#: lib/setup.c:1843
+#: lib/setup.c:1846
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Klucz wolumenu jest zbyt mały do szyfrowania z rozszerzeniami integralności."
 
-#: lib/setup.c:1847
+#: lib/setup.c:1850
 msgid "Integrity key size is too small."
 msgstr "Rozmiar klucza integralności jest zbyt mały."
 
-#: lib/setup.c:1856
+#: lib/setup.c:1859
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Szyfr %s-%s (rozmiar klucza w bitach: %zd) nie jest dostępny."
 
-#: lib/setup.c:1897
+#: lib/setup.c:1900
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "UWAGA: uaktywnienie urządzenia się nie powiedzie, dm-crypt nie ma obsługi żądanego rozmiaru sektora szyfrowania.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
-#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4497
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Urządzenie %s jest zbyt małe."
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Nie można sformatować urządzenia %s, które jest w użyciu."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Nie można sformatować urządzenia %s, brak uprawnień."
 
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Nie można sformatować integralności dla urządzenia %s."
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2151 lib/setup.c:2629
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Nie można sformatować urządzenia %s."
 
-#: lib/setup.c:2191
+#: lib/setup.c:2194
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Nie można pobrać parametrów wyrównania OPAL."
 
-#: lib/setup.c:2203
+#: lib/setup.c:2206
 msgid "Bogus OPAL logical block size."
 msgstr "Błędny rozmiar bloku logicznego OPAL."
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Błędny rozmiar bloku logicznego OPAL różni się od rozmiaru bloku urządzenia."
 
-#: lib/setup.c:2214
+#: lib/setup.c:2217
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Żądana pozycja danych nie jest zgodna z rozmiarem bloku OPAL."
 
-#: lib/setup.c:2221
+#: lib/setup.c:2224
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Żądane wyrównanie danych nie jest zgodne z wyrównaniem OPAL."
 
-#: lib/setup.c:2241
+#: lib/setup.c:2244
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Pozycja danych nie jest zgodna z wymaganiami wyrównania OPAL."
 
-#: lib/setup.c:2254
+#: lib/setup.c:2257
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Żądane wyrównanie danych nie jest zgodne z wymaganiami wyrównania zakresu blokowania."
 
-#: lib/setup.c:2468
+#: lib/setup.c:2471
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Kompensacja rozmiaru urządzenia o %<PRIu64> sektorów, aby wyrównać do rozdzielczości wyrównania OPAL."
 
-#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Nie udało się uzyskać blokady OPAL na urządzeniu %s."
 
-#: lib/setup.c:2538
+#: lib/setup.c:2541
 msgid "Incorrect OPAL Admin key."
 msgstr "Niepoprawny klucz administratora OPAL."
 
-#: lib/setup.c:2540
+#: lib/setup.c:2543
 msgid "Cannot setup OPAL segment."
 msgstr "Nie można ustawić segmentu OPAL."
 
-#: lib/setup.c:2622
+#: lib/setup.c:2625
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Nie można sformatować urządzenia %s, urządzenie OPAL obecnie wygląda na w pełni zabezpieczone przed zapisem."
 
-#: lib/setup.c:2624
+#: lib/setup.c:2627
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "To prawdopodobnie błąd w oprogramowaniu sprzętowym. W celu odtworzenia można zresetować PSID OPAL i połączyć ponownie."
 
-#: lib/setup.c:2644
+#: lib/setup.c:2647
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Reset zakresu blokowania %d na urządzeniu %s nie powiódł się."
 
-#: lib/setup.c:2664
+#: lib/setup.c:2667
 msgid "Can't format LOOPAES without device."
 msgstr "Nie można sformatować urządzenia LUKSAES bez urządzenia."
 
-#: lib/setup.c:2709
+#: lib/setup.c:2712
 msgid "Can't format VERITY without device."
 msgstr "Nie można sformatować VERITY bez urządzenia."
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2723 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Nieobsługiwany typ hasza VERITY %d."
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2729 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Nieobsługiwany rozmiar bloku VERITY."
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2734 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Nieobsługiwany offset hasza VERITY."
 
-#: lib/setup.c:2736
+#: lib/setup.c:2739
 msgid "Unsupported VERITY FEC offset."
 msgstr "Nieobsługiwany offset FEC VERITY."
 
-#: lib/setup.c:2760
+#: lib/setup.c:2763
 msgid "Data area overlaps with hash area."
 msgstr "Obszar danych zachodzi na obszar skrótów."
 
-#: lib/setup.c:2785
+#: lib/setup.c:2788
 msgid "Hash area overlaps with FEC area."
 msgstr "Obszar skrótu zachodzi na obszar FEC."
 
-#: lib/setup.c:2792
+#: lib/setup.c:2795
 msgid "Data area overlaps with FEC area."
 msgstr "Obszar danych zachodzi na obszar FEC."
 
-#: lib/setup.c:2884
+#: lib/setup.c:2887
 msgid "Integrity key size mismatch."
 msgstr "Niezgodność rozmiaru klucza integralności."
 
-#: lib/setup.c:2935
+#: lib/setup.c:2938
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "UWAGA: żądany rozmiar znacznika %d B różni się od rozmiaru wyjścia %s (%d B).\n"
 
-#: lib/setup.c:3048 lib/setup.c:3150
+#: lib/setup.c:3051 lib/setup.c:3153
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Żądany nieznany lub nieobsługiwany typ urządzenia %s."
 
-#: lib/setup.c:3064
+#: lib/setup.c:3067
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Urządzenie %s nie zapewnia wbudowanych pól danych integralności."
 
-#: lib/setup.c:3070
+#: lib/setup.c:3073
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Rozmiar znacznika wbudowanego %<PRIu32> B jest większy niż %<PRIu32> zapewniany przez urządzenie %s."
 
-#: lib/setup.c:3085
+#: lib/setup.c:3088
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Sektor musi być tego samego rozmiaru, co sektor sprzętowy urządzenia (%zu B)."
 
-#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Nieobsługiwane parametry urządzenia %s."
 
-#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Niezgodne parametry dla urządzenia %s."
 
-#: lib/setup.c:3647
+#: lib/setup.c:3650
 msgid "Crypt devices mismatch."
 msgstr "Urządzenia szyfrowane nie zgadzają się."
 
-#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Nie udało się przeładować urządzenia %s."
 
-#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
-#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Nie udało się wstrzymać urządzenia %s."
 
-#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
-#: lib/luks2/luks2_reencrypt.c:4240
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Nie udało wznowić urządzenia %s."
 
-#: lib/setup.c:3717
+#: lib/setup.c:3720
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Błąd krytyczny przy przeładowywaniu urządzenia %s (w oparciu o urządzenie %s)."
 
-#: lib/setup.c:3720 lib/setup.c:3722
+#: lib/setup.c:3723 lib/setup.c:3725
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Nie udało się przełączyć urządzenia %s na dm-error."
 
-#: lib/setup.c:3765
+#: lib/setup.c:3768
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Nie można zmienić rozmiaru urządzenia LUKS2 o rozmiarze statycznym."
 
-#: lib/setup.c:3770
+#: lib/setup.c:3773
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Zmiana rozmiaru urządzenia LUKS2 z ochroną integralności nie jest obsługiwana."
 
-#: lib/setup.c:3816
+#: lib/setup.c:3819
 msgid "Cannot resize loop device."
 msgstr "Nie można zmienić rozmiaru urządzenia loopback."
 
-#: lib/setup.c:3860
+#: lib/setup.c:3863
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "UWAGA: maksymalny rozmiar jest już ustawiony lub jądro nie obsługuje zmiany rozmiaru.\n"
 
-#: lib/setup.c:3926
+#: lib/setup.c:3929
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Zmiana rozmiaru nie powiodła się, jądro tego nie obsługuje."
 
-#: lib/setup.c:3958
+#: lib/setup.c:3961
 msgid "Do you really want to change UUID of device?"
 msgstr "Czy na pewno zmienić UUID urządzenia?"
 
-#: lib/setup.c:4050
+#: lib/setup.c:4053
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Plik nagłówka kopii zapasowej nie zawiera zgodnego nagłówka LUKS."
 
-#: lib/setup.c:4143
+#: lib/setup.c:4160
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Wolumen %s nie jest aktywny."
 
-#: lib/setup.c:4198
+#: lib/setup.c:4215
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Wolumen %s już został wstrzymany."
 
-#: lib/setup.c:4224
+#: lib/setup.c:4241
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Wstrzymywanie nie jest obsługiwane dla urządzenia %s."
 
-#: lib/setup.c:4226 lib/setup.c:4234
+#: lib/setup.c:4243 lib/setup.c:4251
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Błąd podczas wstrzymywania urządzenia %s."
 
-#: lib/setup.c:4249
+#: lib/setup.c:4266
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Urządzenie %s zostało wstrzymane, ale sprzętowe urządzenie OPAL nie może być zablokowane."
 
-#: lib/setup.c:4280 lib/setup.c:4457
+#: lib/setup.c:4297 lib/setup.c:4491
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Wznawianie nie jest obsługiwane dla urządzenia %s."
 
-#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Błąd podczas wznawiania urządzenia %s."
 
-#: lib/setup.c:4301
+#: lib/setup.c:4335
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Nie udało się odłączyć klucza wolumenu z pęku kluczy podanego przez użytkownika."
 
-#: lib/setup.c:4423 lib/setup.c:5603
+#: lib/setup.c:4457 lib/setup.c:5637
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Nie udało się dołączuć klucza wolumenu do pęku kluczy zdefiniowanego przez użytkownika."
 
-#: lib/setup.c:4522 src/cryptsetup.c:2721
+#: lib/setup.c:4556 src/cryptsetup.c:2720
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Wolumen %s nie jest wstrzymany."
 
-#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
-#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
+#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
+#: src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Klucz wolumenu nie pasuje do wolumenu."
 
-#: lib/setup.c:4787
+#: lib/setup.c:4821
 msgid "Failed to swap new key slot."
 msgstr "Nie udało się podstawić nowego klucza."
 
-#: lib/setup.c:4885
+#: lib/setup.c:4919
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Numer klucza %d jest nieprawidłowy."
 
-#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
-#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
+#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
+#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Klucz %d nie jest aktywny."
 
-#: lib/setup.c:4910
+#: lib/setup.c:4944
 msgid "Device header overlaps with data area."
 msgstr "Nagłówek urządzenia zachodzi na obszar danych."
 
-#: lib/setup.c:5131
+#: lib/setup.c:5165
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Ponowne szyfrowanie trwa. Nie można uaktywnić urządzenia."
 
-#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3725
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Nie udało się uzyskać blokady ponownego szyfrowania."
 
-#: lib/setup.c:5155
+#: lib/setup.c:5189
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Odtwarzanie ponownego szyfrowania LUKS2 przy użyciu kluczy wolumenu nie powiodło się."
 
-#: lib/setup.c:5291
+#: lib/setup.c:5325
 #, c-format
 msgid "Device %s already exists."
 msgstr "Urządzenie %s już istnieje."
 
-#: lib/setup.c:5298
+#: lib/setup.c:5332
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Nie można użyć urządzenia %s, nazwa jest nieprawidłowa lub nadal w użyciu."
 
-#: lib/setup.c:5310
+#: lib/setup.c:5344
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Klucze ponownego szyfrowania wolumenu nie pasują do wolumenu."
 
-#: lib/setup.c:5327
+#: lib/setup.c:5361
 msgid "Incorrect volume key specified for plain device."
 msgstr "Podano niewłaściwy klucz wolumenu dla zwykłego urządzenia."
 
-#: lib/setup.c:5353 lib/setup.c:5414
+#: lib/setup.c:5387 lib/setup.c:5448
 msgid "Device type is not properly initialized."
 msgstr "Typ urządzenia nie został właściwie zainicjalizowany."
 
-#: lib/setup.c:5452
+#: lib/setup.c:5486
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Pęk kluczy w jądrze nie jest obsługiwany przez jądro."
 
-#: lib/setup.c:5456
+#: lib/setup.c:5490
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Brak pęku kluczy w jądrze: wymagany do przekazania podpisu do jądra."
 
-#: lib/setup.c:5511
+#: lib/setup.c:5545
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Nie można użyć klucza pęku kluczy %s."
 
-#: lib/setup.c:5724
+#: lib/setup.c:5758
 msgid "Incorrect root hash specified for verity device."
 msgstr "Podano niewłaściwy hasz główny dla urządzenia VERITY."
 
-#: lib/setup.c:5765 lib/setup.c:5790
+#: lib/setup.c:5799 lib/setup.c:5824
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL nie obsługuje odroczonej dezaktywacji."
 
-#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Urządzenie %s jest nadal w użyciu."
 
-#: lib/setup.c:5798
+#: lib/setup.c:5832
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Nie udało się anulować opóźnionego usuwania z urządzenia %s."
 
-#: lib/setup.c:5820
+#: lib/setup.c:5854
 #, c-format
 msgid "Invalid device %s."
 msgstr "Błędne urządzenie %s."
 
-#: lib/setup.c:5967
+#: lib/setup.c:6001
 msgid "Volume key buffer too small."
 msgstr "Bufor klucza wolumenu zbyt mały."
 
-#: lib/setup.c:5978
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia LUKS2."
 
-#: lib/setup.c:5987
+#: lib/setup.c:6021
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia LUKS1."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6035
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nie można odtworzyć klucza wolumenu dla zwykłego urządzenia."
 
-#: lib/setup.c:6009
+#: lib/setup.c:6043
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Nie można odtworzyć hasza głównego dla urządzenia VERITY."
 
-#: lib/setup.c:6018
+#: lib/setup.c:6052
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia BITLK."
 
-#: lib/setup.c:6023
+#: lib/setup.c:6057
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia FVAULT2."
 
-#: lib/setup.c:6025
+#: lib/setup.c:6059
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Ta operacja nie jest obsługiwana dla urządzenia szyfrującego %s."
 
-#: lib/setup.c:6210 lib/setup.c:6221
+#: lib/setup.c:6244 lib/setup.c:6255
 msgid "Dump operation is not supported for this device type."
 msgstr "Operacja zrzutu nie jest obsługiwana dla tego rodzaju urządzenia."
 
-#: lib/setup.c:6601
+#: lib/setup.c:6635
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Offset danych nie jest wielokrotnością liczby bajtów %u."
 
-#: lib/setup.c:6909
+#: lib/setup.c:6943
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Nie można przekonwertować urządzenia %s, które jest nadal w użyciu."
 
-#: lib/setup.c:7217 lib/setup.c:7361
+#: lib/setup.c:7251 lib/setup.c:7406
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Nie udało się przypisać klucza %u jako nowego klucza wolumenu."
 
-#: lib/setup.c:7241
+#: lib/setup.c:7275
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Nie udało się zainicjować domyślnych parametrów klucza LUKS2."
 
-#: lib/setup.c:7247
+#: lib/setup.c:7281
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Nie udało się przypisać klucza %d do skrótu."
 
-#: lib/setup.c:7478
+#: lib/setup.c:7523
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nie można dodać klucza, wszystkie miejsca na klucze wyłączone i nie podano klucza wolumenu."
 
-#: lib/setup.c:7551 lib/verity/verity.c:333
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Nie udało się załadować klucza do pęku kluczy w jądrze."
 
-#: lib/setup.c:7742
+#: lib/setup.c:7807
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Nie udało się odnaleźć pęku kluczy opisanego przez \"%s\"."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7872
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Nie udało się uzyskać globalnej blokady serializacji dostępu ciężkiego pamięciowo."
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "Nie udało się otworzyć pliku klucza."
 
-#: lib/utils.c:212
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "Nie można odczytać pliku klucza z terminala."
 
-#: lib/utils.c:228
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "Nie udało się wykonać stat na pliku klucza."
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "Nie można przemieścić się do żądanego położenia pliku klucza."
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "Brak pamięci podczas odczytu hasła."
 
-#: lib/utils.c:286
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "Błąd podczas odczytu hasła."
 
-#: lib/utils.c:303
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "Na wejściu nie ma nic do odczytu."
 
-#: lib/utils.c:310
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "Przekroczono maksymalny rozmiar pliku klucza."
 
-#: lib/utils.c:315
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "Nie można odczytać żądanej ilości danych."
 
@@ -961,7 +961,7 @@ msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Określenie szyfru powinno być w formacie [szyfr]-[tryb]-[iv]."
 
 #: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
 #: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
@@ -975,13 +975,13 @@ msgstr "Nie udało się otworzyć urządzenia do tymczasowego przechowywania klu
 msgid "Failed to access temporary keystore device."
 msgstr "Nie udało się uzyskać dostępu do urządzenia do tymczasowego przechowywania kluczy."
 
-#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "Błąd we/wy podczas szyfrowania klucza."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
@@ -992,7 +992,7 @@ msgstr "Błąd we/wy podczas szyfrowania klucza."
 msgid "Cannot open device %s."
 msgstr "Nie można otworzyć urządzenia %s."
 
-#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "Błąd we/wy podczas odszyfrowywania klucza."
 
@@ -1082,7 +1082,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Skrót szyfru poprawiony na małe litery (%s)."
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Żądany skrót LUKS %s nie jest obsługiwany."
@@ -1129,7 +1129,7 @@ msgstr "Tryb szyfru LUKS %s jest nieprawidłowy."
 msgid "LUKS hash %s is invalid."
 msgstr "Skrót LUKS %s jest nieprawidłowy."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
 msgid "No known problems detected for LUKS header."
 msgstr "W nagłówku LUKS nie wykryto żadnych znanych problemów."
 
@@ -1143,50 +1143,50 @@ msgstr "Błąd podczas uaktualniania nagłówka LUKS na urządzeniu %s."
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Błęd podczas ponownego odczytu nagłówka LUKS po uaktualnieniu na urządzeniu %s."
 
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:750
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Offset danych dla nagłówka LUKS musi wynosić 0 lub więcej niż rozmiar nagłówka."
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:701
 msgid "Wrong LUKS UUID format provided."
 msgstr "Podano zły format LUKS UUID."
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Nie można utworzyć nagłówka LUKS: odczyt losowego zarodka nie powiódł się."
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Nie można utworzyć nagłówka LUKS: uzyskanie skrótu nagłówka nie powiodło się (przy użyciu algorytmu %s)."
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Klucz numer %d jest aktywny, należy go najpierw wyczyścić."
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Klucz %d zawiera zbyt mało pasów. Zmieniony nagłówek?"
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Przepełnienie wartości iteracji PBKDF2"
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Nie można otworzyć klucza (przy użyciu skrótu %s)."
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Numer klucza %d jest błędny, proszę wybrać numer od 0 do %d."
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Nie można wymazać urządzenia %s."
@@ -1207,56 +1207,48 @@ msgstr "Wykryto niekompatybilny plik klucza loop-AES."
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "Jądro nie obsługuje odwzorowań zgodnych z loop-AES."
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "Błąd odczytu pliku klucza %s."
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "Przekroczono maksymalną długość hasła TCRYPT (%zu)."
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "Algorytm skrótu PBKDF2 %s nie jest dostępny, pominięto."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
-msgid "Required kernel crypto interface not available."
-msgstr "Wymagany interfejs kryptograficzny jądra nie jest dostępny."
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "Proszę upewnić się, że moduł jądra algif_skcipher został załadowany."
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "Uaktywnianie nie jest obsługiwane dla rozmiaru sektora %d."
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "Jądro nie obsługuje uaktywniania dla tego starego trybu TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "Włączanie szyfrowania systemu TCRYPT dla partycji %s."
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:819
 msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
 msgstr "Nie można określić pozycji partycji systemowej TCRYPT, aktywacja całego obszaru zaszyfrowanego."
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:828
 msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
 msgstr "Nie można określić pozycji partycji systemowej TCRYPT, aktywacja urządzenia jako partycji systemowej."
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "Jądro nie obsługuje odwzorowań zgodnych z TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:1146
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "Ta funkcja nie jest obsługiwana bez załadowanego nagłówka TCRYPT."
 
@@ -1609,8 +1601,7 @@ msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "UWAGA: rozmiar obszaru kluczy LUKS2 zmienił się na %<PRIu64> (w bajtach).\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Nie udało się uzyskać blokady do odczytu na urządzeniu %s."
@@ -1670,79 +1661,79 @@ msgstr ""
 msgid "Ignored unknown flag %s."
 msgstr "Zignorowano nieznaną flagę %s."
 
-#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Brak klucza dla segmentu dm-crypt %u"
 
-#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Nie udało się ustawić segmentu dm-crypt."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Nie udało się ustawić segmentu dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Nie wykryto znanego wzorca określającego szyfr w nagłówku LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:2691
+#: lib/luks2/luks2_json_metadata.c:2709
 msgid "OPAL device must have static device size."
 msgstr "Urządzenie OPAL musi mieć statyczny rozmiar."
 
-#: lib/luks2/luks2_json_metadata.c:2711
+#: lib/luks2/luks2_json_metadata.c:2729
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Szyfrowane urządzenie OPAL z integralnością musi być mniejsze, niż zakres blokowania."
 
-#: lib/luks2/luks2_json_metadata.c:2716
+#: lib/luks2/luks2_json_metadata.c:2734
 msgid "OPAL device must have same size as locking range."
 msgstr "Urządzenie OPAL musi mieć ten sam rozmiar, co zakres blokowania."
 
-#: lib/luks2/luks2_json_metadata.c:2736
+#: lib/luks2/luks2_json_metadata.c:2754
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Urządzenie OPAL %s jest już odblokowane.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2775
+#: lib/luks2/luks2_json_metadata.c:2793
 msgid "Unsupported device integrity configuration."
 msgstr "Nieobsługiwana konfiguracja integralności urządzenia."
 
-#: lib/luks2/luks2_json_metadata.c:2791
+#: lib/luks2/luks2_json_metadata.c:2809
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Urządzenie dm-integrity stojące poniżej o nieoczekiwanych sektorach danych."
 
-#: lib/luks2/luks2_json_metadata.c:2886
+#: lib/luks2/luks2_json_metadata.c:2911
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Podobne szyfrowanie trwa. Nie można dezaktywować urządzenia."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Nie udało się zastąpić wstrzymanego urządzenia %s celem dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Urządzenie %s zostało dezaktywowane, ale sprzętowe urządzenie OPAL nie może być zablokowane."
 
-#: lib/luks2/luks2_json_metadata.c:3020
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Wykryto niespełnione wymagania LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3053
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Operacja niezgodna z urządzeniem oznaczonym do ponownego szyfrowania starym szyfrem. Przerwano."
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3055
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Operacja niezgodna z urządzeniem oznaczonym do ponownego szyfrowania LUKS2. Przerwano."
 
-#: lib/luks2/luks2_json_metadata.c:3032
+#: lib/luks2/luks2_json_metadata.c:3057
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Operacja niezgodna z urządzeniem używającym OPAL. Przerwano."
 
-#: lib/luks2/luks2_json_metadata.c:3034
+#: lib/luks2/luks2_json_metadata.c:3059
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Operacja niezgodna z urządzeniem używającym wbudowanych znaczników HW. Przerwano."
 
@@ -1754,22 +1745,22 @@ msgstr "Za mało dostępnej pamięci, aby otworzyć klucz."
 msgid "Keyslot open failed."
 msgstr "Nie udało się otworzyć klucza."
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "Nie można użyć szyfru %s-%s do szyfrowania kluczy."
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "Nie można użyć szyfru %s do szyfrowania kluczy."
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr "Za mało pamięci na wyprowadzenie klucza z miejsca."
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "Algorytm skrótu %s nie jest dostępny."
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "Brak miejsca na nowy klucz."
 
@@ -1786,335 +1777,335 @@ msgstr "Nie można uaktualnić rodzaju odporności. Nowy typ zapewnia %<PRIu64>
 msgid "Failed to refresh reencryption verification digest."
 msgstr "Nie udało się odświeżyć skrótu weryfikacji ponownego szyfrowania."
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "Nie można sprawdzić stanu urządzenia mającego UUID: %s."
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Nie można przekonwertować nagłówka z dodatkowymi metadanymi LUKSMETA."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Nie można użyć określenia szyfru %s-%s dla LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr "Nie można użyć określenia szyfru %s-%s dla klucza LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Nie można przenieść obszaru kluczy. Brak miejsca."
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Nie można przekonwertować do formatu LUKS1 - błędne metadane."
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Nie można przenieść obszaru kluczy. Obszar kluczy LUKS2 zbyt mały."
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr "Nie można przenieść obszaru kluczy."
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Nie można przekonwertować do formatu LUKS1 - domyślny rozmiar sektora szyfrowania segmentu nie wynosi 512 bajtów."
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Nie można przekonwertować formatu LUKS1 - skróty kluczy nie są zgodne z LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Nie można przekonwertować formatu LUKS1 - urządzenie używa szyfru %s z obudowanym kluczem."
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Nie można przekonwertować formatu LUKS1 - urządzenie używa większej liczby segmentów."
 
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Nie można przekonwertować do formatu LUKS1 - nagłówek LUKS2 zawiera %u token(ów)."
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:798
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Nie można przekonwertować do formatu LUKS1 - nie ma aktywnych kluczy."
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Nie można przekonwertować do formatu LUKS1 - klucz %u jest w błędnym stanie."
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:815
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Nie można przekonwertować do formatu LUKS1 - klucz %u nie jest podłączony."
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Nie można przekonwertować do formatu LUKS1 - klucz %u (powyzej maksimum) jest nadal aktywny."
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Nie można przekonwertować do formatu LUKS1 - klucz %u nie jest zgodny z LUKS1."
 
-#: lib/luks2/luks2_reencrypt.c:1198
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Rozmiar strefy gorącej musi być wielokrotnością wyliczonego wyrównania strefy (bajtów: %zu)."
 
-#: lib/luks2/luks2_reencrypt.c:1203
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Rozmiar urządzenia musi być wielokrotnością wyliczonego wyrównania strefy (bajtów: %zu)."
 
-#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
-#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4080
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Nie udało się zainicjować obudowania przestrzeni starego segmentu."
 
-#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Nie udało się zainicjować obudowania przestrzeni nowego segmentu."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "Nie udało się zainicjować ochrony strefy gorącej."
 
-#: lib/luks2/luks2_reencrypt.c:1623
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "Nie udało się odczytać sum kontrolnych dla aktualnej strefy gorącej."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Nie udało się odczytać obszaru strefy gorącej zaczynającego się od %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:1649
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "Nie udało się odszyfrować sektora %zu."
 
-#: lib/luks2/luks2_reencrypt.c:1655
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "Nie udało się odtworzyć sektora %zu."
 
-#: lib/luks2/luks2_reencrypt.c:2208
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "Rozmiary urządzenia źródłowego i docelowego różnią się. Źródłowe %<PRIu64>, docelowe: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2310
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "Nie udało się uaktywnić urządzenia strefy gorącej %s."
 
-#: lib/luks2/luks2_reencrypt.c:2322
+#: lib/luks2/luks2_reencrypt.c:2323
 #, c-format
 msgid "Failed to allocate hotzone device %s."
 msgstr "Nie udało się przydzielić urządzenia strefy gorącej %s."
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "Nie udało się uaktywnić urządzenia nakładkowego %s z aktualną tablicą źródła."
 
-#: lib/luks2/luks2_reencrypt.c:2346
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "Nie udało się załadować nowego odwzorowania dla urządzenia %s."
 
-#: lib/luks2/luks2_reencrypt.c:2418
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
 msgstr "Nie udało się odświeżyć stosu urządzenia ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:2615
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
 msgstr "Nie udało się ustawić nowego rozmiaru obszaru kluczy."
 
-#: lib/luks2/luks2_reencrypt.c:2751
+#: lib/luks2/luks2_reencrypt.c:2752
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Wartość przesunięcia danych nie jest wyrównana do rozmiaru sektora szyfrowania (%<PRIu32> B)."
 
-#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "Nieobsługiwany tryb odporności %s"
 
-#: lib/luks2/luks2_reencrypt.c:2824
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
 msgstr "Rozmiar przenoszonego segmentu nie może być większy niż wartość przesunięcia danych."
 
-#: lib/luks2/luks2_reencrypt.c:2866
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
 msgstr "Błędne parametry odporności przy ponownym szyfrowaniu."
 
-#: lib/luks2/luks2_reencrypt.c:2888
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "Przenoszony segment zbyt duży. Żądany rozmiar %<PRIu64>, dostępne miejsce: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2977
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "Nie udało się wyczyścić tablicy."
 
-#: lib/luks2/luks2_reencrypt.c:3063
+#: lib/luks2/luks2_reencrypt.c:3064
 #, c-format
 msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
 msgstr "Przesunięcie danych (sektorów: %<PRIu64>) jest mniejsze niż przyszły offset danych (sektorów: %<PRIu64>)."
 
-#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
 msgstr "Zmniejszony rozmiar danych jest większy niż rzeczywisty rozmiar urządzenia."
 
-#: lib/luks2/luks2_reencrypt.c:3095
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Urzędzenie danych nie jest wyrównane do rozmiaru sektora szyfrowania (%<PRIu32> B)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
-#: lib/luks2/luks2_reencrypt.c:3664
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Nie udało się otworzyć %s w trybie wyłączności (już odwzorowano lub zamontowano)."
 
-#: lib/luks2/luks2_reencrypt.c:3332
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Urządzenie nie jest oznaczone do ponownego szyfrowania LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Nie udało się załadować kontekstu ponownego szyfrowania LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
 msgstr "Urządzenie nie jest w trakcie ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
 msgstr "Proces ponownego szyfrowania już trwa."
 
-#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
 msgstr "Nie udało się uzyskać blokady dla ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:3471
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Nie można kontynuować ponownego szyfrowania. Należy najpierw uruchomić odtworzenie ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:3607
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Rozmiar urządzenia aktywnego oraz żądany rozmiar ponownego szyfrowania różnią się."
 
-#: lib/luks2/luks2_reencrypt.c:3621
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "W parametrach ponownego szyfrowania zażądano niedozwolonego rozmiaru urządzenia."
 
-#: lib/luks2/luks2_reencrypt.c:3723
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Ponowne szyfrowanie trwa. Nie można wykonać odzyskiwania."
 
-#: lib/luks2/luks2_reencrypt.c:3744
+#: lib/luks2/luks2_reencrypt.c:3745
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Odtwarzanie ponownego szyfrowania LUKS2 nie powiodło się."
 
-#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
 msgid "Failed to initialize reencryption device stack."
 msgstr "Nie udało się zainicjować stosu urządzenia ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:3910
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "Ponowne szyfrowanie LUKS2 jest już zainicjowane w metadanych."
 
-#: lib/luks2/luks2_reencrypt.c:3918
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Nie udało się zainicjować ponownego szyfrowania LUKS2 w metadanych."
 
-#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
-#: lib/luks2/luks2_reencrypt.c:4033
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Ponowne szyfrowanie nie jest obsługiwane dla urządzeń DAX (pamięci trwałej)."
 
-#: lib/luks2/luks2_reencrypt.c:4062
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Nie udało się ustawić segmentów urządzeń dla następnej strefy gorącej ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Nie udało się zapisać metadanych odporności ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4122
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "Odszyfrowanie nie powiodło się."
 
-#: lib/luks2/luks2_reencrypt.c:4127
+#: lib/luks2/luks2_reencrypt.c:4128
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Nie udało się zapisać obszaru strefy gorącej zaczynającego się od %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4132
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
 msgstr "Nie udało się zsynchronizować danych."
 
-#: lib/luks2/luks2_reencrypt.c:4140
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Nie udało się uaktualnić metadanych po zakończeniu aktualnej strefy gorącej ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4229
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
 msgstr "Nie udało się zapisać metadanych LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:4252
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
 msgstr "Nie udało się wymazać nieużywanego obszaru urządzenia danych."
 
-#: lib/luks2/luks2_reencrypt.c:4258
+#: lib/luks2/luks2_reencrypt.c:4259
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Nie udało się usunąć nieużywanego (nieprzypisanego) obszaru klucza %d."
 
-#: lib/luks2/luks2_reencrypt.c:4268
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
 msgstr "Nie udało się usunąć obszaru klucza ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4278
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Błąd krytyczny podczas ponownego szyfrowania fragmentu zaczynającego się od %<PRIu64> o długości w sektorach %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4282
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
 msgstr "Ponowne szyfrowanie online nie powiodło się."
 
-#: lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Proszę nie wznawiać urządzenia dopóki nie zostanie zastąpione celem błędnym ręcznie."
 
-#: lib/luks2/luks2_reencrypt.c:4339
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Nie można kontynuować ponownego szyfrowania. Nieoczekiwany stan ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4345
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
 msgstr "Brak lub błędny kontekst ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
 msgstr "Nie udało się uaktualnić kontekstu ponownego szyfrowania."
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "Metadane ponownego szyfrowania są błędne."
 
@@ -2146,7 +2137,7 @@ msgstr "Parametry szyfrowania kluczy mogą być ustawione tylko dla urządzeń L
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametry szyfrowania kluczy nie są zgodne z szyfrowaniem kluczy LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
+#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2174,7 +2165,7 @@ msgstr "UWAGA: Parametr --hash jest ignorowany w trybie zwykłym z podanym pliki
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "UWAGA: Opcja --keyfile-size jest ignorowana, rozmiar odczytu jest taki sam, jak rozmiar klucza szyfrującego.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2185,9 +2176,9 @@ msgstr "Skanowanie blkid dla %s nie powiodło się."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Wykryto sygnatury urządzeń na %s. Dalsze operacje mogą uszkodzić istniejące dane."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
-#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
-#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
+#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
+#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2237,7 +2228,7 @@ msgstr ""
 "Zrzut ten powinien być zawsze zapisywany w postaci zaszyfrowanej\n"
 "w bezpiecznym miejscu."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2262,9 +2253,9 @@ msgstr "Nie można określić rozmiaru klucza wolumenu dla FVAULT2, proszę uży
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Urządzenie %s jest nadal aktywne i zaplanowane do odroczonego usunięcia.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
-#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
-#: src/cryptsetup.c:3262
+#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
+#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
+#: src/cryptsetup.c:3261
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Nie udało się ustawić ścieżki tokenów zewnętrznych %s."
@@ -2301,31 +2292,35 @@ msgstr "%-10s %4u iteracji, pamięć: %5u, równoległe wątki (CPU): %1u dla kl
 msgid "Result of benchmark is not reliable."
 msgstr "Wynik testu wydajności nie jest wiarygodny."
 
-#: src/cryptsetup.c:1170
+#: src/cryptsetup.c:1171
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testy są przybliżone tylko z użyciem pamięci (bez we/wy na dysk).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1195
+#: src/cryptsetup.c:1196
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s  Algorytm |     Klucz |     Szyfrowanie | Odszyfrowywanie\n"
 
-#: src/cryptsetup.c:1203
+#: src/cryptsetup.c:1204
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Szyfr %s (rozmiar klucza w bitach: %i) nie jest dostępny."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1222
+#: src/cryptsetup.c:1225
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#      Algorytm |     Klucz |     Szyfrowanie | Odszyfrowywanie\n"
 
-#: src/cryptsetup.c:1233
+#: src/cryptsetup.c:1238
 msgid "N/A"
 msgstr "N/D"
 
-#: src/cryptsetup.c:1258
+#: src/cryptsetup.c:1241
+msgid "# Cipher speed test is not available.\n"
+msgstr "# Test szybkości szyfru nie jest dostępny.\n"
+
+#: src/cryptsetup.c:1257
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2333,27 +2328,27 @@ msgstr ""
 "Wybryto niezabezpieczone metadane ponownego szyfrowania LUKS2. Proszę sprawdzić, czy operacja ponownego szyfrowania jest pożądana (p. wyjście luksDump)\n"
 "i kontynuować (uaktualnić metadane) tylko jeśli ta operacja ma być faktycznie wykonana."
 
-#: src/cryptsetup.c:1264
+#: src/cryptsetup.c:1263
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Hasło do zabezpieczenia i uaktualnienia metadanych ponownego szyfrowania: "
 
-#: src/cryptsetup.c:1308
+#: src/cryptsetup.c:1307
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Naprawdę kontynuować odtwarzanie ponownego szyfrowania LUKS2?"
 
-#: src/cryptsetup.c:1317
+#: src/cryptsetup.c:1316
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Hasło do weryfikacji skrótu metadanych ponownego szyfrowania: "
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1318
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Hasło do odtwarzania ponownego szyfrowania: "
 
-#: src/cryptsetup.c:1381
+#: src/cryptsetup.c:1380
 msgid "Really try to repair LUKS device header?"
 msgstr "Naprawdę próbować naprawić nagłówek urządzenia LUKS?"
 
-#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2361,7 +2356,7 @@ msgstr ""
 "\n"
 "Wymazywanie przerwane."
 
-#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2369,167 +2364,167 @@ msgstr ""
 "Czyszczenie urządzenia w celu zainicjowania sumy kontrolnej integralności.\n"
 "Można przerwać ten proces wciskając Ctrl+C (reszta niewymazanego urządzenia będzie zawierać błędną sumę kontrolną).\n"
 
-#: src/cryptsetup.c:1436 src/integritysetup.c:103
+#: src/cryptsetup.c:1435 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Nie można dezaktywować urządzenia tymczasowego %s."
 
-#: src/cryptsetup.c:1484
+#: src/cryptsetup.c:1483
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Szyfrowanie wyłącznie sprzętowe OPAL nie obsługuje --cipher i --key-size, opcje zignorowano."
 
-#: src/cryptsetup.c:1497
+#: src/cryptsetup.c:1496
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Opcja integralności może być używana tylko dla formatu LUKS2."
 
-#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
+#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nieobsługiwane opcje rozmiaru metadanych LUKS2."
 
-#: src/cryptsetup.c:1507
+#: src/cryptsetup.c:1506
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL jest obsługiwany tylko dla formatu LUKS2."
 
-#: src/cryptsetup.c:1512
+#: src/cryptsetup.c:1511
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Znaczniki hw wbudowane są obsługiwane tylko dla formatu LUKS2."
 
-#: src/cryptsetup.c:1521
+#: src/cryptsetup.c:1520
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Plik nagłówka nie istnieje, czy utworzyć go?"
 
-#: src/cryptsetup.c:1529
+#: src/cryptsetup.c:1528
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Nie można utworzyć pliku nagłówka %s."
 
-#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
 #: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
 #: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Nie wykryto znanego wzorca określającego integralność."
 
-#: src/cryptsetup.c:1557
+#: src/cryptsetup.c:1556
 msgid "Cannot use specified integrity key size."
 msgstr "Nie można użyć podanego rozmiaru klucza integralności."
 
-#: src/cryptsetup.c:1575
+#: src/cryptsetup.c:1574
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Nie można użyć %s jako nagłówka na dysku."
 
-#: src/cryptsetup.c:1604 src/integritysetup.c:172
+#: src/cryptsetup.c:1603 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "To nieodwołalnie nadpisze dane na %s."
 
-#: src/cryptsetup.c:1641
+#: src/cryptsetup.c:1640
 msgid "OPAL Admin password cannot be empty."
 msgstr "Hasło administratora OPAL nie może być puste."
 
-#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
-#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
+#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Nie udało się ustawić parametrów PBKDF."
 
-#: src/cryptsetup.c:1786
+#: src/cryptsetup.c:1785
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Offset zmniejszonych danych jest dozwolony tylko dla odłączonego nagłówka LUKS."
 
-#: src/cryptsetup.c:1793
+#: src/cryptsetup.c:1792
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Kontener plikowy LUKS %s jest zbyt mały do uaktywnienia, nie ma miejsca pozostałego na dane."
 
-#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nie można określić rozmiaru klucza wolumenu dla LUKS bez kluczy, proszę użyć opcji --key-size."
 
-#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Urządzenie wymaga dwóch kluczy wolumenu."
 
-#: src/cryptsetup.c:1889
+#: src/cryptsetup.c:1888
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Niektóre podane parametry aktywacji zostały zignorowane przy szyforwaniu wyłącznie sprzętowym OPAL."
 
-#: src/cryptsetup.c:1894
+#: src/cryptsetup.c:1893
 msgid "Device activated but cannot make flags persistent."
 msgstr "Urządzenie uaktywnione, ale nie można uczynić flag trwałymi."
 
-#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
+#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Klucz %d jest wybrany do usunięcia."
 
-#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
+#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "To jest ostatni klucz. Urządzenie stanie się bezużyteczne po usunięciu tego klucza."
 
-#: src/cryptsetup.c:1987
+#: src/cryptsetup.c:1986
 msgid "Enter any remaining passphrase: "
 msgstr "Dowolne pozostałe hasło: "
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operacja przerwana, klucz NIE został wymazany.\n"
 
-#: src/cryptsetup.c:2024
+#: src/cryptsetup.c:2023
 msgid "Enter passphrase to be deleted: "
 msgstr "Hasło do usunięcia: "
 
-#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
-#: src/cryptsetup.c:3253
+#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
+#: src/cryptsetup.c:3252
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Urządzenie %s nie jest prawidłowym urządzeniem LUKS2."
 
-#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
+#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
 msgid "Enter new passphrase for key slot: "
 msgstr "Nowe hasło dla klucza: "
 
-#: src/cryptsetup.c:2147 src/utils_luks.c:342
+#: src/cryptsetup.c:2146 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Proszę wprowadzić PIN: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:344
+#: src/cryptsetup.c:2148 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Proszę wprowadzić PIN tokenu %d: "
 
-#: src/cryptsetup.c:2208
+#: src/cryptsetup.c:2207
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "UWAGA: Parametr --key-slot jest używany do numeru nowego klucza.\n"
 
-#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Dowolne istniejące hasło: "
 
-#: src/cryptsetup.c:2381
+#: src/cryptsetup.c:2380
 msgid "Enter passphrase to be changed: "
 msgstr "Hasło, które ma być zmienione: "
 
-#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Nowe hasło: "
 
-#: src/cryptsetup.c:2447
+#: src/cryptsetup.c:2446
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Hasło dla klucza do konwersji: "
 
-#: src/cryptsetup.c:2471
+#: src/cryptsetup.c:2470
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Dla operacji isLuks obsługiwany jest tylko jeden argument będący urządzeniem."
 
-#: src/cryptsetup.c:2576
+#: src/cryptsetup.c:2575
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Miejsce %d nie zawiera niepowiązanego klucza."
 
-#: src/cryptsetup.c:2581
+#: src/cryptsetup.c:2580
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2538,52 +2533,52 @@ msgstr ""
 "Zrzut ten powinien być zawsze zapisywany w postaci zaszyfrowanej\n"
 "w bezpiecznym miejscu."
 
-#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
+#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s nie jest nazwą aktywnego urządzenia %s."
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2706
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s nie jest nazwą aktywnego urządzenia LUKS lub brak nagłówka."
 
-#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
+#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
 msgid "Option --header-backup-file is required."
 msgstr "Wymagana jest opcja --header-backup-file."
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2833
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s nie jest urządzeniem zarządzanym przez cryptsetup."
 
-#: src/cryptsetup.c:2845
+#: src/cryptsetup.c:2844
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Odświeżanie nie jest obsługiwane dla typu urządzenia %s"
 
-#: src/cryptsetup.c:2895
+#: src/cryptsetup.c:2894
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Nierozpoznany typ urządzenia metadanych %s."
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2896
 msgid "Command requires device and mapped name as arguments."
 msgstr "Polecenie wymaga urządzenia i nazwy odwzorowywanej jako argumentów."
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL PSID: "
 msgstr "Proszę wprowadzić PSID OPAL: "
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL Admin password: "
 msgstr "Hasło administratora OPAL: "
 
-#: src/cryptsetup.c:2923
+#: src/cryptsetup.c:2922
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "UWAGA: CAŁY dysk będzie przywrócony do stanu fabrycznego i wszystkie dane zostaną utracone! Kontynuować?"
 
-#: src/cryptsetup.c:2966
+#: src/cryptsetup.c:2965
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2592,363 +2587,363 @@ msgstr ""
 "Ta operacja usunię wszystkie klucze na urządzeniu %s.\n"
 "Urządzenie po tej operacji stanie się bezużyteczne."
 
-#: src/cryptsetup.c:2973
+#: src/cryptsetup.c:2972
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operacja przerwana, klucze NIE zostały wymazane.\n"
 
-#: src/cryptsetup.c:3012
+#: src/cryptsetup.c:3011
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Błędny typ LUKS, obsługiwane są tylko luks1 i luks2."
 
-#: src/cryptsetup.c:3028
+#: src/cryptsetup.c:3027
 #, c-format
 msgid "Device is already %s type."
 msgstr "Urządzenie już ma typ %s."
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:3034
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Ta operacja przekonwertuje %s do formatu %s.\n"
 
-#: src/cryptsetup.c:3038
+#: src/cryptsetup.c:3037
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operacja przerwana, urządzenie NIE zostało skonwertowane.\n"
 
-#: src/cryptsetup.c:3078
+#: src/cryptsetup.c:3077
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Brak opcji --priority, --label lub --subsystem."
 
-#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
+#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d jest błędny."
 
-#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
+#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d jest w użyciu."
 
-#: src/cryptsetup.c:3127
+#: src/cryptsetup.c:3126
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Nie udało się dodać tokenu %d do pęku kluczy luks2."
 
-#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
+#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Nie udało się przypisać tokenu %d do klucza %d."
 
-#: src/cryptsetup.c:3155
+#: src/cryptsetup.c:3154
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d nie jest w użyciu."
 
-#: src/cryptsetup.c:3192
+#: src/cryptsetup.c:3191
 msgid "Failed to import token from file."
 msgstr "Nie udało się zaimportować tokenu z pliku."
 
-#: src/cryptsetup.c:3217
+#: src/cryptsetup.c:3216
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Nie udało się pobrać tokenu %d do eksportu."
 
-#: src/cryptsetup.c:3230
+#: src/cryptsetup.c:3229
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d nie jest przypisany do klucza %d."
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
+#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Nie udało się usunąć przypisania tokenu %d do klucza %d."
 
-#: src/cryptsetup.c:3298
+#: src/cryptsetup.c:3297
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Opcje --tcrypt-hidden, --tcrypt-system i --tcrypt-backup są obsługiwane tylko dla urządzeń TCRYPT."
 
-#: src/cryptsetup.c:3301
+#: src/cryptsetup.c:3300
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Opcje --veracrypt i --disable-veracrypt są obsługiwane tylko dla typu urządzeń TCRYPT."
 
-#: src/cryptsetup.c:3304
+#: src/cryptsetup.c:3303
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opcja --veracrypt-pim jest obsługiwana tylko dla urządzeń zgodnych z VeraCryptem."
 
-#: src/cryptsetup.c:3308
+#: src/cryptsetup.c:3307
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opcja --veracrypt-query-pim jest obsługiwana tylko dla urządzeń zgodnych z VeraCryptem."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3309
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Opcje --veracrypt-pim i --veracrypt-query-pim wykluczają się wzajemnie."
 
-#: src/cryptsetup.c:3319
+#: src/cryptsetup.c:3318
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Opcja --persistent nie jest dozwolona z --test-passphrase."
 
-#: src/cryptsetup.c:3322
+#: src/cryptsetup.c:3321
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Opcje --refresh i --test-passphrase wykluczają się wzajemnie."
 
-#: src/cryptsetup.c:3325
+#: src/cryptsetup.c:3324
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Opcja --shared jest dozwolona tylko dla operacji otwarcia zwykłego urządzenia."
 
-#: src/cryptsetup.c:3328
+#: src/cryptsetup.c:3327
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Opcja --skip jest obsługiwana tylko przy otwieraniu urządzeń plain i loopaes."
 
-#: src/cryptsetup.c:3331
+#: src/cryptsetup.c:3330
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Opcja --offset z akcją open jest obsługiwana tylko dla urządzeń plain i loopaes."
 
-#: src/cryptsetup.c:3334
+#: src/cryptsetup.c:3333
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Opcji --tcrypt-hidden nie można łączyć z --allow-discards."
 
-#: src/cryptsetup.c:3338
+#: src/cryptsetup.c:3337
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Opcja rozmiaru sektora z akcją open jest obsługiwana tylko dla urządzeń plain."
 
-#: src/cryptsetup.c:3342
+#: src/cryptsetup.c:3341
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Opcja dużych rozmiarów sektorów IV jest obsługiwana tylko przy otwieraniu urządzeń typu plain z sektorem większym niż 512 bajtów."
 
-#: src/cryptsetup.c:3347
+#: src/cryptsetup.c:3346
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Opcja --test-passphrase jest dozwolona tylko przy otwieraniu urządzeń LUKS, TRCYPT, BITLK i FVAULT2."
 
-#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
+#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Opcji --device-size i --size nie można łączyć."
 
-#: src/cryptsetup.c:3353
+#: src/cryptsetup.c:3352
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Opcja --unbound jest dozwolona tylko dla operacji otwarcia urządzenia LUKS."
 
-#: src/cryptsetup.c:3356
+#: src/cryptsetup.c:3355
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Opcja --unbound nie może być użyta bez --test-passphrase."
 
-#: src/cryptsetup.c:3360
+#: src/cryptsetup.c:3359
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Opcji --volume-key-keyring nie można łączyć z --hash ani --volume-key-file."
 
-#: src/cryptsetup.c:3363
+#: src/cryptsetup.c:3362
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Obie opcje --volume-key-file muszą być sparowane z odpowiednimi opcjami --key-size."
 
-#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Opcje --cancel-deferred i --deferred nie mogą być użyte naraz."
 
-#: src/cryptsetup.c:3388
+#: src/cryptsetup.c:3387
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Opcja --active-name może być ustawiona tylko dla urządzenia LUKS2."
 
-#: src/cryptsetup.c:3391
+#: src/cryptsetup.c:3390
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Opcji --active-name i --force-offline-reencrypt nie można łączyć."
 
-#: src/cryptsetup.c:3394
+#: src/cryptsetup.c:3393
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Opcji --new-volume-key-file i --keep-key nie można łączyć."
 
-#: src/cryptsetup.c:3397
+#: src/cryptsetup.c:3396
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Opcji --new-volume-key-keyring i --keep-key nie można łączyć."
 
-#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
+#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
 msgid "Keyslot specification is required."
 msgstr "Wymagane jest określenie klucza."
 
-#: src/cryptsetup.c:3413
+#: src/cryptsetup.c:3412
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Opcji --align-payload i --offset nie można łączyć."
 
-#: src/cryptsetup.c:3416
+#: src/cryptsetup.c:3415
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Opcja --integrity-no-wipe może być użyta tylko do akcji formatowania z rozszerzeniem integralności."
 
-#: src/cryptsetup.c:3419
+#: src/cryptsetup.c:3418
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Dozwolona jest tylko jedna z opcji --use-[u]random."
 
-#: src/cryptsetup.c:3427
+#: src/cryptsetup.c:3426
 msgid "Key size is required with --unbound option."
 msgstr "Przy opcji --unbound wymagany jest rozmiar klucza."
 
-#: src/cryptsetup.c:3447
+#: src/cryptsetup.c:3446
 msgid "Invalid token action."
 msgstr "Błędna akcja token."
 
-#: src/cryptsetup.c:3450
+#: src/cryptsetup.c:3449
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parametr --key-description jest wymagany do akcji dodania tokenu."
 
-#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
+#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Akcja wymaga określonego tokenu. Należy użyć parametru --token-id."
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3457
 msgid "Option --unbound is valid only with token add action."
 msgstr "Opcja --unbound jest dozwolona tylko dla operacji dodania tokenu."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3459
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Opcji --key-slot i --unbound nie można łączyć."
 
-#: src/cryptsetup.c:3465
+#: src/cryptsetup.c:3464
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Akcja wymaga określonego klucza. Należy użyć parametru --key-slot."
 
-#: src/cryptsetup.c:3481
+#: src/cryptsetup.c:3480
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<uządzenie> [--type <typ>] [<nazwa>]"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "otwarcie urządzenia jako <nazwa>"
 
-#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
 #: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
 #: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<nazwa>"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "zamknięcie urządzenia (usunięcie odwzorowania)"
 
-#: src/cryptsetup.c:3483 src/integritysetup.c:558
+#: src/cryptsetup.c:3482 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "zmiana rozmiaru aktywnego urządzenia"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3483
 msgid "show device status"
 msgstr "pokazanie stanu urządzenia"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <szyfr>]"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "benchmark cipher"
 msgstr "test szybkości szyfru"
 
-#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
-#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
-#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
-#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
-#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
+#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
+#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
 msgid "<device>"
 msgstr "<urządzenie>"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3485
 msgid "try to repair on-disk metadata"
 msgstr "próba naprawy metadanych na dysku"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3486
 msgid "reencrypt LUKS2 device"
 msgstr "ponowne szyfrowanie urządzenia LUKS2"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3487
 msgid "erase all keyslots (remove encryption key)"
 msgstr "usunięcie wszystkich kluczy (usunięcie klucza szyfrującego)"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3488
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "przekonwertowanie formatu LUKS z/do LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3489
 msgid "set permanent configuration options for LUKS2"
 msgstr "ustawienie opcji trwałej konfiguracji dla LUKS2"
 
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
 msgid "<device> [<new key file>]"
 msgstr "<urządzenie> [<nowy plik klucza>]"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3490
 msgid "formats a LUKS device"
 msgstr "sformatowanie urządzenia LUKS"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3491
 msgid "add key to LUKS device"
 msgstr "dodanie klucza do urządzenia LUKS"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
 msgid "<device> [<key file>]"
 msgstr "<urządzenie> [<plik klucza>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3492
 msgid "removes supplied key or key file from LUKS device"
 msgstr "usunięcie podanego klucza lub pliku klucza z urządzenia LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3493
 msgid "changes supplied key or key file of LUKS device"
 msgstr "zmiana podanego klucza lub pliku klucza urządzenia LUKS"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3494
 msgid "converts a key to new pbkdf parameters"
 msgstr "konwersja klucza na nowe parametry pbkdf"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "<device> <key slot>"
 msgstr "<urządzenie> <numer klucza>"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "wymazanie klucza o numerze <numer klucza> z urządzenia LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3496
 msgid "print UUID of LUKS device"
 msgstr "wypisanie UUID-a urządzenia LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3497
 msgid "tests <device> for LUKS partition header"
 msgstr "sprawdzenie <urządzenia> pod kątem nagłówka partycji LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3498
 msgid "dump LUKS partition information"
 msgstr "zrzut informacji o partycji LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3499
 msgid "dump TCRYPT device information"
 msgstr "zrzut informacji o urządzeniu TCRYPT"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3500
 msgid "dump BITLK device information"
 msgstr "zrzut informacji o urządzeniu BITLK"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3501
 msgid "dump FVAULT2 device information"
 msgstr "zrzut informacji o urządzeniu FVAULT2"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3502
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Wstrzymanie urządzenia LUKS i wymazanie klucza (zamraża wszystkie operacje we/wy)"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3503
 msgid "Resume suspended LUKS device"
 msgstr "Wznowienie zatrzymanego urządzenia LUKS"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3504
 msgid "Backup LUKS device header and keyslots"
 msgstr "Kopia zapasowa nagłówka i kluczy urządzenia LUKS"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3505
 msgid "Restore LUKS device header and keyslots"
 msgstr "Odtworzenie nagłówka i kluczy urządzenia LUKS z kopii zapasowej"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <urządzenie>"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "Manipulate LUKS2 tokens"
 msgstr "Operacja na tokenach LUKS2"
 
-#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2956,7 +2951,7 @@ msgstr ""
 "\n"
 "<akcja> to jedno z:\n"
 
-#: src/cryptsetup.c:3532
+#: src/cryptsetup.c:3531
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2968,7 +2963,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3536
+#: src/cryptsetup.c:3535
 #, c-format
 msgid ""
 "\n"
@@ -2983,7 +2978,7 @@ msgstr ""
 "<numer klucza> to numer klucza LUKS do zmiany\n"
 "<plik klucza> to opcjonalny plik nowego klucza dla akcji luksAddKey\n"
 
-#: src/cryptsetup.c:3543
+#: src/cryptsetup.c:3542
 #, c-format
 msgid ""
 "\n"
@@ -2992,7 +2987,7 @@ msgstr ""
 "\n"
 "Domyślny wkompilowany format metadanych to %s (dla akcji luksFormat).\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3547
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3000,12 +2995,12 @@ msgstr ""
 "\n"
 "Obsługa zewnętrznych wtyczek tokenów LUKS2 jest włączona.\n"
 
-#: src/cryptsetup.c:3549
+#: src/cryptsetup.c:3548
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Ścieżka zewnętrznych wtyczek tokenów LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3550
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3013,7 +3008,7 @@ msgstr ""
 "\n"
 "Obsługa zewnętrznych wtyczek tokenów LUKS2 jest wyłączona.\n"
 
-#: src/cryptsetup.c:3555
+#: src/cryptsetup.c:3554
 #, c-format
 msgid ""
 "\n"
@@ -3030,7 +3025,7 @@ msgstr ""
 "Domyślny PBKDF dla LUKS2: %s\n"
 "\tCzas iteracji: %d, wymagana pamięć: %dkB, liczba wątków: %d\n"
 
-#: src/cryptsetup.c:3566
+#: src/cryptsetup.c:3565
 #, c-format
 msgid ""
 "\n"
@@ -3045,122 +3040,122 @@ msgstr ""
 "\tplain: %s, bitów klucza: %d, skrót hasła: %s\n"
 "\tLUKS: %s, bitów klucza: %d, skrót nagłówka LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3574
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Domyślny rozmiar klucza z trybem XTS (dwa klucze wewnętrzne) będzie podwojony.\n"
 
-#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: wymaga %s jako argumentów"
 
-#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Numer klucza jest nieprawidłowy."
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3660
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Rozmiar urządzenia musi być wielokrotnością 512-bajtowego sektora."
 
-#: src/cryptsetup.c:3666
+#: src/cryptsetup.c:3665
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Błędne określenie maksymalnego rozmiaru strefy gorącej ponownego szyfrowania."
 
-#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
+#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Rozmiar klucza musi być wielokrotnością 8 bitów"
 
-#: src/cryptsetup.c:3687
+#: src/cryptsetup.c:3686
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Można podać najwyżej 2 określenia rozmiarów kluczy."
 
-#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
+#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Określono za dużo kluczy wolumenu, można podać najwyżej %d."
 
-#: src/cryptsetup.c:3739
+#: src/cryptsetup.c:3738
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Określono za dużo dołączeń pęków kluczy, można podać najwyżej %d."
 
-#: src/cryptsetup.c:3748
+#: src/cryptsetup.c:3747
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Maksymalna wartość ograniczenia rozmiaru urządzenia to 1GiB."
 
-#: src/cryptsetup.c:3751
+#: src/cryptsetup.c:3750
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Rozmiar ograniczenia musi być wielokrotnością 512-bajtowego sektora."
 
-#: src/cryptsetup.c:3768
+#: src/cryptsetup.c:3767
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Opcja --priority może mieć wartości tylko ignore/normal/prefer."
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Wyświetlenie tego opisu"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Wyświetlenie krótkiej informacji o składni"
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Wypisanie wersji pakietu"
 
-#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Opcje pomocnicze:"
 
-#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPCJA...] <akcja> <parametry-akcji>"
 
-#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Brak argumentu <akcja>."
 
-#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Nieznana akcja."
 
-#: src/cryptsetup.c:3929
+#: src/cryptsetup.c:3928
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Opcja --key-file ma priorytet nad podanym argumentem pliku klucza."
 
-#: src/cryptsetup.c:3935
+#: src/cryptsetup.c:3934
 msgid "Only one --key-file argument is allowed."
 msgstr "Dozwolony jest tylko jeden argument --key-file."
 
-#: src/cryptsetup.c:3940
+#: src/cryptsetup.c:3939
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funkcja pochodna klucza oparta na haśle (PBKDF) może być tylko pbkdf2 lub argon2i/argon2id."
 
-#: src/cryptsetup.c:3945
+#: src/cryptsetup.c:3944
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Wymuszonych iteracji PBKDF nie można łączyć z opcją czasu iteracji."
 
-#: src/cryptsetup.c:3950
+#: src/cryptsetup.c:3949
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Nie można dołączyć klucza wolumenu do pęku kluczy, kiedy pęk kluczy jest wyłączony."
 
-#: src/cryptsetup.c:3955
+#: src/cryptsetup.c:3954
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Nie można użyć opisu klucza pęku kluczy, kiedy pęk kluczy jest wyłączony."
 
-#: src/cryptsetup.c:3960
+#: src/cryptsetup.c:3959
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Integralności wbudowanej należy używać wraz z opcją --integrity."
 
-#: src/cryptsetup.c:3971
+#: src/cryptsetup.c:3970
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Opcje --keyslot-cipher i --keyslot-key-size muszą być użyte łącznie."
 
-#: src/cryptsetup.c:3979
+#: src/cryptsetup.c:3978
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Nie wykonano akcji. Wywołano z opcją --test-args.\n"
 
-#: src/cryptsetup.c:3992
+#: src/cryptsetup.c:3991
 msgid "Cannot disable metadata locking."
 msgstr "Nie można wyłączyć blokowania metadanych."
 

From 71b2397f9d558bf3f3d7400bffd903392a546cd2 Mon Sep 17 00:00:00 2001
From: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>
Date: Sat, 4 Jul 2026 18:12:56 +0200
Subject: [PATCH 165/244] po: update ro.po (from translationproject.org)

---
 po/ro.po | 1020 +++++++++++++++++++++++++++---------------------------
 1 file changed, 511 insertions(+), 509 deletions(-)

diff --git a/po/ro.po b/po/ro.po
index 308eb325a..144a5bcd2 100644
--- a/po/ro.po
+++ b/po/ro.po
@@ -18,14 +18,15 @@
 # Actualizare a traducerii pentru versiunea 2.8.1-rc0, făcută de R-GC, aug-2025.
 # Actualizare a traducerii pentru versiunea 2.8.2-rc0, făcută de R-GC, dec-2025.
 # Actualizare a traducerii pentru versiunea 2.8.5-rc0, făcută de R-GC, mar-2026.
+# Actualizare a traducerii pentru versiunea 2.8.7-rc1, făcută de R-GC, iun-2026.
 # Actualizare a traducerii pentru versiunea Y, făcută de X, Y(luna-anul).
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-03-30 14:18+0200\n"
-"PO-Revision-Date: 2026-03-30 19:37+0200\n"
+"POT-Creation-Date: 2026-06-29 21:30+0200\n"
+"PO-Revision-Date: 2026-06-30 15:24+0200\n"
 "Last-Translator: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>\n"
 "Language-Team: Romanian <translation-team-ro@lists.sourceforge.net>\n"
 "Language: ro\n"
@@ -95,7 +96,7 @@ msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Recalcularea automată a etichetelor de integritate solicitată nu este acceptată."
 
 #: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2781
+#: lib/luks2/luks2_json_metadata.c:2799
 msgid "Discard/TRIM is not supported."
 msgstr "Înlăturarea/Decuparea(TRIM) nu este acceptată."
 
@@ -141,665 +142,665 @@ msgstr "Calitatea solicitată pentru generatorul de numere aleatoare(RNG) este n
 msgid "Error reading from RNG."
 msgstr "Eroare la citirea din generatorul de numere aleatorii(RNG)."
 
-#: lib/setup.c:248
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "Suportul pentru OPAL este dezactivat în libcryptsetup."
 
-#: lib/setup.c:250
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "Dispozitivul %s sau nucleul nu acceptă criptarea OPAL."
 
-#: lib/setup.c:266
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "Nu s-a putut inițializa utilitarul de criptare al generatorului de numere aleatorii(RNG)."
 
-#: lib/setup.c:272
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "Nu s-a putut inițializa utilitarul de criptare ."
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Algoritmul sumei de control %s nu este acceptat."
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "Eroare de procesare a cheii (folosind suma de control %s)."
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Nu se poate determina tipul de dispozitiv. Activare a dispozitivului incompatibilă?"
 
-#: lib/setup.c:395 lib/setup.c:4160
+#: lib/setup.c:398 lib/setup.c:4177
 msgid "This operation is supported only for LUKS device."
 msgstr "Această operație este acceptată doar pentru dispozitive LUKS."
 
-#: lib/setup.c:432
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "Această operație este acceptată doar pentru dispozitive LUKS2."
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "Toate sloturile pentru chei sunt ocupate."
 
-#: lib/setup.c:500
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "Slotul de cheie %d este nu este valid, selectați între 0 și %d."
 
-#: lib/setup.c:506
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "Slotul pentru chei %d este ocupat, selectați altul."
 
-#: lib/setup.c:531 lib/setup.c:3875
+#: lib/setup.c:534 lib/setup.c:3878
 msgid "Device size is not aligned to device logical block size."
 msgstr "Dimensiunea dispozitivului nu este aliniată la dimensiunea blocului logic al dispozitivului."
 
-#: lib/setup.c:628
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "Antet detectat, dar dispozitivul %s este prea mic."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
-#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Această operație nu este suportată pentru acest tip de dispozitiv."
 
-#: lib/setup.c:674
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "Operație ilegală cu recriptare în curs."
 
-#: lib/setup.c:806
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nu s-au putut reîncărca metadatele LUKS2 în memorie."
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
-#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
-#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
-#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
+#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
+#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
+#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Dispozitivul %s nu este un dispozitiv LUKS valid."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Versiunea %d de LUKS nu este acceptată."
 
-#: lib/setup.c:1270
+#: lib/setup.c:1273
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Nu a fost detectat niciun model cunoscut de specificație de cifrare pentru dispozitivul activ %s."
 
-#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5816
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
 #, c-format
 msgid "Device %s is not active."
 msgstr "Dispozitivul %s nu este activ."
 
-#: lib/setup.c:1532
+#: lib/setup.c:1535
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Dispozitivul subiacent pentru dispozitivul criptat %s a dispărut."
 
-#: lib/setup.c:1614
+#: lib/setup.c:1617
 msgid "Invalid plain crypt parameters."
 msgstr "Parametrii de criptare simplă sunt incorecți."
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1622 lib/setup.c:2672
 msgid "Invalid key size."
 msgstr "Dimensiunea cheii este nevalidă."
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID-ul nu este acceptat pentru acest tip de criptare."
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Dispozitivul cu metadate detașate nu este acceptat pentru acest tip de criptare."
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
 msgid "Unsupported encryption sector size."
 msgstr "Dimensiunea sectorului de criptare nu este acceptată."
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
 msgid "Device size is not aligned to requested sector size."
 msgstr "Dimensiunea dispozitivului nu este aliniată la dimensiunea sectorului solicitată."
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
 msgid "Can't format LUKS without device."
 msgstr "Formatarea LUKS fără dispozitiv nu este posibilă."
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1707 lib/setup.c:1959
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Dispozitivul %s divizat în zone nu poate fi utilizat pentru antetul LUKS."
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Alinierea datelor solicitată nu este compatibilă cu poziția datelor."
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1754 lib/setup.c:1984
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "AVERTISMENT: Dispozitivul DAX poate corupe datele, deoarece nu garantează actualizări atomice ale sectoarelor.\n"
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Nu se poate șterge antetul pe dispozitivul %s."
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1805 lib/setup.c:2164
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Dispozitivul %s este prea mic pentru activare, nu a mai rămas spațiu pentru date.\n"
 
-#: lib/setup.c:1843
+#: lib/setup.c:1846
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Cheia de volum este prea mică pentru criptare cu extensii de integritate."
 
-#: lib/setup.c:1847
+#: lib/setup.c:1850
 msgid "Integrity key size is too small."
 msgstr "Dimensiunea cheii de integritate este prea mică."
 
-#: lib/setup.c:1856
+#: lib/setup.c:1859
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Cifrul %s-%s (dimensiunea cheii %zd biți) nu este disponibil."
 
-#: lib/setup.c:1897
+#: lib/setup.c:1900
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "AVERTISMENT: Activarea dispozitivului va eșua, dm-crypt nu are suport pentru dimensiunea sectorului de criptare solicitată.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
-#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4497
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Dispozitivul %s este prea mic."
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Nu se poate formata dispozitivul %s, este în uz."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Nu se poate formata dispozitivul %s; permisiune refuzată."
 
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Nu se poate formata integritatea pentru dispozitivul %s."
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2151 lib/setup.c:2629
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Nu se poate formata dispozitivul %s."
 
-#: lib/setup.c:2191
+#: lib/setup.c:2194
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Nu se pot obține parametrii de aliniere OPAL."
 
-#: lib/setup.c:2203
+#: lib/setup.c:2206
 msgid "Bogus OPAL logical block size."
 msgstr "Dimensiune falsă a blocului logic OPAL."
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Dimensiunea falsă a blocului logic OPAL diferă de dimensiunea blocului dispozitivului."
 
-#: lib/setup.c:2214
+#: lib/setup.c:2217
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Intervalul(offset) de date solicitat nu este compatibil cu dimensiunea blocului OPAL."
 
-#: lib/setup.c:2221
+#: lib/setup.c:2224
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Alinierea datelor solicitată nu este compatibilă cu alinierea OPAL."
 
-#: lib/setup.c:2241
+#: lib/setup.c:2244
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Intervalul datelor nu îndeplinește cerințele de aliniere OPAL."
 
-#: lib/setup.c:2254
+#: lib/setup.c:2257
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Alinierea datelor solicitată nu satisface cerințele de aliniere a intervalului de blocare."
 
-#: lib/setup.c:2468
+#: lib/setup.c:2471
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Compensarea dimensiunii dispozitivului cu %<PRIu64> sectoare pentru a-l alinia cu gradul de finețe al alinierii OPAL."
 
-#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Nu s-a putut obține blocarea OPAL pe dispozitivul %s."
 
-#: lib/setup.c:2538
+#: lib/setup.c:2541
 msgid "Incorrect OPAL Admin key."
 msgstr "Cheie de administrare OPAL incorectă."
 
-#: lib/setup.c:2540
+#: lib/setup.c:2543
 msgid "Cannot setup OPAL segment."
 msgstr "Nu se poate configura segmentul OPAL."
 
-#: lib/setup.c:2622
+#: lib/setup.c:2625
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Nu se poate formata dispozitivul %s, dispozitivul OPAL pare a fi complet protejat la scriere acum."
 
-#: lib/setup.c:2624
+#: lib/setup.c:2627
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Aceasta este probabil o eroare în firmware. Efectuați reinițierea PSID OPAL și reconectați-vă pentru recuperare."
 
-#: lib/setup.c:2644
+#: lib/setup.c:2647
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Reinițierea intervalului de blocare %d pe dispozitivul %s a eșuat."
 
-#: lib/setup.c:2664
+#: lib/setup.c:2667
 msgid "Can't format LOOPAES without device."
 msgstr "Nu se poate formata LOOPAES fără dispozitiv."
 
-#: lib/setup.c:2709
+#: lib/setup.c:2712
 msgid "Can't format VERITY without device."
 msgstr "Nu se poate formata VERITY fără dispozitiv."
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2723 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Tip de sumă de control VERITY neacceptat %d."
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2729 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Dimensiunea blocului VERITY nu este acceptată."
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2734 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Decalajul sumei de control VERITY nu este acceptat."
 
-#: lib/setup.c:2736
+#: lib/setup.c:2739
 msgid "Unsupported VERITY FEC offset."
 msgstr "Decalajul FEC VERITY nu este acceptat."
 
-#: lib/setup.c:2760
+#: lib/setup.c:2763
 msgid "Data area overlaps with hash area."
 msgstr "Zona de date se suprapune cu zona de sume de control."
 
-#: lib/setup.c:2785
+#: lib/setup.c:2788
 msgid "Hash area overlaps with FEC area."
 msgstr "Zona sumelor de control se suprapune cu zona FEC."
 
-#: lib/setup.c:2792
+#: lib/setup.c:2795
 msgid "Data area overlaps with FEC area."
 msgstr "Zona de date se suprapune cu zona FEC."
 
-#: lib/setup.c:2884
+#: lib/setup.c:2887
 msgid "Integrity key size mismatch."
 msgstr "Dimensiunea cheii de integritate nu coincide."
 
-#: lib/setup.c:2935
+#: lib/setup.c:2938
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "AVERTISMENT: Dimensiunea solicitată a etichetei %d octeți diferă de dimensiunea %s de ieșire (%d octeți).\n"
 
-#: lib/setup.c:3048 lib/setup.c:3150
+#: lib/setup.c:3051 lib/setup.c:3153
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "A fost solicitat un tip de dispozitiv %s necunoscut sau neacceptat."
 
-#: lib/setup.c:3064
+#: lib/setup.c:3067
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Dispozitivul %s nu furnizează câmpuri de date de integritate în linie „inline”."
 
-#: lib/setup.c:3070
+#: lib/setup.c:3073
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Dimensiunea etichetei în linie %<PRIu32> [ cteți] este mai mare decât %<PRIu32> furnizată de dispozitivul %s."
 
-#: lib/setup.c:3085
+#: lib/setup.c:3088
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Sectorul trebuie să fie la fel ca sectorul hardware al dispozitivului (%zu octeți)."
 
-#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Parametri neacceptați pentru dispozitivul %s."
 
-#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Parametrii nepotriviți în dispozitivul %s."
 
-#: lib/setup.c:3647
+#: lib/setup.c:3650
 msgid "Crypt devices mismatch."
 msgstr "Dispozitivele de criptare nu se potrivesc."
 
-#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Nu s-a putut reîncărca dispozitivul %s."
 
-#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
-#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Nu s-a putut suspenda dispozitivul %s."
 
-#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
-#: lib/luks2/luks2_reencrypt.c:4240
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Nu s-a putut reîncărca dispozitivul %s."
 
-#: lib/setup.c:3717
+#: lib/setup.c:3720
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Eroare fatală la reîncărcarea dispozitivului %s (în partea superioară a dispozitivului %s)."
 
-#: lib/setup.c:3720 lib/setup.c:3722
+#: lib/setup.c:3723 lib/setup.c:3725
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Nu s-a putut comuta dispozitivul %s la dm-error."
 
-#: lib/setup.c:3765
+#: lib/setup.c:3768
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Nu se poate redimensiona dispozitivul LUKS2 cu o dimensiune statică."
 
-#: lib/setup.c:3770
+#: lib/setup.c:3773
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Redimensionarea dispozitivului LUKS2 cu protecție de integritate nu este acceptată."
 
-#: lib/setup.c:3816
+#: lib/setup.c:3819
 msgid "Cannot resize loop device."
 msgstr "Nu se poate redimensiona dispozitivul de buclă."
 
-#: lib/setup.c:3860
+#: lib/setup.c:3863
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "AVERTISMENT: Dimensiunea maximă a fost deja stabilită sau nucleul nu acceptă redimensionarea.\n"
 
-#: lib/setup.c:3926
+#: lib/setup.c:3929
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Redimensionarea nu a reușit, nucleul nu acceptă redimensionarea."
 
-#: lib/setup.c:3958
+#: lib/setup.c:3961
 msgid "Do you really want to change UUID of device?"
 msgstr "Chiar doriți să schimbați UUID-ul dispozitivului?"
 
-#: lib/setup.c:4050
+#: lib/setup.c:4053
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Fișierul de copie de rezervă pentru antet nu conține un antet LUKS compatibil."
 
-#: lib/setup.c:4143
+#: lib/setup.c:4160
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Volumul %s nu este activ."
 
-#: lib/setup.c:4198
+#: lib/setup.c:4215
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Volumul %s este deja suspendat."
 
-#: lib/setup.c:4224
+#: lib/setup.c:4241
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Suspendarea nu este acceptată pentru dispozitivul %s."
 
-#: lib/setup.c:4226 lib/setup.c:4234
+#: lib/setup.c:4243 lib/setup.c:4251
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Eroare la suspendarea dispozitivului %s."
 
-#: lib/setup.c:4249
+#: lib/setup.c:4266
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Dispozitivul %s a fost suspendat, dar dispozitivul hardware OPAL nu poate fi blocat."
 
-#: lib/setup.c:4280 lib/setup.c:4457
+#: lib/setup.c:4297 lib/setup.c:4491
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Reluarea activității nu este acceptată pentru dispozitivul %s."
 
-#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Eroare la reluarea activității dispozitivului %s."
 
-#: lib/setup.c:4301
+#: lib/setup.c:4335
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Nu s-a putut dezlega cheia de volum de la inelul de chei specificat de utilizator."
 
-#: lib/setup.c:4423 lib/setup.c:5603
+#: lib/setup.c:4457 lib/setup.c:5637
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Nu s-a putut leg cheia de volum la inelul de chei specificat de utilizator."
 
-#: lib/setup.c:4522 src/cryptsetup.c:2721
+#: lib/setup.c:4556 src/cryptsetup.c:2720
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Volumul %s nu este suspendat."
 
-#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
-#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
+#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
+#: src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Cheia de volum nu se potrivește cu volumul."
 
-#: lib/setup.c:4787
+#: lib/setup.c:4821
 msgid "Failed to swap new key slot."
 msgstr "Nu s-a putut efectua interschimbarea cu noul slot pentru cheie."
 
-#: lib/setup.c:4885
+#: lib/setup.c:4919
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Slotul de cheie %d nu este valid."
 
-#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
-#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
+#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
+#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Slotul de cheie %d nu este activ."
 
-#: lib/setup.c:4910
+#: lib/setup.c:4944
 msgid "Device header overlaps with data area."
 msgstr "Antetul dispozitivului se suprapune cu zona de date."
 
-#: lib/setup.c:5131
+#: lib/setup.c:5165
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Recriptare în curs. Nu se poate activa dispozitivul."
 
-#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3725
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Nu s-a putut obține blocarea pentru recriptare."
 
-#: lib/setup.c:5155
+#: lib/setup.c:5189
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Recuperarea recriptării LUKS2 utilizând cheia (cheile) de volum a eșuat."
 
-#: lib/setup.c:5291
+#: lib/setup.c:5325
 #, c-format
 msgid "Device %s already exists."
 msgstr "Dispozitivul %s există deja."
 
-#: lib/setup.c:5298
+#: lib/setup.c:5332
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Nu se poate folosi dispozitivul %s, numele este nevalid sau este încă în uz."
 
-#: lib/setup.c:5310
+#: lib/setup.c:5344
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Cheile de recriptare a volumului nu se potrivesc cu volumul."
 
-#: lib/setup.c:5327
+#: lib/setup.c:5361
 msgid "Incorrect volume key specified for plain device."
 msgstr "Este specificată o cheie de volum incorectă pentru un dispozitiv cu criptare normală."
 
-#: lib/setup.c:5353 lib/setup.c:5414
+#: lib/setup.c:5387 lib/setup.c:5448
 msgid "Device type is not properly initialized."
 msgstr "Tipul de dispozitiv nu este inițializat corect."
 
-#: lib/setup.c:5452
+#: lib/setup.c:5486
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Inelul de chei pentru nucleu nu este acceptat de nucleu actual."
 
-#: lib/setup.c:5456
+#: lib/setup.c:5490
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Lipsește inelul de chei pentru nucleu: este necesar pentru transmiterea semnăturii către nucleu."
 
-#: lib/setup.c:5511
+#: lib/setup.c:5545
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Nu se poate utiliza cheia inelului de chei %s."
 
-#: lib/setup.c:5724
+#: lib/setup.c:5758
 msgid "Incorrect root hash specified for verity device."
 msgstr "Sumă de control rădăcină incorectă specificată pentru dispozitivul verity."
 
-#: lib/setup.c:5765 lib/setup.c:5790
+#: lib/setup.c:5799 lib/setup.c:5824
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL nu acceptă dezactivarea amânată."
 
-#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Dispozitivul %s este încă în uz."
 
-#: lib/setup.c:5798
+#: lib/setup.c:5832
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Nu s-a putut anula eliminarea întârziată din dispozitivul %s."
 
-#: lib/setup.c:5820
+#: lib/setup.c:5854
 #, c-format
 msgid "Invalid device %s."
 msgstr "Dispozitiv nevalid %s."
 
-#: lib/setup.c:5967
+#: lib/setup.c:6001
 msgid "Volume key buffer too small."
 msgstr "Memoria tampon a cheii de volum este prea mică."
 
-#: lib/setup.c:5978
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul LUKS2."
 
-#: lib/setup.c:5987
+#: lib/setup.c:6021
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul LUKS1."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6035
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nu se poate recupera tasta de volum pentru dispozitivul normal."
 
-#: lib/setup.c:6009
+#: lib/setup.c:6043
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Nu se poate recupera suma de control rădăcină pentru dispozitivul verity."
 
-#: lib/setup.c:6018
+#: lib/setup.c:6052
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul BITLK."
 
-#: lib/setup.c:6023
+#: lib/setup.c:6057
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul FVAULT2."
 
-#: lib/setup.c:6025
+#: lib/setup.c:6059
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Această operație nu este acceptată pentru dispozitivul criptat %s."
 
-#: lib/setup.c:6210 lib/setup.c:6221
+#: lib/setup.c:6244 lib/setup.c:6255
 msgid "Dump operation is not supported for this device type."
 msgstr "Operația de descărcare nu este acceptată pentru acest tip de dispozitiv."
 
-#: lib/setup.c:6601
+#: lib/setup.c:6635
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Decalajul datelor nu este multiplu de %u octeți."
 
-#: lib/setup.c:6909
+#: lib/setup.c:6943
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Nu se poate converti dispozitivul %s care este încă în uz."
 
-#: lib/setup.c:7217 lib/setup.c:7361
+#: lib/setup.c:7251 lib/setup.c:7406
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Nu s-a putut atribui slotul %u ca nouă cheie de volum."
 
-#: lib/setup.c:7241
+#: lib/setup.c:7275
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Nu s-au putut inițializa parametrii impliciți pentru slotul de cheie LUKS2."
 
-#: lib/setup.c:7247
+#: lib/setup.c:7281
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Nu s-a putut aloca slotul de cheie %d pentru a digera."
 
-#: lib/setup.c:7478
+#: lib/setup.c:7523
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nu se poate adăuga slotul pentru cheie, toate sloturile sunt dezactivate și nu este furnizată nicio cheie pentru volum."
 
-#: lib/setup.c:7551 lib/verity/verity.c:333
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Nu s-a putut încărca cheia în inelul de chei al nucleului."
 
-#: lib/setup.c:7742
+#: lib/setup.c:7807
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Nu s-a putut găsi inelul de chei descris de „%s”."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7872
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Nu s-a putut obține blocarea de serializare a accesului la memoria-hardwarw globală."
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "Nu s-a putut deschide fișierul cheii."
 
-#: lib/utils.c:212
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "Nu se poate citi fișierul de cheie de la un terminal."
 
-#: lib/utils.c:228
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "Nu s-a putut obține starea fișierului de cheie."
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "Nu se poate căuta poziția fișierului de cheie solicitat."
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "Memoria epuizată în timpul citirii frazei de acces."
 
-#: lib/utils.c:286
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "Eroare la citirea frazei de acces."
 
-#: lib/utils.c:303
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "Nimic de citit la intrare."
 
-#: lib/utils.c:310
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "Dimensiunea maximă a fișierului de cheie a fost depășită."
 
-#: lib/utils.c:315
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "Nu se poate citi cantitatea de date solicitată."
 
@@ -979,7 +980,7 @@ msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Specificațiile de cifrare ar trebui să fie în formatul [cifrarea]-[mod]-[iv]."
 
 #: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
 #: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
@@ -993,13 +994,13 @@ msgstr "Nu s-a putut deschide dispozitivul pentru stocarea temporară a cheilor.
 msgid "Failed to access temporary keystore device."
 msgstr "Nu s-a putut accesa dispozitivul pentru stocarea temporară a cheilor."
 
-#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "Eroare de In/Ieș în timpul criptării slotului de cheie."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
@@ -1010,7 +1011,7 @@ msgstr "Eroare de In/Ieș în timpul criptării slotului de cheie."
 msgid "Cannot open device %s."
 msgstr "Nu s-a putut deschide dispozitivul %s."
 
-#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "Eroare de In/Ieș la decriptarea slotului de cheie."
 
@@ -1100,7 +1101,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Cifrul sumei de control(hash) reparat la minuscule (%s)."
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Suma de control(hash) LUKS solicitată %s nu este acceptată."
@@ -1147,7 +1148,7 @@ msgstr "Modul de cifrare LUKS %s este nevalid."
 msgid "LUKS hash %s is invalid."
 msgstr "Suma de control(hash) LUKS %s nu este validă."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
 msgid "No known problems detected for LUKS header."
 msgstr "Nu s-a detectat nicio problemă cunoscută pentru antetul LUKS."
 
@@ -1161,50 +1162,50 @@ msgstr "Eroare în timpul actualizării antetului LUKS pe dispozitivul %s."
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Eroare la recitirea antetului LUKS după actualizare pe dispozitivul %s."
 
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:750
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Decalajul datelor pentru antetul LUKS trebuie să fie 0 sau mai mare decât dimensiunea antetului."
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:701
 msgid "Wrong LUKS UUID format provided."
 msgstr "Formatul UUID LUKS furnizat este greșit."
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Nu se poate crea antetul LUKS: citirea datelor «salt» aleatoare a eșuat."
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Nu se poate crea antetul LUKS: calcularea sumei de control a antetului a eșuat (folosind suma de control(hash) %s)."
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Slot de cheie %d activ, curățați mai întâi."
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Materialul de la slotul de cheie %d nu are suficiente benzi. Antetul a fost manipulat?"
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Depășire a valorii de iterație a PBKDF2."
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Nu se poate deschide slotul de cheie (folosind suma de control(hash) %s)."
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Slotul de cheie %d nu este valid, selectați slotul de cheie între 0 și %d."
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Nu se poate șterge dispozitivul %s."
@@ -1225,56 +1226,48 @@ msgstr "S-a detectat un fișier de cheie loop-AES incompatibil."
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "Nucleul nu acceptă asocierea compatibilă cu bucla loop-AES."
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "Eroare la citirea fișierului de cheie %s."
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "Lungimea maximă a frazei de acces TCRYPT (%zu) a fost depășită."
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "Algoritmul sumei de control(hash) PBKDF2 %s nu este disponibil, se omite."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
-msgid "Required kernel crypto interface not available."
-msgstr "Interfața necesară de criptare a nucleului nu este disponibilă."
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "Asigurați-vă că aveți modulul nucleului «algif_skcipher», încărcat."
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "Activarea nu este acceptată pentru dimensiunea sectorului de %d."
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "Nucleul nu acceptă activarea pentru acest mod vechi TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "Se activează criptarea sistemului TCRYPT pentru partiția %s."
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:819
 msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
 msgstr "Nu se poate determina decalajul partiției de sistem TCRYPT, se activează întreaga zonă criptată."
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:828
 msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
 msgstr "Nu se poate determina decalajul partiției de sistem TCRYPT, se activează dispozitivul ca partiție de sistem."
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "Nucleul nu acceptă asocierea compatibilă cu TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:1146
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "Această funcție nu este acceptată fără încărcarea antetului TCRYPT."
 
@@ -1627,8 +1620,7 @@ msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "AVERTISMENT: dimensiunea zonei sloturilor de chei LUKS2 s-a schimbat la %<PRIu64> octeți.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Nu s-a putut obține blocarea pentru citire pe dispozitivul %s."
@@ -1688,79 +1680,79 @@ msgstr ""
 msgid "Ignored unknown flag %s."
 msgstr "S-a ignorat fanionul necunoscut %s."
 
-#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Lipsește cheia pentru segmentul dm-crypt %u"
 
-#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Nu s-a putut definii segmentul dm-crypt."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Nu s-a putut definii segmentul dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Nu s-a detectat niciun model de specificație de cifrare cunoscut în antetul LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:2691
+#: lib/luks2/luks2_json_metadata.c:2709
 msgid "OPAL device must have static device size."
 msgstr "Dispozitivul OPAL trebuie să aibă dimensiunea dispozitivului statică."
 
-#: lib/luks2/luks2_json_metadata.c:2711
+#: lib/luks2/luks2_json_metadata.c:2729
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Dispozitivul OPAL criptat cu integritate trebuie să fie mai mic decât intervalul de blocare."
 
-#: lib/luks2/luks2_json_metadata.c:2716
+#: lib/luks2/luks2_json_metadata.c:2734
 msgid "OPAL device must have same size as locking range."
 msgstr "Dispozitivul OPAL trebuie să aibă aceeași dimensiune ca și intervalul de blocare."
 
-#: lib/luks2/luks2_json_metadata.c:2736
+#: lib/luks2/luks2_json_metadata.c:2754
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Dispozitivul OPAL %s este deja deblocat.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2775
+#: lib/luks2/luks2_json_metadata.c:2793
 msgid "Unsupported device integrity configuration."
 msgstr "Configurație de integritate a dispozitivului neacceptată."
 
-#: lib/luks2/luks2_json_metadata.c:2791
+#: lib/luks2/luks2_json_metadata.c:2809
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Dispozitiv dm-integrity subiacent cu sectoare de date neașteptate furnizate."
 
-#: lib/luks2/luks2_json_metadata.c:2886
+#: lib/luks2/luks2_json_metadata.c:2911
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Recriptare în curs. Nu se poate dezactiva dispozitivul."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Nu s-a putut înlocui dispozitivul suspendat %s cu ținta dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Dispozitivul %s a fost dezactivat, dar dispozitivul hardware OPAL nu poate fi blocat."
 
-#: lib/luks2/luks2_json_metadata.c:3020
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Au fost detectate cerințe LUKS2 neîndeplinite."
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3053
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Operație incompatibilă cu dispozitivul marcat pentru recriptare învechită. Se abandonează."
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3055
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Operație incompatibilă cu dispozitivul marcat pentru recriptare LUKS2. Se abandonează."
 
-#: lib/luks2/luks2_json_metadata.c:3032
+#: lib/luks2/luks2_json_metadata.c:3057
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Operație incompatibilă cu dispozitivul care utilizează OPAL. Se abandonează."
 
-#: lib/luks2/luks2_json_metadata.c:3034
+#: lib/luks2/luks2_json_metadata.c:3059
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Operație incompatibilă cu dispozitivul care utilizează etichete HW în linie. Se abandonează."
 
@@ -1772,22 +1764,22 @@ msgstr "Nu există suficientă memorie disponibilă pentru a deschide un slot de
 msgid "Keyslot open failed."
 msgstr "Deschiderea slotului de cheie a eșuat."
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "Nu se poate utiliza cifrul %s-%s pentru criptarea slotului de cheie."
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "Nu se poate utiliza cifrul %s pentru criptarea slotului de cheie."
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr "Memorie insuficientă pentru derivarea cheilor slotului de chei."
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "Algoritmul sumei de control(hash) %s nu este disponibil."
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "Nu există spațiu pentru noul slot de cheie."
 
@@ -1804,335 +1796,335 @@ msgstr "Nu se poate actualiza tipul de adaptabilitate. Tipul nou oferă numai %<
 msgid "Failed to refresh reencryption verification digest."
 msgstr "Nu s-a putut reîmprospăta calcularea sumei de control de verificare a recriptării."
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "Nu se poate verifica starea dispozitivului cu uuid: %s."
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Nu s-a putut converti antetul cu metadate suplimentare LUKSMETA."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Nu se poate utiliza specificația de cifrare %s-%s pentru LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr "Nu se poate utiliza specificația de cifrare %s-%s pentru slotul de chei LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Nu se poate muta zona slotului pentru chei. Spațiu insuficient."
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Nu se poate converti în format LUKS2 - metadate nevalide."
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Nu se poate muta zona slotului pentru chei. Zona sloturilor pentru chei LUKS2 este prea mică."
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr "Nu se poate muta zona slotului pentru chei."
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Nu se poate converti în format LUKS1 - dimensiunea implicită a sectorului de criptare al segmentului nu este de 512 octeți."
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Nu se poate converti în formatul LUKS1 - calcularea sumelor de control ale slotului de cheie nu este compatibilă cu LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Nu se poate converti în formatul LUKS1 - dispozitivul folosește cifrul de cheie încapsulat %s."
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Nu se poate converti în formatul LUKS1 - dispozitivul utilizează mai multe segmente."
 
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Nu se poate converti în formatul LUKS1 - antetul LUKS2 conține %u jetoane(tokens)."
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:798
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Nu se poate converti în formatul LUKS1 - nu există sloturi de chei active."
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Nu se poate converti în formatul LUKS1 - slotul de cheie %u este într-o stare nevalidă."
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:815
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Nu se poate converti în formatul LUKS1 - slotul de cheie %u nu este legat."
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Nu se poate converti în formatul LUKS1 - slotul %u (peste sloturile maxime) este încă activ."
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Nu se poate converti în formatul LUKS1 - slotul de cheie %u nu este compatibil cu LUKS1."
 
-#: lib/luks2/luks2_reencrypt.c:1198
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Dimensiunea zonei „fierbinți” (active) trebuie să fie multiplu al alinierii zonei calculate (%zu octeți)."
 
-#: lib/luks2/luks2_reencrypt.c:1203
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Dimensiunea dispozitivului trebuie să fie multiplu al alinierii zonei calculate (%zu octeți)."
 
-#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
-#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4080
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Nu s-a putut inițializa vechea încapsulare de stocare a segmentului."
 
-#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Nu s-a putut inițializa noua încapsulare de stocare a segmentului."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "Nu s-a putut inițializa protecția zonei „fierbinți” (active)."
 
-#: lib/luks2/luks2_reencrypt.c:1623
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "Nu s-au putut citii sumele de control pentru zona „fierbinte” (activă) actuală."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Nu s-a putut citi zona „fierbinte” (activă) începând cu %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:1649
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "Nu s-a putut decripta sectorul %zu."
 
-#: lib/luks2/luks2_reencrypt.c:1655
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "Nu s-a putut recupera sectorul %zu."
 
-#: lib/luks2/luks2_reencrypt.c:2208
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "Dimensiunile dispozitivelor sursă și țintă nu se potrivesc. Sursa %<PRIu64>, ținta: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2310
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "Nu s-a putut activa zona „fierbinte” (activă) a dispozitivului %s."
 
-#: lib/luks2/luks2_reencrypt.c:2322
+#: lib/luks2/luks2_reencrypt.c:2323
 #, c-format
 msgid "Failed to allocate hotzone device %s."
 msgstr "Nu s-a putut aloca dispozitivul de zonă „fierbinte” (hotzone) %s."
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "Nu s-a putut activa dispozitivul de suprapunere %s cu tabelul de origine actual."
 
-#: lib/luks2/luks2_reencrypt.c:2346
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "Nu s-a putut încărca noua asociere pentru dispozitivul %s."
 
-#: lib/luks2/luks2_reencrypt.c:2418
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
 msgstr "Nu s-a putut reîmprospăta stiva de dispozitive de recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:2615
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
 msgstr "Nu s-a putut definii dimensiunea zonei noilor sloturi pentru chei."
 
-#: lib/luks2/luks2_reencrypt.c:2751
+#: lib/luks2/luks2_reencrypt.c:2752
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Valoarea deplasării datelor nu este aliniată la dimensiunea sectorului de criptare (%<PRIu32> octeți)."
 
-#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "Modul de adaptabilitate neacceptat %s"
 
-#: lib/luks2/luks2_reencrypt.c:2824
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
 msgstr "Dimensiunea segmentului mutat nu poate fi mai mare decât valoarea deplasării de date."
 
-#: lib/luks2/luks2_reencrypt.c:2866
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
 msgstr "Parametri de adaptabilitate de recriptare nevalizi."
 
-#: lib/luks2/luks2_reencrypt.c:2888
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "Segmentul mutat este prea mare. Dimensiunea solicitată este de %<PRIu64>, iar spațiul disponibil pentru aceasta este de: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2977
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "Nu s-a putut șterge tabelul."
 
-#: lib/luks2/luks2_reencrypt.c:3063
+#: lib/luks2/luks2_reencrypt.c:3064
 #, c-format
 msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
 msgstr "Deplasarea datelor (%<PRIu64> sectoare) este mai mică decât decalajul viitor al datelor (%<PRIu64> sectoare)."
 
-#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
 msgstr "Dimensiunea redusă a datelor este mai mare decât dimensiunea dispozitivului real."
 
-#: lib/luks2/luks2_reencrypt.c:3095
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Dispozitivul de date nu este aliniat la dimensiunea sectorului de criptare (%<PRIu32> octeți)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
-#: lib/luks2/luks2_reencrypt.c:3664
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Nu s-a putut deschide %s în modul exclusiv (deja cartografiat sau montat)."
 
-#: lib/luks2/luks2_reencrypt.c:3332
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Dispozitivul nu este marcat pentru recriptarea LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Nu s-a putut încărca contextul de recriptare LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
 msgstr "Dispozitivul nu se află în recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
 msgstr "Procesul de recriptare rulează deja."
 
-#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
 msgstr "Nu s-a putut obține blocarea pentru recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:3471
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Nu se poate continua cu recriptarea. Rulați mai întâi recuperarea recriptării."
 
-#: lib/luks2/luks2_reencrypt.c:3607
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Dimensiunea dispozitivului activ și dimensiunea de recriptare solicitată nu se potrivesc."
 
-#: lib/luks2/luks2_reencrypt.c:3621
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "Dimensiunea dispozitivului solicitată în parametrii de recriptare este incorectă."
 
-#: lib/luks2/luks2_reencrypt.c:3723
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Recriptare în curs. Nu se poate efectua recuperarea."
 
-#: lib/luks2/luks2_reencrypt.c:3744
+#: lib/luks2/luks2_reencrypt.c:3745
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Recuperarea recriptării LUKS2 a eșuat."
 
-#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
 msgid "Failed to initialize reencryption device stack."
 msgstr "Nu s-a putut inițializa stiva dispozitivului de recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:3910
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "Recriptare LUKS2 deja inițializată în metadate."
 
-#: lib/luks2/luks2_reencrypt.c:3918
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Nu s-a putut inițializa recriptarea LUKS2 în metadate."
 
-#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
-#: lib/luks2/luks2_reencrypt.c:4033
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Recriptarea nu este acceptată pentru dispozitivele DAX (memorie persistentă)."
 
-#: lib/luks2/luks2_reencrypt.c:4062
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Nu s-au putut definii segmentele dispozitivului pentru următoarea zonă „fierbinte” (activă) de recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Nu s-au putut scrie metadatele adaptabilității recriptării."
 
-#: lib/luks2/luks2_reencrypt.c:4122
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "Decriptarea a eșuat."
 
-#: lib/luks2/luks2_reencrypt.c:4127
+#: lib/luks2/luks2_reencrypt.c:4128
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Nu s-a putut scrie zona „fierbinte” (activă) începând de la %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4132
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
 msgstr "Nu s-au putut sincroniza datele."
 
-#: lib/luks2/luks2_reencrypt.c:4140
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Nu s-au putut actualiza metadatele după finalizarea zonei „fierbinți” (active) de recriptare actuală."
 
-#: lib/luks2/luks2_reencrypt.c:4229
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
 msgstr "Nu s-au putut scrie metadatele LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:4252
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
 msgstr "Nu s-a putut șterge zona nefolosită a dispozitivului de date."
 
-#: lib/luks2/luks2_reencrypt.c:4258
+#: lib/luks2/luks2_reencrypt.c:4259
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Nu s-a putut elimina slotul de cheie neutilizat (neasociat) %d."
 
-#: lib/luks2/luks2_reencrypt.c:4268
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
 msgstr "Nu s-a putut elimina slotul de cheie de recriptare."
 
-#: lib/luks2/luks2_reencrypt.c:4278
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Eroare fatală la recriptarea porțiunii începând de la %<PRIu64>, %<PRIu64> sectoare lungi."
 
-#: lib/luks2/luks2_reencrypt.c:4282
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
 msgstr "Recriptarea «online» a eșuat."
 
-#: lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Nu reluați dispozitivul decât dacă este înlocuit manual cu ținta erorii."
 
-#: lib/luks2/luks2_reencrypt.c:4339
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Nu se poate continua cu recriptarea. Stare neașteptată a recriptării."
 
-#: lib/luks2/luks2_reencrypt.c:4345
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
 msgstr "Context de recriptare lipsă sau nevalid."
 
-#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
 msgstr "Nu s-a putut actualiza contextul de recriptare."
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "Metadatele de recriptare sunt nevalide."
 
@@ -2164,7 +2156,7 @@ msgstr "Parametrii de criptare a slotului de cheie pot fi stabiliți numai pentr
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametrii de criptare a slotului de chei nu sunt compatibili cu criptarea slotului de chei LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
+#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2192,7 +2184,7 @@ msgstr "AVERTISMENT: Parametrul „--hash” este ignorat în modul simplu, cu f
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "AVERTISMENT: Opțiunea „--keyfile-size” este ignorată, dimensiunea de citire este aceeași cu dimensiunea cheii de criptare.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2203,9 +2195,9 @@ msgstr "Scanarea «blkid» a eșuat pentru %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "S-au detectat semnături de dispozitiv pe %s. Continuarea operației, riscă să deterioreze datele existente."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
-#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
-#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
+#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
+#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2254,7 +2246,7 @@ msgstr ""
 "care permite accesul la partiția criptată fără fraza de acces.\n"
 "Acest conținut ar trebui să fie întotdeauna stocat criptat într-un loc sigur."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2278,9 +2270,9 @@ msgstr "Nu se poate determina dimensiunea cheii de volum pentru FVAULT2; utiliza
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Dispozitivul %s este încă activ și programat pentru eliminare temporizată.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
-#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
-#: src/cryptsetup.c:3262
+#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
+#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
+#: src/cryptsetup.c:3261
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Nu s-a putut definii ruta jetoanelor(tokens) externe %s."
@@ -2317,57 +2309,61 @@ msgstr "%-10s %4u iterații, %5u memorie, %1u fire paralele (CPU-uri) pentru che
 msgid "Result of benchmark is not reliable."
 msgstr "Rezultatul testului de evaluare a performanței nu este fiabil."
 
-#: src/cryptsetup.c:1170
+#: src/cryptsetup.c:1171
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testele sunt aproximative folosind doar memoria (fără In/Ieș de stocare).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1195
+#: src/cryptsetup.c:1196
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algoritm |     Cheie |        Criptare |      Decriptare\n"
 
-#: src/cryptsetup.c:1203
+#: src/cryptsetup.c:1204
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Cifrarea %s (cu cheie de %i biți) nu este disponibilă."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1222
+#: src/cryptsetup.c:1225
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algoritm |     Cheie |        Criptare |      Decriptare\n"
 
-#: src/cryptsetup.c:1233
+#: src/cryptsetup.c:1238
 msgid "N/A"
 msgstr "nedisponibil"
 
-#: src/cryptsetup.c:1258
+#: src/cryptsetup.c:1241
+msgid "# Cipher speed test is not available.\n"
+msgstr "# Testul de viteză al cifrului nu este disponibil.\n"
+
+#: src/cryptsetup.c:1257
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
 msgstr "Au fost detectate metadate neprotejate de recriptare LUKS2. Verificați că operațiunea de recriptare este de dorit (consultați ieșirea luksDump) și continuați (să actualizați metadatele) numai dacă recunoașteți operația ca fiind autentică."
 
-#: src/cryptsetup.c:1264
+#: src/cryptsetup.c:1263
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Introduceți fraza de acces pentru a proteja și actualiza metadatele de recriptare: "
 
-#: src/cryptsetup.c:1308
+#: src/cryptsetup.c:1307
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Continuați cu adevărat cu recuperarea recriptării LUKS2?"
 
-#: src/cryptsetup.c:1317
+#: src/cryptsetup.c:1316
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Introduceți fraza de acces pentru a verifica calcularea sumele de control a metadatelor de recriptare: "
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1318
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Introduceți fraza de acces pentru recuperarea recriptării: "
 
-#: src/cryptsetup.c:1381
+#: src/cryptsetup.c:1380
 msgid "Really try to repair LUKS device header?"
 msgstr "Încercați cu adevărat să reparați antetul dispozitivului LUKS?"
 
-#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2375,7 +2371,7 @@ msgstr ""
 "\n"
 "Ștergere întreruptă."
 
-#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2383,167 +2379,167 @@ msgstr ""
 "Se șterge dispozitivul pentru a inițializa calcularea sumei de control a integrității.\n"
 "Puteți întrerupe acest lucru apăsând CTRL+c (restul dispozitivului care nu este șters va conține o sumă de control nevalidă).\n"
 
-#: src/cryptsetup.c:1436 src/integritysetup.c:103
+#: src/cryptsetup.c:1435 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Nu se poate dezactiva dispozitivul temporar %s."
 
-#: src/cryptsetup.c:1484
+#: src/cryptsetup.c:1483
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Criptarea OPAL hw-only nu acceptă „--cipher” și „--key-size”, opțiunile sunt ignorate."
 
-#: src/cryptsetup.c:1497
+#: src/cryptsetup.c:1496
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Opțiunea de integritate poate fi utilizată numai pentru formatul LUKS2."
 
-#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
+#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Opțiuni de dimensiune a metadatelor LUKS2 neacceptate."
 
-#: src/cryptsetup.c:1507
+#: src/cryptsetup.c:1506
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL este acceptat numai pentru formatul LUKS2."
 
-#: src/cryptsetup.c:1512
+#: src/cryptsetup.c:1511
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Etichetele hw în linie „inline” sunt acceptate numai pentru formatul LUKS2."
 
-#: src/cryptsetup.c:1521
+#: src/cryptsetup.c:1520
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Fișierul antet nu există, doriți să îl creați?"
 
-#: src/cryptsetup.c:1529
+#: src/cryptsetup.c:1528
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Nu se poate crea fișierul antet %s."
 
-#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
 #: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
 #: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Nu a fost detectat niciun model de specificație de integritate cunoscut."
 
-#: src/cryptsetup.c:1557
+#: src/cryptsetup.c:1556
 msgid "Cannot use specified integrity key size."
 msgstr "Nu se poate utiliza dimensiunea specificată a cheii de integritate."
 
-#: src/cryptsetup.c:1575
+#: src/cryptsetup.c:1574
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Nu se poate folosi %s ca antet pe disc."
 
-#: src/cryptsetup.c:1604 src/integritysetup.c:172
+#: src/cryptsetup.c:1603 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Acest lucru va suprascrie datele de pe %s în mod irevocabil."
 
-#: src/cryptsetup.c:1641
+#: src/cryptsetup.c:1640
 msgid "OPAL Admin password cannot be empty."
 msgstr "Parola de administrator OPAL nu poate fi goală."
 
-#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
-#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
+#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Nu s-au putut definii parametrii pbkdf."
 
-#: src/cryptsetup.c:1786
+#: src/cryptsetup.c:1785
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Decalajul redus de date este permis numai pentru antetul LUKS detașat."
 
-#: src/cryptsetup.c:1793
+#: src/cryptsetup.c:1792
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Containerul de fișiere LUKS %s este prea mic pentru activare, nu mai rămâne spațiu pentru date."
 
-#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nu se poate determina dimensiunea cheii de volum pentru LUKS fără sloturi de chei; folosiți opțiunea „--key-size” pentru a furniza aceste date."
 
-#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Dispozitivul necesită două chei de volum."
 
-#: src/cryptsetup.c:1889
+#: src/cryptsetup.c:1888
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Unii parametri de activare specificați au fost ignorați cu criptarea OPAL hw-only."
 
-#: src/cryptsetup.c:1894
+#: src/cryptsetup.c:1893
 msgid "Device activated but cannot make flags persistent."
 msgstr "Dispozitivul a fost activat, dar nu se poate face ca fanioanele să fie persistente."
 
-#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
+#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Slotul de cheie %d este selectat pentru ștergere."
 
-#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
+#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Acesta este ultimul slot de cheie. Dispozitivul va deveni inutilizabil după eliminarea acestei chei."
 
-#: src/cryptsetup.c:1987
+#: src/cryptsetup.c:1986
 msgid "Enter any remaining passphrase: "
 msgstr "Introduceți orice frază de acces rămasă: "
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operația a fost întreruptă, slotul de cheie NU a fost șters.\n"
 
-#: src/cryptsetup.c:2024
+#: src/cryptsetup.c:2023
 msgid "Enter passphrase to be deleted: "
 msgstr "Introduceți fraza de acces pentru a fi ștearsă: "
 
-#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
-#: src/cryptsetup.c:3253
+#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
+#: src/cryptsetup.c:3252
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Dispozitivul %s nu este un dispozitiv LUKS2 valid."
 
-#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
+#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
 msgid "Enter new passphrase for key slot: "
 msgstr "Introduceți noua frază de acces pentru slotul de cheie: "
 
-#: src/cryptsetup.c:2147 src/utils_luks.c:342
+#: src/cryptsetup.c:2146 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Introduceți codul PIN al jetonului: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:344
+#: src/cryptsetup.c:2148 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Introduceți codul PIN al jetonului(token) %d: "
 
-#: src/cryptsetup.c:2208
+#: src/cryptsetup.c:2207
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "AVERTISMENT: Parametrul „--key-slot” este utilizat pentru noul număr de slot de cheie.\n"
 
-#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Introduceți orice frază de acces existentă: "
 
-#: src/cryptsetup.c:2381
+#: src/cryptsetup.c:2380
 msgid "Enter passphrase to be changed: "
 msgstr "Introduceți fraza de acces pentru a fi schimbată: "
 
-#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Introduceți nouă frază de acces: "
 
-#: src/cryptsetup.c:2447
+#: src/cryptsetup.c:2446
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Introduceți fraza de acces pentru slotul de cheie care urmează să fie convertit: "
 
-#: src/cryptsetup.c:2471
+#: src/cryptsetup.c:2470
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Doar un singur dispozitiv este admis ca argument pentru operația isLuks."
 
-#: src/cryptsetup.c:2576
+#: src/cryptsetup.c:2575
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Slotul de cheie %d nu conține o cheie neasociată."
 
-#: src/cryptsetup.c:2581
+#: src/cryptsetup.c:2580
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2551,52 +2547,52 @@ msgstr ""
 "Conținutul antetului cu cheia neasociată este o informație sensibilă.\n"
 "Acest conținut ar trebui să fie stocat criptat într-un loc sigur."
 
-#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
+#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s nu este numele dispozitivului activ %s."
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2706
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s nu este numele unui dispozitiv LUKS activ sau antetul lipsește."
 
-#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
+#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
 msgid "Option --header-backup-file is required."
 msgstr "Este necesară opțiunea „--header-backup-file”."
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2833
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s nu este un dispozitiv gestionat de «cryptsetup»."
 
-#: src/cryptsetup.c:2845
+#: src/cryptsetup.c:2844
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Reîmprospătarea nu este disponibilă pentru tipul de dispozitiv %s"
 
-#: src/cryptsetup.c:2895
+#: src/cryptsetup.c:2894
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Tip de dispozitiv de metadate nerecunoscut %s."
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2896
 msgid "Command requires device and mapped name as arguments."
 msgstr "Comanda necesită un dispozitiv și numele asociat acestuia ca argumente."
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL PSID: "
 msgstr "Introduceți PSID OPAL: "
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL Admin password: "
 msgstr "Introduceți parola de administrator OPAL: "
 
-#: src/cryptsetup.c:2923
+#: src/cryptsetup.c:2922
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "AVERTISMENT: ÎNTREGUL disc va fi reinițializat la valorile din fabrică și toate datele se vor pierde! Continuați?"
 
-#: src/cryptsetup.c:2966
+#: src/cryptsetup.c:2965
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2605,363 +2601,363 @@ msgstr ""
 "Această operație va șterge toate sloturile de chei de pe dispozitivul %s.\n"
 "Dispozitivul va deveni inutilizabil după această operație."
 
-#: src/cryptsetup.c:2973
+#: src/cryptsetup.c:2972
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operația a fost întreruptă, sloturile de chei NU au fost șterse.\n"
 
-#: src/cryptsetup.c:3012
+#: src/cryptsetup.c:3011
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Tip LUKS nevalid, numai luks1 și luks2 sunt acceptate."
 
-#: src/cryptsetup.c:3028
+#: src/cryptsetup.c:3027
 #, c-format
 msgid "Device is already %s type."
 msgstr "Dispozitivul este deja de tip %s."
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:3034
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Această operație va converti %s în formatul %s.\n"
 
-#: src/cryptsetup.c:3038
+#: src/cryptsetup.c:3037
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operația a fost întreruptă, dispozitivul NU a fost convertit.\n"
 
-#: src/cryptsetup.c:3078
+#: src/cryptsetup.c:3077
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Opțiunea „--priority”, „--label” sau „--subsystem” lipsește."
 
-#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
+#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Jetonul(token) %d nu este valid."
 
-#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
+#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
 #, c-format
 msgid "Token %d in use."
 msgstr "Jetonul(token) %d este în uz."
 
-#: src/cryptsetup.c:3127
+#: src/cryptsetup.c:3126
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Nu s-a putut adăuga jetonul(token) %d la inelul de chei luks2."
 
-#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
+#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Nu s-a putut atribui jetonul(token) %d slotului pentru cheie %d."
 
-#: src/cryptsetup.c:3155
+#: src/cryptsetup.c:3154
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Jetonul %d nu este în uz."
 
-#: src/cryptsetup.c:3192
+#: src/cryptsetup.c:3191
 msgid "Failed to import token from file."
 msgstr "Nu s-a putut importa jetonul din fișier."
 
-#: src/cryptsetup.c:3217
+#: src/cryptsetup.c:3216
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Nu s-a putut obține jetonul %d pentru export."
 
-#: src/cryptsetup.c:3230
+#: src/cryptsetup.c:3229
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Jetonul %d nu este alocat slotului de cheie %d."
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
+#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Nu s-a putut anula atribuirea jetonului %d din slotul de cheie %d."
 
-#: src/cryptsetup.c:3298
+#: src/cryptsetup.c:3297
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Opțiunea „--tcrypt-hidden”, „--tcrypt-system” sau „--tcrypt-backup” este acceptată doar pentru dispozitivele TCRYPT."
 
-#: src/cryptsetup.c:3301
+#: src/cryptsetup.c:3300
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Opțiunea „--veracrypt” sau „--disable-veracrypt” este acceptată numai pentru tipul de dispozitiv TCRYPT."
 
-#: src/cryptsetup.c:3304
+#: src/cryptsetup.c:3303
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opțiunea „--veracrypt-pim” este acceptată numai pentru dispozitivele compatibile cu VeraCrypt."
 
-#: src/cryptsetup.c:3308
+#: src/cryptsetup.c:3307
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opțiunea „--veracrypt-query-pim” este acceptată numai pentru dispozitivele compatibile cu VeraCrypt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3309
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Opțiunile „--veracrypt-pim” și „--veracrypt-query-pim” se exclud reciproc."
 
-#: src/cryptsetup.c:3319
+#: src/cryptsetup.c:3318
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Opțiunea „--persistent” nu este permisă cu opțiunea „--test-passphrase”."
 
-#: src/cryptsetup.c:3322
+#: src/cryptsetup.c:3321
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Opțiunile „--refresh” și „--test-passphrase” se exclud reciproc."
 
-#: src/cryptsetup.c:3325
+#: src/cryptsetup.c:3324
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Opțiunea „--shared” este permisă numai pentru deschiderea unui dispozitiv simplu."
 
-#: src/cryptsetup.c:3328
+#: src/cryptsetup.c:3327
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Opțiunea „--skip” este acceptată numai pentru deschiderea dispozitivelor simple și a dispozitivelor loopaes."
 
-#: src/cryptsetup.c:3331
+#: src/cryptsetup.c:3330
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Opțiunea „--offset” cu acțiune de deschidere este acceptată numai pentru dispozitivele simple și dispozitivele loopaes."
 
-#: src/cryptsetup.c:3334
+#: src/cryptsetup.c:3333
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Opțiunea „--tcrypt-hidden” nu poate fi combinată cu opțiunea „--allow-discards”."
 
-#: src/cryptsetup.c:3338
+#: src/cryptsetup.c:3337
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Opțiunea de dimensiune a sectorului cu acțiune de deschidere este acceptată numai pentru dispozitivele simple."
 
-#: src/cryptsetup.c:3342
+#: src/cryptsetup.c:3341
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Opțiunea sectoare IV (vector de inițializare) mari este acceptată numai pentru deschiderea dispozitivelor de tip simplu, cu dimensiunea sectorului mai mare de 512 de octeți."
 
-#: src/cryptsetup.c:3347
+#: src/cryptsetup.c:3346
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Opțiunea „--test-passphrase” este permisă numai pentru deschiderea dispozitivelor LUKS, TCRYPT, BITLK și FVAULT2."
 
-#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
+#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Opțiunile „--device-size” și „--size” nu pot fi combinate."
 
-#: src/cryptsetup.c:3353
+#: src/cryptsetup.c:3352
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Opțiunea „--unbound” este permisă numai pentru deschiderea dispozitivelor luks."
 
-#: src/cryptsetup.c:3356
+#: src/cryptsetup.c:3355
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Opțiunea „--unbound” nu poate fi utilizată fără opțiunea „--test-passphrase”."
 
-#: src/cryptsetup.c:3360
+#: src/cryptsetup.c:3359
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Opțiunea „--volume-key-keyring” nu poate fi combinată cu opțiunea „--hash” sau cu opțiunea „--volume-key-file”."
 
-#: src/cryptsetup.c:3363
+#: src/cryptsetup.c:3362
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Ambele opțiuni „--volume-key-file” trebuie să fie asociate cu opțiunile „--key-size” respective."
 
-#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Opțiunile „--cancel-deferred” și „--deferred” nu pot fi utilizate în același timp."
 
-#: src/cryptsetup.c:3388
+#: src/cryptsetup.c:3387
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Opțiunea „--active-name” poate fi utilizată numai pentru dispozitivele LUKS2."
 
-#: src/cryptsetup.c:3391
+#: src/cryptsetup.c:3390
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Opțiunile „--active-name” și „--force-offline-reencrypt” nu pot fi combinate."
 
-#: src/cryptsetup.c:3394
+#: src/cryptsetup.c:3393
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Opțiunile „--new-volume-key-file” și „--keep-key” nu pot fi combinate."
 
-#: src/cryptsetup.c:3397
+#: src/cryptsetup.c:3396
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Opțiunile „--new-volume-key-keyring” și „--keep-key” nu pot fi combinate."
 
-#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
+#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
 msgid "Keyslot specification is required."
 msgstr "Este necesară specificarea slotului de cheie."
 
-#: src/cryptsetup.c:3413
+#: src/cryptsetup.c:3412
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Opțiunile „--align-payload” și „--offset” nu pot fi combinate."
 
-#: src/cryptsetup.c:3416
+#: src/cryptsetup.c:3415
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Opțiunea „--integrity-no-wipe” poate fi utilizată numai pentru acțiuni de formatare cu extensie de integritate."
 
-#: src/cryptsetup.c:3419
+#: src/cryptsetup.c:3418
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Numai una dintre opțiunile „--use-[u]random” este permisă."
 
-#: src/cryptsetup.c:3427
+#: src/cryptsetup.c:3426
 msgid "Key size is required with --unbound option."
 msgstr "Dimensiunea cheii este necesară cu opțiunea „--unbound”."
 
-#: src/cryptsetup.c:3447
+#: src/cryptsetup.c:3446
 msgid "Invalid token action."
 msgstr "Operație cu jeton(token) nevalidă."
 
-#: src/cryptsetup.c:3450
+#: src/cryptsetup.c:3449
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parametrul „--key-description” este obligatoriu pentru acțiunea de adăugare a jetonului."
 
-#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
+#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Acțiunea necesită un jeton(token)l specific. Utilizați parametrul „--token-id”."
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3457
 msgid "Option --unbound is valid only with token add action."
 msgstr "Opțiunea „--unbound” este validă numai cu acțiunea de adăugare a jetonului."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3459
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Opțiunile „--key-slot” și „--unbound” nu pot fi combinate."
 
-#: src/cryptsetup.c:3465
+#: src/cryptsetup.c:3464
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Acțiunea necesită un slot de cheie specific. Utilizați parametrul „--key-slot”."
 
-#: src/cryptsetup.c:3481
+#: src/cryptsetup.c:3480
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<dispozitiv> [--type <tip>] [<nume>]"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "deschide dispozitivul ca <nume>"
 
-#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
 #: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
 #: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<nume>"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "închide dispozitivul (elimină asocierea)"
 
-#: src/cryptsetup.c:3483 src/integritysetup.c:558
+#: src/cryptsetup.c:3482 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "redimensionează dispozitivul activ"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3483
 msgid "show device status"
 msgstr "afișează starea dispozitivului"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <cifrarea>]"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "benchmark cipher"
 msgstr "evaluează performanța cifrului"
 
-#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
-#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
-#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
-#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
-#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
+#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
+#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
 msgid "<device>"
 msgstr "<dispozitiv>"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3485
 msgid "try to repair on-disk metadata"
 msgstr "încearcă să repare metadatele de pe disc"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3486
 msgid "reencrypt LUKS2 device"
 msgstr "recriptează dispozitivul LUKS2"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3487
 msgid "erase all keyslots (remove encryption key)"
 msgstr "șterge toate sloturile de chei (elimină cheia de criptare)"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3488
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "convertește LUKS din/în formatul LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3489
 msgid "set permanent configuration options for LUKS2"
 msgstr "definește opțiunile permanente de configurare pentru LUKS2"
 
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
 msgid "<device> [<new key file>]"
 msgstr "<dispozitiv> [<fișier cheie nou>]"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3490
 msgid "formats a LUKS device"
 msgstr "formatează un dispozitiv LUKS"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3491
 msgid "add key to LUKS device"
 msgstr "adaugă o cheie la dispozitivul LUKS"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
 msgid "<device> [<key file>]"
 msgstr "<dispozitiv> [<fișier cheie>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3492
 msgid "removes supplied key or key file from LUKS device"
 msgstr "elimină cheia sau fișierul cheie furnizat de pe dispozitivul LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3493
 msgid "changes supplied key or key file of LUKS device"
 msgstr "modifică cheia furnizată sau fișierul cheie al dispozitivului LUKS"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3494
 msgid "converts a key to new pbkdf parameters"
 msgstr "convertește o cheie în noii parametri pbkdf"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "<device> <key slot>"
 msgstr "<dispozitiv> <slot cheie>"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "șterge cheia cu numărul <slot cheie> de pe dispozitivul LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3496
 msgid "print UUID of LUKS device"
 msgstr "afișează UUID-ul dispozitivului LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3497
 msgid "tests <device> for LUKS partition header"
 msgstr "testează <dispozitivul> pentru antetul partiției LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3498
 msgid "dump LUKS partition information"
 msgstr "afișează informațiile despre partiția LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3499
 msgid "dump TCRYPT device information"
 msgstr "afișează informațiile despre dispozitivul TCRYPT"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3500
 msgid "dump BITLK device information"
 msgstr "afișează informațiile despre dispozitivul BITLK"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3501
 msgid "dump FVAULT2 device information"
 msgstr "afișează informațiile despre dispozitivul FVAULT2"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3502
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Suspendă dispozitivul LUKS și șterge cheia (toate In/Ieșirile sunt înghețate)"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3503
 msgid "Resume suspended LUKS device"
 msgstr "Repune în funcțiune dispozitivul LUKS suspendat"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3504
 msgid "Backup LUKS device header and keyslots"
 msgstr "Face copie de rezervă pentru antetul dispozitivului LUKS și pentru sloturile de chei"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3505
 msgid "Restore LUKS device header and keyslots"
 msgstr "Restaurează antetul dispozitivului LUKS și sloturile de chei"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <dispozitiv>"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipulează jetoanele LUKS2"
 
-#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2976,7 +2972,7 @@ msgstr ""
 # nume, sau alias pentru primele.
 # A se vedea ieșirea comenzii:
 # «cryptsetup -?|--help»
-#: src/cryptsetup.c:3532
+#: src/cryptsetup.c:3531
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2988,7 +2984,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3536
+#: src/cryptsetup.c:3535
 #, c-format
 msgid ""
 "\n"
@@ -3003,7 +2999,7 @@ msgstr ""
 "<slot cheie> este numărul slotului de cheie LUKS de modificat\n"
 "<fișier cheie> fișier cheie opțional pentru noua cheie pentru acțiunea luksAddKey\n"
 
-#: src/cryptsetup.c:3543
+#: src/cryptsetup.c:3542
 #, c-format
 msgid ""
 "\n"
@@ -3012,7 +3008,7 @@ msgstr ""
 "\n"
 "Formatul implicit de metadate compilate este %s (pentru acțiunea luksFormat).\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3547
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3020,12 +3016,12 @@ msgstr ""
 "\n"
 "Suportul pentru modulul de jeton(token) extern LUKS2 este activat.\n"
 
-#: src/cryptsetup.c:3549
+#: src/cryptsetup.c:3548
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Ruta modulului pentru jetonul(token) extern LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3550
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3033,7 +3029,7 @@ msgstr ""
 "\n"
 "Suportul pentru modulul de jeton(token) extern LUKS2 este dezactivat.\n"
 
-#: src/cryptsetup.c:3555
+#: src/cryptsetup.c:3554
 #, c-format
 msgid ""
 "\n"
@@ -3050,7 +3046,7 @@ msgstr ""
 "PBKDF implicit pentru LUKS2: %s\n"
 "\tTimp de iterare: %d, Memorie necesară: %dko, Fire de execuție paralele: %d\n"
 
-#: src/cryptsetup.c:3566
+#: src/cryptsetup.c:3565
 #, c-format
 msgid ""
 "\n"
@@ -3065,122 +3061,122 @@ msgstr ""
 "\tsimplu: %s, Cheie: %d biți, Suma de control a parolei: %s\n"
 "\tLUKS: %s, Cheie: %d biți, Suma de control a antetului LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3574
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Dimensiunea implicită a cheii cu modul XTS (două chei interne) va fi dublată.\n"
 
-#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: necesită %s ca argumente"
 
-#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Slotul de cheie nu este valid."
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3660
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Dimensiunea dispozitivului trebuie să fie multiplu al sectorului de 512 octeți."
 
-#: src/cryptsetup.c:3666
+#: src/cryptsetup.c:3665
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Specificația pentru dimensiunea zonei fierbinți(active) pentru recriptare maximă nu este validă."
 
-#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
+#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Dimensiunea cheii trebuie să fie multiplu de 8 biți"
 
-#: src/cryptsetup.c:3687
+#: src/cryptsetup.c:3686
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Pot fi furnizate cel mult 2 specificații privind dimensiunea cheii."
 
-#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
+#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Pot fi furnizate cel mult %d specificații ale cheilor de volum."
 
-#: src/cryptsetup.c:3739
+#: src/cryptsetup.c:3738
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Pot fi furnizate cel mult %d specificații de legătură a inelului de chei."
 
-#: src/cryptsetup.c:3748
+#: src/cryptsetup.c:3747
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Dimensiunea maximă de reducere a dispozitivului este de 1 GiB."
 
-#: src/cryptsetup.c:3751
+#: src/cryptsetup.c:3750
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Dimensiunea redusă trebuie să fie multiplu al sectorului de 512 octeți."
 
-#: src/cryptsetup.c:3768
+#: src/cryptsetup.c:3767
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Argumentul opțiuni „--priority” poate fi doar «ignore/normal/prefer»."
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Afișează acest mesaj de ajutor"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Afișează modul de utilizare pe scurt"
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Afișează versiunea pachetului"
 
-#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Opțiuni de ajutor:"
 
-#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPȚIUNE...] <acțiune> <parametri_acțiune>"
 
-#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Argumentul <acțiune> lipsește."
 
-#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Acțiune necunoscută."
 
-#: src/cryptsetup.c:3929
+#: src/cryptsetup.c:3928
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Opțiunea „--key-file” are prioritate față de argumentul specificat pentru fișierul cheie."
 
-#: src/cryptsetup.c:3935
+#: src/cryptsetup.c:3934
 msgid "Only one --key-file argument is allowed."
 msgstr "Numai un argument „--key-file” este permis."
 
-#: src/cryptsetup.c:3940
+#: src/cryptsetup.c:3939
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funcția de derivare a unei chei bazată pe parolă (PBKDF=Password-Based Key Derivation Function) poate fi doar pbkdf2 sau argon2i/argon2id."
 
-#: src/cryptsetup.c:3945
+#: src/cryptsetup.c:3944
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Iterațiile forțate PBKDF nu pot fi combinate cu opțiunea de timp de iterație."
 
-#: src/cryptsetup.c:3950
+#: src/cryptsetup.c:3949
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Nu se poate lega cheia de volum la un inel de chei când este dezactivat."
 
-#: src/cryptsetup.c:3955
+#: src/cryptsetup.c:3954
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Nu se poate utiliza descrierea cheii pentru inelul de chei atunci când inelul de chei este dezactivat."
 
-#: src/cryptsetup.c:3960
+#: src/cryptsetup.c:3959
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Integritatea în linie trebuie utilizată împreună cu opțiunea „--integrity”."
 
-#: src/cryptsetup.c:3971
+#: src/cryptsetup.c:3970
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Opțiunile „--keyslot-cipher” și „--keyslot-key-size” trebuie să fie folosite împreună."
 
-#: src/cryptsetup.c:3979
+#: src/cryptsetup.c:3978
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Nu s-a executat nicio acțiune. Programul a fost invocat cu opțiunea „--test-args”.\n"
 
-#: src/cryptsetup.c:3992
+#: src/cryptsetup.c:3991
 msgid "Cannot disable metadata locking."
 msgstr "Nu se poate dezactiva blocarea metadatelor."
 
@@ -4378,6 +4374,12 @@ msgstr "Metoda de autentificare cu cheie publică nu este permisă pe gazdă.\n"
 msgid "Public key authentication error: "
 msgstr "Eroare la autentificarea cu cheia publică: "
 
+#~ msgid "Required kernel crypto interface not available."
+#~ msgstr "Interfața necesară de criptare a nucleului nu este disponibilă."
+
+#~ msgid "Ensure you have algif_skcipher kernel module loaded."
+#~ msgstr "Asigurați-vă că aveți modulul nucleului «algif_skcipher», încărcat."
+
 #, c-format
 #~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
 #~ msgstr "Nu s-a putut citi sau valida copia metadatelor BITLK FVE #%d din %s."

From bed8275189eed6b7e22996dbf8387d8b1de0a1f3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mari=C3=A1n=20Haburaj?= <hajkomajko5@gmail.com>
Date: Sat, 4 Jul 2026 18:12:56 +0200
Subject: [PATCH 166/244] po: update sk.po (from translationproject.org)

---
 po/sk.po | 1019 +++++++++++++++++++++++++++---------------------------
 1 file changed, 510 insertions(+), 509 deletions(-)

diff --git a/po/sk.po b/po/sk.po
index 1887b99f7..2ffed35e7 100644
--- a/po/sk.po
+++ b/po/sk.po
@@ -16,10 +16,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-03-30 14:18+0200\n"
-"PO-Revision-Date: 2026-03-30 22:37+0200\n"
+"POT-Creation-Date: 2026-06-29 21:30+0200\n"
+"PO-Revision-Date: 2026-06-30 13:17+0200\n"
 "Last-Translator: Marián Haburaj <hajkomajko5@gmail.com>\n"
 "Language-Team: Slovak <sk-i18n@lists.linux.sk>\n"
 "Language: sk\n"
@@ -88,7 +88,7 @@ msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Požadované automatické prepočítanie príznakov integrity nie je podporované."
 
 #: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2781
+#: lib/luks2/luks2_json_metadata.c:2799
 msgid "Discard/TRIM is not supported."
 msgstr "Zahadzovanie/TRIM nie je podporované."
 
@@ -134,665 +134,665 @@ msgstr "Je požadovaná neznáma kvalita generátoru náhodných čísel."
 msgid "Error reading from RNG."
 msgstr "Chyba pri čítaní z generátoru náhodných čísel."
 
-#: lib/setup.c:248
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "Podpora OPAL je vypnutá v libcryptsetup."
 
-#: lib/setup.c:250
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "Zariadenie %s alebo jadro nepodporuje šifrovanie OPAL."
 
-#: lib/setup.c:266
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "Neviem inicializovať implementáciu šifr generátora náhodných čísel."
 
-#: lib/setup.c:272
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "Neviem inicializovať implementáciu šifrovania."
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Hashovací algoritmus %s nie je podporovaný."
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "Chyba pri spracovaní kľúča (používa sa hash %s)."
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Neviem určiť typ zariadenia. Nekompatibilná aktivácia zariadenia?"
 
-#: lib/setup.c:395 lib/setup.c:4160
+#: lib/setup.c:398 lib/setup.c:4177
 msgid "This operation is supported only for LUKS device."
 msgstr "Táto operácie je podporované len pre LUKS zariadenie."
 
-#: lib/setup.c:432
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "Táto operácia je podporovaná len pre LUKS2 zariadenie."
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "Všetky miesta pre kľúče sú obsadené."
 
-#: lib/setup.c:500
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "Miesto pre kľúč %d je neplatné, prosím vyberte číslo medzi 0 a %d."
 
-#: lib/setup.c:506
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "Miesto pre kľúč %d je obsadené, prosím vyberte iné."
 
-#: lib/setup.c:531 lib/setup.c:3875
+#: lib/setup.c:534 lib/setup.c:3878
 msgid "Device size is not aligned to device logical block size."
 msgstr "Veľkosť zariadenia nie je zarovnaná na veľkosť logického bloku zariadenia."
 
-#: lib/setup.c:628
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "Hlavička bola nájdená, ale zariadenie %s je veľmi malé."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
-#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Táto operácie nie je podporovaná pre tento typ zariadenia."
 
-#: lib/setup.c:674
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "Zakázaná operácie počas prešifrovania."
 
-#: lib/setup.c:806
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nahradenie pôvodných LUKS2 metadát v pamäti zlyhalo."
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
-#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
-#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
-#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
+#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
+#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
+#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Zariadenie %s nie je platné LUKS zariadenie."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Nepodporovaná LUKS verzia %d."
 
-#: lib/setup.c:1270
+#: lib/setup.c:1273
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Žiadna známa špecifikácia šifry nebola nájdená pre aktívne zariadenie %s."
 
-#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5816
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
 #, c-format
 msgid "Device %s is not active."
 msgstr "Zariadenie %s nie je aktívne."
 
-#: lib/setup.c:1532
+#: lib/setup.c:1535
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Zariadenie nižšej úrovne pre šifrované zariadenie %s zmizlo."
 
-#: lib/setup.c:1614
+#: lib/setup.c:1617
 msgid "Invalid plain crypt parameters."
 msgstr "Neplatné parametre plain šifrovania."
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1622 lib/setup.c:2672
 msgid "Invalid key size."
 msgstr "Neplatná veľkosť kľúča."
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID nie je podporované pre tento typ šifrovania."
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Zariadenie s oddelenými metadátami nie je podporované pre tento typ šifrovania."
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
 msgid "Unsupported encryption sector size."
 msgstr "Nepodporovaná veľkosť šifrovaného sektoru."
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
 msgid "Device size is not aligned to requested sector size."
 msgstr "Veľkosť zariadenia nie je zarovnaná k vyžadovanej veľkosti sektoru."
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
 msgid "Can't format LUKS without device."
 msgstr "Nie je možné formátovať LUKS bez zariadenia."
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1707 lib/setup.c:1959
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Zónové zariadenie %s nemôže byť použité pre LUKS hlavičku."
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Požadované zarovnanie údajov nie je kompatibilné s odsadením údajov."
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1754 lib/setup.c:1984
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "VAROVANIE: DAX zariadenie môže poškodiť údaje, pretože nezaručuje atomické aktualizácie sektorov.\n"
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Hlavička na zariadení %s nejde vymazať."
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1805 lib/setup.c:2164
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Zariadenie %s je príliš malé pre aktiváciu, nie je tam žiadne zvyšné miesto pre údaje.\n"
 
-#: lib/setup.c:1843
+#: lib/setup.c:1846
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Kľúč zväzku je príliš malý na šifrovanie s rozšíreniami pre integritu."
 
-#: lib/setup.c:1847
+#: lib/setup.c:1850
 msgid "Integrity key size is too small."
 msgstr "Veľkosť kľúča integrity je príliš malá."
 
-#: lib/setup.c:1856
+#: lib/setup.c:1859
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Šifra %s-%s (veľkosť kľúča %zd bitov) nie je dostupná."
 
-#: lib/setup.c:1897
+#: lib/setup.c:1900
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "VAROVANIE: Aktivácia zariadenia zlyhá, dm-crypt nepodporuje vyžadovanú veľkosť šifrovaného sektoru.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
-#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4497
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Zariadenie %s je príliš malé."
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Nedá sa naformátovať používané zariadenie %s."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Prístup odmietnutý, nedá sa naformátovať zariadenie %s."
 
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Pre zariadenie %s sa nedá formátovať integrita."
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2151 lib/setup.c:2629
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Nedá sa formátovať zariadenie %s."
 
-#: lib/setup.c:2191
+#: lib/setup.c:2194
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Nedajú sa získať parametre zarovnania OPAL."
 
-#: lib/setup.c:2203
+#: lib/setup.c:2206
 msgid "Bogus OPAL logical block size."
 msgstr "Neplatná veľkosť logického bloku OPAL."
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Neplatná veľkosť logického bloku OPAL sa líši od veľkosti bloku zariadenia."
 
-#: lib/setup.c:2214
+#: lib/setup.c:2217
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Požadované odsadenie údajov nie je kompatibilné s veľkosťou bloku OPAL."
 
-#: lib/setup.c:2221
+#: lib/setup.c:2224
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Požadované zarovnanie údajov nie je kompatibilné so zarovnaním OPAL."
 
-#: lib/setup.c:2241
+#: lib/setup.c:2244
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Odsadenie údajov nespĺňa požiadavky zarovnania OPAL."
 
-#: lib/setup.c:2254
+#: lib/setup.c:2257
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Požadované zarovnanie údajov nespĺňa požiadavky na zarovnanie uzamykateľnej oblasti."
 
-#: lib/setup.c:2468
+#: lib/setup.c:2471
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Kompenzovanie veľkosti zariadenia o %<PRIu64> sektorov na jeho zarovnanie s granualitou zarovnania OPAL."
 
-#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Zlyhalo získanie zámku OPAL na zariadení %s."
 
-#: lib/setup.c:2538
+#: lib/setup.c:2541
 msgid "Incorrect OPAL Admin key."
 msgstr "Nesprávny kľúč správcu OPAL."
 
-#: lib/setup.c:2540
+#: lib/setup.c:2543
 msgid "Cannot setup OPAL segment."
 msgstr "Nedá sa nastaviť segment OPAL."
 
-#: lib/setup.c:2622
+#: lib/setup.c:2625
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Nedá sa formátovať zariadenie %s, zariadenie OPAL sa teraz zdá byť úplne chránené voči zápisu."
 
-#: lib/setup.c:2624
+#: lib/setup.c:2627
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Toto je možno chyba vo firmvéri. Spustite resetovanie OPAL PSID a znova sa pripojte pre obnovu."
 
-#: lib/setup.c:2644
+#: lib/setup.c:2647
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Reset uzamykateľnej oblasti %d na zariadení %s zlyhal."
 
-#: lib/setup.c:2664
+#: lib/setup.c:2667
 msgid "Can't format LOOPAES without device."
 msgstr "Nie je možné formátovať LOOPAES bez zariadenia."
 
-#: lib/setup.c:2709
+#: lib/setup.c:2712
 msgid "Can't format VERITY without device."
 msgstr "Nie je možné formátovať VERITY bez zariadenia."
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2723 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Nepodporovaný typ hashu VERITY %d."
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2729 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Nepodporovaná veľkosť bloku VERITY."
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2734 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Nepodporované odsadenie hashu VERITY."
 
-#: lib/setup.c:2736
+#: lib/setup.c:2739
 msgid "Unsupported VERITY FEC offset."
 msgstr "Nepodporované odsadenie VERITY FEC."
 
-#: lib/setup.c:2760
+#: lib/setup.c:2763
 msgid "Data area overlaps with hash area."
 msgstr "Oblasť údajov presahuje do oblasti hashu."
 
-#: lib/setup.c:2785
+#: lib/setup.c:2788
 msgid "Hash area overlaps with FEC area."
 msgstr "Oblasť hashu presahuje do oblasti FEC."
 
-#: lib/setup.c:2792
+#: lib/setup.c:2795
 msgid "Data area overlaps with FEC area."
 msgstr "Oblasť údajov presahuje do oblasti FEC."
 
-#: lib/setup.c:2884
+#: lib/setup.c:2887
 msgid "Integrity key size mismatch."
 msgstr "Nesúlad vo veľkosti kľúča integrity."
 
-#: lib/setup.c:2935
+#: lib/setup.c:2938
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "VAROVANIE: Požadovaná veľkosť príznaku %d bajtov sa líši od %s veľkosti výstupu (%d bajtov).\n"
 
-#: lib/setup.c:3048 lib/setup.c:3150
+#: lib/setup.c:3051 lib/setup.c:3153
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Vyžadovaný neznámy alebo nepodporovaný typ šifrovaného zariadenia %s."
 
-#: lib/setup.c:3064
+#: lib/setup.c:3067
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Zariadenie %s neposkytuje dátové polia pre inline integritu."
 
-#: lib/setup.c:3070
+#: lib/setup.c:3073
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Veľkosť príznaku inline %<PRIu32> [bajtov] je väčšia ako %<PRIu32> poskytnutá zariadením %s."
 
-#: lib/setup.c:3085
+#: lib/setup.c:3088
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Sektor musí byť rovnaký ako hardvérový sektor zariadenia (%zu bajtov)."
 
-#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Nepodporované parametre na zariadení %s."
 
-#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Neodpovedajúce parametre na zariadení %s."
 
-#: lib/setup.c:3647
+#: lib/setup.c:3650
 msgid "Crypt devices mismatch."
 msgstr "Nesúlad v šifrovaných zariadeniach."
 
-#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Nepodarilo sa znovu načítať zariadenie %s."
 
-#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
-#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Zlyhalo pozastavenie zariadenia %s."
 
-#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
-#: lib/luks2/luks2_reencrypt.c:4240
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Zlyhalo prebudenie zariadenia %s."
 
-#: lib/setup.c:3717
+#: lib/setup.c:3720
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Fatálna chyba počas opätovného načítavania zariadenia %s (nad zariadením %s)."
 
-#: lib/setup.c:3720 lib/setup.c:3722
+#: lib/setup.c:3723 lib/setup.c:3725
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Zlyhalo prepnutie zariadenia %s na dm-error."
 
-#: lib/setup.c:3765
+#: lib/setup.c:3768
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Nedá sa zmeniť veľkosť LUKS2 zariadenia so statickou veľkosťou."
 
-#: lib/setup.c:3770
+#: lib/setup.c:3773
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Zmena veľkosti zariadenia s ochranou integrity nie je podporovaná."
 
-#: lib/setup.c:3816
+#: lib/setup.c:3819
 msgid "Cannot resize loop device."
 msgstr "Nie je možné zmeniť veľkosť loop zariadenia."
 
-#: lib/setup.c:3860
+#: lib/setup.c:3863
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "VAROVANIE: Maximálna veľkosť je už dosiahnutá alebo jadro nepodporuje zmenu veľkosti.\n"
 
-#: lib/setup.c:3926
+#: lib/setup.c:3929
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Zmena veľkosti zlyhala, jadro toto nepodporuje."
 
-#: lib/setup.c:3958
+#: lib/setup.c:3961
 msgid "Do you really want to change UUID of device?"
 msgstr "Naozaj chcete zmeniť UUID zariadenia?"
 
-#: lib/setup.c:4050
+#: lib/setup.c:4053
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Záložný súbor s hlavičkou neobsahuje kompatibilnú LUKS hlavičku."
 
-#: lib/setup.c:4143
+#: lib/setup.c:4160
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Zväzok %s nie je aktívny."
 
-#: lib/setup.c:4198
+#: lib/setup.c:4215
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Zväzok %s už je pozastavený."
 
-#: lib/setup.c:4224
+#: lib/setup.c:4241
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Pozastavenie nie je podporované pre zariadenie %s."
 
-#: lib/setup.c:4226 lib/setup.c:4234
+#: lib/setup.c:4243 lib/setup.c:4251
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Chyba počas pozastavovania zariadenia %s."
 
-#: lib/setup.c:4249
+#: lib/setup.c:4266
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Zariadenie %s bolo pozastavené, ale hardvérové zariadenie OPAL nemôže byť uzamknuté."
 
-#: lib/setup.c:4280 lib/setup.c:4457
+#: lib/setup.c:4297 lib/setup.c:4491
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Prebudenie nie je podporované pre zariadenie %s."
 
-#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Chyba počas prebúdzania zariadenia %s."
 
-#: lib/setup.c:4301
+#: lib/setup.c:4335
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Zlyhalo odpojenie kľúča zväzku od používateľom zadaného zväzku kľúčov."
 
-#: lib/setup.c:4423 lib/setup.c:5603
+#: lib/setup.c:4457 lib/setup.c:5637
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Zlyhalo pripojenie kľúča zväzku do používateľom zadaného zväzku kľúčov."
 
-#: lib/setup.c:4522 src/cryptsetup.c:2721
+#: lib/setup.c:4556 src/cryptsetup.c:2720
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Zväzok %s nie je pozastavený."
 
-#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
-#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
+#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
+#: src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Kľúč zväzku nezodpovedá zväzku."
 
-#: lib/setup.c:4787
+#: lib/setup.c:4821
 msgid "Failed to swap new key slot."
 msgstr "Zlyhala výmena nového miesta pre kľúč."
 
-#: lib/setup.c:4885
+#: lib/setup.c:4919
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Miesto pre kľúč %d je neplatné."
 
-#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
-#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
+#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
+#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Miesto pre kľúč %d nie je aktívne."
 
-#: lib/setup.c:4910
+#: lib/setup.c:4944
 msgid "Device header overlaps with data area."
 msgstr "Hlavička zariadenia zasahuje do oblasti údajov."
 
-#: lib/setup.c:5131
+#: lib/setup.c:5165
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Prebieha prešifrovanie. Nie je možné aktivovať zariadenie."
 
-#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3725
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Zlyhalo získanie zámku pre prešifrovanie."
 
-#: lib/setup.c:5155
+#: lib/setup.c:5189
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Obnova prešifrovaním LUKS2 s použitím kľúču(ov) zväzku zlyhala."
 
-#: lib/setup.c:5291
+#: lib/setup.c:5325
 #, c-format
 msgid "Device %s already exists."
 msgstr "Zariadenie %s už existuje."
 
-#: lib/setup.c:5298
+#: lib/setup.c:5332
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Nie je možné použiť zariadenie %s, názov je neplatný alebo sa stále používa."
 
-#: lib/setup.c:5310
+#: lib/setup.c:5344
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Kľúče zväzku na prešifrovanie sa líšia od zväzku."
 
-#: lib/setup.c:5327
+#: lib/setup.c:5361
 msgid "Incorrect volume key specified for plain device."
 msgstr "Zadaný nesprávny kľúč zväzku pre plain zariadenie."
 
-#: lib/setup.c:5353 lib/setup.c:5414
+#: lib/setup.c:5387 lib/setup.c:5448
 msgid "Device type is not properly initialized."
 msgstr "Typ zariadenia nie je riadne inicializovaný."
 
-#: lib/setup.c:5452
+#: lib/setup.c:5486
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Zväzok kľúčov jadra nie je jadrom podporovaný."
 
-#: lib/setup.c:5456
+#: lib/setup.c:5490
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Zväzok kľúčov jadra chýba: vyžadované pre odovzdanie podpisu jadru."
 
-#: lib/setup.c:5511
+#: lib/setup.c:5545
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Nedá sa použiť kľúč %s zo zväzku kľúčov."
 
-#: lib/setup.c:5724
+#: lib/setup.c:5758
 msgid "Incorrect root hash specified for verity device."
 msgstr "Nesprávny koreňový hash zadaný pre verity zariadenie."
 
-#: lib/setup.c:5765 lib/setup.c:5790
+#: lib/setup.c:5799 lib/setup.c:5824
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL nepodporuje odloženú deaktiváciu."
 
-#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Zariadenie %s sa stále používa."
 
-#: lib/setup.c:5798
+#: lib/setup.c:5832
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Nedá sa zrušiť odložené odstránenie zo zariadenia %s."
 
-#: lib/setup.c:5820
+#: lib/setup.c:5854
 #, c-format
 msgid "Invalid device %s."
 msgstr "Neplatné zariadenie %s."
 
-#: lib/setup.c:5967
+#: lib/setup.c:6001
 msgid "Volume key buffer too small."
 msgstr "Vyhradená pamäť pre kľúč zväzku je príliš malá."
 
-#: lib/setup.c:5978
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nedá sa získať kľúč zväzku pre LUKS2 zariadenie."
 
-#: lib/setup.c:5987
+#: lib/setup.c:6021
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nedá sa získať kľúč zväzku pre LUKS1 zariadenie."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6035
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nedá sa získať kľúč zväzku pre plain zariadenie."
 
-#: lib/setup.c:6009
+#: lib/setup.c:6043
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Nedá sa získať koreňový hash pre verity zariadenie."
 
-#: lib/setup.c:6018
+#: lib/setup.c:6052
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nedá sa získať kľúč zväzku pre BITLK zariadenie."
 
-#: lib/setup.c:6023
+#: lib/setup.c:6057
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nedá sa získať kľúč zväzku pre FVAULT2 zariadenie."
 
-#: lib/setup.c:6025
+#: lib/setup.c:6059
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Táto operácia nie je podporovaná pre %s šifrované zariadenie."
 
-#: lib/setup.c:6210 lib/setup.c:6221
+#: lib/setup.c:6244 lib/setup.c:6255
 msgid "Dump operation is not supported for this device type."
 msgstr "Operácia výpisu nie je podporovaná pre tento typ zariadenia."
 
-#: lib/setup.c:6601
+#: lib/setup.c:6635
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Odsadenie údajov nie je násobkom %u bajtov."
 
-#: lib/setup.c:6909
+#: lib/setup.c:6943
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Nedá sa konvertovať zariadenie %s, ktoré sa stále používa."
 
-#: lib/setup.c:7217 lib/setup.c:7361
+#: lib/setup.c:7251 lib/setup.c:7406
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Za nový kľúč zväzku sa nepodarilo priradiť miesto s kľúčom %u."
 
-#: lib/setup.c:7241
+#: lib/setup.c:7275
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Zlyhala inicializácia predvolených parametrov LUKS2 miesta na kľúč."
 
-#: lib/setup.c:7247
+#: lib/setup.c:7281
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Zlyhalo priradenie miesta pre kľúč %d k otlačku (digest)."
 
-#: lib/setup.c:7478
+#: lib/setup.c:7523
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nedá sa pridať miesto pre kľúč, všetky miesta sú vypnuté a nie je poskytnutý žiaden kľúč zväzku."
 
-#: lib/setup.c:7551 lib/verity/verity.c:333
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Zlyhalo načítanie kľúča zo zväzku kľúčov jadra."
 
-#: lib/setup.c:7742
+#: lib/setup.c:7807
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Nedá sa nájsť zväzok kľúčov opísaný podľa \"%s\"."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7872
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Zlyhalo získanie zámku pre tvrdý prístup ku globálnej pamäti."
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "Zlyhalo otvorenie súboru s kľúčom."
 
-#: lib/utils.c:212
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "Nedá sa prečítať súbor s kľúčom z terminálu."
 
-#: lib/utils.c:228
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "Nepodarilo sa získať informácie o súbore s kľúčom."
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "Nedá sa posunúť na požadované miesto v súbore s kľúčom."
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "Počas čítania hesla došla pamäť."
 
-#: lib/utils.c:286
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "Chyba pri čítaní hesla."
 
-#: lib/utils.c:303
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "Na vstupe nie je nič na prečítanie."
 
-#: lib/utils.c:310
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "Maximálna veľkosť súboru s kľúčom presiahnutá."
 
-#: lib/utils.c:315
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "Nedá sa prečítať požadované množstvo údajov."
 
@@ -972,7 +972,7 @@ msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Špecifikácia šifry musí byť vo formáte [šifra]-[režim]-[iv]."
 
 #: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
 #: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
@@ -986,13 +986,13 @@ msgstr "Zlyhalo otvorenie dočasného zariadenia s úložiskom kľúča."
 msgid "Failed to access temporary keystore device."
 msgstr "Zlyhal prístup k dočasnému zariadeniu s úložiskom kľúča."
 
-#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "Chyba vstupu/výstupu počas šifrovania miesta pre kľúč."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
@@ -1003,7 +1003,7 @@ msgstr "Chyba vstupu/výstupu počas šifrovania miesta pre kľúč."
 msgid "Cannot open device %s."
 msgstr "Nedá sa otvoriť zariadenie %s."
 
-#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "Chyba vstupu/výstupu počas dešifrovania miesta pre kľúč."
 
@@ -1093,7 +1093,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Hash šifry opravený na malé písmená (%s)."
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Požadovaný LUKS hash %s nie je podporovaný."
@@ -1140,7 +1140,7 @@ msgstr "LUKS šifrovací režim %s je neplatný."
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS hash %s je neplatný."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
 msgid "No known problems detected for LUKS header."
 msgstr "Žiadne známe problémy neboli zistené pre hlavičku LUKS."
 
@@ -1154,50 +1154,50 @@ msgstr "Chyba počas aktualizácie hlavičky LUKS na zariadení %s."
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Chyba pri opätovnom čítaní hlavičky LUKS po aktualizácií na zariadení %s."
 
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:750
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Odsadenie údajov pre LUKS hlavičku musí byť 0 alebo číslo väčšie ako veľkosť hlavičky."
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:701
 msgid "Wrong LUKS UUID format provided."
 msgstr "Poskytnutý nesprávny formát LUKS UUID."
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Nedá sa vytvoriť hlavička LUKS: zlyhalo čítanie náhodnej soli."
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Nedá sa vytvoriť hlavička LUKS: zlyhal otlačok (digest) hlavičky (používa sa hash %s)."
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Miesto pre kľúč %d aktívne, najprv ho vymažte."
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Miesto pre kľúč %d obsahuje príliš málo prúžkov. Manipulácia s hlavičkou?"
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "PBKDF2 hodnota iterácií pretečená."
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Nedá sa otvoriť miesto pre kľúč (používa sa hash %s)."
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Miesto pre kľúč %d je neplatné, prosím vyberte miesto pre kľúč medzi 0 a %d."
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Nedá sa vymazať zariadenie %s."
@@ -1218,56 +1218,48 @@ msgstr "Nekompatibilný loop-AES súbor s kľúčom bol zaznamenaný."
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "Jadro nepodporuje mapovanie kompatibilné s loop-AES."
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "Chyba pri čítaní súboru s kľúčom %s."
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "Maximálna dĺžka TCRYPT hesla (%zu) bola prekročená."
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "PBKDF2 hash algoritmus %s nie je dostupný, vynecháva sa."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
-msgid "Required kernel crypto interface not available."
-msgstr "Vyžadované kryptografické rozhranie jadra nie je dostupné."
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "Uistite sa, že máte načítaný modul jadra algif_skcipher."
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "Aktivácia nie je podporovaná pre veľkosť sektoru %d."
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "Jadro nepodporuje aktiváciu pre tento zastaralý režim TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "Aktivuje sa TCRYPT systémové šifrovanie pre oddiel %s."
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:819
 msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
 msgstr "Nedá sa zistiť odsadenie systémového oddielu TCRYPT, aktivuje sa celá šifrovaná oblasť."
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:828
 msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
 msgstr "Nedá sa zistiť odsadenie systémového oddielu TCRYPT, aktivuje sa zariadenie ako systémový oddiel."
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "Jadro nepodporuje mapovanie kompatibilné s TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:1146
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "Táto funkcia nie je podporovaná bez načítania hlavičky TCRYPT."
 
@@ -1620,8 +1612,7 @@ msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "VAROVANIE: veľkosť LUKS2 oblasti pre kľúče sa zmenila na %<PRIu64> bajtov.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Zlyhalo získanie zámku čítania na zariadení %s."
@@ -1681,79 +1672,79 @@ msgstr ""
 msgid "Ignored unknown flag %s."
 msgstr "Ignorovaný neznámy príznak %s."
 
-#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Chýbajúci kľúč pre dm-crypt segment %u"
 
-#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Zlyhalo nastavenie dm-crypt segmentu."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Zlyhalo nastavenie dm-linear segmentu."
 
-#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Nebol nájdený žiaden známy vzor špecifikácie šifry v hlavičke LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:2691
+#: lib/luks2/luks2_json_metadata.c:2709
 msgid "OPAL device must have static device size."
 msgstr "Zariadenie OPAL musí mať statickú veľkosť zariadenia."
 
-#: lib/luks2/luks2_json_metadata.c:2711
+#: lib/luks2/luks2_json_metadata.c:2729
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Šifrované zariadenie OPAL s integritou musí byť menšie ako uzamykateľná oblasť."
 
-#: lib/luks2/luks2_json_metadata.c:2716
+#: lib/luks2/luks2_json_metadata.c:2734
 msgid "OPAL device must have same size as locking range."
 msgstr "Zariadenie OPAL musí mať rovnakú veľkosť ako uzamykateľná oblasť."
 
-#: lib/luks2/luks2_json_metadata.c:2736
+#: lib/luks2/luks2_json_metadata.c:2754
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Zariadenie OPAL je %s už odomknuté.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2775
+#: lib/luks2/luks2_json_metadata.c:2793
 msgid "Unsupported device integrity configuration."
 msgstr "Nepodporovaná konfigurácia integrity zariadenia."
 
-#: lib/luks2/luks2_json_metadata.c:2791
+#: lib/luks2/luks2_json_metadata.c:2809
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Prislúchajúce zariadenie dm-integrity neočakávane poskytlo sektory s údajmi."
 
-#: lib/luks2/luks2_json_metadata.c:2886
+#: lib/luks2/luks2_json_metadata.c:2911
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Prebieha opätovné šifrovanie. Nedá sa deaktivovať zariadenie."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Zlyhala výmena pozastaveného zariadenia %s za cieľ dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Zariadenie %s bolo deaktivované, ale hardvérové zariadenie OPAL nemôže byť uzamknuté."
 
-#: lib/luks2/luks2_json_metadata.c:3020
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Zistené nesplnené požiadavky LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3053
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Operácia je nekompatibilná so zariadením, ktoré je označené pre zastaralé prešifrovanie. Operácia sa ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3055
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Operácia je nekompatibilná so zariadením, ktoré je označené pre LUKS2 prešifrovanie. Operácia sa ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3032
+#: lib/luks2/luks2_json_metadata.c:3057
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Operácia je nekompatibilná so zariadením, ktoré používa OPAL. Operácia sa ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3034
+#: lib/luks2/luks2_json_metadata.c:3059
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Operácia je nekompatibilná so zariadením, ktoré používa hardvérové inline príznaky. Operácia sa ruší."
 
@@ -1765,22 +1756,22 @@ msgstr "Nie je dostupné dostatočné množstvo pamäte na otvorenie miesta s k
 msgid "Keyslot open failed."
 msgstr "Zlyhalo otvorenie miesta s kľúčom."
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "Nedá sa použiť šifra %s-%s pre šifrovanie miesta s kľúčom."
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "Nedá sa použiť šifra %s pre šifrovanie miesta s kľúčom."
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr "Nie je dosť pamäte pre odvodenie kľúču od miesta s kľúčom."
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "Hashovací algoritmus %s nie je dostupný."
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "Žiadne miesto pre nový kľúč."
 
@@ -1797,335 +1788,335 @@ msgstr "Nedá sa aktualizovať typ odolnosti. Nový typ poskytuje len %<PRIu64>
 msgid "Failed to refresh reencryption verification digest."
 msgstr "Zlyhalo obnovenie otlačku (digest) overenia prešifrovania."
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "Nedá sa skontrolovať stav zariadenia s uuid: %s."
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Nedá sa zmeniť hlavička s dodatočnými metadátami LUKSMETA."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Nedá sa použiť špecifikácia šifry %s-%s pre LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr "Nedá sa použiť špecifikácia šifry %s-%s pre LUKS2 miesto s kľúčom."
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Nedá sa presunúť oblasť s kľúčmi. Nie je dostatok miesta."
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Nedá sa zmeniť formát na LUKS2 - neplatné metadáta."
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Nedá sa presunúť oblasť s kľúčmi. LUKS2 oblasť s kľúčmi je príliš malá."
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr "Nedá sa presunúť oblasť s kľúčmi."
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Nedá sa zmeniť formát na LUKS1 - predvolená veľkosť sektora šifrovania segmentov nie je 512 bajtov."
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Nedá sa zmeniť formát na LUKS1 - otlačok (digest) miesta pre kľúč nie je kompatibilný s LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Nedá sa zmeniť formát na LUKS1 - zariadenie používa šifru so zabaleným kľúčom %s."
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Nedá sa zmeniť formát na LUKS1 - zariadenie používa viac segmentov."
 
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Nedá sa zmeniť formát na LUKS1 - hlavička LUKS2 obsahuje %u token(y)."
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:798
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Nedá sa zmeniť formát na LUKS1 - nie sú žiadne aktívne miesta s kľúčmi."
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Nedá sa zmeniť formát na LUKS1 - miesto pre kľúč %u je v neplatnom stave."
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:815
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Nedá sa zmeniť formát na LUKS1 - miesto pre kľúč %u je neviazané."
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Nedá sa zmeniť formát na LUKS1 - miesto %u (nad max. množstvom miest) je stále aktívne."
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Nedá sa zmeniť formát na LUKS1 - miesto pre kľúč %u nie je kompatibilné s LUKS1."
 
-#: lib/luks2/luks2_reencrypt.c:1198
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Veľkosť horúcej zóny musí byť násobkom vypočítaného zarovnania zóny (%zu bajtov)."
 
-#: lib/luks2/luks2_reencrypt.c:1203
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Veľkosť zariadenia musí byť násobkom vypočítaného zarovnania zóny (%zu bajtov)."
 
-#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
-#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4080
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Zlyhala inicializácia obalu úložiska pre staré segmenty."
 
-#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Zlyhala inicializácia obalu úložiska pre nové segmenty."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "Zlyhala inicializácia ochrany horúcej zóny."
 
-#: lib/luks2/luks2_reencrypt.c:1623
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "Zlyhalo čítanie kontrolných súčtov pre aktuálnu horúcu zónu."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Zlyhalo čítanie oblasti horúcej zóny začínajúcej na %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:1649
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "Zlyhalo dešifrovanie sektoru %zu."
 
-#: lib/luks2/luks2_reencrypt.c:1655
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "Zlyhalo obnovenie sektoru %zu."
 
-#: lib/luks2/luks2_reencrypt.c:2208
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "Veľkosti zdrojového a cieľového zariadenia sa nezhodujú. Zdroj: %<PRIu64>, cieľ: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2310
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "Zlyhalo aktivovanie zariadenia horúcej zóny %s."
 
-#: lib/luks2/luks2_reencrypt.c:2322
+#: lib/luks2/luks2_reencrypt.c:2323
 #, c-format
 msgid "Failed to allocate hotzone device %s."
 msgstr "Zlyhala alokácia zariadenia horúcej zóny %s."
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "Zlyhalo aktivovanie prekrývajúceho zariadenia %s s aktuálnou tabuľkou pôvodu."
 
-#: lib/luks2/luks2_reencrypt.c:2346
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "Zlyhalo načítanie nového mapovania pre zariadenie %s."
 
-#: lib/luks2/luks2_reencrypt.c:2418
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
 msgstr "Zlyhalo obnovenie zásobníka zariadení k prešifrovaniu."
 
-#: lib/luks2/luks2_reencrypt.c:2615
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
 msgstr "Zlyhalo nastavenie novej veľkosti oblasti s kľúčmi."
 
-#: lib/luks2/luks2_reencrypt.c:2751
+#: lib/luks2/luks2_reencrypt.c:2752
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Hodnota posunu údajov nie je zarovnaná s veľkosťou šifrovaného sektoru (%<PRIu32> bajtov)."
 
-#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "Nepodporovaný režim odolnosti %s"
 
-#: lib/luks2/luks2_reencrypt.c:2824
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
 msgstr "Veľkosť posunutého segmentu nemôže byť väčšia ako hodnota posunu údajov."
 
-#: lib/luks2/luks2_reencrypt.c:2866
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
 msgstr "Neplatné parametre odolnosti prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:2888
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "Presunutý segment príliš veľký. Požadovaná veľkosť %<PRIu64>, dostupné miesto pre: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2977
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "Zlyhalo vyčistenie tabuľky."
 
-#: lib/luks2/luks2_reencrypt.c:3063
+#: lib/luks2/luks2_reencrypt.c:3064
 #, c-format
 msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
 msgstr "Posun údajov (%<PRIu64> sektorov) je menší než budúce odsadenie údajov (%<PRIu64> sektorov)."
 
-#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
 msgstr "Zmenšená veľkosť údajov je väčšia ako skutočná veľkosť zariadenia."
 
-#: lib/luks2/luks2_reencrypt.c:3095
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Zariadenie s údajmi nie je zarovnané k veľkosti šifrovaného sektoru (%<PRIu32> bajtov)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
-#: lib/luks2/luks2_reencrypt.c:3664
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Zlyhalo otvorenie %s vo výlučnom režime (už mapované alebo pripojené)."
 
-#: lib/luks2/luks2_reencrypt.c:3332
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Zariadenie nie je označené pre LUKS2 prešifrovanie."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Zlyhalo načítanie kontextu LUKS2 prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
 msgstr "Zariadenie nie je opätovne šifrované."
 
-#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
 msgstr "Proces prešifrovania už beží."
 
-#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
 msgstr "Zlyhalo získanie zámku prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:3471
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Nedá sa pokračovať v prešifrovaní. Spustite najprv obnovu prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:3607
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Veľkosť aktívneho zariadenia a požadovaná veľkosť prešifrovania sa nezhoduje."
 
-#: lib/luks2/luks2_reencrypt.c:3621
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "V parametroch prešifrovania je požadovaná nedovolená veľkosť zariadenia."
 
-#: lib/luks2/luks2_reencrypt.c:3723
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Prebieha prešifrovanie. Nedá sa vykonať obnova."
 
-#: lib/luks2/luks2_reencrypt.c:3744
+#: lib/luks2/luks2_reencrypt.c:3745
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Obnova prešifrovaním LUKS2 zlyhala."
 
-#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
 msgid "Failed to initialize reencryption device stack."
 msgstr "Zlyhala inicializácia zásobníka zariadenia k prešifrovaniu."
 
-#: lib/luks2/luks2_reencrypt.c:3910
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "LUKS2 prešifrovanie je už inicializované v metadátach."
 
-#: lib/luks2/luks2_reencrypt.c:3918
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Zlyhala inicializácia LUKS2 prešifrovania v metadátach."
 
-#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
-#: lib/luks2/luks2_reencrypt.c:4033
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Prešifrovanie nie je podporované na DAX (trvalá pamäť) zariadeniach."
 
-#: lib/luks2/luks2_reencrypt.c:4062
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Zlyhalo nastavenie segmentov zariadenia pre ďalšiu horúcu zónu prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Zlyhal zápis odolných metadát prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4122
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "Dešifrovanie zlyhalo."
 
-#: lib/luks2/luks2_reencrypt.c:4127
+#: lib/luks2/luks2_reencrypt.c:4128
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Zlyhal zápis oblasti s horúcou zónou začínajúci na %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4132
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
 msgstr "Zlyhala synchronizácia údajov."
 
-#: lib/luks2/luks2_reencrypt.c:4140
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Zlyhalo aktualizovanie metadát po dokončení aktuálnej horúcej zóny prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4229
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
 msgstr "Zlyhal zápis LUKS2 metadát."
 
-#: lib/luks2/luks2_reencrypt.c:4252
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
 msgstr "Zlyhalo vymazanie oblasti zariadenia s nepoužívanými údajmi."
 
-#: lib/luks2/luks2_reencrypt.c:4258
+#: lib/luks2/luks2_reencrypt.c:4259
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Zlyhalo odstránenie nepoužívaného (neviazaného) miesta pre kľúč %d."
 
-#: lib/luks2/luks2_reencrypt.c:4268
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
 msgstr "Zlyhalo odstránenie miesta pre kľúč prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4278
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Fatálna chyba počas prešifrovania časti začínajúcej na %<PRIu64>, dlhej %<PRIu64> sektorov."
 
-#: lib/luks2/luks2_reencrypt.c:4282
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
 msgstr "Zlyhalo prešifrovanie za behu."
 
-#: lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Zariadenie neprebuďte pokiaľ ho manuálne nenahradíte s chybovým cieľom."
 
-#: lib/luks2/luks2_reencrypt.c:4339
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Nedá sa pokračovať v prešifrovaní. Neočakávaný stav prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4345
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
 msgstr "Chýbajúci alebo neplatný kontext prešifrovania."
 
-#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
 msgstr "Zlyhala aktualizácia kontextu prešifrovania."
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "Metadáta prešifrovania sú neplatné."
 
@@ -2157,7 +2148,7 @@ msgstr "Parametre šifrovania miesta pre kľúč môžu byť nastavené len pre
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametre šifrovania miesta pre kľúč nie sú kompatibilné so šifrovaním miesta pre kľúč LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
+#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2185,7 +2176,7 @@ msgstr "VAROVANIE: Parameter --hash je ignorovaný v režime plain so zadaným s
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "VAROVANIE: Možnosť --keyfile-size je ignorovaná, veľkosť čítania je rovnaká ako veľkosť kľúča šifrovania.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2196,9 +2187,9 @@ msgstr "Skenovanie blkid zlyhalo pre %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Zaznamenané podpis(y) zariadenia na %s. Pokračovanie ďalej môže poškodiť existujúce údaje."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
-#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
-#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
+#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
+#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2247,7 +2238,7 @@ msgstr ""
 "ktorý povoľuje prístup k zašifrovaným oddielom bez hesla.\n"
 "Tento výpis by mal byť vždy uložený zašifrovaný na bezpečnom mieste."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2271,9 +2262,9 @@ msgstr "Nedá sa určiť veľkosť kľúča zväzku pre FVAULT2, prosím použit
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Zariadenie %s je stále aktívne a naplánované pre odložené odstránenie.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
-#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
-#: src/cryptsetup.c:3262
+#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
+#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
+#: src/cryptsetup.c:3261
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Zlyhalo nastavenie cesty k externým tokenom %s."
@@ -2310,31 +2301,35 @@ msgstr "%-10s %4u iterácií, %5u pamäte, %1u paralelných vlákien (CPU) pre %
 msgid "Result of benchmark is not reliable."
 msgstr "Výsledok hodnotenia výkonu nie je spoľahlivý."
 
-#: src/cryptsetup.c:1170
+#: src/cryptsetup.c:1171
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testy sú len približné a používajú iba pamäť (žiadne vstupno-výstupné úložisko).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1195
+#: src/cryptsetup.c:1196
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algoritmus|      Kľúč |      Šifrovanie |    Dešifrovanie\n"
 
-#: src/cryptsetup.c:1203
+#: src/cryptsetup.c:1204
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Šifra %s (s %i bitovým kľúčom) nie je dostupná."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1222
+#: src/cryptsetup.c:1225
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algoritmus|      Kľúč |      Šifrovanie |    Dešifrovanie\n"
 
-#: src/cryptsetup.c:1233
+#: src/cryptsetup.c:1238
 msgid "N/A"
 msgstr "–"
 
-#: src/cryptsetup.c:1258
+#: src/cryptsetup.c:1241
+msgid "# Cipher speed test is not available.\n"
+msgstr "# Test rýchlosti šifry nie je dostupný.\n"
+
+#: src/cryptsetup.c:1257
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2342,27 +2337,27 @@ msgstr ""
 "Zaznamenané nechránené metadáta LUKS2 prešifrovania. Prosím overte, či je operácia prešifrovania žiadúca (pozri výstup luksDump)\n"
 "a pokračujte (aktualizujte metadáta) iba keď operáciu uznáte za žiadúcu."
 
-#: src/cryptsetup.c:1264
+#: src/cryptsetup.c:1263
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Zadajte heslo na ochránenie a aktualizáciu metadát prešifrovania: "
 
-#: src/cryptsetup.c:1308
+#: src/cryptsetup.c:1307
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Naozaj pokračovať s obnovou LUKS2 prešifrovania?"
 
-#: src/cryptsetup.c:1317
+#: src/cryptsetup.c:1316
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Zadajte heslo na overenie otlačku (digest) metadát prešifrovania: "
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1318
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Zadajte heslo pre obnovu prešifrovania: "
 
-#: src/cryptsetup.c:1381
+#: src/cryptsetup.c:1380
 msgid "Really try to repair LUKS device header?"
 msgstr "Naozaj sa pokúsiť opraviť hlavičku LUKS zariadenia?"
 
-#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2370,7 +2365,7 @@ msgstr ""
 "\n"
 "Mazanie prerušené."
 
-#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2378,167 +2373,167 @@ msgstr ""
 "Mazanie zariadenia na inicializáciu kontrolného súčtu integrity.\n"
 "Môžete to prerušiť stlačením CTRL+c (zvyšok nevymazaného zariadenia bude obsahovať neplatný kontrolný súčet).\n"
 
-#: src/cryptsetup.c:1436 src/integritysetup.c:103
+#: src/cryptsetup.c:1435 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Nedá sa deaktivovať dočasné zariadenie %s."
 
-#: src/cryptsetup.c:1484
+#: src/cryptsetup.c:1483
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Iba hardvérové šifrovanie OPAL nepodporuje --cipher a --key-size, možnosti sa ignorujú."
 
-#: src/cryptsetup.c:1497
+#: src/cryptsetup.c:1496
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Možnosti integrity môžu byť použité len pre formát LUKS2."
 
-#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
+#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nepodporovaná možnosť veľkosti LUKS2 metadát."
 
-#: src/cryptsetup.c:1507
+#: src/cryptsetup.c:1506
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL je podporovaný len pre formát LUKS2."
 
-#: src/cryptsetup.c:1512
+#: src/cryptsetup.c:1511
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Hardvérové inline príznaky sú podporované len pre LUKS2 formát."
 
-#: src/cryptsetup.c:1521
+#: src/cryptsetup.c:1520
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Súbor s hlavičkou neexistuje, chcete ho vytvoriť?"
 
-#: src/cryptsetup.c:1529
+#: src/cryptsetup.c:1528
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Nedá sa vytvoriť súbor s hlavičkou %s."
 
-#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
 #: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
 #: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Nebol rozpoznaný žiaden známy vzor špecifikácie integrity."
 
-#: src/cryptsetup.c:1557
+#: src/cryptsetup.c:1556
 msgid "Cannot use specified integrity key size."
 msgstr "Nedá sa použiť zadaná veľkosť kľúča integrity."
 
-#: src/cryptsetup.c:1575
+#: src/cryptsetup.c:1574
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Nedá sa použiť %s ako hlavička na disku."
 
-#: src/cryptsetup.c:1604 src/integritysetup.c:172
+#: src/cryptsetup.c:1603 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Toto prepíše údaje na %s nenávratne."
 
-#: src/cryptsetup.c:1641
+#: src/cryptsetup.c:1640
 msgid "OPAL Admin password cannot be empty."
 msgstr "OPAL heslo administrátora nemôže byť prázdne."
 
-#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
-#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
+#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Zlyhalo nastavenie pbkdf parametrov."
 
-#: src/cryptsetup.c:1786
+#: src/cryptsetup.c:1785
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Znížené odsadenie údajov je povolené len pre oddelenú hlavičku LUKS."
 
-#: src/cryptsetup.c:1793
+#: src/cryptsetup.c:1792
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Kontajnerový súbor LUKS %s je príliš malý na aktiváciu, nie je tam žiadne zvyšné miesto pre údaje."
 
-#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nedá sa zistiť veľkosť kľúču zväzku pre LUKS bez miest pre kľúče, prosím použite voľbu --key-size."
 
-#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Zariadenie vyžaduje dve kľúče zväzku."
 
-#: src/cryptsetup.c:1889
+#: src/cryptsetup.c:1888
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Niektoré zadané aktivačné parametre boli ignorované s len hardvérovým šifrovaním OPAL."
 
-#: src/cryptsetup.c:1894
+#: src/cryptsetup.c:1893
 msgid "Device activated but cannot make flags persistent."
 msgstr "Zariadenie aktivované, ale nedajú sa urobiť príznaky trvalými."
 
-#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
+#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Miesto pre kľúč %d je vybrané pre vymazanie."
 
-#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
+#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Toto je posledné miesto pre kľúč. Zariadenie sa stane nepoužiteľné po odstránení tohto kľúča."
 
-#: src/cryptsetup.c:1987
+#: src/cryptsetup.c:1986
 msgid "Enter any remaining passphrase: "
 msgstr "Zadajte akékoľvek zvyšné heslo: "
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operácia zrušená, miesto pre kľúč NEBOLO zmazané.\n"
 
-#: src/cryptsetup.c:2024
+#: src/cryptsetup.c:2023
 msgid "Enter passphrase to be deleted: "
 msgstr "Zadajte heslo, ktoré má byť vymazané: "
 
-#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
-#: src/cryptsetup.c:3253
+#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
+#: src/cryptsetup.c:3252
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Zariadenie %s nie je platné LUKS2 zariadenie."
 
-#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
+#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
 msgid "Enter new passphrase for key slot: "
 msgstr "Zadajte nové heslo k miestu pre kľúč: "
 
-#: src/cryptsetup.c:2147 src/utils_luks.c:342
+#: src/cryptsetup.c:2146 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Zadaj PIN k tokenu: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:344
+#: src/cryptsetup.c:2148 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Zadaj PIN k tokenu %d: "
 
-#: src/cryptsetup.c:2208
+#: src/cryptsetup.c:2207
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "VAROVANIE: Parameter --key-slot je použitý pre nové číslo miesta pre kľúč.\n"
 
-#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Zadajte akékoľvek existujúce heslo: "
 
-#: src/cryptsetup.c:2381
+#: src/cryptsetup.c:2380
 msgid "Enter passphrase to be changed: "
 msgstr "Zadajte heslo, ktoré sa má zmeniť: "
 
-#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Zadajte nové heslo: "
 
-#: src/cryptsetup.c:2447
+#: src/cryptsetup.c:2446
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Zadajte heslo k miestu pre kľúč, ktoré má byť konvertované: "
 
-#: src/cryptsetup.c:2471
+#: src/cryptsetup.c:2470
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Iba jeden argument so zariadením pre operáciu isLuks je podporovaný."
 
-#: src/cryptsetup.c:2576
+#: src/cryptsetup.c:2575
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Miesto pre kľúč %d neobsahuje neviazaný kľúč."
 
-#: src/cryptsetup.c:2581
+#: src/cryptsetup.c:2580
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2546,52 +2541,52 @@ msgstr ""
 "Výpis hlavičky s neviazaným kľúčom je citlivý údaj.\n"
 "Tento výpis by mal byť uložený šifrovaný na bezpečnom mieste."
 
-#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
+#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s nie je názov aktívneho zariadenia %s."
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2706
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s nie je názov aktívneho LUKS zariadenia alebo chýba hlavička."
 
-#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
+#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
 msgid "Option --header-backup-file is required."
 msgstr "Možnosť --header-backup-file je vyžadovaná."
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2833
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s nie je zariadenie spravované cryptsetup-om."
 
-#: src/cryptsetup.c:2845
+#: src/cryptsetup.c:2844
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Obnovenie nie je podporované pre typ zariadenia %s"
 
-#: src/cryptsetup.c:2895
+#: src/cryptsetup.c:2894
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Nerozpoznaný typ zariadenia %s v metadátach."
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2896
 msgid "Command requires device and mapped name as arguments."
 msgstr "Príkaz požaduje zariadenie a mapovaný názov ako argumenty."
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL PSID: "
 msgstr "Zadajte OPAL PSID: "
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL Admin password: "
 msgstr "Zadajte OPAL heslo administrátora: "
 
-#: src/cryptsetup.c:2923
+#: src/cryptsetup.c:2922
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "VAROVANIE: CELÝ disk bude obnovený do továrenských nastavení a všetky údaje budú stratené! Pokračovať?"
 
-#: src/cryptsetup.c:2966
+#: src/cryptsetup.c:2965
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2600,363 +2595,363 @@ msgstr ""
 "Táto operácia vymaže všetky miesta s kľúčmi na zariadení %s.\n"
 "Zariadenie sa stane nepoužiteľné po tejto operácií."
 
-#: src/cryptsetup.c:2973
+#: src/cryptsetup.c:2972
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operácia zrušená, miesta s kľúčmi NEBOLI vymazané.\n"
 
-#: src/cryptsetup.c:3012
+#: src/cryptsetup.c:3011
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Neplatný typ LUKS, iba luks1 a luks2 sú podporované."
 
-#: src/cryptsetup.c:3028
+#: src/cryptsetup.c:3027
 #, c-format
 msgid "Device is already %s type."
 msgstr "Zariadenie je už typom %s."
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:3034
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Táto operácia premení %s na formát %s.\n"
 
-#: src/cryptsetup.c:3038
+#: src/cryptsetup.c:3037
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operácia zrušená, zariadenie NEBOLO premenené.\n"
 
-#: src/cryptsetup.c:3078
+#: src/cryptsetup.c:3077
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Možnosť --priority, --label alebo --subsystem chýba."
 
-#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
+#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d je neplatný."
 
-#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
+#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d je používaný."
 
-#: src/cryptsetup.c:3127
+#: src/cryptsetup.c:3126
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Zlyhalo pridanie tokenu luks2-keyring %d."
 
-#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
+#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Zlyhalo priradenie tokenu %d k miestu pre kľúč %d."
 
-#: src/cryptsetup.c:3155
+#: src/cryptsetup.c:3154
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d sa nepoužíva."
 
-#: src/cryptsetup.c:3192
+#: src/cryptsetup.c:3191
 msgid "Failed to import token from file."
 msgstr "Zlyhalo importovanie tokenu zo súboru."
 
-#: src/cryptsetup.c:3217
+#: src/cryptsetup.c:3216
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Zlyhalo získanie tokenu %d pre export."
 
-#: src/cryptsetup.c:3230
+#: src/cryptsetup.c:3229
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d nie je priradený k miestu pre kľúč %d."
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
+#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Zlyhalo zrušenie priradenia tokenu %d z miesta pre kľúč %d."
 
-#: src/cryptsetup.c:3298
+#: src/cryptsetup.c:3297
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Možnosť --tcrypt-hidden, --tcrypt-system alebo --tcrypt-backup je podporovaná len pre TCRYPT zariadenie."
 
-#: src/cryptsetup.c:3301
+#: src/cryptsetup.c:3300
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Možnosť --veracrypt alebo --disable-veracrypt je podporovaná len pre zariadenie typu TCRYPT."
 
-#: src/cryptsetup.c:3304
+#: src/cryptsetup.c:3303
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Možnosť --veracrypt-pim je podporovaná len pre zariadenia kompatibilné s VeraCrypt."
 
-#: src/cryptsetup.c:3308
+#: src/cryptsetup.c:3307
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Možnosť --veracrypt-query-pim je podporovaná len pre zariadenia kompatibilné s VeraCrypt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3309
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Možnosti --veracrypt-pim a --veracrypt-query-pim sa vzájomne vylučujú."
 
-#: src/cryptsetup.c:3319
+#: src/cryptsetup.c:3318
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Možnosť --persistent nie je povolené s --test-passphrase."
 
-#: src/cryptsetup.c:3322
+#: src/cryptsetup.c:3321
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Možnosti --refresh a --test-passphrase sa navzájom vylučujú."
 
-#: src/cryptsetup.c:3325
+#: src/cryptsetup.c:3324
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Možnosť --shared je povolená len pre otvorenie zariadenia plain."
 
-#: src/cryptsetup.c:3328
+#: src/cryptsetup.c:3327
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Možnosť --skip je podporovaná len pre otvorenie zariadení plain a loopaes."
 
-#: src/cryptsetup.c:3331
+#: src/cryptsetup.c:3330
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Možnosť --offset s akciou otvorenia je podporovaná len pre zariadenia plain a loopaes."
 
-#: src/cryptsetup.c:3334
+#: src/cryptsetup.c:3333
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Možnosť --tcrypt-hidden nemôže byť kombinovaná s --allow-discards."
 
-#: src/cryptsetup.c:3338
+#: src/cryptsetup.c:3337
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Možnosť veľkosti sektora s akciou otvorenia je podporovaná len pre zariadenia plain."
 
-#: src/cryptsetup.c:3342
+#: src/cryptsetup.c:3341
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Možnosť veľkých IV sektorov je podporovaná len pre otváranie zariadenia typu plain s veľkosťou sektora väčšou než 512 bajtov."
 
-#: src/cryptsetup.c:3347
+#: src/cryptsetup.c:3346
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Možnosť --test-passphrase je povolená len pre otvorenie LUKS, TCRYPT, BITLK a FVAULT2 zariadení."
 
-#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
+#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Možnosť --device-size a --size nemôžu byť kombinované."
 
-#: src/cryptsetup.c:3353
+#: src/cryptsetup.c:3352
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Možnosť --unbound je povolená len pre otvorenie zariadení luks."
 
-#: src/cryptsetup.c:3356
+#: src/cryptsetup.c:3355
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Možnosť --unbound nemôže byť použitá bez --test-passphrase."
 
-#: src/cryptsetup.c:3360
+#: src/cryptsetup.c:3359
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Možnosť --volume-key-keyring nemôže byť kombinovaná s --hash alebo --volume-key-file."
 
-#: src/cryptsetup.c:3363
+#: src/cryptsetup.c:3362
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Obe možnosti --volume-key-file musia byť zadané spolu s príslušnými možnosťami --key-size."
 
-#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Možnosti --cancal-deferred a --deferred nemôžu byť použité naraz."
 
-#: src/cryptsetup.c:3388
+#: src/cryptsetup.c:3387
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Možnosť --active-name možno nastaviť len pre zariadenie LUKS2."
 
-#: src/cryptsetup.c:3391
+#: src/cryptsetup.c:3390
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Možnosti --active-name a --force-offline-reencrypt nemožno kombinovať."
 
-#: src/cryptsetup.c:3394
+#: src/cryptsetup.c:3393
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Možnosti --new-volume-key-file a --keep-key nemožno kombinovať."
 
-#: src/cryptsetup.c:3397
+#: src/cryptsetup.c:3396
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Možnosti --new-volume-key-keyring a --keep-key nemožno kombinovať."
 
-#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
+#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
 msgid "Keyslot specification is required."
 msgstr "Vyžaduje sa zadanie miesta pre kľúč."
 
-#: src/cryptsetup.c:3413
+#: src/cryptsetup.c:3412
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Možnosti --align-payload a --offset nemožno kombinovať."
 
-#: src/cryptsetup.c:3416
+#: src/cryptsetup.c:3415
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Možnosť --integrity-no-wipe môže byť použitá len pre formátovanie s rozšírením integrity."
 
-#: src/cryptsetup.c:3419
+#: src/cryptsetup.c:3418
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Iba jedna z možností --use-[u]random je povolená."
 
-#: src/cryptsetup.c:3427
+#: src/cryptsetup.c:3426
 msgid "Key size is required with --unbound option."
 msgstr "Veľkosť kľúča sa vyžaduje s možnosťou --unbound."
 
-#: src/cryptsetup.c:3447
+#: src/cryptsetup.c:3446
 msgid "Invalid token action."
 msgstr "Neplatná operácia s tokenom."
 
-#: src/cryptsetup.c:3450
+#: src/cryptsetup.c:3449
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parameter --key-description je povinný pre pridanie tokenu."
 
-#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
+#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Akcia vyžaduje špecifický token. Použite --token-id parameter."
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3457
 msgid "Option --unbound is valid only with token add action."
 msgstr "Možnosť --unbound je platná len pri pridávaní tokenu."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3459
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Možnosti --key-slot a --unbound nemožno kombinovať."
 
-#: src/cryptsetup.c:3465
+#: src/cryptsetup.c:3464
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Akcia vyžaduje špecifický token. Použite --key-slot parameter."
 
-#: src/cryptsetup.c:3481
+#: src/cryptsetup.c:3480
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<zariadenie> [--type <typ>] [<názov>]"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "otvorí zariadenie ako <názov>"
 
-#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
 #: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
 #: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<názov>"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "zatvorí zariadenie (odstráni mapovanie)"
 
-#: src/cryptsetup.c:3483 src/integritysetup.c:558
+#: src/cryptsetup.c:3482 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "zmení veľkosť aktívneho zariadenia"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3483
 msgid "show device status"
 msgstr "zobrazí stav zariadenia"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <šifra>]"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "benchmark cipher"
 msgstr "zhodnotí výkon šifry"
 
-#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
-#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
-#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
-#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
-#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
+#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
+#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
 msgid "<device>"
 msgstr "<zariadenie>"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3485
 msgid "try to repair on-disk metadata"
 msgstr "pokúsi sa opraviť metadáta uložené na disku"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3486
 msgid "reencrypt LUKS2 device"
 msgstr "prešifruje zariadenie LUKS2"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3487
 msgid "erase all keyslots (remove encryption key)"
 msgstr "vymaže všetky miesta s kľúčmi (odstráni šifrovací kľúč)"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3488
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "prevedie LUKS z/na LUKS2 formát(u)"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3489
 msgid "set permanent configuration options for LUKS2"
 msgstr "nastaví trvalé možnosti konfigurácie pre LUKS2"
 
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
 msgid "<device> [<new key file>]"
 msgstr "<zariadenie> [<nový súbor s kľúčom>]"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3490
 msgid "formats a LUKS device"
 msgstr "naformátuje zariadenie LUKS"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3491
 msgid "add key to LUKS device"
 msgstr "pridá kľúč do zariadenia LUKS"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
 msgid "<device> [<key file>]"
 msgstr "<zariadenie> [<súbor s kľúčom>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3492
 msgid "removes supplied key or key file from LUKS device"
 msgstr "odstráni poskytnutý kľúč alebo súbor s kľúčom zo zariadenia LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3493
 msgid "changes supplied key or key file of LUKS device"
 msgstr "zmení poskytnutý kľúč alebo súbor s kľúčom na zariadení LUKS"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3494
 msgid "converts a key to new pbkdf parameters"
 msgstr "prevedie kľúč na nové parametre pbkdf"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "<device> <key slot>"
 msgstr "<zariadenie> <miesto pre kľúč>"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "vymaže kľúč s číslom <miesto pre kľúč> zo zariadenia LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3496
 msgid "print UUID of LUKS device"
 msgstr "vypíše UUID zariadení LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3497
 msgid "tests <device> for LUKS partition header"
 msgstr "otestuje <zariadenie> na hlavičku diskového oddielu LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3498
 msgid "dump LUKS partition information"
 msgstr "vypíše informácie o oddiely LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3499
 msgid "dump TCRYPT device information"
 msgstr "vypíše informácie o zariadení TCRYPT"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3500
 msgid "dump BITLK device information"
 msgstr "vypíše informácie o zariadení BITLK"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3501
 msgid "dump FVAULT2 device information"
 msgstr "vypíše informácie o zariadení FVAULT2"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3502
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Pozastaví zariadenie LUKS a vymaže kľúč (všetky vstupno-výstupné operácie budú zmrazené)"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3503
 msgid "Resume suspended LUKS device"
 msgstr "Prebudí pozastavené zariadenie LUKS"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3504
 msgid "Backup LUKS device header and keyslots"
 msgstr "Zálohuje hlavičku a miesta s kľúčmi zariadenia LUKS"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3505
 msgid "Restore LUKS device header and keyslots"
 msgstr "Obnoví hlavičku a miesta s kľúčmi zariadenia LUKS"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <zariadenie>"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipuluje s tokenmi LUKS2"
 
-#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2964,7 +2959,7 @@ msgstr ""
 "\n"
 "<akcia> je jedna z:\n"
 
-#: src/cryptsetup.c:3532
+#: src/cryptsetup.c:3531
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2976,7 +2971,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3536
+#: src/cryptsetup.c:3535
 #, c-format
 msgid ""
 "\n"
@@ -2991,7 +2986,7 @@ msgstr ""
 "<miesto pre kľúč> je číslo miesta pre kľúč LUKS na upravovanie\n"
 "<súbor s kľúčom> je voliteľný súbor s kľúčom pre nový kľúč pre akciu luksAddKey\n"
 
-#: src/cryptsetup.c:3543
+#: src/cryptsetup.c:3542
 #, c-format
 msgid ""
 "\n"
@@ -3000,7 +2995,7 @@ msgstr ""
 "\n"
 "Predvolené zakompilovaný formát metadát je %s (pre akciu luksFormat).\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3547
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3008,12 +3003,12 @@ msgstr ""
 "\n"
 "LUKS2 podpora zásuvného modulu externého tokenu je zapnutá.\n"
 
-#: src/cryptsetup.c:3549
+#: src/cryptsetup.c:3548
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Cesta k zásuvnému modulu externého tokenu LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3550
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3021,7 +3016,7 @@ msgstr ""
 "\n"
 "LUKS2 podpora zásuvného modulu externého tokenu je vypnutá.\n"
 
-#: src/cryptsetup.c:3555
+#: src/cryptsetup.c:3554
 #, c-format
 msgid ""
 "\n"
@@ -3038,7 +3033,7 @@ msgstr ""
 "Predvolené PBKDF pre LUKS2: %s\n"
 "\tČas iterácie: %d, Pamäť potrebná: %d kB, Paralelné vlákna: %d\n"
 
-#: src/cryptsetup.c:3566
+#: src/cryptsetup.c:3565
 #, c-format
 msgid ""
 "\n"
@@ -3053,122 +3048,122 @@ msgstr ""
 "\tplain: %s, Kľúč: %d bitov, Hashovanie hesla: %s\n"
 "\tLUKS: %s, Kľúč: %d bitov, Hashovanie LUKS hlavičky: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3574
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Predvolená veľkosť kľúča s režimom XTS (dva interné kľúče) bude zdvojnásobená.\n"
 
-#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: požaduje %s ako argumenty"
 
-#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Miesto pre kľúč je neplatné."
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3660
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Veľkosť zariadenie musí byť násobkom 512-bajtového sektora."
 
-#: src/cryptsetup.c:3666
+#: src/cryptsetup.c:3665
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Zadaná neplatná maximálna veľkosť horúcej zóny prešifrovania."
 
-#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
+#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Veľkosť kľúča musí byť násobkom 8 bitov"
 
-#: src/cryptsetup.c:3687
+#: src/cryptsetup.c:3686
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Najviac dve veľkosti kľúčov môžu byť zadané."
 
-#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
+#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Najviac %d špecifikácií kľúča zväzku môže byť zadaných."
 
-#: src/cryptsetup.c:3739
+#: src/cryptsetup.c:3738
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Najviac %d zväzkov kľúčov môže byť zadaných."
 
-#: src/cryptsetup.c:3748
+#: src/cryptsetup.c:3747
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Maximálna veľkosť zmenšenia zariadenia je 1 GiB."
 
-#: src/cryptsetup.c:3751
+#: src/cryptsetup.c:3750
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Veľkosť zmenšenia musí byť násobkom 512-bajtového sektora."
 
-#: src/cryptsetup.c:3768
+#: src/cryptsetup.c:3767
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Možnosť --priority môže byť len ignore/normal/prefer."
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Zobrazí túto pomocnú správu"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Zobrazí stručný návod na použitie"
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Vypíše verziu balíka"
 
-#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Možnosti pomoci:"
 
-#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[MOŽNOSŤ...] <akcia> <špecifikácia akcie>"
 
-#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Chýba argument <akcia>."
 
-#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Neznáma akcia."
 
-#: src/cryptsetup.c:3929
+#: src/cryptsetup.c:3928
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Možnosť --key-file má prednosť pred zadaným argumentom súboru s kľúčom."
 
-#: src/cryptsetup.c:3935
+#: src/cryptsetup.c:3934
 msgid "Only one --key-file argument is allowed."
 msgstr "Iba jeden argument --key-file je dovolený."
 
-#: src/cryptsetup.c:3940
+#: src/cryptsetup.c:3939
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funkcia na odvodenie kľúča na základe hesla (PBKDF) môže byť iba pbkdf2 alebo argon2i/argon2id."
 
-#: src/cryptsetup.c:3945
+#: src/cryptsetup.c:3944
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Vynútené iterácie PBKDF nemôžu byť kombinované s možnosťou času iterácie."
 
-#: src/cryptsetup.c:3950
+#: src/cryptsetup.c:3949
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Nedá sa prepojiť kľúč zväzku na zväzok kľúčov, keď je zväzok kľúčov vypnutý."
 
-#: src/cryptsetup.c:3955
+#: src/cryptsetup.c:3954
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Nedá sa použiť popis kľúča zo zväzku kľúčov, keď je zväzok kľúčov vypnutý."
 
-#: src/cryptsetup.c:3960
+#: src/cryptsetup.c:3959
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Inline integrita musí byť použitá spolu s možnosťou --integrity."
 
-#: src/cryptsetup.c:3971
+#: src/cryptsetup.c:3970
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Možnosti --keyslot-cipher a --keyslot-key-size musia byť použité spolu."
 
-#: src/cryptsetup.c:3979
+#: src/cryptsetup.c:3978
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Žiadna akcia sa nevykonala. Zavolané s možnosťou --test-args.\n"
 
-#: src/cryptsetup.c:3992
+#: src/cryptsetup.c:3991
 msgid "Cannot disable metadata locking."
 msgstr "Nedá sa vypnúť zamykanie metadát."
 
@@ -4356,6 +4351,12 @@ msgstr "Pre hostiteľa nie je povolená autentifikačný metóda s verejným kľ
 msgid "Public key authentication error: "
 msgstr "Chyba autentifikácie s verejným kľúčom: "
 
+#~ msgid "Required kernel crypto interface not available."
+#~ msgstr "Vyžadované kryptografické rozhranie jadra nie je dostupné."
+
+#~ msgid "Ensure you have algif_skcipher kernel module loaded."
+#~ msgstr "Uistite sa, že máte načítaný modul jadra algif_skcipher."
+
 #, c-format
 #~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
 #~ msgstr "Zlyhalo čítanie alebo overenie kópie metadát BITLK FVE #%d z %s."

From d5c87859e52d416e43f40e7e2f58f2bcf181ad6d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=9C=D0=B8=D1=80=D0=BE=D1=81=D0=BB=D0=B0=D0=B2=20=D0=9D?=
 =?UTF-8?q?=D0=B8=D0=BA=D0=BE=D0=BB=D0=B8=D1=9B?=
 <miroslavnikolic@rocketmail.com>
Date: Sat, 4 Jul 2026 18:12:56 +0200
Subject: [PATCH 167/244] po: update sr.po (from translationproject.org)

---
 po/sr.po | 732 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 368 insertions(+), 364 deletions(-)

diff --git a/po/sr.po b/po/sr.po
index 85a2b3fbd..db01161a0 100644
--- a/po/sr.po
+++ b/po/sr.po
@@ -4,10 +4,10 @@
 # Мирослав Николић <miroslavnikolic@rocketmail.com>, 2014–2026.
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup-2.8.2-rc0\n"
+"Project-Id-Version: cryptsetup-2.8.5-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-12-12 18:51+0100\n"
-"PO-Revision-Date: 2026-01-14 15:04+0200\n"
+"POT-Creation-Date: 2026-03-30 14:18+0200\n"
+"PO-Revision-Date: 2026-04-04 12:24+0200\n"
 "Last-Translator: Мирослав Николић <miroslavnikolic@rocketmail.com>\n"
 "Language-Team: Serbian <(nothing)>\n"
 "Language: sr\n"
@@ -185,8 +185,8 @@ msgstr "Величина уређаја није поравната на вел
 msgid "Header detected but device %s is too small."
 msgstr "Заглавље је откривено али уређај „%s“ је премали."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
-#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
+#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
+#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
 msgid "This operation is not supported for this device type."
 msgstr "Ова радња није подржана за ову врсту уређаја."
 
@@ -199,10 +199,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Нисам успео да повратим ЛУКС2 метаподатке у меморију."
 
 #: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
-#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
-#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
-#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
+#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -219,7 +219,7 @@ msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Није откривен познат образац одреднице шифрера за активан уређај „%s“."
 
 #: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5805
+#: lib/setup.c:3783 lib/setup.c:5816
 #, c-format
 msgid "Device %s is not active."
 msgstr "Уређај „%s“ није радан."
@@ -246,7 +246,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Откачени уређај метаподатака није подржан за ову врсту криптографије."
 
 #: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
 msgid "Unsupported encryption sector size."
 msgstr "Неподржана величина одељка шифровања."
 
@@ -299,9 +299,9 @@ msgstr "Шифрер %s-%s (величина кључа %zd бита) није 
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "УПОЗОРЕЊЕ: Покретање уређаја неће успети, „dm-crypt“-у недостаје подршка за затражену величину одељка шифровања.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
+#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4494
+#: lib/luks2/luks2_reencrypt.c:4497
 #, c-format
 msgid "Device %s is too small."
 msgstr "Уређај „%s“ је премали."
@@ -459,7 +459,7 @@ msgid "Unsupported parameters on device %s."
 msgstr "Неподржани параметри на уређају „%s“."
 
 #: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
+#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Неодговарајући параметри на уређају „%s“."
@@ -469,7 +469,7 @@ msgid "Crypt devices mismatch."
 msgstr "Криптографски уређаји се не поклапају."
 
 #: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
+#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Нисам успео поново да учитам уређај „%s“."
@@ -481,8 +481,8 @@ msgid "Failed to suspend device %s."
 msgstr "Нисам успео да обуставим уређај „%s“."
 
 #: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
-#: lib/luks2/luks2_reencrypt.c:4237
+#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
+#: lib/luks2/luks2_reencrypt.c:4240
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Нисам успео да наставим са уређајем „%s“."
@@ -566,187 +566,187 @@ msgstr "Грешка за време настављања уређаја „%s
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Нисам успео да развежем кључ волумена од привеска кључева које је навео корисник."
 
-#: lib/setup.c:4423 lib/setup.c:5592
+#: lib/setup.c:4423 lib/setup.c:5603
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Нисам успео да свежем кључ волумена у привезак кључева који је корисник одредио."
 
-#: lib/setup.c:4521 src/cryptsetup.c:2723
+#: lib/setup.c:4522 src/cryptsetup.c:2721
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Волумен „%s“ није обустављен."
 
-#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
-#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
+#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
+#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
 #: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Кључ волумена не одговара волумену."
 
-#: lib/setup.c:4776
+#: lib/setup.c:4787
 msgid "Failed to swap new key slot."
 msgstr "Нисам успео да разменим нови утор кључа."
 
-#: lib/setup.c:4874
+#: lib/setup.c:4885
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Утор кључа „%d“ није исправан."
 
-#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
-#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
+#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Утор кључа „%d“ није радан."
 
-#: lib/setup.c:4899
+#: lib/setup.c:4910
 msgid "Device header overlaps with data area."
 msgstr "Заглавље уређаја се преклапа са облашћу података."
 
-#: lib/setup.c:5120
+#: lib/setup.c:5131
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Поновно шифровање је у току. Не могу да активирам уређај."
 
-#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3722
+#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
+#: lib/luks2/luks2_reencrypt.c:3725
 msgid "Failed to get reencryption lock."
 msgstr "Нисам успео да добавим закључавање поновног шифровања."
 
-#: lib/setup.c:5144
+#: lib/setup.c:5155
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Опоравак LUKS2 поновног шифровања коришћењем кључ(ев)а није успело."
 
-#: lib/setup.c:5280
+#: lib/setup.c:5291
 #, c-format
 msgid "Device %s already exists."
 msgstr "Већ постоји уређај „%s“."
 
-#: lib/setup.c:5287
+#: lib/setup.c:5298
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Не могу да користим уређај „%s“, назив није исправан или је још у употреби."
 
-#: lib/setup.c:5299
+#: lib/setup.c:5310
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Кључ волумена поновног шифровања не одговара волумену."
 
-#: lib/setup.c:5316
+#: lib/setup.c:5327
 msgid "Incorrect volume key specified for plain device."
 msgstr "Наведен је неисправан кључ волумена за обичан уређај."
 
-#: lib/setup.c:5342 lib/setup.c:5403
+#: lib/setup.c:5353 lib/setup.c:5414
 msgid "Device type is not properly initialized."
 msgstr "Врста уређаја није исправно покренута."
 
-#: lib/setup.c:5441
+#: lib/setup.c:5452
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Привезак кључева кернела није подржан кернелом."
 
-#: lib/setup.c:5445
+#: lib/setup.c:5456
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Привезак кључева кернела недостаје: потребан је за прослеђивање потписа кернелу."
 
-#: lib/setup.c:5500
+#: lib/setup.c:5511
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Не могу да користим кључ привеска „%s“."
 
-#: lib/setup.c:5713
+#: lib/setup.c:5724
 msgid "Incorrect root hash specified for verity device."
 msgstr "Наведен је неисправан хеш корена за уређај тачности."
 
-#: lib/setup.c:5754 lib/setup.c:5779
+#: lib/setup.c:5765 lib/setup.c:5790
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL не подржава опцију одложену деактивацију."
 
-#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Уређај „%s“ је још увеку употреби."
 
-#: lib/setup.c:5787
+#: lib/setup.c:5798
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Не могу да откажем различно уклањање из уређаја „%s“."
 
-#: lib/setup.c:5809
+#: lib/setup.c:5820
 #, c-format
 msgid "Invalid device %s."
 msgstr "Неисправан уређај „%s“."
 
-#: lib/setup.c:5956
+#: lib/setup.c:5967
 msgid "Volume key buffer too small."
 msgstr "Међумеморија кључа волумена је премала."
 
-#: lib/setup.c:5967
+#: lib/setup.c:5978
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Не могу да довучем кључ волумена за ЛУКС2 уређај."
 
-#: lib/setup.c:5976
+#: lib/setup.c:5987
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Не могу да довучем кључ волумена за ЛУКС1 уређај."
 
-#: lib/setup.c:5990
+#: lib/setup.c:6001
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Не могу да довучем кључ волумена за обичан уређај."
 
-#: lib/setup.c:5998
+#: lib/setup.c:6009
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Не могу да довучем хеш корена за уређај тачности."
 
-#: lib/setup.c:6007
+#: lib/setup.c:6018
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Не могу да довучем кључ волумена за BITLK уређај."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6023
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Не могу да довучем кључ волумена за FVAULT2 уређај."
 
-#: lib/setup.c:6014
+#: lib/setup.c:6025
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Ова радња није подржана за криптографски уређај „%s“."
 
-#: lib/setup.c:6199 lib/setup.c:6210
+#: lib/setup.c:6210 lib/setup.c:6221
 msgid "Dump operation is not supported for this device type."
 msgstr "Радња исписа није подржана за ову врсту уређаја."
 
-#: lib/setup.c:6590
+#: lib/setup.c:6601
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Померај података није умножак %u бајта."
 
-#: lib/setup.c:6898
+#: lib/setup.c:6909
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Не могу да преобратим уређај „%s“ који је још увек у употреби."
 
-#: lib/setup.c:7206 lib/setup.c:7350
+#: lib/setup.c:7217 lib/setup.c:7361
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Нисам успео да доделим утор кључа „%u“ као нови кључ волумена."
 
-#: lib/setup.c:7230
+#: lib/setup.c:7241
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Нисам успео да покренем основне параметре ЛУКС2 утора кључа."
 
-#: lib/setup.c:7236
+#: lib/setup.c:7247
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Нисам успео да доделим утор кључа „%d“ за преглед."
 
-#: lib/setup.c:7467
+#: lib/setup.c:7478
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Не могу да додам утор кључа, сви утори су искључени а није обезбеђен ниједан кључ волумена."
 
-#: lib/setup.c:7540 lib/verity/verity.c:333
+#: lib/setup.c:7551 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Нисам успео да учитам кључ у привеску кључева кернела."
 
-#: lib/setup.c:7731
+#: lib/setup.c:7742
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Не могу да нађем привезак описан са „%s“."
 
-#: lib/setup.c:7796
+#: lib/setup.c:7807
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Нисам успео да остварим опште закључавање серијализације приступа чврстој меморији."
 
@@ -803,40 +803,45 @@ msgstr "Уређај „%s“ није сагласан."
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "Занемарујем лажну оптималну-уи величину за уређај података (%u бајта)."
 
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "Не могу да повећам %s на %<PRIu64> бајта (%s)."
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "Уређај „%s“ је премали. Захтева барем %<PRIu64> бајта."
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "Не могу да користим уређај „%s“ који је у употреби (већ мапиран или прикачен)."
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "Не могу да користим уређај „%s“, овлашћење је одбијено."
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "Не могу да добавим податке о уређају „%s“."
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "Не могу да користим уређај повратне петље, радим као обичан корисник."
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "Прикачињање уређаја повратне петље није успело (потребан је уређај петље са опцијом самочишћења)."
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "Захтевани померај је изван стварне величине уређаја „%s“."
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "Уређај „%s“ има нулту величину."
@@ -979,9 +984,9 @@ msgstr "Грешка УИ приликом шифровања утора кљу
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
 #: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
 #: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
@@ -1126,7 +1131,7 @@ msgstr "Режим ЛУКС шифрера „%s“ није исправан."
 msgid "LUKS hash %s is invalid."
 msgstr "ЛУКС хеш „%s“ није исправан."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Нису откривени познати проблеми за ЛУКС заглавље."
 
@@ -1219,11 +1224,11 @@ msgstr "Премашена је највећа дужина „TCRYPT“ про
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "„PBKDF2“ алгоритам хеша „%s“ није доступан, прескачем."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
+#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
 msgid "Required kernel crypto interface not available."
 msgstr "Није доступно затражено сучеље криптографије језгра."
 
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
+#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
 msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr "Уверите се да је учитан модул кернела „algif_skcipher“."
 
@@ -1294,11 +1299,6 @@ msgstr "Неподржана величина одељка „%<PRIu16>“."
 msgid "Failed to read BITLK header from %s."
 msgstr "Нисам успео да прочитам „BITLK“ заглавље из „%s“."
 
-#: lib/bitlk/bitlk.c:593
-#, c-format
-msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
-msgstr "Нисам успео да прочитам или да потврдим умножак #%d „BITLK FVE“ метаподатака из „%s“."
-
 #: lib/bitlk/bitlk.c:603
 #, c-format
 msgid "Failed to read and validate BITLK FVE metadata from %s."
@@ -1374,42 +1374,42 @@ msgstr "Радња није подржана."
 msgid "Unexpected key data size."
 msgstr "Неочекивана величина података кључа."
 
-#: lib/bitlk/bitlk.c:1431
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Овај „BITLK“ уређај је у неподржаном стању и не може бити активиран."
 
-#: lib/bitlk/bitlk.c:1436
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "„BITLK“ уређај са врстом „%s“ се не може активирати."
 
-#: lib/bitlk/bitlk.c:1475
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "УПОЗОРЕЊЕ: Величина волумена закључавача бита %<PRIu64> не одговара величини садржаног уређаја %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1602
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Не могу да активирам уређај, „dm-crypt“-у кернела недостаје подршка за „BITLK IV“."
 
-#: lib/bitlk/bitlk.c:1606
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Не могу да активирам уређај, „dm-crypt“-у кернела недостаје подршка за „BITLK Elephant“ дифузера."
 
-#: lib/bitlk/bitlk.c:1610
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Не могу да активирам уређај, „dm-crypt“-у кернела недостаје подршка за велику величину сектора."
 
-#: lib/bitlk/bitlk.c:1614
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Не могу да активирам уређај, недостаје „dm-zero“ модул кернела."
 
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "Не могу да прочитам %u бајта заглавља волумена."
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "Неподржано FVAULT2 издање „%<PRIu16>“."
@@ -1486,23 +1486,23 @@ msgstr "Провера није успела на положају %<PRIu64>."
 msgid "Hash area overflow."
 msgstr "Прекорачење области хеша."
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "Провера области података није успела."
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "Провера хеша корена није успела."
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "Улазно/излазна грешка приликом стварања области хеша."
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "Стварање области хеша није успело."
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "УПОЗОРЕЊЕ: Језгро не може да покрене уређајако величина блока података премашује величину странице (%u)."
@@ -1557,19 +1557,19 @@ msgstr "Нисам успео да одредим величину за уређ
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Недоследни „dm-integrity“ метаподаци кернела (издање %u) су откривени на „%s“."
 
-#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Кернел не подржава мапирање дм-целовитости."
 
-#: lib/integrity/integrity.c:310
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Кернел не подржава поравнање фиксних метаподатака дм-целовитости."
 
-#: lib/integrity/integrity.c:319
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Кернел одбија да покрене небезбедну опцију поновног израчунавања (видите старе опције покретања да избегнете ово)."
 
-#: lib/integrity/integrity.c:325
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Кернел не подржава унутарњи режим дм-целовитости."
 
@@ -1718,7 +1718,7 @@ msgstr "Основни „dm-integrity“ уређај са неочекиван
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Поновно шифровање је у току. Не могу да деактивирам уређај."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
+#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Нисам успео да заменим обустављени уређај „%s“ са метом „dm-error“."
@@ -1797,7 +1797,7 @@ msgstr "Не могу да проверим стање уређаја са уј
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Не могу да претворим заглавље са „LUKSMETA“ додатним метаподацима."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
+#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Не могу да користим спецификацију шифрера „%s-%s“ за ЛУКС2."
@@ -1881,7 +1881,7 @@ msgstr "Величина уређаја мора бити производ пр
 
 #: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
 #: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4077
+#: lib/luks2/luks2_reencrypt.c:4080
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Нисам успео да покренем старог увијача смештаја подеока."
 
@@ -1889,7 +1889,7 @@ msgstr "Нисам успео да покренем старог увијача
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Нисам успео да покренем новог увијача смештаја подеока."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
+#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
 msgid "Failed to initialize hotzone protection."
 msgstr "Нисам успео да покренем заштиту вруће зоне."
 
@@ -1897,7 +1897,7 @@ msgstr "Нисам успео да покренем заштиту вруће з
 msgid "Failed to read checksums for current hotzone."
 msgstr "Нисам успео да прочитам суму провере за текућу врућу зону."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Нисам успео да прочитам област вруће зоне са почетком на %<PRIu64>."
@@ -1986,8 +1986,8 @@ msgstr "Величина умањених података је већа од с
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Уређај података није поравнат на величину одељка шифровања (%<PRIu32> бајта)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
-#: lib/luks2/luks2_reencrypt.c:3661
+#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
+#: lib/luks2/luks2_reencrypt.c:3664
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Нисам успео да отворим „%s“ у искључивом режиму (већ мапиран или прикачен)."
@@ -1996,123 +1996,123 @@ msgstr "Нисам успео да отворим „%s“ у искључиво
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Уређај није означен за ЛУКС2 поновно шифровање."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
+#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Нисам успео да учитам контекст ЛУКС2 поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
+#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
 msgid "Device is not in reencryption."
 msgstr "Уређај није у поновном шифровању."
 
-#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
+#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
 msgid "Reencryption process is already running."
 msgstr "Процес поновног шифровања је већ покренут."
 
-#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
+#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
 msgid "Failed to acquire reencryption lock."
 msgstr "Нисам успео да остварим закључавање поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:3468
+#: lib/luks2/luks2_reencrypt.c:3471
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Не могу да наставим са поновним шифровањем. Прво покрените опоравак поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:3604
+#: lib/luks2/luks2_reencrypt.c:3607
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Активна величина уређаја и величина затраженог поновног шифровања не одговарају."
 
-#: lib/luks2/luks2_reencrypt.c:3618
+#: lib/luks2/luks2_reencrypt.c:3621
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "Неисправна величина уређаја је затражена у параметрима поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:3720
+#: lib/luks2/luks2_reencrypt.c:3723
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Поновно шифровање је у току. Не могу да обавим опоравак."
 
-#: lib/luks2/luks2_reencrypt.c:3741
+#: lib/luks2/luks2_reencrypt.c:3744
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Опоравак ЛУКС2 поновног шифровања није успело."
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
 msgid "Failed to initialize reencryption device stack."
 msgstr "Нисам успео да покренем поновно шифровање спремника уређаја."
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3910
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "ЛУКС2 поновно шифровање је већ покренуто у метаподацима."
 
-#: lib/luks2/luks2_reencrypt.c:3915
+#: lib/luks2/luks2_reencrypt.c:3918
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Нисам успео да покренем ЛУКС2 поновно шифровање у метаподацима."
 
-#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
-#: lib/luks2/luks2_reencrypt.c:4030
+#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
+#: lib/luks2/luks2_reencrypt.c:4033
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Поновно шифровање није подржано за DAX (сталне меморије) уређаје."
 
-#: lib/luks2/luks2_reencrypt.c:4059
+#: lib/luks2/luks2_reencrypt.c:4062
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Нисам успео да поставим подеоке уређаја за следећу врућу зону поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:4112
+#: lib/luks2/luks2_reencrypt.c:4115
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Нисам успео да запишем метаподатаке гипкости поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:4119
+#: lib/luks2/luks2_reencrypt.c:4122
 msgid "Decryption failed."
 msgstr "Дешифровање није успело."
 
-#: lib/luks2/luks2_reencrypt.c:4124
+#: lib/luks2/luks2_reencrypt.c:4127
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Нисам успео да запишем област вруће зоне са почетком на %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4129
+#: lib/luks2/luks2_reencrypt.c:4132
 msgid "Failed to sync data."
 msgstr "Нисам успео да усагласим податке."
 
-#: lib/luks2/luks2_reencrypt.c:4137
+#: lib/luks2/luks2_reencrypt.c:4140
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Нисам успео да освежим метаподатке након тренутно завршеног поновног шифровања вруће зоне."
 
-#: lib/luks2/luks2_reencrypt.c:4226
+#: lib/luks2/luks2_reencrypt.c:4229
 msgid "Failed to write LUKS2 metadata."
 msgstr "Нисам успео да запишем ЛУКС2 метаподатке."
 
-#: lib/luks2/luks2_reencrypt.c:4249
+#: lib/luks2/luks2_reencrypt.c:4252
 msgid "Failed to wipe unused data device area."
 msgstr "Нисам успео да обришем област уређаја података."
 
-#: lib/luks2/luks2_reencrypt.c:4255
+#: lib/luks2/luks2_reencrypt.c:4258
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Нисам успео да уклоним некоришћени (несвезани) утор кључа %d."
 
-#: lib/luks2/luks2_reencrypt.c:4265
+#: lib/luks2/luks2_reencrypt.c:4268
 msgid "Failed to remove reencryption keyslot."
 msgstr "Нисам успео да уклоним утор кључа поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:4275
+#: lib/luks2/luks2_reencrypt.c:4278
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Кобна грешка приликом поновног шифровања комада који почиње на %<PRIu64>, %<PRIu64> подеока дуг."
 
-#: lib/luks2/luks2_reencrypt.c:4279
+#: lib/luks2/luks2_reencrypt.c:4282
 msgid "Online reencryption failed."
 msgstr "Поновно шифровање на мрежи није успело."
 
-#: lib/luks2/luks2_reencrypt.c:4284
+#: lib/luks2/luks2_reencrypt.c:4287
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Не наставља са уређајем осим ако није ручно замењен метом грешке."
 
-#: lib/luks2/luks2_reencrypt.c:4336
+#: lib/luks2/luks2_reencrypt.c:4339
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Не могу да наставим са поновним шифровањем. Неочекивано стање поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:4342
+#: lib/luks2/luks2_reencrypt.c:4345
 msgid "Missing or invalid reencrypt context."
 msgstr "Недостаје или неисправан контекст поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
+#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
 msgid "Failed to update reencryption context."
 msgstr "Нисам успео да освежим контекст поновног шифровања."
 
@@ -2148,7 +2148,7 @@ msgstr "Параметри шифровања утора кључа се мог
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Параметри шифровања утора кључа нису сагласни са шифровањем LUKS2 утора кључа."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
+#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2176,7 +2176,7 @@ msgstr "УПОЗОРЕЊЕ: Параметар „--hash“ је занемар
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "УПОЗОРЕЊЕ: Опција „--keyfile-size“ је занемарена, величина читања је иста као величина кључа шифровања.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2187,9 +2187,9 @@ msgstr "Скенирање ид-а блока није успело за „%s
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Открих потпис(е) уређаја на „%s“. Даље настављање може оштетити постојеће податке."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
-#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
-#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2238,7 +2238,7 @@ msgstr ""
 "који омогућава приступ шифрованој партицији без лозинке.\n"
 "Овај избачај треба увек бити смештен шифрован на безбедном месту."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2257,14 +2257,14 @@ msgstr "Уређај „%s“ није исправан FVAULT2 уређај."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Не могу да одредим величину кључа волумена за FVAULT2, користите „--key-size“ опцију."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Уређај „%s“ је још увек активан и заказан за одложено уклањање.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
-#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
-#: src/cryptsetup.c:3264
+#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
+#: src/cryptsetup.c:3262
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Нисам успео да поставим спољну путању скупина „%s“."
@@ -2273,59 +2273,59 @@ msgstr "Нисам успео да поставим спољну путању с
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Сразмеравање активног уређаја захтева кључ волумена у привеску кључева али је постављена „--disable-keyring“ опција."
 
-#: src/cryptsetup.c:1059
+#: src/cryptsetup.c:1057
 msgid "Benchmark interrupted."
 msgstr "Оцењивање је прекинуто."
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1078
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "„PBKDF2-%-9s“     Н/Д\n"
 
-#: src/cryptsetup.c:1082
+#: src/cryptsetup.c:1080
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "„PBKDF2-%-9s“ %7u понављања у секунди за %zu-битни кључ\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1094
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s Н/Д\n"
 
-#: src/cryptsetup.c:1098
+#: src/cryptsetup.c:1096
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u понављања, %5u меморије, %1u паралелних нити (процесора) за %zu-битни кључ (захтева се %u ms време)\n"
 
-#: src/cryptsetup.c:1122
+#: src/cryptsetup.c:1120
 msgid "Result of benchmark is not reliable."
 msgstr "Резултат оцењивања није поуздан."
 
-#: src/cryptsetup.c:1172
+#: src/cryptsetup.c:1170
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Пробе су приближне користећи само меморију (без УИ смештаја).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1197
+#: src/cryptsetup.c:1195
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s  Алгоритам |     Кључ |      Шифровање |      Дешифровање\n"
 
-#: src/cryptsetup.c:1205
+#: src/cryptsetup.c:1203
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Шифрер „%s“ (са %i битним кључем) није доступан."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1222
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Алгоритам |      Кључ |       Шифровање |      Дешифровање\n"
 
-#: src/cryptsetup.c:1235
+#: src/cryptsetup.c:1233
 msgid "N/A"
 msgstr "Недоступно"
 
-#: src/cryptsetup.c:1260
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2333,27 +2333,27 @@ msgstr ""
 "Откривени су незаштићени ЛУКС2 метаподаци поновног шифровања. Проверите да ли је радња поновног шифровања пожељна (видите „luksDump“ излаз)\n"
 "и наставите (са надоградњом метаподатака само ако знате да је радња безопасна."
 
-#: src/cryptsetup.c:1266
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Унесите пропусну реч да заштитите и надоградите метаподатке поновног шифровања: "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Да наставим са опоравком ЛУКС2 поновног шифровања?"
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Унесите пропусну реч да проверите упит метаподатака поновног шифровања: "
 
-#: src/cryptsetup.c:1321
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Унесите пропусну реч за опоравак поновног шифровања: "
 
-#: src/cryptsetup.c:1383
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Стварно да покушам да поправим заглавље ЛУКС уређаја?"
 
-#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2361,7 +2361,7 @@ msgstr ""
 "\n"
 "Брисање је прекинуто."
 
-#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2369,167 +2369,167 @@ msgstr ""
 "Бришем уређај да бих започео суму провере целовитости.\n"
 "Можете прекинути ово притиском на „CTRL+c“ (остатак необрисаног уређаја садржаће неисправну суму провере).\n"
 
-#: src/cryptsetup.c:1438 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Не могу да деактивирам привремени уређај „%s“."
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "OPAL hw-only шифровање не подржава „--cipher“ и „--key-size“, опције су занемарене."
 
-#: src/cryptsetup.c:1499
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Опција целовитости се може користити само за ЛУКС2 запис."
 
-#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Неподржана опција величине ЛУКС2 метаподатака."
 
-#: src/cryptsetup.c:1509
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL је подржано само за LUKS2 запис."
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Унутарње хардверске ознаке су подржане само за LUKS2 запис."
 
-#: src/cryptsetup.c:1523
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Датотека заглавља не постоји, да ли желите да је направите?"
 
-#: src/cryptsetup.c:1531
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Не могу да направим датотеку заглавља „%s“."
 
-#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Није откривен познат образац одреднице целовитости."
 
-#: src/cryptsetup.c:1559
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Не могу да користим наведену величину кључа целовитости."
 
-#: src/cryptsetup.c:1577
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Не могу да користим „%s“ као заглавље на-диску."
 
-#: src/cryptsetup.c:1606 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Ово ће неповратно да препише податке на „%s“."
 
-#: src/cryptsetup.c:1643
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Лозинка OPAL админа не може бити празна."
 
-#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
-#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Нисам успео да подесим „pbkdf“ параметре."
 
-#: src/cryptsetup.c:1788
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Смањени померај података је допуштен само за откачена ЛУКС заглавља."
 
-#: src/cryptsetup.c:1795
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Садржалац ЛУКС датотеке „%s“ је премали за активирање, није преостао простор за податке."
 
-#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Не могу да одредим величину кључа за ЛУКС без утора кључа, користите „--key-size“ опцију."
 
-#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Уређај захтева два кључа волумена."
 
-#: src/cryptsetup.c:1891
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Неки наведени параметри активирања су занемарени са „OPAL hw-only“ шифровањем."
 
-#: src/cryptsetup.c:1896
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Уређај је активиран али не могу да учиним заставице трајним."
 
-#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Утор кључа „%d“ је изабран за брисање."
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Ово је последњи утор кључа. Уређај ће постати неупотребљив након чишћења овог кључа."
 
-#: src/cryptsetup.c:1989
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Унесите неку преосталу пропусну реч: "
 
-#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Радња је прекинута, утор кључа НИЈЕ обрисан.\n"
 
-#: src/cryptsetup.c:2026
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Унесите пропусну реч за брисање: "
 
-#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
+#: src/cryptsetup.c:3253
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Уређај „%s“ није исправан ЛУКС2 уређај."
 
-#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Унесите нову пропусну реч за утор кључа: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Унесите ПИН скупине: "
 
-#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Унесите %d ПИН скупине: "
 
-#: src/cryptsetup.c:2210
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "УПОЗОРЕЊЕ: Параметар „--key-slot“ се користи за нови број утора кључа.\n"
 
-#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Унесите неку постојећу пропусну реч: "
 
-#: src/cryptsetup.c:2383
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Унесите пропусну реч за мењање: "
 
-#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Унесите нову пропусну реч: "
 
-#: src/cryptsetup.c:2449
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Унесите пропусну реч за утор кључа за претварање: "
 
-#: src/cryptsetup.c:2473
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Подржан је само један аргумент уређаја за радњу „isLuks“."
 
-#: src/cryptsetup.c:2578
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Утор кључа %d не садржи несвезани кључ."
 
-#: src/cryptsetup.c:2583
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2537,52 +2537,52 @@ msgstr ""
 "Избачај заглавља са кључем волумена је осетљив податак\n"
 "Овај избачај треба увек бити смештен шифрован на безбедном месту."
 
-#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "„%s“ није назив активног „%s“ уређаја."
 
-#: src/cryptsetup.c:2709
+#: src/cryptsetup.c:2707
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "„%s“ није назив активног ЛУКС уређаја или недостаје заглавље."
 
-#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
+#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
 msgid "Option --header-backup-file is required."
 msgstr "Захтевана је опција „--header-backup-file“."
 
-#: src/cryptsetup.c:2836
+#: src/cryptsetup.c:2834
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "„%s“ није уређај управљан криптоподешавањем."
 
-#: src/cryptsetup.c:2847
+#: src/cryptsetup.c:2845
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Освежавање није подржано за врсту уређаја „%s“"
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2895
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Непозната врста уређаја метаподатака „%s“."
 
-#: src/cryptsetup.c:2899
+#: src/cryptsetup.c:2897
 msgid "Command requires device and mapped name as arguments."
 msgstr "Наредба захтева уређај и мапирани назив као аргумент."
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL PSID: "
 msgstr "Унесите OPAL ПСИД: "
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2915
 msgid "Enter OPAL Admin password: "
 msgstr "Унесите лозинку OPAL админа: "
 
-#: src/cryptsetup.c:2925
+#: src/cryptsetup.c:2923
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "УПОЗОРЕЊЕ: ЧИТАВ диск биће враћен на фабричка подешавања и сви подаци биће изгубљени! Да наставим?"
 
-#: src/cryptsetup.c:2968
+#: src/cryptsetup.c:2966
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2591,363 +2591,363 @@ msgstr ""
 "Ова радња ће обрисати све уторе кључева на уређају „%s“.\n"
 "Уређај ће постати неупотребљив након ове радње."
 
-#: src/cryptsetup.c:2975
+#: src/cryptsetup.c:2973
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Радња је прекинута, утори кључева НИСУ обрисани.\n"
 
-#: src/cryptsetup.c:3014
+#: src/cryptsetup.c:3012
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Неисправна ЛУКС врста, само „luks1“ и „luks2“ су подржане."
 
-#: src/cryptsetup.c:3030
+#: src/cryptsetup.c:3028
 #, c-format
 msgid "Device is already %s type."
 msgstr "Уређај је већ „%s“ врсте."
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3035
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Ова радња ће претворити „%s“ у „%s“ запис.\n"
 
-#: src/cryptsetup.c:3040
+#: src/cryptsetup.c:3038
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Радња је прекинута, уређај НИЈЕ претворен.\n"
 
-#: src/cryptsetup.c:3080
+#: src/cryptsetup.c:3078
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Недостаје опција „--priority“, „--label“ или „--subsystem“."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Скупина „%d“ није исправна."
 
-#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
+#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
 #, c-format
 msgid "Token %d in use."
 msgstr "Скупина „%d“ је у употреби."
 
-#: src/cryptsetup.c:3129
+#: src/cryptsetup.c:3127
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Нисам успео да додам „luks2-keyring“ скупину „%d“."
 
-#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
+#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Нисам успео да доделим скупину „%d“ утору кључа %d."
 
-#: src/cryptsetup.c:3157
+#: src/cryptsetup.c:3155
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Скупина „%d“ није у употреби."
 
-#: src/cryptsetup.c:3194
+#: src/cryptsetup.c:3192
 msgid "Failed to import token from file."
 msgstr "Нисам успео да увезем скупину из датотеке."
 
-#: src/cryptsetup.c:3219
+#: src/cryptsetup.c:3217
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Нисам успео да добавим скупину „%d“ за извоз."
 
-#: src/cryptsetup.c:3232
+#: src/cryptsetup.c:3230
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Скупина „%d“ није додељена утору кључа %d."
 
-#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
+#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Нисам успео да поништим доделу скупине „%d“ из утора кључа %d."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3298
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Опција „--tcrypt-hidden“, „--tcrypt-system“ или „--tcrypt-backup“ је подржана само за ТКРИПТ уређај."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3301
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Опција „--veracrypt“ или „--disable-veracrypt“ је подржана само за ТКРИПТ врсту уређаја."
 
-#: src/cryptsetup.c:3306
+#: src/cryptsetup.c:3304
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Опција „--veracrypt-pim“ је подржана само за „VeraCrypt“ сагласне уређаје."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3308
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Опција „--veracrypt-query-pim“ је подржана само за „VeraCrypt“ сагласне уређаје."
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3310
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Опције „--veracrypt-pim“ и „--veracrypt-query-pim“ се узајамно искључују."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3319
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Опција „--persistent“ није допуштена са опцијом „--test-passphrase“."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3322
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Опције „--refresh“ и „--test-passphrase“ се узајамно искључују."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3325
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Опција „--shared“ је допуштена само за отварање обичног уређаја."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3328
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Опција „--skip“ је подржана само за отварање обичних и упетљаних уређаја."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3331
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Опција „--offset“ са отвореном радњом је подржана само за обичне и упетљане уређаје."
 
-#: src/cryptsetup.c:3336
+#: src/cryptsetup.c:3334
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Опција „--tcrypt-hidden“ не може бити обједињена са „--allow-discards“."
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3338
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Опција величине одељка са отвореном радњом је подржана само за обичне уређаје."
 
-#: src/cryptsetup.c:3344
+#: src/cryptsetup.c:3342
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Опција великих IV одељака је подржана само за отварање обичних уређаја са величином одељка већом од 512 бајта."
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3347
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Опција „--test-passphrase“ је допуштена само за отварање LUKS, TCRYPT, BITLK и FVAULT2 уређаја."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
+#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Опције „--device-size“ и „--size“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3353
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Опција „--unbound“ је допуштена само за отварање лукс уређаја."
 
-#: src/cryptsetup.c:3358
+#: src/cryptsetup.c:3356
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Опција „--unbound“ се не може користити без „--test-passphrase“."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3360
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Опција „--volume-key-keyring“ не може бити обједињена са „--hash“ или „--volume-key-file“."
 
-#: src/cryptsetup.c:3365
+#: src/cryptsetup.c:3363
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Обе „--volume-key-file“ опције се морају упарити са одговарајућим „--key-size“ опцијама."
 
-#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Опције „--cancel-deferred“ и „--deferred“ се не могу користити у исто време."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3388
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Опција „--active-name“ се може поставити само за ЛУКС2 уређај."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3391
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Опције „--active-name“ и „--force-offline-reencrypt“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3394
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Опције „--new-volume-key-file“ и „--keep-key“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3399
+#: src/cryptsetup.c:3397
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Опције „--new-volume-key-keyring“ и „--keep-key“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
+#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
 msgid "Keyslot specification is required."
 msgstr "Одредба утора кључа је потребна."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3413
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Опције „--align-payload“ и „--offset“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3416
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Опција „--integrity-no-wipe“ се може користити само за радњу форматирања са проширењем целовитости."
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3419
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Дозвољена је само једна опција „--use-[u]random“."
 
-#: src/cryptsetup.c:3429
+#: src/cryptsetup.c:3427
 msgid "Key size is required with --unbound option."
 msgstr "Величина кључа је потребна са опцијом „--unbound“."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3447
 msgid "Invalid token action."
 msgstr "Неисправна радња скупине."
 
-#: src/cryptsetup.c:3452
+#: src/cryptsetup.c:3450
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "„--key-description“ параметар је обавезан за радњу додавања скупине."
 
-#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
+#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Радња захтева нарочиту скупину. Користите параметар „--token-id“."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3458
 msgid "Option --unbound is valid only with token add action."
 msgstr "Опција „--unbound“ је исправна само са радњом додавања скупине."
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3460
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Опције „--key-slot“ и „--unbound“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3465
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Радња захтева нарочити утор кључа. Користите параметар „--key-slot“."
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3481
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<уређај> [--type <врста>] [<назив>]"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "отвара уређај као <назив>"
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<назив>"
 
-#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "затвара уређај (уклања мапирање)"
 
-#: src/cryptsetup.c:3485 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "мења величину радног уређаја"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3484
 msgid "show device status"
 msgstr "показује стање уређаја"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <шифрер>]"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3485
 msgid "benchmark cipher"
 msgstr "шифрер оцењивања"
 
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
-#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
+#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
+#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
+#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
+#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
 msgid "<device>"
 msgstr "<уређај>"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3486
 msgid "try to repair on-disk metadata"
 msgstr "покушава да поправи метаподатке на-диску"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3487
 msgid "reencrypt LUKS2 device"
 msgstr "поново шифрујем ЛУКС2 уређај"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3488
 msgid "erase all keyslots (remove encryption key)"
 msgstr "брише све уторе кључева (уклања кључ шифровања)"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3489
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "претвара ЛУКС из/у ЛУКС2 запис"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490
 msgid "set permanent configuration options for LUKS2"
 msgstr "поставља трајне опције подешавања за ЛУКС2"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
 msgid "<device> [<new key file>]"
 msgstr "<уређај> [<нова датотека кључа>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3491
 msgid "formats a LUKS device"
 msgstr "форматира ЛУКС уређај"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3492
 msgid "add key to LUKS device"
 msgstr "додаје кључ у ЛУКС уређај"
 
-#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
 msgid "<device> [<key file>]"
 msgstr "<уређај> [<датотека кључа>]"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3493
 msgid "removes supplied key or key file from LUKS device"
 msgstr "уклања достављени кључ или датотеку кључа из ЛУКС уређаја"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3494
 msgid "changes supplied key or key file of LUKS device"
 msgstr "мења достављени кључ или датотеку кључа ЛУКС уређаја"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3495
 msgid "converts a key to new pbkdf parameters"
 msgstr "претвара кључ у нове „pbkdf“ параметре"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "<device> <key slot>"
 msgstr "<уређај> <утор кључа>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3496
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "брише кључ са бројем <утор кључа> са ЛУКС уређаја"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3497
 msgid "print UUID of LUKS device"
 msgstr "исписује УЈИБ ЛУКС уређаја"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3498
 msgid "tests <device> for LUKS partition header"
 msgstr "испробава <уређај> за заглављем ЛУКС партиције"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3499
 msgid "dump LUKS partition information"
 msgstr "исписује податке ЛУКС партиције"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3500
 msgid "dump TCRYPT device information"
 msgstr "исписује податке ТКРИПТ уређаја"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3501
 msgid "dump BITLK device information"
 msgstr "исписује податке „BITLK“ уређаја"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3502
 msgid "dump FVAULT2 device information"
 msgstr "исписује податке „FVAULT2“ уређаја"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3503
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Обуставља ЛУКС уређај и брише кључ (сви УИ су замрзнути)"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3504
 msgid "Resume suspended LUKS device"
 msgstr "Наставља са обустављеним ЛУКС уређајем"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3505
 msgid "Backup LUKS device header and keyslots"
 msgstr "Прави резерву заглавља „LUKS“ уређаја и утора кључева"
 
-#: src/cryptsetup.c:3508
+#: src/cryptsetup.c:3506
 msgid "Restore LUKS device header and keyslots"
 msgstr "Враћа заглавље „LUKS“ уређаја и уторе кључева"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "<add|remove|import|export> <device>"
 msgstr "<додај|уклони|увези|извези> <уређај>"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3507
 msgid "Manipulate LUKS2 tokens"
 msgstr "Управља ЛУКС2 скупинама"
 
-#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2955,7 +2955,7 @@ msgstr ""
 "\n"
 "<радња> је једна од следећих:\n"
 
-#: src/cryptsetup.c:3534
+#: src/cryptsetup.c:3532
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2967,7 +2967,7 @@ msgstr ""
 "\tотвори: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tзатвори: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3538
+#: src/cryptsetup.c:3536
 #, c-format
 msgid ""
 "\n"
@@ -2982,7 +2982,7 @@ msgstr ""
 "<утор кључа> је број ЛУКС утора кључа за мењање\n"
 "<датотека кључа> изборна датотека кључа за нови кључ за радњу „luksAddKey“\n"
 
-#: src/cryptsetup.c:3545
+#: src/cryptsetup.c:3543
 #, c-format
 msgid ""
 "\n"
@@ -2991,7 +2991,7 @@ msgstr ""
 "\n"
 "Основни уграђени запис метаподатака је „%s“ (за „luksFormat“ радњу).\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3548
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -2999,12 +2999,12 @@ msgstr ""
 "\n"
 "Подршка прикључка спољне скупине за LUKS2 је укључена.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3549
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Путања прикључка спољне скупине за „LUKS2“: %s.\n"
 
-#: src/cryptsetup.c:3553
+#: src/cryptsetup.c:3551
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3012,7 +3012,7 @@ msgstr ""
 "\n"
 "Подршка прикључка спољне скупине за LUKS2 је искључена.\n"
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3555
 #, c-format
 msgid ""
 "\n"
@@ -3029,7 +3029,7 @@ msgstr ""
 "Основни „PBKDF“ за ЛУКС2: %s\n"
 "\tВреме понављања: %d, Захтевана меморија: %dkB, Паралелне нити: %d\n"
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3566
 #, c-format
 msgid ""
 "\n"
@@ -3044,122 +3044,122 @@ msgstr ""
 "\tобично: %s, Кључ: %d бита, Хеширање лозинке: %s\n"
 "\tЛУКС: %s, Кључ: %d бита, Хеширање ЛУКС заглавља: %s, РНГ: %s\n"
 
-#: src/cryptsetup.c:3577
+#: src/cryptsetup.c:3575
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tЛУКС: Основна величина кључа са „XTS“ режимом (два унутрашња кључа) биће удвостручена.\n"
 
-#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: захтева „%s“ као аргумент"
 
-#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Утор кључа није исправан."
 
-#: src/cryptsetup.c:3663
+#: src/cryptsetup.c:3661
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Величина уређаја мора бити умножак одељка од 512 бајта."
 
-#: src/cryptsetup.c:3668
+#: src/cryptsetup.c:3666
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Неисправна одредба највеће величине вруће зоне поновног шифровања."
 
-#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
+#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Величина кључа мора бити умножак од 8 бита"
 
-#: src/cryptsetup.c:3689
+#: src/cryptsetup.c:3687
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Могу се доставити одредбе величине највише 2 кључа."
 
-#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
+#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Највише %d одредбе кључа волумена се могу доставити."
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3739
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Највише %d одредбе везе привеска кључева се могу доставити."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3748
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Највећа величина смањења уређаја је 1 GiB."
 
-#: src/cryptsetup.c:3753
+#: src/cryptsetup.c:3751
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Величина смањивања мора бити умножак одељка од 512 бајта."
 
-#: src/cryptsetup.c:3770
+#: src/cryptsetup.c:3768
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Опција „--priority“ може бити само „ignore/normal/prefer“."
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Приказује ову поруку помоћи"
 
-#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Прикажите кратку поруку о коришћењу"
 
-#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Исписује издање пакета"
 
-#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Опције помоћи:"
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[ОПЦИЈА...] <радња> <посебност-радње>"
 
-#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Недостаје аргумент <радња>."
 
-#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Непозната радња."
 
-#: src/cryptsetup.c:3931
+#: src/cryptsetup.c:3929
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Опција „--key-file“ има првенство над наведеним аргументом датотеке кључа."
 
-#: src/cryptsetup.c:3937
+#: src/cryptsetup.c:3935
 msgid "Only one --key-file argument is allowed."
 msgstr "Дозвољен је само један аргумент „--key-file“."
 
-#: src/cryptsetup.c:3942
+#: src/cryptsetup.c:3940
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Функција произилажења кључа заснованог на пропусној речи (PBKDF) може бити само „pbkdf2“ или „argon2i/argon2id“."
 
-#: src/cryptsetup.c:3947
+#: src/cryptsetup.c:3945
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "„PBKDF“ присиљена понављања се не могу комбиновати са опцијом времена понављања."
 
-#: src/cryptsetup.c:3952
+#: src/cryptsetup.c:3950
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Не могу да свежем кључ волумена на привезак кључева када је привезак искључен."
 
-#: src/cryptsetup.c:3957
+#: src/cryptsetup.c:3955
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Не могу да користим опис кључа привеска када је привезак искључен."
 
-#: src/cryptsetup.c:3962
+#: src/cryptsetup.c:3960
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Унутарња целовитост се мора користити заједно са опцијом „--integrity“."
 
-#: src/cryptsetup.c:3973
+#: src/cryptsetup.c:3971
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Опције „--keyslot-cipher“ и „--keyslot-key-size“ се морају користити заједно."
 
-#: src/cryptsetup.c:3981
+#: src/cryptsetup.c:3979
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Није предузета никаква радња. Призвана опцијом „--test-args“.\n"
 
-#: src/cryptsetup.c:3994
+#: src/cryptsetup.c:3992
 msgid "Cannot disable metadata locking."
 msgstr "Не могу да искључим закључавање метаподатака."
 
@@ -3224,7 +3224,7 @@ msgstr "Наредба захтева „<root_hash>“ или „--root-hash-fi
 msgid "<data_device> <hash_device>"
 msgstr "<уређај_података> <уређај_хеша>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:485 src/integritysetup.c:553
 msgid "format device"
 msgstr "форматира уређај"
 
@@ -3240,7 +3240,7 @@ msgstr "проверава уређај"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<уређај_података> <назив> <уређај_хеша> [<хеш_корена>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:489 src/integritysetup.c:556
 msgid "show active device status"
 msgstr "показује стање радног уређаја"
 
@@ -3248,7 +3248,7 @@ msgstr "показује стање радног уређаја"
 msgid "<hash_device>"
 msgstr "<уређај_хеша>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:490 src/integritysetup.c:557
 msgid "show on-disk information"
 msgstr "приказује податке на-диску"
 
@@ -3308,24 +3308,24 @@ msgstr "Форматирано ознаком величине %u%s, унутр
 msgid " (inline hw tags)"
 msgstr " (унутарње hw ознаке)"
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:303
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Постављање заставице поновног рачунањ није подржано, можете узети у обзир коришћење опције „--wipe“."
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:380 src/integritysetup.c:540
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Уређај „%s“ није исправан „INTEGRITY“ уређај."
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:553 src/integritysetup.c:557
 msgid "<integrity_device>"
 msgstr "<уређај_целовитости>"
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:554
 msgid "<integrity_device> <name>"
 msgstr "<уређај_целовитости> <назив>"
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:577
 #, c-format
 msgid ""
 "\n"
@@ -3336,7 +3336,7 @@ msgstr ""
 "<назив> јесте уређај за стварање под „%s“\n"
 "<уређај_целовитости> јесте уређај који садржи податке са ознакама целовитости\n"
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:582
 #, c-format
 msgid ""
 "\n"
@@ -3349,48 +3349,48 @@ msgstr ""
 "\tАлгоритам провере суме: %s\n"
 "        Највећа величина датотеке кључа: %dkB\n"
 
-#: src/integritysetup.c:636
+#: src/integritysetup.c:639
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Неисправна величина „--%s“. Највећа је %u бајта."
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:742
 msgid "Both key file and key size options must be specified."
 msgstr "Мора бити наведена и опција датотеке кључа и опција величине кључа."
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:746
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Мора бити наведена и опција датотеке кључа целовитости журнала и опција величине кључа."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:749
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Алгоритам целовитости журнала мора бити наведен ако се користи кључ целовитости журнала."
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:753
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Мора бити наведена и опција датотеке кључа шифровања журнала и опција величине кључа."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:756
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Алгоритам шифровања журнала мора бити наведен ако се користи кључ шифровања журнала."
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:760
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Опције режима опоравка и битмапе се узајамно искључују."
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:767
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Опције журнала се не могу користити у режиму битмапе."
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:772
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Опције битмапе се могу користити само у режиму битмапе."
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:778
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Унутарњи режим се не може комбиновати са опцијама „journal“ или „bitmap“."
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:782
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Унутарњи режим се не може комбиновати са одвојеним уређајем података."
 
@@ -4347,6 +4347,10 @@ msgstr "Метода потврђивања идентитета јавног к
 msgid "Public key authentication error: "
 msgstr "Грешка потврђивања идентитета јавног кључа: "
 
+#, c-format
+#~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
+#~ msgstr "Нисам успео да прочитам или да потврдим умножак #%d „BITLK FVE“ метаподатака из „%s“."
+
 #~ msgid "Activation of BITLK device with clear key protection is not supported."
 #~ msgstr "Активирање BITLK уређаја са јасном заштитом тастера није подржано."
 

From 004e8706858f675f575a44b0130d0e1e13a00145 Mon Sep 17 00:00:00 2001
From: Yuri Chornoivan <yurchor@ukr.net>
Date: Sat, 4 Jul 2026 18:12:56 +0200
Subject: [PATCH 168/244] po: update uk.po (from translationproject.org)

---
 po/uk.po | 1019 +++++++++++++++++++++++++++---------------------------
 1 file changed, 510 insertions(+), 509 deletions(-)

diff --git a/po/uk.po b/po/uk.po
index 59e284406..a9fe8f905 100644
--- a/po/uk.po
+++ b/po/uk.po
@@ -5,10 +5,10 @@
 # Yuri Chornoivan <yurchor@ukr.net>, 2012-2023, 2024, 2025, 2026.
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.5-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-03-30 14:18+0200\n"
-"PO-Revision-Date: 2026-03-30 18:18+0300\n"
+"POT-Creation-Date: 2026-06-29 21:30+0200\n"
+"PO-Revision-Date: 2026-06-30 13:31+0300\n"
 "Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
 "Language-Team: Ukrainian <trans-uk@lists.fedoraproject.org>\n"
 "Language: uk\n"
@@ -78,7 +78,7 @@ msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Підтримки потрібного вам автоматичного повторного обчислення міток цілісності не передбачено."
 
 #: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2781
+#: lib/luks2/luks2_json_metadata.c:2799
 msgid "Discard/TRIM is not supported."
 msgstr "Підтримки відкидання або обрізання не передбачено."
 
@@ -124,665 +124,665 @@ msgstr "Надійшов запит щодо невідомої якості п
 msgid "Error reading from RNG."
 msgstr "Помилка читання з генератора псевдовипадкових чисел."
 
-#: lib/setup.c:248
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "Підтримку OPAL у libcryptsetup вимкнено."
 
-#: lib/setup.c:250
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "Для пристрою %s або ядра не передбачено підтримки шифрування OPAL."
 
-#: lib/setup.c:266
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "Не вдалося ініціалізувати допоміжну програму шифрування генератора псевдовипадкових чисел."
 
-#: lib/setup.c:272
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "Не вдалося ініціалізувати допоміжну програму шифрування."
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Підтримки алгоритму хешування %s не передбачено."
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "Помилка під час обробки ключа (на основі хешу %s)."
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Не вдалося визначити тип пристрою. Несумісна дія з активації пристрою?"
 
-#: lib/setup.c:395 lib/setup.c:4160
+#: lib/setup.c:398 lib/setup.c:4177
 msgid "This operation is supported only for LUKS device."
 msgstr "Підтримку цієї дії передбачено лише для пристроїв LUKS."
 
-#: lib/setup.c:432
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "Підтримку цієї дії передбачено лише для пристроїв LUKS2."
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "Заповнено всі слоти ключів."
 
-#: lib/setup.c:500
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "Слот ключа %d є некоректним, будь ласка, виберіть число від 0 до %d."
 
-#: lib/setup.c:506
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "Слот ключа %d заповнено, будь ласка, виберіть інший."
 
-#: lib/setup.c:531 lib/setup.c:3875
+#: lib/setup.c:534 lib/setup.c:3878
 msgid "Device size is not aligned to device logical block size."
 msgstr "Розмір пристрою не вирівняно за розміром логічного блоку пристрою."
 
-#: lib/setup.c:628
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "Виявлено заголовок, але об’єм пристрою %s є надто малим."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
-#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Підтримки цієї дії для цього типу пристроїв не передбачено."
 
-#: lib/setup.c:674
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "Виконуємо заборонену дію із повторного шифрування."
 
-#: lib/setup.c:806
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Не вдалося відкотити метадані LUKS2 у пам'яті."
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
-#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
-#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
-#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
+#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
+#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
+#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Пристрій %s не є коректним пристроєм LUKS."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Непідтримувана версія LUKS, %d."
 
-#: lib/setup.c:1270
+#: lib/setup.c:1273
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Не виявлено жодного відомого зразка специфікації шифрування для активного пристрою %s."
 
-#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5816
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
 #, c-format
 msgid "Device %s is not active."
 msgstr "Пристрій %s є неактивним."
 
-#: lib/setup.c:1532
+#: lib/setup.c:1535
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Зник основний пристрій для пристрою для шифрування %s."
 
-#: lib/setup.c:1614
+#: lib/setup.c:1617
 msgid "Invalid plain crypt parameters."
 msgstr "Некоректні параметри звичайного шифрування."
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1622 lib/setup.c:2672
 msgid "Invalid key size."
 msgstr "Некоректний розмір ключа."
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
 msgid "UUID is not supported for this crypt type."
 msgstr "Підтримки UUID для цього типу шифрування не передбачено."
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Підтримки пристрою від'єднаних метаданих для цього типу шифрування не передбачено."
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
 msgid "Unsupported encryption sector size."
 msgstr "Непідтримуваний розмір сектора шифрування."
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
 msgid "Device size is not aligned to requested sector size."
 msgstr "Розмір пристрою не вирівняно за вказаним розміром сектора."
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
 msgid "Can't format LUKS without device."
 msgstr "Форматування LUKS без пристрою неможливе."
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1707 lib/setup.c:1959
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Зонований пристрій %s не можна використовувати для заголовка LUKS."
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Потрібне вам вирівнювання даних є несумісним із відступом у даних."
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1754 lib/setup.c:1984
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "УВАГА: пристрій DAX може пошкодити дані, оскільки для нього не гарантовано атомарні оновлення секторів.\n"
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Не можна витирати заголовок на пристрої %s."
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1805 lib/setup.c:2164
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Пристрій %s є надто малим для активації, на ньому не лишиться місця для даних.\n"
 
-#: lib/setup.c:1843
+#: lib/setup.c:1846
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Ключ тому є надто малим для шифрування із розширеннями цілісності."
 
-#: lib/setup.c:1847
+#: lib/setup.c:1850
 msgid "Integrity key size is too small."
 msgstr "Розмір ключа цілісності є надто малим."
 
-#: lib/setup.c:1856
+#: lib/setup.c:1859
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Шифрування  %s-%s (розмір ключа — %zd бітів) є недоступним."
 
-#: lib/setup.c:1897
+#: lib/setup.c:1900
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "Увага: спроба активувати пристрій завершиться невдало, у dm-crypt не передбачено підтримки для вказаного розміру сектора шифрування.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
-#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4497
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Об’єм пристрою %s є надто малим."
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Не можна форматувати пристрій %s, який перебуває у користуванні."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Не можна форматувати пристрій %s, недостатні права доступу."
 
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Не вдалося форматувати цілісність для пристрою %s."
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2151 lib/setup.c:2629
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Не вдалося форматувати пристрій %s."
 
-#: lib/setup.c:2191
+#: lib/setup.c:2194
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Не вдалося отримати параметри вирівнювання OPAL."
 
-#: lib/setup.c:2203
+#: lib/setup.c:2206
 msgid "Bogus OPAL logical block size."
 msgstr "Фіктивний розмір логічного блоку OPAL."
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Фіктивний розмір логічного блоку OPAL відрізняється від розміру блоку пристрою."
 
-#: lib/setup.c:2214
+#: lib/setup.c:2217
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Потрібний вам відступ даних є несумісним із розміром блоку OPAL."
 
-#: lib/setup.c:2221
+#: lib/setup.c:2224
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Потрібне вам вирівнювання даних є несумісним із вирівнюванням OPAL."
 
-#: lib/setup.c:2241
+#: lib/setup.c:2244
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Відступ даних не відповідає вимогам вирівнювання OPAL."
 
-#: lib/setup.c:2254
+#: lib/setup.c:2257
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Потрібне вам вирівнювання даних не відповідає вимогам щодо вирівнювання заблокованого діапазону."
 
-#: lib/setup.c:2468
+#: lib/setup.c:2471
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Компенсуємо розмір пристрою на %<PRIu64> секторів для вирівнювання його за рівнем розбиття вирівнювання OPAL."
 
-#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Не вдалося отримати блокування OPAL на пристрої %s."
 
-#: lib/setup.c:2538
+#: lib/setup.c:2541
 msgid "Incorrect OPAL Admin key."
 msgstr "Неправильний адміністративний ключ OPAL."
 
-#: lib/setup.c:2540
+#: lib/setup.c:2543
 msgid "Cannot setup OPAL segment."
 msgstr "Не вдалося налаштувати сегмент OPAL."
 
-#: lib/setup.c:2622
+#: lib/setup.c:2625
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Не вдалося форматувати пристрій %s, здається, пристрій OPAL тепер повністю захищено від запису."
 
-#: lib/setup.c:2624
+#: lib/setup.c:2627
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Можливо, це вада у мікропрограмі. Виконайте скидання PSID OPAL і повторно з'єднайте пристрій для відновлення."
 
-#: lib/setup.c:2644
+#: lib/setup.c:2647
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Помилка під час спроби скидання діапазону блокування %d на пристрої %s."
 
-#: lib/setup.c:2664
+#: lib/setup.c:2667
 msgid "Can't format LOOPAES without device."
 msgstr "Не можна форматувати LOOPAES без пристрою."
 
-#: lib/setup.c:2709
+#: lib/setup.c:2712
 msgid "Can't format VERITY without device."
 msgstr "Форматування VERITY без пристрою неможливе."
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2723 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Непідтримуваний тип хешування VERITY, %d."
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2729 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Непідтримуваний розмір блоку VERITY."
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2734 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Непідтримуваний відступ хешу VERITY."
 
-#: lib/setup.c:2736
+#: lib/setup.c:2739
 msgid "Unsupported VERITY FEC offset."
 msgstr "Непідтримуваний зсув FEC VERITY."
 
-#: lib/setup.c:2760
+#: lib/setup.c:2763
 msgid "Data area overlaps with hash area."
 msgstr "Область даних перекривається із областю хешу."
 
-#: lib/setup.c:2785
+#: lib/setup.c:2788
 msgid "Hash area overlaps with FEC area."
 msgstr "Область хешування перекриваються з областю FEC."
 
-#: lib/setup.c:2792
+#: lib/setup.c:2795
 msgid "Data area overlaps with FEC area."
 msgstr "Область даних перекривається із областю FEC."
 
-#: lib/setup.c:2884
+#: lib/setup.c:2887
 msgid "Integrity key size mismatch."
 msgstr "Невідповідність розмірів ключів цілісності."
 
-#: lib/setup.c:2935
+#: lib/setup.c:2938
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "Увага: бажаний розмір мітки у %d байтів відрізняється від розміру у результаті %s (%d байтів).\n"
 
-#: lib/setup.c:3048 lib/setup.c:3150
+#: lib/setup.c:3051 lib/setup.c:3153
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Надіслано запит щодо невідомого або непідтримуваного типу пристрою %s."
 
-#: lib/setup.c:3064
+#: lib/setup.c:3067
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "На пристрої %s не надається вбудованих полів даних цілісності."
 
-#: lib/setup.c:3070
+#: lib/setup.c:3073
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Розмір вбудованої мітки %<PRIu32> [байтів] перевищує %<PRIu32>, який надано пристроєм %s."
 
-#: lib/setup.c:3085
+#: lib/setup.c:3088
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Сектор має збігатися із апаратним сектором пристрою (%zu байтів)."
 
-#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Непідтримувані параметри на пристрої %s."
 
-#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Невідповідність параметрів на пристрої %s."
 
-#: lib/setup.c:3647
+#: lib/setup.c:3650
 msgid "Crypt devices mismatch."
 msgstr "Невідповідність пристроїв шифрування."
 
-#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Не вдалося перезавантажити пристрій %s."
 
-#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
-#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Не вдалося приспати пристрій %s."
 
-#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
-#: lib/luks2/luks2_reencrypt.c:4240
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Не вдалося відновити роботу пристрою %s."
 
-#: lib/setup.c:3717
+#: lib/setup.c:3720
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Критична помилка під час перезавантаження пристрої %s (над пристроєм %s)."
 
-#: lib/setup.c:3720 lib/setup.c:3722
+#: lib/setup.c:3723 lib/setup.c:3725
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Не вдалося перемкнути пристрій %s у режим dm-error."
 
-#: lib/setup.c:3765
+#: lib/setup.c:3768
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Неможливо змінити розмір пристрою LUKS2 зі статичним розміром."
 
-#: lib/setup.c:3770
+#: lib/setup.c:3773
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Підтримки зміни розмірів пристрою LUKS2 із захистом цілісності не передбачено."
 
-#: lib/setup.c:3816
+#: lib/setup.c:3819
 msgid "Cannot resize loop device."
 msgstr "Неможливо змінити розмір петльового пристрою."
 
-#: lib/setup.c:3860
+#: lib/setup.c:3863
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "УВАГА: уже вказано максимальний розмір або у ядрі не передбачено можливості зміни розміру.\n"
 
-#: lib/setup.c:3926
+#: lib/setup.c:3929
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Не вдалося змінити розмір, у ядрі не передбачено підтримки такої дії."
 
-#: lib/setup.c:3958
+#: lib/setup.c:3961
 msgid "Do you really want to change UUID of device?"
 msgstr "Ви справді хочете змінити UUID пристрою?"
 
-#: lib/setup.c:4050
+#: lib/setup.c:4053
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Файл резервної копії заголовка не містить сумісного із LUKS заголовка."
 
-#: lib/setup.c:4143
+#: lib/setup.c:4160
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Том %s не є активним."
 
-#: lib/setup.c:4198
+#: lib/setup.c:4215
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Том %s вже приспано."
 
-#: lib/setup.c:4224
+#: lib/setup.c:4241
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Підтримки присипляння для пристрою %s не передбачено."
 
-#: lib/setup.c:4226 lib/setup.c:4234
+#: lib/setup.c:4243 lib/setup.c:4251
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Помилка під час спроби приспати пристрій %s."
 
-#: lib/setup.c:4249
+#: lib/setup.c:4266
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Роботу пристрою %s було призупинено, але апаратний пристрій OPAL не може бути заблоковано."
 
-#: lib/setup.c:4280 lib/setup.c:4457
+#: lib/setup.c:4297 lib/setup.c:4491
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Підтримки дії з пробудження для пристрою %s не передбачено."
 
-#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Помилка під час спроби пробудити пристрій %s."
 
-#: lib/setup.c:4301
+#: lib/setup.c:4335
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Не вдалося скасувати прив'язку ключа тому до вказаного користувачем сховища ключів."
 
-#: lib/setup.c:4423 lib/setup.c:5603
+#: lib/setup.c:4457 lib/setup.c:5637
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Не вдалося пов'язати ключ тому із визначеним користувачем сховищем ключів."
 
-#: lib/setup.c:4522 src/cryptsetup.c:2721
+#: lib/setup.c:4556 src/cryptsetup.c:2720
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Том %s не приспано."
 
-#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
-#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
+#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
+#: src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr "Ключ тому не відповідає тому."
 
-#: lib/setup.c:4787
+#: lib/setup.c:4821
 msgid "Failed to swap new key slot."
 msgstr "Не вдалося зарезервувати новий слот ключа."
 
-#: lib/setup.c:4885
+#: lib/setup.c:4919
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Слот ключа %d є некоректним."
 
-#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
-#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
+#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
+#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Слот ключа %d не є активним."
 
-#: lib/setup.c:4910
+#: lib/setup.c:4944
 msgid "Device header overlaps with data area."
 msgstr "Заголовок пристрою перекривається із областю даних."
 
-#: lib/setup.c:5131
+#: lib/setup.c:5165
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Виконуємо повторне шифрування. Не можна активувати пристрій."
 
-#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3725
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Не вдалося отримати стан блокування для повторного шифрування."
 
-#: lib/setup.c:5155
+#: lib/setup.c:5189
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Не вдалося виконати відновлення даних повторного шифрування LUKS2 з використанням ключів тому."
 
-#: lib/setup.c:5291
+#: lib/setup.c:5325
 #, c-format
 msgid "Device %s already exists."
 msgstr "Пристрій %s вже існує."
 
-#: lib/setup.c:5298
+#: lib/setup.c:5332
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Неможливо скористатися пристроєм %s, некоректна назва або пристрій усе ще використовується."
 
-#: lib/setup.c:5310
+#: lib/setup.c:5344
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Ключі повторного шифрування тому не відповідають тому."
 
-#: lib/setup.c:5327
+#: lib/setup.c:5361
 msgid "Incorrect volume key specified for plain device."
 msgstr "Для пристрою зі звичайним шифруванням вказано помилковий ключ тому."
 
-#: lib/setup.c:5353 lib/setup.c:5414
+#: lib/setup.c:5387 lib/setup.c:5448
 msgid "Device type is not properly initialized."
 msgstr "Тип пристрою не ініціалізовано належним чином."
 
-#: lib/setup.c:5452
+#: lib/setup.c:5486
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "У ядрі не передбачено підтримки сховища ключів ядра."
 
-#: lib/setup.c:5456
+#: lib/setup.c:5490
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Немає сховища ключів ядра: це сховище потрібне для передавання підпису ядру."
 
-#: lib/setup.c:5511
+#: lib/setup.c:5545
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Не можна використовувати ключ сховища ключів %s."
 
-#: lib/setup.c:5724
+#: lib/setup.c:5758
 msgid "Incorrect root hash specified for verity device."
 msgstr "Для пристрою перевірки вказано помилковий кореневий хеш."
 
-#: lib/setup.c:5765 lib/setup.c:5790
+#: lib/setup.c:5799 lib/setup.c:5824
 msgid "OPAL does not support deferred deactivation."
 msgstr "В OPAL не передбачено підтримки відкладеної деактивації."
 
-#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Пристрій %s все ще використовується."
 
-#: lib/setup.c:5798
+#: lib/setup.c:5832
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Не вдалося скасувати відкладене вилучення з пристрою %s."
 
-#: lib/setup.c:5820
+#: lib/setup.c:5854
 #, c-format
 msgid "Invalid device %s."
 msgstr "Некоректний пристрій %s."
 
-#: lib/setup.c:5967
+#: lib/setup.c:6001
 msgid "Volume key buffer too small."
 msgstr "Буфер ключів тому є занадто малим."
 
-#: lib/setup.c:5978
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Неможливо отримати ключ тому для пристрою із шифруванням LUKS2."
 
-#: lib/setup.c:5987
+#: lib/setup.c:6021
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Неможливо отримати ключ тому для пристрою із шифруванням LUKS1."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6035
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Неможливо отримати ключ тому для пристрою зі звичайним шифруванням."
 
-#: lib/setup.c:6009
+#: lib/setup.c:6043
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Не вдалося отримати кореневий хеш для пристрою VERITY."
 
-#: lib/setup.c:6018
+#: lib/setup.c:6052
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Неможливо отримати ключ тому для пристрою BITLK."
 
-#: lib/setup.c:6023
+#: lib/setup.c:6057
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Неможливо отримати ключ тому для пристрою FVAULT2."
 
-#: lib/setup.c:6025
+#: lib/setup.c:6059
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Підтримки цієї дії для шифрованого пристрою %s не передбачено."
 
-#: lib/setup.c:6210 lib/setup.c:6221
+#: lib/setup.c:6244 lib/setup.c:6255
 msgid "Dump operation is not supported for this device type."
 msgstr "Підтримки дії зі створення дампу для цього типу пристроїв не передбачено."
 
-#: lib/setup.c:6601
+#: lib/setup.c:6635
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Зсув у даних не є кратним до %u байтів."
 
-#: lib/setup.c:6909
+#: lib/setup.c:6943
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Не можна перетворити пристрій %s, який перебуває у користуванні."
 
-#: lib/setup.c:7217 lib/setup.c:7361
+#: lib/setup.c:7251 lib/setup.c:7406
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Не вдалося прив'язати слот ключа %u як новий ключ тому."
 
-#: lib/setup.c:7241
+#: lib/setup.c:7275
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Не вдалося ініціалізувати типові параметри слоту ключів LUKS2."
 
-#: lib/setup.c:7247
+#: lib/setup.c:7281
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Не вдалося прив'язати слот ключа %d до контрольної суми."
 
-#: lib/setup.c:7478
+#: lib/setup.c:7523
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Не вдалося додати слот ключа, всі слоти вимкнено і не вказано ключа тому."
 
-#: lib/setup.c:7551 lib/verity/verity.c:333
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Не вдалося завантажити ключ до сховища ключів ядра."
 
-#: lib/setup.c:7742
+#: lib/setup.c:7807
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Не вдалося знайти сховище ключів, яке описано «%s»."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7872
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Не вдалося створити загальне блокування серіалізації доступу до пам'яті."
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "Не вдалося відкрити файл ключа."
 
-#: lib/utils.c:212
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "Не вдалося прочитати файл ключа з термінала."
 
-#: lib/utils.c:228
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "Не вдалося отримати статистичні дані щодо файла ключа."
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "Не вдалося встановити потрібну позицію у файлі ключа."
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "Під час читання пароля вичерпано пам’ять."
 
-#: lib/utils.c:286
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "Помилка під час читання пароля."
 
-#: lib/utils.c:303
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "Нічого читати з вхідних даних."
 
-#: lib/utils.c:310
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "Перевищено максимальний розмір файла ключа."
 
-#: lib/utils.c:315
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "Не вдалося прочитати бажаний об’єм даних."
 
@@ -962,7 +962,7 @@ msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Специфікацію шифрування слід вказувати так: [алгоритм]-[режим]-[iv]."
 
 #: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
 #: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
@@ -976,13 +976,13 @@ msgstr "Не вдалося відкрити пристрій тимчасово
 msgid "Failed to access temporary keystore device."
 msgstr "Не вдалося отримати доступ до пристрою тимчасового сховища ключів."
 
-#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "Помилка введення-виведення під час шифрування слоту ключів."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
@@ -993,7 +993,7 @@ msgstr "Помилка введення-виведення під час шиф
 msgid "Cannot open device %s."
 msgstr "Не вдалося відкрити пристрій %s."
 
-#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "Помилка введення-виведення під час розшифрування слоту ключів."
 
@@ -1083,7 +1083,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Виправлений хеш шифрування малими літерами (%s)."
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Підтримки бажаного хешування LUKS, %s, не передбачено."
@@ -1130,7 +1130,7 @@ msgstr "Режим шифрування LUKS %s є некоректним."
 msgid "LUKS hash %s is invalid."
 msgstr "Хеш-сума LUKS %s є некоректною."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
 msgid "No known problems detected for LUKS header."
 msgstr "У заголовку LUKS не виявлено жодних проблем."
 
@@ -1144,50 +1144,50 @@ msgstr "Помилка під час оновлення заголовка LUKS
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Помилка під час спроби повторного читання заголовка LUKS після оновлення на пристрої %s."
 
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:750
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Відступ даних для заголовка LUKS має бути або рівним нулеві, або перевищувати розмір заголовка."
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:701
 msgid "Wrong LUKS UUID format provided."
 msgstr "Вказано UUID LUKS у помилковому форматі."
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Не вдалося створити заголовок LUKS: помилка читання випадкових даних для ініціалізації."
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Не вдалося створити заголовок LUKS: помилка під час обчислення контрольної суми заголовка (з використанням хешу %s)."
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Слот ключа %d є активним. Його слід спочатку спорожнити."
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Ентропія даних слота ключа %d є надто низькою. Маніпуляції з заголовком?"
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Переповнення значення ітерації PBKDF2."
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Не вдалося відкрити слот ключа (за допомогою хешу %s)."
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Слот ключа %d є некоректним, будь ласка, виберіть слот ключа з номером від 0 до %d."
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Не вдалося витерти пристрій %s."
@@ -1208,56 +1208,48 @@ msgstr "Виявлено несумісний з loop-AES файл ключа."
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "У ядрі не передбачено підтримки призначення, сумісного з loop-AES."
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "Помилка під час спроби читання файла ключа %s."
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "Перевищено максимальну можливу довжину пароля TCRYPT (%zu)."
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "Засіб створення хешів PBKDF2 за алгоритмом %s недоступний, пропускаємо."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
-msgid "Required kernel crypto interface not available."
-msgstr "Потрібний для роботи інтерфейс ядра для шифрування недоступний."
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "Переконайтеся, що завантажено модуль ядра algif_skcipher."
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "Підтримки активації для розміру сектора %d не передбачено."
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "У ядрі не передбачено підтримки вмикання цього застарілого режиму TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "Активуємо шифрування системи за допомогою TCRYPT для розділу %s."
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:819
 msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
 msgstr "Не вдалося визначити зсу розділу системи TCRYPT, активуємо усю зашифровану область."
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:828
 msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
 msgstr "Не вдалося визначити зсу розділу системи TCRYPT, активуємо пристрій як системний розділ."
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "У ядрі не передбачено підтримки призначення, сумісного з TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:1146
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "Підтримки цієї дії без завантаження заголовка TCRYPT."
 
@@ -1610,8 +1602,7 @@ msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "Увага: розмір області слотів ключів LUKS2 змінено до %<PRIu64> байтів.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Не вдалося отримати блокування читання на пристрої %s."
@@ -1671,79 +1662,79 @@ msgstr ""
 msgid "Ignored unknown flag %s."
 msgstr "Проігноровано невідомий прапорець %s."
 
-#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Не вистачає ключа для сегмента dm-crypt %u"
 
-#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Не вдалося встановити сегмент dm-crypt."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Не вдалося встановити сегмент dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Не виявлено жодного відомого зразка специфікації шифрування у заголовку LUKS."
 
-#: lib/luks2/luks2_json_metadata.c:2691
+#: lib/luks2/luks2_json_metadata.c:2709
 msgid "OPAL device must have static device size."
 msgstr "Пристій OPAL повинен мати статичний розмір пристрою."
 
-#: lib/luks2/luks2_json_metadata.c:2711
+#: lib/luks2/luks2_json_metadata.c:2729
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Зашифрований пристрій OPAL із механізмами цілісності має бути меншим за діапазон блокування."
 
-#: lib/luks2/luks2_json_metadata.c:2716
+#: lib/luks2/luks2_json_metadata.c:2734
 msgid "OPAL device must have same size as locking range."
 msgstr "Пристрій OPAL повинен мати той самий розмір, що і діапазон блокування."
 
-#: lib/luks2/luks2_json_metadata.c:2736
+#: lib/luks2/luks2_json_metadata.c:2754
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Пристрій OPAL %s вже розблоковано.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2775
+#: lib/luks2/luks2_json_metadata.c:2793
 msgid "Unsupported device integrity configuration."
 msgstr "Непідтримувані налаштування цілісності даних на пристрої."
 
-#: lib/luks2/luks2_json_metadata.c:2791
+#: lib/luks2/luks2_json_metadata.c:2809
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Базовий пристрій dm-integrity із неочікуваними наданими секторами даних."
 
-#: lib/luks2/luks2_json_metadata.c:2886
+#: lib/luks2/luks2_json_metadata.c:2911
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Виконуємо повторне шифрування. Не можна деактивувати пристрій."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Не вдалося замінити пристрій %s, роботу якого призупинено, ціллю dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Пристрій %s було деактивовано, але апаратний пристрій OPAL не може бути заблоковано."
 
-#: lib/luks2/luks2_json_metadata.c:3020
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Виявлено невідповідність вимог LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3053
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Дія є несумісною із пристроєм, який позначено для перешифрування застарілого варіанта. Перериваємо дію."
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3055
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Дія є несумісною із пристроєм, який позначено для перешифрування LUKS2. Перериваємо дію."
 
-#: lib/luks2/luks2_json_metadata.c:3032
+#: lib/luks2/luks2_json_metadata.c:3057
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Дія є несумісною із пристроєм з використанням OPAL. Перериваємо дію."
 
-#: lib/luks2/luks2_json_metadata.c:3034
+#: lib/luks2/luks2_json_metadata.c:3059
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Дія є несумісною із пристроєм з використанням вбудованих апаратних міток. Перериваємо дію."
 
@@ -1755,22 +1746,22 @@ msgstr "Недостатньо пам'яті для відкриття слот
 msgid "Keyslot open failed."
 msgstr "Не вдалося відкрити слот ключів."
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "Не можна використовувати шифрування %s-%s для слотів ключів."
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "Не можна використовувати шифрування %s для слотів ключів."
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr "Недостатньо пам'яті для визначення ключа слоту ключів."
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "Алгоритм хешування %s є недоступним."
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "Немає простору для нового слоту ключа."
 
@@ -1787,335 +1778,335 @@ msgstr "Не вдалося оновити тип стійкості. Новим
 msgid "Failed to refresh reencryption verification digest."
 msgstr "Не вдалося освіжити контрольні суми для перевірки для повторного шифрування."
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "Не вдалося перевірити стан пристрою з uuid %s."
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Не вдалося перетворити заголовок з додатковими метаданими LUKSMETA."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Не вдалося використати специфікацію шифрування %s-%s для LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr "Не вдалося використати специфікацію шифрування %s-%s для слоту ключів LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Не вдалося пересунути область слотів ключів. Недостатньо місця."
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Не вдалося перетворити до формату LUKS2 - некоректні метадані."
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Не вдалося пересунути область слотів ключів. Область слотів ключів LUKS2 є надто малою."
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr "Не вдалося пересунути область слотів ключів."
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Не вдалося перетворити на формат LUKS1 — типовий розмір сектору шифрування сегмента не дорівнює 512 байтам."
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Не вдалося перетворити до формату LUKS1 — контрольні суми слотів ключів не сумісні з LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Не вдалося перетворити до формату LUKS1 — на пристрої використовується загорнуте шифрування ключів %s."
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Не вдалося перетворити до формату LUKS1 — на пристрої використовується більше сегментів."
 
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Не вдалося перетворити до формату LUKS1 - заголовок LUKS2 містить %u жетонів."
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:798
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Не вдалося перетворити до формату LUKS1 — немає активних слотів ключів."
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Не вдалося перетворити до формату LUKS1 - слот ключа %u перебуває у некоректному стані."
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:815
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Не вдалося перетворити до формату LUKS1 - слот ключів %u є неприв'язаним."
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Не вдалося перетворити до формату LUKS1 — слот %u (перевищує максимальну кількість слотів) усе ще є активним."
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "не вдалося перетворити до формату LUKS1 — слот ключів %u є несумісним з LUKS1."
 
-#: lib/luks2/luks2_reencrypt.c:1198
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Розмір «гарячої» ділянки має бути кратним до обчисленого вирівнювання ділянки (%zu байтів)."
 
-#: lib/luks2/luks2_reencrypt.c:1203
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Розмір пристрою має бути кратним до обчисленого вирівнювання ділянки (%zu байтів)."
 
-#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
-#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4080
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Не вдалося ініціалізувати обгортку старого сховища сегментів."
 
-#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Не вдалося ініціалізувати обгортку нового сховища сегментів."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "Не вдалося ініціалізувати захист «гарячої» зони"
 
-#: lib/luks2/luks2_reencrypt.c:1623
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "Не вдалося прочитати контрольні суми для поточної «гарячої» ділянки."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Не вдалося прочитати «гарячу» ділянку, починаючи з %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:1649
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "Не вдалося розшифрувати сектор %zu."
 
-#: lib/luks2/luks2_reencrypt.c:1655
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "Не вдалося відновити сектор %zu."
 
-#: lib/luks2/luks2_reencrypt.c:2208
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "Розміри пристроїв джерела та призначення не збігаються. Розмір джерела — %<PRIu64>, розмір призначення — %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2310
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "Не вдалося задіяти пристрій «гарячої» ділянки %s."
 
-#: lib/luks2/luks2_reencrypt.c:2322
+#: lib/luks2/luks2_reencrypt.c:2323
 #, c-format
 msgid "Failed to allocate hotzone device %s."
 msgstr "Не вдалося розмістити у пам'яті дані пристрою «гарячої» ділянки %s."
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "Не вдалося задіяти пристрій-накладку %s зі справжньою таблицею походження."
 
-#: lib/luks2/luks2_reencrypt.c:2346
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "Не вдалося завантажити нову прив'язку для пристрою %s."
 
-#: lib/luks2/luks2_reencrypt.c:2418
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
 msgstr "Не вдалося освіжити тек пристрої для повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:2615
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
 msgstr "Не вдалося встановити розмір області нових слотів ключів."
 
-#: lib/luks2/luks2_reencrypt.c:2751
+#: lib/luks2/luks2_reencrypt.c:2752
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Значення зміщення даних не вирівняно до розміру сектора для шифрування (%<PRIu32> байтів)."
 
-#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "Непідтримуваний режим стійкості %s"
 
-#: lib/luks2/luks2_reencrypt.c:2824
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
 msgstr "Розмір пересунутого сегмента не може перевищувати значення зсуву даних."
 
-#: lib/luks2/luks2_reencrypt.c:2866
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
 msgstr "Некоректні параметри стійкості для повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:2888
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "Пересунутий сегмент є надто великим. Потрібний розмір %<PRIu64>, доступне місце: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2977
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "Не вдалося очистити таблицю."
 
-#: lib/luks2/luks2_reencrypt.c:3063
+#: lib/luks2/luks2_reencrypt.c:3064
 #, c-format
 msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
 msgstr "Зміщення даних (%<PRIu64> секторів) є меншим за майбутній зсув даних (%<PRIu64> секторів)."
 
-#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
 msgstr "Зменшений розмір даних перевищує справжній розмір пристрою."
 
-#: lib/luks2/luks2_reencrypt.c:3095
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Пристрій зберігання даних не вирівняно до розміру сектора для шифрування (%<PRIu32> байтів)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
-#: lib/luks2/luks2_reencrypt.c:3664
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Не вдалося відкрити %s в ексклюзивному режимі (вже пов'язано або змонтовано)."
 
-#: lib/luks2/luks2_reencrypt.c:3332
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Пристрій не позначено для повторного шифрування LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Не вдалося завантажити контекст повторного шифрування LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
 msgstr "Пристрій не перебуває у повторному шифруванні."
 
-#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
 msgstr "Процес повторного шифрування вже виконується."
 
-#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
 msgstr "Не вдалося створити блокування для повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:3471
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Продовження повторного шифрування неможливе. Спочатку слід виконати відновлення повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:3607
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Не збігаються розмір активного пристрою і запитаний розмір повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:3621
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "У параметрах повторного шифрування вказано некоректний розмір пристрою."
 
-#: lib/luks2/luks2_reencrypt.c:3723
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Виконується повторне шифрування. Неможливо виконати відновлення."
 
-#: lib/luks2/luks2_reencrypt.c:3744
+#: lib/luks2/luks2_reencrypt.c:3745
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Не вдалося виконати відновлення даних повторного шифрування LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
 msgid "Failed to initialize reencryption device stack."
 msgstr "Не вдалося ініціалізувати стос пристроїв повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:3910
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "Повторне шифрування LUKS2 вже ініційовано у метаданих."
 
-#: lib/luks2/luks2_reencrypt.c:3918
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Не вдалося ініціалізувати повторне шифрування LUKS2 лише у метаданих."
 
-#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
-#: lib/luks2/luks2_reencrypt.c:4033
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Для пристроїв DAX (сталої пам'яті) не передбачено підтримки повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4062
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Не вдалося встановити сегменти пристрою для наступної «гарячої» ділянки повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Не вдалося записати метадані стійкості для повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4122
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "Помилка розшифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4127
+#: lib/luks2/luks2_reencrypt.c:4128
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Не вдалося записати «гарячу» ділянку, починаючи з %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4132
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
 msgstr "Не вдалося синхронізувати дані."
 
-#: lib/luks2/luks2_reencrypt.c:4140
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Не вдалося оновити метадані після завершення обробки поточної «гарячої» зони повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4229
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
 msgstr "Не вдалося записати метадані LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:4252
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
 msgstr "Не вдалося витерти область невикористаних даних пристрою."
 
-#: lib/luks2/luks2_reencrypt.c:4258
+#: lib/luks2/luks2_reencrypt.c:4259
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Не вдалося вилучити невикористаний (непов'язаний) слот ключа %d."
 
-#: lib/luks2/luks2_reencrypt.c:4268
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
 msgstr "Не вдалося вилучити слот ключа для повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4278
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Критична помилка під час повторного шифрування фрагмента, починаючи з %<PRIu64>, довжиною у %<PRIu64> секторів."
 
-#: lib/luks2/luks2_reencrypt.c:4282
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
 msgstr "Не вдалося виконати інтерактивне повторне шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Не відновлюйте пристрій, якщо не заміните вручну пристрій призначення для помилок."
 
-#: lib/luks2/luks2_reencrypt.c:4339
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Не вдалося виконати повторне шифрування. Неочікуваний стан засобу повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt.c:4345
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
 msgstr "Не вказано контекст повторного шифрування або вказано некоректний контекст."
 
-#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
 msgstr "Не вдалося оновити контекст повторного шифрування."
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "Метадані повторного шифрування є некоректними."
 
@@ -2147,7 +2138,7 @@ msgstr "Параметри шифрування слоту ключів можн
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Параметри шифрування слоту ключів є несумісними із шифруванням слотів ключів LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
+#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
@@ -2175,7 +2166,7 @@ msgstr "Попередження: параметр --hash у простому р
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "Попередження: параметр --keyfile-size проігноровано, розмір прочитаних даних збігається із розміром ключа шифрування.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
 #: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
@@ -2186,9 +2177,9 @@ msgstr "Помилка сканування Blkid для %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "На %s виявлено підписи пристроїв. Подальша обробка може пошкодити наявні дані."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
-#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
-#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
+#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
+#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
+#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
@@ -2238,7 +2229,7 @@ msgstr ""
 "без пароля. Цей дамп слід зберігати у зашифрованому форматі\n"
 "у безпечному місці."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2263,9 +2254,9 @@ msgstr "Неможливо визначити розмір ключа тому 
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Пристрій %s усе ще є активним, його заплановано для відкладеного вилучення.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
-#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
-#: src/cryptsetup.c:3262
+#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
+#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
+#: src/cryptsetup.c:3261
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Не вдалося встановити шлях до зовнішніх жетонів %s."
@@ -2302,31 +2293,35 @@ msgstr "%-10s %4u ітерацій, пам'ять: %5u, %1u паралельни
 msgid "Result of benchmark is not reliable."
 msgstr "Результат тестування є ненадійним."
 
-#: src/cryptsetup.c:1170
+#: src/cryptsetup.c:1171
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Наближені значення під час перевірки визначаються лише за допомогою оперативної пам’яті (без запису на диск).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1195
+#: src/cryptsetup.c:1196
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "№%*s Алгоритм |      Ключ |      Шифрування |   Розшифрування\n"
 
-#: src/cryptsetup.c:1203
+#: src/cryptsetup.c:1204
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Шифрування  %s (розмір ключа — %i бітів) є недоступним."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1222
+#: src/cryptsetup.c:1225
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "№      Алгоритм |      Ключ |      Шифрування |   Розшифрування\n"
 
-#: src/cryptsetup.c:1233
+#: src/cryptsetup.c:1238
 msgid "N/A"
 msgstr "н/д"
 
-#: src/cryptsetup.c:1258
+#: src/cryptsetup.c:1241
+msgid "# Cipher speed test is not available.\n"
+msgstr "# Перевірка швидкості шифрування недоступна.\n"
+
+#: src/cryptsetup.c:1257
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2334,27 +2329,27 @@ msgstr ""
 "Виявлено незахищені метадані повторного шифрування LUKS2. Будь ласка, перевірте, чи бажаною є дія з повторного шифрування\n"
 "(див. виведення luksDump), і продовжуйте (оновлення метаданих), лише якщо впевнені, що дія є бажаною."
 
-#: src/cryptsetup.c:1264
+#: src/cryptsetup.c:1263
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Вкажіть пароль для захисту і оновлення метаданих повторного шифрування: "
 
-#: src/cryptsetup.c:1308
+#: src/cryptsetup.c:1307
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Ви справді хочете продовжити процедуру відновлення повторного шифрування LUKS2?"
 
-#: src/cryptsetup.c:1317
+#: src/cryptsetup.c:1316
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Вкажіть пароль для перевірки контрольної суми метаданих повторного шифрування: "
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1318
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Вкажіть пароль для відновлення повторного шифрування: "
 
-#: src/cryptsetup.c:1381
+#: src/cryptsetup.c:1380
 msgid "Really try to repair LUKS device header?"
 msgstr "Спробувати відновити заголовок пристрою LUKS?"
 
-#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2362,7 +2357,7 @@ msgstr ""
 "\n"
 "Витирання перервано."
 
-#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2370,167 +2365,167 @@ msgstr ""
 "Витираємо пристрій для ініціалізації контрольних сум для цілісності.\n"
 "Ви можете перервати цей процес натисканням комбінації клавіш CTRL+C (решта невитертого пристрою міститиме некоректну контрольну суму).\n"
 
-#: src/cryptsetup.c:1436 src/integritysetup.c:103
+#: src/cryptsetup.c:1435 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Не можна скасувати активацію тимчасового пристрою %s."
 
-#: src/cryptsetup.c:1484
+#: src/cryptsetup.c:1483
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "У апаратному шифрування OPAL не передбачено підтримки параметрів --cipher і --key-size, параметри проігноровано."
 
-#: src/cryptsetup.c:1497
+#: src/cryptsetup.c:1496
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Параметр цілісності може бути використано лише для формату LUKS2."
 
-#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
+#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Непідтримувані параметри розміру метаданих LUKS2."
 
-#: src/cryptsetup.c:1507
+#: src/cryptsetup.c:1506
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "Підтримку OPAL передбачено лише для формату LUKS2."
 
-#: src/cryptsetup.c:1512
+#: src/cryptsetup.c:1511
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Підтримку вбудованих апаратних міток передбачено лише для формату LUKS2."
 
-#: src/cryptsetup.c:1521
+#: src/cryptsetup.c:1520
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Файла заголовка не існує. Хочете його створити?"
 
-#: src/cryptsetup.c:1529
+#: src/cryptsetup.c:1528
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Не вдалося створити файл заголовка %s."
 
-#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
 #: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
 #: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr "Не виявлено жодного відомого зразка специфікації цілісності."
 
-#: src/cryptsetup.c:1557
+#: src/cryptsetup.c:1556
 msgid "Cannot use specified integrity key size."
 msgstr "Не можна використовувати вказаний розмір ключа цілісності."
 
-#: src/cryptsetup.c:1575
+#: src/cryptsetup.c:1574
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Не можна використовувати %s як заголовок на диску."
 
-#: src/cryptsetup.c:1604 src/integritysetup.c:172
+#: src/cryptsetup.c:1603 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Дані на %s буде перезаписано без можливості відновлення."
 
-#: src/cryptsetup.c:1641
+#: src/cryptsetup.c:1640
 msgid "OPAL Admin password cannot be empty."
 msgstr "Пароль адміністратора OPAL не може бути порожнім."
 
-#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
-#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
+#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Не вдалося встановити параметри pbkdf."
 
-#: src/cryptsetup.c:1786
+#: src/cryptsetup.c:1785
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Зменшений відступ даних можна використовувати лише для від’єднаних заголовків LUKS."
 
-#: src/cryptsetup.c:1793
+#: src/cryptsetup.c:1792
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Контейнер файлів LUKS %s є надто малим для активації, на ньому не лишиться місця для даних."
 
-#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Неможливо визначити розмір ключа тому для LUKS без слотів ключів. Будь ласка, скористайтеся параметром --key-size."
 
-#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr "Для пристрою потрібні два ключі тому."
 
-#: src/cryptsetup.c:1889
+#: src/cryptsetup.c:1888
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Деякі із вказаних параметрів активації було проігноровано через апаратне шифрування OPAL."
 
-#: src/cryptsetup.c:1894
+#: src/cryptsetup.c:1893
 msgid "Device activated but cannot make flags persistent."
 msgstr "Пристрій задіяно, але не вдалося зробити прапорці сталими."
 
-#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
+#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Слот ключа %d позначено для вилучення."
 
-#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
+#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Це останній слот ключа. Пристрій стане непридатним для використання після спорожнення цього ключа."
 
-#: src/cryptsetup.c:1987
+#: src/cryptsetup.c:1986
 msgid "Enter any remaining passphrase: "
 msgstr "Введіть будь-який інший пароль: "
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Дію перервано, слот ключів НЕ витерто.\n"
 
-#: src/cryptsetup.c:2024
+#: src/cryptsetup.c:2023
 msgid "Enter passphrase to be deleted: "
 msgstr "Введіть пароль, який слід вилучити: "
 
-#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
-#: src/cryptsetup.c:3253
+#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
+#: src/cryptsetup.c:3252
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Пристрій %s не є коректним пристроєм LUKS2."
 
-#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
+#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
 msgid "Enter new passphrase for key slot: "
 msgstr "Введіть новий пароль для слота ключа: "
 
-#: src/cryptsetup.c:2147 src/utils_luks.c:342
+#: src/cryptsetup.c:2146 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Введіть пінкод жетона: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:344
+#: src/cryptsetup.c:2148 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Введіть пінкод жетона %d: "
 
-#: src/cryptsetup.c:2208
+#: src/cryptsetup.c:2207
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "Попередження: параметр --key-slot використано для нового числа слоту ключа.\n"
 
-#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Введіть будь-який пароль: "
 
-#: src/cryptsetup.c:2381
+#: src/cryptsetup.c:2380
 msgid "Enter passphrase to be changed: "
 msgstr "Введіть пароль, який слід змінити: "
 
-#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Введіть новий пароль: "
 
-#: src/cryptsetup.c:2447
+#: src/cryptsetup.c:2446
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Вкажіть пароль для слоту ключа, який буде перетворено: "
 
-#: src/cryptsetup.c:2471
+#: src/cryptsetup.c:2470
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "У команді isLuks можна використовувати лише один аргумент назви пристрою."
 
-#: src/cryptsetup.c:2576
+#: src/cryptsetup.c:2575
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Слот ключа %d не містить непов'язаного ключа."
 
-#: src/cryptsetup.c:2581
+#: src/cryptsetup.c:2580
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2538,52 +2533,52 @@ msgstr ""
 "Дамп заголовка з непов'язаним ключем є конфіденційними даними.\n"
 "Цей дамп слід зберігати у зашифрованому форматі у безпечному місці."
 
-#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
+#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s не є назвою активного пристрою %s."
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2706
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s не є назвою активного пристрою LUKS або пропущено заголовок."
 
-#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
+#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
 msgid "Option --header-backup-file is required."
 msgstr "Слід вказати параметр --header-backup-file."
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2833
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s не є керованим cryptsetup пристроєм."
 
-#: src/cryptsetup.c:2845
+#: src/cryptsetup.c:2844
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Підтримки дії з оновлення для пристрою типу %s не передбачено."
 
-#: src/cryptsetup.c:2895
+#: src/cryptsetup.c:2894
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Нерозпізнаний тип пристрою метаданих, %s."
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2896
 msgid "Command requires device and mapped name as arguments."
 msgstr "Аргументами команди мають бути назва пристрою та призначена до нього назва."
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL PSID: "
 msgstr "Введіть PSID OPAL: "
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2914
 msgid "Enter OPAL Admin password: "
 msgstr "Введіть пароль адміністратора OPAL: "
 
-#: src/cryptsetup.c:2923
+#: src/cryptsetup.c:2922
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "УВАГА: УВЕСЬ диск буде повернуто до початкових параметрів, а усі дані на ньому буде втрачено! Виконати дію?"
 
-#: src/cryptsetup.c:2966
+#: src/cryptsetup.c:2965
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2592,363 +2587,363 @@ msgstr ""
 "У результаті виконання цієї операції буде витерто усі слоти ключів на пристрої %s.\n"
 "Після виконання цієї дії пристроєм не можна буде скористатися."
 
-#: src/cryptsetup.c:2973
+#: src/cryptsetup.c:2972
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Дію перервано, слоти ключів НЕ витерто.\n"
 
-#: src/cryptsetup.c:3012
+#: src/cryptsetup.c:3011
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Некоректний тип LUKS. Передбачено підтримку лише luks1 і luks2."
 
-#: src/cryptsetup.c:3028
+#: src/cryptsetup.c:3027
 #, c-format
 msgid "Device is already %s type."
 msgstr "Пристрій вже належить до типу %s."
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:3034
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Ця дія перетворить %s до формату %s.\n"
 
-#: src/cryptsetup.c:3038
+#: src/cryptsetup.c:3037
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Дію перервано, дані пристрою НЕ перетворено.\n"
 
-#: src/cryptsetup.c:3078
+#: src/cryptsetup.c:3077
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Пропущено параметр --priority, --label або --subsystem."
 
-#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
+#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Жетон %d є некоректним."
 
-#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
+#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
 #, c-format
 msgid "Token %d in use."
 msgstr "Жетон %d використовується."
 
-#: src/cryptsetup.c:3127
+#: src/cryptsetup.c:3126
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Не вдалося додати жетон %d зі сховища ключів luks2."
 
-#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
+#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Не вдалося прив'язати жетон %d до слоту ключа %d."
 
-#: src/cryptsetup.c:3155
+#: src/cryptsetup.c:3154
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Жетон %d не використовується."
 
-#: src/cryptsetup.c:3192
+#: src/cryptsetup.c:3191
 msgid "Failed to import token from file."
 msgstr "Не вдалося імпортувати жетон з файла."
 
-#: src/cryptsetup.c:3217
+#: src/cryptsetup.c:3216
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Не вдалося отримати жетон %d для експортування."
 
-#: src/cryptsetup.c:3230
+#: src/cryptsetup.c:3229
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Жетон %d не пов'язано зі слотом ключа %d."
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
+#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Не вдалося відв'язати жетон %d від слоту ключа %d."
 
-#: src/cryptsetup.c:3298
+#: src/cryptsetup.c:3297
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Підтримку параметрів --tcrypt-hidden, --tcrypt-system і --tcrypt-backup передбачено лише для пристроїв TCRYPT."
 
-#: src/cryptsetup.c:3301
+#: src/cryptsetup.c:3300
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Підтримку параметра --veracrypt або --disable-veracrypt передбачено лише для пристроїв TCRYPT."
 
-#: src/cryptsetup.c:3304
+#: src/cryptsetup.c:3303
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Параметр --veracrypt-pim можна використовувати лише для сумісних із VeraCrypt пристроїв."
 
-#: src/cryptsetup.c:3308
+#: src/cryptsetup.c:3307
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Параметр --veracrypt-query-pim можна використовувати лише для сумісних із VeraCrypt пристроїв."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3309
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Не можна поєднувати параметри --veracrypt-pim і --veracrypt-query-pim."
 
-#: src/cryptsetup.c:3319
+#: src/cryptsetup.c:3318
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Параметр --persistent не можна використовувати разом із --test-passphrase."
 
-#: src/cryptsetup.c:3322
+#: src/cryptsetup.c:3321
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Не можна поєднувати параметри --refresh і --test-passphrase."
 
-#: src/cryptsetup.c:3325
+#: src/cryptsetup.c:3324
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Параметр --shared можна використовувати лише для відкриття незашифрованого пристрою."
 
-#: src/cryptsetup.c:3328
+#: src/cryptsetup.c:3327
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Підтримку параметра --skip передбачено лише для відкриття незашифрованих пристроїв та пристроїв loopaes."
 
-#: src/cryptsetup.c:3331
+#: src/cryptsetup.c:3330
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Підтримку параметра --offset разом із дією з відкриття передбачено лише для незашифрованих пристроїв та пристроїв loopaes."
 
-#: src/cryptsetup.c:3334
+#: src/cryptsetup.c:3333
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Параметр --tcrypt-hidden не можна поєднувати з --allow-discards."
 
-#: src/cryptsetup.c:3338
+#: src/cryptsetup.c:3337
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Підтримку параметра розміру сектора разом із дією з відкриття передбачено лише для незашифрованих пристроїв."
 
-#: src/cryptsetup.c:3342
+#: src/cryptsetup.c:3341
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Підтримку можливості використання великих секторів IV передбачено лише для відкриття пристроїв простого типу з розміром сектора, який перевищує 512 байтів."
 
-#: src/cryptsetup.c:3347
+#: src/cryptsetup.c:3346
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Параметр --test-passphrase можна використовувати лише для відкриття пристроїв LUKS, TCRYPT, BITLK та FVAULT2."
 
-#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
+#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Не можна одночасно використовувати параметри --device-size і --size."
 
-#: src/cryptsetup.c:3353
+#: src/cryptsetup.c:3352
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Параметр --sunbound можна використовувати лише для відкриття пристрою LUKS."
 
-#: src/cryptsetup.c:3356
+#: src/cryptsetup.c:3355
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Параметр --unbound не можна використовувати без --test-passphrase."
 
-#: src/cryptsetup.c:3360
+#: src/cryptsetup.c:3359
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Параметр --volume-key-keyring не можна поєднувати з --hash і --volume-key-file."
 
-#: src/cryptsetup.c:3363
+#: src/cryptsetup.c:3362
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Обидва параметри --volume-key-file має бути поєднано із відповідними параметрами --key-size."
 
-#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Не можна одночасно використовувати параметр --cancel-deferred і --deferred."
 
-#: src/cryptsetup.c:3388
+#: src/cryptsetup.c:3387
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Параметр --active-name можна встановлювати лише для пристроїв LUKS2."
 
-#: src/cryptsetup.c:3391
+#: src/cryptsetup.c:3390
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Не можна одночасно використовувати параметри ---active-name і --force-offline-reencrypt."
 
-#: src/cryptsetup.c:3394
+#: src/cryptsetup.c:3393
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Не можна поєднувати параметри --new-volume-key-file і --keep-key."
 
-#: src/cryptsetup.c:3397
+#: src/cryptsetup.c:3396
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Не можна поєднувати параметри --new-volume-key-keyring і --keep-key."
 
-#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
+#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
 msgid "Keyslot specification is required."
 msgstr "Слід вказати специфікація слотів ключів."
 
-#: src/cryptsetup.c:3413
+#: src/cryptsetup.c:3412
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Не можна одночасно використовувати параметри --align-payload і --offset."
 
-#: src/cryptsetup.c:3416
+#: src/cryptsetup.c:3415
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Параметром --integrity-no-wipe можна користуватися лише для дії з форматування із розширенням забезпечення цілісності."
 
-#: src/cryptsetup.c:3419
+#: src/cryptsetup.c:3418
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Можна використовувати лише один з параметрів --use-[u]random."
 
-#: src/cryptsetup.c:3427
+#: src/cryptsetup.c:3426
 msgid "Key size is required with --unbound option."
 msgstr "Разом із параметром --unbound слід вказувати розмір ключа."
 
-#: src/cryptsetup.c:3447
+#: src/cryptsetup.c:3446
 msgid "Invalid token action."
 msgstr "Некоректна дія з жетоном."
 
-#: src/cryptsetup.c:3450
+#: src/cryptsetup.c:3449
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Параметр --key-description є обов'язковим для дій із додавання жетонів."
 
-#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
+#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Для виконання дії потрібен специфічний жетон. Скористайтеся параметром --token-id."
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3457
 msgid "Option --unbound is valid only with token add action."
 msgstr "Параметр --unbound можна використовувати лише разом із дією з додавання жетона."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3459
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Не можна поєднувати параметри --key-slot і --unbound."
 
-#: src/cryptsetup.c:3465
+#: src/cryptsetup.c:3464
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Дія потребує зазначення слоту ключа. Скористайтеся параметром --key-slot."
 
-#: src/cryptsetup.c:3481
+#: src/cryptsetup.c:3480
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<пристрій> [--type <тип>] [<назва>]"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr "відкрити пристрій як <назва>"
 
-#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
+#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
 #: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
 #: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr "<назва>"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr "закрити пристрій (вилучити призначення)"
 
-#: src/cryptsetup.c:3483 src/integritysetup.c:558
+#: src/cryptsetup.c:3482 src/integritysetup.c:558
 msgid "resize active device"
 msgstr "змінити розмір активного пристрою"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3483
 msgid "show device status"
 msgstr "показати стан пристрою"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <шифр>]"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3484
 msgid "benchmark cipher"
 msgstr "перевірити швидкодію шифрування"
 
-#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
-#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
-#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
-#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
-#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
+#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
+#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
 msgid "<device>"
 msgstr "<пристрій>"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3485
 msgid "try to repair on-disk metadata"
 msgstr "спробувати виправити метадані на диску"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3486
 msgid "reencrypt LUKS2 device"
 msgstr "повторно зашифрувати пристрій LUKS2"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3487
 msgid "erase all keyslots (remove encryption key)"
 msgstr "витерти усі слоти ключів (вилучити ключ шифрування)"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3488
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "перетворити LUKS із формату LUKS2 або навпаки"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3489
 msgid "set permanent configuration options for LUKS2"
 msgstr "встановити сталі параметри налаштування для LUKS2"
 
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
 msgid "<device> [<new key file>]"
 msgstr "<пристрій> [<новий файл ключа>]"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3490
 msgid "formats a LUKS device"
 msgstr "форматує пристрій LUKS"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3491
 msgid "add key to LUKS device"
 msgstr "додати ключ до пристрою LUKS"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
 msgid "<device> [<key file>]"
 msgstr "<пристрій> [<файл ключа>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3492
 msgid "removes supplied key or key file from LUKS device"
 msgstr "вилучає наданий ключ або файл ключа з пристрою LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3493
 msgid "changes supplied key or key file of LUKS device"
 msgstr "змінює наданий ключ або файл ключа пристрою LUKS"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3494
 msgid "converts a key to new pbkdf parameters"
 msgstr "перетворює ключ до нових параметрів pbkdf"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "<device> <key slot>"
 msgstr "<пристрій> <слот ключа>"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "вилучає ключ з номером <слот ключа> з пристрою LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3496
 msgid "print UUID of LUKS device"
 msgstr "вивести UUID пристрою LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3497
 msgid "tests <device> for LUKS partition header"
 msgstr "виконати спробу виявлення заголовка розділу LUKS на пристрої <пристрій>"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3498
 msgid "dump LUKS partition information"
 msgstr "створити дамп даних щодо розділу LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3499
 msgid "dump TCRYPT device information"
 msgstr "створити дамп даних пристрою TCRYPT"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3500
 msgid "dump BITLK device information"
 msgstr "створити дамп даних пристрою BITLK"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3501
 msgid "dump FVAULT2 device information"
 msgstr "створити дамп даних пристрою FVAULT2"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3502
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Приспати пристрій LUKS і витерти ключ (роботу всіх каналів введення-виведення буде заморожено)"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3503
 msgid "Resume suspended LUKS device"
 msgstr "Відновити роботу приспаного пристрою LUKS"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3504
 msgid "Backup LUKS device header and keyslots"
 msgstr "Створити резервну копію заголовка пристрою LUKS і слотів ключів"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3505
 msgid "Restore LUKS device header and keyslots"
 msgstr "Відновити заголовок пристрою LUKS і слоти ключів"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <пристрій>"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "Manipulate LUKS2 tokens"
 msgstr "Керування жетонами LUKS2"
 
-#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2956,7 +2951,7 @@ msgstr ""
 "\n"
 "<дія> є однією з таких:\n"
 
-#: src/cryptsetup.c:3532
+#: src/cryptsetup.c:3531
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2969,7 +2964,7 @@ msgstr ""
 "\tвідкрити: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tзакрити: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3536
+#: src/cryptsetup.c:3535
 #, c-format
 msgid ""
 "\n"
@@ -2984,7 +2979,7 @@ msgstr ""
 "<слот ключа> — номер слота ключа LUKS, який слід змінити\n"
 "<файл ключа> — необов’язковий файл ключа для нового ключа для дії luksAddKey\n"
 
-#: src/cryptsetup.c:3543
+#: src/cryptsetup.c:3542
 #, c-format
 msgid ""
 "\n"
@@ -2993,7 +2988,7 @@ msgstr ""
 "\n"
 "Типовий укомпільований формат метаданих — %s (для дії luksFormat).\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3547
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3001,12 +2996,12 @@ msgstr ""
 "\n"
 "Підтримку додатків зовнішніх жетонів LUKS2 увімкнено.\n"
 
-#: src/cryptsetup.c:3549
+#: src/cryptsetup.c:3548
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Шлях до теки додатків зовнішніх жетонів LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3550
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3014,7 +3009,7 @@ msgstr ""
 "\n"
 "Підтримку додатків зовнішніх жетонів LUKS2 вимкнено.\n"
 
-#: src/cryptsetup.c:3555
+#: src/cryptsetup.c:3554
 #, c-format
 msgid ""
 "\n"
@@ -3031,7 +3026,7 @@ msgstr ""
 "Типовий PBKDF для LUKS2: %s\n"
 "\tЧас ітерації: %d, потрібний обсяг пам'яті: %d кБ, паралельних потоків: %d\n"
 
-#: src/cryptsetup.c:3566
+#: src/cryptsetup.c:3565
 #, c-format
 msgid ""
 "\n"
@@ -3046,122 +3041,122 @@ msgstr ""
 "\tзвичайне: %s, ключ: %d-бітовий, хешування пароля: %s\n"
 "\tLUKS: %s, ключ: %d-бітовий, хешування заголовка LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3574
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: типовий розмір ключа у режимі XTS (два вбудованих ключа) буде подвоєно.\n"
 
-#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: слід вказати у параметрах %s"
 
-#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Некоректний слот ключа."
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3660
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Розмір пристрою має бути кратним до 512-байтового сектора."
 
-#: src/cryptsetup.c:3666
+#: src/cryptsetup.c:3665
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Некоректна специфікація розміру «гарячої» ділянки повторного шифрування."
 
-#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
+#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Розмір ключа має бути кратним 8 бітам"
 
-#: src/cryptsetup.c:3687
+#: src/cryptsetup.c:3686
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Можна надати не більше 2 специфікацій розмірів ключів."
 
-#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
+#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Можна надати не більше %d специфікацій ключів томів."
 
-#: src/cryptsetup.c:3739
+#: src/cryptsetup.c:3738
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Можна надати не більше %d специфікацій посилань на сховище ключів."
 
-#: src/cryptsetup.c:3748
+#: src/cryptsetup.c:3747
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Максимальний розмір зменшення розміру пристрою дорівнює 1 ГіБ."
 
-#: src/cryptsetup.c:3751
+#: src/cryptsetup.c:3750
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Розмір зменшення має бути кратним до 512-байтового сектора."
 
-#: src/cryptsetup.c:3768
+#: src/cryptsetup.c:3767
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Значенням для параметра --priority може бути лише один з таких рядків: ignore, normal або prefer."
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr "Показати цю довідку"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr "Показати короткі настанови щодо користування"
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
 msgid "Print package version"
 msgstr "Вивести дані щодо версії пакунка"
 
-#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
 msgid "Help options:"
 msgstr "Пункти довідки:"
 
-#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[ПАРАМЕТР...] <дія> <параметри_дії>"
 
-#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr "Не вказано аргумент <дія>."
 
-#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr "Невідома дія."
 
-#: src/cryptsetup.c:3929
+#: src/cryptsetup.c:3928
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Параметр --key-file має пріоритет над вказаним параметром файла ключа."
 
-#: src/cryptsetup.c:3935
+#: src/cryptsetup.c:3934
 msgid "Only one --key-file argument is allowed."
 msgstr "Можна використовувати лише один аргумент --key-file."
 
-#: src/cryptsetup.c:3940
+#: src/cryptsetup.c:3939
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Функцією отримання ключа на основі пароля (PBKDF) може бути лише pbkdf2 або argon2i/argon2id."
 
-#: src/cryptsetup.c:3945
+#: src/cryptsetup.c:3944
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Примусові ітерації PBKDF не можна поєднувати із параметром тривалості ітерацій."
 
-#: src/cryptsetup.c:3950
+#: src/cryptsetup.c:3949
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Неможливо пов'язати ключ тому зі сховищем ключів, якщо сховище ключів вимкнено."
 
-#: src/cryptsetup.c:3955
+#: src/cryptsetup.c:3954
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Не можна скористатися описом ключа сховища ключів, якщо сховище ключів вимкнено."
 
-#: src/cryptsetup.c:3960
+#: src/cryptsetup.c:3959
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Вбудовану цілісність має бути використано разом із параметром --integrity."
 
-#: src/cryptsetup.c:3971
+#: src/cryptsetup.c:3970
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Параметри --keyslot-cipher і --keyslot-key-size має бути використано разом."
 
-#: src/cryptsetup.c:3979
+#: src/cryptsetup.c:3978
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Дій не виконано. Викликано із параметром --test-args.\n"
 
-#: src/cryptsetup.c:3992
+#: src/cryptsetup.c:3991
 msgid "Cannot disable metadata locking."
 msgstr "Не вдалося вимкнути блокування метаданих."
 
@@ -4349,6 +4344,12 @@ msgstr "На вузлі заборонено спосіб розпізнаван
 msgid "Public key authentication error: "
 msgstr "Помилка розпізнавання за відкритим ключем: "
 
+#~ msgid "Required kernel crypto interface not available."
+#~ msgstr "Потрібний для роботи інтерфейс ядра для шифрування недоступний."
+
+#~ msgid "Ensure you have algif_skcipher kernel module loaded."
+#~ msgstr "Переконайтеся, що завантажено модуль ядра algif_skcipher."
+
 #, c-format
 #~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
 #~ msgstr "Не вдалося прочитати або перевірити копію метаданих FVE BITLK %d з %s."

From f8bbe610d73c0fd69159602b5aa1fcfc8cf5561d Mon Sep 17 00:00:00 2001
From: Seong-ho Cho <darkcircle.0426@gmail.com>
Date: Sat, 4 Jul 2026 18:12:56 +0200
Subject: [PATCH 169/244] po: add ko.po (from translationproject.org)

---
 po/ko.po | 4343 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 4343 insertions(+)
 create mode 100644 po/ko.po

diff --git a/po/ko.po b/po/ko.po
new file mode 100644
index 000000000..0053efdc4
--- /dev/null
+++ b/po/ko.po
@@ -0,0 +1,4343 @@
+# Korean translation of cryptsetup
+# Copyright (C) 2026 Free Software Foundation, Inc.
+# This file is distributed under the same license as the cryptsetup package.
+# Seong-ho Cho <darkcircle.0426@gmail.com>, 2026.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
+"Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
+"POT-Creation-Date: 2026-06-29 21:30+0200\n"
+"PO-Revision-Date: 2026-07-02 09:35+0900\n"
+"Last-Translator: Seong-ho Cho <darkcircle.0426@gmail.com>\n"
+"Language-Team: Korean <translation-team-ko@googlegroups.com>\n"
+"Language: ko_KR\n"
+"X-Bugs: Report translation errors to the Language-Team address.\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"\n"
+"X-Generator: Poedit 3.7\n"
+
+#: lib/libdevmapper.c:419
+msgid "Cannot initialize device-mapper, running as non-root user."
+msgstr "device-mapper를 초기화할 수 없어, 일반 사용자로 실행합니다."
+
+#: lib/libdevmapper.c:422
+msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
+msgstr "device-mapper를 초기화할 수 없습니다. dm_mod 커널 모듈을 불러왔습니까?"
+
+#: lib/libdevmapper.c:1125
+msgid "Requested deferred flag is not supported."
+msgstr "요청한 유예 플래그는 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1194
+#, c-format
+msgid "DM-UUID for device %s was truncated."
+msgstr "%s 장치의 DM-UUID가 잘렸습니다."
+
+#: lib/libdevmapper.c:1598
+msgid "Unknown dm target type."
+msgstr "알 수 없는 dm 대상 형식입니다."
+
+#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
+#: lib/libdevmapper.c:1853
+msgid "Requested dm-crypt performance options are not supported."
+msgstr "요청한 dm-crypt 성능 옵션을 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+msgid "Requested dm-verity data corruption handling options are not supported."
+msgstr "요청한 dm-verity 데이터 손상 처리 옵션을 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1752
+msgid "Requested dm-verity tasklets option is not supported."
+msgstr "요청한 dm-verity 작업 처리 옵션을 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1764
+msgid "Requested dm-verity FEC options are not supported."
+msgstr "요청한 dm-verity FEC 옵션을 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1770
+msgid "Requested data integrity options are not supported."
+msgstr "요청한 데이터 무결성 옵션을 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1774
+msgid "Requested sector_size option is not supported."
+msgstr "요청한 sector_size 옵션을 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1779
+msgid "The device size is not multiple of the requested sector size."
+msgstr "장치 용량은 요청한 섹터 용량의 배수가 아닙니다."
+
+#: lib/libdevmapper.c:1783
+msgid "Requested integrity_key_size option is not supported."
+msgstr "요청한 integrity_key_size 옵션을 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+msgid "Requested automatic recalculation of integrity tags is not supported."
+msgstr "요청한 무결성 태그 자동 재계산을 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
+#: lib/luks2/luks2_json_metadata.c:2799
+msgid "Discard/TRIM is not supported."
+msgstr "버림/TRIM을 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1808
+msgid "Requested dm-integrity bitmap mode is not supported."
+msgstr "요청한 dm-integrity 비트맵 모드를 지원하지 않습니다."
+
+#: lib/libdevmapper.c:1814
+msgid "Requested dm-integrity inline mode is not supported."
+msgstr "요청한 dm-integrity 인라인 모드를 지원하지 않습니다."
+
+#: lib/libdevmapper.c:2870
+#, c-format
+msgid "Failed to query dm-%s segment."
+msgstr "dm-%s 세그먼트 요청 실패."
+
+#: lib/random.c:60
+msgid ""
+"System is out of entropy while generating volume key.\n"
+"Please move mouse or type some text in another window to gather some random events.\n"
+msgstr ""
+"볼륨키 생성 중 시스템 엔트로피가 바닥났습니다.\n"
+"마우스를 움직이거나 다른 창에서 텍스트를 입력하여 랜덤 이벤트를 가져올 수 있게 하십시오.\n"
+
+#: lib/random.c:64
+#, c-format
+msgid "Generating key (%d%% done).\n"
+msgstr "키 생성 중 (%d%% 완료).\n"
+
+#: lib/random.c:150
+msgid "Running in FIPS mode."
+msgstr "FIPS 모드로 실행 중입니다."
+
+#: lib/random.c:156
+msgid "Fatal error during RNG initialisation."
+msgstr "RNG 초기화 중 치명적 오류가 있습니다."
+
+#: lib/random.c:194
+msgid "Unknown RNG quality requested."
+msgstr "알 수 없는 RNG 수준을 요청했습니다."
+
+#: lib/random.c:199
+msgid "Error reading from RNG."
+msgstr "RNG 읽는 중 오류."
+
+#: lib/setup.c:251
+msgid "OPAL support is disabled in libcryptsetup."
+msgstr "libcryptsetup에서 OPAL 지원 기능이 꺼졌습니다."
+
+#: lib/setup.c:253
+#, c-format
+msgid "Device %s or kernel does not support OPAL encryption."
+msgstr "%s 장치 또는 커널에서 OPAL 암호화를 지원하지 않습니다."
+
+#: lib/setup.c:269
+msgid "Cannot initialize crypto RNG backend."
+msgstr "암호화 RNG 백엔드를 초기화할 수 없습니다."
+
+#: lib/setup.c:275
+msgid "Cannot initialize crypto backend."
+msgstr "암호화 백엔드를 초기화할 수 없습니다."
+
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
+#, c-format
+msgid "Hash algorithm %s not supported."
+msgstr "%s 해싱 알고리즘을 지원하지 않습니다."
+
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
+#, c-format
+msgid "Key processing error (using hash %s)."
+msgstr "키 처리 오류 (%s 해시 사용)."
+
+#: lib/setup.c:392 lib/setup.c:429
+msgid "Cannot determine device type. Incompatible activation of device?"
+msgstr "장치 형식을 확인할 수 없습니다. 장치 활성 방식에 호환성이 없습니까?"
+
+#: lib/setup.c:398 lib/setup.c:4177
+msgid "This operation is supported only for LUKS device."
+msgstr "이 동작은 LUKS 장치에서만 지원합니다."
+
+#: lib/setup.c:435
+msgid "This operation is supported only for LUKS2 device."
+msgstr "이 동작은 LUKS2 장치에서만 지원합니다."
+
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
+msgid "All key slots full."
+msgstr "모든 키 슬롯이 가득찼습니다."
+
+#: lib/setup.c:503
+#, c-format
+msgid "Key slot %d is invalid, please select between 0 and %d."
+msgstr "키 슬롯 번호 %d번이 적절하지 않습니다. 0과 %d 사이의 숫자를 선택하십시오."
+
+#: lib/setup.c:509
+#, c-format
+msgid "Key slot %d is full, please select another one."
+msgstr "키 슬롯 %d번이 가득 찼습니다. 다른 번호를 선택하십시오."
+
+#: lib/setup.c:534 lib/setup.c:3878
+msgid "Device size is not aligned to device logical block size."
+msgstr "장치 용량이 장치 논리 블록 용량에 맞지 않습니다."
+
+#: lib/setup.c:631
+#, c-format
+msgid "Header detected but device %s is too small."
+msgstr "헤더를 확인했지만 %s 장치 용량이 너무 작습니다."
+
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
+msgid "This operation is not supported for this device type."
+msgstr "이 동작은 이 장치 형식에서 지원하지 않습니다."
+
+#: lib/setup.c:677
+msgid "Illegal operation with reencryption in-progress."
+msgstr "재 암호화 처리 과정에서 부적절한 동작을 확인했습니다."
+
+#: lib/setup.c:809
+msgid "Failed to rollback LUKS2 metadata in memory."
+msgstr "메모리에서 LUKS2 메타데이터 되돌리기 실패."
+
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
+#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
+#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
+#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
+#: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
+#, c-format
+msgid "Device %s is not a valid LUKS device."
+msgstr "%s 장치는 올바른 LUKS 장치가 아닙니다."
+
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
+#, c-format
+msgid "Unsupported LUKS version %d."
+msgstr "지원하지 않는 %d 버전의 LUKS입니다."
+
+#: lib/setup.c:1273
+#, c-format
+msgid "No known cipher specification pattern detected for active device %s."
+msgstr "%s 활성 장치에서 알려진 암호화 명세 패턴이 없습니다."
+
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
+#, c-format
+msgid "Device %s is not active."
+msgstr "%s 장치는 동작 중이 아닙니다."
+
+#: lib/setup.c:1535
+#, c-format
+msgid "Underlying device for crypt device %s disappeared."
+msgstr "%s 암호화 장치의 기반 장치가 사라졌습니다."
+
+#: lib/setup.c:1617
+msgid "Invalid plain crypt parameters."
+msgstr "부적절한 평문 암호화 매개변수입니다."
+
+#: lib/setup.c:1622 lib/setup.c:2672
+msgid "Invalid key size."
+msgstr "부적절한 키 크기입니다."
+
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
+msgid "UUID is not supported for this crypt type."
+msgstr "이 암호화 형식에서 UUID를 지원하지 않습니다."
+
+#: lib/setup.c:1632 lib/setup.c:2682
+msgid "Detached metadata device is not supported for this crypt type."
+msgstr "이 암호화 형식에서 분리한 메타데이터 장치를 지원하지 않습니다."
+
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
+msgid "Unsupported encryption sector size."
+msgstr "지원하지 않는 암호화 섹터 크기입니다."
+
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
+msgid "Device size is not aligned to requested sector size."
+msgstr "장치 용량이 요청한 섹터 용량과 맞지 않습니다."
+
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
+msgid "Can't format LUKS without device."
+msgstr "장치가 없는 상황에서 LUKS를 포매팅할 수 없습니다."
+
+#: lib/setup.c:1707 lib/setup.c:1959
+#, c-format
+msgid "Zoned device %s cannot be used for LUKS header."
+msgstr "%s 구역 지정 장치를 LUKS 헤더에 사용할 수 없습니다."
+
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
+msgid "Requested data alignment is not compatible with data offset."
+msgstr "요청한 데이터 정렬 동작은 데이터 오프셋과 호환성이 없습니다."
+
+#: lib/setup.c:1754 lib/setup.c:1984
+msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
+msgstr "경고: DAX 장치는 최소 단위 섹터 갱신을 보증할 수 없으므로 데이터를 파괴할 수 있습니다.\n"
+
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
+#, c-format
+msgid "Cannot wipe header on device %s."
+msgstr "%s 장치의 헤더를 소거할 수 없습니다."
+
+#: lib/setup.c:1805 lib/setup.c:2164
+#, c-format
+msgid "Device %s is too small for activation, there is no remaining space for data.\n"
+msgstr "%s 장치를 활성화하기에 너무 작습니다. 데이터를 둘 만한 여분 공간이 없습니다.\n"
+
+#: lib/setup.c:1846
+msgid "Volume key is too small for encryption with integrity extensions."
+msgstr "볼륨 키 크기가 무결성 확장을 동반한 암호화를 처리하기에 너무 작습니다."
+
+#: lib/setup.c:1850
+msgid "Integrity key size is too small."
+msgstr "무결성 키 크기가 너무 작습니다."
+
+#: lib/setup.c:1859
+#, c-format
+msgid "Cipher %s-%s (key size %zd bits) is not available."
+msgstr "암호화 알고리즘 %s-%s(%zd비트 키 크기)을(를) 사용할 수 없습니다."
+
+#: lib/setup.c:1900
+msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
+msgstr "경고: 장치 활성에 실패합니다. dm-crypt에 요청한 암호화 섹터 크기 지원이 빠졌습니다.\n"
+
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
+#, c-format
+msgid "Device %s is too small."
+msgstr "%s 장치 용량이 너무 작습니다."
+
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#, c-format
+msgid "Cannot format device %s in use."
+msgstr "사용 중인 %s 장치를 포매팅할 수 없습니다."
+
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
+#, c-format
+msgid "Cannot format device %s, permission denied."
+msgstr "%s 장치를 포매팅할 수 없습니다. 권한 거부함."
+
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
+#, c-format
+msgid "Cannot format integrity for device %s."
+msgstr "%s 장치의 무결성을 포매팅할 수 없습니다."
+
+#: lib/setup.c:2151 lib/setup.c:2629
+#, c-format
+msgid "Cannot format device %s."
+msgstr "%s 장치를 포매팅할 수 없습니다."
+
+#: lib/setup.c:2194
+msgid "Cannot get OPAL alignment parameters."
+msgstr "OPAL 정렬 매개변수를 가져올 수 없습니다."
+
+#: lib/setup.c:2206
+msgid "Bogus OPAL logical block size."
+msgstr "위조한 OPAL 논리 블록 크기입니다."
+
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
+msgid "Bogus OPAL logical block size differs from device block size."
+msgstr "위조한 OPAL 논리 블록 크기가 장치 블록 크기와 다릅니다."
+
+#: lib/setup.c:2217
+msgid "Requested data offset is not compatible with OPAL block size."
+msgstr "요청한 데이터 오프셋의 호환성이 OPAL 블록 크기와 맞지 않습니다."
+
+#: lib/setup.c:2224
+msgid "Requested data alignment is not compatible with OPAL alignment."
+msgstr "요청한 데이터 정렬 호환성이 OPAL 정렬과 맞지 않습니다."
+
+#: lib/setup.c:2244
+msgid "Data offset does not satisfy OPAL alignment requirements."
+msgstr "데이터 오프셋이 OPAL 정렬 요구 사항을 만족하지 않습니다."
+
+#: lib/setup.c:2257
+msgid "Requested data alignment does not satisfy locking range alignment requirements."
+msgstr "요청한 데이터 정렬이 잠금 범위 정렬 요구 사항을 만족하지 않습니다."
+
+#: lib/setup.c:2471
+#, c-format
+msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
+msgstr "OPAL 정렬 분할성에 맞추기 위해 장치 용량을 %<PRIu64> 섹터 보정합니다."
+
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
+#, c-format
+msgid "Failed to acquire OPAL lock on device %s."
+msgstr "%s 장치에서 OPAL 잠금 획득 실패."
+
+#: lib/setup.c:2541
+msgid "Incorrect OPAL Admin key."
+msgstr "올바르지 않은 OPAL 관리자 키입니다."
+
+#: lib/setup.c:2543
+msgid "Cannot setup OPAL segment."
+msgstr "OPAL 세그먼트를 설정할 수 없습니다."
+
+#: lib/setup.c:2625
+#, c-format
+msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
+msgstr "%s 장치를 포매팅할 수 없습니다. OPAL 장치가 완전히 쓰기 방지 상태인 것 같습니다."
+
+#: lib/setup.c:2627
+msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
+msgstr "펌웨어 버그인 것 같습니다. 복원하려면 OPAL PSID를 초기화하고 다시 연결하십시오."
+
+#: lib/setup.c:2647
+#, c-format
+msgid "Locking range %d reset on device %s failed."
+msgstr "%2$s 장치 초기화 중 %1$d 범위 잠금 실패."
+
+#: lib/setup.c:2667
+msgid "Can't format LOOPAES without device."
+msgstr "장치 없이 LOOPAES를 포매팅할 수 없습니다."
+
+#: lib/setup.c:2712
+msgid "Can't format VERITY without device."
+msgstr "장치 없이 VERITY를 포매팅할 수 없습니다."
+
+#: lib/setup.c:2723 lib/verity/verity.c:88
+#, c-format
+msgid "Unsupported VERITY hash type %d."
+msgstr "지원하지 않는 %d번 VERITY 해시 형식입니다."
+
+#: lib/setup.c:2729 lib/verity/verity.c:96
+msgid "Unsupported VERITY block size."
+msgstr "지원하지 않는 VERITY 블록 크기입니다."
+
+#: lib/setup.c:2734 lib/verity/verity.c:61
+msgid "Unsupported VERITY hash offset."
+msgstr "지원하지 않는 VERITY 해시 오프셋입니다."
+
+#: lib/setup.c:2739
+msgid "Unsupported VERITY FEC offset."
+msgstr "지원하지 않는 VERITY FEC 오프셋입니다."
+
+#: lib/setup.c:2763
+msgid "Data area overlaps with hash area."
+msgstr "데이터 영역이 해시 영역과 겹칩니다."
+
+#: lib/setup.c:2788
+msgid "Hash area overlaps with FEC area."
+msgstr "해시 영역이 FEC 영역과 겹칩니다."
+
+#: lib/setup.c:2795
+msgid "Data area overlaps with FEC area."
+msgstr "데이터 영역이 FEC 영역과 겹칩니다."
+
+#: lib/setup.c:2887
+msgid "Integrity key size mismatch."
+msgstr "무결성 키 크기가 일치하지 않습니다."
+
+#: lib/setup.c:2938
+#, c-format
+msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
+msgstr "경고: 요청한 태그 크기 %d바이트가 %s의 크기 출력 (%d바이트)과 다릅니다.\n"
+
+#: lib/setup.c:3051 lib/setup.c:3153
+#, c-format
+msgid "Unknown or unsupported device type %s requested."
+msgstr "알 수 없는 또는 지원하지 않는 %s 장치 형식을 요청했습니다."
+
+#: lib/setup.c:3067
+#, c-format
+msgid "Device %s does not provide inline integrity data fields."
+msgstr "%s 장치에서 인라인 무결성 데이터 필드를 제공하지 않습니다."
+
+#: lib/setup.c:3073
+#, c-format
+msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
+msgstr "%1$<PRIu32> [바이트] 인라인 태그 크기가 %3$s 장치에서 지정한 %2$<PRIu32> 값보다 큽니다."
+
+#: lib/setup.c:3088
+#, c-format
+msgid "Sector must be the same as device hardware sector (%zu bytes)."
+msgstr "섹터 값은 장치 하드웨어 섹터 값(%zu 바이트)과 같아야 합니다."
+
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
+#, c-format
+msgid "Unsupported parameters on device %s."
+msgstr "%s 장치에서 지원하지 않는 매개변수입니다."
+
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
+#, c-format
+msgid "Mismatching parameters on device %s."
+msgstr "%s 장치에서 일치하지 않는 매개변수입니다."
+
+#: lib/setup.c:3650
+msgid "Crypt devices mismatch."
+msgstr "암호화 장치가 일치하지 않습니다."
+
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
+#, c-format
+msgid "Failed to reload device %s."
+msgstr "%s 장치 다시 불러오기 실패."
+
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
+#, c-format
+msgid "Failed to suspend device %s."
+msgstr "%s 장치 대기 상태 전환 실패."
+
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
+#, c-format
+msgid "Failed to resume device %s."
+msgstr "%s 장치 상태 복귀 실패."
+
+#: lib/setup.c:3720
+#, c-format
+msgid "Fatal error while reloading device %s (on top of device %s)."
+msgstr "%s 장치(%s 장치 위)를 다시 불러오는 동안 치명적 오류가 있습니다."
+
+#: lib/setup.c:3723 lib/setup.c:3725
+#, c-format
+msgid "Failed to switch device %s to dm-error."
+msgstr "%s 장치의 dm-error 전환 실패."
+
+#: lib/setup.c:3768
+msgid "Can not resize LUKS2 device with static size."
+msgstr "LUKS2 장치 크기를 정적 크기로 바꿀 수 없습니다."
+
+#: lib/setup.c:3773
+msgid "Resize of LUKS2 device with integrity protection is not supported."
+msgstr "무결성 보호 기능이 있는 LUKS2 장치의 크기 변경을 지원하지 않습니다."
+
+#: lib/setup.c:3819
+msgid "Cannot resize loop device."
+msgstr "루프 장치의 크기를 바꿀 수 없습니다."
+
+#: lib/setup.c:3863
+msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
+msgstr "경고: 최대 크기를 이미 설정했거나 커널에서 크기 변경을 지원하지 않습니다.\n"
+
+#: lib/setup.c:3929
+msgid "Resize failed, the kernel doesn't support it."
+msgstr "크기 변경 실패. 커널에서 지원하지 않습니다."
+
+#: lib/setup.c:3961
+msgid "Do you really want to change UUID of device?"
+msgstr "정말로 장치 UUID를 바꾸시겠습니까?"
+
+#: lib/setup.c:4053
+msgid "Header backup file does not contain compatible LUKS header."
+msgstr "헤더 백업 파일에 호환 LUKS 헤더가 없습니다."
+
+#: lib/setup.c:4160
+#, c-format
+msgid "Volume %s is not active."
+msgstr "%s 볼륨이 동작 중이 아닙니다."
+
+#: lib/setup.c:4215
+#, c-format
+msgid "Volume %s is already suspended."
+msgstr "%s 볼륨이 이미 대기 상태에 있습니다."
+
+#: lib/setup.c:4241
+#, c-format
+msgid "Suspend is not supported for device %s."
+msgstr "%s 장치에서 대기 상태 전환을 지원하지 않습니다."
+
+#: lib/setup.c:4243 lib/setup.c:4251
+#, c-format
+msgid "Error during suspending device %s."
+msgstr "%s 장치 대기 상태 전환 중 오류가 있습니다."
+
+#: lib/setup.c:4266
+#, c-format
+msgid "Device %s was suspended but hardware OPAL device cannot be locked."
+msgstr "%s 장치를 대기 상태로 전환했으나 하드웨어 OPAL 장치를 잠글 수 없습니다."
+
+#: lib/setup.c:4297 lib/setup.c:4491
+#, c-format
+msgid "Resume is not supported for device %s."
+msgstr "%s 장치에서 상태 복귀를 지원하지 않습니다."
+
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
+#, c-format
+msgid "Error during resuming device %s."
+msgstr "%s 장치 상태 복귀 중 오류가 있습니다."
+
+#: lib/setup.c:4335
+msgid "Failed to unlink volume key from user specified keyring."
+msgstr "사용자 지정 키 모음으로의 볼륨 키 연결 해제 실패."
+
+#: lib/setup.c:4457 lib/setup.c:5637
+msgid "Failed to link volume key in user defined keyring."
+msgstr "사용자 지정 키 모음으로의 볼륨 키 연결 실패."
+
+#: lib/setup.c:4556 src/cryptsetup.c:2720
+#, c-format
+msgid "Volume %s is not suspended."
+msgstr "%s 볼륨은 대기 상태가 아닙니다."
+
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
+#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
+#: src/utils_reencrypt.c:1966
+msgid "Volume key does not match the volume."
+msgstr "볼륨 키가 볼륨과 맞지 않습니다."
+
+#: lib/setup.c:4821
+msgid "Failed to swap new key slot."
+msgstr "새 키 슬롯 교환 실패."
+
+#: lib/setup.c:4919
+#, c-format
+msgid "Key slot %d is invalid."
+msgstr "%d번 키 슬롯이 적절하지 않습니다."
+
+#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
+#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
+#, c-format
+msgid "Keyslot %d is not active."
+msgstr "%d번 키 슬롯은 동작 중이 아닙니다."
+
+#: lib/setup.c:4944
+msgid "Device header overlaps with data area."
+msgstr "장치 헤더가 데이터 영역과 겹칩니다."
+
+#: lib/setup.c:5165
+msgid "Reencryption in-progress. Cannot activate device."
+msgstr "재암호화를 진행 중입니다. 장치를 동작하게 할 수 없습니다."
+
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
+msgid "Failed to get reencryption lock."
+msgstr "재 암호화 잠금 가져오기 실패."
+
+#: lib/setup.c:5189
+msgid "LUKS2 reencryption recovery using volume key(s) failed."
+msgstr "볼륨 키를 활용한 LUKS2 재 암호화 복원 실패."
+
+#: lib/setup.c:5325
+#, c-format
+msgid "Device %s already exists."
+msgstr "%s 장치가 이미 있습니다."
+
+#: lib/setup.c:5332
+#, c-format
+msgid "Cannot use device %s, name is invalid or still in use."
+msgstr "%s 장치를 사용할 수 없습니다. 명칭이 부적절하거나 여전히 사용중입니다."
+
+#: lib/setup.c:5344
+msgid "Reencryption volume keys do not match the volume."
+msgstr "재암호화 볼륨 키가 볼륨과 일치하지 않습니다."
+
+#: lib/setup.c:5361
+msgid "Incorrect volume key specified for plain device."
+msgstr "원시 장치에 올바르지 않은 볼륨 키를 지정했습니다."
+
+#: lib/setup.c:5387 lib/setup.c:5448
+msgid "Device type is not properly initialized."
+msgstr "장치 형식을 제대로 초기화하지 않았습니다."
+
+#: lib/setup.c:5486
+msgid "Kernel keyring is not supported by the kernel."
+msgstr "커널 키 모음은 커널에서 지원하지 않습니다."
+
+#: lib/setup.c:5490
+msgid "Kernel keyring missing: required for passing signature to kernel."
+msgstr "커널 키 모음 빠짐: 커널에 시그니처 전달에 필요합니다."
+
+#: lib/setup.c:5545
+#, c-format
+msgid "Cannot use keyring key %s."
+msgstr "%s 키 모음 키를 사용할 수 없습니다."
+
+#: lib/setup.c:5758
+msgid "Incorrect root hash specified for verity device."
+msgstr "검증 장치에 올바르지 않은 루트 해시를 지정했습니다."
+
+#: lib/setup.c:5799 lib/setup.c:5824
+msgid "OPAL does not support deferred deactivation."
+msgstr "OPAL은 지연된 동작 상태 해제를 지원하지 않습니다."
+
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: src/utils_reencrypt.c:89
+#, c-format
+msgid "Device %s is still in use."
+msgstr "%s 장치를 여전히 사용중입니다."
+
+#: lib/setup.c:5832
+#, c-format
+msgid "Could not cancel deferred remove from device %s."
+msgstr "%s 장치에서 지연된 제거 동작을 취소할 수 없습니다."
+
+#: lib/setup.c:5854
+#, c-format
+msgid "Invalid device %s."
+msgstr "부적절한 %s 장치입니다."
+
+#: lib/setup.c:6001
+msgid "Volume key buffer too small."
+msgstr "볼륨 키 버퍼가 너무 작습니다."
+
+#: lib/setup.c:6012
+msgid "Cannot retrieve volume key for LUKS2 device."
+msgstr "LUKS2 장치에 볼륨 키를 넣을 수 없습니다."
+
+#: lib/setup.c:6021
+msgid "Cannot retrieve volume key for LUKS1 device."
+msgstr "LUKS1 장치에 볼륨 키를 넣을 수 없습니다."
+
+#: lib/setup.c:6035
+msgid "Cannot retrieve volume key for plain device."
+msgstr "원시 장치에 볼륨 키를 넣을 수 없습니다."
+
+#: lib/setup.c:6043
+msgid "Cannot retrieve root hash for verity device."
+msgstr "검증 장치에 루트 해시를 넣을 수 없습니다."
+
+#: lib/setup.c:6052
+msgid "Cannot retrieve volume key for BITLK device."
+msgstr "BITLK 장치에 볼륨 키를 넣을 수 없습니다."
+
+#: lib/setup.c:6057
+msgid "Cannot retrieve volume key for FVAULT2 device."
+msgstr "FVAULT2 장치에 볼륨 키를 넣을 수 없습니다."
+
+#: lib/setup.c:6059
+#, c-format
+msgid "This operation is not supported for %s crypt device."
+msgstr "이 동작은 %s 암호화 장치에서 지원하지 않습니다."
+
+#: lib/setup.c:6244 lib/setup.c:6255
+msgid "Dump operation is not supported for this device type."
+msgstr "덤프 동작은 이 장치 형식에서 지원하지 않습니다."
+
+#: lib/setup.c:6635
+#, c-format
+msgid "Data offset is not multiple of %u bytes."
+msgstr "데이터 오프셋은 %u바이트의 배수가 아닙니다."
+
+#: lib/setup.c:6943
+#, c-format
+msgid "Cannot convert device %s which is still in use."
+msgstr "여전히 사용중인 %s 장치를 변환할 수 없습니다."
+
+#: lib/setup.c:7251 lib/setup.c:7406
+#, c-format
+msgid "Failed to assign keyslot %u as the new volume key."
+msgstr "새 볼륨 키 %u번 키 슬롯 할당 실패."
+
+#: lib/setup.c:7275
+msgid "Failed to initialize default LUKS2 keyslot parameters."
+msgstr "기본 LUKS2 키 슬롯 매개변수 초기화 실패."
+
+#: lib/setup.c:7281
+#, c-format
+msgid "Failed to assign keyslot %d to digest."
+msgstr "키 슬롯 %d번 다이제스트 할당 실패."
+
+#: lib/setup.c:7523
+msgid "Cannot add key slot, all slots disabled and no volume key provided."
+msgstr "키 슬롯을 추가할 수 없습니다. 모든 슬롯을 사용할 수 없으며, 볼륨 키를 지정하지 않았습니다."
+
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
+msgid "Failed to load key in kernel keyring."
+msgstr "커널 키 모음에서 키 불러오기 실패."
+
+#: lib/setup.c:7807
+#, c-format
+msgid "Could not find keyring described by \"%s\"."
+msgstr "\"%s\"에서 설명하는 키 모음을 찾을 수 없습니다."
+
+#: lib/setup.c:7872
+msgid "Failed to acquire global memory-hard access serialization lock."
+msgstr "전역 메모리-하드 액세스 직렬화 잠금 취득 실패."
+
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
+msgid "Failed to open key file."
+msgstr "키 파일 열기 실패."
+
+#: lib/utils.c:213
+msgid "Cannot read keyfile from a terminal."
+msgstr "터미널에서 키 파일을 읽을 수 없습니다."
+
+#: lib/utils.c:229
+msgid "Failed to stat key file."
+msgstr "키 파일 상태 확인 실패."
+
+#: lib/utils.c:237 lib/utils.c:258
+msgid "Cannot seek to requested keyfile offset."
+msgstr "요청한 키 파일 오프셋을 탐색할 수 없습니다."
+
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
+#: src/utils_password.c:231
+msgid "Out of memory while reading passphrase."
+msgstr "암호를 읽는 동안 메모리 부족 발생."
+
+#: lib/utils.c:287
+msgid "Error reading passphrase."
+msgstr "암호를 읽는 중 오류가 있습니다."
+
+#: lib/utils.c:304
+msgid "Nothing to read on input."
+msgstr "입력에서 읽을 내용이 없습니다."
+
+#: lib/utils.c:311
+msgid "Maximum keyfile size exceeded."
+msgstr "최대 키 파일 크기를 초과했습니다."
+
+#: lib/utils.c:316
+msgid "Cannot read requested amount of data."
+msgstr "요청한 양의 데이터를 읽을 수 없습니다."
+
+#: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#, c-format
+msgid "Device %s does not exist or access denied."
+msgstr "%s 장치가 없거나 접근이 막혔습니다."
+
+#: lib/utils_device.c:217
+#, c-format
+msgid "Device %s is not compatible."
+msgstr "%s 장치의 호환성이 없습니다."
+
+#: lib/utils_device.c:546
+#, c-format
+msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
+msgstr "데이터 장치에 대한 최적 입출력 크기 위조값(%u 바이트)을 무시합니다."
+
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "%s의 용량을 %<PRIu64> 바이트로 늘릴 수 없습니다 (%s)."
+
+#: lib/utils_device.c:717
+#, c-format
+msgid "Device %s is too small. Need at least %<PRIu64> bytes."
+msgstr "%s 장치의 크기가 너무 작습니다. 최소한 %<PRIu64> 바이트가 필요합니다."
+
+#: lib/utils_device.c:798
+#, c-format
+msgid "Cannot use device %s which is in use (already mapped or mounted)."
+msgstr "사용중인 %s 장치를 사용할 수 없습니다 (이미 매핑했거나 마운트함)."
+
+#: lib/utils_device.c:802
+#, c-format
+msgid "Cannot use device %s, permission denied."
+msgstr "%s 장치를 사용할 수 없습니다. 권한 거절."
+
+#: lib/utils_device.c:805
+#, c-format
+msgid "Cannot get info about device %s."
+msgstr "%s 장치의 정보를 가져올 수 없습니다."
+
+#: lib/utils_device.c:828
+msgid "Cannot use a loopback device, running as non-root user."
+msgstr "루프백 장치를 사용할 수 없어, 일반 사용자로 실행합니다."
+
+#: lib/utils_device.c:839
+msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
+msgstr "루프백 장치 연결 실패 (자동 정리 플래그를 루프 장치와 함께 사용해야 합니다)."
+
+#: lib/utils_device.c:887
+#, c-format
+msgid "Requested offset is beyond real size of device %s."
+msgstr "필요한 오프셋이 %s 장치의 실제 크기 앞부분에 있습니다."
+
+#: lib/utils_device.c:895
+#, c-format
+msgid "Device %s has zero size."
+msgstr "%s 장치의 크기가 0입니다."
+
+#: lib/utils_pbkdf.c:105
+msgid "Requested PBKDF target time cannot be zero."
+msgstr "요청한 PBKDF 대상 시간은 0일 수 없습니다."
+
+#: lib/utils_pbkdf.c:111
+#, c-format
+msgid "Unknown PBKDF type %s."
+msgstr "알 수 없는 %s PBKDF 형식."
+
+#: lib/utils_pbkdf.c:116
+#, c-format
+msgid "Requested hash %s is not supported."
+msgstr "요청한 %s 해시는 지원하지 않습니다."
+
+#: lib/utils_pbkdf.c:127
+msgid "Requested PBKDF type is not supported for LUKS1."
+msgstr "요청한 PBKDF 형식은 LUKS1에서 지원하지 않습니다."
+
+#: lib/utils_pbkdf.c:133
+msgid "PBKDF max memory or parallel threads must not be set with pbkdf2."
+msgstr "PBKDF 최대 메모리 용량 또는 병렬 처리 스레드는 pbkdf2와 함께 설정하면 안됩니다."
+
+#: lib/utils_pbkdf.c:138 lib/utils_pbkdf.c:148
+#, c-format
+msgid "Forced iteration count is too low for %s (minimum is %u)."
+msgstr "강제 반복 계수 값이 %s에 대해 너무 낮습니다 (최소값 %u)."
+
+#: lib/utils_pbkdf.c:153
+#, c-format
+msgid "Forced memory cost is too low for %s (minimum is %u kilobytes)."
+msgstr "강제 메모리 할당 용량이 %s에 대해 너무 낮습니다 (최소 용량 %u kB)."
+
+#: lib/utils_pbkdf.c:160
+#, c-format
+msgid "Requested maximum PBKDF memory cost is too high (maximum is %d kilobytes)."
+msgstr "요청한 최대 PBKDF 메모리 용량이 너무 큽니다 (최대 %d kB)."
+
+#: lib/utils_pbkdf.c:165
+msgid "Requested maximum PBKDF memory cost is too high (limited by the integer maximal size)."
+msgstr "요청한 최대 PBKDF 메모리 용량이 너무 높습니다 (정수 최대값 범위로 제한)."
+
+#: lib/utils_pbkdf.c:169
+msgid "Requested maximum PBKDF memory cannot be zero."
+msgstr "요청한 최대 PBKDF 메모리 용량은 0일 수 없습니다."
+
+#: lib/utils_pbkdf.c:173
+#, c-format
+msgid "Requested maximum PBKDF parallel cost is too high (maximum is %d)."
+msgstr "요청한 최대 PBKDF 병렬 처리 갯수가 너무 큽니다 (최대 %d)."
+
+#: lib/utils_pbkdf.c:178
+msgid "Requested PBKDF parallel threads cannot be zero."
+msgstr "요청한 PBKDF 병렬 처리 스레드 값은 0일 수 없습니다."
+
+#: lib/utils_pbkdf.c:198
+msgid "Only PBKDF2 is supported in FIPS mode."
+msgstr "FIPS 모드에서는 PBKDF2만 지원합니다."
+
+#: lib/utils_benchmark.c:171
+msgid "PBKDF benchmark disabled but iterations not set."
+msgstr "PBKDF 벤치마킹은 동작하지 않지만 반복 횟수는 설정하지 않았습니다."
+
+#: lib/utils_benchmark.c:190
+#, c-format
+msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
+msgstr "PBKDF2 옵션의 호환성이 없습니다 (%s 해시 알고리즘 활용)."
+
+#: lib/utils_benchmark.c:210
+msgid "Not compatible PBKDF options."
+msgstr "PBKDF 옵션 호환성이 없습니다."
+
+#: lib/utils_device_locking.c:88
+#, c-format
+msgid "Locking aborted. The locking path %s/%s is unusable (not a directory or missing)."
+msgstr "잠금 동작을 멈추었습니다 %s/%s 잠금 경로를 사용할 수 없습니다 (디렉터리가 아니거나 경로 빠짐)."
+
+#: lib/utils_device_locking.c:105
+#, c-format
+msgid "Locking aborted. The locking path %s/%s is unusable (%s is not a directory)."
+msgstr "잠금 동작을 멈추었습니다. %s/%s 잠금 경로를 사용할 수 없습니다 (%s은(는) 디렉터리가 아님)."
+
+#: lib/utils_wipe.c:143 lib/utils_wipe.c:218 src/utils_reencrypt_luks1.c:700
+#: src/utils_reencrypt_luks1.c:793
+msgid "Cannot seek to device offset."
+msgstr "장치 오프셋을 탐색할 수 없습니다."
+
+#: lib/utils_wipe.c:240
+#, c-format
+msgid "Device wipe error, offset %<PRIu64>."
+msgstr "장치 소거 오류, 오프셋 %<PRIu64>."
+
+#: lib/utils_wipe.c:332
+msgid "Incorrect OPAL PSID."
+msgstr "올바르지 않은 OPAL PSID."
+
+#: lib/utils_wipe.c:334
+msgid "Cannot erase OPAL device."
+msgstr "OPAL 장치를 지울 수 없습니다."
+
+#: lib/luks1/keyencryption.c:27
+#, c-format
+msgid ""
+"Failed to setup dm-crypt key mapping for device %s.\n"
+"Check that kernel supports %s cipher (check syslog for more info)."
+msgstr ""
+"%s 장치에 대한 dm-crypt 키 매핑 설정에 실패했습니다.\n"
+"커널에서 %s 암호화 방식을 지원하는지 확인하십시오 (자세한 정보는 syslog 확인)."
+
+#: lib/luks1/keyencryption.c:32
+msgid "Key size in XTS mode must be 256 or 512 bits."
+msgstr "XTS모드의 키 크기는 256비트 또는 512비트여야 합니다."
+
+#: lib/luks1/keyencryption.c:34
+msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
+msgstr "암호화 방식 명세는 [cipher]-[mode]-[iv] 형식이어야 합니다."
+
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
+#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#, c-format
+msgid "Cannot write to device %s, permission denied."
+msgstr "%s 장치에 기록할 수 없습니다. 권한 거부."
+
+#: lib/luks1/keyencryption.c:108
+msgid "Failed to open temporary keystore device."
+msgstr "임시 키 스토어 장치 열기 실패."
+
+#: lib/luks1/keyencryption.c:115
+msgid "Failed to access temporary keystore device."
+msgstr "임시 키 스토어 장치 접근 실패."
+
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
+msgid "IO error while encrypting keyslot."
+msgstr "키 슬롯 암호화 중 입출력 오류."
+
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
+#: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
+#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: src/utils_reencrypt_luks1.c:120
+#, c-format
+msgid "Cannot open device %s."
+msgstr "%s 장치를 열 수 없습니다."
+
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
+msgid "IO error while decrypting keyslot."
+msgstr "키 슬롯을 해독하는 중 입출력 오류."
+
+#: lib/luks1/keymanage.c:117
+#, c-format
+msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
+msgstr "%s 장치 크기가 너무 작습니다 (LUKS1 은 최소 %<PRIu64> 바이트가 필요)."
+
+#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
+#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
+#: lib/luks1/keymanage.c:181
+#, c-format
+msgid "LUKS keyslot %u is invalid."
+msgstr "LUKS 키 슬롯 %u번이 적절하지 않습니다."
+
+#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#, c-format
+msgid "Requested header backup file %s already exists."
+msgstr "요청한 %s 헤더 백업 파일이 이미 있습니다."
+
+#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#, c-format
+msgid "Cannot create header backup file %s."
+msgstr "%s 헤더 백업 파일을 만들 수 없습니다."
+
+#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#, c-format
+msgid "Cannot write header backup file %s."
+msgstr "%s 헤더 백업 파일을 기록할 수 없습니다."
+
+#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+msgid "Backup file does not contain valid LUKS header."
+msgstr "백업 파일에 적절한 LUKS 헤더가 없습니다."
+
+#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
+#: lib/luks2/luks2_json_metadata.c:1450
+#, c-format
+msgid "Cannot open header backup file %s."
+msgstr "%s 헤더 백업 파일을 열 수 없습니다."
+
+#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#, c-format
+msgid "Cannot read header backup file %s."
+msgstr "%s 헤더 백업 파일을 읽을 수 없습니다."
+
+#: lib/luks1/keymanage.c:326
+msgid "Data offset or key size differs on device and backup, restore failed."
+msgstr "장치와 백업의 데이터 오프셋 또는 키 크기가 다릅니다. 복구 실패."
+
+#: lib/luks1/keymanage.c:334
+#, c-format
+msgid "Device %s %s%s"
+msgstr "%s 장치 %s%s"
+
+#: lib/luks1/keymanage.c:335
+msgid "does not contain LUKS header. Replacing header can destroy data on that device."
+msgstr "LUKS 헤더가 없습니다. 헤더를 교체하면 장치 데이터가 깨질 수 있습니다."
+
+#: lib/luks1/keymanage.c:336
+msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
+msgstr "LUKS 헤더가 이미 있습니다. 헤더를 교체하면 기존 키 슬롯이 깨질 수 있습니다."
+
+#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+msgid ""
+"\n"
+"WARNING: real device header has different UUID than backup!"
+msgstr ""
+"\n"
+"경고: 실제 장치 헤더에 백업 때와 다른 UUID가 있습니다!"
+
+#: lib/luks1/keymanage.c:385
+msgid "Non standard key size, manual repair required."
+msgstr "비 표준 키 길이, 직접 복구가 필요합니다."
+
+#: lib/luks1/keymanage.c:395
+msgid "Non standard keyslots alignment, manual repair required."
+msgstr "비 표준 키 슬롯 정렬, 직접 복구가 필요합니다."
+
+#: lib/luks1/keymanage.c:404
+#, c-format
+msgid "Cipher mode repaired (%s -> %s)."
+msgstr "암호화 방식 모드를 복구했습니다 (%s -> %s)."
+
+#: lib/luks1/keymanage.c:415
+#, c-format
+msgid "Cipher hash repaired to lowercase (%s)."
+msgstr "암호화 방식 해시를 소문자로 복구했습니다 (%s)."
+
+#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
+#: lib/luks1/keymanage.c:756
+#, c-format
+msgid "Requested LUKS hash %s is not supported."
+msgstr "요청한 %s LUKS 해시는 지원하지 않습니다."
+
+#: lib/luks1/keymanage.c:431
+msgid "Repairing keyslots."
+msgstr "키 슬롯을 복원합니다."
+
+#: lib/luks1/keymanage.c:450
+#, c-format
+msgid "Keyslot %i: offset repaired (%u -> %u)."
+msgstr "키 슬롯 %i: 오프셋을 복원했습니다 (%u -> %u)."
+
+#: lib/luks1/keymanage.c:458
+#, c-format
+msgid "Keyslot %i: stripes repaired (%u -> %u)."
+msgstr "키 슬롯 %i: 스트라이프를 복원했습니다 (%u -> %u)."
+
+#: lib/luks1/keymanage.c:467
+#, c-format
+msgid "Keyslot %i: bogus partition signature."
+msgstr "키 슬롯 %i: 위조한 분할 영역 시그니처입니다."
+
+#: lib/luks1/keymanage.c:472
+#, c-format
+msgid "Keyslot %i: salt wiped."
+msgstr "키 슬롯 %i: 솔트 값을 소거했습니다."
+
+#: lib/luks1/keymanage.c:489
+msgid "Writing LUKS header to disk."
+msgstr "LUKS 헤더를 디스크에 기록합니다."
+
+#: lib/luks1/keymanage.c:494
+msgid "Repair failed."
+msgstr "복구 실패."
+
+#: lib/luks1/keymanage.c:549
+#, c-format
+msgid "LUKS cipher mode %s is invalid."
+msgstr "LUKS 암호화 방식 모드 %s이(가) 적절하지 않습니다."
+
+#: lib/luks1/keymanage.c:554
+#, c-format
+msgid "LUKS hash %s is invalid."
+msgstr "%s LUKS 해시가 적절하지 않습니다."
+
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
+msgid "No known problems detected for LUKS header."
+msgstr "LUKS 헤더에 알려진 문제가 없습니다."
+
+#: lib/luks1/keymanage.c:689
+#, c-format
+msgid "Error during update of LUKS header on device %s."
+msgstr "%s 장치의 LUKS 헤더 업데이트 중 오류가 있습니다."
+
+#: lib/luks1/keymanage.c:697
+#, c-format
+msgid "Error re-reading LUKS header after update on device %s."
+msgstr "%s 장치 업데이트 후 LUKS 헤더 다시 읽기 오류"
+
+#: lib/luks1/keymanage.c:750
+msgid "Data offset for LUKS header must be either 0 or higher than header size."
+msgstr "LUKS 헤더용 데이터 오프셋은 0 또는 헤더 길이보다 더 큰 값이어야 합니다."
+
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
+#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: src/utils_reencrypt.c:701
+msgid "Wrong LUKS UUID format provided."
+msgstr "잘못된 LUKS UUID 형식을 지정했습니다."
+
+#: lib/luks1/keymanage.c:783
+msgid "Cannot create LUKS header: reading random salt failed."
+msgstr "LUKS 헤더를 만들 수 없음: 임의 솔트 값 읽기 실패."
+
+#: lib/luks1/keymanage.c:811
+#, c-format
+msgid "Cannot create LUKS header: header digest failed (using hash %s)."
+msgstr "LUKS 헤더를 만들 수 없음: 헤더 다이제스트 실패 (%s 해시 사용)."
+
+#: lib/luks1/keymanage.c:856
+#, c-format
+msgid "Key slot %d active, purge first."
+msgstr "%d번 키 슬롯이 동작 중입니다. 우선 제거하십시오."
+
+#: lib/luks1/keymanage.c:862
+#, c-format
+msgid "Key slot %d material includes too few stripes. Header manipulation?"
+msgstr "%d번 키 슬롯의 스트라이프가 너무 적습니다. 헤더를 조작했습니까?"
+
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
+msgid "PBKDF2 iteration value overflow."
+msgstr "PBKDF2 반복 값이 지정 범위를 넘었습니다."
+
+#: lib/luks1/keymanage.c:1022
+#, c-format
+msgid "Cannot open keyslot (using hash %s)."
+msgstr "키 슬롯을 열 수 없습니다 (%s 해시 사용)."
+
+#: lib/luks1/keymanage.c:1118
+#, c-format
+msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
+msgstr "키 슬롯 번호 %d번이 적절하지 않습니다. 0에서 %d 사이 값 중 하나로 키 슬롯을 선택하십시오."
+
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
+#, c-format
+msgid "Cannot wipe device %s."
+msgstr "%s 장치를 소거할 수 없습니다."
+
+#: lib/loopaes/loopaes.c:140
+msgid "Detected not yet supported GPG encrypted keyfile."
+msgstr "아직 지원하지 않는 GPG 암호화 키 파일을 확인했습니다."
+
+#: lib/loopaes/loopaes.c:141
+msgid "Please use gpg --decrypt <KEYFILE> | cryptsetup --keyfile=- ...\n"
+msgstr "gpg --decrypt <키_파일> | cryptsetup --keyfile=- ... 명령을 사용하십시오\n"
+
+#: lib/loopaes/loopaes.c:162 lib/loopaes/loopaes.c:182
+msgid "Incompatible loop-AES keyfile detected."
+msgstr "loop-AES 키 파일 비호환 요소를 확인했습니다."
+
+#: lib/loopaes/loopaes.c:238
+msgid "Kernel does not support loop-AES compatible mapping."
+msgstr "커널에서 loop-AES 호환 매핑을 지원하지 않습니다."
+
+#: lib/tcrypt/tcrypt.c:495
+#, c-format
+msgid "Error reading keyfile %s."
+msgstr "%s 키 파일 읽는 중 오류가 있습니다."
+
+#: lib/tcrypt/tcrypt.c:549
+#, c-format
+msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
+msgstr "TCRYPT 최대 암호 길이(%zu)를 초과했습니다."
+
+#: lib/tcrypt/tcrypt.c:591
+#, c-format
+msgid "PBKDF2 hash algorithm %s not available, skipping."
+msgstr "%s PBKDF2 해시 알고리즘을 사용할 수 없습니다. 건너뜀."
+
+#: lib/tcrypt/tcrypt.c:743
+#, c-format
+msgid "Activation is not supported for %d sector size."
+msgstr "%d 섹터 크기의 장치 동작 개시를 지원하지 않습니다."
+
+#: lib/tcrypt/tcrypt.c:749
+msgid "Kernel does not support activation for this TCRYPT legacy mode."
+msgstr "커널에서 TCRYPT 레거시 모드의 동작 시작을 지원하지 않습니다."
+
+#: lib/tcrypt/tcrypt.c:804
+#, c-format
+msgid "Activating TCRYPT system encryption for partition %s."
+msgstr "%s 분할 영역에 대한 TCRYPT 시스템 암호화 동작을 시작합니다."
+
+#: lib/tcrypt/tcrypt.c:819
+msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
+msgstr "TCRYPT 시스템 분할 영역 오프셋을 확인할 수 없어, 전체 암호화 영역의 동작을 시작합니다."
+
+#: lib/tcrypt/tcrypt.c:828
+msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
+msgstr "TCRYPT 시스템 분할 영역 오프셋을 확인할 수 없어, 시스템 분할 영역 장치 동작을 시작합니다."
+
+#: lib/tcrypt/tcrypt.c:908
+msgid "Kernel does not support TCRYPT compatible mapping."
+msgstr "커널에서 TCRYPT 호환 매핑을 지원하지 않습니다."
+
+#: lib/tcrypt/tcrypt.c:1137
+msgid "This function is not supported without TCRYPT header load."
+msgstr "이 함수는 TCRYPT 헤더를 불러오지 않으면 동작을 지원하지 않습니다."
+
+#: lib/bitlk/bitlk.c:293
+#, c-format
+msgid "Unexpected metadata entry type '%u' found when parsing supported Volume Master Key."
+msgstr "지원하는 볼륨 마스터 키를 해석하는 동안 예기치 못한 '%u' 메타데이터 요소 형식을 찾았습니다."
+
+#: lib/bitlk/bitlk.c:351
+msgid "Invalid string found when parsing Volume Master Key."
+msgstr "볼륨 마스터 키를 해석하는 동안 부적절한 문자열을 찾았습니다."
+
+#: lib/bitlk/bitlk.c:355
+#, c-format
+msgid "Unexpected string ('%s') found when parsing supported Volume Master Key."
+msgstr "지원하는 볼륨 마스터 키를 해석하는 동안 예기치 못한 문자열('%s')을 찾았습니다."
+
+#: lib/bitlk/bitlk.c:375
+#, c-format
+msgid "Unexpected metadata entry value '%u' found when parsing supported Volume Master Key."
+msgstr "지원하는 볼륨 마스터 키를 해석하는 동안 예기치 못한 '%u' 메타데이터 요소 값을 찾았습니다."
+
+#: lib/bitlk/bitlk.c:528
+msgid "BITLK version 1 is currently not supported."
+msgstr "BITLK 버전 1은 현재 지원하지 않습니다."
+
+#: lib/bitlk/bitlk.c:534
+msgid "Invalid or unknown boot signature for BITLK device."
+msgstr "부적절하거나 알 수 없는 BITLK 장치의 부팅 시그니처입니다."
+
+#: lib/bitlk/bitlk.c:546
+#, c-format
+msgid "Unsupported sector size %<PRIu16>."
+msgstr "지원하지 않는 섹터 크기 값 %<PRIu16>."
+
+#: lib/bitlk/bitlk.c:554
+#, c-format
+msgid "Failed to read BITLK header from %s."
+msgstr "%s에서 BITLK 헤더 읽기 실패."
+
+#: lib/bitlk/bitlk.c:603
+#, c-format
+msgid "Failed to read and validate BITLK FVE metadata from %s."
+msgstr "%s에서 BITLK FVE 메타데이터 읽기 및 검증 실패."
+
+#: lib/bitlk/bitlk.c:610
+#, c-format
+msgid "Failed to validate the location of BITLK FVE metadata from %s."
+msgstr "%s에서 BITLK FVE 메타데이터 위치 검증 실패."
+
+#: lib/bitlk/bitlk.c:621
+#, c-format
+msgid "BITLK FVE metadata changed between reads from %s."
+msgstr "%s에서 읽은 내용 대비 BITLK FVE 메타데이터가 바뀌었습니다."
+
+#: lib/bitlk/bitlk.c:628
+#, c-format
+msgid "Failed to hash BITLK FVE metadata read from %s."
+msgstr "%s에서 읽은 BITLK FVE 메타데이터 해싱 실패."
+
+#: lib/bitlk/bitlk.c:644
+#, c-format
+msgid "Failed to parse BITLK FVE validation metadata from %s."
+msgstr "%s에서 BITLK FVE 유효성 메타데이터 해석 실패."
+
+#: lib/bitlk/bitlk.c:695
+msgid "Unknown or unsupported encryption type."
+msgstr "알 수 없거나 지원하지 않는 암호화 형식."
+
+#: lib/bitlk/bitlk.c:733
+#, c-format
+msgid "Failed to check BITLK metadata entries previously read from %s."
+msgstr "%s에서 앞서 읽은 BITLK 메타데이터 항목 확인 실패."
+
+#: lib/bitlk/bitlk.c:853
+msgid "Failed to convert BITLK volume description"
+msgstr "BITLK 볼륨 설명 변환 실패"
+
+#: lib/bitlk/bitlk.c:1018
+#, c-format
+msgid "Unexpected metadata entry type '%u' found when parsing external key."
+msgstr "외부 키를 해석하는 동안 예기치 못한 '%u' 메타데이터 요소 형식을 찾았습니다."
+
+#: lib/bitlk/bitlk.c:1041
+#, c-format
+msgid "BEK file GUID '%s' does not match GUID of the volume."
+msgstr "BEK 파일 GUID '%s'는 볼륨의 GUID와 일치하지 않습니다."
+
+#: lib/bitlk/bitlk.c:1045
+#, c-format
+msgid "Unexpected metadata entry value '%u' found when parsing external key."
+msgstr "외부 키를 해석하는 동안 예기치 못한 '%u' 메타데이터 항목 값을 찾았습니다."
+
+#: lib/bitlk/bitlk.c:1084
+#, c-format
+msgid "Unsupported BEK metadata version %<PRIu32>"
+msgstr "지원하지 않는 BEK 메타데이터 버전 %<PRIu32>"
+
+#: lib/bitlk/bitlk.c:1089
+#, c-format
+msgid "Unexpected BEK metadata size %<PRIu32> does not match BEK file length"
+msgstr "예기치 못한 %<PRIu32> BEK 메타데이터 크기가 BEK 파일 길이와 일치하지 않습니다"
+
+#: lib/bitlk/bitlk.c:1115
+msgid "Unexpected metadata entry found when parsing startup key."
+msgstr "시작 키를 해석하는 동안 예기치 못한 메타데이터 요소를 찾았습니다."
+
+#: lib/bitlk/bitlk.c:1218
+msgid "This operation is not supported."
+msgstr "이 동작은 지원하지 않습니다."
+
+#: lib/bitlk/bitlk.c:1226
+msgid "Unexpected key data size."
+msgstr "예기치 않은 키 데이터 크기."
+
+#: lib/bitlk/bitlk.c:1442
+msgid "This BITLK device is in an unsupported state and cannot be activated."
+msgstr "이 BITLK 장치는 지원하지 않는 상태이며, 동작을 시작할 수 없습니다."
+
+#: lib/bitlk/bitlk.c:1447
+#, c-format
+msgid "BITLK devices with type '%s' cannot be activated."
+msgstr "'%s' 형식의 BITLK 장치의 동작을 시작할 수 없습니다."
+
+#: lib/bitlk/bitlk.c:1486
+#, c-format
+msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
+msgstr "경고: 비트로커 볼륨 크기 %<PRIu64>가 하부 장치 크기 %<PRIu64>와 일치하지 않습니다"
+
+#: lib/bitlk/bitlk.c:1613
+msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
+msgstr "장치 동작을 개시할 수 없습니다. 커널 dm-crypt 에 BITLK IV 지원이 빠졌습니다."
+
+#: lib/bitlk/bitlk.c:1617
+msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
+msgstr "장치 동작을 개시할 수 없습니다. 커널 dm-crypt에 BITLK 엘레펀트 diffuser 지원이 빠졌습니다."
+
+#: lib/bitlk/bitlk.c:1621
+msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
+msgstr "장치 동작을 개시할 수 없습니다. 커널 dm-crypt 에 거대 섹터 크기 지원이 빠졌습니다."
+
+#: lib/bitlk/bitlk.c:1625
+msgid "Cannot activate device, kernel dm-zero module is missing."
+msgstr "장치 동작을 개시할 수 없습니다. 커널 dm-zero 모듈이 빠졌습니다."
+
+#: lib/fvault2/fvault2.c:532
+#, c-format
+msgid "Could not read %u bytes of volume header."
+msgstr "볼륨 헤더의 %u 바이트를 읽을 수 없습니다."
+
+#: lib/fvault2/fvault2.c:544
+#, c-format
+msgid "Unsupported FVAULT2 version %<PRIu16>."
+msgstr "지원하지 않는 FVAULT2 버전 %<PRIu16>."
+
+#: lib/verity/verity.c:55 lib/verity/verity.c:169
+#, c-format
+msgid "Verity device %s does not use on-disk header."
+msgstr "%s 검증 장치가 디스크의 헤더를 사용하지 않고 있습니다."
+
+#: lib/verity/verity.c:83
+#, c-format
+msgid "Unsupported VERITY version %d."
+msgstr "지원하지 않는 VERITY 버전 %d."
+
+#: lib/verity/verity.c:118
+msgid "VERITY header corrupted."
+msgstr "검증 헤더가 망가졌습니다."
+
+#: lib/verity/verity.c:163
+#, c-format
+msgid "Wrong VERITY UUID format provided on device %s."
+msgstr "%s 장치에서 제공하는  잘못된 검증 UUID 형식."
+
+#: lib/verity/verity.c:207
+#, c-format
+msgid "Error during update of verity header on device %s."
+msgstr "%s 장치에서 검증 헤더 업데이트 중 오류가 있습니다."
+
+#: lib/verity/verity.c:261
+msgid "Root hash signature verification is not supported."
+msgstr "루트 해시 시그니처 검증을 지원하지 않습니다."
+
+#: lib/verity/verity.c:266
+msgid "Root hash signature required."
+msgstr "루트 해시 시그니처가 필요합니다."
+
+#: lib/verity/verity.c:282
+msgid "Errors cannot be repaired with FEC device."
+msgstr "FEC 장치로 오류를 복원할 수 없습니다"
+
+#: lib/verity/verity.c:284
+#, c-format
+msgid "Found %u repairable errors with FEC device."
+msgstr "FEC 장치로 복원할 수 있는 오류  %u건을 찾았습니다."
+
+#: lib/verity/verity.c:368
+msgid "Kernel does not support dm-verity mapping."
+msgstr "커널에서 dm-verity 매핑을 지원하지 않습니다."
+
+#: lib/verity/verity.c:372
+msgid "Kernel does not support dm-verity signature option."
+msgstr "커널에서 dm-verity 시그니처 옵션을 지원하지 않습니다."
+
+#: lib/verity/verity.c:383
+msgid "Verity device detected corruption after activation."
+msgstr "동작 개시 후 검증 장치의 손상을 찾았습니다."
+
+#: lib/verity/verity_hash.c:53
+#, c-format
+msgid "Spare area is not zeroed at position %<PRIu64>."
+msgstr "여분 영역 크기가 %<PRIu64> 위치에서 0이 아닙니다."
+
+#: lib/verity/verity_hash.c:154 lib/verity/verity_hash.c:287
+#: lib/verity/verity_hash.c:298
+msgid "Device offset overflow."
+msgstr "장치 오프셋 영역 넘어감."
+
+#: lib/verity/verity_hash.c:205
+#, c-format
+msgid "Verification failed at position %<PRIu64>."
+msgstr "%<PRIu64> 위치에서 검증 실패."
+
+#: lib/verity/verity_hash.c:294
+msgid "Hash area overflow."
+msgstr "해시 영역 넘쳐남."
+
+#: lib/verity/verity_hash.c:381
+msgid "Verification of data area failed."
+msgstr "데이터 영역 검증 실패."
+
+#: lib/verity/verity_hash.c:386
+msgid "Verification of root hash failed."
+msgstr "루트 해시 검증 실패."
+
+#: lib/verity/verity_hash.c:392
+msgid "Input/output error while creating hash area."
+msgstr "해시 영역을 만드는 동안 입출력 오류가 있습니다."
+
+#: lib/verity/verity_hash.c:394
+msgid "Creation of hash area failed."
+msgstr "해시 영역 만들기 실패."
+
+#: lib/verity/verity_hash.c:429
+#, c-format
+msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
+msgstr "경고: 데이터 블록 크기가 페이지 크기(%u)를 초과하면 커널이 장치 동작을 개시할 수 없습니다."
+
+#: lib/verity/verity_fec.c:118
+msgid "Failed to allocate RS context."
+msgstr "RS 컨텍스트 할당 실패."
+
+#: lib/verity/verity_fec.c:136
+msgid "Failed to allocate buffer."
+msgstr "버퍼 할당 실패."
+
+#: lib/verity/verity_fec.c:146
+#, c-format
+msgid "Failed to read RS block %<PRIu64> byte %d."
+msgstr "RS 블록 %<PRIu64> 바이트 %d 읽기 실패."
+
+#: lib/verity/verity_fec.c:159
+#, c-format
+msgid "Failed to read parity for RS block %<PRIu64>."
+msgstr "RS 블록 %<PRIu64>의 패리티 읽기 실패."
+
+#: lib/verity/verity_fec.c:167
+#, c-format
+msgid "Failed to repair parity for block %<PRIu64>."
+msgstr "RS 블록 %<PRIu64> 패리티 복원 실패."
+
+#: lib/verity/verity_fec.c:179
+#, c-format
+msgid "Failed to write parity for RS block %<PRIu64>."
+msgstr "RS 블록 %<PRIu64> 패리티 기록 실패."
+
+#: lib/verity/verity_fec.c:195
+msgid "Block sizes must match for FEC."
+msgstr "블록 크기는 FEC에 일치해야 합니다."
+
+#: lib/verity/verity_fec.c:201
+msgid "Invalid number of parity bytes."
+msgstr "부적절한 많은 양의 패리티 바이트."
+
+#: lib/verity/verity_fec.c:235
+msgid "Invalid FEC segment length."
+msgstr "부적절한 FEC 세그먼트 길이입니다."
+
+#: lib/verity/verity_fec.c:303
+#, c-format
+msgid "Failed to determine size for device %s."
+msgstr "%s 장치 크기 확인 실패."
+
+#: lib/integrity/integrity.c:50
+#, c-format
+msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
+msgstr "%2$s에서 커널의 비호환 dm-integrity 메타데이터(버전 %1$u)를 찾았습니다."
+
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+msgid "Kernel does not support dm-integrity mapping."
+msgstr "커널에서 dm-integrity 매핑을 지원하지 않습니다"
+
+#: lib/integrity/integrity.c:314
+msgid "Kernel does not support dm-integrity fixed metadata alignment."
+msgstr "커널에서 dm-integrity 고정 메타데이터 정렬을 지원하지 않습니다."
+
+#: lib/integrity/integrity.c:323
+msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
+msgstr "커널에서 안전하지 않은 재계산 옵션 동작 개시를 거부했습니다 (그래도 실행하려면 이전 동작 개시 옵션 참고)."
+
+#: lib/integrity/integrity.c:329
+msgid "Kernel does not support dm-integrity inline mode."
+msgstr "커널에서 dm-integrity 인라인 모드를 지원하지 않습니다."
+
+#: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
+#: lib/luks2/luks2_json_metadata.c:1510
+#, c-format
+msgid "Failed to acquire write lock on device %s."
+msgstr "%s 장치의 쓰기 잠금 획득 실패."
+
+#: lib/luks2/luks2_disk_metadata.c:391
+msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation."
+msgstr "LUKS2 메타데이터의 동시 업데이트 시도를 확인했습니다. 동작 멈춤."
+
+#: lib/luks2/luks2_disk_metadata.c:726 lib/luks2/luks2_disk_metadata.c:747
+msgid ""
+"Device contains ambiguous signatures, cannot auto-recover LUKS2.\n"
+"Please run \"cryptsetup repair\" for recovery."
+msgstr ""
+"장치에 모호한 시그니쳐가 있어, LUKS2를 자동으로 복구할 수 없습니다.\n"
+"복구하려면, \"cryptsetup repair\" 명령을 수행하십시오."
+
+#: lib/luks2/luks2_json_format.c:219
+#, c-format
+msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
+msgstr "경고: 키 슬롯 영역(%<PRIu64> 바이트)이 너무 작아서, 가능한 LUKS2 키 슬롯 수가 매우 제한적입니다.\n"
+
+#: lib/luks2/luks2_json_format.c:418
+msgid "Requested data offset is too small."
+msgstr "요청 데이터 오프셋 값이 너무 작습니다."
+
+#: lib/luks2/luks2_json_format.c:459
+#, c-format
+msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
+msgstr "경고: LUKS2 메타데이터 크기가 %<PRIu64> 바이트로 바뀌었습니다.\n"
+
+#: lib/luks2/luks2_json_format.c:463
+#, c-format
+msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
+msgstr "경고: LUKS2 키 슬롯 영역 크기가 %<PRIu64> 바이트로 바뀌었습니다.\n"
+
+#: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
+#, c-format
+msgid "Failed to acquire read lock on device %s."
+msgstr "%s 장치의 잠금 읽기 획득 실패."
+
+#: lib/luks2/luks2_json_metadata.c:1277
+msgid "Label is too long."
+msgstr "레이블이 너무 깁니다."
+
+#: lib/luks2/luks2_json_metadata.c:1435
+#, c-format
+msgid "Forbidden LUKS2 requirements detected in backup %s."
+msgstr "%s 백업에서 금지하고 있는 LUKS2 요구 사항을 확인했습니다."
+
+#: lib/luks2/luks2_json_metadata.c:1474
+msgid "Data offset differ on device and backup, restore failed."
+msgstr "장치와 백업 간 데이터 오프셋이 다릅니다. 복원 실패."
+
+#: lib/luks2/luks2_json_metadata.c:1480
+msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
+msgstr "장치와 백업간 키 슬롯 영역이 들어간 바이너리 헤더 크기가 다릅니다. 복구 실패."
+
+#: lib/luks2/luks2_json_metadata.c:1487
+#, c-format
+msgid "Device %s %s%s%s%s"
+msgstr "%s 장치 %s%s%s%s"
+
+#: lib/luks2/luks2_json_metadata.c:1488
+msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
+msgstr "LUKS2 헤더가 없습니다. 헤더 내용을 바꾸면 장치의 데이터가 깨질 수 있습니다."
+
+#: lib/luks2/luks2_json_metadata.c:1489
+msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
+msgstr "이미 LUKS2 헤더가 있습니다. 헤더 내용을 바꾸면 기존 키 슬롯이 깨집니다."
+
+#: lib/luks2/luks2_json_metadata.c:1491
+msgid ""
+"\n"
+"WARNING: unknown LUKS2 requirements detected in real device header!\n"
+"Replacing header with backup may corrupt the data on that device!"
+msgstr ""
+"\n"
+"경고: 알 수 없는 LUKS2 요구사항을 실제 장치 헤더에서 찾았습니다!\n"
+"헤더 내용을 바꾸면 해당 장치의 데이터가 깨질 수도 있습니다!"
+
+#: lib/luks2/luks2_json_metadata.c:1493
+msgid ""
+"\n"
+"WARNING: Unfinished offline reencryption detected on the device!\n"
+"Replacing header with backup may corrupt data."
+msgstr ""
+"\n"
+"경고: 끝내지 않은 오프라인 재암호화를 장치에서 확인했습니다!\n"
+"헤더를 백업 내용으로 바뀌면 데이터가 깨잘 수도 있습니다."
+
+#: lib/luks2/luks2_json_metadata.c:1591
+#, c-format
+msgid "Ignored unknown flag %s."
+msgstr "알 수 없는 %s 플래그를 무시했습니다."
+
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
+#, c-format
+msgid "Missing key for dm-crypt segment %u"
+msgstr "dm-crypt 세그먼트 %u번에 키 빠짐"
+
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
+msgid "Failed to set dm-crypt segment."
+msgstr "dm-crypt 세그먼트 설정 실패."
+
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
+msgid "Failed to set dm-linear segment."
+msgstr "dm-linear 세그먼트 설정 실패."
+
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
+msgid "No known cipher specification pattern detected in LUKS2 header."
+msgstr "LUKS2 헤더에서 찾은 알려진 암호화 방식 명세 패턴이 없습니다."
+
+#: lib/luks2/luks2_json_metadata.c:2709
+msgid "OPAL device must have static device size."
+msgstr "OPAL 장치에 정적 장치 크기 정보가 들어가야 합니다."
+
+#: lib/luks2/luks2_json_metadata.c:2729
+msgid "Encrypted OPAL device with integrity must be smaller than locking range."
+msgstr "무결성 정보를 지닌 암호화한 OPAL 장치는 잠금 범위보다 작아야 합니다."
+
+#: lib/luks2/luks2_json_metadata.c:2734
+msgid "OPAL device must have same size as locking range."
+msgstr "OPAL 장치는 잠금 범위와 같은 크기를 지녀야 합니다."
+
+#: lib/luks2/luks2_json_metadata.c:2754
+#, c-format
+msgid "OPAL device is %s already unlocked.\n"
+msgstr "OPAN 장치는 %s(이)며, 이미 잠금을 해제했습니다.\n"
+
+#: lib/luks2/luks2_json_metadata.c:2793
+msgid "Unsupported device integrity configuration."
+msgstr "지원하지 않는 장치 무결성 설정."
+
+#: lib/luks2/luks2_json_metadata.c:2809
+msgid "Underlying dm-integrity device with unexpected provided data sectors."
+msgstr "dm-integrity 장치 기저에 예기치 못한 지정 데이터 섹터가 있습니다."
+
+#: lib/luks2/luks2_json_metadata.c:2911
+msgid "Reencryption in-progress. Cannot deactivate device."
+msgstr "재암호화 진행 중입니다. 장치 동작 상태를 해제할 수 없습니다."
+
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
+#, c-format
+msgid "Failed to replace suspended device %s with dm-error target."
+msgstr "대기 상태에 있는 %s 장치의 dm-error 타겟 전환 실패."
+
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
+#, c-format
+msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
+msgstr "%s 장치의 동작 상태를 해제했지만 OPAL 장치 하드웨어를 잠글 수는 없습니다."
+
+#: lib/luks2/luks2_json_metadata.c:3045
+msgid "Unmet LUKS2 requirements detected."
+msgstr "LUKS2 요구 사항의 불만족 요소를 확인했습니다."
+
+#: lib/luks2/luks2_json_metadata.c:3053
+msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
+msgstr "이전 재암호화 마킹한 장치의 동작 호환성이 없습니다. 멈춤."
+
+#: lib/luks2/luks2_json_metadata.c:3055
+msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
+msgstr "LUKS2 재암호화 마킹한 장치의 동작 호환성이 없습니다. 멈춤."
+
+#: lib/luks2/luks2_json_metadata.c:3057
+msgid "Operation incompatible with device using OPAL. Aborting."
+msgstr "OPAL을 활용하는 장치의 동작 호환성이 없습니다. 멈춤."
+
+#: lib/luks2/luks2_json_metadata.c:3059
+msgid "Operation incompatible with device using inline HW tags. Aborting."
+msgstr "인라인 하드웨어 태그를 사용하는 장치의 동작 호환성이 없습니다. 멈춤."
+
+#: lib/luks2/luks2_keyslot.c:543 lib/luks2/luks2_keyslot.c:601
+msgid "Not enough available memory to open a keyslot."
+msgstr "키 슬롯을 열 충분한 가용 메모리 공간이 없습니다."
+
+#: lib/luks2/luks2_keyslot.c:545 lib/luks2/luks2_keyslot.c:603
+msgid "Keyslot open failed."
+msgstr "키 슬롯 열기 실패."
+
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
+#, c-format
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "%s 암호화 방식을 키 슬롯 암호화에 사용할 수 없습니다."
+
+#: lib/luks2/luks2_keyslot_luks2.c:219
+msgid "Not enough memory for keyslot key derivation."
+msgstr "키 슬롯 키를 가져올 충분한 메모리 공간이 없습니다."
+
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
+#, c-format
+msgid "Hash algorithm %s is not available."
+msgstr "%s 해싱 알고리즘은 사용할 수 없습니다."
+
+#: lib/luks2/luks2_keyslot_luks2.c:475
+msgid "No space for new keyslot."
+msgstr "새 키 슬롯을 저장할 공간이 없습니다."
+
+#: lib/luks2/luks2_keyslot_reenc.c:583
+msgid "Invalid reencryption resilience mode change requested."
+msgstr "부적절한 재암호화 복원 모드 변경을 요청했습니다."
+
+#: lib/luks2/luks2_keyslot_reenc.c:704
+#, c-format
+msgid "Can not update resilience type. New type only provides %<PRIu64> bytes, required space is: %<PRIu64> bytes."
+msgstr "복원 형식을 업데이트할 수 없습니다. 새 형식은 %<PRIu64> 바이트만 제공하는데, 요구 공간 영역은 %<PRIu64> 바이트입니다."
+
+#: lib/luks2/luks2_keyslot_reenc.c:714
+msgid "Failed to refresh reencryption verification digest."
+msgstr "재암호화 검증 다이제스트 상태 새로 고침 실패."
+
+#: lib/luks2/luks2_luks1_convert.c:498
+#, c-format
+msgid "Cannot check status of device with uuid: %s."
+msgstr "UUID로 장치 상태를 검사할 수 없습니다: %s."
+
+#: lib/luks2/luks2_luks1_convert.c:524
+msgid "Unable to convert header with LUKSMETA additional metadata."
+msgstr "LUKSMETA 추가 메타데이터로 헤더를 변환할 수 없습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
+#, c-format
+msgid "Unable to use cipher specification %s-%s for LUKS2."
+msgstr "LUKS2에 %s-%s 암호화 방식 명세를 활용할 수 없습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:565
+#, c-format
+msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
+msgstr "LUKS2 키 슬롯에 %s-%s 암호화 방식 명세를 활용할 수 없습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:580
+msgid "Unable to move keyslot area. Not enough space."
+msgstr "키 슬롯 영역을 이동할 수 없습니다. 공간이 부족함."
+
+#: lib/luks2/luks2_luks1_convert.c:619
+msgid "Cannot convert to LUKS2 format - invalid metadata."
+msgstr "LUKS2 형식으로 변환할 수 없습니다 - 부적절한 메타데이터."
+
+#: lib/luks2/luks2_luks1_convert.c:636
+msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
+msgstr "키 슬롯 영역을 이동할 수 없습니다. LUKS2 키 슬롯 영역이 너무 작습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
+msgid "Unable to move keyslot area."
+msgstr "키 슬롯 영역을 옮길 수 없습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:757
+msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
+msgstr "LUKS1 형식으로 변환할 수 없음 - 기본 세그먼트 암호화 섹터 크기가 512바이트가 아닙니다."
+
+#: lib/luks2/luks2_luks1_convert.c:765
+msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
+msgstr "LUKS1 형식으로 변환할 수 없음 - 키 슬롯 다이제스트가 LUKS1과 호환성이 없습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:779
+#, c-format
+msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
+msgstr "LUKS1 형식으로 변환할 수 없음 - 장치에서 래핑 키 암호화 방식 %s을(를) 사용하고 있습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:784
+msgid "Cannot convert to LUKS1 format - device uses more segments."
+msgstr "LUKS1 형식으로 변환할 수 없음 - 장치에서 더 많은 세그먼트가 있습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:792
+#, c-format
+msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
+msgstr "LUKS1 형식으로 변환할 수 없음 - LUKS2 헤더에 토근 %u개가 있습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:798
+msgid "Cannot convert to LUKS1 format - there are no active keyslots."
+msgstr "LUKS1 형식으로 변환할 수 없음 - 동작 중인 키 슬롯이 없습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:810
+#, c-format
+msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
+msgstr "LUKS1 형식으로 변환할 수 없음 - %u번 키 슬롯이 적절하지 않은 상태에 있습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:815
+#, c-format
+msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
+msgstr "LUKS1 형식으로 변환할 수 없음 - %u번 키 슬롯이 범위 밖에 있습니다."
+
+#: lib/luks2/luks2_luks1_convert.c:820
+#, c-format
+msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
+msgstr "LUKS1 형식으로 변환할 수 없음 - %u번 슬롯(최대 슬롯 범위 밖)이 여전히 동작중입니다."
+
+#: lib/luks2/luks2_luks1_convert.c:825
+#, c-format
+msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
+msgstr "LUKS1 형식으로 변환할 수 없음 - %u번 키 슬롯이 LUKS1과 호환성이 없습니다."
+
+#: lib/luks2/luks2_reencrypt.c:1199
+#, c-format
+msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
+msgstr "핫존 크기는 계산한 영역 값의 배수여야 합니다 (%zu 바이트)."
+
+#: lib/luks2/luks2_reencrypt.c:1204
+#, c-format
+msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
+msgstr "장치 크기는 계산한 영역 값읠 배수여야 합니다 (%zu 바이트)."
+
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
+msgid "Failed to initialize old segment storage wrapper."
+msgstr "이전 세그먼트 저장소 래퍼 초기화 실패."
+
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
+msgid "Failed to initialize new segment storage wrapper."
+msgstr "새 세그먼트 저장소 래퍼 초기화 실패"
+
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
+msgid "Failed to initialize hotzone protection."
+msgstr "핫존 보호 초기화 실패."
+
+#: lib/luks2/luks2_reencrypt.c:1624
+msgid "Failed to read checksums for current hotzone."
+msgstr "현재 핫존의 체크섬 읽기 실패."
+
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
+#, c-format
+msgid "Failed to read hotzone area starting at %<PRIu64>."
+msgstr "%<PRIu64>에서 시작하는 핫존 영역 읽기 실패."
+
+#: lib/luks2/luks2_reencrypt.c:1650
+#, c-format
+msgid "Failed to decrypt sector %zu."
+msgstr "%zu 섹터 해독 실패."
+
+#: lib/luks2/luks2_reencrypt.c:1656
+#, c-format
+msgid "Failed to recover sector %zu."
+msgstr "%zu 섹터 복원 실패."
+
+#: lib/luks2/luks2_reencrypt.c:2209
+#, c-format
+msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
+msgstr "원본 및 대상 장치 크기가 일치하지 않습니다. 원본: %<PRIu64>, 대상: %<PRIu64>."
+
+#: lib/luks2/luks2_reencrypt.c:2311
+#, c-format
+msgid "Failed to activate hotzone device %s."
+msgstr "%s 핫존 장치 동작 개시 실패."
+
+#: lib/luks2/luks2_reencrypt.c:2323
+#, c-format
+msgid "Failed to allocate hotzone device %s."
+msgstr "%s 핫존 장치 할당 실패"
+
+#: lib/luks2/luks2_reencrypt.c:2340
+#, c-format
+msgid "Failed to activate overlay device %s with actual origin table."
+msgstr "실제 원본 테이블에서 %s 오버레이 장치 동작 개시 실패."
+
+#: lib/luks2/luks2_reencrypt.c:2347
+#, c-format
+msgid "Failed to load new mapping for device %s."
+msgstr "%s 장치의 새 매핑 불러오기 실패."
+
+#: lib/luks2/luks2_reencrypt.c:2419
+msgid "Failed to refresh reencryption devices stack."
+msgstr "재암호화 장치 스택 새로 고침 실패."
+
+#: lib/luks2/luks2_reencrypt.c:2616
+msgid "Failed to set new keyslots area size."
+msgstr "새 키 슬롯 영역 크기 설정 실패."
+
+#: lib/luks2/luks2_reencrypt.c:2752
+#, c-format
+msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
+msgstr "데이터 쉬프트 값이 암호화 섹터 크기와 일치하지 않습니다 (%<PRIu32> 바이트)."
+
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
+#, c-format
+msgid "Unsupported resilience mode %s"
+msgstr "지원하지 않는 %s 복원 모드"
+
+#: lib/luks2/luks2_reencrypt.c:2825
+msgid "Moved segment size can not be greater than data shift value."
+msgstr "이동한 세그먼트의 크기는 데이터 쉬프트 값보다 클 수 없습니다."
+
+#: lib/luks2/luks2_reencrypt.c:2867
+msgid "Invalid reencryption resilience parameters."
+msgstr "부적절한 재암호화 복원 매개변수."
+
+#: lib/luks2/luks2_reencrypt.c:2889
+#, c-format
+msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
+msgstr "옮긴 세그먼트가 너무 큽니다. 요청한 크기는 %<PRIu64>이나, 가용 공간은 %<PRIu64> 입니다."
+
+#: lib/luks2/luks2_reencrypt.c:2978
+msgid "Failed to clear table."
+msgstr "테이블 삭제 실패."
+
+#: lib/luks2/luks2_reencrypt.c:3064
+#, c-format
+msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
+msgstr "데이터 쉬프트 (%<PRIu64> 섹터)는 이후 데이터 오프셋보다 작습니다 (%<PRIu64> 섹터)."
+
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
+msgid "Reduced data size is larger than real device size."
+msgstr "줄어든 데이터 크기가 실제 장치 크기보다 큽니다."
+
+#: lib/luks2/luks2_reencrypt.c:3096
+#, c-format
+msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
+msgstr "데이터 장치는 암호화 섹터 크기에 정렬한 상태가 아닙니다 (%<PRIu32> 바이트)"
+
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
+#, c-format
+msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
+msgstr "%s 배타 모드로 열기 실패 (이미 매핑했거나 마운팅함)."
+
+#: lib/luks2/luks2_reencrypt.c:3333
+msgid "Device not marked for LUKS2 reencryption."
+msgstr "LUKS2 재암호화 장치로 표시하지 않았습니다."
+
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
+msgid "Failed to load LUKS2 reencryption context."
+msgstr "LUKS2 재암호화 컨텍스트 불러오기 실패."
+
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
+msgid "Device is not in reencryption."
+msgstr "재암호화 장치가 아닙니다."
+
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
+msgid "Reencryption process is already running."
+msgstr "재암호화 과정을 이미 시행중에 있습니다."
+
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
+msgid "Failed to acquire reencryption lock."
+msgstr "재암호화 잠금 획득 실패."
+
+#: lib/luks2/luks2_reencrypt.c:3472
+msgid "Cannot proceed with reencryption. Run reencryption recovery first."
+msgstr "재암호화로 진행할 수 없습니다. 재암호화 복원을 우선 실행하십시오."
+
+#: lib/luks2/luks2_reencrypt.c:3608
+msgid "Active device size and requested reencryption size don't match."
+msgstr "동작 장치 크기와 요청 재암호화 크기가 일치하지 않습니다."
+
+#: lib/luks2/luks2_reencrypt.c:3622
+msgid "Illegal device size requested in reencryption parameters."
+msgstr "재암호화 매개변수로 부정적 장치 크기를 요청했습니다."
+
+#: lib/luks2/luks2_reencrypt.c:3724
+msgid "Reencryption in-progress. Cannot perform recovery."
+msgstr "재암호화를 진행 중입니다. 복원을 수행할 수 없습니다."
+
+#: lib/luks2/luks2_reencrypt.c:3745
+msgid "LUKS2 reencryption recovery failed."
+msgstr "LUKS 재암호화 복원 실패."
+
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
+msgid "Failed to initialize reencryption device stack."
+msgstr "재암호화 장치 스택 초기화 실패."
+
+#: lib/luks2/luks2_reencrypt.c:3911
+msgid "LUKS2 reencryption already initialized in metadata."
+msgstr "LUKS2 재암호화를 이미 메타데이터에서 초기화했습니다."
+
+#: lib/luks2/luks2_reencrypt.c:3919
+msgid "Failed to initialize LUKS2 reencryption in metadata."
+msgstr "메타데이터의 LUKS2 재암호화 초기화 실패."
+
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
+msgid "Reencryption is not supported for DAX (persistent memory) devices."
+msgstr "DAX (영속 메모리) 장치에서 재 암호화를 지원하지 않습니다."
+
+#: lib/luks2/luks2_reencrypt.c:4063
+msgid "Failed to set device segments for next reencryption hotzone."
+msgstr "다음 재암호화 핫존 설정을 위한 장치 세그먼트 설정 실패"
+
+#: lib/luks2/luks2_reencrypt.c:4116
+msgid "Failed to write reencryption resilience metadata."
+msgstr "재암호화 복원 메타데이터 기록 실패."
+
+#: lib/luks2/luks2_reencrypt.c:4123
+msgid "Decryption failed."
+msgstr "해독 실패."
+
+#: lib/luks2/luks2_reencrypt.c:4128
+#, c-format
+msgid "Failed to write hotzone area starting at %<PRIu64>."
+msgstr "%<PRIu64>(에)서 시작하는 핫존 영역 기록 실패."
+
+#: lib/luks2/luks2_reencrypt.c:4133
+msgid "Failed to sync data."
+msgstr "데이터 동기화 실패."
+
+#: lib/luks2/luks2_reencrypt.c:4141
+msgid "Failed to update metadata after current reencryption hotzone completed."
+msgstr "현재 재암호화 핫존 처리가 끝난 후 메타데이터 업데이트 실패."
+
+#: lib/luks2/luks2_reencrypt.c:4230
+msgid "Failed to write LUKS2 metadata."
+msgstr "LUKS2 메타데이터 기록 실패."
+
+#: lib/luks2/luks2_reencrypt.c:4253
+msgid "Failed to wipe unused data device area."
+msgstr "사용하지 않는 데이터 장치 영역 소거 실패."
+
+#: lib/luks2/luks2_reencrypt.c:4259
+#, c-format
+msgid "Failed to remove unused (unbound) keyslot %d."
+msgstr "사용하지 않는 (영역 미포함) 키 슬롯 %d번 제거 실패."
+
+#: lib/luks2/luks2_reencrypt.c:4269
+msgid "Failed to remove reencryption keyslot."
+msgstr "재암호화 키 슬롯 제거 실패."
+
+#: lib/luks2/luks2_reencrypt.c:4279
+#, c-format
+msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
+msgstr "%<PRIu64>(에)서 시작, %<PRIu64> 섹터 길이 길이 구간을 재암호화 하는 동안 치명적인 오류가 있습니다."
+
+#: lib/luks2/luks2_reencrypt.c:4283
+msgid "Online reencryption failed."
+msgstr "온라인 재암호화 실패."
+
+#: lib/luks2/luks2_reencrypt.c:4288
+msgid "Do not resume the device unless replaced with error target manually."
+msgstr "대상 장치에 오류가 나타나서 직접 대체하는 상황이 아니라면 대상을 동작 상태로 되돌리지 마십시오."
+
+#: lib/luks2/luks2_reencrypt.c:4340
+msgid "Cannot proceed with reencryption. Unexpected reencryption status."
+msgstr "재암호화를 진행할 수 없습니다. 예기치 않은 재암호화 성태를 만났습니다."
+
+#: lib/luks2/luks2_reencrypt.c:4346
+msgid "Missing or invalid reencrypt context."
+msgstr "재암호화 컨텍스트가 빠졌거나 부적절한 상태입니다."
+
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
+msgid "Failed to update reencryption context."
+msgstr "재암호화 컨텍스트 업데이트 실패."
+
+#: lib/luks2/luks2_reencrypt_digest.c:402
+msgid "Reencryption metadata is invalid."
+msgstr "메타데이터 재 암호화가 적절하지 않습니다."
+
+#: lib/luks2/hw_opal/hw_opal.c:335
+#, c-format
+msgid "OPAL range %d offset %<PRIu64> does not match expected values %<PRIu64>."
+msgstr "OPAL 범위 %d 오프셋 %<PRIu64> 값이 기대 값 %<PRIu64> 과 일치하지 않습니다."
+
+#: lib/luks2/hw_opal/hw_opal.c:342
+#, c-format
+msgid "OPAL range %d length %<PRIu64> does not match device length %<PRIu64>."
+msgstr "OPAL 범위 %d 길이 %<PRIu64> 값이 장치 크기 %<PRIu64> 와 일치하지 않습니다."
+
+#: lib/luks2/hw_opal/hw_opal.c:348
+#, c-format
+msgid "OPAL range %d locking is disabled."
+msgstr "OPAL 범위 %d 잠금 해제 상태입니다."
+
+#: lib/luks2/hw_opal/hw_opal.c:358 lib/luks2/hw_opal/hw_opal.c:365
+#, c-format
+msgid "Unexpected OPAL range %d lock state."
+msgstr "예기치 못한 OPAL 범위 %d 잠금 상태."
+
+#: src/cryptsetup.c:87
+msgid "Keyslot encryption parameters can be set only for LUKS2 device."
+msgstr "키 슬롯 암호화 매개변수는 LUKS2 장치에서만 설정할 수 있습니다."
+
+#: src/cryptsetup.c:93
+msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
+msgstr "키 슬롯 암호화 매개변수는 LUKS2 키 슬롯 암호화 과정과 호환성이 없습니다."
+
+#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
+#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt_luks1.c:565
+msgid "No known cipher specification pattern detected."
+msgstr "확인한 암호화 방식 명세 패턴 중 알려진 항목이 없습니다."
+
+#: src/cryptsetup.c:160
+#, c-format
+msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions."
+msgstr "경고: 사용하는 암호화 방식 (%s-%s, 키 크기 %u비트) 의 기본 옵션이 이전 버전과 호환성이 없을 수도 있습니다."
+
+#: src/cryptsetup.c:165
+#, c-format
+msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions."
+msgstr "경고: 사용하는 해시 기본 옵션 (%s) 이 이전 버전과 호환성이 없을 수도 있습니다."
+
+#: src/cryptsetup.c:169
+msgid "For plain mode, always use options --cipher, --key-size and if no keyfile or keyring is used, then also --hash."
+msgstr "일반 모드에서는 항상 --cipher, --key-size 옵션을 사용하며, 사용하는 키 파일 또는 키 모음이 없다면 --hash 옵션도 사용합니다."
+
+#: src/cryptsetup.c:175
+msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n"
+msgstr "경고: 키 파일을 지정한 상황에서 일반 모드에서는 --hash 매개변수를 무시합니다.\n"
+
+#: src/cryptsetup.c:189
+msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
+msgstr "경고: 읽기 대상 크기가 암호화 키 크기와 동일한 상황에서는 --keyfile-size 옵션을 무시합니다.\n"
+
+#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
+#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#, c-format
+msgid "Blkid scan failed for %s."
+msgstr "%s의 blkid 검사 실패."
+
+#: src/cryptsetup.c:232
+#, c-format
+msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
+msgstr "%s에서 장치 시그니처를 확인했습니다. 더 이상 진행하면 기존 데이터를 파괴할 수 있습니다."
+
+#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
+#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
+#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
+#: src/utils_reencrypt.c:925
+msgid "Operation aborted.\n"
+msgstr "동작을 멈추었습니다.\n"
+
+#: src/cryptsetup.c:323
+msgid "Option --key-file is required."
+msgstr "--key-file 옵션이 필요합니다."
+
+#: src/cryptsetup.c:377
+msgid "Enter VeraCrypt PIM: "
+msgstr "VeraCrypt PIM 입력: "
+
+#: src/cryptsetup.c:386
+msgid "Invalid PIM value: parse error."
+msgstr "부적절한  PIM 값: 해석 오류."
+
+#: src/cryptsetup.c:389
+msgid "Invalid PIM value: 0."
+msgstr "부적절한 PIM 값: 0."
+
+#: src/cryptsetup.c:392
+msgid "Invalid PIM value: outside of range."
+msgstr "부적절한 PIM 값: 범위 밖."
+
+#: src/cryptsetup.c:415
+msgid "No device header detected with this passphrase."
+msgstr "이 암호로 확인한 장치 헤더가 없습니다."
+
+#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#, c-format
+msgid "Device %s is not a valid BITLK device."
+msgstr "%s 장치는 적절한 BITLK 장치가 아닙니다."
+
+#: src/cryptsetup.c:500
+msgid "Cannot determine volume key size for BITLK, please use --key-size option."
+msgstr "BITLK의 볼륨 키 크기를 알 수 없습니다. --key-size 옵션을 사용하십시오."
+
+#: src/cryptsetup.c:546
+msgid ""
+"Header dump with volume key is sensitive information\n"
+"which allows access to encrypted partition without passphrase.\n"
+"This dump should be always stored encrypted on safe place."
+msgstr ""
+"볼륨 키가 들어간 헤더 덤프에는 암호 없이 암호화 분할 영역에\n"
+"접근할 수 있게 하는 민감 정보가 들어있습니다.\n"
+"이 덤프는 항상 안전한 영역에 암호화하여 저장해야 합니다."
+
+#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
+msgid ""
+"The header dump with volume key is sensitive information\n"
+"that allows access to encrypted partition without a passphrase.\n"
+"This dump should be stored encrypted in a safe place."
+msgstr ""
+"볼륨 키가 들어간 헤더 덤프에는 암호 없이 암호화 분할 영역에\n"
+"접근할 수 있게 하는 민감 정보가 들어있습니다.\n"
+"이 덤프는 안전한 영역에 암호화하여 저장해야 합니다."
+
+#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#, c-format
+msgid "Device %s is not a valid FVAULT2 device."
+msgstr "%s 장치는 적절한 FVAULT2 장치가 아닙니다."
+
+#: src/cryptsetup.c:794
+msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
+msgstr "FVAULT2 볼륨 키 크기를 확인할 수 없습니다. --key-size 옵션을 활용하십시오."
+
+#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#, c-format
+msgid "Device %s is still active and scheduled for deferred removal.\n"
+msgstr "%s 장치는 여전히 동작중이며 지연된 제거 동작에 따라 제거 예정입니다.\n"
+
+#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
+#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
+#: src/cryptsetup.c:3261
+#, c-format
+msgid "Failed to set external tokens path %s."
+msgstr "%s 외부 토큰 경로 설정 실패."
+
+#: src/cryptsetup.c:890
+msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
+msgstr "동작 중인 장치 크기 조정은 키 모음의 볼륨 키가 필요합니다만 --disable-keyring 옵션을 지정했습니다."
+
+#: src/cryptsetup.c:1057
+msgid "Benchmark interrupted."
+msgstr "비교 시험을 중단했습니다."
+
+#: src/cryptsetup.c:1078
+#, c-format
+msgid "PBKDF2-%-9s     N/A\n"
+msgstr "PBKDF2-%-9s     N/A\n"
+
+#: src/cryptsetup.c:1080
+#, c-format
+msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
+msgstr "PBKDF2-%-9s %7u 초당 반복 + %zu-비트 키\n"
+
+#: src/cryptsetup.c:1094
+#, c-format
+msgid "%-10s N/A\n"
+msgstr "%-10s N/A\n"
+
+#: src/cryptsetup.c:1096
+#, c-format
+msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
+msgstr "%-10s %4u 반복, %5u 메모리, %1u 병렬처리 스레드(CPUs) + %zu-비트 키 (%u ms 시간에 요청)\n"
+
+#: src/cryptsetup.c:1120
+msgid "Result of benchmark is not reliable."
+msgstr "비교 시험 결과는 신뢰할 만하지 않습니다."
+
+#: src/cryptsetup.c:1171
+msgid "# Tests are approximate using memory only (no storage IO).\n"
+msgstr "# 시험은 대략적으로 메모리만 사용하여 추산했습니다 (저장장치 입출력 아님).\n"
+
+#. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
+#: src/cryptsetup.c:1196
+#, c-format
+msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
+msgstr "#%*s 알고리즘  |       키  |      암호화     |      해  독    \n"
+
+#: src/cryptsetup.c:1204
+#, c-format
+msgid "Cipher %s (with %i bits key) is not available."
+msgstr "%s 암호화 방식(%i 비트 키)을 사용할 수 없습니다."
+
+#. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
+#: src/cryptsetup.c:1225
+msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
+msgstr "#     알고리즘  |       키  |      암호화     |      해  독    \n"
+
+#: src/cryptsetup.c:1238
+msgid "N/A"
+msgstr "해당 없음"
+
+#: src/cryptsetup.c:1241
+msgid "# Cipher speed test is not available.\n"
+msgstr "# 암호화 방식 처리 속도를 시험할 수 없습니다.\n"
+
+#: src/cryptsetup.c:1257
+msgid ""
+"Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
+"and continue (upgrade metadata) only if you acknowledge the operation as genuine."
+msgstr ""
+"보호하지 않은 LUKS2 재암호화 메타데이터를 확인했습니다. 재암호화 동작이 적절한 지 검증하시고 (luksDump 출력 확인)\n"
+"동작에 문제가 없다고 확신이 들 경우에만 계속(메타데이터 업그레이드)하십시오."
+
+#: src/cryptsetup.c:1263
+msgid "Enter passphrase to protect and upgrade reencryption metadata: "
+msgstr "재암호화 메타데이터 보호 및 업그레이드 암호 입력: "
+
+#: src/cryptsetup.c:1307
+msgid "Really proceed with LUKS2 reencryption recovery?"
+msgstr "정말로 LUKS2 재암호화 복원을 진행하시겠습니까?"
+
+#: src/cryptsetup.c:1316
+msgid "Enter passphrase to verify reencryption metadata digest: "
+msgstr "재암호화 메타데이터 다이제스트 검증용 암호 입력: "
+
+#: src/cryptsetup.c:1318
+msgid "Enter passphrase for reencryption recovery: "
+msgstr "재암호화 복원 암호 입력: "
+
+#: src/cryptsetup.c:1380
+msgid "Really try to repair LUKS device header?"
+msgstr "정말로 LUKS 장치 헤더 복원을 시도하시겠습니까?"
+
+#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
+msgid ""
+"\n"
+"Wipe interrupted."
+msgstr ""
+"\n"
+"소거 중단함."
+
+#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
+msgid ""
+"Wiping device to initialize integrity checksum.\n"
+"You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
+msgstr ""
+"무결성 체크섬을 초기화하기 위해 장치를 소거합니다.\n"
+"CTRL+c 키를 눌러 이 동작을 중단할 수 있습니다 (소거하지 않은 장치의 나머지 영역에 부적절한 체크섬이 있을 수도 있음).\n"
+
+#: src/cryptsetup.c:1435 src/integritysetup.c:103
+#, c-format
+msgid "Cannot deactivate temporary device %s."
+msgstr "%s 임시 장치의 동작을 해제할 수 없습니다."
+
+#: src/cryptsetup.c:1483
+msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
+msgstr "OPAL 하드웨어 전용 암호화는 --cipher와 --key-size 를 지원하지 않아, 옵션을 무시했습니다."
+
+#: src/cryptsetup.c:1496
+msgid "Integrity option can be used only for LUKS2 format."
+msgstr "LUKS2 형식에 대해서\"만\" 무결성 옵션을 사용할 수 있습니다."
+
+#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
+msgid "Unsupported LUKS2 metadata size options."
+msgstr "지원하지 않는 LUKS2 메타데이터 크기 옵션."
+
+#: src/cryptsetup.c:1506
+msgid "OPAL is supported only for LUKS2 format."
+msgstr "OPAL은 LUKS2 형식에서만 지원합니다."
+
+#: src/cryptsetup.c:1511
+msgid "Inline hw tags are supported only for LUKS2 format."
+msgstr "인라인 하드웨어 태그는 LUKS2 형식에서만 지원합니다."
+
+#: src/cryptsetup.c:1520
+msgid "Header file does not exist, do you want to create it?"
+msgstr "헤더 파일이 없습니다. 만드시겠습니까?"
+
+#: src/cryptsetup.c:1528
+#, c-format
+msgid "Cannot create header file %s."
+msgstr "%s 헤더 파일을 만들 수 없습니다."
+
+#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
+msgid "No known integrity specification pattern detected."
+msgstr "알려진 무결성 명세 패턴이 없습니다."
+
+#: src/cryptsetup.c:1556
+msgid "Cannot use specified integrity key size."
+msgstr "지정 무결성 키 크기를 사용할 수 없습니다."
+
+#: src/cryptsetup.c:1574
+#, c-format
+msgid "Cannot use %s as on-disk header."
+msgstr "%s을(를) 디스크 저장 헤더로 활용할 수 없습니다."
+
+#: src/cryptsetup.c:1603 src/integritysetup.c:172
+#, c-format
+msgid "This will overwrite data on %s irrevocably."
+msgstr "이 동작은 %s의 데이터를 돌이킬 수 없도록 덮어쓰기합니다."
+
+#: src/cryptsetup.c:1640
+msgid "OPAL Admin password cannot be empty."
+msgstr "OPAL 관리자 암호는 비워둘 수 없습니다."
+
+#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
+#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
+msgid "Failed to set pbkdf parameters."
+msgstr "pbkdf 매개변수 설정 실패."
+
+#: src/cryptsetup.c:1785
+msgid "Reduced data offset is allowed only for detached LUKS header."
+msgstr "데이터 오프셋 값의 감소 조절은 LUKS 헤더를 장치에서 분리했을 때만 가능합니다."
+
+#: src/cryptsetup.c:1792
+#, c-format
+msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
+msgstr "%s LUKS 파일 컨테이너의 동작을 개시하기에는 너무 작습니다. 데이터 저장에 필요한 여분 공간이 없습니다."
+
+#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
+#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
+msgstr "키 슬롯을 누락한 상태에서 LUKS의 볼륨 키 크기를 알 수 없습니다. --key-size 옵션을 사용하십시오."
+
+#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
+msgid "Device requires two volume keys."
+msgstr "장치에 볼륨 키 두개가 필요합니다."
+
+#: src/cryptsetup.c:1888
+msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
+msgstr "OPAL 하드웨어 전용 암호화시 몇가지 동작 개시 매개 변수는 무시합니다."
+
+#: src/cryptsetup.c:1893
+msgid "Device activated but cannot make flags persistent."
+msgstr "장치 동작을 개시했으나, 플래그를 영속적으로 적용할 수는 없습니다."
+
+#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
+#, c-format
+msgid "Keyslot %d is selected for deletion."
+msgstr "%d번 키 슬롯을 삭제 대상으로 선택했습니다."
+
+#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
+msgid "This is the last keyslot. Device will become unusable after purging this key."
+msgstr "이 키 슬롯이 마지막입니다. 이 키를 제거하면 장치를 사용할 수 없습니다."
+
+#: src/cryptsetup.c:1986
+msgid "Enter any remaining passphrase: "
+msgstr "임의의 나머지 암호 입력: "
+
+#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
+msgid "Operation aborted, the keyslot was NOT wiped.\n"
+msgstr "동작을 멈추었습니다. 키 슬롯을 소거하지 않았습니다.\n"
+
+#: src/cryptsetup.c:2023
+msgid "Enter passphrase to be deleted: "
+msgstr "삭제할 암호 입력: "
+
+#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
+#: src/cryptsetup.c:3252
+#, c-format
+msgid "Device %s is not a valid LUKS2 device."
+msgstr "%s 장치는 적절한 LUKS2 장치가 아닙니다."
+
+#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
+msgid "Enter new passphrase for key slot: "
+msgstr "키 슬롯의 새 암호 입력: "
+
+#: src/cryptsetup.c:2146 src/utils_luks.c:342
+#, c-format
+msgid "Enter token PIN: "
+msgstr "토큰 PIN 입력: "
+
+#: src/cryptsetup.c:2148 src/utils_luks.c:344
+#, c-format
+msgid "Enter token %d PIN: "
+msgstr "%d번 토큰 PIN 입력: "
+
+#: src/cryptsetup.c:2207
+msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
+msgstr "경고: --key-slot 매개변수를 새 키 슬롯 번호에 사용했습니다.\n"
+
+#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
+#, c-format
+msgid "Enter any existing passphrase: "
+msgstr "기존 임의의 암호 입력: "
+
+#: src/cryptsetup.c:2380
+msgid "Enter passphrase to be changed: "
+msgstr "바꿀 암호 입력: "
+
+#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
+msgid "Enter new passphrase: "
+msgstr "새 암호 입력: "
+
+#: src/cryptsetup.c:2446
+msgid "Enter passphrase for keyslot to be converted: "
+msgstr "키 슬롯을 변환할 암호 입력: "
+
+#: src/cryptsetup.c:2470
+msgid "Only one device argument for isLuks operation is supported."
+msgstr "isLuks 동작에 대해 하나의 장치 인자만 지원합니다."
+
+#: src/cryptsetup.c:2575
+#, c-format
+msgid "Keyslot %d does not contain unbound key."
+msgstr "%d번 키 슬롯에는 범위 밖 키가 없습니다."
+
+#: src/cryptsetup.c:2580
+msgid ""
+"The header dump with unbound key is sensitive information.\n"
+"This dump should be stored encrypted in a safe place."
+msgstr ""
+"범위 밖 키를 내포하는 헤더 덤프에 민감 정보가 들어있습니다.\n"
+"이 덤프는 안전한 위치에 암호화 하여 저장해야 합니다."
+
+#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
+#, c-format
+msgid "%s is not active %s device name."
+msgstr "%s은(는) 동작 중인 %s 장치 이름이 아닙니다."
+
+#: src/cryptsetup.c:2706
+#, c-format
+msgid "%s is not active LUKS device name or header is missing."
+msgstr "%s은(는) 동작 중인 LUKS 장치 이름이 아니거나 헤더가 빠졌습니다."
+
+#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
+msgid "Option --header-backup-file is required."
+msgstr "--header-backup-file 옵션이 필요합니다."
+
+#: src/cryptsetup.c:2833
+#, c-format
+msgid "%s is not cryptsetup managed device."
+msgstr "%s은(는) cryptsetup으로 관리하는 장치가 아닙니다."
+
+#: src/cryptsetup.c:2844
+#, c-format
+msgid "Refresh is not supported for device type %s"
+msgstr "%s 장치 형식에는 새로 고침 (최신화) 동작을 지원하지 않습니다."
+
+#: src/cryptsetup.c:2894
+#, c-format
+msgid "Unrecognized metadata device type %s."
+msgstr "인식할 수 없는 %s 메타데이터 장치 형식."
+
+#: src/cryptsetup.c:2896
+msgid "Command requires device and mapped name as arguments."
+msgstr "명쳥에 장치와 매핑 이름을 인자로 지정해야 합니다."
+
+#: src/cryptsetup.c:2914
+msgid "Enter OPAL PSID: "
+msgstr "OPAL PSID 입력: "
+
+#: src/cryptsetup.c:2914
+msgid "Enter OPAL Admin password: "
+msgstr "OPAL 관리자 암호 입력: "
+
+#: src/cryptsetup.c:2922
+msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
+msgstr "경고: 전체 디스크를 공장 초기화하며, 모든 데이터를 잃게 됩니다! 계속 하시겠습니까?"
+
+#: src/cryptsetup.c:2965
+#, c-format
+msgid ""
+"This operation will erase all keyslots on device %s.\n"
+"Device will become unusable after this operation."
+msgstr ""
+"이 동작은 %s 장치의 모든 키 슬롯을 지웁니다.\n"
+"이 동작이 끝나면 장치를 사용할 수 없습니다."
+
+#: src/cryptsetup.c:2972
+msgid "Operation aborted, keyslots were NOT wiped.\n"
+msgstr "동작을 멈추었습니다. 키 슬롯을 소거하지 않았습니다.\n"
+
+#: src/cryptsetup.c:3011
+msgid "Invalid LUKS type, only luks1 and luks2 are supported."
+msgstr "부적절한 LUKS 형식, luks1 및 luks2 형식만 지원합니다."
+
+#: src/cryptsetup.c:3027
+#, c-format
+msgid "Device is already %s type."
+msgstr "장치가 이미 %s 형식입니다."
+
+#: src/cryptsetup.c:3034
+#, c-format
+msgid "This operation will convert %s to %s format.\n"
+msgstr "이 동작은 %s을 %s 형식으로 변환합니다.\n"
+
+#: src/cryptsetup.c:3037
+msgid "Operation aborted, device was NOT converted.\n"
+msgstr "동작을 멈추었습니다. 장치를 변환하지 \"않았습니다\".\n"
+
+#: src/cryptsetup.c:3077
+msgid "Option --priority, --label or --subsystem is missing."
+msgstr "--priority, --label, --subsystem 옵션 중 하나가 빠졌습니다."
+
+#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
+#, c-format
+msgid "Token %d is invalid."
+msgstr "%d번 토큰이 부적절합니다."
+
+#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#, c-format
+msgid "Token %d in use."
+msgstr "%d번 토큰은 사용중입니다."
+
+#: src/cryptsetup.c:3126
+#, c-format
+msgid "Failed to add luks2-keyring token %d."
+msgstr "luks2-keyring 토큰 %d번 추가 실패."
+
+#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
+#, c-format
+msgid "Failed to assign token %d to keyslot %d."
+msgstr "키 슬롯 %2$d번으로의 토큰 %1$d번 할당 실패."
+
+#: src/cryptsetup.c:3154
+#, c-format
+msgid "Token %d is not in use."
+msgstr "%d번 토큰은 미사용중입니다."
+
+#: src/cryptsetup.c:3191
+msgid "Failed to import token from file."
+msgstr "파일에서 토큰 가져오기 실패."
+
+#: src/cryptsetup.c:3216
+#, c-format
+msgid "Failed to get token %d for export."
+msgstr "내보낼 %d번 토큰 가져오기 실패."
+
+#: src/cryptsetup.c:3229
+#, c-format
+msgid "Token %d is not assigned to keyslot %d."
+msgstr "%d번 토큰은 %d번 키 슬롯에 할당하지 않았습니다."
+
+#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
+#, c-format
+msgid "Failed to unassign token %d from keyslot %d."
+msgstr "%d번 키 슬롯에서 %d번 토큰 할당 해제 실패."
+
+#: src/cryptsetup.c:3297
+msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
+msgstr "--tcrypt-hidden, --tcrypt-system, --tcrypt-backup 옵션은 TCRYPT 장치 형식에서만 지원합니다."
+
+#: src/cryptsetup.c:3300
+msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
+msgstr "--veracrypt, --disable-veracrypt 옵션은 TCRYPT 장치 형식에서만 지원합니다."
+
+#: src/cryptsetup.c:3303
+msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
+msgstr "--veracrypt-pim 옵션은 VeraCrypt 호환 장치에서만 지원합니다."
+
+#: src/cryptsetup.c:3307
+msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
+msgstr "--veracrypt-query-pim 옵션은 VeraCrypt 호환 장치에서만 지원합니다."
+
+#: src/cryptsetup.c:3309
+msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
+msgstr "--veracrypt-pim 옵션과 --veracrypt-query-pim 옵션은 혼용할 수 없습니다."
+
+#: src/cryptsetup.c:3318
+msgid "Option --persistent is not allowed with --test-passphrase."
+msgstr "--persistent 옵션은 --test-passphrase 옵션의 혼용을 허용하지 않습니다."
+
+#: src/cryptsetup.c:3321
+msgid "Options --refresh and --test-passphrase are mutually exclusive."
+msgstr "--refresh 옵션과 --test-passphrase 옵션은 혼용할 수 없습니다"
+
+#: src/cryptsetup.c:3324
+msgid "Option --shared is allowed only for open of plain device."
+msgstr "--shared 옵션 사용은 일반 장비를 열 때만 허용합니다."
+
+#: src/cryptsetup.c:3327
+msgid "Option --skip is supported only for open of plain and loopaes devices."
+msgstr "--skip 옵션 사용은 일반 장비와 루프 장비를 열 때만 지원합니다."
+
+#: src/cryptsetup.c:3330
+msgid "Option --offset with open action is only supported for plain and loopaes devices."
+msgstr "열기 동작시 --offset 옵션의 사용은 일반 장비와 루프 장비에서만 지원합니다."
+
+#: src/cryptsetup.c:3333
+msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
+msgstr "--tcrypt-hidden 옵션과 --allow-discards 옵션은 혼용할 수 없습니다."
+
+#: src/cryptsetup.c:3337
+msgid "Sector size option with open action is supported only for plain devices."
+msgstr "섹터 크기 옵션과 열기 동작은 일반 장비 에서만 지원합니다."
+
+#: src/cryptsetup.c:3341
+msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
+msgstr "Large IV 섹터 옵션은 512 바이트 이상의 섹터 크기를 가진 일반 장비를 열 때만 지원합니다."
+
+#: src/cryptsetup.c:3346
+msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
+msgstr "--test-passphrase 옵션 사용은 LUKS, TCRYPT, BITLK, FVAULT2 장비를 열 때만 허용합니다."
+
+#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
+msgid "Options --device-size and --size cannot be combined."
+msgstr "--device-size 옵션과 --size 옵션은 혼용할 수 없습니다."
+
+#: src/cryptsetup.c:3352
+msgid "Option --unbound is allowed only for open of luks device."
+msgstr "--unbound 옵션의 사용은 luks 장치를 열 때만 허용합니다."
+
+#: src/cryptsetup.c:3355
+msgid "Option --unbound cannot be used without --test-passphrase."
+msgstr "--unbound 옵션은 --test-passphrase 옵션을 제외하고는 사용할 수 없습니다."
+
+#: src/cryptsetup.c:3359
+msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
+msgstr "--volume-key-keyring 옵션은 --hash 옵션 또는 --volume-key-file 옵션과 혼용할 수 없습니다."
+
+#: src/cryptsetup.c:3362
+msgid "Both --volume-key-file options must be paired with respective --key-size options."
+msgstr "--volume-key-file 옵션 개별 지정에 따라 --key-size 옵션을 하나씩 짝으로 지정해야 합니다."
+
+#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
+msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
+msgstr "--cancel-deferred 옵션과 --deferred 옵션은 혼용할 수 없습니다."
+
+#: src/cryptsetup.c:3387
+msgid "Option --active-name can be set only for LUKS2 device."
+msgstr "--active-name 옵션은 LUKS2 장치에 대해서만 설정할 수 있습니다."
+
+#: src/cryptsetup.c:3390
+msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
+msgstr "--active-name 옵션과 --force-offline-reencrypt 옵션은 혼용할 수 없습니다."
+
+#: src/cryptsetup.c:3393
+msgid "Options --new-volume-key-file and --keep-key cannot be combined."
+msgstr "--new-volume-key-file 옵션과 --keep-key 옵션은 혼용할 수 없습니다."
+
+#: src/cryptsetup.c:3396
+msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
+msgstr "--new-volume-key-keyring 옵션과 --keep-key 옵션은 혼용할 수 없습니다."
+
+#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
+msgid "Keyslot specification is required."
+msgstr "키 슬롯 명세가 필요합니다."
+
+#: src/cryptsetup.c:3412
+msgid "Options --align-payload and --offset cannot be combined."
+msgstr "--align-payload 옵션과 --offset 옵션은 혼용할 수 없습니다."
+
+#: src/cryptsetup.c:3415
+msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
+msgstr "--integrity-no-wipe 옵션은 무결성 확장 기능을 동반한 포매팅 동작에만 사용할 수 있습니다."
+
+#: src/cryptsetup.c:3418
+msgid "Only one of --use-[u]random options is allowed."
+msgstr "--use-[u]random 옵션 중 하나만 허용합니다."
+
+#: src/cryptsetup.c:3426
+msgid "Key size is required with --unbound option."
+msgstr "키 크키 값은 --unbound 옵션 사용이 필요합니다."
+
+#: src/cryptsetup.c:3446
+msgid "Invalid token action."
+msgstr "부적절한 토근 동작입니다."
+
+#: src/cryptsetup.c:3449
+msgid "--key-description parameter is mandatory for token add action."
+msgstr "--key-description 매개변수는 토큰 추가 동작에 있어 필수입니다."
+
+#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
+msgid "Action requires specific token. Use --token-id parameter."
+msgstr "동작에 지정 토큰이 필요합니다. --token-id 매개변수를 활용하십시오."
+
+#: src/cryptsetup.c:3457
+msgid "Option --unbound is valid only with token add action."
+msgstr "--unbound 옵션은 토큰 추가 동작일 설정했을 경우에만 유효합니다."
+
+#: src/cryptsetup.c:3459
+msgid "Options --key-slot and --unbound cannot be combined."
+msgstr "--key-slot 옵션과 --unbound 옵션은 함께 사용할 수 없습니다."
+
+#: src/cryptsetup.c:3464
+msgid "Action requires specific keyslot. Use --key-slot parameter."
+msgstr "동작에 지정 키 슬롯이 필요합니다. --key-slot 매개변수를 활용하십시오."
+
+#: src/cryptsetup.c:3480
+msgid "<device> [--type <type>] [<name>]"
+msgstr "<장치> [--type <형식>] [<명칭>]"
+
+#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
+msgid "open device as <name>"
+msgstr "<명칭> 으로 장치를 엽니다"
+
+#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
+msgid "<name>"
+msgstr "<명칭>"
+
+#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
+msgid "close device (remove mapping)"
+msgstr "장치를 닫습니다 (매핑 제거)"
+
+#: src/cryptsetup.c:3482 src/integritysetup.c:558
+msgid "resize active device"
+msgstr "활성 장치 크기를 조절합니다."
+
+#: src/cryptsetup.c:3483
+msgid "show device status"
+msgstr "장치 상태를 보여줍니다"
+
+#: src/cryptsetup.c:3484
+msgid "[--cipher <cipher>]"
+msgstr "[--cipher <암호화방식>]"
+
+#: src/cryptsetup.c:3484
+msgid "benchmark cipher"
+msgstr "암호화 방식을 비교 시험합니다"
+
+#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
+#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+msgid "<device>"
+msgstr "<장치>"
+
+#: src/cryptsetup.c:3485
+msgid "try to repair on-disk metadata"
+msgstr "디스크 메타데이터의 복구를 시도합니다."
+
+#: src/cryptsetup.c:3486
+msgid "reencrypt LUKS2 device"
+msgstr "LUKS2 장치를 재암호화합니다"
+
+#: src/cryptsetup.c:3487
+msgid "erase all keyslots (remove encryption key)"
+msgstr "모든 키 슬롯을 삭제합니다 (암호화 키 제거)"
+
+#: src/cryptsetup.c:3488
+msgid "convert LUKS from/to LUKS2 format"
+msgstr "LUKS 에서/을 LUKS2 으로/부터 형식을 상호 변환합니다"
+
+#: src/cryptsetup.c:3489
+msgid "set permanent configuration options for LUKS2"
+msgstr "LUKS2의 영구 설정 옵션을 설정합니다"
+
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
+msgid "<device> [<new key file>]"
+msgstr "<장치> [<새_키_파일>]"
+
+#: src/cryptsetup.c:3490
+msgid "formats a LUKS device"
+msgstr "LUKS 장치를 포매팅합니다"
+
+#: src/cryptsetup.c:3491
+msgid "add key to LUKS device"
+msgstr "LUKS 장치에 키를 추가합니다"
+
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
+msgid "<device> [<key file>]"
+msgstr "<장치> [<키_파일>]"
+
+#: src/cryptsetup.c:3492
+msgid "removes supplied key or key file from LUKS device"
+msgstr "보관 키 또는 키 파일을 LUKS 장치에서 제거합니다"
+
+#: src/cryptsetup.c:3493
+msgid "changes supplied key or key file of LUKS device"
+msgstr "LUKS 장치의 보관 키 또는 키 파일을 바꿉니다"
+
+#: src/cryptsetup.c:3494
+msgid "converts a key to new pbkdf parameters"
+msgstr "새 pbkdf 매개변수를 사용하여 키를 변환합니다"
+
+#: src/cryptsetup.c:3495
+msgid "<device> <key slot>"
+msgstr "<장치> <키_슬롯>"
+
+#: src/cryptsetup.c:3495
+msgid "wipes key with number <key slot> from LUKS device"
+msgstr "LUKS 장치에서 <키_슬롯> 번호로 키를 소거합니다"
+
+#: src/cryptsetup.c:3496
+msgid "print UUID of LUKS device"
+msgstr "LUKS 장치의 UUID를 출력합니다"
+
+#: src/cryptsetup.c:3497
+msgid "tests <device> for LUKS partition header"
+msgstr "<장치>의 LUKS 분할 영역 헤더를 시험합니다"
+
+#: src/cryptsetup.c:3498
+msgid "dump LUKS partition information"
+msgstr "LUKS 분할 영역 정보 덤프"
+
+#: src/cryptsetup.c:3499
+msgid "dump TCRYPT device information"
+msgstr "TCRYPT 장치 정보 덤프"
+
+#: src/cryptsetup.c:3500
+msgid "dump BITLK device information"
+msgstr "BITLK 장치 정보 덤프"
+
+#: src/cryptsetup.c:3501
+msgid "dump FVAULT2 device information"
+msgstr "FVAULT2 장치 정보 덤프"
+
+#: src/cryptsetup.c:3502
+msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
+msgstr "LUKS 장치를 대기 상태로 놓고 키를 소거합니다 (모든 입출력 동작을 중단)"
+
+#: src/cryptsetup.c:3503
+msgid "Resume suspended LUKS device"
+msgstr "대기 상태로 들어간 LUKS 장치의 동작을 재개합니다"
+
+#: src/cryptsetup.c:3504
+msgid "Backup LUKS device header and keyslots"
+msgstr "LUKS 장치 헤더와 키 슬롯을 백업합니다"
+
+#: src/cryptsetup.c:3505
+msgid "Restore LUKS device header and keyslots"
+msgstr "LUKS 장치 헤더와 키 슬롯을 복원합니다"
+
+#: src/cryptsetup.c:3506
+msgid "<add|remove|import|export> <device>"
+msgstr "<add|remove|import|export> <장치>"
+
+#: src/cryptsetup.c:3506
+msgid "Manipulate LUKS2 tokens"
+msgstr "LUKS2 토큰을 처리합니다"
+
+#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
+msgid ""
+"\n"
+"<action> is one of:\n"
+msgstr ""
+"\n"
+"<동작>은 다음 중 하나입니다:\n"
+
+#: src/cryptsetup.c:3531
+msgid ""
+"\n"
+"You can also use old <action> syntax aliases:\n"
+"\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
+"\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
+msgstr ""
+"\n"
+"또한  이전 <동작> 문법 별칭을 사용할 수도 있습니다:\n"
+"\t열기: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
+"\t닫기: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
+
+#: src/cryptsetup.c:3535
+#, c-format
+msgid ""
+"\n"
+"<name> is the device to create under %s\n"
+"<device> is the encrypted device\n"
+"<key slot> is the LUKS key slot number to modify\n"
+"<key file> optional key file for the new key for luksAddKey action\n"
+msgstr ""
+"\n"
+"<명칭>은 %s에서 만든 장치\n"
+"<장치>는 암호화 장치\n"
+"<키_슬롯>은 수정할 LUKS 키 슬롯 번호\n"
+"<키_파일>은 luksAddKey 동작에 사용할 새 키의 추가 키 파일입니다\n"
+
+#: src/cryptsetup.c:3542
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in metadata format is %s (for luksFormat action).\n"
+msgstr ""
+"\n"
+"컴파일 과정에 들어간 기본 메타데이터 형식은 %s 입니다(luksFormat 동작용).\n"
+
+#: src/cryptsetup.c:3547
+msgid ""
+"\n"
+"LUKS2 external token plugin support is enabled.\n"
+msgstr ""
+"\n"
+"LUKS2 외부 토큰 플러그인 지원을 사용합니다.\n"
+
+#: src/cryptsetup.c:3548
+#, c-format
+msgid "LUKS2 external token plugin path: %s.\n"
+msgstr "LUKS2 외부 토큰 플러그인 경로: %s.\n"
+
+#: src/cryptsetup.c:3550
+msgid ""
+"\n"
+"LUKS2 external token plugin support is disabled.\n"
+msgstr ""
+"\n"
+"LUKS2 외부 토큰 플러그인 지원 사용을 해제합니다.\n"
+
+#: src/cryptsetup.c:3554
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in key and passphrase parameters:\n"
+"\tMaximum keyfile size: %dkB, Maximum interactive passphrase length %d (characters)\n"
+"Default PBKDF for LUKS1: %s, iteration time: %d (ms)\n"
+"Default PBKDF for LUKS2: %s\n"
+"\tIteration time: %d, Memory required: %dkB, Parallel threads: %d\n"
+msgstr ""
+"\n"
+"컴파일 과정에 들어간 기본 키 및 암호 매개변수:\n"
+"\t최대 키 파일 크기: %dkB, 최대 대화식 암호 길이 %d(문자)\n"
+"LUKS1의 기본 PBKDF: %s, 반복 횟수: %d(ms)\n"
+"LUKS2의 기본 PBKDF: %s\n"
+"\t반복 횟수: %d, 요구 메모리 용량: %dkB, 병렬 스레드: %d\n"
+
+#: src/cryptsetup.c:3565
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in device cipher parameters:\n"
+"\tloop-AES: %s, Key %d bits\n"
+"\tplain: %s, Key: %d bits, Password hashing: %s\n"
+"\tLUKS: %s, Key: %d bits, LUKS header hashing: %s, RNG: %s\n"
+msgstr ""
+"\n"
+"컴파일 과정에 들어간 장치 암호 매개 변수:\n"
+"\tloop-AES: %s, 키 %d비트\n"
+"\t평문: %s, 키: %d비트, 암호 해싱: %s\n"
+"\tLUKS: %s, 키: %d비트, LUKS 헤더 해싱: %s, RNG: %s\n"
+
+#: src/cryptsetup.c:3574
+msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
+msgstr "\tLUKS: XTS 모드에서의 기본 키 크기(내부 키 2개)가 2배로 늘어납니다.\n"
+
+#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
+#, c-format
+msgid "%s: requires %s as arguments"
+msgstr "%s: %s 인자 값이 필요합니다"
+
+#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
+msgid "Key slot is invalid."
+msgstr "키 슬롯이 적절하지 않습니다."
+
+#: src/cryptsetup.c:3660
+msgid "Device size must be multiple of 512 bytes sector."
+msgstr "장치 크기는 512 바이트 섹터의 배수여야 합니다."
+
+#: src/cryptsetup.c:3665
+msgid "Invalid max reencryption hotzone size specification."
+msgstr "부절적한 최대 재암호화 핫존 크기 지정 값입니다."
+
+#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
+msgid "Key size must be a multiple of 8 bits"
+msgstr "키 크기는 8비트의 배수여야 합니다."
+
+#: src/cryptsetup.c:3686
+msgid "At most 2 key size specifications can be supplied."
+msgstr "최대 키 크키 명세 2가지를 지정할 수 있습니다."
+
+#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
+#, c-format
+msgid "At most %d volume key specifications can be supplied."
+msgstr "최대 볼륨 키 명세 %d가지를 지정할 수 있습니다."
+
+#: src/cryptsetup.c:3738
+#, c-format
+msgid "At most %d keyring link specifications can be supplied."
+msgstr "최대 키 모음 링크 명세 %d가지를 지정할 수 있습니다."
+
+#: src/cryptsetup.c:3747
+msgid "Maximum device reduce size is 1 GiB."
+msgstr "최대 장치 축소 용량은 1GiB 입니다."
+
+#: src/cryptsetup.c:3750
+msgid "Reduce size must be multiple of 512 bytes sector."
+msgstr "축소 용량은 512바이트 섹터의 배수여야 합니다."
+
+#: src/cryptsetup.c:3767
+msgid "Option --priority can be only ignore/normal/prefer."
+msgstr "--priority 옵션은 ignore/normal/prefer 셋 중 한가지 값만 지정 가능합니다."
+
+#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
+msgid "Show this help message"
+msgstr "이 도움말 메시지를 나타냅니다"
+
+#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
+msgid "Display brief usage"
+msgstr "간단한 사용법을 나타냅니다"
+
+#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
+msgid "Print package version"
+msgstr "패키지 버전을 출력합니다"
+
+#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
+msgid "Help options:"
+msgstr "도움말 옵션:"
+
+#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
+msgid "[OPTION...] <action> <action-specific>"
+msgstr "[옵션...] <동작> <동작별_옵션>"
+
+#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
+msgid "Argument <action> missing."
+msgstr "<동작> 인자가 빠졌습니다."
+
+#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
+msgid "Unknown action."
+msgstr "알 수 없는 동작."
+
+#: src/cryptsetup.c:3928
+msgid "Option --key-file takes precedence over specified key file argument."
+msgstr "--key-file 옵션은 키 파일 인자 값보다 우선합니다."
+
+#: src/cryptsetup.c:3934
+msgid "Only one --key-file argument is allowed."
+msgstr "--key-file 인자는 하나만 허용합니다."
+
+#: src/cryptsetup.c:3939
+msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
+msgstr "암호 기반 키 파생 함수(PBKDF)는 pbkdf2 또는 argon2i/argon2id만 지정 가능합니다."
+
+#: src/cryptsetup.c:3944
+msgid "PBKDF forced iterations cannot be combined with iteration time option."
+msgstr "PBKDF 강제 반복 옵션은 반복 횟수 옵션과 함께 사용할 수 없습니다."
+
+#: src/cryptsetup.c:3949
+msgid "Cannot link volume key to a keyring when keyring is disabled."
+msgstr "키 모음을 사용하지 않을 때는 볼륨 키를 키 모음에 연결할 수 없습니다."
+
+#: src/cryptsetup.c:3954
+msgid "Cannot use keyring key description when keyring is disabled."
+msgstr "키 모음을 사용하지 않을 때는 키 모음 키 설명을 사용할 수 없습니다."
+
+#: src/cryptsetup.c:3959
+msgid "Inline integrity must be used together with --integrity option."
+msgstr "인라인 무결성 확인은 --integrity 옵션을 함꼐 사용해야 합니다."
+
+#: src/cryptsetup.c:3970
+msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
+msgstr "--keyslot-cipher 옵션과 --keyslow-key-size 옵션을 함께 사용해야 합니다."
+
+#: src/cryptsetup.c:3978
+msgid "No action taken. Invoked with --test-args option.\n"
+msgstr "취한 동작이 없습니다. --test-args 옵션을 넣어 실행했습니다.\n"
+
+#: src/cryptsetup.c:3991
+msgid "Cannot disable metadata locking."
+msgstr "메타데이터 잠금을 해제할 수 없습니다."
+
+#: src/veritysetup.c:41
+msgid "Invalid salt string specified."
+msgstr "부적절한 솔트 문자열을 지정했습니다."
+
+#: src/veritysetup.c:74
+#, c-format
+msgid "Cannot create hash image %s for writing."
+msgstr "기록할 %s 해시 이미지를 만들 수 없습니다."
+
+#: src/veritysetup.c:84
+#, c-format
+msgid "Cannot create FEC image %s for writing."
+msgstr "기록할 %s FEC 이미지를 만들 수 없습니다."
+
+#: src/veritysetup.c:123
+#, c-format
+msgid "Cannot create root hash file %s for writing."
+msgstr "기록할 %s 루트 패시 파일을 만들 수 없습니다."
+
+#: src/veritysetup.c:130
+#, c-format
+msgid "Cannot write to root hash file %s."
+msgstr "%s 루트 해시 파일에 기록할 수 없습니다."
+
+#: src/veritysetup.c:189 src/veritysetup.c:472
+#, c-format
+msgid "Device %s is not a valid VERITY device."
+msgstr "%s 장치는 적절한 검증 장치가 아닙니다."
+
+#: src/veritysetup.c:206 src/veritysetup.c:223
+#, c-format
+msgid "Cannot read root hash file %s."
+msgstr "%s 루트 해시 파일을 읽을 수 없습니다."
+
+#: src/veritysetup.c:211
+#, c-format
+msgid "Invalid root hash file %s."
+msgstr "부적절한 %s 루트 해시 파일입니다."
+
+#: src/veritysetup.c:232
+msgid "Invalid root hash string specified."
+msgstr "부적절한 루트 해시 문자열을 지정했습니다."
+
+#: src/veritysetup.c:240
+#, c-format
+msgid "Invalid signature file %s."
+msgstr "부적절한 %s 시그니처 파일입니다."
+
+#: src/veritysetup.c:247
+#, c-format
+msgid "Cannot read signature file %s."
+msgstr "%s 시그니처 파일을 읽을 수 없습니다."
+
+#: src/veritysetup.c:270 src/veritysetup.c:287
+msgid "Command requires <root_hash> or --root-hash-file option as argument."
+msgstr "명령에 <루트_해시> 또는 --root-hash-file 옵션 인자 값이 필요합니다."
+
+#: src/veritysetup.c:485
+msgid "<data_device> <hash_device>"
+msgstr "<데이터_장치> <해시_장치>"
+
+#: src/veritysetup.c:485 src/integritysetup.c:553
+msgid "format device"
+msgstr "장치를 포매팅합니다"
+
+#: src/veritysetup.c:486
+msgid "<data_device> <hash_device> [<root_hash>]"
+msgstr "<데이터_장치> <해시_장치> [<루트_해시>]"
+
+#: src/veritysetup.c:486
+msgid "verify device"
+msgstr "장치를 검증합니다"
+
+#: src/veritysetup.c:487
+msgid "<data_device> <name> <hash_device> [<root_hash>]"
+msgstr "<데이터_장치> <명칭> <해시_장치> [<루트_해시>]"
+
+#: src/veritysetup.c:489 src/integritysetup.c:556
+msgid "show active device status"
+msgstr "장치 동작 상황을 보여줍니다"
+
+#: src/veritysetup.c:490
+msgid "<hash_device>"
+msgstr "<해시_장치>"
+
+#: src/veritysetup.c:490 src/integritysetup.c:557
+msgid "show on-disk information"
+msgstr "디스크 정보를 보여줍니다"
+
+#: src/veritysetup.c:509
+#, c-format
+msgid ""
+"\n"
+"<name> is the device to create under %s\n"
+"<data_device> is the data device\n"
+"<hash_device> is the device containing verification data\n"
+"<root_hash> hash of the root node on <hash_device>\n"
+msgstr ""
+"\n"
+"<명칭>은 %s에 만든 장치\n"
+"<데이터_장치>는 데이터 장치\n"
+"<해시_장치>는 검증 데이터가 들어간 장치\n"
+"<루트_해시>는 <해시_장치> 루트 노드의 해시입니다\n"
+
+#: src/veritysetup.c:516
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in dm-verity parameters:\n"
+"\tHash: %s, Data block (bytes): %u, Hash block (bytes): %u, Salt size: %u, Hash format: %u\n"
+msgstr ""
+"\n"
+"컴파일 과정에 넣은 기본 dm-verity 매개변수:\n"
+"\t해시: %s, 데이터 블록 (바이트): %u, 해시 블록 (바이트): %u, 솔트 길이: %u, 해시 형식: %u\n"
+
+#: src/veritysetup.c:657
+msgid "Option --ignore-corruption and --restart-on-corruption cannot be used together."
+msgstr "--ignore-corruption 옵션과 --restart-on-corruption 옵션은 혼용할 수 없습니다."
+
+#: src/veritysetup.c:662
+msgid "Option --panic-on-corruption and --restart-on-corruption cannot be used together."
+msgstr "--panic-on-corruption 옵션과 --restart-on-corruption 옵션을 혼용할 수 없습니다."
+
+#: src/veritysetup.c:668
+msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
+msgstr "--error-as-corruption 옵션은 --panic-on-corruption 옵션 또는 --restart-on-corruption 옵션을 함께 사용해야 합니다."
+
+#: src/integritysetup.c:168
+#, c-format
+msgid ""
+"This will overwrite data on %s and %s irrevocably.\n"
+"To preserve data device use --no-wipe option (and then activate with --integrity-recalculate)."
+msgstr ""
+"%s와 %s의 데이터를 덮어쓰며 돌이킬 수 없습니다.\n"
+"데이터 장치를 보존하려면 --no-wipe 옵션을 사용하십시오 (그리고 --integrity-recalculate 옵션으로 장치 동작 시작)."
+
+#: src/integritysetup.c:213
+#, c-format
+msgid "Formatted with tag size %u%s, internal integrity %s.\n"
+msgstr "%u%s 태그 크기와 내부 무결성 %s(으)로 포매팅했습니다.\n"
+
+#: src/integritysetup.c:214
+msgid " (inline hw tags)"
+msgstr " (인라인 hw 태그)"
+
+#: src/integritysetup.c:303
+msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
+msgstr "재계산 플래그 설정은 지원하지 않습니다. --wipe 옵션 사용을 대신 고려하십시오."
+
+#: src/integritysetup.c:380 src/integritysetup.c:540
+#, c-format
+msgid "Device %s is not a valid INTEGRITY device."
+msgstr "%s 장치는 적절한 \"무결성\" 장치가 아닙니다."
+
+#: src/integritysetup.c:553 src/integritysetup.c:557
+msgid "<integrity_device>"
+msgstr "<무결성_장치>"
+
+#: src/integritysetup.c:554
+msgid "<integrity_device> <name>"
+msgstr "<무결성_장치> <명칭>"
+
+#: src/integritysetup.c:577
+#, c-format
+msgid ""
+"\n"
+"<name> is the device to create under %s\n"
+"<integrity_device> is the device containing data with integrity tags\n"
+msgstr ""
+"\n"
+"<명칭> 은 %s에 만들 장치\n"
+"<무결성_장치>는 무결성 태그와 데이터가 들어간 장치입니다\n"
+
+#: src/integritysetup.c:582
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in dm-integrity parameters:\n"
+"\tChecksum algorithm: %s\n"
+"\tMaximum keyfile size: %dkB\n"
+msgstr ""
+"\n"
+"컴파일 과정에 넣은 기본 dm-integrity 매개변수:\n"
+"\t체크섬 알고리즘: %s\n"
+"\t최대 키 파일 크기: %dkB\n"
+
+#: src/integritysetup.c:639
+#, c-format
+msgid "Invalid --%s size. Maximum is %u bytes."
+msgstr "부적절한 --%s 크기 값입니다. 최대값은 %u 바이트입니다."
+
+#: src/integritysetup.c:742
+msgid "Both key file and key size options must be specified."
+msgstr "키 파일과 키 크기 옵션을 함께 지정해야 합니다."
+
+#: src/integritysetup.c:746
+msgid "Both journal integrity key file and key size options must be specified."
+msgstr "저널 무결성 키와 키 크키 옵션을 함께 지정해야 합니다."
+
+#: src/integritysetup.c:749
+msgid "Journal integrity algorithm must be specified if journal integrity key is used."
+msgstr "저널 무결성 키를 사용한다면 저널 무결성 알고리즘은 지정해야 합니다."
+
+#: src/integritysetup.c:753
+msgid "Both journal encryption key file and key size options must be specified."
+msgstr "저널 암호화 키 파일과 키 크기 옵션을 함께 지정해야 합니다."
+
+#: src/integritysetup.c:756
+msgid "Journal encryption algorithm must be specified if journal encryption key is used."
+msgstr "저널 암호화 키를 사용할 경우 저널 암호화 알고리즘을 지정해야 합니다."
+
+#: src/integritysetup.c:760
+msgid "Recovery and bitmap mode options are mutually exclusive."
+msgstr "복구 및 비트맵 모드 옵션은 혼용할 수 없습니다."
+
+#: src/integritysetup.c:767
+msgid "Journal options cannot be used in bitmap mode."
+msgstr "저널 옵션은 비트맵 모드에서 사용할 수 없습니다."
+
+#: src/integritysetup.c:772
+msgid "Bitmap options can be used only in bitmap mode."
+msgstr "비트맵 옵션은 비트맵 모드에서만 사용할 수 있습니다."
+
+#: src/integritysetup.c:778
+msgid "Inline mode cannot be combined with journal or bitmap options."
+msgstr "인라인 모드는 저널 옵션 또는 비트맵 옵션과 혼용할 수 없습니다."
+
+#: src/integritysetup.c:782
+msgid "Inline mode cannot be combined with separate data device."
+msgstr "인라인 모드는 개별 데이터 장치와 혼용할 수 없습니다."
+
+#: src/utils_tools.c:105
+msgid ""
+"\n"
+"WARNING!\n"
+"========\n"
+msgstr ""
+"\n"
+"경고!\n"
+"========\n"
+
+#. TRANSLATORS: User must type "YES" (in capital letters), do not translate this word.
+#: src/utils_tools.c:107
+#, c-format
+msgid ""
+"%s\n"
+"\n"
+"Are you sure? (Type 'yes' in capital letters): "
+msgstr ""
+"%s\n"
+"\n"
+"정말로 진행하시겠습니까? (대문자로 'yes' 입력하십시오): "
+
+#: src/utils_tools.c:113
+msgid "Error reading response from terminal."
+msgstr "터미널 응답을 읽는 중 오류가 있습니다."
+
+#: src/utils_tools.c:145
+msgid "Command successful."
+msgstr "명령 실행에 성공했습니다."
+
+#: src/utils_tools.c:153
+msgid "wrong or missing parameters"
+msgstr "잘못된 또는 빠진 매개변수"
+
+#: src/utils_tools.c:155
+msgid "no permission or bad passphrase"
+msgstr "권한이 없거나 잘못된 암호 입력"
+
+#: src/utils_tools.c:157
+msgid "out of memory"
+msgstr "메모리 부족"
+
+#: src/utils_tools.c:159
+msgid "wrong device or file specified"
+msgstr "잘못된 장치 또는 파일을 지정했습니다"
+
+#: src/utils_tools.c:161
+msgid "device already exists or device is busy"
+msgstr "장치가 이미 있거나 사용하고 있습니다."
+
+#: src/utils_tools.c:163
+msgid "unknown error"
+msgstr "알 수 없는 오류"
+
+#: src/utils_tools.c:165
+#, c-format
+msgid "Command failed with code %i (%s)."
+msgstr "%i 결과로 명령 실행 실패 (%s)."
+
+#: src/utils_tools.c:243
+#, c-format
+msgid "Key slot %i created."
+msgstr "%i 키 슬롯을 만들었습니다."
+
+#: src/utils_tools.c:245
+#, c-format
+msgid "Key slot %i unlocked."
+msgstr "%i 키 슬롯 잠금을 해제했습니다."
+
+#: src/utils_tools.c:247
+#, c-format
+msgid "Key slot %i removed."
+msgstr "%i 키 슬롯을 제거했습니다."
+
+#: src/utils_tools.c:256
+#, c-format
+msgid "Token %i created."
+msgstr "%i 토큰을 만들었습니다."
+
+#: src/utils_tools.c:258
+#, c-format
+msgid "Token %i removed."
+msgstr "%i 토큰을 제거했습니다."
+
+#: src/utils_tools.c:268
+msgid "No token could be unlocked with this PIN."
+msgstr "이 PIN으로 잠금을 해제할 수 있는 토큰이 없습니다."
+
+#: src/utils_tools.c:270
+#, c-format
+msgid "Token %i requires PIN."
+msgstr "%i 토큰에 PIN이 필요합니다."
+
+#: src/utils_tools.c:272
+#, c-format
+msgid "Token (type %s) requires PIN."
+msgstr "토큰(%s 형식)에 PIN이 필요합니다."
+
+#: src/utils_tools.c:275
+#, c-format
+msgid "Token %i cannot unlock assigned keyslot(s) (wrong keyslot passphrase)."
+msgstr "%i 토큰으로 할당 키 슬롯의 잠금을 해제할 수 없습니다(잘못된 키 슬롯 암호)."
+
+#: src/utils_tools.c:277
+#, c-format
+msgid "Token (type %s) cannot unlock assigned keyslot(s) (wrong keyslot passphrase)."
+msgstr "토큰(%s 형식)에 할당한 키 슬롯의 잠금을 해제할 수 없습니다(잘못된 키 슬롯 암호)."
+
+#: src/utils_tools.c:280
+#, c-format
+msgid "Token %i requires additional missing resource."
+msgstr "%i 토큰에 추가 누락 자원 정보가 필요합니다."
+
+#: src/utils_tools.c:282
+#, c-format
+msgid "Token (type %s) requires additional missing resource."
+msgstr "토큰(%s 형식)에 추가 누락 자원 정보가 필요합니다."
+
+#: src/utils_tools.c:285
+#, c-format
+msgid "No usable token (type %s) is available."
+msgstr "사용할 수 있는 토큰(%s 형식)이 없습니다."
+
+#: src/utils_tools.c:287
+msgid "No usable token is available."
+msgstr "사용할 수 있는 토큰이 없습니다."
+
+#: src/utils_tools.c:380
+#, c-format
+msgid "Cannot read keyfile %s."
+msgstr "%s 키 파일을 읽을 수 없습니다."
+
+#: src/utils_tools.c:385
+#, c-format
+msgid "Cannot read %d bytes from keyfile %s."
+msgstr "%2$s 키 파일에서 %1$d 바이트를 읽을 수 없습니다."
+
+#: src/utils_tools.c:410
+#, c-format
+msgid "Cannot open keyfile %s for write."
+msgstr "쓰기 모드로 %s 키 파일을 열 수 없습니다."
+
+#: src/utils_tools.c:417
+#, c-format
+msgid "Cannot write to keyfile %s."
+msgstr "%s 키 파일에 기록할 수 없습니다."
+
+#: src/utils_tools.c:468
+msgid "Name is too long."
+msgstr "이름이 너무 깁니다."
+
+#: src/utils_tools.c:471
+msgid "Name must not contain '/' character."
+msgstr "이름에 '/' 문자가 들어가면 안됩니다."
+
+#: src/utils_progress.c:61
+#, c-format
+msgid "%02<PRIu64>m%02<PRIu64>s"
+msgstr "%02<PRIu64>분 %02<PRIu64>초"
+
+#: src/utils_progress.c:63
+#, c-format
+msgid "%02<PRIu64>h%02<PRIu64>m%02<PRIu64>s"
+msgstr "%02<PRIu64>시간 %02<PRIu64>분 %02<PRIu64>초"
+
+#: src/utils_progress.c:65
+#, c-format
+msgid "%02<PRIu64> days"
+msgstr "%02<PRIu64> 일"
+
+#: src/utils_progress.c:92 src/utils_progress.c:125
+#, c-format
+msgid "%4<PRIu64> %s written"
+msgstr "%4<PRIu64> %s 기록"
+
+#: src/utils_progress.c:96 src/utils_progress.c:129
+#, c-format
+msgid "speed %5.1f %s/s"
+msgstr "처리 속도 %5.1f %s/s"
+
+#. TRANSLATORS: 'time', 'written' and 'speed' string are supposed
+#. to get translated as well. 'eol' is always new-line or empty.
+#. See above.
+#.
+#: src/utils_progress.c:105
+#, c-format
+msgid "Progress: %5.1f%%, ETA %s, %s, %s%s"
+msgstr "진행: %5.1f%%, 예상 완료 %s, %s, %s%s"
+
+#. TRANSLATORS: 'time', 'written' and 'speed' string are supposed
+#. to get translated as well. See above
+#.
+#: src/utils_progress.c:137
+#, c-format
+msgid "Finished, time %s, %s, %s\n"
+msgstr "완료, 시간  %s, %s, %s\n"
+
+#: src/utils_password.c:28 src/utils_password.c:59
+#, c-format
+msgid "Cannot check password quality: %s"
+msgstr "암호 수준을 확인할 수 없음: %s"
+
+#: src/utils_password.c:36
+#, c-format
+msgid ""
+"Password quality check failed:\n"
+" %s"
+msgstr ""
+"암호 수준 확인 실패:\n"
+" %s"
+
+#: src/utils_password.c:66
+#, c-format
+msgid "Password quality check failed: Bad passphrase (%s)"
+msgstr "암호 수준 확인 실패: 잘못된 암호 (%s)"
+
+#: src/utils_password.c:197
+msgid "Read stopped at maximal interactive input length, passphrase can be trimmed."
+msgstr "최대 전송 입력 길이 위치에서 읽기 멈춤. 암호 입력이 잘릴 수 있습니다."
+
+#: src/utils_password.c:224 src/utils_password.c:238
+msgid "Error reading passphrase from terminal."
+msgstr "터미널 암호 입력을 읽는 중 오류가 있습니다."
+
+#: src/utils_password.c:236
+msgid "Verify passphrase: "
+msgstr "암호 확인: "
+
+#: src/utils_password.c:243
+msgid "Passphrases do not match."
+msgstr "암호가 일치하지 않습니다."
+
+#: src/utils_password.c:281
+msgid "Cannot use offset with terminal input."
+msgstr "터미널 입력 오프셋을 사용할 수 없습니다."
+
+#: src/utils_password.c:285
+#, c-format
+msgid "Enter passphrase: "
+msgstr "암호 입력: "
+
+#: src/utils_password.c:288
+#, c-format
+msgid "Enter passphrase for %s: "
+msgstr "%s 암호 입력: "
+
+#: src/utils_password.c:322
+msgid "No key available with this passphrase."
+msgstr "이 암호의 키가 없습니다."
+
+#: src/utils_password.c:324
+msgid "No usable keyslot is available."
+msgstr "사용할 수 있는 키 슬롯이 없습니다."
+
+#: src/utils_luks.c:55
+msgid "Can't do passphrase verification on non-tty inputs."
+msgstr "non-tty 입력에 대해 암호 입력을 검증할 수 없습니다."
+
+#: src/utils_luks.c:179
+#, c-format
+msgid "Failed to open file %s in read-only mode."
+msgstr "읽기 전용 모드 %s 파일 열기 실패."
+
+#: src/utils_luks.c:193
+msgid "Provide valid LUKS2 token JSON:\n"
+msgstr "유효한 LUKS2 토큰 JSON을 제공하십시오:\n"
+
+#: src/utils_luks.c:200
+msgid "Failed to read JSON file."
+msgstr "JSON 파일 읽기 실패."
+
+#: src/utils_luks.c:205
+msgid ""
+"\n"
+"Read interrupted."
+msgstr ""
+"\n"
+"읽기 동작을 중단했습니다."
+
+#: src/utils_luks.c:246
+#, c-format
+msgid "Failed to open file %s in write mode."
+msgstr "%s 파일의 쓰기 모드 열기 실패."
+
+#: src/utils_luks.c:255
+msgid ""
+"\n"
+"Write interrupted."
+msgstr ""
+"\n"
+"기록 동작을 중단했습니다."
+
+#: src/utils_luks.c:259
+msgid "Failed to write JSON file."
+msgstr "JSON 파일 기록 실패."
+
+#: src/utils_reencrypt.c:93
+#, c-format
+msgid "Auto-detected active dm device '%s' for data device %s.\n"
+msgstr "%2$s 데이터 장치용으로 자동 확인한 동작 중인 '%1$s' dm 장치입니다.\n"
+
+#: src/utils_reencrypt.c:97
+#, c-format
+msgid "Failed to auto-detect device %s holders."
+msgstr "%s 장치 홀더 자동 확인 실패."
+
+#: src/utils_reencrypt.c:103
+#, c-format
+msgid "Device %s is not a block device.\n"
+msgstr "%s 장치는 블록 장치가 아닙니다.\n"
+
+#: src/utils_reencrypt.c:105
+#, c-format
+msgid ""
+"Unable to decide if device %s is activated or not.\n"
+"Are you sure you want to proceed with reencryption in offline mode?\n"
+"It may lead to data corruption if the device is actually activated.\n"
+"To run reencryption in online mode, use --active-name parameter instead.\n"
+msgstr ""
+"%s 장치가 동작 중인지 여부를 확인할 수 없습니다.\n"
+"정말로 오프라인 모드에서 재암호화를 진행하시겠습니까?\n"
+"장치가 실제로 동작 중이면 데이터가 깨질 수 있습니다.\n"
+"온라인 모드에서 재암호화를 진행하려면, 대신 --active-name 매개변수를 사용하십시오.\n"
+
+#: src/utils_reencrypt.c:114 src/utils_reencrypt.c:247
+#, c-format
+msgid ""
+"Device %s is not a block device. Can not auto-detect if it is active or not.\n"
+"Use --force-offline-reencrypt to bypass the check and run in offline mode (dangerous!)."
+msgstr ""
+"%s 장치는 블록 장치가 아닙니다. 동작 중인지 여부를 자동으로 확인할 수 없습니다.\n"
+"검사를 건너뛰고 오프라인 모드에서 실행하려면 --force-offline-reencrypt 옵션을 활용하십시오(위험함!)."
+
+#: src/utils_reencrypt.c:151 src/utils_reencrypt.c:194
+#: src/utils_reencrypt.c:204
+msgid "Requested --resilience option cannot be applied to current reencryption operation."
+msgstr "요청한 --resilience 옵션을 현재 재암호화 동작에 적용할 수 없습니다."
+
+#: src/utils_reencrypt.c:176
+msgid "Device is not in LUKS2 encryption. Conflicting option --encrypt."
+msgstr "LUKS2 암호화 장치가 아닙니다. --encrypt 옵션의 사용이 맞지 않습니다."
+
+#: src/utils_reencrypt.c:181
+msgid "Device is not in LUKS2 decryption. Conflicting option --decrypt."
+msgstr "LUKS2 암호화 장치가 아닙니다. --decrypt 옵션의 사용이 맞지 않습니다."
+
+#: src/utils_reencrypt.c:188
+msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
+msgstr "데이터 쉬프트 복원 기능을 활용하여 장치를 재암호화중입니다. 요청한 --resilience 옵션을 적용할 수 없습니다."
+
+#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
+msgstr "키 슬롯을 제외하고 LUKS 볼륨 키 크기를 확인할 수 없습니다. --new-key-size 옵션을 활용하십시오."
+
+#: src/utils_reencrypt.c:436
+msgid "Device requires reencryption recovery. Run repair first."
+msgstr "장치 재암호화 복원이 필요합니다. 우선 복원을 실행하십시오."
+
+#: src/utils_reencrypt.c:450
+#, c-format
+msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
+msgstr "%s 장치가 이미 LUKS2 재암호화 상태입니다. 앞서 초기화한 동작을 재개하시겠습니까?"
+
+#: src/utils_reencrypt.c:561
+msgid "Legacy LUKS2 reencryption is no longer supported."
+msgstr "기존의 LUKS2 재암호화 기능은 더 이상 지원하지 않습니다."
+
+#: src/utils_reencrypt.c:566
+msgid "Can not reencrypt LUKS2 device configured to use OPAL."
+msgstr "OPAL을 사용하도록 설정한 LUKS2 장치를 재암호화할 수 없습니다."
+
+#: src/utils_reencrypt.c:572
+msgid "Reencryption of device with integrity profile is not supported."
+msgstr "무결성 프로파일을 동반한 장치 재암호화는 지원하지 않습니다."
+
+#: src/utils_reencrypt.c:609
+#, c-format
+msgid ""
+"Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
+"(block size: %<PRIu32> bytes) detected on device %s."
+msgstr ""
+"요청한 --sector-size %1$<PRIu32> 옵션은 %4$s 장치에서 찾은\n"
+"%2$s 수퍼블록(블록 크기: %3$<PRIu32>바이트)과의 호환성이 없습니다."
+
+#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
+msgstr "분리 헤더(--header)를 제외한 암호화는 데이터 장치 용량을 줄이지 않고는(--reduce-device-size) 불가능합니다."
+
+#: src/utils_reencrypt.c:687
+msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
+msgstr "요청한 데이터 오프셋은 --reduce-device-size 매개변수 값의 절반보다 작거나 같아야 합니다."
+
+#: src/utils_reencrypt.c:697
+#, c-format
+msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
+msgstr "--reduce-device-size 값을 --offset %<PRIu64> (섹터)로 두번 조정합니다.\n"
+
+#: src/utils_reencrypt.c:727
+#, c-format
+msgid "Temporary header file %s already exists. Aborting."
+msgstr "%s 임시 헤더 파일이 이미 있습니다. 멈춤."
+
+#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#, c-format
+msgid "Cannot create temporary header file %s."
+msgstr "%s 임시 헤더 파일을 만들 수 없습니다."
+
+#: src/utils_reencrypt.c:761
+msgid "LUKS2 metadata size is larger than data shift value."
+msgstr "LUKS2 메타데이터 크기가 데이터 쉬프트 값보다 큽니다."
+
+#: src/utils_reencrypt.c:800
+#, c-format
+msgid "Failed to place new header at head of device %s."
+msgstr "장치 %s의 헤드에 새 헤더 설정 실패."
+
+#: src/utils_reencrypt.c:813
+#, c-format
+msgid "%s/%s is now active and ready for online encryption.\n"
+msgstr "%s/%s은(는) 이제부터 동작하며 온라인 암호화 대기중입니다.\n"
+
+#: src/utils_reencrypt.c:850
+#, c-format
+msgid "Active device %s is not LUKS2."
+msgstr "%s 동작 장치는 LUKS2 버전이 아닙니다."
+
+#: src/utils_reencrypt.c:878
+msgid "Restoring original LUKS2 header."
+msgstr "원본 LUKS2 헤더를 복원합니다."
+
+#: src/utils_reencrypt.c:886
+msgid "Original LUKS2 header restore failed."
+msgstr "원본 LUKS2 헤더 복원 실패."
+
+#: src/utils_reencrypt.c:918
+#, c-format
+msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
+msgstr "%s 헤더 파일이 없습니다. %s 장치의 LUKS2 해독 과정을 초기화하고 %s 파일로 LUKS2 헤더를 내보낼까요?"
+
+#: src/utils_reencrypt.c:961
+msgid "Failed to add read/write permissions to exported header file."
+msgstr "내보낸 헤더 파일의 읽기/쓰기 권한 추가 실패."
+
+#: src/utils_reencrypt.c:1015
+#, c-format
+msgid "Reencryption initialization failed. Header backup is available in %s."
+msgstr "재엄호화 초기화 실패. 헤더 백업은 %s에 있습니다."
+
+#: src/utils_reencrypt.c:1043
+msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
+msgstr "분리한 헤더 장치에서만 LUKS2 해독을 지원합니다 (데이터 오프셋 0값으로)."
+
+#: src/utils_reencrypt.c:1487
+msgid "No token could unlock the device."
+msgstr "장치 잠금을 해제할 수 있는 토큰이 없습니다."
+
+#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+msgid "Not enough free keyslots for reencryption."
+msgstr "재암호화에 활용할 여분의 키 슬롯이 부족합니다."
+
+#: src/utils_reencrypt.c:1559
+msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
+msgstr "키 파일 또는 키 모음의 키 설명은 --key-slot 옵션의 값으로 또는 정확히 하나의 동작하는 키 슬롯과 사용할 수 있습니다."
+
+#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
+#, c-format
+msgid "Enter passphrase for key slot %d: "
+msgstr "키 슬롯 %d번의 암호 입력: "
+
+#: src/utils_reencrypt.c:1876
+#, c-format
+msgid "Switching data encryption cipher to %s.\n"
+msgstr "데이터 암호화 암호 알고리즘을 %s(으)로 전환합니다.\n"
+
+#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
+msgstr "볼륨 키를 직접 전달하여 동작하고 있는 키 슬롯으로 장치를 재암호화하려면 --force-no-keyslots 옵션을 사용하십시오."
+
+#: src/utils_reencrypt.c:1993
+msgid "Option --new-volume-key-file must be paired with --new-key-size"
+msgstr "--new-volume-key-file 옵션은 --new-key-size 옵션과 함께 사용해야 합니다."
+
+#: src/utils_reencrypt.c:2035
+msgid "No data segment parameters changed. Reencryption aborted."
+msgstr "바뀐 데이터 세그먼트 매개변수가 없습니다. 재암호화를 멈추었습니다."
+
+#: src/utils_reencrypt.c:2072
+msgid ""
+"Encryption sector size increase on offline device is not supported.\n"
+"Activate the device first or use --force-offline-reencrypt option (dangerous!)."
+msgstr ""
+"오프라인 장치에서의 암호화 섹터 크기 증가는 지원하지 않습니다.\n"
+"우선 장치를 동작하게 만들거나 --force-offline-reencrypt 옵션(위험!)을 사용하십시오."
+
+#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt_luks1.c:759
+msgid ""
+"\n"
+"Reencryption interrupted."
+msgstr ""
+"\n"
+"재암호화를 중단했습니다."
+
+#: src/utils_reencrypt.c:2119
+msgid "Resuming LUKS reencryption in forced offline mode.\n"
+msgstr "강제 오프라인 모드에서 LUKS 재암호화 동작을 재개합니다.\n"
+
+#: src/utils_reencrypt.c:2142
+#, c-format
+msgid "Device %s contains broken LUKS metadata. Aborting operation."
+msgstr "%s 장치에 망가진 LUKS 메타데이터가 있습니다. 동작을 멈춥니다."
+
+#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#, c-format
+msgid "Device %s is already LUKS device. Aborting operation."
+msgstr "%s 장치에 이미 LUKS 장치가 있습니다. 동작을 멈춥니다."
+
+#: src/utils_reencrypt.c:2186
+#, c-format
+msgid "Device %s is already in LUKS reencryption. Aborting operation."
+msgstr "%s 장치가 이미 LUKS 재암호화 상태입니다. 동작을 멈춥니다."
+
+#: src/utils_reencrypt.c:2269
+msgid "LUKS2 decryption requires --header option."
+msgstr "LUKS2 암호화 해제에 --header 옵션이 필요합니다."
+
+#: src/utils_reencrypt.c:2317
+msgid "Command requires device as argument."
+msgstr "명쳥에 장치를 인자로 지정해야합니다."
+
+#: src/utils_reencrypt.c:2330
+#, c-format
+msgid "Conflicting versions. Device %s is LUKS1."
+msgstr "버전이 맞지 않습니다. %s 장치는 LUKS1입니다."
+
+#: src/utils_reencrypt.c:2336
+#, c-format
+msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
+msgstr "버전이 맞지 않습니다. %s 장치는 LUKS1 재암호화 상태입니다."
+
+#: src/utils_reencrypt.c:2342
+#, c-format
+msgid "Conflicting versions. Device %s is LUKS2."
+msgstr "버전이 맞지 않습니다. %s 장치는 LUKS2입니다."
+
+#: src/utils_reencrypt.c:2348
+#, c-format
+msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
+msgstr "버전이 맞지 않습니다. %s 장치는 LUKS2 재암호화 상태입니다."
+
+#: src/utils_reencrypt.c:2354
+msgid "LUKS2 reencryption already initialized. Aborting operation."
+msgstr "LUKS2 재암호화를 이미 초기화했습니다. 동작을 멈줍니다."
+
+#: src/utils_reencrypt.c:2361
+msgid "Device reencryption not in progress."
+msgstr "장치 재암호화를 진행하고 있지 않습니다."
+
+#: src/utils_reencrypt_luks1.c:116 src/utils_blockdev.c:285
+#, c-format
+msgid "Cannot exclusively open %s, device in use."
+msgstr "이미 사용중인 %s 장치를 별개로 열 수 없습니다."
+
+#: src/utils_reencrypt_luks1.c:130 src/utils_reencrypt_luks1.c:883
+msgid "Allocation of aligned memory failed."
+msgstr "정렬 메모리 할당 실패."
+
+#: src/utils_reencrypt_luks1.c:137
+#, c-format
+msgid "Cannot read device %s."
+msgstr "%s 장치를 읽을 수 없습니다."
+
+#: src/utils_reencrypt_luks1.c:148
+#, c-format
+msgid "Marking LUKS1 device %s unusable."
+msgstr "%s LUKS1 장치를 사용할 수 없도록 표시합니다."
+
+#: src/utils_reencrypt_luks1.c:164
+#, c-format
+msgid "Cannot write device %s."
+msgstr "%s 장치에 기록할 수 없습니다."
+
+#: src/utils_reencrypt_luks1.c:213
+msgid "Cannot write reencryption log file."
+msgstr "재암호화 로그 파일을 기록할 수 없습니다."
+
+#: src/utils_reencrypt_luks1.c:268
+msgid "Cannot read reencryption log file."
+msgstr "재암호화 로그 파일을 읽을 수 없습니다."
+
+#: src/utils_reencrypt_luks1.c:279
+msgid "Wrong log format."
+msgstr "잘못된 로그 형식입니다."
+
+#: src/utils_reencrypt_luks1.c:307
+#, c-format
+msgid "Log file %s exists, resuming reencryption.\n"
+msgstr "%s 로그 파일이 있습니다. 재암호화를 재개합니다.\n"
+
+#: src/utils_reencrypt_luks1.c:354
+msgid "Activating temporary device using old LUKS header."
+msgstr "이전 LUKS 헤더를 활용하여 임시 장치 동작을 시작합니다."
+
+#: src/utils_reencrypt_luks1.c:364
+msgid "Activating temporary device using new LUKS header."
+msgstr "새 LUKS 헤더를 활용하여 임시 장치 동작을 시작합니다."
+
+#: src/utils_reencrypt_luks1.c:374
+msgid "Activation of temporary devices failed."
+msgstr "임시 장치 동작 시작 실패."
+
+#: src/utils_reencrypt_luks1.c:434
+msgid "Failed to set data offset."
+msgstr "데이터 오프셋 설정 실패"
+
+#: src/utils_reencrypt_luks1.c:440
+msgid "Failed to set metadata size."
+msgstr "메타데이터 크기 설정 실패."
+
+#: src/utils_reencrypt_luks1.c:448
+#, c-format
+msgid "New LUKS header for device %s created."
+msgstr "%s 장치의 새 LUKS 헤더를 만들었습니다."
+
+#: src/utils_reencrypt_luks1.c:485
+#, c-format
+msgid "%s header backup of device %s created."
+msgstr "%2$s 장치의 %1$s 헤더 백업을 만들었습니다."
+
+#: src/utils_reencrypt_luks1.c:541
+msgid "Creation of LUKS backup headers failed."
+msgstr "LUKS 백업 헤더 생성 실패."
+
+#: src/utils_reencrypt_luks1.c:670
+#, c-format
+msgid "Cannot restore %s header on device %s."
+msgstr "%2$s 장치의 %1$s 헤더를 복원할 수 없습니다."
+
+#: src/utils_reencrypt_luks1.c:672
+#, c-format
+msgid "%s header on device %s restored."
+msgstr "%2$s 장치의 %1$s 헤더를 복원했습니다."
+
+#: src/utils_reencrypt_luks1.c:855 src/utils_reencrypt_luks1.c:861
+msgid "Cannot open temporary LUKS device."
+msgstr "임시 LUKS 장치를 열 수 없습니다."
+
+#: src/utils_reencrypt_luks1.c:866 src/utils_reencrypt_luks1.c:871
+msgid "Cannot get device size."
+msgstr "장치 크기를 가져올 수 없습니다."
+
+#: src/utils_reencrypt_luks1.c:913
+msgid "IO error during reencryption."
+msgstr "재암호화 중 입출력 오류."
+
+#: src/utils_reencrypt_luks1.c:943
+msgid "Provided UUID is invalid."
+msgstr "제시한 UUID 값이 부적절합니다."
+
+#: src/utils_reencrypt_luks1.c:1045
+msgid "Key file can be used only with --key-slot or with exactly one key slot active."
+msgstr "키 파일은 --key-slot 옵션으로 또는 정확히 하나의 키 슬롯이 동작할 때만 사용할 수 있습니다."
+
+#: src/utils_reencrypt_luks1.c:1169
+msgid "Cannot open reencryption log file."
+msgstr "재암호화 로그 파일을 열 수 없습니다."
+
+#: src/utils_reencrypt_luks1.c:1175
+msgid "No decryption in progress, provided UUID can be used only to resume suspended decryption process."
+msgstr "해독을 진행하고 있지 않습니다. 지정한 UUID는 대기 중인 복호화 처리 과정을 재개할 때만 사용할 수 있습니다."
+
+#: src/utils_reencrypt_luks1.c:1231
+#, c-format
+msgid "Reencryption will change: %s%s%s%s%s%s."
+msgstr "재암호화로 바뀝니다: %s%s%s%s%s%s."
+
+#: src/utils_reencrypt_luks1.c:1232
+msgid "volume key"
+msgstr "볼륨 키"
+
+#: src/utils_reencrypt_luks1.c:1234
+msgid "set hash to "
+msgstr "다음으로 해시 설정: "
+
+#: src/utils_reencrypt_luks1.c:1235
+msgid ", set cipher to "
+msgstr ", 다음 방식으로 암호화: "
+
+#: src/utils_blockdev.c:179
+#, c-format
+msgid "WARNING: Device %s already contains a '%s' partition signature.\n"
+msgstr "경고: %s 장치에 이미 '%s' 분할 영역 시그니처가 들어있습니다.\n"
+
+#: src/utils_blockdev.c:187
+#, c-format
+msgid "WARNING: Device %s already contains a '%s' superblock signature.\n"
+msgstr "경고: %s 장치에 이미 '%s' 수퍼블록 시그니처가 들어있습니다.\n"
+
+#: src/utils_blockdev.c:209 src/utils_blockdev.c:292 src/utils_blockdev.c:344
+msgid "Failed to initialize device signature probes."
+msgstr "장치 시그니처 확인 과정 초기화 실패."
+
+#: src/utils_blockdev.c:272
+#, c-format
+msgid "Failed to stat device %s."
+msgstr "%s 장치 상태 확인 실패."
+
+#: src/utils_blockdev.c:287
+#, c-format
+msgid "Failed to open file %s in read/write mode."
+msgstr "읽기/쓰기 모드로 %s 파일 열기 실패."
+
+#: src/utils_blockdev.c:307
+#, c-format
+msgid "Existing '%s' partition signature on device %s will be wiped."
+msgstr "%2$s 장치의 기존 '%1$s' 분할 영역 시그니처를 소거합니다."
+
+#: src/utils_blockdev.c:310
+#, c-format
+msgid "Existing '%s' superblock signature on device %s will be wiped."
+msgstr "%2$s 장치의 기존 '%1$s' 수퍼블록 시그니처를 소거합니다."
+
+#: src/utils_blockdev.c:313
+msgid "Failed to wipe device signature."
+msgstr "장치 시그니처 소거 실패."
+
+#: src/utils_blockdev.c:320
+#, c-format
+msgid "Failed to probe device %s for a signature."
+msgstr "%s 장치 시그니처 확인 실패."
+
+#: src/utils_args.c:52
+#, c-format
+msgid "Invalid size specification in parameter --%s."
+msgstr "--%s 매개변수의 크기 명세가 부적절합니다."
+
+#: src/utils_args.c:112
+#, c-format
+msgid "Option --%s is not allowed with %s action."
+msgstr "--%s 옵션은 %s 동작을 함께 취할 수 없습니다."
+
+#: src/utils_key_description.c:66
+msgid "Type specification in --link-vk-to-keyring keyring specification is ignored."
+msgstr "--link-vk-to-keyring 키 모음 명세의 형식 명세를 무시합니다."
+
+#: src/utils_key_description.c:131
+msgid "Key types have to be the same for both volume keys."
+msgstr "키 형식은 두 볼륨 키와 같아야 합니다."
+
+#: src/utils_key_description.c:136
+msgid "Both volume keys have to be linked to the same keyring."
+msgstr "두 볼륨 키는 동일한 키 모음에 연결해야 합니다."
+
+#: src/utils_key_description.c:146
+msgid "You need to supply more key names."
+msgstr "더 많은 키 이름을 지정해야 합니다."
+
+#: src/utils_key_description.c:150
+msgid "Invalid --link-vk-to-keyring value."
+msgstr "--link-vk-to-keyring 값이 적절하지 않습니다."
+
+#: src/utils_keyslot_check.c:114
+#, c-format
+msgid "Keyslot %d binary data could be corrupted.\n"
+msgstr "%d번 키 슬롯의 바이너리 데이터가 깨졌을 수도 있습니다.\n"
+
+#: src/utils_keyslot_check.c:124
+#, c-format
+msgid "  Suspected offset: 0x%<PRIx64>\n"
+msgstr "  이상한 오프셋: 0x%<PRIx64>\n"
+
+#: src/utils_keyslot_check.c:127
+msgid "  Subsequent suspected offsets are suppressed.\n"
+msgstr "  뒤따라오는 이상한 오프셋 값을 무시합니다.\n"
+
+#: src/utils_keyslot_check.c:178 src/utils_keyslot_check.c:183
+#, c-format
+msgid "Keyslot %d cannot be read from the device."
+msgstr "%d번 키 슬롯을 이 장치에서 읽을 수 없습니다."
+
+#: src/utils_keyslot_check.c:194
+#, c-format
+msgid "You can use hexdump -v -C -n 128 -s <offset_0xXXXX> \"%s\" to inspect the data.\n"
+msgstr "hexdump -v -C -n 128 -s <offset_0xXXXX> \"%s\" 명령을 사용하여 데이터를 검사할 수 있습니다.\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:110
+msgid "Failed to write ssh token json."
+msgstr "ssh 토큰 json 기록 실패."
+
+#: tokens/ssh/cryptsetup-ssh.c:128
+msgid ""
+"Experimental cryptsetup plugin for unlocking LUKS2 devices with token connected to an SSH server\vThis plugin currently allows only adding a token to an existing key slot.\n"
+"\n"
+"Specified SSH server must contain a key file on the specified path with a passphrase for an existing key slot on the device.\n"
+"Provided credentials will be used by cryptsetup to get the password when opening the device using the token.\n"
+"\n"
+"Note: The information provided when adding the token (SSH server address, user and paths) will be stored in the LUKS2 header in plaintext."
+msgstr ""
+"SSH 서버에 연결한 토큰으로 LUKS2 장치의 잠금을 해제하는 cryptsetup 플러그인 시험버전입니다\v이 플러그인은 현재 기존 키 슬롯으로의 토큰 추가만 허용합니다.\n"
+"\n"
+"지정 SSH 서버에는 지정 경로에 장치에 있는 키 슬롯용 암호가 들어간 키 파일이 있어야 합니다.\n"
+"제시한 암호는 cryptsetup에서 토큰을 사용하여 장치를 열 때 암호를 가져오는 용도로 사용합니다.\n"
+"\n"
+"참고: 토큰을 추가할 때 지정한 정보 (SSH 서버 주소, 사용자이름, 경로)는 LUKS2 헤더에 평문 형태로 저장합니다."
+
+#: tokens/ssh/cryptsetup-ssh.c:138
+msgid "<action> <device>"
+msgstr "<동작> <장치>"
+
+#: tokens/ssh/cryptsetup-ssh.c:141
+msgid "Options for the 'add' action:"
+msgstr "'추가' 동작 옵션:"
+
+#: tokens/ssh/cryptsetup-ssh.c:142
+msgid "IP address/URL of the remote server for this token"
+msgstr "이 토큰의 원격 서버 IP 주소/URL"
+
+#: tokens/ssh/cryptsetup-ssh.c:143
+msgid "Username used for the remote server"
+msgstr "원격 서버에서 사용할 사용자 이름"
+
+#: tokens/ssh/cryptsetup-ssh.c:144
+msgid "Path to the key file on the remote server"
+msgstr "원격 서버의 키 파일 경로"
+
+#: tokens/ssh/cryptsetup-ssh.c:145
+msgid "Path to the SSH key for connecting to the remote server"
+msgstr "원격 서버에 연결할 SSH 키 경로"
+
+#: tokens/ssh/cryptsetup-ssh.c:147
+msgid "Path to directory containinig libcryptsetup external tokens"
+msgstr "libcryptsetup 외부 토큰이 들어있는 디렉터리 경로"
+
+#: tokens/ssh/cryptsetup-ssh.c:148
+msgid "Keyslot to assign the token to. If not specified, token will be assigned to the first keyslot matching provided passphrase."
+msgstr "토큰을 할당할 키 슬롯입니다. 지정하지 않으면, 지정한 암호와 일치하는 처음 키 슬롯에 토큰을 배정합니다."
+
+#: tokens/ssh/cryptsetup-ssh.c:150
+msgid "Generic options:"
+msgstr "일반 옵션:"
+
+#: tokens/ssh/cryptsetup-ssh.c:151
+msgid "Shows more detailed error messages"
+msgstr "더 자세한 오류 메시지 표시"
+
+#: tokens/ssh/cryptsetup-ssh.c:152
+msgid "Show debug messages"
+msgstr "디버깅 메시지 표시"
+
+#: tokens/ssh/cryptsetup-ssh.c:153
+msgid "Show debug messages including JSON metadata"
+msgstr "JSON 메타데이터를 곁들여 디버깅 메시지 표시"
+
+#: tokens/ssh/cryptsetup-ssh.c:268
+msgid "Failed to open and import private key:\n"
+msgstr "개인키 가져오기 및 열기 실패:\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:272
+msgid "Failed to import private key (password protected?).\n"
+msgstr "개인 키 가져오기 실패 (암호로 보호했습니까?).\n"
+
+#. TRANSLATORS: SSH credentials prompt, e.g. "user@server's password: "
+#: tokens/ssh/cryptsetup-ssh.c:274
+#, c-format
+msgid "%s@%s's password: "
+msgstr "%s@%s 암호: "
+
+#: tokens/ssh/cryptsetup-ssh.c:363
+#, c-format
+msgid "Failed to parse arguments.\n"
+msgstr "인자 해석 실패.\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:374
+#, c-format
+msgid "An action must be specified\n"
+msgstr "동작을 지정해야 합니다\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:380
+#, c-format
+msgid "Device must be specified for '%s' action.\n"
+msgstr "'%s' 동작에 장치를 지정해야 합니다.\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:385
+#, c-format
+msgid "SSH server must be specified for '%s' action.\n"
+msgstr "'%s' 동작에 SSH 서버를 지정해야 합니다.\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:390
+#, c-format
+msgid "SSH user must be specified for '%s' action.\n"
+msgstr "'%s' 동작에 SSH 사용자를 지정해야 합니다.\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:395
+#, c-format
+msgid "SSH path must be specified for '%s' action.\n"
+msgstr "'%s' 동작에 SSH 경로를 지정해야 합니다.\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:400
+#, c-format
+msgid "SSH key path must be specified for '%s' action.\n"
+msgstr "'%s' 동작에 SSH 키 경로를 지정해야 합니다.\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:407
+#, c-format
+msgid "Failed open %s using provided credentials.\n"
+msgstr "지정 인증 정보로 %s 열기 실패.\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:424
+#, c-format
+msgid "Only 'add' action is currently supported by this plugin.\n"
+msgstr "이 플러그인에서는 현재 'add' 동작만 지원합니다.\n"
+
+#: tokens/ssh/ssh-utils.c:33
+msgid "Cannot create sftp session: "
+msgstr "sftp 세션을 만들 수 없음: "
+
+#: tokens/ssh/ssh-utils.c:40
+msgid "Cannot init sftp session: "
+msgstr "sftp 세션을 초기화할 수 없음: "
+
+#: tokens/ssh/ssh-utils.c:46
+msgid "Cannot open sftp session: "
+msgstr "sftp 세션을 열 수 없음: "
+
+#: tokens/ssh/ssh-utils.c:53
+msgid "Cannot stat sftp file: "
+msgstr "sftp 파일 상태를 볼 수 없음: "
+
+#: tokens/ssh/ssh-utils.c:61
+msgid "Not enough memory.\n"
+msgstr "메모리가 부족합니다.\n"
+
+#: tokens/ssh/ssh-utils.c:68
+msgid "Cannot read remote key: "
+msgstr "원격 키를 읽을 수 없음: "
+
+#: tokens/ssh/ssh-utils.c:109
+msgid "Connection failed: "
+msgstr "연결 실패: "
+
+#: tokens/ssh/ssh-utils.c:119
+msgid "Server not known: "
+msgstr "알 수 없는 서버: "
+
+#: tokens/ssh/ssh-utils.c:147
+msgid "Public key auth method not allowed on host.\n"
+msgstr "이 호스트에서는 공개 키 인증 방식을 허용하지 않습니다.\n"
+
+#: tokens/ssh/ssh-utils.c:158
+msgid "Public key authentication error: "
+msgstr "공개 키 인증 오류: "

From 5723601af5e5c14ccdf3cda0b13756e3ea1b511b Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 4 Jul 2026 18:15:55 +0200
Subject: [PATCH 170/244] po: add ko.po (from translationproject.org)

---
 po/LINGUAS | 1 +
 1 file changed, 1 insertion(+)

diff --git a/po/LINGUAS b/po/LINGUAS
index 541c4ce9b..519bd42de 100644
--- a/po/LINGUAS
+++ b/po/LINGUAS
@@ -8,6 +8,7 @@ id
 it
 ja
 ka
+ko
 nl
 pl
 pt_BR

From 775ceb14a679d8894695d34a09fe72c1013bf9c0 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 3 Jul 2026 11:23:01 +0200
Subject: [PATCH 171/244] Fix --tries option use.

The argument is uint32, so it should be processes as such
with the proper limits.

Also fix assertion fail with 0 value.
---
 src/cryptsetup.c       | 23 +++++++++++++++--------
 src/utils_luks.c       |  4 ++--
 src/utils_luks.h       |  4 ++--
 src/utils_reencrypt.c  | 13 ++++++++-----
 tests/compat-args-test |  4 ++++
 5 files changed, 31 insertions(+), 17 deletions(-)

diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index ba2bb7981..94d6dce9d 100644
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -358,7 +358,8 @@ static int action_open_loopaes(void)
 
 static int tcrypt_load(struct crypt_device *cd, struct crypt_params_tcrypt *params)
 {
-	int r, tries, eperm = 0;
+	uint32_t tries;
+	int r, eperm = 0;
 
 	tries = set_tries_tty(false);
 	do {
@@ -475,8 +476,8 @@ static int action_open_bitlk(void)
 {
 	struct crypt_device *cd = NULL;
 	const char *activated_name;
-	uint32_t activate_flags = 0;
-	int r, tries, keysize;
+	uint32_t tries, activate_flags = 0;
+	int r, keysize;
 	char *password = NULL;
 	char *key = NULL;
 	size_t passwordLen;
@@ -769,8 +770,8 @@ static int action_open_fvault2(void)
 {
 	struct crypt_device *cd = NULL;
 	const char *activated_name;
-	uint32_t activate_flags = 0;
-	int r, tries, keysize;
+	uint32_t tries, activate_flags = 0;
+	int r, keysize;
 	char *password = NULL;
 	char *key = NULL;
 	size_t passwordLen;
@@ -1771,8 +1772,8 @@ static int action_open_luks(void)
 	struct crypt_active_device cad;
 	struct crypt_device *cd = NULL;
 	const char *data_device, *header_device, *activated_name;
-	uint32_t activate_flags = 0;
-	int r, tries, keysize = 0;
+	uint32_t tries, activate_flags = 0;
+	int r, keysize = 0;
 	struct stat st;
 	struct crypt_keyslot_context *kc1 = NULL, *kc2 = NULL;
 
@@ -2698,7 +2699,8 @@ static int action_luksResume(void)
 {
 	struct crypt_device *cd = NULL;
 	char *vk_description_activation = NULL;
-	int r, tries;
+	uint32_t tries;
+	int r;
 	struct crypt_active_device cad;
 	const char *req_type = luksType(device_type);
 	struct crypt_keyslot_context *kc = NULL;
@@ -3789,6 +3791,11 @@ static void basic_options_cb(poptContext popt_context,
 			_("Option --priority can be only ignore/normal/prefer."),
 			poptGetInvocationName(popt_context));
 		break;
+	case OPT_TRIES_ID:
+		if (ARG_UINT32(OPT_TRIES_ID) == 0)
+			usage(popt_context, EXIT_FAILURE, _("Invalid maximal tries specification."),
+			      poptGetInvocationName(popt_context));
+		break;
 	}
 }
 
diff --git a/src/utils_luks.c b/src/utils_luks.c
index 64474b3de..2d8432942 100644
--- a/src/utils_luks.c
+++ b/src/utils_luks.c
@@ -131,7 +131,7 @@ int set_pbkdf_params(struct crypt_device *cd, const char *dev_type)
 	return crypt_set_pbkdf_type(cd, &pbkdf);
 }
 
-int set_tries_tty(bool keyring)
+uint32_t set_tries_tty(bool keyring)
 {
 	if (keyring && ARG_SET(OPT_KEY_DESCRIPTION_ID))
 		return 1;
@@ -308,7 +308,7 @@ int luks_try_token_unlock(struct crypt_device *cd,
 			  const char *activated_name,
 			  const char *token_type,
 			  uint32_t activate_flags,
-			  int tries,
+			  uint32_t tries,
 			  bool activation,
 			  bool retry_with_pin,
 			  struct crypt_keyslot_context **r_kc)
diff --git a/src/utils_luks.h b/src/utils_luks.h
index 3ea9a0229..0eb7fb801 100644
--- a/src/utils_luks.h
+++ b/src/utils_luks.h
@@ -27,7 +27,7 @@ void set_activation_flags(uint32_t *flags);
 
 int set_pbkdf_params(struct crypt_device *cd, const char *dev_type);
 
-int set_tries_tty(bool keyring);
+uint32_t set_tries_tty(bool keyring);
 
 int get_adjusted_key_size(const char *cipher, const char *cipher_mode, uint32_t keysize_bits,
 			  uint32_t default_size_bits, int integrity_keysize);
@@ -51,7 +51,7 @@ int luks_try_token_unlock(struct crypt_device *cd,
 			  const char *activated_name,
 			  const char *token_type,
 			  uint32_t activate_flags,
-			  int tries,
+			  uint32_t tries,
 			  bool activation,
 			  bool retry_with_pin,
 			  struct crypt_keyslot_context **r_kc);
diff --git a/src/utils_reencrypt.c b/src/utils_reencrypt.c
index 910cb94d7..d17acf7d4 100644
--- a/src/utils_reencrypt.c
+++ b/src/utils_reencrypt.c
@@ -257,7 +257,8 @@ static int reencrypt_multi_key_unlock(struct crypt_device *cd,
 				       struct crypt_keyslot_context **r_kc1,
 				       struct crypt_keyslot_context **r_kc2)
 {
-	int r, tries, keysize_bytes, new_keysize_bytes;
+	uint32_t tries;
+	int r, keysize_bytes, new_keysize_bytes;
 	struct crypt_keyslot_context *kc1 = NULL, *kc2 = NULL;
 
 	assert(cd);
@@ -350,7 +351,8 @@ static int reencrypt_single_key_unlock(struct crypt_device *cd,
 				       const struct crypt_params_reencrypt *params,
 				       struct crypt_keyslot_context **r_kc)
 {
-	int r, tries, keysize = 0;
+	uint32_t tries;
+	int r, keysize = 0;
 	struct crypt_keyslot_context *kc = NULL, *dummy = NULL;
 
 	assert(params);
@@ -1315,7 +1317,8 @@ static int reencrypt_unlock_keyslot(struct keyslot_contexts *kcs,
 			   int slot_to_check)
 {
 	struct crypt_keyslot_context *kc;
-	int retry_count, r = -EINVAL;
+	uint32_t tries;
+	int  r = -EINVAL;
 
 	assert(cd);
 	assert(kcs);
@@ -1332,7 +1335,7 @@ static int reencrypt_unlock_keyslot(struct keyslot_contexts *kcs,
 		return slot_to_check;
 	}
 
-	retry_count = set_tries_tty(false);
+	tries = set_tries_tty(false);
 	do {
 		r = luks_init_keyslot_context(cd, msg, verify_passphrase(0), false, &kc);
 		if (r < 0)
@@ -1349,7 +1352,7 @@ static int reencrypt_unlock_keyslot(struct keyslot_contexts *kcs,
 		crypt_keyslot_context_free(kc);
 		tools_passphrase_msg(r);
 		check_signal(&r);
-	} while ((r == -EPERM || r == -ERANGE) && (--retry_count > 0));
+	} while ((r == -EPERM || r == -ERANGE) && (--tries > 0));
 
 	return r;
 }
diff --git a/tests/compat-args-test b/tests/compat-args-test
index f29afac6b..793ecf6d6 100755
--- a/tests/compat-args-test
+++ b/tests/compat-args-test
@@ -304,5 +304,9 @@ exp_pass luksFormat DEV NAME --keyslot-cipher ks --keyslot-key-size 32
 # exp_fail open DEV NAME --keyslot-cipher ks --keyslot-key-size 32
 # exp_fail luksFormat --type luks1 DEV NAME --keyslot-cipher ks --keyslot-key-size 32
 
+exp_pass open DEV NAME --test-passphrase --tries 1
+exp_fail open DEV NAME --test-passphrase --tries 0
+exp_fail open DEV NAME --test-passphrase --tries 4294967296
+
 cleanup
 exit 0

From 60992fa84844eb4179d710ccc14ced6d6e318396 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 3 Jul 2026 18:21:45 +0200
Subject: [PATCH 172/244] integritysetup: support --integrity-legacy-hmac in
 open

The fix_hmac option was incorrectly set always, even if device
was formatted with legacy flags. Support --integrity-legacy-hmac
for open to allow legacy flags overwrite (which is insecure).

Also fix crypt_set_compatibility() to be called only once,
as it overwrites flags.
---
 src/integritysetup.c | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/src/integritysetup.c b/src/integritysetup.c
index cebf92d95..f05c39397 100644
--- a/src/integritysetup.c
+++ b/src/integritysetup.c
@@ -120,6 +120,7 @@ static int action_format(void)
 	char *integrity_key = NULL, *msg = NULL;
 	int r;
 	size_t signatures;
+	uint32_t flags = 0;
 
 	r = crypt_parse_hash_integrity_mode(ARG_STR(OPT_INTEGRITY_ID), integrity);
 	if (r < 0) {
@@ -195,10 +196,11 @@ static int action_format(void)
 	}
 
 	if (ARG_SET(OPT_INTEGRITY_LEGACY_PADDING_ID))
-		crypt_set_compatibility(cd, CRYPT_COMPAT_LEGACY_INTEGRITY_PADDING);
-
+		flags |= CRYPT_COMPAT_LEGACY_INTEGRITY_PADDING;
 	if (ARG_SET(OPT_INTEGRITY_LEGACY_HMAC_ID))
-		crypt_set_compatibility(cd, CRYPT_COMPAT_LEGACY_INTEGRITY_HMAC);
+		flags |= CRYPT_COMPAT_LEGACY_INTEGRITY_HMAC;
+	if (flags)
+		crypt_set_compatibility(cd, flags);
 
 	if (ARG_SET(OPT_INTEGRITY_INLINE_ID))
 		r = crypt_format_inline(cd, CRYPT_INTEGRITY, NULL, NULL, NULL,
@@ -318,7 +320,7 @@ static int action_open(void)
 		.journal_commit_time = ARG_SET(OPT_INTEGRITY_BITMAP_MODE_ID) ? ARG_UINT32(OPT_BITMAP_FLUSH_TIME_ID) : ARG_UINT32(OPT_JOURNAL_COMMIT_TIME_ID),
 		.buffer_sectors = ARG_UINT32(OPT_BUFFER_SECTORS_ID),
 	};
-	uint32_t activate_flags = 0;
+	uint32_t activate_flags = 0, flags = 0;
 	char integrity[MAX_CIPHER_LEN], journal_integrity[MAX_CIPHER_LEN], journal_crypt[MAX_CIPHER_LEN];
 	char *integrity_key = NULL;
 	int r;
@@ -381,8 +383,12 @@ static int action_open(void)
 		goto out;
 	}
 
+	if (ARG_SET(OPT_INTEGRITY_LEGACY_HMAC_ID))
+		flags |= CRYPT_COMPAT_LEGACY_INTEGRITY_HMAC;
 	if (ARG_SET(OPT_INTEGRITY_LEGACY_RECALC_ID))
-		crypt_set_compatibility(cd, CRYPT_COMPAT_LEGACY_INTEGRITY_RECALC);
+		flags |= CRYPT_COMPAT_LEGACY_INTEGRITY_RECALC;
+	if (flags)
+		crypt_set_compatibility(cd, flags);
 
 	r = crypt_activate_by_volume_key(cd, action_argv[1], integrity_key,
 					 ARG_UINT32(OPT_INTEGRITY_KEY_SIZE_ID), activate_flags);

From ee93193651b8e6a76976be3ef72a85521a94d638 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Tue, 7 Jul 2026 16:15:38 +0200
Subject: [PATCH 173/244] tests: Add some integrity legacy flags checks

And prepare test for dm-integrity hardening where
--integrity-legacy-hmac must be used for open.
---
 tests/integrity-compat-test | 24 ++++++++++++++++++++----
 1 file changed, 20 insertions(+), 4 deletions(-)

diff --git a/tests/integrity-compat-test b/tests/integrity-compat-test
index 76ed40d51..1e331b043 100755
--- a/tests/integrity-compat-test
+++ b/tests/integrity-compat-test
@@ -148,6 +148,11 @@ kernel_param_check() # number value
 	fi
 }
 
+kernel_param_grep()
+{
+	dmsetup table $DEV_NAME | grep -q "$1"
+}
+
 valgrind_setup()
 {
 	command -v valgrind >/dev/null || fail "Cannot find valgrind."
@@ -656,25 +661,36 @@ if [ -n "$DM_INTEGRITY_HMAC_FIX" ] ; then
 	# only data HMAC
 	ARGS="--integrity hmac-sha256 --integrity-key-file $KEY_FILE --integrity-key-size 32"
 	$INTSETUP format -q $DEV --integrity-legacy-hmac --no-wipe --tag-size 32 $ARGS || fail "Cannot format device."
-	$INTSETUP open $DEV $DEV_NAME --integrity-recalculate $ARGS >/dev/null 2>&1 && fail "Cannot activate device."
-	$INTSETUP open $DEV $DEV_NAME --integrity-legacy-recalculate $ARGS || fail "Cannot activate device."
+	$INTSETUP open $DEV $DEV_NAME --integrity-legacy-hmac --integrity-recalculate $ARGS >/dev/null 2>&1 && fail "Cannot activate device."
+	$INTSETUP open $DEV $DEV_NAME --integrity-legacy-hmac --integrity-legacy-recalculate $ARGS || fail "Cannot activate device."
+	kernel_param_grep "fix_hmac" && fail "fix_hmac should not be set"
+	kernel_param_grep "fix_padding" || fail "Missing fix_padding"
+	kernel_param_grep "legacy_recalculate" || fail "Missing legacy_recalculate"
 	$INTSETUP close $DEV_NAME || fail "Cannot deactivate device."
 	# New version - must fail (no journal HMAC)
 	$INTSETUP format -q $DEV --no-wipe --tag-size 32 $ARGS || fail "Cannot format device."
 	$INTSETUP open $DEV $DEV_NAME --integrity-recalculate $ARGS  >/dev/null 2>&1 && fail "Cannot activate device."
 	$INTSETUP open $DEV $DEV_NAME --integrity-legacy-recalculate $ARGS || fail "Cannot activate device."
+	kernel_param_grep "fix_padding" || fail "Missing fix_padding"
+	kernel_param_grep "fix_hmac" || fail "Missing fix_hmac"
+	kernel_param_grep "legacy_recalculate" || fail "Missing legacy_recalculate"
 	$INTSETUP close $DEV_NAME || fail "Cannot deactivate device."
 
 	# data and journal HMAC
 	ARGS="$ARGS --journal-integrity hmac-sha256 --journal-integrity-key-file $KEY_FILE2 --journal-integrity-key-size 32"
 	$INTSETUP format -q $DEV --integrity-legacy-hmac --no-wipe --tag-size 32 $ARGS || fail "Cannot format device."
-	$INTSETUP open $DEV $DEV_NAME --integrity-recalculate $ARGS >/dev/null 2>&1 && fail "Cannot activate device."
-	$INTSETUP open $DEV $DEV_NAME --integrity-legacy-recalculate $ARGS || fail "Cannot activate device."
+	$INTSETUP open $DEV $DEV_NAME --integrity-legacy-hmac --integrity-recalculate $ARGS >/dev/null 2>&1 && fail "Cannot activate device."
+	$INTSETUP open $DEV $DEV_NAME --integrity-legacy-hmac --integrity-legacy-recalculate $ARGS || fail "Cannot activate device."
+	kernel_param_grep "fix_hmac" && fail "fix_hmac should not be set"
+	kernel_param_grep "fix_padding" || fail "Missing fix_padding"
+	kernel_param_grep "legacy_recalculate" || fail "Missing legacy_recalculate"
 	$INTSETUP close $DEV_NAME || fail "Cannot deactivate device."
 	# New fixed version
 	$INTSETUP format -q $DEV --no-wipe --tag-size 32 $ARGS || fail "Cannot format device."
 	$INTSETUP dump $DEV | grep "flags" | grep -q "fix_hmac" || fail "Flag for HMAC not set."
 	$INTSETUP open $DEV $DEV_NAME --integrity-recalculate $ARGS || fail "Cannot activate device."
+	kernel_param_grep "fix_padding" || fail "Missing fix_padding"
+	kernel_param_grep "fix_hmac" || fail "Missing fix_hmac"
 	$INTSETUP close $DEV_NAME || fail "Cannot deactivate device."
 	echo "[OK]"
 else

From 31cc14756d4cb57a3a1b420753790a45dde66d62 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 4 Jul 2026 22:49:53 +0200
Subject: [PATCH 174/244] po: Upgrade gettext and do not regenerate po files
 automatically

As po files are maintained externally, DIST_DEPENDS_ON_UPDATE_PO = no
should be set. It also requires gettext version bump.

To regenerate pot file (before sending it to translations),
this command must be run:
  make -C po cryptsetup.pot-update
---
 configure.ac |  2 +-
 po/Makevars  | 40 ++++++++++++++++++++++++++++++++++++----
 2 files changed, 37 insertions(+), 5 deletions(-)

diff --git a/configure.ac b/configure.ac
index f195b7874..79b3032ff 100644
--- a/configure.ac
+++ b/configure.ac
@@ -171,7 +171,7 @@ fi
 dnl ==========================================================================
 
 AM_GNU_GETTEXT([external],[need-ngettext])
-AM_GNU_GETTEXT_VERSION([0.18.3])
+AM_GNU_GETTEXT_REQUIRE_VERSION([0.19.8])
 
 dnl ==========================================================================
 
diff --git a/po/Makevars b/po/Makevars
index 93d6bbc2e..8075084bc 100644
--- a/po/Makevars
+++ b/po/Makevars
@@ -1,4 +1,8 @@
 # Makefile variables for PO directory in any package using GNU gettext.
+#
+# Copyright (C) 2003-2025 Free Software Foundation, Inc.
+# This file is free software; the Free Software Foundation gives
+# unlimited permission to use, copy, distribute, and modify it.
 
 # Usually the message domain is the same as the package name.
 DOMAIN = $(PACKAGE)
@@ -10,12 +14,9 @@ top_builddir = ..
 # These options get passed to xgettext.
 XGETTEXT_OPTIONS = --keyword=_ --keyword=N_
 
-# This option gets passed to msgmerge.
-MSGMERGE_OPTIONS = --no-wrap
-
 # This is the copyright holder that gets inserted into the header of the
 # $(DOMAIN).pot file.  Set this to the copyright holder of the surrounding
-# package.  (Note that the msgstr strings, extracted from the package's
+# package.  (Note that the msgid strings, extracted from the package's
 # sources, belong to the copyright holder of the package.)  Translators are
 # expected to transfer the copyright for their translations to this person
 # or entity, or to disclaim their copyright.  The empty string stands for
@@ -23,6 +24,13 @@ MSGMERGE_OPTIONS = --no-wrap
 # their copyright.
 COPYRIGHT_HOLDER =
 
+# This tells whether or not to prepend "GNU " prefix to the package
+# name that gets inserted into the header of the $(DOMAIN).pot file.
+# Possible values are "yes", "no", or empty.  If it is empty, try to
+# detect it automatically by scanning the files in $(top_srcdir) for
+# "GNU packagename" string.
+PACKAGE_GNU = no
+
 # This is the email address or URL to which the translators shall report
 # bugs in the untranslated strings:
 # - Strings which are not entire sentences, see the maintainer guidelines
@@ -42,3 +50,27 @@ MSGID_BUGS_ADDRESS = cryptsetup@lists.linux.dev
 # This is the list of locale categories, beyond LC_MESSAGES, for which the
 # message catalogs shall be used.  It is usually empty.
 EXTRA_LOCALE_CATEGORIES =
+
+# This tells whether the $(DOMAIN).pot file contains messages with an 'msgctxt'
+# context.  Possible values are "yes" and "no".  Set this to yes if the
+# package uses functions taking also a message context, like pgettext(), or
+# if in $(XGETTEXT_OPTIONS) you define keywords with a context argument.
+USE_MSGCTXT = no
+
+# These options get passed to msgmerge.
+# Useful options are in particular:
+#   --previous            to keep previous msgids of translated messages,
+#   --quiet               to reduce the verbosity.
+MSGMERGE_OPTIONS = --no-wrap --quiet
+
+# These options get passed to msginit.
+# If you want to disable line wrapping when writing PO files, add
+# --no-wrap to MSGMERGE_OPTIONS, XGETTEXT_OPTIONS, and
+# MSGINIT_OPTIONS.
+MSGINIT_OPTIONS =
+
+# This tells whether or not to forcibly update $(DOMAIN).pot and
+# regenerate PO files on "make dist".  Possible values are "yes" and
+# "no".  Set this to no if the POT file and PO files are maintained
+# externally.
+DIST_DEPENDS_ON_UPDATE_PO = no

From b9edba9125858e8cd0835018c093c52d3c10f91f Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 4 Jul 2026 22:53:49 +0200
Subject: [PATCH 175/244] Update cryptsetup.pot.

---
 po/cryptsetup.pot | 1425 +++++++++++++++++++++++----------------------
 1 file changed, 736 insertions(+), 689 deletions(-)

diff --git a/po/cryptsetup.pot b/po/cryptsetup.pot
index cbec4093c..2369bb652 100644
--- a/po/cryptsetup.pot
+++ b/po/cryptsetup.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.1\n"
+"Project-Id-Version: cryptsetup 2.9.0-git\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-08-19 10:38+0200\n"
+"POT-Creation-Date: 2026-06-29 20:20+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -75,7 +75,7 @@ msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr ""
 
 #: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2777
+#: lib/luks2/luks2_json_metadata.c:2812
 msgid "Discard/TRIM is not supported."
 msgstr ""
 
@@ -87,7 +87,7 @@ msgstr ""
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr ""
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2906
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr ""
@@ -120,687 +120,688 @@ msgstr ""
 msgid "Error reading from RNG."
 msgstr ""
 
-#: lib/setup.c:248
+#: lib/setup.c:253
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr ""
 
-#: lib/setup.c:250
+#: lib/setup.c:255
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr ""
 
-#: lib/setup.c:266
+#: lib/setup.c:273
 msgid "Cannot initialize crypto RNG backend."
 msgstr ""
 
-#: lib/setup.c:272
+#: lib/setup.c:279
 msgid "Cannot initialize crypto backend."
 msgstr ""
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:314 lib/setup.c:2818 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr ""
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:317 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr ""
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:398 lib/setup.c:435
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr ""
 
-#: lib/setup.c:395 lib/setup.c:4145
+#: lib/setup.c:404 lib/setup.c:4226
 msgid "This operation is supported only for LUKS device."
 msgstr ""
 
-#: lib/setup.c:432
+#: lib/setup.c:441
 msgid "This operation is supported only for LUKS2 device."
 msgstr ""
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3093
+#: lib/setup.c:498 lib/luks2/luks2_reencrypt.c:3111
 msgid "All key slots full."
 msgstr ""
 
-#: lib/setup.c:500
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr ""
 
-#: lib/setup.c:506
+#: lib/setup.c:515
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr ""
 
-#: lib/setup.c:531 lib/setup.c:3860
+#: lib/setup.c:540 lib/setup.c:3927
 msgid "Device size is not aligned to device logical block size."
 msgstr ""
 
-#: lib/setup.c:628
+#: lib/setup.c:635
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr ""
 
-#: lib/setup.c:669 lib/setup.c:3745 lib/setup.c:5212
-#: lib/luks2/luks2_reencrypt.c:3937 lib/luks2/luks2_reencrypt.c:4425
+#: lib/setup.c:676 lib/setup.c:3812 lib/setup.c:5321
+#: lib/luks2/luks2_reencrypt.c:3958 lib/luks2/luks2_reencrypt.c:4552
 msgid "This operation is not supported for this device type."
 msgstr ""
 
-#: lib/setup.c:674
+#: lib/setup.c:681
 msgid "Illegal operation with reencryption in-progress."
 msgstr ""
 
-#: lib/setup.c:806
+#: lib/setup.c:813
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr ""
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1361 src/cryptsetup.c:1773
-#: src/cryptsetup.c:1957 src/cryptsetup.c:2012 src/cryptsetup.c:2210
-#: src/cryptsetup.c:2355 src/cryptsetup.c:2633 src/cryptsetup.c:2946
-#: src/cryptsetup.c:3014 src/utils_reencrypt.c:2280
-#: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
+#: lib/setup.c:900 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1794
+#: src/cryptsetup.c:1978 src/cryptsetup.c:2033 src/cryptsetup.c:2231
+#: src/cryptsetup.c:2376 src/cryptsetup.c:2654 src/cryptsetup.c:2967
+#: src/cryptsetup.c:3035 src/utils_reencrypt.c:2281
+#: src/utils_reencrypt_luks1.c:1140 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr ""
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:903 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr ""
 
-#: lib/setup.c:1270
+#: lib/setup.c:1277
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr ""
 
-#: lib/setup.c:1515 lib/setup.c:3492 lib/setup.c:3584 lib/setup.c:3596
-#: lib/setup.c:3768 lib/setup.c:5787
+#: lib/setup.c:1531 lib/setup.c:3559 lib/setup.c:3651 lib/setup.c:3663
+#: lib/setup.c:3835 lib/setup.c:5899
 #, c-format
 msgid "Device %s is not active."
 msgstr ""
 
-#: lib/setup.c:1532
+#: lib/setup.c:1548
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr ""
 
-#: lib/setup.c:1614
+#: lib/setup.c:1642
 msgid "Invalid plain crypt parameters."
 msgstr ""
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1647 lib/setup.c:2713
 msgid "Invalid key size."
 msgstr ""
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1652 lib/setup.c:2718 lib/setup.c:2931
 msgid "UUID is not supported for this crypt type."
 msgstr ""
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1657 lib/setup.c:2723
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr ""
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3026
-#: src/cryptsetup.c:1485 src/cryptsetup.c:3753
+#: lib/setup.c:1667 lib/setup.c:1927 lib/luks2/luks2_reencrypt.c:3044
+#: src/cryptsetup.c:1507 src/cryptsetup.c:3781
 msgid "Unsupported encryption sector size."
 msgstr ""
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3854
+#: lib/setup.c:1680 lib/setup.c:1956 lib/setup.c:3921
 msgid "Device size is not aligned to requested sector size."
 msgstr ""
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1739 lib/setup.c:1991 lib/setup.c:2369
 msgid "Can't format LUKS without device."
 msgstr ""
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1744 lib/setup.c:1996
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr ""
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1751 lib/setup.c:2003 lib/setup.c:2375
 msgid "Requested data alignment is not compatible with data offset."
 msgstr ""
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1791 lib/setup.c:2021
 msgid ""
 "WARNING: DAX device can corrupt data as it does not guarantee atomic sector "
 "updates.\n"
 msgstr ""
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1829 lib/setup.c:2128 lib/setup.c:2149 lib/setup.c:2553
+#: lib/setup.c:2608 lib/setup.c:2948
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr ""
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1842 lib/setup.c:2201
 #, c-format
 msgid ""
 "Device %s is too small for activation, there is no remaining space for "
 "data.\n"
 msgstr ""
 
-#: lib/setup.c:1843
+#: lib/setup.c:1883
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr ""
 
-#: lib/setup.c:1847
+#: lib/setup.c:1887
 msgid "Integrity key size is too small."
 msgstr ""
 
-#: lib/setup.c:1856
+#: lib/setup.c:1896
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr ""
 
-#: lib/setup.c:1897
+#: lib/setup.c:1937
 msgid ""
 "WARNING: The device activation will fail, dm-crypt is missing support for "
 "requested encryption sector size.\n"
 msgstr ""
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
-#: lib/luks1/keyencryption.c:244 lib/luks2/luks2_reencrypt.c:3065
-#: lib/luks2/luks2_reencrypt.c:4485
+#: lib/setup.c:2131 lib/setup.c:2499 lib/setup.c:2556 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3083
+#: lib/luks2/luks2_reencrypt.c:4612
 #, c-format
 msgid "Device %s is too small."
 msgstr ""
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2142 lib/setup.c:2181 lib/setup.c:2601 lib/setup.c:2659
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr ""
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2145 lib/setup.c:2184 lib/setup.c:2604 lib/setup.c:2662
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr ""
 
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2169 lib/setup.c:2631 lib/setup.c:3021
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr ""
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2188 lib/setup.c:2670
 #, c-format
 msgid "Cannot format device %s."
 msgstr ""
 
-#: lib/setup.c:2191
+#: lib/setup.c:2231
 msgid "Cannot get OPAL alignment parameters."
 msgstr ""
 
-#: lib/setup.c:2203
+#: lib/setup.c:2243
 msgid "Bogus OPAL logical block size."
 msgstr ""
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:303
+#: lib/setup.c:2248 lib/luks2/hw_opal/hw_opal.c:402
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr ""
 
-#: lib/setup.c:2214
+#: lib/setup.c:2254
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr ""
 
-#: lib/setup.c:2221
+#: lib/setup.c:2261
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr ""
 
-#: lib/setup.c:2241
+#: lib/setup.c:2281
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr ""
 
-#: lib/setup.c:2254
+#: lib/setup.c:2294
 msgid ""
 "Requested data alignment does not satisfy locking range alignment "
 "requirements."
 msgstr ""
 
-#: lib/setup.c:2468
+#: lib/setup.c:2509
 #, c-format
 msgid ""
 "Compensating device size by %<PRIu64> sectors to align it with OPAL "
 "alignment granularity."
 msgstr ""
 
-#: lib/setup.c:2528 lib/setup.c:4228 lib/setup.c:4417 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2720 lib/luks2/luks2_json_metadata.c:2988
+#: lib/setup.c:2564 lib/setup.c:4309 lib/setup.c:4515 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2755 lib/luks2/luks2_json_metadata.c:3030
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr ""
 
-#: lib/setup.c:2538
+#: lib/setup.c:2576
 msgid "Incorrect OPAL Admin key."
 msgstr ""
 
-#: lib/setup.c:2540
+#: lib/setup.c:2578
 msgid "Cannot setup OPAL segment."
 msgstr ""
 
-#: lib/setup.c:2622
+#: lib/setup.c:2666
 #, c-format
 msgid ""
 "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr ""
 
-#: lib/setup.c:2624
+#: lib/setup.c:2668
 msgid ""
 "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for "
 "recovery."
 msgstr ""
 
-#: lib/setup.c:2644
+#: lib/setup.c:2688
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr ""
 
-#: lib/setup.c:2664
+#: lib/setup.c:2708
 msgid "Can't format LOOPAES without device."
 msgstr ""
 
-#: lib/setup.c:2709
+#: lib/setup.c:2761
 msgid "Can't format VERITY without device."
 msgstr ""
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2772 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr ""
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2778 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr ""
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2783 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr ""
 
-#: lib/setup.c:2736
+#: lib/setup.c:2788
 msgid "Unsupported VERITY FEC offset."
 msgstr ""
 
-#: lib/setup.c:2760
+#: lib/setup.c:2812
 msgid "Data area overlaps with hash area."
 msgstr ""
 
-#: lib/setup.c:2785
+#: lib/setup.c:2837
 msgid "Hash area overlaps with FEC area."
 msgstr ""
 
-#: lib/setup.c:2792
+#: lib/setup.c:2844
 msgid "Data area overlaps with FEC area."
 msgstr ""
 
-#: lib/setup.c:2884
+#: lib/setup.c:2936
 msgid "Integrity key size mismatch."
 msgstr ""
 
-#: lib/setup.c:2935
+#: lib/setup.c:2987
 #, c-format
 msgid ""
 "WARNING: Requested tag size %d bytes differs from %s size output (%d "
 "bytes).\n"
 msgstr ""
 
-#: lib/setup.c:3037 lib/setup.c:3135
+#: lib/setup.c:3100 lib/setup.c:3202
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr ""
 
-#: lib/setup.c:3049
+#: lib/setup.c:3116
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr ""
 
-#: lib/setup.c:3055
+#: lib/setup.c:3122
 #, c-format
 msgid ""
 "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by "
 "device %s."
 msgstr ""
 
-#: lib/setup.c:3070
+#: lib/setup.c:3137
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr ""
 
-#: lib/setup.c:3500 lib/setup.c:3589 lib/setup.c:3602
+#: lib/setup.c:3567 lib/setup.c:3656 lib/setup.c:3669
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr ""
 
-#: lib/setup.c:3506 lib/setup.c:3609 lib/luks2/luks2_reencrypt.c:2920
-#: lib/luks2/luks2_reencrypt.c:3189 lib/luks2/luks2_reencrypt.c:3583
+#: lib/setup.c:3573 lib/setup.c:3676 lib/luks2/luks2_reencrypt.c:2938
+#: lib/luks2/luks2_reencrypt.c:3207 lib/luks2/luks2_reencrypt.c:3604
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr ""
 
-#: lib/setup.c:3632
+#: lib/setup.c:3699
 msgid "Crypt devices mismatch."
 msgstr ""
 
-#: lib/setup.c:3664 lib/setup.c:3669 lib/luks2/luks2_reencrypt.c:2404
-#: lib/luks2/luks2_reencrypt.c:2936 lib/luks2/luks2_reencrypt.c:4224
+#: lib/setup.c:3731 lib/setup.c:3736 lib/luks2/luks2_reencrypt.c:2424
+#: lib/luks2/luks2_reencrypt.c:2954 lib/luks2/luks2_reencrypt.c:4260
+#: lib/luks2/luks2_reencrypt.c:4277
 #, c-format
 msgid "Failed to reload device %s."
 msgstr ""
 
-#: lib/setup.c:3675 lib/setup.c:3681 lib/luks2/luks2_reencrypt.c:2375
-#: lib/luks2/luks2_reencrypt.c:2382 lib/luks2/luks2_reencrypt.c:2950
+#: lib/setup.c:3742 lib/setup.c:3748 lib/luks2/luks2_reencrypt.c:2392
+#: lib/luks2/luks2_reencrypt.c:2399 lib/luks2/luks2_reencrypt.c:2968
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr ""
 
-#: lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2389
-#: lib/luks2/luks2_reencrypt.c:2971 lib/luks2/luks2_reencrypt.c:4137
-#: lib/luks2/luks2_reencrypt.c:4228
+#: lib/setup.c:3754 lib/luks2/luks2_reencrypt.c:2406
+#: lib/luks2/luks2_reencrypt.c:2989 lib/luks2/luks2_reencrypt.c:4168
+#: lib/luks2/luks2_reencrypt.c:4297 lib/luks2/luks2_reencrypt.c:4305
 #, c-format
 msgid "Failed to resume device %s."
 msgstr ""
 
-#: lib/setup.c:3702
+#: lib/setup.c:3769
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr ""
 
-#: lib/setup.c:3705 lib/setup.c:3707
+#: lib/setup.c:3772 lib/setup.c:3774
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr ""
 
-#: lib/setup.c:3750
+#: lib/setup.c:3817
 msgid "Can not resize LUKS2 device with static size."
 msgstr ""
 
-#: lib/setup.c:3755
+#: lib/setup.c:3822
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr ""
 
-#: lib/setup.c:3801
+#: lib/setup.c:3868
 msgid "Cannot resize loop device."
 msgstr ""
 
-#: lib/setup.c:3845
+#: lib/setup.c:3912
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr ""
 
-#: lib/setup.c:3911
+#: lib/setup.c:3978
 msgid "Resize failed, the kernel doesn't support it."
 msgstr ""
 
-#: lib/setup.c:3943
+#: lib/setup.c:4010
 msgid "Do you really want to change UUID of device?"
 msgstr ""
 
-#: lib/setup.c:4035
+#: lib/setup.c:4102
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr ""
 
-#: lib/setup.c:4128
+#: lib/setup.c:4209
 #, c-format
 msgid "Volume %s is not active."
 msgstr ""
 
-#: lib/setup.c:4183
+#: lib/setup.c:4264
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr ""
 
-#: lib/setup.c:4209
+#: lib/setup.c:4290
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr ""
 
-#: lib/setup.c:4211 lib/setup.c:4219
+#: lib/setup.c:4292 lib/setup.c:4300
 #, c-format
 msgid "Error during suspending device %s."
 msgstr ""
 
-#: lib/setup.c:4234
+#: lib/setup.c:4315
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr ""
 
-#: lib/setup.c:4265 lib/setup.c:4442
+#: lib/setup.c:4346 lib/setup.c:4540
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr ""
 
-#: lib/setup.c:4267 lib/setup.c:4432 lib/setup.c:4444
+#: lib/setup.c:4348 lib/setup.c:4530 lib/setup.c:4542
 #, c-format
 msgid "Error during resuming device %s."
 msgstr ""
 
-#: lib/setup.c:4286
+#: lib/setup.c:4384
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr ""
 
-#: lib/setup.c:4408 lib/setup.c:5574
+#: lib/setup.c:4506 lib/setup.c:5686
 msgid "Failed to link volume key in user defined keyring."
 msgstr ""
 
-#: lib/setup.c:4506 src/cryptsetup.c:2714
+#: lib/setup.c:4605 src/cryptsetup.c:2735
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr ""
 
-#: lib/setup.c:4607 lib/setup.c:7239 lib/setup.c:7261 lib/setup.c:7315
-#: src/cryptsetup.c:1849 src/cryptsetup.c:2253 src/cryptsetup.c:2271
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1965
+#: lib/setup.c:4716 lib/setup.c:7405 lib/setup.c:7427 src/cryptsetup.c:1870
+#: src/cryptsetup.c:2274 src/cryptsetup.c:2292 src/utils_reencrypt.c:305
+#: src/utils_reencrypt.c:1966
 msgid "Volume key does not match the volume."
 msgstr ""
 
-#: lib/setup.c:4761
+#: lib/setup.c:4870
 msgid "Failed to swap new key slot."
 msgstr ""
 
-#: lib/setup.c:4859
+#: lib/setup.c:4968
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr ""
 
-#: lib/setup.c:4865 src/cryptsetup.c:1970 src/cryptsetup.c:2430
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#: lib/setup.c:4974 src/cryptsetup.c:1991 src/cryptsetup.c:2451
+#: src/cryptsetup.c:3135 src/cryptsetup.c:3195
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr ""
 
-#: lib/setup.c:4884
+#: lib/setup.c:4993
 msgid "Device header overlaps with data area."
 msgstr ""
 
-#: lib/setup.c:5105
+#: lib/setup.c:5214
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr ""
 
-#: lib/setup.c:5107 lib/luks2/luks2_json_metadata.c:2884
-#: lib/luks2/luks2_reencrypt.c:3714
+#: lib/setup.c:5216 lib/luks2/luks2_json_metadata.c:2926
+#: lib/luks2/luks2_reencrypt.c:3735
 msgid "Failed to get reencryption lock."
 msgstr ""
 
-#: lib/setup.c:5129
+#: lib/setup.c:5238
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr ""
 
-#: lib/setup.c:5265
+#: lib/setup.c:5374
 #, c-format
 msgid "Device %s already exists."
 msgstr ""
 
-#: lib/setup.c:5272
+#: lib/setup.c:5381
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr ""
 
-#: lib/setup.c:5284
+#: lib/setup.c:5393
 msgid "Reencryption volume keys do not match the volume."
 msgstr ""
 
-#: lib/setup.c:5301
+#: lib/setup.c:5410
 msgid "Incorrect volume key specified for plain device."
 msgstr ""
 
-#: lib/setup.c:5327 lib/setup.c:5388
+#: lib/setup.c:5436 lib/setup.c:5497
 msgid "Device type is not properly initialized."
 msgstr ""
 
-#: lib/setup.c:5426
+#: lib/setup.c:5535
 msgid "Kernel keyring is not supported by the kernel."
 msgstr ""
 
-#: lib/setup.c:5430
+#: lib/setup.c:5539
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr ""
 
-#: lib/setup.c:5482
+#: lib/setup.c:5594
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr ""
 
-#: lib/setup.c:5695
+#: lib/setup.c:5807
 msgid "Incorrect root hash specified for verity device."
 msgstr ""
 
-#: lib/setup.c:5736 lib/setup.c:5761
+#: lib/setup.c:5848 lib/setup.c:5873
 msgid "OPAL does not support deferred deactivation."
 msgstr ""
 
-#: lib/setup.c:5751 lib/setup.c:5782 lib/luks2/luks2_json_metadata.c:2949
+#: lib/setup.c:5863 lib/setup.c:5894 lib/luks2/luks2_json_metadata.c:2991
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr ""
 
-#: lib/setup.c:5769
+#: lib/setup.c:5881
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr ""
 
-#: lib/setup.c:5791
+#: lib/setup.c:5903
 #, c-format
 msgid "Invalid device %s."
 msgstr ""
 
-#: lib/setup.c:5932
+#: lib/setup.c:6050
 msgid "Volume key buffer too small."
 msgstr ""
 
-#: lib/setup.c:5943
+#: lib/setup.c:6061
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr ""
 
-#: lib/setup.c:5952
+#: lib/setup.c:6070
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr ""
 
-#: lib/setup.c:5966
+#: lib/setup.c:6084
 msgid "Cannot retrieve volume key for plain device."
 msgstr ""
 
-#: lib/setup.c:5974
+#: lib/setup.c:6092
 msgid "Cannot retrieve root hash for verity device."
 msgstr ""
 
-#: lib/setup.c:5981
+#: lib/setup.c:6101
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr ""
 
-#: lib/setup.c:5986
+#: lib/setup.c:6106
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr ""
 
-#: lib/setup.c:5988
+#: lib/setup.c:6108
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr ""
 
-#: lib/setup.c:6173 lib/setup.c:6184
+#: lib/setup.c:6293 lib/setup.c:6304
 msgid "Dump operation is not supported for this device type."
 msgstr ""
 
-#: lib/setup.c:6564
+#: lib/setup.c:6684
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr ""
 
-#: lib/setup.c:6872
+#: lib/setup.c:7038
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr ""
 
-#: lib/setup.c:7180 lib/setup.c:7324
+#: lib/setup.c:7346 lib/setup.c:7501
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr ""
 
-#: lib/setup.c:7204
+#: lib/setup.c:7370
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr ""
 
-#: lib/setup.c:7210
+#: lib/setup.c:7376
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr ""
 
-#: lib/setup.c:7441
+#: lib/setup.c:7618
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr ""
 
-#: lib/setup.c:7514 lib/verity/verity.c:333
+#: lib/setup.c:7706 lib/setup.c:7721 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr ""
 
-#: lib/setup.c:7705
+#: lib/setup.c:7902
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr ""
 
-#: lib/setup.c:7770
+#: lib/setup.c:7967
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr ""
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:207 lib/tcrypt/tcrypt.c:492
 msgid "Failed to open key file."
 msgstr ""
 
-#: lib/utils.c:212
+#: lib/utils.c:215
 msgid "Cannot read keyfile from a terminal."
 msgstr ""
 
-#: lib/utils.c:228
+#: lib/utils.c:231
 msgid "Failed to stat key file."
 msgstr ""
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:239 lib/utils.c:260
 msgid "Cannot seek to requested keyfile offset."
 msgstr ""
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:254 lib/utils.c:269 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr ""
 
-#: lib/utils.c:286
+#: lib/utils.c:289
 msgid "Error reading passphrase."
 msgstr ""
 
-#: lib/utils.c:303
+#: lib/utils.c:306
 msgid "Nothing to read on input."
 msgstr ""
 
-#: lib/utils.c:310
+#: lib/utils.c:313
 msgid "Maximum keyfile size exceeded."
 msgstr ""
 
-#: lib/utils.c:315
+#: lib/utils.c:318
 msgid "Cannot read requested amount of data."
 msgstr ""
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:78 src/utils_reencrypt.c:2253
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr ""
@@ -815,42 +816,47 @@ msgstr ""
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr ""
 
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr ""
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr ""
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr ""
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr ""
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr ""
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr ""
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid ""
 "Attaching loopback device failed (loop device with autoclear flag is "
 "required)."
 msgstr ""
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr ""
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr ""
@@ -960,54 +966,54 @@ msgstr ""
 msgid "Cannot erase OPAL device."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:26
+#: lib/luks1/keyencryption.c:27
 #, c-format
 msgid ""
 "Failed to setup dm-crypt key mapping for device %s.\n"
 "Check that kernel supports %s cipher (check syslog for more info)."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:31
+#: lib/luks1/keyencryption.c:32
 msgid "Key size in XTS mode must be 256 or 512 bits."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:33
+#: lib/luks1/keyencryption.c:34
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:84 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
-#: lib/luks2/luks2_json_metadata.c:1514 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
+#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:107
+#: lib/luks1/keyencryption.c:108
 msgid "Failed to open temporary keystore device."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:114
+#: lib/luks1/keyencryption.c:115
 msgid "Failed to access temporary keystore device."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:188 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:235 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:683
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1517 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:246 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr ""
 
@@ -1023,32 +1029,32 @@ msgstr ""
 msgid "LUKS keyslot %u is invalid."
 msgstr ""
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1378
+#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr ""
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1380
+#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr ""
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1387
+#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr ""
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1424
+#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
 msgid "Backup file does not contain valid LUKS header."
 msgstr ""
 
 #: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1446
+#: lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr ""
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1454
+#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr ""
@@ -1074,7 +1080,7 @@ msgid ""
 "keyslots."
 msgstr ""
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1486
+#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1099,7 +1105,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr ""
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr ""
@@ -1146,7 +1152,7 @@ msgstr ""
 msgid "LUKS hash %s is invalid."
 msgstr ""
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1360
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
 msgid "No known problems detected for LUKS header."
 msgstr ""
 
@@ -1160,51 +1166,51 @@ msgstr ""
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr ""
 
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:750
 msgid ""
 "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr ""
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:701
 msgid "Wrong LUKS UUID format provided."
 msgstr ""
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr ""
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr ""
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr ""
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr ""
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr ""
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr ""
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr ""
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr ""
@@ -1225,207 +1231,215 @@ msgstr ""
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:499
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:554
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:615
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1233
-msgid "Required kernel crypto interface not available."
-msgstr ""
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1235
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr ""
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:767
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:773
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:828
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:843
 msgid ""
 "Cannot determine TCRYPT system partition offset, activating whole encrypted "
 "area."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:852
 msgid ""
 "Cannot determine TCRYPT system partition offset, activating device as a "
 "system partition."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:932
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:1144
+#: lib/tcrypt/tcrypt.c:1161
 msgid "This function is not supported without TCRYPT header load."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:265
+#: lib/bitlk/bitlk.c:293
 #, c-format
 msgid ""
 "Unexpected metadata entry type '%u' found when parsing supported Volume "
 "Master Key."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:327
+#: lib/bitlk/bitlk.c:351
 msgid "Invalid string found when parsing Volume Master Key."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:331
+#: lib/bitlk/bitlk.c:355
 #, c-format
 msgid ""
 "Unexpected string ('%s') found when parsing supported Volume Master Key."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:351
+#: lib/bitlk/bitlk.c:375
 #, c-format
 msgid ""
 "Unexpected metadata entry value '%u' found when parsing supported Volume "
 "Master Key."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:450
+#: lib/bitlk/bitlk.c:528
 msgid "BITLK version 1 is currently not supported."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:456
+#: lib/bitlk/bitlk.c:534
 msgid "Invalid or unknown boot signature for BITLK device."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:468
+#: lib/bitlk/bitlk.c:546
 #, c-format
 msgid "Unsupported sector size %<PRIu16>."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:476
+#: lib/bitlk/bitlk.c:554
 #, c-format
 msgid "Failed to read BITLK header from %s."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:501
+#: lib/bitlk/bitlk.c:603
+#, c-format
+msgid "Failed to read and validate BITLK FVE metadata from %s."
+msgstr ""
+
+#: lib/bitlk/bitlk.c:610
+#, c-format
+msgid "Failed to validate the location of BITLK FVE metadata from %s."
+msgstr ""
+
+#: lib/bitlk/bitlk.c:621
+#, c-format
+msgid "BITLK FVE metadata changed between reads from %s."
+msgstr ""
+
+#: lib/bitlk/bitlk.c:628
+#, c-format
+msgid "Failed to hash BITLK FVE metadata read from %s."
+msgstr ""
+
+#: lib/bitlk/bitlk.c:644
 #, c-format
-msgid "Failed to read BITLK FVE metadata from %s."
+msgid "Failed to parse BITLK FVE validation metadata from %s."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:552
+#: lib/bitlk/bitlk.c:695
 msgid "Unknown or unsupported encryption type."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:592
+#: lib/bitlk/bitlk.c:733
 #, c-format
-msgid "Failed to read BITLK metadata entries from %s."
+msgid "Failed to check BITLK metadata entries previously read from %s."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:709
+#: lib/bitlk/bitlk.c:857
 msgid "Failed to convert BITLK volume description"
 msgstr ""
 
-#: lib/bitlk/bitlk.c:872
+#: lib/bitlk/bitlk.c:1022
 #, c-format
 msgid "Unexpected metadata entry type '%u' found when parsing external key."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:895
+#: lib/bitlk/bitlk.c:1045
 #, c-format
 msgid "BEK file GUID '%s' does not match GUID of the volume."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:899
+#: lib/bitlk/bitlk.c:1049
 #, c-format
 msgid "Unexpected metadata entry value '%u' found when parsing external key."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:938
+#: lib/bitlk/bitlk.c:1088
 #, c-format
 msgid "Unsupported BEK metadata version %<PRIu32>"
 msgstr ""
 
-#: lib/bitlk/bitlk.c:943
+#: lib/bitlk/bitlk.c:1093
 #, c-format
 msgid "Unexpected BEK metadata size %<PRIu32> does not match BEK file length"
 msgstr ""
 
-#: lib/bitlk/bitlk.c:969
+#: lib/bitlk/bitlk.c:1119
 msgid "Unexpected metadata entry found when parsing startup key."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:1069
+#: lib/bitlk/bitlk.c:1222
 msgid "This operation is not supported."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:1077
+#: lib/bitlk/bitlk.c:1230
 msgid "Unexpected key data size."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:1205
+#: lib/bitlk/bitlk.c:1446
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:1210
+#: lib/bitlk/bitlk.c:1451
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:1217
-msgid "Activation of BITLK device with clear key protection is not supported."
-msgstr ""
-
-#: lib/bitlk/bitlk.c:1258
+#: lib/bitlk/bitlk.c:1490
 #, c-format
 msgid ""
 "WARNING: BitLocker volume size %<PRIu64> does not match the underlying "
 "device size %<PRIu64>"
 msgstr ""
 
-#: lib/bitlk/bitlk.c:1385
+#: lib/bitlk/bitlk.c:1617
 msgid ""
 "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:1389
+#: lib/bitlk/bitlk.c:1621
 msgid ""
 "Cannot activate device, kernel dm-crypt is missing support for BITLK "
 "Elephant diffuser."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:1393
+#: lib/bitlk/bitlk.c:1625
 msgid ""
 "Cannot activate device, kernel dm-crypt is missing support for large sector "
 "size."
 msgstr ""
 
-#: lib/bitlk/bitlk.c:1397
+#: lib/bitlk/bitlk.c:1629
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr ""
 
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr ""
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr ""
@@ -1502,23 +1516,23 @@ msgstr ""
 msgid "Hash area overflow."
 msgstr ""
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr ""
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr ""
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr ""
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr ""
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid ""
 "WARNING: Kernel cannot activate device if data block size exceeds page size "
@@ -1575,26 +1589,26 @@ msgstr ""
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr ""
 
-#: lib/integrity/integrity.c:290 lib/integrity/integrity.c:474
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr ""
 
-#: lib/integrity/integrity.c:296
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr ""
 
-#: lib/integrity/integrity.c:305
+#: lib/integrity/integrity.c:323
 msgid ""
 "Kernel refuses to activate insecure recalculate option (see legacy "
 "activation options to override)."
 msgstr ""
 
-#: lib/integrity/integrity.c:311
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr ""
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1506
+#: lib/luks2/luks2_json_metadata.c:1510
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr ""
@@ -1631,140 +1645,143 @@ msgstr ""
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1353
-#: lib/luks2/luks2_json_metadata.c:1413 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:1431
+#: lib/luks2/luks2_json_metadata.c:1277
+msgid "Label is too long."
+msgstr ""
+
+#: lib/luks2/luks2_json_metadata.c:1435
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:1470
+#: lib/luks2/luks2_json_metadata.c:1474
 msgid "Data offset differ on device and backup, restore failed."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:1476
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid ""
 "Binary header with keyslot areas size differ on device and backup, restore "
 "failed."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:1483
+#: lib/luks2/luks2_json_metadata.c:1487
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:1484
+#: lib/luks2/luks2_json_metadata.c:1488
 msgid ""
 "does not contain LUKS2 header. Replacing header can destroy data on that "
 "device."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:1485
+#: lib/luks2/luks2_json_metadata.c:1489
 msgid ""
 "already contains LUKS2 header. Replacing header will destroy existing "
 "keyslots."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1491
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
 "Replacing header with backup may corrupt the data on that device!"
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1493
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
 "Replacing header with backup may corrupt data."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:1587
+#: lib/luks2/luks2_json_metadata.c:1591
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2541 lib/luks2/luks2_reencrypt.c:2105
+#: lib/luks2/luks2_json_metadata.c:2576 lib/luks2/luks2_reencrypt.c:2123
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2553 lib/luks2/luks2_reencrypt.c:2118
+#: lib/luks2/luks2_json_metadata.c:2588 lib/luks2/luks2_reencrypt.c:2136
 msgid "Failed to set dm-crypt segment."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2559 lib/luks2/luks2_reencrypt.c:2124
+#: lib/luks2/luks2_json_metadata.c:2594 lib/luks2/luks2_reencrypt.c:2142
 msgid "Failed to set dm-linear segment."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2679 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2714 src/utils_reencrypt.c:578
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2687
+#: lib/luks2/luks2_json_metadata.c:2722
 msgid "OPAL device must have static device size."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2707
+#: lib/luks2/luks2_json_metadata.c:2742
 msgid ""
 "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2712
+#: lib/luks2/luks2_json_metadata.c:2747
 msgid "OPAL device must have same size as locking range."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2732
+#: lib/luks2/luks2_json_metadata.c:2767
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2771
+#: lib/luks2/luks2_json_metadata.c:2806
 msgid "Unsupported device integrity configuration."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2787
+#: lib/luks2/luks2_json_metadata.c:2822
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2882
+#: lib/luks2/luks2_json_metadata.c:2924
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2893 lib/luks2/luks2_reencrypt.c:4274
+#: lib/luks2/luks2_json_metadata.c:2935 lib/luks2/luks2_reencrypt.c:4244
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:2972 lib/luks2/luks2_json_metadata.c:2994
+#: lib/luks2/luks2_json_metadata.c:3014 lib/luks2/luks2_json_metadata.c:3036
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:3016
+#: lib/luks2/luks2_json_metadata.c:3058
 msgid "Unmet LUKS2 requirements detected."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:3024
+#: lib/luks2/luks2_json_metadata.c:3066
 msgid ""
 "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:3026
+#: lib/luks2/luks2_json_metadata.c:3068
 msgid ""
 "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3070
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr ""
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3072
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr ""
 
@@ -1776,22 +1793,22 @@ msgstr ""
 msgid "Keyslot open failed."
 msgstr ""
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
+msgid "Cannot use %s cipher for keyslot encryption."
 msgstr ""
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr ""
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2725
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2743
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr ""
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr ""
 
@@ -1810,568 +1827,594 @@ msgstr ""
 msgid "Failed to refresh reencryption verification digest."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3882
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3903
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid ""
 "Cannot convert to LUKS1 format - default segment encryption sector size is "
 "not 512 bytes."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid ""
 "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:798
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:815
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid ""
 "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still "
 "active."
 msgstr ""
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:1194
+#: lib/luks2/luks2_reencrypt.c:1212
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:1199
+#: lib/luks2/luks2_reencrypt.c:1217
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:1406 lib/luks2/luks2_reencrypt.c:1592
-#: lib/luks2/luks2_reencrypt.c:1675 lib/luks2/luks2_reencrypt.c:1717
-#: lib/luks2/luks2_reencrypt.c:4069
+#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1610
+#: lib/luks2/luks2_reencrypt.c:1693 lib/luks2/luks2_reencrypt.c:1735
+#: lib/luks2/luks2_reencrypt.c:4090
 msgid "Failed to initialize old segment storage wrapper."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:1420 lib/luks2/luks2_reencrypt.c:1570
+#: lib/luks2/luks2_reencrypt.c:1438 lib/luks2/luks2_reencrypt.c:1588
 msgid "Failed to initialize new segment storage wrapper."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:1546 lib/luks2/luks2_reencrypt.c:4081
+#: lib/luks2/luks2_reencrypt.c:1564 lib/luks2/luks2_reencrypt.c:4102
 msgid "Failed to initialize hotzone protection."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:1619
+#: lib/luks2/luks2_reencrypt.c:1637
 msgid "Failed to read checksums for current hotzone."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:1626 lib/luks2/luks2_reencrypt.c:4095
+#: lib/luks2/luks2_reencrypt.c:1644 lib/luks2/luks2_reencrypt.c:4117
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:1645
+#: lib/luks2/luks2_reencrypt.c:1663
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:1651
+#: lib/luks2/luks2_reencrypt.c:1669
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2217
+#: lib/luks2/luks2_reencrypt.c:2222
 #, c-format
 msgid ""
 "Source and target device sizes don't match. Source %<PRIu64>, target: "
 "%<PRIu64>."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2315
+#: lib/luks2/luks2_reencrypt.c:2324
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2332
+#: lib/luks2/luks2_reencrypt.c:2336
+#, c-format
+msgid "Failed to allocate hotzone device %s."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:2353
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2360
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2410
+#: lib/luks2/luks2_reencrypt.c:2430
 msgid "Failed to refresh reencryption devices stack."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2607
+#: lib/luks2/luks2_reencrypt.c:2625
 msgid "Failed to set new keyslots area size."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2743
+#: lib/luks2/luks2_reencrypt.c:2761
 #, c-format
 msgid ""
 "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2780 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2798 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2816
+#: lib/luks2/luks2_reencrypt.c:2834
 msgid "Moved segment size can not be greater than data shift value."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2858
+#: lib/luks2/luks2_reencrypt.c:2876
 msgid "Invalid reencryption resilience parameters."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2880
+#: lib/luks2/luks2_reencrypt.c:2898
 #, c-format
 msgid ""
 "Moved segment too large. Requested size %<PRIu64>, available space for: "
 "%<PRIu64>."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:2969
+#: lib/luks2/luks2_reencrypt.c:2987
 msgid "Failed to clear table."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3055
+#: lib/luks2/luks2_reencrypt.c:3073
 #, c-format
 msgid ""
 "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> "
 "sectors)."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3070 lib/luks2/luks2_reencrypt.c:3077
+#: lib/luks2/luks2_reencrypt.c:3088 lib/luks2/luks2_reencrypt.c:3095
 msgid "Reduced data size is larger than real device size."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3087
+#: lib/luks2/luks2_reencrypt.c:3105
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3117 lib/luks2/luks2_reencrypt.c:3632
-#: lib/luks2/luks2_reencrypt.c:3653
+#: lib/luks2/luks2_reencrypt.c:3135 lib/luks2/luks2_reencrypt.c:3653
+#: lib/luks2/luks2_reencrypt.c:3674
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3324
+#: lib/luks2/luks2_reencrypt.c:3342
 msgid "Device not marked for LUKS2 reencryption."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3341 lib/luks2/luks2_reencrypt.c:4391
+#: lib/luks2/luks2_reencrypt.c:3359 lib/luks2/luks2_reencrypt.c:4518
 msgid "Failed to load LUKS2 reencryption context."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3433 lib/luks2/luks2_reencrypt.c:3773
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Device is not in reencryption."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3440 lib/luks2/luks2_reencrypt.c:3780
+#: lib/luks2/luks2_reencrypt.c:3461 lib/luks2/luks2_reencrypt.c:3801
 msgid "Reencryption process is already running."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3442 lib/luks2/luks2_reencrypt.c:3782
+#: lib/luks2/luks2_reencrypt.c:3463 lib/luks2/luks2_reencrypt.c:3803
 msgid "Failed to acquire reencryption lock."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3460
+#: lib/luks2/luks2_reencrypt.c:3481
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3596
+#: lib/luks2/luks2_reencrypt.c:3617
 msgid "Active device size and requested reencryption size don't match."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3610
+#: lib/luks2/luks2_reencrypt.c:3631
 msgid "Illegal device size requested in reencryption parameters."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3712
+#: lib/luks2/luks2_reencrypt.c:3733
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3733
+#: lib/luks2/luks2_reencrypt.c:3754
 msgid "LUKS2 reencryption recovery failed."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3866 lib/luks2/luks2_reencrypt.c:4344
+#: lib/luks2/luks2_reencrypt.c:3887 lib/luks2/luks2_reencrypt.c:4471
 msgid "Failed to initialize reencryption device stack."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3899
+#: lib/luks2/luks2_reencrypt.c:3920
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3928
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:3960 lib/luks2/luks2_reencrypt.c:3992
-#: lib/luks2/luks2_reencrypt.c:4022
+#: lib/luks2/luks2_reencrypt.c:3981 lib/luks2/luks2_reencrypt.c:4013
+#: lib/luks2/luks2_reencrypt.c:4043
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4051
+#: lib/luks2/luks2_reencrypt.c:4072
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4103
+#: lib/luks2/luks2_reencrypt.c:4130
 msgid "Failed to write reencryption resilience metadata."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4110
+#: lib/luks2/luks2_reencrypt.c:4142
 msgid "Decryption failed."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/luks2/luks2_reencrypt.c:4147
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4120
+#: lib/luks2/luks2_reencrypt.c:4152
 msgid "Failed to sync data."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4128
+#: lib/luks2/luks2_reencrypt.c:4160
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4217
+#: lib/luks2/luks2_reencrypt.c:4245
+msgid "Do not resume the device unless replaced with error target manually."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:4329
 msgid "Failed to write LUKS2 metadata."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4240
+#: lib/luks2/luks2_reencrypt.c:4345
 msgid "Failed to wipe unused data device area."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4246
+#: lib/luks2/luks2_reencrypt.c:4351
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4256
+#: lib/luks2/luks2_reencrypt.c:4361
 msgid "Failed to remove reencryption keyslot."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4266
+#: lib/luks2/luks2_reencrypt.c:4394
 #, c-format
 msgid ""
 "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> "
 "sectors long."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4270
+#: lib/luks2/luks2_reencrypt.c:4398
 msgid "Online reencryption failed."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4275
-msgid "Do not resume the device unless replaced with error target manually."
-msgstr ""
-
-#: lib/luks2/luks2_reencrypt.c:4327
+#: lib/luks2/luks2_reencrypt.c:4454
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4333
+#: lib/luks2/luks2_reencrypt.c:4460
 msgid "Missing or invalid reencrypt context."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt.c:4367 lib/luks2/luks2_reencrypt.c:4404
+#: lib/luks2/luks2_reencrypt.c:4494 lib/luks2/luks2_reencrypt.c:4531
 msgid "Failed to update reencryption context."
 msgstr ""
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr ""
 
-#: lib/luks2/hw_opal/hw_opal.c:333
+#: lib/luks2/hw_opal/hw_opal.c:432
 #, c-format
 msgid ""
 "OPAL range %d offset %<PRIu64> does not match expected values %<PRIu64>."
 msgstr ""
 
-#: lib/luks2/hw_opal/hw_opal.c:340
+#: lib/luks2/hw_opal/hw_opal.c:439
 #, c-format
 msgid "OPAL range %d length %<PRIu64> does not match device length %<PRIu64>."
 msgstr ""
 
-#: lib/luks2/hw_opal/hw_opal.c:346
+#: lib/luks2/hw_opal/hw_opal.c:445
 #, c-format
 msgid "OPAL range %d locking is disabled."
 msgstr ""
 
-#: lib/luks2/hw_opal/hw_opal.c:356 lib/luks2/hw_opal/hw_opal.c:363
+#: lib/luks2/hw_opal/hw_opal.c:455 lib/luks2/hw_opal/hw_opal.c:462
 #, c-format
 msgid "Unexpected OPAL range %d lock state."
 msgstr ""
 
-#: src/cryptsetup.c:87
+#: lib/luks2/hw_opal/hw_opal.c:646 lib/luks2/hw_opal/hw_opal.c:948
+msgid ""
+"The device declared support for OPAL Single User Mode (SUM) but behaved "
+"unexpectedly."
+msgstr ""
+
+#: lib/luks2/hw_opal/hw_opal.c:647 lib/luks2/hw_opal/hw_opal.c:949
+msgid ""
+"Revert device to factory settings and try to format with --disable-sum "
+"option."
+msgstr ""
+
+#: lib/luks2/hw_opal/hw_opal.c:1096
+#, c-format
+msgid "Device %s already activated for HW OPAL. Flag --disable-sum ignored."
+msgstr ""
+
+#: src/cryptsetup.c:88
 msgid "Keyslot encryption parameters can be set only for LUKS2 device."
 msgstr ""
 
-#: src/cryptsetup.c:93
+#: src/cryptsetup.c:94
 msgid ""
 "Keyslot encryption parameters are not compatible with LUKS2 keyslot "
 "encryption."
 msgstr ""
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1171 src/cryptsetup.c:1538
+#: src/cryptsetup.c:151 src/cryptsetup.c:1182 src/cryptsetup.c:1560
 #: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr ""
 
-#: src/cryptsetup.c:160
+#: src/cryptsetup.c:161
 #, c-format
 msgid ""
 "WARNING: Using default options for cipher (%s-%s, key size %u bits) that "
 "could be incompatible with older versions."
 msgstr ""
 
-#: src/cryptsetup.c:165
+#: src/cryptsetup.c:166
 #, c-format
 msgid ""
 "WARNING: Using default options for hash (%s) that could be incompatible with "
 "older versions."
 msgstr ""
 
-#: src/cryptsetup.c:169
+#: src/cryptsetup.c:170
 msgid ""
 "For plain mode, always use options --cipher, --key-size and if no keyfile or "
 "keyring is used, then also --hash."
 msgstr ""
 
-#: src/cryptsetup.c:175
+#: src/cryptsetup.c:176
 msgid ""
 "WARNING: The --hash parameter is being ignored in plain mode with keyfile "
 "specified.\n"
 msgstr ""
 
-#: src/cryptsetup.c:189
+#: src/cryptsetup.c:190
 msgid ""
 "WARNING: The --keyfile-size option is being ignored, the read size is the "
 "same as the encryption key size.\n"
 msgstr ""
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1368 src/cryptsetup.c:1591
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2137
+#: src/cryptsetup.c:227 src/cryptsetup.c:1377 src/cryptsetup.c:1613
+#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr ""
 
-#: src/cryptsetup.c:232
+#: src/cryptsetup.c:233
 #, c-format
 msgid ""
 "Detected device signature(s) on %s. Proceeding further may damage existing "
 "data."
 msgstr ""
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1254 src/cryptsetup.c:1302
-#: src/cryptsetup.c:1375 src/cryptsetup.c:1515 src/cryptsetup.c:1603
-#: src/cryptsetup.c:2488 src/cryptsetup.c:2917 src/integritysetup.c:178
+#: src/cryptsetup.c:239 src/cryptsetup.c:1263 src/cryptsetup.c:1311
+#: src/cryptsetup.c:1384 src/cryptsetup.c:1537 src/cryptsetup.c:1625
+#: src/cryptsetup.c:2509 src/cryptsetup.c:2938 src/integritysetup.c:178
 #: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
 #: src/utils_reencrypt.c:925
 msgid "Operation aborted.\n"
 msgstr ""
 
-#: src/cryptsetup.c:323
+#: src/cryptsetup.c:324
 msgid "Option --key-file is required."
 msgstr ""
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr ""
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr ""
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr ""
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr ""
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr ""
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:668
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr ""
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid ""
 "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr ""
 
-#: src/cryptsetup.c:542
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
 "This dump should be always stored encrypted on safe place."
 msgstr ""
 
-#: src/cryptsetup.c:609 src/cryptsetup.c:690 src/cryptsetup.c:2513
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2534
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
 "This dump should be stored encrypted in a safe place."
 msgstr ""
 
-#: src/cryptsetup.c:745 src/cryptsetup.c:777
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr ""
 
-#: src/cryptsetup.c:785
+#: src/cryptsetup.c:795
 msgid ""
 "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr ""
 
-#: src/cryptsetup.c:839 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:416
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr ""
 
-#: src/cryptsetup.c:872 src/cryptsetup.c:1801 src/cryptsetup.c:2075
-#: src/cryptsetup.c:2222 src/cryptsetup.c:2641 src/cryptsetup.c:2722
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:882 src/cryptsetup.c:1822 src/cryptsetup.c:2096
+#: src/cryptsetup.c:2243 src/cryptsetup.c:2662 src/cryptsetup.c:2743
+#: src/cryptsetup.c:3276
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr ""
 
-#: src/cryptsetup.c:881
+#: src/cryptsetup.c:891
 msgid ""
 "Resize of active device requires volume key in keyring but --disable-keyring "
 "option is set."
 msgstr ""
 
-#: src/cryptsetup.c:1050
+#: src/cryptsetup.c:1060
 msgid "Benchmark interrupted."
 msgstr ""
 
-#: src/cryptsetup.c:1071
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr ""
 
-#: src/cryptsetup.c:1073
+#: src/cryptsetup.c:1083
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr ""
 
-#: src/cryptsetup.c:1087
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s N/A\n"
 msgstr ""
 
-#: src/cryptsetup.c:1089
+#: src/cryptsetup.c:1099
 #, c-format
 msgid ""
 "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit "
 "key (requested %u ms time)\n"
 msgstr ""
 
-#: src/cryptsetup.c:1113
+#: src/cryptsetup.c:1123
 msgid "Result of benchmark is not reliable."
 msgstr ""
 
-#: src/cryptsetup.c:1163
+#: src/cryptsetup.c:1174
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr ""
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1188
+#: src/cryptsetup.c:1199
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr ""
 
-#: src/cryptsetup.c:1196
+#: src/cryptsetup.c:1207
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr ""
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1215
+#: src/cryptsetup.c:1228
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr ""
 
-#: src/cryptsetup.c:1226
+#: src/cryptsetup.c:1241
 msgid "N/A"
 msgstr ""
 
-#: src/cryptsetup.c:1251
+#: src/cryptsetup.c:1244
+msgid "# Cipher speed test is not available.\n"
+msgstr ""
+
+#: src/cryptsetup.c:1260
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the "
 "reencryption operation is desirable (see luksDump output)\n"
@@ -2379,653 +2422,657 @@ msgid ""
 "genuine."
 msgstr ""
 
-#: src/cryptsetup.c:1257
+#: src/cryptsetup.c:1266
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr ""
 
-#: src/cryptsetup.c:1301
+#: src/cryptsetup.c:1310
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr ""
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr ""
 
-#: src/cryptsetup.c:1312
+#: src/cryptsetup.c:1321
 msgid "Enter passphrase for reencryption recovery: "
 msgstr ""
 
-#: src/cryptsetup.c:1374
+#: src/cryptsetup.c:1383
 msgid "Really try to repair LUKS device header?"
 msgstr ""
 
-#: src/cryptsetup.c:1402 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
 msgid ""
 "\n"
 "Wipe interrupted."
 msgstr ""
 
-#: src/cryptsetup.c:1407 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:289
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will "
 "contain invalid checksum).\n"
 msgstr ""
 
-#: src/cryptsetup.c:1429 src/integritysetup.c:103
+#: src/cryptsetup.c:1438 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr ""
 
-#: src/cryptsetup.c:1477
+#: src/cryptsetup.c:1499
 msgid ""
 "OPAL hw-only encryption does not support --cipher and --key-size, options "
 "ignored."
 msgstr ""
 
-#: src/cryptsetup.c:1490
+#: src/cryptsetup.c:1512
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr ""
 
-#: src/cryptsetup.c:1495 src/cryptsetup.c:1575
+#: src/cryptsetup.c:1517 src/cryptsetup.c:1597
 msgid "Unsupported LUKS2 metadata size options."
 msgstr ""
 
-#: src/cryptsetup.c:1500
+#: src/cryptsetup.c:1522
 msgid "OPAL is supported only for LUKS2 format."
 msgstr ""
 
-#: src/cryptsetup.c:1505
+#: src/cryptsetup.c:1527
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr ""
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1536
 msgid "Header file does not exist, do you want to create it?"
 msgstr ""
 
-#: src/cryptsetup.c:1522
+#: src/cryptsetup.c:1544
 #, c-format
 msgid "Cannot create header file %s."
 msgstr ""
 
-#: src/cryptsetup.c:1548 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1570 src/integritysetup.c:126 src/integritysetup.c:141
+#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
+#: src/integritysetup.c:346
 msgid "No known integrity specification pattern detected."
 msgstr ""
 
-#: src/cryptsetup.c:1550
+#: src/cryptsetup.c:1572
 msgid "Cannot use specified integrity key size."
 msgstr ""
 
-#: src/cryptsetup.c:1568
+#: src/cryptsetup.c:1590
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr ""
 
-#: src/cryptsetup.c:1597 src/integritysetup.c:172
+#: src/cryptsetup.c:1619 src/integritysetup.c:172
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr ""
 
-#: src/cryptsetup.c:1634
+#: src/cryptsetup.c:1656
 msgid "OPAL Admin password cannot be empty."
 msgstr ""
 
-#: src/cryptsetup.c:1648 src/cryptsetup.c:2092 src/cryptsetup.c:2235
-#: src/cryptsetup.c:2370 src/cryptsetup.c:2436 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1670 src/cryptsetup.c:2113 src/cryptsetup.c:2256
+#: src/cryptsetup.c:2391 src/cryptsetup.c:2457 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr ""
 
-#: src/cryptsetup.c:1779
+#: src/cryptsetup.c:1800
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr ""
 
-#: src/cryptsetup.c:1786
+#: src/cryptsetup.c:1807
 #, c-format
 msgid ""
 "LUKS file container %s is too small for activation, there is no remaining "
 "space for data."
 msgstr ""
 
-#: src/cryptsetup.c:1828 src/cryptsetup.c:2241 src/utils_reencrypt.c:277
+#: src/cryptsetup.c:1849 src/cryptsetup.c:2262 src/utils_reencrypt.c:277
 #: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
 msgid ""
 "Cannot determine volume key size for LUKS without keyslots, please use --key-"
 "size option."
 msgstr ""
 
-#: src/cryptsetup.c:1847 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1868 src/utils_reencrypt.c:303
 msgid "Device requires two volume keys."
 msgstr ""
 
-#: src/cryptsetup.c:1882
+#: src/cryptsetup.c:1903
 msgid ""
 "Some specified activation parameters were ignored with OPAL hw-only "
 "encryption."
 msgstr ""
 
-#: src/cryptsetup.c:1887
+#: src/cryptsetup.c:1908
 msgid "Device activated but cannot make flags persistent."
 msgstr ""
 
-#: src/cryptsetup.c:1967 src/cryptsetup.c:2035
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2056
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr ""
 
-#: src/cryptsetup.c:1979 src/cryptsetup.c:2039
+#: src/cryptsetup.c:2000 src/cryptsetup.c:2060
 msgid ""
 "This is the last keyslot. Device will become unusable after purging this key."
 msgstr ""
 
-#: src/cryptsetup.c:1980
+#: src/cryptsetup.c:2001
 msgid "Enter any remaining passphrase: "
 msgstr ""
 
-#: src/cryptsetup.c:1981 src/cryptsetup.c:2041
+#: src/cryptsetup.c:2002 src/cryptsetup.c:2062
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr ""
 
-#: src/cryptsetup.c:2017
+#: src/cryptsetup.c:2038
 msgid "Enter passphrase to be deleted: "
 msgstr ""
 
-#: src/cryptsetup.c:2067 src/cryptsetup.c:2419 src/cryptsetup.c:3079
-#: src/cryptsetup.c:3246
+#: src/cryptsetup.c:2088 src/cryptsetup.c:2440 src/cryptsetup.c:3100
+#: src/cryptsetup.c:3267
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr ""
 
-#: src/cryptsetup.c:2106 src/cryptsetup.c:2305
+#: src/cryptsetup.c:2127 src/cryptsetup.c:2326
 msgid "Enter new passphrase for key slot: "
 msgstr ""
 
-#: src/cryptsetup.c:2140 src/utils_luks.c:342
+#: src/cryptsetup.c:2161 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr ""
 
-#: src/cryptsetup.c:2142 src/utils_luks.c:344
+#: src/cryptsetup.c:2163 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr ""
 
-#: src/cryptsetup.c:2201
+#: src/cryptsetup.c:2222
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr ""
 
-#: src/cryptsetup.c:2278 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2299 src/utils_reencrypt_luks1.c:1097
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr ""
 
-#: src/cryptsetup.c:2374
+#: src/cryptsetup.c:2395
 msgid "Enter passphrase to be changed: "
 msgstr ""
 
-#: src/cryptsetup.c:2390 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2411 src/utils_reencrypt_luks1.c:1083
 msgid "Enter new passphrase: "
 msgstr ""
 
-#: src/cryptsetup.c:2440
+#: src/cryptsetup.c:2461
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr ""
 
-#: src/cryptsetup.c:2464
+#: src/cryptsetup.c:2485
 msgid "Only one device argument for isLuks operation is supported."
 msgstr ""
 
-#: src/cryptsetup.c:2569
+#: src/cryptsetup.c:2590
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr ""
 
-#: src/cryptsetup.c:2574
+#: src/cryptsetup.c:2595
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
 msgstr ""
 
-#: src/cryptsetup.c:2669 src/cryptsetup.c:2705
+#: src/cryptsetup.c:2690 src/cryptsetup.c:2726
 #, c-format
 msgid "%s is not active %s device name."
 msgstr ""
 
-#: src/cryptsetup.c:2700
+#: src/cryptsetup.c:2721
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr ""
 
-#: src/cryptsetup.c:2777 src/cryptsetup.c:2796
+#: src/cryptsetup.c:2798 src/cryptsetup.c:2817
 msgid "Option --header-backup-file is required."
 msgstr ""
 
-#: src/cryptsetup.c:2827
+#: src/cryptsetup.c:2848
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr ""
 
-#: src/cryptsetup.c:2838
+#: src/cryptsetup.c:2859
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr ""
 
-#: src/cryptsetup.c:2888
+#: src/cryptsetup.c:2909
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr ""
 
-#: src/cryptsetup.c:2890
+#: src/cryptsetup.c:2911
 msgid "Command requires device and mapped name as arguments."
 msgstr ""
 
-#: src/cryptsetup.c:2908
+#: src/cryptsetup.c:2929
 msgid "Enter OPAL PSID: "
 msgstr ""
 
-#: src/cryptsetup.c:2908
+#: src/cryptsetup.c:2929
 msgid "Enter OPAL Admin password: "
 msgstr ""
 
-#: src/cryptsetup.c:2916
+#: src/cryptsetup.c:2937
 msgid ""
 "WARNING: WHOLE disk will be factory reset and all data will be lost! "
 "Continue?"
 msgstr ""
 
-#: src/cryptsetup.c:2959
+#: src/cryptsetup.c:2980
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
 "Device will become unusable after this operation."
 msgstr ""
 
-#: src/cryptsetup.c:2966
+#: src/cryptsetup.c:2987
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr ""
 
-#: src/cryptsetup.c:3005
+#: src/cryptsetup.c:3026
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr ""
 
-#: src/cryptsetup.c:3021
+#: src/cryptsetup.c:3042
 #, c-format
 msgid "Device is already %s type."
 msgstr ""
 
-#: src/cryptsetup.c:3028
+#: src/cryptsetup.c:3049
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr ""
 
-#: src/cryptsetup.c:3031
+#: src/cryptsetup.c:3052
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr ""
 
-#: src/cryptsetup.c:3071
+#: src/cryptsetup.c:3092
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr ""
 
-#: src/cryptsetup.c:3105 src/cryptsetup.c:3145 src/cryptsetup.c:3165
+#: src/cryptsetup.c:3126 src/cryptsetup.c:3166 src/cryptsetup.c:3186
 #, c-format
 msgid "Token %d is invalid."
 msgstr ""
 
-#: src/cryptsetup.c:3108 src/cryptsetup.c:3168
+#: src/cryptsetup.c:3129 src/cryptsetup.c:3189
 #, c-format
 msgid "Token %d in use."
 msgstr ""
 
-#: src/cryptsetup.c:3120
+#: src/cryptsetup.c:3141
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr ""
 
-#: src/cryptsetup.c:3131 src/cryptsetup.c:3194
+#: src/cryptsetup.c:3152 src/cryptsetup.c:3215
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr ""
 
-#: src/cryptsetup.c:3148
+#: src/cryptsetup.c:3169
 #, c-format
 msgid "Token %d is not in use."
 msgstr ""
 
-#: src/cryptsetup.c:3185
+#: src/cryptsetup.c:3206
 msgid "Failed to import token from file."
 msgstr ""
 
-#: src/cryptsetup.c:3210
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr ""
 
-#: src/cryptsetup.c:3223
+#: src/cryptsetup.c:3244
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr ""
 
-#: src/cryptsetup.c:3225 src/cryptsetup.c:3232
+#: src/cryptsetup.c:3246 src/cryptsetup.c:3253
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr ""
 
-#: src/cryptsetup.c:3291
+#: src/cryptsetup.c:3312
 msgid ""
 "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only "
 "for TCRYPT device."
 msgstr ""
 
-#: src/cryptsetup.c:3294
+#: src/cryptsetup.c:3315
 msgid ""
 "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT "
 "device type."
 msgstr ""
 
-#: src/cryptsetup.c:3297
+#: src/cryptsetup.c:3318
 msgid ""
 "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr ""
 
-#: src/cryptsetup.c:3301
+#: src/cryptsetup.c:3322
 msgid ""
 "Option --veracrypt-query-pim is supported only for VeraCrypt compatible "
 "devices."
 msgstr ""
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3324
 msgid ""
 "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr ""
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3333
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr ""
 
-#: src/cryptsetup.c:3315
+#: src/cryptsetup.c:3336
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr ""
 
-#: src/cryptsetup.c:3318
+#: src/cryptsetup.c:3339
 msgid "Option --shared is allowed only for open of plain device."
 msgstr ""
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3342
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr ""
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3345
 msgid ""
 "Option --offset with open action is only supported for plain and loopaes "
 "devices."
 msgstr ""
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3348
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr ""
 
-#: src/cryptsetup.c:3331
+#: src/cryptsetup.c:3352
 msgid ""
 "Sector size option with open action is supported only for plain devices."
 msgstr ""
 
-#: src/cryptsetup.c:3335
+#: src/cryptsetup.c:3356
 msgid ""
 "Large IV sectors option is supported only for opening plain type device with "
 "sector size larger than 512 bytes."
 msgstr ""
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3361
 msgid ""
 "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and "
 "FVAULT2 devices."
 msgstr ""
 
-#: src/cryptsetup.c:3343 src/cryptsetup.c:3373
+#: src/cryptsetup.c:3364 src/cryptsetup.c:3394
 msgid "Options --device-size and --size cannot be combined."
 msgstr ""
 
-#: src/cryptsetup.c:3346
+#: src/cryptsetup.c:3367
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr ""
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3370
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr ""
 
-#: src/cryptsetup.c:3353
+#: src/cryptsetup.c:3374
 msgid ""
 "Option --volume-key-keyring cannot be combined with --hash or --volume-key-"
 "file."
 msgstr ""
 
-#: src/cryptsetup.c:3356
+#: src/cryptsetup.c:3377
 msgid ""
 "Both --volume-key-file options must be paired with respective --key-size "
 "options."
 msgstr ""
 
-#: src/cryptsetup.c:3365 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3386 src/veritysetup.c:676 src/integritysetup.c:787
 msgid ""
 "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr ""
 
-#: src/cryptsetup.c:3381
+#: src/cryptsetup.c:3402
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr ""
 
-#: src/cryptsetup.c:3384
+#: src/cryptsetup.c:3405
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr ""
 
-#: src/cryptsetup.c:3387
+#: src/cryptsetup.c:3408
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr ""
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3411
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr ""
 
-#: src/cryptsetup.c:3398 src/cryptsetup.c:3428
+#: src/cryptsetup.c:3419 src/cryptsetup.c:3452
 msgid "Keyslot specification is required."
 msgstr ""
 
-#: src/cryptsetup.c:3406
+#: src/cryptsetup.c:3427
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr ""
 
-#: src/cryptsetup.c:3409
+#: src/cryptsetup.c:3430
 msgid ""
 "Option --integrity-no-wipe can be used only for format action with integrity "
 "extension."
 msgstr ""
 
-#: src/cryptsetup.c:3412
+#: src/cryptsetup.c:3433
 msgid "Only one of --use-[u]random options is allowed."
 msgstr ""
 
-#: src/cryptsetup.c:3420
+#: src/cryptsetup.c:3436
+msgid "Option --disable-sum must be used with --hw-opal or --hw-opal-only"
+msgstr ""
+
+#: src/cryptsetup.c:3444
 msgid "Key size is required with --unbound option."
 msgstr ""
 
-#: src/cryptsetup.c:3440
+#: src/cryptsetup.c:3464
 msgid "Invalid token action."
 msgstr ""
 
-#: src/cryptsetup.c:3443
+#: src/cryptsetup.c:3467
 msgid "--key-description parameter is mandatory for token add action."
 msgstr ""
 
-#: src/cryptsetup.c:3447 src/cryptsetup.c:3460
+#: src/cryptsetup.c:3471 src/cryptsetup.c:3484
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr ""
 
-#: src/cryptsetup.c:3451
+#: src/cryptsetup.c:3475
 msgid "Option --unbound is valid only with token add action."
 msgstr ""
 
-#: src/cryptsetup.c:3453
+#: src/cryptsetup.c:3477
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr ""
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3482
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr ""
 
-#: src/cryptsetup.c:3474
+#: src/cryptsetup.c:3498
 msgid "<device> [--type <type>] [<name>]"
 msgstr ""
 
-#: src/cryptsetup.c:3474 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3498 src/veritysetup.c:490 src/integritysetup.c:554
 msgid "open device as <name>"
 msgstr ""
 
-#: src/cryptsetup.c:3475 src/cryptsetup.c:3476 src/cryptsetup.c:3477
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/veritysetup.c:491 src/veritysetup.c:492 src/integritysetup.c:555
+#: src/integritysetup.c:556 src/integritysetup.c:558
 msgid "<name>"
 msgstr ""
 
-#: src/cryptsetup.c:3475 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3499 src/veritysetup.c:491 src/integritysetup.c:555
 msgid "close device (remove mapping)"
 msgstr ""
 
-#: src/cryptsetup.c:3476 src/integritysetup.c:555
+#: src/cryptsetup.c:3500 src/integritysetup.c:558
 msgid "resize active device"
 msgstr ""
 
-#: src/cryptsetup.c:3477
+#: src/cryptsetup.c:3501
 msgid "show device status"
 msgstr ""
 
-#: src/cryptsetup.c:3478
+#: src/cryptsetup.c:3502
 msgid "[--cipher <cipher>]"
 msgstr ""
 
-#: src/cryptsetup.c:3478
+#: src/cryptsetup.c:3502
 msgid "benchmark cipher"
 msgstr ""
 
-#: src/cryptsetup.c:3479 src/cryptsetup.c:3480 src/cryptsetup.c:3481
-#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3493
-#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
-#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3514
+#: src/cryptsetup.c:3515 src/cryptsetup.c:3516 src/cryptsetup.c:3517
+#: src/cryptsetup.c:3518 src/cryptsetup.c:3519 src/cryptsetup.c:3520
+#: src/cryptsetup.c:3521 src/cryptsetup.c:3522 src/cryptsetup.c:3523
 msgid "<device>"
 msgstr ""
 
-#: src/cryptsetup.c:3479
+#: src/cryptsetup.c:3503
 msgid "try to repair on-disk metadata"
 msgstr ""
 
-#: src/cryptsetup.c:3480
+#: src/cryptsetup.c:3504
 msgid "reencrypt LUKS2 device"
 msgstr ""
 
-#: src/cryptsetup.c:3481
+#: src/cryptsetup.c:3505
 msgid "erase all keyslots (remove encryption key)"
 msgstr ""
 
-#: src/cryptsetup.c:3482
+#: src/cryptsetup.c:3506
 msgid "convert LUKS from/to LUKS2 format"
 msgstr ""
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3507
 msgid "set permanent configuration options for LUKS2"
 msgstr ""
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/cryptsetup.c:3508 src/cryptsetup.c:3509
 msgid "<device> [<new key file>]"
 msgstr ""
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3508
 msgid "formats a LUKS device"
 msgstr ""
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3509
 msgid "add key to LUKS device"
 msgstr ""
 
-#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
+#: src/cryptsetup.c:3510 src/cryptsetup.c:3511 src/cryptsetup.c:3512
 msgid "<device> [<key file>]"
 msgstr ""
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3510
 msgid "removes supplied key or key file from LUKS device"
 msgstr ""
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3511
 msgid "changes supplied key or key file of LUKS device"
 msgstr ""
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3512
 msgid "converts a key to new pbkdf parameters"
 msgstr ""
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3513
 msgid "<device> <key slot>"
 msgstr ""
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3513
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr ""
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3514
 msgid "print UUID of LUKS device"
 msgstr ""
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3515
 msgid "tests <device> for LUKS partition header"
 msgstr ""
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3516
 msgid "dump LUKS partition information"
 msgstr ""
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3517
 msgid "dump TCRYPT device information"
 msgstr ""
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3518
 msgid "dump BITLK device information"
 msgstr ""
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3519
 msgid "dump FVAULT2 device information"
 msgstr ""
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3520
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr ""
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3521
 msgid "Resume suspended LUKS device"
 msgstr ""
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3522
 msgid "Backup LUKS device header and keyslots"
 msgstr ""
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3523
 msgid "Restore LUKS device header and keyslots"
 msgstr ""
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3524
 msgid "<add|remove|import|export> <device>"
 msgstr ""
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3524
 msgid "Manipulate LUKS2 tokens"
 msgstr ""
 
-#: src/cryptsetup.c:3519 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3545 src/veritysetup.c:508 src/integritysetup.c:573
 msgid ""
 "\n"
 "<action> is one of:\n"
 msgstr ""
 
-#: src/cryptsetup.c:3525
+#: src/cryptsetup.c:3551
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -3035,7 +3082,7 @@ msgid ""
 "bitlkClose, fvault2Close\n"
 msgstr ""
 
-#: src/cryptsetup.c:3529
+#: src/cryptsetup.c:3555
 #, c-format
 msgid ""
 "\n"
@@ -3045,31 +3092,31 @@ msgid ""
 "<key file> optional key file for the new key for luksAddKey action\n"
 msgstr ""
 
-#: src/cryptsetup.c:3536
+#: src/cryptsetup.c:3562
 #, c-format
 msgid ""
 "\n"
 "Default compiled-in metadata format is %s (for luksFormat action).\n"
 msgstr ""
 
-#: src/cryptsetup.c:3541
+#: src/cryptsetup.c:3567
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
 msgstr ""
 
-#: src/cryptsetup.c:3542
+#: src/cryptsetup.c:3568
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr ""
 
-#: src/cryptsetup.c:3544
+#: src/cryptsetup.c:3570
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
 msgstr ""
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3574
 #, c-format
 msgid ""
 "\n"
@@ -3081,135 +3128,135 @@ msgid ""
 "\tIteration time: %d, Memory required: %dkB, Parallel threads: %d\n"
 msgstr ""
 
-#: src/cryptsetup.c:3559
+#: src/cryptsetup.c:3587
 #, c-format
 msgid ""
 "\n"
 "Default compiled-in device cipher parameters:\n"
 "\tloop-AES: %s, Key %d bits\n"
 "\tplain: %s, Key: %d bits, Password hashing: %s\n"
-"\tLUKS: %s, Key: %d bits, LUKS header hashing: %s, RNG: %s\n"
+"\tLUKS: %s-%s, Key: %d bits, LUKS header hashing: %s, RNG: %s\n"
 msgstr ""
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3596
 msgid ""
 "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr ""
 
-#: src/cryptsetup.c:3586 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3614 src/veritysetup.c:650 src/integritysetup.c:733
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr ""
 
-#: src/cryptsetup.c:3626 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3654 src/utils_reencrypt_luks1.c:1146
 msgid "Key slot is invalid."
 msgstr ""
 
-#: src/cryptsetup.c:3654
+#: src/cryptsetup.c:3682
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr ""
 
-#: src/cryptsetup.c:3659
+#: src/cryptsetup.c:3687
 msgid "Invalid max reencryption hotzone size specification."
 msgstr ""
 
-#: src/cryptsetup.c:3673 src/cryptsetup.c:3690 src/cryptsetup.c:3702
+#: src/cryptsetup.c:3701 src/cryptsetup.c:3718 src/cryptsetup.c:3730
 msgid "Key size must be a multiple of 8 bits"
 msgstr ""
 
-#: src/cryptsetup.c:3680
+#: src/cryptsetup.c:3708
 msgid "At most 2 key size specifications can be supplied."
 msgstr ""
 
-#: src/cryptsetup.c:3709 src/cryptsetup.c:3720
+#: src/cryptsetup.c:3737 src/cryptsetup.c:3748
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr ""
 
-#: src/cryptsetup.c:3732
+#: src/cryptsetup.c:3760
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr ""
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3769
 msgid "Maximum device reduce size is 1 GiB."
 msgstr ""
 
-#: src/cryptsetup.c:3744
+#: src/cryptsetup.c:3772
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr ""
 
-#: src/cryptsetup.c:3761
+#: src/cryptsetup.c:3789
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr ""
 
-#: src/cryptsetup.c:3780 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3808 src/veritysetup.c:571 src/integritysetup.c:653
 msgid "Show this help message"
 msgstr ""
 
-#: src/cryptsetup.c:3781 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3809 src/veritysetup.c:572 src/integritysetup.c:654
 msgid "Display brief usage"
 msgstr ""
 
-#: src/cryptsetup.c:3782 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3810 src/veritysetup.c:573 src/integritysetup.c:655
 msgid "Print package version"
 msgstr ""
 
-#: src/cryptsetup.c:3793 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3821 src/veritysetup.c:584 src/integritysetup.c:666
 msgid "Help options:"
 msgstr ""
 
-#: src/cryptsetup.c:3816 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3844 src/veritysetup.c:605 src/integritysetup.c:686
 msgid "[OPTION...] <action> <action-specific>"
 msgstr ""
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3853 src/veritysetup.c:614 src/integritysetup.c:697
 msgid "Argument <action> missing."
 msgstr ""
 
-#: src/cryptsetup.c:3904 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3932 src/veritysetup.c:645 src/integritysetup.c:728
 msgid "Unknown action."
 msgstr ""
 
-#: src/cryptsetup.c:3922
+#: src/cryptsetup.c:3950
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr ""
 
-#: src/cryptsetup.c:3928
+#: src/cryptsetup.c:3956
 msgid "Only one --key-file argument is allowed."
 msgstr ""
 
-#: src/cryptsetup.c:3933
+#: src/cryptsetup.c:3961
 msgid ""
 "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/"
 "argon2id."
 msgstr ""
 
-#: src/cryptsetup.c:3938
+#: src/cryptsetup.c:3966
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr ""
 
-#: src/cryptsetup.c:3943
+#: src/cryptsetup.c:3971
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr ""
 
-#: src/cryptsetup.c:3948
+#: src/cryptsetup.c:3976
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr ""
 
-#: src/cryptsetup.c:3953
+#: src/cryptsetup.c:3981
 msgid "Inline integrity must be used together with --integrity option."
 msgstr ""
 
-#: src/cryptsetup.c:3964
+#: src/cryptsetup.c:3992
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr ""
 
-#: src/cryptsetup.c:3972
+#: src/cryptsetup.c:4000
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr ""
 
-#: src/cryptsetup.c:3985
+#: src/cryptsetup.c:4013
 msgid "Cannot disable metadata locking."
 msgstr ""
 
@@ -3237,7 +3284,7 @@ msgstr ""
 msgid "Cannot write to root hash file %s."
 msgstr ""
 
-#: src/veritysetup.c:189 src/veritysetup.c:472
+#: src/veritysetup.c:189 src/veritysetup.c:475
 #, c-format
 msgid "Device %s is not a valid VERITY device."
 msgstr ""
@@ -3270,39 +3317,39 @@ msgstr ""
 msgid "Command requires <root_hash> or --root-hash-file option as argument."
 msgstr ""
 
-#: src/veritysetup.c:485
+#: src/veritysetup.c:488
 msgid "<data_device> <hash_device>"
 msgstr ""
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:488 src/integritysetup.c:553
 msgid "format device"
 msgstr ""
 
-#: src/veritysetup.c:486
+#: src/veritysetup.c:489
 msgid "<data_device> <hash_device> [<root_hash>]"
 msgstr ""
 
-#: src/veritysetup.c:486
+#: src/veritysetup.c:489
 msgid "verify device"
 msgstr ""
 
-#: src/veritysetup.c:487
+#: src/veritysetup.c:490
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr ""
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:492 src/integritysetup.c:556
 msgid "show active device status"
 msgstr ""
 
-#: src/veritysetup.c:490
+#: src/veritysetup.c:493
 msgid "<hash_device>"
 msgstr ""
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:493 src/integritysetup.c:557
 msgid "show on-disk information"
 msgstr ""
 
-#: src/veritysetup.c:509
+#: src/veritysetup.c:512
 #, c-format
 msgid ""
 "\n"
@@ -3312,7 +3359,7 @@ msgid ""
 "<root_hash> hash of the root node on <hash_device>\n"
 msgstr ""
 
-#: src/veritysetup.c:516
+#: src/veritysetup.c:519
 #, c-format
 msgid ""
 "\n"
@@ -3321,19 +3368,19 @@ msgid ""
 "Hash format: %u\n"
 msgstr ""
 
-#: src/veritysetup.c:657
+#: src/veritysetup.c:660
 msgid ""
 "Option --ignore-corruption and --restart-on-corruption cannot be used "
 "together."
 msgstr ""
 
-#: src/veritysetup.c:662
+#: src/veritysetup.c:665
 msgid ""
 "Option --panic-on-corruption and --restart-on-corruption cannot be used "
 "together."
 msgstr ""
 
-#: src/veritysetup.c:668
+#: src/veritysetup.c:671
 msgid ""
 "Option --error-as-corruption must be used with --panic-on-corruption or --"
 "restart-on-corruption."
@@ -3356,26 +3403,26 @@ msgstr ""
 msgid " (inline hw tags)"
 msgstr ""
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:303
 msgid ""
 "Setting recalculate flag is not supported, you may consider using --wipe "
 "instead."
 msgstr ""
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:380 src/integritysetup.c:540
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr ""
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:553 src/integritysetup.c:557
 msgid "<integrity_device>"
 msgstr ""
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:554
 msgid "<integrity_device> <name>"
 msgstr ""
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:577
 #, c-format
 msgid ""
 "\n"
@@ -3383,7 +3430,7 @@ msgid ""
 "<integrity_device> is the device containing data with integrity tags\n"
 msgstr ""
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:582
 #, c-format
 msgid ""
 "\n"
@@ -3392,53 +3439,53 @@ msgid ""
 "\tMaximum keyfile size: %dkB\n"
 msgstr ""
 
-#: src/integritysetup.c:636
+#: src/integritysetup.c:639
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr ""
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:742
 msgid "Both key file and key size options must be specified."
 msgstr ""
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:746
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr ""
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:749
 msgid ""
 "Journal integrity algorithm must be specified if journal integrity key is "
 "used."
 msgstr ""
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:753
 msgid ""
 "Both journal encryption key file and key size options must be specified."
 msgstr ""
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:756
 msgid ""
 "Journal encryption algorithm must be specified if journal encryption key is "
 "used."
 msgstr ""
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:760
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr ""
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:767
 msgid "Journal options cannot be used in bitmap mode."
 msgstr ""
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:772
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr ""
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:778
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr ""
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:782
 msgid "Inline mode cannot be combined with separate data device."
 msgstr ""
 
@@ -3782,7 +3829,7 @@ msgid ""
 "option cannot be applied."
 msgstr ""
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1923
+#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
 msgid ""
 "Cannot determine volume key size for LUKS without keyslots, please use --new-"
 "key-size option."
@@ -3818,7 +3865,7 @@ msgid ""
 "(block size: %<PRIu32> bytes) detected on device %s."
 msgstr ""
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2203
+#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
 msgid ""
 "Encryption without detached header (--header) is not possible without data "
 "device size reduction (--reduce-device-size)."
@@ -3911,7 +3958,7 @@ msgid ""
 msgstr ""
 
 #: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
-#: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
+#: src/utils_reencrypt_luks1.c:1095 src/utils_reencrypt_luks1.c:1106
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr ""
@@ -3921,86 +3968,86 @@ msgstr ""
 msgid "Switching data encryption cipher to %s.\n"
 msgstr ""
 
-#: src/utils_reencrypt.c:1976 src/utils_reencrypt.c:1997
+#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
 msgid ""
 "Use --force-no-keyslots to reencrypt device with active keyslots by passing "
 "volume keys directly."
 msgstr ""
 
-#: src/utils_reencrypt.c:1992
+#: src/utils_reencrypt.c:1993
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr ""
 
-#: src/utils_reencrypt.c:2034
+#: src/utils_reencrypt.c:2035
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr ""
 
-#: src/utils_reencrypt.c:2071
+#: src/utils_reencrypt.c:2072
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option "
 "(dangerous!)."
 msgstr ""
 
-#: src/utils_reencrypt.c:2113 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
 "Reencryption interrupted."
 msgstr ""
 
-#: src/utils_reencrypt.c:2118
+#: src/utils_reencrypt.c:2119
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr ""
 
-#: src/utils_reencrypt.c:2141
+#: src/utils_reencrypt.c:2142
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr ""
 
-#: src/utils_reencrypt.c:2157 src/utils_reencrypt.c:2179
+#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr ""
 
-#: src/utils_reencrypt.c:2185
+#: src/utils_reencrypt.c:2186
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr ""
 
-#: src/utils_reencrypt.c:2268
+#: src/utils_reencrypt.c:2269
 msgid "LUKS2 decryption requires --header option."
 msgstr ""
 
-#: src/utils_reencrypt.c:2316
+#: src/utils_reencrypt.c:2317
 msgid "Command requires device as argument."
 msgstr ""
 
-#: src/utils_reencrypt.c:2329
+#: src/utils_reencrypt.c:2330
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr ""
 
-#: src/utils_reencrypt.c:2335
+#: src/utils_reencrypt.c:2336
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr ""
 
-#: src/utils_reencrypt.c:2341
+#: src/utils_reencrypt.c:2342
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr ""
 
-#: src/utils_reencrypt.c:2347
+#: src/utils_reencrypt.c:2348
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr ""
 
-#: src/utils_reencrypt.c:2353
+#: src/utils_reencrypt.c:2354
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr ""
 
-#: src/utils_reencrypt.c:2360
+#: src/utils_reencrypt.c:2361
 msgid "Device reencryption not in progress."
 msgstr ""
 
@@ -4101,40 +4148,40 @@ msgstr ""
 msgid "IO error during reencryption."
 msgstr ""
 
-#: src/utils_reencrypt_luks1.c:943
+#: src/utils_reencrypt_luks1.c:945
 msgid "Provided UUID is invalid."
 msgstr ""
 
-#: src/utils_reencrypt_luks1.c:1045
+#: src/utils_reencrypt_luks1.c:1048
 msgid ""
 "Key file can be used only with --key-slot or with exactly one key slot "
 "active."
 msgstr ""
 
-#: src/utils_reencrypt_luks1.c:1169
+#: src/utils_reencrypt_luks1.c:1172
 msgid "Cannot open reencryption log file."
 msgstr ""
 
-#: src/utils_reencrypt_luks1.c:1175
+#: src/utils_reencrypt_luks1.c:1178
 msgid ""
 "No decryption in progress, provided UUID can be used only to resume "
 "suspended decryption process."
 msgstr ""
 
-#: src/utils_reencrypt_luks1.c:1231
+#: src/utils_reencrypt_luks1.c:1234
 #, c-format
 msgid "Reencryption will change: %s%s%s%s%s%s."
 msgstr ""
 
-#: src/utils_reencrypt_luks1.c:1232
+#: src/utils_reencrypt_luks1.c:1235
 msgid "volume key"
 msgstr ""
 
-#: src/utils_reencrypt_luks1.c:1234
+#: src/utils_reencrypt_luks1.c:1237
 msgid "set hash to "
 msgstr ""
 
-#: src/utils_reencrypt_luks1.c:1235
+#: src/utils_reencrypt_luks1.c:1238
 msgid ", set cipher to "
 msgstr ""
 

From 79104ac4e36794fd468c9d16064e39251d1e8db2 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 10 Jul 2026 10:57:37 +0200
Subject: [PATCH 176/244] tests: Handle missing crypto-check better

If local crypto-check helper is missing, print warning that
it cannot be used for FIPS mode check and expect non-FIPS mode.

Require it only in few specific places, where test would
completely fail.
---
 tests/00modules-test           |  8 ++++++--
 tests/align-test               |  4 ++++
 tests/compat-test              | 14 ++++++++------
 tests/compat-test-opal         |  4 ++++
 tests/compat-test2             |  4 ++++
 tests/keyring-compat-test      |  4 ++++
 tests/luks2-reencryption-test  |  4 ++++
 tests/reencryption-compat-test |  4 ++++
 tests/test_utils.c             | 28 ++++++++++++++++++++++++++++
 9 files changed, 66 insertions(+), 8 deletions(-)

diff --git a/tests/00modules-test b/tests/00modules-test
index 90c96c9f1..d117d4576 100755
--- a/tests/00modules-test
+++ b/tests/00modules-test
@@ -17,8 +17,12 @@ if [ "$(cat /proc/sys/crypto/fips_enabled 2>/dev/null)" = "1" ] ; then
 	echo "Kernel running in FIPS mode."
 fi
 
-./crypto-check fips_mode && echo "Crypto backend running in FIPS mode."
-./crypto-check fips_mode_kernel && echo "Kernel running in FIPS mode."
+if [ ! -x ./crypto-check ]; then
+	echo  "WARNING: Cannot find crypto-check helper, cannot check FIPS mode."
+else
+	./crypto-check fips_mode && echo "Crypto backend running in FIPS mode."
+	./crypto-check fips_mode_kernel && echo "Kernel running in FIPS mode."
+fi
 
 if [ -f /etc/os-release ] ; then
 	source /etc/os-release
diff --git a/tests/align-test b/tests/align-test
index 11d733292..ef63e2b5c 100755
--- a/tests/align-test
+++ b/tests/align-test
@@ -20,6 +20,10 @@ fi
 
 fips_mode()
 {
+	if [ ! -x ./crypto-check ]; then
+		echo  "WARNING: Cannot find crypto-check helper, expecting non-FIPS mode."
+		return 1
+	fi
 	./crypto-check fips_mode
 }
 
diff --git a/tests/compat-test b/tests/compat-test
index b70e5b8e9..5719bd38c 100755
--- a/tests/compat-test
+++ b/tests/compat-test
@@ -4,6 +4,7 @@ PS4='$LINENO:'
 [ -z "$CRYPTSETUP_PATH" ] && CRYPTSETUP_PATH=".."
 CRYPTSETUP=$CRYPTSETUP_PATH/cryptsetup
 CRYPTSETUP_RAW=$CRYPTSETUP
+CRYPTOCHECK=./crypto-check
 
 if [ -n "$CRYPTSETUP_TESTS_RUN_IN_MESON" ]; then
 	CRYPTSETUP_VALGRIND=$CRYPTSETUP
@@ -84,7 +85,7 @@ trap _sigchld CHLD
 
 fips_mode()
 {
-	./crypto-check fips_mode
+	$CRYPTOCHECK fips_mode
 }
 
 can_fail_fips()
@@ -319,7 +320,12 @@ echo "[10] uuid"
 echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks1 $FAST_PBKDF_OPT --uuid $TEST_UUID $IMG || fail
 $CRYPTSETUP -q luksUUID $IMG | grep -q $TEST_UUID || fail
 
-./crypto-check cipher-kernel aes xts 256
+[ $(id -u) != 0 ] && skip "WARNING: You must be root to run this test, test skipped."
+[ -z "$LOOPDEV" ] && skip "WARNING: Cannot find free loop device, test skipped."
+[ ! -x "$DIFFER" ] && skip "Cannot find $DIFFER, test skipped."
+[ ! -x "$CRYPTOCHECK" ] && skip "Cannot find $CRYPTOCHECK, test skipped."
+
+$CRYPTOCHECK cipher-kernel aes xts 256
 if [ $? -eq 0 ] ; then
 	echo "[11] benchmark"
 	$CRYPTSETUP benchmark -c aes-xts --key-size 128 >/dev/null 2>&1 && fail
@@ -329,10 +335,6 @@ if [ $? -eq 0 ] ; then
 	$CRYPTSETUP benchmark -c capi:xts\(aes\)-plain64 >/dev/null || fail
 fi
 
-[ $(id -u) != 0 ] && skip "WARNING: You must be root to run this test, test skipped."
-[ -z "$LOOPDEV" ] && skip "WARNING: Cannot find free loop device, test skipped."
-[ ! -x "$DIFFER" ] && skip "Cannot find $DIFFER, test skipped."
-
 # LUKS root-tests
 prepare	"[1] open - compat image - acceptance check" new
 echo $PWD0 | $CRYPTSETUP luksOpen $LOOPDEV $DEV_NAME || fail
diff --git a/tests/compat-test-opal b/tests/compat-test-opal
index 2c2cccd91..cfe274914 100755
--- a/tests/compat-test-opal
+++ b/tests/compat-test-opal
@@ -87,6 +87,10 @@ trap _sigchld CHLD
 
 fips_mode()
 {
+	if [ ! -x ./crypto-check ]; then
+		echo  "WARNING: Cannot find crypto-check helper, expecting non-FIPS mode."
+		return 1
+	fi
 	./crypto-check fips_mode
 }
 
diff --git a/tests/compat-test2 b/tests/compat-test2
index 631c8dd53..5b4e810ee 100755
--- a/tests/compat-test2
+++ b/tests/compat-test2
@@ -127,6 +127,10 @@ trap _sigchld CHLD
 
 fips_mode()
 {
+	if [ ! -x ./crypto-check ]; then
+		echo  "WARNING: Cannot find crypto-check helper, expecting non-FIPS mode."
+		return 1
+	fi
 	./crypto-check fips_mode
 }
 
diff --git a/tests/keyring-compat-test b/tests/keyring-compat-test
index bdffb4ed3..97957b741 100755
--- a/tests/keyring-compat-test
+++ b/tests/keyring-compat-test
@@ -122,6 +122,10 @@ test_and_prepare_keyring() {
 
 fips_mode_kernel()
 {
+	if [ ! -x ./crypto-check ]; then
+		echo  "WARNING: Cannot find crypto-check helper, expecting non-FIPS mode."
+		return 1
+	fi
 	./crypto-check fips_mode_kernel
 }
 
diff --git a/tests/luks2-reencryption-test b/tests/luks2-reencryption-test
index 5a8fe68ae..c7f75175e 100755
--- a/tests/luks2-reencryption-test
+++ b/tests/luks2-reencryption-test
@@ -164,6 +164,10 @@ skip()
 
 fips_mode()
 {
+	if [ ! -x ./crypto-check ]; then
+		echo "WARNING: Cannot find crypto-check helper, expecting non-FIPS mode."
+		return 1
+	fi
 	./crypto-check fips_mode || ./crypto-check fips_mode_kernel
 }
 
diff --git a/tests/reencryption-compat-test b/tests/reencryption-compat-test
index b609a4973..e5678e437 100755
--- a/tests/reencryption-compat-test
+++ b/tests/reencryption-compat-test
@@ -33,6 +33,10 @@ START_DIR=$(pwd)
 
 fips_mode()
 {
+	if [ ! -x ./crypto-check ]; then
+		 echo "WARNING: Cannot find crypto-check helper, expecting non-FIPS mode."
+		return 1
+	fi
 	./crypto-check fips_mode || ./crypto-check fips_mode_kernel
 }
 
diff --git a/tests/test_utils.c b/tests/test_utils.c
index 7fc787bb9..d026ddf27 100644
--- a/tests/test_utils.c
+++ b/tests/test_utils.c
@@ -11,6 +11,7 @@
 #include <fcntl.h>
 #include <inttypes.h>
 #include <stdlib.h>
+#include <stdbool.h>
 #include <libdevmapper.h>
 #include <linux/fs.h>
 #include <sys/ioctl.h>
@@ -163,13 +164,40 @@ int t_set_readahead(const char *device, unsigned value)
 	return r;
 }
 
+static bool crypto_check_exists(void)
+{
+	struct stat st;
+	const char *path = "./crypto-check";
+
+	if (stat(path, &st) != 0)
+		return false;
+
+	if (!S_ISREG(st.st_mode))
+		return false;
+
+	if (!(st.st_mode & S_IXUSR))
+		return false;
+
+	return true;
+}
+
 int fips_mode(void)
 {
+	if (!crypto_check_exists()) {
+		printf("WARNING: Cannot find crypto-check helper, expecting non-FIPS mode.\n");
+		return 0;
+	}
+
 	return _system("./crypto-check fips_mode", 1) == 0;
 }
 
 int fips_mode_kernel(void)
 {
+	if (!crypto_check_exists()) {
+		printf("WARNING: Cannot find crypto-check helper, expecting non-FIPS mode.\n");
+		return 0;
+	}
+
 	return _system("./crypto-check fips_mode_kernel", 1) == 0;
 }
 

From 52c4e0dae0b172c2b79e0bc9ef4e7fd5542b522c Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 10 Jul 2026 15:57:21 +0200
Subject: [PATCH 177/244] Update release notes for 2.8.7-rc2.

---
 ...8.7-rc1-ReleaseNotes => v2.8.7-rc2-ReleaseNotes} | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)
 rename docs/{v2.8.7-rc1-ReleaseNotes => v2.8.7-rc2-ReleaseNotes} (92%)

diff --git a/docs/v2.8.7-rc1-ReleaseNotes b/docs/v2.8.7-rc2-ReleaseNotes
similarity index 92%
rename from docs/v2.8.7-rc1-ReleaseNotes
rename to docs/v2.8.7-rc2-ReleaseNotes
index faf5a0dd7..23bf01251 100644
--- a/docs/v2.8.7-rc1-ReleaseNotes
+++ b/docs/v2.8.7-rc2-ReleaseNotes
@@ -1,9 +1,20 @@
-Cryptsetup 2.8.7-rc1 Release Notes
+Cryptsetup 2.8.7-rc2 Release Notes
 ==================================
 Stable bug-fix release candidate that solves several compatibility issues.
 
 All users of cryptsetup must upgrade to this version.
 
+Changes since version 2.8.7-rc1
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Fix tests to compile crypto-check helper properly.
+
+* Add support for --integrity-legacy-hmac in integritysetup open command.
+  Integritysetup open command incorrectly configured options for legacy HMAC devices.
+  To use --integrity-legacy-hmac, it must now be used both on format and open.
+
+* Fix cryptsetup --tries option not to overflow for high values.
+
 Changes since version 2.8.6
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

From f191e9a81057ce4e82e89e633fa00e5979187766 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 10 Jul 2026 16:03:48 +0200
Subject: [PATCH 178/244] Version 2.8.7-rc2.

---
 README.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 271e52ab5..99ed3335e 100644
--- a/README.md
+++ b/README.md
@@ -39,11 +39,11 @@ Download
 Release notes and tarballs are available at
 [kernel.org](https://cdn.kernel.org/pub/linux/utils/cryptsetup/).
 
-**The latest cryptsetup release candidate version is 2.8.7-rc1**
-  * [cryptsetup-2.8.7-rc1.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7-rc1.tar.xz)
-  * Signature [cryptsetup-2.8.7-rc1.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7-rc1.tar.sign)
+**The latest cryptsetup release candidate version is 2.8.7-rc2**
+  * [cryptsetup-2.8.7-rc2.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7-rc2.tar.xz)
+  * Signature [cryptsetup-2.8.7-rc2.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7-rc2.tar.sign)
     _(You need to decompress file first to check signature.)_
-  * [Cryptsetup 2.8.7-rc1 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.7-rc1-ReleaseNotes).
+  * [Cryptsetup 2.8.7-rc2 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.7-rc2-ReleaseNotes).
 
 **The latest stable cryptsetup release version is 2.8.6**
   * [cryptsetup-2.8.6.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.6.tar.xz)

From c93ffd976b52a614176a494049e853895909bccc Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 11 Jul 2026 12:01:28 +0200
Subject: [PATCH 179/244] Always check crypt_random_get() return values.

On several places it is not a reat issue (test keys), but broken RNG
is sign of something more serious, just check for failure anyway.

Also should silence Coverity reports.
---
 lib/luks2/luks2_json_format.c   | 13 +++++++++++--
 lib/luks2/luks2_luks1_convert.c | 12 ++++++++++--
 lib/utils_benchmark.c           |  8 ++++++--
 3 files changed, 27 insertions(+), 6 deletions(-)

diff --git a/lib/luks2/luks2_json_format.c b/lib/luks2/luks2_json_format.c
index 9b249977f..650032585 100644
--- a/lib/luks2/luks2_json_format.c
+++ b/lib/luks2/luks2_json_format.c
@@ -224,8 +224,17 @@ int LUKS2_generate_hdr(
 	hdr->version = 2;
 	memset(hdr->label, 0, LUKS2_LABEL_L);
 	strcpy(hdr->checksum_alg, "sha256");
-	crypt_random_get(cd, (char*)hdr->salt1, LUKS2_SALT_L, CRYPT_RND_SALT);
-	crypt_random_get(cd, (char*)hdr->salt2, LUKS2_SALT_L, CRYPT_RND_SALT);
+
+	r = crypt_random_get(cd, (char*)hdr->salt1, LUKS2_SALT_L, CRYPT_RND_SALT);
+	if (r < 0) {
+		log_dbg(cd, "Cannot generate header salt.");
+		return r;
+	}
+	r = crypt_random_get(cd, (char*)hdr->salt2, LUKS2_SALT_L, CRYPT_RND_SALT);
+	if (r < 0) {
+		log_dbg(cd, "Cannot generate header salt.");
+		return r;
+	}
 
 	if (uuid && uuid_parse(uuid, partitionUuid) == -1) {
 		log_err(cd, _("Wrong LUKS UUID format provided."));
diff --git a/lib/luks2/luks2_luks1_convert.c b/lib/luks2/luks2_luks1_convert.c
index 5d1234252..72b5759f7 100644
--- a/lib/luks2/luks2_luks1_convert.c
+++ b/lib/luks2/luks2_luks1_convert.c
@@ -600,8 +600,16 @@ int LUKS2_luks1_to_luks2(struct crypt_device *cd, struct luks_phdr *hdr1, struct
 	hdr2->seqid = 1;
 	hdr2->version = 2;
 	strncpy(hdr2->checksum_alg, "sha256", LUKS2_CHECKSUM_ALG_L);
-	crypt_random_get(cd, (char*)hdr2->salt1, sizeof(hdr2->salt1), CRYPT_RND_SALT);
-	crypt_random_get(cd, (char*)hdr2->salt2, sizeof(hdr2->salt2), CRYPT_RND_SALT);
+	r = crypt_random_get(cd, (char*)hdr2->salt1, sizeof(hdr2->salt1), CRYPT_RND_SALT);
+	if (r < 0) {
+		log_dbg(cd, "Cannot generate header salt.");
+		goto out;
+	}
+	r = crypt_random_get(cd, (char*)hdr2->salt2, sizeof(hdr2->salt2), CRYPT_RND_SALT);
+	if (r < 0) {
+		log_dbg(cd, "Cannot generate header salt.");
+		goto out;
+	}
 	strncpy(hdr2->uuid, crypt_get_uuid(cd), LUKS2_UUID_L-1); /* UUID should be max 36 chars */
 	hdr2->jobj = jobj;
 
diff --git a/lib/utils_benchmark.c b/lib/utils_benchmark.c
index 7c5ca0381..e1655deba 100644
--- a/lib/utils_benchmark.c
+++ b/lib/utils_benchmark.c
@@ -46,14 +46,18 @@ int crypt_benchmark(struct crypt_device *cd,
 		iv = malloc(iv_size);
 		if (!iv)
 			goto out;
-		crypt_random_get(cd, iv, iv_size, CRYPT_RND_NORMAL);
+		r = crypt_random_get(cd, iv, iv_size, CRYPT_RND_NORMAL);
+		if (r < 0)
+			goto out;
 	}
 
 	key = malloc(volume_key_size);
 	if (!key)
 		goto out;
 
-	crypt_random_get(cd, key, volume_key_size, CRYPT_RND_NORMAL);
+	r = crypt_random_get(cd, key, volume_key_size, CRYPT_RND_NORMAL);
+	if (r < 0)
+		goto out;
 
 	strncpy(mode, cipher_mode, sizeof(mode)-1);
 	/* Ignore IV generator */

From 8f355c2eebc87a023fddda14c5487ac0569c32c8 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 7 Jul 2026 15:32:07 +0200
Subject: [PATCH 180/244] tests: drop needless file copying.

luks2-validation-test data does not have to be copied into
meson build directory.

Also it seems like a leftover since only single generator script
is copied over.
---
 tests/meson.build | 1 -
 1 file changed, 1 deletion(-)

diff --git a/tests/meson.build b/tests/meson.build
index f8e6a652f..c1afc1360 100644
--- a/tests/meson.build
+++ b/tests/meson.build
@@ -14,7 +14,6 @@ test_files_to_copy = [
     'evil_hdr-small_luks_device.xz',
     'evil_hdr-stripes_payload_dmg.xz',
     'fvault2-images.tar.xz',
-    'generators/generate-luks2-area-in-json-hdr-space-json0.img.sh',
     'img_fs_ext4.img.xz',
     'img_fs_vfat.img.xz',
     'img_fs_xfs.img.xz',

From 15b47cd38494dcb5ff4e5fc8d519c02bf45010dd Mon Sep 17 00:00:00 2001
From: Petr Pisar <petr.pisar@atlas.cz>
Date: Sun, 19 Jul 2026 19:51:04 +0200
Subject: [PATCH 181/244] po: update cs.po (from translationproject.org)

---
 po/cs.po | 631 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 316 insertions(+), 315 deletions(-)

diff --git a/po/cs.po b/po/cs.po
index 26ca0cd59..4718425b3 100644
--- a/po/cs.po
+++ b/po/cs.po
@@ -33,10 +33,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-06-29 21:30+0200\n"
-"PO-Revision-Date: 2026-07-02 17:37+02:00\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-07-11 17:03+02:00\n"
 "Last-Translator: Petr Pisar <petr.pisar@atlas.cz>\n"
 "Language-Team: Czech <translation-team-cs@lists.sourceforge.net>\n"
 "Language: cs\n"
@@ -228,10 +228,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nahrání původních metadat LUKS2 do paměti selhalo."
 
 #: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
-#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
-#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
-#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -275,7 +275,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Zařízení s oddělenými metadaty není na šifře tohoto typu podporováno."
 
 #: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
-#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Nepodporovaná velikost šifrovaného sektoru."
 
@@ -601,14 +601,14 @@ msgstr "Z klíčenky zadané uživatelem se nepodařilo odpojit klíč svazku."
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Do uživatelem zadané klíčenky se nepodařilo přidat klíč svazku."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2720
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Svazek %s není uspán."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
-#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
-#: src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "Heslo svazku neodpovídá svazku."
 
@@ -621,8 +621,8 @@ msgstr "Záměna novou pozicí klíče se nezdařila."
 msgid "Key slot %d is invalid."
 msgstr "Pozice klíče %d je neplatná."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
-#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Pozice klíče %d není aktivní."
@@ -819,7 +819,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Požadované množství dat nelze načíst."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Zařízení %s neexistuje nebo přístup byl zamítnut."
@@ -1164,7 +1164,7 @@ msgstr "Režim LUKS šifry %s není platný."
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS haš %s není platný."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "V hlavičce LUKS nenalezen žádný známý problém."
 
@@ -1185,7 +1185,7 @@ msgstr "Poloha dat u hlavičky LUKS musí být buď 0 nebo více než velikost h
 
 #: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Poskytnut UUID LUKSu ve špatném tvaru."
 
@@ -1715,7 +1715,7 @@ msgstr "Nastavení části dm-crypt selhalo."
 msgid "Failed to set dm-linear segment."
 msgstr "Nastavení části dm-linear selhalo."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "V hlavičce LUKS2 nebyl nalezen žádný známý vzorek určující šifru."
 
@@ -2179,8 +2179,8 @@ msgstr "Parametry pro šifrování pozice s klíčem lze nastavit jen u zaří
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametry pro šifrování pozice s klíčem se neslučují s šifrováním pozice s klíčem LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Nelze najít žádný známý vzorek se specifikaci šifry."
@@ -2207,8 +2207,8 @@ msgstr "POZOR: Jedná-li se o režim plain a je-li určen soubor s klíčem, p
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "POZOR: Přepínač --keyfile-size se ignoruje, velikost pro čtení je stejná jako velikosti šifrovacího klíče.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Prohledávání blkid selhalo u %s."
@@ -2218,11 +2218,11 @@ msgstr "Prohledávání blkid selhalo u %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Na %s byla nalezen vzorec zařízení. Pokračování může poškodit existující data."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
-#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
-#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "Operace zrušena.\n"
 
@@ -2230,36 +2230,36 @@ msgstr "Operace zrušena.\n"
 msgid "Option --key-file is required."
 msgstr "Je vyžadován přepínač --key-file."
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "Zadejte PIM VeraCryptu: "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "Neplatná hodnota VIM: chyba rozboru"
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "Neplatná hodnota PIM: 0"
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "Neplatná hodnota PIM: mimo rozsah"
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "S tímto heslem není rozpoznatelná žádná hlavička zařízení."
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "Zařízení %s není platným zařízením BITLK."
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "Nelze určit velikost BITLK klíče svazku. Prosím, použijte přepínač --key-size."
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2269,7 +2269,7 @@ msgstr ""
 "který umožňuje přístup k šifrovanému oddílu bez znalosti hesla.\n"
 "Tento výpis by měl být vždy uložen na bezpečném místě a v zašifrované podobě."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2279,89 +2279,89 @@ msgstr ""
 "který umožňuje přístup k šifrovanému oddílu bez znalosti hesla.\n"
 "Tento výpis by měl být uložen na bezpečném místě a v zašifrované podobě."
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "Zařízení %s není platným zařízením FVAULT2."
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nelze určit velikost klíče svazku pro FVAULT2. Prosím, použijte přepínač --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Zařízení %s je stále aktivní a naplánováno pro odložené odstranění.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
-#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
-#: src/cryptsetup.c:3261
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Cestu k externím tokenům %s se nepodařilo nastavit."
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Změna velikosti aktivního zařízení vyžaduje klíč svazku v klíčence. Byl však použit přepínač --disable-keyring."
 
-#: src/cryptsetup.c:1057
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "Hodnocení výkonu přerušeno."
 
-#: src/cryptsetup.c:1078
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     –\n"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u iterací za sekundu pro %zubitový klíč\n"
 
-#: src/cryptsetup.c:1094
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s –\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u iterací, %5u paměti, %1u souběžných vláken (procesorů) pro %zubitový klíč (požadován čas %u ms)\n"
 
-#: src/cryptsetup.c:1120
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "Výsledek hodnocení výkonu není spolehlivý."
 
 # ???: are aproximated?
-#: src/cryptsetup.c:1171
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testy jsou počítány jen z práce s pamětí (žádné I/O úložiště).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1196
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*sAlgoritmus |      Klíč |       Šifrování |     Dešifrování\n"
 
-#: src/cryptsetup.c:1204
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Šifra %s (s %ibitovým klíčem) není dostupná."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1225
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#    Algoritmus |      Klíč |       Šifrování |     Dešifrování\n"
 
-#: src/cryptsetup.c:1238
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "–"
 
-#: src/cryptsetup.c:1241
+#: src/cryptsetup.c:1242
 msgid "# Cipher speed test is not available.\n"
 msgstr "# Test rychlosti šifer není dostupný.\n"
 
-#: src/cryptsetup.c:1257
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2370,27 +2370,27 @@ msgstr ""
 "přešifrování je žádoucí (vizte výstup luksDump) a pokračujte (zvýšení verze\n"
 "metadat) pouze, když poznáte, že operace je chtěná."
 
-#: src/cryptsetup.c:1263
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Zadejte heslo pro ochránění metadat o přešifrování a pro zvýšení jejich verze: "
 
-#: src/cryptsetup.c:1307
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Opravdu pokračovat s obnovou přešifrování LUKS2?"
 
-#: src/cryptsetup.c:1316
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Zadejte heslo pro ověření otisku metadat o přešifrování: "
 
-#: src/cryptsetup.c:1318
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Zadejte heslo pro obnovení přešifrování: "
 
-#: src/cryptsetup.c:1380
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Opravdu se pokusit opravit hlavičku zařízení LUKS?"
 
-#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2398,7 +2398,7 @@ msgstr ""
 "\n"
 "Výmaz přerušen."
 
-#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2407,169 +2407,169 @@ msgstr ""
 "Lze přerušit pomocí Ctrl+C (zbytek nesmazaného zařízení bude obsahovat\n"
 "neplatné součty).\n"
 
-#: src/cryptsetup.c:1435 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Dočasné zařízení %s nelze deaktivovat."
 
-#: src/cryptsetup.c:1483
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Čistě hardwarové šifrování Opal nepodporuje --cipher a --key-size. Přepínače se ignorují."
 
-#: src/cryptsetup.c:1496
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Volby integrity lze použít jen při formátu LUKS2."
 
-#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nepodporované volby velikosti metadat LUKS2."
 
-#: src/cryptsetup.c:1506
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "Opal je podporován jen s formátem LUKS2."
 
-#: src/cryptsetup.c:1511
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Inline hardwarové značky jsou podporovány jen s formátem LUKS2."
 
-#: src/cryptsetup.c:1520
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Soubor s hlavičkou neexistuje. Chcete jej vytvořit?"
 
-#: src/cryptsetup.c:1528
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Soubor s hlavičkou %s nelze vytvořit."
 
-#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
-#: src/integritysetup.c:346
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "Nelze najít žádný známý vzorek se specifikací integrity."
 
-#: src/cryptsetup.c:1556
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Zadanou velikost klíče integrity nelze použít."
 
-#: src/cryptsetup.c:1574
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "%s nelze použít pro hlavičku uvnitř disku."
 
-#: src/cryptsetup.c:1603 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Toto nevratně přepíše data na %s."
 
-#: src/cryptsetup.c:1640
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Heslo správce Opal nemůže být prázdné."
 
-#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
-#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Nastavení parametrů PBKDF selhalo."
 
-#: src/cryptsetup.c:1785
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Zmenšená poloha dat je dovolena jen u oddělené hlavičky LUKS."
 
-#: src/cryptsetup.c:1792
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Souborový kontejner LUKS %s je na aktivaci příliš malý. Nezbývá žádné místo pro data."
 
-#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Bez pozic pro klíče nelze určit velikost LUKS klíče svazku. Prosím, použijte přepínač --key-size."
 
-#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "Zařízení vyžaduje dva klíče svazku."
 
-#: src/cryptsetup.c:1888
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Některé zadané aktivační parametry byly při čistě hardwarovém šifrování Opal ignorovány."
 
-#: src/cryptsetup.c:1893
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Zařízení aktivováno, ale příznaky nelze učinit trvalými."
 
-#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Ke smazání vybrán klíč na pozici %d."
 
-#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr ""
 "Toto je poslední pozice klíče. Smazáním tohoto klíče přijdete o možnost\n"
 "zařízení použít."
 
-#: src/cryptsetup.c:1986
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Zadejte jakékoliv jiné heslo: "
 
-#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operace zrušena, pozice klíče NEBYLA vymazána.\n"
 
-#: src/cryptsetup.c:2023
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Zadejte heslo, které se má smazat: "
 
-#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
-#: src/cryptsetup.c:3252
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Zařízení %s není platným zařízením LUKS2."
 
-#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Zadejte nové heslo pro pozici klíče: "
 
-#: src/cryptsetup.c:2146 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Zadejte PIN k tokenu: "
 
-#: src/cryptsetup.c:2148 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Zadejte PIN k tokenu %d: "
 
-#: src/cryptsetup.c:2207
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "POZOR: Parametr --key-slot se použije pro číslo nové pozice klíče.\n"
 
-#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Zadejte jakékoliv existující heslo: "
 
-#: src/cryptsetup.c:2380
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Zadejte heslo, které má být změněno: "
 
-#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Zadejte nové heslo: "
 
-#: src/cryptsetup.c:2446
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Zadejte heslo pro pozici klíče, který má být převeden: "
 
-#: src/cryptsetup.c:2470
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "U operace isLuks je podporován pouze jeden argument se zařízením."
 
-#: src/cryptsetup.c:2575
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Pozice klíče %d neobsahuje nepřiřazený klíč."
 
-#: src/cryptsetup.c:2580
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2577,52 +2577,52 @@ msgstr ""
 "Výpis hlavičky s nepřiřazeným klíčem je citlivý údaj.\n"
 "Tento výpis by měl být uložen na bezpečném místě a v zašifrované podobě."
 
-#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s není název aktivního zařízení %s."
 
-#: src/cryptsetup.c:2706
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s není název aktivního zařízení LUKS nebo mu chybí hlavička."
 
-#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "Je vyžadován přepínač --header-backup-file."
 
-#: src/cryptsetup.c:2833
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s není zařízení spravované nástrojem cryptsetup."
 
-#: src/cryptsetup.c:2844
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Reaktivace není na zařízení typu %s podporována"
 
-#: src/cryptsetup.c:2894
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Nerozpoznaná metadata druhu zařízení %s."
 
-#: src/cryptsetup.c:2896
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "Příkaz vyžaduje jako argumenty zařízení a mapovaný název."
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "Zadejte Opal PSID: "
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "Zadejte heslo správce Opal: "
 
-#: src/cryptsetup.c:2922
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "POZOR: CELÝ disk bude uveden do továrního nastavení a všechna data budou ztracena! Pokračovat?"
 
-#: src/cryptsetup.c:2965
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2631,368 +2631,368 @@ msgstr ""
 "Tento úkon smaže všechny pozice s klíči na zařízení %s.\n"
 "Po jeho dokončení zařízení bude nepoužitelné."
 
-#: src/cryptsetup.c:2972
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operace zrušena, pozice s klíči NEBYLY smazány.\n"
 
-#: src/cryptsetup.c:3011
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Neplatný druh formátu LUKS. Podporován je pouze LUKS1 a LUKS2."
 
-#: src/cryptsetup.c:3027
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "Zařízení je již druhu %s."
 
-#: src/cryptsetup.c:3034
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Tato operace převede formát %s na %s.\n"
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operace zrušena, zařízení NEBYLO převedeno.\n"
 
-#: src/cryptsetup.c:3077
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Chybí přepínač --priority, --label nebo --subsystem."
 
-#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d je neplatný."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d se používá."
 
-#: src/cryptsetup.c:3126
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Přidání tokenu %d klíčenky LUKS2 selhalo."
 
-#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Přiřazení tokenu %d do pozice s klíčem %d selhalo."
 
-#: src/cryptsetup.c:3154
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d se nepoužívá."
 
-#: src/cryptsetup.c:3191
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "Import tokenu ze souboru selhal."
 
-#: src/cryptsetup.c:3216
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Získání tokenu %d za účelem exportu selhalo."
 
-#: src/cryptsetup.c:3229
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d není přiřazen pozici s klíčem %d."
 
-#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Zrušení přiřazení tokenu %d k pozici s klíčem %d selhalo."
 
-#: src/cryptsetup.c:3297
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Přepínač --tcrypt-hidden, --tcrypt-system nebo --tcrypt-backup je podporován jen u zařízení TCRYPT."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Přepínače --veracrypt a --disable-veracrypt jsou podporovány jen u typu zařízení TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Přepínač --veracrypt-pim je podporován jen u zařízení kompatibilním s VeraCrypt."
 
-#: src/cryptsetup.c:3307
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Přepínač --veracrypt-query-pim je podporován jen u zařízení kompatibilním s VeraCrypt."
 
-#: src/cryptsetup.c:3309
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Přepínače --veracrypt-pim a --veracrypt-query-pim se vzájemně vylučují."
 
-#: src/cryptsetup.c:3318
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Přepínač --persistent není dovolen současně s --test-passphrase."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Přepínače --refresh a --test-passphrase se vzájemně vylučují."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Přepínač --shared je dovolen jen při úkonu otevírání zařízení plain."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Přepínač --skip je podporován jen při otevírání zařízení plain a loopaes."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Při otevírání je přepínač --offset podporován jen u zařízení plain a loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Přepínač --tcrypt-hidden nelze použít s přepínačem --allow-discards."
 
-#: src/cryptsetup.c:3337
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Otevírání s přepínačem velikosti sektoru je podporován jen u zařízení plain."
 
 # FIXME: "Large IV sectors" should read "IV large sectors".
-#: src/cryptsetup.c:3341
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Volba inicializačního vektoru s velkými sektory je podporována jen při otevírání zařízení typu plain s velikostí sektoru větší než 512 bajtů."
 
-#: src/cryptsetup.c:3346
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Přepínač --test-passphrase je dovolen pouze při otevírání zařízení LUKS, TCRYPT, BITLK a FVAULT2."
 
-#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Přepínače --device-size a --size nelze kombinovat."
 
-#: src/cryptsetup.c:3352
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Přepínač --unbound je dovolen jen při otevírání zařízení LUKS."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Přepínač --unbound není dovolen současně s --test-passphrase."
 
-#: src/cryptsetup.c:3359
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Přepínač --volume-key-keyring nelze použít s přepínači --hash a --volume-key-file."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Oba přepínače --volume-key-file musí být ve dvojici s odpovídajícími přepínači --key-size."
 
-#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Přepínače --cancel-deferred a --deferred se vzájemně vylučují."
 
-#: src/cryptsetup.c:3387
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Přepínač --active-name lze použít jen u zařízení LUKS2."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Přepínače --active-name a --force-offline-reencrypt nelze kombinovat."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Přepínače --new-volume-key-file a --keep-key nelze kombinovat."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Přepínače --new-volume-key-keyring a --keep-key nelze kombinovat."
 
-#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "Je nutné určit pozici s klíčem."
 
-#: src/cryptsetup.c:3412
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Přepínače --align-payload a --offset nelze kombinovat."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Přepínač --integrity-no-wipe smí být použit jen při formátování s rozšířením integrity."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Je dovolen pouze jeden z přepínačů --use-[u]random."
 
-#: src/cryptsetup.c:3426
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "Přepínač --unbound vyžaduje velikost klíče."
 
-#: src/cryptsetup.c:3446
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "Neplatná operace tokenu."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parametr --key-description je při přidávání tokenu povinný."
 
-#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Akce vyžaduje určitý token. Použijte parametr --token-id."
 
-#: src/cryptsetup.c:3457
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "Přepínač --unbound lze použít pouze s akcí přidání."
 
-#: src/cryptsetup.c:3459
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Přepínače --key-slot a --unbound nelze kombinovat."
 
-#: src/cryptsetup.c:3464
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Akce vyžaduje určitou pozici klíče. Použijte parametr --key-slot."
 
-#: src/cryptsetup.c:3480
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<zařízení> [--type <druh>] [<název>]"
 
-#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "otevře zařízení jako <název>"
 
-#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
-#: src/integritysetup.c:556 src/integritysetup.c:558
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<název>"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "zavře zařízení (odstraní mapování)"
 
-#: src/cryptsetup.c:3482 src/integritysetup.c:558
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "změní velikost aktivního zařízení"
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "zobrazí stav zařízení"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <šifra>]"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "zhodnotí výkon šifry"
 
-#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
-#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<zařízení>"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "pokusí se opravit metadata uložená na disku"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "přešifruje zařízení LUKS2"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "smaže všechny pozice s klíči (odstraní šifrovací klíč)"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "převede formát LUKS do/z formátu LUKS2"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "nastaví trvalé volby konfigurace pro LUKS2"
 
-#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<zařízení> [<soubor_s_novým_klíčem>]"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "naformátuje zařízení LUKS"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "do zařízení LUKS přidá klíč"
 
-#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<zařízení> [<soubor_s_klíčem>]"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "odstraní zadaný klíč nebo soubor s klíčem ze zařízení LUKS"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "změní zadaný klíč nebo soubor s klíčem u zařízení LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "převede klíč do nových parametrů PBKDF"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<zařízení> <pozice_klíče>"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "smaže klíč s číslem <pozice_klíče> ze zařízení LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "zobrazí UUID zařízení LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "otestuje <zařízení> na hlavičku oddílu LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "vypíše údaje o oddílu LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "vypíše údaje o oddílu TCRYPT"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "vypíše údaje o zařízení BITLK"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "vypíše údaje o zařízení FVAULT2"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Uspí zařízení LUKS a smaže klíč (všechny operace budou zmrazeny)"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "Probudí uspané zařízení LUKS"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "Zálohuje hlavičku zařízení LUKS a jeho pozice s klíči"
 
 # TODO: not consistent with previous line
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "Obnoví hlavičku zařízení LUKS a jeho pozice s klíči"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <zařízení>"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "Zachází s tokeny LUKS2"
 
-#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3000,7 +3000,7 @@ msgstr ""
 "\n"
 "<akce> je jedna z:\n"
 
-#: src/cryptsetup.c:3531
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -3012,7 +3012,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3535
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -3027,7 +3027,7 @@ msgstr ""
 "<pozice_klíče> je číslo pozice klíče LUKS, který se má upravit\n"
 "<soubor_s_klíčem> je volitelný soubor s novým klíčem pro akci luksAddKey\n"
 
-#: src/cryptsetup.c:3542
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -3036,7 +3036,7 @@ msgstr ""
 "\n"
 "Výchozí zakompilovaný formát metadat (pro akci luksFormat) je %s.\n"
 
-#: src/cryptsetup.c:3547
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3044,12 +3044,12 @@ msgstr ""
 "\n"
 "Podpora pro zásuvný modul externího tokenu LUKS2 je zapnuta.\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Cesta k zásuvnému modulu externího tokenu LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3057,7 +3057,7 @@ msgstr ""
 "\n"
 "Podpora pro zásuvný modul externího tokenu LUKS2 je vypnuta.\n"
 
-#: src/cryptsetup.c:3554
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3074,7 +3074,7 @@ msgstr ""
 "Výchozí PBKDF pro LUKS2: %s\n"
 "\tDoba iterací: %d, nutná paměť: %d kB, souběžná vlákna: %d\n"
 
-#: src/cryptsetup.c:3565
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3089,123 +3089,127 @@ msgstr ""
 "\tplain: %s, Klíč: %d bitů, Haš hesla: %s\n"
 "\tLUKS: %s, Klíč: %d bitů, Haš hlavičky LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3574
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: V režimu XTS (dva vnitřní klíče) bude výchozí velikost klíče zdvojnásobena.\n"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: vyžaduje %s jako argumenty"
 
-#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Pozice klíče není platná."
 
-#: src/cryptsetup.c:3660
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Velikost zařízení musí být násobkem 512bajtových sektorů."
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Zadána neplatná maximální velikost horké zóny při přešifrování."
 
-#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Velikost klíče musí být násobkem 8 bitů."
 
-#: src/cryptsetup.c:3686
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Zadat lze nejvíce 2 velikosti klíče."
 
 # TODO: Pluralize
-#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Zadat lze nejvíce %d klíčů svazku."
 
-#: src/cryptsetup.c:3738
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Zadat lze nejvíce %d klíčenek."
 
-#: src/cryptsetup.c:3747
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Maximální velikost zmenšení zařízení je 1 GiB."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Velikost zmenšení musí být násobkem 512bajtových sektorů."
 
-#: src/cryptsetup.c:3767
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Přepínač --priority smí mít pouze argument ignore, normal a prefer."
 
-#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "Zadáno neplatné maximum pokusů."
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "Zobrazí tuto nápovědu"
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "Zobrazí stručný návod na použití"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "Vypíše verzi balíku"
 
-#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "Přepínače nápovědy:"
 
-#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[PŘEPÍNAČ…] <akce> <přepínače_akce>"
 
-#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "Chybí argument <akce>."
 
-#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "Neznámá akce."
 
-#: src/cryptsetup.c:3928
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Přepínač --key-file má přednost před zadaným argumentem souboru s klíčem."
 
-#: src/cryptsetup.c:3934
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "Je dovolen pouze jeden argument přepínače --key-file."
 
-#: src/cryptsetup.c:3939
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funkce pro odvození klíče na základě hesla (PBKDF) smí být pouze pbkdf2 nebo argon2i/argon2id."
 
-#: src/cryptsetup.c:3944
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Vynucené iterace PBKDF nelze kombinovat s volnou doby iterací."
 
-#: src/cryptsetup.c:3949
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Je-li klíčenka vypnuta, klíč svazku nelze do klíčenky přidat."
 
-#: src/cryptsetup.c:3954
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Je-li klíčenka vypnuta, popis klíče z klíčenky nelze použít."
 
-#: src/cryptsetup.c:3959
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Inline integrita musí být použita spolu s přepínačem --integrity."
 
-#: src/cryptsetup.c:3970
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Přepínače --keyslot-cipher a --keyslot-key-size musí být použity spolu."
 
-#: src/cryptsetup.c:3978
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Žádný úkon nebude proveden. Zavoláno s přepínačem --test-args.\n"
 
-#: src/cryptsetup.c:3991
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "Zamykání metadata nelze vypnout."
 
@@ -3270,7 +3274,7 @@ msgstr "Příkaz vyžaduje argument <kořenový_haš> nebo přepínač --root-ha
 msgid "<data_device> <hash_device>"
 msgstr "<zařízení_dat> <zařízení_hašů>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:553
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "naformátuje zařízení"
 
@@ -3286,7 +3290,7 @@ msgstr "ověří zařízení"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<zařízení_dat> <název> <zařízení_hašů> [<kořenový_haš>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:556
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "zobrazí stav aktivního zařízení"
 
@@ -3294,7 +3298,7 @@ msgstr "zobrazí stav aktivního zařízení"
 msgid "<hash_device>"
 msgstr "<zařízení_hašů>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:557
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "zobrazí údaje z disku"
 
@@ -3336,7 +3340,7 @@ msgstr "Přepínač --panic-on-corruption a --restart-on-corruption nelze použ
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "Přepínač --error-as-corruption potřebuje přepínač --panic-on-corruption nebo --restart-on-corruption."
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3346,33 +3350,33 @@ msgstr ""
 "Pro zachování datového zařízení použije přepínač --no-wipe (a pak jej\n"
 "aktivujte pomocí --integrity-recalculate)."
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "Formátováno s velikostí značky %u%s, vnitřní integrita %s.\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (inline hardwarové značky)"
 
-#: src/integritysetup.c:303
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Nastavení příznaku přepočtu není podporováno, místo toho zvažte použití --wipe."
 
-#: src/integritysetup.c:380 src/integritysetup.c:540
+#: src/integritysetup.c:382 src/integritysetup.c:546
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Zařízení %s není platným zařízením INTEGRITY."
 
-#: src/integritysetup.c:553 src/integritysetup.c:557
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
 msgstr "<zařízení_s_daty_integrity>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
 msgstr "<zařízení_s_daty_integrity> <název>"
 
-#: src/integritysetup.c:577
+#: src/integritysetup.c:583
 #, c-format
 msgid ""
 "\n"
@@ -3383,7 +3387,7 @@ msgstr ""
 "<název> je zařízení, které bude vytvořeno pod %s\n"
 "<zařízení_s_daty_integrity> je zařízení obsahující data se značkami integrity\n"
 
-#: src/integritysetup.c:582
+#: src/integritysetup.c:588
 #, c-format
 msgid ""
 "\n"
@@ -3397,48 +3401,48 @@ msgstr ""
 "\tMaximální velikost souboru s klíčem: %d kB\n"
 
 # TODO: Pluralize
-#: src/integritysetup.c:639
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Neplatná velikost --%s. Maximální je %u bajtů."
 
-#: src/integritysetup.c:742
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "Musí být zadány oba přepínače pro soubor s klíčem a velikostí klíče."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Musí být zadány oba přepínače pro soubor s klíčem žurnálu a velikostí klíče."
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Je-li použit klíč integrity žurnálu, musí být zadán algoritmus integrity žurnálu."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Musí být zadány oba přepínače pro soubor s šifrovacím klíčem žurnálu a velikostí klíče."
 
-#: src/integritysetup.c:756
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Je-li použit šifrovací klíč žurnálu, musí být zadán algoritmus šifrování žurnálu."
 
-#: src/integritysetup.c:760
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Přepínače režimu bitmapy a obnovení se vzájemně vylučují."
 
-#: src/integritysetup.c:767
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Přepínače žurnálu nelze použití spolu s režimem bitmapy."
 
-#: src/integritysetup.c:772
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Přepínače bitmapy lze použít jen při režimu bitmapy."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:784
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Režim inline nelze kombinovat s možnostmi žurnálu a bitmapy."
 
-#: src/integritysetup.c:782
+#: src/integritysetup.c:788
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Režim inline nelze kombinovat se odděleným zařízením pro data."
 
@@ -3795,32 +3799,32 @@ msgstr "Zařízení není ve stavu dešifrování LUKS2. Neslučitelný přepín
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Zařízení je ve stavu přešifrování pomocí odolnosti posunu dat. Požadovaný přepínač --resilience nelze použít."
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Bez pozic pro klíče nelze určit velikost klíče svazku LUKS. Prosím, použijte přepínač --new-key-size."
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "Zařízení vyžaduje obnovu přešifrování. Spusťte nejprve opravu."
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "Zařízení %s je již ve stavu přešifrování LUKS2. Přejete si dokončit dříve zahájenou operaci?"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "Zastaralé přešifrování LUKS2 již není podporováno."
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "Zařízení LUKS2 nastavené k používání Opal nelze přešifrovat."
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "Přešifrování zařízení s profilem integrity není podporováno."
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3829,110 +3833,110 @@ msgstr ""
 "Požadovaný --sector-size %<PRIu32> není slučitelný se superblokem %s\n"
 "(velikost bloku %<PRIu32> bajtů) nalezeném na zařízení %s."
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Přešifrování bez oddělené hlavičky (--header) není možné bez zmenšení velikosti datového zařízení (--reduce-device-size)."
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "Požadovaný počátek dat musí být menší nebo roven polovině parametru --reduce-device-size"
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "Upravuje se hodnota --reduce-device-size na dvojnásobek --offset %<PRIu64> (v sektorech).\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "Dočasný soubor s hlavičkou %s již existuje. Operace se ruší."
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "Dočasný soubor s hlavičkou %s nelze vytvořit."
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "Velikost metadat LUKS2 je větší než hodnota posunu dat."
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "Umístění nové hlavičky na začátek zařízení %s selhalo."
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s je nyní aktivní a připraveno pro přešifrování za běhu.\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "Aktivní zařízení %s není LUKS2."
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "Obnovuje se původní hlavička LUKS2."
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "Obnovení původní hlavičky LUKS2 selhalo."
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "Soubor s hlavičkou %s neexistuje. Přejete si zahájit dešifrování LUKS2 zařízení %s a export hlavičku LUKS2 do souboru %s?"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "Přidání práv na čtení/zápis souboru s hlavičkou selhalo."
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "Inicializace přešifrování selhala. Záloha hlavičky je dostupná v %s."
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Dešifrování LUKS2 je podporováno jen u zařízení s oddělenou hlavičkou (počátek dat na 0)."
 
-#: src/utils_reencrypt.c:1487
+#: src/utils_reencrypt.c:1490
 msgid "No token could unlock the device."
 msgstr "Toto zařízení nebylo možné odemknout žádným tokenem."
 
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
 msgid "Not enough free keyslots for reencryption."
 msgstr "Nedostatek pozic s klíči pro přešifrování."
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1562
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Soubor s klíčem a popis klíče v klíčence lze použít jen s přepínačem --key-slot nebo s právě jednou aktivní pozicí klíče."
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Zadejte heslo pro pozici klíče %d: "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Přepíná se algoritmus šifrování dat na %s.\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Pro přešifrování zařízení s aktivními pozicemi klíče přímým předáním klíčů svazku použijte --force-no-keyslots."
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:1996
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Přepínač --new-volume-key-file musí být ve dvojici s --new-key-size."
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Žádné parametry oblasti s daty nebyly změněny. Přešifrování zrušeno."
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3941,7 +3945,7 @@ msgstr ""
 "podporováno. Nejprve zařízení aktivujte, nebo použijte přepínač\n"
 "--force-offline-reencrypt (nebezpečné!)."
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3950,58 +3954,58 @@ msgstr ""
 "\n"
 "Přešifrování přerušeno."
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Dokončuje se přešifrování LUKS ve vynuceném režimu offline.\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Zařízení %s obsahuje porušená metadata LUKS. Operace se ruší."
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Zařízení %s je již zařízením LUKS. Operace se ruší."
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Zařízení %s je již ve stavu přešifrování LUKS. Operace se ruší."
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "Dešifrování LUKS2 vyžaduje přepínač --header."
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "Příkaz vyžaduje jako argument zařízení."
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Neslučitelné verze. Zařízení %s je LUKS1."
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Neslučitelné verze. Zařízení %s je ve stavu přešifrování LUKS1."
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Neslučitelné verze. Zařízení %s je LUKS2."
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Neslučitelné verze. Zařízení %s je ve stavu přešifrování LUKS2."
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Přešifrování LUKS2 je již inicializováno. Operace se ruší."
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "Neprobíhá žádné přešifrování zařízení."
 
@@ -5016,9 +5020,6 @@ msgstr "Chyba při autentizaci veřejným klíčem: "
 #~ msgid "Options --journal-size, --interleave-sectors, --sector-size, --tag-size and --no-wipe can be used only for format action."
 #~ msgstr "Přepínače --journal-size, --interleave-sectors, --sector-size, --tag-size a --no-wipe lze použít jen při formátování."
 
-#~ msgid "Invalid journal size specification."
-#~ msgstr "Zadána neplatná velikost žurnálu."
-
 #~ msgid "Reencryption block size"
 #~ msgstr "Velikost bloku přešifrování"
 

From 2fb34ac30c8624d6a5c91460af7f5c18b36afc5a Mon Sep 17 00:00:00 2001
From: Roland Illig <roland.illig@gmx.de>
Date: Sun, 19 Jul 2026 19:51:04 +0200
Subject: [PATCH 182/244] po: update de.po (from translationproject.org)

---
 po/de.po | 631 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 316 insertions(+), 315 deletions(-)

diff --git a/po/de.po b/po/de.po
index 6032d5a24..869758916 100644
--- a/po/de.po
+++ b/po/de.po
@@ -5,10 +5,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-06-29 21:30+0200\n"
-"PO-Revision-Date: 2026-07-03 08:04+0200\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-07-12 12:19+0200\n"
 "Last-Translator: Roland Illig <roland.illig@gmx.de>\n"
 "Language-Team: German <translation-team-de@lists.sourceforge.net>\n"
 "Language: de\n"
@@ -200,10 +200,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Fehler beim Rückabwickeln der LUKS2-Metadaten im Speicher."
 
 #: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
-#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
-#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
-#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -247,7 +247,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Gerät für separierte Metadaten wird für diese Verschlüsselungsart nicht unterstützt."
 
 #: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
-#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Nicht unterstützte Sektorengröße für Verschlüsselung."
 
@@ -569,14 +569,14 @@ msgstr "Fehler beim Ablösen des Laufwerkschlüssels vom benutzerspezifischen Sc
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Fehler beim Verknüpfen des Laufwerkschlüssels im benutzerspezifischen Schlüsselbund."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2720
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Laufwerk »%s« ist nicht im Ruhezustand."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
-#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
-#: src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "Der Laufwerksschlüssel passt nicht zum Laufwerk."
 
@@ -589,8 +589,8 @@ msgstr "Neues Schlüsselfach konnte nicht ausgewechselt werden."
 msgid "Key slot %d is invalid."
 msgstr "Schlüsselfach %d ist ungültig."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
-#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Schlüsselfach %d ist nicht aktiv."
@@ -787,7 +787,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Die gewünschte Menge an Daten kann nicht eingelesen werden."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Gerät »%s« existiert nicht oder Zugriff verweigert."
@@ -1132,7 +1132,7 @@ msgstr "LUKS-Verschlüsselungsmodus %s ist ungültig."
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS-Hash %s ist ungültig."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Keine bekannten Probleme im LUKS-Header erkannt."
 
@@ -1152,7 +1152,7 @@ msgstr "Daten-Offset für LUKS-Header muss entweder 0 sein oder mehr als die Hea
 
 #: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Falsches LUKS-UUID-Format angegeben."
 
@@ -1678,7 +1678,7 @@ msgstr "Fehler beim Festlegen des »dm-crypt«-Segments."
 msgid "Failed to set dm-linear segment."
 msgstr "Fehler beim Festlegen des »dm-linear«-Segments."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Kein bekanntes Verschlüsselungsmuster in LUKS2-Kopfbereich entdeckt."
 
@@ -2141,8 +2141,8 @@ msgstr "Verschlüsselungsparameter für Schlüsselfach wird nur für LUKS2-Gerä
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Verschlüsselungsparameter für Schlüsselfach sind nicht mit LUKS2-Schlüsselfach-Verschlüsselung kompatibel."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Kein bekanntes Verschlüsselungsmuster entdeckt."
@@ -2169,8 +2169,8 @@ msgstr "WARNUNG: Der Parameter --hash wird im Plain-Modus ignoriert, wenn eine S
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "WARNUNG: Die Option --keyfile-size wird ignoriert, da die Lesegröße die gleiche ist wie die Verschlüsselungsschlüsselgröße ist.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Fehler beim Blkid-Scan für %s."
@@ -2180,11 +2180,11 @@ msgstr "Fehler beim Blkid-Scan für %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Gerätesignaturen auf »%s« erkannt. Wenn Sie fortfahren, könnte das bestehende Daten beschädigen."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
-#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
-#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "Vorgang abgebrochen.\n"
 
@@ -2192,36 +2192,36 @@ msgstr "Vorgang abgebrochen.\n"
 msgid "Option --key-file is required."
 msgstr "Die Option »--key-file« muss angegeben werden."
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "VeraCrypt-PIM eingeben: "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "Ungültiger PIM-Wert: Formatfehler."
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "Ungültiger PIM-Wert: 0."
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "Ungültiger PIM-Wert: außerhalb des gültigen Bereichs."
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "Kein Geräte-Header mit dieser Passphrase gefunden."
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "Gerät »%s« ist kein gültiges BITLK-Gerät."
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "Die Größe des Laufwerksschlüssels für BITLK kann nicht ermittelt werden, bitte nutzen Sie die Option »--key-size«."
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2233,7 +2233,7 @@ msgstr ""
 "daher ausschließlich an einem sicheren Ort und verschlüsselt\n"
 "aufbewahrt werden."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2245,73 +2245,73 @@ msgstr ""
 "daher ausschließlich an einem sicheren Ort und verschlüsselt\n"
 "aufbewahrt werden."
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "Gerät »%s« ist kein gültiges FVAULT2-Gerät."
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Die Größe des Laufwerksschlüssels für FVAULT2 kann nicht ermittelt werden, bitte nutzen Sie die Option »--key-size«."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Gerät »%s« ist noch aktiv und zum verzögerten Entfernen eingeplant.\n"
 
 # upstream: period missing
-#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
-#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
-#: src/cryptsetup.c:3261
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Fehler beim Festlegen des externen Tokenpfads »%s«."
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Um die Größe von aktiven Geräten zu öndern, muss der Laufwerksschlüssel im Schlüsselbund sein, aber die Option --disable-keyring wurde angegeben."
 
-#: src/cryptsetup.c:1057
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "Benchmark unterbrochen."
 
-#: src/cryptsetup.c:1078
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     (nicht zutreffend)\n"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u Iterationen pro Sekunde für %zu-Bit-Schlüssel\n"
 
-#: src/cryptsetup.c:1094
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s (nicht zutreffend)\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u Iterationen, %5u Speicher, %1u parallele Threads (CPUs) für %zu-Bit-Schlüssel (Zieldauer %u Millisekunden)\n"
 
-#: src/cryptsetup.c:1120
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "Das Ergebnis des Benchmarks ist nicht zuverlässig."
 
-#: src/cryptsetup.c:1171
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Die Tests sind nur annähernd genau, da sie nicht auf den Datenträger zugreifen.\n"
 
 # upstream: the following line should also be translated. This is because the long word "Schlüssel" for "Key" will break the layout, as well as "Verschlüsselung" for "Encryption".
 # To help the translators, you should provide an example for what goes into the %x placeholders, since I had to make an educated guess that the second %s would be exactly 4 characters long. This is an unnecessary burden for the translators.
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1196
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s   Algorithmus | Schlüssel | Verschlüsselung | Entschlüsselung\n"
 
-#: src/cryptsetup.c:1204
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Verschlüsselung »%s« (mit Schlüsselgröße %i Bits) ist nicht verfügbar."
@@ -2319,19 +2319,19 @@ msgstr "Verschlüsselung »%s« (mit Schlüsselgröße %i Bits) ist nicht verfü
 # upstream: the following line should also be translated. This is because the long word "Schlüssel" for "Key" will break the layout, as well as "Verschlüsselung" for "Encryption".
 # To help the translators, you should provide an example for what goes into the %x placeholders, since I had to make an educated guess that the second %s would be exactly 4 characters long. This is an unnecessary burden for the translators.
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1225
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#   Algorithmus | Schlüssel | Verschlüsselung | Entschlüsselung\n"
 
-#: src/cryptsetup.c:1238
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "N/A"
 
-#: src/cryptsetup.c:1241
+#: src/cryptsetup.c:1242
 msgid "# Cipher speed test is not available.\n"
 msgstr "# Verschlüsselungs-Geschwindigkeitstest ist nicht verfügbar.\n"
 
-#: src/cryptsetup.c:1257
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2339,27 +2339,27 @@ msgstr ""
 "Ungeschützte LUKS2-Metadaten für die Wiederverschlüsselung entdeckt. Bitte überprüfen Sie, ob die Wiederverschlüsselungsoperation erwünscht ist (siehe luksDump-Ausgabe)\n"
 "und fahren Sie nur fort (Upgrade der Metadaten), wenn Sie den Vorgang als echt anerkennen."
 
-#: src/cryptsetup.c:1263
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Geben Sie die Passphrase für den Schutz und das Aktualisieren der Metadaten für die Wiederverschlüsselung ein: "
 
-#: src/cryptsetup.c:1307
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Wirklich mit der Wiederherstellung der LUKS2-Wiederverschlüsselung fortfahren?"
 
-#: src/cryptsetup.c:1316
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Geben Sie die Passphrase für das Prüfen der Metadaten für die Wiederverschlüsselung ein: "
 
-#: src/cryptsetup.c:1318
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Geben Sie die Passphrase für die Wiederherstellung der Wiederverschlüsselung ein: "
 
-#: src/cryptsetup.c:1380
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Wirklich versuchen, den LUKS-Geräteheader wiederherzustellen?"
 
-#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2367,7 +2367,7 @@ msgstr ""
 "\n"
 "Gründlich löschen unterbrochen."
 
-#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2376,167 +2376,167 @@ msgstr ""
 "Sie können diesen Vorgang mit Strg+C unterbrechen (der nicht gesäuberte Bereich des Geräts wird dann ungültige Prüfsummen haben).\n"
 
 # upstream: it is boring that I have to translate the newline at the end of each of these messages. Translating strings without newlines is much easier and faster. Since it is redundant anyway (all calls to log_err have a trailing newline), this newline should be written implicitly.
-#: src/cryptsetup.c:1435 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Fehler beim Deaktivieren des temporären Geräts »%s«."
 
-#: src/cryptsetup.c:1483
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "OPAL hw-only Verschlüsselung unterstützt nicht --cipher und --key-size, die Optionen werden ignoriert."
 
-#: src/cryptsetup.c:1496
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Die Integritätsoption kann nur für das LUKS2-Format verwendet werden."
 
-#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nicht unterstützte Optionen für Größe der LUKS-Metadaten."
 
-#: src/cryptsetup.c:1506
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL wird nur für das LUKS2-Format unterstützt."
 
-#: src/cryptsetup.c:1511
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Inline-Hardware-Tokens werden nur für das LUKS2-Format unterstützt."
 
-#: src/cryptsetup.c:1520
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Die Headerdatei existiert nicht, soll sie angelegt werden?"
 
-#: src/cryptsetup.c:1528
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Fehler beim Anlegen der Headerdatei »%s«."
 
-#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
-#: src/integritysetup.c:346
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "Kein bekanntes Integritätsspezifikationsmuster entdeckt."
 
-#: src/cryptsetup.c:1556
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Die angegebene Integritätsschlüsselgröße kann nicht verwendet werden."
 
-#: src/cryptsetup.c:1574
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Das Gerät »%s« kann nicht als Datenträger-Header benutzt werden."
 
-#: src/cryptsetup.c:1603 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Hiermit werden die Daten auf »%s« unwiderruflich überschrieben."
 
-#: src/cryptsetup.c:1640
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Das OPAL-Admin-Passwort darf nicht leer sein."
 
-#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
-#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Fehler beim Festlegen der PBKDF-Parameter."
 
-#: src/cryptsetup.c:1785
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Verringerter Datenoffset ist nur für separaten LUKS-Header erlaubt."
 
-#: src/cryptsetup.c:1792
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "LUKS-Datei-Container %s ist zu klein für die Aktivierung, es ist kein Platz mehr für Daten vorhanden."
 
-#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Die Größe des Laufwerksschlüssels erfordert Schlüsselfächer, bitte nutzen Sie dazu die Option »--key-size«."
 
-#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "Das Gerät benötigt zwei Laufwerksschlüssel."
 
-#: src/cryptsetup.c:1888
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Einige angegebene Aktivierungsparameter wurden bei der OPAL-nur-Hardware-Verschlüsselung ignoriert."
 
-#: src/cryptsetup.c:1893
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Gerät aktiviert, aber die Schalter können nicht dauerhaft gespeichert werden."
 
-#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Schlüsselfach %d zum Löschen ausgewählt."
 
-#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Dies ist das letzte Schlüsselfach. Wenn Sie diesen Schlüssel löschen, wird das Gerät unbrauchbar."
 
-#: src/cryptsetup.c:1986
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Geben Sie irgendeine verbleibende Passphrase ein: "
 
-#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Vorgang abgebrochen, das Schlüsselfach wurde NICHT gesäubert.\n"
 
-#: src/cryptsetup.c:2023
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Geben Sie die zu löschende Passphrase ein: "
 
-#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
-#: src/cryptsetup.c:3252
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Gerät »%s« ist kein gültiges LUKS2-Gerät."
 
-#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Geben Sie die neue Passphrase für das Schlüsselfach ein: "
 
-#: src/cryptsetup.c:2146 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Geben Sie die PIN des Tokens ein: "
 
-#: src/cryptsetup.c:2148 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Geben Sie die PIN des Tokens %d ein: "
 
-#: src/cryptsetup.c:2207
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "WARNUNG: Der Parameter --key-slot wird für die neue Nummer des Schlüsselfachs verwendet.\n"
 
-#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Geben Sie irgendeine bestehende Passphrase ein: "
 
-#: src/cryptsetup.c:2380
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Geben Sie die zu ändernde Passphrase ein: "
 
-#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Geben Sie die neue Passphrase ein: "
 
-#: src/cryptsetup.c:2446
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Geben Sie die Passphrase für das umzuwandelnde Schlüsselfach ein: "
 
-#: src/cryptsetup.c:2470
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Die Operation »isLuks« unterstützt nur genau ein Geräte-Argument."
 
-#: src/cryptsetup.c:2575
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Schlüsselfach %d enthält keinen unverbundenen Schlüssel."
 
-#: src/cryptsetup.c:2580
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2545,52 +2545,52 @@ msgstr ""
 "Dieser Dump sollte daher ausschließlich an einem sicheren Ort und\n"
 "verschlüsselt aufbewahrt werden."
 
-#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s ist kein aktives %s-Gerät."
 
-#: src/cryptsetup.c:2706
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s ist kein aktives LUKS-Gerät, oder der Header fehlt."
 
-#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "Option »--header-backup-file« muss angegeben werden."
 
-#: src/cryptsetup.c:2833
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s ist kein von cryptsetup verwaltetes Gerät."
 
-#: src/cryptsetup.c:2844
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Die Geräteart »%s« kann nicht aufgefrischt werden"
 
-#: src/cryptsetup.c:2894
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Unbekannte Art »%s« des Metadaten-Geräts."
 
-#: src/cryptsetup.c:2896
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "Dieser Befehl benötigt den Gerätenamen und den zugeordneten Namen als Argumente."
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "Geben Sie die OPAL-PSID ein: "
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "Geben Sie das OPAL-Admin-Passwort ein: "
 
-#: src/cryptsetup.c:2922
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "Warnung: Der GESAMTE Datenträger wird auf die Werkseinstellungen zurückgesetzt, und alle Daten gehen verloren. Fortsetzen?"
 
-#: src/cryptsetup.c:2965
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2599,363 +2599,363 @@ msgstr ""
 "Diese Operation wird alle Schlüsselfächer auf Gerät »%s« löschen.\n"
 "Dadurch wird das Gerät unbrauchbar."
 
-#: src/cryptsetup.c:2972
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Vorgang abgebrochen, die Schlüsselfächer wurden NICHT gesäubert.\n"
 
-#: src/cryptsetup.c:3011
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Invalid LUKS type, only luks1 and luks2 are supported."
 
-#: src/cryptsetup.c:3027
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "Das Gerät hat bereits den Typ »%s«."
 
-#: src/cryptsetup.c:3034
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Diese Operation wird für »%s« ins Format »%s« umwandeln.\n"
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Vorgang abgebrochen, das Gerät wurde NICHT konvertiert.\n"
 
-#: src/cryptsetup.c:3077
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Die Option --priority, --label oder --subsystem fehlt."
 
-#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d ist ungültig."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d ist in Benutzung."
 
-#: src/cryptsetup.c:3126
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Fehler beim Hinzufügen des LUKS2-Schlüsselring-Tokens %d."
 
-#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Token %d kann nicht dem Schlüsselfach %d zugeordnet werden."
 
-#: src/cryptsetup.c:3154
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d wird gerade nicht verwendet."
 
-#: src/cryptsetup.c:3191
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "Token konnte nicht aus der Datei importiert werden."
 
-#: src/cryptsetup.c:3216
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Auf Token %d kann nicht für den Export zugegriffen werden."
 
-#: src/cryptsetup.c:3229
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d ist nicht dem Schlüsselfach %d zugeordnet."
 
-#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Token %d kann nicht vom Schlüsselfach %d losgelöst werden."
 
-#: src/cryptsetup.c:3297
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Die Optionen --tcrypt-hidden, --tcrypt-system und --tcrypt-backup sind nur zusammen mit einem TCRYPT-Gerät erlaubt."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Die Optionen --veracrypt und --disable-veracrypt werden nur für TCRYPT-kompatible Geräte unterstützt."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Die Option --veracrypt-pim wird nur für VeraCrypt-kompatible Geräte unterstützt."
 
-#: src/cryptsetup.c:3307
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Die Option --veracrypt-query-pim wird nur für VeraCrypt-kompatible Geräte unterstützt."
 
-#: src/cryptsetup.c:3309
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Die Optionen --veracrypt-pim und --veracrypt-query-pim schließen sich gegenseitig aus."
 
-#: src/cryptsetup.c:3318
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Die Option --persistent ist nicht mit --test-passphrase kombinierbar."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Die Optionen --refresh und --test-passphrase schließen sich gegenseitig aus."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Die Option --shared ist nur beim beim »open«-Befehl eines Plain-Gerätes erlaubt."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Die Option --skip ist nur beim Öffnen von plain- und loopaes-Geräten erlaubt."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Die Option --offset mit der Aktion Öffnen wird nur für einfache und loopaes-Geräte unterstützt."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Die Option --tcrypt-hidden kann nicht mit --allow-discards kombiniert werden."
 
-#: src/cryptsetup.c:3337
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Die Option \"Sektorgröße\" mit der Aktion \"Öffnen\" wird nur für einfache Geräte unterstützt."
 
-#: src/cryptsetup.c:3341
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Die Option für große IV-Sektoren wird nur unterstützt, wenn das geöffnete Gerät Sektoren größer als 512 Bytes hat."
 
-#: src/cryptsetup.c:3346
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Die Option --test-passphrase ist nur beim Öffnen von LUKS-, TCRYPT-, BITLK- und FVAULT2-Geräten erlaubt."
 
-#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Die Optionen --device-size und --size können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3352
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Die Option »--unbound« ist nur beim »open«-Befehl eines LUKS-Gerätes erlaubt."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Die Option »--unbound« kann nur in Kombination mit »--test-passphrase« verwendet werden."
 
-#: src/cryptsetup.c:3359
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Die Option --volume-key-keyring kann nicht mit --hash oder --volume-key-file kombiniert werden."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Beide --volume-key-file-Optionen müssen mit den entsprechenden --key-size-Optionen paarweise auftreten."
 
-#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Die Optionen --cancel-deferred und --deferred können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3387
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Die Option »--active-name« ist nur auf LUKS2-Geräte anwendbar."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Die Optionen »--active-name« und »--force-offline-reencrypt« können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Die Optionen --new-volume-key-file und --keep-key können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Die Optionen --new-volume-key-keyring und --keep-key können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "Das Schlüsselfach muss angegeben werden."
 
-#: src/cryptsetup.c:3412
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Die Optionen --align-payload und --offset können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Die Option --integrity-no-wipe ist nur für die »format«-Aktion mit Integritätserweiterung erlaubt."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Nur eine der Optionen --use-[u]random ist erlaubt."
 
-#: src/cryptsetup.c:3426
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "Die Option »--unbound« erfordert die Schlüsselgröße."
 
-#: src/cryptsetup.c:3446
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "Ungültige Token-Aktion."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Der Parameter --key-description ist Pflicht für die Aktion »token add«."
 
-#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Die Aktion erfordert ein bestimmtes Token. Verwenden Sie den Parameter --token-id."
 
-#: src/cryptsetup.c:3457
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "Die Option »--unbound« kann nur zusammen mit der Aktion zum Hinzufügen eines Tokens verwendet werden."
 
-#: src/cryptsetup.c:3459
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Die Optionen --key-slot und --unbound können nicht kombiniert werden."
 
-#: src/cryptsetup.c:3464
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Die Aktion erfordert ein bestimmtes Schlüsselfach. Verwenden Sie den Parameter --key-slot."
 
-#: src/cryptsetup.c:3480
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<Gerät> [--type <Art>] [<Name>]"
 
-#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "Gerät als <Name> öffnen"
 
-#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
-#: src/integritysetup.c:556 src/integritysetup.c:558
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<Name>"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "Gerät schließen (Zuordnung entfernen)"
 
-#: src/cryptsetup.c:3482 src/integritysetup.c:558
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "Größe des aktiven Geräts ändern"
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "Gerätestatus anzeigen"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <Algorithmus>]"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "Verschlüsselungsalgorithmus benchmarken"
 
-#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
-#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<Gerät>"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "Versuchen, die Metadaten auf dem Datenträger zu reparieren"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "LUKS2-Gerät wiederverschlüsseln"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "Alle Schlüsselfächer löschen (Verschlüsselungsschlüssel entfernen)"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "Zwischen den Formaten LUKS und LUKS2 umwandeln"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "Permanente Konfigurationsoptionen für LUKS2 festlegen"
 
-#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<Gerät> [<neue Schlüsseldatei>]"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "Ein LUKS-Gerät formatieren"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "Schlüssel zu LUKS-Gerät hinzufügen"
 
-#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<Gerät> [<Schlüsseldatei>]"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "Entfernt bereitgestellten Schlüssel oder Schlüsseldatei vom LUKS-Gerät"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "Ändert den angegebenen Schlüssel oder die Schlüsseldatei des LUKS-Geräts"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "Wandelt einen Schlüssel in neue PBKDF-Parameter um"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<Gerät> <Schlüsselfach>"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "Löscht Schlüssel mit Nummer <Schlüsselfach> vom LUKS-Gerät"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "UUID des LUKS-Geräts ausgeben"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "Testet <Gerät> auf Header einer LUKS-Partition"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "LUKS-Partitionsinformationen ausgeben"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "TCRYPT-Geräteinformationen ausgeben"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "BITLK-Geräteinformationen ausgeben"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "VFAULT2-Geräteinformationen ausgeben"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "LUKS-Gerät in Ruhezustand versetzen und alle Schlüssel auslöschen (alle IOs werden eingefroren)"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "LUKS-Gerät aus dem Ruhezustand aufwecken"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "Header und Schlüsselfächer eines LUKS-Geräts sichern"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "Header und Schlüsselfächer eines LUKS-Geräts wiederherstellen"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <Gerät>"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "LUKS2-Token manipulieren"
 
-#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2963,7 +2963,7 @@ msgstr ""
 "\n"
 "<Aktion> ist eine von:\n"
 
-#: src/cryptsetup.c:3531
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2975,7 +2975,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3535
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -2990,7 +2990,7 @@ msgstr ""
 "<Schlüsselfach> ist die Nummer des zu verändernden LUKS-Schlüsselfachs\n"
 "<Schlüsseldatei> optionale Schlüsseldatei für den neuen Schlüssel der »luksAddKey«-Aktion\n"
 
-#: src/cryptsetup.c:3542
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -2999,7 +2999,7 @@ msgstr ""
 "\n"
 "Vorgegebenes festeingebautes Metadatenformat ist %s (für luksFormat-Aktion).\n"
 
-#: src/cryptsetup.c:3547
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3007,12 +3007,12 @@ msgstr ""
 "\n"
 "Die Plugin-Unterstützung für externe LUKS2-Tokens ist aktiviert.\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Pfad des Plugins für externe LUKS2-Token: %s.\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3020,7 +3020,7 @@ msgstr ""
 "\n"
 "Die Plugin-Unterstützung für externe LUKS2-Tokens ist deaktiviert.\n"
 
-#: src/cryptsetup.c:3554
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3037,7 +3037,7 @@ msgstr ""
 "Vorgabe-PBKDF für LUKS2: %s\n"
 "\tIterationszeit: %d, benötigter Speicher: %d kB, parallele Threads: %d\n"
 
-#: src/cryptsetup.c:3565
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3052,122 +3052,126 @@ msgstr ""
 "\tplain: %s, Schlüssel: %d Bits, Passphrase-Hashen: %s\n"
 "\tLUKS: %s, Schlüssel: %d Bits, LUKS-Header-Hashen: %s, Zufallszahlengenerator: %s\n"
 
-#: src/cryptsetup.c:3574
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Standard-Schlüsselgröße mit XTS-Modus (zwei interne Schlüssel) wird verdoppelt.\n"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: Benötigt %s als Argumente"
 
-#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Schlüsselfach ist ungültig."
 
-#: src/cryptsetup.c:3660
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Die Gerätegröße muss ein Vielfaches von 512-Byte-Sektoren sein."
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Ungültige Angabe der Maximalgröße für die Wiederverschlüsselungs-Hotzone."
 
-#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Schlüsselgröße muss ein Vielfaches von 8 Bit sein"
 
-#: src/cryptsetup.c:3686
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Es können maximal 2 Schlüsselgrößen angegeben werden."
 
-#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Es können maximal %d Laufwerksschlüssel-Angaben verarbeitet werden."
 
-#: src/cryptsetup.c:3738
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Es können maximal %d Schlüsselbund-Verknüpfungsangaben verarbeitet werden."
 
-#: src/cryptsetup.c:3747
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Die maximale Verkleinerungsgröße ist 1 GiB."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Die verkleinerte Größe muss ein Vielfaches von 512-Byte-Sektoren sein."
 
-#: src/cryptsetup.c:3767
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Die Option --priority kann nur »ignore/normal/prefer« sein."
 
-#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "Ungültige Angabe der maximalen Versuche."
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "Diese Hilfe anzeigen"
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "Kurze Aufrufsyntax anzeigen"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "Paketversion ausgeben"
 
-#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "Hilfe-Optionen:"
 
-#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPTION...] <Aktion> <aktionsabhängig>"
 
-#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "Argument <Aktion> fehlt."
 
-#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "Unbekannte Aktion."
 
-#: src/cryptsetup.c:3928
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Die Option --key-file wirkt stärker als das angegebene Schlüsseldatei-Argument."
 
-#: src/cryptsetup.c:3934
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "Die Option --key-file ist nur einmal erlaubt."
 
-#: src/cryptsetup.c:3939
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Passwortbasierte Schlüsselableitungsfunktion (PBKDF) kann nur »pbkdf2« oder »argon2i/argon2id« sein."
 
-#: src/cryptsetup.c:3944
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Bei PBKDF darf nur entweder die Anzahl der Durchläufe oder die Zeitbegrenzung angegeben werden."
 
-#: src/cryptsetup.c:3949
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Laufwerkschlüssel kann nicht mit einem Schlüsselbund verbunden werden, solange der Schlüsselbund deaktiviert ist."
 
-#: src/cryptsetup.c:3954
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Die Beschreibung des Schlüsselbundes kann nicht verwendet werden, wenn der Schlüsselbund deaktiviert ist."
 
-#: src/cryptsetup.c:3959
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Inline-Integrität muss zusammen mit der Option »--integrity« benutzt werden."
 
-#: src/cryptsetup.c:3970
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Die Optionen --keyslot-cipher und --keyslot-keysize können nur zusammen benutzt werden."
 
-#: src/cryptsetup.c:3978
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Es wird keine Aktion ausgeführt. Aufgerufen mit der Option --test-args.\n"
 
-#: src/cryptsetup.c:3991
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "Fehler beim Deaktivieren der Metadaten-Dateisperre."
 
@@ -3232,7 +3236,7 @@ msgstr "Der Befehl erfordert die Option <root_hash> oder --root-hash-file als Ar
 msgid "<data_device> <hash_device>"
 msgstr "<Datengerät> <Hash-Gerät>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:553
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "Gerät formatieren"
 
@@ -3248,7 +3252,7 @@ msgstr "Gerät verifizieren"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<Datengerät> <Name> <Hash-Gerät> [<Wurzel-Hash>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:556
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "Status der aktiven Geräte anzeigen"
 
@@ -3256,7 +3260,7 @@ msgstr "Status der aktiven Geräte anzeigen"
 msgid "<hash_device>"
 msgstr "<Hash-Gerät>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:557
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "Auf dem Datenträger gespeicherte Informationen anzeigen"
 
@@ -3298,7 +3302,7 @@ msgstr "Die Optionen --panic-on-corruption und --restart-on-corruption können n
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "Die Option --error-as-corruption muss mit --panic-on-corruption oder --restart-on-corruption verwendet werden."
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3307,33 +3311,33 @@ msgstr ""
 "Dadurch werden Daten auf %s und %s unwiderruflich überschrieben.\n"
 "Um Daten auf dem Gerät zu bewahren, verwenden Sie die Option »--no-wipe« (und aktivieren Sie sie dann mit »--integrity-recalculate«)."
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "Formatiert mit Etikettgröße %u%s und interner Integrität %s.\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (Inline-Hardware-Etiketten)"
 
-#: src/integritysetup.c:303
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Das Setzen der Option »recalculate« wird nicht unterstützt, Sie können stattdessen »--wipe« erwägen."
 
-#: src/integritysetup.c:380 src/integritysetup.c:540
+#: src/integritysetup.c:382 src/integritysetup.c:546
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Gerät »%s« ist kein gültiges INTEGRITY-Gerät."
 
-#: src/integritysetup.c:553 src/integritysetup.c:557
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
 msgstr "<Integritätsgerät>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
 msgstr "<Integritätsgerät> <Name>"
 
-#: src/integritysetup.c:577
+#: src/integritysetup.c:583
 #, c-format
 msgid ""
 "\n"
@@ -3344,7 +3348,7 @@ msgstr ""
 "<Name> ist das Gerät, das unter »%s« angelegt werden soll\n"
 "<Integritätsgerät> ist das Gerät, das die Daten mit Integritätsangaben enthält\n"
 
-#: src/integritysetup.c:582
+#: src/integritysetup.c:588
 #, c-format
 msgid ""
 "\n"
@@ -3357,48 +3361,48 @@ msgstr ""
 "\tPrüfalgorithmus: %s\n"
 "\tMaximalgröße der Schlüsseldatei: %d kB\n"
 
-#: src/integritysetup.c:639
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Ungültige Größe für --%s. Maximum ist %u Bytes."
 
-#: src/integritysetup.c:742
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "Sowohl die Schlüsseldatei als auch die Schlüsselgröße müssen angegeben werden."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Sowohl die Schlüsseldatei als auch die Schlüsselgröße müssen für die Journalintegrität angegeben werden."
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Wenn ein Integritätsschlüssel für das Journal verwendet wird, muss auch der Integritätsalgorithmus angegeben werden."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Sowohl der Verschlüsselungsschlüssel als auch die Schlüsselgröße müssen für die Journalverschlüsselung angegeben werden."
 
-#: src/integritysetup.c:756
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Wenn ein Verschlüsselungsschlüssel für das Journal verwendet wird, muss auch der Verschlüsselungsalgorithmus angegeben werden."
 
-#: src/integritysetup.c:760
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Die Modi Wiederherstellung und Bitmap schließen sich gegenseitig aus."
 
-#: src/integritysetup.c:767
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Die Journal-Optionen können nicht im Bitmap-Modus verwendet werden."
 
-#: src/integritysetup.c:772
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Die Bitmapoptionen können nur im Bitmapmodus verwendet werden."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:784
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Der Inline-Modus kann nicht mit den Optionen Journal oder Bitmap kombiniert werden."
 
-#: src/integritysetup.c:782
+#: src/integritysetup.c:788
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Der Inline-Modus kann nicht mit einem separaten Datengerät kombiniert werden."
 
@@ -3752,32 +3756,32 @@ msgstr "Das Gerät ist nicht der LUKS2-Entschlüsselung. Die Option »--encrypt
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Das Gerät befindet sich in der Wiederverschlüsselung mit Datashift-Resilienz. Die angeforderte Option --resilience kann nicht angewendet werden."
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Die Größe des Laufwerksschlüssels kann für LUKS ohne Schlüsselfächer nicht bestimmt werden, bitte verwenden Sie die Option --new-key-size."
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "Das Gerät erfordert die Wiederherstellung der Wiederverschlüsselung. Führen Sie zuerst die Reparatur aus."
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "Gerät %s befindet sich bereits in der LUKS2-Neuverschlüsselung. Möchten Sie den zuvor begonnenen Vorgang fortsetzen?"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "Die veraltete LUKS2-Wiederverschlüsselung wird nicht mehr unterstützt."
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "Auf einem Gerät, das für OPAL konfiguriert ist, kann die LUKS2-Wiederverschlüsselung nicht durchgeführt werden."
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "Wiederverschlüsselung von Geräten mit Integritätsprofil wird nicht unterstützt."
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3786,110 +3790,110 @@ msgstr ""
 "Angeforderte --sector-size %<PRIu32> ist nicht kompatibel mit dem %s-Superblock\n"
 "(Blockgröße: %<PRIu32>Bytes), der auf dem Gerät %s erkannt wurde."
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Verschlüsselung ohne separaten Kopfbereich (--header) ist nur möglich, wenn die Größe des Hauptgeräts reduziert wird (--reduce-device-size)."
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "Der angeforderte Datenoffset darf maximal die Hälfte des Parameters --reduce-device-size betragen."
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "Der Wert von --reduce-device-size wird auf das Doppelte von --offset %<PRIu64> (in Sektoren) angepasst.\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "Temporäre Headerdatei »%s« existiert bereits. Wird abgebrochen."
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "Fehler beim Anlegen der temporären Headerdatei »%s«."
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "Die Größe der LUKS2-Metadaten ist größer als der Wert der Datenverschiebung."
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "Der neue Header konnte nicht am Kopf des Geräts %s platziert werden."
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s ist jetzt aktiv und bereit für die Onlineverschlüsselung.\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "Das aktive Gerät »%s« ist kein LUKS2-Gerät."
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "Wiederherstellung des ursprünglichen LUKS2-Headers."
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "Fehler beim Wiederherstellen des ursprünglichen LUKS2-Headers."
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "Die Header-Datei %s existiert nicht. Möchten Sie die LUKS2-Entschlüsselung von Gerät %s initialisieren und LUKS2-Header in Datei %s exportieren?"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "Fehler beim Hinzufügen der Lese-/Schreibberechtigung für die exportierte Header-Datei."
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "Fehler beim Initialisieren der Wiederverschlüsselung. Eine Sicherungskopie des Headers befindet sich in %s."
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "LUKS2-Entschlüsselung wird nur mit losgelöstem Headergerät unterstützt (mit Datenoffset auf 0 gesetzt)."
 
-#: src/utils_reencrypt.c:1487
+#: src/utils_reencrypt.c:1490
 msgid "No token could unlock the device."
 msgstr "Kein Token konnte das Gerät entsperren."
 
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
 msgid "Not enough free keyslots for reencryption."
 msgstr "Nicht genügend freie Schlüsselfächer für Wiederverschlüsselung."
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1562
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Schlüsseldatei oder Schlüsselbund kann nur mit --key-slot oder mit genau einem aktiven Schlüsselfach benutzt werden."
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Geben Sie die Passphrase für Schlüsselfach %d ein: "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Der Verschlüsselungsalgorithmus wird auf %s geändert.\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Verwenden Sie --force-no-keyslots, um Geräte mit aktiven Schlüsselfach neu zu verschlüsseln, indem Sie Laufwerksschlüssel direkt übergeben."
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:1996
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Die Option --new-volume-key-file muss mit --new-key-size paarweise auftreten"
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Keine Datensegmentparameter geändert. Wiederverschlüsselung abgebrochen."
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3897,7 +3901,7 @@ msgstr ""
 "Die Zunahme der Größe des Verschlüsselungssektors auf einem Offline-Gerät wird nicht unterstützt.\n"
 "Aktivieren Sie das Gerät zuerst oder verwenden Sie die Option »--force-offline-reencrypt« (gefährlich!)."
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3906,58 +3910,58 @@ msgstr ""
 "\n"
 "Wiederverschlüsselung unterbrochen."
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "LUKS-Wiederverschlüsselung wird im erzwungenen Offline-Modus fortgesetzt.\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Das Gerät %s enthält fehlerhafte LUKS-Metadaten. Vorgang wird abgebrochen."
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Gerät %s ist bereits ein LUKS-Gerät. Vorgang wird abgebrochen."
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Gerät %s befindet sich bereits in der LUKS-Wiederverschlüsselung. Vorgang wird abgebrochen."
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "LUKS2-Entschlüsselung erfordert die Option »--header«."
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "Dieser Befehl benötigt den Gerätenamen als Argument."
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Widersprüchliche Versionen. Gerät %s ist LUKS1."
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Widersprüchliche Versionen. Gerät %s befindet sich in der LUKS1-Wiederverschlüsselung."
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Widersprüchliche Versionen. Gerät %s ist LUKS2."
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Widersprüchliche Versionen. Gerät %s befindet sich in LUKS2-Wiederverschlüsselung."
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Die LUKS2-Wiederverschlüsselung wurde bereits begonnen. Die Operation wird abgebrochen."
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "Derzeit läuft keine Wiederverschlüsselung."
 
@@ -4973,9 +4977,6 @@ msgstr "Fehler bei der Authentifizierung mit öffentlichem Schlüssel: "
 #~ msgid "Options --journal-size, --interleave-sectors, --sector-size, --tag-size and --no-wipe can be used only for format action."
 #~ msgstr "Die Optionen --journal-size, --interleave-sectors, --sector-size, --tag-size und --no-wipe können nur bei der Aktion »format« verwendet werden."
 
-#~ msgid "Invalid journal size specification."
-#~ msgstr "Ungültige Angabe der Journalgröße."
-
 #~ msgid "Reencryption block size"
 #~ msgstr "Wiederverschlüsselungs-Blockgröße"
 

From 83b60d611ff256a3eef25281da29171811a8ec2e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20Marchal?= <fmarchal@perso.be>
Date: Sun, 19 Jul 2026 19:51:04 +0200
Subject: [PATCH 183/244] po: update fr.po (from translationproject.org)

---
 po/fr.po | 631 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 316 insertions(+), 315 deletions(-)

diff --git a/po/fr.po b/po/fr.po
index 5acce7be2..eb433ad46 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -7,10 +7,10 @@
 # Frédéric Marchal <fmarchal@perso.be>, 2026.
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-06-29 21:30+0200\n"
-"PO-Revision-Date: 2026-06-30 16:12+0200\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-07-13 17:34+0200\n"
 "Last-Translator: Frédéric Marchal <fmarchal@perso.be>\n"
 "Language-Team: French <traduc@traduc.org>\n"
 "Language: fr\n"
@@ -201,10 +201,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Échec lors du retour en arrière des métadonnées LUKS2 en mémoire."
 
 #: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
-#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
-#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
-#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -248,7 +248,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Un périphérique avec des métadonnées détachées n'est pas supporté avec ce type de chiffrement."
 
 #: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
-#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Taille de secteur de chiffrement non supportée."
 
@@ -570,14 +570,14 @@ msgstr "Impossible de délier la clé du porte-clé utilisateur spécifié."
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Impossible de lier la clé de volume dans le porte-clé utilisateur."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2720
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Le volume %s n'est pas suspendu."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
-#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
-#: src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "Ceci n'est pas la clé du volume."
 
@@ -590,8 +590,8 @@ msgstr "Nouvel emplacement de clé impossible à échanger."
 msgid "Key slot %d is invalid."
 msgstr "L'emplacement de clé %d n'est pas valide."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
-#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "L'emplacement de clé %d n'est pas actif."
@@ -788,7 +788,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Impossible de lire la quantité de données demandée."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Le périphérique %s n'existe pas ou l'accès y est interdit."
@@ -1132,7 +1132,7 @@ msgstr "Le mode de chiffrement LUKS %s n'est pas valide."
 msgid "LUKS hash %s is invalid."
 msgstr "La valeur hachée LUKS %s n'est pas valide."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Aucun problème connu détecté pour l'en-tête LUKS."
 
@@ -1152,7 +1152,7 @@ msgstr "L'offset des données d'un en-tête LUKS doit être soit 0 ou soit plus
 
 #: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Mauvais format fourni pour le UUID LUKS."
 
@@ -1677,7 +1677,7 @@ msgstr "Impossible de définir le segment dm-crypt."
 msgid "Failed to set dm-linear segment."
 msgstr "Impossible de définir le segment dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Aucun motif connu d'algorithme de chiffrement n'a été détecté dans l'en-tête LUKS2."
 
@@ -2141,8 +2141,8 @@ msgstr "Les paramètres de chiffrement des emplacement de clés peuvent uniqueme
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Les paramètres de chiffrement des emplacement de clés ne sont pas compatibles avec le chiffrement des emplacements de LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Aucun motif connu d'algorithme de chiffrement n'a été détecté."
@@ -2169,8 +2169,8 @@ msgstr "ATTENTION: Le paramètre --hash est ignoré en mode non chiffré quand l
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "ATTENTION: L'option --keyfile-size est ignorée. La taille de lecture est la même que la taille de la clé de chiffrement.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "L'analyse de blkid a échouée pour %s."
@@ -2180,11 +2180,11 @@ msgstr "L'analyse de blkid a échouée pour %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Signature(s) de périphérique détectée(s) sur %s. Continuer risque d'endommager les données existantes."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
-#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
-#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "Opération interrompue.\n"
 
@@ -2192,36 +2192,36 @@ msgstr "Opération interrompue.\n"
 msgid "Option --key-file is required."
 msgstr "L'option --key-file est requise."
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "Entrez le PIN VeraCrypt : "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "Valeur PIN invalide : erreur d'analyse"
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "Valeur PIN invalide: 0"
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "Valeur PIN invalide: hors des limites."
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "Aucun en-tête détecté avec cette phrase secrète sur le périphérique."
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "Le périphérique %s n'est pas un périphérique BITLK valide."
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "Impossible de déterminer la taille de la clé de volume pour BITLK, veuillez utiliser l'option --key-size."
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2231,7 +2231,7 @@ msgstr ""
 "sensible qui permet d'accéder à la partition chiffrée sans mot de passe.\n"
 "Ce contenu devrait toujours être stocké, chiffré, en lieu sûr."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2241,88 +2241,88 @@ msgstr ""
 "sensible qui permet d'accéder à la partition chiffrée sans mot de passe.\n"
 "Ce contenu devrait être stocké, chiffré, en lieu sûr."
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "Le périphérique %s n'est pas un périphérique FVAULT2 valide."
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Impossible de déterminer la taille de la clé de volume pour FVAULT2, veuillez utiliser l'option --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Le périphérique %s est toujours actif et prévu pour une suppression différée.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
-#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
-#: src/cryptsetup.c:3261
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Échec en essayant de définir le chemin %s pour les jetons externes."
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Le redimensionnement d'un périphérique actif requiert que la clé du volume soit dans le porte-clé mais l'option --disable-keyring est définie."
 
-#: src/cryptsetup.c:1057
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "Test de performance interrompu."
 
-#: src/cryptsetup.c:1078
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     N/A\n"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u itérations par seconde pour une clé de %zu bits\n"
 
-#: src/cryptsetup.c:1094
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s N/A\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u itérations, %5u mémoire, %1u threads parallèles (CPUs) pour une clé de %zu bits (temps de %u ms demandé)\n"
 
-#: src/cryptsetup.c:1120
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "Le résultat de l'évaluation de performance n'est pas fiable."
 
-#: src/cryptsetup.c:1171
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Tests approximatifs en utilisant uniquement la mémoire (pas de stockage E/S).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1196
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algorithme |       Clé |     Chiffrement |    Déchiffrement\n"
 
-#: src/cryptsetup.c:1204
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Le chiffrement %s (avec une clé de %i bits) n'est pas disponible."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1225
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#    Algorithme |       Clé |     Chiffrement |    Déchiffrement\n"
 
-#: src/cryptsetup.c:1238
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "N/D"
 
-#: src/cryptsetup.c:1241
+#: src/cryptsetup.c:1242
 msgid "# Cipher speed test is not available.\n"
 msgstr "# Le test de la vitesse de chiffrement n'est pas disponible.\n"
 
-#: src/cryptsetup.c:1257
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2331,27 +2331,27 @@ msgstr ""
 "désirable (consultez la sortie de luksDump) et continuez (mise à niveau des métadonnées) uniquement si vous constatez que\n"
 "l'opération est légitime."
 
-#: src/cryptsetup.c:1263
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Entrez la phrase secrète pour protéger et mettre à niveau les métadonnées de rechiffrement : "
 
-#: src/cryptsetup.c:1307
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Réellement procéder à la récupération du rechiffrement LUKS2 ?"
 
-#: src/cryptsetup.c:1316
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Entrez la phrase secrète pour vérifier le résumé des métadonnées du rechiffrement : "
 
-#: src/cryptsetup.c:1318
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Entrez la phrase secrète pour la récupération du rechiffrement : "
 
-#: src/cryptsetup.c:1380
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Réellement essayer de réparer l'en-tête du périphérique LUKS ?"
 
-#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2359,7 +2359,7 @@ msgstr ""
 "\n"
 "Effacement interrompu."
 
-#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2367,167 +2367,167 @@ msgstr ""
 "Effacement du périphérique pour initialiser les sommes de contrôle d'intégrité.\n"
 "Vous pouvez interrompre ceci en appuyant sur CTRL+c (le reste du périphérique effacé contiendra toujours des sommes de contrôle invalides).\n"
 
-#: src/cryptsetup.c:1435 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Impossible de désactiver le périphérique temporaire %s."
 
-#: src/cryptsetup.c:1483
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Un chiffrement utilisant uniquement OPAL hw ne supporte pas --cipher et --key-size, les options sont ignorées."
 
-#: src/cryptsetup.c:1496
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "L'option d'intégrité peut uniquement être utilisée avec le format LUKS2."
 
-#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Options de taille des métadonnées LUKS2 non supportées."
 
-#: src/cryptsetup.c:1506
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL est uniquement supporté avec le format LUKS2."
 
-#: src/cryptsetup.c:1511
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Les étiquettes hw en ligne sont uniquement supportées avec le format LUKS2."
 
-#: src/cryptsetup.c:1520
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Le fichier d'en-tête n'existe pas, voulez-vous le créer ?"
 
-#: src/cryptsetup.c:1528
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Impossible de créer le fichier d'en-tête %s."
 
-#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
-#: src/integritysetup.c:346
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "Aucun motif connu de spécification d'intégrité n'a été détecté."
 
-#: src/cryptsetup.c:1556
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Impossible d'utiliser la taille de clé d'intégrité spécifiée."
 
-#: src/cryptsetup.c:1574
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Ne peut utiliser %s comme en-tête sur disque."
 
-#: src/cryptsetup.c:1603 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Cette action écrasera définitivement les données sur %s."
 
-#: src/cryptsetup.c:1640
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Le mot de passe Admin de OPAL ne peut pas être vide."
 
-#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
-#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Impossible de définir les paramètres pbkdf."
 
-#: src/cryptsetup.c:1785
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Décalage réduit de données est uniquement permis dans un en-tête LUKS détaché."
 
-#: src/cryptsetup.c:1792
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Le container %s du fichier LUKS est trop petit pour l'activation, il ne reste pas d'espace pour les données."
 
-#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Impossible de déterminer la taille de la clé de volume pour LUKS sans emplacement de clé, veuillez utiliser l'option --key-size."
 
-#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "Le périphérique requiert deux clés de volume."
 
-#: src/cryptsetup.c:1888
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Certains paramètres d'activation spécifiés ont été ignorés avec le chiffrement utilisant uniquement OPAL hw."
 
-#: src/cryptsetup.c:1893
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Le périphérique a été activé mais les fanions ne peuvent pas être rendus permanents."
 
-#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Emplacement de clé %d sélectionné pour suppression."
 
-#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Ceci est le dernier emplacement de clé. Le périphérique sera inutilisable après la suppression de cette clé."
 
-#: src/cryptsetup.c:1986
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Entrez toute phrase secrète restante : "
 
-#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Opération interrompue, l'emplacement de clé n'a PAS été effacé.\n"
 
-#: src/cryptsetup.c:2023
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Entrez la phrase secrète à effacer : "
 
-#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
-#: src/cryptsetup.c:3252
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "%s n'est pas un périphérique LUKS2 valide."
 
-#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Entrez une nouvelle phrase secrète pour l'emplacement de clé : "
 
-#: src/cryptsetup.c:2146 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Entrez le code PIN du jeton : "
 
-#: src/cryptsetup.c:2148 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Entrez le code PIN du jeton %d : "
 
-#: src/cryptsetup.c:2207
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "ATTENTION: Le paramètre --key-slot est utilisé pour le nouveau numéro de l'emplacement de clé.\n"
 
-#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Entrez une phrase secrète existante : "
 
-#: src/cryptsetup.c:2380
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Entrez la phrase secrète à changer : "
 
-#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Entrez la nouvelle phrase secrète : "
 
-#: src/cryptsetup.c:2446
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Entrez la phrase secrète pour l'emplacement de clé à convertir: "
 
-#: src/cryptsetup.c:2470
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "L'opération isLuks supporte seulement un périphérique en argument."
 
-#: src/cryptsetup.c:2575
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "L'emplacement de clé %d ne contient pas de clé non liée."
 
-#: src/cryptsetup.c:2580
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2535,52 +2535,52 @@ msgstr ""
 "Le contenu de l'en-tête avec une clé non liée est une information sensible.\n"
 "Ce contenu devrait être stocké, chiffré, en lieu sûr."
 
-#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s n'est pas un nom de périphérique %s actif."
 
-#: src/cryptsetup.c:2706
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s n'est pas un nom de périphérique LUKS actif ou l'en-tête est manquant."
 
-#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "L'option --header-backup-file est requise."
 
-#: src/cryptsetup.c:2833
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s n'est pas un périphérique géré par cryptsetup."
 
-#: src/cryptsetup.c:2844
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Le rafraîchissement n'est pas supporté pour un périphérique de type %s"
 
-#: src/cryptsetup.c:2894
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Type de métadonnée du périphérique %s non reconnu."
 
-#: src/cryptsetup.c:2896
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "La commande exige un périphérique et un nom de correspondance comme arguments."
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "Entrez le PSID OPAL : "
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "Entrez le mot de passe Admin de OPAL : "
 
-#: src/cryptsetup.c:2922
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "ATTENTION : Le disque ENTIER sera réinitialisé d'usine et toutes les données seront perdues ! Continuer ?"
 
-#: src/cryptsetup.c:2965
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2589,363 +2589,363 @@ msgstr ""
 "Cette opération va supprimer tous les emplacements de clés du périphérique %s.\n"
 "Le périphérique sera inutilisable après cette opération."
 
-#: src/cryptsetup.c:2972
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Opération interrompue, les emplacements de clés n'ont PAS été effacés.\n"
 
-#: src/cryptsetup.c:3011
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Type LUKS invalide, seuls luks1 et luks2 sont supportés."
 
-#: src/cryptsetup.c:3027
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "Le périphérique est déjà du type %s."
 
-#: src/cryptsetup.c:3034
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Cette opération va convertir %s au format %s.\n"
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Opération interrompue, le périphérique n'a PAS été converti.\n"
 
-#: src/cryptsetup.c:3077
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "L'option --priority, --label ou --subsystem est manquante."
 
-#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Le jeton %d est invalide."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "Le jeton %d est utilisé."
 
-#: src/cryptsetup.c:3126
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Échec lors de l'ajout du jeton %d au porte-clé luks2."
 
-#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Échec lors de l'affectation du jeton %d à l'emplacement de clé %d."
 
-#: src/cryptsetup.c:3154
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Le jeton %d n'est pas utilisé."
 
-#: src/cryptsetup.c:3191
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "Impossible d'importer le jeton depuis le fichier."
 
-#: src/cryptsetup.c:3216
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Impossible d'obtenir le jeton %d pour l'export."
 
-#: src/cryptsetup.c:3229
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Le jeton %d n'est pas assigné à l'emplacement de clé %d."
 
-#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Impossible de dissocier le jeton %d de l'emplacement de clé %d."
 
-#: src/cryptsetup.c:3297
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Les options --tcrypt-hidden, --tcrypt-system ou --tcrypt-backup sont supportées seulement pour un périphérique TCRYPT."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "L'option --veracrypt ou --disable-veracrypt est uniquement supportée pour un périphérique de type TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "L'option --veracrypt-pim est uniquement supportée pour un périphérique compatible avec VeraCrypt."
 
-#: src/cryptsetup.c:3307
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "L'option --veracrypt-query-pim est uniquement supportée pour un périphérique compatible avec VeraCrypt."
 
-#: src/cryptsetup.c:3309
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Les options --veracrypt-pim et --veracrypt-query-pim sont mutuellement exclusives."
 
-#: src/cryptsetup.c:3318
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "L'option --persistent n'est pas permise avec --test-passphrase."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Les options --refresh et --test-passphrase sont mutuellement exclusives."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "L'option --shared est permise uniquement pour ouvrir un périphérique ordinaire."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "L'option --skip est supportée uniquement pour ouvrir des périphériques ordinaires et loopaes."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "L'option --offset avec l'action d'ouverture est supportée uniquement pour des périphériques ordinaires et loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "L'option --tcrypt-hidden ne peut pas être combinée avec --allow-discards."
 
-#: src/cryptsetup.c:3337
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "L'option de taille de secteur avec l'action d'ouverture est uniquement supportée pour des périphérique ordinaires."
 
-#: src/cryptsetup.c:3341
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "L'option des secteurs IV (vecteur d'initialisation) de grande taille est supportée uniquement à l'ouverture de périphériques de type simple avec une taille de secteur supérieure à 512 octets."
 
-#: src/cryptsetup.c:3346
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "L'option --test-passphrase est autorisée uniquement pour ouvrir des périphériques LUKS, TCRYPT, BITLK et FVAULT2."
 
-#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Les options --device-size et --size ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3352
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "L'option --unbound est permise uniquement pour ouvrir un périphérique luks."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "L'option --unbound ne peut pas être utilisée sans --test-passphrase."
 
-#: src/cryptsetup.c:3359
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "L'option --volume-key-keyring ne peut pas être combinée avec --hash ou --volume-key-file."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Les deux options --volume-key-file doivent être appariées avec les options --key-size respectives."
 
-#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Les options --cancel-deferred et --deferred ne peuvent pas être utilisées en même temps."
 
-#: src/cryptsetup.c:3387
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "L'option --active-name peut uniquement être définie pour un périphérique LUKS2."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Les options --active-name et --force-offline-reencrypt ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Les options --new-volume-key et --keep-key ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Les options --new-volume-key-keyring et --keep-key ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "Une spécification d'emplacement de clé est requise."
 
-#: src/cryptsetup.c:3412
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Les options --align-payload et --offset ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "L'option --integrity-no-wipe peut uniquement être utilisée pour une action de formatage avec l'extension d'intégrité."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Seule une des deux possibilités --use-[u]random est autorisée."
 
-#: src/cryptsetup.c:3426
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "La taille de clé est requise avec l'option --unbound."
 
-#: src/cryptsetup.c:3446
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "L'action de jeton est invalide."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Le paramètre --key-description est requis pour l'action d'ajout d'un jeton."
 
-#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "L'action requiert un jeton spécifique. Utilisez le paramètre --token-id."
 
-#: src/cryptsetup.c:3457
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "L'option --unbound est uniquement valable avec l'action d'ajout d'un jeton."
 
-#: src/cryptsetup.c:3459
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Les options --key-slot et --unbound ne peuvent pas être combinées."
 
-#: src/cryptsetup.c:3464
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "L'action requiert un jeton spécifique. Utilisez le paramètre --key-slot."
 
-#: src/cryptsetup.c:3480
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<périphérique> [--type <type>] [<nom>]"
 
-#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "ouvrir le périphérique comme <nom>"
 
-#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
-#: src/integritysetup.c:556 src/integritysetup.c:558
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<nom>"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "fermeture du périphérique (supprime le « mapping »)"
 
-#: src/cryptsetup.c:3482 src/integritysetup.c:558
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "redimensionner le périphérique actif"
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "afficher le statut du périphérique"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <chiffrement>]"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "chiffrement pour test de performance"
 
-#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
-#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<périphérique>"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "essayer de réparer les métadonnées sur le disque"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "rechiffrer le périphérique LUKS2"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "supprimer tous les emplacements de clés (supprime la clé de chiffrement)"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "convertir LUKS depuis/vers le format LUKS2"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "définir les options de configuration permanentes pour LUKS2"
 
-#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<périphérique> [<fichier de la nouvelle clé>]"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "formater un périphérique LUKS"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "ajouter une clé au périphérique LUKS"
 
-#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<périphérique> [<fichier de clé>]"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "retire du périphérique LUKS la clé ou le fichier de clé fourni"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "modifie la clé ou le fichier de clé fourni pour le périphérique LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "converti une clé vers les nouveaux paramètres pbkdf"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<périphérique> <emplacement de clé>"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "efface de façon sécurisée la clé avec le numéro <emplacement de clé> du périphérique LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "afficher l'UUID du périphérique LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "teste si <périphérique> a un en-tête de partition LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "affiche les informations LUKS de la partition"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "affiche les informations du périphérique TCRYPT"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "affiche les informations du périphérique BITLK"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "affiche les informations du périphérique FVAULT2"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Suspendre le périphérique LUKS et effacer de façon sécurisée la clé (toutes les entrées/sorties sont suspendues)"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "Remettre en service le périphérique LUKS suspendu"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "Sauvegarder l'en-tête et les emplacements de clés du périphérique LUKS"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "Restaurer l'en-tête et les emplacements de clés du périphérique LUKS"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <périphérique>"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipuler les jetons LUKS2"
 
-#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2953,7 +2953,7 @@ msgstr ""
 "\n"
 "<action> est l'une de :\n"
 
-#: src/cryptsetup.c:3531
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2965,7 +2965,7 @@ msgstr ""
 "\touvrir : create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tfermer : remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3535
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -2980,7 +2980,7 @@ msgstr ""
 "<emplacement> est le numéro de l'emplacement de clé LUKS à modifier\n"
 "<fichier de clé> est un fichier optionnel contenant la nouvelle clé pour l'action luksAddKey\n"
 
-#: src/cryptsetup.c:3542
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -2989,7 +2989,7 @@ msgstr ""
 "\n"
 "Le format de métadonnées compilé par défaut est %s (pour l'action luksFormat).\n"
 
-#: src/cryptsetup.c:3547
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -2997,12 +2997,12 @@ msgstr ""
 "\n"
 "Le support du greffon de jeton externe LUKS2 est enabled.\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Chemin du greffon de jeton externe LUKS2 : %s.\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3010,7 +3010,7 @@ msgstr ""
 "\n"
 "Le support du greffon de jeton externe LUKS2 est désactivé.\n"
 
-#: src/cryptsetup.c:3554
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3027,7 +3027,7 @@ msgstr ""
 "PBKDF par défaut pour LUKS2 : %s\n"
 "\tTemps d'itération: %d, Mémoire requise: %d ko, Threads parallèles: %d\n"
 
-#: src/cryptsetup.c:3565
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3042,122 +3042,126 @@ msgstr ""
 "\tplain: %s, Clé: %d bits, Hachage mot de passe: %s\n"
 "\tLUKS: %s, Clé: %d bits, Hachage en-tête LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3574
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: La taille de clé par défaut en mode XTS (deux clés internes) sera doublée.\n"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s : exige %s comme arguments."
 
-#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Emplacement de clé non valide."
 
-#: src/cryptsetup.c:3660
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "La taille du périphérique doit être un multiple d'un secteur de 512 octets."
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "La spécification de la taille maximale de la zone chaude de rechiffrement est invalide."
 
-#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "La taille de la clé doit être un multiple de 8 bits"
 
-#: src/cryptsetup.c:3686
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Au plus 2 spécifications de taille de clé peuvent être fournies."
 
-#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Au plus %d spécifications de clés de volume peuvent être fournies."
 
-#: src/cryptsetup.c:3738
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Au plus %d spécifications de liaison de porte-clé peuvent être fournies."
 
-#: src/cryptsetup.c:3747
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "La taille maximum réduite pour le périphérique est 1 GiB."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "La taille réduite doit être un multiple d'un secteur de 512 octets."
 
-#: src/cryptsetup.c:3767
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "L'option --priority peut uniquement être ignore/normal/prefer."
 
-#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "La spécification du nombre maximal de tentatives est invalide."
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "Afficher ce message d'aide"
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "Afficher, en résumé, la syntaxe d'invocation"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "Afficher la version du paquet"
 
-#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "Options d'aide :"
 
-#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPTION...] <action> <paramètres de l'action>"
 
-#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "Il manque l'argument <action>."
 
-#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "Action inconnue."
 
-#: src/cryptsetup.c:3928
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "L'option --key-file est prioritaire par rapport à un fichier de clé spécifié en argument."
 
-#: src/cryptsetup.c:3934
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "Un seul argument --key-file est autorisé."
 
-#: src/cryptsetup.c:3939
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "La fonction de dérivation d'une clé basée sur un mot de passe (PBKDF = Password-Based Key Derivation Function) peut uniquement être pbkdf2 ou argon2i/argon2id."
 
-#: src/cryptsetup.c:3944
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Les itérations forcées de PBKDF ne peuvent pas être combinées avec l'option de temps d'itération."
 
-#: src/cryptsetup.c:3949
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Impossible de lier une clé de volume à un porte-clé quand le porte-clé est désactivé."
 
-#: src/cryptsetup.c:3954
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Impossible d'utiliser la description de clé de porte-clé quand le porte-clé est désactivé."
 
-#: src/cryptsetup.c:3959
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "L'intégrité en ligne doit être utilisée avec l'option --integrity."
 
-#: src/cryptsetup.c:3970
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Les options --keyslot-cipher et --keyslot-key-size doivent être utilisées ensembles."
 
-#: src/cryptsetup.c:3978
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Aucune action réalisée. Invoqué avec l'option --test-args.\n"
 
-#: src/cryptsetup.c:3991
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "Impossible de désactiver le verrouillage des métadonnées."
 
@@ -3222,7 +3226,7 @@ msgstr "La commande exige <hachage_racine> ou l'option --root-hash-file comme ar
 msgid "<data_device> <hash_device>"
 msgstr "<périph_données> <périph_hachage>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:553
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "formater le périphérique"
 
@@ -3238,7 +3242,7 @@ msgstr "vérifier le périphérique"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<périph_données> <nom> <périph_hachage> [<hachage_racine>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:556
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "afficher le statut du périphérique actif"
 
@@ -3246,7 +3250,7 @@ msgstr "afficher le statut du périphérique actif"
 msgid "<hash_device>"
 msgstr "<périph_hachage>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:557
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "afficher les informations sur le disque"
 
@@ -3288,7 +3292,7 @@ msgstr "Les options --panic-on-corruption et --restart-on-corruption ne peuvent
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "L'option --error-as-corruption doit être utilisée avec --panic-on-corruption ou --restart-on-corruption."
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3297,33 +3301,33 @@ msgstr ""
 "Ceci écrasera les données sur %s et %s de manière irrévocable.\n"
 "Pour préserver le périphérique de données, utilisez l'option --no-wipe (et ensuite activez-le avec --integrity-recalculate)."
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "Formaté avec une taille de balise de %u%s, intégrité interne %s.\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (étiquettes HW en ligne)"
 
-#: src/integritysetup.c:303
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Définir le fanion pour le recalcul n'est pas supporté, envisagez plutôt d'utiliser --wipe."
 
-#: src/integritysetup.c:380 src/integritysetup.c:540
+#: src/integritysetup.c:382 src/integritysetup.c:546
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Le périphérique %s n'est pas un périphérique INTEGRITY valable."
 
-#: src/integritysetup.c:553 src/integritysetup.c:557
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
 msgstr "<périph_intégrité>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
 msgstr "<périph_intégrigé> <nom>"
 
-#: src/integritysetup.c:577
+#: src/integritysetup.c:583
 #, c-format
 msgid ""
 "\n"
@@ -3334,7 +3338,7 @@ msgstr ""
 "<nom> est le périphérique à créer sous %s\n"
 "<périph_intégrité> est le périphérique contenant les données avec les balises d'intégrité\n"
 
-#: src/integritysetup.c:582
+#: src/integritysetup.c:588
 #, c-format
 msgid ""
 "\n"
@@ -3347,48 +3351,48 @@ msgstr ""
 "\tAlgorithme de somme de contrôle : %s\n"
 "\tTaille maximale du fichier de clé : %dko\n"
 
-#: src/integritysetup.c:639
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "La taille --%s n'est pas valide. Le maximum est %u octets."
 
-#: src/integritysetup.c:742
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "Les options du fichier de clé et de la taille de la clé doivent être spécifiées toutes les deux."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Les options du fichier de clé de l'intégrité du journal et de la taille de la clé doivent être spécifiées toutes les deux."
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "L'algorithme d'intégrité du journal doit être spécifié si la clé d'intégrité du journal est utilisée."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Les options du fichier de clé de chiffrement du journal et de la taille de la clé doivent être spécifiées toutes les deux."
 
-#: src/integritysetup.c:756
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "L'algorithme de chiffrement du journal doit être spécifié si la clé de chiffrement du journal est utilisée."
 
-#: src/integritysetup.c:760
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Les options de mode récupération et champ de bits sont mutuellement exclusives."
 
-#: src/integritysetup.c:767
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Les options de journal ne peuvent pas être utilisées en mode champ de bits."
 
-#: src/integritysetup.c:772
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Les options de champ de bits peuvent uniquement être utilisées en mode champ de bits."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:784
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Le mode en ligne ne peut pas être combiné avec les options de journal ou de carte de bits."
 
-#: src/integritysetup.c:782
+#: src/integritysetup.c:788
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Le mode en ligne ne peut pas être combiné avec un périphérique qui a des données séparées."
 
@@ -3742,32 +3746,32 @@ msgstr "Le périphérique n'est pas en cours de déchiffrement LUKS2. Option --d
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Le périphérique est en cours de rechiffrement en utilisant la résilience datashift. L'option --resilience demandée ne peut pas être appliquée."
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Impossible de déterminer la taille de la clé de volume pour LUKS sans emplacement de clé, veuillez utiliser l'option --new-key-size."
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "Le périphérique requiert une récupération de rechiffrement. Exécuter d'abord une réparation."
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "Le périphérique %s est déjà en cours de rechiffrement LUKS2. Voulez-vous redémarrer l'opération précédemment initialisée ?"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "Le rechiffrement LUKS2 historique n'est plus supporté."
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "Impossible de rechiffrer un périphérique LUKS2 configuré pour utiliser OPAL."
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "Le rechiffrement d'un périphérique avec un profil d'intégrité n'est pas supporté."
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3776,110 +3780,110 @@ msgstr ""
 "La taille de secteur demandée avec --sector-size %<PRIu32> est incompatible avec le superbloc %s\n"
 "(taille de bloc : %<PRIu32> octets) détecté sur le périphérique %s."
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Le chiffrement sans en-tête détaché (--header) n'est pas possible sans une réduction de la taille du périphérique de données (--reduce-device-size)"
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "Le décalage de données demandé doit être inférieur ou égal à la moitié du paramètre --reduce-device-size."
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "Ajustement de la valeur de --reduce-device-size à deux fois --offset %<PRIu64> (secteurs).\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "Le fichier temporaire d'en-tête %s existe déjà. Abandon."
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "Impossible de créer le fichier temporaire d'en-tête %s."
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "La taille des métadonnées LUKS2 est plus grande que la valeur de décalage des données."
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "Impossible de placer le nouvel en-tête au début du périphérique %s."
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s est maintenant actif et prêt pour un chiffrement en ligne.\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "Le périphérique actif %s n'est pas LUKS2."
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "Restauration de l'en-tête LUKS2 original."
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "Échec de la restauration de l'en-tête LUKS2 original."
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "Le fichier d'en-tête %s n'existe pas. Voulez-vous initialiser le déchiffrement LUKS2 du périphérique %s et exporter l'en-tête LUKS2 dans le fichier %s ?"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "Échec de l'ajout des permissions lecture/écriture pour exporter le fichier d'en-tête."
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "L'initialisation du rechiffrement a échoué. La sauvegarde de l'en-tête est disponible dans %s."
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Le déchiffrement LUKS2 est uniquement supporté avec un périphérique à l'en-tête détaché (avec l'offset de données défini à 0)."
 
-#: src/utils_reencrypt.c:1487
+#: src/utils_reencrypt.c:1490
 msgid "No token could unlock the device."
 msgstr "Aucun jeton n'a pu déverrouiller ce périphérique."
 
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
 msgid "Not enough free keyslots for reencryption."
 msgstr "Pas assez d'emplacements de clés libres pour le rechiffrement."
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1562
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Le fichier de clé ou le porte clé peut uniquement être utilisé avec --key-slot ou avec exactement un seul emplacement de clé actif."
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Entrez la phrase secrète pour l'emplacement de clé %d : "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Basculement de l'algorithme de chiffrement de données vers %s.\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Utilise --force-no-keyslots pour rechiffrer le périphérique avec les emplacements de clé actifs en passant directement les clés du volume."
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:1996
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "L'option --new-volume-key-file doit être appariée avec --new-key-size"
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Aucun paramètre de segment de donnée changé. Rechiffrement abandonné."
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3887,7 +3891,7 @@ msgstr ""
 "L'augmentation de la taille du secteur de chiffrement n'est pas supportée sur un périphérique hors-ligne.\n"
 "Activez d'abord le périphérique ou utilisez l'option --force-offline-reencrypt (dangereux !)."
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3896,58 +3900,58 @@ msgstr ""
 "\n"
 "Rechiffrement interrompu."
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Redémarrage du rechiffrement LUKS en mode hors-ligne forcé.\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Le périphérique %s contient des métadonnées LUKS endommagées. L'opération est abandonnée."
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Le périphérique %s est déjà un périphérique LUKS. L'opération est abandonnée."
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Le périphérique %s est déjà en cours de rechiffrement LUKS. L'opération est abandonnée."
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "Le déchiffrement LUKS2 requiert l'option --header."
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "La commande exige un périphérique comme argument."
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Versions conflictuelles. Le périphérique %s est LUKS1."
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Versions conflictuelles. Le périphérique %s est en cours de rechiffrement LUKS1."
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Versions conflictuelle. Le périphérique %s est LUKS2"
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Versions conflictuelles. Le périphérique %s est en cours de rechiffrement LUKS2."
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Rechiffrement LUKS2 déjà initialisé. Abandon de l'opération."
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "Le rechiffrement du périphérique n'est pas en cours."
 
@@ -4960,9 +4964,6 @@ msgstr "Erreur durant l'authentification par clé publique : "
 #~ msgid "Options --journal-size, --interleave-sectors, --sector-size, --tag-size and --no-wipe can be used only for format action."
 #~ msgstr "Les options --journal-size, --interleave-sectors, --sector-size, --tag-size et --no-wipe peuvent uniquement être utilisée avec l'action de format."
 
-#~ msgid "Invalid journal size specification."
-#~ msgstr "La spécification de la taille du journal est invalide."
-
 #~ msgid "Reencryption block size"
 #~ msgstr "Taille de bloc de re-chiffrement"
 

From f0bdfd6c17f38577189583e1d54b842d49bc72ad Mon Sep 17 00:00:00 2001
From: Hiroshi Takekawa <sian@big.or.jp>
Date: Sun, 19 Jul 2026 19:51:04 +0200
Subject: [PATCH 184/244] po: update ja.po (from translationproject.org)

---
 po/ja.po | 628 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 316 insertions(+), 312 deletions(-)

diff --git a/po/ja.po b/po/ja.po
index 61ab865dc..6f18abbd7 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -5,10 +5,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-06-29 21:30+0200\n"
-"PO-Revision-Date: 2026-06-30 21:06+0900\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-07-11 23:24+0900\n"
 "Last-Translator: Hiroshi Takekawa <sian@big.or.jp>\n"
 "Language-Team: Japanese <translation-team-ja@lists.sourceforge.net>\n"
 "Language: ja\n"
@@ -198,10 +198,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "メモリ上の LUKS2 メタデータのロールバックに失敗しました。"
 
 #: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
-#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
-#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
-#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -245,7 +245,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "分離したメタデータデバイスはこの暗号タイプではサポートされていません。"
 
 #: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
-#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "サポートされていない暗号化セクタサイズです。"
 
@@ -567,14 +567,14 @@ msgstr "ボリュームキーを指定されたキーリングからアンリン
 msgid "Failed to link volume key in user defined keyring."
 msgstr "ボリュームキーを指定されたキーリングにリンクできません。"
 
-#: lib/setup.c:4556 src/cryptsetup.c:2720
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "ボリューム %s は停止されていません。"
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
-#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
-#: src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "ボリュームキーがボリュームに合いません。"
 
@@ -587,8 +587,8 @@ msgstr "新しいキースロットを交換できませんでした。"
 msgid "Key slot %d is invalid."
 msgstr "キースロット %d は不正です。"
 
-#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
-#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "キースロット %d は非アクティブです。"
@@ -785,7 +785,7 @@ msgid "Cannot read requested amount of data."
 msgstr "指定されたサイズのデータを読み込めません。"
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "デバイス %s は存在しないかアクセスが拒否されました。"
@@ -1128,7 +1128,7 @@ msgstr "LUKS 暗号モード %s は不正です。"
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS ハッシュ %s は不正です。"
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "LUKS ヘッダに既知の不具合は検出されませんでした。"
 
@@ -1148,7 +1148,7 @@ msgstr "LUKS ヘッダのデータへのオフセットは 0 かヘッダサイ
 
 #: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "LUKS UUID の形式が間違っています。"
 
@@ -1673,7 +1673,7 @@ msgstr "dm-crypt セグメントの設定に失敗しました。"
 msgid "Failed to set dm-linear segment."
 msgstr "dm-linear セグメントの設定に失敗しました。"
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "LUKS2 ヘッダに既知の暗号スペックパターンを検出できませんでした。"
 
@@ -2136,8 +2136,8 @@ msgstr "キースロットの暗号化パラメータは LUKS2 デバイスで
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "キースロットの暗号化パラメータは LUKS2 キースロット暗号化と互換性がありません。"
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "未知の暗号スペックです。"
@@ -2164,8 +2164,8 @@ msgstr "警告: --hash パラメータは plain モードでキーファイル
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "警告: --keyfile-size オプションは無視されて、読み込みサイズは暗号鍵のサイズと同じになります。\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "%s の Blkid スキャンが失敗しました。"
@@ -2175,11 +2175,11 @@ msgstr "%s の Blkid スキャンが失敗しました。"
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "%s にデバイス署名が検出されました。既にあるデータを破壊しかねません。"
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
-#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
-#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "中止されました。\n"
 
@@ -2187,36 +2187,36 @@ msgstr "中止されました。\n"
 msgid "Option --key-file is required."
 msgstr "オプション --key-file が必要です。"
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "VeraCrypt PIM を入力してください: "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "不正な PIM: 解釈できません。"
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "不正 PIM の値で 0 です。"
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "不正な PIM の値: 範囲外です。"
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "このパスフレーズではデバイスヘッダが検出されませんでした。"
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "デバイス %s は有効な BITLK デバイスではありません。"
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "BITLK のボリュームキーサイズが決定できないので、--key-size を使ってください。"
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2226,7 +2226,7 @@ msgstr ""
 "暗号化されたパーティションにパスフレーズなしでアクセス可能にます。\n"
 "このダンプは暗号化された安全な所に保存してください。"
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2236,88 +2236,88 @@ msgstr ""
 "暗号化されたパーティションにパスフレーズなしでアクセス可能になります。\n"
 "このダンプは暗号化された安全な所に保存してください。"
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "デバイス %s は有効な FVAULT2 デバイスではありません。"
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "FVAULT2 のボリュームキーサイズが決定できないので、--key-size を使ってください。"
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "デバイス %s はまたアクティブで後から削除される予定になっています。.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
-#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
-#: src/cryptsetup.c:3261
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "外部トークンパス %s の設定に失敗しました。"
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "アクティブなデバイスをリサイズするにはボリュームキーがキーリングに必要ですが、--disable-keyring が指定されています。"
 
-#: src/cryptsetup.c:1057
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "ベンチマークが中止されました。"
 
-#: src/cryptsetup.c:1078
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     計測値なし\n"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u 回/秒 (%zu ビットの鍵)\n"
 
-#: src/cryptsetup.c:1094
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s 計測値なし\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u 回, %5u KB使用, %1u スレッド (%zu のビットの鍵) (%u ms 計測)\n"
 
-#: src/cryptsetup.c:1120
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "ベンチマークの結果は信頼できません。"
 
-#: src/cryptsetup.c:1171
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# テストはストレージI/Oがなくメモリ上のもののため目安です。\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1196
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algorithm |      キー |          暗号化 |           復号化\n"
 
-#: src/cryptsetup.c:1204
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "暗号 %s (キーサイズ %i ビット) は利用できません。"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1225
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algorithm |      キー |          暗号化 |           復号化\n"
 
-#: src/cryptsetup.c:1238
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "計測値なし"
 
-#: src/cryptsetup.c:1241
+#: src/cryptsetup.c:1242
 msgid "# Cipher speed test is not available.\n"
 msgstr "# 暗号スピードテストは利用できません。\n"
 
-#: src/cryptsetup.c:1257
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2325,27 +2325,27 @@ msgstr ""
 "保護されていない LUKS2 再暗号化メタデータが検出されました。再暗号化操作が望ましいものか確認してください。(luksDump の出力を見てください)\n"
 "そのうえで、この操作が問題ないと確認できたら継続(メタデータのアップグレード)してください。"
 
-#: src/cryptsetup.c:1263
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "再暗号化メタデータの保護とアップグレードのためのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1307
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "本当に LUKS2 再暗号化リカバリを行いますか？"
 
-#: src/cryptsetup.c:1316
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "再暗号化メタデータダイジェストを検証するためのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1318
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "再暗号化のリカバリのためのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1380
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "本当に LUKS デバイスヘッダの復元を試みていいですか？"
 
-#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2353,7 +2353,7 @@ msgstr ""
 "\n"
 "ワイプが中断されました。"
 
-#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2361,167 +2361,167 @@ msgstr ""
 "整合性チェックサムの初期化のためにデバイスのデータを消去しています。\n"
 "CTRL+c で中止できます (初期化されなかったデバイスのチェックサムは正しくなくなります)。\n"
 
-#: src/cryptsetup.c:1435 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "一時的デバイス %s を非アクティブにできません。"
 
-#: src/cryptsetup.c:1483
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "OPAL hw-only 暗号化は --cipher や --key-size をサポートしないため、無視されました。"
 
-#: src/cryptsetup.c:1496
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "整合性オプションは LUKS2 形式でしか使えません。"
 
-#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "サポートされていない LUKS2 メタデータのサイズオプションです。"
 
-#: src/cryptsetup.c:1506
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL は LUKS2 フォーマットでしかサポートされていません。"
 
-#: src/cryptsetup.c:1511
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "インライン hw タグは LUKS2 フォーマットでしかサポートされていません。"
 
-#: src/cryptsetup.c:1520
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "ヘッダファイルがありません。作成しますか？"
 
-#: src/cryptsetup.c:1528
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "ヘッダファイル %s を作成できません。"
 
-#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
-#: src/integritysetup.c:346
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "サポートしている整合性方式が検出されませんでした。"
 
-#: src/cryptsetup.c:1556
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "指定されたジャーナル整合性キーのサイズが使えません。"
 
-#: src/cryptsetup.c:1574
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "%s を on-disk ヘッダとして使えません。"
 
-#: src/cryptsetup.c:1603 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "%s のデータを上書きします。戻せません。"
 
-#: src/cryptsetup.c:1640
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "OPAL 管理者パスワードは空ではいけません。"
 
-#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
-#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "pbkdf パラメータを設定できません。"
 
-#: src/cryptsetup.c:1785
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "分離された LUKS ヘッダでのみ少ないデータオフセットが使えます。"
 
-#: src/cryptsetup.c:1792
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "LUKS ファイルコンテナ %s がアクティベートするには小さすぎます。データ用の領域に空きがありません。"
 
-#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "キースロットのない LUKS のボリュームキーサイズが決定できないので、--key-size を使ってください。"
 
-#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "デバイスには2つのボリュームキーが必要です。"
 
-#: src/cryptsetup.c:1888
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "いくつかの指定されたアクティベーションパラメータは OPAL hw-only 暗号化では無視されました。"
 
-#: src/cryptsetup.c:1893
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "デバイスはアクティベートされましたが、フラグを恒常的なものにできません。"
 
-#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "キースロット %d は削除対象として選択されました。"
 
-#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "これは最後のキースロットです。このキーがなくなるとデバイスは使用不能になります。"
 
-#: src/cryptsetup.c:1986
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "残っているパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "操作は中止されました。キースロットは消去されていません。\n"
 
-#: src/cryptsetup.c:2023
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "削除するキーのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
-#: src/cryptsetup.c:3252
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "デバイス %s は有効な LUKS2 デバイスではありません。"
 
-#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "キースロットの新しいパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2146 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "トークンPINを入力してください: "
 
-#: src/cryptsetup.c:2148 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "トークン %d PINを入力してください: "
 
-#: src/cryptsetup.c:2207
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "警告: --key-slot パラメータは新しいキースロット番号に使われます。\n"
 
-#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "有効なパスフレーズをどれか入力してください: "
 
-#: src/cryptsetup.c:2380
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "変更するキーのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "新しいキーのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2446
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "変換されるキースロットのパスフレーズを入力してください: "
 
-#: src/cryptsetup.c:2470
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "isLuks は一つのデバイス引数しかサポートしていません。"
 
-#: src/cryptsetup.c:2575
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "キースロット %d は unbound キーを含んでいません。"
 
-#: src/cryptsetup.c:2580
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2529,52 +2529,52 @@ msgstr ""
 "unbound キーを使ったヘッダダンプは取り扱いに注意すべき情報です。\n"
 "このダンプは暗号化された安全な所に保存してください。"
 
-#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s はアクティブな %s デバイスではありません。"
 
-#: src/cryptsetup.c:2706
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s はアクティブな LUKS デバイス名ではないか、ヘッダがありません。"
 
-#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "オプション --header-backup-file が必要です。"
 
-#: src/cryptsetup.c:2833
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s は cryptsetup で管理されているデバイスではありません。"
 
-#: src/cryptsetup.c:2844
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "リフレッシュはデバイスタイプ %s ではサポートされていません。"
 
-#: src/cryptsetup.c:2894
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "%s は認識できないメタデータデータタイプです。"
 
-#: src/cryptsetup.c:2896
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "コマンドはデバイスとマップされた名前を引数として必要とします。"
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "OPAL PSID を入力してください: "
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "OPAL 管理者パスワードを入力してください: "
 
-#: src/cryptsetup.c:2922
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "警告: ディスク「全体」が出荷状態にリセットされ、データは全て消失します！続けますか？"
 
-#: src/cryptsetup.c:2965
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2583,363 +2583,363 @@ msgstr ""
 "この処理はデバイス %s の全てのキースロットを消去します。\n"
 "デバイスのデータは使用できなくなります。"
 
-#: src/cryptsetup.c:2972
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "処理は中止されました。キースロットは消去されません。\n"
 
-#: src/cryptsetup.c:3011
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "不正な LUKS タイプです。luks1 と luks2 しかサポートしていません。"
 
-#: src/cryptsetup.c:3027
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "デバイスは既にタイプ %s です。"
 
-#: src/cryptsetup.c:3034
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "この処理は %s から %s フォーマットに変換します。\n"
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "処理は中止されました。デバイスは変換されませんでした。\n"
 
-#: src/cryptsetup.c:3077
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "オプション --priority, --label か --subsystem がありません。"
 
-#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "トークン %d は不正です。"
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "トークン %d は使用中です。"
 
-#: src/cryptsetup.c:3126
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "luks2-キーリングトークン %d を追加できませんでした。"
 
-#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "トークン %d をキースロット %d に割りあてられませんでした。"
 
-#: src/cryptsetup.c:3154
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "トークン %d は使われていません。"
 
-#: src/cryptsetup.c:3191
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "ファイルからトークンをインポートできません。"
 
-#: src/cryptsetup.c:3216
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "トークン %d をエクスポートのために取得できませんでした。"
 
-#: src/cryptsetup.c:3229
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "トークン %d をキースロット %d に割りあてられませんでした。"
 
-#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "トークン %d をキースロット %d の割り当てから解除できませんでした。"
 
-#: src/cryptsetup.c:3297
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "--tcrypt-hidden と --tcrypt-system と --tcrypt-backup は TCRYPT デバイスしか使えません。"
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "--veracrypt や --disable-veracrypt は TCRYPT デバイスでしか使えません。"
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "--veracrypt-pim は VeraCrypt 互換デバイスにしか使えません。"
 
-#: src/cryptsetup.c:3307
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "--veracrypt-query-pim は VeraCrypt 互換デバイスにしか使えません。"
 
-#: src/cryptsetup.c:3309
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "--veracrypt-pim と --veracrypt-query-pim はどちらかしか使えません。"
 
-#: src/cryptsetup.c:3318
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "--persistent は --test-passphrase と一緒には使えません。"
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "--refresh と --test-passphrase は同時には使えません。"
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "--shared は plain デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "--skip は plain か loopaes デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "--offset は plain か loopaes デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "--tcrypt-hidden は --allow-discards と一緒に使えません。"
 
-#: src/cryptsetup.c:3337
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "オープン時のセクタサイズオプションは plain デバイスでしかサポートされていません。"
 
-#: src/cryptsetup.c:3341
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "大きな IV セクタオプションは plain タイプでセクタサイズが 512 バイトより大きいものをオープンする時しかサポートしていません。"
 
-#: src/cryptsetup.c:3346
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "--test-passphrase は LUKS か TCRYPT か BITLK か FVAULT2 デバイスの open にしか使えません。."
 
-#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "--device-size と --size は一緒に使えません。"
 
-#: src/cryptsetup.c:3352
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "オプション --unbound は luks デバイスの open にしか使えません。"
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "オプション --unbound は --test-passphrase がないと使えません。"
 
-#: src/cryptsetup.c:3359
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "--volume-key-keyring オプションは --hash や --volume-key-file と一緒には使えません。"
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "--volume-key-file オプションは対応する --key-size オプションとペアになる必要があります。"
 
-#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "オプション --cancel-deferred と --deferred は同時に使えません。"
 
-#: src/cryptsetup.c:3387
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "オプション --active-nameは LUKS2 デバイスでしか設定できません。"
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "オプション --active-name と --force-offline-reencrypt は一緒に使えません。"
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "--new-volume-key-file オプションと --keep-key は一緒に使えません。"
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "--new-volume-key-keyring オプションと --keep-key は一緒に使えません。"
 
-#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "キースロットの指定が必要です。"
 
-#: src/cryptsetup.c:3412
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "--align-payload と --offset は一緒に使えません。"
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "--integrity-no-wipe は format で整合性拡張付きの時しか使えません。"
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "--use-[u]random は一つしか使えません。"
 
-#: src/cryptsetup.c:3426
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "--unbound にはキーサイズが必要です。"
 
-#: src/cryptsetup.c:3446
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "不正なトークンアクションです。"
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "--key-description はトークン追加には必須です。"
 
-#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "トークンを必要としています。--token-id を使用してください。"
 
-#: src/cryptsetup.c:3457
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "オプション --unbound はトークンの追加にしか使えません。"
 
-#: src/cryptsetup.c:3459
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "--key-slot と --unbound は一緒に使えません。"
 
-#: src/cryptsetup.c:3464
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "特定のキースロットを必要としています。--key-slot を使用してください。"
 
-#: src/cryptsetup.c:3480
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<デバイス> [--type <タイプ>] [<名前>]"
 
-#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "デバイスを <名前> としてオープン"
 
-#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
-#: src/integritysetup.c:556 src/integritysetup.c:558
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<名前>"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "デバイスをクローズします (マッピングを削除します)"
 
-#: src/cryptsetup.c:3482 src/integritysetup.c:558
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "アクティブデバイスをリサイズ"
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "デバイスステータスを表示"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <暗号>]"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "暗号ベンチマーク"
 
-#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
-#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<デバイス>"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "on-disk メタデータを修復しようとしています"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "LUKS2 デバイスを再暗号化"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "全てのキースロットを消去します (暗号鍵も削除します)"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "LUKS2 から LUKS もしくは LUKS から LUKS2 形式に変換します"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "LUKS2 の permanent configuration オプションを設定します"
 
-#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<デバイス> [<新しいキーファイル>]"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "LUKS デバイスをフォーマットします"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "LUKS デバイスにキーを追加します"
 
-#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<デバイス> [<キーファイル>]"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "与えられたキーかキーファイルを LUKS デバイスから削除します。"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "与えられた LUKS デバイスのキーかキーファイルを変更します"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "キーを新しい pbkdf パラメータに変換します"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<デバイス> <キースロット>"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "<キースロット>のキーを LUKS デバイスから削除します"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "LUKS デバイスの UUID を表示"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "<デバイス> の LUKS パーティションヘッダをテストします"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "LUKS パーティション情報をダンプします"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "TCRYPT デバイス情報をダンプします"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "BITLK デバイス情報をダンプします"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "FVAULT2 デバイス情報をダンプします"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "LUKS デバイスを停止してキーを削除します (全てのI/Oは停止します)"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "停止していた LUKS デバイスを再開します"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "LUKS デバイスヘッダとキースロットをバックアップします"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "LUKS デバイスヘッダとキースロットをリストアします"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <デバイス>"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "LUKS2 トークンを操作します"
 
-#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2947,7 +2947,7 @@ msgstr ""
 "\n"
 "<action> は以下のうちの一つです:\n"
 
-#: src/cryptsetup.c:3531
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2959,7 +2959,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3535
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -2974,7 +2974,7 @@ msgstr ""
 "<キースロット> は変更する LUKS キースロット番号\n"
 "<キーファイル> は luskAddKey でオプションで与えられる新しいキーのキーファイル\n"
 
-#: src/cryptsetup.c:3542
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -2983,7 +2983,7 @@ msgstr ""
 "\n"
 "デフォルトのコンパイル時に決められたメタデータ形式は %s です(luksFormat で使われます)。\n"
 
-#: src/cryptsetup.c:3547
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -2991,12 +2991,12 @@ msgstr ""
 "\n"
 "LUKS2 外部トークンプラグインサポートは有効です。\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "LUKS2 外部トークンプラグインパス: %s.\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3004,7 +3004,7 @@ msgstr ""
 "\n"
 "LUKS2 外部トークンプラグインサポートは無効です。\n"
 
-#: src/cryptsetup.c:3554
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3021,7 +3021,7 @@ msgstr ""
 "デフォルト LUKS2 向け PBKDF: %s\n"
 "\t繰り返す時間: %d, 使うメモリ: %dkB, 並列スレッド: %d\n"
 
-#: src/cryptsetup.c:3565
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3036,122 +3036,126 @@ msgstr ""
 "\tplain: %s, キー: %d ビット, パスワードハッシュ: %s\n"
 "\tLUKS: %s, キー: %d ビット, LUKS ヘッダハッシュ: %s, 乱数生成: %s\n"
 
-#: src/cryptsetup.c:3574
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: XTS モードのデフォルトキーサイズは (2つの内部キーがあるため) 倍になります。\n"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: は %s を引数で与える必要があります"
 
-#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "キースロットは不正です。"
 
-#: src/cryptsetup.c:3660
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "デバイスサイズは 512 バイトセクタの倍数である必要があります。"
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "再暗号化ホットゾーン最大サイズの指定が不正です。"
 
-#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "キーサイズは 8bit の倍数でなければなりません"
 
-#: src/cryptsetup.c:3686
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "多くても2つのキーサイズ設定しか指定できません。"
 
-#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "多くても %d 個のボリュームキーしか指定できません。"
 
-#: src/cryptsetup.c:3738
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "多くても %d 個のキーリングリンクしか指定できません。"
 
-#: src/cryptsetup.c:3747
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "デバイスを減らせる最大値は 1 GiB です。"
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "減らすサイズは 512 バイトセクタの倍数である必要があります。"
 
-#: src/cryptsetup.c:3767
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "--priority の引数は ignore/normal/prefer のいずれかのみです。"
 
-#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "最大試行回数の指定が不正です。"
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "このヘルプを表示します"
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "コンパクトな使用法表示をします"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "パッケージのバージョンを表示"
 
-#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "ヘルプオプション:"
 
-#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[オプション...] <アクション> <アクション特有>"
 
-#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "<アクション> がありません。"
 
-#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "未知のアクションです。"
 
-#: src/cryptsetup.c:3928
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "--key-file は他で指定されたキーファイルを上書きします。"
 
-#: src/cryptsetup.c:3934
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "--key-file は一つしか使えません。"
 
-#: src/cryptsetup.c:3939
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "パスワードからキーを作る関数 (PBKDF) は pbkdf2 argon2i argon2id のいずれかのみです。"
 
-#: src/cryptsetup.c:3944
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "PBKDF の繰り返し回数の強制と繰り返し時間指定オプションは共存できません。"
 
-#: src/cryptsetup.c:3949
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "キーリングが無効化されているためボリュームキーをキーリングにリンクできません。"
 
-#: src/cryptsetup.c:3954
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "キーリングが無効化されているためキーリングキー記述を使えません。"
 
-#: src/cryptsetup.c:3959
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "インライン整合性拡張は --integrity オプション付きの時しか使えません。"
 
-#: src/cryptsetup.c:3970
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "--keyslot-cipher と --keyslot-key-size は同時に使う必要があります。"
 
-#: src/cryptsetup.c:3978
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "--test-args オプションつきだったため、何もしません。\n"
 
-#: src/cryptsetup.c:3991
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "メタデータロックを禁止できません。"
 
@@ -3216,7 +3220,7 @@ msgstr "コマンドは <root_hash> か --root-hash-file オプションを引
 msgid "<data_device> <hash_device>"
 msgstr "<データデバイス> <ハッシュデバイス>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:553
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "デバイスをフォーマット"
 
@@ -3232,7 +3236,7 @@ msgstr "デバイスを検証"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<データデバイス> <名前> <ハッシュデバイス> [<ルートハッシュ>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:556
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "アクティブデバイスのステータスを表示"
 
@@ -3240,7 +3244,7 @@ msgstr "アクティブデバイスのステータスを表示"
 msgid "<hash_device>"
 msgstr "<ハッシュデバイス>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:557
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "ディスク上の情報を表示"
 
@@ -3282,7 +3286,7 @@ msgstr "--panic-on-corruption と --restart-on-corruption は同時に使えま
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "--error-as-corruption オプションは --panic-on-corruption か --restart-on-corruption と一緒に使う必要があります。"
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3291,33 +3295,33 @@ msgstr ""
 "%s と %s のデータを復元不能な形で上書きします。\n"
 "データデバイスを保持するにはオプション --no-wipe を使ってください (その後、--integrity-recalculate を付けてアクティベートしてください)。"
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "タグサイズ %u%s、内部整合性は %s でフォーマットされました。\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (インラインHWタグ)"
 
-#: src/integritysetup.c:303
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "再計算フラグの設定はサポートされていません。代わりに --wipe を使うことを検討してください。"
 
-#: src/integritysetup.c:380 src/integritysetup.c:540
+#: src/integritysetup.c:382 src/integritysetup.c:546
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "デバイス %s が有効な INTEGRITY デバイスではありません。"
 
-#: src/integritysetup.c:553 src/integritysetup.c:557
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
 msgstr "<整合性デバイス>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
 msgstr "<整合性デバイス> <名前>"
 
-#: src/integritysetup.c:577
+#: src/integritysetup.c:583
 #, c-format
 msgid ""
 "\n"
@@ -3328,7 +3332,7 @@ msgstr ""
 "<名前> は %s に作られるデバイス\n"
 "<整合性デバイス> は整合性タグを格納するデバイス\n"
 
-#: src/integritysetup.c:582
+#: src/integritysetup.c:588
 #, c-format
 msgid ""
 "\n"
@@ -3341,48 +3345,48 @@ msgstr ""
 "\tチェックサムアルゴリズム: %s\n"
 "        最大キーファイルサイズ: %dkB\n"
 
-#: src/integritysetup.c:639
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "不正な --%s サイズです。最大は %u バイトです。"
 
-#: src/integritysetup.c:742
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "キーファイルとキーサイズの両方の指定が必要です。"
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "ジャーナル整合性キーファイルとキーサイズの両方の指定が必要です。"
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "ジャーナル整合性キーを使う場合はアルゴリズムの指定が必要です。"
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "ジャーナル暗号キーファイルとキーサイズの両方の指定が必要です。"
 
-#: src/integritysetup.c:756
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "ジャーナル暗号キーを使う場合はアルゴリズムの指定が必要です。"
 
-#: src/integritysetup.c:760
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "リカバリと bitmap モードオプションは同時には使えません。"
 
-#: src/integritysetup.c:767
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "ジャーナルオプションは bitmap モードでは使えません。"
 
-#: src/integritysetup.c:772
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "bitmap オプションは bitmap モードでしか使えません。"
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:784
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "インラインモードは journal や bitmap オプションと一緒に使えません。"
 
-#: src/integritysetup.c:782
+#: src/integritysetup.c:788
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "インラインモードは分離データデバイスと一緒には使えません。"
 
@@ -3736,32 +3740,32 @@ msgstr "デバイスは LUKS2 復号状態にありません。オプション -
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "デバイスはデータシフト耐性を使った再暗号化状態にあります。--resilience オプションは適用できません。"
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "キースロットのない LUKS のボリュームキーサイズが決定できないので、--new-key-size を使ってください。"
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "デバイスは再暗号化リカバリが必要です。先に修復してください。"
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "デバイス %s は既に LUKS2 再暗号化状態にあります。以前に初期化された処理に復帰しますか？"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "古い LUKS2 再暗号化はサポートされなくなりました。"
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "OPAL を使うよう設定された LUKS2 デバイスは再暗号化できません。"
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "整合性プロファイルつきのデバイスの再暗号化はサポートされていません。"
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3770,110 +3774,110 @@ msgstr ""
 "要求された --sector-size %<PRIu32> は %s superblock\n"
 "(ブロックサイズ: %<PRIu32> バイト、デバイス %s)と互換性がありません。"
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "データデバイスサイズの縮小(--reduce-device-size)なしに分離ヘッダ(--header)による暗号化はできません。"
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "要求されたデータオフセットは --reduce-device-size パラメータの半分以下である必要があります。"
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "--reduce-device-size の値を --offset %<PRIu64> (セクタ) の倍にします。\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "テンポラリヘッダファイル %s は既に存在しているので、中止します。"
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "テンポラリヘッダファイル %s を作成できません。"
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "LUKS2 メタデータサイズがデータシフト値より大きいです。"
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "デバイス %s の先頭に新しいヘッダを置けません。"
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s がアクティブでオンライン暗号化可能です。\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "アクティブなデバイス %s は LUKS2 ではありません。"
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "オリジナルの LUKS2 ヘッダを復元しています。"
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "オリジナルの LUKS ヘッダの復元に失敗しました。"
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "ヘッダファイル %s が存在しません。デバイス %s の復号化をして LUKS2 ヘッダをファイル %s に出力しますか？"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "エクスポートされたヘッダファイルに読み書き権限を付与できません。"
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "再暗号化の初期化に失敗しました。ヘッダのバックアップは %s にあります。"
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "LUKS2 復号は分離(detached)ヘッダデバイスしかサポートしていません(データへのオフセットが0)。"
 
-#: src/utils_reencrypt.c:1487
+#: src/utils_reencrypt.c:1490
 msgid "No token could unlock the device."
 msgstr "デバイスをアンロックできるトークンがありません。"
 
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
 msgid "Not enough free keyslots for reencryption."
 msgstr "再暗号化に必要な空きキースロットがありません。"
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1562
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "キーファイルやキーリングキー記述は --key-slot と使うか、1 つのキースロットだけアクティブの時にしか使えません。"
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "キースロット %d のパスフレーズを入力してください: "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "データの暗号化用の暗号アルゴリズムを %s にします。\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "アクティブキースロットがあるデバイスを再暗号化するには --force-no-keyslots を使いボリュームキーを直接渡してください。"
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:1996
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "--new-volume-key-file オプションは --new-key-size とペアにする必要があります。"
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "データセグメントのパラメータが変わっていません。再暗号化を中止します。"
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3881,7 +3885,7 @@ msgstr ""
 "オフラインデバイスの暗号化セクタサイズの増加はサポートしていません。\n"
 "まずデバイスをアクティベートするか、--force-offline-reencrypt オプションを使ってください (ただし危険です！)。"
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3890,58 +3894,58 @@ msgstr ""
 "\n"
 "再暗号化が中断されました。"
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "LUKS 再暗号化を強制オフラインモードで再開します。\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "デバイス %s は壊れた LUKS メタデータを含んでいます。処理を中止します。"
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "デバイス %s は既に LUKS デバイスです。処理を中止します。"
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "デバイス %s は既に LUKS 再暗号化状態にあります。処理を中止します。"
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "LUKS2 復号には --header オプションが必要です。"
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "コマンドはデバイスを引数として必要とします。"
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "バージョンが衝突しています。デバイス %s は LUKS1 です。"
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "バージョンが衝突しています。デバイス %s は LUKS1 再暗号化状態にあります。"
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "バージョンが衝突しています。デバイス %s は LUKS2 です。"
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "バージョンが衝突しています。デバイス %s は LUKS2 再暗号化状態にあります。"
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "LUKS2 再暗号化が既に初期化済なので操作を中止します。"
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "再暗号化処理を実行中ではありません。"
 

From ef05e9ecf641dbc0aec4ac54dc688eed36759c01 Mon Sep 17 00:00:00 2001
From: Seong-ho Cho <darkcircle.0426@gmail.com>
Date: Sun, 19 Jul 2026 19:51:04 +0200
Subject: [PATCH 185/244] po: update ko.po (from translationproject.org)

---
 po/ko.po | 633 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 318 insertions(+), 315 deletions(-)

diff --git a/po/ko.po b/po/ko.po
index 0053efdc4..68a9dca65 100644
--- a/po/ko.po
+++ b/po/ko.po
@@ -6,19 +6,18 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-06-29 21:30+0200\n"
-"PO-Revision-Date: 2026-07-02 09:35+0900\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-07-13 11:02+0900\n"
 "Last-Translator: Seong-ho Cho <darkcircle.0426@gmail.com>\n"
 "Language-Team: Korean <translation-team-ko@googlegroups.com>\n"
 "Language: ko_KR\n"
-"X-Bugs: Report translation errors to the Language-Team address.\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"\n"
-"X-Generator: Poedit 3.7\n"
+"X-Bugs: Report translation errors to the Language-Team address.\n"
+"X-Generator: Poedit 3.6\n"
 
 #: lib/libdevmapper.c:419
 msgid "Cannot initialize device-mapper, running as non-root user."
@@ -201,10 +200,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "메모리에서 LUKS2 메타데이터 되돌리기 실패."
 
 #: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
-#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
-#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
-#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -248,7 +247,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "이 암호화 형식에서 분리한 메타데이터 장치를 지원하지 않습니다."
 
 #: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
-#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "지원하지 않는 암호화 섹터 크기입니다."
 
@@ -570,14 +569,14 @@ msgstr "사용자 지정 키 모음으로의 볼륨 키 연결 해제 실패."
 msgid "Failed to link volume key in user defined keyring."
 msgstr "사용자 지정 키 모음으로의 볼륨 키 연결 실패."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2720
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "%s 볼륨은 대기 상태가 아닙니다."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
-#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
-#: src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "볼륨 키가 볼륨과 맞지 않습니다."
 
@@ -590,8 +589,8 @@ msgstr "새 키 슬롯 교환 실패."
 msgid "Key slot %d is invalid."
 msgstr "%d번 키 슬롯이 적절하지 않습니다."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
-#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "%d번 키 슬롯은 동작 중이 아닙니다."
@@ -788,7 +787,7 @@ msgid "Cannot read requested amount of data."
 msgstr "요청한 양의 데이터를 읽을 수 없습니다."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "%s 장치가 없거나 접근이 막혔습니다."
@@ -1131,7 +1130,7 @@ msgstr "LUKS 암호화 방식 모드 %s이(가) 적절하지 않습니다."
 msgid "LUKS hash %s is invalid."
 msgstr "%s LUKS 해시가 적절하지 않습니다."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "LUKS 헤더에 알려진 문제가 없습니다."
 
@@ -1151,7 +1150,7 @@ msgstr "LUKS 헤더용 데이터 오프셋은 0 또는 헤더 길이보다 더 
 
 #: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "잘못된 LUKS UUID 형식을 지정했습니다."
 
@@ -1676,7 +1675,7 @@ msgstr "dm-crypt 세그먼트 설정 실패."
 msgid "Failed to set dm-linear segment."
 msgstr "dm-linear 세그먼트 설정 실패."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "LUKS2 헤더에서 찾은 알려진 암호화 방식 명세 패턴이 없습니다."
 
@@ -2139,8 +2138,8 @@ msgstr "키 슬롯 암호화 매개변수는 LUKS2 장치에서만 설정할 수
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "키 슬롯 암호화 매개변수는 LUKS2 키 슬롯 암호화 과정과 호환성이 없습니다."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "확인한 암호화 방식 명세 패턴 중 알려진 항목이 없습니다."
@@ -2167,8 +2166,8 @@ msgstr "경고: 키 파일을 지정한 상황에서 일반 모드에서는 --ha
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "경고: 읽기 대상 크기가 암호화 키 크기와 동일한 상황에서는 --keyfile-size 옵션을 무시합니다.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "%s의 blkid 검사 실패."
@@ -2178,11 +2177,11 @@ msgstr "%s의 blkid 검사 실패."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "%s에서 장치 시그니처를 확인했습니다. 더 이상 진행하면 기존 데이터를 파괴할 수 있습니다."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
-#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
-#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "동작을 멈추었습니다.\n"
 
@@ -2190,36 +2189,36 @@ msgstr "동작을 멈추었습니다.\n"
 msgid "Option --key-file is required."
 msgstr "--key-file 옵션이 필요합니다."
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "VeraCrypt PIM 입력: "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "부적절한  PIM 값: 해석 오류."
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "부적절한 PIM 값: 0."
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "부적절한 PIM 값: 범위 밖."
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "이 암호로 확인한 장치 헤더가 없습니다."
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "%s 장치는 적절한 BITLK 장치가 아닙니다."
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "BITLK의 볼륨 키 크기를 알 수 없습니다. --key-size 옵션을 사용하십시오."
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2229,7 +2228,7 @@ msgstr ""
 "접근할 수 있게 하는 민감 정보가 들어있습니다.\n"
 "이 덤프는 항상 안전한 영역에 암호화하여 저장해야 합니다."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2239,88 +2238,88 @@ msgstr ""
 "접근할 수 있게 하는 민감 정보가 들어있습니다.\n"
 "이 덤프는 안전한 영역에 암호화하여 저장해야 합니다."
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "%s 장치는 적절한 FVAULT2 장치가 아닙니다."
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "FVAULT2 볼륨 키 크기를 확인할 수 없습니다. --key-size 옵션을 활용하십시오."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "%s 장치는 여전히 동작중이며 지연된 제거 동작에 따라 제거 예정입니다.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
-#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
-#: src/cryptsetup.c:3261
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "%s 외부 토큰 경로 설정 실패."
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "동작 중인 장치 크기 조정은 키 모음의 볼륨 키가 필요합니다만 --disable-keyring 옵션을 지정했습니다."
 
-#: src/cryptsetup.c:1057
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "비교 시험을 중단했습니다."
 
-#: src/cryptsetup.c:1078
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     N/A\n"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u 초당 반복 + %zu-비트 키\n"
 
-#: src/cryptsetup.c:1094
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s N/A\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u 반복, %5u 메모리, %1u 병렬처리 스레드(CPUs) + %zu-비트 키 (%u ms 시간에 요청)\n"
 
-#: src/cryptsetup.c:1120
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "비교 시험 결과는 신뢰할 만하지 않습니다."
 
-#: src/cryptsetup.c:1171
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# 시험은 대략적으로 메모리만 사용하여 추산했습니다 (저장장치 입출력 아님).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1196
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s 알고리즘  |       키  |      암호화     |      해  독    \n"
 
-#: src/cryptsetup.c:1204
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "%s 암호화 방식(%i 비트 키)을 사용할 수 없습니다."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1225
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     알고리즘  |       키  |      암호화     |      해  독    \n"
 
-#: src/cryptsetup.c:1238
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "해당 없음"
 
-#: src/cryptsetup.c:1241
+#: src/cryptsetup.c:1242
 msgid "# Cipher speed test is not available.\n"
 msgstr "# 암호화 방식 처리 속도를 시험할 수 없습니다.\n"
 
-#: src/cryptsetup.c:1257
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2328,27 +2327,27 @@ msgstr ""
 "보호하지 않은 LUKS2 재암호화 메타데이터를 확인했습니다. 재암호화 동작이 적절한 지 검증하시고 (luksDump 출력 확인)\n"
 "동작에 문제가 없다고 확신이 들 경우에만 계속(메타데이터 업그레이드)하십시오."
 
-#: src/cryptsetup.c:1263
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "재암호화 메타데이터 보호 및 업그레이드 암호 입력: "
 
-#: src/cryptsetup.c:1307
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "정말로 LUKS2 재암호화 복원을 진행하시겠습니까?"
 
-#: src/cryptsetup.c:1316
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "재암호화 메타데이터 다이제스트 검증용 암호 입력: "
 
-#: src/cryptsetup.c:1318
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "재암호화 복원 암호 입력: "
 
-#: src/cryptsetup.c:1380
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "정말로 LUKS 장치 헤더 복원을 시도하시겠습니까?"
 
-#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2356,7 +2355,7 @@ msgstr ""
 "\n"
 "소거 중단함."
 
-#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2364,167 +2363,167 @@ msgstr ""
 "무결성 체크섬을 초기화하기 위해 장치를 소거합니다.\n"
 "CTRL+c 키를 눌러 이 동작을 중단할 수 있습니다 (소거하지 않은 장치의 나머지 영역에 부적절한 체크섬이 있을 수도 있음).\n"
 
-#: src/cryptsetup.c:1435 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "%s 임시 장치의 동작을 해제할 수 없습니다."
 
-#: src/cryptsetup.c:1483
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "OPAL 하드웨어 전용 암호화는 --cipher와 --key-size 를 지원하지 않아, 옵션을 무시했습니다."
 
-#: src/cryptsetup.c:1496
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "LUKS2 형식에 대해서\"만\" 무결성 옵션을 사용할 수 있습니다."
 
-#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "지원하지 않는 LUKS2 메타데이터 크기 옵션."
 
-#: src/cryptsetup.c:1506
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL은 LUKS2 형식에서만 지원합니다."
 
-#: src/cryptsetup.c:1511
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "인라인 하드웨어 태그는 LUKS2 형식에서만 지원합니다."
 
-#: src/cryptsetup.c:1520
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "헤더 파일이 없습니다. 만드시겠습니까?"
 
-#: src/cryptsetup.c:1528
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "%s 헤더 파일을 만들 수 없습니다."
 
-#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
-#: src/integritysetup.c:346
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "알려진 무결성 명세 패턴이 없습니다."
 
-#: src/cryptsetup.c:1556
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "지정 무결성 키 크기를 사용할 수 없습니다."
 
-#: src/cryptsetup.c:1574
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "%s을(를) 디스크 저장 헤더로 활용할 수 없습니다."
 
-#: src/cryptsetup.c:1603 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "이 동작은 %s의 데이터를 돌이킬 수 없도록 덮어쓰기합니다."
 
-#: src/cryptsetup.c:1640
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "OPAL 관리자 암호는 비워둘 수 없습니다."
 
-#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
-#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "pbkdf 매개변수 설정 실패."
 
-#: src/cryptsetup.c:1785
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "데이터 오프셋 값의 감소 조절은 LUKS 헤더를 장치에서 분리했을 때만 가능합니다."
 
-#: src/cryptsetup.c:1792
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "%s LUKS 파일 컨테이너의 동작을 개시하기에는 너무 작습니다. 데이터 저장에 필요한 여분 공간이 없습니다."
 
-#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "키 슬롯을 누락한 상태에서 LUKS의 볼륨 키 크기를 알 수 없습니다. --key-size 옵션을 사용하십시오."
 
-#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "장치에 볼륨 키 두개가 필요합니다."
 
-#: src/cryptsetup.c:1888
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "OPAL 하드웨어 전용 암호화시 몇가지 동작 개시 매개 변수는 무시합니다."
 
-#: src/cryptsetup.c:1893
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "장치 동작을 개시했으나, 플래그를 영속적으로 적용할 수는 없습니다."
 
-#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "%d번 키 슬롯을 삭제 대상으로 선택했습니다."
 
-#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "이 키 슬롯이 마지막입니다. 이 키를 제거하면 장치를 사용할 수 없습니다."
 
-#: src/cryptsetup.c:1986
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "임의의 나머지 암호 입력: "
 
-#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "동작을 멈추었습니다. 키 슬롯을 소거하지 않았습니다.\n"
 
-#: src/cryptsetup.c:2023
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "삭제할 암호 입력: "
 
-#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
-#: src/cryptsetup.c:3252
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "%s 장치는 적절한 LUKS2 장치가 아닙니다."
 
-#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "키 슬롯의 새 암호 입력: "
 
-#: src/cryptsetup.c:2146 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "토큰 PIN 입력: "
 
-#: src/cryptsetup.c:2148 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "%d번 토큰 PIN 입력: "
 
-#: src/cryptsetup.c:2207
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "경고: --key-slot 매개변수를 새 키 슬롯 번호에 사용했습니다.\n"
 
-#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "기존 임의의 암호 입력: "
 
-#: src/cryptsetup.c:2380
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "바꿀 암호 입력: "
 
-#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "새 암호 입력: "
 
-#: src/cryptsetup.c:2446
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "키 슬롯을 변환할 암호 입력: "
 
-#: src/cryptsetup.c:2470
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "isLuks 동작에 대해 하나의 장치 인자만 지원합니다."
 
-#: src/cryptsetup.c:2575
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "%d번 키 슬롯에는 범위 밖 키가 없습니다."
 
-#: src/cryptsetup.c:2580
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2532,52 +2531,52 @@ msgstr ""
 "범위 밖 키를 내포하는 헤더 덤프에 민감 정보가 들어있습니다.\n"
 "이 덤프는 안전한 위치에 암호화 하여 저장해야 합니다."
 
-#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s은(는) 동작 중인 %s 장치 이름이 아닙니다."
 
-#: src/cryptsetup.c:2706
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s은(는) 동작 중인 LUKS 장치 이름이 아니거나 헤더가 빠졌습니다."
 
-#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "--header-backup-file 옵션이 필요합니다."
 
-#: src/cryptsetup.c:2833
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s은(는) cryptsetup으로 관리하는 장치가 아닙니다."
 
-#: src/cryptsetup.c:2844
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "%s 장치 형식에는 새로 고침 (최신화) 동작을 지원하지 않습니다."
 
-#: src/cryptsetup.c:2894
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "인식할 수 없는 %s 메타데이터 장치 형식."
 
-#: src/cryptsetup.c:2896
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "명쳥에 장치와 매핑 이름을 인자로 지정해야 합니다."
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "OPAL PSID 입력: "
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "OPAL 관리자 암호 입력: "
 
-#: src/cryptsetup.c:2922
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "경고: 전체 디스크를 공장 초기화하며, 모든 데이터를 잃게 됩니다! 계속 하시겠습니까?"
 
-#: src/cryptsetup.c:2965
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2586,363 +2585,363 @@ msgstr ""
 "이 동작은 %s 장치의 모든 키 슬롯을 지웁니다.\n"
 "이 동작이 끝나면 장치를 사용할 수 없습니다."
 
-#: src/cryptsetup.c:2972
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "동작을 멈추었습니다. 키 슬롯을 소거하지 않았습니다.\n"
 
-#: src/cryptsetup.c:3011
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "부적절한 LUKS 형식, luks1 및 luks2 형식만 지원합니다."
 
-#: src/cryptsetup.c:3027
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "장치가 이미 %s 형식입니다."
 
-#: src/cryptsetup.c:3034
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "이 동작은 %s을 %s 형식으로 변환합니다.\n"
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "동작을 멈추었습니다. 장치를 변환하지 \"않았습니다\".\n"
 
-#: src/cryptsetup.c:3077
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "--priority, --label, --subsystem 옵션 중 하나가 빠졌습니다."
 
-#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "%d번 토큰이 부적절합니다."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "%d번 토큰은 사용중입니다."
 
-#: src/cryptsetup.c:3126
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "luks2-keyring 토큰 %d번 추가 실패."
 
-#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "키 슬롯 %2$d번으로의 토큰 %1$d번 할당 실패."
 
-#: src/cryptsetup.c:3154
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "%d번 토큰은 미사용중입니다."
 
-#: src/cryptsetup.c:3191
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "파일에서 토큰 가져오기 실패."
 
-#: src/cryptsetup.c:3216
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "내보낼 %d번 토큰 가져오기 실패."
 
-#: src/cryptsetup.c:3229
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "%d번 토큰은 %d번 키 슬롯에 할당하지 않았습니다."
 
-#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "%d번 키 슬롯에서 %d번 토큰 할당 해제 실패."
 
-#: src/cryptsetup.c:3297
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "--tcrypt-hidden, --tcrypt-system, --tcrypt-backup 옵션은 TCRYPT 장치 형식에서만 지원합니다."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "--veracrypt, --disable-veracrypt 옵션은 TCRYPT 장치 형식에서만 지원합니다."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "--veracrypt-pim 옵션은 VeraCrypt 호환 장치에서만 지원합니다."
 
-#: src/cryptsetup.c:3307
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "--veracrypt-query-pim 옵션은 VeraCrypt 호환 장치에서만 지원합니다."
 
-#: src/cryptsetup.c:3309
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "--veracrypt-pim 옵션과 --veracrypt-query-pim 옵션은 혼용할 수 없습니다."
 
-#: src/cryptsetup.c:3318
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "--persistent 옵션은 --test-passphrase 옵션의 혼용을 허용하지 않습니다."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "--refresh 옵션과 --test-passphrase 옵션은 혼용할 수 없습니다"
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "--shared 옵션 사용은 일반 장비를 열 때만 허용합니다."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "--skip 옵션 사용은 일반 장비와 루프 장비를 열 때만 지원합니다."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "열기 동작시 --offset 옵션의 사용은 일반 장비와 루프 장비에서만 지원합니다."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "--tcrypt-hidden 옵션과 --allow-discards 옵션은 혼용할 수 없습니다."
 
-#: src/cryptsetup.c:3337
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "섹터 크기 옵션과 열기 동작은 일반 장비 에서만 지원합니다."
 
-#: src/cryptsetup.c:3341
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Large IV 섹터 옵션은 512 바이트 이상의 섹터 크기를 가진 일반 장비를 열 때만 지원합니다."
 
-#: src/cryptsetup.c:3346
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "--test-passphrase 옵션 사용은 LUKS, TCRYPT, BITLK, FVAULT2 장비를 열 때만 허용합니다."
 
-#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "--device-size 옵션과 --size 옵션은 혼용할 수 없습니다."
 
-#: src/cryptsetup.c:3352
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "--unbound 옵션의 사용은 luks 장치를 열 때만 허용합니다."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "--unbound 옵션은 --test-passphrase 옵션을 제외하고는 사용할 수 없습니다."
 
-#: src/cryptsetup.c:3359
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "--volume-key-keyring 옵션은 --hash 옵션 또는 --volume-key-file 옵션과 혼용할 수 없습니다."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "--volume-key-file 옵션 개별 지정에 따라 --key-size 옵션을 하나씩 짝으로 지정해야 합니다."
 
-#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "--cancel-deferred 옵션과 --deferred 옵션은 혼용할 수 없습니다."
 
-#: src/cryptsetup.c:3387
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "--active-name 옵션은 LUKS2 장치에 대해서만 설정할 수 있습니다."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "--active-name 옵션과 --force-offline-reencrypt 옵션은 혼용할 수 없습니다."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "--new-volume-key-file 옵션과 --keep-key 옵션은 혼용할 수 없습니다."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "--new-volume-key-keyring 옵션과 --keep-key 옵션은 혼용할 수 없습니다."
 
-#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "키 슬롯 명세가 필요합니다."
 
-#: src/cryptsetup.c:3412
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "--align-payload 옵션과 --offset 옵션은 혼용할 수 없습니다."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "--integrity-no-wipe 옵션은 무결성 확장 기능을 동반한 포매팅 동작에만 사용할 수 있습니다."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "--use-[u]random 옵션 중 하나만 허용합니다."
 
-#: src/cryptsetup.c:3426
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "키 크키 값은 --unbound 옵션 사용이 필요합니다."
 
-#: src/cryptsetup.c:3446
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "부적절한 토근 동작입니다."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "--key-description 매개변수는 토큰 추가 동작에 있어 필수입니다."
 
-#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "동작에 지정 토큰이 필요합니다. --token-id 매개변수를 활용하십시오."
 
-#: src/cryptsetup.c:3457
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "--unbound 옵션은 토큰 추가 동작일 설정했을 경우에만 유효합니다."
 
-#: src/cryptsetup.c:3459
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "--key-slot 옵션과 --unbound 옵션은 함께 사용할 수 없습니다."
 
-#: src/cryptsetup.c:3464
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "동작에 지정 키 슬롯이 필요합니다. --key-slot 매개변수를 활용하십시오."
 
-#: src/cryptsetup.c:3480
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<장치> [--type <형식>] [<명칭>]"
 
-#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "<명칭> 으로 장치를 엽니다"
 
-#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
-#: src/integritysetup.c:556 src/integritysetup.c:558
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<명칭>"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "장치를 닫습니다 (매핑 제거)"
 
-#: src/cryptsetup.c:3482 src/integritysetup.c:558
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "활성 장치 크기를 조절합니다."
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "장치 상태를 보여줍니다"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <암호화방식>]"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "암호화 방식을 비교 시험합니다"
 
-#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
-#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<장치>"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "디스크 메타데이터의 복구를 시도합니다."
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "LUKS2 장치를 재암호화합니다"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "모든 키 슬롯을 삭제합니다 (암호화 키 제거)"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "LUKS 에서/을 LUKS2 으로/부터 형식을 상호 변환합니다"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "LUKS2의 영구 설정 옵션을 설정합니다"
 
-#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<장치> [<새_키_파일>]"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "LUKS 장치를 포매팅합니다"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "LUKS 장치에 키를 추가합니다"
 
-#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<장치> [<키_파일>]"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "보관 키 또는 키 파일을 LUKS 장치에서 제거합니다"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "LUKS 장치의 보관 키 또는 키 파일을 바꿉니다"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "새 pbkdf 매개변수를 사용하여 키를 변환합니다"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<장치> <키_슬롯>"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "LUKS 장치에서 <키_슬롯> 번호로 키를 소거합니다"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "LUKS 장치의 UUID를 출력합니다"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "<장치>의 LUKS 분할 영역 헤더를 시험합니다"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "LUKS 분할 영역 정보 덤프"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "TCRYPT 장치 정보 덤프"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "BITLK 장치 정보 덤프"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "FVAULT2 장치 정보 덤프"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "LUKS 장치를 대기 상태로 놓고 키를 소거합니다 (모든 입출력 동작을 중단)"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "대기 상태로 들어간 LUKS 장치의 동작을 재개합니다"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "LUKS 장치 헤더와 키 슬롯을 백업합니다"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "LUKS 장치 헤더와 키 슬롯을 복원합니다"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <장치>"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "LUKS2 토큰을 처리합니다"
 
-#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2950,7 +2949,7 @@ msgstr ""
 "\n"
 "<동작>은 다음 중 하나입니다:\n"
 
-#: src/cryptsetup.c:3531
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2962,7 +2961,7 @@ msgstr ""
 "\t열기: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\t닫기: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3535
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -2977,7 +2976,7 @@ msgstr ""
 "<키_슬롯>은 수정할 LUKS 키 슬롯 번호\n"
 "<키_파일>은 luksAddKey 동작에 사용할 새 키의 추가 키 파일입니다\n"
 
-#: src/cryptsetup.c:3542
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -2986,7 +2985,7 @@ msgstr ""
 "\n"
 "컴파일 과정에 들어간 기본 메타데이터 형식은 %s 입니다(luksFormat 동작용).\n"
 
-#: src/cryptsetup.c:3547
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -2994,12 +2993,12 @@ msgstr ""
 "\n"
 "LUKS2 외부 토큰 플러그인 지원을 사용합니다.\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "LUKS2 외부 토큰 플러그인 경로: %s.\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3007,7 +3006,7 @@ msgstr ""
 "\n"
 "LUKS2 외부 토큰 플러그인 지원 사용을 해제합니다.\n"
 
-#: src/cryptsetup.c:3554
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3024,7 +3023,7 @@ msgstr ""
 "LUKS2의 기본 PBKDF: %s\n"
 "\t반복 횟수: %d, 요구 메모리 용량: %dkB, 병렬 스레드: %d\n"
 
-#: src/cryptsetup.c:3565
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3039,122 +3038,126 @@ msgstr ""
 "\t평문: %s, 키: %d비트, 암호 해싱: %s\n"
 "\tLUKS: %s, 키: %d비트, LUKS 헤더 해싱: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3574
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: XTS 모드에서의 기본 키 크기(내부 키 2개)가 2배로 늘어납니다.\n"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: %s 인자 값이 필요합니다"
 
-#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "키 슬롯이 적절하지 않습니다."
 
-#: src/cryptsetup.c:3660
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "장치 크기는 512 바이트 섹터의 배수여야 합니다."
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "부절적한 최대 재암호화 핫존 크기 지정 값입니다."
 
-#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "키 크기는 8비트의 배수여야 합니다."
 
-#: src/cryptsetup.c:3686
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "최대 키 크키 명세 2가지를 지정할 수 있습니다."
 
-#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "최대 볼륨 키 명세 %d가지를 지정할 수 있습니다."
 
-#: src/cryptsetup.c:3738
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "최대 키 모음 링크 명세 %d가지를 지정할 수 있습니다."
 
-#: src/cryptsetup.c:3747
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "최대 장치 축소 용량은 1GiB 입니다."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "축소 용량은 512바이트 섹터의 배수여야 합니다."
 
-#: src/cryptsetup.c:3767
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "--priority 옵션은 ignore/normal/prefer 셋 중 한가지 값만 지정 가능합니다."
 
-#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "부적절한 최대 시도 지정 값입니다."
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "이 도움말 메시지를 나타냅니다"
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "간단한 사용법을 나타냅니다"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "패키지 버전을 출력합니다"
 
-#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "도움말 옵션:"
 
-#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[옵션...] <동작> <동작별_옵션>"
 
-#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "<동작> 인자가 빠졌습니다."
 
-#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "알 수 없는 동작."
 
-#: src/cryptsetup.c:3928
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "--key-file 옵션은 키 파일 인자 값보다 우선합니다."
 
-#: src/cryptsetup.c:3934
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "--key-file 인자는 하나만 허용합니다."
 
-#: src/cryptsetup.c:3939
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "암호 기반 키 파생 함수(PBKDF)는 pbkdf2 또는 argon2i/argon2id만 지정 가능합니다."
 
-#: src/cryptsetup.c:3944
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "PBKDF 강제 반복 옵션은 반복 횟수 옵션과 함께 사용할 수 없습니다."
 
-#: src/cryptsetup.c:3949
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "키 모음을 사용하지 않을 때는 볼륨 키를 키 모음에 연결할 수 없습니다."
 
-#: src/cryptsetup.c:3954
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "키 모음을 사용하지 않을 때는 키 모음 키 설명을 사용할 수 없습니다."
 
-#: src/cryptsetup.c:3959
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "인라인 무결성 확인은 --integrity 옵션을 함꼐 사용해야 합니다."
 
-#: src/cryptsetup.c:3970
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "--keyslot-cipher 옵션과 --keyslow-key-size 옵션을 함께 사용해야 합니다."
 
-#: src/cryptsetup.c:3978
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "취한 동작이 없습니다. --test-args 옵션을 넣어 실행했습니다.\n"
 
-#: src/cryptsetup.c:3991
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "메타데이터 잠금을 해제할 수 없습니다."
 
@@ -3219,7 +3222,7 @@ msgstr "명령에 <루트_해시> 또는 --root-hash-file 옵션 인자 값이 
 msgid "<data_device> <hash_device>"
 msgstr "<데이터_장치> <해시_장치>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:553
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "장치를 포매팅합니다"
 
@@ -3235,7 +3238,7 @@ msgstr "장치를 검증합니다"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<데이터_장치> <명칭> <해시_장치> [<루트_해시>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:556
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "장치 동작 상황을 보여줍니다"
 
@@ -3243,7 +3246,7 @@ msgstr "장치 동작 상황을 보여줍니다"
 msgid "<hash_device>"
 msgstr "<해시_장치>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:557
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "디스크 정보를 보여줍니다"
 
@@ -3285,7 +3288,7 @@ msgstr "--panic-on-corruption 옵션과 --restart-on-corruption 옵션을 혼용
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "--error-as-corruption 옵션은 --panic-on-corruption 옵션 또는 --restart-on-corruption 옵션을 함께 사용해야 합니다."
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3294,33 +3297,33 @@ msgstr ""
 "%s와 %s의 데이터를 덮어쓰며 돌이킬 수 없습니다.\n"
 "데이터 장치를 보존하려면 --no-wipe 옵션을 사용하십시오 (그리고 --integrity-recalculate 옵션으로 장치 동작 시작)."
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "%u%s 태그 크기와 내부 무결성 %s(으)로 포매팅했습니다.\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (인라인 hw 태그)"
 
-#: src/integritysetup.c:303
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "재계산 플래그 설정은 지원하지 않습니다. --wipe 옵션 사용을 대신 고려하십시오."
 
-#: src/integritysetup.c:380 src/integritysetup.c:540
+#: src/integritysetup.c:382 src/integritysetup.c:546
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "%s 장치는 적절한 \"무결성\" 장치가 아닙니다."
 
-#: src/integritysetup.c:553 src/integritysetup.c:557
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
 msgstr "<무결성_장치>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
 msgstr "<무결성_장치> <명칭>"
 
-#: src/integritysetup.c:577
+#: src/integritysetup.c:583
 #, c-format
 msgid ""
 "\n"
@@ -3331,7 +3334,7 @@ msgstr ""
 "<명칭> 은 %s에 만들 장치\n"
 "<무결성_장치>는 무결성 태그와 데이터가 들어간 장치입니다\n"
 
-#: src/integritysetup.c:582
+#: src/integritysetup.c:588
 #, c-format
 msgid ""
 "\n"
@@ -3344,48 +3347,48 @@ msgstr ""
 "\t체크섬 알고리즘: %s\n"
 "\t최대 키 파일 크기: %dkB\n"
 
-#: src/integritysetup.c:639
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "부적절한 --%s 크기 값입니다. 최대값은 %u 바이트입니다."
 
-#: src/integritysetup.c:742
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "키 파일과 키 크기 옵션을 함께 지정해야 합니다."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "저널 무결성 키와 키 크키 옵션을 함께 지정해야 합니다."
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "저널 무결성 키를 사용한다면 저널 무결성 알고리즘은 지정해야 합니다."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "저널 암호화 키 파일과 키 크기 옵션을 함께 지정해야 합니다."
 
-#: src/integritysetup.c:756
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "저널 암호화 키를 사용할 경우 저널 암호화 알고리즘을 지정해야 합니다."
 
-#: src/integritysetup.c:760
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "복구 및 비트맵 모드 옵션은 혼용할 수 없습니다."
 
-#: src/integritysetup.c:767
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "저널 옵션은 비트맵 모드에서 사용할 수 없습니다."
 
-#: src/integritysetup.c:772
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "비트맵 옵션은 비트맵 모드에서만 사용할 수 있습니다."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:784
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "인라인 모드는 저널 옵션 또는 비트맵 옵션과 혼용할 수 없습니다."
 
-#: src/integritysetup.c:782
+#: src/integritysetup.c:788
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "인라인 모드는 개별 데이터 장치와 혼용할 수 없습니다."
 
@@ -3739,32 +3742,32 @@ msgstr "LUKS2 암호화 장치가 아닙니다. --decrypt 옵션의 사용이 
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "데이터 쉬프트 복원 기능을 활용하여 장치를 재암호화중입니다. 요청한 --resilience 옵션을 적용할 수 없습니다."
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "키 슬롯을 제외하고 LUKS 볼륨 키 크기를 확인할 수 없습니다. --new-key-size 옵션을 활용하십시오."
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "장치 재암호화 복원이 필요합니다. 우선 복원을 실행하십시오."
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "%s 장치가 이미 LUKS2 재암호화 상태입니다. 앞서 초기화한 동작을 재개하시겠습니까?"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "기존의 LUKS2 재암호화 기능은 더 이상 지원하지 않습니다."
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "OPAL을 사용하도록 설정한 LUKS2 장치를 재암호화할 수 없습니다."
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "무결성 프로파일을 동반한 장치 재암호화는 지원하지 않습니다."
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3773,110 +3776,110 @@ msgstr ""
 "요청한 --sector-size %1$<PRIu32> 옵션은 %4$s 장치에서 찾은\n"
 "%2$s 수퍼블록(블록 크기: %3$<PRIu32>바이트)과의 호환성이 없습니다."
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "분리 헤더(--header)를 제외한 암호화는 데이터 장치 용량을 줄이지 않고는(--reduce-device-size) 불가능합니다."
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "요청한 데이터 오프셋은 --reduce-device-size 매개변수 값의 절반보다 작거나 같아야 합니다."
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "--reduce-device-size 값을 --offset %<PRIu64> (섹터)로 두번 조정합니다.\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "%s 임시 헤더 파일이 이미 있습니다. 멈춤."
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "%s 임시 헤더 파일을 만들 수 없습니다."
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "LUKS2 메타데이터 크기가 데이터 쉬프트 값보다 큽니다."
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "장치 %s의 헤드에 새 헤더 설정 실패."
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s은(는) 이제부터 동작하며 온라인 암호화 대기중입니다.\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "%s 동작 장치는 LUKS2 버전이 아닙니다."
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "원본 LUKS2 헤더를 복원합니다."
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "원본 LUKS2 헤더 복원 실패."
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "%s 헤더 파일이 없습니다. %s 장치의 LUKS2 해독 과정을 초기화하고 %s 파일로 LUKS2 헤더를 내보낼까요?"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "내보낸 헤더 파일의 읽기/쓰기 권한 추가 실패."
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "재엄호화 초기화 실패. 헤더 백업은 %s에 있습니다."
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "분리한 헤더 장치에서만 LUKS2 해독을 지원합니다 (데이터 오프셋 0값으로)."
 
-#: src/utils_reencrypt.c:1487
+#: src/utils_reencrypt.c:1490
 msgid "No token could unlock the device."
 msgstr "장치 잠금을 해제할 수 있는 토큰이 없습니다."
 
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
 msgid "Not enough free keyslots for reencryption."
 msgstr "재암호화에 활용할 여분의 키 슬롯이 부족합니다."
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1562
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "키 파일 또는 키 모음의 키 설명은 --key-slot 옵션의 값으로 또는 정확히 하나의 동작하는 키 슬롯과 사용할 수 있습니다."
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "키 슬롯 %d번의 암호 입력: "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "데이터 암호화 암호 알고리즘을 %s(으)로 전환합니다.\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "볼륨 키를 직접 전달하여 동작하고 있는 키 슬롯으로 장치를 재암호화하려면 --force-no-keyslots 옵션을 사용하십시오."
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:1996
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "--new-volume-key-file 옵션은 --new-key-size 옵션과 함께 사용해야 합니다."
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "바뀐 데이터 세그먼트 매개변수가 없습니다. 재암호화를 멈추었습니다."
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3884,7 +3887,7 @@ msgstr ""
 "오프라인 장치에서의 암호화 섹터 크기 증가는 지원하지 않습니다.\n"
 "우선 장치를 동작하게 만들거나 --force-offline-reencrypt 옵션(위험!)을 사용하십시오."
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3893,58 +3896,58 @@ msgstr ""
 "\n"
 "재암호화를 중단했습니다."
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "강제 오프라인 모드에서 LUKS 재암호화 동작을 재개합니다.\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "%s 장치에 망가진 LUKS 메타데이터가 있습니다. 동작을 멈춥니다."
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "%s 장치에 이미 LUKS 장치가 있습니다. 동작을 멈춥니다."
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "%s 장치가 이미 LUKS 재암호화 상태입니다. 동작을 멈춥니다."
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "LUKS2 암호화 해제에 --header 옵션이 필요합니다."
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "명쳥에 장치를 인자로 지정해야합니다."
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "버전이 맞지 않습니다. %s 장치는 LUKS1입니다."
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "버전이 맞지 않습니다. %s 장치는 LUKS1 재암호화 상태입니다."
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "버전이 맞지 않습니다. %s 장치는 LUKS2입니다."
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "버전이 맞지 않습니다. %s 장치는 LUKS2 재암호화 상태입니다."
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "LUKS2 재암호화를 이미 초기화했습니다. 동작을 멈줍니다."
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "장치 재암호화를 진행하고 있지 않습니다."
 

From ecb592663ce557133f7fd8213cb978d849aa6657 Mon Sep 17 00:00:00 2001
From: Jakub Bogusz <qboosh@pld-linux.org>
Date: Sun, 19 Jul 2026 19:51:04 +0200
Subject: [PATCH 186/244] po: update pl.po (from translationproject.org)

---
 po/pl.po | 628 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 316 insertions(+), 312 deletions(-)

diff --git a/po/pl.po b/po/pl.po
index d3970610c..8c4bc8031 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -5,10 +5,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-06-29 21:30+0200\n"
-"PO-Revision-Date: 2026-07-03 19:35+0200\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-07-11 18:45+0200\n"
 "Last-Translator: Jakub Bogusz <qboosh@pld-linux.org>\n"
 "Language-Team: Polish <translation-team-pl@lists.sourceforge.net>\n"
 "Language: pl\n"
@@ -199,10 +199,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nie udało się wycofać zmian w metadanych LUKS2 w pamięci."
 
 #: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
-#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
-#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
-#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -246,7 +246,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Osobne urządzenie metadanych nie jest obsługiwane dla tego rodzaju szyfrowania."
 
 #: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
-#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Nieobsługiwany rozmiar sektora szyfrowania."
 
@@ -568,14 +568,14 @@ msgstr "Nie udało się odłączyć klucza wolumenu z pęku kluczy podanego prze
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Nie udało się dołączuć klucza wolumenu do pęku kluczy zdefiniowanego przez użytkownika."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2720
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Wolumen %s nie jest wstrzymany."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
-#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
-#: src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "Klucz wolumenu nie pasuje do wolumenu."
 
@@ -588,8 +588,8 @@ msgstr "Nie udało się podstawić nowego klucza."
 msgid "Key slot %d is invalid."
 msgstr "Numer klucza %d jest nieprawidłowy."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
-#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Klucz %d nie jest aktywny."
@@ -786,7 +786,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Nie można odczytać żądanej ilości danych."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Urządzenie %s nie istnieje lub dostęp jest zabroniony."
@@ -1129,7 +1129,7 @@ msgstr "Tryb szyfru LUKS %s jest nieprawidłowy."
 msgid "LUKS hash %s is invalid."
 msgstr "Skrót LUKS %s jest nieprawidłowy."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "W nagłówku LUKS nie wykryto żadnych znanych problemów."
 
@@ -1149,7 +1149,7 @@ msgstr "Offset danych dla nagłówka LUKS musi wynosić 0 lub więcej niż rozmi
 
 #: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Podano zły format LUKS UUID."
 
@@ -1674,7 +1674,7 @@ msgstr "Nie udało się ustawić segmentu dm-crypt."
 msgid "Failed to set dm-linear segment."
 msgstr "Nie udało się ustawić segmentu dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Nie wykryto znanego wzorca określającego szyfr w nagłówku LUKS2."
 
@@ -2137,8 +2137,8 @@ msgstr "Parametry szyfrowania kluczy mogą być ustawione tylko dla urządzeń L
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametry szyfrowania kluczy nie są zgodne z szyfrowaniem kluczy LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Nie wykryto znanego wzorca określającego szyfr."
@@ -2165,8 +2165,8 @@ msgstr "UWAGA: Parametr --hash jest ignorowany w trybie zwykłym z podanym pliki
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "UWAGA: Opcja --keyfile-size jest ignorowana, rozmiar odczytu jest taki sam, jak rozmiar klucza szyfrującego.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Skanowanie blkid dla %s nie powiodło się."
@@ -2176,11 +2176,11 @@ msgstr "Skanowanie blkid dla %s nie powiodło się."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Wykryto sygnatury urządzeń na %s. Dalsze operacje mogą uszkodzić istniejące dane."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
-#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
-#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "Operacja przerwana.\n"
 
@@ -2188,36 +2188,36 @@ msgstr "Operacja przerwana.\n"
 msgid "Option --key-file is required."
 msgstr "Wymagana jest opcja --key-file."
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "Proszę wprowadzić PIM VeraCrypt: "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "Błędna wartość PIM: błąd składni."
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "Błędna wartość PIM: 0."
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "Błędna wartość PIM: poza zakresem."
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "Nie wykryto nagłówka urządzenia z tym hasłem."
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "Urządzenie %s nie jest prawidłowym urządzeniem BITLK."
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "Nie można określić rozmiaru klucza wolumenu dla BITLK, proszę użyć opcji --key-size."
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2228,7 +2228,7 @@ msgstr ""
 "Zrzut ten powinien być zawsze zapisywany w postaci zaszyfrowanej\n"
 "w bezpiecznym miejscu."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2239,88 +2239,88 @@ msgstr ""
 "Zrzut ten powinien być zawsze zapisywany w postaci zaszyfrowanej\n"
 "w bezpiecznym miejscu."
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "Urządzenie %s nie jest prawidłowym urządzeniem FVAULT2."
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nie można określić rozmiaru klucza wolumenu dla FVAULT2, proszę użyć opcji --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Urządzenie %s jest nadal aktywne i zaplanowane do odroczonego usunięcia.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
-#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
-#: src/cryptsetup.c:3261
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Nie udało się ustawić ścieżki tokenów zewnętrznych %s."
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Zmiana rozmiaru aktywnego urządzenia wymaga klucza wolumenu w pęku, ale ustawiono opcję --disable-keyring."
 
-#: src/cryptsetup.c:1057
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "Test szybkości przerwany."
 
-#: src/cryptsetup.c:1078
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     N/D\n"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u iteracji/sekundę dla klucza %zu-bitowego\n"
 
-#: src/cryptsetup.c:1094
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s N/D\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u iteracji, pamięć: %5u, równoległe wątki (CPU): %1u dla klucza %zu-bitowego (żądany czas %u ms)\n"
 
-#: src/cryptsetup.c:1120
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "Wynik testu wydajności nie jest wiarygodny."
 
-#: src/cryptsetup.c:1171
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testy są przybliżone tylko z użyciem pamięci (bez we/wy na dysk).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1196
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s  Algorytm |     Klucz |     Szyfrowanie | Odszyfrowywanie\n"
 
-#: src/cryptsetup.c:1204
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Szyfr %s (rozmiar klucza w bitach: %i) nie jest dostępny."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1225
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#      Algorytm |     Klucz |     Szyfrowanie | Odszyfrowywanie\n"
 
-#: src/cryptsetup.c:1238
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "N/D"
 
-#: src/cryptsetup.c:1241
+#: src/cryptsetup.c:1242
 msgid "# Cipher speed test is not available.\n"
 msgstr "# Test szybkości szyfru nie jest dostępny.\n"
 
-#: src/cryptsetup.c:1257
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2328,27 +2328,27 @@ msgstr ""
 "Wybryto niezabezpieczone metadane ponownego szyfrowania LUKS2. Proszę sprawdzić, czy operacja ponownego szyfrowania jest pożądana (p. wyjście luksDump)\n"
 "i kontynuować (uaktualnić metadane) tylko jeśli ta operacja ma być faktycznie wykonana."
 
-#: src/cryptsetup.c:1263
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Hasło do zabezpieczenia i uaktualnienia metadanych ponownego szyfrowania: "
 
-#: src/cryptsetup.c:1307
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Naprawdę kontynuować odtwarzanie ponownego szyfrowania LUKS2?"
 
-#: src/cryptsetup.c:1316
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Hasło do weryfikacji skrótu metadanych ponownego szyfrowania: "
 
-#: src/cryptsetup.c:1318
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Hasło do odtwarzania ponownego szyfrowania: "
 
-#: src/cryptsetup.c:1380
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Naprawdę próbować naprawić nagłówek urządzenia LUKS?"
 
-#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2356,7 +2356,7 @@ msgstr ""
 "\n"
 "Wymazywanie przerwane."
 
-#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2364,167 +2364,167 @@ msgstr ""
 "Czyszczenie urządzenia w celu zainicjowania sumy kontrolnej integralności.\n"
 "Można przerwać ten proces wciskając Ctrl+C (reszta niewymazanego urządzenia będzie zawierać błędną sumę kontrolną).\n"
 
-#: src/cryptsetup.c:1435 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Nie można dezaktywować urządzenia tymczasowego %s."
 
-#: src/cryptsetup.c:1483
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Szyfrowanie wyłącznie sprzętowe OPAL nie obsługuje --cipher i --key-size, opcje zignorowano."
 
-#: src/cryptsetup.c:1496
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Opcja integralności może być używana tylko dla formatu LUKS2."
 
-#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nieobsługiwane opcje rozmiaru metadanych LUKS2."
 
-#: src/cryptsetup.c:1506
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL jest obsługiwany tylko dla formatu LUKS2."
 
-#: src/cryptsetup.c:1511
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Znaczniki hw wbudowane są obsługiwane tylko dla formatu LUKS2."
 
-#: src/cryptsetup.c:1520
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Plik nagłówka nie istnieje, czy utworzyć go?"
 
-#: src/cryptsetup.c:1528
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Nie można utworzyć pliku nagłówka %s."
 
-#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
-#: src/integritysetup.c:346
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "Nie wykryto znanego wzorca określającego integralność."
 
-#: src/cryptsetup.c:1556
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Nie można użyć podanego rozmiaru klucza integralności."
 
-#: src/cryptsetup.c:1574
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Nie można użyć %s jako nagłówka na dysku."
 
-#: src/cryptsetup.c:1603 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "To nieodwołalnie nadpisze dane na %s."
 
-#: src/cryptsetup.c:1640
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Hasło administratora OPAL nie może być puste."
 
-#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
-#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Nie udało się ustawić parametrów PBKDF."
 
-#: src/cryptsetup.c:1785
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Offset zmniejszonych danych jest dozwolony tylko dla odłączonego nagłówka LUKS."
 
-#: src/cryptsetup.c:1792
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Kontener plikowy LUKS %s jest zbyt mały do uaktywnienia, nie ma miejsca pozostałego na dane."
 
-#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nie można określić rozmiaru klucza wolumenu dla LUKS bez kluczy, proszę użyć opcji --key-size."
 
-#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "Urządzenie wymaga dwóch kluczy wolumenu."
 
-#: src/cryptsetup.c:1888
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Niektóre podane parametry aktywacji zostały zignorowane przy szyforwaniu wyłącznie sprzętowym OPAL."
 
-#: src/cryptsetup.c:1893
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Urządzenie uaktywnione, ale nie można uczynić flag trwałymi."
 
-#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Klucz %d jest wybrany do usunięcia."
 
-#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "To jest ostatni klucz. Urządzenie stanie się bezużyteczne po usunięciu tego klucza."
 
-#: src/cryptsetup.c:1986
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Dowolne pozostałe hasło: "
 
-#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operacja przerwana, klucz NIE został wymazany.\n"
 
-#: src/cryptsetup.c:2023
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Hasło do usunięcia: "
 
-#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
-#: src/cryptsetup.c:3252
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Urządzenie %s nie jest prawidłowym urządzeniem LUKS2."
 
-#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Nowe hasło dla klucza: "
 
-#: src/cryptsetup.c:2146 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Proszę wprowadzić PIN: "
 
-#: src/cryptsetup.c:2148 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Proszę wprowadzić PIN tokenu %d: "
 
-#: src/cryptsetup.c:2207
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "UWAGA: Parametr --key-slot jest używany do numeru nowego klucza.\n"
 
-#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Dowolne istniejące hasło: "
 
-#: src/cryptsetup.c:2380
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Hasło, które ma być zmienione: "
 
-#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Nowe hasło: "
 
-#: src/cryptsetup.c:2446
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Hasło dla klucza do konwersji: "
 
-#: src/cryptsetup.c:2470
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Dla operacji isLuks obsługiwany jest tylko jeden argument będący urządzeniem."
 
-#: src/cryptsetup.c:2575
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Miejsce %d nie zawiera niepowiązanego klucza."
 
-#: src/cryptsetup.c:2580
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2533,52 +2533,52 @@ msgstr ""
 "Zrzut ten powinien być zawsze zapisywany w postaci zaszyfrowanej\n"
 "w bezpiecznym miejscu."
 
-#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s nie jest nazwą aktywnego urządzenia %s."
 
-#: src/cryptsetup.c:2706
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s nie jest nazwą aktywnego urządzenia LUKS lub brak nagłówka."
 
-#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "Wymagana jest opcja --header-backup-file."
 
-#: src/cryptsetup.c:2833
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s nie jest urządzeniem zarządzanym przez cryptsetup."
 
-#: src/cryptsetup.c:2844
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Odświeżanie nie jest obsługiwane dla typu urządzenia %s"
 
-#: src/cryptsetup.c:2894
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Nierozpoznany typ urządzenia metadanych %s."
 
-#: src/cryptsetup.c:2896
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "Polecenie wymaga urządzenia i nazwy odwzorowywanej jako argumentów."
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "Proszę wprowadzić PSID OPAL: "
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "Hasło administratora OPAL: "
 
-#: src/cryptsetup.c:2922
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "UWAGA: CAŁY dysk będzie przywrócony do stanu fabrycznego i wszystkie dane zostaną utracone! Kontynuować?"
 
-#: src/cryptsetup.c:2965
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2587,363 +2587,363 @@ msgstr ""
 "Ta operacja usunię wszystkie klucze na urządzeniu %s.\n"
 "Urządzenie po tej operacji stanie się bezużyteczne."
 
-#: src/cryptsetup.c:2972
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operacja przerwana, klucze NIE zostały wymazane.\n"
 
-#: src/cryptsetup.c:3011
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Błędny typ LUKS, obsługiwane są tylko luks1 i luks2."
 
-#: src/cryptsetup.c:3027
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "Urządzenie już ma typ %s."
 
-#: src/cryptsetup.c:3034
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Ta operacja przekonwertuje %s do formatu %s.\n"
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operacja przerwana, urządzenie NIE zostało skonwertowane.\n"
 
-#: src/cryptsetup.c:3077
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Brak opcji --priority, --label lub --subsystem."
 
-#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d jest błędny."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d jest w użyciu."
 
-#: src/cryptsetup.c:3126
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Nie udało się dodać tokenu %d do pęku kluczy luks2."
 
-#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Nie udało się przypisać tokenu %d do klucza %d."
 
-#: src/cryptsetup.c:3154
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d nie jest w użyciu."
 
-#: src/cryptsetup.c:3191
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "Nie udało się zaimportować tokenu z pliku."
 
-#: src/cryptsetup.c:3216
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Nie udało się pobrać tokenu %d do eksportu."
 
-#: src/cryptsetup.c:3229
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d nie jest przypisany do klucza %d."
 
-#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Nie udało się usunąć przypisania tokenu %d do klucza %d."
 
-#: src/cryptsetup.c:3297
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Opcje --tcrypt-hidden, --tcrypt-system i --tcrypt-backup są obsługiwane tylko dla urządzeń TCRYPT."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Opcje --veracrypt i --disable-veracrypt są obsługiwane tylko dla typu urządzeń TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opcja --veracrypt-pim jest obsługiwana tylko dla urządzeń zgodnych z VeraCryptem."
 
-#: src/cryptsetup.c:3307
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opcja --veracrypt-query-pim jest obsługiwana tylko dla urządzeń zgodnych z VeraCryptem."
 
-#: src/cryptsetup.c:3309
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Opcje --veracrypt-pim i --veracrypt-query-pim wykluczają się wzajemnie."
 
-#: src/cryptsetup.c:3318
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Opcja --persistent nie jest dozwolona z --test-passphrase."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Opcje --refresh i --test-passphrase wykluczają się wzajemnie."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Opcja --shared jest dozwolona tylko dla operacji otwarcia zwykłego urządzenia."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Opcja --skip jest obsługiwana tylko przy otwieraniu urządzeń plain i loopaes."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Opcja --offset z akcją open jest obsługiwana tylko dla urządzeń plain i loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Opcji --tcrypt-hidden nie można łączyć z --allow-discards."
 
-#: src/cryptsetup.c:3337
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Opcja rozmiaru sektora z akcją open jest obsługiwana tylko dla urządzeń plain."
 
-#: src/cryptsetup.c:3341
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Opcja dużych rozmiarów sektorów IV jest obsługiwana tylko przy otwieraniu urządzeń typu plain z sektorem większym niż 512 bajtów."
 
-#: src/cryptsetup.c:3346
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Opcja --test-passphrase jest dozwolona tylko przy otwieraniu urządzeń LUKS, TRCYPT, BITLK i FVAULT2."
 
-#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Opcji --device-size i --size nie można łączyć."
 
-#: src/cryptsetup.c:3352
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Opcja --unbound jest dozwolona tylko dla operacji otwarcia urządzenia LUKS."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Opcja --unbound nie może być użyta bez --test-passphrase."
 
-#: src/cryptsetup.c:3359
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Opcji --volume-key-keyring nie można łączyć z --hash ani --volume-key-file."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Obie opcje --volume-key-file muszą być sparowane z odpowiednimi opcjami --key-size."
 
-#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Opcje --cancel-deferred i --deferred nie mogą być użyte naraz."
 
-#: src/cryptsetup.c:3387
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Opcja --active-name może być ustawiona tylko dla urządzenia LUKS2."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Opcji --active-name i --force-offline-reencrypt nie można łączyć."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Opcji --new-volume-key-file i --keep-key nie można łączyć."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Opcji --new-volume-key-keyring i --keep-key nie można łączyć."
 
-#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "Wymagane jest określenie klucza."
 
-#: src/cryptsetup.c:3412
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Opcji --align-payload i --offset nie można łączyć."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Opcja --integrity-no-wipe może być użyta tylko do akcji formatowania z rozszerzeniem integralności."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Dozwolona jest tylko jedna z opcji --use-[u]random."
 
-#: src/cryptsetup.c:3426
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "Przy opcji --unbound wymagany jest rozmiar klucza."
 
-#: src/cryptsetup.c:3446
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "Błędna akcja token."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parametr --key-description jest wymagany do akcji dodania tokenu."
 
-#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Akcja wymaga określonego tokenu. Należy użyć parametru --token-id."
 
-#: src/cryptsetup.c:3457
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "Opcja --unbound jest dozwolona tylko dla operacji dodania tokenu."
 
-#: src/cryptsetup.c:3459
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Opcji --key-slot i --unbound nie można łączyć."
 
-#: src/cryptsetup.c:3464
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Akcja wymaga określonego klucza. Należy użyć parametru --key-slot."
 
-#: src/cryptsetup.c:3480
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<uządzenie> [--type <typ>] [<nazwa>]"
 
-#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "otwarcie urządzenia jako <nazwa>"
 
-#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
-#: src/integritysetup.c:556 src/integritysetup.c:558
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<nazwa>"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "zamknięcie urządzenia (usunięcie odwzorowania)"
 
-#: src/cryptsetup.c:3482 src/integritysetup.c:558
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "zmiana rozmiaru aktywnego urządzenia"
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "pokazanie stanu urządzenia"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <szyfr>]"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "test szybkości szyfru"
 
-#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
-#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<urządzenie>"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "próba naprawy metadanych na dysku"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "ponowne szyfrowanie urządzenia LUKS2"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "usunięcie wszystkich kluczy (usunięcie klucza szyfrującego)"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "przekonwertowanie formatu LUKS z/do LUKS2"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "ustawienie opcji trwałej konfiguracji dla LUKS2"
 
-#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<urządzenie> [<nowy plik klucza>]"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "sformatowanie urządzenia LUKS"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "dodanie klucza do urządzenia LUKS"
 
-#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<urządzenie> [<plik klucza>]"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "usunięcie podanego klucza lub pliku klucza z urządzenia LUKS"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "zmiana podanego klucza lub pliku klucza urządzenia LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "konwersja klucza na nowe parametry pbkdf"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<urządzenie> <numer klucza>"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "wymazanie klucza o numerze <numer klucza> z urządzenia LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "wypisanie UUID-a urządzenia LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "sprawdzenie <urządzenia> pod kątem nagłówka partycji LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "zrzut informacji o partycji LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "zrzut informacji o urządzeniu TCRYPT"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "zrzut informacji o urządzeniu BITLK"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "zrzut informacji o urządzeniu FVAULT2"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Wstrzymanie urządzenia LUKS i wymazanie klucza (zamraża wszystkie operacje we/wy)"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "Wznowienie zatrzymanego urządzenia LUKS"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "Kopia zapasowa nagłówka i kluczy urządzenia LUKS"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "Odtworzenie nagłówka i kluczy urządzenia LUKS z kopii zapasowej"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <urządzenie>"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "Operacja na tokenach LUKS2"
 
-#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2951,7 +2951,7 @@ msgstr ""
 "\n"
 "<akcja> to jedno z:\n"
 
-#: src/cryptsetup.c:3531
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2963,7 +2963,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3535
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -2978,7 +2978,7 @@ msgstr ""
 "<numer klucza> to numer klucza LUKS do zmiany\n"
 "<plik klucza> to opcjonalny plik nowego klucza dla akcji luksAddKey\n"
 
-#: src/cryptsetup.c:3542
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -2987,7 +2987,7 @@ msgstr ""
 "\n"
 "Domyślny wkompilowany format metadanych to %s (dla akcji luksFormat).\n"
 
-#: src/cryptsetup.c:3547
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -2995,12 +2995,12 @@ msgstr ""
 "\n"
 "Obsługa zewnętrznych wtyczek tokenów LUKS2 jest włączona.\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Ścieżka zewnętrznych wtyczek tokenów LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3008,7 +3008,7 @@ msgstr ""
 "\n"
 "Obsługa zewnętrznych wtyczek tokenów LUKS2 jest wyłączona.\n"
 
-#: src/cryptsetup.c:3554
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3025,7 +3025,7 @@ msgstr ""
 "Domyślny PBKDF dla LUKS2: %s\n"
 "\tCzas iteracji: %d, wymagana pamięć: %dkB, liczba wątków: %d\n"
 
-#: src/cryptsetup.c:3565
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3040,122 +3040,126 @@ msgstr ""
 "\tplain: %s, bitów klucza: %d, skrót hasła: %s\n"
 "\tLUKS: %s, bitów klucza: %d, skrót nagłówka LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3574
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Domyślny rozmiar klucza z trybem XTS (dwa klucze wewnętrzne) będzie podwojony.\n"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: wymaga %s jako argumentów"
 
-#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Numer klucza jest nieprawidłowy."
 
-#: src/cryptsetup.c:3660
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Rozmiar urządzenia musi być wielokrotnością 512-bajtowego sektora."
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Błędne określenie maksymalnego rozmiaru strefy gorącej ponownego szyfrowania."
 
-#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Rozmiar klucza musi być wielokrotnością 8 bitów"
 
-#: src/cryptsetup.c:3686
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Można podać najwyżej 2 określenia rozmiarów kluczy."
 
-#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Określono za dużo kluczy wolumenu, można podać najwyżej %d."
 
-#: src/cryptsetup.c:3738
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Określono za dużo dołączeń pęków kluczy, można podać najwyżej %d."
 
-#: src/cryptsetup.c:3747
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Maksymalna wartość ograniczenia rozmiaru urządzenia to 1GiB."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Rozmiar ograniczenia musi być wielokrotnością 512-bajtowego sektora."
 
-#: src/cryptsetup.c:3767
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Opcja --priority może mieć wartości tylko ignore/normal/prefer."
 
-#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "Błędne określenie maksymalnej liczby prób."
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "Wyświetlenie tego opisu"
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "Wyświetlenie krótkiej informacji o składni"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "Wypisanie wersji pakietu"
 
-#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "Opcje pomocnicze:"
 
-#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPCJA...] <akcja> <parametry-akcji>"
 
-#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "Brak argumentu <akcja>."
 
-#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "Nieznana akcja."
 
-#: src/cryptsetup.c:3928
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Opcja --key-file ma priorytet nad podanym argumentem pliku klucza."
 
-#: src/cryptsetup.c:3934
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "Dozwolony jest tylko jeden argument --key-file."
 
-#: src/cryptsetup.c:3939
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funkcja pochodna klucza oparta na haśle (PBKDF) może być tylko pbkdf2 lub argon2i/argon2id."
 
-#: src/cryptsetup.c:3944
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Wymuszonych iteracji PBKDF nie można łączyć z opcją czasu iteracji."
 
-#: src/cryptsetup.c:3949
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Nie można dołączyć klucza wolumenu do pęku kluczy, kiedy pęk kluczy jest wyłączony."
 
-#: src/cryptsetup.c:3954
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Nie można użyć opisu klucza pęku kluczy, kiedy pęk kluczy jest wyłączony."
 
-#: src/cryptsetup.c:3959
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Integralności wbudowanej należy używać wraz z opcją --integrity."
 
-#: src/cryptsetup.c:3970
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Opcje --keyslot-cipher i --keyslot-key-size muszą być użyte łącznie."
 
-#: src/cryptsetup.c:3978
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Nie wykonano akcji. Wywołano z opcją --test-args.\n"
 
-#: src/cryptsetup.c:3991
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "Nie można wyłączyć blokowania metadanych."
 
@@ -3220,7 +3224,7 @@ msgstr "Polecenie wymaga <głównego_hasza> lub opcji --root-hash-file jako argu
 msgid "<data_device> <hash_device>"
 msgstr "<urządzenie_danych> <urządzenie_haszy>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:553
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "sformatowanie urządzenia"
 
@@ -3236,7 +3240,7 @@ msgstr "weryfikacja urządzenia"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<urządzenie_danych> <nazwa> <urządzenie_haszy> [<główny_hasz>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:556
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "pokazanie stanu aktywnego urządzenia"
 
@@ -3244,7 +3248,7 @@ msgstr "pokazanie stanu aktywnego urządzenia"
 msgid "<hash_device>"
 msgstr "<urządzenie_haszy>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:557
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "wyświetlenie informacji z dysku"
 
@@ -3286,7 +3290,7 @@ msgstr "Opcji --panic-on-corruption oraz --restart-on-corruption nie można uży
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "Opcja --error-as-corruption musi być użyta z --panic-on-corruption lub --restart-on-corruption."
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3295,33 +3299,33 @@ msgstr ""
 "Ta operacja nieodwracalnie nadpisze dane na %s i %s.\n"
 "Aby zachować urządzenie danych, można użyć opcji --no-wipe (a następnie uaktywnić z --integrity-recalculate)."
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "Sformatowano z rozmiarem znacznika %u%s, wewnętrzna integralność %s.\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (wbudowane znaczniki hw)"
 
-#: src/integritysetup.c:303
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Ustawianie flagi recalculate nie jest obsługiwane, zamiast tego można rozważyć użycie --wipe."
 
-#: src/integritysetup.c:380 src/integritysetup.c:540
+#: src/integritysetup.c:382 src/integritysetup.c:546
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Urządzenie %s nie jest prawidłowym urządzeniem INTEGRITY."
 
-#: src/integritysetup.c:553 src/integritysetup.c:557
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
 msgstr "<urządzenie_integralności>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
 msgstr "<urządzenie_integralności> <nazwa>"
 
-#: src/integritysetup.c:577
+#: src/integritysetup.c:583
 #, c-format
 msgid ""
 "\n"
@@ -3332,7 +3336,7 @@ msgstr ""
 "<nazwa> to urządzenie do utworzenia pod %s\n"
 "<urządzenie_integralności> to urządzenie zawierające dane ze znacznikami integralności\n"
 
-#: src/integritysetup.c:582
+#: src/integritysetup.c:588
 #, c-format
 msgid ""
 "\n"
@@ -3345,48 +3349,48 @@ msgstr ""
 "\tAlgorytm sumy kontrolnej: %s\n"
 "\tMaksymalny rozmiar pliku klucza: %dkB\n"
 
-#: src/integritysetup.c:639
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Błędny rozmiar --%s. Maksimum w bajtach to %u."
 
-#: src/integritysetup.c:742
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "Muszą być podane obie opcje: pliku klucza i rozmiaru klucza."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Muszą być podane obie opcje: pliku klucza integralności i rozmiaru klucza."
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Algorytm integralności kroniki musi być podany, jeśli używany jest klucz integralności kroniki."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Muszą być podane obie opcje: pliku szyfrowania kroniki i rozmiaru klucza."
 
-#: src/integritysetup.c:756
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Algorytm szyfrowania kroniki musi być podany, jeśli używany jest klucz szyfrowania kroniki."
 
-#: src/integritysetup.c:760
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Opcje trybu odtwarzania i bitmapy wykluczają się wzajemnie."
 
-#: src/integritysetup.c:767
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Opcji kroniki nie można używać w trybie bitmapy."
 
-#: src/integritysetup.c:772
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Opcje bitmapy mogą być używane tylko w trybie bitmapy."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:784
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Tryb wbudowany nie może być łączony z opcjami kroniki ani bitmapy."
 
-#: src/integritysetup.c:782
+#: src/integritysetup.c:788
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Tryb wbudowany nie może być łączony z osobnym urządzeniem danych."
 
@@ -3741,32 +3745,32 @@ msgstr "Urządzenie nie jest w trybie odszyfrowywania LUKS2. Konflikt opcji --de
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Urządzenie jest w trybie ponownego szyfrowania z użyciem odporności przesunięcia danych. Nie można użyć żądanej opcji --resilience."
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Nie można określić rozmiaru klucza wolumenu dla LUKS bez kluczy, proszę użyć opcji --new-key-size."
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "Urządzenie wymaga odtwarzania ponownego szyfrowania. Najpierw należy uruchomić naprawę."
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "Urządzenie %s jest już w trybie ponownego szyfrowania LUKS2. Czy wznowić uprzednio zainicjowaną operację?"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "Stara wersja ponownego szyfrowania LUKS2 nie jest już obsługiwana."
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "Nie można ponownie zaszyfrować urządzenia LUKS2 skonfigurowanego do używania OPAL."
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "Ponowne szyfrowanie urządzenia z profilem integralności nie jest obsługiwane."
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3775,110 +3779,110 @@ msgstr ""
 "Żądany --sector-size %<PRIu32> jest niezgodny z superblokiem %s\n"
 "(rozmiar bloku: %<PRIu32> B), wykrytym na urządzeniu %s."
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Szyfrowanie bez odłączonego nagłówka (--header) jest niemożliwe bez ograniczenia rozmiaru urządzenia danych (--reduce-device-size)."
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "Żądany offset danych musi być mniejszy lub równy połowie parametru --reduce-device-size."
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "Modyfikowanie wartości --reduce-device-size do dwukrotności parametru --offset %<PRIu64> (w sektorach).\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "Plik nagłówka %s już istnieje. Przerwano."
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "Nie można utworzyć pliku tymczasowego nagłówka %s."
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "Rozmiar metadanych LUKS2 jest większy niż wartość przesunięcia danych."
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "Nie udało się umieścić nowego nagłówka na początku urządzenia %s."
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s jest teraz aktywne i gotowe do szyfrowania w locie.\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "Aktywne urządzenie %s nie jest urządzeniem LUKS2."
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "Odtwarzanie oryginalnego nagłówka LUKS2."
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "Odtwarzanie oryginalnego nagłówka LUKS2 nie powiodło się."
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "Plik nagłówka %s nie istnieje. Czy zainicjować odszyfrowywanie LUKS2 urządzenia %s i eksport nagłówka LUKS2 do pliku %s?"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "Nie udało się dodać uprawnień odczytu/zapisu do pliku wyeksportowanego nagłówka."
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "Inicjowanie ponownego szyfrowania nie powiodło się. Kopia zapasowa nagłówka jest dostępna w %s."
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Odszyfrowanie LUKS2 jest obsługiwane tylko z urządzeniem z odłączonym nagłówkiem (z offsetem danych ustawionym na 0)."
 
-#: src/utils_reencrypt.c:1487
+#: src/utils_reencrypt.c:1490
 msgid "No token could unlock the device."
 msgstr "Żaden token nie może odblokować urządzenia."
 
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
 msgid "Not enough free keyslots for reencryption."
 msgstr "Za mało wolnych kluczy do ponownego szyfrowania."
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1562
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Pliku klucza lub opisu klucza pęku kluczy można użyć tylko z --key-slot albo przy dokładnie jednym aktywnym kluczu."
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Hasło dla klucza %d: "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Zmiana szyfru do szyfrowania danych na %s.\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Można użyć --force-no-keyslots, aby ponownie zaszyfrować urządzenie z aktywnymi kluczami przekazując bezpośrednio klucze wolumenu."
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:1996
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Opcja --new-volume-key-file musi być sparowana z --new-key-size"
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Nie zmieniono parametrów segmentu danych. Ponowne szyfrowanie przerwane."
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3886,7 +3890,7 @@ msgstr ""
 "Zwiększanie rozmiaru sektora szyfrowania na urządzeniu offline nie jest obsługiwane.\n"
 "Należy najpierw uaktywnić urządzenie lub użyć opcji --force-offline-reencrypt (niebezpieczna!)."
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3895,58 +3899,58 @@ msgstr ""
 "\n"
 "Ponowne szyfrowanie przerwane."
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Wznawianie ponownego szyfrowania LUKS w wymuszonym trybie offline.\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Urządzenie %s zawiera uszkodzone metadane LUKS. Przerwano operację."
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Urządzenie %s jest już urządzeniem LUKS. Przerwano operację."
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Urządzenie %s jest już w trybie ponownego szyfrowania LUKS. Przerwano operację."
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "Odszyfrowanie LUKS2 wymaga opcji --header."
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "Polecenie wymaga urządzenia jako argumentu."
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Konflikt wersji. Urządzenie %s jest urządzeniem LUKS1."
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Konflikt wersji. Urządzenie %s jest w trybie ponownego szyfrowania LUKS1."
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Konflikt wersji. Urządzenie %s jest urządzeniem LUKS2."
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Konflikt wersji. Urządzenie %s jest w trybie ponownego szyfrowania LUKS2."
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Ponowne szyfrowanie LUKS2 jest już zainicjowane. Przerywanie operacji."
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "Ponowne szyfrowanie urządzenia nie jest w toku."
 

From 252dc78d6a5b53354f3581aec196b06c2bce08e6 Mon Sep 17 00:00:00 2001
From: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>
Date: Sun, 19 Jul 2026 19:51:04 +0200
Subject: [PATCH 187/244] po: update ro.po (from translationproject.org)

---
 po/ro.po | 629 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 317 insertions(+), 312 deletions(-)

diff --git a/po/ro.po b/po/ro.po
index 144a5bcd2..5bd85f158 100644
--- a/po/ro.po
+++ b/po/ro.po
@@ -19,14 +19,15 @@
 # Actualizare a traducerii pentru versiunea 2.8.2-rc0, făcută de R-GC, dec-2025.
 # Actualizare a traducerii pentru versiunea 2.8.5-rc0, făcută de R-GC, mar-2026.
 # Actualizare a traducerii pentru versiunea 2.8.7-rc1, făcută de R-GC, iun-2026.
+# Actualizare a traducerii pentru versiunea 2.8.7-rc2, făcută de R-GC, iul-2026.
 # Actualizare a traducerii pentru versiunea Y, făcută de X, Y(luna-anul).
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-06-29 21:30+0200\n"
-"PO-Revision-Date: 2026-06-30 15:24+0200\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-07-11 17:10+0200\n"
 "Last-Translator: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>\n"
 "Language-Team: Romanian <translation-team-ro@lists.sourceforge.net>\n"
 "Language: ro\n"
@@ -218,10 +219,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nu s-au putut reîncărca metadatele LUKS2 în memorie."
 
 #: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
-#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
-#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
-#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -265,7 +266,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Dispozitivul cu metadate detașate nu este acceptat pentru acest tip de criptare."
 
 #: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
-#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Dimensiunea sectorului de criptare nu este acceptată."
 
@@ -587,14 +588,14 @@ msgstr "Nu s-a putut dezlega cheia de volum de la inelul de chei specificat de u
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Nu s-a putut leg cheia de volum la inelul de chei specificat de utilizator."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2720
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Volumul %s nu este suspendat."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
-#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
-#: src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "Cheia de volum nu se potrivește cu volumul."
 
@@ -607,8 +608,8 @@ msgstr "Nu s-a putut efectua interschimbarea cu noul slot pentru cheie."
 msgid "Key slot %d is invalid."
 msgstr "Slotul de cheie %d nu este valid."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
-#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Slotul de cheie %d nu este activ."
@@ -805,7 +806,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Nu se poate citi cantitatea de date solicitată."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Dispozitivul %s nu există sau accesul a fost refuzat."
@@ -1148,7 +1149,7 @@ msgstr "Modul de cifrare LUKS %s este nevalid."
 msgid "LUKS hash %s is invalid."
 msgstr "Suma de control(hash) LUKS %s nu este validă."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Nu s-a detectat nicio problemă cunoscută pentru antetul LUKS."
 
@@ -1168,7 +1169,7 @@ msgstr "Decalajul datelor pentru antetul LUKS trebuie să fie 0 sau mai mare dec
 
 #: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Formatul UUID LUKS furnizat este greșit."
 
@@ -1693,7 +1694,7 @@ msgstr "Nu s-a putut definii segmentul dm-crypt."
 msgid "Failed to set dm-linear segment."
 msgstr "Nu s-a putut definii segmentul dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Nu s-a detectat niciun model de specificație de cifrare cunoscut în antetul LUKS2."
 
@@ -2156,8 +2157,8 @@ msgstr "Parametrii de criptare a slotului de cheie pot fi stabiliți numai pentr
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametrii de criptare a slotului de chei nu sunt compatibili cu criptarea slotului de chei LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Nu s-a detectat niciun model de specificație de cifrare cunoscut."
@@ -2184,8 +2185,8 @@ msgstr "AVERTISMENT: Parametrul „--hash” este ignorat în modul simplu, cu f
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "AVERTISMENT: Opțiunea „--keyfile-size” este ignorată, dimensiunea de citire este aceeași cu dimensiunea cheii de criptare.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Scanarea «blkid» a eșuat pentru %s."
@@ -2195,11 +2196,11 @@ msgstr "Scanarea «blkid» a eșuat pentru %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "S-au detectat semnături de dispozitiv pe %s. Continuarea operației, riscă să deterioreze datele existente."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
-#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
-#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "Operația se întrerupe.\n"
 
@@ -2207,36 +2208,36 @@ msgstr "Operația se întrerupe.\n"
 msgid "Option --key-file is required."
 msgstr "Opțiunea „--key-file” este necesară."
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "Introduceți PIM-ul VeraCrypt: "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "Valoare PIM nevalidă: eroare de analizare."
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "Valoare PIM nevalidă: 0."
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "Valoare PIM nevalidă: în afara intervalului."
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "Nu a fost detectat niciun antet de dispozitiv cu această frază de acces."
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "Dispozitivul %s nu este un dispozitiv BITLK valid."
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "Nu se poate determina dimensiunea cheii de volum pentru BITLK; utilizați opțiunea „--key-size” pentru a o furniza."
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2246,7 +2247,7 @@ msgstr ""
 "care permite accesul la partiția criptată fără fraza de acces.\n"
 "Acest conținut ar trebui să fie întotdeauna stocat criptat într-un loc sigur."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2256,114 +2257,114 @@ msgstr ""
 "care permite accesul la partiția criptată fără fraza de acces.\n"
 "Acest conținut ar trebui să fie întotdeauna stocat criptat într-un loc sigur."
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "Dispozitivul %s nu este un dispozitiv FVAULT2 valid."
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nu se poate determina dimensiunea cheii de volum pentru FVAULT2; utilizați opțiunea „--key-size” pentru a o furniza."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Dispozitivul %s este încă activ și programat pentru eliminare temporizată.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
-#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
-#: src/cryptsetup.c:3261
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Nu s-a putut definii ruta jetoanelor(tokens) externe %s."
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Redimensionarea dispozitivului activ necesită cheia de volum în inelul de chei, dar opțiunea „--disable-keyring” este furnizată."
 
-#: src/cryptsetup.c:1057
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "Testarea pentru evaluarea performanței a fost întreruptă."
 
-#: src/cryptsetup.c:1078
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     (neaplicabil)\n"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u iterații pe secundă pentru cheia %zu-bit\n"
 
-#: src/cryptsetup.c:1094
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s (neaplicabil)\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u iterații, %5u memorie, %1u fire paralele (CPU-uri) pentru cheia %zu-bit (timpul necesitat %u ms)\n"
 
-#: src/cryptsetup.c:1120
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "Rezultatul testului de evaluare a performanței nu este fiabil."
 
-#: src/cryptsetup.c:1171
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testele sunt aproximative folosind doar memoria (fără In/Ieș de stocare).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1196
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algoritm |     Cheie |        Criptare |      Decriptare\n"
 
-#: src/cryptsetup.c:1204
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Cifrarea %s (cu cheie de %i biți) nu este disponibilă."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1225
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algoritm |     Cheie |        Criptare |      Decriptare\n"
 
-#: src/cryptsetup.c:1238
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "nedisponibil"
 
-#: src/cryptsetup.c:1241
+#: src/cryptsetup.c:1242
 msgid "# Cipher speed test is not available.\n"
 msgstr "# Testul de viteză al cifrului nu este disponibil.\n"
 
-#: src/cryptsetup.c:1257
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
 msgstr "Au fost detectate metadate neprotejate de recriptare LUKS2. Verificați că operațiunea de recriptare este de dorit (consultați ieșirea luksDump) și continuați (să actualizați metadatele) numai dacă recunoașteți operația ca fiind autentică."
 
-#: src/cryptsetup.c:1263
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Introduceți fraza de acces pentru a proteja și actualiza metadatele de recriptare: "
 
-#: src/cryptsetup.c:1307
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Continuați cu adevărat cu recuperarea recriptării LUKS2?"
 
-#: src/cryptsetup.c:1316
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Introduceți fraza de acces pentru a verifica calcularea sumele de control a metadatelor de recriptare: "
 
-#: src/cryptsetup.c:1318
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Introduceți fraza de acces pentru recuperarea recriptării: "
 
-#: src/cryptsetup.c:1380
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Încercați cu adevărat să reparați antetul dispozitivului LUKS?"
 
-#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2371,7 +2372,7 @@ msgstr ""
 "\n"
 "Ștergere întreruptă."
 
-#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2379,167 +2380,167 @@ msgstr ""
 "Se șterge dispozitivul pentru a inițializa calcularea sumei de control a integrității.\n"
 "Puteți întrerupe acest lucru apăsând CTRL+c (restul dispozitivului care nu este șters va conține o sumă de control nevalidă).\n"
 
-#: src/cryptsetup.c:1435 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Nu se poate dezactiva dispozitivul temporar %s."
 
-#: src/cryptsetup.c:1483
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Criptarea OPAL hw-only nu acceptă „--cipher” și „--key-size”, opțiunile sunt ignorate."
 
-#: src/cryptsetup.c:1496
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Opțiunea de integritate poate fi utilizată numai pentru formatul LUKS2."
 
-#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Opțiuni de dimensiune a metadatelor LUKS2 neacceptate."
 
-#: src/cryptsetup.c:1506
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL este acceptat numai pentru formatul LUKS2."
 
-#: src/cryptsetup.c:1511
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Etichetele hw în linie „inline” sunt acceptate numai pentru formatul LUKS2."
 
-#: src/cryptsetup.c:1520
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Fișierul antet nu există, doriți să îl creați?"
 
-#: src/cryptsetup.c:1528
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Nu se poate crea fișierul antet %s."
 
-#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
-#: src/integritysetup.c:346
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "Nu a fost detectat niciun model de specificație de integritate cunoscut."
 
-#: src/cryptsetup.c:1556
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Nu se poate utiliza dimensiunea specificată a cheii de integritate."
 
-#: src/cryptsetup.c:1574
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Nu se poate folosi %s ca antet pe disc."
 
-#: src/cryptsetup.c:1603 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Acest lucru va suprascrie datele de pe %s în mod irevocabil."
 
-#: src/cryptsetup.c:1640
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Parola de administrator OPAL nu poate fi goală."
 
-#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
-#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Nu s-au putut definii parametrii pbkdf."
 
-#: src/cryptsetup.c:1785
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Decalajul redus de date este permis numai pentru antetul LUKS detașat."
 
-#: src/cryptsetup.c:1792
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Containerul de fișiere LUKS %s este prea mic pentru activare, nu mai rămâne spațiu pentru date."
 
-#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nu se poate determina dimensiunea cheii de volum pentru LUKS fără sloturi de chei; folosiți opțiunea „--key-size” pentru a furniza aceste date."
 
-#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "Dispozitivul necesită două chei de volum."
 
-#: src/cryptsetup.c:1888
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Unii parametri de activare specificați au fost ignorați cu criptarea OPAL hw-only."
 
-#: src/cryptsetup.c:1893
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Dispozitivul a fost activat, dar nu se poate face ca fanioanele să fie persistente."
 
-#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Slotul de cheie %d este selectat pentru ștergere."
 
-#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Acesta este ultimul slot de cheie. Dispozitivul va deveni inutilizabil după eliminarea acestei chei."
 
-#: src/cryptsetup.c:1986
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Introduceți orice frază de acces rămasă: "
 
-#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operația a fost întreruptă, slotul de cheie NU a fost șters.\n"
 
-#: src/cryptsetup.c:2023
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Introduceți fraza de acces pentru a fi ștearsă: "
 
-#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
-#: src/cryptsetup.c:3252
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Dispozitivul %s nu este un dispozitiv LUKS2 valid."
 
-#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Introduceți noua frază de acces pentru slotul de cheie: "
 
-#: src/cryptsetup.c:2146 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Introduceți codul PIN al jetonului: "
 
-#: src/cryptsetup.c:2148 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Introduceți codul PIN al jetonului(token) %d: "
 
-#: src/cryptsetup.c:2207
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "AVERTISMENT: Parametrul „--key-slot” este utilizat pentru noul număr de slot de cheie.\n"
 
-#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Introduceți orice frază de acces existentă: "
 
-#: src/cryptsetup.c:2380
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Introduceți fraza de acces pentru a fi schimbată: "
 
-#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Introduceți nouă frază de acces: "
 
-#: src/cryptsetup.c:2446
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Introduceți fraza de acces pentru slotul de cheie care urmează să fie convertit: "
 
-#: src/cryptsetup.c:2470
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Doar un singur dispozitiv este admis ca argument pentru operația isLuks."
 
-#: src/cryptsetup.c:2575
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Slotul de cheie %d nu conține o cheie neasociată."
 
-#: src/cryptsetup.c:2580
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2547,52 +2548,52 @@ msgstr ""
 "Conținutul antetului cu cheia neasociată este o informație sensibilă.\n"
 "Acest conținut ar trebui să fie stocat criptat într-un loc sigur."
 
-#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s nu este numele dispozitivului activ %s."
 
-#: src/cryptsetup.c:2706
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s nu este numele unui dispozitiv LUKS activ sau antetul lipsește."
 
-#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "Este necesară opțiunea „--header-backup-file”."
 
-#: src/cryptsetup.c:2833
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s nu este un dispozitiv gestionat de «cryptsetup»."
 
-#: src/cryptsetup.c:2844
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Reîmprospătarea nu este disponibilă pentru tipul de dispozitiv %s"
 
-#: src/cryptsetup.c:2894
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Tip de dispozitiv de metadate nerecunoscut %s."
 
-#: src/cryptsetup.c:2896
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "Comanda necesită un dispozitiv și numele asociat acestuia ca argumente."
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "Introduceți PSID OPAL: "
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "Introduceți parola de administrator OPAL: "
 
-#: src/cryptsetup.c:2922
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "AVERTISMENT: ÎNTREGUL disc va fi reinițializat la valorile din fabrică și toate datele se vor pierde! Continuați?"
 
-#: src/cryptsetup.c:2965
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2601,363 +2602,363 @@ msgstr ""
 "Această operație va șterge toate sloturile de chei de pe dispozitivul %s.\n"
 "Dispozitivul va deveni inutilizabil după această operație."
 
-#: src/cryptsetup.c:2972
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operația a fost întreruptă, sloturile de chei NU au fost șterse.\n"
 
-#: src/cryptsetup.c:3011
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Tip LUKS nevalid, numai luks1 și luks2 sunt acceptate."
 
-#: src/cryptsetup.c:3027
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "Dispozitivul este deja de tip %s."
 
-#: src/cryptsetup.c:3034
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Această operație va converti %s în formatul %s.\n"
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operația a fost întreruptă, dispozitivul NU a fost convertit.\n"
 
-#: src/cryptsetup.c:3077
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Opțiunea „--priority”, „--label” sau „--subsystem” lipsește."
 
-#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Jetonul(token) %d nu este valid."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "Jetonul(token) %d este în uz."
 
-#: src/cryptsetup.c:3126
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Nu s-a putut adăuga jetonul(token) %d la inelul de chei luks2."
 
-#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Nu s-a putut atribui jetonul(token) %d slotului pentru cheie %d."
 
-#: src/cryptsetup.c:3154
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Jetonul %d nu este în uz."
 
-#: src/cryptsetup.c:3191
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "Nu s-a putut importa jetonul din fișier."
 
-#: src/cryptsetup.c:3216
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Nu s-a putut obține jetonul %d pentru export."
 
-#: src/cryptsetup.c:3229
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Jetonul %d nu este alocat slotului de cheie %d."
 
-#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Nu s-a putut anula atribuirea jetonului %d din slotul de cheie %d."
 
-#: src/cryptsetup.c:3297
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Opțiunea „--tcrypt-hidden”, „--tcrypt-system” sau „--tcrypt-backup” este acceptată doar pentru dispozitivele TCRYPT."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Opțiunea „--veracrypt” sau „--disable-veracrypt” este acceptată numai pentru tipul de dispozitiv TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opțiunea „--veracrypt-pim” este acceptată numai pentru dispozitivele compatibile cu VeraCrypt."
 
-#: src/cryptsetup.c:3307
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Opțiunea „--veracrypt-query-pim” este acceptată numai pentru dispozitivele compatibile cu VeraCrypt."
 
-#: src/cryptsetup.c:3309
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Opțiunile „--veracrypt-pim” și „--veracrypt-query-pim” se exclud reciproc."
 
-#: src/cryptsetup.c:3318
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Opțiunea „--persistent” nu este permisă cu opțiunea „--test-passphrase”."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Opțiunile „--refresh” și „--test-passphrase” se exclud reciproc."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Opțiunea „--shared” este permisă numai pentru deschiderea unui dispozitiv simplu."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Opțiunea „--skip” este acceptată numai pentru deschiderea dispozitivelor simple și a dispozitivelor loopaes."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Opțiunea „--offset” cu acțiune de deschidere este acceptată numai pentru dispozitivele simple și dispozitivele loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Opțiunea „--tcrypt-hidden” nu poate fi combinată cu opțiunea „--allow-discards”."
 
-#: src/cryptsetup.c:3337
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Opțiunea de dimensiune a sectorului cu acțiune de deschidere este acceptată numai pentru dispozitivele simple."
 
-#: src/cryptsetup.c:3341
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Opțiunea sectoare IV (vector de inițializare) mari este acceptată numai pentru deschiderea dispozitivelor de tip simplu, cu dimensiunea sectorului mai mare de 512 de octeți."
 
-#: src/cryptsetup.c:3346
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Opțiunea „--test-passphrase” este permisă numai pentru deschiderea dispozitivelor LUKS, TCRYPT, BITLK și FVAULT2."
 
-#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Opțiunile „--device-size” și „--size” nu pot fi combinate."
 
-#: src/cryptsetup.c:3352
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Opțiunea „--unbound” este permisă numai pentru deschiderea dispozitivelor luks."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Opțiunea „--unbound” nu poate fi utilizată fără opțiunea „--test-passphrase”."
 
-#: src/cryptsetup.c:3359
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Opțiunea „--volume-key-keyring” nu poate fi combinată cu opțiunea „--hash” sau cu opțiunea „--volume-key-file”."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Ambele opțiuni „--volume-key-file” trebuie să fie asociate cu opțiunile „--key-size” respective."
 
-#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Opțiunile „--cancel-deferred” și „--deferred” nu pot fi utilizate în același timp."
 
-#: src/cryptsetup.c:3387
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Opțiunea „--active-name” poate fi utilizată numai pentru dispozitivele LUKS2."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Opțiunile „--active-name” și „--force-offline-reencrypt” nu pot fi combinate."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Opțiunile „--new-volume-key-file” și „--keep-key” nu pot fi combinate."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Opțiunile „--new-volume-key-keyring” și „--keep-key” nu pot fi combinate."
 
-#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "Este necesară specificarea slotului de cheie."
 
-#: src/cryptsetup.c:3412
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Opțiunile „--align-payload” și „--offset” nu pot fi combinate."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Opțiunea „--integrity-no-wipe” poate fi utilizată numai pentru acțiuni de formatare cu extensie de integritate."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Numai una dintre opțiunile „--use-[u]random” este permisă."
 
-#: src/cryptsetup.c:3426
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "Dimensiunea cheii este necesară cu opțiunea „--unbound”."
 
-#: src/cryptsetup.c:3446
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "Operație cu jeton(token) nevalidă."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parametrul „--key-description” este obligatoriu pentru acțiunea de adăugare a jetonului."
 
-#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Acțiunea necesită un jeton(token)l specific. Utilizați parametrul „--token-id”."
 
-#: src/cryptsetup.c:3457
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "Opțiunea „--unbound” este validă numai cu acțiunea de adăugare a jetonului."
 
-#: src/cryptsetup.c:3459
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Opțiunile „--key-slot” și „--unbound” nu pot fi combinate."
 
-#: src/cryptsetup.c:3464
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Acțiunea necesită un slot de cheie specific. Utilizați parametrul „--key-slot”."
 
-#: src/cryptsetup.c:3480
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<dispozitiv> [--type <tip>] [<nume>]"
 
-#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "deschide dispozitivul ca <nume>"
 
-#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
-#: src/integritysetup.c:556 src/integritysetup.c:558
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<nume>"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "închide dispozitivul (elimină asocierea)"
 
-#: src/cryptsetup.c:3482 src/integritysetup.c:558
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "redimensionează dispozitivul activ"
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "afișează starea dispozitivului"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <cifrarea>]"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "evaluează performanța cifrului"
 
-#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
-#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<dispozitiv>"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "încearcă să repare metadatele de pe disc"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "recriptează dispozitivul LUKS2"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "șterge toate sloturile de chei (elimină cheia de criptare)"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "convertește LUKS din/în formatul LUKS2"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "definește opțiunile permanente de configurare pentru LUKS2"
 
-#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<dispozitiv> [<fișier cheie nou>]"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "formatează un dispozitiv LUKS"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "adaugă o cheie la dispozitivul LUKS"
 
-#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<dispozitiv> [<fișier cheie>]"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "elimină cheia sau fișierul cheie furnizat de pe dispozitivul LUKS"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "modifică cheia furnizată sau fișierul cheie al dispozitivului LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "convertește o cheie în noii parametri pbkdf"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<dispozitiv> <slot cheie>"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "șterge cheia cu numărul <slot cheie> de pe dispozitivul LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "afișează UUID-ul dispozitivului LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "testează <dispozitivul> pentru antetul partiției LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "afișează informațiile despre partiția LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "afișează informațiile despre dispozitivul TCRYPT"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "afișează informațiile despre dispozitivul BITLK"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "afișează informațiile despre dispozitivul FVAULT2"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Suspendă dispozitivul LUKS și șterge cheia (toate In/Ieșirile sunt înghețate)"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "Repune în funcțiune dispozitivul LUKS suspendat"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "Face copie de rezervă pentru antetul dispozitivului LUKS și pentru sloturile de chei"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "Restaurează antetul dispozitivului LUKS și sloturile de chei"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <dispozitiv>"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipulează jetoanele LUKS2"
 
-#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2972,7 +2973,7 @@ msgstr ""
 # nume, sau alias pentru primele.
 # A se vedea ieșirea comenzii:
 # «cryptsetup -?|--help»
-#: src/cryptsetup.c:3531
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2984,7 +2985,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3535
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -2999,7 +3000,7 @@ msgstr ""
 "<slot cheie> este numărul slotului de cheie LUKS de modificat\n"
 "<fișier cheie> fișier cheie opțional pentru noua cheie pentru acțiunea luksAddKey\n"
 
-#: src/cryptsetup.c:3542
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -3008,7 +3009,7 @@ msgstr ""
 "\n"
 "Formatul implicit de metadate compilate este %s (pentru acțiunea luksFormat).\n"
 
-#: src/cryptsetup.c:3547
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3016,12 +3017,12 @@ msgstr ""
 "\n"
 "Suportul pentru modulul de jeton(token) extern LUKS2 este activat.\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Ruta modulului pentru jetonul(token) extern LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3029,7 +3030,7 @@ msgstr ""
 "\n"
 "Suportul pentru modulul de jeton(token) extern LUKS2 este dezactivat.\n"
 
-#: src/cryptsetup.c:3554
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3046,7 +3047,7 @@ msgstr ""
 "PBKDF implicit pentru LUKS2: %s\n"
 "\tTimp de iterare: %d, Memorie necesară: %dko, Fire de execuție paralele: %d\n"
 
-#: src/cryptsetup.c:3565
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3061,122 +3062,126 @@ msgstr ""
 "\tsimplu: %s, Cheie: %d biți, Suma de control a parolei: %s\n"
 "\tLUKS: %s, Cheie: %d biți, Suma de control a antetului LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3574
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Dimensiunea implicită a cheii cu modul XTS (două chei interne) va fi dublată.\n"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: necesită %s ca argumente"
 
-#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Slotul de cheie nu este valid."
 
-#: src/cryptsetup.c:3660
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Dimensiunea dispozitivului trebuie să fie multiplu al sectorului de 512 octeți."
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Specificația pentru dimensiunea zonei fierbinți(active) pentru recriptare maximă nu este validă."
 
-#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Dimensiunea cheii trebuie să fie multiplu de 8 biți"
 
-#: src/cryptsetup.c:3686
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Pot fi furnizate cel mult 2 specificații privind dimensiunea cheii."
 
-#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Pot fi furnizate cel mult %d specificații ale cheilor de volum."
 
-#: src/cryptsetup.c:3738
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Pot fi furnizate cel mult %d specificații de legătură a inelului de chei."
 
-#: src/cryptsetup.c:3747
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Dimensiunea maximă de reducere a dispozitivului este de 1 GiB."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Dimensiunea redusă trebuie să fie multiplu al sectorului de 512 octeți."
 
-#: src/cryptsetup.c:3767
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Argumentul opțiuni „--priority” poate fi doar «ignore/normal/prefer»."
 
-#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "Specificare nevalidă pentru numărul maxim de încercări."
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "Afișează acest mesaj de ajutor"
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "Afișează modul de utilizare pe scurt"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "Afișează versiunea pachetului"
 
-#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "Opțiuni de ajutor:"
 
-#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPȚIUNE...] <acțiune> <parametri_acțiune>"
 
-#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "Argumentul <acțiune> lipsește."
 
-#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "Acțiune necunoscută."
 
-#: src/cryptsetup.c:3928
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Opțiunea „--key-file” are prioritate față de argumentul specificat pentru fișierul cheie."
 
-#: src/cryptsetup.c:3934
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "Numai un argument „--key-file” este permis."
 
-#: src/cryptsetup.c:3939
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funcția de derivare a unei chei bazată pe parolă (PBKDF=Password-Based Key Derivation Function) poate fi doar pbkdf2 sau argon2i/argon2id."
 
-#: src/cryptsetup.c:3944
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Iterațiile forțate PBKDF nu pot fi combinate cu opțiunea de timp de iterație."
 
-#: src/cryptsetup.c:3949
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Nu se poate lega cheia de volum la un inel de chei când este dezactivat."
 
-#: src/cryptsetup.c:3954
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Nu se poate utiliza descrierea cheii pentru inelul de chei atunci când inelul de chei este dezactivat."
 
-#: src/cryptsetup.c:3959
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Integritatea în linie trebuie utilizată împreună cu opțiunea „--integrity”."
 
-#: src/cryptsetup.c:3970
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Opțiunile „--keyslot-cipher” și „--keyslot-key-size” trebuie să fie folosite împreună."
 
-#: src/cryptsetup.c:3978
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Nu s-a executat nicio acțiune. Programul a fost invocat cu opțiunea „--test-args”.\n"
 
-#: src/cryptsetup.c:3991
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "Nu se poate dezactiva blocarea metadatelor."
 
@@ -3241,7 +3246,7 @@ msgstr "Comanda necesită ca argument opțiunea <suma-de-control(hash)_rădăcin
 msgid "<data_device> <hash_device>"
 msgstr "<dispozitiv_date> <dispozitiv_sumă-de-control(hash)>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:553
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "formatează dispozitivul"
 
@@ -3257,7 +3262,7 @@ msgstr "verifică dispozitivul"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<dispozitiv_date> <nume> <dispozitiv_sumă-de-control(hash)> [<sumă-de-control(hash)_rădăcină>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:556
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "afișează starea dispozitivului activ"
 
@@ -3265,7 +3270,7 @@ msgstr "afișează starea dispozitivului activ"
 msgid "<hash_device>"
 msgstr "<dispozitiv_sumă-de-control(hash)>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:557
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "afișează informațiile de pe disc"
 
@@ -3308,7 +3313,7 @@ msgstr "Opțiunile „--panic-on-corruption” și „--restart-on-corruption”
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "Opțiunea „--error-as-corruption” trebuie să fie utilizată cu „--panic-on-corruption” sau „--restart-on-corruption”."
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3317,33 +3322,33 @@ msgstr ""
 "Acest lucru va suprascrie datele de pe %s și %s în mod irevocabil.\n"
 "Pentru a păstra datele dispozitivului de date, utilizați opțiunea „--no-wipe” (și apoi activați-l cu „--integrity-recalculate”)."
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "Formatat cu dimensiunea etichetei %u%s, integritate internă %s.\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (etichete hw în linie „inline”)"
 
-#: src/integritysetup.c:303
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Utilizarea fanionului pentru recalculare(...-recalculate) nu este acceptată, luați în considerare utilizarea opțiunii „--wipe” în schimb."
 
-#: src/integritysetup.c:380 src/integritysetup.c:540
+#: src/integritysetup.c:382 src/integritysetup.c:546
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Dispozitivul %s nu este un dispozitiv INTEGRITY valid."
 
-#: src/integritysetup.c:553 src/integritysetup.c:557
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
 msgstr "<dispozitiv_integritate>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
 msgstr "<dispozitiv_integritate> <nume>"
 
-#: src/integritysetup.c:577
+#: src/integritysetup.c:583
 #, c-format
 msgid ""
 "\n"
@@ -3354,7 +3359,7 @@ msgstr ""
 "<nume> este dispozitivul de creat sub %s\n"
 "<dispozitiv_integritate> este dispozitivul care conține date cu etichete de integritate\n"
 
-#: src/integritysetup.c:582
+#: src/integritysetup.c:588
 #, c-format
 msgid ""
 "\n"
@@ -3367,48 +3372,48 @@ msgstr ""
 "\tAlgoritmul sumei de control: %s\n"
 "\tDimensiunea maximă a fișierului cheie: %dko\n"
 
-#: src/integritysetup.c:639
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Dimensiune nevalidă --%s. Maximul este de %u octeți."
 
-#: src/integritysetup.c:742
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "Trebuie specificată atât opțiunea pentru fișierul cheie, cât și opțiunea pentru dimensiunea cheii."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Trebuie specificată atât opțiunea pentru fișierul cheii de integritate a jurnalului, cât și opțiunea pentru dimensiunea cheii."
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Algoritmul de integritate a jurnalului trebuie să fie specificat dacă este utilizată cheia de integritate a jurnalului."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Trebuie specificată atât opțiunea pentru fișierul cheii de criptare a jurnalului, cât și opțiunea pentru dimensiunea cheii."
 
-#: src/integritysetup.c:756
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Algoritmul de criptare a jurnalului trebuie să fie specificat dacă este utilizată cheia de criptare a jurnalului."
 
-#: src/integritysetup.c:760
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Opțiunile de recuperare și modul de hartă de biți(bitmap) se exclud reciproc."
 
-#: src/integritysetup.c:767
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Opțiunile jurnalului nu pot fi utilizate în modul de hartă de biți(bitmap)."
 
-#: src/integritysetup.c:772
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Opțiunile de hartă de biți(bitmap) pot fi utilizate numai în modul de hartă de biți(bitmap)."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:784
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Modul în linie nu poate fi combinat cu opțiunile de jurnal sau de hartă de biți."
 
-#: src/integritysetup.c:782
+#: src/integritysetup.c:788
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Modul în linie nu poate fi combinat cu un dispozitiv de date separat."
 
@@ -3771,32 +3776,32 @@ msgstr "Dispozitivul nu este în decriptare LUKS2. Opțiune în conflict „--de
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Dispozitivul este în recriptare folosind adaptabilitatea la transferul de date. Opțiunea „--resilience” solicitată nu poate fi aplicată."
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Nu se poate determina dimensiunea cheii de volum pentru LUKS fără sloturi de chei; folosiți opțiunea „--new-key-size” pentru a furniza aceste date."
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "Dispozitivul necesită recuperarea recriptării. Rulați mai întâi operația de reparare."
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "Dispozitivul %s este deja în recriptare LUKS2. Doriți să reluați operația inițializată anterior?"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "Recriptarea veche LUKS2 nu mai este acceptată."
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "Nu se poate recripta dispozitivul LUKS2 configurat să utilizeze OPAL."
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "Recriptarea dispozitivului cu profil de integritate nu este acceptată."
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3805,110 +3810,110 @@ msgstr ""
 "Solicitarea făcută cu opțiunea „--sector-size %<PRIu32>” este incompatibilă cu superblocul %s\n"
 "(dimensiunea blocului: %<PRIu32> octeți) detectat pe dispozitivul %s."
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Criptarea fără antet detașat (--header) nu este posibilă fără reducerea dimensiunii dispozitivului de date (--reduce-device-size)."
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "Decalajul de date solicitat trebuie să fie mai mic sau egal cu jumătate din parametrul opțiunii „--reduce-device-size”."
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "Ajustarea valorii „--reduce-device-size” la de două ori față de „--offset %<PRIu64> (sectoare)”.\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "Fișierul antet temporar %s există deja. Se abandonează."
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "Nu se poate crea fișierul antet temporar %s."
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "Dimensiunea metadatelor LUKS2 este mai mare decât valoarea decalajului de date."
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "Nu s-a putut plasa antetul nou la începutul dispozitivului %s."
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s este acum activ și pregătit pentru criptarea online.\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "Dispozitivul activ %s nu este LUKS2."
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "Se restabilește antetul LUKS2 original."
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "Restaurarea antetului LUKS2 original a eșuat."
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "Fișierul antet %s nu există. Doriți să inițializați decriptarea LUKS2 a dispozitivului %s și să exportați antetul LUKS2 în fișierul %s?"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "Nu s-au putut adăuga permisiuni de citire/scriere la fișierul antet exportat."
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "Inițializarea recriptării a eșuat. Copia de rezervă a antetului este disponibilă în %s."
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Decriptarea LUKS2 este acceptată numai cu dispozitivul antet detașat (cu decalajul de date fixat la 0)."
 
-#: src/utils_reencrypt.c:1487
+#: src/utils_reencrypt.c:1490
 msgid "No token could unlock the device."
 msgstr "Niciun jeton(token) nu a putut debloca dispozitivul."
 
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
 msgid "Not enough free keyslots for reencryption."
 msgstr "Nu sunt suficiente sloturi de chei libere pentru recriptare."
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1562
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Fișierul de chei sau descrierea cheii inelului de chei pot fi utilizate numai cu opțiunea „--key-slot” sau cu exact un slot de cheie activ."
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Introduceți fraza de acces pentru slotul de cheie %d: "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Se comută cifrul de criptare a datelor la %s.\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Utilizați „--force-no-keyslots” pentru a re-cripta dispozitivul cu sloturi de chei active prin pasarea directă a cheilor de volum."
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:1996
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Opțiunea „--new-volume-key-file” trebuie să fie combinată cu opțiunea „--new-key-size”"
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Nu s-au modificat parametrii de segment de date. Recriptarea a fost abandonată."
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3916,7 +3921,7 @@ msgstr ""
 "Creșterea dimensiunii sectorului de criptare pe dispozitivul offline nu este acceptată.\n"
 "Activați mai întâi dispozitivul sau utilizați opțiunea „--force-offline-reencrypt” (periculos!)."
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3925,58 +3930,58 @@ msgstr ""
 "\n"
 "Recriptarea a fost întreruptă."
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Reluarea recriptării LUKS în modul offline forțat.\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Dispozitivul %s conține metadate LUKS deteriorate. Se abandonează operația."
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Dispozitivul %s este deja un dispozitiv LUKS. Se abandonează operația."
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Dispozitivul %s este deja în recriptare LUKS. Se abandonează operația."
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "Decriptarea LUKS2 necesită opțiunea „--header”."
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "Comanda necesită un dispozitiv ca argument."
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Versiuni în conflict. Dispozitivul %s este LUKS1."
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Versiuni în conflict. Dispozitivul %s este în recriptare LUKS1."
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Versiuni în conflict. Dispozitivul %s este LUKS2."
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Versiuni în conflict. Dispozitivul %s este în recriptare LUKS2."
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Recriptarea LUKS2 a fost deja inițializată. Se abandonează operația."
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "Recriptarea dispozitivului nu este în curs de desfășurare."
 

From 164241d406be197931769b1cb0881b3ddadad1cc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mari=C3=A1n=20Haburaj?= <hajkomajko5@gmail.com>
Date: Sun, 19 Jul 2026 19:51:04 +0200
Subject: [PATCH 188/244] po: update sk.po (from translationproject.org)

---
 po/sk.po | 628 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 316 insertions(+), 312 deletions(-)

diff --git a/po/sk.po b/po/sk.po
index 2ffed35e7..131021fa4 100644
--- a/po/sk.po
+++ b/po/sk.po
@@ -16,10 +16,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-06-29 21:30+0200\n"
-"PO-Revision-Date: 2026-06-30 13:17+0200\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-07-13 10:51+0200\n"
 "Last-Translator: Marián Haburaj <hajkomajko5@gmail.com>\n"
 "Language-Team: Slovak <sk-i18n@lists.linux.sk>\n"
 "Language: sk\n"
@@ -210,10 +210,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nahradenie pôvodných LUKS2 metadát v pamäti zlyhalo."
 
 #: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
-#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
-#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
-#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -257,7 +257,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Zariadenie s oddelenými metadátami nie je podporované pre tento typ šifrovania."
 
 #: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
-#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Nepodporovaná veľkosť šifrovaného sektoru."
 
@@ -579,14 +579,14 @@ msgstr "Zlyhalo odpojenie kľúča zväzku od používateľom zadaného zväzku
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Zlyhalo pripojenie kľúča zväzku do používateľom zadaného zväzku kľúčov."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2720
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Zväzok %s nie je pozastavený."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
-#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
-#: src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "Kľúč zväzku nezodpovedá zväzku."
 
@@ -599,8 +599,8 @@ msgstr "Zlyhala výmena nového miesta pre kľúč."
 msgid "Key slot %d is invalid."
 msgstr "Miesto pre kľúč %d je neplatné."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
-#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Miesto pre kľúč %d nie je aktívne."
@@ -797,7 +797,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Nedá sa prečítať požadované množstvo údajov."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Zariadenie %s neexistuje alebo bol prístup odmietnutý."
@@ -1140,7 +1140,7 @@ msgstr "LUKS šifrovací režim %s je neplatný."
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS hash %s je neplatný."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Žiadne známe problémy neboli zistené pre hlavičku LUKS."
 
@@ -1160,7 +1160,7 @@ msgstr "Odsadenie údajov pre LUKS hlavičku musí byť 0 alebo číslo väčši
 
 #: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Poskytnutý nesprávny formát LUKS UUID."
 
@@ -1685,7 +1685,7 @@ msgstr "Zlyhalo nastavenie dm-crypt segmentu."
 msgid "Failed to set dm-linear segment."
 msgstr "Zlyhalo nastavenie dm-linear segmentu."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Nebol nájdený žiaden známy vzor špecifikácie šifry v hlavičke LUKS2."
 
@@ -2148,8 +2148,8 @@ msgstr "Parametre šifrovania miesta pre kľúč môžu byť nastavené len pre
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Parametre šifrovania miesta pre kľúč nie sú kompatibilné so šifrovaním miesta pre kľúč LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Nebol nájdený žiaden známy vzor špecifikácie šifry."
@@ -2176,8 +2176,8 @@ msgstr "VAROVANIE: Parameter --hash je ignorovaný v režime plain so zadaným s
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "VAROVANIE: Možnosť --keyfile-size je ignorovaná, veľkosť čítania je rovnaká ako veľkosť kľúča šifrovania.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Skenovanie blkid zlyhalo pre %s."
@@ -2187,11 +2187,11 @@ msgstr "Skenovanie blkid zlyhalo pre %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Zaznamenané podpis(y) zariadenia na %s. Pokračovanie ďalej môže poškodiť existujúce údaje."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
-#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
-#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "Operácia zrušená.\n"
 
@@ -2199,36 +2199,36 @@ msgstr "Operácia zrušená.\n"
 msgid "Option --key-file is required."
 msgstr "Možnosť --key-file je požadovaná."
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "Zadajte VeraCrypt PIM: "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "Neplatná hodnota PIM: chyba pri rozbore."
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "Neplatná hodnota PIM: 0."
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "Neplatná hodnota PIM: mimo rozsahu."
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "Žiadna hlavička zariadenia nebola rozpoznaná pre toto heslo."
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "Zariadenie %s nie je platné BITLK zariadenie."
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "Nedá sa určiť veľkosť kľúča zväzku pre BITLK, prosím použite možnosť --key-size."
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2238,7 +2238,7 @@ msgstr ""
 "ktorý povoľuje prístup k zašifrovaným oddielom bez hesla.\n"
 "Tento výpis by mal byť vždy uložený zašifrovaný na bezpečnom mieste."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2248,88 +2248,88 @@ msgstr ""
 "ktorý povoľuje prístup k zašifrovaným oddielom bez hesla.\n"
 "Tento výpis by mal byť uložený zašifrovaný na bezpečnom mieste."
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "Zariadenie %s nie je platné FVAULT2 zariadenie."
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nedá sa určiť veľkosť kľúča zväzku pre FVAULT2, prosím použite možnosť --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Zariadenie %s je stále aktívne a naplánované pre odložené odstránenie.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
-#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
-#: src/cryptsetup.c:3261
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Zlyhalo nastavenie cesty k externým tokenom %s."
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Zmena veľkosti aktívneho zariadenia vyžaduje kľúč zväzku vo zväzku kľúčov, ale možnosť --disable-keyring je nastavená."
 
-#: src/cryptsetup.c:1057
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "Hodnotenie výkonu prerušené."
 
-#: src/cryptsetup.c:1078
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     –\n"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u iterácií za sekundu pre %zu-bitový kľúč\n"
 
-#: src/cryptsetup.c:1094
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s –\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u iterácií, %5u pamäte, %1u paralelných vlákien (CPU) pre %zu-bitový kľúč (vyžadovaný čas %u ms)\n"
 
-#: src/cryptsetup.c:1120
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "Výsledok hodnotenia výkonu nie je spoľahlivý."
 
-#: src/cryptsetup.c:1171
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Testy sú len približné a používajú iba pamäť (žiadne vstupno-výstupné úložisko).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1196
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s Algoritmus|      Kľúč |      Šifrovanie |    Dešifrovanie\n"
 
-#: src/cryptsetup.c:1204
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Šifra %s (s %i bitovým kľúčom) nie je dostupná."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1225
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algoritmus|      Kľúč |      Šifrovanie |    Dešifrovanie\n"
 
-#: src/cryptsetup.c:1238
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "–"
 
-#: src/cryptsetup.c:1241
+#: src/cryptsetup.c:1242
 msgid "# Cipher speed test is not available.\n"
 msgstr "# Test rýchlosti šifry nie je dostupný.\n"
 
-#: src/cryptsetup.c:1257
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2337,27 +2337,27 @@ msgstr ""
 "Zaznamenané nechránené metadáta LUKS2 prešifrovania. Prosím overte, či je operácia prešifrovania žiadúca (pozri výstup luksDump)\n"
 "a pokračujte (aktualizujte metadáta) iba keď operáciu uznáte za žiadúcu."
 
-#: src/cryptsetup.c:1263
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Zadajte heslo na ochránenie a aktualizáciu metadát prešifrovania: "
 
-#: src/cryptsetup.c:1307
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Naozaj pokračovať s obnovou LUKS2 prešifrovania?"
 
-#: src/cryptsetup.c:1316
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Zadajte heslo na overenie otlačku (digest) metadát prešifrovania: "
 
-#: src/cryptsetup.c:1318
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Zadajte heslo pre obnovu prešifrovania: "
 
-#: src/cryptsetup.c:1380
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Naozaj sa pokúsiť opraviť hlavičku LUKS zariadenia?"
 
-#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2365,7 +2365,7 @@ msgstr ""
 "\n"
 "Mazanie prerušené."
 
-#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2373,167 +2373,167 @@ msgstr ""
 "Mazanie zariadenia na inicializáciu kontrolného súčtu integrity.\n"
 "Môžete to prerušiť stlačením CTRL+c (zvyšok nevymazaného zariadenia bude obsahovať neplatný kontrolný súčet).\n"
 
-#: src/cryptsetup.c:1435 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Nedá sa deaktivovať dočasné zariadenie %s."
 
-#: src/cryptsetup.c:1483
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "Iba hardvérové šifrovanie OPAL nepodporuje --cipher a --key-size, možnosti sa ignorujú."
 
-#: src/cryptsetup.c:1496
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Možnosti integrity môžu byť použité len pre formát LUKS2."
 
-#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Nepodporovaná možnosť veľkosti LUKS2 metadát."
 
-#: src/cryptsetup.c:1506
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL je podporovaný len pre formát LUKS2."
 
-#: src/cryptsetup.c:1511
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Hardvérové inline príznaky sú podporované len pre LUKS2 formát."
 
-#: src/cryptsetup.c:1520
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Súbor s hlavičkou neexistuje, chcete ho vytvoriť?"
 
-#: src/cryptsetup.c:1528
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Nedá sa vytvoriť súbor s hlavičkou %s."
 
-#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
-#: src/integritysetup.c:346
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "Nebol rozpoznaný žiaden známy vzor špecifikácie integrity."
 
-#: src/cryptsetup.c:1556
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Nedá sa použiť zadaná veľkosť kľúča integrity."
 
-#: src/cryptsetup.c:1574
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Nedá sa použiť %s ako hlavička na disku."
 
-#: src/cryptsetup.c:1603 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Toto prepíše údaje na %s nenávratne."
 
-#: src/cryptsetup.c:1640
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "OPAL heslo administrátora nemôže byť prázdne."
 
-#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
-#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Zlyhalo nastavenie pbkdf parametrov."
 
-#: src/cryptsetup.c:1785
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Znížené odsadenie údajov je povolené len pre oddelenú hlavičku LUKS."
 
-#: src/cryptsetup.c:1792
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Kontajnerový súbor LUKS %s je príliš malý na aktiváciu, nie je tam žiadne zvyšné miesto pre údaje."
 
-#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nedá sa zistiť veľkosť kľúču zväzku pre LUKS bez miest pre kľúče, prosím použite voľbu --key-size."
 
-#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "Zariadenie vyžaduje dve kľúče zväzku."
 
-#: src/cryptsetup.c:1888
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Niektoré zadané aktivačné parametre boli ignorované s len hardvérovým šifrovaním OPAL."
 
-#: src/cryptsetup.c:1893
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Zariadenie aktivované, ale nedajú sa urobiť príznaky trvalými."
 
-#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Miesto pre kľúč %d je vybrané pre vymazanie."
 
-#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Toto je posledné miesto pre kľúč. Zariadenie sa stane nepoužiteľné po odstránení tohto kľúča."
 
-#: src/cryptsetup.c:1986
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Zadajte akékoľvek zvyšné heslo: "
 
-#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operácia zrušená, miesto pre kľúč NEBOLO zmazané.\n"
 
-#: src/cryptsetup.c:2023
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Zadajte heslo, ktoré má byť vymazané: "
 
-#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
-#: src/cryptsetup.c:3252
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Zariadenie %s nie je platné LUKS2 zariadenie."
 
-#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Zadajte nové heslo k miestu pre kľúč: "
 
-#: src/cryptsetup.c:2146 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Zadaj PIN k tokenu: "
 
-#: src/cryptsetup.c:2148 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Zadaj PIN k tokenu %d: "
 
-#: src/cryptsetup.c:2207
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "VAROVANIE: Parameter --key-slot je použitý pre nové číslo miesta pre kľúč.\n"
 
-#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Zadajte akékoľvek existujúce heslo: "
 
-#: src/cryptsetup.c:2380
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Zadajte heslo, ktoré sa má zmeniť: "
 
-#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Zadajte nové heslo: "
 
-#: src/cryptsetup.c:2446
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Zadajte heslo k miestu pre kľúč, ktoré má byť konvertované: "
 
-#: src/cryptsetup.c:2470
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "Iba jeden argument so zariadením pre operáciu isLuks je podporovaný."
 
-#: src/cryptsetup.c:2575
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Miesto pre kľúč %d neobsahuje neviazaný kľúč."
 
-#: src/cryptsetup.c:2580
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2541,52 +2541,52 @@ msgstr ""
 "Výpis hlavičky s neviazaným kľúčom je citlivý údaj.\n"
 "Tento výpis by mal byť uložený šifrovaný na bezpečnom mieste."
 
-#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s nie je názov aktívneho zariadenia %s."
 
-#: src/cryptsetup.c:2706
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s nie je názov aktívneho LUKS zariadenia alebo chýba hlavička."
 
-#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "Možnosť --header-backup-file je vyžadovaná."
 
-#: src/cryptsetup.c:2833
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s nie je zariadenie spravované cryptsetup-om."
 
-#: src/cryptsetup.c:2844
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Obnovenie nie je podporované pre typ zariadenia %s"
 
-#: src/cryptsetup.c:2894
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Nerozpoznaný typ zariadenia %s v metadátach."
 
-#: src/cryptsetup.c:2896
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "Príkaz požaduje zariadenie a mapovaný názov ako argumenty."
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "Zadajte OPAL PSID: "
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "Zadajte OPAL heslo administrátora: "
 
-#: src/cryptsetup.c:2922
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "VAROVANIE: CELÝ disk bude obnovený do továrenských nastavení a všetky údaje budú stratené! Pokračovať?"
 
-#: src/cryptsetup.c:2965
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2595,363 +2595,363 @@ msgstr ""
 "Táto operácia vymaže všetky miesta s kľúčmi na zariadení %s.\n"
 "Zariadenie sa stane nepoužiteľné po tejto operácií."
 
-#: src/cryptsetup.c:2972
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operácia zrušená, miesta s kľúčmi NEBOLI vymazané.\n"
 
-#: src/cryptsetup.c:3011
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Neplatný typ LUKS, iba luks1 a luks2 sú podporované."
 
-#: src/cryptsetup.c:3027
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "Zariadenie je už typom %s."
 
-#: src/cryptsetup.c:3034
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Táto operácia premení %s na formát %s.\n"
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operácia zrušená, zariadenie NEBOLO premenené.\n"
 
-#: src/cryptsetup.c:3077
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Možnosť --priority, --label alebo --subsystem chýba."
 
-#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Token %d je neplatný."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "Token %d je používaný."
 
-#: src/cryptsetup.c:3126
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Zlyhalo pridanie tokenu luks2-keyring %d."
 
-#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Zlyhalo priradenie tokenu %d k miestu pre kľúč %d."
 
-#: src/cryptsetup.c:3154
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Token %d sa nepoužíva."
 
-#: src/cryptsetup.c:3191
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "Zlyhalo importovanie tokenu zo súboru."
 
-#: src/cryptsetup.c:3216
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Zlyhalo získanie tokenu %d pre export."
 
-#: src/cryptsetup.c:3229
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Token %d nie je priradený k miestu pre kľúč %d."
 
-#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Zlyhalo zrušenie priradenia tokenu %d z miesta pre kľúč %d."
 
-#: src/cryptsetup.c:3297
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Možnosť --tcrypt-hidden, --tcrypt-system alebo --tcrypt-backup je podporovaná len pre TCRYPT zariadenie."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Možnosť --veracrypt alebo --disable-veracrypt je podporovaná len pre zariadenie typu TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Možnosť --veracrypt-pim je podporovaná len pre zariadenia kompatibilné s VeraCrypt."
 
-#: src/cryptsetup.c:3307
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Možnosť --veracrypt-query-pim je podporovaná len pre zariadenia kompatibilné s VeraCrypt."
 
-#: src/cryptsetup.c:3309
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Možnosti --veracrypt-pim a --veracrypt-query-pim sa vzájomne vylučujú."
 
-#: src/cryptsetup.c:3318
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Možnosť --persistent nie je povolené s --test-passphrase."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Možnosti --refresh a --test-passphrase sa navzájom vylučujú."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Možnosť --shared je povolená len pre otvorenie zariadenia plain."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Možnosť --skip je podporovaná len pre otvorenie zariadení plain a loopaes."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Možnosť --offset s akciou otvorenia je podporovaná len pre zariadenia plain a loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Možnosť --tcrypt-hidden nemôže byť kombinovaná s --allow-discards."
 
-#: src/cryptsetup.c:3337
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Možnosť veľkosti sektora s akciou otvorenia je podporovaná len pre zariadenia plain."
 
-#: src/cryptsetup.c:3341
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Možnosť veľkých IV sektorov je podporovaná len pre otváranie zariadenia typu plain s veľkosťou sektora väčšou než 512 bajtov."
 
-#: src/cryptsetup.c:3346
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Možnosť --test-passphrase je povolená len pre otvorenie LUKS, TCRYPT, BITLK a FVAULT2 zariadení."
 
-#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Možnosť --device-size a --size nemôžu byť kombinované."
 
-#: src/cryptsetup.c:3352
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Možnosť --unbound je povolená len pre otvorenie zariadení luks."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Možnosť --unbound nemôže byť použitá bez --test-passphrase."
 
-#: src/cryptsetup.c:3359
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Možnosť --volume-key-keyring nemôže byť kombinovaná s --hash alebo --volume-key-file."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Obe možnosti --volume-key-file musia byť zadané spolu s príslušnými možnosťami --key-size."
 
-#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Možnosti --cancal-deferred a --deferred nemôžu byť použité naraz."
 
-#: src/cryptsetup.c:3387
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Možnosť --active-name možno nastaviť len pre zariadenie LUKS2."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Možnosti --active-name a --force-offline-reencrypt nemožno kombinovať."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Možnosti --new-volume-key-file a --keep-key nemožno kombinovať."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Možnosti --new-volume-key-keyring a --keep-key nemožno kombinovať."
 
-#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "Vyžaduje sa zadanie miesta pre kľúč."
 
-#: src/cryptsetup.c:3412
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Možnosti --align-payload a --offset nemožno kombinovať."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Možnosť --integrity-no-wipe môže byť použitá len pre formátovanie s rozšírením integrity."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Iba jedna z možností --use-[u]random je povolená."
 
-#: src/cryptsetup.c:3426
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "Veľkosť kľúča sa vyžaduje s možnosťou --unbound."
 
-#: src/cryptsetup.c:3446
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "Neplatná operácia s tokenom."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Parameter --key-description je povinný pre pridanie tokenu."
 
-#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Akcia vyžaduje špecifický token. Použite --token-id parameter."
 
-#: src/cryptsetup.c:3457
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "Možnosť --unbound je platná len pri pridávaní tokenu."
 
-#: src/cryptsetup.c:3459
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Možnosti --key-slot a --unbound nemožno kombinovať."
 
-#: src/cryptsetup.c:3464
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Akcia vyžaduje špecifický token. Použite --key-slot parameter."
 
-#: src/cryptsetup.c:3480
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<zariadenie> [--type <typ>] [<názov>]"
 
-#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "otvorí zariadenie ako <názov>"
 
-#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
-#: src/integritysetup.c:556 src/integritysetup.c:558
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<názov>"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "zatvorí zariadenie (odstráni mapovanie)"
 
-#: src/cryptsetup.c:3482 src/integritysetup.c:558
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "zmení veľkosť aktívneho zariadenia"
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "zobrazí stav zariadenia"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <šifra>]"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "zhodnotí výkon šifry"
 
-#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
-#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<zariadenie>"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "pokúsi sa opraviť metadáta uložené na disku"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "prešifruje zariadenie LUKS2"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "vymaže všetky miesta s kľúčmi (odstráni šifrovací kľúč)"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "prevedie LUKS z/na LUKS2 formát(u)"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "nastaví trvalé možnosti konfigurácie pre LUKS2"
 
-#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<zariadenie> [<nový súbor s kľúčom>]"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "naformátuje zariadenie LUKS"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "pridá kľúč do zariadenia LUKS"
 
-#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<zariadenie> [<súbor s kľúčom>]"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "odstráni poskytnutý kľúč alebo súbor s kľúčom zo zariadenia LUKS"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "zmení poskytnutý kľúč alebo súbor s kľúčom na zariadení LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "prevedie kľúč na nové parametre pbkdf"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<zariadenie> <miesto pre kľúč>"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "vymaže kľúč s číslom <miesto pre kľúč> zo zariadenia LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "vypíše UUID zariadení LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "otestuje <zariadenie> na hlavičku diskového oddielu LUKS"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "vypíše informácie o oddiely LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "vypíše informácie o zariadení TCRYPT"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "vypíše informácie o zariadení BITLK"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "vypíše informácie o zariadení FVAULT2"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Pozastaví zariadenie LUKS a vymaže kľúč (všetky vstupno-výstupné operácie budú zmrazené)"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "Prebudí pozastavené zariadenie LUKS"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "Zálohuje hlavičku a miesta s kľúčmi zariadenia LUKS"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "Obnoví hlavičku a miesta s kľúčmi zariadenia LUKS"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <zariadenie>"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipuluje s tokenmi LUKS2"
 
-#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2959,7 +2959,7 @@ msgstr ""
 "\n"
 "<akcia> je jedna z:\n"
 
-#: src/cryptsetup.c:3531
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2971,7 +2971,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3535
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -2986,7 +2986,7 @@ msgstr ""
 "<miesto pre kľúč> je číslo miesta pre kľúč LUKS na upravovanie\n"
 "<súbor s kľúčom> je voliteľný súbor s kľúčom pre nový kľúč pre akciu luksAddKey\n"
 
-#: src/cryptsetup.c:3542
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -2995,7 +2995,7 @@ msgstr ""
 "\n"
 "Predvolené zakompilovaný formát metadát je %s (pre akciu luksFormat).\n"
 
-#: src/cryptsetup.c:3547
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3003,12 +3003,12 @@ msgstr ""
 "\n"
 "LUKS2 podpora zásuvného modulu externého tokenu je zapnutá.\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Cesta k zásuvnému modulu externého tokenu LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3016,7 +3016,7 @@ msgstr ""
 "\n"
 "LUKS2 podpora zásuvného modulu externého tokenu je vypnutá.\n"
 
-#: src/cryptsetup.c:3554
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3033,7 +3033,7 @@ msgstr ""
 "Predvolené PBKDF pre LUKS2: %s\n"
 "\tČas iterácie: %d, Pamäť potrebná: %d kB, Paralelné vlákna: %d\n"
 
-#: src/cryptsetup.c:3565
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3048,122 +3048,126 @@ msgstr ""
 "\tplain: %s, Kľúč: %d bitov, Hashovanie hesla: %s\n"
 "\tLUKS: %s, Kľúč: %d bitov, Hashovanie LUKS hlavičky: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3574
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Predvolená veľkosť kľúča s režimom XTS (dva interné kľúče) bude zdvojnásobená.\n"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: požaduje %s ako argumenty"
 
-#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Miesto pre kľúč je neplatné."
 
-#: src/cryptsetup.c:3660
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Veľkosť zariadenie musí byť násobkom 512-bajtového sektora."
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Zadaná neplatná maximálna veľkosť horúcej zóny prešifrovania."
 
-#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Veľkosť kľúča musí byť násobkom 8 bitov"
 
-#: src/cryptsetup.c:3686
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Najviac dve veľkosti kľúčov môžu byť zadané."
 
-#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Najviac %d špecifikácií kľúča zväzku môže byť zadaných."
 
-#: src/cryptsetup.c:3738
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Najviac %d zväzkov kľúčov môže byť zadaných."
 
-#: src/cryptsetup.c:3747
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Maximálna veľkosť zmenšenia zariadenia je 1 GiB."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Veľkosť zmenšenia musí byť násobkom 512-bajtového sektora."
 
-#: src/cryptsetup.c:3767
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Možnosť --priority môže byť len ignore/normal/prefer."
 
-#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "Zadaný neplatný maximálny počet pokusov."
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "Zobrazí túto pomocnú správu"
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "Zobrazí stručný návod na použitie"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "Vypíše verziu balíka"
 
-#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "Možnosti pomoci:"
 
-#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[MOŽNOSŤ...] <akcia> <špecifikácia akcie>"
 
-#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "Chýba argument <akcia>."
 
-#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "Neznáma akcia."
 
-#: src/cryptsetup.c:3928
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Možnosť --key-file má prednosť pred zadaným argumentom súboru s kľúčom."
 
-#: src/cryptsetup.c:3934
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "Iba jeden argument --key-file je dovolený."
 
-#: src/cryptsetup.c:3939
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Funkcia na odvodenie kľúča na základe hesla (PBKDF) môže byť iba pbkdf2 alebo argon2i/argon2id."
 
-#: src/cryptsetup.c:3944
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Vynútené iterácie PBKDF nemôžu byť kombinované s možnosťou času iterácie."
 
-#: src/cryptsetup.c:3949
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Nedá sa prepojiť kľúč zväzku na zväzok kľúčov, keď je zväzok kľúčov vypnutý."
 
-#: src/cryptsetup.c:3954
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Nedá sa použiť popis kľúča zo zväzku kľúčov, keď je zväzok kľúčov vypnutý."
 
-#: src/cryptsetup.c:3959
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Inline integrita musí byť použitá spolu s možnosťou --integrity."
 
-#: src/cryptsetup.c:3970
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Možnosti --keyslot-cipher a --keyslot-key-size musia byť použité spolu."
 
-#: src/cryptsetup.c:3978
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Žiadna akcia sa nevykonala. Zavolané s možnosťou --test-args.\n"
 
-#: src/cryptsetup.c:3991
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "Nedá sa vypnúť zamykanie metadát."
 
@@ -3228,7 +3232,7 @@ msgstr "Príkaz vyžaduje <koreňový_hash> alebo možnosť --root-hash-file ako
 msgid "<data_device> <hash_device>"
 msgstr "<zariadenie_s_údajmi> <hash_zariadenie>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:553
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "formátuje zariadenie"
 
@@ -3244,7 +3248,7 @@ msgstr "overí zariadenie"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<zariadenie_s_údajmi> <názov> <hash_zariadenie> [<koreňový_hash>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:556
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "zobrazí stav aktívneho zariadenia"
 
@@ -3252,7 +3256,7 @@ msgstr "zobrazí stav aktívneho zariadenia"
 msgid "<hash_device>"
 msgstr "<hash_zariadenie>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:557
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "zobrazí informácie na disku"
 
@@ -3294,7 +3298,7 @@ msgstr "Možnosť --panic-on-corruption a --restart-on-corruption nemôžu byť
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "Možnosť --error-as-corruption musí byť použitá spolu s --panic-on-corruption alebo --restart-on-corruption."
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3303,33 +3307,33 @@ msgstr ""
 "Toto nenávratne prepíše údaje na %s a %s.\n"
 "Na zachovanie zariadenia s údajmi použite možnosť --no-wipe (a potom ho aktivujte s --integrity-recalculate)."
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "Naformátované s veľkosťou príznaku %u %s, interná integrita %s.\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (hardvérové inline príznaky)"
 
-#: src/integritysetup.c:303
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Nastavenie príznaku prepočítania nie je podporované, môžete zvážiť použitie --wipe namiesto toho."
 
-#: src/integritysetup.c:380 src/integritysetup.c:540
+#: src/integritysetup.c:382 src/integritysetup.c:546
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Zariadenie %s nie je platné INTEGRITY zariadenie."
 
-#: src/integritysetup.c:553 src/integritysetup.c:557
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
 msgstr "<zariadenie_integrity>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
 msgstr "<zariadenie_integrity> <názov>"
 
-#: src/integritysetup.c:577
+#: src/integritysetup.c:583
 #, c-format
 msgid ""
 "\n"
@@ -3340,7 +3344,7 @@ msgstr ""
 "<názov> je zariadenie na vytvorenie pod %s\n"
 "<zariadenie_integrity> je zariadenie obsahujúce údaje s príznakmi integrity\n"
 
-#: src/integritysetup.c:582
+#: src/integritysetup.c:588
 #, c-format
 msgid ""
 "\n"
@@ -3353,48 +3357,48 @@ msgstr ""
 "\tAlgoritmus kontrolného súčtu: %s\n"
 "\tMaximálna veľkosť súboru s kľúčom: %d kB\n"
 
-#: src/integritysetup.c:639
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Neplatná veľkosť --%s. Maximum je %u bajtov."
 
-#: src/integritysetup.c:742
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "Obe možnosti musia byť zadané, súbor s kľúčom aj veľkosť kľúča."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Obe možnosti musia byť zadané, súbor s kľúčom pre integritu denníka aj veľkosť kľúča."
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Algoritmus integrity denníka musí byť zadaný, keď sa používa kľúč pre integritu denníka."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Obe možnosti musia byť zadané, súbor s kľúčom na šifrovanie denníka aj veľkosť kľúča."
 
-#: src/integritysetup.c:756
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Algoritmus šifrovania denníka musí byť zadaný, keď sa používa kľúč na šifrovanie denníka."
 
-#: src/integritysetup.c:760
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Možnosti režimu obnovenia a bitmapy sa vzájomne vylučujú."
 
-#: src/integritysetup.c:767
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Možnosti denníka nemôžu byť použité v bitmapovom režime."
 
-#: src/integritysetup.c:772
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Možnosti bitmapy môžu byť použité len v bitmapovom režime."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:784
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Režim inline nemôže byť kombinovaný s možnosťami režimu denníka alebo bitmapy."
 
-#: src/integritysetup.c:782
+#: src/integritysetup.c:788
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Režim inline nemôže byť kombinovaný s oddeleným zariadením s údajmi."
 
@@ -3748,32 +3752,32 @@ msgstr "Zariadenie nie je v stave dešifrovania LUKS2. Konfliktná možnosť --d
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Zariadenie je v stave prešifrovania s odolnosťou posunu dát. Požadovaná možnosť --resilience nemôže byť aplikovaná."
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Nedá sa zistiť veľkosť kľúču zväzku pre LUKS bez miest pre kľúče, prosím použite možnosť --new-key-size."
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "Zariadenie požaduje obnovu prešifrovania. Spustite najprv opravu."
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "Zariadenie %s je už v stave LUKS2 prešifrovania. Želáte si obnoviť už predtým inicializovanú operáciu?"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "Zastaralé LUKS2 prešifrovanie už nie je podporované."
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "Nedá sa prešifrovať zariadenie LUKS2, ktoré je nakonfigurované na používanie OPAL."
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "Prešifrovanie zariadenia s profilom integrity nie je podporované."
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3782,110 +3786,110 @@ msgstr ""
 "Požadovaná --sector-size %<PRIu32> nie je kompatibilná so superblokom %s\n"
 "(veľkosť bloku: %<PRIu32> bajtov) rozpoznaným na zariadení %s."
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Šifrovanie bez oddelenej hlavičky (--header) nie je možné bez zmenšenia veľkosti zariadenia s údajmi (--reduce-device-size)."
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "Vyžadované odsadenie údajov musí byť menšie alebo rovné polovici parametra --reduce-device-size."
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "Upravuje sa hodnota --reduce-device-size na dvojnásobok --offset %<PRIu64> (sektorov).\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "Dočasný súbor hlavičky %s už existuje. Operácia sa ruší."
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "Nedá sa vytvoriť dočasný súbor s hlavičkou %s."
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "Veľkosť metadát LUKS2 je väčšia ako hodnota posunu údajov."
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "Zlyhalo umiestnenie novej hlavičky na začiatok zariadenia %s."
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s je teraz aktívne a pripravené na online prešifrovanie.\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "Aktívne zariadenie %s nie je typu LUKS2."
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "Obnovuje sa pôvodná hlavička LUKS2."
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "Obnova pôvodnej hlavičky LUKS2 zlyhala."
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "Súbor s hlavičkou %s neexistuje. Chcete začať LUKS2 dešifrovanie zariadenia %s a exportovať hlavičku LUKS2 do súboru %s?"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "Zlyhalo priradenie oprávnení čítania/zápisu k exportovanému súboru s hlavičkou."
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "Inicializácia prešifrovania zlyhala. Záložná hlavička je dostupná v %s."
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Dešifrovanie LUKS2 je podporované iba s oddelenou hlavičkou (s odsadením údajov nastaveným na 0)."
 
-#: src/utils_reencrypt.c:1487
+#: src/utils_reencrypt.c:1490
 msgid "No token could unlock the device."
 msgstr "Žiaden token nemôže odomknúť zariadenie."
 
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
 msgid "Not enough free keyslots for reencryption."
 msgstr "Nie je dostatok voľných miest pre kľúč na prešifrovanie."
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1562
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Súbor s kľúčom alebo kľúč zo zväzku kľúčov môže byť použitý iba s --key-slot alebo s práve jedným aktívnym miestom pre kľúč."
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Zadajte heslo miesta pre kľúč %d: "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Mení sa algoritmus šifrovanie údajov na %s.\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Použite --force-no-keyslots na prešifrovanie zariadenia s aktívnymi miestami pre kľúč priamo odovzdaním kľúčov zväzku."
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:1996
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Možnosť --new-volume-key-file musí byť použitá spolu s --new-key-size"
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Žiaden parameter údajových segmentov nezmenený. Prešifrovanie sa ruší."
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3893,7 +3897,7 @@ msgstr ""
 "Zväčšenie veľkosti šifrovaného sektora na offline zariadení nie je podporované.\n"
 "Aktivujte najprv zariadenie alebo použite možnosť --force-offline-reencrypt (nebezpečné!)."
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3902,58 +3906,58 @@ msgstr ""
 "\n"
 "Prešifrovanie prerušené."
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Obnovovanie LUKS prešifrovania vo vynútenom režime offline.\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Zariadenie %s obsahuje chybné LUKS metadáta. Operácia sa ruší."
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Zariadenie %s už je LUKS zariadenie. Operácia sa ruší."
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Zariadenie %s je už v stave prešifrovania LUKS. Operácia sa ruší."
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "LUKS2 dešifrovanie požaduje možnosť --header."
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "Príkaz vyžaduje zariadenie ako argument."
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Konfliktné verzie. Zariadenie %s je LUKS1."
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Konfliktné verzie. Zariadenie %s je v stave prešifrovania LUKS1."
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Konfliktné verzie. Zariadenie %s je LUKS2."
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Konfliktné verzie. Zariadenie %s je v stave prešifrovania LUKS2."
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "LUKS2 prešifrovanie je už inicializované. Operácia sa ruší."
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "Opätovné šifrovanie zariadenia neprebieha."
 

From be437475e12069ecbb3d8656c590431bf4905143 Mon Sep 17 00:00:00 2001
From: Yuri Chornoivan <yurchor@ukr.net>
Date: Sun, 19 Jul 2026 19:51:04 +0200
Subject: [PATCH 189/244] po: update uk.po (from translationproject.org)

---
 po/uk.po | 631 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 316 insertions(+), 315 deletions(-)

diff --git a/po/uk.po b/po/uk.po
index a9fe8f905..7f7f8845f 100644
--- a/po/uk.po
+++ b/po/uk.po
@@ -5,10 +5,10 @@
 # Yuri Chornoivan <yurchor@ukr.net>, 2012-2023, 2024, 2025, 2026.
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc1\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-06-29 21:30+0200\n"
-"PO-Revision-Date: 2026-06-30 13:31+0300\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-07-11 17:13+0300\n"
 "Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
 "Language-Team: Ukrainian <trans-uk@lists.fedoraproject.org>\n"
 "Language: uk\n"
@@ -200,10 +200,10 @@ msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Не вдалося відкотити метадані LUKS2 у пам'яті."
 
 #: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1779
-#: src/cryptsetup.c:1963 src/cryptsetup.c:2018 src/cryptsetup.c:2216
-#: src/cryptsetup.c:2361 src/cryptsetup.c:2639 src/cryptsetup.c:2952
-#: src/cryptsetup.c:3020 src/utils_reencrypt.c:2281
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
@@ -247,7 +247,7 @@ msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Підтримки пристрою від'єднаних метаданих для цього типу шифрування не передбачено."
 
 #: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
-#: src/cryptsetup.c:1491 src/cryptsetup.c:3759
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Непідтримуваний розмір сектора шифрування."
 
@@ -569,14 +569,14 @@ msgstr "Не вдалося скасувати прив'язку ключа то
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Не вдалося пов'язати ключ тому із визначеним користувачем сховищем ключів."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2720
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Том %s не приспано."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1855
-#: src/cryptsetup.c:2259 src/cryptsetup.c:2277 src/utils_reencrypt.c:305
-#: src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "Ключ тому не відповідає тому."
 
@@ -589,8 +589,8 @@ msgstr "Не вдалося зарезервувати новий слот кл
 msgid "Key slot %d is invalid."
 msgstr "Слот ключа %d є некоректним."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1976 src/cryptsetup.c:2436
-#: src/cryptsetup.c:3120 src/cryptsetup.c:3180
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Слот ключа %d не є активним."
@@ -787,7 +787,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Не вдалося прочитати бажаний об’єм даних."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Пристрою %s не існує або доступ до цього пристрою заборонено."
@@ -1130,7 +1130,7 @@ msgstr "Режим шифрування LUKS %s є некоректним."
 msgid "LUKS hash %s is invalid."
 msgstr "Хеш-сума LUKS %s є некоректною."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1366
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "У заголовку LUKS не виявлено жодних проблем."
 
@@ -1150,7 +1150,7 @@ msgstr "Відступ даних для заголовка LUKS має бути
 
 #: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Вказано UUID LUKS у помилковому форматі."
 
@@ -1675,7 +1675,7 @@ msgstr "Не вдалося встановити сегмент dm-crypt."
 msgid "Failed to set dm-linear segment."
 msgstr "Не вдалося встановити сегмент dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Не виявлено жодного відомого зразка специфікації шифрування у заголовку LUKS."
 
@@ -2138,8 +2138,8 @@ msgstr "Параметри шифрування слоту ключів можн
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Параметри шифрування слоту ключів є несумісними із шифруванням слотів ключів LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1179 src/cryptsetup.c:1544
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Не виявлено жодного відомого зразка специфікації шифрування."
@@ -2166,8 +2166,8 @@ msgstr "Попередження: параметр --hash у простому р
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "Попередження: параметр --keyfile-size проігноровано, розмір прочитаних даних збігається із розміром ключа шифрування.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1374 src/cryptsetup.c:1597
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Помилка сканування Blkid для %s."
@@ -2177,11 +2177,11 @@ msgstr "Помилка сканування Blkid для %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "На %s виявлено підписи пристроїв. Подальша обробка може пошкодити наявні дані."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1260 src/cryptsetup.c:1308
-#: src/cryptsetup.c:1381 src/cryptsetup.c:1521 src/cryptsetup.c:1609
-#: src/cryptsetup.c:2494 src/cryptsetup.c:2923 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "Дію перервано.\n"
 
@@ -2189,36 +2189,36 @@ msgstr "Дію перервано.\n"
 msgid "Option --key-file is required."
 msgstr "Слід вказати параметр --key-file."
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "Введіть PIM VeraCrypt: "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "Некоректне значення PIM: помилка обробки."
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "Некоректне значення PIM: 0."
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "Некоректне значення PIM: поза межами діапазону."
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "Для цього пароля не виявлено заголовка пристрою."
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "Пристрій %s не є коректним пристроєм BITLK."
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "Неможливо визначити розмір ключа тому для BITLK. Будь ласка, скористайтеся параметром --key-size."
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2229,7 +2229,7 @@ msgstr ""
 "без пароля. Цей дамп слід зберігати у зашифрованому форматі\n"
 "у безпечному місці."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2519
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2240,88 +2240,88 @@ msgstr ""
 "без пароля. Цей дамп слід зберігати у зашифрованому форматі\n"
 "у безпечному місці."
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "Пристрій %s не є коректним пристроєм FVAULT2."
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Неможливо визначити розмір ключа тому для FVAULT2. Будь ласка, скористайтеся параметром --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Пристрій %s усе ще є активним, його заплановано для відкладеного вилучення.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1807 src/cryptsetup.c:2081
-#: src/cryptsetup.c:2228 src/cryptsetup.c:2647 src/cryptsetup.c:2728
-#: src/cryptsetup.c:3261
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Не вдалося встановити шлях до зовнішніх жетонів %s."
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Зміна розмірів активного пристрою потребує наявності ключа тому у сховищі ключів, але вказано параметр --disable-keyring."
 
-#: src/cryptsetup.c:1057
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "Тестування перервано."
 
-#: src/cryptsetup.c:1078
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     н/д\n"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u ітерацій за секунду для %zu-бітового ключа\n"
 
-#: src/cryptsetup.c:1094
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s н/д\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u ітерацій, пам'ять: %5u, %1u паралельних потоків (процесорів) для %zu-бітового ключа (запит на %u мс часу)\n"
 
-#: src/cryptsetup.c:1120
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "Результат тестування є ненадійним."
 
-#: src/cryptsetup.c:1171
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Наближені значення під час перевірки визначаються лише за допомогою оперативної пам’яті (без запису на диск).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1196
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "№%*s Алгоритм |      Ключ |      Шифрування |   Розшифрування\n"
 
-#: src/cryptsetup.c:1204
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Шифрування  %s (розмір ключа — %i бітів) є недоступним."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1225
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "№      Алгоритм |      Ключ |      Шифрування |   Розшифрування\n"
 
-#: src/cryptsetup.c:1238
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "н/д"
 
-#: src/cryptsetup.c:1241
+#: src/cryptsetup.c:1242
 msgid "# Cipher speed test is not available.\n"
 msgstr "# Перевірка швидкості шифрування недоступна.\n"
 
-#: src/cryptsetup.c:1257
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2329,27 +2329,27 @@ msgstr ""
 "Виявлено незахищені метадані повторного шифрування LUKS2. Будь ласка, перевірте, чи бажаною є дія з повторного шифрування\n"
 "(див. виведення luksDump), і продовжуйте (оновлення метаданих), лише якщо впевнені, що дія є бажаною."
 
-#: src/cryptsetup.c:1263
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Вкажіть пароль для захисту і оновлення метаданих повторного шифрування: "
 
-#: src/cryptsetup.c:1307
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "Ви справді хочете продовжити процедуру відновлення повторного шифрування LUKS2?"
 
-#: src/cryptsetup.c:1316
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Вкажіть пароль для перевірки контрольної суми метаданих повторного шифрування: "
 
-#: src/cryptsetup.c:1318
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Вкажіть пароль для відновлення повторного шифрування: "
 
-#: src/cryptsetup.c:1380
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "Спробувати відновити заголовок пристрою LUKS?"
 
-#: src/cryptsetup.c:1408 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2357,7 +2357,7 @@ msgstr ""
 "\n"
 "Витирання перервано."
 
-#: src/cryptsetup.c:1413 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2365,167 +2365,167 @@ msgstr ""
 "Витираємо пристрій для ініціалізації контрольних сум для цілісності.\n"
 "Ви можете перервати цей процес натисканням комбінації клавіш CTRL+C (решта невитертого пристрою міститиме некоректну контрольну суму).\n"
 
-#: src/cryptsetup.c:1435 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "Не можна скасувати активацію тимчасового пристрою %s."
 
-#: src/cryptsetup.c:1483
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "У апаратному шифрування OPAL не передбачено підтримки параметрів --cipher і --key-size, параметри проігноровано."
 
-#: src/cryptsetup.c:1496
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "Параметр цілісності може бути використано лише для формату LUKS2."
 
-#: src/cryptsetup.c:1501 src/cryptsetup.c:1581
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Непідтримувані параметри розміру метаданих LUKS2."
 
-#: src/cryptsetup.c:1506
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "Підтримку OPAL передбачено лише для формату LUKS2."
 
-#: src/cryptsetup.c:1511
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Підтримку вбудованих апаратних міток передбачено лише для формату LUKS2."
 
-#: src/cryptsetup.c:1520
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "Файла заголовка не існує. Хочете його створити?"
 
-#: src/cryptsetup.c:1528
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "Не вдалося створити файл заголовка %s."
 
-#: src/cryptsetup.c:1554 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
-#: src/integritysetup.c:346
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "Не виявлено жодного відомого зразка специфікації цілісності."
 
-#: src/cryptsetup.c:1556
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "Не можна використовувати вказаний розмір ключа цілісності."
 
-#: src/cryptsetup.c:1574
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "Не можна використовувати %s як заголовок на диску."
 
-#: src/cryptsetup.c:1603 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Дані на %s буде перезаписано без можливості відновлення."
 
-#: src/cryptsetup.c:1640
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "Пароль адміністратора OPAL не може бути порожнім."
 
-#: src/cryptsetup.c:1654 src/cryptsetup.c:2098 src/cryptsetup.c:2241
-#: src/cryptsetup.c:2376 src/cryptsetup.c:2442 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "Не вдалося встановити параметри pbkdf."
 
-#: src/cryptsetup.c:1785
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "Зменшений відступ даних можна використовувати лише для від’єднаних заголовків LUKS."
 
-#: src/cryptsetup.c:1792
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Контейнер файлів LUKS %s є надто малим для активації, на ньому не лишиться місця для даних."
 
-#: src/cryptsetup.c:1834 src/cryptsetup.c:2247 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Неможливо визначити розмір ключа тому для LUKS без слотів ключів. Будь ласка, скористайтеся параметром --key-size."
 
-#: src/cryptsetup.c:1853 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "Для пристрою потрібні два ключі тому."
 
-#: src/cryptsetup.c:1888
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Деякі із вказаних параметрів активації було проігноровано через апаратне шифрування OPAL."
 
-#: src/cryptsetup.c:1893
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Пристрій задіяно, але не вдалося зробити прапорці сталими."
 
-#: src/cryptsetup.c:1973 src/cryptsetup.c:2041
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "Слот ключа %d позначено для вилучення."
 
-#: src/cryptsetup.c:1985 src/cryptsetup.c:2045
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Це останній слот ключа. Пристрій стане непридатним для використання після спорожнення цього ключа."
 
-#: src/cryptsetup.c:1986
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Введіть будь-який інший пароль: "
 
-#: src/cryptsetup.c:1987 src/cryptsetup.c:2047
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Дію перервано, слот ключів НЕ витерто.\n"
 
-#: src/cryptsetup.c:2023
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Введіть пароль, який слід вилучити: "
 
-#: src/cryptsetup.c:2073 src/cryptsetup.c:2425 src/cryptsetup.c:3085
-#: src/cryptsetup.c:3252
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Пристрій %s не є коректним пристроєм LUKS2."
 
-#: src/cryptsetup.c:2112 src/cryptsetup.c:2311
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Введіть новий пароль для слота ключа: "
 
-#: src/cryptsetup.c:2146 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Введіть пінкод жетона: "
 
-#: src/cryptsetup.c:2148 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Введіть пінкод жетона %d: "
 
-#: src/cryptsetup.c:2207
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "Попередження: параметр --key-slot використано для нового числа слоту ключа.\n"
 
-#: src/cryptsetup.c:2284 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Введіть будь-який пароль: "
 
-#: src/cryptsetup.c:2380
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Введіть пароль, який слід змінити: "
 
-#: src/cryptsetup.c:2396 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Введіть новий пароль: "
 
-#: src/cryptsetup.c:2446
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Вкажіть пароль для слоту ключа, який буде перетворено: "
 
-#: src/cryptsetup.c:2470
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "У команді isLuks можна використовувати лише один аргумент назви пристрою."
 
-#: src/cryptsetup.c:2575
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "Слот ключа %d не містить непов'язаного ключа."
 
-#: src/cryptsetup.c:2580
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2533,52 +2533,52 @@ msgstr ""
 "Дамп заголовка з непов'язаним ключем є конфіденційними даними.\n"
 "Цей дамп слід зберігати у зашифрованому форматі у безпечному місці."
 
-#: src/cryptsetup.c:2675 src/cryptsetup.c:2711
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s не є назвою активного пристрою %s."
 
-#: src/cryptsetup.c:2706
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s не є назвою активного пристрою LUKS або пропущено заголовок."
 
-#: src/cryptsetup.c:2783 src/cryptsetup.c:2802
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "Слід вказати параметр --header-backup-file."
 
-#: src/cryptsetup.c:2833
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s не є керованим cryptsetup пристроєм."
 
-#: src/cryptsetup.c:2844
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Підтримки дії з оновлення для пристрою типу %s не передбачено."
 
-#: src/cryptsetup.c:2894
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Нерозпізнаний тип пристрою метаданих, %s."
 
-#: src/cryptsetup.c:2896
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "Аргументами команди мають бути назва пристрою та призначена до нього назва."
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "Введіть PSID OPAL: "
 
-#: src/cryptsetup.c:2914
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "Введіть пароль адміністратора OPAL: "
 
-#: src/cryptsetup.c:2922
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "УВАГА: УВЕСЬ диск буде повернуто до початкових параметрів, а усі дані на ньому буде втрачено! Виконати дію?"
 
-#: src/cryptsetup.c:2965
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2587,363 +2587,363 @@ msgstr ""
 "У результаті виконання цієї операції буде витерто усі слоти ключів на пристрої %s.\n"
 "Після виконання цієї дії пристроєм не можна буде скористатися."
 
-#: src/cryptsetup.c:2972
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Дію перервано, слоти ключів НЕ витерто.\n"
 
-#: src/cryptsetup.c:3011
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Некоректний тип LUKS. Передбачено підтримку лише luks1 і luks2."
 
-#: src/cryptsetup.c:3027
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "Пристрій вже належить до типу %s."
 
-#: src/cryptsetup.c:3034
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Ця дія перетворить %s до формату %s.\n"
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Дію перервано, дані пристрою НЕ перетворено.\n"
 
-#: src/cryptsetup.c:3077
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Пропущено параметр --priority, --label або --subsystem."
 
-#: src/cryptsetup.c:3111 src/cryptsetup.c:3151 src/cryptsetup.c:3171
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Жетон %d є некоректним."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "Жетон %d використовується."
 
-#: src/cryptsetup.c:3126
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Не вдалося додати жетон %d зі сховища ключів luks2."
 
-#: src/cryptsetup.c:3137 src/cryptsetup.c:3200
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Не вдалося прив'язати жетон %d до слоту ключа %d."
 
-#: src/cryptsetup.c:3154
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Жетон %d не використовується."
 
-#: src/cryptsetup.c:3191
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "Не вдалося імпортувати жетон з файла."
 
-#: src/cryptsetup.c:3216
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Не вдалося отримати жетон %d для експортування."
 
-#: src/cryptsetup.c:3229
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Жетон %d не пов'язано зі слотом ключа %d."
 
-#: src/cryptsetup.c:3231 src/cryptsetup.c:3238
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Не вдалося відв'язати жетон %d від слоту ключа %d."
 
-#: src/cryptsetup.c:3297
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Підтримку параметрів --tcrypt-hidden, --tcrypt-system і --tcrypt-backup передбачено лише для пристроїв TCRYPT."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Підтримку параметра --veracrypt або --disable-veracrypt передбачено лише для пристроїв TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Параметр --veracrypt-pim можна використовувати лише для сумісних із VeraCrypt пристроїв."
 
-#: src/cryptsetup.c:3307
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Параметр --veracrypt-query-pim можна використовувати лише для сумісних із VeraCrypt пристроїв."
 
-#: src/cryptsetup.c:3309
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Не можна поєднувати параметри --veracrypt-pim і --veracrypt-query-pim."
 
-#: src/cryptsetup.c:3318
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Параметр --persistent не можна використовувати разом із --test-passphrase."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Не можна поєднувати параметри --refresh і --test-passphrase."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Параметр --shared можна використовувати лише для відкриття незашифрованого пристрою."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Підтримку параметра --skip передбачено лише для відкриття незашифрованих пристроїв та пристроїв loopaes."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Підтримку параметра --offset разом із дією з відкриття передбачено лише для незашифрованих пристроїв та пристроїв loopaes."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Параметр --tcrypt-hidden не можна поєднувати з --allow-discards."
 
-#: src/cryptsetup.c:3337
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Підтримку параметра розміру сектора разом із дією з відкриття передбачено лише для незашифрованих пристроїв."
 
-#: src/cryptsetup.c:3341
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Підтримку можливості використання великих секторів IV передбачено лише для відкриття пристроїв простого типу з розміром сектора, який перевищує 512 байтів."
 
-#: src/cryptsetup.c:3346
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Параметр --test-passphrase можна використовувати лише для відкриття пристроїв LUKS, TCRYPT, BITLK та FVAULT2."
 
-#: src/cryptsetup.c:3349 src/cryptsetup.c:3379
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Не можна одночасно використовувати параметри --device-size і --size."
 
-#: src/cryptsetup.c:3352
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Параметр --sunbound можна використовувати лише для відкриття пристрою LUKS."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Параметр --unbound не можна використовувати без --test-passphrase."
 
-#: src/cryptsetup.c:3359
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Параметр --volume-key-keyring не можна поєднувати з --hash і --volume-key-file."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Обидва параметри --volume-key-file має бути поєднано із відповідними параметрами --key-size."
 
-#: src/cryptsetup.c:3371 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Не можна одночасно використовувати параметр --cancel-deferred і --deferred."
 
-#: src/cryptsetup.c:3387
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Параметр --active-name можна встановлювати лише для пристроїв LUKS2."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Не можна одночасно використовувати параметри ---active-name і --force-offline-reencrypt."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Не можна поєднувати параметри --new-volume-key-file і --keep-key."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Не можна поєднувати параметри --new-volume-key-keyring і --keep-key."
 
-#: src/cryptsetup.c:3404 src/cryptsetup.c:3434
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "Слід вказати специфікація слотів ключів."
 
-#: src/cryptsetup.c:3412
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Не можна одночасно використовувати параметри --align-payload і --offset."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Параметром --integrity-no-wipe можна користуватися лише для дії з форматування із розширенням забезпечення цілісності."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Можна використовувати лише один з параметрів --use-[u]random."
 
-#: src/cryptsetup.c:3426
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "Разом із параметром --unbound слід вказувати розмір ключа."
 
-#: src/cryptsetup.c:3446
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "Некоректна дія з жетоном."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "Параметр --key-description є обов'язковим для дій із додавання жетонів."
 
-#: src/cryptsetup.c:3453 src/cryptsetup.c:3466
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Для виконання дії потрібен специфічний жетон. Скористайтеся параметром --token-id."
 
-#: src/cryptsetup.c:3457
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "Параметр --unbound можна використовувати лише разом із дією з додавання жетона."
 
-#: src/cryptsetup.c:3459
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Не можна поєднувати параметри --key-slot і --unbound."
 
-#: src/cryptsetup.c:3464
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Дія потребує зазначення слоту ключа. Скористайтеся параметром --key-slot."
 
-#: src/cryptsetup.c:3480
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<пристрій> [--type <тип>] [<назва>]"
 
-#: src/cryptsetup.c:3480 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "відкрити пристрій як <назва>"
 
-#: src/cryptsetup.c:3481 src/cryptsetup.c:3482 src/cryptsetup.c:3483
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
-#: src/integritysetup.c:556 src/integritysetup.c:558
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<назва>"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "закрити пристрій (вилучити призначення)"
 
-#: src/cryptsetup.c:3482 src/integritysetup.c:558
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "змінити розмір активного пристрою"
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "показати стан пристрою"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <шифр>]"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "перевірити швидкодію шифрування"
 
-#: src/cryptsetup.c:3485 src/cryptsetup.c:3486 src/cryptsetup.c:3487
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3496
-#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<пристрій>"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "спробувати виправити метадані на диску"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "повторно зашифрувати пристрій LUKS2"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "витерти усі слоти ключів (вилучити ключ шифрування)"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "перетворити LUKS із формату LUKS2 або навпаки"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "встановити сталі параметри налаштування для LUKS2"
 
-#: src/cryptsetup.c:3490 src/cryptsetup.c:3491
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<пристрій> [<новий файл ключа>]"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "форматує пристрій LUKS"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "додати ключ до пристрою LUKS"
 
-#: src/cryptsetup.c:3492 src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<пристрій> [<файл ключа>]"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "вилучає наданий ключ або файл ключа з пристрою LUKS"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "змінює наданий ключ або файл ключа пристрою LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "перетворює ключ до нових параметрів pbkdf"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<пристрій> <слот ключа>"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "вилучає ключ з номером <слот ключа> з пристрою LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "вивести UUID пристрою LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "виконати спробу виявлення заголовка розділу LUKS на пристрої <пристрій>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "створити дамп даних щодо розділу LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "створити дамп даних пристрою TCRYPT"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "створити дамп даних пристрою BITLK"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "створити дамп даних пристрою FVAULT2"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Приспати пристрій LUKS і витерти ключ (роботу всіх каналів введення-виведення буде заморожено)"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "Відновити роботу приспаного пристрою LUKS"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "Створити резервну копію заголовка пристрою LUKS і слотів ключів"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "Відновити заголовок пристрою LUKS і слоти ключів"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <пристрій>"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "Керування жетонами LUKS2"
 
-#: src/cryptsetup.c:3525 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2951,7 +2951,7 @@ msgstr ""
 "\n"
 "<дія> є однією з таких:\n"
 
-#: src/cryptsetup.c:3531
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2964,7 +2964,7 @@ msgstr ""
 "\tвідкрити: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tзакрити: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3535
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -2979,7 +2979,7 @@ msgstr ""
 "<слот ключа> — номер слота ключа LUKS, який слід змінити\n"
 "<файл ключа> — необов’язковий файл ключа для нового ключа для дії luksAddKey\n"
 
-#: src/cryptsetup.c:3542
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -2988,7 +2988,7 @@ msgstr ""
 "\n"
 "Типовий укомпільований формат метаданих — %s (для дії luksFormat).\n"
 
-#: src/cryptsetup.c:3547
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -2996,12 +2996,12 @@ msgstr ""
 "\n"
 "Підтримку додатків зовнішніх жетонів LUKS2 увімкнено.\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Шлях до теки додатків зовнішніх жетонів LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3009,7 +3009,7 @@ msgstr ""
 "\n"
 "Підтримку додатків зовнішніх жетонів LUKS2 вимкнено.\n"
 
-#: src/cryptsetup.c:3554
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3026,7 +3026,7 @@ msgstr ""
 "Типовий PBKDF для LUKS2: %s\n"
 "\tЧас ітерації: %d, потрібний обсяг пам'яті: %d кБ, паралельних потоків: %d\n"
 
-#: src/cryptsetup.c:3565
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3041,122 +3041,126 @@ msgstr ""
 "\tзвичайне: %s, ключ: %d-бітовий, хешування пароля: %s\n"
 "\tLUKS: %s, ключ: %d-бітовий, хешування заголовка LUKS: %s, RNG: %s\n"
 
-#: src/cryptsetup.c:3574
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: типовий розмір ключа у режимі XTS (два вбудованих ключа) буде подвоєно.\n"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: слід вказати у параметрах %s"
 
-#: src/cryptsetup.c:3632 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Некоректний слот ключа."
 
-#: src/cryptsetup.c:3660
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Розмір пристрою має бути кратним до 512-байтового сектора."
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Некоректна специфікація розміру «гарячої» ділянки повторного шифрування."
 
-#: src/cryptsetup.c:3679 src/cryptsetup.c:3696 src/cryptsetup.c:3708
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Розмір ключа має бути кратним 8 бітам"
 
-#: src/cryptsetup.c:3686
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Можна надати не більше 2 специфікацій розмірів ключів."
 
-#: src/cryptsetup.c:3715 src/cryptsetup.c:3726
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Можна надати не більше %d специфікацій ключів томів."
 
-#: src/cryptsetup.c:3738
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Можна надати не більше %d специфікацій посилань на сховище ключів."
 
-#: src/cryptsetup.c:3747
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Максимальний розмір зменшення розміру пристрою дорівнює 1 ГіБ."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Розмір зменшення має бути кратним до 512-байтового сектора."
 
-#: src/cryptsetup.c:3767
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Значенням для параметра --priority може бути лише один з таких рядків: ignore, normal або prefer."
 
-#: src/cryptsetup.c:3786 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "Некоректна специфікація максимальної кількості спроб."
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "Показати цю довідку"
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "Показати короткі настанови щодо користування"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "Вивести дані щодо версії пакунка"
 
-#: src/cryptsetup.c:3799 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "Пункти довідки:"
 
-#: src/cryptsetup.c:3822 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[ПАРАМЕТР...] <дія> <параметри_дії>"
 
-#: src/cryptsetup.c:3831 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "Не вказано аргумент <дія>."
 
-#: src/cryptsetup.c:3910 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "Невідома дія."
 
-#: src/cryptsetup.c:3928
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Параметр --key-file має пріоритет над вказаним параметром файла ключа."
 
-#: src/cryptsetup.c:3934
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "Можна використовувати лише один аргумент --key-file."
 
-#: src/cryptsetup.c:3939
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Функцією отримання ключа на основі пароля (PBKDF) може бути лише pbkdf2 або argon2i/argon2id."
 
-#: src/cryptsetup.c:3944
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Примусові ітерації PBKDF не можна поєднувати із параметром тривалості ітерацій."
 
-#: src/cryptsetup.c:3949
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Неможливо пов'язати ключ тому зі сховищем ключів, якщо сховище ключів вимкнено."
 
-#: src/cryptsetup.c:3954
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Не можна скористатися описом ключа сховища ключів, якщо сховище ключів вимкнено."
 
-#: src/cryptsetup.c:3959
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Вбудовану цілісність має бути використано разом із параметром --integrity."
 
-#: src/cryptsetup.c:3970
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Параметри --keyslot-cipher і --keyslot-key-size має бути використано разом."
 
-#: src/cryptsetup.c:3978
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Дій не виконано. Викликано із параметром --test-args.\n"
 
-#: src/cryptsetup.c:3991
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "Не вдалося вимкнути блокування метаданих."
 
@@ -3221,7 +3225,7 @@ msgstr "Для виконання команди потрібен <корене
 msgid "<data_device> <hash_device>"
 msgstr "<пристрій_даних> <пристрій_хешу>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:553
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "форматувати пристрій"
 
@@ -3237,7 +3241,7 @@ msgstr "перевірити пристрій"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<пристрій_даних> <назва> <пристрій_хешу> [<кореневий_хеш>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:556
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "показати стан активного пристрою"
 
@@ -3245,7 +3249,7 @@ msgstr "показати стан активного пристрою"
 msgid "<hash_device>"
 msgstr "<пристрій_хешу>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:557
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "показати вбудовані дані"
 
@@ -3287,7 +3291,7 @@ msgstr "Параметри --panic-on-corruption і --restart-on-corruption не
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "Параметр --error-as-corruption має бути використано з --panic-on-corruption або --restart-on-corruption."
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3296,33 +3300,33 @@ msgstr ""
 "Дані на %s і %s буде перезаписано без можливості відновлення.\n"
 "Щоб зберегти пристрій даних, скористайтеся параметром --no-wipe (а потім активуйте за допомогою --integrity-recalculate)."
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "Форматовано із розміром мітки %u%s, внутрішня цілісність %s.\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (вбудовані апаратні мітки)"
 
-#: src/integritysetup.c:303
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Підтримки встановлення прапорця повторного обчислення не передбачено. Вам варто розглянути можливість використання --wipe."
 
-#: src/integritysetup.c:380 src/integritysetup.c:540
+#: src/integritysetup.c:382 src/integritysetup.c:546
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Пристрій %s не є коректним пристроєм INTEGRITY."
 
-#: src/integritysetup.c:553 src/integritysetup.c:557
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
 msgstr "<пристрій_цілісності>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
 msgstr "<пристрій_цілісності> <назва>"
 
-#: src/integritysetup.c:577
+#: src/integritysetup.c:583
 #, c-format
 msgid ""
 "\n"
@@ -3333,7 +3337,7 @@ msgstr ""
 "<назва> є пристроєм, який слід створити у %s\n"
 "<пристрій_цілісності> є пристроєм, на якому зберігаються дані із мітками цілісності\n"
 
-#: src/integritysetup.c:582
+#: src/integritysetup.c:588
 #, c-format
 msgid ""
 "\n"
@@ -3346,48 +3350,48 @@ msgstr ""
 "\tАлгоритм обчислення контрольної суми: %s\n"
 "\tМаксимальний розмір файла ключа: %d кБ\n"
 
-#: src/integritysetup.c:639
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Некоректний розмір --%s. Максимальний розмір дорівнює %u байтів."
 
-#: src/integritysetup.c:742
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "Не можна одночасно вказувати параметри файла ключа і розміру ключа."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Не можна одночасно вказувати параметри файла ключа цілісності журналу і розміру ключа."
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Якщо використано ключ цілісності журналу, має бути вказано алгоритм забезпечення цілісності журналу."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Не можна одночасно вказувати параметри файла ключа шифрування журналу і розміру ключа."
 
-#: src/integritysetup.c:756
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Якщо використано ключ шифрування журналу, має бути вказано алгоритм забезпечення шифрування журналу."
 
-#: src/integritysetup.c:760
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Не можна поєднувати параметри відновлення і бітової карти."
 
-#: src/integritysetup.c:767
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Параметри журналу у режимі бітової карти використовувати не можна."
 
-#: src/integritysetup.c:772
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Параметри бітової карти можна використовувати лише у режимі бітового карти."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:784
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Вбудований режим не може бути поєднано із параметрами журналу або бітової карти."
 
-#: src/integritysetup.c:782
+#: src/integritysetup.c:788
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Вбудований режим не можна поєднувати із окремим пристроєм даних."
 
@@ -3741,32 +3745,32 @@ msgstr "Пристрій не у розшифруванні LUKS2. Конфлі
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Пристрій перебуває у повторному шифруванні з використанням стійкості зсуву даних. Вказаний параметр --resilience не може бути застосовано."
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Неможливо визначити розмір ключа тому для LUKS без слотів ключів. Будь ласка, скористайтеся параметром --new-key-size."
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "Пристрій потребує відновлення повторного шифрування. Спочатку виконайте відновлення."
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "Пристрій %s вже перебуває у стані повторного шифрування LUKS2. Хочете відновити раніше ініціалізовану дію?"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "Підтримки застарілого повторного шифрування LUKS2 більше не передбачено."
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "Неможливо повторно зашифрувати пристрій LUKS2, який налаштовано на використання OPAL."
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "Підтримки повторного шифрування пристрою із профілем цілісності не передбачено."
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3775,110 +3779,110 @@ msgstr ""
 "Вказаний --sector-size %<PRIu32> є несумісним із суперблоком %s\n"
 "(розмір блоку: %<PRIu32> байтів), який виявлено на пристрої %s."
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Шифрування без від'єднаного заголовка (--header) є неможливим без зменшення розміру пристрою зберігання даних (--reduce-device-size)."
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "Вказаний зсув даних має бути меншим або рівним половині значення параметра --reduce-device-size."
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "Коригуємо значення --reduce-device-size до подвійного значення --offset %<PRIu64> (у секторах).\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "Файл тимчасового заголовка %s вже існує. Перериваємо обробку."
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "Не вдалося створити файл тимчасового заголовка %s."
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "Розмір метаданих LUKS2 перевищує значення зсуву даних."
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "Не вдалося розмістити новий заголовок на початку пристрою %s."
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s задіяно, система готова до інтерактивного шифрування.\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "Активний пристрій %s не є пристроєм LUKS2."
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "Відновлюємо початковий заголовок LUKS2."
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "Спроба відновлення початкового заголовка LUKS2 зазнала невдачі."
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "Файла заголовка %s не існує. Хочете ініціалізувати розшифрування LUKS2 пристрою %s і експортувати заголовок LUKS2 до файла %s?"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "Не вдалося додати права доступу для читання-запису до експортованого файла заголовка."
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "Не вдалося ініціалізувати повторне шифрування. Резервна копія заголовка перебуває у %s."
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Підтримку розшифровування LUKS2 передбачено лише для пристроїв із від'єднаним заголовком (із встановленим нульовим відступом даних)."
 
-#: src/utils_reencrypt.c:1487
+#: src/utils_reencrypt.c:1490
 msgid "No token could unlock the device."
 msgstr "Жоден жетон не змін розблокувати пристрій."
 
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
 msgid "Not enough free keyslots for reencryption."
 msgstr "Недостатньо вільних слотів ключів для повторного шифрування."
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1562
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Файлом ключа або описом ключа у сховищі ключів можна користуватися лише з --key-slot, або якщо активним є лише один слот ключа."
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Вкажіть пароль для слоту ключа %d: "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Перемикаємося на шифрування даних %s.\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Скористайтеся --force-no-keyslots, щоб повторно зашифрувати пристрій із активними слотами ключів, передавши ключі тому безпосередньо."
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:1996
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Параметр --new-volume-key-file має бути поєднано з --new-key-size"
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Не змінено параметри сегмента даних. Повторне шифрування перервано."
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3886,7 +3890,7 @@ msgstr ""
 "Підтримки збільшення розміру сектора шифрування на вимкненому пристрої не передбачено.\n"
 "Спочатку активуйте пристрій або скористайтеся параметром --force-offline-reencrypt (небезпечно!)."
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3895,58 +3899,58 @@ msgstr ""
 "\n"
 "Повторне шифрування перервано."
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Відновлюємо повторне шифрування LUKS у примусовому вимкненому режимі.\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "На пристрої %s містяться пошкоджені метадані LUKS. Перериваємо дію."
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Пристрій %s вже є пристроєм LUKS. Перериваємо дію."
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Пристрій %s вже перебуває у стані повторного шифрування LUKS. Перериваємо дію."
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "Для розшифровування LUKS2 потрібен параметр --header."
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "Комарні слід передати аргумент пристрою."
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Конфлікт версій. Пристрій %s є пристроєм LUKS1."
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Конфлікт версій. Пристрій %s перебуває у стані повторного шифрування LUKS1."
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Конфлікт версій. Пристрій %s є пристроєм LUKS2."
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Конфлікт версій. Пристрій %s перебуває у стані повторного шифрування LUKS2."
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Вже ініційовано повторне шифрування LUKS2. Перериваємо виконання дії."
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "Повторне шифрування пристрою не виконується."
 
@@ -4956,9 +4960,6 @@ msgstr "Помилка розпізнавання за відкритим клю
 #~ msgid "Options --journal-size, --interleave-sectors, --sector-size, --tag-size and --no-wipe can be used only for format action."
 #~ msgstr "Параметри --journal-size, --interleave-sectors, --sector-size, --tag-size та --no-wipe можна використовувати лише для дії з форматування."
 
-#~ msgid "Invalid journal size specification."
-#~ msgstr "Некоректна специфікація розміру журналу."
-
 #~ msgid "Reencryption block size"
 #~ msgstr "Розмір блоку повторного шифрування"
 

From 9b560a0d4948cde06a1a961813ee3c01264a185f Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Tue, 21 Jul 2026 21:03:48 +0200
Subject: [PATCH 190/244] Version 2.8.7.

---
 README.md                                     | 14 ++++-------
 ...7-rc2-ReleaseNotes => v2.8.7-ReleaseNotes} | 23 ++++++++-----------
 2 files changed, 13 insertions(+), 24 deletions(-)
 rename docs/{v2.8.7-rc2-ReleaseNotes => v2.8.7-ReleaseNotes} (95%)

diff --git a/README.md b/README.md
index 99ed3335e..22c930a1e 100644
--- a/README.md
+++ b/README.md
@@ -39,17 +39,11 @@ Download
 Release notes and tarballs are available at
 [kernel.org](https://cdn.kernel.org/pub/linux/utils/cryptsetup/).
 
-**The latest cryptsetup release candidate version is 2.8.7-rc2**
-  * [cryptsetup-2.8.7-rc2.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7-rc2.tar.xz)
-  * Signature [cryptsetup-2.8.7-rc2.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7-rc2.tar.sign)
+**The latest stable cryptsetup release version is 2.8.7**
+  * [cryptsetup-2.8.7.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7.tar.xz)
+  * Signature [cryptsetup-2.8.7.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7.tar.sign)
     _(You need to decompress file first to check signature.)_
-  * [Cryptsetup 2.8.7-rc2 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.7-rc2-ReleaseNotes).
-
-**The latest stable cryptsetup release version is 2.8.6**
-  * [cryptsetup-2.8.6.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.6.tar.xz)
-  * Signature [cryptsetup-2.8.6.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.6.tar.sign)
-    _(You need to decompress file first to check signature.)_
-  * [Cryptsetup 2.8.6 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.6-ReleaseNotes).
+  * [Cryptsetup 2.8.7 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.7-ReleaseNotes).
 
 [Previous versions](https://cdn.kernel.org/pub/linux/utils/cryptsetup)
 
diff --git a/docs/v2.8.7-rc2-ReleaseNotes b/docs/v2.8.7-ReleaseNotes
similarity index 95%
rename from docs/v2.8.7-rc2-ReleaseNotes
rename to docs/v2.8.7-ReleaseNotes
index 23bf01251..00e5db25f 100644
--- a/docs/v2.8.7-rc2-ReleaseNotes
+++ b/docs/v2.8.7-ReleaseNotes
@@ -1,20 +1,9 @@
-Cryptsetup 2.8.7-rc2 Release Notes
-==================================
-Stable bug-fix release candidate that solves several compatibility issues.
+Cryptsetup 2.8.7 Release Notes
+==============================
+Stable bug-fix release that solves several compatibility issues.
 
 All users of cryptsetup must upgrade to this version.
 
-Changes since version 2.8.7-rc1
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-* Fix tests to compile crypto-check helper properly.
-
-* Add support for --integrity-legacy-hmac in integritysetup open command.
-  Integritysetup open command incorrectly configured options for legacy HMAC devices.
-  To use --integrity-legacy-hmac, it must now be used both on format and open.
-
-* Fix cryptsetup --tries option not to overflow for high values.
-
 Changes since version 2.8.6
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
@@ -102,3 +91,9 @@ Changes since version 2.8.6
 * Fix jq (JSON commandline processor) use in testing scripts.
   After the security update for jq, it no longer processes JSON with trailing zeroes.
   Regression test scripts were updated to avoid using this scenario.
+
+* Add support for --integrity-legacy-hmac in integritysetup open command.
+  Integritysetup open command incorrectly configured options for legacy HMAC devices.
+  To use --integrity-legacy-hmac, it must now be used both on format and open.
+
+* Fix cryptsetup --tries option not to overflow for high values.

From b0bb482a02a12a98d5374b79ea0e5b600a0634f3 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 29 Jul 2026 17:32:53 +0200
Subject: [PATCH 191/244] cryptsetup: fix local memory corruption bug in
 reencrypt init.

Fixes local memory corruption bug (OOB write in stack)
if LUKS2 reencryption operation is being initialized
via cryptsetup CLI and in the same time the LUKS2 metadata
contains more then 16 active LUKS2 keyslots or more then
16 active LUKS2 tokens assigned to active keyslots.

The bug can be triggered only for reencryption operation
with no specific keyslot selected (via --key-slot parameter)
in the mode when cryptsetup CLI requires user to unlock
all active LUKS2 keyslots available in the LUKS2 metadata before
the reencryption operation could be initialized.

Reported by: Aisle Research
---
 src/utils_reencrypt.c         | 52 ++++++++++++++++++++++++++---------
 tests/luks2-reencryption-test | 17 ++++++++++++
 2 files changed, 56 insertions(+), 13 deletions(-)

diff --git a/src/utils_reencrypt.c b/src/utils_reencrypt.c
index d17acf7d4..9b79975bc 100644
--- a/src/utils_reencrypt.c
+++ b/src/utils_reencrypt.c
@@ -1182,20 +1182,25 @@ static struct crypt_keyslot_context *reencrypt_get_token_context(struct keyslot_
 	return NULL;
 }
 
-static void reencrypt_token_add_for_unlock(struct keyslot_contexts *kcs, int token)
+static bool reencrypt_token_add_for_unlock(struct keyslot_contexts *kcs, int token)
 {
 	assert(kcs);
 	assert(token >= 0);
 
 	if (reencrypt_token_for_unlock(kcs, token))
-		return;
+		return true;
+
+	if (kcs->last_tkn >= ARRAY_SIZE(kcs->tkns))
+		return false;
 
 	kcs->tkns[kcs->last_tkn++].id = token;
 
 	log_dbg("Token %d candidate for keyslot unlock.", token);
+
+	return true;
 }
 
-static void reencrypt_token_add(struct keyslot_contexts *kcs,
+static bool reencrypt_token_add(struct keyslot_contexts *kcs,
 				int token,
 				struct crypt_keyslot_context *token_kc)
 {
@@ -1207,12 +1212,14 @@ static void reencrypt_token_add(struct keyslot_contexts *kcs,
 
 	for (i = 0; i < kcs->last_tkn; i++) {
 		if (kcs->tkns[i].id == token) {
+			if (kcs->last_kc >= ARRAY_SIZE(kcs->kc))
+				return false;
 			kcs->kc[kcs->last_kc++] = kcs->tkns[i].p_kc = token_kc;
-			return;
+			return true;
 		}
 	}
 
-	abort();
+	return false;
 }
 
 static void reencrypt_keyslot_unlocked_by_context(struct keyslot_contexts *kcs,
@@ -1237,16 +1244,21 @@ static void reencrypt_keyslot_unlocked_by_context(struct keyslot_contexts *kcs,
 }
 
 /* Add keyslot in unlock candidates */
-static void reencrypt_keyslot_add_for_unlock(struct keyslot_contexts *kcs, int keyslot)
+static bool reencrypt_keyslot_add_for_unlock(struct keyslot_contexts *kcs, int keyslot)
 {
 	assert(kcs);
 	assert(keyslot >= 0);
 
+	if (kcs->last_ks >= ARRAY_SIZE(kcs->ks))
+		return false;
+
 	kcs->ks[kcs->last_ks].id = keyslot;
 	kcs->ks[kcs->last_ks++].new_id = -1;
+
+	return true;
 }
 
-static void reencrypt_token_unlocks_keyslot(struct keyslot_contexts *kcs,
+static bool reencrypt_token_unlocks_keyslot(struct keyslot_contexts *kcs,
 					    int token,
 					    int keyslot,
 					    struct crypt_keyslot_context *token_kc)
@@ -1254,8 +1266,12 @@ static void reencrypt_token_unlocks_keyslot(struct keyslot_contexts *kcs,
 	assert(kcs);
 	assert(token_kc);
 
-	reencrypt_token_add(kcs, token, token_kc);
+	if (!reencrypt_token_add(kcs, token, token_kc))
+		return false;
+
 	reencrypt_keyslot_unlocked_by_context(kcs, keyslot, token_kc);
+
+	return true;
 }
 
 static void reencrypt_keyslot_unlocked_by_context_new(struct keyslot_contexts *kcs,
@@ -1265,6 +1281,7 @@ static void reencrypt_keyslot_unlocked_by_context_new(struct keyslot_contexts *k
 	assert(kcs);
 	assert(kc);
 	assert(keyslot >= 0);
+	assert(kcs->last_kc < ARRAY_SIZE(kcs->kc));
 
 	kcs->kc[kcs->last_kc++] = kc;
 	reencrypt_keyslot_unlocked_by_context(kcs, keyslot, kc);
@@ -1304,8 +1321,9 @@ static int single_token(struct crypt_device *cd,
 				  ARG_STR(OPT_TOKEN_TYPE_ID), 0, /* FIXME: do we need any? */
 				  set_tries_tty(false), true, true, &kc);
 	if (r == slot_to_check) {
+		if (!reencrypt_token_unlocks_keyslot(kcs, token, slot_to_check, kc))
+			return -EINVAL;
 		log_dbg("Token %d unlocks keyslot %d", token, slot_to_check);
-		reencrypt_token_unlocks_keyslot(kcs, token, slot_to_check, kc);
 	}
 
 	return r;
@@ -1388,15 +1406,18 @@ static int reencrypt_add_token_keyslot(struct crypt_device *cd,
 	if (crypt_token_is_assigned(cd, token, keyslot))
 		return 0;
 
-	reencrypt_token_add_for_unlock(kcs, token);
+	if (!reencrypt_token_add_for_unlock(kcs, token))
+		return -EINVAL;
 
 	/* continue if keyslot is already added in unlock queue */
 	if (reencrypt_keyslot_for_unlock(kcs, keyslot))
 		return 0;
 
+	if (!reencrypt_keyslot_add_for_unlock(kcs, keyslot))
+		return -EINVAL;
+
 	log_dbg("Keyslot %d candidate for unlock.", keyslot);
 
-	reencrypt_keyslot_add_for_unlock(kcs, keyslot);
 	return 1;
 }
 
@@ -1481,8 +1502,10 @@ static int reencrypt_add_keyslots_for_unlock(struct crypt_device *cd,
 	i = reencrypt_add_token_keyslots_for_unlock(cd, kcs, ARG_INT32(OPT_TOKEN_ID_ID),
 						    ARG_STR(OPT_TOKEN_TYPE_ID),
 						    ARG_INT32(OPT_KEY_SLOT_ID));
-	if (i < 0)
+	if (i < 0) {
+		log_err(_("Not enough free keyslots for reencryption."));
 		return i;
+	}
 
 	/* token based reencryption preferred and no keyslot
 	 * could be used for reencryption */
@@ -1504,7 +1527,10 @@ static int reencrypt_add_keyslots_for_unlock(struct crypt_device *cd,
 			active++;
 			if (!only_token_keyslots && !reencrypt_keyslot_for_unlock(kcs, i) &&
 			    (!ARG_SET(OPT_KEY_SLOT_ID) || ARG_INT32(OPT_KEY_SLOT_ID) == i)) {
-				reencrypt_keyslot_add_for_unlock(kcs, i);
+				if (!reencrypt_keyslot_add_for_unlock(kcs, i)) {
+					log_err(_("Not enough free keyslots for reencryption."));
+					return -EINVAL;
+				}
 				unlocked++;
 				log_dbg("Keyslot %d candidate for unlock by passphrase prompt.", i);
 			}
diff --git a/tests/luks2-reencryption-test b/tests/luks2-reencryption-test
index c7f75175e..ae95124ac 100755
--- a/tests/luks2-reencryption-test
+++ b/tests/luks2-reencryption-test
@@ -2152,6 +2152,23 @@ $CRYPTSETUP luksDump $DEV | grep -q "online-reencrypt" && fail
 # check cli removed all unbound keyslots created in-before reencryption initialization
 $CRYPTSETUP luksDump $DEV | grep -q "unbound" && fail
 
+echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 --offset 32768 -S0 $FAST_PBKDF_ARGON $DEV || fail
+KS=1
+while [ $KS -le 16 ]; do
+	echo -e "$PWD1\n$PWD1" | $CRYPTSETUP luksAddKey -S$KS $DEV -q $FAST_PBKDF_ARGON || fail
+	KS=$((KS+1))
+done
+# TODO: test compiled with e.g.: -fsanitize=address -fsanitize=undefined -fsanitize=bounds-strict -fno-omit-frame-pointer
+echo -e "$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1\n$PWD1" | $CRYPTSETUP reencrypt $DEV -q 2>/dev/null && fail
+
+TK=0
+while [ $TK -le 16 ]; do
+	$CRYPTSETUP token add --key-description "aaa" -S $TK --token-id $TK $DEV || fail
+	TK=$((TK+1))
+done
+# TODO: test compiled with e.g.: -fsanitize=address -fsanitize=undefined -fsanitize=bounds-strict -fno-omit-frame-pointer
+$CRYPTSETUP reencrypt $DEV --token-only -q 2>/dev/null && fail
+
 echo "[23] Reencryption with specified new volume key"
 prepare dev_size_mb=32
 echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks2 -s 256 -c aes-cbc-essiv:sha256 --offset 8192 $FAST_PBKDF_ARGON $DEV || fail

From f31c1ed4f6a43af53d16f2ec9b65429543dd7060 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Tue, 28 Jul 2026 11:50:12 +0200
Subject: [PATCH 192/244] Make LUKS2_hdr_version_unlocked to use internal
 device

The function is used to determine LUKS version before
calling the real code to detect full validated header.
There is an undeeded TOCTOU, let's use allocated device
struct that caches open file descriptor.
---
 lib/luks2/luks2.h               |  3 +--
 lib/luks2/luks2_disk_metadata.c | 23 +++++------------------
 lib/setup.c                     | 11 +++++++++--
 3 files changed, 15 insertions(+), 22 deletions(-)

diff --git a/lib/luks2/luks2.h b/lib/luks2/luks2.h
index d4f1624cb..6c6afae53 100644
--- a/lib/luks2/luks2.h
+++ b/lib/luks2/luks2.h
@@ -155,8 +155,7 @@ struct luks2_keyslot_params {
 #define LUKS2_HDR2_OFFSETS { 0x04000, 0x008000, 0x010000, 0x020000, \
                              0x40000, 0x080000, 0x100000, 0x200000, LUKS2_HDR_OFFSET_MAX }
 
-int LUKS2_hdr_version_unlocked(struct crypt_device *cd,
-	const char *backup_file);
+int LUKS2_hdr_version_unlocked(struct crypt_device *cd, struct device *backup_device);
 
 int LUKS2_hdr_read(struct crypt_device *cd, struct luks2_hdr *hdr, int repair);
 int LUKS2_hdr_write(struct crypt_device *cd, struct luks2_hdr *hdr);
diff --git a/lib/luks2/luks2_disk_metadata.c b/lib/luks2/luks2_disk_metadata.c
index ee88b71d7..cacaf87a1 100644
--- a/lib/luks2/luks2_disk_metadata.c
+++ b/lib/luks2/luks2_disk_metadata.c
@@ -806,38 +806,25 @@ int LUKS2_disk_hdr_read(struct crypt_device *cd, struct luks2_hdr *hdr,
 	return r;
 }
 
-int LUKS2_hdr_version_unlocked(struct crypt_device *cd, const char *backup_file)
+int LUKS2_hdr_version_unlocked(struct crypt_device *cd, struct device *device)
 {
 	struct {
 		char magic[LUKS2_MAGIC_L];
 		uint16_t version;
 	}  __attribute__ ((packed)) hdr;
-	struct device *device = NULL;
-	int r = 0, devfd = -1, flags;
+	int r = 0, devfd, flags = O_RDONLY;
 
-	if (!backup_file)
-		device = crypt_metadata_device(cd);
-	else if (device_alloc(cd, &device, backup_file) < 0)
-		return 0;
-
-	if (!device)
-		return 0;
+	assert(cd);
+	assert(device);
 
-	flags = O_RDONLY;
 	if (device_direct_io(device))
 		flags |= O_DIRECT;
 
-	devfd = open(device_path(device), flags);
+	devfd = device_open(cd, device, flags);
 	if (devfd != -1 && (read_lseek_blockwise(devfd, device_block_size(cd, device),
 	     device_alignment(device), &hdr, sizeof(hdr), 0) == sizeof(hdr)) &&
 	    !memcmp(hdr.magic, LUKS2_MAGIC_1ST, LUKS2_MAGIC_L))
 		r = (int)be16_to_cpu(hdr.version);
 
-	if (devfd != -1)
-		close(devfd);
-
-	if (backup_file)
-		device_free(cd, device);
-
 	return r;
 }
diff --git a/lib/setup.c b/lib/setup.c
index 1c0f21e6f..da2333efb 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -830,7 +830,7 @@ static int _crypt_load_luks(struct crypt_device *cd, const char *requested_type,
 		return r;
 
 	/* This will return 0 if primary LUKS2 header is damaged */
-	version = LUKS2_hdr_version_unlocked(cd, NULL);
+	version = LUKS2_hdr_version_unlocked(cd, crypt_metadata_device(cd));
 
 	if ((isLUKS1(requested_type) && version == 2) ||
 	    (isLUKS2(requested_type) && version == 1))
@@ -4078,6 +4078,7 @@ int crypt_header_restore(struct crypt_device *cd,
 			 const char *requested_type,
 			 const char *backup_file)
 {
+	struct device *backup_device = NULL;
 	struct luks_phdr hdr1;
 	struct luks2_hdr hdr2;
 	int r, version;
@@ -4095,7 +4096,12 @@ int crypt_header_restore(struct crypt_device *cd,
 	log_dbg(cd, "Requested header restore to device %s (%s) from "
 		"file %s.", mdata_device_path(cd), requested_type ?: "any type", backup_file);
 
-	version = LUKS2_hdr_version_unlocked(cd, backup_file);
+	if (device_alloc(cd, &backup_device, backup_file) < 0) {
+		log_err(cd, _("Header backup file does not contain compatible LUKS header."));
+		return -EINVAL;
+	}
+
+	version = LUKS2_hdr_version_unlocked(cd, backup_device);
 	if (!version ||
 	   (requested_type && version == 1 && !isLUKS1(requested_type)) ||
 	   (requested_type && version == 2 && !isLUKS2(requested_type))) {
@@ -4125,6 +4131,7 @@ int crypt_header_restore(struct crypt_device *cd,
 	if (!r)
 		r = _crypt_load_luks(cd, version == 1 ? CRYPT_LUKS1 : CRYPT_LUKS2, false, true);
 
+	device_free(cd, backup_device);
 	return r;
 }
 

From 2fb52062e50300dbb20f02c32eeb529464a33a7f Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Tue, 28 Jul 2026 12:00:43 +0200
Subject: [PATCH 193/244] Initialize temporary header in crypt_header_restore
 early

The temporary headers can be initialized on stack,
no need to call memset later.
---
 lib/setup.c | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/lib/setup.c b/lib/setup.c
index da2333efb..3796c1743 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -4079,8 +4079,8 @@ int crypt_header_restore(struct crypt_device *cd,
 			 const char *backup_file)
 {
 	struct device *backup_device = NULL;
-	struct luks_phdr hdr1;
-	struct luks2_hdr hdr2;
+	struct luks_phdr hdr1 = {0};
+	struct luks2_hdr hdr2 = {0};
 	int r, version;
 
 	if (requested_type && !isLUKS(requested_type))
@@ -4109,8 +4109,6 @@ int crypt_header_restore(struct crypt_device *cd,
 		return -EINVAL;
 	}
 
-	memset(&hdr2, 0, sizeof(hdr2));
-
 	if (!cd->type) {
 		if (version == 1)
 			r = LUKS_hdr_restore(backup_file, &hdr1, cd);

From da8e96507cfcd0071eca1c20037bcead18f49dde Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Tue, 28 Jul 2026 12:32:27 +0200
Subject: [PATCH 194/244] Make LUKS1 header restore use internal device struct

This avoids unnecessary TOCTOU processing header backup file.

Reported by Vivek Parikh, BreachX Zero Day Labs
---
 lib/luks1/keymanage.c | 42 +++++++++++++++++++-----------------------
 lib/luks1/luks.h      |  5 +++--
 lib/setup.c           |  4 ++--
 3 files changed, 24 insertions(+), 27 deletions(-)

diff --git a/lib/luks1/keymanage.c b/lib/luks1/keymanage.c
index 269d55df2..b5f9507b9 100644
--- a/lib/luks1/keymanage.c
+++ b/lib/luks1/keymanage.c
@@ -274,7 +274,7 @@ int LUKS_hdr_backup(const char *backup_file, struct crypt_device *ctx)
 }
 
 int LUKS_hdr_restore(
-	const char *backup_file,
+	struct device *backup_device,
 	struct luks_phdr *hdr,
 	struct crypt_device *ctx)
 {
@@ -284,7 +284,7 @@ int LUKS_hdr_restore(
 	char *buffer = NULL, msg[200];
 	struct luks_phdr hdr_file;
 
-	r = LUKS_read_phdr_backup(backup_file, &hdr_file, 0, ctx);
+	r = LUKS_read_phdr_backup(backup_device, &hdr_file, 0, ctx);
 	if (r == -ENOENT)
 		return r;
 
@@ -303,17 +303,17 @@ int LUKS_hdr_restore(
 		goto out;
 	}
 
-	fd = open(backup_file, O_RDONLY);
+	fd = device_open(ctx, backup_device, O_RDONLY);
 	if (fd == -1) {
-		log_err(ctx, _("Cannot open header backup file %s."), backup_file);
+		log_err(ctx, _("Cannot open header backup file %s."), device_path(backup_device));
 		r = -EINVAL;
 		goto out;
 	}
 
-	ret = read_buffer(fd, buffer, buffer_size);
-	close(fd);
+	ret = read_lseek_blockwise(fd, device_block_size(ctx, backup_device),
+			   device_alignment(backup_device), buffer, buffer_size, 0);
 	if (ret < buffer_size) {
-		log_err(ctx, _("Cannot read header backup file %s."), backup_file);
+		log_err(ctx, _("Cannot read header backup file %s."), device_path(backup_device));
 		r = -EIO;
 		goto out;
 	}
@@ -497,7 +497,7 @@ static int _keyslot_repair(struct luks_phdr *phdr, struct crypt_device *ctx)
 	return r;
 }
 
-static int _check_and_convert_hdr(const char *device,
+static int _check_and_convert_hdr(const struct device *device,
 				  struct luks_phdr *hdr,
 				  int require_luks_device,
 				  int repair,
@@ -511,7 +511,7 @@ static int _check_and_convert_hdr(const char *device,
 	if (memcmp(hdr->magic, luksMagic, LUKS_MAGIC_L)) { /* Check magic */
 		log_dbg(ctx, "LUKS header not detected.");
 		if (require_luks_device)
-			log_err(ctx, _("Device %s is not a valid LUKS device."), device);
+			log_err(ctx, _("Device %s is not a valid LUKS device."), device_path(device));
 		return -EINVAL;
 	} else if (hdr->version != 1) {
 		log_err(ctx, _("Unsupported LUKS version %d."), hdr->version);
@@ -564,31 +564,28 @@ static int _check_and_convert_hdr(const char *device,
 	return r;
 }
 
-int LUKS_read_phdr_backup(const char *backup_file,
+int LUKS_read_phdr_backup(struct device *backup_device,
 			  struct luks_phdr *hdr,
 			  int require_luks_device,
 			  struct crypt_device *ctx)
 {
 	ssize_t hdr_size = sizeof(struct luks_phdr);
-	int devfd = 0, r = 0;
+	int devfd;
 
 	log_dbg(ctx, "Reading LUKS header of size %d from backup file %s",
-		(int)hdr_size, backup_file);
+		(int)hdr_size, device_path(backup_device));
 
-	devfd = open(backup_file, O_RDONLY);
+	devfd = device_open(ctx, backup_device, O_RDONLY);
 	if (devfd == -1) {
-		log_err(ctx, _("Cannot open header backup file %s."), backup_file);
+		log_err(ctx, _("Cannot open header backup file %s."), device_path(backup_device));
 		return -ENOENT;
 	}
 
-	if (read_buffer(devfd, hdr, hdr_size) < hdr_size)
-		r = -EIO;
-	else
-		r = _check_and_convert_hdr(backup_file, hdr,
-					   require_luks_device, 0, ctx);
+	if (read_lseek_blockwise(devfd, device_block_size(ctx, backup_device),
+			   device_alignment(backup_device), hdr, hdr_size, 0) < hdr_size)
+		return -EIO;
 
-	close(devfd);
-	return r;
+	return _check_and_convert_hdr(backup_device, hdr, require_luks_device, 0, ctx);
 }
 
 int LUKS_read_phdr(struct luks_phdr *hdr,
@@ -622,8 +619,7 @@ int LUKS_read_phdr(struct luks_phdr *hdr,
 			   hdr, hdr_size, 0) < hdr_size)
 		r = -EIO;
 	else
-		r = _check_and_convert_hdr(device_path(device), hdr, require_luks_device,
-					   repair, ctx);
+		r = _check_and_convert_hdr(device, hdr, require_luks_device, repair, ctx);
 
 	if (!r)
 		r = LUKS_check_device_size(ctx, hdr, 0);
diff --git a/lib/luks1/luks.h b/lib/luks1/luks.h
index 69cf9c9b9..bd652a890 100644
--- a/lib/luks1/luks.h
+++ b/lib/luks1/luks.h
@@ -56,6 +56,7 @@ converted */
 
 struct volume_key;
 struct device_backend;
+struct device;
 
 struct luks_phdr {
 	char		magic[LUKS_MAGIC_L];
@@ -107,7 +108,7 @@ int LUKS_read_phdr(
 	struct crypt_device *ctx);
 
 int LUKS_read_phdr_backup(
-	const char *backup_file,
+	struct device *backup_device,
 	struct luks_phdr *hdr,
 	int require_luks_device,
 	struct crypt_device *ctx);
@@ -122,7 +123,7 @@ int LUKS_hdr_backup(
 	struct crypt_device *ctx);
 
 int LUKS_hdr_restore(
-	const char *backup_file,
+	struct device *backup_device,
 	struct luks_phdr *hdr,
 	struct crypt_device *ctx);
 
diff --git a/lib/setup.c b/lib/setup.c
index 3796c1743..edebe2c18 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -4111,7 +4111,7 @@ int crypt_header_restore(struct crypt_device *cd,
 
 	if (!cd->type) {
 		if (version == 1)
-			r = LUKS_hdr_restore(backup_file, &hdr1, cd);
+			r = LUKS_hdr_restore(backup_device, &hdr1, cd);
 		else
 			r = LUKS2_hdr_restore(cd, &hdr2, backup_file);
 
@@ -4122,7 +4122,7 @@ int crypt_header_restore(struct crypt_device *cd,
 		if (r)
 			(void) _crypt_load_luks2(cd, 1, 0);
 	} else if (isLUKS1(cd->type) && (!requested_type || isLUKS1(requested_type)))
-		r = LUKS_hdr_restore(backup_file, &cd->u.luks1.hdr, cd);
+		r = LUKS_hdr_restore(backup_device, &cd->u.luks1.hdr, cd);
 	else
 		r = -EINVAL;
 

From 5449c5e137b0d7a1b25892fd991b8f8e1d5be1ff Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Tue, 28 Jul 2026 13:18:36 +0200
Subject: [PATCH 195/244] Make LUKS2 header restore use internal device struct

This avoids unnecessary TOCTOU processing header backup file.

Reported by Vivek Parikh, BreachX Zero Day Labs
---
 lib/luks2/luks2.h               |  2 +-
 lib/luks2/luks2_json_metadata.c | 26 +++++++++-----------------
 lib/setup.c                     |  4 ++--
 3 files changed, 12 insertions(+), 20 deletions(-)

diff --git a/lib/luks2/luks2.h b/lib/luks2/luks2.h
index 6c6afae53..fc06927a6 100644
--- a/lib/luks2/luks2.h
+++ b/lib/luks2/luks2.h
@@ -181,7 +181,7 @@ int LUKS2_hdr_backup(struct crypt_device *cd,
 		     const char *backup_file);
 int LUKS2_hdr_restore(struct crypt_device *cd,
 		      struct luks2_hdr *hdr,
-		      const char *backup_file);
+		      struct device *backup_device);
 
 uint64_t LUKS2_hdr_and_areas_size(struct luks2_hdr *hdr);
 uint64_t LUKS2_keyslots_size(struct luks2_hdr *hdr);
diff --git a/lib/luks2/luks2_json_metadata.c b/lib/luks2/luks2_json_metadata.c
index d9755c70c..c532576d8 100644
--- a/lib/luks2/luks2_json_metadata.c
+++ b/lib/luks2/luks2_json_metadata.c
@@ -1398,31 +1398,23 @@ int LUKS2_hdr_backup(struct crypt_device *cd, struct luks2_hdr *hdr,
 	return r;
 }
 
-int LUKS2_hdr_restore(struct crypt_device *cd, struct luks2_hdr *hdr,
-		     const char *backup_file)
+int LUKS2_hdr_restore(struct crypt_device *cd, struct luks2_hdr *hdr, struct device *backup_device)
 {
-	struct device *backup_device, *device = crypt_metadata_device(cd);
+	struct device *device = crypt_metadata_device(cd);
 	int r, fd, devfd = -1, diff_uuid = 0;
 	ssize_t ret, buffer_size = 0;
 	char *buffer = NULL, msg[1024];
 	struct luks2_hdr hdr_file = {}, tmp_hdr = {};
 	uint32_t reqs = 0;
 
-	r = device_alloc(cd, &backup_device, backup_file);
-	if (r < 0)
-		return r;
-
 	r = device_read_lock(cd, backup_device);
 	if (r) {
-		log_err(cd, _("Failed to acquire read lock on device %s."),
-			device_path(backup_device));
-		device_free(cd, backup_device);
+		log_err(cd, _("Failed to acquire read lock on device %s."), device_path(backup_device));
 		return r;
 	}
 
 	r = LUKS2_disk_hdr_read(cd, &hdr_file, backup_device, 0, 0);
 	device_read_unlock(cd, backup_device);
-	device_free(cd, backup_device);
 
 	if (r < 0) {
 		log_err(cd, _("Backup file does not contain valid LUKS header."));
@@ -1433,7 +1425,7 @@ int LUKS2_hdr_restore(struct crypt_device *cd, struct luks2_hdr *hdr,
 	if (LUKS2_unmet_requirements(cd, &hdr_file,
 	    CRYPT_REQUIREMENT_ONLINE_REENCRYPT | CRYPT_REQUIREMENT_INLINE_HW_TAGS, 1)) {
 		log_err(cd, _("Forbidden LUKS2 requirements detected in backup %s."),
-			backup_file);
+			device_path(backup_device));
 		r = -ETXTBSY;
 		goto out;
 	}
@@ -1445,17 +1437,17 @@ int LUKS2_hdr_restore(struct crypt_device *cd, struct luks2_hdr *hdr,
 		goto out;
 	}
 
-	fd = open(backup_file, O_RDONLY);
+	fd = device_open(cd, backup_device, O_RDONLY);
 	if (fd == -1) {
-		log_err(cd, _("Cannot open header backup file %s."), backup_file);
+		log_err(cd, _("Cannot open header backup file %s."), device_path(backup_device));
 		r = -EINVAL;
 		goto out;
 	}
 
-	ret = read_buffer(fd, buffer, buffer_size);
-	close(fd);
+	ret = read_lseek_blockwise(fd, device_block_size(cd, backup_device),
+				   device_alignment(backup_device), buffer, buffer_size, 0);
 	if (ret < buffer_size) {
-		log_err(cd, _("Cannot read header backup file %s."), backup_file);
+		log_err(cd, _("Cannot read header backup file %s."), device_path(backup_device));
 		r = -EIO;
 		goto out;
 	}
diff --git a/lib/setup.c b/lib/setup.c
index edebe2c18..82a1ae35b 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -4113,12 +4113,12 @@ int crypt_header_restore(struct crypt_device *cd,
 		if (version == 1)
 			r = LUKS_hdr_restore(backup_device, &hdr1, cd);
 		else
-			r = LUKS2_hdr_restore(cd, &hdr2, backup_file);
+			r = LUKS2_hdr_restore(cd, &hdr2, backup_device);
 
 		crypt_safe_memzero(&hdr1, sizeof(hdr1));
 		crypt_safe_memzero(&hdr2, sizeof(hdr2));
 	} else if (isLUKS2(cd->type) && (!requested_type || isLUKS2(requested_type))) {
-		r = LUKS2_hdr_restore(cd, &cd->u.luks2.hdr, backup_file);
+		r = LUKS2_hdr_restore(cd, &cd->u.luks2.hdr, backup_device);
 		if (r)
 			(void) _crypt_load_luks2(cd, 1, 0);
 	} else if (isLUKS1(cd->type) && (!requested_type || isLUKS1(requested_type)))

From eda8a2654769a700f36883cc58c2dc1659373838 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sun, 9 Aug 2026 23:58:45 +0200
Subject: [PATCH 196/244] integritysetup: add support for keyed discards

An integrity device in standalone mode with a keyed integrity
algorithm like HMAC and enabled discards (TRIM) could be
vulnerable to wiping part of the device with a discard pattern.

This issue can be worked around by using a keyed discards
filler and the allow_discards_keyed device-mapper table option.
Once set, it is set permanently in the superblock and cannot
be reverted.

This patch adds a new --allow-discards-keyed option to integritysetup;
if used, it will upgrade the superblock and activate keyed discards.
After the upgrade, even --allow-discards will also activate keyed discards.

The patch also adds the CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD
API flag that can be used to avoid discards upgrade.

Note: do not use an integrity device with a keyed algorithm
(like HMAC). Integritysetup was intended to be used with
non-cryptographic integrity protection.

If you need cryptographic protection, use LUKS2 and AEAD
(discards are not supported in this configuration).
---
 lib/integrity/integrity.c     |  7 ++++---
 lib/integrity/integrity.h     |  2 ++
 lib/libcryptsetup.h           |  2 ++
 lib/libdevmapper.c            | 16 ++++++++++++++--
 lib/setup.c                   | 10 ++++++++++
 lib/utils_dm.h                |  2 ++
 man/integritysetup.8.adoc     |  9 ++++++++-
 src/integritysetup.c          | 17 ++++++++++++-----
 src/integritysetup_arg_list.h |  2 ++
 src/utils_arg_names.h         |  1 +
 tests/integrity-compat-test   | 32 ++++++++++++++++++++++++++++++++
 11 files changed, 89 insertions(+), 11 deletions(-)

diff --git a/lib/integrity/integrity.c b/lib/integrity/integrity.c
index 92da41ffb..8fe8a139a 100644
--- a/lib/integrity/integrity.c
+++ b/lib/integrity/integrity.c
@@ -46,7 +46,7 @@ static int INTEGRITY_read_superblock(struct crypt_device *cd,
 	if (memcmp(sb->magic, SB_MAGIC, sizeof(sb->magic))) {
 		log_dbg(cd, "No kernel dm-integrity metadata detected on %s.", device_path(device));
 		r = -EINVAL;
-	} else if (sb->version < SB_VERSION_1 || sb->version > SB_VERSION_6) {
+	} else if (sb->version < SB_VERSION_1 || sb->version > SB_VERSION_7) {
 		log_err(cd, _("Incompatible kernel dm-integrity metadata (version %u) detected on %s."),
 			sb->version, device_path(device));
 		r = -EINVAL;
@@ -110,13 +110,14 @@ int INTEGRITY_dump(struct crypt_device *cd, struct device *device, uint64_t offs
 	log_std(cd, "journal sections: %u\n", sb.journal_sections);
 	log_std(cd, "log2 interleave sectors: %d\n", sb.log2_interleave_sectors);
 	log_std(cd, "log2 blocks per bitmap: %u\n", sb.log2_blocks_per_bitmap_bit);
-	log_std(cd, "flags: %s%s%s%s%s%s\n",
+	log_std(cd, "flags: %s%s%s%s%s%s%s\n",
 		sb.flags & SB_FLAG_HAVE_JOURNAL_MAC ? "have_journal_mac " : "",
 		sb.flags & SB_FLAG_RECALCULATING ? "recalculating " : "",
 		sb.flags & SB_FLAG_DIRTY_BITMAP ? "dirty_bitmap " : "",
 		sb.flags & SB_FLAG_FIXED_PADDING ? "fix_padding " : "",
 		sb.flags & SB_FLAG_FIXED_HMAC ? "fix_hmac " : "",
-		sb.flags & SB_FLAG_INLINE ? "inline " : "");
+		sb.flags & SB_FLAG_INLINE ? "inline " : "",
+		sb.flags & SB_FLAG_DISCARD_KEYED ? "discards_keyed " : "");
 
 	return 0;
 }
diff --git a/lib/integrity/integrity.h b/lib/integrity/integrity.h
index fb0eebdf4..ec397dd54 100644
--- a/lib/integrity/integrity.h
+++ b/lib/integrity/integrity.h
@@ -25,6 +25,7 @@ struct crypt_dm_active_device;
 #define SB_VERSION_4	4
 #define SB_VERSION_5	5
 #define SB_VERSION_6	6
+#define SB_VERSION_7	7
 
 #define SB_FLAG_HAVE_JOURNAL_MAC	(1 << 0)
 #define SB_FLAG_RECALCULATING		(1 << 1) /* V2 only */
@@ -32,6 +33,7 @@ struct crypt_dm_active_device;
 #define SB_FLAG_FIXED_PADDING		(1 << 3) /* V4 only */
 #define SB_FLAG_FIXED_HMAC		(1 << 4) /* V5 only */
 #define SB_FLAG_INLINE			(1 << 5) /* V6 only */
+#define SB_FLAG_DISCARD_KEYED		(1 << 6) /* V7 only */
 
 struct superblock {
 	uint8_t magic[8];
diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index 6d51e9173..4b9b00025 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -785,6 +785,8 @@ uint32_t crypt_get_compatibility(struct crypt_device *cd);
 #define CRYPT_COMPAT_LEGACY_INTEGRITY_RECALC (UINT32_C(1) << 2)
 /** disable SUM (Single User Mode) when formatting LUKS2 device w/ HW encryption (OPAL2) */
 #define CRYPT_COMPAT_DISABLE_HW_OPAL_SUM (UINT32_C(1) << 3)
+/** dm-integrity use non-keyed discard filler (old kernels) */
+#define CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD (UINT32_C(1) << 4)
 
 /**
  * Convert to new type for already existing device.
diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index 42fc52047..03c9e5f0e 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -241,6 +241,9 @@ static void _dm_set_integrity_compat(struct crypt_device *cd,
 	if (_dm_satisfies_version(1, 12, 0, integrity_maj, integrity_min, integrity_patch))
 		_dm_flags |= DM_INTEGRITY_INLINE_MODE_SUPPORTED;
 
+	if (_dm_satisfies_version(1, 15, 0, integrity_maj, integrity_min, integrity_patch))
+		_dm_flags |= DM_INTEGRITY_DISCARD_KEYED_SUPPORTED;
+
 	_dm_integrity_checked = true;
 }
 
@@ -875,7 +878,7 @@ static char *get_dm_integrity_params(const struct dm_target *tgt, uint32_t flags
 	if (flags & CRYPT_ACTIVATE_ALLOW_DISCARDS)
 		num_options++;
 
-	r = snprintf(features, max_size, "%d%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s", num_options,
+	r = snprintf(features, max_size, "%d%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s", num_options,
 		tgt->u.integrity.journal_size ? _uf(feature[0], sizeof(feature[0]), /* MAX length 17 + int32 */
 			"journal_sectors", (unsigned)(tgt->u.integrity.journal_size / SECTOR_SIZE)) : "",
 		tgt->u.integrity.journal_watermark ? _uf(feature[1], sizeof(feature[1]), /* MAX length 19 + int32 */
@@ -900,7 +903,8 @@ static char *get_dm_integrity_params(const struct dm_target *tgt, uint32_t flags
 		tgt->u.integrity.legacy_recalc ? " legacy_recalculate" : "", /* MAX length 19 */
 		flags & CRYPT_ACTIVATE_RECALCULATE ? " recalculate" : "", /* MAX length 12 */
 		flags & CRYPT_ACTIVATE_RECALCULATE_RESET ? " reset_recalculate" : "", /* MAX length 18 */
-		flags & CRYPT_ACTIVATE_ALLOW_DISCARDS ? " allow_discards" : "", /* MAX length 15 */
+		(flags & CRYPT_ACTIVATE_ALLOW_DISCARDS) && !tgt->u.integrity.discard_keyed ? " allow_discards" : "", /* MAX length 15 */
+		(flags & CRYPT_ACTIVATE_ALLOW_DISCARDS) && tgt->u.integrity.discard_keyed ? " allow_discards_keyed" : "", /* MAX length 21 */
 		tgt->u.integrity.meta_device ? " meta_device:" : "", /* MAX length 13 + str_device */
 		tgt->u.integrity.meta_device ? device_block_path(tgt->u.integrity.meta_device) : "");
 	if (r < 0 || r >= max_size)
@@ -2714,6 +2718,9 @@ static int _dm_target_query_integrity(struct crypt_device *cd,
 			tgt->u.integrity.legacy_recalc = true;
 		} else if (!strcmp(arg, "allow_discards")) {
 			*act_flags |= CRYPT_ACTIVATE_ALLOW_DISCARDS;
+		} else if (!strcmp(arg, "allow_discards_keyed")) {
+			*act_flags |= CRYPT_ACTIVATE_ALLOW_DISCARDS;
+			tgt->u.integrity.discard_keyed = true;
 		} else /* unknown option */
 			goto err;
 	}
@@ -3479,6 +3486,11 @@ int dm_integrity_target_set(struct crypt_device *cd,
 	if (crypt_get_compatibility(cd) & CRYPT_COMPAT_LEGACY_INTEGRITY_RECALC)
 		tgt->u.integrity.legacy_recalc = true;
 
+	if (vk && !dm_flags(cd, DM_INTEGRITY, &dmi_flags) &&
+	    (dmi_flags & DM_INTEGRITY_DISCARD_KEYED_SUPPORTED) &&
+	    !(crypt_get_compatibility(cd) & CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD))
+		tgt->u.integrity.discard_keyed = true;
+
 	if (ip) {
 		tgt->u.integrity.journal_size = ip->journal_size;
 		tgt->u.integrity.journal_watermark = ip->journal_watermark;
diff --git a/lib/setup.c b/lib/setup.c
index 82a1ae35b..1ae7cf24c 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -1005,6 +1005,12 @@ static int _crypt_load_integrity(struct crypt_device *cd,
 	if (r < 0)
 		goto out;
 
+	/* If superblock does not use keyed discard, keep compatibility flag */
+	if (cd->u.integrity.sb_flags & SB_FLAG_DISCARD_KEYED)
+		cd->compatibility &= ~CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD;
+	else
+		cd->compatibility |= CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD;
+
 	// FIXME: add checks for fields in integrity sb vs params
 
 	r = -ENOMEM;
@@ -1502,6 +1508,10 @@ static int _init_by_name_integrity(struct crypt_device *cd, const char *name)
 		if (tgt->u.integrity.journal_crypt_key)
 			cd->u.integrity.params.journal_crypt_key_size = crypt_volume_key_length(tgt->u.integrity.journal_crypt_key);
 		MOVE_REF(cd->metadata_device, tgt->u.integrity.meta_device);
+		if (tgt->u.integrity.discard_keyed)
+			cd->compatibility &= ~CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD;
+		else
+			cd->compatibility |= CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD;
 	}
 out:
 	dm_targets_free(cd, &dmd);
diff --git a/lib/utils_dm.h b/lib/utils_dm.h
index 7b8cb4658..3e9a812c7 100644
--- a/lib/utils_dm.h
+++ b/lib/utils_dm.h
@@ -67,6 +67,7 @@ static inline uint64_t act2dmflags(uint64_t act_flags)
 #define DM_CRYPT_INTEGRITY_KEY_SIZE_OPT_SUPPORTED (UINT64_C(1) << 30) /* dm-crypt support for integrity_key_size option */
 #define DM_VERITY_ERROR_AS_CORRUPTION_SUPPORTED (UINT64_C(1) << 31) /* dm-verity restart/panic on corruption supported */
 #define DM_INTEGRITY_INLINE_MODE_SUPPORTED (UINT64_C(1) << 32) /* dm-integrity inline mode supported */
+#define DM_INTEGRITY_DISCARD_KEYED_SUPPORTED (UINT64_C(1) << 33) /* dm-integrity discard keyed supported */
 
 typedef enum { DM_CRYPT = 0, DM_VERITY, DM_INTEGRITY, DM_LINEAR, DM_ERROR, DM_ZERO, DM_UNKNOWN } dm_target_type;
 enum tdirection { TARGET_EMPTY = 0, TARGET_SET, TARGET_QUERY };
@@ -147,6 +148,7 @@ struct dm_target {
 		bool fix_padding;
 		bool fix_hmac;
 		bool legacy_recalc;
+		bool discard_keyed;
 	} integrity;
 	struct {
 		uint64_t offset;
diff --git a/man/integritysetup.8.adoc b/man/integritysetup.8.adoc
index 95842bbfd..c745f8149 100644
--- a/man/integritysetup.8.adoc
+++ b/man/integritysetup.8.adoc
@@ -44,7 +44,7 @@ Open a mapping with <name> backed by device <device>.
 If the integrity algorithm of the device is non-default, then the algorithm should be specified with the --integrity option.
 This will not be detected from the device.
 
-*<options>* can be [--data-device, --batch-mode, --journal-watermark, --journal-commit-time, --buffer-sectors, --integrity, --integrity-key-size, --integrity-key-file, --integrity-no-journal, --integrity-recalculate, --integrity-recalculate-reset,--integrity-recovery-mode, --allow-discards].
+*<options>* can be [--data-device, --batch-mode, --journal-watermark, --journal-commit-time, --buffer-sectors, --integrity, --integrity-key-size, --integrity-key-file, --integrity-no-journal, --integrity-recalculate, --integrity-recalculate-reset,--integrity-recovery-mode, --allow-discards, --allow-discards-keyed].
 
 === CLOSE
 *close <name>* +
@@ -82,6 +82,13 @@ Increasing the size of integrity volumes has been possible since the Linux kerne
 Allow the use of discard (TRIM) requests for the device.
 This option is available since the Linux kernel version 5.7.
 
+*--allow-discards-keyed*::
+Enable secure keyed discard (TRIM) for the device.
+This option can only be specified if a keyed algorithm (like HMAC) is used.
+Once keyed discards are enabled, they are always used, even with the --allow-discard option.
+
+This option is available since Linux kernel version 7.3.
+
 *--batch-mode*, *-q*::
 Do not ask for confirmation.
 
diff --git a/src/integritysetup.c b/src/integritysetup.c
index f05c39397..28e8fe488 100644
--- a/src/integritysetup.c
+++ b/src/integritysetup.c
@@ -364,7 +364,7 @@ static int action_open(void)
 	if (ARG_SET(OPT_INTEGRITY_RECALCULATE_RESET_ID))
 		activate_flags |= CRYPT_ACTIVATE_RECALCULATE_RESET;
 
-	if (ARG_SET(OPT_ALLOW_DISCARDS_ID))
+	if (ARG_SET(OPT_ALLOW_DISCARDS_ID) || ARG_SET(OPT_ALLOW_DISCARDS_KEYED_ID))
 		activate_flags |= CRYPT_ACTIVATE_ALLOW_DISCARDS;
 
 	if ((r = tools_check_newname(action_argv[1])))
@@ -383,12 +383,14 @@ static int action_open(void)
 		goto out;
 	}
 
+	/* Set in crypt_load according to superblock flag */
+	if (!ARG_SET(OPT_ALLOW_DISCARDS_KEYED_ID))
+		flags = crypt_get_compatibility(cd) & CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD;
 	if (ARG_SET(OPT_INTEGRITY_LEGACY_HMAC_ID))
 		flags |= CRYPT_COMPAT_LEGACY_INTEGRITY_HMAC;
 	if (ARG_SET(OPT_INTEGRITY_LEGACY_RECALC_ID))
 		flags |= CRYPT_COMPAT_LEGACY_INTEGRITY_RECALC;
-	if (flags)
-		crypt_set_compatibility(cd, flags);
+	crypt_set_compatibility(cd, flags);
 
 	r = crypt_activate_by_volume_key(cd, action_argv[1], integrity_key,
 					 ARG_UINT32(OPT_INTEGRITY_KEY_SIZE_ID), activate_flags);
@@ -519,9 +521,10 @@ static int action_status(void)
 			if (ip.journal_crypt)
 				log_std("  journal encryption: %s\n", ip.journal_crypt);
 		}
-		if (cad.flags & (CRYPT_ACTIVATE_ALLOW_DISCARDS))
+		if (cad.flags & CRYPT_ACTIVATE_ALLOW_DISCARDS)
 			log_std("  flags: %s\n",
-				(cad.flags & CRYPT_ACTIVATE_ALLOW_DISCARDS) ? "discards " : "");
+				(crypt_get_compatibility(cd) & CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD) ?
+				"discards" : "discards_keyed");
 	}
 out:
 	crypt_free(cd);
@@ -788,6 +791,10 @@ int main(int argc, const char **argv)
 		usage(popt_context, EXIT_FAILURE, _("Inline mode cannot be combined with separate data device."),
 		      poptGetInvocationName(popt_context));
 
+	if (ARG_SET(OPT_ALLOW_DISCARDS_KEYED_ID) && !ARG_SET(OPT_INTEGRITY_KEY_FILE_ID))
+		usage(popt_context, EXIT_FAILURE, _("Keyed discards can be enabled only with keyed algorithms like HMAC."),
+		      poptGetInvocationName(popt_context));
+
 	if (ARG_SET(OPT_CANCEL_DEFERRED_ID) && ARG_SET(OPT_DEFERRED_ID))
 		usage(popt_context, EXIT_FAILURE,
 		      _("Options --cancel-deferred and --deferred cannot be used at the same time."),
diff --git a/src/integritysetup_arg_list.h b/src/integritysetup_arg_list.h
index 8f6d325b6..26603f2af 100644
--- a/src/integritysetup_arg_list.h
+++ b/src/integritysetup_arg_list.h
@@ -10,6 +10,8 @@
 
 ARG(OPT_ALLOW_DISCARDS, '\0', POPT_ARG_NONE, N_("Allow discards (aka TRIM) requests for device"), NULL, CRYPT_ARG_BOOL, {}, OPT_ALLOW_DISCARDS_ACTIONS)
 
+ARG(OPT_ALLOW_DISCARDS_KEYED, '\0', POPT_ARG_NONE, N_("Allow secure keyed discards (aka TRIM) requests for device"), NULL, CRYPT_ARG_BOOL, {}, OPT_ALLOW_DISCARDS_ACTIONS)
+
 ARG(OPT_BATCH_MODE, 'q', POPT_ARG_NONE, N_("Do not ask for confirmation"), NULL, CRYPT_ARG_BOOL, {}, {})
 
 ARG(OPT_BUFFER_SECTORS, '\0', POPT_ARG_STRING, N_("Buffers size"), N_("SECTORS"), CRYPT_ARG_UINT32, {}, {})
diff --git a/src/utils_arg_names.h b/src/utils_arg_names.h
index e8777a834..677bd9da2 100644
--- a/src/utils_arg_names.h
+++ b/src/utils_arg_names.h
@@ -12,6 +12,7 @@
 #define OPT_ACTIVE_NAME			"active-name"
 #define OPT_ALIGN_PAYLOAD		"align-payload"
 #define OPT_ALLOW_DISCARDS		"allow-discards"
+#define OPT_ALLOW_DISCARDS_KEYED	"allow-discards-keyed"
 #define OPT_BATCH_MODE			"batch-mode"
 #define OPT_BITMAP_FLUSH_TIME		"bitmap-flush-time"
 #define OPT_BITMAP_SECTORS_PER_BIT	"bitmap-sectors-per-bit"
diff --git a/tests/integrity-compat-test b/tests/integrity-compat-test
index 1e331b043..0f2b276d3 100755
--- a/tests/integrity-compat-test
+++ b/tests/integrity-compat-test
@@ -82,6 +82,7 @@ dm_integrity_features()
 	}
 	[ $VER_MIN -gt 5 ] && {
 		DM_INTEGRITY_RESIZE_SUPPORTED=1
+		DM_INTEGRITY_DISCARDS=1
 	}
 	[ $VER_MIN -gt 6 ] && {
 		DM_INTEGRITY_HMAC_FIX=1
@@ -95,6 +96,9 @@ dm_integrity_features()
 	[ $VER_MIN -ge 13 ] && {
 		DM_INTEGRITY_RECALCULATE_INLINE=1
 	}
+	[ $VER_MIN -ge 15 ] && {
+		DM_INTEGRITY_DISCARDS_KEYED=1
+	}
 }
 
 add_device() {
@@ -697,6 +701,34 @@ else
 	echo "[N/A]"
 fi
 
+echo -n "Discards flags:"
+if [ -n "$DM_INTEGRITY_DISCARDS" ] ; then
+	add_device
+	echo -n "[DISCARDS]"
+	ARGS="--integrity hmac-sha256 --integrity-key-file $KEY_FILE --integrity-key-size 32"
+	$INTSETUP format -q $DEV --no-wipe --tag-size 32 $ARGS || fail "Cannot format device."
+	$INTSETUP open $DEV $DEV_NAME $ARGS || fail "Cannot activate device."
+	kernel_param_grep "allow_discards" && fail "allow_discards should not be set"
+	$INTSETUP close $DEV_NAME || fail "Cannot deactivate device."
+	$INTSETUP open $DEV $DEV_NAME $ARGS --allow-discards || fail "Cannot activate device."
+	kernel_param_grep "allow_discards" || fail "Missing allow_discards"
+	$INTSETUP close $DEV_NAME || fail "Cannot deactivate device."
+	if [ -n "$DM_INTEGRITY_DISCARDS_KEYED" ] ; then
+		echo -n "[DISCARDS_KEYED]"
+		$INTSETUP open $DEV $DEV_NAME $ARGS --allow-discards-keyed || fail "Cannot activate device."
+		kernel_param_grep "allow_discards_keyed" || fail "Missing allow_discards_keyed"
+		$INTSETUP dump $DEV | grep "flags" | grep -q "discards_keyed" || fail "Flag for discards_keyed not set."
+		$INTSETUP close $DEV_NAME || fail "Cannot deactivate device."
+		# Keyed now is permanent
+		$INTSETUP open $DEV $DEV_NAME $ARGS --allow-discards || fail "Cannot activate device."
+		kernel_param_grep "allow_discards_keyed" || fail "Missing allow_discards_keyed"
+		$INTSETUP close $DEV_NAME || fail "Cannot deactivate device."
+	fi
+	echo "[OK]"
+else
+	echo "[N/A]"
+fi
+
 # shrinking the mapping should also work on older kernels
 echo -n "[INTEGRITY BASIC RESIZE NOKEY]"
 add_device

From 31954692abb5f97bfa5f13f6f8628bbb554a3fa8 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 19 Aug 2026 11:50:52 +0200
Subject: [PATCH 197/244] Fix integer overflow in AF_split_sectors().

The AF split data size is computed as blocksize * blocknumbers and
rounded up to the sector size without any overflow check. On builds
where size_t is 32-bit, a crafted or tampered LUKS header with an
oversized (but uint32-valid) key_size can wrap this multiplication,
under-allocating the AF buffer while AF_merge() still walks it using
the original key length. This causes a heap out-of-bounds read and a
crash on the keyslot open path.

Add overflow checks to AF_split_sectors() so it returns 0 on any wrap,
and reject such headers early in LUKS_check_keyslots().

Reported by: Aisle Research
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 lib/luks1/af.c        | 7 +++++++
 lib/luks1/keymanage.c | 5 +++++
 2 files changed, 12 insertions(+)

diff --git a/lib/luks1/af.c b/lib/luks1/af.c
index 3da43e16c..4710567a2 100644
--- a/lib/luks1/af.c
+++ b/lib/luks1/af.c
@@ -10,6 +10,7 @@
  */
 
 #include <stddef.h>
+#include <stdint.h>
 #include <stdlib.h>
 #include <string.h>
 #include <errno.h>
@@ -147,9 +148,15 @@ size_t AF_split_sectors(size_t blocksize, unsigned int blocknumbers)
 {
 	size_t af_size;
 
+	if (!blocknumbers || blocksize >= (SIZE_MAX / blocknumbers))
+		return 0;
+
 	/* data material * stripes */
 	af_size = blocksize * blocknumbers;
 
+	if (af_size >= (SIZE_MAX - SECTOR_SIZE + 1))
+		return 0;
+
 	/* round up to sector */
 	af_size = (af_size + (SECTOR_SIZE - 1)) / SECTOR_SIZE;
 
diff --git a/lib/luks1/keymanage.c b/lib/luks1/keymanage.c
index b5f9507b9..de5e696f0 100644
--- a/lib/luks1/keymanage.c
+++ b/lib/luks1/keymanage.c
@@ -127,6 +127,11 @@ static int LUKS_check_keyslots(struct crypt_device *ctx, const struct luks_phdr
 	int i, prev, next, sorted_areas[LUKS_NUMKEYS] = { 0, 1, 2, 3, 4, 5, 6, 7 };
 	uint32_t secs_per_stripes = AF_split_sectors(phdr->keyBytes, LUKS_STRIPES);
 
+	if (!secs_per_stripes) {
+		log_dbg(ctx, "Invalid volume key size.");
+		return -1;
+	}
+
 	LUKS_sort_keyslots(phdr, sorted_areas);
 
 	/* Check keyslot to prevent access outside of header and keyslot area */

From 1d7f5daa0bc15f1f609ad1c8beaa68c8b6f9e2ec Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 19 Aug 2026 13:29:36 +0200
Subject: [PATCH 198/244] Minor code style improvements in LUKS1.

---
 lib/luks1/af.c        | 4 +---
 lib/luks1/keymanage.c | 2 +-
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/lib/luks1/af.c b/lib/luks1/af.c
index 4710567a2..2f10ec648 100644
--- a/lib/luks1/af.c
+++ b/lib/luks1/af.c
@@ -158,7 +158,5 @@ size_t AF_split_sectors(size_t blocksize, unsigned int blocknumbers)
 		return 0;
 
 	/* round up to sector */
-	af_size = (af_size + (SECTOR_SIZE - 1)) / SECTOR_SIZE;
-
-	return af_size;
+	return (af_size + (SECTOR_SIZE - 1)) / SECTOR_SIZE;
 }
diff --git a/lib/luks1/keymanage.c b/lib/luks1/keymanage.c
index de5e696f0..c33efe17e 100644
--- a/lib/luks1/keymanage.c
+++ b/lib/luks1/keymanage.c
@@ -27,7 +27,7 @@ int LUKS_keyslot_area(const struct luks_phdr *hdr,
 	uint64_t *offset,
 	uint64_t *length)
 {
-	if(keyslot >= LUKS_NUMKEYS || keyslot < 0)
+	if (keyslot >= LUKS_NUMKEYS || keyslot < 0)
 		return -EINVAL;
 
 	*offset = (uint64_t)hdr->keyblock[keyslot].keyMaterialOffset * SECTOR_SIZE;

From e3b901de8b8791df2f7fc8c9a79bcde2915c594e Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 28 Aug 2026 19:56:57 +0200
Subject: [PATCH 199/244] Fix error path in crypt_header_restore

The backup device can leak, fix it.
Found by Coverity scanner.
---
 lib/setup.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/lib/setup.c b/lib/setup.c
index 1ae7cf24c..425cfd4d7 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -4116,7 +4116,8 @@ int crypt_header_restore(struct crypt_device *cd,
 	   (requested_type && version == 1 && !isLUKS1(requested_type)) ||
 	   (requested_type && version == 2 && !isLUKS2(requested_type))) {
 		log_err(cd, _("Header backup file does not contain compatible LUKS header."));
-		return -EINVAL;
+		r = -EINVAL;
+		goto out;
 	}
 
 	if (!cd->type) {
@@ -4138,7 +4139,7 @@ int crypt_header_restore(struct crypt_device *cd,
 
 	if (!r)
 		r = _crypt_load_luks(cd, version == 1 ? CRYPT_LUKS1 : CRYPT_LUKS2, false, true);
-
+out:
 	device_free(cd, backup_device);
 	return r;
 }

From eef2e3e13a0db5d07a9c8430ffc6513c121767cb Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Mon, 31 Aug 2026 16:35:02 +0200
Subject: [PATCH 200/244] bitlk: prevent non-terminating loop on activation

The BITLK activation path builds dm-zero and dm-crypt segments directly
from metadata-supplied offsets and sizes (metadata_offset[],
volume_header_offset, volume_header_size) without validating them against
the device size. The gap-filling loop in _activate() then assumes the
segments tile the device up to dmd.size.

Reject metadata-derived segments that fall outside the device before the
gap-filling loop, and stop the loop when the non-progressing branch runs
past the end of the device, so malformed metadata is refused with -EINVAL
instead of spinning forever.

Reported-by: Aisle Research
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 lib/bitlk/bitlk.c | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/lib/bitlk/bitlk.c b/lib/bitlk/bitlk.c
index 84bb1c51a..772442956 100644
--- a/lib/bitlk/bitlk.c
+++ b/lib/bitlk/bitlk.c
@@ -1512,6 +1512,15 @@ static int _activate(struct crypt_device *cd,
 	segments[num_segments].type = BITLK_SEGTYPE_CRYPT;
 	num_segments++;
 
+	/* reject malformed bitlk metadata. Segments out of device bounds cause infinite loop */
+	for (i = 0; i < num_segments; i++) {
+		if (segments[i].offset >= dmd.size || segments[i].iv_offset >= dmd.size ||
+		    (segments[i].length > dmd.size - segments[i].offset)) {
+			log_dbg(cd, "Malformed BITLK metadata: segment out of device bounds");
+			return -EINVAL;
+		}
+	}
+
 	/* now fill gaps between the dm-zero segments with dm-crypt */
 	last_segment = params->volume_header_size / SECTOR_SIZE;
 	while (true) {
@@ -1531,6 +1540,12 @@ static int _activate(struct crypt_device *cd,
 		/* two zero segments next to each other, just bump the last_segment
 		   so the algorithm moves */
 		if (next_end - next_start == 0) {
+			/* nothing left to add: malformed metadata */
+			if (next_start >= dmd.size) {
+				log_dbg(cd, "BITLK segment layout does not cover device.");
+				r = -EINVAL;
+				goto out;
+			}
 			last_segment = next_end + 1;
 			continue;
 		}

From 10c43e61aa1cf2e12fbeae4307d0147cae1b51f5 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Tue, 1 Sep 2026 19:38:37 +0200
Subject: [PATCH 201/244] bitlk: harden volume key size check

If a crafted image is opened, the allocated buffer size for key
can be wrong. This can happen if the encryption is changed from
AES-CBC-128 to mode with Elephant diffuser without recalculation
of stored key.

Note that creating such incorrect image requires disk password,
as the metadata are protected by MAC.

The code fixes the error path to fail instead of accessing
the wrongly allocated buffer.

Reported-by: Aisle Research
---
 lib/bitlk/bitlk.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/lib/bitlk/bitlk.c b/lib/bitlk/bitlk.c
index 772442956..6c15a8ccc 100644
--- a/lib/bitlk/bitlk.c
+++ b/lib/bitlk/bitlk.c
@@ -1237,6 +1237,13 @@ static int decrypt_key(struct crypt_device *cd,
 
 	if (is_fvek && strcmp(crypt_get_cipher_mode(cd), "cbc-elephant") == 0 &&
 		crypt_get_volume_key_size(cd) == 32) {
+		    if (crypt_volume_key_length(enc_key) < (2 * 16 + BITLK_OPEN_KEY_METADATA_LEN + 16)) {
+			log_dbg(cd, "Unexpected volume key size: %i, decrypted key size %zu",
+				crypt_get_volume_key_size(cd),
+				crypt_volume_key_length(enc_key));
+			r = -EINVAL;
+			goto out;
+		}
 		/* 128bit AES-CBC with Elephant -- key size is 256 bit (2 keys) but key data is 512 bits,
 		   data: 16B CBC key, 16B empty, 16B elephant key, 16B empty */
 		crypt_safe_memcpy(outbuf + 16 + BITLK_OPEN_KEY_METADATA_LEN,
@@ -1244,7 +1251,6 @@ static int decrypt_key(struct crypt_device *cd,
 		key_size = 32 + BITLK_OPEN_KEY_METADATA_LEN;
 	}
 
-
 	*vk = crypt_alloc_volume_key(key_size - BITLK_OPEN_KEY_METADATA_LEN,
 					(const char *)(outbuf + BITLK_OPEN_KEY_METADATA_LEN));
 	r = *vk ? 0 : -ENOMEM;

From 4059e0eeeeba00f3fec98fb665d486139dbf2a15 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Wed, 2 Sep 2026 13:06:50 +0200
Subject: [PATCH 202/244] Renumber unreleased compat flags

To allow clear backport, swap OPAL and keyed discard flag
in libcryptsetup.h.

The keyed discard needs to be backported as it is a security fix,
OPAL SUM mode will be released later.
---
 lib/libcryptsetup.h | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index 4b9b00025..365434cab 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -783,10 +783,10 @@ uint32_t crypt_get_compatibility(struct crypt_device *cd);
 #define CRYPT_COMPAT_LEGACY_INTEGRITY_HMAC (UINT32_C(1) << 1)
 /** dm-integrity allow recalculating of volumes with HMAC keys (old kernels) */
 #define CRYPT_COMPAT_LEGACY_INTEGRITY_RECALC (UINT32_C(1) << 2)
-/** disable SUM (Single User Mode) when formatting LUKS2 device w/ HW encryption (OPAL2) */
-#define CRYPT_COMPAT_DISABLE_HW_OPAL_SUM (UINT32_C(1) << 3)
 /** dm-integrity use non-keyed discard filler (old kernels) */
-#define CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD (UINT32_C(1) << 4)
+#define CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD (UINT32_C(1) << 3)
+/** disable SUM (Single User Mode) when formatting LUKS2 device w/ HW encryption (OPAL2) */
+#define CRYPT_COMPAT_DISABLE_HW_OPAL_SUM (UINT32_C(1) << 4)
 
 /**
  * Convert to new type for already existing device.

From e73176ab29991e9d5daf6dc250e014a0a1b7315a Mon Sep 17 00:00:00 2001
From: Antonio Ceballos <aceballos@gmail.com>
Date: Wed, 2 Sep 2026 15:06:30 +0200
Subject: [PATCH 203/244] po: update es.po (from translationproject.org)

---
 po/es.po | 1282 +++++++++++++++++++++++++++---------------------------
 1 file changed, 644 insertions(+), 638 deletions(-)

diff --git a/po/es.po b/po/es.po
index 724c248b5..6baf2131b 100644
--- a/po/es.po
+++ b/po/es.po
@@ -73,10 +73,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.2-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2025-12-12 18:51+0100\n"
-"PO-Revision-Date: 2026-01-17 19:37+0200\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-08-21 11:22+0200\n"
 "Last-Translator: Antonio Ceballos <aceballos@gmail.com>\n"
 "Language-Team: Spanish <es@tp.org.es>\n"
 "Language: es\n"
@@ -145,7 +145,7 @@ msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "El recómputo automático de las etiquetas de integridad solicitado no está disponible."
 
 #: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2781
+#: lib/luks2/luks2_json_metadata.c:2799
 msgid "Discard/TRIM is not supported."
 msgstr "Descartar/TRIM no disponible."
 
@@ -191,670 +191,670 @@ msgstr "La calidad solicitada para el generador de números aleatorios es descon
 msgid "Error reading from RNG."
 msgstr "Error leyendo del generador de números aleatorios."
 
-#: lib/setup.c:248
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "El soporte de OPAL está desactivado en libcryptsetup."
 
-#: lib/setup.c:250
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "El dispositivo %s o el núcleo no disponen de cifrado OPAL."
 
-#: lib/setup.c:266
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "No se puede inicializar el «backend» del generador de números aleatorios de cifrado."
 
-#: lib/setup.c:272
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "No se puede inicializar el «backend» de cifrado."
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Algoritmo «hash» %s no disponible."
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "Error de procesamiento de la clave (usando «hash» %s)."
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "No se puede determinar el tipo de dispositivo. ¿Es incompatible la activación del dispositivo?"
 
-#: lib/setup.c:395 lib/setup.c:4160
+#: lib/setup.c:398 lib/setup.c:4177
 msgid "This operation is supported only for LUKS device."
 msgstr "Esta operación solamente está disponible para dispositivos LUKS."
 
-#: lib/setup.c:432
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "Esta operación solamente está disponible para dispositivos LUKS2."
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "Todas las ranuras de claves están llenas."
 
-#: lib/setup.c:500
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "La ranura de claves %d no es válida; seleccione un número entre 0 y %d."
 
-#: lib/setup.c:506
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "La ranura de claves %d está llena; seleccione otra."
 
-#: lib/setup.c:531 lib/setup.c:3875
+#: lib/setup.c:534 lib/setup.c:3878
 msgid "Device size is not aligned to device logical block size."
 msgstr "El tamaño del dispositivo no está alineado con el tamaño de bloque lógico del dispositivo."
 
-#: lib/setup.c:628
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "Cabecera detectada pero el dispositivo %s es demasiado pequeño."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5227
-#: lib/luks2/luks2_reencrypt.c:3945 lib/luks2/luks2_reencrypt.c:4434
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Esta operación no está disponible para este tipo de dispositivo."
 
-#: lib/setup.c:674
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "Operación con recifrado en curso no válida."
 
-#: lib/setup.c:806
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "No se han podido echar atrás los metadatos de LUKS2 en memoria."
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1782
-#: src/cryptsetup.c:1966 src/cryptsetup.c:2021 src/cryptsetup.c:2219
-#: src/cryptsetup.c:2364 src/cryptsetup.c:2642 src/cryptsetup.c:2955
-#: src/cryptsetup.c:3023 src/utils_reencrypt.c:2281
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "El dispositivo %s no es un dispositivo LUKS válido."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Versión LUKS no disponible %d."
 
-#: lib/setup.c:1270
+#: lib/setup.c:1273
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "No se ha detectado ningún patrón conocido de especificación de cifrado para el dispositivo activo %s."
 
-#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5805
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
 #, c-format
 msgid "Device %s is not active."
 msgstr "El dispositivo %s no está activo."
 
-#: lib/setup.c:1532
+#: lib/setup.c:1535
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "El dispositivo subyacente asociado al dispositivo cifrado %s ha desaparecido."
 
-#: lib/setup.c:1614
+#: lib/setup.c:1617
 msgid "Invalid plain crypt parameters."
 msgstr "Parámetros de cifrado para modo claro no válidos."
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1622 lib/setup.c:2672
 msgid "Invalid key size."
 msgstr "Tamaño de clave no válido."
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
 msgid "UUID is not supported for this crypt type."
 msgstr "El UUID no está disponible para este tipo de cifrado."
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "El dispositivo de metadatos separado no está disponible para este tipo de cifrado."
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1494 src/cryptsetup.c:3762
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Tamaño de sector de cifrado no admitido."
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
 msgid "Device size is not aligned to requested sector size."
 msgstr "El tamaño del dispositivo no está alineado con el tamaño del sector solicitado."
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
 msgid "Can't format LUKS without device."
 msgstr "Imposible dar formato LUKS sin dispositivo."
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1707 lib/setup.c:1959
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "El dispositivo zonificado %s no puede utilizarse para cabecera LUKS."
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "El alineamiento de datos solicitado no es compatible con el desplazamiento de los datos."
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1754 lib/setup.c:1984
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "ATENCIÓN: El dispositivo DAX puede corromper datos ya que no garantiza actualizaciones de sector atómicas.\n"
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "No se puede limpiar la cabecera del dispositivo %s."
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1805 lib/setup.c:2164
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "El dispositivo %s es demasiado pequeño para ser activado; no queda espacio para los datos.\n"
 
-#: lib/setup.c:1843
+#: lib/setup.c:1846
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "La clave del volumen es demasiado pequeña para cifrado con extensiones de integridad."
 
-#: lib/setup.c:1847
+#: lib/setup.c:1850
 msgid "Integrity key size is too small."
 msgstr "El tamaño de la clave de integridad es demasiado pequeño."
 
-#: lib/setup.c:1856
+#: lib/setup.c:1859
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "El algoritmo de cifrado %s-%s (tamaño de clave %zd bits) no está disponible."
 
-#: lib/setup.c:1897
+#: lib/setup.c:1900
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "ATENCIÓN: La activación del dispositivo va a fallar; dm-crypt no admite el tamaño de sector de cifrado solicitado.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:896
-#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4494
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "El dispositivo %s es demasiado pequeño."
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "No se puede dar formato al dispositivo %s en uso."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "No se puede dar formato al dispositivo %s; permiso denegado."
 
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "No se puede dar formato a la integridad del dispositivo %s."
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2151 lib/setup.c:2629
 #, c-format
 msgid "Cannot format device %s."
 msgstr "No se puede dar formato al dispositivo %s."
 
-#: lib/setup.c:2191
+#: lib/setup.c:2194
 msgid "Cannot get OPAL alignment parameters."
 msgstr "No se pueden obtener los parámetros de alineamiento OPAL."
 
-#: lib/setup.c:2203
+#: lib/setup.c:2206
 msgid "Bogus OPAL logical block size."
 msgstr "Tamaño de bloque lógico OPAL falso."
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Tamaño de bloque lógico OPAL falso difiere del tamaño de bloque del dispositivo."
 
-#: lib/setup.c:2214
+#: lib/setup.c:2217
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "El desplazamiento de datos solicitado no es compatible con el tamaño de bloque OPAL."
 
-#: lib/setup.c:2221
+#: lib/setup.c:2224
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "El alineamiento de datos solicitado no es compatible con el alineamiento OPAL."
 
-#: lib/setup.c:2241
+#: lib/setup.c:2244
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "El desplazamiento de datos no satisface los requisitos de alineamiento OPAL."
 
-#: lib/setup.c:2254
+#: lib/setup.c:2257
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "El alineamiento de datos solicitado no satisface los requisitos de alineamiento del rango de bloqueo."
 
-#: lib/setup.c:2468
+#: lib/setup.c:2471
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Compensando el tamaño de dispositivo con %<PRIu64> sectores para alinearlo con la granularidad de alienamiento OPAL."
 
-#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "No se ha podido adquirir el bloqueo OPAL para el dispositivo %s."
 
-#: lib/setup.c:2538
+#: lib/setup.c:2541
 msgid "Incorrect OPAL Admin key."
 msgstr "Clave de administrador de OPAL incorrecta."
 
-#: lib/setup.c:2540
+#: lib/setup.c:2543
 msgid "Cannot setup OPAL segment."
 msgstr "No se puede configurar el segmento de OPAL."
 
-#: lib/setup.c:2622
+#: lib/setup.c:2625
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "No se puede dar formato al dispositivo %s; parece que el dispositivo OPAL está completamente protegido contra escritura actualmente."
 
-#: lib/setup.c:2624
+#: lib/setup.c:2627
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Quizá esto sea un error del firmware. Ejecute un reinicio PSID OPAL y reconecte para recuperar."
 
-#: lib/setup.c:2644
+#: lib/setup.c:2647
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "El reinicio del rango %d de bloqueo del dispositivo %s ha fallado."
 
-#: lib/setup.c:2664
+#: lib/setup.c:2667
 msgid "Can't format LOOPAES without device."
 msgstr "Imposible dar formato LOOPAES sin dispositivo."
 
-#: lib/setup.c:2709
+#: lib/setup.c:2712
 msgid "Can't format VERITY without device."
 msgstr "Imposible dar formato VERITY sin dispositivo."
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2723 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Tipo de «hash» VERITY %d no disponible."
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2729 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Tamaño de bloque VERITY no disponible."
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2734 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Desplazamiento «hash» VERITY no disponible."
 
-#: lib/setup.c:2736
+#: lib/setup.c:2739
 msgid "Unsupported VERITY FEC offset."
 msgstr "Desplazamiento FEC VERITY no disponible."
 
-#: lib/setup.c:2760
+#: lib/setup.c:2763
 msgid "Data area overlaps with hash area."
 msgstr "La zona de datos se solapa con la zona «hash»."
 
-#: lib/setup.c:2785
+#: lib/setup.c:2788
 msgid "Hash area overlaps with FEC area."
 msgstr "La zona «hash» se solapa con la zona FEC."
 
-#: lib/setup.c:2792
+#: lib/setup.c:2795
 msgid "Data area overlaps with FEC area."
 msgstr "La zona de datos se solapa con la zona FEC."
 
-#: lib/setup.c:2884
+#: lib/setup.c:2887
 msgid "Integrity key size mismatch."
 msgstr "Tamaño de la clave de integridad discordante."
 
-#: lib/setup.c:2935
+#: lib/setup.c:2938
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "ATENCIÓN: El tamaño de etiqueta de %d bytes solicitado difiere del tamaño de salida de %s (%d bytes).\n"
 
-#: lib/setup.c:3048 lib/setup.c:3150
+#: lib/setup.c:3051 lib/setup.c:3153
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "El tipo de dispositivo %s solicitado es desconocido o no está disponible."
 
-#: lib/setup.c:3064
+#: lib/setup.c:3067
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "El dispositivo %s no ofrece campos de datos de integridad en línea."
 
-#: lib/setup.c:3070
+#: lib/setup.c:3073
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "El tamaño de etiqueta en línea %<PRIu32> [bytes] es mayor que %<PRIu32> proporcionado por el dispositivo %s."
 
-#: lib/setup.c:3085
+#: lib/setup.c:3088
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "El sector tiene que ser el mismo que el sector hardware del dispositivo (%zu bytes)."
 
-#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Parámetros no admitidos para el dispositivo %s."
 
-#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3591
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Parámetros discordantes en el dispositivo %s."
 
-#: lib/setup.c:3647
+#: lib/setup.c:3650
 msgid "Crypt devices mismatch."
 msgstr "Los dispositivos de cifrado no concuerdan."
 
-#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4233
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "No se ha podido recargar el dispositivo %s."
 
-#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
-#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "No se ha podido suspender el dispositivo %s."
 
-#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4146
-#: lib/luks2/luks2_reencrypt.c:4237
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "No se ha podido reanudar el dispositivo %s."
 
-#: lib/setup.c:3717
+#: lib/setup.c:3720
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Error grave durante la recarga del dispositivo %s (por encima del dispositivo %s)."
 
-#: lib/setup.c:3720 lib/setup.c:3722
+#: lib/setup.c:3723 lib/setup.c:3725
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "No se ha podido conmutar el dispositivo %s a dm-error."
 
-#: lib/setup.c:3765
+#: lib/setup.c:3768
 msgid "Can not resize LUKS2 device with static size."
 msgstr "No se ha podido cambiar el tamaño del dispositivo LUKS2 con un tamaño estático."
 
-#: lib/setup.c:3770
+#: lib/setup.c:3773
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Redimensionar el dispositivo LUKS2 con protección de integridad no está disponible."
 
-#: lib/setup.c:3816
+#: lib/setup.c:3819
 msgid "Cannot resize loop device."
 msgstr "No se ha podido cambiar el tamaño del dispositivo de bucle."
 
-#: lib/setup.c:3860
+#: lib/setup.c:3863
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "ATENCIÓN: ya se ha puesto el tamaño máximo o el núcleo no permite cambiarlo.\n"
 
-#: lib/setup.c:3926
+#: lib/setup.c:3929
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "El cambio de tamaño ha fallado; el núcleo no admite el cambio."
 
-#: lib/setup.c:3958
+#: lib/setup.c:3961
 msgid "Do you really want to change UUID of device?"
 msgstr "¿Está seguro de que quiere cambiar el UUID del dispositivo?"
 
-#: lib/setup.c:4050
+#: lib/setup.c:4053
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "El fichero de copia de seguridad de la cabecera no contiene una cabecera LUKS compatible."
 
-#: lib/setup.c:4143
+#: lib/setup.c:4160
 #, c-format
 msgid "Volume %s is not active."
 msgstr "El volumen %s no está activo."
 
-#: lib/setup.c:4198
+#: lib/setup.c:4215
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "El volumen %s ya está suspendido."
 
-#: lib/setup.c:4224
+#: lib/setup.c:4241
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "La suspensión no está disponible para el dispositivo %s."
 
-#: lib/setup.c:4226 lib/setup.c:4234
+#: lib/setup.c:4243 lib/setup.c:4251
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Error durante la suspensión del dispositivo %s."
 
-#: lib/setup.c:4249
+#: lib/setup.c:4266
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Se ha suspendido el dispositivo %s pero el dispositivo OPAL hardware no puede bloquearse."
 
-#: lib/setup.c:4280 lib/setup.c:4457
+#: lib/setup.c:4297 lib/setup.c:4491
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "La reanudación no está disponible para el dispositivo %s."
 
-#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Error durante la reanudación del dispositivo %s."
 
-#: lib/setup.c:4301
+#: lib/setup.c:4335
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "No se ha podido desvincular la clave del volumen del llavero de usuario especificado."
 
-#: lib/setup.c:4423 lib/setup.c:5592
+#: lib/setup.c:4457 lib/setup.c:5637
 msgid "Failed to link volume key in user defined keyring."
 msgstr "No se ha podido vincular la clave del volumne en el llavero de usuario especificado."
 
-#: lib/setup.c:4521 src/cryptsetup.c:2723
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "EL volumen %s no está suspendido."
 
-#: lib/setup.c:4622 lib/setup.c:7265 lib/setup.c:7287 lib/setup.c:7341
-#: src/cryptsetup.c:1858 src/cryptsetup.c:2262 src/cryptsetup.c:2280
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "La clave de volumen no corresponde a este volumen."
 
-#: lib/setup.c:4776
+#: lib/setup.c:4821
 msgid "Failed to swap new key slot."
 msgstr "No se ha logrado intercambiar la nueva ranura de claves."
 
-#: lib/setup.c:4874
+#: lib/setup.c:4919
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "La ranura de claves %d no es válida."
 
-#: lib/setup.c:4880 src/cryptsetup.c:1979 src/cryptsetup.c:2439
-#: src/cryptsetup.c:3123 src/cryptsetup.c:3183
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "La ranura de claves %d no está activa."
 
-#: lib/setup.c:4899
+#: lib/setup.c:4944
 msgid "Device header overlaps with data area."
 msgstr "La cabecera del dispositivo se solapa con la zona de datos."
 
-#: lib/setup.c:5120
+#: lib/setup.c:5165
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Recifrado en curso. No se puede activar el dispositivo."
 
-#: lib/setup.c:5122 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3722
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "No se ha podido conseguir el bloqueo de recifrado."
 
-#: lib/setup.c:5144
+#: lib/setup.c:5189
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "La recuperación del recifrado LUKS2 utilizando la(s) clave(s) de volumen ha fallado."
 
-#: lib/setup.c:5280
+#: lib/setup.c:5325
 #, c-format
 msgid "Device %s already exists."
 msgstr "El dispositivo %s ya existe."
 
-#: lib/setup.c:5287
+#: lib/setup.c:5332
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "No se puede utilizar el dispositivo %s; el nombre no es válido o todavía está en uso."
 
-#: lib/setup.c:5299
+#: lib/setup.c:5344
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Las claves de volumen de recifrado no corresponden a este volumen."
 
-#: lib/setup.c:5316
+#: lib/setup.c:5361
 msgid "Incorrect volume key specified for plain device."
 msgstr "Clave de volumen incorrecta para dispositivo no cifrado."
 
-#: lib/setup.c:5342 lib/setup.c:5403
+#: lib/setup.c:5387 lib/setup.c:5448
 msgid "Device type is not properly initialized."
 msgstr "Este tipo de dispositivo no se ha inicializado adecuadamente."
 
-#: lib/setup.c:5441
+#: lib/setup.c:5486
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "El llavero de núcleo no está admitido en el núcleo."
 
-#: lib/setup.c:5445
+#: lib/setup.c:5490
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "El llavero de núcleo está ausente: se necesita para pasar la firma al núcleo."
 
-#: lib/setup.c:5500
+#: lib/setup.c:5545
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "No se puede la clave %s del llavero."
 
-#: lib/setup.c:5713
+#: lib/setup.c:5758
 msgid "Incorrect root hash specified for verity device."
 msgstr "«Hash» raíz incorrecta para dispositivo «verity»."
 
-#: lib/setup.c:5754 lib/setup.c:5779
+#: lib/setup.c:5799 lib/setup.c:5824
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL no dispone de desactivación diferida."
 
-#: lib/setup.c:5769 lib/setup.c:5800 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "El dispositivo %s todavía se está utilizando."
 
-#: lib/setup.c:5787
+#: lib/setup.c:5832
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "No se ha podido cancelar la eliminación diferida en el dispositivo %s."
 
-#: lib/setup.c:5809
+#: lib/setup.c:5854
 #, c-format
 msgid "Invalid device %s."
 msgstr "Dispositivo inválido %s."
 
-#: lib/setup.c:5956
+#: lib/setup.c:6001
 msgid "Volume key buffer too small."
 msgstr "El «buffer» de la clave del volumen es demasiado pequeño."
 
-#: lib/setup.c:5967
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "No se puede recuperar la clave del volumen para el dispositivo LUKS2."
 
-#: lib/setup.c:5976
+#: lib/setup.c:6021
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "No se puede recuperar la clave del volumen para el dispositivo LUKS1."
 
-#: lib/setup.c:5990
+#: lib/setup.c:6035
 msgid "Cannot retrieve volume key for plain device."
 msgstr "No se puede recuperar la clave para el dispositivo no cifrado."
 
-#: lib/setup.c:5998
+#: lib/setup.c:6043
 msgid "Cannot retrieve root hash for verity device."
 msgstr "No se puede recuperar el «hash» raíz para dispositivo «verity»."
 
-#: lib/setup.c:6007
+#: lib/setup.c:6052
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "No se puede recuperar la clave del volumen para el dispositivo BITLK."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6057
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "No se puede recuperar la clave del volumen para el dispositivo FVAULT2."
 
-#: lib/setup.c:6014
+#: lib/setup.c:6059
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Esta operación no está disponible para el dispositivo cifrado %s."
 
-#: lib/setup.c:6199 lib/setup.c:6210
+#: lib/setup.c:6244 lib/setup.c:6255
 msgid "Dump operation is not supported for this device type."
 msgstr "Operación de volcado no deisponible para este tipo de dispositivo."
 
-#: lib/setup.c:6590
+#: lib/setup.c:6635
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "El desplazamiento de datos no es múltiplo de %u bytes."
 
-#: lib/setup.c:6898
+#: lib/setup.c:6943
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "No se puede convertir el dispositivo %s que todavía está en uso."
 
-#: lib/setup.c:7206 lib/setup.c:7350
+#: lib/setup.c:7251 lib/setup.c:7406
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "No se ha logrado asignar la ranura de claves %u como nueva clave del volumen."
 
-#: lib/setup.c:7230
+#: lib/setup.c:7275
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "No se han podido inicializar los parámetros predefinidos de la ranura de claves LUKS2."
 
-#: lib/setup.c:7236
+#: lib/setup.c:7281
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "No se ha logrado asignar la ranura de claves %d al resumen."
 
-#: lib/setup.c:7467
+#: lib/setup.c:7523
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "No se puede añadir ranura de claves; todas las ranuras están desactivadas y no se ha proporcionado una clave para el volumen."
 
-#: lib/setup.c:7540 lib/verity/verity.c:333
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "No se ha podido cargar la clave en el llavero del núcleo."
 
-#: lib/setup.c:7731
+#: lib/setup.c:7807
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "No se ha podido encontrar el llavero descrito por «%s»."
 
-#: lib/setup.c:7796
+#: lib/setup.c:7872
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "No se ha podido adquirir el bloqueo de la serialización de acceso duro de memoria global."
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "No se ha podido abrir el fichero de claves."
 
-#: lib/utils.c:212
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "No se puede leer el fichero de claves desde un terminal."
 
-#: lib/utils.c:228
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "No se ha podido efectuar «stat» sobre el fichero de claves."
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "No es posible situarse en la posición solicitada del fichero de claves."
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "Memoria agotada mientras se estaba leyendo la frase contraseña."
 
-#: lib/utils.c:286
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "Error al leer la frase contraseña."
 
-#: lib/utils.c:303
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "No hay nada para leer en la entrada."
 
-#: lib/utils.c:310
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "Se ha excedido el tamaño máximo de fichero de claves."
 
-#: lib/utils.c:315
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "No se puede leer la cantidad de datos solicitada."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "El dispositivo %s no existe o el acceso al mismo ha sido denegado."
@@ -869,40 +869,45 @@ msgstr "El dispositivo %s no es compatible."
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "Se ignorará por falso el tamaño de optimal-io para el dispositivo de datos (%u bytes)."
 
-#: lib/utils_device.c:707
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "No se puede incrementar %s a %<PRIu64> bytes (%s)."
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "El dispositivo %s es demasiado pequeño. Se necesitan %<PRIu64> bytes como mínimo."
 
-#: lib/utils_device.c:788
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "No se puede usar el dispositivo %s porque ya está en uso (asignado o montado)."
 
-#: lib/utils_device.c:792
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "No se puede utilizar el dispositivo %s; permiso denegado."
 
-#: lib/utils_device.c:795
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "No se puede obtener información del dispositivo %s."
 
-#: lib/utils_device.c:818
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "No se puede utilizar un dispositivo de bucle invertido como usuario no administrador."
 
-#: lib/utils_device.c:829
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "No se ha logrado asociar el dispositivo de bucle invertido (hace falta un dispositivo de bucle con marcador de auto-limpieza)."
 
-#: lib/utils_device.c:877
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "El «offset» solicitado está más allá del tamaño real del dispositivo %s."
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "El dispositivo %s tiene tamaño cero."
@@ -1025,7 +1030,7 @@ msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "La especificación de cifrado debería estar en formato [cipher]-[mode]-[iv]."
 
 #: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
 #: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
@@ -1039,16 +1044,16 @@ msgstr "No se ha podido abrir el dispositivo de almacenamiento de claves tempora
 msgid "Failed to access temporary keystore device."
 msgstr "No se ha podido acceder al dispositivo de almacenamiento de claves temporal."
 
-#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "Error de entrada/salida mientras se cifraba una ranura de claves."
 
 #: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:870 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
-#: lib/verity/verity_hash.c:341 lib/verity/verity_fec.c:247
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
 #: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
@@ -1056,7 +1061,7 @@ msgstr "Error de entrada/salida mientras se cifraba una ranura de claves."
 msgid "Cannot open device %s."
 msgstr "No se puede abrir el dispositivo %s."
 
-#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "Error de entrada/salida mientras se descifraba una ranura de claves."
 
@@ -1146,7 +1151,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "«Hash» de cifrado reparado a minúsculas (%s)."
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "La «hash» LUKS solicitada %s no está disponible."
@@ -1193,7 +1198,7 @@ msgstr "El modo de cifrado LUKS %s no es válido."
 msgid "LUKS hash %s is invalid."
 msgstr "El «hash» LUKS %s no es válido."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1369
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "No se ha detectado ningún problema en la cabecera LUKS."
 
@@ -1207,50 +1212,50 @@ msgstr "Error al actualizar la cabecera LUKS en el dispositivo %s."
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Error al leer la cabecera LUKS después de actualizarla en el dispositivo %s."
 
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:750
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "La posición de los datos de una cabecera LUKS debe ser 0 o superior al tamaño de la cabecera."
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
 #: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "El formato de UUID LUKS proporcionado es incorrecto."
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "No se puede crear la cabecera LUKS: fallo en la lectura «random salt»."
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "No se puede crear la cabecera LUKS: fallo en la cabecera (usando «hash» %s)."
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "La ranura de claves %d está activa; primero hay que purgar."
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "El material de la ranura de claves %d no tiene suficientes bandas. Quizá se haya manipulado la cabecera."
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Desbordamiento del valor de iteración PBKDF2."
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "No se puede abrir la ranura de claves (usando «hash» %s)."
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "La ranura %d no es válida; seleccione una ranura de claves entre 0 y %d."
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "No se puede limpiar el dispositivo %s."
@@ -1271,56 +1276,48 @@ msgstr "Se ha detectado un fichero de claves incompatible con «loop-AES»."
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "El núcleo no admite asignación compatible con «loop-AES»."
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "Error leyendo el fichero de claves %s."
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "Se ha excedido la longitud máxima (%zu) de la frase contraseña TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "El algoritmo «hash» %s no está disponible, por lo que se ha ignorado."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1242
-msgid "Required kernel crypto interface not available."
-msgstr "La interfaz de cifrado del núcleo requerida no está disponible."
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1244
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "Asegúrese de que el módulo del núcleo algof_skcipher está cargado."
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "No es posible la activación para el tamaño de sector %d."
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "El núcleo no dispone de activación para este modo antiguo TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "Activando el sistema de cifrado TCRYPT para la partición %s."
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:819
 msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
 msgstr "No se puede determinar el desplazamiento de la partición del sistema TCRYPT; se activará el área cifrada entera."
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:828
 msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
 msgstr "No se puede determinar el desplazamiento de la partición del sistema TCRYPT; se activará el dispositivo como una partición del sistema."
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "El núcleo no admite asignación compatible con TCRYPT."
 
-#: lib/tcrypt/tcrypt.c:1146
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "Esta función no está disponible sin carga de cabecera TCRYPT."
 
@@ -1361,11 +1358,6 @@ msgstr "Tamaño de sector no admitido %<PRIu16>."
 msgid "Failed to read BITLK header from %s."
 msgstr "No se ha podido leer la cabecera BITLK de %s."
 
-#: lib/bitlk/bitlk.c:593
-#, c-format
-msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
-msgstr "No se ha podido leer o validar la copia de los metadatos BITLK FVE #%d desde %s."
-
 #: lib/bitlk/bitlk.c:603
 #, c-format
 msgid "Failed to read and validate BITLK FVE metadata from %s."
@@ -1441,42 +1433,42 @@ msgstr "Esta operación no está disponible."
 msgid "Unexpected key data size."
 msgstr "Tamaño de datos de la clave no esperado."
 
-#: lib/bitlk/bitlk.c:1431
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Este dispositivo BITLK se encuentra en un estado en el que no puede activarse."
 
-#: lib/bitlk/bitlk.c:1436
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Los dispositivos BITLK con tipo '%s' no puede activarse."
 
-#: lib/bitlk/bitlk.c:1475
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "ATENCIÓN: el tamaño del volumen «bitlocker» %<PRIu64> no coincide con el tamaño del dispositivo subyacente %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1602
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "No se puede activar el dispositivo; el dm-crypt del núcleo no sirve para BITLK IV."
 
-#: lib/bitlk/bitlk.c:1606
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "No se puede activar el dispositivo; el dm-crypt del núcleo no sirve para difusor BITLK «Elephant»."
 
-#: lib/bitlk/bitlk.c:1610
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "No se puede activar el dispositivo; el dm-crypt del núcleo no sirve para tamaño de sector grande."
 
-#: lib/bitlk/bitlk.c:1614
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "No se puede activar el dispositivo; falta el módulo dm-zero del núcleo."
 
-#: lib/fvault2/fvault2.c:530
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "No se han podido leer %u «bytes» de la cabecera del volumen."
 
-#: lib/fvault2/fvault2.c:542
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "Versión de FVAULT2 no admitida %<PRIu16>."
@@ -1553,23 +1545,23 @@ msgstr "La verificación ha fallado en la posición %<PRIu64>."
 msgid "Hash area overflow."
 msgstr "Desbordamiento del área «hash»."
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "Fallo en la verificación del área de datos."
 
-#: lib/verity/verity_hash.c:377
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "Fallo en la verificación de la «hash» raíz."
 
-#: lib/verity/verity_hash.c:383
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "Error de entrada/salida al crear el área «hash»."
 
-#: lib/verity/verity_hash.c:385
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "La creación del área «hash» ha fallado."
 
-#: lib/verity/verity_hash.c:420
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "ATENCIÓN: el núcleo no puede activar un dispositivo si el tamaño del bloque de datos excede el tamaño de página (%u)."
@@ -1624,19 +1616,19 @@ msgstr "No se ha podido determinar el tamaño para el dispositivo %s."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Metadatos dm-integrity del núcleo incompatibles (versión %u) detectados en %s."
 
-#: lib/integrity/integrity.c:304 lib/integrity/integrity.c:488
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "El núcleo no dispone de asociación «dm-integrity»."
 
-#: lib/integrity/integrity.c:310
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "El núcleo no dispone de alineamiento de metadatos fijo «dm-integrity»."
 
-#: lib/integrity/integrity.c:319
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "El núcleo rehúsa activar la opción de recálculo inseguro (véanse las opciones de activación antiguas para cambiar ese funcionamiento)."
 
-#: lib/integrity/integrity.c:325
+#: lib/integrity/integrity.c:329
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "El núcleo no dispone de modo en línea «dm-integrity»."
 
@@ -1678,8 +1670,7 @@ msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "ATENCIÓN: el tamaño de la zona de ranuras de claves LUKS2 ha cambiado a %<PRIu64> bytes.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "No se ha podido adquirir el bloqueo de lectura para el dispositivo %s."
@@ -1740,79 +1731,79 @@ msgstr ""
 msgid "Ignored unknown flag %s."
 msgstr "Se hará caso omiso del indicador desconocido %s."
 
-#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Falta la clave para el segmento dm-crypt %u"
 
-#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "No se ha podido establecer el segmento de dm-crypt."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "No se ha podido establecer el segmento de dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "No se ha detectado ningún patrón conocido de especificación de cifrado en la cabecera LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:2691
+#: lib/luks2/luks2_json_metadata.c:2709
 msgid "OPAL device must have static device size."
 msgstr "El dispositivo OPAL debe tener tamaño de dispositivo estático."
 
-#: lib/luks2/luks2_json_metadata.c:2711
+#: lib/luks2/luks2_json_metadata.c:2729
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "El dispositivo OPAL con integridad cifrado debe ser más pequeño que el rango de bloqueo."
 
-#: lib/luks2/luks2_json_metadata.c:2716
+#: lib/luks2/luks2_json_metadata.c:2734
 msgid "OPAL device must have same size as locking range."
 msgstr "El dispositivo OPAL debe tener el mismo tamaño que el rango de bloqueo."
 
-#: lib/luks2/luks2_json_metadata.c:2736
+#: lib/luks2/luks2_json_metadata.c:2754
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "El dispositivo OPAL es %s ya desbloqueado.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2775
+#: lib/luks2/luks2_json_metadata.c:2793
 msgid "Unsupported device integrity configuration."
 msgstr "Configuración de integridad de dispositivo no admitida."
 
-#: lib/luks2/luks2_json_metadata.c:2791
+#: lib/luks2/luks2_json_metadata.c:2809
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "El dispositivo «dm-integrity» subyacente presenta sectores de datos inesperados."
 
-#: lib/luks2/luks2_json_metadata.c:2886
+#: lib/luks2/luks2_json_metadata.c:2911
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Recifrado en curso. No se puede desactivar el dispositivo."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4283
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "No se ha podido reemplazar el dispositivo suspendido %s con el objetivo dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "El dispositivo %s ya se ha desactivado pero el dispositivo OPAL hardware no puede bloquearse."
 
-#: lib/luks2/luks2_json_metadata.c:3020
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Se han detectado requisitos LUKS2 no satisfechos."
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3053
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Operación incompatible con dispositivo marcado para recifrado obsoleto. Se aborta."
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3055
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Operación incompatible con dispositivo marcado para recifrado LUKS2. Se aborta."
 
-#: lib/luks2/luks2_json_metadata.c:3032
+#: lib/luks2/luks2_json_metadata.c:3057
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Operación incompatible con dispositivo que utiliza OPAL. Se aborta."
 
-#: lib/luks2/luks2_json_metadata.c:3034
+#: lib/luks2/luks2_json_metadata.c:3059
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Operación incompatible con dispositivo que utiliza etiquetas HW en línea. Se aborta."
 
@@ -1824,22 +1815,22 @@ msgstr "No hay memoria disponible suficiente para abrir una ranura de claves."
 msgid "Keyslot open failed."
 msgstr "Fallo al abrir la ranura de claves."
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "No se puede utilizar el algoritmo de cifrado %s-%s para el cifrado de ranuras de clave."
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "No se puede utilizar el algoritmo de cifrado %s para el cifrado de ranuras de clave."
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr "No hay suficiente memoria para derivación de clave de ranuras de claves."
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "El algoritmo «hash» %s no está disponible."
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "No hay espacio para la nueva ranura de claves."
 
@@ -1856,336 +1847,336 @@ msgstr "No se puede actualizar el tipo de resiliencia. El nuevo tipo solo ofrece
 msgid "Failed to refresh reencryption verification digest."
 msgstr "No se ha podido refrescar el resumen de verificación del recifrado."
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "No se puede comprobar el estado del dispositivo con uuid: %s."
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Imposible convertir cabecera con metadatos adicionales LUKSMETA."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3890
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Imposible utilizar la especificación de cifrado %s-%s para LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr "Imposible utilizar la especificación de cifrado %s-%s para ranura de claves LUKS2."
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Imposible mover el área de la ranura de claves. No hay suficiente espacio."
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "No se puede convertir a formato LUKS2 - los metadatos no son válidos."
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Imposible mover el área de la ranura de claves. Área de ranuras de clave LUKS2 demasiado pequeña."
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr "Imposible mover el área de la ranura de claves."
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "No se puede convertir a formato LUKS1 - el tamaño predefinido de sector de cifrado del segmento no es 512 bytes."
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "No se puede convertir a formato LUKS1 - los resúmenes de rarunas de claves no son compatibles con LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "No se puede convertir a formato LUKS1 - el dispositivo utiliza el cifrado de clave encapsulado %s."
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "No se puede convertir a formato LUKS1 - el dispositivo utiliza más segmentos."
 
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "No se puede convertir a formato LUKS1 - la cabecera LUKS2 contiene %u «token(s)»."
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:798
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "No se puede convertir a formato LUKS1 - no hay ranuras de claves activas."
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "No se puede convertir a formato LUKS1 - la ranura de claves %u está en un estado no válido."
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:815
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "No se puede convertir a formato LUKS1 - la ranura de claves %u no está acotada."
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "No se puede convertir a formato LUKS1 - la ranura %u (sobre las ranuras máximas) todavía está activa."
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "No se puede convertir a formato LUKS1 - la ranura de claves %u no es compatible con LUKS1."
 
-#: lib/luks2/luks2_reencrypt.c:1198
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "El tamaño de la zona activa debe ser múltiplo del alineamiento de zona calculado (%zu bytes)."
 
-#: lib/luks2/luks2_reencrypt.c:1203
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "El tamaño del dispositivo debe ser múltiplo del alineamiento de zona calculado (%zu bytes)."
 
-#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
-#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4077
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "No se ha podido inicializar la envoltura antigua de almacenamiento del segmento."
 
-#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "No se ha podido inicializar la envoltura nueva de almacenamiento del segmento."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4089
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "No se ha podido inicializar la protección de la zona caliente."
 
-#: lib/luks2/luks2_reencrypt.c:1623
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "No se han podido leer las sumas de comprobación para la zona activa actual."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4104
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "No se ha podido leer la zona activa que comienza en %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:1649
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "No se ha podido descifrar el sector %zu."
 
-#: lib/luks2/luks2_reencrypt.c:1655
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "No se ha podido recuperar el sector %zu."
 
-#: lib/luks2/luks2_reencrypt.c:2208
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "Los tamaños de los dispositivos origen y destino no coinciden. Origen %<PRIu64>, destino: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2310
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "No se ha podido activar el dispositivo con zona activa %s."
 
-#: lib/luks2/luks2_reencrypt.c:2322
+#: lib/luks2/luks2_reencrypt.c:2323
 #, c-format
 msgid "Failed to allocate hotzone device %s."
 msgstr "No se ha podido reservar el dispositivo con zona activa %s."
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "No se ha podido activar el dispositivo de superposición %s con la tabla de orígenes actual."
 
-#: lib/luks2/luks2_reencrypt.c:2346
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "No se ha podido cargar el nuevo mapa para el dispositivo %s."
 
-#: lib/luks2/luks2_reencrypt.c:2418
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
 msgstr "No se ha podido refrescar la pila del dispositivo de recifrado."
 
-#: lib/luks2/luks2_reencrypt.c:2615
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
 msgstr "No se ha logrado establecer el tamaño de las nuevas ranuras de claves."
 
-#: lib/luks2/luks2_reencrypt.c:2751
+#: lib/luks2/luks2_reencrypt.c:2752
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "El valor del desplazamiento de datos no está alineado con el tamaño del sector de cifrado (%<PRIu32> bytes)."
 
-#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "Modo de resiliencia %s no admitido."
 
-#: lib/luks2/luks2_reencrypt.c:2824
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
 msgstr "El tamaño del segmento movido no puede ser mayor que el valor del desplazamiento de los datos."
 
-#: lib/luks2/luks2_reencrypt.c:2866
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
 msgstr "Parámetros de resiliencia de recifrado no válidos."
 
-#: lib/luks2/luks2_reencrypt.c:2888
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "Segmento movido demasiado grande. Tamaño solicitado %<PRIu64>, espacio disponible para: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2977
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "No se ha podido limpiar la tabla."
 
-#: lib/luks2/luks2_reencrypt.c:3063
+#: lib/luks2/luks2_reencrypt.c:3064
 #, c-format
 msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
 msgstr "El desplazamiento de datos (%<PRIu64> sectores) es menor que el desplazamiento de datos futuros (%<PRIu64> sectores)."
 
-#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
 msgstr "El tamaño de los datos reducidos es mayor que el tamaño del dispositivo real."
 
-#: lib/luks2/luks2_reencrypt.c:3095
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "El dispositivo de datos no está alineado con el tamaño del sector de cifrado (%<PRIu32> bytes)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3640
-#: lib/luks2/luks2_reencrypt.c:3661
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "No se ha podido abrir %s en modo exclusivo (ya está asignado o montado)."
 
-#: lib/luks2/luks2_reencrypt.c:3332
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "El dispositivo no está marcado para recifrado LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4400
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "No se ha podido cargar el contexto del recifrado LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:3441 lib/luks2/luks2_reencrypt.c:3781
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
 msgstr "El dispositivo no está en recifrado."
 
-#: lib/luks2/luks2_reencrypt.c:3448 lib/luks2/luks2_reencrypt.c:3788
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
 msgstr "El proceso de recifrado ya está en marcha."
 
-#: lib/luks2/luks2_reencrypt.c:3450 lib/luks2/luks2_reencrypt.c:3790
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
 msgstr "No se ha podido adquirir el bloqueo de recifrado."
 
-#: lib/luks2/luks2_reencrypt.c:3468
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "No se puede proceder con el recifrado. Ejecute primero la recuperación de recifrado."
 
-#: lib/luks2/luks2_reencrypt.c:3604
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
 msgstr "El tamaño del dispositivo activo y el tamaño de recifrado solicitado no coinciden."
 
-#: lib/luks2/luks2_reencrypt.c:3618
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "El tamaño de dispositivo solicitado en los parámetros de recifrado no es válido."
 
-#: lib/luks2/luks2_reencrypt.c:3720
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Recifrado en proceso. No se puede llevar a cabo una recuperación."
 
-#: lib/luks2/luks2_reencrypt.c:3741
+#: lib/luks2/luks2_reencrypt.c:3745
 msgid "LUKS2 reencryption recovery failed."
 msgstr "La recuperación del recifrado LUKS2 ha fallado."
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:4353
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
 msgid "Failed to initialize reencryption device stack."
 msgstr "No se ha podido inicializar la pila del dispositivo de recifrado."
 
-#: lib/luks2/luks2_reencrypt.c:3907
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "Recifrado LUKS2 ya inicializado en los metadatos."
 
-#: lib/luks2/luks2_reencrypt.c:3915
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "No se ha podido inicializar el recifrado LUKS2 en los metadatos."
 
-#: lib/luks2/luks2_reencrypt.c:3968 lib/luks2/luks2_reencrypt.c:4000
-#: lib/luks2/luks2_reencrypt.c:4030
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "El recifrado no está disponible para dispositivo DAX (memoria persistente)."
 
-#: lib/luks2/luks2_reencrypt.c:4059
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "No se han podido establecer los segmentos del dispositivo para la siguiente zona activa de recifrado."
 
-#: lib/luks2/luks2_reencrypt.c:4112
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
 msgstr "No se han podido escribir los metadatos de resiliencia de recifrado."
 
-#: lib/luks2/luks2_reencrypt.c:4119
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "El descifrado ha fallado."
 
-#: lib/luks2/luks2_reencrypt.c:4124
+#: lib/luks2/luks2_reencrypt.c:4128
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "No se ha podido escribir la zona activa que comienza en %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4129
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
 msgstr "No se han podido sincronizar los datos."
 
-#: lib/luks2/luks2_reencrypt.c:4137
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "No se han podido actualizar los metadatos tras completar la zona activa de recifrado actual."
 
-#: lib/luks2/luks2_reencrypt.c:4226
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
 msgstr "No se han podido escribir los metadatos de LUKS2."
 
-#: lib/luks2/luks2_reencrypt.c:4249
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
 msgstr "No se ha podido limpiar el área no utilizada del dispositivo de datos."
 
-#: lib/luks2/luks2_reencrypt.c:4255
+#: lib/luks2/luks2_reencrypt.c:4259
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "No se ha logrado borrar la ranura de claves (independiente) %d no utilizada."
 
-#: lib/luks2/luks2_reencrypt.c:4265
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
 msgstr "No se ha podido borrar la ranura de claves de recifrado."
 
-#: lib/luks2/luks2_reencrypt.c:4275
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Error fatal mientras se recifraba una porción que comienza en %<PRIu64>, de %<PRIu64> sectores de longitud."
 
-#: lib/luks2/luks2_reencrypt.c:4279
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
 msgstr "El recifrado «online» ha fallado."
 
 # No sé cómo traducir 'error target'.
-#: lib/luks2/luks2_reencrypt.c:4284
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "No reanudar el dispositivo a menos que se reemplace con «error target» manualmente."
 
-#: lib/luks2/luks2_reencrypt.c:4336
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "No se puede proceder con el recifrado. Estado de recifrado inesperado."
 
-#: lib/luks2/luks2_reencrypt.c:4342
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
 msgstr "Contexto de recifrado ausente o no válido."
 
-#: lib/luks2/luks2_reencrypt.c:4376 lib/luks2/luks2_reencrypt.c:4413
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
 msgstr "No se ha podido actualizar el contexto de recifrado."
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "Los metadatos de recifrado no son válidos."
 
@@ -2217,8 +2208,8 @@ msgstr "Los parámetros de cifrado de ranura de claves solo pueden configurarse
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Los parámetros de cifrado de ranura de claves no son compatibles con cifrado de ranura de claves LUKS2."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1547
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "No se ha detectado ningún patrón conocido de especificación de cifrado."
@@ -2245,8 +2236,8 @@ msgstr "ATENCIÓN: No se va a hacer caso del parámetro --hash en modo sin cifra
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "ATENCIÓN: No se va a hacer caso de la opción --keyfile-size; el tamaño de lectura es igual al tamaño de la clave de cifrado.\n"
 
-#: src/cryptsetup.c:226 src/cryptsetup.c:1377 src/cryptsetup.c:1600
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "La exploración de Blkid ha fallado para %s."
@@ -2256,11 +2247,11 @@ msgstr "La exploración de Blkid ha fallado para %s."
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "Se ha(n) detectado firma(s) de dispositivo en %s. Si se prosigue, pueden dañarse los datos existentes."
 
-#: src/cryptsetup.c:238 src/cryptsetup.c:1263 src/cryptsetup.c:1311
-#: src/cryptsetup.c:1384 src/cryptsetup.c:1524 src/cryptsetup.c:1612
-#: src/cryptsetup.c:2497 src/cryptsetup.c:2926 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "Operación abortada.\n"
 
@@ -2268,36 +2259,36 @@ msgstr "Operación abortada.\n"
 msgid "Option --key-file is required."
 msgstr "Es necesaria la opción --key-file."
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "Introduzca PIM de VeraCrypt: "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "Valor de PIM no válido: error de análisis."
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "Valor de PIM no válido: 0."
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "Valor de PIM no válido: fuera de rango."
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "No se ha detectado ninguna cabecera de dispositivo con esa frase contraseña."
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "El dispositivo %s no es un dispositivo BITLK válido."
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "No se puede determinar el tamaño de la clave del volumen para BITLK; utilice la opción --key-size."
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2307,7 +2298,7 @@ msgstr ""
 "sensible que permite el acceso a una partición cifrada sin frase contraseña.\n"
 "Este volcado debería almacenarse siempre cifrado en un lugar seguro."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2522
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2317,56 +2308,56 @@ msgstr ""
 "sensible que permite el acceso a una partición cifrada sin frase contraseña.\n"
 "Este volcado debería almacenarse cifrado en un lugar seguro."
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "El dispositivo %s no es un dispositivo FVAULT2 válido."
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "No se puede determinar el tamaño de la clave del volumen para FVAULT2; utilice la opción --key-size."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:410
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "El dispositivo %s todavía está activo y programado para borrado diferido.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1810 src/cryptsetup.c:2084
-#: src/cryptsetup.c:2231 src/cryptsetup.c:2650 src/cryptsetup.c:2731
-#: src/cryptsetup.c:3264
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "No se ha podido establecer la ruta de «tokens» externa %s."
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "El cambio de tamaño del dispositivo activo requiere clave de volumen en el llavero pero la opción --disable-keyring está puesta."
 
-#: src/cryptsetup.c:1059
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "Comparativa interrumpida."
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     N/A\n"
 
-#: src/cryptsetup.c:1082
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u iteraciones por segundo para clave de %zu bits\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s N/A\n"
 
-#: src/cryptsetup.c:1098
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u iteraciones, %5u memora, %1u hilos paralelos (CPUs) para clave de %zu bits (tiempo solicitado %u ms)\n"
 
-#: src/cryptsetup.c:1122
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "El resultado de la comparativa no es fiable."
 
@@ -2386,15 +2377,19 @@ msgid "Cipher %s (with %i bits key) is not available."
 msgstr "El algoritmo de cifrado %s (con clave de %i bits) no está disponible."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Algoritmo |     Clave |         Cifrado |      Descifrado\n"
 
-#: src/cryptsetup.c:1235
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "/N/A"
 
-#: src/cryptsetup.c:1260
+#: src/cryptsetup.c:1242
+msgid "# Cipher speed test is not available.\n"
+msgstr "# La prueba de velocidad de cifrado no está disponible.\n"
+
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
@@ -2402,27 +2397,27 @@ msgstr ""
 "Se han detectado metadatos de recifrado LUKS2 no protegidos. Verifique que la operación de recifrado es deseable (consulte\n"
 "la salida de luksDump) y continúe (actualización de los metadatos) únicamente si reconoce la operación como auténtica."
 
-#: src/cryptsetup.c:1266
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
 msgstr "Introduzca la frase contraseña para proteger y actualizar los metadatos del recifrado: "
 
-#: src/cryptsetup.c:1310
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr "¿Está seguro de proceder con la recuperación del recifrado LUKS2?"
 
-#: src/cryptsetup.c:1319
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
 msgstr "Introduzca la frase contraseña para verificar el resumen de los metadatos del recifrado: "
 
-#: src/cryptsetup.c:1321
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
 msgstr "Introduzca la frase contraseña para la recuperación del recifrado: "
 
-#: src/cryptsetup.c:1383
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "¿Está seguro de que quiere intentar reparar la cabecera del dispositivo LUKS?"
 
-#: src/cryptsetup.c:1411 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2430,7 +2425,7 @@ msgstr ""
 "\n"
 "Limpieza interrumpida."
 
-#: src/cryptsetup.c:1416 src/integritysetup.c:81 src/integritysetup.c:283
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2438,167 +2433,167 @@ msgstr ""
 "Limpieza de dispositivo para inicializar la suma de comprobación de integridad.\n"
 "Puede interrumpirse pulsando CTRL+c (el resto de dispositivo no limpiado contendrá sumas de comprobación no válidas.\n"
 
-#: src/cryptsetup.c:1438 src/integritysetup.c:103
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
 #, c-format
 msgid "Cannot deactivate temporary device %s."
 msgstr "No se puede desactivar el dispositivo temporal %s."
 
-#: src/cryptsetup.c:1486
+#: src/cryptsetup.c:1484
 msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
 msgstr "El cifrado solo hw OPAL no dispone de --cipher ni --key-size; se descartarán estas opciones"
 
-#: src/cryptsetup.c:1499
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
 msgstr "La opción de integridad solo puede utilizarse para formato LUKS2."
 
-#: src/cryptsetup.c:1504 src/cryptsetup.c:1584
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
 msgstr "Opciones de tamaño de metadatos LUKS2 no admitidas."
 
-#: src/cryptsetup.c:1509
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
 msgstr "OPAL solo está disponible para formato LUKS2."
 
-#: src/cryptsetup.c:1514
+#: src/cryptsetup.c:1512
 msgid "Inline hw tags are supported only for LUKS2 format."
 msgstr "Las etiquetas hw en línea solo están disponibles para formato LUKS2."
 
-#: src/cryptsetup.c:1523
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "No existe el fichero de cabecera; ¿desea crearlo?"
 
-#: src/cryptsetup.c:1531
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "No se puede crear el fichero de cabecera %s."
 
-#: src/cryptsetup.c:1557 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:322 src/integritysetup.c:330
-#: src/integritysetup.c:340
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "No se ha detectado ningún patrón conocido de especificación de integridad."
 
-#: src/cryptsetup.c:1559
+#: src/cryptsetup.c:1557
 msgid "Cannot use specified integrity key size."
 msgstr "No se puede utilizar el tamaño de clave de integridad especificado."
 
-#: src/cryptsetup.c:1577
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "No se puede utilizar %s como cabecera en disco."
 
-#: src/cryptsetup.c:1606 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Esto sobreescribirá los datos en %s de forma irrevocable."
 
-#: src/cryptsetup.c:1643
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
 msgstr "La contraseña de administrador de OPAL no puede estar vacía."
 
-#: src/cryptsetup.c:1657 src/cryptsetup.c:2101 src/cryptsetup.c:2244
-#: src/cryptsetup.c:2379 src/cryptsetup.c:2445 src/utils_reencrypt_luks1.c:428
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "No se han podido establecer los parámetros pbkdf."
 
-#: src/cryptsetup.c:1788
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr "La posición de datos reducida está permitida solamente para cabecera LUKS separada."
 
-#: src/cryptsetup.c:1795
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "El contenedor de ficheros LUKS %s is demasiado pequeño para activarlo; no queda espacio para los datos."
 
-#: src/cryptsetup.c:1837 src/cryptsetup.c:2250 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "No se puede determinar el tamaño de la clave del volumen para LUKS2 sin ranuras de claves; utilice la opción --key-size."
 
-#: src/cryptsetup.c:1856 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "El dispositivo requiere dos claves de volumen."
 
-#: src/cryptsetup.c:1891
+#: src/cryptsetup.c:1889
 msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
 msgstr "Algunos parámetros de activación especificados se han descartado con el cifrado solo hw OPAL."
 
-#: src/cryptsetup.c:1896
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
 msgstr "Dispositivo activado pero los indicadores no pueden hacerse persistentes."
 
-#: src/cryptsetup.c:1976 src/cryptsetup.c:2044
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
 #, c-format
 msgid "Keyslot %d is selected for deletion."
 msgstr "La ranura de claves %d se va a borrar."
 
-#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "Esta es la última ranura de claves. El dispositivo quedará inutilizado después de purgar esta clave."
 
-#: src/cryptsetup.c:1989
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "Introduzca cualquier frase contraseña que quede: "
 
-#: src/cryptsetup.c:1990 src/cryptsetup.c:2050
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "Operación abortada; la ranura de claves NO estaba limpia.\n"
 
-#: src/cryptsetup.c:2026
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "Introduzca la frase contraseña que hay que borrar: "
 
-#: src/cryptsetup.c:2076 src/cryptsetup.c:2428 src/cryptsetup.c:3088
-#: src/cryptsetup.c:3255
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "El dispositivo %s no es un dispositivo LUKS2 válido."
 
-#: src/cryptsetup.c:2115 src/cryptsetup.c:2314
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "Introduzca una nueva frase contraseña para la ranura de claves: "
 
-#: src/cryptsetup.c:2149 src/utils_luks.c:342
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
 #, c-format
 msgid "Enter token PIN: "
 msgstr "Introduzca el PIN del «token»: "
 
-#: src/cryptsetup.c:2151 src/utils_luks.c:344
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
 #, c-format
 msgid "Enter token %d PIN: "
 msgstr "Introduzca el PIN del «token» %d: "
 
-#: src/cryptsetup.c:2210
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
 msgstr "ATENCIÓN: Se utiliza el parámetro --key-slot para el número de una ranura de claves nueva.\n"
 
-#: src/cryptsetup.c:2287 src/utils_reencrypt_luks1.c:1094
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "Introduzca cualquier frase contraseña que exista: "
 
-#: src/cryptsetup.c:2383
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "Introduzca la frase contraseña que hay que cambiar: "
 
-#: src/cryptsetup.c:2399 src/utils_reencrypt_luks1.c:1080
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "Introduzca una nueva frase contraseña: "
 
-#: src/cryptsetup.c:2449
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
 msgstr "Introduzca la frase contraseña para la ranura de claves que se va a convertir: "
 
-#: src/cryptsetup.c:2473
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
 msgstr "La operación isLuks solo admite un argumento de dispositivo."
 
-#: src/cryptsetup.c:2578
+#: src/cryptsetup.c:2576
 #, c-format
 msgid "Keyslot %d does not contain unbound key."
 msgstr "La ranura de claves %d no contiene clave independiente."
 
-#: src/cryptsetup.c:2583
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
@@ -2606,52 +2601,52 @@ msgstr ""
 "El volcado de la cabecera con clave independiente del volumen es información\n"
 "sensible. Este volcado debería almacenarse cifrado en un lugar seguro."
 
-#: src/cryptsetup.c:2678 src/cryptsetup.c:2714
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "%s no es un nombre de dispositivo %s activo."
 
-#: src/cryptsetup.c:2709
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "%s no es un nombre de dispositivo LUKS activo o falta la cabecera."
 
-#: src/cryptsetup.c:2786 src/cryptsetup.c:2805
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "Es necesaria la opción --header-backup-file."
 
-#: src/cryptsetup.c:2836
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "%s no es un dispositivo gestionable por cryptsetup."
 
-#: src/cryptsetup.c:2847
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "El refresco no está disponible para el tipo de dispositivo %s"
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Tipo de dispositivo de metadatos %s no reconocido."
 
-#: src/cryptsetup.c:2899
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "Esta orden necesita como argumentos el dispositivo y el nombre asociado."
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "Introduzca el PSID de OPAL: "
 
-#: src/cryptsetup.c:2917
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "Introduzca la contraseña de administrador de OPAL: "
 
-#: src/cryptsetup.c:2925
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "ATENCIÓN: ¡El disco ENTERO será restituido a la configuración de fábrica y todos los datos se perderán! ¿Continuar?"
 
-#: src/cryptsetup.c:2968
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2660,363 +2655,363 @@ msgstr ""
 "Esta operación borrará todas las ranuras de claves en el dispositivo %s.\n"
 "El dispositivo quedará inutilizable después de esta operación."
 
-#: src/cryptsetup.c:2975
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Operación abortada; las ranuras de claves NO estaban limpias.\n"
 
-#: src/cryptsetup.c:3014
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Tipo LUKS no válido; solo se admiten luks1 y luks2."
 
-#: src/cryptsetup.c:3030
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "El dispositivo ya es de tipo %s."
 
-#: src/cryptsetup.c:3037
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Esta operación convertirá el formato %s a %s.\n"
 
-#: src/cryptsetup.c:3040
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Operación abortada; el dispositivo NO estaba convertido.\n"
 
-#: src/cryptsetup.c:3080
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Falta la opción --priority, --label o --subsystem."
 
-#: src/cryptsetup.c:3114 src/cryptsetup.c:3154 src/cryptsetup.c:3174
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "El «token» %d no es válido."
 
-#: src/cryptsetup.c:3117 src/cryptsetup.c:3177
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "El «token» %d está en uso."
 
-#: src/cryptsetup.c:3129
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "No se ha podido añadir el «token» %d al llavero luks."
 
-#: src/cryptsetup.c:3140 src/cryptsetup.c:3203
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "No se ha logrado asignar el «token» %d a la ranura de claves %d."
 
-#: src/cryptsetup.c:3157
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "El «token» %d no está en uso."
 
-#: src/cryptsetup.c:3194
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "No se ha podido importar el «token» del fichero."
 
-#: src/cryptsetup.c:3219
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "No se ha logrado obtener el «token» %d para exportar."
 
-#: src/cryptsetup.c:3232
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "El «token» %d no se ha asignado a la ranura de claves %d."
 
-#: src/cryptsetup.c:3234 src/cryptsetup.c:3241
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "No se ha logrado desasignar el «token» %d de la ranura de claves %d."
 
-#: src/cryptsetup.c:3300
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "La opción --tcrypt-hidden o --tcrypt-system o --tcrypt-backup solo está disponible para dispositivos TCRYPT."
 
-#: src/cryptsetup.c:3303
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Las opciones --veracrypt y --disable-veracrypt solo están disponibles para dispositivos de tipo TCRYPT."
 
-#: src/cryptsetup.c:3306
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "La opción --veracrypt-pim solo está disponible para dispositivos compatibles con VeraCrypt."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "La opción --veracrypt-query-pim  solo está disponible para dispositivos compatibles con VeraCrypt."
 
-#: src/cryptsetup.c:3312
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Las opciones --veracrypt-pim y --veracrypt-query-pim son mutuamente excluyentes."
 
-#: src/cryptsetup.c:3321
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "La opción --persistent no se permite con --test-passphrase."
 
-#: src/cryptsetup.c:3324
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Las opciones --refresh y --test-passphrase son mutuamente excluyentes."
 
-#: src/cryptsetup.c:3327
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "La opción --shared solo se permite para abrir dispositivos no cifrados."
 
-#: src/cryptsetup.c:3330
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "La opción --skip solo está disponible para abrir dispositivos no cifrados y «loopaes»."
 
-#: src/cryptsetup.c:3333
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "La opción --offset con acción de apertura solo está disponible para abrir dispositivos no cifrados y «loopaes»."
 
-#: src/cryptsetup.c:3336
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "La opción --tcrypt-hidden no puede combinarse con --allow-discards."
 
-#: src/cryptsetup.c:3340
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "La opción de tamaño de sector con acción de apertura solamente está disponible para dispositivos no cifrados."
 
-#: src/cryptsetup.c:3344
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "La opción de sectores IV grandes solo se admite para abrir dispositivo de tipo plano con tamaño de sector mayor de 512 bytes."
 
-#: src/cryptsetup.c:3349
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "La opción --test-passphrase solo se permite para abrir dispositivos LUKS, TCRYPT, BITLK y FVAULT2."
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3382
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Las opciones --device-size y --size no pueden combinarse."
 
-#: src/cryptsetup.c:3355
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "La opción --unbound solo se permite para abrir dispositivos luks."
 
-#: src/cryptsetup.c:3358
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "La opción --unbound no se puede utilizar sin --test-passphrase."
 
-#: src/cryptsetup.c:3362
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "La opción --volume-key-keyring no puede combinarse con --hash ni --volume-key-file."
 
-#: src/cryptsetup.c:3365
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Todas las opciones --volume-key-file tienen que emparejarse con las respectivas opciones --key-size."
 
-#: src/cryptsetup.c:3374 src/veritysetup.c:673 src/integritysetup.c:784
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Las opciones --cancel-deferred y --deferred no pueden utilizarse a la vez."
 
-#: src/cryptsetup.c:3390
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "La opción --active-name solo puede utilizarse para dispositivos LUKS2."
 
-#: src/cryptsetup.c:3393
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Las opciones --active-name y --force-offline-reencrypt no pueden combinarse."
 
-#: src/cryptsetup.c:3396
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Las opciones --new-volume-key-file y --keep-key no pueden combinarse."
 
-#: src/cryptsetup.c:3399
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Las opciones -volume-key-keyring y --keep-key no pueden combinarse."
 
-#: src/cryptsetup.c:3407 src/cryptsetup.c:3437
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "Se requiere especificación de ranura de claves."
 
-#: src/cryptsetup.c:3415
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Las opciones --align-payload y --offset no pueden combinarse."
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "La opción --integrity-no-wipe solo puede usarse para la acción de formato con extensión de integridad."
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Solo se permite una de las opciones --use-[u]random."
 
-#: src/cryptsetup.c:3429
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "El tamaño de la clave es requerido con la opción --unbound."
 
-#: src/cryptsetup.c:3449
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "Acción de «token» no válida."
 
-#: src/cryptsetup.c:3452
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "El parámetro --key-description es obligatorio para la acción de añadir «token»."
 
-#: src/cryptsetup.c:3456 src/cryptsetup.c:3469
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "La acción requiere un «token» específico. Utilice el parámetro --token-id."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "La opción --unbound solo es válida con la acción de añadir «token»."
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Las opciones --key-slot y --unbound no pueden combinarse."
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "La acción requiere una ranura de claves específica. Utilice el parámetro --key-slot."
 
-#: src/cryptsetup.c:3483
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<dispositivo> [--type <tipo> [<nombre>]"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:487 src/integritysetup.c:551
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "abrir el dispositivo como <nombre>"
 
-#: src/cryptsetup.c:3484 src/cryptsetup.c:3485 src/cryptsetup.c:3486
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:552
-#: src/integritysetup.c:553 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<nombre>"
 
-#: src/cryptsetup.c:3484 src/veritysetup.c:488 src/integritysetup.c:552
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "cerrar dispositivo (eliminar asociación)"
 
-#: src/cryptsetup.c:3485 src/integritysetup.c:555
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "cambiar el tamaño del dispositivo activo"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "mostrar el estado del dispositivo"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cypher <algoritmo_de_cifrador>]"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "algoritmo de cifrado para pruebas"
 
-#: src/cryptsetup.c:3488 src/cryptsetup.c:3489 src/cryptsetup.c:3490
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492 src/cryptsetup.c:3499
-#: src/cryptsetup.c:3500 src/cryptsetup.c:3501 src/cryptsetup.c:3502
-#: src/cryptsetup.c:3503 src/cryptsetup.c:3504 src/cryptsetup.c:3505
-#: src/cryptsetup.c:3506 src/cryptsetup.c:3507 src/cryptsetup.c:3508
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<dispositivo>"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "intentar reparar metadatos en disco"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "recifrar dispositivo LUKS2"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "borrar todas las ranuras de claves (eliminar clave de cifrado)"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "convertir formato LUKS de/en LUKS2"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "establecer opciones de configuración permanentes para LUKS2"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<dispositivo> [<nuevo fichero de claves>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "da formato a un dispositivo LUKS"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "añadir clave a un dispositivo LUKS"
 
-#: src/cryptsetup.c:3495 src/cryptsetup.c:3496 src/cryptsetup.c:3497
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<dispositivo> [<fichero de claves>]"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "elimina la clave suministrada o el fichero de claves del dispositivo LUKS"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "cambia la clave suministrada o el fichero de claves del dispositivo LUKS"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "convierte una clave a los nuevos parámetros pbkdf"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<dispositivo> <ranura de claves>"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "borra la clave con el número <ranura de clave> del dispositivo LUKS"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "imprimir el UUID del dispositivo LUKS"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "comprueba si <dispositivo> tiene cabecera de partición LUKS"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "volcar información sobre la partición LUKS"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "volcar información sobre el dispositivo TCRYPT"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "volcar información sobre el dispositivo BITLK"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "volcar información sobre el dispositivo FVAULT2"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Suspender el dispositivo LUKS y limpiar la clave (todas las entradas/salidas congeladas)."
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "Reanudar el dispositivo LUKS suspendido."
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "Hacer copia de seguridad de la cabecera y de las ranuras de claves del dispositivo LUKS"
 
-#: src/cryptsetup.c:3508
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "Restaurar la cabecera y las ranuras de claves del dispositivo LUKS"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<añade|elimina|importa|exporta> <dispositivo>"
 
-#: src/cryptsetup.c:3509
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipular «tokens» LUKS2"
 
-#: src/cryptsetup.c:3528 src/veritysetup.c:505 src/integritysetup.c:570
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3024,7 +3019,7 @@ msgstr ""
 "\n"
 "<acción> es una de:\n"
 
-#: src/cryptsetup.c:3534
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -3036,7 +3031,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3538
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -3051,7 +3046,7 @@ msgstr ""
 "<ranura de claves> es el número de la ranura de claves que se va a modificar\n"
 "<fichero de claves> fichero de claves opcional para la nueva clave para la acción 'luksAddKey'\n"
 
-#: src/cryptsetup.c:3545
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -3060,7 +3055,7 @@ msgstr ""
 "\n"
 "El formato de metadatos predefinido de fábrica es %s (para la acción luksFormat).\n"
 
-#: src/cryptsetup.c:3550
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -3068,12 +3063,12 @@ msgstr ""
 "\n"
 "El soporte del «plugin» del «token» externo LUKS2 está activado.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "ruta del «plugin» del «token» externo LUKS2: %s.\n"
 
-#: src/cryptsetup.c:3553
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3081,7 +3076,7 @@ msgstr ""
 "\n"
 "El soporte del «plugin» del «token» externo LUKS2 está desactivado.\n"
 
-#: src/cryptsetup.c:3557
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3098,7 +3093,7 @@ msgstr ""
 "PBKDF predefinido para LUKS2: %s\n"
 "\tTiempo de iteración: %d, Memoria requerida: %dkB, hilos en paralelo: %d\n"
 
-#: src/cryptsetup.c:3568
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3113,122 +3108,126 @@ msgstr ""
 "\tsin cifrado: %s, Clave: %d bits, Contraseña «hashing»: %s\n"
 "\tLUKS: %s, Clave: %d bits, «hashing» de la cabecera LUKS: %s, Generador de números aleatorios: %s\n"
 
-#: src/cryptsetup.c:3577
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: El tamaño de clave predefinido con modo XTS (dos claves internas) va a ser duplicado.\n"
 
-#: src/cryptsetup.c:3595 src/veritysetup.c:647 src/integritysetup.c:730
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: necesita %s como argumentos"
 
-#: src/cryptsetup.c:3635 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "La ranura de claves no es válida."
 
-#: src/cryptsetup.c:3663
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "El tamaño del dispositivo debe ser múltiplo de sectores de 512 bytes."
 
-#: src/cryptsetup.c:3668
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "La especificación del tamaño máximo de zona activa del dispositivo no es válida."
 
-#: src/cryptsetup.c:3682 src/cryptsetup.c:3699 src/cryptsetup.c:3711
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "El tamaño de clave debe ser un múltiplo de 8 bits"
 
-#: src/cryptsetup.c:3689
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Como mucho pueden suministrarse 2 especificaciones de tamaño de clave."
 
-#: src/cryptsetup.c:3718 src/cryptsetup.c:3729
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Como mucho pueden suministrarse %d especificaciones de claves de volumen."
 
-#: src/cryptsetup.c:3741
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Como mucho pueden suministrarse %d especificaciones de vínculos de llavero."
 
-#: src/cryptsetup.c:3750
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "El tamaño máximo de reducción del dispositivo es de 1 GiB."
 
-#: src/cryptsetup.c:3753
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "El tamaño de reducción debe ser múltiplo de sectores de 512 bytes."
 
-#: src/cryptsetup.c:3770
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "La opción --priority solo puede ser ignore/normal/prefer."
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:568 src/integritysetup.c:650
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "La especificación de máximos intentos no es válida."
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "Mostrar este mensaje de ayuda"
 
-#: src/cryptsetup.c:3790 src/veritysetup.c:569 src/integritysetup.c:651
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "Mostrar brevemente cómo se usa"
 
-#: src/cryptsetup.c:3791 src/veritysetup.c:570 src/integritysetup.c:652
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "Imprimir versión del paquete"
 
-#: src/cryptsetup.c:3802 src/veritysetup.c:581 src/integritysetup.c:663
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "Opciones de ayuda:"
 
-#: src/cryptsetup.c:3825 src/veritysetup.c:602 src/integritysetup.c:683
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPCIÓN...] <acción> <acción-específica>"
 
-#: src/cryptsetup.c:3834 src/veritysetup.c:611 src/integritysetup.c:694
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "El argumento <acción> no se ha proporcionado."
 
-#: src/cryptsetup.c:3913 src/veritysetup.c:642 src/integritysetup.c:725
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "Acción desconocida."
 
-#: src/cryptsetup.c:3931
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "La opción --key-file tiene precedencia sobre el argumento de fichero de claves especificado."
 
-#: src/cryptsetup.c:3937
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "Solo se permite un argumento --key-file."
 
-#: src/cryptsetup.c:3942
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "La función de derivación de clave basada en contraseña (PBKDF) solo puede ser pbkdf2 o argon2i/argon2id."
 
-#: src/cryptsetup.c:3947
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "Las iteraciones forzadas de PBKDF no pueden combinarse con la opción de tiempo de iteración."
 
-#: src/cryptsetup.c:3952
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "No se puede vincular la clave del volumen a un llavero cuando el llavero está desactivado."
 
-#: src/cryptsetup.c:3957
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "No se puede utilizar descripción de clave de llavero cuando el llavero está desactivado."
 
-#: src/cryptsetup.c:3962
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "La integridad en línea tiene que utilizarse conjuntamente con la opción --integrity."
 
-#: src/cryptsetup.c:3973
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Las opciones --keyslot-cipher y --keyslot-key-size deben utilizarse juntas."
 
-#: src/cryptsetup.c:3981
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "No se ha realizado ninguna acción. Invocado con la opción --test-args.\n"
 
-#: src/cryptsetup.c:3994
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "No se puede desactivar el bloqueo de metadatos."
 
@@ -3293,7 +3292,7 @@ msgstr "Esta orden necesita <«hash»_raíz> o la opción --root-hash-file como
 msgid "<data_device> <hash_device>"
 msgstr "<dispositivo_de_datos> <dispositivo_«hash»>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:550
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "dar formato al dispositivo"
 
@@ -3309,7 +3308,7 @@ msgstr "verificar dispositivo"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<dispositivo_de_datos> <nombre> <dispositivo_«hash»> [<«hash»_raíz>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:553
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "mostrar el estado del dispositivo activo"
 
@@ -3317,7 +3316,7 @@ msgstr "mostrar el estado del dispositivo activo"
 msgid "<hash_device>"
 msgstr "<dispositivo_«hash»>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:554
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "mostrar información sobre el disco"
 
@@ -3359,7 +3358,7 @@ msgstr "Las opciones --panic-on-corruption y --restart-on-corruption no pueden u
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "La opción error-as-corruption tiene que utilizarse con --panic-on-corruption o --restart-on-corruption."
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3368,33 +3367,33 @@ msgstr ""
 "Esto sobreescribirá los datos en %s y %s irrevocablemente.\n"
 "Para preservar el dispositivo de datos utilice la opción --no-wipe (y luego actívelo con --integrity-recalculate)."
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "Formato dado con tamaño de etiqueta %u%s, integridad interna %s.\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (etiquetas hw en línea)"
 
-#: src/integritysetup.c:297
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "No se puede poner la opción de recalcular; valore la alternativa de utilizar --wipe."
 
-#: src/integritysetup.c:374 src/integritysetup.c:537
+#: src/integritysetup.c:382 src/integritysetup.c:546
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "El dispositivo %s no es un dispositivo INTEGRITY válido."
 
-#: src/integritysetup.c:550 src/integritysetup.c:554
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
 msgstr "<dispositivo_de_integridad>"
 
-#: src/integritysetup.c:551
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
 msgstr "<dispositivo_de_integridad> <nombre>"
 
-#: src/integritysetup.c:574
+#: src/integritysetup.c:583
 #, c-format
 msgid ""
 "\n"
@@ -3405,7 +3404,7 @@ msgstr ""
 "<nombre> es el dispositivo que se va a crear bajo %s\n"
 "<dispositivo_de_integridad> es el dispositivo que contiene datos con etiquetas de integridad\n"
 
-#: src/integritysetup.c:579
+#: src/integritysetup.c:588
 #, c-format
 msgid ""
 "\n"
@@ -3418,48 +3417,48 @@ msgstr ""
 "\tAlgoritmo de la suma de comprobación: %s\n"
 "\tTamaño máximo del fichero de claves: %dkB\n"
 
-#: src/integritysetup.c:636
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Tamaño de --%s no válido. El máximo es %u bytes."
 
-#: src/integritysetup.c:739
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "Deben especificarse las opciones tanto de fichero de claves como tamaño de clave."
 
-#: src/integritysetup.c:743
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Deben especificarse la opción del fichero de clave de integridad del diario y la del tamaño de la clave."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Debe especificarse el algoritmo de integridad del diario si va a utilizarse la clave de integridad del diario."
 
-#: src/integritysetup.c:750
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Deben especificarse la opción del fichero de la clave de cifrado del diario y la del tamaño de la clave."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Debe especificarse el algoritmo de cifrado del diario si va a utilizarse la clave de cifrado del diario."
 
-#: src/integritysetup.c:757
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Las opciones de recuperación y de modo mapa de bits son mutuamente excluyentes."
 
-#: src/integritysetup.c:764
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Las opciones de diario no pueden utilizarse en modo mapa de bits."
 
-#: src/integritysetup.c:769
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Las opciones de mapa de bits solo pueden utilizarse en el modo mapa de bits."
 
-#: src/integritysetup.c:775
+#: src/integritysetup.c:784
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "El modo en línea no puede combinarse con las opciones de diario ni de bitmap."
 
-#: src/integritysetup.c:779
+#: src/integritysetup.c:788
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "El modo en línea no puede combinarse con un dispositivo de datos independiente."
 
@@ -3814,32 +3813,32 @@ msgstr "El dispositivo no está en descifrado LUKS2. Opción conflictiva --decry
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "El dispositivo está en recifrado utilizando resiliencia ante desplazamiento de datos. No se puede aplicar la opción -resilience solicitada."
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "No se puede determinar el tamaño de la clave del volumen para LUKS sin ranuras de claves; utilice la opción --new-key-size."
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "El dispositivo necesita recuperación del recifrado. Primero ejecute una reparación."
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "El dispositivo %s ya está en recifrado LUKS2. ¿Desea reanudar la operación iniciada anteriormente?"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "Ya no se admite el recifrado LUKS2 antiguo."
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "No se puede recifrar el dispositivo LUKS2 configurado para utilizar OPAL."
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "El recifrado de dispositivo con perfil de integridad no está admitido."
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3848,110 +3847,110 @@ msgstr ""
 "La solicitud --sector-size %<PRIu32> es incompatible con el superbloque %s\n"
 "(tamaño de bloque: %<PRIu32> «bytes») detectado en el dispositivo %s."
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "El cifrado sin cabecera separada (--header) no es posible sin reducción del tamaño del dispositivo de datos (--reduce-device-size)."
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "El desplazamiento de datos solicitado debe ser menor o igual que la mitad del parámetro --reduce-device-size."
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "Ajustando el valor de --reduce-device-size al doble de --offset %<PRIu64> (sectores).\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "El fichero de cabecera temporal %s ya existe. Se aborta."
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "No se puede crear el fichero de cabecera temporal %s."
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "El tamaño de los metadatos LUKS2 es mayor que el valor del desplazamiento de los datos."
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "No se ha podido colocar la nueva cabecera en la cabeza del dispositivo %s."
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "%s/%s ahora está activo y preparado para cifrado «online».\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "El dispositivo activo %s no es LUKS2."
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "Restaurando la cabecera LUKS2 original."
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "La restauración de la cabecera LUKS2 original ha fallado."
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "El fichero de cabecera %s no existe. ¿Dese inicializar descifrado LUKS2 del dispositivo %s y exportar la cabecera LUKS2 al fichero %s?"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "No se ha podido añadir permisos de lectura/escritura al fichero de cabecera exportado."
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "La inicialización del recifrado ha fallado. La copia de seguridad de la cabecera está disponible en %s."
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "El descifrado LUKS2 solo admite dispositivo con cabecera separada (con desplazamiento de datos puesto a 0)."
 
-#: src/utils_reencrypt.c:1487
+#: src/utils_reencrypt.c:1490
 msgid "No token could unlock the device."
 msgstr "Ningún «token» ha podido desbloquear el dispositivo."
 
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
 msgid "Not enough free keyslots for reencryption."
 msgstr "No hay suficientes ranuras de claves para el recifrado."
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1562
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "El fichero de claves o la descripción de clave del llavero solo pueden usarse con --key-slot o con una sola ranura de claves activa exactamente."
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Introduzca la frase contraseña para la ranura de claves %d: "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Cambiando el algoritmo de cifrado de datos a %s.\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Utilice --force-no-keyslots para recifrar el dispositivo con las ranuras de clave activas pasando las claves del volumen directamente."
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:1996
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "La opción --new-volume-key-file tiene que ir emparejada con --new-key-size"
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "No ha cambiado ningún parámetro del segmento de datos. Recifrado abortado."
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3959,7 +3958,7 @@ msgstr ""
 "No se admite incrementar el tamaño de sector de cifrado en dispositivo «offline».\n"
 "Primero active el dispositivo o utilice la opción --force-offline-reencrypt (¡peligroso!)"
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3968,58 +3967,58 @@ msgstr ""
 "\n"
 "Recifrado interrumpido."
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Reanudando recifrado LUKS en modo «offline» forzado.\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "El dispositivo %s contiene metadatos LUKS deteriorados. Se aborta la operación."
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "El dispositivo %s ya es un dispositivo LUKS. Se aborta la operación."
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "El dispositivo %s ya está en recifrado LUKS. Se aborta la operación."
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "El descifrado LUKS2 requiere la opción --header."
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "Esta orden necesita un dispositivo como argumento."
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Versiones en conflicto. El dispositivo %s es LUKS1."
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Versiones en conflicto. El dispositivo %s está en recifrado LUKS1."
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Versiones en conflicto. El dispositivo %s es LUKS2."
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Versiones en conflicto. El dispositivo %s está en recifrado LUKS2."
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "El recifrado LUKS2 ya está inicializado. Se aborta la operación."
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "El recifrado del dispositivo no está en proceso."
 
@@ -4417,6 +4416,16 @@ msgstr "El método de autenticación de clave pública no está permitido en el
 msgid "Public key authentication error: "
 msgstr "Error de autenticación de clave pública: "
 
+#~ msgid "Required kernel crypto interface not available."
+#~ msgstr "La interfaz de cifrado del núcleo requerida no está disponible."
+
+#~ msgid "Ensure you have algif_skcipher kernel module loaded."
+#~ msgstr "Asegúrese de que el módulo del núcleo algof_skcipher está cargado."
+
+#, c-format
+#~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
+#~ msgstr "No se ha podido leer o validar la copia de los metadatos BITLK FVE #%d desde %s."
+
 #~ msgid "Activation of BITLK device with clear key protection is not supported."
 #~ msgstr "La activación del dispositivo BITLK con protección de clave en claro no está disponible."
 
@@ -5022,9 +5031,6 @@ msgstr "Error de autenticación de clave pública: "
 #~ msgid "Options --journal-size, --interleave-sectors, --sector-size, --tag-size and --no-wipe can be used only for format action."
 #~ msgstr "Las opciones --journal-size, --interleave-sectors, --sector-size, --tag-size y --no-wipe solo pueden utilizarse para la acción de dar formato."
 
-#~ msgid "Invalid journal size specification."
-#~ msgstr "La especificación del tamaño del diario no es válida."
-
 #~ msgid "Reencryption block size"
 #~ msgstr "Tamaño de bloque de recifrado"
 

From 56ec9000e9c21482031abc9375265ee9a56cc489 Mon Sep 17 00:00:00 2001
From: Xinting Zhou <starccyz@gmail.com>
Date: Wed, 2 Sep 2026 15:06:30 +0200
Subject: [PATCH 204/244] po: update zh_CN.po (from translationproject.org)

---
 po/zh_CN.po | 2628 +++++++++++++++++++++++++++------------------------
 1 file changed, 1379 insertions(+), 1249 deletions(-)

diff --git a/po/zh_CN.po b/po/zh_CN.po
index 391a87666..4ea550bea 100644
--- a/po/zh_CN.po
+++ b/po/zh_CN.po
@@ -4,14 +4,15 @@
 # Mingcong Bai <jeffbai@aosc.xyz>, 2015.
 # Mingye Wang <arthur200126@gmail.com>, 2015.
 # Boyuan Yang <073plan@gmail.com>, 2018, 2023.
+# Xinting Zhou <starccyz@gmail.com>, 2026.
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.7.3-rc0\n"
+"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2024-06-06 22:11+0200\n"
-"PO-Revision-Date: 2024-09-21 10:41+0800\n"
-"Last-Translator: Mingye Wang (Artoria2e5) <arthur200126@gmail.com>\n"
+"POT-Creation-Date: 2026-07-09 10:46+0200\n"
+"PO-Revision-Date: 2026-08-17 17:04+0800\n"
+"Last-Translator: Xinting Zhou <starccyz@gmail.com>\n"
 "Language-Team: Chinese (simplified) <i18n-zh@googlegroups.com>\n"
 "Language: zh_CN\n"
 "MIME-Version: 1.0\n"
@@ -19,72 +20,80 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
 "X-Bugs: Report translation errors to the Language-Team address.\n"
-"X-Generator: Poedit 3.5\n"
+"X-Generator: Poedit 3.9\n"
 
-#: lib/libdevmapper.c:406
+#: lib/libdevmapper.c:419
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "无法初始化设备映射器，正作为非 root 用户运行。"
 
-#: lib/libdevmapper.c:409
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "无法初始化设备映射器。dm_mod 内核模块装载了吗？"
 
-#: lib/libdevmapper.c:1090
+#: lib/libdevmapper.c:1125
 msgid "Requested deferred flag is not supported."
 msgstr "不支持请求的推迟（deferred）标记。"
 
-#: lib/libdevmapper.c:1159
+#: lib/libdevmapper.c:1194
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "设备 %s 的 DM-UUID 被截断。"
 
-#: lib/libdevmapper.c:1497
+#: lib/libdevmapper.c:1598
 msgid "Unknown dm target type."
 msgstr "未知的 dm 目标类型。"
 
-#: lib/libdevmapper.c:1616 lib/libdevmapper.c:1622 lib/libdevmapper.c:1725
-#: lib/libdevmapper.c:1728
+#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
+#: lib/libdevmapper.c:1853
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "不支持请求的 dm-crypt 性能选项。"
 
-#: lib/libdevmapper.c:1631 lib/libdevmapper.c:1643
+#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "不支持请求的 dm-verity 数据损坏处理选项。"
 
-#: lib/libdevmapper.c:1637
+#: lib/libdevmapper.c:1752
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "不支持请求的 dm-verity FEC 选项。"
 
-#: lib/libdevmapper.c:1649
+#: lib/libdevmapper.c:1764
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "不支持请求的 dm-verity FEC 选项。"
 
-#: lib/libdevmapper.c:1655
+#: lib/libdevmapper.c:1770
 msgid "Requested data integrity options are not supported."
 msgstr "不支持请求的数据完整性选项。"
 
-#: lib/libdevmapper.c:1659
+#: lib/libdevmapper.c:1774
 msgid "Requested sector_size option is not supported."
 msgstr "不支持请求的 sector_size 选项。"
 
-#: lib/libdevmapper.c:1664
+#: lib/libdevmapper.c:1779
 msgid "The device size is not multiple of the requested sector size."
 msgstr "设备大小不是请求的扇区大小的倍数。"
 
-#: lib/libdevmapper.c:1671 lib/libdevmapper.c:1677
+#: lib/libdevmapper.c:1783
+msgid "Requested integrity_key_size option is not supported."
+msgstr "不支持请求的 integrity_key_size 选项。"
+
+#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "不支持请求的自动重新计算完整性标记。"
 
-#: lib/libdevmapper.c:1683 lib/libdevmapper.c:1731 lib/libdevmapper.c:1734
-#: lib/luks2/luks2_json_metadata.c:2741
+#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
+#: lib/luks2/luks2_json_metadata.c:2799
 msgid "Discard/TRIM is not supported."
 msgstr "不支持 Discard/TRIM。"
 
-#: lib/libdevmapper.c:1689
+#: lib/libdevmapper.c:1808
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "不支持请求的 dm-integrity 位图模式。"
 
-#: lib/libdevmapper.c:2725
+#: lib/libdevmapper.c:1814
+msgid "Requested dm-integrity inline mode is not supported."
+msgstr "不支持请求的 dm-integrity 内联模式。"
+
+#: lib/libdevmapper.c:2870
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "未能查询 dm-%s 段。"
@@ -118,748 +127,783 @@ msgstr "未知的随机数生成器质量请求。"
 msgid "Error reading from RNG."
 msgstr "从随机数生成器（RNG）读取时出错。"
 
-#: lib/setup.c:249
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "OPAL 支持在 libcryptsetup 中被禁用。"
 
-#: lib/setup.c:251
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "设备 %s 或内核不支持 OPAL 加密。"
 
-#: lib/setup.c:267
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "无法初始化加密随机数生成器后端。"
 
-#: lib/setup.c:273
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "无法初始化加密后端。"
 
-#: lib/setup.c:305 lib/setup.c:2786 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "不支持哈希算法 %s。"
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:77
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "密钥处理错误（使用散列 %s）。"
 
-#: lib/setup.c:379 lib/setup.c:416
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "无法确定设备类型。不兼容的设备激活？"
 
-#: lib/setup.c:385 lib/setup.c:3981
+#: lib/setup.c:398 lib/setup.c:4177
 msgid "This operation is supported only for LUKS device."
 msgstr "此操作只适用 LUKS 设备。"
 
-#: lib/setup.c:422
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "此操作只适用 LUKS2 设备。"
 
-#: lib/setup.c:479 lib/luks2/luks2_reencrypt.c:3058
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "密钥槽全都满了。"
 
-#: lib/setup.c:490
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "密钥槽 %d 无效，请选择 0 到 %d 间的数字。"
 
-#: lib/setup.c:496
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "密钥槽 %d 满了，请选择另一个。"
 
-#: lib/setup.c:607 lib/setup.c:3681
+#: lib/setup.c:534 lib/setup.c:3878
 msgid "Device size is not aligned to device logical block size."
 msgstr "设备的大小没有和设备逻辑块大小对齐。"
 
-#: lib/setup.c:705
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "检测到标头但设备 %s 太小。"
 
-#: lib/setup.c:746 lib/setup.c:3572 lib/setup.c:5360 lib/setup.c:5380
-#: lib/luks2/luks2_reencrypt.c:3850 lib/luks2/luks2_reencrypt.c:4307
+#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "不支持在这类设备上执行此操作。"
 
-#: lib/setup.c:751
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "正在进行重加密中的非法操作。"
 
-#: lib/setup.c:883
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "未能回滚内存中的 LUKS2 元数据。"
 
-#: lib/setup.c:970 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
-#: lib/luks2/luks2_json_metadata.c:1361 src/cryptsetup.c:1874
-#: src/cryptsetup.c:2055 src/cryptsetup.c:2110 src/cryptsetup.c:2315
-#: src/cryptsetup.c:2485 src/cryptsetup.c:2766 src/cryptsetup.c:3073
-#: src/cryptsetup.c:3141 src/utils_reencrypt.c:1485
-#: src/utils_reencrypt_luks1.c:1139 tokens/ssh/cryptsetup-ssh.c:72
+#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
+#: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "%s 不是有效的 LUKS 设备。"
 
-#: lib/setup.c:973 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:517
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "不支持的 LUKS 版本 %d。"
 
-#: lib/setup.c:1346
+#: lib/setup.c:1273
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "未在活动设备 %s 上探测到已知的加密方法标记特征。"
 
-#: lib/setup.c:1592 lib/setup.c:3326 lib/setup.c:3408 lib/setup.c:3420
-#: lib/setup.c:3590 lib/setup.c:6004
+#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
+#: lib/setup.c:3786 lib/setup.c:5850
 #, c-format
 msgid "Device %s is not active."
 msgstr "设备 %s 未激活。"
 
-#: lib/setup.c:1609
+#: lib/setup.c:1535
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "加密设备 %s 下层的设备消失了。"
 
-#: lib/setup.c:1691
+#: lib/setup.c:1617
 msgid "Invalid plain crypt parameters."
 msgstr "无效的纯加密选项。"
 
-#: lib/setup.c:1696 lib/setup.c:2689
+#: lib/setup.c:1622 lib/setup.c:2672
 msgid "Invalid key size."
 msgstr "无效的密钥大小。"
 
-#: lib/setup.c:1701 lib/setup.c:2694 lib/setup.c:2897
+#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
 msgid "UUID is not supported for this crypt type."
 msgstr "此加密类型不支持 UUID。"
 
-#: lib/setup.c:1706 lib/setup.c:2699
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "此 crypt 类型不支持分开的元数据设备。"
 
-#: lib/setup.c:1716 lib/setup.c:1957 lib/luks2/luks2_reencrypt.c:3014
-#: src/cryptsetup.c:1471 src/cryptsetup.c:3842
+#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "不支持的加密扇区大小。"
 
-#: lib/setup.c:1724 lib/setup.c:1986 lib/setup.c:3675
+#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
 msgid "Device size is not aligned to requested sector size."
 msgstr "设备的大小没有和请求的扇区大小对齐。"
 
-#: lib/setup.c:1776 lib/setup.c:2019 lib/setup.c:2365
+#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
 msgid "Can't format LUKS without device."
 msgstr "无法在没有设备的情况下格式化 LUKS。"
 
-#: lib/setup.c:1781 lib/setup.c:2024
+#: lib/setup.c:1707 lib/setup.c:1959
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "分区 zoned 设备 %s 不能用于 LUKS 标头。"
 
-#: lib/setup.c:1788 lib/setup.c:2031 lib/setup.c:2371
+#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "请求的数据对齐量与数据偏移量不兼容。"
 
-#: lib/setup.c:1828 lib/setup.c:2049
+#: lib/setup.c:1754 lib/setup.c:1984
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "警告：DAX 设备可能会损坏数据，因为它不保证原子扇区更新。\n"
 
-#: lib/setup.c:1866 lib/setup.c:2144 lib/setup.c:2165 lib/setup.c:2549
-#: lib/setup.c:2596 lib/setup.c:2909
+#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
+#: lib/setup.c:2567 lib/setup.c:2899
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "无法将设备 %s 上的标头擦除。"
 
-#: lib/setup.c:1879 lib/setup.c:2204
+#: lib/setup.c:1805 lib/setup.c:2164
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "设备%s太小而无法激活：没有剩下空间给数据。\n"
 
-#: lib/setup.c:1919
+#: lib/setup.c:1846
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "卷密钥对于带完整性校验扩展的加密而言过小。"
 
-#: lib/setup.c:1928
+#: lib/setup.c:1850
+msgid "Integrity key size is too small."
+msgstr "完整性校验密钥大小过小。"
+
+#: lib/setup.c:1859
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "加密方法 %s-%s（%zd 位密钥）不可用。"
 
-#: lib/setup.c:1967
+#: lib/setup.c:1900
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "警告：设备激活将会失败，dm-crypt 不支持请求的加密扇区大小。\n"
 
-#: lib/setup.c:2147 lib/setup.c:2492 lib/setup.c:2552 lib/utils_device.c:904
-#: lib/luks1/keyencryption.c:242 lib/luks2/luks2_reencrypt.c:3082
-#: lib/luks2/luks2_reencrypt.c:4367
+#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "设备 %s 太小。"
 
-#: lib/setup.c:2158 lib/setup.c:2184 lib/setup.c:2589 lib/setup.c:2635
+#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "无法格式化正在使用的设备 %s。"
 
-#: lib/setup.c:2161 lib/setup.c:2187 lib/setup.c:2592 lib/setup.c:2638
+#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "无法格式化设备 %s，权限被拒绝。"
 
-#: lib/setup.c:2173 lib/setup.c:2609 lib/setup.c:2969
+#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "无法格式化设备 %s 的完整性。"
 
-#: lib/setup.c:2191 lib/setup.c:2646
+#: lib/setup.c:2151 lib/setup.c:2629
 #, c-format
 msgid "Cannot format device %s."
 msgstr "无法格式化设备 %s。"
 
-#: lib/setup.c:2234
+#: lib/setup.c:2194
 msgid "Cannot get OPAL alignment parameters."
 msgstr "无法获取 OPAL 对齐参数。"
 
-#: lib/setup.c:2246
+#: lib/setup.c:2206
 msgid "Bogus OPAL logical block size."
 msgstr "伪造的 OPAL 逻辑块大小。"
 
-#: lib/setup.c:2251 lib/luks2/hw_opal/hw_opal.c:299
+#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "伪造的 OPAL 逻辑块大小与设备块大小不同。"
 
-#: lib/setup.c:2257
+#: lib/setup.c:2217
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "请求的数据偏移量与 OPAL 块大小不兼容。"
 
-#: lib/setup.c:2264
+#: lib/setup.c:2224
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "请求的数据对齐量与 OPAL 对齐量不兼容。"
 
-#: lib/setup.c:2284
+#: lib/setup.c:2244
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "数据偏移量不满足 OPAL 对齐要求。"
 
-#: lib/setup.c:2297
+#: lib/setup.c:2257
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "请求的数据对齐量不满足锁定范围对齐要求。"
 
-#: lib/setup.c:2502
+#: lib/setup.c:2471
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "将设备大小补偿%<PRIu64>，以和OPAL对齐量达成一致。"
 
-#: lib/setup.c:2560 lib/setup.c:4078 lib/setup.c:4261 lib/utils_wipe.c:355
-#: lib/luks2/luks2_json_metadata.c:2690 lib/luks2/luks2_json_metadata.c:2942
+#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "未能获取设备 %s 上的 OPAL 锁。"
 
-#: lib/setup.c:2570
+#: lib/setup.c:2541
 msgid "Incorrect OPAL Admin key."
 msgstr "OPAL 管理员密钥不正确。"
 
-#: lib/setup.c:2572
+#: lib/setup.c:2543
 msgid "Cannot setup OPAL segment."
 msgstr "无法设置 OPAL 段。"
 
-#: lib/setup.c:2642
+#: lib/setup.c:2625
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "无法格式化设备%s。OPAL 设备现在似乎完全写保护。"
 
-#: lib/setup.c:2644
+#: lib/setup.c:2627
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "这可能是固件中的一个设计错误。运行 OPAL PSID reset（重置）并重新连接以进行恢复。"
 
-#: lib/setup.c:2664
+#: lib/setup.c:2647
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "在设备 %2$s 上重置锁定范围 %1$d 失败。"
 
-#: lib/setup.c:2684
+#: lib/setup.c:2667
 msgid "Can't format LOOPAES without device."
 msgstr "无法在没有设备的情况下格式化 LOOPAES。"
 
-#: lib/setup.c:2729
+#: lib/setup.c:2712
 msgid "Can't format VERITY without device."
 msgstr "无法在没有设备的情况下格式化 VERIFY。"
 
-#: lib/setup.c:2740 lib/verity/verity.c:88
+#: lib/setup.c:2723 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "不支持的 VERITY 哈希类型 %d。"
 
-#: lib/setup.c:2746 lib/verity/verity.c:96
+#: lib/setup.c:2729 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "不支持的 VERITY 块大小。"
 
-#: lib/setup.c:2751 lib/verity/verity.c:61
+#: lib/setup.c:2734 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "不支持的 VERITY 哈希偏移量。"
 
-#: lib/setup.c:2756
+#: lib/setup.c:2739
 msgid "Unsupported VERITY FEC offset."
 msgstr "不支持的 VERITY 哈希偏移量。"
 
-#: lib/setup.c:2780
+#: lib/setup.c:2763
 msgid "Data area overlaps with hash area."
 msgstr "数据区域重叠覆盖了哈希区域。"
 
-#: lib/setup.c:2805
+#: lib/setup.c:2788
 msgid "Hash area overlaps with FEC area."
 msgstr "哈希区域重叠覆盖了 FEC 区域。"
 
-#: lib/setup.c:2812
+#: lib/setup.c:2795
 msgid "Data area overlaps with FEC area."
 msgstr "数据区域重叠覆盖了 FEC 区域。"
 
-#: lib/setup.c:2948
+#: lib/setup.c:2887
+msgid "Integrity key size mismatch."
+msgstr "完整性校验密钥大小不匹配。"
+
+#: lib/setup.c:2938
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "警告：请求的标签大小 %d 字节与 %s 大小输出（%d 字节）不同。\n"
 
-#: lib/setup.c:3027
+#: lib/setup.c:3051 lib/setup.c:3153
 #, c-format
-msgid "Unknown crypt device type %s requested."
-msgstr "请求了未知的加密设备类型 %s。"
+msgid "Unknown or unsupported device type %s requested."
+msgstr "请求了未知或不支持的设备类型 %s。"
 
-#: lib/setup.c:3334 lib/setup.c:3413 lib/setup.c:3426
+#: lib/setup.c:3067
+#, c-format
+msgid "Device %s does not provide inline integrity data fields."
+msgstr "设备 %s 未提供内联完整性数据字段。"
+
+#: lib/setup.c:3073
+#, c-format
+msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
+msgstr "内联标签大小 %1$<PRIu32> [字节] 大于设备 %3$s 提供的 %2$<PRIu32>。"
+
+#: lib/setup.c:3088
+#, c-format
+msgid "Sector must be the same as device hardware sector (%zu bytes)."
+msgstr "扇区必须与设备硬件扇区（%zu 字节）一致。"
+
+#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "不支持设备 %s 上的参数。"
 
-#: lib/setup.c:3340 lib/setup.c:3433 lib/luks2/luks2_reencrypt.c:2910
-#: lib/luks2/luks2_reencrypt.c:3147 lib/luks2/luks2_reencrypt.c:3542
+#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "设备 %s 上的参数不匹配。"
 
-#: lib/setup.c:3457
+#: lib/setup.c:3650
 msgid "Crypt devices mismatch."
 msgstr "Crypt（加密）设备不匹配。"
 
-#: lib/setup.c:3494 lib/setup.c:3499 lib/luks2/luks2_reencrypt.c:2392
-#: lib/luks2/luks2_reencrypt.c:2926 lib/luks2/luks2_reencrypt.c:4111
+#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "重新加载设备 %s 失败。"
 
-#: lib/setup.c:3505 lib/setup.c:3511 lib/luks2/luks2_reencrypt.c:2363
-#: lib/luks2/luks2_reencrypt.c:2370 lib/luks2/luks2_reencrypt.c:2940
+#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "挂起设备 %s 失败。"
 
-#: lib/setup.c:3517 lib/luks2/luks2_reencrypt.c:2377
-#: lib/luks2/luks2_reencrypt.c:2961 lib/luks2/luks2_reencrypt.c:4024
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "恢复设备 %s 失败。"
 
-#: lib/setup.c:3532
+#: lib/setup.c:3720
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "重新加载设备 %s（在设备 %s 之上）时出现致命错误。"
 
-#: lib/setup.c:3535 lib/setup.c:3537
+#: lib/setup.c:3723 lib/setup.c:3725
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "未能将设备 %s 切换到 dm-error。"
 
-#: lib/setup.c:3577
+#: lib/setup.c:3768
 msgid "Can not resize LUKS2 device with static size."
 msgstr "无法用静态大小改变 LUKS2 设备的大小。"
 
-#: lib/setup.c:3622
+#: lib/setup.c:3773
+msgid "Resize of LUKS2 device with integrity protection is not supported."
+msgstr "不支持调整带完整性保护的 LUKS2 设备的大小。"
+
+#: lib/setup.c:3819
 msgid "Cannot resize loop device."
 msgstr "无法改变回环设备大小。"
 
-#: lib/setup.c:3666
+#: lib/setup.c:3863
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "警告：已设置到最大大小或内核不支持调整大小。\n"
 
-#: lib/setup.c:3732
+#: lib/setup.c:3929
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "改变大小失败，内核不支持此操作。"
 
-#: lib/setup.c:3764
+#: lib/setup.c:3961
 msgid "Do you really want to change UUID of device?"
 msgstr "你真的想改变设备的 UUID 吗？"
 
-#: lib/setup.c:3856
+#: lib/setup.c:4053
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "标头备份文件不包含兼容的 LUKS 标头。"
 
-#: lib/setup.c:3966
+#: lib/setup.c:4160
 #, c-format
 msgid "Volume %s is not active."
 msgstr "卷 %s 未激活。"
 
-#: lib/setup.c:4032
+#: lib/setup.c:4215
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "卷 %s 已挂起。"
 
-#: lib/setup.c:4060
+#: lib/setup.c:4241
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "设备 %s 不支持挂起。"
 
-#: lib/setup.c:4062 lib/setup.c:4070
+#: lib/setup.c:4243 lib/setup.c:4251
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "挂起设备 %s 时出错。"
 
-#: lib/setup.c:4084
+#: lib/setup.c:4266
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "设备 %s 已挂起，但无法锁定硬件 OPAL 设备。"
 
-#: lib/setup.c:4116 lib/setup.c:4288
+#: lib/setup.c:4297 lib/setup.c:4491
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "设备 %s 不支持恢复。"
 
-#: lib/setup.c:4118 lib/setup.c:4279 lib/setup.c:4290
+#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "恢复设备 %s 时出错。"
 
-#: lib/setup.c:4137
+#: lib/setup.c:4335
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "未能在用户指定的密钥环移除卷密钥链接。"
 
-#: lib/setup.c:4252 lib/setup.c:4974 lib/setup.c:5796
+#: lib/setup.c:4457 lib/setup.c:5637
 msgid "Failed to link volume key in user defined keyring."
 msgstr "未能在用户指定的密钥环链入卷密钥。"
 
-#: lib/setup.c:4353 src/cryptsetup.c:2848
+#: lib/setup.c:4556 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "卷 %s 未挂起。"
 
-#: lib/setup.c:4454 lib/setup.c:5114 lib/setup.c:5532 lib/setup.c:5551
-#: lib/setup.c:7425 lib/setup.c:7447 lib/setup.c:7496 src/cryptsetup.c:2358
+#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1969
 msgid "Volume key does not match the volume."
 msgstr "卷密钥与卷不匹配。"
 
-#: lib/setup.c:4608
+#: lib/setup.c:4821
 msgid "Failed to swap new key slot."
 msgstr "交换新密钥槽失败。"
 
-#: lib/setup.c:4706
+#: lib/setup.c:4919
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "密钥槽 %d 无效。"
 
-#: lib/setup.c:4712 src/cryptsetup.c:2068 src/cryptsetup.c:2560
-#: src/cryptsetup.c:3241 src/cryptsetup.c:3301
+#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "密钥槽 %d 未激活。"
 
-#: lib/setup.c:4731
+#: lib/setup.c:4944
 msgid "Device header overlaps with data area."
 msgstr "设备标头与数据区域重叠。"
 
-#: lib/setup.c:5084 lib/setup.c:5184
+#: lib/setup.c:5165
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "正在重新加密。无法激活设备。"
 
-#: lib/setup.c:5086 lib/setup.c:5186 lib/luks2/luks2_json_metadata.c:2848
-#: lib/luks2/luks2_reencrypt.c:3648
+#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "获取重加密锁失败。"
 
-#: lib/setup.c:5098
+#: lib/setup.c:5189
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "使用卷密钥进行 LUKS2 重加密恢复失败。"
 
-#: lib/setup.c:5150 lib/setup.c:5240
-msgid "Failed to link volume keys in user defined keyring."
-msgstr "在内核密钥环中链入密钥失败。"
-
-#: lib/setup.c:5199 lib/luks2/luks2_reencrypt.c:3667
-msgid "LUKS2 reencryption recovery failed."
-msgstr "LUKS2 重加密恢复失败。"
-
-#: lib/setup.c:5448 lib/setup.c:5562 lib/setup.c:5619
-msgid "Device type is not properly initialized."
-msgstr "设备类型未正确初始化。"
-
-#: lib/setup.c:5503
+#: lib/setup.c:5325
 #, c-format
 msgid "Device %s already exists."
 msgstr "设备 %s 已存在。"
 
-#: lib/setup.c:5510
+#: lib/setup.c:5332
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "无法使用设备 %s，名称无效或它正被使用。"
 
-#: lib/setup.c:5528
+#: lib/setup.c:5344
+msgid "Reencryption volume keys do not match the volume."
+msgstr "重新加密卷密钥与卷不匹配。"
+
+#: lib/setup.c:5361
 msgid "Incorrect volume key specified for plain device."
 msgstr "为普通设备指定的卷密钥有误。"
 
-#: lib/setup.c:5542
-msgid "Reencryption volume keys do not match the volume."
-msgstr "重新加密卷密钥与卷不匹配。"
+#: lib/setup.c:5387 lib/setup.c:5448
+msgid "Device type is not properly initialized."
+msgstr "设备类型未正确初始化。"
 
-#: lib/setup.c:5655
+#: lib/setup.c:5486
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "该内核不支持内核密钥环。"
 
-#: lib/setup.c:5659
+#: lib/setup.c:5490
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "缺少内核密钥环：此为将签名传递给内核所必需。"
 
-#: lib/setup.c:5917
+#: lib/setup.c:5545
+#, c-format
+msgid "Cannot use keyring key %s."
+msgstr "无法使用密钥环密钥 %s。"
+
+#: lib/setup.c:5758
 msgid "Incorrect root hash specified for verity device."
 msgstr "为 verity 设备指定的根 hash 不正确。"
 
-#: lib/setup.c:5960
+#: lib/setup.c:5799 lib/setup.c:5824
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL 不支持延迟停用。"
 
-#: lib/setup.c:5976
-#, c-format
-msgid "Could not cancel deferred remove from device %s."
-msgstr "无法取消从设备 %s 的延迟删除。"
-
-#: lib/setup.c:5983 lib/setup.c:5999 lib/luks2/luks2_json_metadata.c:2902
-#: src/utils_reencrypt.c:103
+#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "设备 %s 仍在使用。"
 
-#: lib/setup.c:6008
+#: lib/setup.c:5832
+#, c-format
+msgid "Could not cancel deferred remove from device %s."
+msgstr "无法取消从设备 %s 的延迟删除。"
+
+#: lib/setup.c:5854
 #, c-format
 msgid "Invalid device %s."
 msgstr "设备 %s 无效。"
 
-#: lib/setup.c:6148
+#: lib/setup.c:6001
 msgid "Volume key buffer too small."
 msgstr "卷密钥缓冲区太小。"
 
-#: lib/setup.c:6165
+#: lib/setup.c:6012
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "无法获取 LUKS2 设备的卷密钥。"
 
-#: lib/setup.c:6174
+#: lib/setup.c:6021
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "无法获取 LUKS1 普通设备的卷密钥。"
 
-#: lib/setup.c:6184
+#: lib/setup.c:6035
 msgid "Cannot retrieve volume key for plain device."
 msgstr "无法获取普通（plain）设备的卷密钥。"
 
-#: lib/setup.c:6192
+#: lib/setup.c:6043
 msgid "Cannot retrieve root hash for verity device."
 msgstr "无法获取 verity 设备的根哈希。"
 
-#: lib/setup.c:6199
+#: lib/setup.c:6052
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "无法获取 BITLK 设备的卷密钥。"
 
-#: lib/setup.c:6204
+#: lib/setup.c:6057
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "无法获取 FVAULT2 设备的卷密钥。"
 
-#: lib/setup.c:6206
+#: lib/setup.c:6059
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "不支持在 %s 加密设备上执行此操作。"
 
-#: lib/setup.c:6390 lib/setup.c:6401
+#: lib/setup.c:6244 lib/setup.c:6255
 msgid "Dump operation is not supported for this device type."
 msgstr "不支持在此类设备上执行导出操作。"
 
-#: lib/setup.c:6760
+#: lib/setup.c:6635
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "数据偏移量不是 %u 个字节的倍数。"
 
-#: lib/setup.c:7068
+#: lib/setup.c:6943
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "无法转换正在使用的设备 %s。"
 
-#: lib/setup.c:7366 lib/setup.c:7505
+#: lib/setup.c:7251 lib/setup.c:7406
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "将密钥槽 %u 指定为新卷密钥的操作失败。"
 
-#: lib/setup.c:7390
+#: lib/setup.c:7275
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "初始化默认 LUKS2 密钥槽参数失败。"
 
-#: lib/setup.c:7396
+#: lib/setup.c:7281
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "未能将密钥槽 %d 分配给摘要。"
 
-#: lib/setup.c:7621
+#: lib/setup.c:7523
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "无法添加密钥槽，所有密钥槽已禁用且未提供卷密钥。"
 
-#: lib/setup.c:7690 lib/verity/verity.c:330
+#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "在内核密钥环中加载密钥失败。"
 
-#: lib/setup.c:7808
-msgid "Failed to unlink volume key from thread keyring."
-msgstr "在内核密钥环中断联卷密钥失败。"
-
-#: lib/setup.c:7852
+#: lib/setup.c:7807
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "找不到“%s”描述的密钥环。"
 
-#: lib/setup.c:7917
+#: lib/setup.c:7872
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "未能获取全局内存困难访问序列化锁。"
 
-#: lib/utils.c:202 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "打开 (open) 密钥文件失败。"
 
-#: lib/utils.c:207
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "无法从终端读取密钥文件。"
 
 # stat() 主要就是出来一个各种文件信息……
-#: lib/utils.c:223
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "获取 (stat) 密钥文件信息失败。"
 
-#: lib/utils.c:231 lib/utils.c:252
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "无法寻找 (seek) 到请求的密钥文件偏移量。"
 
-#: lib/utils.c:246 lib/utils.c:261 src/utils_password.c:216
-#: src/utils_password.c:228
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
+#: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "读取密码时内存耗尽。"
 
-#: lib/utils.c:281
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "读取口令出错。"
 
-#: lib/utils.c:298
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "输入上没有可读的内容。"
 
-#: lib/utils.c:305
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "超出最大密钥文件大小。"
 
-#: lib/utils.c:310
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "无法读取请求量的数据。"
 
-#: lib/utils_device.c:200 lib/utils_storage_wrappers.c:97
-#: lib/luks1/keyencryption.c:78 src/utils_reencrypt.c:1458
+#: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "设备 %s 不存在或访问被拒绝。"
 
-#: lib/utils_device.c:210
+#: lib/utils_device.c:217
 #, c-format
 msgid "Device %s is not compatible."
 msgstr "设备 %s 不兼容。"
 
-#: lib/utils_device.c:554
+#: lib/utils_device.c:546
 #, c-format
 msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
 msgstr "忽略数据设备的虚假最佳 IO 大小（%u 字节）。"
 
-#: lib/utils_device.c:715
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "无法将 %s 增大到 %<PRIu64> 字节（%s）。"
+
+#: lib/utils_device.c:717
 #, c-format
 msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr "设备 %s 过小。（需要至少 %<PRIu64> 字节。）"
 
-#: lib/utils_device.c:796
+#: lib/utils_device.c:798
 #, c-format
 msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr "无法使用正被使用的设备 %s（已被映射或挂载）。"
 
-#: lib/utils_device.c:800
+#: lib/utils_device.c:802
 #, c-format
 msgid "Cannot use device %s, permission denied."
 msgstr "无法使用设备 %s，权限被拒绝。"
 
-#: lib/utils_device.c:803
+#: lib/utils_device.c:805
 #, c-format
 msgid "Cannot get info about device %s."
 msgstr "无法获取有关设备 %s 的信息。"
 
-#: lib/utils_device.c:826
+#: lib/utils_device.c:828
 msgid "Cannot use a loopback device, running as non-root user."
 msgstr "无法使用回环设备，正作为非 root 用户运行。"
 
-#: lib/utils_device.c:837
+#: lib/utils_device.c:839
 msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
 msgstr "连接回环设备失败（需要有 autoclear 旗标的回环设备）。"
 
-#: lib/utils_device.c:885
+#: lib/utils_device.c:887
 #, c-format
 msgid "Requested offset is beyond real size of device %s."
 msgstr "请求的偏移量超出设备 %s 的真实大小。"
 
-#: lib/utils_device.c:893
+#: lib/utils_device.c:895
 #, c-format
 msgid "Device %s has zero size."
 msgstr "设备 %s 大小为零。"
 
-#: lib/utils_pbkdf.c:103
+#: lib/utils_pbkdf.c:105
 msgid "Requested PBKDF target time cannot be zero."
 msgstr "请求的 PBKDF 目标时间不能为零。"
 
-#: lib/utils_pbkdf.c:109
+#: lib/utils_pbkdf.c:111
 #, c-format
 msgid "Unknown PBKDF type %s."
 msgstr "未知的 PBKDF 类型 %s。"
 
-#: lib/utils_pbkdf.c:114
+#: lib/utils_pbkdf.c:116
 #, c-format
 msgid "Requested hash %s is not supported."
 msgstr "不支持请求的哈希 %s。"
 
-#: lib/utils_pbkdf.c:125
+#: lib/utils_pbkdf.c:127
 msgid "Requested PBKDF type is not supported for LUKS1."
 msgstr "请求的 PBKDF 类型不被 LUKS1 支持。"
 
-#: lib/utils_pbkdf.c:131
+#: lib/utils_pbkdf.c:133
 msgid "PBKDF max memory or parallel threads must not be set with pbkdf2."
 msgstr "pbkdf2 不可以设置最大内存和并行线程。"
 
-#: lib/utils_pbkdf.c:136 lib/utils_pbkdf.c:146
+#: lib/utils_pbkdf.c:138 lib/utils_pbkdf.c:148
 #, c-format
 msgid "Forced iteration count is too low for %s (minimum is %u)."
 msgstr "强制迭代计数对于%s来说太低（最小值为 %u）。"
 
-#: lib/utils_pbkdf.c:151
+#: lib/utils_pbkdf.c:153
 #, c-format
 msgid "Forced memory cost is too low for %s (minimum is %u kilobytes)."
 msgstr "强制内存成本对于%s来说太低（最小值为 %u KB）。"
 
-#: lib/utils_pbkdf.c:158
+#: lib/utils_pbkdf.c:160
 #, c-format
 msgid "Requested maximum PBKDF memory cost is too high (maximum is %d kilobytes)."
 msgstr "请求的最大 PBKDF 内存开销过大（最大为 %d 千字节）。"
 
-#: lib/utils_pbkdf.c:163
+#: lib/utils_pbkdf.c:165
+msgid "Requested maximum PBKDF memory cost is too high (limited by the integer maximal size)."
+msgstr "请求的最大 PBKDF 内存开销过大（受整数最大值限制）。"
+
+#: lib/utils_pbkdf.c:169
 msgid "Requested maximum PBKDF memory cannot be zero."
 msgstr "请求的最大 PBKDF 内存不能为零。"
 
-#: lib/utils_pbkdf.c:167
+#: lib/utils_pbkdf.c:173
+#, c-format
+msgid "Requested maximum PBKDF parallel cost is too high (maximum is %d)."
+msgstr "请求的最大 PBKDF 并行开销过大（最大为 %d）。"
+
+#: lib/utils_pbkdf.c:178
 msgid "Requested PBKDF parallel threads cannot be zero."
 msgstr "请求的 PBKDF 并行线程数不能为零。"
 
-#: lib/utils_pbkdf.c:187
+#: lib/utils_pbkdf.c:198
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "FIPS 模式仅支持 PBKDF2。"
 
@@ -886,25 +930,25 @@ msgstr "锁定中止。锁定路径 %s/%s 不可用（不是一个目录或缺
 msgid "Locking aborted. The locking path %s/%s is unusable (%s is not a directory)."
 msgstr "锁定中止。锁定路径 %s/%s 不可用（%s 不是目录）。"
 
-#: lib/utils_wipe.c:143 lib/utils_wipe.c:214 src/utils_reencrypt_luks1.c:702
-#: src/utils_reencrypt_luks1.c:795
+#: lib/utils_wipe.c:143 lib/utils_wipe.c:218 src/utils_reencrypt_luks1.c:700
+#: src/utils_reencrypt_luks1.c:793
 msgid "Cannot seek to device offset."
 msgstr "无法寻找到设备偏移位置。"
 
-#: lib/utils_wipe.c:236
+#: lib/utils_wipe.c:240
 #, c-format
 msgid "Device wipe error, offset %<PRIu64>."
 msgstr "设备擦除错误，偏移量%<PRIu64>。"
 
-#: lib/utils_wipe.c:331
+#: lib/utils_wipe.c:332
 msgid "Incorrect OPAL PSID."
 msgstr "不正确的 OPAL PSID。"
 
-#: lib/utils_wipe.c:333
+#: lib/utils_wipe.c:334
 msgid "Cannot erase OPAL device."
 msgstr "无法擦除 OPAL 设备。"
 
-#: lib/luks1/keyencryption.c:26
+#: lib/luks1/keyencryption.c:27
 #, c-format
 msgid ""
 "Failed to setup dm-crypt key mapping for device %s.\n"
@@ -913,47 +957,47 @@ msgstr ""
 "为设备 %s 配置 dm-crypt 键映射失败。\n"
 "请确认内核支持 %s 加密（查看系统日志 (syslog) 以获取更多信息）。"
 
-#: lib/luks1/keyencryption.c:31
+#: lib/luks1/keyencryption.c:32
 msgid "Key size in XTS mode must be 256 or 512 bits."
 msgstr "XTS 模式的密钥大小必须是 256 或 512 位。"
 
-#: lib/luks1/keyencryption.c:33
+#: lib/luks1/keyencryption.c:34
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "加密算法表示应采用 [cipher]-[mode]-[iv] 格式。"
 
-#: lib/luks1/keyencryption.c:84 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1119
-#: lib/luks2/luks2_json_metadata.c:1515 lib/luks2/luks2_keyslot.c:709
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
+#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
+#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "无法写入到设备 %s，访问被拒绝。"
 
-#: lib/luks1/keyencryption.c:107
+#: lib/luks1/keyencryption.c:108
 msgid "Failed to open temporary keystore device."
 msgstr "打开临时密钥存储设备失败。"
 
-#: lib/luks1/keyencryption.c:114
+#: lib/luks1/keyencryption.c:115
 msgid "Failed to access temporary keystore device."
 msgstr "访问临时密钥存储设备失败。"
 
-#: lib/luks1/keyencryption.c:187 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "加密密钥槽时发生输入输出错误。"
 
-#: lib/luks1/keyencryption.c:233 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
-#: lib/fvault2/fvault2.c:864 lib/verity/verity.c:67 lib/verity/verity.c:183
-#: lib/verity/verity_hash.c:307 lib/verity/verity_hash.c:316
-#: lib/verity/verity_hash.c:336 lib/verity/verity_fec.c:247
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
+#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1518 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
 msgstr "无法打开设备 %s。"
 
-#: lib/luks1/keyencryption.c:244 lib/luks2/luks2_keyslot_luks2.c:126
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "解密密钥槽时发生输入输出错误。"
 
@@ -969,32 +1013,32 @@ msgstr "设备 %s 过小。（LUKS1 需要至少 %<PRIu64> 字节。）"
 msgid "LUKS keyslot %u is invalid."
 msgstr "LUKS 密钥槽 %u 无效。"
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1378
+#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "请求的标头备份文件 %s 已存在。"
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1380
+#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "无法创建标头备份文件 %s。"
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1387
+#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "无法写入标头备份文件 %s。"
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1424
+#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
 msgid "Backup file does not contain valid LUKS header."
 msgstr "备份文件不包含有效 LUKS 标头。"
 
 #: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1445
+#: lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "无法打开备份标头文件 %s。"
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1453
+#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "无法读取标头备份文件 %s。"
@@ -1016,7 +1060,7 @@ msgstr "不包含 LUKS 标头。替换标头可能损毁设备上的数据。"
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "已包含 LUKS 标头。替换标头将损毁已存在的密钥槽。"
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1043,7 +1087,7 @@ msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "密码哈希修复为小写（%s）。"
 
 #: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:779
+#: lib/luks1/keymanage.c:756
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "不支持请求的 LUKS 哈希 %s。"
@@ -1090,7 +1134,7 @@ msgstr "LUKS 加密模式 %s 无效。"
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS 哈希值 %s 无效。"
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1356
+#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "未在 LUKS 标头发现已知问题。"
 
@@ -1104,247 +1148,263 @@ msgstr "更新设备 %s 上的 LUKS 标头时出错。"
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "在更新设备 %s 后重新读取 LUKS 标头失败。"
 
-#: lib/luks1/keymanage.c:773
+#: lib/luks1/keymanage.c:750
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "LUKS 标头的数据偏移量必须为 0 或大于标头大小。"
 
-#: lib/luks1/keymanage.c:784 lib/luks1/keymanage.c:853
-#: lib/luks2/luks2_json_format.c:230 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:541
+#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
+#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "提供了错误的 LUKS UUID 格式。"
 
-#: lib/luks1/keymanage.c:806
+#: lib/luks1/keymanage.c:783
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "无法创建 LUKS 标头：读取随机盐失败。"
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:811
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "无法创建 LUKS 标头：标头摘要失败（正在使用哈希 %s）。"
 
-#: lib/luks1/keymanage.c:876
+#: lib/luks1/keymanage.c:856
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "密钥槽 %d 已激活，请先清除。"
 
-#: lib/luks1/keymanage.c:882
+#: lib/luks1/keymanage.c:862
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "密钥槽 %d 条带数过少。标头被修改过？"
 
-#: lib/luks1/keymanage.c:918 lib/luks2/luks2_keyslot_luks2.c:257
+#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "PBKDF2 迭代值溢出。"
 
-#: lib/luks1/keymanage.c:1027
+#: lib/luks1/keymanage.c:1022
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "密钥处理错误（使用散列 %s）。"
 
-#: lib/luks1/keymanage.c:1105
+#: lib/luks1/keymanage.c:1118
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "这是微软拼音中文模式的结果。密钥槽 %d 无效，请选择标号 0 到 %d 间的密钥槽。"
 
-#: lib/luks1/keymanage.c:1123 lib/luks2/luks2_keyslot.c:713
+#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "无法擦除设备 %s。"
 
-#: lib/loopaes/loopaes.c:133
+#: lib/loopaes/loopaes.c:140
 msgid "Detected not yet supported GPG encrypted keyfile."
 msgstr "探测到未支持的 GPG 加密密钥文件。"
 
-#: lib/loopaes/loopaes.c:134
+#: lib/loopaes/loopaes.c:141
 msgid "Please use gpg --decrypt <KEYFILE> | cryptsetup --keyfile=- ...\n"
 msgstr "请使用 gpg --decrypt <密钥文件> | cryptsetup --keyfile=- ...\n"
 
-#: lib/loopaes/loopaes.c:155 lib/loopaes/loopaes.c:175
+#: lib/loopaes/loopaes.c:162 lib/loopaes/loopaes.c:182
 msgid "Incompatible loop-AES keyfile detected."
 msgstr "探测到不兼容的 loop-AES 密钥文件。"
 
-#: lib/loopaes/loopaes.c:232
+#: lib/loopaes/loopaes.c:238
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "内核不支持 loop-AES 兼容映射。"
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "读取密钥文件 %s 出错。"
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "超出 TCRYPT 口令最大长度限制 (%zu)。"
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "PBKDF2 哈希算法 %s 不可用，将跳过。"
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1231
-msgid "Required kernel crypto interface not available."
-msgstr "未能找到所需的内核加密接口。"
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1233
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "请确定您已载入内核模块 algif_skcipher。"
-
-#: lib/tcrypt/tcrypt.c:751
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "扇区大小为 %d 时不支持激活。"
 
-#: lib/tcrypt/tcrypt.c:757
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "内核不支持激活此种 TCRYPT 传统模式。"
 
-#: lib/tcrypt/tcrypt.c:788
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "正在为分区 %s 激活 TCRYPT 系统加密。"
 
-#: lib/tcrypt/tcrypt.c:871
+#: lib/tcrypt/tcrypt.c:819
+msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
+msgstr "无法确定 TCRYPT 系统分区的偏移量，正在激活整个加密区域。"
+
+#: lib/tcrypt/tcrypt.c:828
+msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
+msgstr "无法确定 TCRYPT 系统分区的偏移量，正在将该设备作为系统分区激活。"
+
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "内核不支持 TCRYPT 兼容映射。"
 
-#: lib/tcrypt/tcrypt.c:1090
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "未载入 TCRYPT 标头时不支持此功能。"
 
-#: lib/bitlk/bitlk.c:265
+#: lib/bitlk/bitlk.c:293
 #, c-format
 msgid "Unexpected metadata entry type '%u' found when parsing supported Volume Master Key."
 msgstr "在解析支持的卷主密钥时发现意外的元数据条目类型“%u”。"
 
-#: lib/bitlk/bitlk.c:327
+#: lib/bitlk/bitlk.c:351
 msgid "Invalid string found when parsing Volume Master Key."
 msgstr "解析卷主密钥时发现无效字符串。"
 
-#: lib/bitlk/bitlk.c:331
+#: lib/bitlk/bitlk.c:355
 #, c-format
 msgid "Unexpected string ('%s') found when parsing supported Volume Master Key."
 msgstr "在解析支持的卷主密钥时发现意外字符串 （'%s'）。"
 
-#: lib/bitlk/bitlk.c:351
+#: lib/bitlk/bitlk.c:375
 #, c-format
 msgid "Unexpected metadata entry value '%u' found when parsing supported Volume Master Key."
 msgstr "在解析支持的卷主密钥时发现意外的元数据条目值“%u”。"
 
-#: lib/bitlk/bitlk.c:453
+#: lib/bitlk/bitlk.c:528
 msgid "BITLK version 1 is currently not supported."
 msgstr "目前不支持 BITLK 版本 1。"
 
-#: lib/bitlk/bitlk.c:459
+#: lib/bitlk/bitlk.c:534
 msgid "Invalid or unknown boot signature for BITLK device."
 msgstr "BITLK 设备的启动签名无效或未知。"
 
-#: lib/bitlk/bitlk.c:471
+#: lib/bitlk/bitlk.c:546
 #, c-format
 msgid "Unsupported sector size %<PRIu16>."
 msgstr "不支持的扇区大小 %<PRIu16>。"
 
-#: lib/bitlk/bitlk.c:479
+#: lib/bitlk/bitlk.c:554
 #, c-format
 msgid "Failed to read BITLK header from %s."
 msgstr "未能从 %s 读取 BITLK 标头。"
 
-#: lib/bitlk/bitlk.c:504
+#: lib/bitlk/bitlk.c:603
+#, c-format
+msgid "Failed to read and validate BITLK FVE metadata from %s."
+msgstr "未能从 %s 读取并校验 BITLK FVE 元数据。"
+
+#: lib/bitlk/bitlk.c:610
+#, c-format
+msgid "Failed to validate the location of BITLK FVE metadata from %s."
+msgstr "未能校验来自 %s 的 BITLK FVE 元数据的位置。"
+
+#: lib/bitlk/bitlk.c:621
+#, c-format
+msgid "BITLK FVE metadata changed between reads from %s."
+msgstr "两次从 %s 读取之间，BITLK FVE 元数据发生了变化。"
+
+#: lib/bitlk/bitlk.c:628
+#, c-format
+msgid "Failed to hash BITLK FVE metadata read from %s."
+msgstr "未能对从 %s 读取的 BITLK FVE 元数据进行哈希计算。"
+
+#: lib/bitlk/bitlk.c:644
 #, c-format
-msgid "Failed to read BITLK FVE metadata from %s."
-msgstr "未能从 %s 读取 BITLK FVE 元数据。"
+msgid "Failed to parse BITLK FVE validation metadata from %s."
+msgstr "未能解析来自 %s 的 BITLK FVE 校验元数据。"
 
-#: lib/bitlk/bitlk.c:555
+#: lib/bitlk/bitlk.c:695
 msgid "Unknown or unsupported encryption type."
 msgstr "未知或不支持的加密类型。"
 
-#: lib/bitlk/bitlk.c:595
+#: lib/bitlk/bitlk.c:733
 #, c-format
-msgid "Failed to read BITLK metadata entries from %s."
-msgstr "未能从 %s 读取 BITLK 元数据条目。"
+msgid "Failed to check BITLK metadata entries previously read from %s."
+msgstr "未能检查先前从 %s 读取的 BITLK 元数据条目。"
 
-#: lib/bitlk/bitlk.c:712
+#: lib/bitlk/bitlk.c:853
 msgid "Failed to convert BITLK volume description"
 msgstr "未能转换 BITLK 卷描述"
 
-#: lib/bitlk/bitlk.c:877
+#: lib/bitlk/bitlk.c:1018
 #, c-format
 msgid "Unexpected metadata entry type '%u' found when parsing external key."
 msgstr "解析外部键时发现意外的元数据条目类型“%u”。"
 
-#: lib/bitlk/bitlk.c:900
+#: lib/bitlk/bitlk.c:1041
 #, c-format
 msgid "BEK file GUID '%s' does not match GUID of the volume."
 msgstr "BEK 文件 GUID“%s”与卷的 GUID 不匹配。"
 
-#: lib/bitlk/bitlk.c:904
+#: lib/bitlk/bitlk.c:1045
 #, c-format
 msgid "Unexpected metadata entry value '%u' found when parsing external key."
 msgstr "解析外部键时发现意外的元数据条目值“%u”。"
 
-#: lib/bitlk/bitlk.c:943
+#: lib/bitlk/bitlk.c:1084
 #, c-format
 msgid "Unsupported BEK metadata version %<PRIu32>"
 msgstr "不支持的 BEK 元数据版本 %<PRIu32>"
 
-#: lib/bitlk/bitlk.c:948
+#: lib/bitlk/bitlk.c:1089
 #, c-format
 msgid "Unexpected BEK metadata size %<PRIu32> does not match BEK file length"
 msgstr "意外的 BEK 元数据大小 %<PRIu32> 与 BEK 文件长度不匹配"
 
-#: lib/bitlk/bitlk.c:974
+#: lib/bitlk/bitlk.c:1115
 msgid "Unexpected metadata entry found when parsing startup key."
 msgstr "解析启动密钥时发现意外的元数据条目。"
 
-#: lib/bitlk/bitlk.c:1069
+#: lib/bitlk/bitlk.c:1218
 msgid "This operation is not supported."
 msgstr "不支持此操作。"
 
-#: lib/bitlk/bitlk.c:1077
+#: lib/bitlk/bitlk.c:1226
 msgid "Unexpected key data size."
 msgstr "意外的密钥数据大小。"
 
-#: lib/bitlk/bitlk.c:1203
+#: lib/bitlk/bitlk.c:1442
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "此 BITLK 设备处于不受支持的状态，无法激活。"
 
-#: lib/bitlk/bitlk.c:1208
+#: lib/bitlk/bitlk.c:1447
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "未能激活类型为“%s”的 BITLK 设备。"
 
-#: lib/bitlk/bitlk.c:1215
-msgid "Activation of partially decrypted BITLK device is not supported."
-msgstr "不支持激活部分解密的 BITLK 设备。"
-
-#: lib/bitlk/bitlk.c:1256
+#: lib/bitlk/bitlk.c:1486
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "警告：BitLocker 卷大小 %<PRIu64> 与下层设备大小 %<PRIu64> 不匹配"
 
-#: lib/bitlk/bitlk.c:1383
+#: lib/bitlk/bitlk.c:1613
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "无法激活设备，内核 dm-crypt 缺少对 BITLK IV 的支持。"
 
-#: lib/bitlk/bitlk.c:1387
+#: lib/bitlk/bitlk.c:1617
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "无法激活设备，内核 dm-crypt 缺少对 BITLK Elephant 扩散器（diffuser）的支持。"
 
-#: lib/bitlk/bitlk.c:1391
+#: lib/bitlk/bitlk.c:1621
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "无法激活设备，内核 dm-crypt 缺少对大扇区大小的支持。"
 
-#: lib/bitlk/bitlk.c:1395
+#: lib/bitlk/bitlk.c:1625
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "无法激活设备，内核 dm-zero 模块缺失。"
 
-#: lib/fvault2/fvault2.c:529
+#: lib/fvault2/fvault2.c:532
 #, c-format
 msgid "Could not read %u bytes of volume header."
 msgstr "未能读取卷头的 %u 字节。"
 
-#: lib/fvault2/fvault2.c:541
+#: lib/fvault2/fvault2.c:544
 #, c-format
 msgid "Unsupported FVAULT2 version %<PRIu16>."
 msgstr "不支持的 FVAULT2 版本 %<PRIu16>。"
@@ -1381,24 +1441,24 @@ msgstr "不支持根哈希签名验证。"
 msgid "Root hash signature required."
 msgstr "需要根哈希签名。"
 
-#: lib/verity/verity.c:281
+#: lib/verity/verity.c:282
 msgid "Errors cannot be repaired with FEC device."
 msgstr "未能使用 FEC 设备修复错误。"
 
-#: lib/verity/verity.c:283
+#: lib/verity/verity.c:284
 #, c-format
 msgid "Found %u repairable errors with FEC device."
 msgstr "用 FEC 设备发现了 %u 个可修复的错误。"
 
-#: lib/verity/verity.c:364
+#: lib/verity/verity.c:368
 msgid "Kernel does not support dm-verity mapping."
 msgstr "内核不支持 dm-verity 映射。"
 
-#: lib/verity/verity.c:368
+#: lib/verity/verity.c:372
 msgid "Kernel does not support dm-verity signature option."
 msgstr "内核不支持 dm-verity 签名选项。"
 
-#: lib/verity/verity.c:379
+#: lib/verity/verity.c:383
 msgid "Verity device detected corruption after activation."
 msgstr "在 VERITY 设备激活后探测到损坏。"
 
@@ -1421,23 +1481,23 @@ msgstr "在 %<PRIu64> 上发生检验错误。"
 msgid "Hash area overflow."
 msgstr "哈希区域溢出。"
 
-#: lib/verity/verity_hash.c:367
+#: lib/verity/verity_hash.c:381
 msgid "Verification of data area failed."
 msgstr "数据区检验失败。"
 
-#: lib/verity/verity_hash.c:372
+#: lib/verity/verity_hash.c:386
 msgid "Verification of root hash failed."
 msgstr "根哈希值检验失败。"
 
-#: lib/verity/verity_hash.c:378
+#: lib/verity/verity_hash.c:392
 msgid "Input/output error while creating hash area."
 msgstr "创建哈希数据区时发生输入/输出错误。"
 
-#: lib/verity/verity_hash.c:380
+#: lib/verity/verity_hash.c:394
 msgid "Creation of hash area failed."
 msgstr "创建哈希区失败。"
 
-#: lib/verity/verity_hash.c:415
+#: lib/verity/verity_hash.c:429
 #, c-format
 msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
 msgstr "警告：如数据块大小超过内存分页大小，内核将无法激活设备 (%u)。"
@@ -1488,34 +1548,38 @@ msgstr "无效的 FEC 段长度。"
 msgid "Failed to determine size for device %s."
 msgstr "未能确定设备 %s 的大小。"
 
-#: lib/integrity/integrity.c:44
+#: lib/integrity/integrity.c:50
 #, c-format
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "在 %2$s 上检测到不兼容的内核 dm-integrity 元数据（版本 %1$u）。"
 
-#: lib/integrity/integrity.c:264 lib/integrity/integrity.c:441
+#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "内核不支持 dm-integrity 映射。"
 
-#: lib/integrity/integrity.c:270
+#: lib/integrity/integrity.c:314
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "内核不支持 dm-integrity 固定元数据对齐。"
 
-#: lib/integrity/integrity.c:279
+#: lib/integrity/integrity.c:323
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "内核拒绝激活不安全的重新计算选项（请参阅“旧版激活选项”以强制激活）。"
 
-#: lib/luks2/luks2_disk_metadata.c:379 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1507
+#: lib/integrity/integrity.c:329
+msgid "Kernel does not support dm-integrity inline mode."
+msgstr "内核不支持 dm-integrity 内联模式。"
+
+#: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
+#: lib/luks2/luks2_json_metadata.c:1510
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "未能获取设备 %s 上的写入锁。"
 
-#: lib/luks2/luks2_disk_metadata.c:388
+#: lib/luks2/luks2_disk_metadata.c:391
 msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation."
 msgstr "检测到正在尝试并发更新 LUKS2 元数据。中止操作。"
 
-#: lib/luks2/luks2_disk_metadata.c:697 lib/luks2/luks2_disk_metadata.c:718
+#: lib/luks2/luks2_disk_metadata.c:726 lib/luks2/luks2_disk_metadata.c:747
 msgid ""
 "Device contains ambiguous signatures, cannot auto-recover LUKS2.\n"
 "Please run \"cryptsetup repair\" for recovery."
@@ -1523,59 +1587,62 @@ msgstr ""
 "设备包含不明确的签名，无法自动恢复 LUKS2。\n"
 "请运行 “cryptsetup repair” 进行恢复。"
 
-#: lib/luks2/luks2_json_format.c:218
+#: lib/luks2/luks2_json_format.c:219
 #, c-format
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "警告：密钥槽区域（%<PRIu64> 字节）非常小，可用的 LUKS2 密钥槽数量非常有限。\n"
 
-#: lib/luks2/luks2_json_format.c:417
+#: lib/luks2/luks2_json_format.c:418
 msgid "Requested data offset is too small."
 msgstr "请求的数据偏移量太小。"
 
-#: lib/luks2/luks2_json_format.c:458
+#: lib/luks2/luks2_json_format.c:459
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "警告：LUKS2 元数据大小已更改为 %<PRIu64> 字节。\n"
 
-#: lib/luks2/luks2_json_format.c:462
+#: lib/luks2/luks2_json_format.c:463
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "警告：LUKS2 密钥槽区域大小已更改为 %<PRIu64> 字节。\n"
 
-#: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1353
-#: lib/luks2/luks2_json_metadata.c:1413 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:103
+#: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
+#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "未能获取设备 %s 的读取锁。"
 
-#: lib/luks2/luks2_json_metadata.c:1430
+#: lib/luks2/luks2_json_metadata.c:1277
+msgid "Label is too long."
+msgstr "标签过长。"
+
+#: lib/luks2/luks2_json_metadata.c:1435
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "在备份 %s 中检测到禁止的 LUKS2 要求。"
 
-#: lib/luks2/luks2_json_metadata.c:1471
+#: lib/luks2/luks2_json_metadata.c:1474
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "源设备和备份上的数据偏移或密钥大小不符，恢复失败。"
 
-#: lib/luks2/luks2_json_metadata.c:1477
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "源设备和备份上的数据偏移或密钥大小不符，恢复失败。"
 
-#: lib/luks2/luks2_json_metadata.c:1484
+#: lib/luks2/luks2_json_metadata.c:1487
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "设备 %s %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1485
+#: lib/luks2/luks2_json_metadata.c:1488
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "不包含 LUKS 标头。替换标头可能损毁设备上的数据。"
 
-#: lib/luks2/luks2_json_metadata.c:1486
+#: lib/luks2/luks2_json_metadata.c:1489
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "已包含 LUKS 标头。替换标头将损毁已存在的密钥槽。"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1491
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1585,7 +1652,7 @@ msgstr ""
 "警告：在实际设备标头中检测到未知的 LUKS2 要求！\n"
 "将标头替换为备份可能会损坏该设备上的数据！"
 
-#: lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks2/luks2_json_metadata.c:1493
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1595,113 +1662,113 @@ msgstr ""
 "警告：在设备上检测到未完成的离线重新加密！\n"
 "将标头替换为备份可能会损坏数据。"
 
-#: lib/luks2/luks2_json_metadata.c:1587
+#: lib/luks2/luks2_json_metadata.c:1591
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "已忽略未知旗标 %s。"
 
-#: lib/luks2/luks2_json_metadata.c:2512 lib/luks2/luks2_reencrypt.c:2092
+#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "缺少 dm-crypt 段 %u 的密钥"
 
 # stat() 主要就是出来一个各种文件信息……
-#: lib/luks2/luks2_json_metadata.c:2524 lib/luks2/luks2_reencrypt.c:2106
+#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "设置 dm-crypt 段失败。"
 
 # stat() 主要就是出来一个各种文件信息……
-#: lib/luks2/luks2_json_metadata.c:2530 lib/luks2/luks2_reencrypt.c:2112
+#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "设置 dm-linear 段失败。"
 
-#: lib/luks2/luks2_json_metadata.c:2649 src/utils_reencrypt.c:420
+#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "未探测到已知的加密方法特征。"
 
-#: lib/luks2/luks2_json_metadata.c:2657
+#: lib/luks2/luks2_json_metadata.c:2709
 msgid "OPAL device must have static device size."
 msgstr "OPAL 设备必须有静态大小。"
 
-#: lib/luks2/luks2_json_metadata.c:2677
+#: lib/luks2/luks2_json_metadata.c:2729
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "具有完整性的加密 OPAL 设备必须小于锁定范围。"
 
-#: lib/luks2/luks2_json_metadata.c:2682
+#: lib/luks2/luks2_json_metadata.c:2734
 msgid "OPAL device must have same size as locking range."
 msgstr "OPAL 设备必须与锁定范围相同。"
 
-#: lib/luks2/luks2_json_metadata.c:2702
+#: lib/luks2/luks2_json_metadata.c:2754
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "OPAL 设备%s已解锁过。\n"
 
-#: lib/luks2/luks2_json_metadata.c:2735
+#: lib/luks2/luks2_json_metadata.c:2793
 msgid "Unsupported device integrity configuration."
 msgstr "不支持的设备完整性配置。"
 
-#: lib/luks2/luks2_json_metadata.c:2751
+#: lib/luks2/luks2_json_metadata.c:2809
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "下层 dm-integrity 设备意外提供了数据扇区。"
 
-#: lib/luks2/luks2_json_metadata.c:2846
+#: lib/luks2/luks2_json_metadata.c:2911
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "正在重新加密。无法停用设备。"
 
-#: lib/luks2/luks2_json_metadata.c:2857 lib/luks2/luks2_reencrypt.c:4161
+#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "无法用 dm-error 目标替换挂起的设备 %s。"
 
-#: lib/luks2/luks2_json_metadata.c:2926 lib/luks2/luks2_json_metadata.c:2948
+#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "设备 %s 已停用，但无法锁定硬件 OPAL 设备。"
 
-#: lib/luks2/luks2_json_metadata.c:2967
-msgid "Failed to read LUKS2 requirements."
-msgstr "读取 LUKS2 需求时失败。"
-
-#: lib/luks2/luks2_json_metadata.c:2974
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Unmet LUKS2 requirements detected."
 msgstr "探测到未满足的 LUKS2 需求。"
 
-#: lib/luks2/luks2_json_metadata.c:2982
+#: lib/luks2/luks2_json_metadata.c:3053
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "操作与标记准备旧版重新加密的设备不兼容。中止。"
 
-#: lib/luks2/luks2_json_metadata.c:2984
+#: lib/luks2/luks2_json_metadata.c:3055
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "操作与标记准备 LUKS2 重新加密的设备不兼容。中止。"
 
-#: lib/luks2/luks2_json_metadata.c:2986
+#: lib/luks2/luks2_json_metadata.c:3057
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "操作与使用 OPAL 的设备不兼容。中止。"
 
-#: lib/luks2/luks2_keyslot.c:560 lib/luks2/luks2_keyslot.c:599
+#: lib/luks2/luks2_json_metadata.c:3059
+msgid "Operation incompatible with device using inline HW tags. Aborting."
+msgstr "操作与使用内联硬件标签的设备不兼容。中止。"
+
+#: lib/luks2/luks2_keyslot.c:543 lib/luks2/luks2_keyslot.c:601
 msgid "Not enough available memory to open a keyslot."
 msgstr "没有足够的可用内存来打开密钥槽。"
 
-#: lib/luks2/luks2_keyslot.c:562 lib/luks2/luks2_keyslot.c:601
+#: lib/luks2/luks2_keyslot.c:545 lib/luks2/luks2_keyslot.c:603
 msgid "Keyslot open failed."
 msgstr "密钥槽打开失败。"
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:97
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "不能将 %s-%s 加密算法用于密钥槽加密。"
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "不能将 %s 加密算法用于密钥槽加密。"
 
-#: lib/luks2/luks2_keyslot_luks2.c:272 lib/luks2/luks2_keyslot_luks2.c:391
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2716
+#: lib/luks2/luks2_keyslot_luks2.c:219
+msgid "Not enough memory for keyslot key derivation."
+msgstr "内存不足，无法进行密钥槽的密钥派生。"
+
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "哈希算法 %s 不可用。"
 
-#: lib/luks2/luks2_keyslot_luks2.c:358
-msgid "Warning: keyslot operation could fail as it requires more than available memory.\n"
-msgstr "警告：密钥槽操作可能会失败，因为它需要的内存超过可用内存。\n"
-
-#: lib/luks2/luks2_keyslot_luks2.c:507
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "没有空间放置新的密钥槽。"
 
@@ -1718,611 +1785,580 @@ msgstr "无法更新韧性（resilience）类型。新类型仅提供 %<PRIu64>
 msgid "Failed to refresh reencryption verification digest."
 msgstr "无法刷新重新加密验证摘要。"
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "无法检查 uuid 为 %s 的设备的状态。"
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "无法转换有额外 LUKSMETA 元数据的标头。"
 
-#: lib/luks2/luks2_luks1_convert.c:589 lib/luks2/luks2_reencrypt.c:3797
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "无法对 LUKS2 使用加密算法规范 %s-%s。"
 
-#: lib/luks2/luks2_luks1_convert.c:604
+#: lib/luks2/luks2_luks1_convert.c:565
+#, c-format
+msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
+msgstr "无法将加密算法规范 %s-%s 用于 LUKS2 密钥槽。"
+
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "无法移动密钥槽区域。空间不足。"
 
-#: lib/luks2/luks2_luks1_convert.c:643
+#: lib/luks2/luks2_luks1_convert.c:619
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "无法转换为 LUKS2 格式 - 元数据无效。"
 
-#: lib/luks2/luks2_luks1_convert.c:660
+#: lib/luks2/luks2_luks1_convert.c:636
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "无法移动密钥槽区域。LUKS2 密钥槽区域太小。"
 
-#: lib/luks2/luks2_luks1_convert.c:666 lib/luks2/luks2_luks1_convert.c:960
+#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
 msgid "Unable to move keyslot area."
 msgstr "无法移动密钥槽区域。"
 
-#: lib/luks2/luks2_luks1_convert.c:756
+#: lib/luks2/luks2_luks1_convert.c:757
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "无法转换为 LUKS1 格式 - 默认段的加密扇区大小不是 512 字节。"
 
-#: lib/luks2/luks2_luks1_convert.c:764
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "无法转换为 LUKS1 格式 - 密钥槽摘要与 LUKS1 不兼容。"
 
-#: lib/luks2/luks2_luks1_convert.c:776
+#: lib/luks2/luks2_luks1_convert.c:779
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "无法转换为 LUKS1 格式 - 设备的加密算法%s使用包装密钥。"
 
-#: lib/luks2/luks2_luks1_convert.c:781
+#: lib/luks2/luks2_luks1_convert.c:784
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "无法转换为 LUKS1 格式 - 设备使用更多段。"
 
-#: lib/luks2/luks2_luks1_convert.c:789
+#: lib/luks2/luks2_luks1_convert.c:792
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "无法转换为 LUKS1 格式 - LUKS2 标头包含 %u 个令牌。"
 
-#: lib/luks2/luks2_luks1_convert.c:803
+#: lib/luks2/luks2_luks1_convert.c:798
+msgid "Cannot convert to LUKS1 format - there are no active keyslots."
+msgstr "无法转换为 LUKS1 格式 - 没有活动的密钥槽。"
+
+#: lib/luks2/luks2_luks1_convert.c:810
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "无法转换为 LUKS1 格式 - 密钥槽 %u 处于无效状态。"
 
-#: lib/luks2/luks2_luks1_convert.c:808
+#: lib/luks2/luks2_luks1_convert.c:815
+#, c-format
+msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
+msgstr "无法转换为 LUKS1 格式 - 密钥槽 %u 未绑定。"
+
+#: lib/luks2/luks2_luks1_convert.c:820
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "无法转换为 LUKS1 格式 - 槽 %u（超过最大槽数）仍处于活动状态。"
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:825
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "无法转换为 LUKS1 格式 - 密钥槽 %u 与 LUKS1 不兼容。"
 
-#: lib/luks2/luks2_reencrypt.c:1183
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "热区大小必须是计算出的区域对齐量（%zu 字节）的倍数。"
 
-#: lib/luks2/luks2_reencrypt.c:1188
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "设备大小必须是计算出的区域对齐量（%zu 字节）的倍数。"
 
-#: lib/luks2/luks2_reencrypt.c:1395 lib/luks2/luks2_reencrypt.c:1582
-#: lib/luks2/luks2_reencrypt.c:1665 lib/luks2/luks2_reencrypt.c:1707
-#: lib/luks2/luks2_reencrypt.c:3956
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "未能初始化旧的 segment storage wrapper。"
 
-#: lib/luks2/luks2_reencrypt.c:1409 lib/luks2/luks2_reencrypt.c:1560
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "未能初始化新的 segment storage wrapper。"
 
-#: lib/luks2/luks2_reencrypt.c:1536 lib/luks2/luks2_reencrypt.c:3968
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "未能初始化热区保护。"
 
-#: lib/luks2/luks2_reencrypt.c:1609
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "未能读取当前热区的校验和。"
 
-#: lib/luks2/luks2_reencrypt.c:1616 lib/luks2/luks2_reencrypt.c:3982
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "未能读取从 %<PRIu64> 开始的热区区域。"
 
 # stat() 主要就是出来一个各种文件信息……
-#: lib/luks2/luks2_reencrypt.c:1635
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "未能解密扇区 %zu。"
 
-#: lib/luks2/luks2_reencrypt.c:1641
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "未能恢复扇区 %zu。"
 
-#: lib/luks2/luks2_reencrypt.c:2205
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "源设备和目标设备大小不匹配。源：%<PRIu64>，目标：%<PRIu64>。"
 
-#: lib/luks2/luks2_reencrypt.c:2303
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "无法激活热区设备 %s。"
 
-#: lib/luks2/luks2_reencrypt.c:2320
+#: lib/luks2/luks2_reencrypt.c:2323
+#, c-format
+msgid "Failed to allocate hotzone device %s."
+msgstr "未能分配热区设备 %s。"
+
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
-msgstr ""
+msgstr "使用实际的原始（origin）表激活覆盖（overlay）设备 %s 失败。"
 
-#: lib/luks2/luks2_reencrypt.c:2327
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "未能为设备 %s 加载新映射。"
 
-#: lib/luks2/luks2_reencrypt.c:2398
-#, fuzzy
-#| msgid "Failed to acquire read lock on device %s."
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
-msgstr "未能获取设备 %s 的读取锁。"
+msgstr "未能刷新重新加密设备栈。"
 
-#: lib/luks2/luks2_reencrypt.c:2598
-#, fuzzy
-#| msgid "Failed to swap new key slot."
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
-msgstr "交换新密钥槽失败。"
+msgstr "未能设置新的密钥槽区域大小。"
 
-#: lib/luks2/luks2_reencrypt.c:2734
-#, fuzzy, c-format
-#| msgid "Device %s size is not aligned to requested sector size (%u bytes)."
+#: lib/luks2/luks2_reencrypt.c:2752
+#, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
-msgstr "设备 %s 的大小没有和请求的扇区大小对齐（%u 字节）。"
+msgstr "数据移位值未按加密扇区大小（%<PRIu32> 字节）对齐。"
 
-#: lib/luks2/luks2_reencrypt.c:2771 src/utils_reencrypt.c:176
-#, fuzzy, c-format
-#| msgid "Unsupported LUKS version %d."
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
+#, c-format
 msgid "Unsupported resilience mode %s"
-msgstr "不支持的 LUKS 版本 %d。"
+msgstr "不支持的韧性（resilience）模式 %s"
 
-#: lib/luks2/luks2_reencrypt.c:2808
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
-msgstr ""
+msgstr "移动的段大小不能大于数据移位（data shift）值。"
 
-#: lib/luks2/luks2_reencrypt.c:2850
-#, fuzzy
-#| msgid "Invalid plain crypt parameters."
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
-msgstr "无效的纯加密选项。"
+msgstr "无效的重新加密韧性（resilience）参数。"
 
-#: lib/luks2/luks2_reencrypt.c:2872
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
-msgstr ""
+msgstr "移动的段过大。请求的大小为 %<PRIu64>，可用空间为：%<PRIu64>。"
 
 # stat() 主要就是出来一个各种文件信息……
-#: lib/luks2/luks2_reencrypt.c:2959
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "无法清除表。"
 
-#: lib/luks2/luks2_reencrypt.c:3045
+#: lib/luks2/luks2_reencrypt.c:3064
+#, c-format
+msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
+msgstr "数据移位（%<PRIu64> 个扇区）小于将来的数据偏移量（%<PRIu64> 个扇区）。"
+
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
-msgstr ""
+msgstr "缩减的数据大小大于实际设备大小。"
 
-#: lib/luks2/luks2_reencrypt.c:3052
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "设备大小没有和请求的扇区大小对齐（%<PRIu32> 字节）。"
 
-#: lib/luks2/luks2_reencrypt.c:3086
-#, c-format
-msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
-msgstr ""
-
-#: lib/luks2/luks2_reencrypt.c:3093 lib/luks2/luks2_reencrypt.c:3591
-#: lib/luks2/luks2_reencrypt.c:3612
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "无法在独占模式下打开 %s（已映射或挂载）。"
 
-#: lib/luks2/luks2_reencrypt.c:3282
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
-msgstr ""
+msgstr "设备未被标记为准备 LUKS2 重新加密。"
 
-#: lib/luks2/luks2_reencrypt.c:3299 lib/luks2/luks2_reencrypt.c:4273
-#, fuzzy
-#| msgid "Failed to open key file.\n"
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
-msgstr "打开 (open) 密钥文件失败。\n"
+msgstr "未能加载 LUKS2 重新加密上下文。"
 
-#: lib/luks2/luks2_reencrypt.c:3389
-#, fuzzy
-#| msgid "Failed to open key file.\n"
-msgid "Failed to get reencryption state."
-msgstr "打开 (open) 密钥文件失败。\n"
-
-#: lib/luks2/luks2_reencrypt.c:3393 lib/luks2/luks2_reencrypt.c:3707
-#, fuzzy
-#| msgid "Device %s is not active."
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
-msgstr "设备 %s 未激活。"
+msgstr "设备未处于重新加密过程中。"
 
-#: lib/luks2/luks2_reencrypt.c:3400 lib/luks2/luks2_reencrypt.c:3714
-#, fuzzy
-#| msgid "Reencryption already in-progress."
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
-msgstr "重加密已在进行中。"
+msgstr "重新加密进程已在运行。"
 
-#: lib/luks2/luks2_reencrypt.c:3402 lib/luks2/luks2_reencrypt.c:3716
-#, fuzzy
-#| msgid "Failed to acquire write device lock."
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
-msgstr "未能获取写入设备锁。"
+msgstr "未能获取重新加密锁。"
 
-#: lib/luks2/luks2_reencrypt.c:3420
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
-msgstr ""
+msgstr "无法继续重新加密。请先运行重新加密恢复。"
 
-#: lib/luks2/luks2_reencrypt.c:3555
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
-msgstr ""
+msgstr "激活的设备大小与请求的重新加密大小不匹配。"
 
-#: lib/luks2/luks2_reencrypt.c:3569
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
-msgstr ""
+msgstr "重新加密参数中请求的设备大小非法。"
 
-#: lib/luks2/luks2_reencrypt.c:3646
-#, fuzzy
-#| msgid "Reencryption already in-progress."
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
-msgstr "重加密已在进行中。"
+msgstr "重新加密正在进行中。无法执行恢复。"
 
-#: lib/luks2/luks2_reencrypt.c:3814
+#: lib/luks2/luks2_reencrypt.c:3745
+msgid "LUKS2 reencryption recovery failed."
+msgstr "LUKS2 重加密恢复失败。"
+
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
+msgid "Failed to initialize reencryption device stack."
+msgstr "未能初始化重新加密设备栈。"
+
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
-msgstr ""
+msgstr "元数据中已初始化 LUKS2 重新加密。"
 
-#: lib/luks2/luks2_reencrypt.c:3821
-#, fuzzy
-#| msgid "Failed to initialise default LUKS2 keyslot parameters."
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
-msgstr "初始化默认 LUKS2 密钥槽参数失败。"
+msgstr "未能在元数据中初始化 LUKS2 重新加密。"
 
-#: lib/luks2/luks2_reencrypt.c:3874 lib/luks2/luks2_reencrypt.c:3909
-#, fuzzy
-#| msgid "This operation is not supported for %s crypt device."
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
-msgstr "不支持在 %s 加密设备上执行此操作。"
-
-#: lib/luks2/luks2_reencrypt.c:3881
-#, fuzzy
-#| msgid "Failed to read passphrase from keyring (error %d)."
-msgid "Failed to read passphrase from keyring."
-msgstr "从密钥环读取口令失败（错误 %d）。"
+msgstr "不支持对 DAX（持久内存）设备进行重新加密。"
 
-#: lib/luks2/luks2_reencrypt.c:3938
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
-msgstr ""
+msgstr "未能为下一个重新加密热区设置设备段。"
 
-#: lib/luks2/luks2_reencrypt.c:3990
-#, fuzzy
-#| msgid "Failed to write activation flags to new header."
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
-msgstr "向新表头写入活动旗标失败。"
+msgstr "未能写入重新加密韧性（resilience）元数据。"
 
-#: lib/luks2/luks2_reencrypt.c:3997
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "解密失败。"
 
-#: lib/luks2/luks2_reencrypt.c:4002
-#, fuzzy, c-format
-#| msgid "Failed to access temporary keystore device.\n"
+#: lib/luks2/luks2_reencrypt.c:4128
+#, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
-msgstr "未能访问临时密钥存储设备。\n"
+msgstr "未能写入从 %<PRIu64> 开始的热区区域。"
 
 # stat() 主要就是出来一个各种文件信息……
-#: lib/luks2/luks2_reencrypt.c:4007
-#, fuzzy
-#| msgid "Failed to stat key file."
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
-msgstr "获取 (stat) 密钥文件信息失败。"
+msgstr "未能同步数据。"
 
-#: lib/luks2/luks2_reencrypt.c:4015
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
-msgstr ""
+msgstr "当前重新加密热区完成后更新元数据失败。"
 
-#: lib/luks2/luks2_reencrypt.c:4104
-#, fuzzy
-#| msgid "Failed to read LUKS2 requirements."
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
-msgstr "读取 LUKS2 需求时失败。"
+msgstr "未能写入 LUKS2 元数据。"
 
-#: lib/luks2/luks2_reencrypt.c:4127
-#, fuzzy
-#| msgid "Failed to open temporary keystore device.\n"
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
-msgstr "打开临时密钥存储设备失败。\n"
+msgstr "未能擦除数据设备上未使用的区域。"
 
-#: lib/luks2/luks2_reencrypt.c:4133
-#, fuzzy, c-format
-#| msgid "Failed to open key file.\n"
+#: lib/luks2/luks2_reencrypt.c:4259
+#, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
-msgstr "打开 (open) 密钥文件失败。\n"
+msgstr "未能移除未使用的（未绑定的）密钥槽 %d。"
 
-#: lib/luks2/luks2_reencrypt.c:4143
-#, fuzzy
-#| msgid "Failed to open key file.\n"
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
-msgstr "打开 (open) 密钥文件失败。\n"
+msgstr "未能移除重新加密密钥槽。"
 
-#: lib/luks2/luks2_reencrypt.c:4153
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
-msgstr ""
+msgstr "重新加密从 %<PRIu64> 开始、长 %<PRIu64> 个扇区的数据块时发生致命错误。"
 
-#: lib/luks2/luks2_reencrypt.c:4157
-#, fuzzy
-#| msgid "Cannot read reencryption log file."
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
-msgstr "未能读取重加密日志文件。"
+msgstr "在线重新加密失败。"
 
-#: lib/luks2/luks2_reencrypt.c:4162
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
-msgstr ""
+msgstr "除非已手动替换为 error 目标，否则请勿恢复（resume）该设备。"
 
-#: lib/luks2/luks2_reencrypt.c:4214
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
-msgstr ""
+msgstr "无法继续重新加密。重新加密状态异常。"
 
-#: lib/luks2/luks2_reencrypt.c:4220
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
-msgstr ""
-
-#: lib/luks2/luks2_reencrypt.c:4227
-#, fuzzy
-#| msgid "Failed to acquire read lock on device %s."
-msgid "Failed to initialize reencryption device stack."
-msgstr "未能获取设备 %s 的读取锁。"
+msgstr "重新加密上下文缺失或无效。"
 
-#: lib/luks2/luks2_reencrypt.c:4249 lib/luks2/luks2_reencrypt.c:4286
-#, fuzzy
-#| msgid "Failed to open key file.\n"
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
-msgstr "打开 (open) 密钥文件失败。\n"
+msgstr "未能更新重新加密上下文。"
 
-#: lib/luks2/luks2_reencrypt_digest.c:408
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "重加密元数据无效。"
 
-#: lib/luks2/hw_opal/hw_opal.c:328
+#: lib/luks2/hw_opal/hw_opal.c:335
 #, c-format
 msgid "OPAL range %d offset %<PRIu64> does not match expected values %<PRIu64>."
-msgstr ""
+msgstr "OPAL 锁定范围 %d 的偏移量 %<PRIu64> 与预期值 %<PRIu64> 不匹配。"
 
-#: lib/luks2/hw_opal/hw_opal.c:335
+#: lib/luks2/hw_opal/hw_opal.c:342
 #, c-format
 msgid "OPAL range %d length %<PRIu64> does not match device length %<PRIu64>."
-msgstr ""
+msgstr "OPAL 锁定范围 %d 的长度 %<PRIu64> 与设备长度 %<PRIu64> 不匹配。"
 
-#: lib/luks2/hw_opal/hw_opal.c:341
+#: lib/luks2/hw_opal/hw_opal.c:348
 #, c-format
 msgid "OPAL range %d locking is disabled."
-msgstr ""
+msgstr "OPAL 锁定范围 %d 的锁定已被禁用。"
 
-#: lib/luks2/hw_opal/hw_opal.c:351 lib/luks2/hw_opal/hw_opal.c:358
+#: lib/luks2/hw_opal/hw_opal.c:358 lib/luks2/hw_opal/hw_opal.c:365
 #, c-format
 msgid "Unexpected OPAL range %d lock state."
-msgstr ""
+msgstr "OPAL 锁定范围 %d 的锁定状态异常。"
 
-#: src/cryptsetup.c:80
-#, fuzzy
-#| msgid "This operation is supported only for LUKS2 device."
+#: src/cryptsetup.c:87
 msgid "Keyslot encryption parameters can be set only for LUKS2 device."
-msgstr "此操作只适用 LUKS2 设备。"
+msgstr "密钥槽加密参数只能为 LUKS2 设备设置。"
 
-#: src/cryptsetup.c:123 src/cryptsetup.c:2238
-#, c-format
-msgid "Enter token PIN: "
-msgstr "输入令牌 PIN："
-
-#: src/cryptsetup.c:125 src/cryptsetup.c:2240
-#, c-format
-msgid "Enter token %d PIN: "
-msgstr "输入令牌 %d PIN："
+#: src/cryptsetup.c:93
+msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
+msgstr "密钥槽加密参数与 LUKS2 密钥槽加密不兼容。"
 
-#: src/cryptsetup.c:183 src/cryptsetup.c:1169 src/cryptsetup.c:1519
-#: src/utils_reencrypt.c:1133 src/utils_reencrypt_luks1.c:504
-#: src/utils_reencrypt_luks1.c:567
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "未探测到已知的加密方法特征。"
 
-#: src/cryptsetup.c:193
+#: src/cryptsetup.c:160
 #, c-format
 msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions."
 msgstr "警告：给加密算法（%s-%s，密钥大小 %u 位）使用的默认选项可能与旧版本不兼容。"
 
-#: src/cryptsetup.c:198
+#: src/cryptsetup.c:165
 #, c-format
 msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions."
 msgstr "警告：给哈希算法（%s）使用的默认选项可能与旧版本不兼容。"
 
-#: src/cryptsetup.c:202
-msgid "For plain mode, always use options --cipher, --key-size and if no keyfile is used, then also --hash."
-msgstr "对于纯模式，请始终使用选项 --cipher、--key-size；如果未使用密钥文件，请也使用 --hash。"
+#: src/cryptsetup.c:169
+msgid "For plain mode, always use options --cipher, --key-size and if no keyfile or keyring is used, then also --hash."
+msgstr "对于纯（plain）模式，请始终使用 --cipher 和 --key-size 选项；如果未使用密钥文件或密钥环，还需使用 --hash。"
 
-#: src/cryptsetup.c:208
+#: src/cryptsetup.c:175
 msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n"
 msgstr "警告：在纯文本模式下指定密钥文件时将忽略参数 --hash。\n"
 
-#: src/cryptsetup.c:216
+#: src/cryptsetup.c:189
 msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
 msgstr "警告：将忽略参数 --keyfile-size，读取大小应与加密密钥大小一致。\n"
 
-#: src/cryptsetup.c:253 src/cryptsetup.c:1364 src/cryptsetup.c:1562
-#: src/integritysetup.c:184 src/utils_reencrypt.c:1342
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "%s 的 blkid 扫描失败。"
 
-#: src/cryptsetup.c:259
+#: src/cryptsetup.c:232
 #, c-format
 msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
 msgstr "在 %s 上检测到设备签名。继续操作可能会损坏现有数据。"
 
-#: src/cryptsetup.c:265 src/cryptsetup.c:1252 src/cryptsetup.c:1300
-#: src/cryptsetup.c:1371 src/cryptsetup.c:1496 src/cryptsetup.c:1574
-#: src/cryptsetup.c:2618 src/cryptsetup.c:3044 src/integritysetup.c:174
-#: src/utils_reencrypt.c:125 src/utils_reencrypt.c:301
-#: src/utils_reencrypt.c:759
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "操作中止。\n"
 
-#: src/cryptsetup.c:338
+#: src/cryptsetup.c:323
 msgid "Option --key-file is required."
 msgstr "需要选项 --key-file。"
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "输入 VeraCrypt PIM: "
 
-#: src/cryptsetup.c:398
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "无效的 PIM 值：解析错误。"
 
-#: src/cryptsetup.c:401
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "无效的 PIM 值：0。"
 
-#: src/cryptsetup.c:404
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "无效的 PIM 值：超出范围。"
 
-#: src/cryptsetup.c:427
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "未能用此密码探测到设备标头。"
 
-#: src/cryptsetup.c:500 src/cryptsetup.c:676
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "%s 不是有效的 BITLK 设备。"
 
-#: src/cryptsetup.c:508
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "无法确定 BITLK 的卷密钥大小，请使用 --key-size 选项。"
 
-#: src/cryptsetup.c:550
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
 "This dump should be always stored encrypted on safe place."
 msgstr ""
+"包含卷密钥的标头导出属于敏感信息，\n"
+"它使得无需口令即可访问加密分区。\n"
+"此类导出应始终以加密形式存放在安全的位置。"
 
-#: src/cryptsetup.c:617 src/cryptsetup.c:698 src/cryptsetup.c:2643
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
 "This dump should be stored encrypted in a safe place."
 msgstr ""
+"包含卷密钥的标头导出属于敏感信息，\n"
+"它使得无需口令即可访问加密分区。\n"
+"此类导出应以加密形式存放在安全的位置。"
 
-#: src/cryptsetup.c:753 src/cryptsetup.c:783
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "%s 不是有效的 FVAULT2 设备。"
 
-#: src/cryptsetup.c:791
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "无法确定 FVAULT2 的卷密钥大小，请使用 --key-size 选项。"
 
-#: src/cryptsetup.c:845 src/veritysetup.c:310 src/integritysetup.c:396
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
-msgstr ""
+msgstr "设备 %s 仍处于激活状态，且已计划延迟删除。\n"
 
 # stat() 主要就是出来一个各种文件信息……
-#: src/cryptsetup.c:879 src/cryptsetup.c:1899 src/cryptsetup.c:2173
-#: src/cryptsetup.c:2327 src/cryptsetup.c:2774 src/cryptsetup.c:2856
-#: src/cryptsetup.c:3382
-#, fuzzy, c-format
-#| msgid "Failed to stat key file.\n"
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
+#, c-format
 msgid "Failed to set external tokens path %s."
-msgstr "获取 (stat) 密钥文件统计数据失败。\n"
+msgstr "未能设置外部令牌路径 %s。"
 
-#: src/cryptsetup.c:888
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
-msgstr ""
+msgstr "调整激活设备的大小需要密钥环中的卷密钥，但已设置 --disable-keyring 选项。"
 
-#: src/cryptsetup.c:1048
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "基准测试已中断。"
 
-#: src/cryptsetup.c:1069
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "PBKDF2-%-9s     N/A\n"
 
-#: src/cryptsetup.c:1071
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "PBKDF2-%-9s %7u 迭代/秒，对于 %zu 位密钥\n"
 
-#: src/cryptsetup.c:1085
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s N/A\n"
 
-#: src/cryptsetup.c:1087
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u 次迭代、%5u 内存、%1u 并行线程（CPU），对于 %zu 位密钥（请求了 %u 毫秒时间）\n"
 
-#: src/cryptsetup.c:1111
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "基准测试结果不可靠。"
 
-#: src/cryptsetup.c:1161
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# 测试仅使用内存（无存储 IO）。\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1186
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s算法       |      密钥 | 加密            | 解密\n"
 
-#: src/cryptsetup.c:1194
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "加密方法 %s（%i 位密钥）不可用。"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1213
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     算法      |      密钥 |    加密         |      解密\n"
 
-#: src/cryptsetup.c:1224
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "不可用"
 
-#: src/cryptsetup.c:1249
+#: src/cryptsetup.c:1242
+msgid "# Cipher speed test is not available.\n"
+msgstr "# 加密算法速度测试不可用。\n"
+
+#: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
 "and continue (upgrade metadata) only if you acknowledge the operation as genuine."
 msgstr ""
+"检测到未受保护的 LUKS2 重新加密元数据。请确认此重新加密操作确为您所需（参见 luksDump 输出），\n"
+"只有在您确认该操作确实由您发起时才继续（升级元数据）。"
 
-#: src/cryptsetup.c:1255
-#, fuzzy
-#| msgid "Enter passphrase to be deleted: "
+#: src/cryptsetup.c:1264
 msgid "Enter passphrase to protect and upgrade reencryption metadata: "
-msgstr "输入要移除的口令: "
+msgstr "输入用于保护并升级重新加密元数据的口令: "
 
-#: src/cryptsetup.c:1299
+#: src/cryptsetup.c:1308
 msgid "Really proceed with LUKS2 reencryption recovery?"
-msgstr ""
+msgstr "确定要继续进行 LUKS2 重新加密恢复吗？"
 
-#: src/cryptsetup.c:1308
-#, fuzzy
-#| msgid "Enter passphrase to be deleted: "
+#: src/cryptsetup.c:1317
 msgid "Enter passphrase to verify reencryption metadata digest: "
-msgstr "输入要移除的口令: "
+msgstr "输入用于校验重新加密元数据摘要的口令: "
 
-#: src/cryptsetup.c:1310
-#, fuzzy
-#| msgid "Enter passphrase for key slot %u: "
+#: src/cryptsetup.c:1319
 msgid "Enter passphrase for reencryption recovery: "
-msgstr "输入密钥槽 %u 的密码："
+msgstr "输入用于重新加密恢复的口令: "
 
-#: src/cryptsetup.c:1370
+#: src/cryptsetup.c:1381
 msgid "Really try to repair LUKS device header?"
 msgstr "确定要尝试修复 LUKS 设备标头吗？"
 
-#: src/cryptsetup.c:1394 src/integritysetup.c:76 src/integritysetup.c:234
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2330,240 +2366,229 @@ msgstr ""
 "\n"
 "擦除被打断。"
 
-#: src/cryptsetup.c:1399 src/integritysetup.c:81 src/integritysetup.c:271
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
 msgstr ""
+"正在擦除设备以初始化完整性校验和。\n"
+"您可以按 CTRL+c 中断此操作（设备中未被擦除的部分将含有无效的校验和）。\n"
 
-#: src/cryptsetup.c:1421 src/integritysetup.c:103
-#, fuzzy, c-format
-#| msgid "Cannot open temporary LUKS device.\n"
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
+#, c-format
 msgid "Cannot deactivate temporary device %s."
-msgstr "无法打开临时 LUKS 设备。\n"
+msgstr "无法停用临时设备 %s。"
+
+#: src/cryptsetup.c:1484
+msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
+msgstr "OPAL 纯硬件加密不支持 --cipher 和 --key-size，已忽略这些选项。"
 
-#: src/cryptsetup.c:1476
+#: src/cryptsetup.c:1497
 msgid "Integrity option can be used only for LUKS2 format."
-msgstr ""
+msgstr "数据完整性选项只能用于 LUKS2 格式。"
 
-#: src/cryptsetup.c:1481 src/cryptsetup.c:1546
-#, fuzzy
-#| msgid "Unsupported LUKS version %d."
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
 msgid "Unsupported LUKS2 metadata size options."
-msgstr "不支持的 LUKS 版本 %d。"
+msgstr "不支持的 LUKS2 元数据大小选项。"
 
-#: src/cryptsetup.c:1486
-#, fuzzy
-#| msgid "This operation is supported only for LUKS2 device."
+#: src/cryptsetup.c:1507
 msgid "OPAL is supported only for LUKS2 format."
-msgstr "此操作只适用 LUKS2 设备。"
+msgstr "只有 LUKS2 格式支持 OPAL。"
 
-#: src/cryptsetup.c:1495
+#: src/cryptsetup.c:1512
+msgid "Inline hw tags are supported only for LUKS2 format."
+msgstr "只有 LUKS2 格式支持内联硬件标签。"
+
+#: src/cryptsetup.c:1521
 msgid "Header file does not exist, do you want to create it?"
 msgstr "标头文件不存在，是否要创建它？"
 
-#: src/cryptsetup.c:1503
+#: src/cryptsetup.c:1529
 #, c-format
 msgid "Cannot create header file %s."
 msgstr "无法创建标头文件 %s。"
 
-#: src/cryptsetup.c:1526 src/integritysetup.c:131 src/integritysetup.c:139
-#: src/integritysetup.c:148 src/integritysetup.c:311 src/integritysetup.c:319
-#: src/integritysetup.c:329
-#, fuzzy
-#| msgid "No known cipher specification pattern detected.\n"
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
-msgstr "未探测到已知的加密方法特征。\n"
+msgstr "未探测到已知的完整性校验规格特征。"
 
-#: src/cryptsetup.c:1539
+#: src/cryptsetup.c:1557
+msgid "Cannot use specified integrity key size."
+msgstr "无法使用指定的完整性校验密钥大小。"
+
+#: src/cryptsetup.c:1575
 #, c-format
 msgid "Cannot use %s as on-disk header."
 msgstr "无法将 %s 作为磁盘上的标头使用。"
 
-#: src/cryptsetup.c:1568 src/integritysetup.c:168
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "这将覆盖 %s 上的数据，该动作不可取消。"
 
-#: src/cryptsetup.c:1605
+#: src/cryptsetup.c:1641
 msgid "OPAL Admin password cannot be empty."
-msgstr ""
+msgstr "OPAL 管理员密码不能为空。"
 
 # stat() 主要就是出来一个各种文件信息……
-#: src/cryptsetup.c:1619 src/cryptsetup.c:2190 src/cryptsetup.c:2340
-#: src/cryptsetup.c:2500 src/cryptsetup.c:2566 src/utils_reencrypt_luks1.c:430
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
 msgid "Failed to set pbkdf parameters."
 msgstr "设置 pbkdf 参数失败。"
 
-#: src/cryptsetup.c:1751
-msgid "Type specification in --link-vk-to-keyring keyring specification is ignored."
-msgstr ""
-
-#: src/cryptsetup.c:1816
-msgid "Key types have to be the same for both volume keys."
-msgstr ""
-
-#: src/cryptsetup.c:1821
-#, fuzzy
-#| msgid "Failed to load key in kernel keyring."
-msgid "Both volume keys have to be linked to the same keyring."
-msgstr "在内核密钥环中加载密钥失败。"
-
-#: src/cryptsetup.c:1831
-msgid "You need to supply more key names."
-msgstr ""
-
-#: src/cryptsetup.c:1835
-msgid "Invalid --link-vk-to-keyring value."
-msgstr ""
-
-#: src/cryptsetup.c:1880
-#, fuzzy
-#| msgid "Reduced data offset is allowed only for detached LUKS header.\n"
+#: src/cryptsetup.c:1786
 msgid "Reduced data offset is allowed only for detached LUKS header."
-msgstr "仅已脱离的 LUKS 数据头可以使用缩减的数据偏移。\n"
+msgstr "只有分离的 LUKS 标头才允许使用缩减的数据偏移量。"
 
-#: src/cryptsetup.c:1887
+#: src/cryptsetup.c:1793
 #, c-format
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
-msgstr ""
+msgstr "LUKS 文件容器 %s 太小，无法激活，没有剩余空间存放数据。"
 
-#: src/cryptsetup.c:1914 src/cryptsetup.c:2346
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
-msgstr ""
+msgstr "无法确定不含密钥槽的 LUKS 的卷密钥大小，请使用 --key-size 选项。"
+
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
+msgid "Device requires two volume keys."
+msgstr "设备需要两个卷密钥。"
+
+#: src/cryptsetup.c:1889
+msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
+msgstr "在 OPAL 纯硬件加密下，部分指定的激活参数已被忽略。"
 
-#: src/cryptsetup.c:1981
+#: src/cryptsetup.c:1894
 msgid "Device activated but cannot make flags persistent."
-msgstr ""
+msgstr "设备已激活，但无法将旗标设为持久。"
 
-#: src/cryptsetup.c:2065 src/cryptsetup.c:2133
-#, fuzzy, c-format
-#| msgid "Key slot %d selected for deletion.\n"
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
+#, c-format
 msgid "Keyslot %d is selected for deletion."
-msgstr "已选中密钥槽 %d 以删除。\n"
+msgstr "已选中密钥槽 %d 进行删除。"
 
-#: src/cryptsetup.c:2077 src/cryptsetup.c:2137
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
 msgid "This is the last keyslot. Device will become unusable after purging this key."
 msgstr "这是最后一个密钥槽。设备在清空此密钥后将不可用。"
 
-#: src/cryptsetup.c:2078
+#: src/cryptsetup.c:1987
 msgid "Enter any remaining passphrase: "
 msgstr "输入任意剩余的口令: "
 
-#: src/cryptsetup.c:2079 src/cryptsetup.c:2139
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
 msgid "Operation aborted, the keyslot was NOT wiped.\n"
 msgstr "操作中止，密钥槽【未被】擦除。\n"
 
-#: src/cryptsetup.c:2115
+#: src/cryptsetup.c:2024
 msgid "Enter passphrase to be deleted: "
 msgstr "输入要移除的口令: "
 
-#: src/cryptsetup.c:2165 src/cryptsetup.c:2549 src/cryptsetup.c:3206
-#: src/cryptsetup.c:3373
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "设备 %s 不是有效的 LUKS2 设备。"
 
-#: src/cryptsetup.c:2204 src/cryptsetup.c:2423
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
 msgid "Enter new passphrase for key slot: "
 msgstr "输入密钥槽的新口令: "
 
-#: src/cryptsetup.c:2306
-#, fuzzy
-#| msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n"
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
+#, c-format
+msgid "Enter token PIN: "
+msgstr "输入令牌 PIN："
+
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
+#, c-format
+msgid "Enter token %d PIN: "
+msgstr "输入令牌 %d PIN："
+
+#: src/cryptsetup.c:2208
 msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
-msgstr "警告：在纯文本模式下指定密钥文件时将忽略参数 --hash。\n"
+msgstr "警告：--key-slot 参数用于指定新的密钥槽编号。\n"
 
-#: src/cryptsetup.c:2379 src/utils_reencrypt_luks1.c:1096
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
 #, c-format
 msgid "Enter any existing passphrase: "
 msgstr "输入任意已存在的口令: "
 
-#: src/cryptsetup.c:2504
+#: src/cryptsetup.c:2381
 msgid "Enter passphrase to be changed: "
 msgstr "输入要更改的口令: "
 
-#: src/cryptsetup.c:2520 src/utils_reencrypt_luks1.c:1082
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
 msgid "Enter new passphrase: "
 msgstr "输入新口令: "
 
-#: src/cryptsetup.c:2570
-#, fuzzy
-#| msgid "Enter passphrase for key slot %u: "
+#: src/cryptsetup.c:2447
 msgid "Enter passphrase for keyslot to be converted: "
-msgstr "输入密钥槽 %u 的密码："
+msgstr "输入待转换密钥槽的口令: "
 
-#: src/cryptsetup.c:2594
-#, fuzzy
-#| msgid "Only one device argument for isLuks operation is supported.\n"
+#: src/cryptsetup.c:2471
 msgid "Only one device argument for isLuks operation is supported."
-msgstr "isLuks 操作仅支持一个设备参数。\n"
+msgstr "isLuks 操作仅支持一个设备参数。"
 
-#: src/cryptsetup.c:2702
-#, fuzzy, c-format
-#| msgid "Key slot %d is not used.\n"
+#: src/cryptsetup.c:2576
+#, c-format
 msgid "Keyslot %d does not contain unbound key."
-msgstr "密钥槽 %d 未使用。\n"
+msgstr "密钥槽 %d 不含未绑定的密钥。"
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2581
 msgid ""
 "The header dump with unbound key is sensitive information.\n"
 "This dump should be stored encrypted in a safe place."
 msgstr ""
+"包含未绑定密钥的标头导出属于敏感信息。\n"
+"此类导出应以加密形式存放在安全的位置。"
 
-#: src/cryptsetup.c:2802 src/cryptsetup.c:2839
-#, fuzzy, c-format
-#| msgid "show active device status"
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
+#, c-format
 msgid "%s is not active %s device name."
-msgstr "显示已激活的设备信息"
+msgstr "%s 不是已激活的 %s 设备名称。"
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
-msgstr ""
+msgstr "%s 不是已激活的 LUKS 设备名称，或者标头缺失。"
 
-#: src/cryptsetup.c:2912 src/cryptsetup.c:2931
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "必须指定 --header-backup-file 选项。"
 
-#: src/cryptsetup.c:2962
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
-msgstr ""
+msgstr "%s 不是 cryptsetup 所管理的设备。"
 
-#: src/cryptsetup.c:2973
-#, fuzzy, c-format
-#| msgid "Resume is not supported for device %s."
+#: src/cryptsetup.c:2846
+#, c-format
 msgid "Refresh is not supported for device type %s"
-msgstr "设备 %s 不支持恢复。"
+msgstr "设备类型 %s 不支持刷新"
 
-#: src/cryptsetup.c:3023
-#, fuzzy, c-format
-#| msgid "Unrecognized metadata device type %s.\n"
+#: src/cryptsetup.c:2896
+#, c-format
 msgid "Unrecognized metadata device type %s."
-msgstr "未能识别的元数据设备类型 %s。\n"
+msgstr "未能识别的元数据设备类型 %s。"
 
-#: src/cryptsetup.c:3025
-#, fuzzy
-#| msgid "Command requires device and mapped name as arguments.\n"
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
-msgstr "命令需要设备及映射名作为参数。\n"
+msgstr "命令需要设备及映射名作为参数。"
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "输入 OPAL PSID："
 
-#: src/cryptsetup.c:3035
-#, fuzzy
-#| msgid "Enter new passphrase: "
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
-msgstr "输入新口令: "
+msgstr "输入 OPAL 管理员密码: "
 
-#: src/cryptsetup.c:3043
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
-msgstr ""
+msgstr "警告：整个磁盘将恢复出厂设置，所有数据都会丢失！是否继续？"
 
-#: src/cryptsetup.c:3086
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2572,373 +2597,365 @@ msgstr ""
 "该操作将清空设备 %s 上所有的密钥槽。\n"
 "设备在此操作后将不可用。"
 
-#: src/cryptsetup.c:3093
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "操作已中止，密钥槽没有被擦除。\n"
 
-#: src/cryptsetup.c:3132
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
-msgstr ""
+msgstr "无效的 LUKS 类型，只支持 luks1 和 luks2。"
 
-#: src/cryptsetup.c:3148
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "设备已为 %s 类型。"
 
-#: src/cryptsetup.c:3155
-#, fuzzy, c-format
-#| msgid "This operation is not supported for %s crypt device.\n"
+#: src/cryptsetup.c:3036
+#, c-format
 msgid "This operation will convert %s to %s format.\n"
-msgstr "不支持在 %s 加密设备上执行此操作。\n"
+msgstr "此操作会将 %s 转换为 %s 格式。\n"
 
-#: src/cryptsetup.c:3158
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
-msgstr ""
+msgstr "操作已中止，设备未被转换。\n"
 
-#: src/cryptsetup.c:3198
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "选项 --priority、--label 或 --subsystem 缺失。"
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3272 src/cryptsetup.c:3292
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "令牌 %d 无效。"
 
-#: src/cryptsetup.c:3235 src/cryptsetup.c:3295
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "令牌 %d 正在使用中。"
 
 # stat() 主要就是出来一个各种文件信息……
-#: src/cryptsetup.c:3247
-#, fuzzy, c-format
-#| msgid "Failed to stat key file.\n"
+#: src/cryptsetup.c:3128
+#, c-format
 msgid "Failed to add luks2-keyring token %d."
-msgstr "获取 (stat) 密钥文件统计数据失败。\n"
+msgstr "未能添加 luks2-keyring 令牌 %d。"
 
-#: src/cryptsetup.c:3258 src/cryptsetup.c:3321
-#, fuzzy, c-format
-#| msgid "Failed to swap new key slot.\n"
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
+#, c-format
 msgid "Failed to assign token %d to keyslot %d."
-msgstr "交换新密钥槽失败。\n"
+msgstr "未能将令牌 %d 分配给密钥槽 %d。"
 
-#: src/cryptsetup.c:3275
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "令牌 %d 未使用。"
 
-#: src/cryptsetup.c:3312
-#, fuzzy
-#| msgid "Failed to open key file."
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
-msgstr "打开 (open) 密钥文件失败。"
+msgstr "未能从文件导入令牌。"
 
-#: src/cryptsetup.c:3337
-#, fuzzy, c-format
-#| msgid "Failed to swap new key slot.\n"
+#: src/cryptsetup.c:3218
+#, c-format
 msgid "Failed to get token %d for export."
-msgstr "交换新密钥槽失败。\n"
+msgstr "未能获取要导出的令牌 %d。"
 
-#: src/cryptsetup.c:3350
-#, fuzzy, c-format
-#| msgid "Failed to swap new key slot.\n"
+#: src/cryptsetup.c:3231
+#, c-format
 msgid "Token %d is not assigned to keyslot %d."
-msgstr "交换新密钥槽失败。\n"
+msgstr "令牌 %d 未分配给密钥槽 %d。"
 
-#: src/cryptsetup.c:3352 src/cryptsetup.c:3359
-#, fuzzy, c-format
-#| msgid "Failed to swap new key slot.\n"
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
+#, c-format
 msgid "Failed to unassign token %d from keyslot %d."
-msgstr "交换新密钥槽失败。\n"
+msgstr "未能将令牌 %d 从密钥槽 %d 解除分配。"
 
-#: src/cryptsetup.c:3418
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "选项 --tcrypt-hidden, --tcrypt-system 或 --tcrypt-backup 只支持 TCRYPT 设备。"
 
-#: src/cryptsetup.c:3421
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "选项 --veracrypt、--disable-veracrypt 只支持 TCRYPT 设备类型。"
 
-#: src/cryptsetup.c:3424
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "选项 --veracrypt-pim 只支持兼容 VeraCrypt 的设备。"
 
-#: src/cryptsetup.c:3428
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "选项 --veracrypt-query-pim 只支持兼容 VeraCrypt 的设备。"
 
-#: src/cryptsetup.c:3430
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "选项 --veracrypt-pim、--veracrypt-query-pim 互斥。"
 
-#: src/cryptsetup.c:3439
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "不允许将选项 --persistent 与 --test-passphrase 一起使用。"
 
-#: src/cryptsetup.c:3442
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "选项 --refresh、--test-passphrase 互斥。"
 
-#: src/cryptsetup.c:3445
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "选项 --shared 只适用于打开纯（plain）设备。"
 
-#: src/cryptsetup.c:3448
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "选项 --skip 只适用于打开纯（plain）设备和 loopaes 设备。"
 
-#: src/cryptsetup.c:3451
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "选项 --offset 只适用于打开纯（plain）设备和 loopaes 设备。"
 
-#: src/cryptsetup.c:3454
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "选项 --tcrypt-hidden 不能与 --allow-discards 共用。"
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "只有纯（plain）设备可以在打开时指定扇区大小。"
 
-#: src/cryptsetup.c:3462
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "只有扇区大小超过512字节的纯（plain）设备可以使用大IV扇区选项。"
 
-#: src/cryptsetup.c:3467
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "选项 --test-passphrase 只能用于打开 LUKS、TCRYPT、BITLK、FVAULT2 设备。"
 
-#: src/cryptsetup.c:3470 src/cryptsetup.c:3493
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "选项 --device-size 和 --size 不能组合使用。"
 
-#: src/cryptsetup.c:3473
-#, fuzzy
-#| msgid "Option --shared is allowed only for open of plain device.\n"
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
-msgstr "选项 --shared 只适用于打开纯（plain）设备。\n"
+msgstr "选项 --unbound 只适用于打开 luks 设备。"
 
-#: src/cryptsetup.c:3476
-#, fuzzy
-#| msgid "Option --new cannot be used together with --decrypt."
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
-msgstr "选项 --new 不可与 --decrypt 共用。"
+msgstr "选项 --unbound 不能在没有 --test-passphrase 的情况下使用。"
 
-#: src/cryptsetup.c:3485 src/veritysetup.c:658 src/integritysetup.c:754
-msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
-msgstr ""
+#: src/cryptsetup.c:3361
+msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
+msgstr "选项 --volume-key-keyring 不能与 --hash 或 --volume-key-file 组合使用。"
 
-#: src/cryptsetup.c:3501
-msgid "Options --reduce-device-size and --device-size cannot be combined."
-msgstr ""
+#: src/cryptsetup.c:3364
+msgid "Both --volume-key-file options must be paired with respective --key-size options."
+msgstr "两个 --volume-key-file 选项都必须与各自对应的 --key-size 选项配对使用。"
 
-#: src/cryptsetup.c:3504
-#, fuzzy
-#| msgid "This operation is supported only for LUKS2 device."
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
+msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
+msgstr "选项 --cancel-deferred 和 --deferred 不能一起使用。"
+
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
-msgstr "此操作只适用 LUKS2 设备。"
+msgstr "选项 --active-name 只能为 LUKS2 设备设置。"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
-msgstr ""
+msgstr "选项 --active-name 和 --force-offline-reencrypt 不能组合使用。"
 
-#: src/cryptsetup.c:3515 src/cryptsetup.c:3545
+#: src/cryptsetup.c:3395
+msgid "Options --new-volume-key-file and --keep-key cannot be combined."
+msgstr "选项 --new-volume-key-file 和 --keep-key 不能组合使用。"
+
+#: src/cryptsetup.c:3398
+msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
+msgstr "选项 --new-volume-key-keyring 和 --keep-key 不能组合使用。"
+
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
-msgstr ""
+msgstr "必须指定密钥槽。"
 
-#: src/cryptsetup.c:3523
-#, fuzzy
-#| msgid "Option --align-payload is allowed only for luksFormat."
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
-msgstr "选项 --align-payload 只允许用于 luksFormat。"
+msgstr "选项 --align-payload 和 --offset 不能组合使用。"
 
-#: src/cryptsetup.c:3526
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
-msgstr ""
+msgstr "选项 --integrity-no-wipe 只能用于带完整性校验扩展的 format 动作。"
 
-#: src/cryptsetup.c:3529
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "--use-[u]random 选项只能用一处。"
 
-#: src/cryptsetup.c:3537
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
-msgstr ""
+msgstr "使用 --unbound 选项时必须指定密钥大小。"
 
-#: src/cryptsetup.c:3557
-#, fuzzy
-#| msgid "Invalid device %s.\n"
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
-msgstr "设备 %s 无效。\n"
+msgstr "无效的令牌动作。"
 
-#: src/cryptsetup.c:3560
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
-msgstr ""
+msgstr "对于 token add 动作，--key-description 参数是必需的。"
 
-#: src/cryptsetup.c:3564 src/cryptsetup.c:3577
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
-msgstr ""
+msgstr "此动作需要指定具体的令牌。请使用 --token-id 参数。"
 
-#: src/cryptsetup.c:3568
-#, fuzzy
-#| msgid "Option --new cannot be used together with --decrypt."
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
-msgstr "选项 --new 不可与 --decrypt 共用。"
+msgstr "选项 --unbound 仅在 token add 动作中有效。"
 
-#: src/cryptsetup.c:3570
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
-msgstr ""
+msgstr "选项 --key-slot 和 --unbound 不能组合使用。"
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
-msgstr ""
+msgstr "此动作需要指定具体的密钥槽。请使用 --key-slot 参数。"
 
-#: src/cryptsetup.c:3591
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<设备> [--type <类型>] [<名称>]"
 
-#: src/cryptsetup.c:3591 src/veritysetup.c:478 src/integritysetup.c:531
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
 msgid "open device as <name>"
 msgstr "以 <名称> 打开设备"
 
-#: src/cryptsetup.c:3592 src/cryptsetup.c:3593 src/cryptsetup.c:3594
-#: src/veritysetup.c:479 src/veritysetup.c:480 src/integritysetup.c:532
-#: src/integritysetup.c:533 src/integritysetup.c:535
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
+#: src/integritysetup.c:562 src/integritysetup.c:564
 msgid "<name>"
 msgstr "<名称>"
 
-#: src/cryptsetup.c:3592 src/veritysetup.c:479 src/integritysetup.c:532
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
 msgid "close device (remove mapping)"
 msgstr "关闭设备（移除映射）"
 
-#: src/cryptsetup.c:3593 src/integritysetup.c:535
+#: src/cryptsetup.c:3484 src/integritysetup.c:564
 msgid "resize active device"
 msgstr "改变活动设备大小"
 
-#: src/cryptsetup.c:3594
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "显示设备状态"
 
-#: src/cryptsetup.c:3595
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
-msgstr ""
+msgstr "[--cipher <加密算法>]"
 
-#: src/cryptsetup.c:3595
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "基准测试加密方法"
 
-#: src/cryptsetup.c:3596 src/cryptsetup.c:3597 src/cryptsetup.c:3598
-#: src/cryptsetup.c:3599 src/cryptsetup.c:3600 src/cryptsetup.c:3607
-#: src/cryptsetup.c:3608 src/cryptsetup.c:3609 src/cryptsetup.c:3610
-#: src/cryptsetup.c:3611 src/cryptsetup.c:3612 src/cryptsetup.c:3613
-#: src/cryptsetup.c:3614 src/cryptsetup.c:3615 src/cryptsetup.c:3616
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<设备>"
 
-#: src/cryptsetup.c:3596
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "尝试修复磁盘上的元数据"
 
-#: src/cryptsetup.c:3597
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "重加密 LUKS2 设备"
 
-#: src/cryptsetup.c:3598
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "清空所有密钥槽（移除加密密钥）"
 
-#: src/cryptsetup.c:3599
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "在 LUKS 和 LUKS2 格式之间转换"
 
-#: src/cryptsetup.c:3600
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "为 LUKS2 设置永久配置选项"
 
-#: src/cryptsetup.c:3601 src/cryptsetup.c:3602
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<设备> [<新密钥文件>]"
 
-#: src/cryptsetup.c:3601
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "格式化一个 LUKS 设备"
 
-#: src/cryptsetup.c:3602
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "向 LUKS 设备添加密钥"
 
-#: src/cryptsetup.c:3603 src/cryptsetup.c:3604 src/cryptsetup.c:3605
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<设备> [<密钥文件>]"
 
-#: src/cryptsetup.c:3603
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "移除 LUKS 设备中指定的密钥或密钥文件"
 
-#: src/cryptsetup.c:3604
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "更改 LUKS 设备中指定的密钥或密钥文件"
 
 # stat() 主要就是出来一个各种文件信息……
-#: src/cryptsetup.c:3605
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "将密钥转换到新的 pbkdf 参数"
 
-#: src/cryptsetup.c:3606
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<设备> <密钥槽>"
 
-#: src/cryptsetup.c:3606
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "从 LUKS 设备清理标号为 <key slot> 的密钥"
 
-#: src/cryptsetup.c:3607
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "输出 LUKS 设备的 UUID（唯一标识符）"
 
-#: src/cryptsetup.c:3608
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "从 <设备> 探测 LUKS 分区标头"
 
-#: src/cryptsetup.c:3609
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "调出 LUKS 分区信息"
 
-#: src/cryptsetup.c:3610
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "调出 TCRYPT 设备信息"
 
-#: src/cryptsetup.c:3611
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "调出 BITLK 设备信息"
 
-#: src/cryptsetup.c:3612
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "调出 FVAULT2 设备信息"
 
-#: src/cryptsetup.c:3613
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "挂起 LUKS 设备并清除密钥（冻结所有 IO 操作）"
 
-#: src/cryptsetup.c:3614
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "恢复已挂起的 LUKS 设备"
 
-#: src/cryptsetup.c:3615
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "备份 LUKS 设备标头和密钥槽"
 
-#: src/cryptsetup.c:3616
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "恢复 LUKS 设备标头和密钥槽"
 
-#: src/cryptsetup.c:3617
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<add|remove|import|export> <设备>"
 
-#: src/cryptsetup.c:3617
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "操作 LUKS2 令牌"
 
-#: src/cryptsetup.c:3636 src/veritysetup.c:496 src/integritysetup.c:550
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2946,7 +2963,7 @@ msgstr ""
 "\n"
 "<动作> 为其中之一：\n"
 
-#: src/cryptsetup.c:3642
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2958,7 +2975,7 @@ msgstr ""
 "\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3646
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -2973,31 +2990,37 @@ msgstr ""
 "<key slot> 为需要更改的 LUKS 密钥槽\n"
 "<key file> 提供给 luksAddKey 动作的密钥文件\n"
 
-#: src/cryptsetup.c:3653
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
 "Default compiled-in metadata format is %s (for luksFormat action).\n"
 msgstr ""
+"\n"
+"编译时内置的默认元数据格式为 %s（用于 luksFormat 动作）。\n"
 
-#: src/cryptsetup.c:3658
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
 msgstr ""
+"\n"
+"已启用 LUKS2 外部令牌插件支持。\n"
 
-#: src/cryptsetup.c:3659
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
-msgstr ""
+msgstr "LUKS2 外部令牌插件路径：%s。\n"
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
 msgstr ""
+"\n"
+"已禁用 LUKS2 外部令牌插件支持。\n"
 
-#: src/cryptsetup.c:3665
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3015,7 +3038,7 @@ msgstr ""
 "\t迭代时间：%d，内存需求：%dkB，线程数：%d\n"
 "\n"
 
-#: src/cryptsetup.c:3676
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3030,113 +3053,126 @@ msgstr ""
 "\tplain：%s, 密钥：%d 位, 密码哈希：%s\n"
 "\tLUKS1：%s, 密钥：%d bits, LUKS 数据头哈希：%s, RNG：%s\n"
 
-#: src/cryptsetup.c:3685
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
-msgstr ""
+msgstr "\tLUKS：XTS 模式（两个内部密钥）下的默认密钥大小将翻倍。\n"
 
-#: src/cryptsetup.c:3703 src/veritysetup.c:638 src/integritysetup.c:710
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: 需要 %s 作为参数"
 
-#: src/cryptsetup.c:3743 src/utils_reencrypt_luks1.c:1145
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "密钥槽无效。"
 
-#: src/cryptsetup.c:3771
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "设备大小必须为 512 字节扇区的倍数。"
 
-#: src/cryptsetup.c:3776
-#, fuzzy
-#| msgid "Invalid device size specification."
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
-msgstr "无效的设备大小指标。"
+msgstr "无效的最大重新加密热区大小指标。"
 
-#: src/cryptsetup.c:3790 src/cryptsetup.c:3802
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "密钥尺寸必须是 8 的倍数"
 
-#: src/cryptsetup.c:3809
+#: src/cryptsetup.c:3688
+msgid "At most 2 key size specifications can be supplied."
+msgstr "最多只能提供 2 个密钥大小规格。"
+
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
-msgstr ""
+msgstr "最多只能提供 %d 个卷密钥规格。"
 
-#: src/cryptsetup.c:3821
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
-msgstr ""
+msgstr "最多只能提供 %d 个密钥环链接规格。"
 
-#: src/cryptsetup.c:3830
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "最大设备缩减大小为 1 GiB。"
 
-#: src/cryptsetup.c:3833
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "缩减大小必须为 512 字节扇区的倍数。"
 
-#: src/cryptsetup.c:3850
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
-msgstr ""
+msgstr "选项 --priority 只能为 ignore/normal/prefer。"
+
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "无效的最大尝试次数指标。"
 
-#: src/cryptsetup.c:3869 src/veritysetup.c:559 src/integritysetup.c:630
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
 msgid "Show this help message"
 msgstr "显示此帮助"
 
-#: src/cryptsetup.c:3870 src/veritysetup.c:560 src/integritysetup.c:631
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
 msgid "Display brief usage"
 msgstr "显示简短用法"
 
-#: src/cryptsetup.c:3871 src/veritysetup.c:561 src/integritysetup.c:632
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
 msgid "Print package version"
 msgstr "打印软件包版本"
 
-#: src/cryptsetup.c:3882 src/veritysetup.c:572 src/integritysetup.c:643
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
 msgid "Help options:"
 msgstr "帮助选项："
 
-#: src/cryptsetup.c:3905 src/veritysetup.c:593 src/integritysetup.c:663
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[选项…] <动作> <动作特定参数>"
 
-#: src/cryptsetup.c:3914 src/veritysetup.c:602 src/integritysetup.c:674
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
 msgid "Argument <action> missing."
 msgstr "缺失参数 <动作>。"
 
-#: src/cryptsetup.c:3993 src/veritysetup.c:633 src/integritysetup.c:705
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
 msgid "Unknown action."
 msgstr "未知动作。"
 
-#: src/cryptsetup.c:4011
-#, fuzzy
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
-msgstr "选项 --key-file 优先使用指定的密钥文件参数。"
+msgstr "选项 --key-file 的优先级高于指定的密钥文件参数。"
 
-#: src/cryptsetup.c:4017
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "只允许存在一个 --key-file 选项。"
 
-#: src/cryptsetup.c:4022
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
-msgstr ""
+msgstr "基于口令的密钥派生函数（PBKDF）只能是 pbkdf2 或 argon2i/argon2id。"
 
-#: src/cryptsetup.c:4027
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
-msgstr ""
+msgstr "PBKDF 强制迭代次数不能与迭代时间选项组合使用。"
 
-#: src/cryptsetup.c:4032
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
-msgstr ""
+msgstr "密钥环已禁用时无法将卷密钥链入密钥环。"
 
-#: src/cryptsetup.c:4043
+#: src/cryptsetup.c:3961
+msgid "Cannot use keyring key description when keyring is disabled."
+msgstr "密钥环已禁用时无法使用密钥环的密钥描述。"
+
+#: src/cryptsetup.c:3966
+msgid "Inline integrity must be used together with --integrity option."
+msgstr "内联完整性校验必须与 --integrity 选项一同使用。"
+
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
-msgstr ""
+msgstr "选项 --keyslot-cipher 和 --keyslot-key-size 必须一起使用。"
 
-#: src/cryptsetup.c:4051
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
-msgstr ""
+msgstr "未执行任何动作。调用时带有 --test-args 选项。\n"
 
-#: src/cryptsetup.c:4064
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "无法禁用元数据锁定。"
 
@@ -3164,72 +3200,72 @@ msgstr "无法为创建根哈希文件 %s 以供写入。"
 msgid "Cannot write to root hash file %s."
 msgstr "无法写入根哈希文件 %s。"
 
-#: src/veritysetup.c:185 src/veritysetup.c:463
+#: src/veritysetup.c:189 src/veritysetup.c:472
 #, c-format
 msgid "Device %s is not a valid VERITY device."
 msgstr "%s 不是有效的 VERITY 设备。"
 
-#: src/veritysetup.c:202 src/veritysetup.c:219
+#: src/veritysetup.c:206 src/veritysetup.c:223
 #, c-format
 msgid "Cannot read root hash file %s."
 msgstr "无法读取根哈希文件 %s。"
 
-#: src/veritysetup.c:207
+#: src/veritysetup.c:211
 #, c-format
 msgid "Invalid root hash file %s."
 msgstr "无效的根哈希值文件 %s。"
 
-#: src/veritysetup.c:228
+#: src/veritysetup.c:232
 msgid "Invalid root hash string specified."
 msgstr "指定了无效的根哈希值字串。"
 
-#: src/veritysetup.c:236
+#: src/veritysetup.c:240
 #, c-format
 msgid "Invalid signature file %s."
 msgstr "签名文件 %s 无效。"
 
-#: src/veritysetup.c:243
+#: src/veritysetup.c:247
 #, c-format
 msgid "Cannot read signature file %s."
 msgstr "无法读取签名文件 %s。"
 
-#: src/veritysetup.c:266 src/veritysetup.c:280
+#: src/veritysetup.c:270 src/veritysetup.c:287
 msgid "Command requires <root_hash> or --root-hash-file option as argument."
-msgstr ""
+msgstr "此命令需要 <根哈希> 或 --root-hash-file 选项作为参数。"
 
-#: src/veritysetup.c:476
+#: src/veritysetup.c:485
 msgid "<data_device> <hash_device>"
 msgstr "<数据设备> <哈希设备>"
 
-#: src/veritysetup.c:476 src/integritysetup.c:530
+#: src/veritysetup.c:485 src/integritysetup.c:559
 msgid "format device"
 msgstr "格式化设备"
 
-#: src/veritysetup.c:477
+#: src/veritysetup.c:486
 msgid "<data_device> <hash_device> [<root_hash>]"
 msgstr "<数据设备> <哈希设备> [<根哈希值>]"
 
-#: src/veritysetup.c:477
+#: src/veritysetup.c:486
 msgid "verify device"
 msgstr "验证设备"
 
-#: src/veritysetup.c:478
+#: src/veritysetup.c:487
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<数据设备> <名称> <哈希设备> [<根哈希值>]"
 
-#: src/veritysetup.c:480 src/integritysetup.c:533
+#: src/veritysetup.c:489 src/integritysetup.c:562
 msgid "show active device status"
 msgstr "显示已激活的设备信息"
 
-#: src/veritysetup.c:481
+#: src/veritysetup.c:490
 msgid "<hash_device>"
 msgstr "<哈希设备>"
 
-#: src/veritysetup.c:481 src/integritysetup.c:534
+#: src/veritysetup.c:490 src/integritysetup.c:563
 msgid "show on-disk information"
 msgstr "显示磁盘上的信息"
 
-#: src/veritysetup.c:500
+#: src/veritysetup.c:509
 #, c-format
 msgid ""
 "\n"
@@ -3244,7 +3280,7 @@ msgstr ""
 "<哈希设备> 是含有验证信息的设备\n"
 "<根哈希值> 是 <哈希设备> 根节点的哈希值\n"
 
-#: src/veritysetup.c:507
+#: src/veritysetup.c:516
 #, c-format
 msgid ""
 "\n"
@@ -3255,75 +3291,66 @@ msgstr ""
 "编译时决定的默认 dm-verify 参数：\n"
 "\t哈希: %s, 数据块 (字节): %u, 哈希块 (字节): %u, 盐大小: %u, 哈希格式: %u\n"
 
-#: src/veritysetup.c:648
-#, fuzzy
-#| msgid "Option --allow-discards is allowed only for open operation.\n"
+#: src/veritysetup.c:657
 msgid "Option --ignore-corruption and --restart-on-corruption cannot be used together."
-msgstr "选项 --allow-discards 只适用于打开操作。\n"
+msgstr "选项 --ignore-corruption 和 --restart-on-corruption 不能一起使用。"
 
-#: src/veritysetup.c:653
-#, fuzzy
-#| msgid "Option --allow-discards is allowed only for open operation.\n"
+#: src/veritysetup.c:662
 msgid "Option --panic-on-corruption and --restart-on-corruption cannot be used together."
-msgstr "选项 --allow-discards 只适用于打开操作。\n"
+msgstr "选项 --panic-on-corruption 和 --restart-on-corruption 不能一起使用。"
 
-#: src/integritysetup.c:164
+#: src/veritysetup.c:668
+msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
+msgstr "选项 --error-as-corruption 必须与 --panic-on-corruption 或 --restart-on-corruption 一起使用。"
+
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
 "To preserve data device use --no-wipe option (and then activate with --integrity-recalculate)."
 msgstr ""
+"这将覆盖 %s 和 %s 上的数据，该动作不可取消。\n"
+"若要保留数据设备，请使用 --no-wipe 选项（随后用 --integrity-recalculate 激活）。"
 
-#: src/integritysetup.c:204
+#: src/integritysetup.c:215
 #, c-format
-msgid "Formatted with tag size %u, internal integrity %s.\n"
-msgstr ""
+msgid "Formatted with tag size %u%s, internal integrity %s.\n"
+msgstr "已格式化，标签大小为 %u%s，内部完整性校验为 %s。\n"
 
-#: src/integritysetup.c:285
+#: src/integritysetup.c:216
+msgid " (inline hw tags)"
+msgstr "（内联硬件标签）"
+
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
-msgstr ""
+msgstr "不支持设置重新计算旗标，您可以考虑改用 --wipe。"
 
-#: src/integritysetup.c:360 src/integritysetup.c:517
-#, fuzzy, c-format
-#| msgid "Device %s is not a valid VERITY device."
+#: src/integritysetup.c:382 src/integritysetup.c:546
+#, c-format
 msgid "Device %s is not a valid INTEGRITY device."
-msgstr "%s 不是有效的 VERITY 设备。"
+msgstr "设备 %s 不是有效的 INTEGRITY 设备。"
 
-#: src/integritysetup.c:530 src/integritysetup.c:534
-#, fuzzy
-#| msgid "verify device"
+#: src/integritysetup.c:559 src/integritysetup.c:563
 msgid "<integrity_device>"
-msgstr "验证设备"
+msgstr "<完整性设备>"
 
-#: src/integritysetup.c:531
+#: src/integritysetup.c:560
 msgid "<integrity_device> <name>"
-msgstr ""
+msgstr "<完整性设备> <名称>"
 
-#: src/integritysetup.c:554
-#, fuzzy, c-format
-#| msgid ""
-#| "\n"
-#| "<name> is the device to create under %s\n"
-#| "<data_device> is the data device\n"
-#| "<hash_device> is the device containing verification data\n"
-#| "<root_hash> hash of the root node on <hash_device>\n"
+#: src/integritysetup.c:583
+#, c-format
 msgid ""
 "\n"
 "<name> is the device to create under %s\n"
 "<integrity_device> is the device containing data with integrity tags\n"
 msgstr ""
 "\n"
-"<名称> 是在 %s 下要创建的设备\n"
-"<数据设备> 就是数据设备\n"
-"<哈希设备> 是含有验证信息的设备\n"
-"<根哈希值> 是 <哈希设备> 根节点的哈希值\n"
+"<名称> 为要在 %s 下创建的设备\n"
+"<完整性设备> 为含有完整性标签数据的设备\n"
 
-#: src/integritysetup.c:559
-#, fuzzy, c-format
-#| msgid ""
-#| "\n"
-#| "Default compiled-in dm-verity parameters:\n"
-#| "\tHash: %s, Data block (bytes): %u, Hash block (bytes): %u, Salt size: %u, Hash format: %u\n"
+#: src/integritysetup.c:588
+#, c-format
 msgid ""
 "\n"
 "Default compiled-in dm-integrity parameters:\n"
@@ -3331,45 +3358,54 @@ msgid ""
 "\tMaximum keyfile size: %dkB\n"
 msgstr ""
 "\n"
-"编译时决定的默认 dm-verify 参数：\n"
-"\t哈希: %s, 数据块 (字节): %u, 哈希块 (字节): %u, 盐大小: %u, 哈希格式: %u\n"
+"编译时内置的默认 dm-integrity 参数：\n"
+"\t校验和算法：%s\n"
+"\t密钥文件的最大大小：%dkB\n"
 
-#: src/integritysetup.c:616
+#: src/integritysetup.c:645
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
-msgstr ""
+msgstr "--%s 的大小无效。最大为 %u 字节。"
 
-#: src/integritysetup.c:719
+#: src/integritysetup.c:748
 msgid "Both key file and key size options must be specified."
 msgstr "密钥文件和密钥大小选项均必须指定。"
 
-#: src/integritysetup.c:723
+#: src/integritysetup.c:752
 msgid "Both journal integrity key file and key size options must be specified."
-msgstr ""
+msgstr "日志完整性校验密钥文件和密钥大小选项均必须指定。"
 
-#: src/integritysetup.c:726
+#: src/integritysetup.c:755
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "如果使用了日志加密密钥，则必须指定日志完整性校验算法。"
 
-#: src/integritysetup.c:730
+#: src/integritysetup.c:759
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "日志加密密钥文件和密钥大小选项均必须指定。"
 
-#: src/integritysetup.c:733
+#: src/integritysetup.c:762
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "如果使用了日志加密密钥，则必须指定日志加密算法。"
 
-#: src/integritysetup.c:737
+#: src/integritysetup.c:766
 msgid "Recovery and bitmap mode options are mutually exclusive."
-msgstr ""
+msgstr "恢复模式与位图模式选项互斥。"
 
-#: src/integritysetup.c:744
+#: src/integritysetup.c:773
 msgid "Journal options cannot be used in bitmap mode."
-msgstr ""
+msgstr "位图模式下不能使用日志选项。"
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:778
 msgid "Bitmap options can be used only in bitmap mode."
-msgstr ""
+msgstr "位图选项只能在位图模式下使用。"
+
+#: src/integritysetup.c:784
+msgid "Inline mode cannot be combined with journal or bitmap options."
+msgstr "内联模式不能与日志或位图选项组合使用。"
+
+#: src/integritysetup.c:788
+msgid "Inline mode cannot be combined with separate data device."
+msgstr "内联模式不能与独立的数据设备组合使用。"
 
 #: src/utils_tools.c:105
 msgid ""
@@ -3389,6 +3425,9 @@ msgid ""
 "\n"
 "Are you sure? (Type 'yes' in capital letters): "
 msgstr ""
+"%s\n"
+"\n"
+"您确定吗？（请输入大写的 'yes'）: "
 
 #: src/utils_tools.c:113
 msgid "Error reading response from terminal."
@@ -3454,7 +3493,7 @@ msgstr "令牌 %i 已移除。"
 
 #: src/utils_tools.c:268
 msgid "No token could be unlocked with this PIN."
-msgstr ""
+msgstr "没有令牌能用此 PIN 解锁。"
 
 #: src/utils_tools.c:270
 #, c-format
@@ -3464,36 +3503,36 @@ msgstr "令牌 %i 需要 PIN。"
 #: src/utils_tools.c:272
 #, c-format
 msgid "Token (type %s) requires PIN."
-msgstr ""
+msgstr "令牌（类型 %s）需要 PIN。"
 
 #: src/utils_tools.c:275
 #, c-format
 msgid "Token %i cannot unlock assigned keyslot(s) (wrong keyslot passphrase)."
-msgstr ""
+msgstr "令牌 %i 无法解锁所分配的密钥槽（密钥槽口令错误）。"
 
 #: src/utils_tools.c:277
 #, c-format
 msgid "Token (type %s) cannot unlock assigned keyslot(s) (wrong keyslot passphrase)."
-msgstr ""
+msgstr "令牌（类型 %s）无法解锁所分配的密钥槽（密钥槽口令错误）。"
 
 #: src/utils_tools.c:280
 #, c-format
 msgid "Token %i requires additional missing resource."
-msgstr ""
+msgstr "令牌 %i 需要额外的资源，但该资源缺失。"
 
 #: src/utils_tools.c:282
 #, c-format
 msgid "Token (type %s) requires additional missing resource."
-msgstr ""
+msgstr "令牌（类型 %s）需要额外的资源，但该资源缺失。"
 
 #: src/utils_tools.c:285
 #, c-format
 msgid "No usable token (type %s) is available."
-msgstr ""
+msgstr "没有可用的令牌（类型 %s）。"
 
 #: src/utils_tools.c:287
 msgid "No usable token is available."
-msgstr ""
+msgstr "没有可用的令牌。"
 
 #: src/utils_tools.c:380
 #, c-format
@@ -3515,30 +3554,38 @@ msgstr "无法打开密钥文件 %s 以供写入。"
 msgid "Cannot write to keyfile %s."
 msgstr "无法写入密钥文件 %s。"
 
+#: src/utils_tools.c:468
+msgid "Name is too long."
+msgstr "名称过长。"
+
+#: src/utils_tools.c:471
+msgid "Name must not contain '/' character."
+msgstr "名称不能包含“/”字符。"
+
 #: src/utils_progress.c:61
 #, c-format
 msgid "%02<PRIu64>m%02<PRIu64>s"
-msgstr ""
+msgstr "%02<PRIu64>分%02<PRIu64>秒"
 
 #: src/utils_progress.c:63
 #, c-format
 msgid "%02<PRIu64>h%02<PRIu64>m%02<PRIu64>s"
-msgstr ""
+msgstr "%02<PRIu64>时%02<PRIu64>分%02<PRIu64>秒"
 
 #: src/utils_progress.c:65
 #, c-format
 msgid "%02<PRIu64> days"
-msgstr ""
+msgstr "%02<PRIu64> 天"
 
 #: src/utils_progress.c:92 src/utils_progress.c:125
 #, c-format
 msgid "%4<PRIu64> %s written"
-msgstr ""
+msgstr "已写入 %4<PRIu64> %s"
 
 #: src/utils_progress.c:96 src/utils_progress.c:129
 #, c-format
 msgid "speed %5.1f %s/s"
-msgstr ""
+msgstr "速度 %5.1f %s/s"
 
 #. TRANSLATORS: 'time', 'written' and 'speed' string are supposed
 #. to get translated as well. 'eol' is always new-line or empty.
@@ -3547,7 +3594,7 @@ msgstr ""
 #: src/utils_progress.c:105
 #, c-format
 msgid "Progress: %5.1f%%, ETA %s, %s, %s%s"
-msgstr ""
+msgstr "进度：%5.1f%%，预计剩余 %s，%s，%s%s"
 
 #. TRANSLATORS: 'time', 'written' and 'speed' string are supposed
 #. to get translated as well. See above
@@ -3555,7 +3602,7 @@ msgstr ""
 #: src/utils_progress.c:137
 #, c-format
 msgid "Finished, time %s, %s, %s\n"
-msgstr ""
+msgstr "已完成，用时 %s，%s，%s\n"
 
 #: src/utils_password.c:28 src/utils_password.c:59
 #, c-format
@@ -3576,58 +3623,62 @@ msgstr ""
 msgid "Password quality check failed: Bad passphrase (%s)"
 msgstr "密码质量检查失败：无效密码 (%s)"
 
-#: src/utils_password.c:221 src/utils_password.c:235
+#: src/utils_password.c:197
+msgid "Read stopped at maximal interactive input length, passphrase can be trimmed."
+msgstr "已在交互式输入的最大长度处停止读取，口令可能被截断。"
+
+#: src/utils_password.c:224 src/utils_password.c:238
 msgid "Error reading passphrase from terminal."
 msgstr "从终端读取口令时出错。"
 
-#: src/utils_password.c:233
+#: src/utils_password.c:236
 msgid "Verify passphrase: "
 msgstr "确认密码："
 
-#: src/utils_password.c:240
+#: src/utils_password.c:243
 msgid "Passphrases do not match."
 msgstr "口令不匹配。"
 
-#: src/utils_password.c:278
+#: src/utils_password.c:281
 msgid "Cannot use offset with terminal input."
 msgstr "不能将偏移量用于终端输入。"
 
-#: src/utils_password.c:282
+#: src/utils_password.c:285
 #, c-format
 msgid "Enter passphrase: "
 msgstr "输入口令："
 
-#: src/utils_password.c:285
+#: src/utils_password.c:288
 #, c-format
 msgid "Enter passphrase for %s: "
 msgstr "输入 %s 的口令："
 
-#: src/utils_password.c:319
+#: src/utils_password.c:322
 msgid "No key available with this passphrase."
 msgstr "此口令无可用的密钥。"
 
-#: src/utils_password.c:321
+#: src/utils_password.c:324
 msgid "No usable keyslot is available."
-msgstr ""
+msgstr "没有可用的密钥槽。"
 
 #: src/utils_luks.c:55
 msgid "Can't do passphrase verification on non-tty inputs."
 msgstr "无法从非 TTY 输入验证密码。"
 
-#: src/utils_luks.c:173
+#: src/utils_luks.c:179
 #, c-format
 msgid "Failed to open file %s in read-only mode."
 msgstr "以只读模式打开文件 %s 失败。"
 
-#: src/utils_luks.c:186
+#: src/utils_luks.c:193
 msgid "Provide valid LUKS2 token JSON:\n"
-msgstr ""
+msgstr "请提供有效的 LUKS2 令牌 JSON：\n"
 
-#: src/utils_luks.c:193
+#: src/utils_luks.c:200
 msgid "Failed to read JSON file."
 msgstr "读取 JSON 文件失败。"
 
-#: src/utils_luks.c:198
+#: src/utils_luks.c:205
 msgid ""
 "\n"
 "Read interrupted."
@@ -3635,12 +3686,12 @@ msgstr ""
 "\n"
 "读取被打断。"
 
-#: src/utils_luks.c:239
+#: src/utils_luks.c:246
 #, c-format
 msgid "Failed to open file %s in write mode."
 msgstr "未能打开文件 %s 以供写入。"
 
-#: src/utils_luks.c:248
+#: src/utils_luks.c:255
 msgid ""
 "\n"
 "Write interrupted."
@@ -3648,27 +3699,26 @@ msgstr ""
 "\n"
 "写入被打断。"
 
-#: src/utils_luks.c:252
+#: src/utils_luks.c:259
 msgid "Failed to write JSON file."
 msgstr "写入 JSON 文件失败。"
 
-#: src/utils_reencrypt.c:107
+#: src/utils_reencrypt.c:93
 #, c-format
 msgid "Auto-detected active dm device '%s' for data device %s.\n"
-msgstr ""
+msgstr "已为数据设备 %2$s 自动检测到激活的 dm 设备“%1$s”。\n"
 
-#: src/utils_reencrypt.c:111
-#, fuzzy, c-format
-#| msgid "Failed to acquire write lock on device %s."
+#: src/utils_reencrypt.c:97
+#, c-format
 msgid "Failed to auto-detect device %s holders."
-msgstr "未能获取设备 %s 上的写入锁。"
+msgstr "未能自动检测设备 %s 的持有者。"
 
-#: src/utils_reencrypt.c:117
+#: src/utils_reencrypt.c:103
 #, c-format
 msgid "Device %s is not a block device.\n"
 msgstr "设备 %s 不是块设备。\n"
 
-#: src/utils_reencrypt.c:119
+#: src/utils_reencrypt.c:105
 #, c-format
 msgid ""
 "Unable to decide if device %s is activated or not.\n"
@@ -3676,174 +3726,184 @@ msgid ""
 "It may lead to data corruption if the device is actually activated.\n"
 "To run reencryption in online mode, use --active-name parameter instead.\n"
 msgstr ""
+"无法判断设备 %s 是否已激活。\n"
+"您确定要以离线模式继续重新加密吗？\n"
+"如果该设备实际处于激活状态，这可能导致数据损坏。\n"
+"若要以在线模式运行重新加密，请改用 --active-name 参数。\n"
 
-#: src/utils_reencrypt.c:128 src/utils_reencrypt.c:261
+#: src/utils_reencrypt.c:114 src/utils_reencrypt.c:247
 #, c-format
 msgid ""
 "Device %s is not a block device. Can not auto-detect if it is active or not.\n"
 "Use --force-offline-reencrypt to bypass the check and run in offline mode (dangerous!)."
 msgstr ""
+"设备 %s 不是块设备。无法自动检测它是否处于激活状态。\n"
+"请使用 --force-offline-reencrypt 跳过此检查并以离线模式运行（危险！）。"
 
-#: src/utils_reencrypt.c:165 src/utils_reencrypt.c:208
-#: src/utils_reencrypt.c:218
+#: src/utils_reencrypt.c:151 src/utils_reencrypt.c:194
+#: src/utils_reencrypt.c:204
 msgid "Requested --resilience option cannot be applied to current reencryption operation."
-msgstr ""
+msgstr "请求的 --resilience 选项无法应用于当前的重新加密操作。"
 
-#: src/utils_reencrypt.c:190
+#: src/utils_reencrypt.c:176
 msgid "Device is not in LUKS2 encryption. Conflicting option --encrypt."
-msgstr ""
+msgstr "设备未处于 LUKS2 加密过程中。选项 --encrypt 冲突。"
 
-#: src/utils_reencrypt.c:195
+#: src/utils_reencrypt.c:181
 msgid "Device is not in LUKS2 decryption. Conflicting option --decrypt."
-msgstr ""
+msgstr "设备未处于 LUKS2 解密过程中。选项 --decrypt 冲突。"
 
-#: src/utils_reencrypt.c:202
+#: src/utils_reencrypt.c:188
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
-msgstr ""
+msgstr "设备正在使用 datashift 韧性（resilience）模式进行重新加密。请求的 --resilience 选项无法应用。"
+
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
+msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
+msgstr "无法确定不含密钥槽的 LUKS 的卷密钥大小，请使用 --new-key-size 选项。"
 
-#: src/utils_reencrypt.c:280
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
-msgstr ""
+msgstr "设备需要进行重新加密恢复。请先运行 repair。"
 
-#: src/utils_reencrypt.c:294
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
-msgstr ""
+msgstr "设备 %s 已处于 LUKS2 重新加密过程中。您希望恢复先前已初始化的操作吗？"
 
-#: src/utils_reencrypt.c:403
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
-msgstr ""
+msgstr "不再支持旧版 LUKS2 重新加密。"
 
-#: src/utils_reencrypt.c:408
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
-msgstr ""
+msgstr "无法对配置为使用 OPAL 的 LUKS2 设备进行重新加密。"
 
-#: src/utils_reencrypt.c:414
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "不支持带有完整性 profile 信息的设备的重加密。"
 
-#: src/utils_reencrypt.c:451
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
 "(block size: %<PRIu32> bytes) detected on device %s."
 msgstr ""
+"请求的 --sector-size %1$<PRIu32> 与设备 %4$s 上检测到的 %2$s 超级块\n"
+"（块大小：%3$<PRIu32> 字节）不兼容。"
 
-#: src/utils_reencrypt.c:520 src/utils_reencrypt.c:1408
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
-msgstr ""
+msgstr "若不缩减数据设备的大小（--reduce-device-size），则无法在没有分离标头（--header）的情况下进行加密。"
 
-#: src/utils_reencrypt.c:527
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
-msgstr ""
+msgstr "请求的数据偏移量必须小于或等于 --reduce-device-size 参数的一半。"
 
-#: src/utils_reencrypt.c:537
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
-msgstr ""
+msgstr "正在将 --reduce-device-size 的值调整为 --offset %<PRIu64>（扇区）的两倍。\n"
 
-#: src/utils_reencrypt.c:567
-#, fuzzy, c-format
-#| msgid "Requested header backup file %s already exists."
+#: src/utils_reencrypt.c:729
+#, c-format
 msgid "Temporary header file %s already exists. Aborting."
-msgstr "请求的标头备份文件 %s 已存在。"
+msgstr "临时标头文件 %s 已存在。中止。"
 
-#: src/utils_reencrypt.c:569 src/utils_reencrypt.c:576
-#, fuzzy, c-format
-#| msgid "Cannot create header file %s."
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
+#, c-format
 msgid "Cannot create temporary header file %s."
-msgstr "无法创建标头文件 %s。"
+msgstr "无法创建临时标头文件 %s。"
 
-#: src/utils_reencrypt.c:601
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
-msgstr ""
+msgstr "LUKS2 元数据大小大于数据移位（data shift）值。"
 
-#: src/utils_reencrypt.c:638
-#, fuzzy, c-format
-#| msgid "Failed to acquire read lock on device %s."
+#: src/utils_reencrypt.c:802
+#, c-format
 msgid "Failed to place new header at head of device %s."
-msgstr "未能获取设备 %s 的读取锁。"
+msgstr "未能将新标头放置在设备 %s 的头部。"
 
-#: src/utils_reencrypt.c:648
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
-msgstr ""
+msgstr "%s/%s 现已激活，可以进行在线加密。\n"
 
-#: src/utils_reencrypt.c:684
-#, fuzzy, c-format
-#| msgid "Device %s is not active."
+#: src/utils_reencrypt.c:852
+#, c-format
 msgid "Active device %s is not LUKS2."
-msgstr "设备 %s 未激活。"
+msgstr "激活的设备 %s 不是 LUKS2。"
 
-#: src/utils_reencrypt.c:712
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
-msgstr ""
+msgstr "正在恢复原始的 LUKS2 标头。"
 
-#: src/utils_reencrypt.c:720
-#, fuzzy
-#| msgid "Writing LUKS header to disk."
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
-msgstr "正在将 LUKS 标头写入磁盘。"
+msgstr "原始 LUKS2 标头恢复失败。"
 
-#: src/utils_reencrypt.c:752
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
-msgstr ""
+msgstr "标头文件 %s 不存在。您想要初始化设备 %s 的 LUKS2 解密，并将 LUKS2 标头导出到文件 %s 吗？"
 
-#: src/utils_reencrypt.c:802
-#, fuzzy
-#| msgid "Failed to write activation flags to new header."
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
-msgstr "向新表头写入活动旗标失败。"
+msgstr "未能为导出的标头文件添加读/写权限。"
 
-#: src/utils_reencrypt.c:856
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
-msgstr ""
+msgstr "重新加密初始化失败。标头备份位于 %s。"
 
-#: src/utils_reencrypt.c:884
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
-msgstr ""
+msgstr "LUKS2 解密仅支持分离标头设备（且数据偏移量设为 0）。"
 
-#: src/utils_reencrypt.c:1019 src/utils_reencrypt.c:1028
-#, fuzzy
-#| msgid "Do not change key, no data area reencryption"
-msgid "Not enough free keyslots for reencryption."
-msgstr "不要更改密钥，无数据区重加密"
+#: src/utils_reencrypt.c:1490
+msgid "No token could unlock the device."
+msgstr "没有令牌能解锁该设备。"
 
-#: src/utils_reencrypt.c:1049 src/utils_reencrypt_luks1.c:1047
-msgid "Key file can be used only with --key-slot or with exactly one key slot active."
-msgstr "密钥文件只能在指定 --key-slot 时或有且只有一个槽启用时使用。"
+#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
+msgid "Not enough free keyslots for reencryption."
+msgstr "没有足够的空闲密钥槽用于重新加密。"
 
-#: src/utils_reencrypt.c:1058 src/utils_reencrypt_luks1.c:1094
-#: src/utils_reencrypt_luks1.c:1105
-#, fuzzy, c-format
-#| msgid "Enter passphrase for key slot %u: "
-msgid "Enter passphrase for key slot %d: "
-msgstr "输入密钥槽 %u 的口令: "
+#: src/utils_reencrypt.c:1562
+msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
+msgstr "密钥文件或密钥环密钥描述只能在指定 --key-slot 时、或有且只有一个密钥槽处于活动状态时使用。"
 
-#: src/utils_reencrypt.c:1070
+#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
+#: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
-msgid "Enter passphrase for key slot %u: "
-msgstr "输入密钥槽 %u 的口令: "
+msgid "Enter passphrase for key slot %d: "
+msgstr "输入密钥槽 %d 的口令: "
 
-#: src/utils_reencrypt.c:1122
+#: src/utils_reencrypt.c:1879
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "将数据加密方法切换为 %s。\n"
 
-#: src/utils_reencrypt.c:1176
+#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
+msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
+msgstr "若要通过直接传入卷密钥来重新加密带有活动密钥槽的设备，请使用 --force-no-keyslots。"
+
+#: src/utils_reencrypt.c:1996
+msgid "Option --new-volume-key-file must be paired with --new-key-size"
+msgstr "选项 --new-volume-key-file 必须与 --new-key-size 配对使用"
+
+#: src/utils_reencrypt.c:2038
 msgid "No data segment parameters changed. Reencryption aborted."
-msgstr ""
+msgstr "数据段参数没有变化。重新加密已中止。"
 
-#: src/utils_reencrypt.c:1278
+#: src/utils_reencrypt.c:2075
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
 msgstr ""
+"不支持在离线设备上增大加密扇区大小。\n"
+"请先激活该设备，或使用 --force-offline-reencrypt 选项（危险！）。"
 
-#: src/utils_reencrypt.c:1318 src/utils_reencrypt_luks1.c:690
-#: src/utils_reencrypt_luks1.c:761
+#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
 "Reencryption interrupted."
@@ -3851,67 +3911,67 @@ msgstr ""
 "\n"
 "重加密被中断。"
 
-#: src/utils_reencrypt.c:1323
+#: src/utils_reencrypt.c:2122
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "正在强制脱机模式下恢复 LUKS 重新加密。\n"
 
-#: src/utils_reencrypt.c:1346
+#: src/utils_reencrypt.c:2145
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "设备 %s 包含损坏的 LUKS 元数据。中止操作。"
 
-#: src/utils_reencrypt.c:1362 src/utils_reencrypt.c:1384
+#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "设备 %s 已经是 LUKS 设备。中止操作。"
 
-#: src/utils_reencrypt.c:1390
+#: src/utils_reencrypt.c:2189
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "设备 %s 已处于 LUKS 重新加密状态。中止操作。"
 
-#: src/utils_reencrypt.c:1473
+#: src/utils_reencrypt.c:2272
 msgid "LUKS2 decryption requires --header option."
 msgstr "LUKS2 解密需要 --header 选项。"
 
-#: src/utils_reencrypt.c:1521
+#: src/utils_reencrypt.c:2320
 msgid "Command requires device as argument."
 msgstr "命令需要设备及映射名作为参数。"
 
-#: src/utils_reencrypt.c:1534
+#: src/utils_reencrypt.c:2333
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "版本冲突。设备 %s 为 LUKS1。"
 
-#: src/utils_reencrypt.c:1540
+#: src/utils_reencrypt.c:2339
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "版本冲突。设备 %s 处于 LUKS1 重新加密状态。"
 
-#: src/utils_reencrypt.c:1546
+#: src/utils_reencrypt.c:2345
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "版本冲突。设备 %s 是 LUKS2。"
 
-#: src/utils_reencrypt.c:1552
+#: src/utils_reencrypt.c:2351
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "版本冲突。设备 %s 处于 LUKS2 重新加密状态。"
 
-#: src/utils_reencrypt.c:1558
+#: src/utils_reencrypt.c:2357
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "LUKS2 重新加密过程已初始化。正在中止操作。"
 
-#: src/utils_reencrypt.c:1565
+#: src/utils_reencrypt.c:2364
 msgid "Device reencryption not in progress."
 msgstr "未在进行设备重加密。"
 
-#: src/utils_reencrypt_luks1.c:116 src/utils_blockdev.c:282
+#: src/utils_reencrypt_luks1.c:116 src/utils_blockdev.c:285
 #, c-format
 msgid "Cannot exclusively open %s, device in use."
 msgstr "无法独占打开 %s，设备正在使用中。"
 
-#: src/utils_reencrypt_luks1.c:130 src/utils_reencrypt_luks1.c:885
+#: src/utils_reencrypt_luks1.c:130 src/utils_reencrypt_luks1.c:883
 msgid "Allocation of aligned memory failed."
 msgstr "分配对齐内存失败。"
 
@@ -3934,11 +3994,11 @@ msgstr "无法写入设备 %s。"
 msgid "Cannot write reencryption log file."
 msgstr "无法写入重加密日志文件。"
 
-#: src/utils_reencrypt_luks1.c:269
+#: src/utils_reencrypt_luks1.c:268
 msgid "Cannot read reencryption log file."
 msgstr "无法读取重加密日志文件。"
 
-#: src/utils_reencrypt_luks1.c:280
+#: src/utils_reencrypt_luks1.c:279
 msgid "Wrong log format."
 msgstr "错误的日志格式。"
 
@@ -3947,161 +4007,199 @@ msgstr "错误的日志格式。"
 msgid "Log file %s exists, resuming reencryption.\n"
 msgstr "日志文件 %s 存在，继续重加密。\n"
 
-#: src/utils_reencrypt_luks1.c:356
+#: src/utils_reencrypt_luks1.c:354
 msgid "Activating temporary device using old LUKS header."
 msgstr "正使用旧 LUKS 标头激活临时设备。"
 
-#: src/utils_reencrypt_luks1.c:366
+#: src/utils_reencrypt_luks1.c:364
 msgid "Activating temporary device using new LUKS header."
 msgstr "正使用新 LUKS 标头激活临时设备。"
 
-#: src/utils_reencrypt_luks1.c:376
+#: src/utils_reencrypt_luks1.c:374
 msgid "Activation of temporary devices failed."
 msgstr "激活临时设备失败。"
 
 # stat() 主要就是出来一个各种文件信息……
-#: src/utils_reencrypt_luks1.c:436
+#: src/utils_reencrypt_luks1.c:434
 msgid "Failed to set data offset."
 msgstr "数据偏移设置失败。"
 
 # stat() 主要就是出来一个各种文件信息……
-#: src/utils_reencrypt_luks1.c:442
+#: src/utils_reencrypt_luks1.c:440
 msgid "Failed to set metadata size."
 msgstr "元数据大小设置失败。"
 
-#: src/utils_reencrypt_luks1.c:450
+#: src/utils_reencrypt_luks1.c:448
 #, c-format
 msgid "New LUKS header for device %s created."
 msgstr "已创建设备 %s 的新 LUKS 标头。"
 
-#: src/utils_reencrypt_luks1.c:487
+#: src/utils_reencrypt_luks1.c:485
 #, c-format
 msgid "%s header backup of device %s created."
 msgstr "已创建 %s 标头备份（对应设备 %s）。"
 
-#: src/utils_reencrypt_luks1.c:543
+#: src/utils_reencrypt_luks1.c:541
 msgid "Creation of LUKS backup headers failed."
 msgstr "LUKS 备份标头创建失败。"
 
-#: src/utils_reencrypt_luks1.c:672
+#: src/utils_reencrypt_luks1.c:670
 #, c-format
 msgid "Cannot restore %s header on device %s."
 msgstr "无法恢复 %s 标头（在设备 %s 上）。"
 
-#: src/utils_reencrypt_luks1.c:674
+#: src/utils_reencrypt_luks1.c:672
 #, c-format
 msgid "%s header on device %s restored."
 msgstr "已恢复 %s 标头（在设备 %s 上）。"
 
-#: src/utils_reencrypt_luks1.c:857 src/utils_reencrypt_luks1.c:863
+#: src/utils_reencrypt_luks1.c:855 src/utils_reencrypt_luks1.c:861
 msgid "Cannot open temporary LUKS device."
 msgstr "无法打开临时 LUKS 设备。"
 
-#: src/utils_reencrypt_luks1.c:868 src/utils_reencrypt_luks1.c:873
+#: src/utils_reencrypt_luks1.c:866 src/utils_reencrypt_luks1.c:871
 msgid "Cannot get device size."
 msgstr "无法获取设备大小。"
 
-#: src/utils_reencrypt_luks1.c:915
+#: src/utils_reencrypt_luks1.c:913
 msgid "IO error during reencryption."
 msgstr "重加密时发生 IO 错误。"
 
-#: src/utils_reencrypt_luks1.c:945
+#: src/utils_reencrypt_luks1.c:943
 msgid "Provided UUID is invalid."
 msgstr "提供的 UUID 无效。"
 
-#: src/utils_reencrypt_luks1.c:1171
+#: src/utils_reencrypt_luks1.c:1045
+msgid "Key file can be used only with --key-slot or with exactly one key slot active."
+msgstr "密钥文件只能在指定 --key-slot 时或有且只有一个槽启用时使用。"
+
+#: src/utils_reencrypt_luks1.c:1169
 msgid "Cannot open reencryption log file."
 msgstr "无法打开重加密日志文件。"
 
-#: src/utils_reencrypt_luks1.c:1177
+#: src/utils_reencrypt_luks1.c:1175
 msgid "No decryption in progress, provided UUID can be used only to resume suspended decryption process."
 msgstr "没有正在进行中的解密操作，提供的 UUID 仅能用于继续已挂起的解密操作。"
 
-#: src/utils_reencrypt_luks1.c:1233
+#: src/utils_reencrypt_luks1.c:1231
 #, c-format
 msgid "Reencryption will change: %s%s%s%s%s%s."
 msgstr "重加密会改变：%s%s%s%s%s%s。"
 
-#: src/utils_reencrypt_luks1.c:1234
+#: src/utils_reencrypt_luks1.c:1232
 msgid "volume key"
 msgstr "卷密钥"
 
-#: src/utils_reencrypt_luks1.c:1236
+#: src/utils_reencrypt_luks1.c:1234
 msgid "set hash to "
 msgstr "设置哈希值为 "
 
-#: src/utils_reencrypt_luks1.c:1237
+#: src/utils_reencrypt_luks1.c:1235
 msgid ", set cipher to "
 msgstr "，设定加密方法为 "
 
-#: src/utils_blockdev.c:176
+#: src/utils_blockdev.c:179
 #, c-format
 msgid "WARNING: Device %s already contains a '%s' partition signature.\n"
 msgstr "警告：设备%s已包含“%s”分区签名。\n"
 
-#: src/utils_blockdev.c:184
+#: src/utils_blockdev.c:187
 #, c-format
 msgid "WARNING: Device %s already contains a '%s' superblock signature.\n"
 msgstr "警告：设备%s已包含“%s”超级块签名。\n"
 
-#: src/utils_blockdev.c:206 src/utils_blockdev.c:289 src/utils_blockdev.c:341
-#, fuzzy
-#| msgid "Failed to initialise default LUKS2 keyslot parameters."
+#: src/utils_blockdev.c:209 src/utils_blockdev.c:292 src/utils_blockdev.c:344
 msgid "Failed to initialize device signature probes."
-msgstr "初始化默认 LUKS2 密钥槽参数失败。"
+msgstr "未能初始化设备签名探测。"
 
 # stat() 主要就是出来一个各种文件信息……
-#: src/utils_blockdev.c:269
-#, fuzzy, c-format
-#| msgid "Failed to stat key file."
+#: src/utils_blockdev.c:272
+#, c-format
 msgid "Failed to stat device %s."
-msgstr "获取 (stat) 密钥文件信息失败。"
+msgstr "获取 (stat) 设备 %s 的信息失败。"
 
-#: src/utils_blockdev.c:284
-#, fuzzy, c-format
-#| msgid "Cannot open keyfile %s for write."
+#: src/utils_blockdev.c:287
+#, c-format
 msgid "Failed to open file %s in read/write mode."
-msgstr "未能打开密钥文件 %s 以供写入。"
+msgstr "以读/写模式打开文件 %s 失败。"
 
-#: src/utils_blockdev.c:304
+#: src/utils_blockdev.c:307
 #, c-format
 msgid "Existing '%s' partition signature on device %s will be wiped."
-msgstr ""
+msgstr "现有的“%1$s”分区签名（位于设备 %2$s 上）将被擦除。"
 
-#: src/utils_blockdev.c:307
+#: src/utils_blockdev.c:310
 #, c-format
 msgid "Existing '%s' superblock signature on device %s will be wiped."
-msgstr ""
+msgstr "现有的“%1$s”超级块签名（位于设备 %2$s 上）将被擦除。"
 
-#: src/utils_blockdev.c:310
-#, fuzzy
-#| msgid "Failed to acquire write device lock."
+#: src/utils_blockdev.c:313
 msgid "Failed to wipe device signature."
-msgstr "未能获取写入设备锁。"
+msgstr "擦除设备签名失败。"
 
-#: src/utils_blockdev.c:317
+#: src/utils_blockdev.c:320
 #, c-format
 msgid "Failed to probe device %s for a signature."
-msgstr ""
+msgstr "探测设备 %s 上的签名失败。"
 
 #: src/utils_args.c:52
-#, fuzzy, c-format
-#| msgid "Invalid device size specification."
+#, c-format
 msgid "Invalid size specification in parameter --%s."
-msgstr "无效的设备大小指标。"
+msgstr "参数 --%s 中的大小指标无效。"
 
 #: src/utils_args.c:112
-#, fuzzy, c-format
-#| msgid "Option --allow-discards is allowed only for open operation.\n"
+#, c-format
 msgid "Option --%s is not allowed with %s action."
-msgstr "选项 --allow-discards 只适用于打开操作。\n"
+msgstr "选项 --%s 不允许用于 %s 动作。"
+
+#: src/utils_key_description.c:66
+msgid "Type specification in --link-vk-to-keyring keyring specification is ignored."
+msgstr "--link-vk-to-keyring 的密钥环规格中指定的类型将被忽略。"
+
+#: src/utils_key_description.c:131
+msgid "Key types have to be the same for both volume keys."
+msgstr "两个卷密钥的密钥类型必须相同。"
+
+#: src/utils_key_description.c:136
+msgid "Both volume keys have to be linked to the same keyring."
+msgstr "两个卷密钥必须链入同一个密钥环。"
+
+#: src/utils_key_description.c:146
+msgid "You need to supply more key names."
+msgstr "您需要提供更多的密钥名称。"
+
+#: src/utils_key_description.c:150
+msgid "Invalid --link-vk-to-keyring value."
+msgstr "--link-vk-to-keyring 的值无效。"
+
+#: src/utils_keyslot_check.c:114
+#, c-format
+msgid "Keyslot %d binary data could be corrupted.\n"
+msgstr "密钥槽 %d 的二进制数据可能已损坏。\n"
+
+#: src/utils_keyslot_check.c:124
+#, c-format
+msgid "  Suspected offset: 0x%<PRIx64>\n"
+msgstr "  可疑的偏移量：0x%<PRIx64>\n"
+
+#: src/utils_keyslot_check.c:127
+msgid "  Subsequent suspected offsets are suppressed.\n"
+msgstr "  后续的可疑偏移量已省略。\n"
+
+#: src/utils_keyslot_check.c:178 src/utils_keyslot_check.c:183
+#, c-format
+msgid "Keyslot %d cannot be read from the device."
+msgstr "无法从设备读取密钥槽 %d。"
+
+#: src/utils_keyslot_check.c:194
+#, c-format
+msgid "You can use hexdump -v -C -n 128 -s <offset_0xXXXX> \"%s\" to inspect the data.\n"
+msgstr "您可以使用 hexdump -v -C -n 128 -s <offset_0xXXXX> \"%s\" 来检查数据。\n"
 
 # stat() 主要就是出来一个各种文件信息……
 #: tokens/ssh/cryptsetup-ssh.c:110
-#, fuzzy
-#| msgid "Failed to stat key file.\n"
 msgid "Failed to write ssh token json."
-msgstr "获取 (stat) 密钥文件统计数据失败。\n"
+msgstr "未能写入 ssh 令牌 json。"
 
 #: tokens/ssh/cryptsetup-ssh.c:128
 msgid ""
@@ -4112,6 +4210,12 @@ msgid ""
 "\n"
 "Note: The information provided when adding the token (SSH server address, user and paths) will be stored in the LUKS2 header in plaintext."
 msgstr ""
+"用于借助连接到 SSH 服务器的令牌解锁 LUKS2 设备的实验性 cryptsetup 插件\v此插件目前只允许向已有的密钥槽添加令牌。\n"
+"\n"
+"指定的 SSH 服务器上，指定路径处必须存在一个密钥文件，其中含有设备上某个已有密钥槽的口令。\n"
+"cryptsetup 将使用所提供的凭据，在用该令牌打开设备时获取密码。\n"
+"\n"
+"注意：添加令牌时提供的信息（SSH 服务器地址、用户和路径）将以明文形式存储在 LUKS2 标头中。"
 
 #: tokens/ssh/cryptsetup-ssh.c:138
 msgid "<action> <device>"
@@ -4261,6 +4365,41 @@ msgstr "主机上不允许使用公钥身份验证方法。\n"
 msgid "Public key authentication error: "
 msgstr "公钥认证错误："
 
+#~ msgid "Failed to link volume keys in user defined keyring."
+#~ msgstr "在内核密钥环中链入密钥失败。"
+
+#~ msgid "Failed to unlink volume key from thread keyring."
+#~ msgstr "在内核密钥环中断联卷密钥失败。"
+
+#~ msgid "Required kernel crypto interface not available."
+#~ msgstr "未能找到所需的内核加密接口。"
+
+#~ msgid "Ensure you have algif_skcipher kernel module loaded."
+#~ msgstr "请确定您已载入内核模块 algif_skcipher。"
+
+#~ msgid "Activation of partially decrypted BITLK device is not supported."
+#~ msgstr "不支持激活部分解密的 BITLK 设备。"
+
+#~ msgid "Failed to read LUKS2 requirements."
+#~ msgstr "读取 LUKS2 需求时失败。"
+
+#~ msgid "Warning: keyslot operation could fail as it requires more than available memory.\n"
+#~ msgstr "警告：密钥槽操作可能会失败，因为它需要的内存超过可用内存。\n"
+
+#, fuzzy
+#~| msgid "Failed to open key file.\n"
+#~ msgid "Failed to get reencryption state."
+#~ msgstr "打开 (open) 密钥文件失败。\n"
+
+#, fuzzy
+#~| msgid "Failed to read passphrase from keyring (error %d)."
+#~ msgid "Failed to read passphrase from keyring."
+#~ msgstr "从密钥环读取口令失败（错误 %d）。"
+
+#, c-format
+#~ msgid "Enter passphrase for key slot %u: "
+#~ msgstr "输入密钥槽 %u 的口令: "
+
 #, c-format
 #~ msgid "Cannot format device %s which is still in use."
 #~ msgstr "未能格式化正在使用的设备 %s。"
@@ -4375,9 +4514,6 @@ msgstr "公钥认证错误："
 #~ msgid "secs"
 #~ msgstr "秒"
 
-#~ msgid "How often the input of the passphrase can be retried"
-#~ msgstr "输入密码的最大重试频率"
-
 #~ msgid "Align payload at <n> sector boundaries - for luksFormat"
 #~ msgstr "于 <n> 个扇区边界处对其载荷数据 - 供 luks 格式用"
 
@@ -4654,9 +4790,6 @@ msgstr "公钥认证错误："
 #~ msgid "Read the journal encryption key from a file"
 #~ msgstr "从文件读取密钥。"
 
-#~ msgid "Invalid journal size specification."
-#~ msgstr "无效的日志大小指标。"
-
 #, c-format
 #~ msgid "Setting LUKS2 offline reencrypt flag on device %s."
 #~ msgstr "正在设备 %s 上设定 LUKS2 离线重加密旗标。"
@@ -4734,9 +4867,6 @@ msgstr "公钥认证错误："
 #~ msgid "Only values between 1 MiB and 64 MiB allowed for reencryption block size."
 #~ msgstr "重加密块大小只能是 1 MiB 到 64 MiB 之间的值。"
 
-#~ msgid "Option --new must be used together with --reduce-device-size or --header."
-#~ msgstr "选项 --new 必须与 --reduce-device-size 或 --header 共用。"
-
 #~ msgid "Option --keep-key can be used only with --hash, --iter-time or --pbkdf-force-iterations."
 #~ msgstr "选项 --keep-key 只能与 --hash、--iter-time 或 --pbkdf-force-iterations 共用。"
 

From 4132165ffa1abc6021eda9713efd9ea8a0e72ca6 Mon Sep 17 00:00:00 2001
From: Petr Pisar <petr.pisar@atlas.cz>
Date: Fri, 4 Sep 2026 18:57:03 +0200
Subject: [PATCH 205/244] po: update cs.po (from translationproject.org)

---
 po/cs.po | 657 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 331 insertions(+), 326 deletions(-)

diff --git a/po/cs.po b/po/cs.po
index 4718425b3..8c650b82a 100644
--- a/po/cs.po
+++ b/po/cs.po
@@ -33,10 +33,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
+"Project-Id-Version: cryptsetup 2.8.8-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-07-09 10:46+0200\n"
-"PO-Revision-Date: 2026-07-11 17:03+02:00\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-02 21:02+02:00\n"
 "Last-Translator: Petr Pisar <petr.pisar@atlas.cz>\n"
 "Language-Team: Czech <translation-team-cs@lists.sourceforge.net>\n"
 "Language: cs\n"
@@ -46,78 +46,78 @@ msgstr ""
 "X-Bugs: Report translation errors to the Language-Team address.\n"
 "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
 
-#: lib/libdevmapper.c:419
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "Nelze inicializovat device-mapper, nespuštěno superuživatelem."
 
-#: lib/libdevmapper.c:422
+#: lib/libdevmapper.c:425
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "Nelze inicializovat device-mapper. Je jaderný modul dm_mod zaveden?"
 
-#: lib/libdevmapper.c:1125
+#: lib/libdevmapper.c:1129
 msgid "Requested deferred flag is not supported."
 msgstr "Požadovaný příznak odložení není podporován."
 
-#: lib/libdevmapper.c:1194
+#: lib/libdevmapper.c:1198
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "DM-UUID pro zařízení %s bylo zkráceno."
 
-#: lib/libdevmapper.c:1598
+#: lib/libdevmapper.c:1602
 msgid "Unknown dm target type."
 msgstr "Neznámý druh cíle DM."
 
-#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
-#: lib/libdevmapper.c:1853
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "Požadované výkonnostní volby dm-cryptu nejsou podporovány."
 
-#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "Požadované volby, jak zacházet s poškozením dat dm-verity, nejsou podporovány."
 
-#: lib/libdevmapper.c:1752
+#: lib/libdevmapper.c:1756
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "Požadovaná volba taskletu dm-cryptu není podporována."
 
-#: lib/libdevmapper.c:1764
+#: lib/libdevmapper.c:1768
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "Požadované FEC volby dm-cryptu nejsou podporovány."
 
-#: lib/libdevmapper.c:1770
+#: lib/libdevmapper.c:1774
 msgid "Requested data integrity options are not supported."
 msgstr "Požadované volby integrity dat nejsou podporovány."
 
-#: lib/libdevmapper.c:1774
+#: lib/libdevmapper.c:1778
 msgid "Requested sector_size option is not supported."
 msgstr "Požadovaná volba sector_size není podporována."
 
-#: lib/libdevmapper.c:1779
+#: lib/libdevmapper.c:1783
 msgid "The device size is not multiple of the requested sector size."
 msgstr "Velikost zařízení není násobkem požadované velikosti sektoru."
 
-#: lib/libdevmapper.c:1783
+#: lib/libdevmapper.c:1787
 msgid "Requested integrity_key_size option is not supported."
 msgstr "Požadovaná volba integrity_key_size není podporována."
 
-#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Požadovaný automatický přepočet značek integrity není podporován."
 
-#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2799
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Discard/TRIM is not supported."
 msgstr "Zahazování (TRIM) není podporováno."
 
-#: lib/libdevmapper.c:1808
+#: lib/libdevmapper.c:1812
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "Požadovaný režim bitmapy integrity DM není podporován."
 
-#: lib/libdevmapper.c:1814
+#: lib/libdevmapper.c:1818
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr "Požadovaný režim inline integrity DM není podporován."
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2877
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "Dotaz na část dm-%s selhal."
@@ -169,7 +169,7 @@ msgstr "Implementaci šifrovacího generátoru náhodných čísel nelze inicial
 msgid "Cannot initialize crypto backend."
 msgstr "Implementaci šifrování nelze inicializovat."
 
-#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Hašovací algoritmus %s není podporován."
@@ -183,7 +183,7 @@ msgstr "Chyba zpracování klíče (za použití haše %s)."
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Druh zařízení nelze určit. Nekompatibilní aktivace zařízení?"
 
-#: lib/setup.c:398 lib/setup.c:4177
+#: lib/setup.c:398 lib/setup.c:4193
 msgid "This operation is supported only for LUKS device."
 msgstr "Tato operace je podporována jen u zařízení LUKS."
 
@@ -205,7 +205,7 @@ msgstr "Pozice klíče %d není platná, prosím, vyberte číslo mezi 0 a %d."
 msgid "Key slot %d is full, please select another one."
 msgstr "Pozice klíče %d je obsazena, prosím, vyberte jinou."
 
-#: lib/setup.c:534 lib/setup.c:3878
+#: lib/setup.c:534 lib/setup.c:3888
 msgid "Device size is not aligned to device logical block size."
 msgstr "Velikost zařízení není zarovnaná na velikost logického sektoru zařízení."
 
@@ -214,7 +214,7 @@ msgstr "Velikost zařízení není zarovnaná na velikost logického sektoru za
 msgid "Header detected but device %s is too small."
 msgstr "Nalezena hlavička, ale zařízení %s je příliš malé."
 
-#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
 #: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Tato operace není na zařízení tohoto typu podporována."
@@ -227,557 +227,557 @@ msgstr "Zakázaná operace spolu s probíhajícím přešifrování."
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nahrání původních metadat LUKS2 do paměti selhalo."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
 #: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
 #: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
 #: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
-#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Zařízení %s není platným zařízením LUKS."
 
-#: lib/setup.c:899 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Nepodporovaná verze LUKS %d."
 
-#: lib/setup.c:1273
+#: lib/setup.c:1279
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Na aktivním zařízení %s nebyl nalezen žádný známý vzorek určující šifrování."
 
-#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
-#: lib/setup.c:3786 lib/setup.c:5850
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
 #, c-format
 msgid "Device %s is not active."
 msgstr "Zařízení %s není aktivní."
 
-#: lib/setup.c:1535
+#: lib/setup.c:1545
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Zařízení nižší úrovně pod šifrovaným zařízením %s zmizelo."
 
-#: lib/setup.c:1617
+#: lib/setup.c:1627
 msgid "Invalid plain crypt parameters."
 msgstr "Neplatné parametry plain šifry."
 
-#: lib/setup.c:1622 lib/setup.c:2672
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Invalid key size."
 msgstr "Neplatná velikost klíče."
 
-#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID není na šifře tohoto typu podporováno."
 
-#: lib/setup.c:1632 lib/setup.c:2682
+#: lib/setup.c:1642 lib/setup.c:2692
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Zařízení s oddělenými metadaty není na šifře tohoto typu podporováno."
 
-#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
 #: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Nepodporovaná velikost šifrovaného sektoru."
 
-#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
 msgid "Device size is not aligned to requested sector size."
 msgstr "Velikost zařízení není zarovnaná na požadovanou velikost sektoru."
 
-#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
 msgid "Can't format LUKS without device."
 msgstr "LUKS nelze bez zařízení naformátovat."
 
-#: lib/setup.c:1707 lib/setup.c:1959
+#: lib/setup.c:1717 lib/setup.c:1969
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Zónové zařízení %s nelze použít pro hlavičku LUKS."
 
-#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Požadované zarovnání dat není slučitelné s polohou dat."
 
-#: lib/setup.c:1754 lib/setup.c:1984
+#: lib/setup.c:1764 lib/setup.c:1994
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "POZOR: Zařízené DAX může poškodit data, protože nezaručuje atomické aktualizace sektorů.\n"
 
-#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
-#: lib/setup.c:2567 lib/setup.c:2899
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Ze zařízení %s nelze odstranit hlavičku."
 
-#: lib/setup.c:1805 lib/setup.c:2164
+#: lib/setup.c:1815 lib/setup.c:2174
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Zařízení %s je na aktivaci příliš malé. Nezbývá žádné místo pro data.\n"
 
-#: lib/setup.c:1846
+#: lib/setup.c:1856
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Klíč svazku je příliš malý na šifrovaní s rozšířeními pro integritu."
 
-#: lib/setup.c:1850
+#: lib/setup.c:1860
 msgid "Integrity key size is too small."
 msgstr "Velikost klíče integrity je příliš malý."
 
-#: lib/setup.c:1859
+#: lib/setup.c:1869
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Šifra %s-%s (velikost klíče %zd bitů) není dostupná."
 
-#: lib/setup.c:1900
+#: lib/setup.c:1910
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "POZOR: Aktivace zařízení selže, dm-crypt nepodporuje požadovanou velikost šifrovaného sektoru.\n"
 
-#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
 #: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Zařízení %s je příliš malé."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Zařízení %s, které se používá, nelze formátovat."
 
-#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Zařízení %s nelze formátovat, povolení zamítnuto."
 
 # FIXME "format integrity" is nonsense
-#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Zařízení %s není možné formátovat integritu."
 
-#: lib/setup.c:2151 lib/setup.c:2629
+#: lib/setup.c:2161 lib/setup.c:2639
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Zařízení %s nelze formátovat."
 
-#: lib/setup.c:2194
+#: lib/setup.c:2204
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Parametry zarovnání Opal nelze získat."
 
-#: lib/setup.c:2206
+#: lib/setup.c:2216
 msgid "Bogus OPAL logical block size."
 msgstr "Chybná velikost logického bloku Opal."
 
-#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Chybná velikost logického bloku Opal se liší od velikosti bloku zařízení."
 
-#: lib/setup.c:2217
+#: lib/setup.c:2227
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Požadovaná poloha dat není slučitelná s velikostí bloku Opal."
 
-#: lib/setup.c:2224
+#: lib/setup.c:2234
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Požadované zarovnání dat není slučitelné se zarovnáním Opal."
 
-#: lib/setup.c:2244
+#: lib/setup.c:2254
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Poloha dat nesplňuje požadavky Opal na zarovnání."
 
-#: lib/setup.c:2257
+#: lib/setup.c:2267
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Požadované zarovnání dat nesplňuje požadavky na zarovnání uzamykatelné oblasti."
 
 # TODO: Pluralize
-#: lib/setup.c:2471
+#: lib/setup.c:2481
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Velikost zařízení byla dorovnána %<PRIu64> sektory, aby lícovala s granularitou zarovnání Opal."
 
-#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Získání zámku Opal na zařízení %s selhalo."
 
-#: lib/setup.c:2541
+#: lib/setup.c:2551
 msgid "Incorrect OPAL Admin key."
 msgstr "Nesprávný klíč správce Opal."
 
-#: lib/setup.c:2543
+#: lib/setup.c:2553
 msgid "Cannot setup OPAL segment."
 msgstr "Část Opal nelze nastavit."
 
-#: lib/setup.c:2625
+#: lib/setup.c:2635
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Zařízení %s nelze formátovat, zařízení Opal je asi zcela chráněno proti zápisu."
 
-#: lib/setup.c:2627
+#: lib/setup.c:2637
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Toto je snad chyba ve firmwaru. Resetujte Opal zařízení pomocí PSID a znovu jej zapojte."
 
-#: lib/setup.c:2647
+#: lib/setup.c:2657
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Reset uzamykatelné oblasti %d na zařízení %s selhal."
 
-#: lib/setup.c:2667
+#: lib/setup.c:2677
 msgid "Can't format LOOPAES without device."
 msgstr "LOOPAES nelze bez zařízení naformátovat."
 
-#: lib/setup.c:2712
+#: lib/setup.c:2722
 msgid "Can't format VERITY without device."
 msgstr "VERITY nelze bez zařízení naformátovat."
 
-#: lib/setup.c:2723 lib/verity/verity.c:88
+#: lib/setup.c:2733 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Nepodporovaný druh VERITY haše %d."
 
-#: lib/setup.c:2729 lib/verity/verity.c:96
+#: lib/setup.c:2739 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Nepodporovaná velikost bloku VERITY."
 
-#: lib/setup.c:2734 lib/verity/verity.c:61
+#: lib/setup.c:2744 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Nepodporovaná poloha haše VERITY."
 
-#: lib/setup.c:2739
+#: lib/setup.c:2749
 msgid "Unsupported VERITY FEC offset."
 msgstr "Nepodporovaná poloha VERITY FEC."
 
-#: lib/setup.c:2763
+#: lib/setup.c:2773
 msgid "Data area overlaps with hash area."
 msgstr "Oblast dat se překrývá s oblastí haše."
 
-#: lib/setup.c:2788
+#: lib/setup.c:2798
 msgid "Hash area overlaps with FEC area."
 msgstr "Oblast FEC se překrývá s oblastí haše."
 
-#: lib/setup.c:2795
+#: lib/setup.c:2805
 msgid "Data area overlaps with FEC area."
 msgstr "Oblast dat se překrývá s oblastí FEC."
 
-#: lib/setup.c:2887
+#: lib/setup.c:2897
 msgid "Integrity key size mismatch."
 msgstr "Velikost klíče integrity neodpovídá."
 
-#: lib/setup.c:2938
+#: lib/setup.c:2948
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "POZOR: Požadovaná velikost značky %d bajtů se liší od výstupu velikosti %s (%d bajtů).\n"
 
-#: lib/setup.c:3051 lib/setup.c:3153
+#: lib/setup.c:3061 lib/setup.c:3163
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Požadován neznámý nebo nepodporovaný typ zařízení %s."
 
-#: lib/setup.c:3067
+#: lib/setup.c:3077
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Zařízení %s neposkytuje položky pro inline integritu dat."
 
-#: lib/setup.c:3073
+#: lib/setup.c:3083
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Velikost inline značky %<PRIu32> bajtů je větší než %<PRIu32> poskytovaných zařízením %s."
 
-#: lib/setup.c:3088
+#: lib/setup.c:3098
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Sektor musí být stejný jako hardwarový sektor zařízení (%zu bajtů)."
 
-#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Nepodporované parametry na zařízení %s."
 
-#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
 #: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Neodpovídající parametry na zařízení %s."
 
-#: lib/setup.c:3650
+#: lib/setup.c:3660
 msgid "Crypt devices mismatch."
 msgstr "Zařízení dmcryptu si neodpovídají."
 
-#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
 #: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Zařízení %s nebylo možné znovu zavést."
 
-#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
 #: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Zařízení %s nebylo možné pozastavit."
 
-#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
 #: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
 #: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Zařízení %s nebylo možné probudit."
 
-#: lib/setup.c:3720
+#: lib/setup.c:3730
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Nepřekonatelná chyba při zavádění zařízení %s (nad zařízením %s)."
 
-#: lib/setup.c:3723 lib/setup.c:3725
+#: lib/setup.c:3733 lib/setup.c:3735
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Zařízení %s nebylo možné přepnout do dm-error."
 
-#: lib/setup.c:3768
+#: lib/setup.c:3778
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Zařízení LUKS2 se statickou velikostí nelze změnit velikost."
 
-#: lib/setup.c:3773
+#: lib/setup.c:3783
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Změna velikosti zařízení LUKS2 s ochranou integrity není podporována."
 
-#: lib/setup.c:3819
+#: lib/setup.c:3829
 msgid "Cannot resize loop device."
 msgstr "Zařízení zpětné smyčky nelze změnit velikost."
 
-#: lib/setup.c:3863
+#: lib/setup.c:3873
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr ""
 "POZOR: Maximální velikost je již nastavena nebo změna velikosti není jádrem\n"
 "podporována.\n"
 
-#: lib/setup.c:3929
+#: lib/setup.c:3939
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Změna velikosti selhala, jádro ji nepodporuje."
 
-#: lib/setup.c:3961
+#: lib/setup.c:3971
 msgid "Do you really want to change UUID of device?"
 msgstr "Opravdu chcete změnit UUID zařízení?"
 
-#: lib/setup.c:4053
+#: lib/setup.c:4061 lib/setup.c:4069
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Soubor se zálohou hlavičky neobsahuje kompatibilní hlavičku LUKS."
 
-#: lib/setup.c:4160
+#: lib/setup.c:4176
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Svazek %s není aktivní."
 
-#: lib/setup.c:4215
+#: lib/setup.c:4231
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Svazek %s je již uspán."
 
-#: lib/setup.c:4241
+#: lib/setup.c:4257
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Uspání není na zařízení %s podporováno."
 
-#: lib/setup.c:4243 lib/setup.c:4251
+#: lib/setup.c:4259 lib/setup.c:4267
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Chyba při uspávání zařízení %s."
 
-#: lib/setup.c:4266
+#: lib/setup.c:4282
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Zařízení %s bylo uspáno, ale hardwarové zařízení Opal nelze uzamknout."
 
-#: lib/setup.c:4297 lib/setup.c:4491
+#: lib/setup.c:4313 lib/setup.c:4507
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Probuzení není na zařízení %s podporováno."
 
-#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Chyba při probouzení zařízení %s."
 
-#: lib/setup.c:4335
+#: lib/setup.c:4351
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Z klíčenky zadané uživatelem se nepodařilo odpojit klíč svazku."
 
-#: lib/setup.c:4457 lib/setup.c:5637
+#: lib/setup.c:4473 lib/setup.c:5653
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Do uživatelem zadané klíčenky se nepodařilo přidat klíč svazku."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2722
+#: lib/setup.c:4572 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Svazek %s není uspán."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
 #: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
-#: src/utils_reencrypt.c:1969
+#: src/utils_reencrypt.c:1995
 msgid "Volume key does not match the volume."
 msgstr "Heslo svazku neodpovídá svazku."
 
-#: lib/setup.c:4821
+#: lib/setup.c:4837
 msgid "Failed to swap new key slot."
 msgstr "Záměna novou pozicí klíče se nezdařila."
 
-#: lib/setup.c:4919
+#: lib/setup.c:4935
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Pozice klíče %d je neplatná."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
 #: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Pozice klíče %d není aktivní."
 
-#: lib/setup.c:4944
+#: lib/setup.c:4960
 msgid "Device header overlaps with data area."
 msgstr "Hlavička zařízení se překrývá s datovou oblastí."
 
-#: lib/setup.c:5165
+#: lib/setup.c:5181
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Přešifrování již probíhá. Zařízení nelze aktivovat."
 
-#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
 #: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Získání zámku pro přešifrování selhalo."
 
-#: lib/setup.c:5189
+#: lib/setup.c:5205
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Obnova přešifrování LUKS2 pomocí klíčů svazku selhala."
 
-#: lib/setup.c:5325
+#: lib/setup.c:5341
 #, c-format
 msgid "Device %s already exists."
 msgstr "Zařízení %s již existuje."
 
-#: lib/setup.c:5332
+#: lib/setup.c:5348
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Zařízení %s nelze použít. Název není platný nebo zařízení se stále používá."
 
-#: lib/setup.c:5344
+#: lib/setup.c:5360
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Klíče pro přešifrování svazku neodpovídají svazku."
 
-#: lib/setup.c:5361
+#: lib/setup.c:5377
 msgid "Incorrect volume key specified for plain device."
 msgstr "Byl zadán neplatný klíč svazku."
 
-#: lib/setup.c:5387 lib/setup.c:5448
+#: lib/setup.c:5403 lib/setup.c:5464
 msgid "Device type is not properly initialized."
 msgstr "Typ zařízení není řádně inicializován."
 
-#: lib/setup.c:5486
+#: lib/setup.c:5502
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Jaderná klíčenka není jádrem podporována."
 
-#: lib/setup.c:5490
+#: lib/setup.c:5506
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Jaderná klíčenka chybí: je potřeba pro předání podpisu do jádra."
 
-#: lib/setup.c:5545
+#: lib/setup.c:5561
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Klíčem klíčenky %s nelze použít."
 
-#: lib/setup.c:5758
+#: lib/setup.c:5774
 msgid "Incorrect root hash specified for verity device."
 msgstr "K zařízení VERITY byl zadán neplatný kořenový haš."
 
-#: lib/setup.c:5799 lib/setup.c:5824
+#: lib/setup.c:5815 lib/setup.c:5840
 msgid "OPAL does not support deferred deactivation."
 msgstr "Opal nepodporuje odloženou deaktivaci."
 
-#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Zařízení %s se stále používá."
 
-#: lib/setup.c:5832
+#: lib/setup.c:5848
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Odložené odebrání zařízení %s nebylo možné zrušit."
 
-#: lib/setup.c:5854
+#: lib/setup.c:5870
 #, c-format
 msgid "Invalid device %s."
 msgstr "Neplatné zařízení %s."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6017
 msgid "Volume key buffer too small."
 msgstr "Vyhrazená paměť pro klíč svazku je příliš malá."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6028
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nelze získat klíč svazku pro zařízení LUKS2."
 
-#: lib/setup.c:6021
+#: lib/setup.c:6037
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nelze získat klíč svazku pro zařízení LUKS1."
 
-#: lib/setup.c:6035
+#: lib/setup.c:6051
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nelze získat klíč svazku pro otevřené zařízení."
 
-#: lib/setup.c:6043
+#: lib/setup.c:6059
 msgid "Cannot retrieve root hash for verity device."
 msgstr "K zařízení VERITY nelze získat kořenový otisk."
 
-#: lib/setup.c:6052
+#: lib/setup.c:6068
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nelze získat klíč svazku pro zařízení BITLK."
 
-#: lib/setup.c:6057
+#: lib/setup.c:6073
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nelze získat klíč svazku pro zařízení FVAULT2."
 
-#: lib/setup.c:6059
+#: lib/setup.c:6075
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Na šifrovaném zařízení %s není tato operace podporována."
 
-#: lib/setup.c:6244 lib/setup.c:6255
+#: lib/setup.c:6260 lib/setup.c:6271
 msgid "Dump operation is not supported for this device type."
 msgstr "Operace výpisu není na zařízení tohoto typu podporována."
 
-#: lib/setup.c:6635
+#: lib/setup.c:6651
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Počátek dat není násobkem %u bajtů."
 
-#: lib/setup.c:6943
+#: lib/setup.c:6959
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Zařízení %s, které se stále používá, nelze konvertovat."
 
-#: lib/setup.c:7251 lib/setup.c:7406
+#: lib/setup.c:7267 lib/setup.c:7422
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Přiřazení pozice klíče %u jakožto nového klíče svazku se nezdařilo."
 
-#: lib/setup.c:7275
+#: lib/setup.c:7291
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Inicializace parametrů výchozí pozice klíče LUKS2 selhala."
 
-#: lib/setup.c:7281
+#: lib/setup.c:7297
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Přiřazení pozice klíče %d k otisku se nezdařilo."
 
-#: lib/setup.c:7523
+#: lib/setup.c:7539
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nelze přidat pozici klíče, všechny pozice jsou zakázány a klíč svazku nebyl poskytnut."
 
-#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Klíč se nepodařilo přidat do jaderné klíčenky."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7823
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Klíčenku zadanou jako „%s“ nebylo možné nalézt."
 
-#: lib/setup.c:7872
+#: lib/setup.c:7888
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Získání zámku pro tvrdý přístup do globální paměti selhalo."
 
@@ -819,7 +819,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Požadované množství dat nelze načíst."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Zařízení %s neexistuje nebo přístup byl zamítnut."
@@ -937,16 +937,16 @@ msgstr "Požadovaný počet souběžných vláken PBKDF nemůže být nula."
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "V režimu FIPS je podporován jen PBKDF2."
 
-#: lib/utils_benchmark.c:171
+#: lib/utils_benchmark.c:175
 msgid "PBKDF benchmark disabled but iterations not set."
 msgstr "Porovnání výkonu PBKDF je zakázáno, ale počet iterací není nastaven."
 
-#: lib/utils_benchmark.c:190
+#: lib/utils_benchmark.c:194
 #, c-format
 msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr "Neslučitelné volby PBKDF2 (při použití hašovacího algoritmu %s)."
 
-#: lib/utils_benchmark.c:210
+#: lib/utils_benchmark.c:214
 msgid "Not compatible PBKDF options."
 msgstr "Neslučitelné volby PBKDF."
 
@@ -995,9 +995,9 @@ msgstr "V režimu XTS musí být velikost klíče 256 nebo 512 bitů."
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Zápis šifry by měl být ve tvaru [šifra]-[režim]-[iv]."
 
-#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
-#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "Na zařízení %s nelze zapsat, povolení zamítnuto."
@@ -1015,13 +1015,13 @@ msgstr "Přístup do dočasného zařízení s úložištěm klíče selhal."
 msgid "IO error while encrypting keyslot."
 msgstr "Chyba vstupu/výstupu při šifrování pozice klíče."
 
-#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
@@ -1036,61 +1036,61 @@ msgstr "Chyba vstupu/výstupu při dešifrování pozice klíče."
 msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr "Zařízení %s je příliš malé. (LUKS1 vyžaduje alespoň %<PRIu64> bajtů.)"
 
-#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
-#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
-#: lib/luks1/keymanage.c:181
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
 #, c-format
 msgid "LUKS keyslot %u is invalid."
 msgstr "Pozice %u klíče LUKS není platná."
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "Požadovaný soubor se zálohou hlavičky %s již existuje."
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "Soubor se zálohou hlavičky %s nelze vytvořit."
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "Nelze zapsat soubor %s se zálohou hlavičky."
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
 msgid "Backup file does not contain valid LUKS header."
 msgstr "Záložní soubor neobsahuje platnou hlavičku LUKS."
 
-#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1450
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "Nelze otevřít soubor se zálohou hlavičky %s."
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "Soubor se zálohou hlavičky %s nelze načíst."
 
-#: lib/luks1/keymanage.c:326
+#: lib/luks1/keymanage.c:331
 msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr "Počátek dat nebo velikost klíče se liší mezi zařízením a zálohou, obnova se nezdařila."
 
-#: lib/luks1/keymanage.c:334
+#: lib/luks1/keymanage.c:339
 #, c-format
 msgid "Device %s %s%s"
 msgstr "Zařízení %s %s%s"
 
-#: lib/luks1/keymanage.c:335
+#: lib/luks1/keymanage.c:340
 msgid "does not contain LUKS header. Replacing header can destroy data on that device."
 msgstr "neobsahuje hlavičku LUKS. Nahrazení hlavičky může zničit data na daném zařízení."
 
-#: lib/luks1/keymanage.c:336
+#: lib/luks1/keymanage.c:341
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "již obsahuje hlavičku LUKS. Nahrazení hlavičky zničí existující pozice s klíči."
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1098,131 +1098,131 @@ msgstr ""
 "\n"
 "POZOR: hlavička ve skutečném zařízení má jiné UUID než záloha!"
 
-#: lib/luks1/keymanage.c:385
+#: lib/luks1/keymanage.c:390
 msgid "Non standard key size, manual repair required."
 msgstr "Nestandardní velikost klíče, je třeba ruční opravy."
 
-#: lib/luks1/keymanage.c:395
+#: lib/luks1/keymanage.c:400
 msgid "Non standard keyslots alignment, manual repair required."
 msgstr "Nestandardní zarovnání pozice klíče, je třeba ruční opravy."
 
-#: lib/luks1/keymanage.c:404
+#: lib/luks1/keymanage.c:409
 #, c-format
 msgid "Cipher mode repaired (%s -> %s)."
 msgstr "Režim šifry opraven (%s → %s)."
 
-#: lib/luks1/keymanage.c:415
+#: lib/luks1/keymanage.c:420
 #, c-format
 msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Haš šifry opraven na malý písmena (%s)."
 
-#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:756
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Požadovaný haš LUKSu %s není podporován."
 
-#: lib/luks1/keymanage.c:431
+#: lib/luks1/keymanage.c:436
 msgid "Repairing keyslots."
 msgstr "Opravují se pozice klíčů."
 
-#: lib/luks1/keymanage.c:450
+#: lib/luks1/keymanage.c:455
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr "Pozice klíče %i: poloha opravena (%u → %u)."
 
-#: lib/luks1/keymanage.c:458
+#: lib/luks1/keymanage.c:463
 #, c-format
 msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr "Pozice klíče %i: proklad opraven (%u → %u)."
 
-#: lib/luks1/keymanage.c:467
+#: lib/luks1/keymanage.c:472
 #, c-format
 msgid "Keyslot %i: bogus partition signature."
 msgstr "Pozice klíče %i: chybná značka oddílu."
 
-#: lib/luks1/keymanage.c:472
+#: lib/luks1/keymanage.c:477
 #, c-format
 msgid "Keyslot %i: salt wiped."
 msgstr "Pozice klíče %i: sůl vymazána."
 
-#: lib/luks1/keymanage.c:489
+#: lib/luks1/keymanage.c:494
 msgid "Writing LUKS header to disk."
 msgstr "Hlavička LUKS se zapisuje na disk."
 
-#: lib/luks1/keymanage.c:494
+#: lib/luks1/keymanage.c:499
 msgid "Repair failed."
 msgstr "Oprava selhala."
 
-#: lib/luks1/keymanage.c:549
+#: lib/luks1/keymanage.c:554
 #, c-format
 msgid "LUKS cipher mode %s is invalid."
 msgstr "Režim LUKS šifry %s není platný."
 
-#: lib/luks1/keymanage.c:554
+#: lib/luks1/keymanage.c:559
 #, c-format
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS haš %s není platný."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "V hlavičce LUKS nenalezen žádný známý problém."
 
-#: lib/luks1/keymanage.c:689
+#: lib/luks1/keymanage.c:690
 #, c-format
 msgid "Error during update of LUKS header on device %s."
 msgstr "Chyba při aktualizaci hlavičky LUKS na zařízení %s."
 
-#: lib/luks1/keymanage.c:697
+#: lib/luks1/keymanage.c:698
 #, c-format
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Chyba při opakovaném čtení hlavičky LUKS po aktualizaci zařízení %s."
 
 # TODO: Pluralize
-#: lib/luks1/keymanage.c:750
+#: lib/luks1/keymanage.c:751
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Poloha dat u hlavičky LUKS musí být buď 0 nebo více než velikost hlavičky."
 
-#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
-#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Poskytnut UUID LUKSu ve špatném tvaru."
 
-#: lib/luks1/keymanage.c:783
+#: lib/luks1/keymanage.c:784
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Hlavičku LUKS nelze vytvořit: čtení náhodné soli selhalo."
 
-#: lib/luks1/keymanage.c:811
+#: lib/luks1/keymanage.c:812
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Hlavičku LUKS nelze vytvořit: výpočet otisku hlavičky (haš %s) selhal."
 
-#: lib/luks1/keymanage.c:856
+#: lib/luks1/keymanage.c:857
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Pozice klíče %d je aktivní, nejprve ji uvolněte."
 
-#: lib/luks1/keymanage.c:862
+#: lib/luks1/keymanage.c:863
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Pozice klíče %d obsahuje příliš málo útržků. Manipulace s hlavičkou?"
 
-#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Čítač opakování PBKDF2 přetekl."
 
-#: lib/luks1/keymanage.c:1022
+#: lib/luks1/keymanage.c:1023
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Pozici s klíčem nezle otevřít (za použití haše %s)."
 
-#: lib/luks1/keymanage.c:1118
+#: lib/luks1/keymanage.c:1119
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Pozice klíče %d není platná, prosím, vyberte pozici mezi 0 a %d."
 
-#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Zařízení %s není možné smazat."
@@ -1400,33 +1400,33 @@ msgstr "Tato operace není podporována."
 msgid "Unexpected key data size."
 msgstr "Nečekaná velikost údajů o klíči."
 
-#: lib/bitlk/bitlk.c:1442
+#: lib/bitlk/bitlk.c:1448
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Toto zařízení BITLK je v nepodporovaném stavu a nelze jej aktivovat."
 
-#: lib/bitlk/bitlk.c:1447
+#: lib/bitlk/bitlk.c:1453
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Zařízení BITLK s typem „%s“ nelze aktivovat."
 
-#: lib/bitlk/bitlk.c:1486
+#: lib/bitlk/bitlk.c:1492
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "POZOR: Velikost svazku BitLockeru %<PRIu64> neodpovídá velikosti zařízení ve zpod %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1613
+#: lib/bitlk/bitlk.c:1634
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Zařízení nelze aktivovat. Jaderný dm-crypt postrádá podporu inicializačního vektoru BITLK."
 
-#: lib/bitlk/bitlk.c:1617
+#: lib/bitlk/bitlk.c:1638
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Zařízení nelze aktivovat. Jaderný dm-crypt postrádá podporu difuzéru Elephant BITLK."
 
-#: lib/bitlk/bitlk.c:1621
+#: lib/bitlk/bitlk.c:1642
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Zařízení nelze aktivovat. Jaderný dm-crypt postrádá podporu velikostí velkých sektorů."
 
-#: lib/bitlk/bitlk.c:1625
+#: lib/bitlk/bitlk.c:1646
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Zařízení nelze aktivovat. Chybí jaderný modul dm-zero."
 
@@ -1585,26 +1585,26 @@ msgstr "Velikost zařízení %s se nepodařilo určit."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Neslučitelná metadata jaderného dm-integrity (verze %u) byla nalezena na %s."
 
-#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Jádro nepodporuje mapování dm-integrity."
 
 # Fixed metadata means fix_padding attribute of dm-integrity target
 # documented as "use a smaller padding".
-#: lib/integrity/integrity.c:314
+#: lib/integrity/integrity.c:315
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Jádro nepodporuje drobné zarovnání metadat dm-integrity."
 
-#: lib/integrity/integrity.c:323
+#: lib/integrity/integrity.c:324
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Jádro odmítá aktivovat volbu nebezpečného přepočtu (pro přebití vizte zastaralé volby aktivace)"
 
-#: lib/integrity/integrity.c:329
+#: lib/integrity/integrity.c:330
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Jádro nepodporuje mapování dm-integrity s inline režimem."
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1510
+#: lib/luks2/luks2_json_metadata.c:1502
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "Získání zámku pro zápis do zařízení %s selhalo."
@@ -1627,22 +1627,22 @@ msgstr ""
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "POZOR: oblast s pozicemi klíčů (%<PRIu64> bajtů) je příliš malá, dostupný počet pozic klíčů LUKS2 je značně omezen.\n"
 
-#: lib/luks2/luks2_json_format.c:418
+#: lib/luks2/luks2_json_format.c:427
 msgid "Requested data offset is too small."
 msgstr "Požadovaná poloha dat je příliš nízká."
 
-#: lib/luks2/luks2_json_format.c:459
+#: lib/luks2/luks2_json_format.c:468
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "POZOR: Metadata LUKS2 změnila velikost na %<PRIu64> bajtů.\n"
 
-#: lib/luks2/luks2_json_format.c:463
+#: lib/luks2/luks2_json_format.c:472
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "POZOR: Oblast s pozicemi klíčů pro LUKS2 změnila velikost na %<PRIu64> bajtů.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Získání zámku pro čtení ze zařízení %s selhalo."
@@ -1651,33 +1651,33 @@ msgstr "Získání zámku pro čtení ze zařízení %s selhalo."
 msgid "Label is too long."
 msgstr "Jmenovka je příliš dlouhá."
 
-#: lib/luks2/luks2_json_metadata.c:1435
+#: lib/luks2/luks2_json_metadata.c:1427
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "V záloze %s byly zjištěny zakázané požadavky na LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:1474
+#: lib/luks2/luks2_json_metadata.c:1466
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "Počátek dat se liší mezi zařízením a zálohou, obnova se nezdařila."
 
-#: lib/luks2/luks2_json_metadata.c:1480
+#: lib/luks2/luks2_json_metadata.c:1472
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "Velikost binární hlavičky s oblastí pro pozice klíčů se liší mezi zařízením a zálohou, obnova se nezdařila."
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1479
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "Zařízení %s %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "neobsahuje hlavičku LUKS2. Nahrazení hlavičky může zničit data na daném zařízení."
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1481
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "již obsahuje hlavičku LUKS2. Nahrazení hlavičky zničí existující pozice s klíči."
 
-#: lib/luks2/luks2_json_metadata.c:1491
+#: lib/luks2/luks2_json_metadata.c:1483
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1687,7 +1687,7 @@ msgstr ""
 "POZOR: Ve skutečné hlavičce zařízení byly objeveny neznámé požadavky na LUKS2!\n"
 "Nahrazení hlavičky zálohou může zničit data na zařízení!"
 
-#: lib/luks2/luks2_json_metadata.c:1493
+#: lib/luks2/luks2_json_metadata.c:1485
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1697,84 +1697,84 @@ msgstr ""
 "POZOR: Na zařízení bylo objeveno nedokončené offline přešifrování!\n"
 "Nahrazení hlavičky zálohou může zničit data."
 
-#: lib/luks2/luks2_json_metadata.c:1591
+#: lib/luks2/luks2_json_metadata.c:1583
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "Neznámý příznak %s ignorován."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Chybí klíč pro dm-crypt část %u."
 
-#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Nastavení části dm-crypt selhalo."
 
-#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Nastavení části dm-linear selhalo."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "V hlavičce LUKS2 nebyl nalezen žádný známý vzorek určující šifru."
 
-#: lib/luks2/luks2_json_metadata.c:2709
+#: lib/luks2/luks2_json_metadata.c:2701
 msgid "OPAL device must have static device size."
 msgstr "Zařízení Opal musí mít statickou velikost zařízení."
 
-#: lib/luks2/luks2_json_metadata.c:2729
+#: lib/luks2/luks2_json_metadata.c:2721
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Šifrované zařízení Opal zajišťující neporušenost musí být menší než uzamykatelná oblast."
 
-#: lib/luks2/luks2_json_metadata.c:2734
+#: lib/luks2/luks2_json_metadata.c:2726
 msgid "OPAL device must have same size as locking range."
 msgstr "Zařízení Opal musí mít stejnou velikost jako uzamykatelná oblast."
 
-#: lib/luks2/luks2_json_metadata.c:2754
+#: lib/luks2/luks2_json_metadata.c:2746
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Opal zařízení %s je již odemknuto.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2793
+#: lib/luks2/luks2_json_metadata.c:2785
 msgid "Unsupported device integrity configuration."
 msgstr "Nepodporovaná konfigurace integrity zařízení."
 
-#: lib/luks2/luks2_json_metadata.c:2809
+#: lib/luks2/luks2_json_metadata.c:2801
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Dm-integrity zařízení nižší úrovně poskytlo nečekané datové sektory."
 
-#: lib/luks2/luks2_json_metadata.c:2911
+#: lib/luks2/luks2_json_metadata.c:2903
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Probíhá přešifrování. Zařízení nelze deaktivovat."
 
-#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Výměna pozastaveného zařízení %s za cíl dm-error selhala."
 
-#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Zařízení %s bylo deaktivováno, avšak hardwarové zařízené Opal nelze uzamknout."
 
-#: lib/luks2/luks2_json_metadata.c:3045
+#: lib/luks2/luks2_json_metadata.c:3037
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Zjištěny nesplněné požadavky na LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:3053
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Operace se neslučuje se zařízením označeným pro zastaralé přešifrování. Operace se ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3055
+#: lib/luks2/luks2_json_metadata.c:3047
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Operace se neslučuje se zařízením označeným pro přešifrování LUKS2. Operace se ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3057
+#: lib/luks2/luks2_json_metadata.c:3049
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Operace se neslučuje se zařízením používajícím Opal. Operace se ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3059
+#: lib/luks2/luks2_json_metadata.c:3051
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Operace se neslučuje se zařízením používajícím inline hardwarové značky. Operace se ruší."
 
@@ -1841,61 +1841,61 @@ msgstr "Pozice s klíčem LUKS2 neumožňuje použít šifru zadanou jako %s-%s.
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Oblast s pozicemi klíčů nelze přesunout. Nedostatek místa."
 
-#: lib/luks2/luks2_luks1_convert.c:619
+#: lib/luks2/luks2_luks1_convert.c:627
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Nelze převést do formátu LUKS2 – neplatná metadata."
 
-#: lib/luks2/luks2_luks1_convert.c:636
+#: lib/luks2/luks2_luks1_convert.c:644
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Oblast s pozicemi klíčů nelze přesunout. Oblast s pozicemi klíčů LUKS2 je příliš malá."
 
-#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
 msgid "Unable to move keyslot area."
 msgstr "Oblast s pozicemi klíčů nelze přesunout."
 
-#: lib/luks2/luks2_luks1_convert.c:757
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Nelze převést do formátu LUKS1 – výchozí velikost sektoru šifrování části není 512 bajtů."
 
-#: lib/luks2/luks2_luks1_convert.c:765
+#: lib/luks2/luks2_luks1_convert.c:773
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Nelze převést do formátu LUKS1 – otisky v pozicích s klíči nejsou slučitelné s LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:779
+#: lib/luks2/luks2_luks1_convert.c:787
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Nelze převést do formátu LUKS1 – zařízení používá šifru se zabaleným klíčem %s."
 
-#: lib/luks2/luks2_luks1_convert.c:784
+#: lib/luks2/luks2_luks1_convert.c:792
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Nelze převést do formátu LUKS1 – zařízení používá více částí."
 
 # TODO: Pluralize
-#: lib/luks2/luks2_luks1_convert.c:792
+#: lib/luks2/luks2_luks1_convert.c:800
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Nelze převést do formátu LUKS1 – hlavička LUKS2 obsahuje %u token(ů)."
 
-#: lib/luks2/luks2_luks1_convert.c:798
+#: lib/luks2/luks2_luks1_convert.c:806
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Nelze převést do formátu LUKS1 – žádná pozice s klíčem není aktivní."
 
-#: lib/luks2/luks2_luks1_convert.c:810
+#: lib/luks2/luks2_luks1_convert.c:818
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Nelze převést do formátu LUKS1 – pozice s klíčem %u je v nesprávném stavu."
 
-#: lib/luks2/luks2_luks1_convert.c:815
+#: lib/luks2/luks2_luks1_convert.c:823
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Nelze převést do formátu LUKS1 – pozice s klíčem %u není přiřazena."
 
-#: lib/luks2/luks2_luks1_convert.c:820
+#: lib/luks2/luks2_luks1_convert.c:828
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Nelze převést do formátu LUKS1 – pozice s klíčem %u (nad maximem pozic) je stále aktivní."
 
-#: lib/luks2/luks2_luks1_convert.c:825
+#: lib/luks2/luks2_luks1_convert.c:833
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Nelze převést do formátu LUKS1 – pozice s klíčem %u není slučitelná s LUKS1."
@@ -2180,7 +2180,7 @@ msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encry
 msgstr "Parametry pro šifrování pozice s klíčem se neslučují s šifrováním pozice s klíčem LUKS2."
 
 #: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
-#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Nelze najít žádný známý vzorek se specifikaci šifry."
@@ -2208,7 +2208,7 @@ msgid "WARNING: The --keyfile-size option is being ignored, the read size is the
 msgstr "POZOR: Přepínač --keyfile-size se ignoruje, velikost pro čtení je stejná jako velikosti šifrovacího klíče.\n"
 
 #: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
-#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Prohledávání blkid selhalo u %s."
@@ -2288,7 +2288,7 @@ msgstr "Zařízení %s není platným zařízením FVAULT2."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nelze určit velikost klíče svazku pro FVAULT2. Prosím, použijte přepínač --key-size."
 
-#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Zařízení %s je stále aktivní a naplánováno pro odložené odstranění.\n"
@@ -2480,7 +2480,7 @@ msgid "LUKS file container %s is too small for activation, there is no remaining
 msgstr "Souborový kontejner LUKS %s je na aktivaci příliš malý. Nezbývá žádné místo pro data."
 
 #: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
-#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Bez pozic pro klíče nelze určit velikost LUKS klíče svazku. Prosím, použijte přepínač --key-size."
 
@@ -2778,7 +2778,7 @@ msgstr "Přepínač --volume-key-keyring nelze použít s přepínači --hash a
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Oba přepínače --volume-key-file musí být ve dvojici s odpovídajícími přepínači --key-size."
 
-#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Přepínače --cancel-deferred a --deferred se vzájemně vylučují."
 
@@ -2846,21 +2846,21 @@ msgstr "Akce vyžaduje určitou pozici klíče. Použijte parametr --key-slot."
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<zařízení> [--type <druh>] [<název>]"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
 msgid "open device as <name>"
 msgstr "otevře zařízení jako <název>"
 
 #: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
-#: src/integritysetup.c:562 src/integritysetup.c:564
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
 msgid "<name>"
 msgstr "<název>"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
 msgid "close device (remove mapping)"
 msgstr "zavře zařízení (odstraní mapování)"
 
-#: src/cryptsetup.c:3484 src/integritysetup.c:564
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
 msgid "resize active device"
 msgstr "změní velikost aktivního zařízení"
 
@@ -2992,7 +2992,7 @@ msgstr "<add|remove|import|export> <zařízení>"
 msgid "Manipulate LUKS2 tokens"
 msgstr "Zachází s tokeny LUKS2"
 
-#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3093,7 +3093,7 @@ msgstr ""
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: V režimu XTS (dva vnitřní klíče) bude výchozí velikost klíče zdvojnásobena.\n"
 
-#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: vyžaduje %s jako argumenty"
@@ -3145,31 +3145,31 @@ msgstr "Přepínač --priority smí mít pouze argument ignore, normal a prefer.
 msgid "Invalid maximal tries specification."
 msgstr "Zadáno neplatné maximum pokusů."
 
-#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
 msgid "Show this help message"
 msgstr "Zobrazí tuto nápovědu"
 
-#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
 msgid "Display brief usage"
 msgstr "Zobrazí stručný návod na použití"
 
-#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
 msgid "Print package version"
 msgstr "Vypíše verzi balíku"
 
-#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
 msgid "Help options:"
 msgstr "Přepínače nápovědy:"
 
-#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[PŘEPÍNAČ…] <akce> <přepínače_akce>"
 
-#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
 msgid "Argument <action> missing."
 msgstr "Chybí argument <akce>."
 
-#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
 msgid "Unknown action."
 msgstr "Neznámá akce."
 
@@ -3274,7 +3274,7 @@ msgstr "Příkaz vyžaduje argument <kořenový_haš> nebo přepínač --root-ha
 msgid "<data_device> <hash_device>"
 msgstr "<zařízení_dat> <zařízení_hašů>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:559
+#: src/veritysetup.c:485 src/integritysetup.c:562
 msgid "format device"
 msgstr "naformátuje zařízení"
 
@@ -3290,7 +3290,7 @@ msgstr "ověří zařízení"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<zařízení_dat> <název> <zařízení_hašů> [<kořenový_haš>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:562
+#: src/veritysetup.c:489 src/integritysetup.c:565
 msgid "show active device status"
 msgstr "zobrazí stav aktivního zařízení"
 
@@ -3298,7 +3298,7 @@ msgstr "zobrazí stav aktivního zařízení"
 msgid "<hash_device>"
 msgstr "<zařízení_hašů>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:563
+#: src/veritysetup.c:490 src/integritysetup.c:566
 msgid "show on-disk information"
 msgstr "zobrazí údaje z disku"
 
@@ -3363,20 +3363,20 @@ msgstr " (inline hardwarové značky)"
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Nastavení příznaku přepočtu není podporováno, místo toho zvažte použití --wipe."
 
-#: src/integritysetup.c:382 src/integritysetup.c:546
+#: src/integritysetup.c:382 src/integritysetup.c:549
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Zařízení %s není platným zařízením INTEGRITY."
 
-#: src/integritysetup.c:559 src/integritysetup.c:563
+#: src/integritysetup.c:562 src/integritysetup.c:566
 msgid "<integrity_device>"
 msgstr "<zařízení_s_daty_integrity>"
 
-#: src/integritysetup.c:560
+#: src/integritysetup.c:563
 msgid "<integrity_device> <name>"
 msgstr "<zařízení_s_daty_integrity> <název>"
 
-#: src/integritysetup.c:583
+#: src/integritysetup.c:586
 #, c-format
 msgid ""
 "\n"
@@ -3387,7 +3387,7 @@ msgstr ""
 "<název> je zařízení, které bude vytvořeno pod %s\n"
 "<zařízení_s_daty_integrity> je zařízení obsahující data se značkami integrity\n"
 
-#: src/integritysetup.c:588
+#: src/integritysetup.c:591
 #, c-format
 msgid ""
 "\n"
@@ -3401,51 +3401,55 @@ msgstr ""
 "\tMaximální velikost souboru s klíčem: %d kB\n"
 
 # TODO: Pluralize
-#: src/integritysetup.c:645
+#: src/integritysetup.c:648
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Neplatná velikost --%s. Maximální je %u bajtů."
 
-#: src/integritysetup.c:748
+#: src/integritysetup.c:751
 msgid "Both key file and key size options must be specified."
 msgstr "Musí být zadány oba přepínače pro soubor s klíčem a velikostí klíče."
 
-#: src/integritysetup.c:752
+#: src/integritysetup.c:755
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Musí být zadány oba přepínače pro soubor s klíčem žurnálu a velikostí klíče."
 
-#: src/integritysetup.c:755
+#: src/integritysetup.c:758
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Je-li použit klíč integrity žurnálu, musí být zadán algoritmus integrity žurnálu."
 
-#: src/integritysetup.c:759
+#: src/integritysetup.c:762
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Musí být zadány oba přepínače pro soubor s šifrovacím klíčem žurnálu a velikostí klíče."
 
-#: src/integritysetup.c:762
+#: src/integritysetup.c:765
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Je-li použit šifrovací klíč žurnálu, musí být zadán algoritmus šifrování žurnálu."
 
-#: src/integritysetup.c:766
+#: src/integritysetup.c:769
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Přepínače režimu bitmapy a obnovení se vzájemně vylučují."
 
-#: src/integritysetup.c:773
+#: src/integritysetup.c:776
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Přepínače žurnálu nelze použití spolu s režimem bitmapy."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:781
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Přepínače bitmapy lze použít jen při režimu bitmapy."
 
-#: src/integritysetup.c:784
+#: src/integritysetup.c:787
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Režim inline nelze kombinovat s možnostmi žurnálu a bitmapy."
 
-#: src/integritysetup.c:788
+#: src/integritysetup.c:791
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Režim inline nelze kombinovat se odděleným zařízením pro data."
 
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "Zahazování s klíčem lze zapnout jen s algoritmy s klíčem jako je HMAC."
+
 #: src/utils_tools.c:105
 msgid ""
 "\n"
@@ -3799,7 +3803,7 @@ msgstr "Zařízení není ve stavu dešifrování LUKS2. Neslučitelný přepín
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Zařízení je ve stavu přešifrování pomocí odolnosti posunu dat. Požadovaný přepínač --resilience nelze použít."
 
-#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Bez pozic pro klíče nelze určit velikost klíče svazku LUKS. Prosím, použijte přepínač --new-key-size."
 
@@ -3833,7 +3837,7 @@ msgstr ""
 "Požadovaný --sector-size %<PRIu32> není slučitelný se superblokem %s\n"
 "(velikost bloku %<PRIu32> bajtů) nalezeném na zařízení %s."
 
-#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Přešifrování bez oddělené hlavičky (--header) není možné bez zmenšení velikosti datového zařízení (--reduce-device-size)."
 
@@ -3901,42 +3905,43 @@ msgstr "Inicializace přešifrování selhala. Záloha hlavičky je dostupná v
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Dešifrování LUKS2 je podporováno jen u zařízení s oddělenou hlavičkou (počátek dat na 0)."
 
-#: src/utils_reencrypt.c:1490
-msgid "No token could unlock the device."
-msgstr "Toto zařízení nebylo možné odemknout žádným tokenem."
-
-#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
 msgid "Not enough free keyslots for reencryption."
 msgstr "Nedostatek pozic s klíči pro přešifrování."
 
-#: src/utils_reencrypt.c:1562
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "Toto zařízení nebylo možné odemknout žádným tokenem."
+
+#: src/utils_reencrypt.c:1588
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Soubor s klíčem a popis klíče v klíčence lze použít jen s přepínačem --key-slot nebo s právě jednou aktivní pozicí klíče."
 
-#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Zadejte heslo pro pozici klíče %d: "
 
-#: src/utils_reencrypt.c:1879
+#: src/utils_reencrypt.c:1905
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Přepíná se algoritmus šifrování dat na %s.\n"
 
-#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Pro přešifrování zařízení s aktivními pozicemi klíče přímým předáním klíčů svazku použijte --force-no-keyslots."
 
-#: src/utils_reencrypt.c:1996
+#: src/utils_reencrypt.c:2022
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Přepínač --new-volume-key-file musí být ve dvojici s --new-key-size."
 
-#: src/utils_reencrypt.c:2038
+#: src/utils_reencrypt.c:2064
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Žádné parametry oblasti s daty nebyly změněny. Přešifrování zrušeno."
 
-#: src/utils_reencrypt.c:2075
+#: src/utils_reencrypt.c:2101
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3945,7 +3950,7 @@ msgstr ""
 "podporováno. Nejprve zařízení aktivujte, nebo použijte přepínač\n"
 "--force-offline-reencrypt (nebezpečné!)."
 
-#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3954,58 +3959,58 @@ msgstr ""
 "\n"
 "Přešifrování přerušeno."
 
-#: src/utils_reencrypt.c:2122
+#: src/utils_reencrypt.c:2148
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Dokončuje se přešifrování LUKS ve vynuceném režimu offline.\n"
 
-#: src/utils_reencrypt.c:2145
+#: src/utils_reencrypt.c:2171
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Zařízení %s obsahuje porušená metadata LUKS. Operace se ruší."
 
-#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Zařízení %s je již zařízením LUKS. Operace se ruší."
 
-#: src/utils_reencrypt.c:2189
+#: src/utils_reencrypt.c:2215
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Zařízení %s je již ve stavu přešifrování LUKS. Operace se ruší."
 
-#: src/utils_reencrypt.c:2272
+#: src/utils_reencrypt.c:2298
 msgid "LUKS2 decryption requires --header option."
 msgstr "Dešifrování LUKS2 vyžaduje přepínač --header."
 
-#: src/utils_reencrypt.c:2320
+#: src/utils_reencrypt.c:2346
 msgid "Command requires device as argument."
 msgstr "Příkaz vyžaduje jako argument zařízení."
 
-#: src/utils_reencrypt.c:2333
+#: src/utils_reencrypt.c:2359
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Neslučitelné verze. Zařízení %s je LUKS1."
 
-#: src/utils_reencrypt.c:2339
+#: src/utils_reencrypt.c:2365
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Neslučitelné verze. Zařízení %s je ve stavu přešifrování LUKS1."
 
-#: src/utils_reencrypt.c:2345
+#: src/utils_reencrypt.c:2371
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Neslučitelné verze. Zařízení %s je LUKS2."
 
-#: src/utils_reencrypt.c:2351
+#: src/utils_reencrypt.c:2377
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Neslučitelné verze. Zařízení %s je ve stavu přešifrování LUKS2."
 
-#: src/utils_reencrypt.c:2357
+#: src/utils_reencrypt.c:2383
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Přešifrování LUKS2 je již inicializováno. Operace se ruší."
 
-#: src/utils_reencrypt.c:2364
+#: src/utils_reencrypt.c:2390
 msgid "Device reencryption not in progress."
 msgstr "Neprobíhá žádné přešifrování zařízení."
 

From 1644f5194b12227dae25e88d0dc2eff2729ff062 Mon Sep 17 00:00:00 2001
From: Roland Illig <roland.illig@gmx.de>
Date: Fri, 4 Sep 2026 18:57:03 +0200
Subject: [PATCH 206/244] po: update de.po (from translationproject.org)

---
 po/de.po | 657 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 331 insertions(+), 326 deletions(-)

diff --git a/po/de.po b/po/de.po
index 869758916..7e71d4634 100644
--- a/po/de.po
+++ b/po/de.po
@@ -5,10 +5,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
+"Project-Id-Version: cryptsetup 2.8.8-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-07-09 10:46+0200\n"
-"PO-Revision-Date: 2026-07-12 12:19+0200\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-02 20:42+0200\n"
 "Last-Translator: Roland Illig <roland.illig@gmx.de>\n"
 "Language-Team: German <translation-team-de@lists.sourceforge.net>\n"
 "Language: de\n"
@@ -19,78 +19,78 @@ msgstr ""
 "X-Bugs: Report translation errors to the Language-Team address.\n"
 "X-Generator: Poedit 3.9\n"
 
-#: lib/libdevmapper.c:419
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "Das Kernelmodul »device-mapper« kann nicht initialisiert werden, da das Programm nicht mit Root-Rechten läuft."
 
-#: lib/libdevmapper.c:422
+#: lib/libdevmapper.c:425
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "Das Kernelmodul »device-mapper« kann nicht initialisiert werden. Ist das Kernelmodul »dm_mod« geladen?"
 
-#: lib/libdevmapper.c:1125
+#: lib/libdevmapper.c:1129
 msgid "Requested deferred flag is not supported."
 msgstr "Verlangter »deferred«-Schalter wird nicht unterstützt."
 
-#: lib/libdevmapper.c:1194
+#: lib/libdevmapper.c:1198
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "DM-UUID für Gerät »%s« wurde verkürzt."
 
-#: lib/libdevmapper.c:1598
+#: lib/libdevmapper.c:1602
 msgid "Unknown dm target type."
 msgstr "Unbekannte Art des dm-Ziels."
 
-#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
-#: lib/libdevmapper.c:1853
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "Die verlangten dm-crypt-Performance-Optionen werden nicht unterstützt."
 
-#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "Die verlangten dm-verity-Datenbeschädigungs-Optionen werden nicht unterstützt."
 
-#: lib/libdevmapper.c:1752
+#: lib/libdevmapper.c:1756
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "Die verlangte dm-verity-Tasklet-Option wird nicht unterstützt."
 
-#: lib/libdevmapper.c:1764
+#: lib/libdevmapper.c:1768
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "Die verlangten dm-verity-FEC-Optionen werden nicht unterstützt."
 
-#: lib/libdevmapper.c:1770
+#: lib/libdevmapper.c:1774
 msgid "Requested data integrity options are not supported."
 msgstr "Die verlangten Datenintegritäts-Optionen werden nicht unterstützt."
 
-#: lib/libdevmapper.c:1774
+#: lib/libdevmapper.c:1778
 msgid "Requested sector_size option is not supported."
 msgstr "Die verlangte sector_size-Option wird nicht unterstützt."
 
-#: lib/libdevmapper.c:1779
+#: lib/libdevmapper.c:1783
 msgid "The device size is not multiple of the requested sector size."
 msgstr "Gerätegröße ist kein Vielfaches der gewünschten Sektorgröße."
 
-#: lib/libdevmapper.c:1783
+#: lib/libdevmapper.c:1787
 msgid "Requested integrity_key_size option is not supported."
 msgstr "Die verlangte integrity_key_size-Option wird nicht unterstützt."
 
-#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Die verlangte automatische Berechnung der Integritätsangaben wird nicht unterstützt."
 
-#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2799
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Discard/TRIM is not supported."
 msgstr "»Discard/TRIM« wird nicht unterstützt."
 
-#: lib/libdevmapper.c:1808
+#: lib/libdevmapper.c:1812
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "Der verlangte Bitmap-Modus für dm-Integrität wird nicht unterstützt."
 
-#: lib/libdevmapper.c:1814
+#: lib/libdevmapper.c:1818
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr "Der verlangte Inline-Modus für dm-Integrität wird nicht unterstützt."
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2877
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "Fehler beim Abfragen des »dm-%s«-Segments."
@@ -141,7 +141,7 @@ msgstr "Fehler beim Initialisieren des Krypto-Zufallszahlengenerator-Backends."
 msgid "Cannot initialize crypto backend."
 msgstr "Fehler beim Initialisieren des Krypto-Backends."
 
-#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Hash-Algorithmus »%s« wird nicht unterstützt."
@@ -155,7 +155,7 @@ msgstr "Fehler beim Verarbeiten des Schlüssels (mit Hash-Algorithmus »%s«)."
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Geräte-Art kann nicht bestimmt werden. Inkompatible Aktivierung des Geräts?"
 
-#: lib/setup.c:398 lib/setup.c:4177
+#: lib/setup.c:398 lib/setup.c:4193
 msgid "This operation is supported only for LUKS device."
 msgstr "Diese Operation wird nur für LUKS-Geräte unterstützt."
 
@@ -177,7 +177,7 @@ msgstr "Schlüsselfach %d ist ungültig, bitte wählen Sie eins zwischen 0 und %
 msgid "Key slot %d is full, please select another one."
 msgstr "Schlüsselfach %d ist voll, bitte wählen Sie ein anderes."
 
-#: lib/setup.c:534 lib/setup.c:3878
+#: lib/setup.c:534 lib/setup.c:3888
 msgid "Device size is not aligned to device logical block size."
 msgstr "Gerätegröße ist nicht an logischer Sektorgröße ausgerichtet."
 
@@ -186,7 +186,7 @@ msgstr "Gerätegröße ist nicht an logischer Sektorgröße ausgerichtet."
 msgid "Header detected but device %s is too small."
 msgstr "Header gefunden, aber Gerät »%s« ist zu klein."
 
-#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
 #: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Diese Operation wird für diese Geräteart nicht unterstützt."
@@ -199,553 +199,553 @@ msgstr "Ungültige Operation, während die Wiederverschlüsselung läuft."
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Fehler beim Rückabwickeln der LUKS2-Metadaten im Speicher."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
 #: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
 #: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
 #: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
-#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Gerät »%s« ist kein gültiges LUKS-Gerät."
 
-#: lib/setup.c:899 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Nicht unterstützte LUKS-Version %d."
 
-#: lib/setup.c:1273
+#: lib/setup.c:1279
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Kein bekanntes Verschlüsselungsmuster für aktives Gerät »%s« entdeckt."
 
-#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
-#: lib/setup.c:3786 lib/setup.c:5850
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
 #, c-format
 msgid "Device %s is not active."
 msgstr "Gerät »%s« ist nicht aktiv."
 
-#: lib/setup.c:1535
+#: lib/setup.c:1545
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Zugrundeliegendes Gerät für das Kryptogerät »%s« ist verschwunden."
 
-#: lib/setup.c:1617
+#: lib/setup.c:1627
 msgid "Invalid plain crypt parameters."
 msgstr "Ungültige Parameter für Plain-Verschlüsselung."
 
-#: lib/setup.c:1622 lib/setup.c:2672
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Invalid key size."
 msgstr "Ungültige Schlüsselgröße."
 
-#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID wird für diese Verschlüsselungsart nicht unterstützt."
 
-#: lib/setup.c:1632 lib/setup.c:2682
+#: lib/setup.c:1642 lib/setup.c:2692
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Gerät für separierte Metadaten wird für diese Verschlüsselungsart nicht unterstützt."
 
-#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
 #: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Nicht unterstützte Sektorengröße für Verschlüsselung."
 
-#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
 msgid "Device size is not aligned to requested sector size."
 msgstr "Gerätegröße ist nicht an verlangter Sektorgröße ausgerichtet."
 
-#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
 msgid "Can't format LUKS without device."
 msgstr "Ohne Gerät kann LUKS nicht formatiert werden."
 
-#: lib/setup.c:1707 lib/setup.c:1959
+#: lib/setup.c:1717 lib/setup.c:1969
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Gezontes Gerät »%s« kann nicht für einen LUKS-Kopfbereich verwendet werden."
 
-#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Die angeforderte Datenausrichtung ist nicht mit dem Datenoffset kompatibel."
 
-#: lib/setup.c:1754 lib/setup.c:1984
+#: lib/setup.c:1764 lib/setup.c:1994
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "Warnung: DAX-Gerät kann Daten beschädigen, da es nicht garantiert, dass Sektoren atomar aktualisiert werden.\n"
 
-#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
-#: lib/setup.c:2567 lib/setup.c:2899
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Fehler beim Auslöschen des Headers auf Gerät »%s«."
 
-#: lib/setup.c:1805 lib/setup.c:2164
+#: lib/setup.c:1815 lib/setup.c:2174
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Gerät %s ist zu klein für die Aktivierung, es ist kein Platz mehr für Daten vorhanden.\n"
 
-#: lib/setup.c:1846
+#: lib/setup.c:1856
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Laufwerksschlüssel ist zu klein für die Verschlüsselung mit Integritätserweiterungen."
 
-#: lib/setup.c:1850
+#: lib/setup.c:1860
 msgid "Integrity key size is too small."
 msgstr "Integritäts-Schlüsselgröße ist zu klein."
 
-#: lib/setup.c:1859
+#: lib/setup.c:1869
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Verschlüsselung »%s-%s« (Schlüsselgröße %zd Bits) ist nicht verfügbar."
 
-#: lib/setup.c:1900
+#: lib/setup.c:1910
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "WARNUNG: Die Geräteaktivierung wird fehlschlagen, dm-crypt fehlt die Unterstützung für die angeforderte Verschlüsselungsgröße.\n"
 
-#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
 #: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Gerät »%s« ist zu klein."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Gerät »%s« kann nicht formatiert werden, da es gerade benutzt wird."
 
-#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Gerät »%s« kann nicht formatiert werden, Zugriff verweigert."
 
-#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Fehler beim Formatieren der Integrität auf Gerät »%s«."
 
-#: lib/setup.c:2151 lib/setup.c:2629
+#: lib/setup.c:2161 lib/setup.c:2639
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Gerät »%s« kann nicht formatiert werden."
 
-#: lib/setup.c:2194
+#: lib/setup.c:2204
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Fehler beim Ermitteln der OPAL-Ausrichtungs-Parameter."
 
-#: lib/setup.c:2206
+#: lib/setup.c:2216
 msgid "Bogus OPAL logical block size."
 msgstr "Falsche Größe für logischen OPAL-Block."
 
-#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Falsche Größe für logischen OPAL-Block, weicht von der Geräte-Blockgröße ab."
 
-#: lib/setup.c:2217
+#: lib/setup.c:2227
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Der gewünschte Datenoffset ist nicht mit der OPAL-Blockgröße kompatibel."
 
-#: lib/setup.c:2224
+#: lib/setup.c:2234
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Die gewünschte Datenausrichtung ist nicht mit der OPAL-Ausrichtung kompatibel."
 
-#: lib/setup.c:2244
+#: lib/setup.c:2254
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Der Datenoffset erfüllt die OPAL-Ausrichtungsbedingungen nicht."
 
-#: lib/setup.c:2257
+#: lib/setup.c:2267
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Die gewünschte Datenausrichtung erfüllt die Anforderungen an die Ausrichtung des Sperrbereichs nicht."
 
-#: lib/setup.c:2471
+#: lib/setup.c:2481
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Gerätegröße wird um %<PRIu64> Sektoren angepasst, um zur Granularität der OPAL-Ausrichtung zu passen."
 
-#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Fehler beim Zugriff auf die OPAL-Sperre für das Gerät »%s«."
 
-#: lib/setup.c:2541
+#: lib/setup.c:2551
 msgid "Incorrect OPAL Admin key."
 msgstr "Falscher OPAL-Admin-Schlüssel."
 
-#: lib/setup.c:2543
+#: lib/setup.c:2553
 msgid "Cannot setup OPAL segment."
 msgstr "Fehler beim Einrichten des OPAL-Segments."
 
-#: lib/setup.c:2625
+#: lib/setup.c:2635
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Gerät »%s« kann nicht formatiert werden, OPAL-Gerät scheint jetzt komplett schreibgeschützt zu sein."
 
-#: lib/setup.c:2627
+#: lib/setup.c:2637
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Das könnte ein Fehler in der Firmware sein. Lassen Sie »OPAL PSID reset und reconnect« zur Wiederherstellung."
 
-#: lib/setup.c:2647
+#: lib/setup.c:2657
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Fehler beim Zurücksetzen des Sperrbereichs %d auf Gerät »%s«."
 
-#: lib/setup.c:2667
+#: lib/setup.c:2677
 msgid "Can't format LOOPAES without device."
 msgstr "Ohne Gerät kann LOOPAES nicht formatiert werden."
 
-#: lib/setup.c:2712
+#: lib/setup.c:2722
 msgid "Can't format VERITY without device."
 msgstr "Ohne Gerät kann VERITY nicht formatiert werden."
 
-#: lib/setup.c:2723 lib/verity/verity.c:88
+#: lib/setup.c:2733 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Nicht unterstützte VERITY-Hash-Art %d."
 
-#: lib/setup.c:2729 lib/verity/verity.c:96
+#: lib/setup.c:2739 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Nicht unterstützte VERITY-Blockgröße."
 
-#: lib/setup.c:2734 lib/verity/verity.c:61
+#: lib/setup.c:2744 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Nicht unterstützter VERITY-Hash-Offset."
 
-#: lib/setup.c:2739
+#: lib/setup.c:2749
 msgid "Unsupported VERITY FEC offset."
 msgstr "Nicht unterstützter VERITY-FEC-Offset."
 
-#: lib/setup.c:2763
+#: lib/setup.c:2773
 msgid "Data area overlaps with hash area."
 msgstr "Datenbereich und Hashbereich überlappen sich."
 
-#: lib/setup.c:2788
+#: lib/setup.c:2798
 msgid "Hash area overlaps with FEC area."
 msgstr "Hashbereich und FEC-Bereich überlappen sich."
 
-#: lib/setup.c:2795
+#: lib/setup.c:2805
 msgid "Data area overlaps with FEC area."
 msgstr "Datenbereich und FEC-Bereich überlappen sich."
 
-#: lib/setup.c:2887
+#: lib/setup.c:2897
 msgid "Integrity key size mismatch."
 msgstr "Größen der Integritätsschlüssel passen nicht zusammen."
 
-#: lib/setup.c:2938
+#: lib/setup.c:2948
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "WARNUNG: Angeforderte Taggröße mit %d Bytes unterscheidet sich von der Ausgabe der Größe %s (%d Bytes).\n"
 
-#: lib/setup.c:3051 lib/setup.c:3153
+#: lib/setup.c:3061 lib/setup.c:3163
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Unbekannte oder nicht unterstützte Art des Verschlüsselungsgeräts »%s« verlangt."
 
-#: lib/setup.c:3067
+#: lib/setup.c:3077
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Gerät »%s« bietet keine Datenfelder für Inline-Integrität."
 
-#: lib/setup.c:3073
+#: lib/setup.c:3083
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Die Inline-Tag-Größe %<PRIu32> [Bytes] ist größer als die %<PRIu32> vom Gerät %s bereitgestellte."
 
-#: lib/setup.c:3088
+#: lib/setup.c:3098
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Der Sektor muss mit dem Hardware-Sektor des Geräts übereinstimmen (%zu Bytes)."
 
-#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Nicht unterstützte Parameter für Gerät %s."
 
-#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
 #: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Parameter für Gerät %s sind durcheinander."
 
-#: lib/setup.c:3650
+#: lib/setup.c:3660
 msgid "Crypt devices mismatch."
 msgstr "Verschlüsselungsgeräte passen nicht zusammen."
 
-#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
 #: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Gerät »%s« konnte nicht neugeladen werden."
 
-#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
 #: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Gerät »%s« konnte nicht stillgelegt werden."
 
-#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
 #: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
 #: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Gerät »%s« konnte nicht fortgesetzt werden."
 
-#: lib/setup.c:3720
+#: lib/setup.c:3730
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Schwerwiegender Fehler beim Neuladen von Gerät »%s« (über Gerät »%s«)."
 
-#: lib/setup.c:3723 lib/setup.c:3725
+#: lib/setup.c:3733 lib/setup.c:3735
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Gerät »%s« konnte nicht auf dm-error umgeschaltet werden."
 
-#: lib/setup.c:3768
+#: lib/setup.c:3778
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Größe des LUKS2-Geräts kann nicht geändert werden, da sie statisch ist."
 
-#: lib/setup.c:3773
+#: lib/setup.c:3783
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Die Größenänderung eines LUKS2-Geräts mit Integritätsschutz wird nicht unterstützt."
 
-#: lib/setup.c:3819
+#: lib/setup.c:3829
 msgid "Cannot resize loop device."
 msgstr "Fehler beim Ändern der Größe des Loopback-Geräts."
 
-#: lib/setup.c:3863
+#: lib/setup.c:3873
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "WARNUNG: Die maximale Größe ist bereits eingestellt oder der Kernel unterstützt die Größenänderung nicht.\n"
 
-#: lib/setup.c:3929
+#: lib/setup.c:3939
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Fehler bei Größenänderung, der Kernel unterstützt sie nicht."
 
-#: lib/setup.c:3961
+#: lib/setup.c:3971
 msgid "Do you really want to change UUID of device?"
 msgstr "Wollen Sie wirklich die UUID des Geräts ändern?"
 
-#: lib/setup.c:4053
+#: lib/setup.c:4061 lib/setup.c:4069
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Header-Backupdatei enthält keinen kompatiblen LUKS-Header."
 
-#: lib/setup.c:4160
+#: lib/setup.c:4176
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Laufwerk »%s« ist nicht aktiv."
 
-#: lib/setup.c:4215
+#: lib/setup.c:4231
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Laufwerk »%s« ist bereits im Ruhezustand."
 
-#: lib/setup.c:4241
+#: lib/setup.c:4257
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Das Gerät »%s« unterstützt keinen Ruhezustand."
 
-#: lib/setup.c:4243 lib/setup.c:4251
+#: lib/setup.c:4259 lib/setup.c:4267
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Das Gerät »%s« kann nicht in den Ruhezustand versetzt werden."
 
-#: lib/setup.c:4266
+#: lib/setup.c:4282
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Gerät »%s« ist im Ruhezustand, aber das Hardware-OPAL-Gerät kann nicht gesperrt werden."
 
-#: lib/setup.c:4297 lib/setup.c:4491
+#: lib/setup.c:4313 lib/setup.c:4507
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Das Gerät »%s« kann nicht aus dem Ruhezustand aufgeweckt werden."
 
-#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Fehler beim Aufwecken von Gerät »%s« aus dem Ruhezustand."
 
-#: lib/setup.c:4335
+#: lib/setup.c:4351
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Fehler beim Ablösen des Laufwerkschlüssels vom benutzerspezifischen Schlüsselbund."
 
-#: lib/setup.c:4457 lib/setup.c:5637
+#: lib/setup.c:4473 lib/setup.c:5653
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Fehler beim Verknüpfen des Laufwerkschlüssels im benutzerspezifischen Schlüsselbund."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2722
+#: lib/setup.c:4572 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Laufwerk »%s« ist nicht im Ruhezustand."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
 #: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
-#: src/utils_reencrypt.c:1969
+#: src/utils_reencrypt.c:1995
 msgid "Volume key does not match the volume."
 msgstr "Der Laufwerksschlüssel passt nicht zum Laufwerk."
 
-#: lib/setup.c:4821
+#: lib/setup.c:4837
 msgid "Failed to swap new key slot."
 msgstr "Neues Schlüsselfach konnte nicht ausgewechselt werden."
 
-#: lib/setup.c:4919
+#: lib/setup.c:4935
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Schlüsselfach %d ist ungültig."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
 #: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Schlüsselfach %d ist nicht aktiv."
 
-#: lib/setup.c:4944
+#: lib/setup.c:4960
 msgid "Device header overlaps with data area."
 msgstr "Geräteheader und Datenbereich überlappen sich."
 
-#: lib/setup.c:5165
+#: lib/setup.c:5181
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Wiederverschlüsselung läuft bereits. Das Gerät kann nicht aktiviert werden."
 
-#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
 #: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Fehler beim Zugriff auf die Sperre zur Wiederverschlüsselung."
 
-#: lib/setup.c:5189
+#: lib/setup.c:5205
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Fehler beim Wiederherstellen der LUKS2-Wiederverschlüsselung mittels Laufwerksschlüssel(n)."
 
-#: lib/setup.c:5325
+#: lib/setup.c:5341
 #, c-format
 msgid "Device %s already exists."
 msgstr "Das Gerät »%s« existiert bereits."
 
-#: lib/setup.c:5332
+#: lib/setup.c:5348
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Gerät »%s« kann nicht verwendet werden, da es gerade benutzt wird oder der Name ungültig ist."
 
-#: lib/setup.c:5344
+#: lib/setup.c:5360
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Die Laufwerksschlüssel für die Wiederverschlüsselung passen nicht zum Laufwerk."
 
-#: lib/setup.c:5361
+#: lib/setup.c:5377
 msgid "Incorrect volume key specified for plain device."
 msgstr "Falscher Laufwerksschlüssel für Plain-Gerät angegeben."
 
-#: lib/setup.c:5387 lib/setup.c:5448
+#: lib/setup.c:5403 lib/setup.c:5464
 msgid "Device type is not properly initialized."
 msgstr "Geräteart ist nicht richtig initialisiert."
 
-#: lib/setup.c:5486
+#: lib/setup.c:5502
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Der Kernel-Schlüsselbund wird vom Kernel nicht unterstützt."
 
-#: lib/setup.c:5490
+#: lib/setup.c:5506
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Der Kernel-Schlüsselbund fehlt. Wird benötigt, um die Signatur zum Kernel zu übergeben."
 
-#: lib/setup.c:5545
+#: lib/setup.c:5561
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Schlüsselringschlüssel »%s« kann nicht verwendet werden."
 
-#: lib/setup.c:5758
+#: lib/setup.c:5774
 msgid "Incorrect root hash specified for verity device."
 msgstr "Falscher Root-Hash-Schlüssel für VERITY-Gerät angegeben."
 
-#: lib/setup.c:5799 lib/setup.c:5824
+#: lib/setup.c:5815 lib/setup.c:5840
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL unterstützt verzögertes Deaktivieren nicht."
 
-#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Gerät »%s« wird gerade benutzt."
 
-#: lib/setup.c:5832
+#: lib/setup.c:5848
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Fehler beim Abbrechen des verzögerten Löschens von Gerät »%s«."
 
-#: lib/setup.c:5854
+#: lib/setup.c:5870
 #, c-format
 msgid "Invalid device %s."
 msgstr "Ungültiges Gerät »%s«."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6017
 msgid "Volume key buffer too small."
 msgstr "Laufwerks-Schlüsselpuffer zu klein."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6028
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für LUKS2-Gerät."
 
-#: lib/setup.c:6021
+#: lib/setup.c:6037
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für LUKS1-Gerät."
 
-#: lib/setup.c:6035
+#: lib/setup.c:6051
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für Plain-Gerät."
 
-#: lib/setup.c:6043
+#: lib/setup.c:6059
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Root-Hash für Verity-Gerät kann nicht ermittelt werden."
 
-#: lib/setup.c:6052
+#: lib/setup.c:6068
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für BITLK-Gerät."
 
-#: lib/setup.c:6057
+#: lib/setup.c:6073
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Fehler beim Ermitteln des Laufwerksschlüssels für FVAULT2-Gerät."
 
-#: lib/setup.c:6059
+#: lib/setup.c:6075
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Diese Operation wird für Kryptogerät »%s« nicht unterstützt."
 
-#: lib/setup.c:6244 lib/setup.c:6255
+#: lib/setup.c:6260 lib/setup.c:6271
 msgid "Dump operation is not supported for this device type."
 msgstr "Die Dump-Operation wird für diese Geräteart nicht unterstützt."
 
-#: lib/setup.c:6635
+#: lib/setup.c:6651
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Datenoffset ist kein Vielfaches von %u Bytes."
 
-#: lib/setup.c:6943
+#: lib/setup.c:6959
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Gerät »%s« kann nicht konvertiert werden, da es gerade benutzt wird."
 
-#: lib/setup.c:7251 lib/setup.c:7406
+#: lib/setup.c:7267 lib/setup.c:7422
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Schlüsselfach %u konnte nicht dem Laufwerksschlüssel zugeordnet werden."
 
-#: lib/setup.c:7275
+#: lib/setup.c:7291
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Fehler beim Initialisieren der LUKS2-Schlüsselfach-Parameter."
 
-#: lib/setup.c:7281
+#: lib/setup.c:7297
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Schlüsselfach %d konnte nicht dem Digest zugeordnet werden."
 
-#: lib/setup.c:7523
+#: lib/setup.c:7539
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Schlüsselfach kann nicht hinzugefügt werden, da alle Fächer deaktiviert sind und kein Laufwerksschlüssel angegeben wurde."
 
-#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Fehler beim Laden des Schlüssels im Kernel-Schlüsselbund."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7823
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Schlüsselbund mit der Beschreibung »%s« nicht gefunden."
 
-#: lib/setup.c:7872
+#: lib/setup.c:7888
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Globale Speicherzugriffsserialisierungssperre konnte nicht angefordert werden."
 
@@ -787,7 +787,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Die gewünschte Menge an Daten kann nicht eingelesen werden."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Gerät »%s« existiert nicht oder Zugriff verweigert."
@@ -903,16 +903,16 @@ msgstr "Die Anzahl der verlangten parallelen Threads für PBKDF darf nicht 0 sei
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "Im FIPS-Modus wird ausschließlich PBKDF2 unterstützt."
 
-#: lib/utils_benchmark.c:171
+#: lib/utils_benchmark.c:175
 msgid "PBKDF benchmark disabled but iterations not set."
 msgstr "PBKDF-Benchmark deaktiviert, aber Anzahl der Iterationen nicht angegeben."
 
-#: lib/utils_benchmark.c:190
+#: lib/utils_benchmark.c:194
 #, c-format
 msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr "Inkompatible PBKDF2-Optionen (mit Hash-Algorithmus »%s«)."
 
-#: lib/utils_benchmark.c:210
+#: lib/utils_benchmark.c:214
 msgid "Not compatible PBKDF options."
 msgstr "Inkompatible PBKDF2-Optionen."
 
@@ -962,9 +962,9 @@ msgstr "Schlüsselgröße im XTS-Modus muss entweder 256 oder 512 Bits sein."
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Verschlüsselungsverfahren sollte im Format [Verfahren]-[Modus]-[IV] sein."
 
-#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
-#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "Fehler beim Schreiben auf Gerät »%s«, Zugriff verweigert."
@@ -982,13 +982,13 @@ msgstr "Fehler beim Zugriff auf das temporäre Schlüsselspeichergerät."
 msgid "IO error while encrypting keyslot."
 msgstr "E/A-Fehler beim Verschlüsseln des Schlüsselfachs."
 
-#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
@@ -1003,61 +1003,61 @@ msgstr "E/A-Fehler beim Entschlüsseln des Schlüsselfachs."
 msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr "Gerät »%s« ist zu klein. (LUKS1 benötigt mindestens %<PRIu64> Bytes.)"
 
-#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
-#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
-#: lib/luks1/keymanage.c:181
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
 #, c-format
 msgid "LUKS keyslot %u is invalid."
 msgstr "LUKS-Schlüsselfach %u ist ungültig."
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "Angeforderte Header-Backupdatei »%s« existiert bereits."
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "Fehler beim Anlegen der Header-Backupdatei »%s«."
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "Fehler beim Speichern der Header-Backupdatei »%s«."
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
 msgid "Backup file does not contain valid LUKS header."
 msgstr "Backupdatei enthält keinen gültigen LUKS-Header."
 
-#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1450
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "Fehler beim Öffnen der Header-Backupdatei »%s«."
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "Fehler beim Einlesen der Header-Backupdatei »%s«."
 
-#: lib/luks1/keymanage.c:326
+#: lib/luks1/keymanage.c:331
 msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr "Unterschiedlicher Offset oder Schlüsselgröße zwischen Gerät und Backup. Wiederherstellung fehlgeschlagen."
 
-#: lib/luks1/keymanage.c:334
+#: lib/luks1/keymanage.c:339
 #, c-format
 msgid "Device %s %s%s"
 msgstr "Gerät »%s« %s%s"
 
-#: lib/luks1/keymanage.c:335
+#: lib/luks1/keymanage.c:340
 msgid "does not contain LUKS header. Replacing header can destroy data on that device."
 msgstr "enthält keinen LUKS-Header. Das Ersetzen des Headers kann Daten auf dem Gerät zerstören."
 
-#: lib/luks1/keymanage.c:336
+#: lib/luks1/keymanage.c:341
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "enthält bereits einen LUKS-Header. Das Ersetzen des Headers wird bestehende Schlüsselfächer zerstören."
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1065,132 +1065,132 @@ msgstr ""
 "\n"
 "WARNUNG: Der Header des echten Geräts hat eine andere UUID als das Backup!"
 
-#: lib/luks1/keymanage.c:385
+#: lib/luks1/keymanage.c:390
 msgid "Non standard key size, manual repair required."
 msgstr "Ungewöhnliche Schlüsselgröße, manuelles Reparieren erforderlich."
 
-#: lib/luks1/keymanage.c:395
+#: lib/luks1/keymanage.c:400
 msgid "Non standard keyslots alignment, manual repair required."
 msgstr "Ungewöhnliche Ausrichtung der Schlüsselfächer, manuelles Reparieren erforderlich."
 
-#: lib/luks1/keymanage.c:404
+#: lib/luks1/keymanage.c:409
 #, c-format
 msgid "Cipher mode repaired (%s -> %s)."
 msgstr "Verschlüsselungsmodus repariert (%s -> %s)."
 
-#: lib/luks1/keymanage.c:415
+#: lib/luks1/keymanage.c:420
 #, c-format
 msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Chiffre-Hash in Kleinbuchstaben umgewandelt (%s)."
 
-#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:756
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Verlangter LUKS-Hash »%s« wird nicht unterstützt."
 
-#: lib/luks1/keymanage.c:431
+#: lib/luks1/keymanage.c:436
 msgid "Repairing keyslots."
 msgstr "Schlüsselfächer werden repariert."
 
-#: lib/luks1/keymanage.c:450
+#: lib/luks1/keymanage.c:455
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr "Schlüsselfach %i: Offset repariert (%u -> %u)."
 
-#: lib/luks1/keymanage.c:458
+#: lib/luks1/keymanage.c:463
 #, c-format
 msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr "Schlüsselfach %i: Streifen repariert (%u -> %u)."
 
 # XXX
-#: lib/luks1/keymanage.c:467
+#: lib/luks1/keymanage.c:472
 #, c-format
 msgid "Keyslot %i: bogus partition signature."
 msgstr "Schlüsselfach %i: schwindlerische Partitions-Signatur."
 
-#: lib/luks1/keymanage.c:472
+#: lib/luks1/keymanage.c:477
 #, c-format
 msgid "Keyslot %i: salt wiped."
 msgstr "Schlüsselfach %i: Salt gelöscht."
 
-#: lib/luks1/keymanage.c:489
+#: lib/luks1/keymanage.c:494
 msgid "Writing LUKS header to disk."
 msgstr "LUKS-Header wird auf den Datenträger geschrieben."
 
-#: lib/luks1/keymanage.c:494
+#: lib/luks1/keymanage.c:499
 msgid "Repair failed."
 msgstr "Fehler beim Reparieren."
 
-#: lib/luks1/keymanage.c:549
+#: lib/luks1/keymanage.c:554
 #, c-format
 msgid "LUKS cipher mode %s is invalid."
 msgstr "LUKS-Verschlüsselungsmodus %s ist ungültig."
 
-#: lib/luks1/keymanage.c:554
+#: lib/luks1/keymanage.c:559
 #, c-format
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS-Hash %s ist ungültig."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Keine bekannten Probleme im LUKS-Header erkannt."
 
-#: lib/luks1/keymanage.c:689
+#: lib/luks1/keymanage.c:690
 #, c-format
 msgid "Error during update of LUKS header on device %s."
 msgstr "Fehler beim Aktualisieren des LUKS-Headers auf Gerät »%s«."
 
-#: lib/luks1/keymanage.c:697
+#: lib/luks1/keymanage.c:698
 #, c-format
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Fehler beim Neueinlesen des LUKS-Headers nach dem Aktualisieren auf Gerät »%s«."
 
-#: lib/luks1/keymanage.c:750
+#: lib/luks1/keymanage.c:751
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Daten-Offset für LUKS-Header muss entweder 0 sein oder mehr als die Headergröße."
 
-#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
-#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Falsches LUKS-UUID-Format angegeben."
 
-#: lib/luks1/keymanage.c:783
+#: lib/luks1/keymanage.c:784
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "LUKS-Header kann nicht angelegt werden: Fehler beim Einlesen des zufälligen Salts."
 
 # XXX
-#: lib/luks1/keymanage.c:811
+#: lib/luks1/keymanage.c:812
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "LUKS-Header kann nicht angelegt werden: Fehler beim Hashen des Headers (mit Hash-Algorithmus »%s«)."
 
-#: lib/luks1/keymanage.c:856
+#: lib/luks1/keymanage.c:857
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Schlüsselfach %d aktiv, löschen Sie es erst."
 
-#: lib/luks1/keymanage.c:862
+#: lib/luks1/keymanage.c:863
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Material für Schlüsselfach %d enthält zu wenige Streifen. Manipulation des Headers?"
 
-#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Überlauf im Iterationswert von PBKDF2."
 
-#: lib/luks1/keymanage.c:1022
+#: lib/luks1/keymanage.c:1023
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Schlüsselfach kann nicht geöffnet werden (mit Hash-Algorithmus »%s«)."
 
-#: lib/luks1/keymanage.c:1118
+#: lib/luks1/keymanage.c:1119
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Schlüsselfach %d ist ungültig, bitte wählen Sie ein Schlüsselfach zwischen 0 und %d."
 
-#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Gerät »%s« kann nicht ausgelöscht werden."
@@ -1368,33 +1368,33 @@ msgstr "Diese Operation wird nicht unterstützt."
 msgid "Unexpected key data size."
 msgstr "Unerwartete Größe des Datenschlüssels."
 
-#: lib/bitlk/bitlk.c:1442
+#: lib/bitlk/bitlk.c:1448
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Dieses BITLK-Gerät ist in einem nicht unterstützten Zustand und kann daher nicht aktiviert werden."
 
-#: lib/bitlk/bitlk.c:1447
+#: lib/bitlk/bitlk.c:1453
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "BITLK-Geräte der Art »%s« können nicht aktiviert werden."
 
-#: lib/bitlk/bitlk.c:1486
+#: lib/bitlk/bitlk.c:1492
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "WARNUNG: BitLocker-Datenträgergröße %<PRIu64> stimmt nicht mit der zugrunde liegenden Gerätegröße %<PRIu64> überein"
 
-#: lib/bitlk/bitlk.c:1613
+#: lib/bitlk/bitlk.c:1634
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Gerät kann nicht aktiviert werden, dem Kernelmodul dm-crypt fehlt die Unterstützung für BITLK-IV."
 
-#: lib/bitlk/bitlk.c:1617
+#: lib/bitlk/bitlk.c:1638
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Gerät kann nicht aktiviert werden, da dem Kernelmodul dm-crypt die Unterstützung für BITLK-Elephant-Verschleierer fehlt."
 
-#: lib/bitlk/bitlk.c:1621
+#: lib/bitlk/bitlk.c:1642
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Gerät kann nicht aktiviert werden, dem Kernelmodul dm-crypt fehlt die Unterstützung für große Sektoren."
 
-#: lib/bitlk/bitlk.c:1625
+#: lib/bitlk/bitlk.c:1646
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Gerät kann nicht aktiviert werden, das Kernelmodul dm-crypt existiert nicht."
 
@@ -1551,24 +1551,24 @@ msgstr "Fehler beim Ermitteln der Größe von Gerät »%s«."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Inkompatible Metadaten des Kernelmoduls dm-integrity (Version %u) auf %s entdeckt."
 
-#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Kernel unterstützt dm-integrity-Zuordnung nicht."
 
-#: lib/integrity/integrity.c:314
+#: lib/integrity/integrity.c:315
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Kernel unterstützt feste Ausrichtung der Metadaten für dm-integrity nicht."
 
-#: lib/integrity/integrity.c:323
+#: lib/integrity/integrity.c:324
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Der Kernel weigert sich, die unsichere Neuberechnungs-Option zu aktivieren. Um dies zu übersteuern, können Sie die veralteten Aktivierungsoptionen nutzen."
 
-#: lib/integrity/integrity.c:329
+#: lib/integrity/integrity.c:330
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Kernel unterstützt dm-integrity-Inlinemodus nicht."
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1510
+#: lib/luks2/luks2_json_metadata.c:1502
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "Fehler beim exklusiven Schreibzugriff auf Gerät »%s«."
@@ -1590,22 +1590,22 @@ msgstr ""
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "WARNING: Der Schlüsselfach-Bereich (%<PRIu64> Bytes) ist sehr klein, die LUKS2-Schlüsselfachanzahl ist sehr begrenzt.\n"
 
-#: lib/luks2/luks2_json_format.c:418
+#: lib/luks2/luks2_json_format.c:427
 msgid "Requested data offset is too small."
 msgstr "Verlangter Daten-Offset ist zu klein."
 
-#: lib/luks2/luks2_json_format.c:459
+#: lib/luks2/luks2_json_format.c:468
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "Warnung: Größe der LUKS2-Metadaten wurde auf %<PRIu64> geändert.\n"
 
-#: lib/luks2/luks2_json_format.c:463
+#: lib/luks2/luks2_json_format.c:472
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "Warnung: Größe des LUKS2-Schlüsselfachbereichs wurde auf %<PRIu64> Bytes geändert.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Fehler beim Zugriff auf die Lesesperre für das Gerät »%s«."
@@ -1614,33 +1614,33 @@ msgstr "Fehler beim Zugriff auf die Lesesperre für das Gerät »%s«."
 msgid "Label is too long."
 msgstr "Etikett ist zu lang."
 
-#: lib/luks2/luks2_json_metadata.c:1435
+#: lib/luks2/luks2_json_metadata.c:1427
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "Verbotene LUKS2-Anforderungen in Backup »%s« entdeckt."
 
-#: lib/luks2/luks2_json_metadata.c:1474
+#: lib/luks2/luks2_json_metadata.c:1466
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "Unterschiedliche Datenoffsets auf Gerät und Backup. Wiederherstellung fehlgeschlagen."
 
-#: lib/luks2/luks2_json_metadata.c:1480
+#: lib/luks2/luks2_json_metadata.c:1472
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "Unterschiedliche Größe der Binärheader mit Schlüsselfach-Bereichen zwischen Gerät und Backup. Wiederherstellung fehlgeschlagen."
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1479
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "Gerät »%s« %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "enthält keinen LUKS2-Header. Das Ersetzen des Headers kann Daten auf dem Gerät zerstören."
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1481
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "enthält bereits einen LUKS2-Header. Das Ersetzen des Headers wird bestehende Schlüsselfächer zerstören."
 
-#: lib/luks2/luks2_json_metadata.c:1491
+#: lib/luks2/luks2_json_metadata.c:1483
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1650,7 +1650,7 @@ msgstr ""
 "WARNUNG: Unbekannte LUKS2-Anforderungen im echten Geräteheader entdeckt!\n"
 "Das Ersetzen des Headers mit dem Backup kann zu Datenverlust auf dem Gerät führen!"
 
-#: lib/luks2/luks2_json_metadata.c:1493
+#: lib/luks2/luks2_json_metadata.c:1485
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1660,84 +1660,84 @@ msgstr ""
 "WARNUNG: Unvollendete Offline-Wiederverschlüsselung auf dem Gerät entdeckt!\n"
 "Das Ersetzen des Headers mit dem Backup kann zu Datenverlust auf dem Gerät führen."
 
-#: lib/luks2/luks2_json_metadata.c:1591
+#: lib/luks2/luks2_json_metadata.c:1583
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "Unbekannter Schalter »%s« wird ignoriert."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Fehlender Schlüssel für dm-crypt-Segment %u"
 
-#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Fehler beim Festlegen des »dm-crypt«-Segments."
 
-#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Fehler beim Festlegen des »dm-linear«-Segments."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Kein bekanntes Verschlüsselungsmuster in LUKS2-Kopfbereich entdeckt."
 
-#: lib/luks2/luks2_json_metadata.c:2709
+#: lib/luks2/luks2_json_metadata.c:2701
 msgid "OPAL device must have static device size."
 msgstr "OPAL-Gerät muss statische Gerätegröße haben."
 
-#: lib/luks2/luks2_json_metadata.c:2729
+#: lib/luks2/luks2_json_metadata.c:2721
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Verschlüsseltes OPAL-Gerät mit Integrität muss kleiner als der Sperrbereich sein."
 
-#: lib/luks2/luks2_json_metadata.c:2734
+#: lib/luks2/luks2_json_metadata.c:2726
 msgid "OPAL device must have same size as locking range."
 msgstr "OPAL-Gerät muss dieselbe Größe wie der Sperrbereich haben."
 
-#: lib/luks2/luks2_json_metadata.c:2754
+#: lib/luks2/luks2_json_metadata.c:2746
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Das OPAL-Gerät »%s« ist bereits entsperrt.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2793
+#: lib/luks2/luks2_json_metadata.c:2785
 msgid "Unsupported device integrity configuration."
 msgstr "Nicht unterstützte Konfiguration für Geräteintegrität."
 
-#: lib/luks2/luks2_json_metadata.c:2809
+#: lib/luks2/luks2_json_metadata.c:2801
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Das zugrundeliegende dm-integrity-Gerät hat unerwartete Datensektoren bereitgestellt."
 
-#: lib/luks2/luks2_json_metadata.c:2911
+#: lib/luks2/luks2_json_metadata.c:2903
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Wiederverschlüsselung läuft gerade. Das Gerät kann nicht deaktiviert werden."
 
-#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Das stillgelegte Gerät »%s« mit dm-error-Ziel konnte nicht in den Fehlerzustand gesetzt werden."
 
-#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Gerät »%s« wurde deaktiviert, aber das Hardware-OPAL-Gerät kann nicht gesperrt werden."
 
-#: lib/luks2/luks2_json_metadata.c:3045
+#: lib/luks2/luks2_json_metadata.c:3037
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Unerfüllte LUKS2-Anforderungen entdeckt."
 
-#: lib/luks2/luks2_json_metadata.c:3053
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Diese Operation kann nicht mit einem Gerät durchgeführt werden, das für Altlasten-Wiederverschlüsselung markiert ist. Wird abgebrochen."
 
-#: lib/luks2/luks2_json_metadata.c:3055
+#: lib/luks2/luks2_json_metadata.c:3047
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Diese Operation kann nicht mit einem Gerät durchgeführt werden, das für LUKS2-Wiederverschlüsselung markiert ist. Wird abgebrochen."
 
-#: lib/luks2/luks2_json_metadata.c:3057
+#: lib/luks2/luks2_json_metadata.c:3049
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Diese Operation kann nicht mit einem Gerät durchgeführt werden, das OPAL verwendet. Wird abgebrochen."
 
-#: lib/luks2/luks2_json_metadata.c:3059
+#: lib/luks2/luks2_json_metadata.c:3051
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Der Vorgang ist nicht kompatibel mit einem Gerät, das Inline-HW-Tags verwendet. Abbruch."
 
@@ -1804,60 +1804,60 @@ msgstr "Die Verschlüsselungsangabe %s-%s kann für LUKS2-Schlüsselfach nicht v
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Fehler beim Verschieben des Schlüsselfach-Bereichs. Nicht genug Speicherplatz."
 
-#: lib/luks2/luks2_luks1_convert.c:619
+#: lib/luks2/luks2_luks1_convert.c:627
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Fehler beim Konvertieren ins LUKS2-Format: ungültige Metadaten."
 
-#: lib/luks2/luks2_luks1_convert.c:636
+#: lib/luks2/luks2_luks1_convert.c:644
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Fehler beim Verschieben des Schlüsselfach-Bereichs. Bereich für die LUKS2-Schlüsselfächer ist zu klein."
 
-#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
 msgid "Unable to move keyslot area."
 msgstr "Fehler beim Verschieben des Schlüsselfach-Bereichs."
 
-#: lib/luks2/luks2_luks1_convert.c:757
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Standardgröße für Verschlüsselungssektoren ist nicht 512 Bytes."
 
-#: lib/luks2/luks2_luks1_convert.c:765
+#: lib/luks2/luks2_luks1_convert.c:773
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Schlüsselfach-Digeste sind nicht zu LUKS1 kompatibel."
 
-#: lib/luks2/luks2_luks1_convert.c:779
+#: lib/luks2/luks2_luks1_convert.c:787
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Gerät verwendet eingepacktes Verschlüsselungsverfahren %s."
 
-#: lib/luks2/luks2_luks1_convert.c:784
+#: lib/luks2/luks2_luks1_convert.c:792
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Gerät verwendet mehr Segmente."
 
-#: lib/luks2/luks2_luks1_convert.c:792
+#: lib/luks2/luks2_luks1_convert.c:800
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: LUKS2-Header enthält %u Token."
 
-#: lib/luks2/luks2_luks1_convert.c:798
+#: lib/luks2/luks2_luks1_convert.c:806
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Es gibt keine aktiven Schlüsselfächer."
 
-#: lib/luks2/luks2_luks1_convert.c:810
+#: lib/luks2/luks2_luks1_convert.c:818
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Schlüsselfach %u ist in ungültigem Zustand."
 
-#: lib/luks2/luks2_luks1_convert.c:815
+#: lib/luks2/luks2_luks1_convert.c:823
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Fehler beim Konvertieren ins LUKS1-Format: Schlüsselfach %u ist unbegrenzt."
 
-#: lib/luks2/luks2_luks1_convert.c:820
+#: lib/luks2/luks2_luks1_convert.c:828
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Fehler beim Konvertieren in LUKS1-Format: Schlüsselfach %u (über Maximalfach) ist noch aktiv."
 
-#: lib/luks2/luks2_luks1_convert.c:825
+#: lib/luks2/luks2_luks1_convert.c:833
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Fehler beim Konvertieren in LUKS1-Format: Schlüsselfach %u ist nicht zu LUKS1 kompatibel."
@@ -2142,7 +2142,7 @@ msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encry
 msgstr "Verschlüsselungsparameter für Schlüsselfach sind nicht mit LUKS2-Schlüsselfach-Verschlüsselung kompatibel."
 
 #: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
-#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Kein bekanntes Verschlüsselungsmuster entdeckt."
@@ -2170,7 +2170,7 @@ msgid "WARNING: The --keyfile-size option is being ignored, the read size is the
 msgstr "WARNUNG: Die Option --keyfile-size wird ignoriert, da die Lesegröße die gleiche ist wie die Verschlüsselungsschlüsselgröße ist.\n"
 
 #: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
-#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Fehler beim Blkid-Scan für %s."
@@ -2254,7 +2254,7 @@ msgstr "Gerät »%s« ist kein gültiges FVAULT2-Gerät."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Die Größe des Laufwerksschlüssels für FVAULT2 kann nicht ermittelt werden, bitte nutzen Sie die Option »--key-size«."
 
-#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Gerät »%s« ist noch aktiv und zum verzögerten Entfernen eingeplant.\n"
@@ -2449,7 +2449,7 @@ msgid "LUKS file container %s is too small for activation, there is no remaining
 msgstr "LUKS-Datei-Container %s ist zu klein für die Aktivierung, es ist kein Platz mehr für Daten vorhanden."
 
 #: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
-#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Die Größe des Laufwerksschlüssels erfordert Schlüsselfächer, bitte nutzen Sie dazu die Option »--key-size«."
 
@@ -2745,7 +2745,7 @@ msgstr "Die Option --volume-key-keyring kann nicht mit --hash oder --volume-key-
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Beide --volume-key-file-Optionen müssen mit den entsprechenden --key-size-Optionen paarweise auftreten."
 
-#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Die Optionen --cancel-deferred und --deferred können nicht kombiniert werden."
 
@@ -2813,21 +2813,21 @@ msgstr "Die Aktion erfordert ein bestimmtes Schlüsselfach. Verwenden Sie den Pa
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<Gerät> [--type <Art>] [<Name>]"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
 msgid "open device as <name>"
 msgstr "Gerät als <Name> öffnen"
 
 #: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
-#: src/integritysetup.c:562 src/integritysetup.c:564
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
 msgid "<name>"
 msgstr "<Name>"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
 msgid "close device (remove mapping)"
 msgstr "Gerät schließen (Zuordnung entfernen)"
 
-#: src/cryptsetup.c:3484 src/integritysetup.c:564
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
 msgid "resize active device"
 msgstr "Größe des aktiven Geräts ändern"
 
@@ -2955,7 +2955,7 @@ msgstr "<add|remove|import|export> <Gerät>"
 msgid "Manipulate LUKS2 tokens"
 msgstr "LUKS2-Token manipulieren"
 
-#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3056,7 +3056,7 @@ msgstr ""
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Standard-Schlüsselgröße mit XTS-Modus (zwei interne Schlüssel) wird verdoppelt.\n"
 
-#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: Benötigt %s als Argumente"
@@ -3107,31 +3107,31 @@ msgstr "Die Option --priority kann nur »ignore/normal/prefer« sein."
 msgid "Invalid maximal tries specification."
 msgstr "Ungültige Angabe der maximalen Versuche."
 
-#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
 msgid "Show this help message"
 msgstr "Diese Hilfe anzeigen"
 
-#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
 msgid "Display brief usage"
 msgstr "Kurze Aufrufsyntax anzeigen"
 
-#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
 msgid "Print package version"
 msgstr "Paketversion ausgeben"
 
-#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
 msgid "Help options:"
 msgstr "Hilfe-Optionen:"
 
-#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPTION...] <Aktion> <aktionsabhängig>"
 
-#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
 msgid "Argument <action> missing."
 msgstr "Argument <Aktion> fehlt."
 
-#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
 msgid "Unknown action."
 msgstr "Unbekannte Aktion."
 
@@ -3236,7 +3236,7 @@ msgstr "Der Befehl erfordert die Option <root_hash> oder --root-hash-file als Ar
 msgid "<data_device> <hash_device>"
 msgstr "<Datengerät> <Hash-Gerät>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:559
+#: src/veritysetup.c:485 src/integritysetup.c:562
 msgid "format device"
 msgstr "Gerät formatieren"
 
@@ -3252,7 +3252,7 @@ msgstr "Gerät verifizieren"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<Datengerät> <Name> <Hash-Gerät> [<Wurzel-Hash>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:562
+#: src/veritysetup.c:489 src/integritysetup.c:565
 msgid "show active device status"
 msgstr "Status der aktiven Geräte anzeigen"
 
@@ -3260,7 +3260,7 @@ msgstr "Status der aktiven Geräte anzeigen"
 msgid "<hash_device>"
 msgstr "<Hash-Gerät>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:563
+#: src/veritysetup.c:490 src/integritysetup.c:566
 msgid "show on-disk information"
 msgstr "Auf dem Datenträger gespeicherte Informationen anzeigen"
 
@@ -3324,20 +3324,20 @@ msgstr " (Inline-Hardware-Etiketten)"
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Das Setzen der Option »recalculate« wird nicht unterstützt, Sie können stattdessen »--wipe« erwägen."
 
-#: src/integritysetup.c:382 src/integritysetup.c:546
+#: src/integritysetup.c:382 src/integritysetup.c:549
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Gerät »%s« ist kein gültiges INTEGRITY-Gerät."
 
-#: src/integritysetup.c:559 src/integritysetup.c:563
+#: src/integritysetup.c:562 src/integritysetup.c:566
 msgid "<integrity_device>"
 msgstr "<Integritätsgerät>"
 
-#: src/integritysetup.c:560
+#: src/integritysetup.c:563
 msgid "<integrity_device> <name>"
 msgstr "<Integritätsgerät> <Name>"
 
-#: src/integritysetup.c:583
+#: src/integritysetup.c:586
 #, c-format
 msgid ""
 "\n"
@@ -3348,7 +3348,7 @@ msgstr ""
 "<Name> ist das Gerät, das unter »%s« angelegt werden soll\n"
 "<Integritätsgerät> ist das Gerät, das die Daten mit Integritätsangaben enthält\n"
 
-#: src/integritysetup.c:588
+#: src/integritysetup.c:591
 #, c-format
 msgid ""
 "\n"
@@ -3361,51 +3361,55 @@ msgstr ""
 "\tPrüfalgorithmus: %s\n"
 "\tMaximalgröße der Schlüsseldatei: %d kB\n"
 
-#: src/integritysetup.c:645
+#: src/integritysetup.c:648
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Ungültige Größe für --%s. Maximum ist %u Bytes."
 
-#: src/integritysetup.c:748
+#: src/integritysetup.c:751
 msgid "Both key file and key size options must be specified."
 msgstr "Sowohl die Schlüsseldatei als auch die Schlüsselgröße müssen angegeben werden."
 
-#: src/integritysetup.c:752
+#: src/integritysetup.c:755
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Sowohl die Schlüsseldatei als auch die Schlüsselgröße müssen für die Journalintegrität angegeben werden."
 
-#: src/integritysetup.c:755
+#: src/integritysetup.c:758
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Wenn ein Integritätsschlüssel für das Journal verwendet wird, muss auch der Integritätsalgorithmus angegeben werden."
 
-#: src/integritysetup.c:759
+#: src/integritysetup.c:762
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Sowohl der Verschlüsselungsschlüssel als auch die Schlüsselgröße müssen für die Journalverschlüsselung angegeben werden."
 
-#: src/integritysetup.c:762
+#: src/integritysetup.c:765
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Wenn ein Verschlüsselungsschlüssel für das Journal verwendet wird, muss auch der Verschlüsselungsalgorithmus angegeben werden."
 
-#: src/integritysetup.c:766
+#: src/integritysetup.c:769
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Die Modi Wiederherstellung und Bitmap schließen sich gegenseitig aus."
 
-#: src/integritysetup.c:773
+#: src/integritysetup.c:776
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Die Journal-Optionen können nicht im Bitmap-Modus verwendet werden."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:781
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Die Bitmapoptionen können nur im Bitmapmodus verwendet werden."
 
-#: src/integritysetup.c:784
+#: src/integritysetup.c:787
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Der Inline-Modus kann nicht mit den Optionen Journal oder Bitmap kombiniert werden."
 
-#: src/integritysetup.c:788
+#: src/integritysetup.c:791
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Der Inline-Modus kann nicht mit einem separaten Datengerät kombiniert werden."
 
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "Schlüsselbasierte Verwerfungen können nur mit schlüsselbasierten Algorithmen wie HMAC aktiviert werden."
+
 #: src/utils_tools.c:105
 msgid ""
 "\n"
@@ -3756,7 +3760,7 @@ msgstr "Das Gerät ist nicht der LUKS2-Entschlüsselung. Die Option »--encrypt
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Das Gerät befindet sich in der Wiederverschlüsselung mit Datashift-Resilienz. Die angeforderte Option --resilience kann nicht angewendet werden."
 
-#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Die Größe des Laufwerksschlüssels kann für LUKS ohne Schlüsselfächer nicht bestimmt werden, bitte verwenden Sie die Option --new-key-size."
 
@@ -3790,7 +3794,7 @@ msgstr ""
 "Angeforderte --sector-size %<PRIu32> ist nicht kompatibel mit dem %s-Superblock\n"
 "(Blockgröße: %<PRIu32>Bytes), der auf dem Gerät %s erkannt wurde."
 
-#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Verschlüsselung ohne separaten Kopfbereich (--header) ist nur möglich, wenn die Größe des Hauptgeräts reduziert wird (--reduce-device-size)."
 
@@ -3858,42 +3862,43 @@ msgstr "Fehler beim Initialisieren der Wiederverschlüsselung. Eine Sicherungsko
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "LUKS2-Entschlüsselung wird nur mit losgelöstem Headergerät unterstützt (mit Datenoffset auf 0 gesetzt)."
 
-#: src/utils_reencrypt.c:1490
-msgid "No token could unlock the device."
-msgstr "Kein Token konnte das Gerät entsperren."
-
-#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
 msgid "Not enough free keyslots for reencryption."
 msgstr "Nicht genügend freie Schlüsselfächer für Wiederverschlüsselung."
 
-#: src/utils_reencrypt.c:1562
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "Kein Token konnte das Gerät entsperren."
+
+#: src/utils_reencrypt.c:1588
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Schlüsseldatei oder Schlüsselbund kann nur mit --key-slot oder mit genau einem aktiven Schlüsselfach benutzt werden."
 
-#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Geben Sie die Passphrase für Schlüsselfach %d ein: "
 
-#: src/utils_reencrypt.c:1879
+#: src/utils_reencrypt.c:1905
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Der Verschlüsselungsalgorithmus wird auf %s geändert.\n"
 
-#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Verwenden Sie --force-no-keyslots, um Geräte mit aktiven Schlüsselfach neu zu verschlüsseln, indem Sie Laufwerksschlüssel direkt übergeben."
 
-#: src/utils_reencrypt.c:1996
+#: src/utils_reencrypt.c:2022
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Die Option --new-volume-key-file muss mit --new-key-size paarweise auftreten"
 
-#: src/utils_reencrypt.c:2038
+#: src/utils_reencrypt.c:2064
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Keine Datensegmentparameter geändert. Wiederverschlüsselung abgebrochen."
 
-#: src/utils_reencrypt.c:2075
+#: src/utils_reencrypt.c:2101
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3901,7 +3906,7 @@ msgstr ""
 "Die Zunahme der Größe des Verschlüsselungssektors auf einem Offline-Gerät wird nicht unterstützt.\n"
 "Aktivieren Sie das Gerät zuerst oder verwenden Sie die Option »--force-offline-reencrypt« (gefährlich!)."
 
-#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3910,58 +3915,58 @@ msgstr ""
 "\n"
 "Wiederverschlüsselung unterbrochen."
 
-#: src/utils_reencrypt.c:2122
+#: src/utils_reencrypt.c:2148
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "LUKS-Wiederverschlüsselung wird im erzwungenen Offline-Modus fortgesetzt.\n"
 
-#: src/utils_reencrypt.c:2145
+#: src/utils_reencrypt.c:2171
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Das Gerät %s enthält fehlerhafte LUKS-Metadaten. Vorgang wird abgebrochen."
 
-#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Gerät %s ist bereits ein LUKS-Gerät. Vorgang wird abgebrochen."
 
-#: src/utils_reencrypt.c:2189
+#: src/utils_reencrypt.c:2215
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Gerät %s befindet sich bereits in der LUKS-Wiederverschlüsselung. Vorgang wird abgebrochen."
 
-#: src/utils_reencrypt.c:2272
+#: src/utils_reencrypt.c:2298
 msgid "LUKS2 decryption requires --header option."
 msgstr "LUKS2-Entschlüsselung erfordert die Option »--header«."
 
-#: src/utils_reencrypt.c:2320
+#: src/utils_reencrypt.c:2346
 msgid "Command requires device as argument."
 msgstr "Dieser Befehl benötigt den Gerätenamen als Argument."
 
-#: src/utils_reencrypt.c:2333
+#: src/utils_reencrypt.c:2359
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Widersprüchliche Versionen. Gerät %s ist LUKS1."
 
-#: src/utils_reencrypt.c:2339
+#: src/utils_reencrypt.c:2365
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Widersprüchliche Versionen. Gerät %s befindet sich in der LUKS1-Wiederverschlüsselung."
 
-#: src/utils_reencrypt.c:2345
+#: src/utils_reencrypt.c:2371
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Widersprüchliche Versionen. Gerät %s ist LUKS2."
 
-#: src/utils_reencrypt.c:2351
+#: src/utils_reencrypt.c:2377
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Widersprüchliche Versionen. Gerät %s befindet sich in LUKS2-Wiederverschlüsselung."
 
-#: src/utils_reencrypt.c:2357
+#: src/utils_reencrypt.c:2383
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Die LUKS2-Wiederverschlüsselung wurde bereits begonnen. Die Operation wird abgebrochen."
 
-#: src/utils_reencrypt.c:2364
+#: src/utils_reencrypt.c:2390
 msgid "Device reencryption not in progress."
 msgstr "Derzeit läuft keine Wiederverschlüsselung."
 

From b0916732068890fa547819b8b92174a74b214c96 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20Marchal?= <fmarchal@perso.be>
Date: Fri, 4 Sep 2026 18:57:03 +0200
Subject: [PATCH 207/244] po: update fr.po (from translationproject.org)

---
 po/fr.po | 657 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 331 insertions(+), 326 deletions(-)

diff --git a/po/fr.po b/po/fr.po
index eb433ad46..0249ab1ec 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -7,10 +7,10 @@
 # Frédéric Marchal <fmarchal@perso.be>, 2026.
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
+"Project-Id-Version: cryptsetup 2.8.8-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-07-09 10:46+0200\n"
-"PO-Revision-Date: 2026-07-13 17:34+0200\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-02 16:16+0200\n"
 "Last-Translator: Frédéric Marchal <fmarchal@perso.be>\n"
 "Language-Team: French <traduc@traduc.org>\n"
 "Language: fr\n"
@@ -20,78 +20,78 @@ msgstr ""
 "X-Bugs: Report translation errors to the Language-Team address.\n"
 "Plural-Forms: nplurals=2; plural=(n >= 2);\n"
 
-#: lib/libdevmapper.c:419
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "Impossible d'initialiser le gestionnaire « device-mapper ». Exécution comme un utilisateur non-root."
 
-#: lib/libdevmapper.c:422
+#: lib/libdevmapper.c:425
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "Impossible d'initialiser le gestionnaire « device-mapper ». Le module noyau dm_mod est-il chargé ?"
 
-#: lib/libdevmapper.c:1125
+#: lib/libdevmapper.c:1129
 msgid "Requested deferred flag is not supported."
 msgstr "Le fanion différé demandé n'est pas supporté."
 
-#: lib/libdevmapper.c:1194
+#: lib/libdevmapper.c:1198
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "Le DM-UUID du périphérique %s a été tronqué."
 
-#: lib/libdevmapper.c:1598
+#: lib/libdevmapper.c:1602
 msgid "Unknown dm target type."
 msgstr "Type de cible dm inconnu."
 
-#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
-#: lib/libdevmapper.c:1853
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "Les options de performance dm-crypt demandées ne sont pas supportées."
 
-#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "Les options demandées de gestion de corruption des données dm-verity ne sont pas supportées."
 
-#: lib/libdevmapper.c:1752
+#: lib/libdevmapper.c:1756
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "L'option dm-verity tasklets demandée n'est pas supportée."
 
-#: lib/libdevmapper.c:1764
+#: lib/libdevmapper.c:1768
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "Les options dm-verity FEC demandées ne sont pas supportées."
 
-#: lib/libdevmapper.c:1770
+#: lib/libdevmapper.c:1774
 msgid "Requested data integrity options are not supported."
 msgstr "Les options d'intégrité de données demandées ne sont pas supportées."
 
-#: lib/libdevmapper.c:1774
+#: lib/libdevmapper.c:1778
 msgid "Requested sector_size option is not supported."
 msgstr "L'option sector_size demandée n'est pas supportée."
 
-#: lib/libdevmapper.c:1779
+#: lib/libdevmapper.c:1783
 msgid "The device size is not multiple of the requested sector size."
 msgstr "La taille du périphérique n'est pas un multiple de la taille de secteur demandée."
 
-#: lib/libdevmapper.c:1783
+#: lib/libdevmapper.c:1787
 msgid "Requested integrity_key_size option is not supported."
 msgstr "L'option integrity_key_size demandée n'est pas supportée."
 
-#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Le recalcule automatique des balises de sécurité demandés n'est pas supporté."
 
-#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2799
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Discard/TRIM is not supported."
 msgstr "Discard/TRIM n'est pas supporté."
 
-#: lib/libdevmapper.c:1808
+#: lib/libdevmapper.c:1812
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "Le mode de carte de bits d'intégrité dm demandé n'est pas supporté."
 
-#: lib/libdevmapper.c:1814
+#: lib/libdevmapper.c:1818
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr "Le mode en ligne d'intégrité dm demandé n'est pas supporté."
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2877
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "Échec lors de l'interrogation du segment dm-%s."
@@ -142,7 +142,7 @@ msgstr "Impossible d'initialiser le moteur aléatoire RNG pour le chiffrement."
 msgid "Cannot initialize crypto backend."
 msgstr "Impossible d'initialiser le moteur de chiffrement."
 
-#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "L'algorithme de hachage %s n'est pas supporté."
@@ -156,7 +156,7 @@ msgstr "Erreur de traitement de clé (valeur hachage %s)."
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Impossible de déterminer le type de périphérique. Activation du périphérique incompatible ?"
 
-#: lib/setup.c:398 lib/setup.c:4177
+#: lib/setup.c:398 lib/setup.c:4193
 msgid "This operation is supported only for LUKS device."
 msgstr "Cette opération n'est possible que pour les périphériques LUKS."
 
@@ -178,7 +178,7 @@ msgstr "L'emplacement de clé %d n'est pas valide, merci d'en choisir un entre 0
 msgid "Key slot %d is full, please select another one."
 msgstr "L'emplacement de clé %d est utilisé, merci d'en sélectionner un autre."
 
-#: lib/setup.c:534 lib/setup.c:3878
+#: lib/setup.c:534 lib/setup.c:3888
 msgid "Device size is not aligned to device logical block size."
 msgstr "La taille du périphérique n'est pas alignée avec la taille d'un bloc logique du périphérique."
 
@@ -187,7 +187,7 @@ msgstr "La taille du périphérique n'est pas alignée avec la taille d'un bloc
 msgid "Header detected but device %s is too small."
 msgstr "En-tête détecté mais le périphérique %s est trop petit."
 
-#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
 #: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Cette opération n'est pas supportée pour ce type de périphérique."
@@ -200,553 +200,553 @@ msgstr "Opération illégale avec une re-chiffrement en cours."
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Échec lors du retour en arrière des métadonnées LUKS2 en mémoire."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
 #: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
 #: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
 #: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
-#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "%s n'est pas un périphérique LUKS valide."
 
-#: lib/setup.c:899 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "La version %d de LUKS n'est pas supportée."
 
-#: lib/setup.c:1273
+#: lib/setup.c:1279
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Aucun motif connu d'algorithme de chiffrement n'a été détecté pour le périphérique actif %s."
 
-#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
-#: lib/setup.c:3786 lib/setup.c:5850
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
 #, c-format
 msgid "Device %s is not active."
 msgstr "Le périphérique %s n'est pas activé."
 
-#: lib/setup.c:1535
+#: lib/setup.c:1545
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Le périphérique sous-jacent pour le périphérique chiffré %s a disparu."
 
-#: lib/setup.c:1617
+#: lib/setup.c:1627
 msgid "Invalid plain crypt parameters."
 msgstr "Paramètres de chiffrement non valides."
 
-#: lib/setup.c:1622 lib/setup.c:2672
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Invalid key size."
 msgstr "La taille de la clé n'est pas valide."
 
-#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
 msgid "UUID is not supported for this crypt type."
 msgstr "le UUID n'est pas supporté avec ce type de chiffrement."
 
-#: lib/setup.c:1632 lib/setup.c:2682
+#: lib/setup.c:1642 lib/setup.c:2692
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Un périphérique avec des métadonnées détachées n'est pas supporté avec ce type de chiffrement."
 
-#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
 #: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Taille de secteur de chiffrement non supportée."
 
-#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
 msgid "Device size is not aligned to requested sector size."
 msgstr "La taille du périphérique n'est pas alignée avec la taille de secteur demandée."
 
-#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
 msgid "Can't format LUKS without device."
 msgstr "Impossible de formater en LUKS sans périphérique."
 
-#: lib/setup.c:1707 lib/setup.c:1959
+#: lib/setup.c:1717 lib/setup.c:1969
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Le périphérique Zoned %s ne peut pas être utilisé pour l'en-tête LUKS."
 
-#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "L'alignement de données demandé n'est pas compatible avec le décalage des données."
 
-#: lib/setup.c:1754 lib/setup.c:1984
+#: lib/setup.c:1764 lib/setup.c:1994
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "ATTENTION : Un périphérique DAX peut corrompre les données car il ne garanti pas la mise à jour atomique des secteurs.\n"
 
-#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
-#: lib/setup.c:2567 lib/setup.c:2899
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Impossible d'effacer l'en-tête du périphérique %s."
 
-#: lib/setup.c:1805 lib/setup.c:2164
+#: lib/setup.c:1815 lib/setup.c:2174
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Le périphérique %s est trop petit pour l'activation, il ne reste pas d'espace pour les données.\n"
 
-#: lib/setup.c:1846
+#: lib/setup.c:1856
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "La clé de volume est trop petite pour chiffrer avec les extensions d'intégrité."
 
-#: lib/setup.c:1850
+#: lib/setup.c:1860
 msgid "Integrity key size is too small."
 msgstr "La taille de la clé d'intégrité est trop petite."
 
-#: lib/setup.c:1859
+#: lib/setup.c:1869
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Le chiffrement %s-%s (clé de %zd bits) n'est pas disponible."
 
-#: lib/setup.c:1900
+#: lib/setup.c:1910
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "AVERTISSEMENT: L'activation du périphérique va échouer, dm-crypt ne supporte pas la taille de secteur de chiffrement demandée.\n"
 
-#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
 #: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Le périphérique %s est trop petit."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Impossible de formater le périphérique %s qui est en cours d'utilisation."
 
-#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Impossible de formater le périphérique %s. Permission refusée."
 
-#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Impossible de formater l'intégrité du périphérique %s."
 
-#: lib/setup.c:2151 lib/setup.c:2629
+#: lib/setup.c:2161 lib/setup.c:2639
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Impossible de formater le périphérique %s"
 
-#: lib/setup.c:2194
+#: lib/setup.c:2204
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Impossible d'obtenir les paramètres d'alignement de OPAL."
 
-#: lib/setup.c:2206
+#: lib/setup.c:2216
 msgid "Bogus OPAL logical block size."
 msgstr "Taille de bloc logique OPAL incorrecte."
 
-#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "La taille de bloc logique OPAL est différentes de la taille de bloc du périphérique."
 
-#: lib/setup.c:2217
+#: lib/setup.c:2227
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "L'offset de données demandé n'est pas compatible avec la taille de bloc de OPAL."
 
-#: lib/setup.c:2224
+#: lib/setup.c:2234
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "L'alignement de données demandé n'est pas compatible avec l'alignement de OPAL."
 
-#: lib/setup.c:2244
+#: lib/setup.c:2254
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "L'offset de données ne satisfait pas les exigences d'alignement de OPAL."
 
-#: lib/setup.c:2257
+#: lib/setup.c:2267
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "L'alignement de données demandé les exigences de la plage d'alignement du verrouillage."
 
-#: lib/setup.c:2471
+#: lib/setup.c:2481
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "La taille du périphérique est compensée avec %<PRIu64> secteurs pour l'aligner avec la granularité de l'alignement de OPAL."
 
-#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Impossible d'acquérir le verrou OPAL sur le périphérique %s."
 
-#: lib/setup.c:2541
+#: lib/setup.c:2551
 msgid "Incorrect OPAL Admin key."
 msgstr "Clé admin OPAL incorrecte."
 
-#: lib/setup.c:2543
+#: lib/setup.c:2553
 msgid "Cannot setup OPAL segment."
 msgstr "Impossible de configurer le segment OPAL."
 
-#: lib/setup.c:2625
+#: lib/setup.c:2635
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Impossible de formater le périphérique %s. Le périphérique OPAL semble maintenant être complètement protégé contre l'écriture."
 
-#: lib/setup.c:2627
+#: lib/setup.c:2637
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Il s'agit peut-être d'un bogue du micro logiciel. Exécutez une réinitialisation PSID OPAL et reconnectez pour récupération."
 
-#: lib/setup.c:2647
+#: lib/setup.c:2657
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "La réinitialisation de la plage %d de verrouillage du périphérique %s a échouée."
 
-#: lib/setup.c:2667
+#: lib/setup.c:2677
 msgid "Can't format LOOPAES without device."
 msgstr "Impossible de formater LOOPAES sans périphérique."
 
-#: lib/setup.c:2712
+#: lib/setup.c:2722
 msgid "Can't format VERITY without device."
 msgstr "Impossible de formater VERITY sans périphérique."
 
-#: lib/setup.c:2723 lib/verity/verity.c:88
+#: lib/setup.c:2733 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Type de hachage VERITY %d non supporté."
 
-#: lib/setup.c:2729 lib/verity/verity.c:96
+#: lib/setup.c:2739 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Taille de bloc VERITY non supportée."
 
-#: lib/setup.c:2734 lib/verity/verity.c:61
+#: lib/setup.c:2744 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Décalage de hachage VERITY non supporté."
 
-#: lib/setup.c:2739
+#: lib/setup.c:2749
 msgid "Unsupported VERITY FEC offset."
 msgstr "Décalage VERITY FEC non supporté."
 
-#: lib/setup.c:2763
+#: lib/setup.c:2773
 msgid "Data area overlaps with hash area."
 msgstr "La zone de données recouvre la zone de hachage."
 
-#: lib/setup.c:2788
+#: lib/setup.c:2798
 msgid "Hash area overlaps with FEC area."
 msgstr "La zone de hachage recouvre la zone FEC."
 
-#: lib/setup.c:2795
+#: lib/setup.c:2805
 msgid "Data area overlaps with FEC area."
 msgstr "La zone de données recouvre la zone FEC."
 
-#: lib/setup.c:2887
+#: lib/setup.c:2897
 msgid "Integrity key size mismatch."
 msgstr "Désaccord avec la taille de la clé."
 
-#: lib/setup.c:2938
+#: lib/setup.c:2948
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "ATTENTION : La taille %d demandée pour l'étiquette est différente de la taille de sortie de %s (%d octets).\n"
 
-#: lib/setup.c:3051 lib/setup.c:3153
+#: lib/setup.c:3061 lib/setup.c:3163
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Type de périphérique %s demandé inconnu ou non supporté."
 
-#: lib/setup.c:3067
+#: lib/setup.c:3077
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Le périphérique %s ne fourni pas de champs de données d'intégrité en ligne."
 
-#: lib/setup.c:3073
+#: lib/setup.c:3083
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "La taille d'étiquette en ligne %<PRIu32> [octets] est plus grande que %<PRIu32> fournie par le périphérique %s."
 
-#: lib/setup.c:3088
+#: lib/setup.c:3098
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Le secteur doit être le même que le secteur matériel du périphérique (%zu octets)."
 
-#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Paramètres non supportés sur le périphérique %s."
 
-#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
 #: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Paramètres non concordants sur le périphérique %s."
 
-#: lib/setup.c:3650
+#: lib/setup.c:3660
 msgid "Crypt devices mismatch."
 msgstr "Désaccord entre les périphériques crypt."
 
-#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
 #: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Impossible de recharger le périphérique %s."
 
-#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
 #: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Impossible de suspendre le périphérique %s."
 
-#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
 #: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
 #: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Impossible de redémarrer le périphérique %s."
 
-#: lib/setup.c:3720
+#: lib/setup.c:3730
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Erreur fatale en rechargeant le périphérique %s (au dessus du périphérique %s)"
 
-#: lib/setup.c:3723 lib/setup.c:3725
+#: lib/setup.c:3733 lib/setup.c:3735
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Impossible de basculer le périphérique %s en dm-error."
 
-#: lib/setup.c:3768
+#: lib/setup.c:3778
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Impossible de redimensionner le périphérique LUKS2 avec une taille statique."
 
-#: lib/setup.c:3773
+#: lib/setup.c:3783
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Le redimensionnement d'un périphérique LUKS2 avec un protection d'intégrité n'est pas supporté."
 
-#: lib/setup.c:3819
+#: lib/setup.c:3829
 msgid "Cannot resize loop device."
 msgstr "Impossible de redimensionner le périphérique loopback."
 
-#: lib/setup.c:3863
+#: lib/setup.c:3873
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "ATTENTION: La taille maximale est déjà définie ou le noyau ne supporte pas le redimensionnement.\n"
 
-#: lib/setup.c:3929
+#: lib/setup.c:3939
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Le redimensionnement a échoué, le noyau ne le supporte pas."
 
-#: lib/setup.c:3961
+#: lib/setup.c:3971
 msgid "Do you really want to change UUID of device?"
 msgstr "Voulez vous réellement changer l'UUID du périphérique ?"
 
-#: lib/setup.c:4053
+#: lib/setup.c:4061 lib/setup.c:4069
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Le fichier de sauvegarde de l'en-tête ne contient pas d'en-tête compatible LUKS."
 
-#: lib/setup.c:4160
+#: lib/setup.c:4176
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Le volume %s n'est pas actif."
 
-#: lib/setup.c:4215
+#: lib/setup.c:4231
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Le volume %s est déjà suspendu."
 
-#: lib/setup.c:4241
+#: lib/setup.c:4257
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Le périphérique %s ne supporte pas la suspension."
 
-#: lib/setup.c:4243 lib/setup.c:4251
+#: lib/setup.c:4259 lib/setup.c:4267
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Erreur lors de la suspension du périphérique %s."
 
-#: lib/setup.c:4266
+#: lib/setup.c:4282
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Le périphérique %s a été suspendu mais le périphérique matériel OPAL ne sait pas être verrouillé."
 
-#: lib/setup.c:4297 lib/setup.c:4491
+#: lib/setup.c:4313 lib/setup.c:4507
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Le périphérique %s ne supporte pas la remise en service."
 
-#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Erreur lors de la remise en service du périphérique %s."
 
-#: lib/setup.c:4335
+#: lib/setup.c:4351
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Impossible de délier la clé du porte-clé utilisateur spécifié."
 
-#: lib/setup.c:4457 lib/setup.c:5637
+#: lib/setup.c:4473 lib/setup.c:5653
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Impossible de lier la clé de volume dans le porte-clé utilisateur."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2722
+#: lib/setup.c:4572 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Le volume %s n'est pas suspendu."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
 #: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
-#: src/utils_reencrypt.c:1969
+#: src/utils_reencrypt.c:1995
 msgid "Volume key does not match the volume."
 msgstr "Ceci n'est pas la clé du volume."
 
-#: lib/setup.c:4821
+#: lib/setup.c:4837
 msgid "Failed to swap new key slot."
 msgstr "Nouvel emplacement de clé impossible à échanger."
 
-#: lib/setup.c:4919
+#: lib/setup.c:4935
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "L'emplacement de clé %d n'est pas valide."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
 #: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "L'emplacement de clé %d n'est pas actif."
 
-#: lib/setup.c:4944
+#: lib/setup.c:4960
 msgid "Device header overlaps with data area."
 msgstr "L'en-tête du périphérique recouvre la zone de données."
 
-#: lib/setup.c:5165
+#: lib/setup.c:5181
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Re-chiffrement en cours. Impossible d'activer le périphérique."
 
-#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
 #: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Impossible d'obtenir le verrou de re-chiffrement."
 
-#: lib/setup.c:5189
+#: lib/setup.c:5205
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "La récupération du rechiffrement LUKS2 avec la/les clé(s) de volume a échoué."
 
-#: lib/setup.c:5325
+#: lib/setup.c:5341
 #, c-format
 msgid "Device %s already exists."
 msgstr "Le périphérique %s existe déjà."
 
-#: lib/setup.c:5332
+#: lib/setup.c:5348
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Impossible d'utiliser le périphérique %s, le nom est invalide ou est toujours utilisé."
 
-#: lib/setup.c:5344
+#: lib/setup.c:5360
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Les clés de rechiffrement du volume ne correspondent pas au volume."
 
-#: lib/setup.c:5361
+#: lib/setup.c:5377
 msgid "Incorrect volume key specified for plain device."
 msgstr "Clé de volume incorrecte pour le périphérique en clair."
 
-#: lib/setup.c:5387 lib/setup.c:5448
+#: lib/setup.c:5403 lib/setup.c:5464
 msgid "Device type is not properly initialized."
 msgstr "Type de périphérique improprement initialisé."
 
-#: lib/setup.c:5486
+#: lib/setup.c:5502
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Le porte-clé du noyau n'est pas supporté par ce noyau."
 
-#: lib/setup.c:5490
+#: lib/setup.c:5506
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Le porte-clé du noyau est manquant : il est requis pour passer une signature au noyau."
 
-#: lib/setup.c:5545
+#: lib/setup.c:5561
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Impossible d'utiliser la clé %s du porte clé."
 
-#: lib/setup.c:5758
+#: lib/setup.c:5774
 msgid "Incorrect root hash specified for verity device."
 msgstr "Hachage racine incorrect spécifié pour le périphérique verity."
 
-#: lib/setup.c:5799 lib/setup.c:5824
+#: lib/setup.c:5815 lib/setup.c:5840
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL ne supporte pas la désactivation différée."
 
-#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Le périphérique %s est toujours occupé."
 
-#: lib/setup.c:5832
+#: lib/setup.c:5848
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Impossible d'annuler la suppression différée du périphérique %s."
 
-#: lib/setup.c:5854
+#: lib/setup.c:5870
 #, c-format
 msgid "Invalid device %s."
 msgstr "Le périphérique %s n'est pas valide."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6017
 msgid "Volume key buffer too small."
 msgstr "Le tampon de la clé du volume est trop petit."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6028
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique LUKS2."
 
-#: lib/setup.c:6021
+#: lib/setup.c:6037
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique LUKS1."
 
-#: lib/setup.c:6035
+#: lib/setup.c:6051
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Impossible de récupérer la clé du volume pour ce périphérique de type « plain »."
 
-#: lib/setup.c:6043
+#: lib/setup.c:6059
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Impossible de récupérer le hachage racine pour le périphérique verity."
 
-#: lib/setup.c:6052
+#: lib/setup.c:6068
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique BITLK."
 
-#: lib/setup.c:6057
+#: lib/setup.c:6073
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Impossible de récupérer la clé du volume pour le périphérique FVAULT2."
 
-#: lib/setup.c:6059
+#: lib/setup.c:6075
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Cette opération n'est pas possible pour le périphérique chiffré %s."
 
-#: lib/setup.c:6244 lib/setup.c:6255
+#: lib/setup.c:6260 lib/setup.c:6271
 msgid "Dump operation is not supported for this device type."
 msgstr "L'opération de vidage n'est pas supportée pour ce type de périphérique."
 
-#: lib/setup.c:6635
+#: lib/setup.c:6651
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Le décalage des données n'est pas un multiple de %u octets."
 
-#: lib/setup.c:6943
+#: lib/setup.c:6959
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Impossible de convertir le périphérique %s qui est toujours en cours d'utilisation."
 
-#: lib/setup.c:7251 lib/setup.c:7406
+#: lib/setup.c:7267 lib/setup.c:7422
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Échec de l'affectation de l'emplacement de clé %u pour la nouvelle clé de volume."
 
-#: lib/setup.c:7275
+#: lib/setup.c:7291
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Échec de l'initialisation des paramètres par défaut des emplacement de clé LUKS2."
 
-#: lib/setup.c:7281
+#: lib/setup.c:7297
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Échec de l'affectation de l'emplacement de clé %d aux résumé."
 
-#: lib/setup.c:7523
+#: lib/setup.c:7539
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Impossible d'ajouter un emplacement de clé, tous les emplacements sont désactivés et aucune clé n'a été fournie pour ce volume."
 
-#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Impossible de charger la clé dans le porte-clé du noyau."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7823
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Impossible de trouver le porte-clé décrit par « %s »."
 
-#: lib/setup.c:7872
+#: lib/setup.c:7888
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Erreur lors de l'acquisition du verrou global de sérialisation des accès strictes à la mémoire"
 
@@ -788,7 +788,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Impossible de lire la quantité de données demandée."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Le périphérique %s n'existe pas ou l'accès y est interdit."
@@ -904,16 +904,16 @@ msgstr "Le nombre de threads parallèles PBKDF demandé ne peut pas être zéro.
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "Seul PBKDF2 est supporté en mode FIPS."
 
-#: lib/utils_benchmark.c:171
+#: lib/utils_benchmark.c:175
 msgid "PBKDF benchmark disabled but iterations not set."
 msgstr "L'étalon PBKDF est désactivé mais les itérations ne sont pas définies."
 
-#: lib/utils_benchmark.c:190
+#: lib/utils_benchmark.c:194
 #, c-format
 msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr "Options PBKDF2 incompatibles (en utilisant l'algorithme de hachage %s)."
 
-#: lib/utils_benchmark.c:210
+#: lib/utils_benchmark.c:214
 msgid "Not compatible PBKDF options."
 msgstr "Options PBKDF incompatibles."
 
@@ -963,9 +963,9 @@ msgstr "La taille de la clé en mode XTS doit être un multiple de 256 ou 512 bi
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "La spécification du chiffrement devrait être au format [chiffrement]-[mode]-[iv]."
 
-#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
-#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "Impossible d'écrire sur le périphérique %s. Permission refusée."
@@ -983,13 +983,13 @@ msgstr "Impossible d'accéder au périphérique de stockage temporaire de clés.
 msgid "IO error while encrypting keyslot."
 msgstr "Erreur E/S pendant le chiffrement de l'emplacement de clé."
 
-#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
@@ -1004,61 +1004,61 @@ msgstr "Erreur E/S pendant le déchiffrement de l'emplacement de clé."
 msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr "Le périphérique %s est trop petit (LUKS1 a besoin d'au moins %<PRIu64> octets)."
 
-#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
-#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
-#: lib/luks1/keymanage.c:181
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
 #, c-format
 msgid "LUKS keyslot %u is invalid."
 msgstr "L'emplacement de clé LUKS %u n'est pas valide."
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "Le fichier de sauvegarde d'en-tête demandé %s existe déjà."
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "Impossible de créer le fichier de sauvegarde d'en-tête %s."
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "Impossible d'écrire le fichier de sauvegarde d'en-tête %s."
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
 msgid "Backup file does not contain valid LUKS header."
 msgstr "Le fichier de sauvegarde ne contient pas d'en-tête LUKS valide."
 
-#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1450
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "Impossible d'ouvrir le fichier de sauvegarde d'en-tête %s."
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "Impossible de lire le fichier de sauvegarde d'en-tête %s."
 
-#: lib/luks1/keymanage.c:326
+#: lib/luks1/keymanage.c:331
 msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr "Le décalage des données (« offset ») ou la taille de la clé ne sont pas identiques dans le périphérique et la sauvegarde. La restauration a échouée."
 
-#: lib/luks1/keymanage.c:334
+#: lib/luks1/keymanage.c:339
 #, c-format
 msgid "Device %s %s%s"
 msgstr "Périphérique %s %s%s"
 
-#: lib/luks1/keymanage.c:335
+#: lib/luks1/keymanage.c:340
 msgid "does not contain LUKS header. Replacing header can destroy data on that device."
 msgstr "ne contient pas d'en-tête LUKS. Remplacer l'en-tête peut détruire les données de ce périphérique."
 
-#: lib/luks1/keymanage.c:336
+#: lib/luks1/keymanage.c:341
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "contient déjà un en-tête LUKS. Remplacer l'en-tête détruira les emplacements de clés actuels."
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1066,130 +1066,130 @@ msgstr ""
 "\n"
 "ATTENTION : l'en-tête du périphérique a un UUID différent de celui de la sauvegarde !"
 
-#: lib/luks1/keymanage.c:385
+#: lib/luks1/keymanage.c:390
 msgid "Non standard key size, manual repair required."
 msgstr "Taille de clé non standard. Réparation manuelle requise."
 
-#: lib/luks1/keymanage.c:395
+#: lib/luks1/keymanage.c:400
 msgid "Non standard keyslots alignment, manual repair required."
 msgstr "Alignement non standard des emplacements de clé. Réparation manuelle requise."
 
-#: lib/luks1/keymanage.c:404
+#: lib/luks1/keymanage.c:409
 #, c-format
 msgid "Cipher mode repaired (%s -> %s)."
 msgstr "Mode de chiffrement réparé (%s -> %s)."
 
-#: lib/luks1/keymanage.c:415
+#: lib/luks1/keymanage.c:420
 #, c-format
 msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Valeur hachée du chiffrement réparée vers des minuscules (%s)."
 
-#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:756
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "L'algorithme de hachage LUKS demandé (%s) n'est pas supporté."
 
-#: lib/luks1/keymanage.c:431
+#: lib/luks1/keymanage.c:436
 msgid "Repairing keyslots."
 msgstr "Réparation des emplacements de clé."
 
-#: lib/luks1/keymanage.c:450
+#: lib/luks1/keymanage.c:455
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr "Emplacement de clé %i : décalage réparé (%u -> %u)."
 
-#: lib/luks1/keymanage.c:458
+#: lib/luks1/keymanage.c:463
 #, c-format
 msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr "Emplacement de clé %i : bandes réparées (%u -> %u)."
 
-#: lib/luks1/keymanage.c:467
+#: lib/luks1/keymanage.c:472
 #, c-format
 msgid "Keyslot %i: bogus partition signature."
 msgstr "Emplacement de clé %i : signature de partition contrefaite."
 
-#: lib/luks1/keymanage.c:472
+#: lib/luks1/keymanage.c:477
 #, c-format
 msgid "Keyslot %i: salt wiped."
 msgstr "Emplacement de clé %i : aléa effacé."
 
-#: lib/luks1/keymanage.c:489
+#: lib/luks1/keymanage.c:494
 msgid "Writing LUKS header to disk."
 msgstr "Écriture de l'en-tête LUKS sur le disque."
 
-#: lib/luks1/keymanage.c:494
+#: lib/luks1/keymanage.c:499
 msgid "Repair failed."
 msgstr "Échec de la réparation."
 
-#: lib/luks1/keymanage.c:549
+#: lib/luks1/keymanage.c:554
 #, c-format
 msgid "LUKS cipher mode %s is invalid."
 msgstr "Le mode de chiffrement LUKS %s n'est pas valide."
 
-#: lib/luks1/keymanage.c:554
+#: lib/luks1/keymanage.c:559
 #, c-format
 msgid "LUKS hash %s is invalid."
 msgstr "La valeur hachée LUKS %s n'est pas valide."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Aucun problème connu détecté pour l'en-tête LUKS."
 
-#: lib/luks1/keymanage.c:689
+#: lib/luks1/keymanage.c:690
 #, c-format
 msgid "Error during update of LUKS header on device %s."
 msgstr "Erreur lors de la mise à jour de l'en-tête LUKS sur le périphérique %s."
 
-#: lib/luks1/keymanage.c:697
+#: lib/luks1/keymanage.c:698
 #, c-format
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Erreur lors de la relecture de l'en-tête LUKS après la mise à jour sur le périphérique %s."
 
-#: lib/luks1/keymanage.c:750
+#: lib/luks1/keymanage.c:751
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "L'offset des données d'un en-tête LUKS doit être soit 0 ou soit plus grand que la taille de l'en-tête."
 
-#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
-#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Mauvais format fourni pour le UUID LUKS."
 
-#: lib/luks1/keymanage.c:783
+#: lib/luks1/keymanage.c:784
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Impossible de créer un en-tête LUKS : échec lors de la lecture de l'aléa."
 
-#: lib/luks1/keymanage.c:811
+#: lib/luks1/keymanage.c:812
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Impossible de créer un en-tête LUKS : le résumé (« digest ») de l'en-tête a échoué (en utilisant l'algorithme de hachage %s)."
 
-#: lib/luks1/keymanage.c:856
+#: lib/luks1/keymanage.c:857
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "L'emplacement de clé %d est activé, effacez le d'abord."
 
-#: lib/luks1/keymanage.c:862
+#: lib/luks1/keymanage.c:863
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Le matériel de l'emplacement de clé %d a trop peu de bandes. L'en-tête a-t-il été modifié ?"
 
-#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Débordement de la valeur d'itération de PBKDF2."
 
-#: lib/luks1/keymanage.c:1022
+#: lib/luks1/keymanage.c:1023
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Impossible d'ouvrir l'emplacement de clé (en utilisant le hachage %s)."
 
-#: lib/luks1/keymanage.c:1118
+#: lib/luks1/keymanage.c:1119
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "L'emplacement de clé %d n'est pas valide, merci de sélectionner un emplacement entre 0 et %d."
 
-#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Impossible d'effacer de façon sécurisée le périphérique %s."
@@ -1367,33 +1367,33 @@ msgstr "Cette opération n'est pas supportée."
 msgid "Unexpected key data size."
 msgstr "Taille inattendue pour les données de la clé."
 
-#: lib/bitlk/bitlk.c:1442
+#: lib/bitlk/bitlk.c:1448
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Ce périphérique BITLK est dans un état non supporté et ne peut pas être activé."
 
-#: lib/bitlk/bitlk.c:1447
+#: lib/bitlk/bitlk.c:1453
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Les périphériques BITLK avec le type « %s » ne peuvent pas être activés."
 
-#: lib/bitlk/bitlk.c:1486
+#: lib/bitlk/bitlk.c:1492
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "AVERTISSEMENT: La taille %<PRIu64> du volume BitLocker ne correspond pas à la taille %<PRIu64> du périphérique sous-jacent"
 
-#: lib/bitlk/bitlk.c:1613
+#: lib/bitlk/bitlk.c:1634
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Impossible d'activer le périphérique car dm-crypt dans le noyau ne supporte pas BITLK IV."
 
-#: lib/bitlk/bitlk.c:1617
+#: lib/bitlk/bitlk.c:1638
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Impossible d'activer le périphérique car dm-crypt dans le noyau ne supporte pas le diffuseur BITLK Elephant."
 
-#: lib/bitlk/bitlk.c:1621
+#: lib/bitlk/bitlk.c:1642
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Impossible d'activer le périphérique car dm-crypt dans le noyau ne supporte pas une grande taille de secteur."
 
-#: lib/bitlk/bitlk.c:1625
+#: lib/bitlk/bitlk.c:1646
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Impossible d'activer le périphérique car le module dm-zero est manquant dans le noyau."
 
@@ -1550,24 +1550,24 @@ msgstr "Impossible de déterminer la taille du périphérique %s."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Métadonnées dm-integrity du noyau incompatible (version %u) détectée sur %s."
 
-#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Le noyau ne supporte pas les associations de type dm-integrity."
 
-#: lib/integrity/integrity.c:314
+#: lib/integrity/integrity.c:315
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Le noyau ne supporte pas les alignements de méta-données fixés de dm-integrity."
 
-#: lib/integrity/integrity.c:323
+#: lib/integrity/integrity.c:324
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Le noyau refuse d'activer l'option de recalcul non sûre (voyez les options d'activation historique pour outrepasser)."
 
-#: lib/integrity/integrity.c:329
+#: lib/integrity/integrity.c:330
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Le noyau ne supporte pas le mode en ligne de dm-integrity."
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1510
+#: lib/luks2/luks2_json_metadata.c:1502
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "Impossible d'acquérir un verrou en écriture sur le périphérique %s."
@@ -1589,22 +1589,22 @@ msgstr ""
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "ATTENTION: la zone des emplacements de clés (%<PRIu64> octets) est très petite, le nombre d'emplacements de clés LUKS2 est très limité.\n"
 
-#: lib/luks2/luks2_json_format.c:418
+#: lib/luks2/luks2_json_format.c:427
 msgid "Requested data offset is too small."
 msgstr "Le décalage de données demandé est trop petit."
 
-#: lib/luks2/luks2_json_format.c:459
+#: lib/luks2/luks2_json_format.c:468
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "ATTENTION: La taille des métadonnées LUKS2 est devenue %<PRIu64> octets.\n"
 
-#: lib/luks2/luks2_json_format.c:463
+#: lib/luks2/luks2_json_format.c:472
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "ATTENTION: La taille de la zone des emplacements de clés LUKS2 est devenue %<PRIu64> octets.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Impossible d'acquérir le verrou de lecture sur le périphérique %s."
@@ -1613,33 +1613,33 @@ msgstr "Impossible d'acquérir le verrou de lecture sur le périphérique %s."
 msgid "Label is too long."
 msgstr "L'étiquette est trop longue."
 
-#: lib/luks2/luks2_json_metadata.c:1435
+#: lib/luks2/luks2_json_metadata.c:1427
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "Des exigences LUKS2 interdites ont été détectées dans la sauvegarde %s."
 
-#: lib/luks2/luks2_json_metadata.c:1474
+#: lib/luks2/luks2_json_metadata.c:1466
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "Les décalages des données ne sont pas identiques sur le périphérique et la sauvegarde, la restauration a échoué."
 
-#: lib/luks2/luks2_json_metadata.c:1480
+#: lib/luks2/luks2_json_metadata.c:1472
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "Les en-têtes binaires avec des tailles de zones d'emplacements de clés sont différents sur le périphérique et la sauvegarde, la restauration a échouée."
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1479
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "Périphérique %s %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "ne contient pas d'en-tête LUKS2. Remplacer l'en-tête peut détruire les données de ce périphérique."
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1481
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "contient déjà un en-tête LUKS2. Remplacer l'en-tête détruira les emplacements de clés actuels."
 
-#: lib/luks2/luks2_json_metadata.c:1491
+#: lib/luks2/luks2_json_metadata.c:1483
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1649,7 +1649,7 @@ msgstr ""
 "ATTENTION: des exigences LUKS2 inconnues ont été détectées sur l'en-tête du périphérique réel !\n"
 "Remplacer l'en-tête par la sauvegarde peut corrompre les données sur ce périphérique !"
 
-#: lib/luks2/luks2_json_metadata.c:1493
+#: lib/luks2/luks2_json_metadata.c:1485
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1659,84 +1659,84 @@ msgstr ""
 "ATTENTION: Un rechiffrement hors-ligne non terminé a été détecté sur le périphérique !\n"
 "Remplacer l'en-tête par la sauvegarde peut corrompre les données."
 
-#: lib/luks2/luks2_json_metadata.c:1591
+#: lib/luks2/luks2_json_metadata.c:1583
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "Fanion inconnu %s ignoré."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Clé manquante pour le segment %u de dm-crypt"
 
-#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Impossible de définir le segment dm-crypt."
 
-#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Impossible de définir le segment dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Aucun motif connu d'algorithme de chiffrement n'a été détecté dans l'en-tête LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:2709
+#: lib/luks2/luks2_json_metadata.c:2701
 msgid "OPAL device must have static device size."
 msgstr "Un périphérique OPAL doit avoir une taille de périphérique statique."
 
-#: lib/luks2/luks2_json_metadata.c:2729
+#: lib/luks2/luks2_json_metadata.c:2721
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Un périphérique OPAL chiffré avec intégrité doit être plus petit que la plage de verrouillage."
 
-#: lib/luks2/luks2_json_metadata.c:2734
+#: lib/luks2/luks2_json_metadata.c:2726
 msgid "OPAL device must have same size as locking range."
 msgstr "Un périphérique OPAL doit avoir la même taille que la plage de verrouillage."
 
-#: lib/luks2/luks2_json_metadata.c:2754
+#: lib/luks2/luks2_json_metadata.c:2746
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Le périphérique OPAL %s est déjà déverrouillé.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2793
+#: lib/luks2/luks2_json_metadata.c:2785
 msgid "Unsupported device integrity configuration."
 msgstr "Configuration d'intégrité du périphérique non supportée."
 
-#: lib/luks2/luks2_json_metadata.c:2809
+#: lib/luks2/luks2_json_metadata.c:2801
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Les secteurs de données fournis sont inattendus pour le périphérique dm-integrity sous-jacent."
 
-#: lib/luks2/luks2_json_metadata.c:2911
+#: lib/luks2/luks2_json_metadata.c:2903
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Re-chiffrement en cours. Le périphérique ne peut être désactivé."
 
-#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Échec du remplacement du périphérique suspendu %s avec la cible dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Le périphérique %s a été désactivé mais le périphérique matériel OPAL ne sait pas être verrouillé."
 
-#: lib/luks2/luks2_json_metadata.c:3045
+#: lib/luks2/luks2_json_metadata.c:3037
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Des exigences LUKS2 non rencontrées ont été détectées."
 
-#: lib/luks2/luks2_json_metadata.c:3053
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Opération incompatible avec un périphérique marqué pour le rechiffrement historique. Abandon."
 
-#: lib/luks2/luks2_json_metadata.c:3055
+#: lib/luks2/luks2_json_metadata.c:3047
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Opération incompatible avec un périphérique marqué pour le rechiffrement LUKS2. Abandon."
 
-#: lib/luks2/luks2_json_metadata.c:3057
+#: lib/luks2/luks2_json_metadata.c:3049
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Opération incompatible avec un périphérique utilisant OPAL. Abandon."
 
-#: lib/luks2/luks2_json_metadata.c:3059
+#: lib/luks2/luks2_json_metadata.c:3051
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Opération incompatible avec un périphérique utilisant les étiquettes HW. Abandon."
 
@@ -1803,60 +1803,60 @@ msgstr "Impossible d'utiliser la spécification de chiffrement %s-%s pour un emp
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Impossible de déplacer la zone des emplacements de clés. Pas assez d'espace."
 
-#: lib/luks2/luks2_luks1_convert.c:619
+#: lib/luks2/luks2_luks1_convert.c:627
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Impossible de convertir au format LUKS2 – métadonnées invalides."
 
-#: lib/luks2/luks2_luks1_convert.c:636
+#: lib/luks2/luks2_luks1_convert.c:644
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Impossible de déplacer la zone des emplacements de clés. Les emplacements de clés LULS2 sont trop petits."
 
-#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
 msgid "Unable to move keyslot area."
 msgstr "Impossible de déplacer la zone des emplacements de clés."
 
-#: lib/luks2/luks2_luks1_convert.c:757
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Impossible de convertir au format LUKS1 – la taille du secteur de chiffrement du segment par défaut n'est pas 512 octets."
 
-#: lib/luks2/luks2_luks1_convert.c:765
+#: lib/luks2/luks2_luks1_convert.c:773
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Impossible de convertir au format LUKS1 – les résumés des emplacements de clés ne sont pas compatibles avec LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:779
+#: lib/luks2/luks2_luks1_convert.c:787
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Impossible de convertir au format LUKS1 – le périphérique utilise des clés de chiffrement %s emballées."
 
-#: lib/luks2/luks2_luks1_convert.c:784
+#: lib/luks2/luks2_luks1_convert.c:792
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Impossible de convertir au format LUKS1 – le périphérique utilise plus de segments."
 
-#: lib/luks2/luks2_luks1_convert.c:792
+#: lib/luks2/luks2_luks1_convert.c:800
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Impossible de convertir au format LUKS1 – l'en-tête LUKS2 contient %u jeton(s)."
 
-#: lib/luks2/luks2_luks1_convert.c:798
+#: lib/luks2/luks2_luks1_convert.c:806
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Impossible de convertir au format LUKS1 – il n'y a pas d'emplacements de clés actifs."
 
-#: lib/luks2/luks2_luks1_convert.c:810
+#: lib/luks2/luks2_luks1_convert.c:818
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Impossible de convertir au format LUKS1 – l'emplacement de clé %u est dans un état invalide."
 
-#: lib/luks2/luks2_luks1_convert.c:815
+#: lib/luks2/luks2_luks1_convert.c:823
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Impossible de convertir au format LUKS1 – l'emplacement de clé %u n'est pas lié."
 
-#: lib/luks2/luks2_luks1_convert.c:820
+#: lib/luks2/luks2_luks1_convert.c:828
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Impossible de convertir au format LUKS1 – l'emplacement %u (sur les emplacements maximum) est toujours actif."
 
-#: lib/luks2/luks2_luks1_convert.c:825
+#: lib/luks2/luks2_luks1_convert.c:833
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Impossible de convertir au format LUKS1 – l'emplacement de clé %u n'est pas compatible avec LUKS1."
@@ -2142,7 +2142,7 @@ msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encry
 msgstr "Les paramètres de chiffrement des emplacement de clés ne sont pas compatibles avec le chiffrement des emplacements de LUKS2."
 
 #: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
-#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Aucun motif connu d'algorithme de chiffrement n'a été détecté."
@@ -2170,7 +2170,7 @@ msgid "WARNING: The --keyfile-size option is being ignored, the read size is the
 msgstr "ATTENTION: L'option --keyfile-size est ignorée. La taille de lecture est la même que la taille de la clé de chiffrement.\n"
 
 #: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
-#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "L'analyse de blkid a échouée pour %s."
@@ -2250,7 +2250,7 @@ msgstr "Le périphérique %s n'est pas un périphérique FVAULT2 valide."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Impossible de déterminer la taille de la clé de volume pour FVAULT2, veuillez utiliser l'option --key-size."
 
-#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Le périphérique %s est toujours actif et prévu pour une suppression différée.\n"
@@ -2440,7 +2440,7 @@ msgid "LUKS file container %s is too small for activation, there is no remaining
 msgstr "Le container %s du fichier LUKS est trop petit pour l'activation, il ne reste pas d'espace pour les données."
 
 #: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
-#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Impossible de déterminer la taille de la clé de volume pour LUKS sans emplacement de clé, veuillez utiliser l'option --key-size."
 
@@ -2735,7 +2735,7 @@ msgstr "L'option --volume-key-keyring ne peut pas être combinée avec --hash ou
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Les deux options --volume-key-file doivent être appariées avec les options --key-size respectives."
 
-#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Les options --cancel-deferred et --deferred ne peuvent pas être utilisées en même temps."
 
@@ -2803,21 +2803,21 @@ msgstr "L'action requiert un jeton spécifique. Utilisez le paramètre --key-slo
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<périphérique> [--type <type>] [<nom>]"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
 msgid "open device as <name>"
 msgstr "ouvrir le périphérique comme <nom>"
 
 #: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
-#: src/integritysetup.c:562 src/integritysetup.c:564
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
 msgid "<name>"
 msgstr "<nom>"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
 msgid "close device (remove mapping)"
 msgstr "fermeture du périphérique (supprime le « mapping »)"
 
-#: src/cryptsetup.c:3484 src/integritysetup.c:564
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
 msgid "resize active device"
 msgstr "redimensionner le périphérique actif"
 
@@ -2945,7 +2945,7 @@ msgstr "<add|remove|import|export> <périphérique>"
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipuler les jetons LUKS2"
 
-#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3046,7 +3046,7 @@ msgstr ""
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: La taille de clé par défaut en mode XTS (deux clés internes) sera doublée.\n"
 
-#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s : exige %s comme arguments."
@@ -3097,31 +3097,31 @@ msgstr "L'option --priority peut uniquement être ignore/normal/prefer."
 msgid "Invalid maximal tries specification."
 msgstr "La spécification du nombre maximal de tentatives est invalide."
 
-#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
 msgid "Show this help message"
 msgstr "Afficher ce message d'aide"
 
-#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
 msgid "Display brief usage"
 msgstr "Afficher, en résumé, la syntaxe d'invocation"
 
-#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
 msgid "Print package version"
 msgstr "Afficher la version du paquet"
 
-#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
 msgid "Help options:"
 msgstr "Options d'aide :"
 
-#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPTION...] <action> <paramètres de l'action>"
 
-#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
 msgid "Argument <action> missing."
 msgstr "Il manque l'argument <action>."
 
-#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
 msgid "Unknown action."
 msgstr "Action inconnue."
 
@@ -3226,7 +3226,7 @@ msgstr "La commande exige <hachage_racine> ou l'option --root-hash-file comme ar
 msgid "<data_device> <hash_device>"
 msgstr "<périph_données> <périph_hachage>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:559
+#: src/veritysetup.c:485 src/integritysetup.c:562
 msgid "format device"
 msgstr "formater le périphérique"
 
@@ -3242,7 +3242,7 @@ msgstr "vérifier le périphérique"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<périph_données> <nom> <périph_hachage> [<hachage_racine>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:562
+#: src/veritysetup.c:489 src/integritysetup.c:565
 msgid "show active device status"
 msgstr "afficher le statut du périphérique actif"
 
@@ -3250,7 +3250,7 @@ msgstr "afficher le statut du périphérique actif"
 msgid "<hash_device>"
 msgstr "<périph_hachage>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:563
+#: src/veritysetup.c:490 src/integritysetup.c:566
 msgid "show on-disk information"
 msgstr "afficher les informations sur le disque"
 
@@ -3314,20 +3314,20 @@ msgstr " (étiquettes HW en ligne)"
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Définir le fanion pour le recalcul n'est pas supporté, envisagez plutôt d'utiliser --wipe."
 
-#: src/integritysetup.c:382 src/integritysetup.c:546
+#: src/integritysetup.c:382 src/integritysetup.c:549
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Le périphérique %s n'est pas un périphérique INTEGRITY valable."
 
-#: src/integritysetup.c:559 src/integritysetup.c:563
+#: src/integritysetup.c:562 src/integritysetup.c:566
 msgid "<integrity_device>"
 msgstr "<périph_intégrité>"
 
-#: src/integritysetup.c:560
+#: src/integritysetup.c:563
 msgid "<integrity_device> <name>"
 msgstr "<périph_intégrigé> <nom>"
 
-#: src/integritysetup.c:583
+#: src/integritysetup.c:586
 #, c-format
 msgid ""
 "\n"
@@ -3338,7 +3338,7 @@ msgstr ""
 "<nom> est le périphérique à créer sous %s\n"
 "<périph_intégrité> est le périphérique contenant les données avec les balises d'intégrité\n"
 
-#: src/integritysetup.c:588
+#: src/integritysetup.c:591
 #, c-format
 msgid ""
 "\n"
@@ -3351,51 +3351,55 @@ msgstr ""
 "\tAlgorithme de somme de contrôle : %s\n"
 "\tTaille maximale du fichier de clé : %dko\n"
 
-#: src/integritysetup.c:645
+#: src/integritysetup.c:648
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "La taille --%s n'est pas valide. Le maximum est %u octets."
 
-#: src/integritysetup.c:748
+#: src/integritysetup.c:751
 msgid "Both key file and key size options must be specified."
 msgstr "Les options du fichier de clé et de la taille de la clé doivent être spécifiées toutes les deux."
 
-#: src/integritysetup.c:752
+#: src/integritysetup.c:755
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Les options du fichier de clé de l'intégrité du journal et de la taille de la clé doivent être spécifiées toutes les deux."
 
-#: src/integritysetup.c:755
+#: src/integritysetup.c:758
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "L'algorithme d'intégrité du journal doit être spécifié si la clé d'intégrité du journal est utilisée."
 
-#: src/integritysetup.c:759
+#: src/integritysetup.c:762
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Les options du fichier de clé de chiffrement du journal et de la taille de la clé doivent être spécifiées toutes les deux."
 
-#: src/integritysetup.c:762
+#: src/integritysetup.c:765
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "L'algorithme de chiffrement du journal doit être spécifié si la clé de chiffrement du journal est utilisée."
 
-#: src/integritysetup.c:766
+#: src/integritysetup.c:769
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Les options de mode récupération et champ de bits sont mutuellement exclusives."
 
-#: src/integritysetup.c:773
+#: src/integritysetup.c:776
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Les options de journal ne peuvent pas être utilisées en mode champ de bits."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:781
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Les options de champ de bits peuvent uniquement être utilisées en mode champ de bits."
 
-#: src/integritysetup.c:784
+#: src/integritysetup.c:787
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Le mode en ligne ne peut pas être combiné avec les options de journal ou de carte de bits."
 
-#: src/integritysetup.c:788
+#: src/integritysetup.c:791
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Le mode en ligne ne peut pas être combiné avec un périphérique qui a des données séparées."
 
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "L'élimination par clé peut uniquement être activée avec des algorithmes à clés comme HMAC."
+
 #: src/utils_tools.c:105
 msgid ""
 "\n"
@@ -3746,7 +3750,7 @@ msgstr "Le périphérique n'est pas en cours de déchiffrement LUKS2. Option --d
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Le périphérique est en cours de rechiffrement en utilisant la résilience datashift. L'option --resilience demandée ne peut pas être appliquée."
 
-#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Impossible de déterminer la taille de la clé de volume pour LUKS sans emplacement de clé, veuillez utiliser l'option --new-key-size."
 
@@ -3780,7 +3784,7 @@ msgstr ""
 "La taille de secteur demandée avec --sector-size %<PRIu32> est incompatible avec le superbloc %s\n"
 "(taille de bloc : %<PRIu32> octets) détecté sur le périphérique %s."
 
-#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Le chiffrement sans en-tête détaché (--header) n'est pas possible sans une réduction de la taille du périphérique de données (--reduce-device-size)"
 
@@ -3848,42 +3852,43 @@ msgstr "L'initialisation du rechiffrement a échoué. La sauvegarde de l'en-têt
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Le déchiffrement LUKS2 est uniquement supporté avec un périphérique à l'en-tête détaché (avec l'offset de données défini à 0)."
 
-#: src/utils_reencrypt.c:1490
-msgid "No token could unlock the device."
-msgstr "Aucun jeton n'a pu déverrouiller ce périphérique."
-
-#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
 msgid "Not enough free keyslots for reencryption."
 msgstr "Pas assez d'emplacements de clés libres pour le rechiffrement."
 
-#: src/utils_reencrypt.c:1562
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "Aucun jeton n'a pu déverrouiller ce périphérique."
+
+#: src/utils_reencrypt.c:1588
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Le fichier de clé ou le porte clé peut uniquement être utilisé avec --key-slot ou avec exactement un seul emplacement de clé actif."
 
-#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Entrez la phrase secrète pour l'emplacement de clé %d : "
 
-#: src/utils_reencrypt.c:1879
+#: src/utils_reencrypt.c:1905
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Basculement de l'algorithme de chiffrement de données vers %s.\n"
 
-#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Utilise --force-no-keyslots pour rechiffrer le périphérique avec les emplacements de clé actifs en passant directement les clés du volume."
 
-#: src/utils_reencrypt.c:1996
+#: src/utils_reencrypt.c:2022
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "L'option --new-volume-key-file doit être appariée avec --new-key-size"
 
-#: src/utils_reencrypt.c:2038
+#: src/utils_reencrypt.c:2064
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Aucun paramètre de segment de donnée changé. Rechiffrement abandonné."
 
-#: src/utils_reencrypt.c:2075
+#: src/utils_reencrypt.c:2101
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3891,7 +3896,7 @@ msgstr ""
 "L'augmentation de la taille du secteur de chiffrement n'est pas supportée sur un périphérique hors-ligne.\n"
 "Activez d'abord le périphérique ou utilisez l'option --force-offline-reencrypt (dangereux !)."
 
-#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3900,58 +3905,58 @@ msgstr ""
 "\n"
 "Rechiffrement interrompu."
 
-#: src/utils_reencrypt.c:2122
+#: src/utils_reencrypt.c:2148
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Redémarrage du rechiffrement LUKS en mode hors-ligne forcé.\n"
 
-#: src/utils_reencrypt.c:2145
+#: src/utils_reencrypt.c:2171
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Le périphérique %s contient des métadonnées LUKS endommagées. L'opération est abandonnée."
 
-#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Le périphérique %s est déjà un périphérique LUKS. L'opération est abandonnée."
 
-#: src/utils_reencrypt.c:2189
+#: src/utils_reencrypt.c:2215
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Le périphérique %s est déjà en cours de rechiffrement LUKS. L'opération est abandonnée."
 
-#: src/utils_reencrypt.c:2272
+#: src/utils_reencrypt.c:2298
 msgid "LUKS2 decryption requires --header option."
 msgstr "Le déchiffrement LUKS2 requiert l'option --header."
 
-#: src/utils_reencrypt.c:2320
+#: src/utils_reencrypt.c:2346
 msgid "Command requires device as argument."
 msgstr "La commande exige un périphérique comme argument."
 
-#: src/utils_reencrypt.c:2333
+#: src/utils_reencrypt.c:2359
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Versions conflictuelles. Le périphérique %s est LUKS1."
 
-#: src/utils_reencrypt.c:2339
+#: src/utils_reencrypt.c:2365
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Versions conflictuelles. Le périphérique %s est en cours de rechiffrement LUKS1."
 
-#: src/utils_reencrypt.c:2345
+#: src/utils_reencrypt.c:2371
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Versions conflictuelle. Le périphérique %s est LUKS2"
 
-#: src/utils_reencrypt.c:2351
+#: src/utils_reencrypt.c:2377
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Versions conflictuelles. Le périphérique %s est en cours de rechiffrement LUKS2."
 
-#: src/utils_reencrypt.c:2357
+#: src/utils_reencrypt.c:2383
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Rechiffrement LUKS2 déjà initialisé. Abandon de l'opération."
 
-#: src/utils_reencrypt.c:2364
+#: src/utils_reencrypt.c:2390
 msgid "Device reencryption not in progress."
 msgstr "Le rechiffrement du périphérique n'est pas en cours."
 

From cdec34bc3cad4db464aeb8e3152deda788d25633 Mon Sep 17 00:00:00 2001
From: Hiroshi Takekawa <sian@big.or.jp>
Date: Fri, 4 Sep 2026 18:57:03 +0200
Subject: [PATCH 208/244] po: update ja.po (from translationproject.org)

---
 po/ja.po | 657 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 331 insertions(+), 326 deletions(-)

diff --git a/po/ja.po b/po/ja.po
index 6f18abbd7..45b5444af 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -5,10 +5,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
+"Project-Id-Version: cryptsetup 2.8.8-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-07-09 10:46+0200\n"
-"PO-Revision-Date: 2026-07-11 23:24+0900\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-03 08:32+0900\n"
 "Last-Translator: Hiroshi Takekawa <sian@big.or.jp>\n"
 "Language-Team: Japanese <translation-team-ja@lists.sourceforge.net>\n"
 "Language: ja\n"
@@ -17,78 +17,78 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Bugs: Report translation errors to the Language-Team address.\n"
 
-#: lib/libdevmapper.c:419
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "device-mapper を初期化できません、non-root で実行します。"
 
-#: lib/libdevmapper.c:422
+#: lib/libdevmapper.c:425
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "device-mapper を初期化できません。dm_mod モジュールはロードされてますか？"
 
-#: lib/libdevmapper.c:1125
+#: lib/libdevmapper.c:1129
 msgid "Requested deferred flag is not supported."
 msgstr "指定された延期フラグはサポートされていません。"
 
-#: lib/libdevmapper.c:1194
+#: lib/libdevmapper.c:1198
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "デバイス %s の DM-UUID は短縮されています。"
 
-#: lib/libdevmapper.c:1598
+#: lib/libdevmapper.c:1602
 msgid "Unknown dm target type."
 msgstr "不明な dm target タイプです。"
 
-#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
-#: lib/libdevmapper.c:1853
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "指定された dm-crypt パフォーマンスオプションはサポートされていません。"
 
-#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "指定された dm-verity のデータ破壊時の対応についてのオプションはサポートされていません。"
 
-#: lib/libdevmapper.c:1752
+#: lib/libdevmapper.c:1756
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "指定された dm-verity のタスクレットオプションはサポートされていません。"
 
-#: lib/libdevmapper.c:1764
+#: lib/libdevmapper.c:1768
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "指定された dm-verity の誤り訂正(FEC)オプションはサポートされていません。"
 
-#: lib/libdevmapper.c:1770
+#: lib/libdevmapper.c:1774
 msgid "Requested data integrity options are not supported."
 msgstr "指定されたデータの整合性のオプションはサポートされていません。"
 
-#: lib/libdevmapper.c:1774
+#: lib/libdevmapper.c:1778
 msgid "Requested sector_size option is not supported."
 msgstr "指定された sector_size オプションはサポートされていません。"
 
-#: lib/libdevmapper.c:1779
+#: lib/libdevmapper.c:1783
 msgid "The device size is not multiple of the requested sector size."
 msgstr "デバイスサイズが要求されたセクタサイズのアライメントに合いません。"
 
-#: lib/libdevmapper.c:1783
+#: lib/libdevmapper.c:1787
 msgid "Requested integrity_key_size option is not supported."
 msgstr "指定された integrity_key_size オプションはサポートされていません。"
 
-#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "指定された改ざん確認タグの自動再計算はサポートされていません。"
 
-#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2799
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Discard/TRIM is not supported."
 msgstr "Discard/TRIM はサポートしていません。"
 
-#: lib/libdevmapper.c:1808
+#: lib/libdevmapper.c:1812
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "要求された dm-integrity のビットマップモードはサポートされていません。"
 
-#: lib/libdevmapper.c:1814
+#: lib/libdevmapper.c:1818
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr "要求された dm-integrity のインラインモードはサポートされていません。"
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2877
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "dm-%s のクエリーに失敗しました。"
@@ -139,7 +139,7 @@ msgstr "暗号向けRNG(乱数生成器)バックエンドの初期化ができ
 msgid "Cannot initialize crypto backend."
 msgstr "暗号バックエンドの初期化ができません。"
 
-#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "ハッシュアルゴリズム %s がサポートされていません。"
@@ -153,7 +153,7 @@ msgstr "鍵の処理でエラー (ハッシュ %s を使用)。"
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "デバイスタイプがわかりません。互換性のないデバイスのアクティベーションをしようとしていませんか？"
 
-#: lib/setup.c:398 lib/setup.c:4177
+#: lib/setup.c:398 lib/setup.c:4193
 msgid "This operation is supported only for LUKS device."
 msgstr "この操作は LUKS デバイスでしかサポートされていません。"
 
@@ -175,7 +175,7 @@ msgstr "キースロット %d は不正です。0 から %d の間を選んで
 msgid "Key slot %d is full, please select another one."
 msgstr "キースロット %d は使われています。別の番号を選んでください。"
 
-#: lib/setup.c:534 lib/setup.c:3878
+#: lib/setup.c:534 lib/setup.c:3888
 msgid "Device size is not aligned to device logical block size."
 msgstr "デバイスサイズが論理ブロックサイズのアライメントに合いません。"
 
@@ -184,7 +184,7 @@ msgstr "デバイスサイズが論理ブロックサイズのアライメント
 msgid "Header detected but device %s is too small."
 msgstr "ヘッダが検出されましたがデバイス %s が小さすぎます。"
 
-#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
 #: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "この操作はこのデバイスタイプではサポートされていません。"
@@ -197,553 +197,553 @@ msgstr "オフラインでの再暗号化中です。中止します。"
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "メモリ上の LUKS2 メタデータのロールバックに失敗しました。"
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
 #: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
 #: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
 #: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
-#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "デバイス %s は有効な LUKS デバイスではありません。"
 
-#: lib/setup.c:899 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "LUKS バージョン %d はサポートされていません。"
 
-#: lib/setup.c:1273
+#: lib/setup.c:1279
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "アクティブなデバイス %s に既知の暗号スペックパターンが検出されませんでした。"
 
-#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
-#: lib/setup.c:3786 lib/setup.c:5850
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
 #, c-format
 msgid "Device %s is not active."
 msgstr "デバイス %s はアクティブではありません。"
 
-#: lib/setup.c:1535
+#: lib/setup.c:1545
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "暗号化されたデバイス %s の元になるデバイスが消滅しました。"
 
-#: lib/setup.c:1617
+#: lib/setup.c:1627
 msgid "Invalid plain crypt parameters."
 msgstr "不正な plain crypt のパラメータ。"
 
-#: lib/setup.c:1622 lib/setup.c:2672
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Invalid key size."
 msgstr "不正なキーサイズ。"
 
-#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID はこの暗号タイプではサポートされていません。"
 
-#: lib/setup.c:1632 lib/setup.c:2682
+#: lib/setup.c:1642 lib/setup.c:2692
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "分離したメタデータデバイスはこの暗号タイプではサポートされていません。"
 
-#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
 #: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "サポートされていない暗号化セクタサイズです。"
 
-#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
 msgid "Device size is not aligned to requested sector size."
 msgstr "デバイスサイズが要求されたセクタサイズのアライメントに合いません。"
 
-#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
 msgid "Can't format LUKS without device."
 msgstr "デバイスなしには LUKS 形式にフォーマットできません。"
 
-#: lib/setup.c:1707 lib/setup.c:1959
+#: lib/setup.c:1717 lib/setup.c:1969
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Zonedy デバイス %s は LUKS ヘッダに使えません。"
 
-#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "要求されたデータアライメントとデータオフセットが合いません。"
 
-#: lib/setup.c:1754 lib/setup.c:1984
+#: lib/setup.c:1764 lib/setup.c:1994
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "警告: DAX デバイスはアトミックなセクタ更新を保証しないためデータが壊れることがあります。\n"
 
-#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
-#: lib/setup.c:2567 lib/setup.c:2899
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "デバイス %s のヘッダを消し去れません。"
 
-#: lib/setup.c:1805 lib/setup.c:2164
+#: lib/setup.c:1815 lib/setup.c:2174
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "デバイス %s はアクティベートするのに小さすぎます。データ用のスペースがありません。\n"
 
-#: lib/setup.c:1846
+#: lib/setup.c:1856
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "ボリュームキーは整合性拡張のため暗号には鍵長が小さすぎます。"
 
-#: lib/setup.c:1850
+#: lib/setup.c:1860
 msgid "Integrity key size is too small."
 msgstr "整合性キーのサイズが小さすぎます。"
 
-#: lib/setup.c:1859
+#: lib/setup.c:1869
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "暗号 %s-%s (キーサイズ %zd ビット) は利用できません。"
 
-#: lib/setup.c:1900
+#: lib/setup.c:1910
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "警告: デバイスアクティベーションが失敗しました。dm-crypt が要求された暗号セクタサイズをサポートしていません。\n"
 
-#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
 #: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "デバイス %s のサイズが小さすぎます。"
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "デバイス %s は使用中のためフォーマットできません。"
 
-#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "デバイス %s は権限がないためフォーマットできません。"
 
-#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "デバイス %s を整合性確認ができるようフォーマットできません。"
 
-#: lib/setup.c:2151 lib/setup.c:2629
+#: lib/setup.c:2161 lib/setup.c:2639
 #, c-format
 msgid "Cannot format device %s."
 msgstr "デバイス %s をフォーマットできません。"
 
-#: lib/setup.c:2194
+#: lib/setup.c:2204
 msgid "Cannot get OPAL alignment parameters."
 msgstr "OPAL アライメントパラメータを取得できません。"
 
-#: lib/setup.c:2206
+#: lib/setup.c:2216
 msgid "Bogus OPAL logical block size."
 msgstr "OPAL 論理ブロックサイズがおかしいです。"
 
-#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "OPAL 論理ブロックサイズがデバイスブロックサイズと違っておかしいです。"
 
-#: lib/setup.c:2217
+#: lib/setup.c:2227
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "要求されたデータオフセットが OPAL ブロックサイズと互換性がありません。"
 
-#: lib/setup.c:2224
+#: lib/setup.c:2234
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "要求されたデータアライメントが OPAL アライメントと互換性がありません。"
 
-#: lib/setup.c:2244
+#: lib/setup.c:2254
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "データオフセットが OPAL アライメント制約を満たしていません。"
 
-#: lib/setup.c:2257
+#: lib/setup.c:2267
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "要求されたデータアライメントはロックレンジアライメントに対する要求を満たしません。"
 
-#: lib/setup.c:2471
+#: lib/setup.c:2481
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "OPAL のアライメント粒度に合わせるためにデバイスサイズが %<PRIu64> セクタ少なくなります。"
 
-#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "デバイス %s の OPAL ロックを取得できませんでした。"
 
-#: lib/setup.c:2541
+#: lib/setup.c:2551
 msgid "Incorrect OPAL Admin key."
 msgstr "OPAL 管理者キーが正しくありません。"
 
-#: lib/setup.c:2543
+#: lib/setup.c:2553
 msgid "Cannot setup OPAL segment."
 msgstr "OPAL セグメントを設定できません。"
 
-#: lib/setup.c:2625
+#: lib/setup.c:2635
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "デバイス %s をフォーマットできません。OPAL デバイスは完全に書き込み禁止になっているようです。"
 
-#: lib/setup.c:2627
+#: lib/setup.c:2637
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "おそらくファームウェアのバグです。OPAL PSID リセットをして復旧のために再接続してください。"
 
-#: lib/setup.c:2647
+#: lib/setup.c:2657
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "ロックレンジ %d のリセットをデバイス %s に試みましたが失敗しました。"
 
-#: lib/setup.c:2667
+#: lib/setup.c:2677
 msgid "Can't format LOOPAES without device."
 msgstr "LOOPAES としてフォーマットするにはデバイスが必要です。"
 
-#: lib/setup.c:2712
+#: lib/setup.c:2722
 msgid "Can't format VERITY without device."
 msgstr "VERITY としてフォーマットするにはデバイスが必要です。"
 
-#: lib/setup.c:2723 lib/verity/verity.c:88
+#: lib/setup.c:2733 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "VERITY ハッシュタイプ %d はサポートしていません。"
 
-#: lib/setup.c:2729 lib/verity/verity.c:96
+#: lib/setup.c:2739 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "サポートしていない VERITY ブロックサイズです。"
 
-#: lib/setup.c:2734 lib/verity/verity.c:61
+#: lib/setup.c:2744 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "サポートしていない VERITY ハッシュオフセットです。"
 
-#: lib/setup.c:2739
+#: lib/setup.c:2749
 msgid "Unsupported VERITY FEC offset."
 msgstr "サポートしていない VERITY FEC オフセットです。"
 
-#: lib/setup.c:2763
+#: lib/setup.c:2773
 msgid "Data area overlaps with hash area."
 msgstr "データ領域がハッシュ領域と重なっています。"
 
-#: lib/setup.c:2788
+#: lib/setup.c:2798
 msgid "Hash area overlaps with FEC area."
 msgstr "ハッシュ領域が FEC 領域と重なっています。"
 
-#: lib/setup.c:2795
+#: lib/setup.c:2805
 msgid "Data area overlaps with FEC area."
 msgstr "データ領域が FEC 領域と重なっています。"
 
-#: lib/setup.c:2887
+#: lib/setup.c:2897
 msgid "Integrity key size mismatch."
 msgstr "整合性キーのサイズが一致しません。"
 
-#: lib/setup.c:2938
+#: lib/setup.c:2948
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "警告: 指定されたタグのサイズ %d バイトが %s の出力サイズと異なります (%d バイト)。\n"
 
-#: lib/setup.c:3051 lib/setup.c:3153
+#: lib/setup.c:3061 lib/setup.c:3163
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "不明もしくはサポートされていないデバイスタイプ %s が指定されました。"
 
-#: lib/setup.c:3067
+#: lib/setup.c:3077
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "デバイス %s はインライン整合性データフィールドを提供しません。"
 
-#: lib/setup.c:3073
+#: lib/setup.c:3083
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "インラインタグサイズ %<PRIu32> [bytes] が %<PRIu32> (デバイス %s より取得)より大きいです。"
 
-#: lib/setup.c:3088
+#: lib/setup.c:3098
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "セクタはデバイスハードウェアセクタ (%zu bytes) と同じでなければなりません。"
 
-#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "デバイス %s のパラメータはサポートしていません。"
 
-#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
 #: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "デバイス %s のパラメータがミスマッチしています。"
 
-#: lib/setup.c:3650
+#: lib/setup.c:3660
 msgid "Crypt devices mismatch."
 msgstr "Crypt デバイスが一致しません。"
 
-#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
 #: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "デバイス %s のリロードに失敗しました。"
 
-#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
 #: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "デバイス %s のサスペンドに失敗しました。"
 
-#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
 #: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
 #: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "デバイス %s のリジュームに失敗しました。"
 
-#: lib/setup.c:3720
+#: lib/setup.c:3730
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "デバイス %s のリロード中に致命的なエラー(デバイス %s の上で)。"
 
-#: lib/setup.c:3723 lib/setup.c:3725
+#: lib/setup.c:3733 lib/setup.c:3735
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "デバイス %s を dm-error にスイッチできません。"
 
-#: lib/setup.c:3768
+#: lib/setup.c:3778
 msgid "Can not resize LUKS2 device with static size."
 msgstr "静的サイズの LUKS2 デバイスはリサイズできません。"
 
-#: lib/setup.c:3773
+#: lib/setup.c:3783
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "整合性プロテクションつきのLUKS2デバイスのリサイズはサポートされていません。"
 
-#: lib/setup.c:3819
+#: lib/setup.c:3829
 msgid "Cannot resize loop device."
 msgstr "ループデバイスはリサイズできません。"
 
-#: lib/setup.c:3863
+#: lib/setup.c:3873
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "警告: 最大サイズが既に設定済かカーネルがリサイズをサポートしていません。\n"
 
-#: lib/setup.c:3929
+#: lib/setup.c:3939
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "リサイズに失敗しました。カーネルがサポートしていません。"
 
-#: lib/setup.c:3961
+#: lib/setup.c:3971
 msgid "Do you really want to change UUID of device?"
 msgstr "デバイスの UUID を本当に変更してもいいですか？"
 
-#: lib/setup.c:4053
+#: lib/setup.c:4061 lib/setup.c:4069
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "ヘッダのバックアップファイルの中味が LUKS ヘッダと互換性がありません。"
 
-#: lib/setup.c:4160
+#: lib/setup.c:4176
 #, c-format
 msgid "Volume %s is not active."
 msgstr "ボリューム %s はアクティブではありません。"
 
-#: lib/setup.c:4215
+#: lib/setup.c:4231
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "ボリューム %s は既に停止されています。"
 
-#: lib/setup.c:4241
+#: lib/setup.c:4257
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "デバイス %s の停止はサポートされていません。"
 
-#: lib/setup.c:4243 lib/setup.c:4251
+#: lib/setup.c:4259 lib/setup.c:4267
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "デバイス %s 停止中にエラー。"
 
-#: lib/setup.c:4266
+#: lib/setup.c:4282
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "デバイス %s は停止されましたが、ハードウェア OPAL デバイスはロックできません。"
 
-#: lib/setup.c:4297 lib/setup.c:4491
+#: lib/setup.c:4313 lib/setup.c:4507
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "デバイス %s は再開をサポートしていません。"
 
-#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "デバイス %s の再開中にエラー。"
 
-#: lib/setup.c:4335
+#: lib/setup.c:4351
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "ボリュームキーを指定されたキーリングからアンリンクできません。"
 
-#: lib/setup.c:4457 lib/setup.c:5637
+#: lib/setup.c:4473 lib/setup.c:5653
 msgid "Failed to link volume key in user defined keyring."
 msgstr "ボリュームキーを指定されたキーリングにリンクできません。"
 
-#: lib/setup.c:4556 src/cryptsetup.c:2722
+#: lib/setup.c:4572 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "ボリューム %s は停止されていません。"
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
 #: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
-#: src/utils_reencrypt.c:1969
+#: src/utils_reencrypt.c:1995
 msgid "Volume key does not match the volume."
 msgstr "ボリュームキーがボリュームに合いません。"
 
-#: lib/setup.c:4821
+#: lib/setup.c:4837
 msgid "Failed to swap new key slot."
 msgstr "新しいキースロットを交換できませんでした。"
 
-#: lib/setup.c:4919
+#: lib/setup.c:4935
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "キースロット %d は不正です。"
 
-#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
 #: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "キースロット %d は非アクティブです。"
 
-#: lib/setup.c:4944
+#: lib/setup.c:4960
 msgid "Device header overlaps with data area."
 msgstr "デバイスヘッダがデータ領域に重なっています。"
 
-#: lib/setup.c:5165
+#: lib/setup.c:5181
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "既に再暗号化中です。デバイスをアクティベートできません。"
 
-#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
 #: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "再暗号化ロックを取得できません。"
 
-#: lib/setup.c:5189
+#: lib/setup.c:5205
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "ボリュームキーを使った LUKS2 の再暗号化のリカバリに失敗しました。"
 
-#: lib/setup.c:5325
+#: lib/setup.c:5341
 #, c-format
 msgid "Device %s already exists."
 msgstr "デバイス %s は既に存在します。"
 
-#: lib/setup.c:5332
+#: lib/setup.c:5348
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "デバイス %s を使えません。名前が不正か使用中です。"
 
-#: lib/setup.c:5344
+#: lib/setup.c:5360
 msgid "Reencryption volume keys do not match the volume."
 msgstr "再暗号化ボリュームキーがボリュームに合いません。"
 
-#: lib/setup.c:5361
+#: lib/setup.c:5377
 msgid "Incorrect volume key specified for plain device."
 msgstr "正しくないボリュームキーがプレーンデバイスに指定されました。"
 
-#: lib/setup.c:5387 lib/setup.c:5448
+#: lib/setup.c:5403 lib/setup.c:5464
 msgid "Device type is not properly initialized."
 msgstr "デバイスタイプが正しく初期化されていません。"
 
-#: lib/setup.c:5486
+#: lib/setup.c:5502
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "カーネルがカーネルキーリングをサポートしていません。"
 
-#: lib/setup.c:5490
+#: lib/setup.c:5506
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "署名をカーネルに渡すのに必要なカーネルキーリングをカーネルがサポートしていません。"
 
-#: lib/setup.c:5545
+#: lib/setup.c:5561
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "キーリングキー %s が使えません。"
 
-#: lib/setup.c:5758
+#: lib/setup.c:5774
 msgid "Incorrect root hash specified for verity device."
 msgstr "正しくないルートハッシュが verity デバイスに指定されました。"
 
-#: lib/setup.c:5799 lib/setup.c:5824
+#: lib/setup.c:5815 lib/setup.c:5840
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL は遅延デアクティベーションをサポートしていません。"
 
-#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "デバイス %s は使用中です。"
 
-#: lib/setup.c:5832
+#: lib/setup.c:5848
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "デバイス %s からの遅延削除をキャンセルできませんでした。"
 
-#: lib/setup.c:5854
+#: lib/setup.c:5870
 #, c-format
 msgid "Invalid device %s."
 msgstr "デバイス %s は不正です。"
 
-#: lib/setup.c:6001
+#: lib/setup.c:6017
 msgid "Volume key buffer too small."
 msgstr "ボリュームキーのバッファが小さすぎます。"
 
-#: lib/setup.c:6012
+#: lib/setup.c:6028
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "LUKS2 デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6021
+#: lib/setup.c:6037
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "LUKS1 デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6035
+#: lib/setup.c:6051
 msgid "Cannot retrieve volume key for plain device."
 msgstr "プレーンデバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6043
+#: lib/setup.c:6059
 msgid "Cannot retrieve root hash for verity device."
 msgstr "verity デバイスのルートハッシュが読み出せません。"
 
-#: lib/setup.c:6052
+#: lib/setup.c:6068
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "BITLK デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6057
+#: lib/setup.c:6073
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "FVAULT2 デバイス向けのボリュームキーが取得できません。"
 
-#: lib/setup.c:6059
+#: lib/setup.c:6075
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "この操作は %s 暗号化デバイスではサポートされていません。"
 
-#: lib/setup.c:6244 lib/setup.c:6255
+#: lib/setup.c:6260 lib/setup.c:6271
 msgid "Dump operation is not supported for this device type."
 msgstr "このデバイスタイプはダンプ操作をサポートしていません。"
 
-#: lib/setup.c:6635
+#: lib/setup.c:6651
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "データオフセットが %u バイトの倍数である必要があります。"
 
-#: lib/setup.c:6943
+#: lib/setup.c:6959
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "使用中のデバイス %s を変換できません。"
 
-#: lib/setup.c:7251 lib/setup.c:7406
+#: lib/setup.c:7267 lib/setup.c:7422
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "新しいボリュームキー向けのキースロット %u を確保できません。"
 
-#: lib/setup.c:7275
+#: lib/setup.c:7291
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "デフォルト LUKS2 キースロットパラメータを初期化できません。"
 
-#: lib/setup.c:7281
+#: lib/setup.c:7297
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "ダイジェストするためのキースロット %d が確保できません。"
 
-#: lib/setup.c:7523
+#: lib/setup.c:7539
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "キースロットを追加できません。全てのスロットが無効でボリュームキーが渡されませんでした。"
 
-#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "キーをカーネルキーリングにロードできません。"
 
-#: lib/setup.c:7807
+#: lib/setup.c:7823
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "キーリング \"%s\" が見つかりませんでした。"
 
-#: lib/setup.c:7872
+#: lib/setup.c:7888
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "グローバル memory-hard アクセス直列化ロックが取れません。"
 
@@ -785,7 +785,7 @@ msgid "Cannot read requested amount of data."
 msgstr "指定されたサイズのデータを読み込めません。"
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "デバイス %s は存在しないかアクセスが拒否されました。"
@@ -901,16 +901,16 @@ msgstr "要求された PBKDF 並列スレッド数は 0 ではいけません
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "FIPS モードでは PBKDF2 しかサポートしていません。"
 
-#: lib/utils_benchmark.c:171
+#: lib/utils_benchmark.c:175
 msgid "PBKDF benchmark disabled but iterations not set."
 msgstr "PBKDF ベンチマークが無効ですが繰り返し回数が設定されていません。"
 
-#: lib/utils_benchmark.c:190
+#: lib/utils_benchmark.c:194
 #, c-format
 msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr "PBKDF2 と互換性のないオプションです (ハッシュアルゴリズム %s)。"
 
-#: lib/utils_benchmark.c:210
+#: lib/utils_benchmark.c:214
 msgid "Not compatible PBKDF options."
 msgstr "互換性のない PBKDF オプションです。"
 
@@ -959,9 +959,9 @@ msgstr "XTS モードのキーサイズは 256 か 512 ビットでなければ
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "暗号の指定は [暗号]-[モード]-[初期ベクタ] という形式であるべきです。"
 
-#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
-#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "デバイス %s に書き込めません。パーミッションがありません。"
@@ -979,13 +979,13 @@ msgstr "一時的なキーストアデバイスにアクセスできません。
 msgid "IO error while encrypting keyslot."
 msgstr "キースロットを暗号化中にI/Oエラーが発生しました。"
 
-#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
@@ -1000,61 +1000,61 @@ msgstr "キースロットを復号化中にI/Oエラーが発生しました。
 msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr "デバイス %s が小さすぎます。(LUKS1 は最低でも %<PRIu64> バイト必要です。)"
 
-#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
-#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
-#: lib/luks1/keymanage.c:181
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
 #, c-format
 msgid "LUKS keyslot %u is invalid."
 msgstr "LUKS キースロット %u は不正です。"
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "要求されたヘッダバックアップファイル %s は既に存在しています。"
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "ヘッダバックアップファイル %s が作成できません。"
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "ヘッダバックアップファイル %s に書き込めません。"
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
 msgid "Backup file does not contain valid LUKS header."
 msgstr "バックアップファイルが有効な LUKS ヘッダを含んでいません。"
 
-#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1450
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "ヘッダバックアップファイル %s をオープンできません。"
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "ヘッダバックアップファイル %s を読めません。"
 
-#: lib/luks1/keymanage.c:326
+#: lib/luks1/keymanage.c:331
 msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr "データオフセットかキーサイズがデバイスとバックアップで異なるのでリストアできません。"
 
-#: lib/luks1/keymanage.c:334
+#: lib/luks1/keymanage.c:339
 #, c-format
 msgid "Device %s %s%s"
 msgstr "デバイス %s %s%s"
 
-#: lib/luks1/keymanage.c:335
+#: lib/luks1/keymanage.c:340
 msgid "does not contain LUKS header. Replacing header can destroy data on that device."
 msgstr "LUKS ヘッダが含まれていません。ヘッダを置き換えるとデバイスのデータを破壊する恐れがあります。"
 
-#: lib/luks1/keymanage.c:336
+#: lib/luks1/keymanage.c:341
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "LUKS ヘッダを既に含んでいます。ヘッダを置き換えると既にあるキースロットを破壊します。"
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1062,130 +1062,130 @@ msgstr ""
 "\n"
 "警告: 実デバイスのヘッダはバックアップとUUIDが異なります！"
 
-#: lib/luks1/keymanage.c:385
+#: lib/luks1/keymanage.c:390
 msgid "Non standard key size, manual repair required."
 msgstr "標準的でないキーサイズなので、手動の修復が必要です。"
 
-#: lib/luks1/keymanage.c:395
+#: lib/luks1/keymanage.c:400
 msgid "Non standard keyslots alignment, manual repair required."
 msgstr "標準的でないキースロットアライメントなので、手動の修復が必要です。"
 
-#: lib/luks1/keymanage.c:404
+#: lib/luks1/keymanage.c:409
 #, c-format
 msgid "Cipher mode repaired (%s -> %s)."
 msgstr "暗号モードを修復しました (%s -> %s)。"
 
-#: lib/luks1/keymanage.c:415
+#: lib/luks1/keymanage.c:420
 #, c-format
 msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "暗号ハッシュを小文字に修復しました (%s)。"
 
-#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:756
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "要求された LUKS ハッシュ %s はサポートしていません。"
 
-#: lib/luks1/keymanage.c:431
+#: lib/luks1/keymanage.c:436
 msgid "Repairing keyslots."
 msgstr "キースロットを修復中です。"
 
-#: lib/luks1/keymanage.c:450
+#: lib/luks1/keymanage.c:455
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr "キースロット %i: オフセットを修復 (%u -> %u)."
 
-#: lib/luks1/keymanage.c:458
+#: lib/luks1/keymanage.c:463
 #, c-format
 msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr "キースロット %i: のストライプを修復 (%u -> %u)."
 
-#: lib/luks1/keymanage.c:467
+#: lib/luks1/keymanage.c:472
 #, c-format
 msgid "Keyslot %i: bogus partition signature."
 msgstr "キースロット %i: パーティションの印(signature)がおかしいです。"
 
-#: lib/luks1/keymanage.c:472
+#: lib/luks1/keymanage.c:477
 #, c-format
 msgid "Keyslot %i: salt wiped."
 msgstr "キースロット %i: ソルトを消しました。"
 
-#: lib/luks1/keymanage.c:489
+#: lib/luks1/keymanage.c:494
 msgid "Writing LUKS header to disk."
 msgstr "LUKS ヘッダを書きこんでいます。"
 
-#: lib/luks1/keymanage.c:494
+#: lib/luks1/keymanage.c:499
 msgid "Repair failed."
 msgstr "修復に失敗しました。"
 
-#: lib/luks1/keymanage.c:549
+#: lib/luks1/keymanage.c:554
 #, c-format
 msgid "LUKS cipher mode %s is invalid."
 msgstr "LUKS 暗号モード %s は不正です。"
 
-#: lib/luks1/keymanage.c:554
+#: lib/luks1/keymanage.c:559
 #, c-format
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS ハッシュ %s は不正です。"
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "LUKS ヘッダに既知の不具合は検出されませんでした。"
 
-#: lib/luks1/keymanage.c:689
+#: lib/luks1/keymanage.c:690
 #, c-format
 msgid "Error during update of LUKS header on device %s."
 msgstr "デバイス %s の LUKS ヘッダを更新中にエラーが発生しました。"
 
-#: lib/luks1/keymanage.c:697
+#: lib/luks1/keymanage.c:698
 #, c-format
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "デバイス %s の LUKS ヘッダを更新後の再読み込み中にエラーが発生しました。"
 
-#: lib/luks1/keymanage.c:750
+#: lib/luks1/keymanage.c:751
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "LUKS ヘッダのデータへのオフセットは 0 かヘッダサイズより大きくなければいけません。"
 
-#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
-#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "LUKS UUID の形式が間違っています。"
 
-#: lib/luks1/keymanage.c:783
+#: lib/luks1/keymanage.c:784
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "LUKS ヘッダを作成できません: ランダムなソルトを読み込めません。"
 
-#: lib/luks1/keymanage.c:811
+#: lib/luks1/keymanage.c:812
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "LUKS ヘッダを作成できません: ヘッダのハッシュが求められません (ハッシュには %s を使用)。"
 
-#: lib/luks1/keymanage.c:856
+#: lib/luks1/keymanage.c:857
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "キースロット %d が使用中なので、パージしてください。"
 
-#: lib/luks1/keymanage.c:862
+#: lib/luks1/keymanage.c:863
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "キースロット %d のストライプが少なすぎます。ヘッダを細工でもしましたか？"
 
-#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "PBKDF2 イテレーション回数がオーバーフローしました。"
 
-#: lib/luks1/keymanage.c:1022
+#: lib/luks1/keymanage.c:1023
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "キースロットをオープンできません (ハッシュ %s を使用)。"
 
-#: lib/luks1/keymanage.c:1118
+#: lib/luks1/keymanage.c:1119
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "キースロット %d は不正です。0 から %d の間を選んでください。"
 
-#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "デバイス %s をワイプできません。"
@@ -1363,33 +1363,33 @@ msgstr "この操作はサポートされていません。"
 msgid "Unexpected key data size."
 msgstr "予期しないキーデータサイズです。"
 
-#: lib/bitlk/bitlk.c:1442
+#: lib/bitlk/bitlk.c:1448
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "この BITLK デバイスはサポートされてない状態にあるためアクティベートできません。"
 
-#: lib/bitlk/bitlk.c:1447
+#: lib/bitlk/bitlk.c:1453
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "タイプ '%s' の BITLK デバイスはアクティベートできません。"
 
-#: lib/bitlk/bitlk.c:1486
+#: lib/bitlk/bitlk.c:1492
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "警告: BitLocker ボリュームサイズ %<PRIu64> がデバイスサイズ %<PRIu64> と一致しません"
 
-#: lib/bitlk/bitlk.c:1613
+#: lib/bitlk/bitlk.c:1634
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "カーネルの dm-crypt が BITLK IV をサポートしていないためデバイスをアクティベートできません。"
 
-#: lib/bitlk/bitlk.c:1617
+#: lib/bitlk/bitlk.c:1638
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "カーネルの dm-crypt が BITLK Elephant diffuser をサポートしていないためデバイスをアクティベートできません。"
 
-#: lib/bitlk/bitlk.c:1621
+#: lib/bitlk/bitlk.c:1642
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "カーネルの dm-crypt がラージセクタサイズをサポートしていないためデバイスをアクティベートできません。"
 
-#: lib/bitlk/bitlk.c:1625
+#: lib/bitlk/bitlk.c:1646
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "カーネルの dm-zero モジュールがないためデバイスをアクティベートできません。"
 
@@ -1546,24 +1546,24 @@ msgstr "デバイス %s のサイズが不明です。"
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "互換性のないカーネルの dm-integrity のメタデータ (バージョン %u) が %s に検出されました。"
 
-#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "カーネルが dm-integrity マッピングをサポートしていません。"
 
-#: lib/integrity/integrity.c:314
+#: lib/integrity/integrity.c:315
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "カーネルが dm-integrity 固定メタデータアラインメントをサポートしていません。"
 
-#: lib/integrity/integrity.c:323
+#: lib/integrity/integrity.c:324
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "カーネルが安全でない再計算オプションを拒否しました (レガジーアクティベーションオプションでオーバーライドできます)。"
 
-#: lib/integrity/integrity.c:329
+#: lib/integrity/integrity.c:330
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "カーネルが dm-integrity インラインモードをサポートしていません。"
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1510
+#: lib/luks2/luks2_json_metadata.c:1502
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "デバイス %s の書き込みのためのロックを取得できませんでした。"
@@ -1585,22 +1585,22 @@ msgstr ""
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "警告: キースロット領域 (%<PRIu64> バイト) がとても小さいため、利用可能な LUKS2 キースロット数が制限されます。\n"
 
-#: lib/luks2/luks2_json_format.c:418
+#: lib/luks2/luks2_json_format.c:427
 msgid "Requested data offset is too small."
 msgstr "要求されたデータオフセットが小さすぎます。"
 
-#: lib/luks2/luks2_json_format.c:459
+#: lib/luks2/luks2_json_format.c:468
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "警告: LUKS2 メタデータサイズが %<PRIu64> バイトに変更されました。\n"
 
-#: lib/luks2/luks2_json_format.c:463
+#: lib/luks2/luks2_json_format.c:472
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "警告: LUKS2 キースロット領域サイズが %<PRIu64> バイトに変更されました。\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "デバイス %s の読み込みのためのロックを取得できませんでした。"
@@ -1609,33 +1609,33 @@ msgstr "デバイス %s の読み込みのためのロックを取得できま
 msgid "Label is too long."
 msgstr "ラベルが長すぎます。"
 
-#: lib/luks2/luks2_json_metadata.c:1435
+#: lib/luks2/luks2_json_metadata.c:1427
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "禁止された LUKS2 要求がバックアップ %s に検出されました。"
 
-#: lib/luks2/luks2_json_metadata.c:1474
+#: lib/luks2/luks2_json_metadata.c:1466
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "データオフセットがデバイスとバックアップと異なるため修復できません。"
 
-#: lib/luks2/luks2_json_metadata.c:1480
+#: lib/luks2/luks2_json_metadata.c:1472
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "キースロット領域のあるバイナリヘッダのサイズがデバイスとバックアップで異なるため修復できません。"
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1479
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "デバイス %s %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "LUKS2 ヘッダが含まれていません。ヘッダを置き換えるとデータを破壊しかねません。"
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1481
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "既に LUKS2 ヘッダがあります。ヘッダを置き換えると既にあるキースロットを破壊します。"
 
-#: lib/luks2/luks2_json_metadata.c:1491
+#: lib/luks2/luks2_json_metadata.c:1483
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1645,7 +1645,7 @@ msgstr ""
 "警告: 不明な LUKS2 への要求がリアルデバイスヘッダにあります！\n"
 "ヘッダをバックアップで置き換えるとデータを破壊する恐れがあります！"
 
-#: lib/luks2/luks2_json_metadata.c:1493
+#: lib/luks2/luks2_json_metadata.c:1485
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1655,84 +1655,84 @@ msgstr ""
 "警告: オフラインの再暗号化が終了していません！\n"
 "ヘッダを置き換えるとデータを破壊しかねません。"
 
-#: lib/luks2/luks2_json_metadata.c:1591
+#: lib/luks2/luks2_json_metadata.c:1583
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "不明なフラグ %s を無視しました。"
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "dm-crypt セグメント %u にキーがありません"
 
-#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "dm-crypt セグメントの設定に失敗しました。"
 
-#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "dm-linear セグメントの設定に失敗しました。"
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "LUKS2 ヘッダに既知の暗号スペックパターンを検出できませんでした。"
 
-#: lib/luks2/luks2_json_metadata.c:2709
+#: lib/luks2/luks2_json_metadata.c:2701
 msgid "OPAL device must have static device size."
 msgstr "OPAL デバイスは固定デバイスサイズでなければなりません。"
 
-#: lib/luks2/luks2_json_metadata.c:2729
+#: lib/luks2/luks2_json_metadata.c:2721
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "整合性が有効な暗号化 OPAL デバイスはロックレンジより小さくなければなりません。"
 
-#: lib/luks2/luks2_json_metadata.c:2734
+#: lib/luks2/luks2_json_metadata.c:2726
 msgid "OPAL device must have same size as locking range."
 msgstr "OPAL デバイスはロックレンジと同じサイズでなければなりません。"
 
-#: lib/luks2/luks2_json_metadata.c:2754
+#: lib/luks2/luks2_json_metadata.c:2746
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "OPAL デバイス %s は既にアンロックされています。\n"
 
-#: lib/luks2/luks2_json_metadata.c:2793
+#: lib/luks2/luks2_json_metadata.c:2785
 msgid "Unsupported device integrity configuration."
 msgstr "サポートしていないデバイス整合性設定です。"
 
-#: lib/luks2/luks2_json_metadata.c:2809
+#: lib/luks2/luks2_json_metadata.c:2801
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "dm-integrity デバイスがデータセクタに対して期待通りではありません。"
 
-#: lib/luks2/luks2_json_metadata.c:2911
+#: lib/luks2/luks2_json_metadata.c:2903
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "再暗号化が実行中なのでデバイスのデアクティベートできません。. Cannot deactivate device."
 
-#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "サスペンドされたデバイス %s を dm-error ターゲットで置き換えられません。"
 
-#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "デバイス %s はデアクティベートされましたが、ハードウェア OPAL デバイスはロックできません。"
 
-#: lib/luks2/luks2_json_metadata.c:3045
+#: lib/luks2/luks2_json_metadata.c:3037
 msgid "Unmet LUKS2 requirements detected."
 msgstr "満たせない LUKS2 の必要条件があります。"
 
-#: lib/luks2/luks2_json_metadata.c:3053
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "操作がレガシー再暗号化とマークされたデバイスと互換性がありません。中止します。"
 
-#: lib/luks2/luks2_json_metadata.c:3055
+#: lib/luks2/luks2_json_metadata.c:3047
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "操作が LUKS2 再暗号化とマークされたデバイスと互換性がありません。中止します。"
 
-#: lib/luks2/luks2_json_metadata.c:3057
+#: lib/luks2/luks2_json_metadata.c:3049
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "操作が OPAL を用いたデバイスと互換性がありません。中止します。"
 
-#: lib/luks2/luks2_json_metadata.c:3059
+#: lib/luks2/luks2_json_metadata.c:3051
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "操作がインラインHWタグを用いたデバイスと互換性がありません。中止します。"
 
@@ -1799,60 +1799,60 @@ msgstr "暗号スペック %s-%s は LUKS2 キースロットに使えません
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "領域が足りないのでキースロット領域を動かせません。"
 
-#: lib/luks2/luks2_luks1_convert.c:619
+#: lib/luks2/luks2_luks1_convert.c:627
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "LUKS2 形式に変換できません - メタデータが不正です。"
 
-#: lib/luks2/luks2_luks1_convert.c:636
+#: lib/luks2/luks2_luks1_convert.c:644
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "LUKS2 キースロット領域が足りないのでキースロット領域を動かせません。"
 
-#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
 msgid "Unable to move keyslot area."
 msgstr "キースロット領域を動かせません。"
 
-#: lib/luks2/luks2_luks1_convert.c:757
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "LUKS1 形式に変換できません - デフォルトの暗号セクタサイズが 512 バイトではありません。"
 
-#: lib/luks2/luks2_luks1_convert.c:765
+#: lib/luks2/luks2_luks1_convert.c:773
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "LUKS1 形式に変換できません - キースロットのハッシュ関数が LUKS1 互換ではありません。"
 
-#: lib/luks2/luks2_luks1_convert.c:779
+#: lib/luks2/luks2_luks1_convert.c:787
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "LUKS1 形式に変換できません - ラップされたキーの暗号に %s が使われています。"
 
-#: lib/luks2/luks2_luks1_convert.c:784
+#: lib/luks2/luks2_luks1_convert.c:792
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "LUKS1 形式に変換できません - デバイスが多くのセグメントを使っています。"
 
-#: lib/luks2/luks2_luks1_convert.c:792
+#: lib/luks2/luks2_luks1_convert.c:800
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "LUKS1 形式に変換できません - LUKS2 ヘッダ %u 個のトークンを含んでいます。"
 
-#: lib/luks2/luks2_luks1_convert.c:798
+#: lib/luks2/luks2_luks1_convert.c:806
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "LUKS1 形式に変換できません - アクティブなキースロットがありません。"
 
-#: lib/luks2/luks2_luks1_convert.c:810
+#: lib/luks2/luks2_luks1_convert.c:818
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "LUKS1 形式に変換できません - キースロット %u が不正な状態です。"
 
-#: lib/luks2/luks2_luks1_convert.c:815
+#: lib/luks2/luks2_luks1_convert.c:823
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "LUKS1 形式に変換できません - キースロット %u が unbound です。"
 
-#: lib/luks2/luks2_luks1_convert.c:820
+#: lib/luks2/luks2_luks1_convert.c:828
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "LUKS1 形式に変換できません - スロット %u が(最大個数を超過して)有効です。"
 
-#: lib/luks2/luks2_luks1_convert.c:825
+#: lib/luks2/luks2_luks1_convert.c:833
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "LUKS1 形式に変換できません - キースロット %u が LUKS1 と互換ではありません。"
@@ -2137,7 +2137,7 @@ msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encry
 msgstr "キースロットの暗号化パラメータは LUKS2 キースロット暗号化と互換性がありません。"
 
 #: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
-#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "未知の暗号スペックです。"
@@ -2165,7 +2165,7 @@ msgid "WARNING: The --keyfile-size option is being ignored, the read size is the
 msgstr "警告: --keyfile-size オプションは無視されて、読み込みサイズは暗号鍵のサイズと同じになります。\n"
 
 #: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
-#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "%s の Blkid スキャンが失敗しました。"
@@ -2245,7 +2245,7 @@ msgstr "デバイス %s は有効な FVAULT2 デバイスではありません
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "FVAULT2 のボリュームキーサイズが決定できないので、--key-size を使ってください。"
 
-#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "デバイス %s はまたアクティブで後から削除される予定になっています。.\n"
@@ -2434,7 +2434,7 @@ msgid "LUKS file container %s is too small for activation, there is no remaining
 msgstr "LUKS ファイルコンテナ %s がアクティベートするには小さすぎます。データ用の領域に空きがありません。"
 
 #: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
-#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "キースロットのない LUKS のボリュームキーサイズが決定できないので、--key-size を使ってください。"
 
@@ -2729,7 +2729,7 @@ msgstr "--volume-key-keyring オプションは --hash や --volume-key-file と
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "--volume-key-file オプションは対応する --key-size オプションとペアになる必要があります。"
 
-#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "オプション --cancel-deferred と --deferred は同時に使えません。"
 
@@ -2797,21 +2797,21 @@ msgstr "特定のキースロットを必要としています。--key-slot を
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<デバイス> [--type <タイプ>] [<名前>]"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
 msgid "open device as <name>"
 msgstr "デバイスを <名前> としてオープン"
 
 #: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
-#: src/integritysetup.c:562 src/integritysetup.c:564
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
 msgid "<name>"
 msgstr "<名前>"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
 msgid "close device (remove mapping)"
 msgstr "デバイスをクローズします (マッピングを削除します)"
 
-#: src/cryptsetup.c:3484 src/integritysetup.c:564
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
 msgid "resize active device"
 msgstr "アクティブデバイスをリサイズ"
 
@@ -2939,7 +2939,7 @@ msgstr "<add|remove|import|export> <デバイス>"
 msgid "Manipulate LUKS2 tokens"
 msgstr "LUKS2 トークンを操作します"
 
-#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3040,7 +3040,7 @@ msgstr ""
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: XTS モードのデフォルトキーサイズは (2つの内部キーがあるため) 倍になります。\n"
 
-#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: は %s を引数で与える必要があります"
@@ -3091,31 +3091,31 @@ msgstr "--priority の引数は ignore/normal/prefer のいずれかのみです
 msgid "Invalid maximal tries specification."
 msgstr "最大試行回数の指定が不正です。"
 
-#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
 msgid "Show this help message"
 msgstr "このヘルプを表示します"
 
-#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
 msgid "Display brief usage"
 msgstr "コンパクトな使用法表示をします"
 
-#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
 msgid "Print package version"
 msgstr "パッケージのバージョンを表示"
 
-#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
 msgid "Help options:"
 msgstr "ヘルプオプション:"
 
-#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[オプション...] <アクション> <アクション特有>"
 
-#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
 msgid "Argument <action> missing."
 msgstr "<アクション> がありません。"
 
-#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
 msgid "Unknown action."
 msgstr "未知のアクションです。"
 
@@ -3220,7 +3220,7 @@ msgstr "コマンドは <root_hash> か --root-hash-file オプションを引
 msgid "<data_device> <hash_device>"
 msgstr "<データデバイス> <ハッシュデバイス>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:559
+#: src/veritysetup.c:485 src/integritysetup.c:562
 msgid "format device"
 msgstr "デバイスをフォーマット"
 
@@ -3236,7 +3236,7 @@ msgstr "デバイスを検証"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<データデバイス> <名前> <ハッシュデバイス> [<ルートハッシュ>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:562
+#: src/veritysetup.c:489 src/integritysetup.c:565
 msgid "show active device status"
 msgstr "アクティブデバイスのステータスを表示"
 
@@ -3244,7 +3244,7 @@ msgstr "アクティブデバイスのステータスを表示"
 msgid "<hash_device>"
 msgstr "<ハッシュデバイス>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:563
+#: src/veritysetup.c:490 src/integritysetup.c:566
 msgid "show on-disk information"
 msgstr "ディスク上の情報を表示"
 
@@ -3308,20 +3308,20 @@ msgstr " (インラインHWタグ)"
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "再計算フラグの設定はサポートされていません。代わりに --wipe を使うことを検討してください。"
 
-#: src/integritysetup.c:382 src/integritysetup.c:546
+#: src/integritysetup.c:382 src/integritysetup.c:549
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "デバイス %s が有効な INTEGRITY デバイスではありません。"
 
-#: src/integritysetup.c:559 src/integritysetup.c:563
+#: src/integritysetup.c:562 src/integritysetup.c:566
 msgid "<integrity_device>"
 msgstr "<整合性デバイス>"
 
-#: src/integritysetup.c:560
+#: src/integritysetup.c:563
 msgid "<integrity_device> <name>"
 msgstr "<整合性デバイス> <名前>"
 
-#: src/integritysetup.c:583
+#: src/integritysetup.c:586
 #, c-format
 msgid ""
 "\n"
@@ -3332,7 +3332,7 @@ msgstr ""
 "<名前> は %s に作られるデバイス\n"
 "<整合性デバイス> は整合性タグを格納するデバイス\n"
 
-#: src/integritysetup.c:588
+#: src/integritysetup.c:591
 #, c-format
 msgid ""
 "\n"
@@ -3345,51 +3345,55 @@ msgstr ""
 "\tチェックサムアルゴリズム: %s\n"
 "        最大キーファイルサイズ: %dkB\n"
 
-#: src/integritysetup.c:645
+#: src/integritysetup.c:648
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "不正な --%s サイズです。最大は %u バイトです。"
 
-#: src/integritysetup.c:748
+#: src/integritysetup.c:751
 msgid "Both key file and key size options must be specified."
 msgstr "キーファイルとキーサイズの両方の指定が必要です。"
 
-#: src/integritysetup.c:752
+#: src/integritysetup.c:755
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "ジャーナル整合性キーファイルとキーサイズの両方の指定が必要です。"
 
-#: src/integritysetup.c:755
+#: src/integritysetup.c:758
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "ジャーナル整合性キーを使う場合はアルゴリズムの指定が必要です。"
 
-#: src/integritysetup.c:759
+#: src/integritysetup.c:762
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "ジャーナル暗号キーファイルとキーサイズの両方の指定が必要です。"
 
-#: src/integritysetup.c:762
+#: src/integritysetup.c:765
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "ジャーナル暗号キーを使う場合はアルゴリズムの指定が必要です。"
 
-#: src/integritysetup.c:766
+#: src/integritysetup.c:769
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "リカバリと bitmap モードオプションは同時には使えません。"
 
-#: src/integritysetup.c:773
+#: src/integritysetup.c:776
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "ジャーナルオプションは bitmap モードでは使えません。"
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:781
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "bitmap オプションは bitmap モードでしか使えません。"
 
-#: src/integritysetup.c:784
+#: src/integritysetup.c:787
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "インラインモードは journal や bitmap オプションと一緒に使えません。"
 
-#: src/integritysetup.c:788
+#: src/integritysetup.c:791
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "インラインモードは分離データデバイスと一緒には使えません。"
 
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "キーありディスカードはHMACなどのキーを使ったアルゴリズムでのみ有効にできます。"
+
 #: src/utils_tools.c:105
 msgid ""
 "\n"
@@ -3740,7 +3744,7 @@ msgstr "デバイスは LUKS2 復号状態にありません。オプション -
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "デバイスはデータシフト耐性を使った再暗号化状態にあります。--resilience オプションは適用できません。"
 
-#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "キースロットのない LUKS のボリュームキーサイズが決定できないので、--new-key-size を使ってください。"
 
@@ -3774,7 +3778,7 @@ msgstr ""
 "要求された --sector-size %<PRIu32> は %s superblock\n"
 "(ブロックサイズ: %<PRIu32> バイト、デバイス %s)と互換性がありません。"
 
-#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "データデバイスサイズの縮小(--reduce-device-size)なしに分離ヘッダ(--header)による暗号化はできません。"
 
@@ -3842,42 +3846,43 @@ msgstr "再暗号化の初期化に失敗しました。ヘッダのバックア
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "LUKS2 復号は分離(detached)ヘッダデバイスしかサポートしていません(データへのオフセットが0)。"
 
-#: src/utils_reencrypt.c:1490
-msgid "No token could unlock the device."
-msgstr "デバイスをアンロックできるトークンがありません。"
-
-#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
 msgid "Not enough free keyslots for reencryption."
 msgstr "再暗号化に必要な空きキースロットがありません。"
 
-#: src/utils_reencrypt.c:1562
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "デバイスをアンロックできるトークンがありません。"
+
+#: src/utils_reencrypt.c:1588
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "キーファイルやキーリングキー記述は --key-slot と使うか、1 つのキースロットだけアクティブの時にしか使えません。"
 
-#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "キースロット %d のパスフレーズを入力してください: "
 
-#: src/utils_reencrypt.c:1879
+#: src/utils_reencrypt.c:1905
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "データの暗号化用の暗号アルゴリズムを %s にします。\n"
 
-#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "アクティブキースロットがあるデバイスを再暗号化するには --force-no-keyslots を使いボリュームキーを直接渡してください。"
 
-#: src/utils_reencrypt.c:1996
+#: src/utils_reencrypt.c:2022
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "--new-volume-key-file オプションは --new-key-size とペアにする必要があります。"
 
-#: src/utils_reencrypt.c:2038
+#: src/utils_reencrypt.c:2064
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "データセグメントのパラメータが変わっていません。再暗号化を中止します。"
 
-#: src/utils_reencrypt.c:2075
+#: src/utils_reencrypt.c:2101
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3885,7 +3890,7 @@ msgstr ""
 "オフラインデバイスの暗号化セクタサイズの増加はサポートしていません。\n"
 "まずデバイスをアクティベートするか、--force-offline-reencrypt オプションを使ってください (ただし危険です！)。"
 
-#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3894,58 +3899,58 @@ msgstr ""
 "\n"
 "再暗号化が中断されました。"
 
-#: src/utils_reencrypt.c:2122
+#: src/utils_reencrypt.c:2148
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "LUKS 再暗号化を強制オフラインモードで再開します。\n"
 
-#: src/utils_reencrypt.c:2145
+#: src/utils_reencrypt.c:2171
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "デバイス %s は壊れた LUKS メタデータを含んでいます。処理を中止します。"
 
-#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "デバイス %s は既に LUKS デバイスです。処理を中止します。"
 
-#: src/utils_reencrypt.c:2189
+#: src/utils_reencrypt.c:2215
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "デバイス %s は既に LUKS 再暗号化状態にあります。処理を中止します。"
 
-#: src/utils_reencrypt.c:2272
+#: src/utils_reencrypt.c:2298
 msgid "LUKS2 decryption requires --header option."
 msgstr "LUKS2 復号には --header オプションが必要です。"
 
-#: src/utils_reencrypt.c:2320
+#: src/utils_reencrypt.c:2346
 msgid "Command requires device as argument."
 msgstr "コマンドはデバイスを引数として必要とします。"
 
-#: src/utils_reencrypt.c:2333
+#: src/utils_reencrypt.c:2359
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "バージョンが衝突しています。デバイス %s は LUKS1 です。"
 
-#: src/utils_reencrypt.c:2339
+#: src/utils_reencrypt.c:2365
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "バージョンが衝突しています。デバイス %s は LUKS1 再暗号化状態にあります。"
 
-#: src/utils_reencrypt.c:2345
+#: src/utils_reencrypt.c:2371
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "バージョンが衝突しています。デバイス %s は LUKS2 です。"
 
-#: src/utils_reencrypt.c:2351
+#: src/utils_reencrypt.c:2377
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "バージョンが衝突しています。デバイス %s は LUKS2 再暗号化状態にあります。"
 
-#: src/utils_reencrypt.c:2357
+#: src/utils_reencrypt.c:2383
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "LUKS2 再暗号化が既に初期化済なので操作を中止します。"
 
-#: src/utils_reencrypt.c:2364
+#: src/utils_reencrypt.c:2390
 msgid "Device reencryption not in progress."
 msgstr "再暗号化処理を実行中ではありません。"
 

From c8e72acaec5556294fa0c1397993b7176047c3d9 Mon Sep 17 00:00:00 2001
From: Seong-ho Cho <darkcircle.0426@gmail.com>
Date: Fri, 4 Sep 2026 18:57:03 +0200
Subject: [PATCH 209/244] po: update ko.po (from translationproject.org)

---
 po/ko.po | 659 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 332 insertions(+), 327 deletions(-)

diff --git a/po/ko.po b/po/ko.po
index 68a9dca65..c4458dc1a 100644
--- a/po/ko.po
+++ b/po/ko.po
@@ -6,10 +6,10 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
+"Project-Id-Version: cryptsetup 2.8.8-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-07-09 10:46+0200\n"
-"PO-Revision-Date: 2026-07-13 11:02+0900\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-02 23:13+0900\n"
 "Last-Translator: Seong-ho Cho <darkcircle.0426@gmail.com>\n"
 "Language-Team: Korean <translation-team-ko@googlegroups.com>\n"
 "Language: ko_KR\n"
@@ -17,80 +17,80 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "X-Bugs: Report translation errors to the Language-Team address.\n"
-"X-Generator: Poedit 3.6\n"
+"X-Generator: Poedit 3.7\n"
 
-#: lib/libdevmapper.c:419
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "device-mapper를 초기화할 수 없어, 일반 사용자로 실행합니다."
 
-#: lib/libdevmapper.c:422
+#: lib/libdevmapper.c:425
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "device-mapper를 초기화할 수 없습니다. dm_mod 커널 모듈을 불러왔습니까?"
 
-#: lib/libdevmapper.c:1125
+#: lib/libdevmapper.c:1129
 msgid "Requested deferred flag is not supported."
 msgstr "요청한 유예 플래그는 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1194
+#: lib/libdevmapper.c:1198
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "%s 장치의 DM-UUID가 잘렸습니다."
 
-#: lib/libdevmapper.c:1598
+#: lib/libdevmapper.c:1602
 msgid "Unknown dm target type."
 msgstr "알 수 없는 dm 대상 형식입니다."
 
-#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
-#: lib/libdevmapper.c:1853
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "요청한 dm-crypt 성능 옵션을 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "요청한 dm-verity 데이터 손상 처리 옵션을 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1752
+#: lib/libdevmapper.c:1756
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "요청한 dm-verity 작업 처리 옵션을 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1764
+#: lib/libdevmapper.c:1768
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "요청한 dm-verity FEC 옵션을 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1770
+#: lib/libdevmapper.c:1774
 msgid "Requested data integrity options are not supported."
 msgstr "요청한 데이터 무결성 옵션을 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1774
+#: lib/libdevmapper.c:1778
 msgid "Requested sector_size option is not supported."
 msgstr "요청한 sector_size 옵션을 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1779
+#: lib/libdevmapper.c:1783
 msgid "The device size is not multiple of the requested sector size."
 msgstr "장치 용량은 요청한 섹터 용량의 배수가 아닙니다."
 
-#: lib/libdevmapper.c:1783
+#: lib/libdevmapper.c:1787
 msgid "Requested integrity_key_size option is not supported."
 msgstr "요청한 integrity_key_size 옵션을 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "요청한 무결성 태그 자동 재계산을 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2799
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Discard/TRIM is not supported."
 msgstr "버림/TRIM을 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1808
+#: lib/libdevmapper.c:1812
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "요청한 dm-integrity 비트맵 모드를 지원하지 않습니다."
 
-#: lib/libdevmapper.c:1814
+#: lib/libdevmapper.c:1818
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr "요청한 dm-integrity 인라인 모드를 지원하지 않습니다."
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2877
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "dm-%s 세그먼트 요청 실패."
@@ -141,7 +141,7 @@ msgstr "암호화 RNG 백엔드를 초기화할 수 없습니다."
 msgid "Cannot initialize crypto backend."
 msgstr "암호화 백엔드를 초기화할 수 없습니다."
 
-#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "%s 해싱 알고리즘을 지원하지 않습니다."
@@ -155,7 +155,7 @@ msgstr "키 처리 오류 (%s 해시 사용)."
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "장치 형식을 확인할 수 없습니다. 장치 활성 방식에 호환성이 없습니까?"
 
-#: lib/setup.c:398 lib/setup.c:4177
+#: lib/setup.c:398 lib/setup.c:4193
 msgid "This operation is supported only for LUKS device."
 msgstr "이 동작은 LUKS 장치에서만 지원합니다."
 
@@ -177,7 +177,7 @@ msgstr "키 슬롯 번호 %d번이 적절하지 않습니다. 0과 %d 사이의
 msgid "Key slot %d is full, please select another one."
 msgstr "키 슬롯 %d번이 가득 찼습니다. 다른 번호를 선택하십시오."
 
-#: lib/setup.c:534 lib/setup.c:3878
+#: lib/setup.c:534 lib/setup.c:3888
 msgid "Device size is not aligned to device logical block size."
 msgstr "장치 용량이 장치 논리 블록 용량에 맞지 않습니다."
 
@@ -186,7 +186,7 @@ msgstr "장치 용량이 장치 논리 블록 용량에 맞지 않습니다."
 msgid "Header detected but device %s is too small."
 msgstr "헤더를 확인했지만 %s 장치 용량이 너무 작습니다."
 
-#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
 #: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "이 동작은 이 장치 형식에서 지원하지 않습니다."
@@ -199,553 +199,553 @@ msgstr "재 암호화 처리 과정에서 부적절한 동작을 확인했습니
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "메모리에서 LUKS2 메타데이터 되돌리기 실패."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
 #: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
 #: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
 #: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
-#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "%s 장치는 올바른 LUKS 장치가 아닙니다."
 
-#: lib/setup.c:899 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "지원하지 않는 %d 버전의 LUKS입니다."
 
-#: lib/setup.c:1273
+#: lib/setup.c:1279
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "%s 활성 장치에서 알려진 암호화 명세 패턴이 없습니다."
 
-#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
-#: lib/setup.c:3786 lib/setup.c:5850
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
 #, c-format
 msgid "Device %s is not active."
 msgstr "%s 장치는 동작 중이 아닙니다."
 
-#: lib/setup.c:1535
+#: lib/setup.c:1545
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "%s 암호화 장치의 기반 장치가 사라졌습니다."
 
-#: lib/setup.c:1617
+#: lib/setup.c:1627
 msgid "Invalid plain crypt parameters."
 msgstr "부적절한 평문 암호화 매개변수입니다."
 
-#: lib/setup.c:1622 lib/setup.c:2672
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Invalid key size."
 msgstr "부적절한 키 크기입니다."
 
-#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
 msgid "UUID is not supported for this crypt type."
 msgstr "이 암호화 형식에서 UUID를 지원하지 않습니다."
 
-#: lib/setup.c:1632 lib/setup.c:2682
+#: lib/setup.c:1642 lib/setup.c:2692
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "이 암호화 형식에서 분리한 메타데이터 장치를 지원하지 않습니다."
 
-#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
 #: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "지원하지 않는 암호화 섹터 크기입니다."
 
-#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
 msgid "Device size is not aligned to requested sector size."
 msgstr "장치 용량이 요청한 섹터 용량과 맞지 않습니다."
 
-#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
 msgid "Can't format LUKS without device."
 msgstr "장치가 없는 상황에서 LUKS를 포매팅할 수 없습니다."
 
-#: lib/setup.c:1707 lib/setup.c:1959
+#: lib/setup.c:1717 lib/setup.c:1969
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "%s 구역 지정 장치를 LUKS 헤더에 사용할 수 없습니다."
 
-#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "요청한 데이터 정렬 동작은 데이터 오프셋과 호환성이 없습니다."
 
-#: lib/setup.c:1754 lib/setup.c:1984
+#: lib/setup.c:1764 lib/setup.c:1994
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "경고: DAX 장치는 최소 단위 섹터 갱신을 보증할 수 없으므로 데이터를 파괴할 수 있습니다.\n"
 
-#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
-#: lib/setup.c:2567 lib/setup.c:2899
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "%s 장치의 헤더를 소거할 수 없습니다."
 
-#: lib/setup.c:1805 lib/setup.c:2164
+#: lib/setup.c:1815 lib/setup.c:2174
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "%s 장치를 활성화하기에 너무 작습니다. 데이터를 둘 만한 여분 공간이 없습니다.\n"
 
-#: lib/setup.c:1846
+#: lib/setup.c:1856
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "볼륨 키 크기가 무결성 확장을 동반한 암호화를 처리하기에 너무 작습니다."
 
-#: lib/setup.c:1850
+#: lib/setup.c:1860
 msgid "Integrity key size is too small."
 msgstr "무결성 키 크기가 너무 작습니다."
 
-#: lib/setup.c:1859
+#: lib/setup.c:1869
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "암호화 알고리즘 %s-%s(%zd비트 키 크기)을(를) 사용할 수 없습니다."
 
-#: lib/setup.c:1900
+#: lib/setup.c:1910
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "경고: 장치 활성에 실패합니다. dm-crypt에 요청한 암호화 섹터 크기 지원이 빠졌습니다.\n"
 
-#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
 #: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "%s 장치 용량이 너무 작습니다."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "사용 중인 %s 장치를 포매팅할 수 없습니다."
 
-#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "%s 장치를 포매팅할 수 없습니다. 권한 거부함."
 
-#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "%s 장치의 무결성을 포매팅할 수 없습니다."
 
-#: lib/setup.c:2151 lib/setup.c:2629
+#: lib/setup.c:2161 lib/setup.c:2639
 #, c-format
 msgid "Cannot format device %s."
 msgstr "%s 장치를 포매팅할 수 없습니다."
 
-#: lib/setup.c:2194
+#: lib/setup.c:2204
 msgid "Cannot get OPAL alignment parameters."
 msgstr "OPAL 정렬 매개변수를 가져올 수 없습니다."
 
-#: lib/setup.c:2206
+#: lib/setup.c:2216
 msgid "Bogus OPAL logical block size."
 msgstr "위조한 OPAL 논리 블록 크기입니다."
 
-#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "위조한 OPAL 논리 블록 크기가 장치 블록 크기와 다릅니다."
 
-#: lib/setup.c:2217
+#: lib/setup.c:2227
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "요청한 데이터 오프셋의 호환성이 OPAL 블록 크기와 맞지 않습니다."
 
-#: lib/setup.c:2224
+#: lib/setup.c:2234
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "요청한 데이터 정렬 호환성이 OPAL 정렬과 맞지 않습니다."
 
-#: lib/setup.c:2244
+#: lib/setup.c:2254
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "데이터 오프셋이 OPAL 정렬 요구 사항을 만족하지 않습니다."
 
-#: lib/setup.c:2257
+#: lib/setup.c:2267
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "요청한 데이터 정렬이 잠금 범위 정렬 요구 사항을 만족하지 않습니다."
 
-#: lib/setup.c:2471
+#: lib/setup.c:2481
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "OPAL 정렬 분할성에 맞추기 위해 장치 용량을 %<PRIu64> 섹터 보정합니다."
 
-#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "%s 장치에서 OPAL 잠금 획득 실패."
 
-#: lib/setup.c:2541
+#: lib/setup.c:2551
 msgid "Incorrect OPAL Admin key."
 msgstr "올바르지 않은 OPAL 관리자 키입니다."
 
-#: lib/setup.c:2543
+#: lib/setup.c:2553
 msgid "Cannot setup OPAL segment."
 msgstr "OPAL 세그먼트를 설정할 수 없습니다."
 
-#: lib/setup.c:2625
+#: lib/setup.c:2635
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "%s 장치를 포매팅할 수 없습니다. OPAL 장치가 완전히 쓰기 방지 상태인 것 같습니다."
 
-#: lib/setup.c:2627
+#: lib/setup.c:2637
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "펌웨어 버그인 것 같습니다. 복원하려면 OPAL PSID를 초기화하고 다시 연결하십시오."
 
-#: lib/setup.c:2647
+#: lib/setup.c:2657
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "%2$s 장치 초기화 중 %1$d 범위 잠금 실패."
 
-#: lib/setup.c:2667
+#: lib/setup.c:2677
 msgid "Can't format LOOPAES without device."
 msgstr "장치 없이 LOOPAES를 포매팅할 수 없습니다."
 
-#: lib/setup.c:2712
+#: lib/setup.c:2722
 msgid "Can't format VERITY without device."
 msgstr "장치 없이 VERITY를 포매팅할 수 없습니다."
 
-#: lib/setup.c:2723 lib/verity/verity.c:88
+#: lib/setup.c:2733 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "지원하지 않는 %d번 VERITY 해시 형식입니다."
 
-#: lib/setup.c:2729 lib/verity/verity.c:96
+#: lib/setup.c:2739 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "지원하지 않는 VERITY 블록 크기입니다."
 
-#: lib/setup.c:2734 lib/verity/verity.c:61
+#: lib/setup.c:2744 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "지원하지 않는 VERITY 해시 오프셋입니다."
 
-#: lib/setup.c:2739
+#: lib/setup.c:2749
 msgid "Unsupported VERITY FEC offset."
 msgstr "지원하지 않는 VERITY FEC 오프셋입니다."
 
-#: lib/setup.c:2763
+#: lib/setup.c:2773
 msgid "Data area overlaps with hash area."
 msgstr "데이터 영역이 해시 영역과 겹칩니다."
 
-#: lib/setup.c:2788
+#: lib/setup.c:2798
 msgid "Hash area overlaps with FEC area."
 msgstr "해시 영역이 FEC 영역과 겹칩니다."
 
-#: lib/setup.c:2795
+#: lib/setup.c:2805
 msgid "Data area overlaps with FEC area."
 msgstr "데이터 영역이 FEC 영역과 겹칩니다."
 
-#: lib/setup.c:2887
+#: lib/setup.c:2897
 msgid "Integrity key size mismatch."
 msgstr "무결성 키 크기가 일치하지 않습니다."
 
-#: lib/setup.c:2938
+#: lib/setup.c:2948
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "경고: 요청한 태그 크기 %d바이트가 %s의 크기 출력 (%d바이트)과 다릅니다.\n"
 
-#: lib/setup.c:3051 lib/setup.c:3153
+#: lib/setup.c:3061 lib/setup.c:3163
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "알 수 없는 또는 지원하지 않는 %s 장치 형식을 요청했습니다."
 
-#: lib/setup.c:3067
+#: lib/setup.c:3077
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "%s 장치에서 인라인 무결성 데이터 필드를 제공하지 않습니다."
 
-#: lib/setup.c:3073
+#: lib/setup.c:3083
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "%1$<PRIu32> [바이트] 인라인 태그 크기가 %3$s 장치에서 지정한 %2$<PRIu32> 값보다 큽니다."
 
-#: lib/setup.c:3088
+#: lib/setup.c:3098
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "섹터 값은 장치 하드웨어 섹터 값(%zu 바이트)과 같아야 합니다."
 
-#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "%s 장치에서 지원하지 않는 매개변수입니다."
 
-#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
 #: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "%s 장치에서 일치하지 않는 매개변수입니다."
 
-#: lib/setup.c:3650
+#: lib/setup.c:3660
 msgid "Crypt devices mismatch."
 msgstr "암호화 장치가 일치하지 않습니다."
 
-#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
 #: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "%s 장치 다시 불러오기 실패."
 
-#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
 #: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "%s 장치 대기 상태 전환 실패."
 
-#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
 #: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
 #: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "%s 장치 상태 복귀 실패."
 
-#: lib/setup.c:3720
+#: lib/setup.c:3730
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "%s 장치(%s 장치 위)를 다시 불러오는 동안 치명적 오류가 있습니다."
 
-#: lib/setup.c:3723 lib/setup.c:3725
+#: lib/setup.c:3733 lib/setup.c:3735
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "%s 장치의 dm-error 전환 실패."
 
-#: lib/setup.c:3768
+#: lib/setup.c:3778
 msgid "Can not resize LUKS2 device with static size."
 msgstr "LUKS2 장치 크기를 정적 크기로 바꿀 수 없습니다."
 
-#: lib/setup.c:3773
+#: lib/setup.c:3783
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "무결성 보호 기능이 있는 LUKS2 장치의 크기 변경을 지원하지 않습니다."
 
-#: lib/setup.c:3819
+#: lib/setup.c:3829
 msgid "Cannot resize loop device."
 msgstr "루프 장치의 크기를 바꿀 수 없습니다."
 
-#: lib/setup.c:3863
+#: lib/setup.c:3873
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "경고: 최대 크기를 이미 설정했거나 커널에서 크기 변경을 지원하지 않습니다.\n"
 
-#: lib/setup.c:3929
+#: lib/setup.c:3939
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "크기 변경 실패. 커널에서 지원하지 않습니다."
 
-#: lib/setup.c:3961
+#: lib/setup.c:3971
 msgid "Do you really want to change UUID of device?"
 msgstr "정말로 장치 UUID를 바꾸시겠습니까?"
 
-#: lib/setup.c:4053
+#: lib/setup.c:4061 lib/setup.c:4069
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "헤더 백업 파일에 호환 LUKS 헤더가 없습니다."
 
-#: lib/setup.c:4160
+#: lib/setup.c:4176
 #, c-format
 msgid "Volume %s is not active."
 msgstr "%s 볼륨이 동작 중이 아닙니다."
 
-#: lib/setup.c:4215
+#: lib/setup.c:4231
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "%s 볼륨이 이미 대기 상태에 있습니다."
 
-#: lib/setup.c:4241
+#: lib/setup.c:4257
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "%s 장치에서 대기 상태 전환을 지원하지 않습니다."
 
-#: lib/setup.c:4243 lib/setup.c:4251
+#: lib/setup.c:4259 lib/setup.c:4267
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "%s 장치 대기 상태 전환 중 오류가 있습니다."
 
-#: lib/setup.c:4266
+#: lib/setup.c:4282
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "%s 장치를 대기 상태로 전환했으나 하드웨어 OPAL 장치를 잠글 수 없습니다."
 
-#: lib/setup.c:4297 lib/setup.c:4491
+#: lib/setup.c:4313 lib/setup.c:4507
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "%s 장치에서 상태 복귀를 지원하지 않습니다."
 
-#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "%s 장치 상태 복귀 중 오류가 있습니다."
 
-#: lib/setup.c:4335
+#: lib/setup.c:4351
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "사용자 지정 키 모음으로의 볼륨 키 연결 해제 실패."
 
-#: lib/setup.c:4457 lib/setup.c:5637
+#: lib/setup.c:4473 lib/setup.c:5653
 msgid "Failed to link volume key in user defined keyring."
 msgstr "사용자 지정 키 모음으로의 볼륨 키 연결 실패."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2722
+#: lib/setup.c:4572 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "%s 볼륨은 대기 상태가 아닙니다."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
 #: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
-#: src/utils_reencrypt.c:1969
+#: src/utils_reencrypt.c:1995
 msgid "Volume key does not match the volume."
 msgstr "볼륨 키가 볼륨과 맞지 않습니다."
 
-#: lib/setup.c:4821
+#: lib/setup.c:4837
 msgid "Failed to swap new key slot."
 msgstr "새 키 슬롯 교환 실패."
 
-#: lib/setup.c:4919
+#: lib/setup.c:4935
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "%d번 키 슬롯이 적절하지 않습니다."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
 #: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "%d번 키 슬롯은 동작 중이 아닙니다."
 
-#: lib/setup.c:4944
+#: lib/setup.c:4960
 msgid "Device header overlaps with data area."
 msgstr "장치 헤더가 데이터 영역과 겹칩니다."
 
-#: lib/setup.c:5165
+#: lib/setup.c:5181
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "재암호화를 진행 중입니다. 장치를 동작하게 할 수 없습니다."
 
-#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
 #: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "재 암호화 잠금 가져오기 실패."
 
-#: lib/setup.c:5189
+#: lib/setup.c:5205
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "볼륨 키를 활용한 LUKS2 재 암호화 복원 실패."
 
-#: lib/setup.c:5325
+#: lib/setup.c:5341
 #, c-format
 msgid "Device %s already exists."
 msgstr "%s 장치가 이미 있습니다."
 
-#: lib/setup.c:5332
+#: lib/setup.c:5348
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "%s 장치를 사용할 수 없습니다. 명칭이 부적절하거나 여전히 사용중입니다."
 
-#: lib/setup.c:5344
+#: lib/setup.c:5360
 msgid "Reencryption volume keys do not match the volume."
 msgstr "재암호화 볼륨 키가 볼륨과 일치하지 않습니다."
 
-#: lib/setup.c:5361
+#: lib/setup.c:5377
 msgid "Incorrect volume key specified for plain device."
 msgstr "원시 장치에 올바르지 않은 볼륨 키를 지정했습니다."
 
-#: lib/setup.c:5387 lib/setup.c:5448
+#: lib/setup.c:5403 lib/setup.c:5464
 msgid "Device type is not properly initialized."
 msgstr "장치 형식을 제대로 초기화하지 않았습니다."
 
-#: lib/setup.c:5486
+#: lib/setup.c:5502
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "커널 키 모음은 커널에서 지원하지 않습니다."
 
-#: lib/setup.c:5490
+#: lib/setup.c:5506
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "커널 키 모음 빠짐: 커널에 시그니처 전달에 필요합니다."
 
-#: lib/setup.c:5545
+#: lib/setup.c:5561
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "%s 키 모음 키를 사용할 수 없습니다."
 
-#: lib/setup.c:5758
+#: lib/setup.c:5774
 msgid "Incorrect root hash specified for verity device."
 msgstr "검증 장치에 올바르지 않은 루트 해시를 지정했습니다."
 
-#: lib/setup.c:5799 lib/setup.c:5824
+#: lib/setup.c:5815 lib/setup.c:5840
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL은 지연된 동작 상태 해제를 지원하지 않습니다."
 
-#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "%s 장치를 여전히 사용중입니다."
 
-#: lib/setup.c:5832
+#: lib/setup.c:5848
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "%s 장치에서 지연된 제거 동작을 취소할 수 없습니다."
 
-#: lib/setup.c:5854
+#: lib/setup.c:5870
 #, c-format
 msgid "Invalid device %s."
 msgstr "부적절한 %s 장치입니다."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6017
 msgid "Volume key buffer too small."
 msgstr "볼륨 키 버퍼가 너무 작습니다."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6028
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "LUKS2 장치에 볼륨 키를 넣을 수 없습니다."
 
-#: lib/setup.c:6021
+#: lib/setup.c:6037
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "LUKS1 장치에 볼륨 키를 넣을 수 없습니다."
 
-#: lib/setup.c:6035
+#: lib/setup.c:6051
 msgid "Cannot retrieve volume key for plain device."
 msgstr "원시 장치에 볼륨 키를 넣을 수 없습니다."
 
-#: lib/setup.c:6043
+#: lib/setup.c:6059
 msgid "Cannot retrieve root hash for verity device."
 msgstr "검증 장치에 루트 해시를 넣을 수 없습니다."
 
-#: lib/setup.c:6052
+#: lib/setup.c:6068
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "BITLK 장치에 볼륨 키를 넣을 수 없습니다."
 
-#: lib/setup.c:6057
+#: lib/setup.c:6073
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "FVAULT2 장치에 볼륨 키를 넣을 수 없습니다."
 
-#: lib/setup.c:6059
+#: lib/setup.c:6075
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "이 동작은 %s 암호화 장치에서 지원하지 않습니다."
 
-#: lib/setup.c:6244 lib/setup.c:6255
+#: lib/setup.c:6260 lib/setup.c:6271
 msgid "Dump operation is not supported for this device type."
 msgstr "덤프 동작은 이 장치 형식에서 지원하지 않습니다."
 
-#: lib/setup.c:6635
+#: lib/setup.c:6651
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "데이터 오프셋은 %u바이트의 배수가 아닙니다."
 
-#: lib/setup.c:6943
+#: lib/setup.c:6959
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "여전히 사용중인 %s 장치를 변환할 수 없습니다."
 
-#: lib/setup.c:7251 lib/setup.c:7406
+#: lib/setup.c:7267 lib/setup.c:7422
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "새 볼륨 키 %u번 키 슬롯 할당 실패."
 
-#: lib/setup.c:7275
+#: lib/setup.c:7291
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "기본 LUKS2 키 슬롯 매개변수 초기화 실패."
 
-#: lib/setup.c:7281
+#: lib/setup.c:7297
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "키 슬롯 %d번 다이제스트 할당 실패."
 
-#: lib/setup.c:7523
+#: lib/setup.c:7539
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "키 슬롯을 추가할 수 없습니다. 모든 슬롯을 사용할 수 없으며, 볼륨 키를 지정하지 않았습니다."
 
-#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "커널 키 모음에서 키 불러오기 실패."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7823
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "\"%s\"에서 설명하는 키 모음을 찾을 수 없습니다."
 
-#: lib/setup.c:7872
+#: lib/setup.c:7888
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "전역 메모리-하드 액세스 직렬화 잠금 취득 실패."
 
@@ -787,7 +787,7 @@ msgid "Cannot read requested amount of data."
 msgstr "요청한 양의 데이터를 읽을 수 없습니다."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "%s 장치가 없거나 접근이 막혔습니다."
@@ -903,16 +903,16 @@ msgstr "요청한 PBKDF 병렬 처리 스레드 값은 0일 수 없습니다."
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "FIPS 모드에서는 PBKDF2만 지원합니다."
 
-#: lib/utils_benchmark.c:171
+#: lib/utils_benchmark.c:175
 msgid "PBKDF benchmark disabled but iterations not set."
 msgstr "PBKDF 벤치마킹은 동작하지 않지만 반복 횟수는 설정하지 않았습니다."
 
-#: lib/utils_benchmark.c:190
+#: lib/utils_benchmark.c:194
 #, c-format
 msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr "PBKDF2 옵션의 호환성이 없습니다 (%s 해시 알고리즘 활용)."
 
-#: lib/utils_benchmark.c:210
+#: lib/utils_benchmark.c:214
 msgid "Not compatible PBKDF options."
 msgstr "PBKDF 옵션 호환성이 없습니다."
 
@@ -961,9 +961,9 @@ msgstr "XTS모드의 키 크기는 256비트 또는 512비트여야 합니다."
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "암호화 방식 명세는 [cipher]-[mode]-[iv] 형식이어야 합니다."
 
-#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
-#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "%s 장치에 기록할 수 없습니다. 권한 거부."
@@ -981,13 +981,13 @@ msgstr "임시 키 스토어 장치 접근 실패."
 msgid "IO error while encrypting keyslot."
 msgstr "키 슬롯 암호화 중 입출력 오류."
 
-#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
@@ -1002,61 +1002,61 @@ msgstr "키 슬롯을 해독하는 중 입출력 오류."
 msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr "%s 장치 크기가 너무 작습니다 (LUKS1 은 최소 %<PRIu64> 바이트가 필요)."
 
-#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
-#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
-#: lib/luks1/keymanage.c:181
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
 #, c-format
 msgid "LUKS keyslot %u is invalid."
 msgstr "LUKS 키 슬롯 %u번이 적절하지 않습니다."
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "요청한 %s 헤더 백업 파일이 이미 있습니다."
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "%s 헤더 백업 파일을 만들 수 없습니다."
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "%s 헤더 백업 파일을 기록할 수 없습니다."
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
 msgid "Backup file does not contain valid LUKS header."
 msgstr "백업 파일에 적절한 LUKS 헤더가 없습니다."
 
-#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1450
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "%s 헤더 백업 파일을 열 수 없습니다."
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "%s 헤더 백업 파일을 읽을 수 없습니다."
 
-#: lib/luks1/keymanage.c:326
+#: lib/luks1/keymanage.c:331
 msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr "장치와 백업의 데이터 오프셋 또는 키 크기가 다릅니다. 복구 실패."
 
-#: lib/luks1/keymanage.c:334
+#: lib/luks1/keymanage.c:339
 #, c-format
 msgid "Device %s %s%s"
 msgstr "%s 장치 %s%s"
 
-#: lib/luks1/keymanage.c:335
+#: lib/luks1/keymanage.c:340
 msgid "does not contain LUKS header. Replacing header can destroy data on that device."
 msgstr "LUKS 헤더가 없습니다. 헤더를 교체하면 장치 데이터가 깨질 수 있습니다."
 
-#: lib/luks1/keymanage.c:336
+#: lib/luks1/keymanage.c:341
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "LUKS 헤더가 이미 있습니다. 헤더를 교체하면 기존 키 슬롯이 깨질 수 있습니다."
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1064,130 +1064,130 @@ msgstr ""
 "\n"
 "경고: 실제 장치 헤더에 백업 때와 다른 UUID가 있습니다!"
 
-#: lib/luks1/keymanage.c:385
+#: lib/luks1/keymanage.c:390
 msgid "Non standard key size, manual repair required."
 msgstr "비 표준 키 길이, 직접 복구가 필요합니다."
 
-#: lib/luks1/keymanage.c:395
+#: lib/luks1/keymanage.c:400
 msgid "Non standard keyslots alignment, manual repair required."
 msgstr "비 표준 키 슬롯 정렬, 직접 복구가 필요합니다."
 
-#: lib/luks1/keymanage.c:404
+#: lib/luks1/keymanage.c:409
 #, c-format
 msgid "Cipher mode repaired (%s -> %s)."
 msgstr "암호화 방식 모드를 복구했습니다 (%s -> %s)."
 
-#: lib/luks1/keymanage.c:415
+#: lib/luks1/keymanage.c:420
 #, c-format
 msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "암호화 방식 해시를 소문자로 복구했습니다 (%s)."
 
-#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:756
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "요청한 %s LUKS 해시는 지원하지 않습니다."
 
-#: lib/luks1/keymanage.c:431
+#: lib/luks1/keymanage.c:436
 msgid "Repairing keyslots."
 msgstr "키 슬롯을 복원합니다."
 
-#: lib/luks1/keymanage.c:450
+#: lib/luks1/keymanage.c:455
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr "키 슬롯 %i: 오프셋을 복원했습니다 (%u -> %u)."
 
-#: lib/luks1/keymanage.c:458
+#: lib/luks1/keymanage.c:463
 #, c-format
 msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr "키 슬롯 %i: 스트라이프를 복원했습니다 (%u -> %u)."
 
-#: lib/luks1/keymanage.c:467
+#: lib/luks1/keymanage.c:472
 #, c-format
 msgid "Keyslot %i: bogus partition signature."
 msgstr "키 슬롯 %i: 위조한 분할 영역 시그니처입니다."
 
-#: lib/luks1/keymanage.c:472
+#: lib/luks1/keymanage.c:477
 #, c-format
 msgid "Keyslot %i: salt wiped."
 msgstr "키 슬롯 %i: 솔트 값을 소거했습니다."
 
-#: lib/luks1/keymanage.c:489
+#: lib/luks1/keymanage.c:494
 msgid "Writing LUKS header to disk."
 msgstr "LUKS 헤더를 디스크에 기록합니다."
 
-#: lib/luks1/keymanage.c:494
+#: lib/luks1/keymanage.c:499
 msgid "Repair failed."
 msgstr "복구 실패."
 
-#: lib/luks1/keymanage.c:549
+#: lib/luks1/keymanage.c:554
 #, c-format
 msgid "LUKS cipher mode %s is invalid."
 msgstr "LUKS 암호화 방식 모드 %s이(가) 적절하지 않습니다."
 
-#: lib/luks1/keymanage.c:554
+#: lib/luks1/keymanage.c:559
 #, c-format
 msgid "LUKS hash %s is invalid."
 msgstr "%s LUKS 해시가 적절하지 않습니다."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "LUKS 헤더에 알려진 문제가 없습니다."
 
-#: lib/luks1/keymanage.c:689
+#: lib/luks1/keymanage.c:690
 #, c-format
 msgid "Error during update of LUKS header on device %s."
 msgstr "%s 장치의 LUKS 헤더 업데이트 중 오류가 있습니다."
 
-#: lib/luks1/keymanage.c:697
+#: lib/luks1/keymanage.c:698
 #, c-format
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "%s 장치 업데이트 후 LUKS 헤더 다시 읽기 오류"
 
-#: lib/luks1/keymanage.c:750
+#: lib/luks1/keymanage.c:751
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "LUKS 헤더용 데이터 오프셋은 0 또는 헤더 길이보다 더 큰 값이어야 합니다."
 
-#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
-#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "잘못된 LUKS UUID 형식을 지정했습니다."
 
-#: lib/luks1/keymanage.c:783
+#: lib/luks1/keymanage.c:784
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "LUKS 헤더를 만들 수 없음: 임의 솔트 값 읽기 실패."
 
-#: lib/luks1/keymanage.c:811
+#: lib/luks1/keymanage.c:812
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "LUKS 헤더를 만들 수 없음: 헤더 다이제스트 실패 (%s 해시 사용)."
 
-#: lib/luks1/keymanage.c:856
+#: lib/luks1/keymanage.c:857
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "%d번 키 슬롯이 동작 중입니다. 우선 제거하십시오."
 
-#: lib/luks1/keymanage.c:862
+#: lib/luks1/keymanage.c:863
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "%d번 키 슬롯의 스트라이프가 너무 적습니다. 헤더를 조작했습니까?"
 
-#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "PBKDF2 반복 값이 지정 범위를 넘었습니다."
 
-#: lib/luks1/keymanage.c:1022
+#: lib/luks1/keymanage.c:1023
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "키 슬롯을 열 수 없습니다 (%s 해시 사용)."
 
-#: lib/luks1/keymanage.c:1118
+#: lib/luks1/keymanage.c:1119
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "키 슬롯 번호 %d번이 적절하지 않습니다. 0에서 %d 사이 값 중 하나로 키 슬롯을 선택하십시오."
 
-#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "%s 장치를 소거할 수 없습니다."
@@ -1365,33 +1365,33 @@ msgstr "이 동작은 지원하지 않습니다."
 msgid "Unexpected key data size."
 msgstr "예기치 않은 키 데이터 크기."
 
-#: lib/bitlk/bitlk.c:1442
+#: lib/bitlk/bitlk.c:1448
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "이 BITLK 장치는 지원하지 않는 상태이며, 동작을 시작할 수 없습니다."
 
-#: lib/bitlk/bitlk.c:1447
+#: lib/bitlk/bitlk.c:1453
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "'%s' 형식의 BITLK 장치의 동작을 시작할 수 없습니다."
 
-#: lib/bitlk/bitlk.c:1486
+#: lib/bitlk/bitlk.c:1492
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "경고: 비트로커 볼륨 크기 %<PRIu64>가 하부 장치 크기 %<PRIu64>와 일치하지 않습니다"
 
-#: lib/bitlk/bitlk.c:1613
+#: lib/bitlk/bitlk.c:1634
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "장치 동작을 개시할 수 없습니다. 커널 dm-crypt 에 BITLK IV 지원이 빠졌습니다."
 
-#: lib/bitlk/bitlk.c:1617
+#: lib/bitlk/bitlk.c:1638
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "장치 동작을 개시할 수 없습니다. 커널 dm-crypt에 BITLK 엘레펀트 diffuser 지원이 빠졌습니다."
 
-#: lib/bitlk/bitlk.c:1621
+#: lib/bitlk/bitlk.c:1642
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "장치 동작을 개시할 수 없습니다. 커널 dm-crypt 에 거대 섹터 크기 지원이 빠졌습니다."
 
-#: lib/bitlk/bitlk.c:1625
+#: lib/bitlk/bitlk.c:1646
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "장치 동작을 개시할 수 없습니다. 커널 dm-zero 모듈이 빠졌습니다."
 
@@ -1548,24 +1548,24 @@ msgstr "%s 장치 크기 확인 실패."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "%2$s에서 커널의 비호환 dm-integrity 메타데이터(버전 %1$u)를 찾았습니다."
 
-#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "커널에서 dm-integrity 매핑을 지원하지 않습니다"
 
-#: lib/integrity/integrity.c:314
+#: lib/integrity/integrity.c:315
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "커널에서 dm-integrity 고정 메타데이터 정렬을 지원하지 않습니다."
 
-#: lib/integrity/integrity.c:323
+#: lib/integrity/integrity.c:324
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "커널에서 안전하지 않은 재계산 옵션 동작 개시를 거부했습니다 (그래도 실행하려면 이전 동작 개시 옵션 참고)."
 
-#: lib/integrity/integrity.c:329
+#: lib/integrity/integrity.c:330
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "커널에서 dm-integrity 인라인 모드를 지원하지 않습니다."
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1510
+#: lib/luks2/luks2_json_metadata.c:1502
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "%s 장치의 쓰기 잠금 획득 실패."
@@ -1587,22 +1587,22 @@ msgstr ""
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "경고: 키 슬롯 영역(%<PRIu64> 바이트)이 너무 작아서, 가능한 LUKS2 키 슬롯 수가 매우 제한적입니다.\n"
 
-#: lib/luks2/luks2_json_format.c:418
+#: lib/luks2/luks2_json_format.c:427
 msgid "Requested data offset is too small."
 msgstr "요청 데이터 오프셋 값이 너무 작습니다."
 
-#: lib/luks2/luks2_json_format.c:459
+#: lib/luks2/luks2_json_format.c:468
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "경고: LUKS2 메타데이터 크기가 %<PRIu64> 바이트로 바뀌었습니다.\n"
 
-#: lib/luks2/luks2_json_format.c:463
+#: lib/luks2/luks2_json_format.c:472
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "경고: LUKS2 키 슬롯 영역 크기가 %<PRIu64> 바이트로 바뀌었습니다.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "%s 장치의 잠금 읽기 획득 실패."
@@ -1611,33 +1611,33 @@ msgstr "%s 장치의 잠금 읽기 획득 실패."
 msgid "Label is too long."
 msgstr "레이블이 너무 깁니다."
 
-#: lib/luks2/luks2_json_metadata.c:1435
+#: lib/luks2/luks2_json_metadata.c:1427
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "%s 백업에서 금지하고 있는 LUKS2 요구 사항을 확인했습니다."
 
-#: lib/luks2/luks2_json_metadata.c:1474
+#: lib/luks2/luks2_json_metadata.c:1466
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "장치와 백업 간 데이터 오프셋이 다릅니다. 복원 실패."
 
-#: lib/luks2/luks2_json_metadata.c:1480
+#: lib/luks2/luks2_json_metadata.c:1472
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "장치와 백업간 키 슬롯 영역이 들어간 바이너리 헤더 크기가 다릅니다. 복구 실패."
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1479
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "%s 장치 %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "LUKS2 헤더가 없습니다. 헤더 내용을 바꾸면 장치의 데이터가 깨질 수 있습니다."
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1481
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "이미 LUKS2 헤더가 있습니다. 헤더 내용을 바꾸면 기존 키 슬롯이 깨집니다."
 
-#: lib/luks2/luks2_json_metadata.c:1491
+#: lib/luks2/luks2_json_metadata.c:1483
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1647,7 +1647,7 @@ msgstr ""
 "경고: 알 수 없는 LUKS2 요구사항을 실제 장치 헤더에서 찾았습니다!\n"
 "헤더 내용을 바꾸면 해당 장치의 데이터가 깨질 수도 있습니다!"
 
-#: lib/luks2/luks2_json_metadata.c:1493
+#: lib/luks2/luks2_json_metadata.c:1485
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1657,84 +1657,84 @@ msgstr ""
 "경고: 끝내지 않은 오프라인 재암호화를 장치에서 확인했습니다!\n"
 "헤더를 백업 내용으로 바뀌면 데이터가 깨잘 수도 있습니다."
 
-#: lib/luks2/luks2_json_metadata.c:1591
+#: lib/luks2/luks2_json_metadata.c:1583
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "알 수 없는 %s 플래그를 무시했습니다."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "dm-crypt 세그먼트 %u번에 키 빠짐"
 
-#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "dm-crypt 세그먼트 설정 실패."
 
-#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "dm-linear 세그먼트 설정 실패."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "LUKS2 헤더에서 찾은 알려진 암호화 방식 명세 패턴이 없습니다."
 
-#: lib/luks2/luks2_json_metadata.c:2709
+#: lib/luks2/luks2_json_metadata.c:2701
 msgid "OPAL device must have static device size."
 msgstr "OPAL 장치에 정적 장치 크기 정보가 들어가야 합니다."
 
-#: lib/luks2/luks2_json_metadata.c:2729
+#: lib/luks2/luks2_json_metadata.c:2721
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "무결성 정보를 지닌 암호화한 OPAL 장치는 잠금 범위보다 작아야 합니다."
 
-#: lib/luks2/luks2_json_metadata.c:2734
+#: lib/luks2/luks2_json_metadata.c:2726
 msgid "OPAL device must have same size as locking range."
 msgstr "OPAL 장치는 잠금 범위와 같은 크기를 지녀야 합니다."
 
-#: lib/luks2/luks2_json_metadata.c:2754
+#: lib/luks2/luks2_json_metadata.c:2746
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "OPAN 장치는 %s(이)며, 이미 잠금을 해제했습니다.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2793
+#: lib/luks2/luks2_json_metadata.c:2785
 msgid "Unsupported device integrity configuration."
 msgstr "지원하지 않는 장치 무결성 설정."
 
-#: lib/luks2/luks2_json_metadata.c:2809
+#: lib/luks2/luks2_json_metadata.c:2801
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "dm-integrity 장치 기저에 예기치 못한 지정 데이터 섹터가 있습니다."
 
-#: lib/luks2/luks2_json_metadata.c:2911
+#: lib/luks2/luks2_json_metadata.c:2903
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "재암호화 진행 중입니다. 장치 동작 상태를 해제할 수 없습니다."
 
-#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "대기 상태에 있는 %s 장치의 dm-error 타겟 전환 실패."
 
-#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "%s 장치의 동작 상태를 해제했지만 OPAL 장치 하드웨어를 잠글 수는 없습니다."
 
-#: lib/luks2/luks2_json_metadata.c:3045
+#: lib/luks2/luks2_json_metadata.c:3037
 msgid "Unmet LUKS2 requirements detected."
 msgstr "LUKS2 요구 사항의 불만족 요소를 확인했습니다."
 
-#: lib/luks2/luks2_json_metadata.c:3053
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "이전 재암호화 마킹한 장치의 동작 호환성이 없습니다. 멈춤."
 
-#: lib/luks2/luks2_json_metadata.c:3055
+#: lib/luks2/luks2_json_metadata.c:3047
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "LUKS2 재암호화 마킹한 장치의 동작 호환성이 없습니다. 멈춤."
 
-#: lib/luks2/luks2_json_metadata.c:3057
+#: lib/luks2/luks2_json_metadata.c:3049
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "OPAL을 활용하는 장치의 동작 호환성이 없습니다. 멈춤."
 
-#: lib/luks2/luks2_json_metadata.c:3059
+#: lib/luks2/luks2_json_metadata.c:3051
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "인라인 하드웨어 태그를 사용하는 장치의 동작 호환성이 없습니다. 멈춤."
 
@@ -1801,60 +1801,60 @@ msgstr "LUKS2 키 슬롯에 %s-%s 암호화 방식 명세를 활용할 수 없
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "키 슬롯 영역을 이동할 수 없습니다. 공간이 부족함."
 
-#: lib/luks2/luks2_luks1_convert.c:619
+#: lib/luks2/luks2_luks1_convert.c:627
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "LUKS2 형식으로 변환할 수 없습니다 - 부적절한 메타데이터."
 
-#: lib/luks2/luks2_luks1_convert.c:636
+#: lib/luks2/luks2_luks1_convert.c:644
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "키 슬롯 영역을 이동할 수 없습니다. LUKS2 키 슬롯 영역이 너무 작습니다."
 
-#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
 msgid "Unable to move keyslot area."
 msgstr "키 슬롯 영역을 옮길 수 없습니다."
 
-#: lib/luks2/luks2_luks1_convert.c:757
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "LUKS1 형식으로 변환할 수 없음 - 기본 세그먼트 암호화 섹터 크기가 512바이트가 아닙니다."
 
-#: lib/luks2/luks2_luks1_convert.c:765
+#: lib/luks2/luks2_luks1_convert.c:773
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "LUKS1 형식으로 변환할 수 없음 - 키 슬롯 다이제스트가 LUKS1과 호환성이 없습니다."
 
-#: lib/luks2/luks2_luks1_convert.c:779
+#: lib/luks2/luks2_luks1_convert.c:787
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "LUKS1 형식으로 변환할 수 없음 - 장치에서 래핑 키 암호화 방식 %s을(를) 사용하고 있습니다."
 
-#: lib/luks2/luks2_luks1_convert.c:784
+#: lib/luks2/luks2_luks1_convert.c:792
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "LUKS1 형식으로 변환할 수 없음 - 장치에서 더 많은 세그먼트가 있습니다."
 
-#: lib/luks2/luks2_luks1_convert.c:792
+#: lib/luks2/luks2_luks1_convert.c:800
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "LUKS1 형식으로 변환할 수 없음 - LUKS2 헤더에 토근 %u개가 있습니다."
 
-#: lib/luks2/luks2_luks1_convert.c:798
+#: lib/luks2/luks2_luks1_convert.c:806
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "LUKS1 형식으로 변환할 수 없음 - 동작 중인 키 슬롯이 없습니다."
 
-#: lib/luks2/luks2_luks1_convert.c:810
+#: lib/luks2/luks2_luks1_convert.c:818
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "LUKS1 형식으로 변환할 수 없음 - %u번 키 슬롯이 적절하지 않은 상태에 있습니다."
 
-#: lib/luks2/luks2_luks1_convert.c:815
+#: lib/luks2/luks2_luks1_convert.c:823
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "LUKS1 형식으로 변환할 수 없음 - %u번 키 슬롯이 범위 밖에 있습니다."
 
-#: lib/luks2/luks2_luks1_convert.c:820
+#: lib/luks2/luks2_luks1_convert.c:828
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "LUKS1 형식으로 변환할 수 없음 - %u번 슬롯(최대 슬롯 범위 밖)이 여전히 동작중입니다."
 
-#: lib/luks2/luks2_luks1_convert.c:825
+#: lib/luks2/luks2_luks1_convert.c:833
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "LUKS1 형식으로 변환할 수 없음 - %u번 키 슬롯이 LUKS1과 호환성이 없습니다."
@@ -2139,7 +2139,7 @@ msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encry
 msgstr "키 슬롯 암호화 매개변수는 LUKS2 키 슬롯 암호화 과정과 호환성이 없습니다."
 
 #: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
-#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "확인한 암호화 방식 명세 패턴 중 알려진 항목이 없습니다."
@@ -2167,7 +2167,7 @@ msgid "WARNING: The --keyfile-size option is being ignored, the read size is the
 msgstr "경고: 읽기 대상 크기가 암호화 키 크기와 동일한 상황에서는 --keyfile-size 옵션을 무시합니다.\n"
 
 #: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
-#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "%s의 blkid 검사 실패."
@@ -2247,7 +2247,7 @@ msgstr "%s 장치는 적절한 FVAULT2 장치가 아닙니다."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "FVAULT2 볼륨 키 크기를 확인할 수 없습니다. --key-size 옵션을 활용하십시오."
 
-#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "%s 장치는 여전히 동작중이며 지연된 제거 동작에 따라 제거 예정입니다.\n"
@@ -2436,7 +2436,7 @@ msgid "LUKS file container %s is too small for activation, there is no remaining
 msgstr "%s LUKS 파일 컨테이너의 동작을 개시하기에는 너무 작습니다. 데이터 저장에 필요한 여분 공간이 없습니다."
 
 #: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
-#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "키 슬롯을 누락한 상태에서 LUKS의 볼륨 키 크기를 알 수 없습니다. --key-size 옵션을 사용하십시오."
 
@@ -2731,7 +2731,7 @@ msgstr "--volume-key-keyring 옵션은 --hash 옵션 또는 --volume-key-file 
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "--volume-key-file 옵션 개별 지정에 따라 --key-size 옵션을 하나씩 짝으로 지정해야 합니다."
 
-#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "--cancel-deferred 옵션과 --deferred 옵션은 혼용할 수 없습니다."
 
@@ -2799,21 +2799,21 @@ msgstr "동작에 지정 키 슬롯이 필요합니다. --key-slot 매개변수
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<장치> [--type <형식>] [<명칭>]"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
 msgid "open device as <name>"
 msgstr "<명칭> 으로 장치를 엽니다"
 
 #: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
-#: src/integritysetup.c:562 src/integritysetup.c:564
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
 msgid "<name>"
 msgstr "<명칭>"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
 msgid "close device (remove mapping)"
 msgstr "장치를 닫습니다 (매핑 제거)"
 
-#: src/cryptsetup.c:3484 src/integritysetup.c:564
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
 msgid "resize active device"
 msgstr "활성 장치 크기를 조절합니다."
 
@@ -2941,7 +2941,7 @@ msgstr "<add|remove|import|export> <장치>"
 msgid "Manipulate LUKS2 tokens"
 msgstr "LUKS2 토큰을 처리합니다"
 
-#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3042,7 +3042,7 @@ msgstr ""
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: XTS 모드에서의 기본 키 크기(내부 키 2개)가 2배로 늘어납니다.\n"
 
-#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: %s 인자 값이 필요합니다"
@@ -3093,31 +3093,31 @@ msgstr "--priority 옵션은 ignore/normal/prefer 셋 중 한가지 값만 지
 msgid "Invalid maximal tries specification."
 msgstr "부적절한 최대 시도 지정 값입니다."
 
-#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
 msgid "Show this help message"
 msgstr "이 도움말 메시지를 나타냅니다"
 
-#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
 msgid "Display brief usage"
 msgstr "간단한 사용법을 나타냅니다"
 
-#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
 msgid "Print package version"
 msgstr "패키지 버전을 출력합니다"
 
-#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
 msgid "Help options:"
 msgstr "도움말 옵션:"
 
-#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[옵션...] <동작> <동작별_옵션>"
 
-#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
 msgid "Argument <action> missing."
 msgstr "<동작> 인자가 빠졌습니다."
 
-#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
 msgid "Unknown action."
 msgstr "알 수 없는 동작."
 
@@ -3222,7 +3222,7 @@ msgstr "명령에 <루트_해시> 또는 --root-hash-file 옵션 인자 값이 
 msgid "<data_device> <hash_device>"
 msgstr "<데이터_장치> <해시_장치>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:559
+#: src/veritysetup.c:485 src/integritysetup.c:562
 msgid "format device"
 msgstr "장치를 포매팅합니다"
 
@@ -3238,7 +3238,7 @@ msgstr "장치를 검증합니다"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<데이터_장치> <명칭> <해시_장치> [<루트_해시>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:562
+#: src/veritysetup.c:489 src/integritysetup.c:565
 msgid "show active device status"
 msgstr "장치 동작 상황을 보여줍니다"
 
@@ -3246,7 +3246,7 @@ msgstr "장치 동작 상황을 보여줍니다"
 msgid "<hash_device>"
 msgstr "<해시_장치>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:563
+#: src/veritysetup.c:490 src/integritysetup.c:566
 msgid "show on-disk information"
 msgstr "디스크 정보를 보여줍니다"
 
@@ -3310,20 +3310,20 @@ msgstr " (인라인 hw 태그)"
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "재계산 플래그 설정은 지원하지 않습니다. --wipe 옵션 사용을 대신 고려하십시오."
 
-#: src/integritysetup.c:382 src/integritysetup.c:546
+#: src/integritysetup.c:382 src/integritysetup.c:549
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "%s 장치는 적절한 \"무결성\" 장치가 아닙니다."
 
-#: src/integritysetup.c:559 src/integritysetup.c:563
+#: src/integritysetup.c:562 src/integritysetup.c:566
 msgid "<integrity_device>"
 msgstr "<무결성_장치>"
 
-#: src/integritysetup.c:560
+#: src/integritysetup.c:563
 msgid "<integrity_device> <name>"
 msgstr "<무결성_장치> <명칭>"
 
-#: src/integritysetup.c:583
+#: src/integritysetup.c:586
 #, c-format
 msgid ""
 "\n"
@@ -3334,7 +3334,7 @@ msgstr ""
 "<명칭> 은 %s에 만들 장치\n"
 "<무결성_장치>는 무결성 태그와 데이터가 들어간 장치입니다\n"
 
-#: src/integritysetup.c:588
+#: src/integritysetup.c:591
 #, c-format
 msgid ""
 "\n"
@@ -3347,51 +3347,55 @@ msgstr ""
 "\t체크섬 알고리즘: %s\n"
 "\t최대 키 파일 크기: %dkB\n"
 
-#: src/integritysetup.c:645
+#: src/integritysetup.c:648
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "부적절한 --%s 크기 값입니다. 최대값은 %u 바이트입니다."
 
-#: src/integritysetup.c:748
+#: src/integritysetup.c:751
 msgid "Both key file and key size options must be specified."
 msgstr "키 파일과 키 크기 옵션을 함께 지정해야 합니다."
 
-#: src/integritysetup.c:752
+#: src/integritysetup.c:755
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "저널 무결성 키와 키 크키 옵션을 함께 지정해야 합니다."
 
-#: src/integritysetup.c:755
+#: src/integritysetup.c:758
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "저널 무결성 키를 사용한다면 저널 무결성 알고리즘은 지정해야 합니다."
 
-#: src/integritysetup.c:759
+#: src/integritysetup.c:762
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "저널 암호화 키 파일과 키 크기 옵션을 함께 지정해야 합니다."
 
-#: src/integritysetup.c:762
+#: src/integritysetup.c:765
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "저널 암호화 키를 사용할 경우 저널 암호화 알고리즘을 지정해야 합니다."
 
-#: src/integritysetup.c:766
+#: src/integritysetup.c:769
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "복구 및 비트맵 모드 옵션은 혼용할 수 없습니다."
 
-#: src/integritysetup.c:773
+#: src/integritysetup.c:776
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "저널 옵션은 비트맵 모드에서 사용할 수 없습니다."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:781
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "비트맵 옵션은 비트맵 모드에서만 사용할 수 있습니다."
 
-#: src/integritysetup.c:784
+#: src/integritysetup.c:787
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "인라인 모드는 저널 옵션 또는 비트맵 옵션과 혼용할 수 없습니다."
 
-#: src/integritysetup.c:788
+#: src/integritysetup.c:791
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "인라인 모드는 개별 데이터 장치와 혼용할 수 없습니다."
 
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "키 지정 상태에서의 버림 기능은 HMAC 유사 키 지정 알고리즘에서만 사용할 수 있습니다."
+
 #: src/utils_tools.c:105
 msgid ""
 "\n"
@@ -3742,7 +3746,7 @@ msgstr "LUKS2 암호화 장치가 아닙니다. --decrypt 옵션의 사용이 
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "데이터 쉬프트 복원 기능을 활용하여 장치를 재암호화중입니다. 요청한 --resilience 옵션을 적용할 수 없습니다."
 
-#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "키 슬롯을 제외하고 LUKS 볼륨 키 크기를 확인할 수 없습니다. --new-key-size 옵션을 활용하십시오."
 
@@ -3776,7 +3780,7 @@ msgstr ""
 "요청한 --sector-size %1$<PRIu32> 옵션은 %4$s 장치에서 찾은\n"
 "%2$s 수퍼블록(블록 크기: %3$<PRIu32>바이트)과의 호환성이 없습니다."
 
-#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "분리 헤더(--header)를 제외한 암호화는 데이터 장치 용량을 줄이지 않고는(--reduce-device-size) 불가능합니다."
 
@@ -3844,42 +3848,43 @@ msgstr "재엄호화 초기화 실패. 헤더 백업은 %s에 있습니다."
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "분리한 헤더 장치에서만 LUKS2 해독을 지원합니다 (데이터 오프셋 0값으로)."
 
-#: src/utils_reencrypt.c:1490
-msgid "No token could unlock the device."
-msgstr "장치 잠금을 해제할 수 있는 토큰이 없습니다."
-
-#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
 msgid "Not enough free keyslots for reencryption."
 msgstr "재암호화에 활용할 여분의 키 슬롯이 부족합니다."
 
-#: src/utils_reencrypt.c:1562
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "장치 잠금을 해제할 수 있는 토큰이 없습니다."
+
+#: src/utils_reencrypt.c:1588
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "키 파일 또는 키 모음의 키 설명은 --key-slot 옵션의 값으로 또는 정확히 하나의 동작하는 키 슬롯과 사용할 수 있습니다."
 
-#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "키 슬롯 %d번의 암호 입력: "
 
-#: src/utils_reencrypt.c:1879
+#: src/utils_reencrypt.c:1905
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "데이터 암호화 암호 알고리즘을 %s(으)로 전환합니다.\n"
 
-#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "볼륨 키를 직접 전달하여 동작하고 있는 키 슬롯으로 장치를 재암호화하려면 --force-no-keyslots 옵션을 사용하십시오."
 
-#: src/utils_reencrypt.c:1996
+#: src/utils_reencrypt.c:2022
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "--new-volume-key-file 옵션은 --new-key-size 옵션과 함께 사용해야 합니다."
 
-#: src/utils_reencrypt.c:2038
+#: src/utils_reencrypt.c:2064
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "바뀐 데이터 세그먼트 매개변수가 없습니다. 재암호화를 멈추었습니다."
 
-#: src/utils_reencrypt.c:2075
+#: src/utils_reencrypt.c:2101
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3887,7 +3892,7 @@ msgstr ""
 "오프라인 장치에서의 암호화 섹터 크기 증가는 지원하지 않습니다.\n"
 "우선 장치를 동작하게 만들거나 --force-offline-reencrypt 옵션(위험!)을 사용하십시오."
 
-#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3896,58 +3901,58 @@ msgstr ""
 "\n"
 "재암호화를 중단했습니다."
 
-#: src/utils_reencrypt.c:2122
+#: src/utils_reencrypt.c:2148
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "강제 오프라인 모드에서 LUKS 재암호화 동작을 재개합니다.\n"
 
-#: src/utils_reencrypt.c:2145
+#: src/utils_reencrypt.c:2171
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "%s 장치에 망가진 LUKS 메타데이터가 있습니다. 동작을 멈춥니다."
 
-#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "%s 장치에 이미 LUKS 장치가 있습니다. 동작을 멈춥니다."
 
-#: src/utils_reencrypt.c:2189
+#: src/utils_reencrypt.c:2215
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "%s 장치가 이미 LUKS 재암호화 상태입니다. 동작을 멈춥니다."
 
-#: src/utils_reencrypt.c:2272
+#: src/utils_reencrypt.c:2298
 msgid "LUKS2 decryption requires --header option."
 msgstr "LUKS2 암호화 해제에 --header 옵션이 필요합니다."
 
-#: src/utils_reencrypt.c:2320
+#: src/utils_reencrypt.c:2346
 msgid "Command requires device as argument."
 msgstr "명쳥에 장치를 인자로 지정해야합니다."
 
-#: src/utils_reencrypt.c:2333
+#: src/utils_reencrypt.c:2359
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "버전이 맞지 않습니다. %s 장치는 LUKS1입니다."
 
-#: src/utils_reencrypt.c:2339
+#: src/utils_reencrypt.c:2365
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "버전이 맞지 않습니다. %s 장치는 LUKS1 재암호화 상태입니다."
 
-#: src/utils_reencrypt.c:2345
+#: src/utils_reencrypt.c:2371
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "버전이 맞지 않습니다. %s 장치는 LUKS2입니다."
 
-#: src/utils_reencrypt.c:2351
+#: src/utils_reencrypt.c:2377
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "버전이 맞지 않습니다. %s 장치는 LUKS2 재암호화 상태입니다."
 
-#: src/utils_reencrypt.c:2357
+#: src/utils_reencrypt.c:2383
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "LUKS2 재암호화를 이미 초기화했습니다. 동작을 멈줍니다."
 
-#: src/utils_reencrypt.c:2364
+#: src/utils_reencrypt.c:2390
 msgid "Device reencryption not in progress."
 msgstr "장치 재암호화를 진행하고 있지 않습니다."
 

From b476cda4eb633678ff2b58421bfc56afba1a8af3 Mon Sep 17 00:00:00 2001
From: Jakub Bogusz <qboosh@pld-linux.org>
Date: Fri, 4 Sep 2026 18:57:03 +0200
Subject: [PATCH 210/244] po: update pl.po (from translationproject.org)

---
 po/pl.po | 657 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 331 insertions(+), 326 deletions(-)

diff --git a/po/pl.po b/po/pl.po
index 8c4bc8031..352e97a90 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -5,10 +5,10 @@
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
+"Project-Id-Version: cryptsetup 2.8.8-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-07-09 10:46+0200\n"
-"PO-Revision-Date: 2026-07-11 18:45+0200\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-02 18:14+0200\n"
 "Last-Translator: Jakub Bogusz <qboosh@pld-linux.org>\n"
 "Language-Team: Polish <translation-team-pl@lists.sourceforge.net>\n"
 "Language: pl\n"
@@ -18,78 +18,78 @@ msgstr ""
 "X-Bugs: Report translation errors to the Language-Team address.\n"
 "Plural-Forms: nplurals=3; plural=n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"
 
-#: lib/libdevmapper.c:419
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "Nie można zainicjować device-mappera w czasie działania jako nie-root."
 
-#: lib/libdevmapper.c:422
+#: lib/libdevmapper.c:425
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "Nie można zainicjować device-mappera. Czy moduł jądra dm_mod jest wczytany?"
 
-#: lib/libdevmapper.c:1125
+#: lib/libdevmapper.c:1129
 msgid "Requested deferred flag is not supported."
 msgstr "Żądana flaga odroczona nie jest obsługiwana."
 
-#: lib/libdevmapper.c:1194
+#: lib/libdevmapper.c:1198
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "DM-UUID dla urządzenia %s został skrócony."
 
-#: lib/libdevmapper.c:1598
+#: lib/libdevmapper.c:1602
 msgid "Unknown dm target type."
 msgstr "Nieznany typ celu dm."
 
-#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
-#: lib/libdevmapper.c:1853
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "Żądane opcje dm-crypta dotyczące wydajności nie są obsługiwane."
 
-#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "Żądane opcje dm-verity dotyczące obsługi uszkodzenia danych nie są obsługiwane."
 
-#: lib/libdevmapper.c:1752
+#: lib/libdevmapper.c:1756
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "Żądana opcja taskletów dm-verity nie jest obsługiwana."
 
-#: lib/libdevmapper.c:1764
+#: lib/libdevmapper.c:1768
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "Żądane opcje FEC dm-verity nie są obsługiwane."
 
-#: lib/libdevmapper.c:1770
+#: lib/libdevmapper.c:1774
 msgid "Requested data integrity options are not supported."
 msgstr "Żądane opcje integralności danych nie są obsługiwane."
 
-#: lib/libdevmapper.c:1774
+#: lib/libdevmapper.c:1778
 msgid "Requested sector_size option is not supported."
 msgstr "Żądana opcja sector_size nie jest obsługiwana."
 
-#: lib/libdevmapper.c:1779
+#: lib/libdevmapper.c:1783
 msgid "The device size is not multiple of the requested sector size."
 msgstr "Rozmiar urządzenia nie jest wielokrotnością żądanego rozmiaru sektura."
 
-#: lib/libdevmapper.c:1783
+#: lib/libdevmapper.c:1787
 msgid "Requested integrity_key_size option is not supported."
 msgstr "Żądana opcja integrity_key_size nie jest obsługiwana."
 
-#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Żądane automatyczne przeliczenie znaczników integralności nie jest obsługiwane."
 
-#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2799
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Discard/TRIM is not supported."
 msgstr "Porzucenie/TRIM nie jest obsługiwane."
 
-#: lib/libdevmapper.c:1808
+#: lib/libdevmapper.c:1812
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "Żądany tryb bitmapy dm-integrity nie jest obsługiwany."
 
-#: lib/libdevmapper.c:1814
+#: lib/libdevmapper.c:1818
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr "Żądany tryb wbudowany dm-integrity nie jest obsługiwany."
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2877
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "Nie udało się odpytać segmentu dm-%s."
@@ -140,7 +140,7 @@ msgstr "Nie można zainicjować backendu kryptograficznego RNG."
 msgid "Cannot initialize crypto backend."
 msgstr "Nie można zainicjować backendu kryptograficznego."
 
-#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Algorytm skrótu %s nie jest obsługiwany."
@@ -154,7 +154,7 @@ msgstr "Błąd przetwarzania klucza (użyto algorytmu skrótu %s)."
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Nie można określić rodzaju urządzenia. Niezgodny sposób uaktywniania urządzenia?"
 
-#: lib/setup.c:398 lib/setup.c:4177
+#: lib/setup.c:398 lib/setup.c:4193
 msgid "This operation is supported only for LUKS device."
 msgstr "Ta operacja jest obsługiwana tylko dla urządzeń LUKS."
 
@@ -176,7 +176,7 @@ msgstr "Numer klucza %d jest błędny, proszę wybrać wartość między 0 a %d.
 msgid "Key slot %d is full, please select another one."
 msgstr "Miejsce na klucz %d jest pełne, proszę wybrać inne."
 
-#: lib/setup.c:534 lib/setup.c:3878
+#: lib/setup.c:534 lib/setup.c:3888
 msgid "Device size is not aligned to device logical block size."
 msgstr "Rozmiar urządzenia nie jest wyrównany do rozmiaru bloku logicznego urządzenia."
 
@@ -185,7 +185,7 @@ msgstr "Rozmiar urządzenia nie jest wyrównany do rozmiaru bloku logicznego urz
 msgid "Header detected but device %s is too small."
 msgstr "Wykryto nagłówek, ale urządzenie %s jest zbyt małe."
 
-#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
 #: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Ta operacja nie jest obsługiwana dla tego rodzaju urządzenia."
@@ -198,553 +198,553 @@ msgstr "Niedozwolona operacja w trakcie ponownego szyfrowania."
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nie udało się wycofać zmian w metadanych LUKS2 w pamięci."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
 #: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
 #: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
 #: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
-#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Urządzenie %s nie jest prawidłowym urządzeniem LUKS."
 
-#: lib/setup.c:899 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Nieobsługiwana wersja LUKS %d."
 
-#: lib/setup.c:1273
+#: lib/setup.c:1279
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Nie wykryto znanego wzorca określającego szyfr dla aktywnego urządzenia %s."
 
-#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
-#: lib/setup.c:3786 lib/setup.c:5850
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
 #, c-format
 msgid "Device %s is not active."
 msgstr "Urządzenie %s nie jest aktywne."
 
-#: lib/setup.c:1535
+#: lib/setup.c:1545
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Urządzenie stojące za urządzeniem szyfrowanym %s zniknęło."
 
-#: lib/setup.c:1617
+#: lib/setup.c:1627
 msgid "Invalid plain crypt parameters."
 msgstr "Błędne parametry szyfru plain."
 
-#: lib/setup.c:1622 lib/setup.c:2672
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Invalid key size."
 msgstr "Błędny rozmiar klucza."
 
-#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID nie jest obsługiwany dla tego rodzaju szyfrowania."
 
-#: lib/setup.c:1632 lib/setup.c:2682
+#: lib/setup.c:1642 lib/setup.c:2692
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Osobne urządzenie metadanych nie jest obsługiwane dla tego rodzaju szyfrowania."
 
-#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
 #: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Nieobsługiwany rozmiar sektora szyfrowania."
 
-#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
 msgid "Device size is not aligned to requested sector size."
 msgstr "Rozmiar urządzenia nie jest wyrównany do żądanego rozmiaru sektura."
 
-#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
 msgid "Can't format LUKS without device."
 msgstr "Nie można sformatować LUKS-a bez urządzenia."
 
-#: lib/setup.c:1707 lib/setup.c:1959
+#: lib/setup.c:1717 lib/setup.c:1969
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Urządzenie Zoned %s nie może być używane dla nagłówka LUKS."
 
-#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Żądane wyrównanie metadanych nie jest zgodne z offsetem danych."
 
-#: lib/setup.c:1754 lib/setup.c:1984
+#: lib/setup.c:1764 lib/setup.c:1994
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "UWAGA: urządzenie DAX może uszkodzić dane, ponieważ nie gwarantuje atomowych uaktualnień sektorów.\n"
 
-#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
-#: lib/setup.c:2567 lib/setup.c:2899
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Nie można wymazać nagłówka na urządzeniu %s."
 
-#: lib/setup.c:1805 lib/setup.c:2164
+#: lib/setup.c:1815 lib/setup.c:2174
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Urządzenie %s jest zbyt małe do uaktywnienia, nie ma miejsca pozostałego na dane.\n"
 
-#: lib/setup.c:1846
+#: lib/setup.c:1856
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Klucz wolumenu jest zbyt mały do szyfrowania z rozszerzeniami integralności."
 
-#: lib/setup.c:1850
+#: lib/setup.c:1860
 msgid "Integrity key size is too small."
 msgstr "Rozmiar klucza integralności jest zbyt mały."
 
-#: lib/setup.c:1859
+#: lib/setup.c:1869
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Szyfr %s-%s (rozmiar klucza w bitach: %zd) nie jest dostępny."
 
-#: lib/setup.c:1900
+#: lib/setup.c:1910
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "UWAGA: uaktywnienie urządzenia się nie powiedzie, dm-crypt nie ma obsługi żądanego rozmiaru sektora szyfrowania.\n"
 
-#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
 #: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Urządzenie %s jest zbyt małe."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Nie można sformatować urządzenia %s, które jest w użyciu."
 
-#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Nie można sformatować urządzenia %s, brak uprawnień."
 
-#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Nie można sformatować integralności dla urządzenia %s."
 
-#: lib/setup.c:2151 lib/setup.c:2629
+#: lib/setup.c:2161 lib/setup.c:2639
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Nie można sformatować urządzenia %s."
 
-#: lib/setup.c:2194
+#: lib/setup.c:2204
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Nie można pobrać parametrów wyrównania OPAL."
 
-#: lib/setup.c:2206
+#: lib/setup.c:2216
 msgid "Bogus OPAL logical block size."
 msgstr "Błędny rozmiar bloku logicznego OPAL."
 
-#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Błędny rozmiar bloku logicznego OPAL różni się od rozmiaru bloku urządzenia."
 
-#: lib/setup.c:2217
+#: lib/setup.c:2227
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Żądana pozycja danych nie jest zgodna z rozmiarem bloku OPAL."
 
-#: lib/setup.c:2224
+#: lib/setup.c:2234
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Żądane wyrównanie danych nie jest zgodne z wyrównaniem OPAL."
 
-#: lib/setup.c:2244
+#: lib/setup.c:2254
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Pozycja danych nie jest zgodna z wymaganiami wyrównania OPAL."
 
-#: lib/setup.c:2257
+#: lib/setup.c:2267
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Żądane wyrównanie danych nie jest zgodne z wymaganiami wyrównania zakresu blokowania."
 
-#: lib/setup.c:2471
+#: lib/setup.c:2481
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Kompensacja rozmiaru urządzenia o %<PRIu64> sektorów, aby wyrównać do rozdzielczości wyrównania OPAL."
 
-#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Nie udało się uzyskać blokady OPAL na urządzeniu %s."
 
-#: lib/setup.c:2541
+#: lib/setup.c:2551
 msgid "Incorrect OPAL Admin key."
 msgstr "Niepoprawny klucz administratora OPAL."
 
-#: lib/setup.c:2543
+#: lib/setup.c:2553
 msgid "Cannot setup OPAL segment."
 msgstr "Nie można ustawić segmentu OPAL."
 
-#: lib/setup.c:2625
+#: lib/setup.c:2635
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Nie można sformatować urządzenia %s, urządzenie OPAL obecnie wygląda na w pełni zabezpieczone przed zapisem."
 
-#: lib/setup.c:2627
+#: lib/setup.c:2637
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "To prawdopodobnie błąd w oprogramowaniu sprzętowym. W celu odtworzenia można zresetować PSID OPAL i połączyć ponownie."
 
-#: lib/setup.c:2647
+#: lib/setup.c:2657
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Reset zakresu blokowania %d na urządzeniu %s nie powiódł się."
 
-#: lib/setup.c:2667
+#: lib/setup.c:2677
 msgid "Can't format LOOPAES without device."
 msgstr "Nie można sformatować urządzenia LUKSAES bez urządzenia."
 
-#: lib/setup.c:2712
+#: lib/setup.c:2722
 msgid "Can't format VERITY without device."
 msgstr "Nie można sformatować VERITY bez urządzenia."
 
-#: lib/setup.c:2723 lib/verity/verity.c:88
+#: lib/setup.c:2733 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Nieobsługiwany typ hasza VERITY %d."
 
-#: lib/setup.c:2729 lib/verity/verity.c:96
+#: lib/setup.c:2739 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Nieobsługiwany rozmiar bloku VERITY."
 
-#: lib/setup.c:2734 lib/verity/verity.c:61
+#: lib/setup.c:2744 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Nieobsługiwany offset hasza VERITY."
 
-#: lib/setup.c:2739
+#: lib/setup.c:2749
 msgid "Unsupported VERITY FEC offset."
 msgstr "Nieobsługiwany offset FEC VERITY."
 
-#: lib/setup.c:2763
+#: lib/setup.c:2773
 msgid "Data area overlaps with hash area."
 msgstr "Obszar danych zachodzi na obszar skrótów."
 
-#: lib/setup.c:2788
+#: lib/setup.c:2798
 msgid "Hash area overlaps with FEC area."
 msgstr "Obszar skrótu zachodzi na obszar FEC."
 
-#: lib/setup.c:2795
+#: lib/setup.c:2805
 msgid "Data area overlaps with FEC area."
 msgstr "Obszar danych zachodzi na obszar FEC."
 
-#: lib/setup.c:2887
+#: lib/setup.c:2897
 msgid "Integrity key size mismatch."
 msgstr "Niezgodność rozmiaru klucza integralności."
 
-#: lib/setup.c:2938
+#: lib/setup.c:2948
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "UWAGA: żądany rozmiar znacznika %d B różni się od rozmiaru wyjścia %s (%d B).\n"
 
-#: lib/setup.c:3051 lib/setup.c:3153
+#: lib/setup.c:3061 lib/setup.c:3163
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Żądany nieznany lub nieobsługiwany typ urządzenia %s."
 
-#: lib/setup.c:3067
+#: lib/setup.c:3077
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Urządzenie %s nie zapewnia wbudowanych pól danych integralności."
 
-#: lib/setup.c:3073
+#: lib/setup.c:3083
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Rozmiar znacznika wbudowanego %<PRIu32> B jest większy niż %<PRIu32> zapewniany przez urządzenie %s."
 
-#: lib/setup.c:3088
+#: lib/setup.c:3098
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Sektor musi być tego samego rozmiaru, co sektor sprzętowy urządzenia (%zu B)."
 
-#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Nieobsługiwane parametry urządzenia %s."
 
-#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
 #: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Niezgodne parametry dla urządzenia %s."
 
-#: lib/setup.c:3650
+#: lib/setup.c:3660
 msgid "Crypt devices mismatch."
 msgstr "Urządzenia szyfrowane nie zgadzają się."
 
-#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
 #: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Nie udało się przeładować urządzenia %s."
 
-#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
 #: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Nie udało się wstrzymać urządzenia %s."
 
-#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
 #: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
 #: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Nie udało wznowić urządzenia %s."
 
-#: lib/setup.c:3720
+#: lib/setup.c:3730
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Błąd krytyczny przy przeładowywaniu urządzenia %s (w oparciu o urządzenie %s)."
 
-#: lib/setup.c:3723 lib/setup.c:3725
+#: lib/setup.c:3733 lib/setup.c:3735
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Nie udało się przełączyć urządzenia %s na dm-error."
 
-#: lib/setup.c:3768
+#: lib/setup.c:3778
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Nie można zmienić rozmiaru urządzenia LUKS2 o rozmiarze statycznym."
 
-#: lib/setup.c:3773
+#: lib/setup.c:3783
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Zmiana rozmiaru urządzenia LUKS2 z ochroną integralności nie jest obsługiwana."
 
-#: lib/setup.c:3819
+#: lib/setup.c:3829
 msgid "Cannot resize loop device."
 msgstr "Nie można zmienić rozmiaru urządzenia loopback."
 
-#: lib/setup.c:3863
+#: lib/setup.c:3873
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "UWAGA: maksymalny rozmiar jest już ustawiony lub jądro nie obsługuje zmiany rozmiaru.\n"
 
-#: lib/setup.c:3929
+#: lib/setup.c:3939
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Zmiana rozmiaru nie powiodła się, jądro tego nie obsługuje."
 
-#: lib/setup.c:3961
+#: lib/setup.c:3971
 msgid "Do you really want to change UUID of device?"
 msgstr "Czy na pewno zmienić UUID urządzenia?"
 
-#: lib/setup.c:4053
+#: lib/setup.c:4061 lib/setup.c:4069
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Plik nagłówka kopii zapasowej nie zawiera zgodnego nagłówka LUKS."
 
-#: lib/setup.c:4160
+#: lib/setup.c:4176
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Wolumen %s nie jest aktywny."
 
-#: lib/setup.c:4215
+#: lib/setup.c:4231
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Wolumen %s już został wstrzymany."
 
-#: lib/setup.c:4241
+#: lib/setup.c:4257
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Wstrzymywanie nie jest obsługiwane dla urządzenia %s."
 
-#: lib/setup.c:4243 lib/setup.c:4251
+#: lib/setup.c:4259 lib/setup.c:4267
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Błąd podczas wstrzymywania urządzenia %s."
 
-#: lib/setup.c:4266
+#: lib/setup.c:4282
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Urządzenie %s zostało wstrzymane, ale sprzętowe urządzenie OPAL nie może być zablokowane."
 
-#: lib/setup.c:4297 lib/setup.c:4491
+#: lib/setup.c:4313 lib/setup.c:4507
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Wznawianie nie jest obsługiwane dla urządzenia %s."
 
-#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Błąd podczas wznawiania urządzenia %s."
 
-#: lib/setup.c:4335
+#: lib/setup.c:4351
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Nie udało się odłączyć klucza wolumenu z pęku kluczy podanego przez użytkownika."
 
-#: lib/setup.c:4457 lib/setup.c:5637
+#: lib/setup.c:4473 lib/setup.c:5653
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Nie udało się dołączuć klucza wolumenu do pęku kluczy zdefiniowanego przez użytkownika."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2722
+#: lib/setup.c:4572 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Wolumen %s nie jest wstrzymany."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
 #: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
-#: src/utils_reencrypt.c:1969
+#: src/utils_reencrypt.c:1995
 msgid "Volume key does not match the volume."
 msgstr "Klucz wolumenu nie pasuje do wolumenu."
 
-#: lib/setup.c:4821
+#: lib/setup.c:4837
 msgid "Failed to swap new key slot."
 msgstr "Nie udało się podstawić nowego klucza."
 
-#: lib/setup.c:4919
+#: lib/setup.c:4935
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Numer klucza %d jest nieprawidłowy."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
 #: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Klucz %d nie jest aktywny."
 
-#: lib/setup.c:4944
+#: lib/setup.c:4960
 msgid "Device header overlaps with data area."
 msgstr "Nagłówek urządzenia zachodzi na obszar danych."
 
-#: lib/setup.c:5165
+#: lib/setup.c:5181
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Ponowne szyfrowanie trwa. Nie można uaktywnić urządzenia."
 
-#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
 #: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Nie udało się uzyskać blokady ponownego szyfrowania."
 
-#: lib/setup.c:5189
+#: lib/setup.c:5205
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Odtwarzanie ponownego szyfrowania LUKS2 przy użyciu kluczy wolumenu nie powiodło się."
 
-#: lib/setup.c:5325
+#: lib/setup.c:5341
 #, c-format
 msgid "Device %s already exists."
 msgstr "Urządzenie %s już istnieje."
 
-#: lib/setup.c:5332
+#: lib/setup.c:5348
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Nie można użyć urządzenia %s, nazwa jest nieprawidłowa lub nadal w użyciu."
 
-#: lib/setup.c:5344
+#: lib/setup.c:5360
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Klucze ponownego szyfrowania wolumenu nie pasują do wolumenu."
 
-#: lib/setup.c:5361
+#: lib/setup.c:5377
 msgid "Incorrect volume key specified for plain device."
 msgstr "Podano niewłaściwy klucz wolumenu dla zwykłego urządzenia."
 
-#: lib/setup.c:5387 lib/setup.c:5448
+#: lib/setup.c:5403 lib/setup.c:5464
 msgid "Device type is not properly initialized."
 msgstr "Typ urządzenia nie został właściwie zainicjalizowany."
 
-#: lib/setup.c:5486
+#: lib/setup.c:5502
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Pęk kluczy w jądrze nie jest obsługiwany przez jądro."
 
-#: lib/setup.c:5490
+#: lib/setup.c:5506
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Brak pęku kluczy w jądrze: wymagany do przekazania podpisu do jądra."
 
-#: lib/setup.c:5545
+#: lib/setup.c:5561
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Nie można użyć klucza pęku kluczy %s."
 
-#: lib/setup.c:5758
+#: lib/setup.c:5774
 msgid "Incorrect root hash specified for verity device."
 msgstr "Podano niewłaściwy hasz główny dla urządzenia VERITY."
 
-#: lib/setup.c:5799 lib/setup.c:5824
+#: lib/setup.c:5815 lib/setup.c:5840
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL nie obsługuje odroczonej dezaktywacji."
 
-#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Urządzenie %s jest nadal w użyciu."
 
-#: lib/setup.c:5832
+#: lib/setup.c:5848
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Nie udało się anulować opóźnionego usuwania z urządzenia %s."
 
-#: lib/setup.c:5854
+#: lib/setup.c:5870
 #, c-format
 msgid "Invalid device %s."
 msgstr "Błędne urządzenie %s."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6017
 msgid "Volume key buffer too small."
 msgstr "Bufor klucza wolumenu zbyt mały."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6028
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia LUKS2."
 
-#: lib/setup.c:6021
+#: lib/setup.c:6037
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia LUKS1."
 
-#: lib/setup.c:6035
+#: lib/setup.c:6051
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nie można odtworzyć klucza wolumenu dla zwykłego urządzenia."
 
-#: lib/setup.c:6043
+#: lib/setup.c:6059
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Nie można odtworzyć hasza głównego dla urządzenia VERITY."
 
-#: lib/setup.c:6052
+#: lib/setup.c:6068
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia BITLK."
 
-#: lib/setup.c:6057
+#: lib/setup.c:6073
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nie można odtworzyć klucza wolumenu dla urządzenia FVAULT2."
 
-#: lib/setup.c:6059
+#: lib/setup.c:6075
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Ta operacja nie jest obsługiwana dla urządzenia szyfrującego %s."
 
-#: lib/setup.c:6244 lib/setup.c:6255
+#: lib/setup.c:6260 lib/setup.c:6271
 msgid "Dump operation is not supported for this device type."
 msgstr "Operacja zrzutu nie jest obsługiwana dla tego rodzaju urządzenia."
 
-#: lib/setup.c:6635
+#: lib/setup.c:6651
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Offset danych nie jest wielokrotnością liczby bajtów %u."
 
-#: lib/setup.c:6943
+#: lib/setup.c:6959
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Nie można przekonwertować urządzenia %s, które jest nadal w użyciu."
 
-#: lib/setup.c:7251 lib/setup.c:7406
+#: lib/setup.c:7267 lib/setup.c:7422
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Nie udało się przypisać klucza %u jako nowego klucza wolumenu."
 
-#: lib/setup.c:7275
+#: lib/setup.c:7291
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Nie udało się zainicjować domyślnych parametrów klucza LUKS2."
 
-#: lib/setup.c:7281
+#: lib/setup.c:7297
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Nie udało się przypisać klucza %d do skrótu."
 
-#: lib/setup.c:7523
+#: lib/setup.c:7539
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nie można dodać klucza, wszystkie miejsca na klucze wyłączone i nie podano klucza wolumenu."
 
-#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Nie udało się załadować klucza do pęku kluczy w jądrze."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7823
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Nie udało się odnaleźć pęku kluczy opisanego przez \"%s\"."
 
-#: lib/setup.c:7872
+#: lib/setup.c:7888
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Nie udało się uzyskać globalnej blokady serializacji dostępu ciężkiego pamięciowo."
 
@@ -786,7 +786,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Nie można odczytać żądanej ilości danych."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Urządzenie %s nie istnieje lub dostęp jest zabroniony."
@@ -902,16 +902,16 @@ msgstr "Żądana liczba wątków PBKDF nie może być zerowa."
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "W trybie FIPS obsługiwana jest tylko PBKDF2."
 
-#: lib/utils_benchmark.c:171
+#: lib/utils_benchmark.c:175
 msgid "PBKDF benchmark disabled but iterations not set."
 msgstr "Test wydajności PBKDF jest wyłączony, ale nie ustawiono liczby iteracji."
 
-#: lib/utils_benchmark.c:190
+#: lib/utils_benchmark.c:194
 #, c-format
 msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr "Niekompatybilne opcje PBKDF2 (przy użyciu algorytmu skrótu %s)."
 
-#: lib/utils_benchmark.c:210
+#: lib/utils_benchmark.c:214
 msgid "Not compatible PBKDF options."
 msgstr "Niekompatybilne opcje PBKDF."
 
@@ -960,9 +960,9 @@ msgstr "Rozmiar klucza w trybie XTS musi wynosić 256 lub 512 bitów."
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Określenie szyfru powinno być w formacie [szyfr]-[tryb]-[iv]."
 
-#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
-#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "Nie można zapisać na urządzenie %s, brak uprawnień."
@@ -980,13 +980,13 @@ msgstr "Nie udało się uzyskać dostępu do urządzenia do tymczasowego przecho
 msgid "IO error while encrypting keyslot."
 msgstr "Błąd we/wy podczas szyfrowania klucza."
 
-#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
@@ -1001,61 +1001,61 @@ msgstr "Błąd we/wy podczas odszyfrowywania klucza."
 msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr "Urządzenie %s jest zbyt małe (LUKS1 wymaga przynajmniej %<PRIu64> bajtów)."
 
-#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
-#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
-#: lib/luks1/keymanage.c:181
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
 #, c-format
 msgid "LUKS keyslot %u is invalid."
 msgstr "Numer klucza LUKS %u jest nieprawidłowy."
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "Żądany plik kopii zapasowej nagłówka %s już istnieje."
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "Nie można utworzyć pliku kopii zapasowej nagłówka %s."
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "Nie można zapisać pliku kopii zapasowej nagłówka %s."
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
 msgid "Backup file does not contain valid LUKS header."
 msgstr "Plik kopii zapasowej nie zawiera prawidłowego nagłówka LUKS."
 
-#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1450
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "Nie można otworzyć pliku kopii zapasowej nagłówka %s."
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "Nie można odczytać pliku kopii zapasowej nagłówka %s."
 
-#: lib/luks1/keymanage.c:326
+#: lib/luks1/keymanage.c:331
 msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr "Offset danych lub rozmiar klucza różnią się między urządzeniem a kopią zapasową; przywrócenie nie powiodło się."
 
-#: lib/luks1/keymanage.c:334
+#: lib/luks1/keymanage.c:339
 #, c-format
 msgid "Device %s %s%s"
 msgstr "Urządzenie %s %s%s"
 
-#: lib/luks1/keymanage.c:335
+#: lib/luks1/keymanage.c:340
 msgid "does not contain LUKS header. Replacing header can destroy data on that device."
 msgstr "nie zawiera nagłówka LUKS. Nadpisanie nagłówka może zniszczyć dane na tym urządzeniu."
 
-#: lib/luks1/keymanage.c:336
+#: lib/luks1/keymanage.c:341
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "już zawiera nagłówek LUKS. Nadpisanie nagłówka zniszczy istniejące klucze."
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1063,130 +1063,130 @@ msgstr ""
 "\n"
 "UWAGA: nagłówek prawdziwego urządzenia ma inny UUID niż kopia zapasowa!"
 
-#: lib/luks1/keymanage.c:385
+#: lib/luks1/keymanage.c:390
 msgid "Non standard key size, manual repair required."
 msgstr "Niestandardowy rozmiar klucza, wymagana ręczna naprawa."
 
-#: lib/luks1/keymanage.c:395
+#: lib/luks1/keymanage.c:400
 msgid "Non standard keyslots alignment, manual repair required."
 msgstr "Niestandardowe wyrównanie kluczy, wymagana ręczna naprawa."
 
-#: lib/luks1/keymanage.c:404
+#: lib/luks1/keymanage.c:409
 #, c-format
 msgid "Cipher mode repaired (%s -> %s)."
 msgstr "Tryb szyfru poprawiony (%s -> %s)."
 
-#: lib/luks1/keymanage.c:415
+#: lib/luks1/keymanage.c:420
 #, c-format
 msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Skrót szyfru poprawiony na małe litery (%s)."
 
-#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:756
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Żądany skrót LUKS %s nie jest obsługiwany."
 
-#: lib/luks1/keymanage.c:431
+#: lib/luks1/keymanage.c:436
 msgid "Repairing keyslots."
 msgstr "Naprawianie kluczy."
 
-#: lib/luks1/keymanage.c:450
+#: lib/luks1/keymanage.c:455
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr "Klucz %i: naprawiono offset (%u -> %u)."
 
-#: lib/luks1/keymanage.c:458
+#: lib/luks1/keymanage.c:463
 #, c-format
 msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr "Klucz %i: naprawiono pasy (%u -> %u)."
 
-#: lib/luks1/keymanage.c:467
+#: lib/luks1/keymanage.c:472
 #, c-format
 msgid "Keyslot %i: bogus partition signature."
 msgstr "Klucz %i: błędna sygnatura partycji."
 
-#: lib/luks1/keymanage.c:472
+#: lib/luks1/keymanage.c:477
 #, c-format
 msgid "Keyslot %i: salt wiped."
 msgstr "Klucz %i: zarodek wymazany."
 
-#: lib/luks1/keymanage.c:489
+#: lib/luks1/keymanage.c:494
 msgid "Writing LUKS header to disk."
 msgstr "Zapis nagłówka LUKS na dysk."
 
-#: lib/luks1/keymanage.c:494
+#: lib/luks1/keymanage.c:499
 msgid "Repair failed."
 msgstr "Naprawa nie powiodła się."
 
-#: lib/luks1/keymanage.c:549
+#: lib/luks1/keymanage.c:554
 #, c-format
 msgid "LUKS cipher mode %s is invalid."
 msgstr "Tryb szyfru LUKS %s jest nieprawidłowy."
 
-#: lib/luks1/keymanage.c:554
+#: lib/luks1/keymanage.c:559
 #, c-format
 msgid "LUKS hash %s is invalid."
 msgstr "Skrót LUKS %s jest nieprawidłowy."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "W nagłówku LUKS nie wykryto żadnych znanych problemów."
 
-#: lib/luks1/keymanage.c:689
+#: lib/luks1/keymanage.c:690
 #, c-format
 msgid "Error during update of LUKS header on device %s."
 msgstr "Błąd podczas uaktualniania nagłówka LUKS na urządzeniu %s."
 
-#: lib/luks1/keymanage.c:697
+#: lib/luks1/keymanage.c:698
 #, c-format
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Błęd podczas ponownego odczytu nagłówka LUKS po uaktualnieniu na urządzeniu %s."
 
-#: lib/luks1/keymanage.c:750
+#: lib/luks1/keymanage.c:751
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Offset danych dla nagłówka LUKS musi wynosić 0 lub więcej niż rozmiar nagłówka."
 
-#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
-#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Podano zły format LUKS UUID."
 
-#: lib/luks1/keymanage.c:783
+#: lib/luks1/keymanage.c:784
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Nie można utworzyć nagłówka LUKS: odczyt losowego zarodka nie powiódł się."
 
-#: lib/luks1/keymanage.c:811
+#: lib/luks1/keymanage.c:812
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Nie można utworzyć nagłówka LUKS: uzyskanie skrótu nagłówka nie powiodło się (przy użyciu algorytmu %s)."
 
-#: lib/luks1/keymanage.c:856
+#: lib/luks1/keymanage.c:857
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Klucz numer %d jest aktywny, należy go najpierw wyczyścić."
 
-#: lib/luks1/keymanage.c:862
+#: lib/luks1/keymanage.c:863
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Klucz %d zawiera zbyt mało pasów. Zmieniony nagłówek?"
 
-#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Przepełnienie wartości iteracji PBKDF2"
 
-#: lib/luks1/keymanage.c:1022
+#: lib/luks1/keymanage.c:1023
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Nie można otworzyć klucza (przy użyciu skrótu %s)."
 
-#: lib/luks1/keymanage.c:1118
+#: lib/luks1/keymanage.c:1119
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Numer klucza %d jest błędny, proszę wybrać numer od 0 do %d."
 
-#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Nie można wymazać urządzenia %s."
@@ -1364,33 +1364,33 @@ msgstr "Ta operacja nie jest obsługiwana."
 msgid "Unexpected key data size."
 msgstr "Nieoczekiwany rozmiar danych klucza."
 
-#: lib/bitlk/bitlk.c:1442
+#: lib/bitlk/bitlk.c:1448
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "To urządzenie BITLK jest w nieobsługiwanym stanie i może być uaktywnione."
 
-#: lib/bitlk/bitlk.c:1447
+#: lib/bitlk/bitlk.c:1453
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Urządzenia BITLK o typie '%s' nie mogą być uaktywnione."
 
-#: lib/bitlk/bitlk.c:1486
+#: lib/bitlk/bitlk.c:1492
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "UWAGA: rozmiar wolumenu BitLockera %<PRIu64> nie zgadza się z rozmiarem urządzenia %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1613
+#: lib/bitlk/bitlk.c:1634
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Nie można uaktywnić urządzenia, brak obsługi BITLK IV w module dm-crypt jądra."
 
-#: lib/bitlk/bitlk.c:1617
+#: lib/bitlk/bitlk.c:1638
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Nie można uaktywnić urządzenia, brak obsługi dyfuzora BITLK Elephant w module dm-crypt jądra."
 
-#: lib/bitlk/bitlk.c:1621
+#: lib/bitlk/bitlk.c:1642
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Nie można uaktywnić urządzenia, brak obsługi dużego rozmiaru sektora w module dm-crypt jądra."
 
-#: lib/bitlk/bitlk.c:1625
+#: lib/bitlk/bitlk.c:1646
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Nie można uaktywnić urządzenia, brak modułu jądra dm-zero."
 
@@ -1547,24 +1547,24 @@ msgstr "Nie udało się określić rozmiaru urządzenia %s."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Wykryto niezgodne metadane dm-integrity jądra (wersja %u) na %s."
 
-#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Jądro nie obsługuje odwzorowań dm-integrity."
 
-#: lib/integrity/integrity.c:314
+#: lib/integrity/integrity.c:315
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Jądro nie obsługuje stałego wyrównania metadanych dm-integrity."
 
-#: lib/integrity/integrity.c:323
+#: lib/integrity/integrity.c:324
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Jądro odmawia uaktywnienia niebezpiecznej opcji przeliczenia (p. stare opcje aktywacji, aby wymusić)."
 
-#: lib/integrity/integrity.c:329
+#: lib/integrity/integrity.c:330
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Jądro nie obsługuje trybu wbudowanego dm-integrity."
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1510
+#: lib/luks2/luks2_json_metadata.c:1502
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "Nie udało się uzyskać blokady dla zapisu na urządzeniu %s."
@@ -1586,22 +1586,22 @@ msgstr ""
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "UWAGA: obszar kluczy (%<PRIu64> bajtów) bardzo mały, dostępna liczba kluczy LUKS2 jest bardzo ograniczona.\n"
 
-#: lib/luks2/luks2_json_format.c:418
+#: lib/luks2/luks2_json_format.c:427
 msgid "Requested data offset is too small."
 msgstr "Żądany offset danych jest zbyt mały."
 
-#: lib/luks2/luks2_json_format.c:459
+#: lib/luks2/luks2_json_format.c:468
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "UWAGA: rozmiar metadanych LUKS2 zmienił się na %<PRIu64> (w bajtach).\n"
 
-#: lib/luks2/luks2_json_format.c:463
+#: lib/luks2/luks2_json_format.c:472
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "UWAGA: rozmiar obszaru kluczy LUKS2 zmienił się na %<PRIu64> (w bajtach).\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Nie udało się uzyskać blokady do odczytu na urządzeniu %s."
@@ -1610,33 +1610,33 @@ msgstr "Nie udało się uzyskać blokady do odczytu na urządzeniu %s."
 msgid "Label is too long."
 msgstr "Etykieta jest zbyt długa."
 
-#: lib/luks2/luks2_json_metadata.c:1435
+#: lib/luks2/luks2_json_metadata.c:1427
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "Wykryto zabronione wymagania LUKS2 w kopii zapasowej %s."
 
-#: lib/luks2/luks2_json_metadata.c:1474
+#: lib/luks2/luks2_json_metadata.c:1466
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "Offset danych różni się między urządzeniem a kopią zapasową; przywrócenie nie powiodło się."
 
-#: lib/luks2/luks2_json_metadata.c:1480
+#: lib/luks2/luks2_json_metadata.c:1472
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "Nagłówek binarny z rozmiarem obszarów kluczy różni się między urządzeniem a kopią zapasową; przywrócenie nie powiodło się."
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1479
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "Urządzenie %s %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "nie zawiera nagłówka LUKS2. Nadpisanie nagłówka może zniszczyć dane na tym urządzeniu."
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1481
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "już zawiera nagłówek LUKS2. Nadpisanie nagłówka zniszczy istniejące klucze."
 
-#: lib/luks2/luks2_json_metadata.c:1491
+#: lib/luks2/luks2_json_metadata.c:1483
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1646,7 +1646,7 @@ msgstr ""
 "UWAGA: wykryto nieznane wymagania LUKS2 w nagłówku prawdziwego urządzenia!\n"
 "Nadpisanie nagłówka kopią zapasową może uszkodzić dane na tym urządzeniu!"
 
-#: lib/luks2/luks2_json_metadata.c:1493
+#: lib/luks2/luks2_json_metadata.c:1485
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1656,84 +1656,84 @@ msgstr ""
 "UWAGA: wykryto niezakończone ponowne szyfrowanie offline na urządzeniu!\n"
 "Nadpisanie nagłówka kopią zapasową może uszkodzić dane."
 
-#: lib/luks2/luks2_json_metadata.c:1591
+#: lib/luks2/luks2_json_metadata.c:1583
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "Zignorowano nieznaną flagę %s."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Brak klucza dla segmentu dm-crypt %u"
 
-#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Nie udało się ustawić segmentu dm-crypt."
 
-#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Nie udało się ustawić segmentu dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Nie wykryto znanego wzorca określającego szyfr w nagłówku LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:2709
+#: lib/luks2/luks2_json_metadata.c:2701
 msgid "OPAL device must have static device size."
 msgstr "Urządzenie OPAL musi mieć statyczny rozmiar."
 
-#: lib/luks2/luks2_json_metadata.c:2729
+#: lib/luks2/luks2_json_metadata.c:2721
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Szyfrowane urządzenie OPAL z integralnością musi być mniejsze, niż zakres blokowania."
 
-#: lib/luks2/luks2_json_metadata.c:2734
+#: lib/luks2/luks2_json_metadata.c:2726
 msgid "OPAL device must have same size as locking range."
 msgstr "Urządzenie OPAL musi mieć ten sam rozmiar, co zakres blokowania."
 
-#: lib/luks2/luks2_json_metadata.c:2754
+#: lib/luks2/luks2_json_metadata.c:2746
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Urządzenie OPAL %s jest już odblokowane.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2793
+#: lib/luks2/luks2_json_metadata.c:2785
 msgid "Unsupported device integrity configuration."
 msgstr "Nieobsługiwana konfiguracja integralności urządzenia."
 
-#: lib/luks2/luks2_json_metadata.c:2809
+#: lib/luks2/luks2_json_metadata.c:2801
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Urządzenie dm-integrity stojące poniżej o nieoczekiwanych sektorach danych."
 
-#: lib/luks2/luks2_json_metadata.c:2911
+#: lib/luks2/luks2_json_metadata.c:2903
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Podobne szyfrowanie trwa. Nie można dezaktywować urządzenia."
 
-#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Nie udało się zastąpić wstrzymanego urządzenia %s celem dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Urządzenie %s zostało dezaktywowane, ale sprzętowe urządzenie OPAL nie może być zablokowane."
 
-#: lib/luks2/luks2_json_metadata.c:3045
+#: lib/luks2/luks2_json_metadata.c:3037
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Wykryto niespełnione wymagania LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:3053
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Operacja niezgodna z urządzeniem oznaczonym do ponownego szyfrowania starym szyfrem. Przerwano."
 
-#: lib/luks2/luks2_json_metadata.c:3055
+#: lib/luks2/luks2_json_metadata.c:3047
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Operacja niezgodna z urządzeniem oznaczonym do ponownego szyfrowania LUKS2. Przerwano."
 
-#: lib/luks2/luks2_json_metadata.c:3057
+#: lib/luks2/luks2_json_metadata.c:3049
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Operacja niezgodna z urządzeniem używającym OPAL. Przerwano."
 
-#: lib/luks2/luks2_json_metadata.c:3059
+#: lib/luks2/luks2_json_metadata.c:3051
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Operacja niezgodna z urządzeniem używającym wbudowanych znaczników HW. Przerwano."
 
@@ -1800,60 +1800,60 @@ msgstr "Nie można użyć określenia szyfru %s-%s dla klucza LUKS2."
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Nie można przenieść obszaru kluczy. Brak miejsca."
 
-#: lib/luks2/luks2_luks1_convert.c:619
+#: lib/luks2/luks2_luks1_convert.c:627
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Nie można przekonwertować do formatu LUKS1 - błędne metadane."
 
-#: lib/luks2/luks2_luks1_convert.c:636
+#: lib/luks2/luks2_luks1_convert.c:644
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Nie można przenieść obszaru kluczy. Obszar kluczy LUKS2 zbyt mały."
 
-#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
 msgid "Unable to move keyslot area."
 msgstr "Nie można przenieść obszaru kluczy."
 
-#: lib/luks2/luks2_luks1_convert.c:757
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Nie można przekonwertować do formatu LUKS1 - domyślny rozmiar sektora szyfrowania segmentu nie wynosi 512 bajtów."
 
-#: lib/luks2/luks2_luks1_convert.c:765
+#: lib/luks2/luks2_luks1_convert.c:773
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Nie można przekonwertować formatu LUKS1 - skróty kluczy nie są zgodne z LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:779
+#: lib/luks2/luks2_luks1_convert.c:787
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Nie można przekonwertować formatu LUKS1 - urządzenie używa szyfru %s z obudowanym kluczem."
 
-#: lib/luks2/luks2_luks1_convert.c:784
+#: lib/luks2/luks2_luks1_convert.c:792
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Nie można przekonwertować formatu LUKS1 - urządzenie używa większej liczby segmentów."
 
-#: lib/luks2/luks2_luks1_convert.c:792
+#: lib/luks2/luks2_luks1_convert.c:800
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Nie można przekonwertować do formatu LUKS1 - nagłówek LUKS2 zawiera %u token(ów)."
 
-#: lib/luks2/luks2_luks1_convert.c:798
+#: lib/luks2/luks2_luks1_convert.c:806
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Nie można przekonwertować do formatu LUKS1 - nie ma aktywnych kluczy."
 
-#: lib/luks2/luks2_luks1_convert.c:810
+#: lib/luks2/luks2_luks1_convert.c:818
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Nie można przekonwertować do formatu LUKS1 - klucz %u jest w błędnym stanie."
 
-#: lib/luks2/luks2_luks1_convert.c:815
+#: lib/luks2/luks2_luks1_convert.c:823
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Nie można przekonwertować do formatu LUKS1 - klucz %u nie jest podłączony."
 
-#: lib/luks2/luks2_luks1_convert.c:820
+#: lib/luks2/luks2_luks1_convert.c:828
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Nie można przekonwertować do formatu LUKS1 - klucz %u (powyzej maksimum) jest nadal aktywny."
 
-#: lib/luks2/luks2_luks1_convert.c:825
+#: lib/luks2/luks2_luks1_convert.c:833
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Nie można przekonwertować do formatu LUKS1 - klucz %u nie jest zgodny z LUKS1."
@@ -2138,7 +2138,7 @@ msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encry
 msgstr "Parametry szyfrowania kluczy nie są zgodne z szyfrowaniem kluczy LUKS2."
 
 #: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
-#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Nie wykryto znanego wzorca określającego szyfr."
@@ -2166,7 +2166,7 @@ msgid "WARNING: The --keyfile-size option is being ignored, the read size is the
 msgstr "UWAGA: Opcja --keyfile-size jest ignorowana, rozmiar odczytu jest taki sam, jak rozmiar klucza szyfrującego.\n"
 
 #: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
-#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Skanowanie blkid dla %s nie powiodło się."
@@ -2248,7 +2248,7 @@ msgstr "Urządzenie %s nie jest prawidłowym urządzeniem FVAULT2."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nie można określić rozmiaru klucza wolumenu dla FVAULT2, proszę użyć opcji --key-size."
 
-#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Urządzenie %s jest nadal aktywne i zaplanowane do odroczonego usunięcia.\n"
@@ -2437,7 +2437,7 @@ msgid "LUKS file container %s is too small for activation, there is no remaining
 msgstr "Kontener plikowy LUKS %s jest zbyt mały do uaktywnienia, nie ma miejsca pozostałego na dane."
 
 #: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
-#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nie można określić rozmiaru klucza wolumenu dla LUKS bez kluczy, proszę użyć opcji --key-size."
 
@@ -2733,7 +2733,7 @@ msgstr "Opcji --volume-key-keyring nie można łączyć z --hash ani --volume-ke
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Obie opcje --volume-key-file muszą być sparowane z odpowiednimi opcjami --key-size."
 
-#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Opcje --cancel-deferred i --deferred nie mogą być użyte naraz."
 
@@ -2801,21 +2801,21 @@ msgstr "Akcja wymaga określonego klucza. Należy użyć parametru --key-slot."
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<uządzenie> [--type <typ>] [<nazwa>]"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
 msgid "open device as <name>"
 msgstr "otwarcie urządzenia jako <nazwa>"
 
 #: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
-#: src/integritysetup.c:562 src/integritysetup.c:564
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
 msgid "<name>"
 msgstr "<nazwa>"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
 msgid "close device (remove mapping)"
 msgstr "zamknięcie urządzenia (usunięcie odwzorowania)"
 
-#: src/cryptsetup.c:3484 src/integritysetup.c:564
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
 msgid "resize active device"
 msgstr "zmiana rozmiaru aktywnego urządzenia"
 
@@ -2943,7 +2943,7 @@ msgstr "<add|remove|import|export> <urządzenie>"
 msgid "Manipulate LUKS2 tokens"
 msgstr "Operacja na tokenach LUKS2"
 
-#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3044,7 +3044,7 @@ msgstr ""
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Domyślny rozmiar klucza z trybem XTS (dwa klucze wewnętrzne) będzie podwojony.\n"
 
-#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: wymaga %s jako argumentów"
@@ -3095,31 +3095,31 @@ msgstr "Opcja --priority może mieć wartości tylko ignore/normal/prefer."
 msgid "Invalid maximal tries specification."
 msgstr "Błędne określenie maksymalnej liczby prób."
 
-#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
 msgid "Show this help message"
 msgstr "Wyświetlenie tego opisu"
 
-#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
 msgid "Display brief usage"
 msgstr "Wyświetlenie krótkiej informacji o składni"
 
-#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
 msgid "Print package version"
 msgstr "Wypisanie wersji pakietu"
 
-#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
 msgid "Help options:"
 msgstr "Opcje pomocnicze:"
 
-#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPCJA...] <akcja> <parametry-akcji>"
 
-#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
 msgid "Argument <action> missing."
 msgstr "Brak argumentu <akcja>."
 
-#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
 msgid "Unknown action."
 msgstr "Nieznana akcja."
 
@@ -3224,7 +3224,7 @@ msgstr "Polecenie wymaga <głównego_hasza> lub opcji --root-hash-file jako argu
 msgid "<data_device> <hash_device>"
 msgstr "<urządzenie_danych> <urządzenie_haszy>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:559
+#: src/veritysetup.c:485 src/integritysetup.c:562
 msgid "format device"
 msgstr "sformatowanie urządzenia"
 
@@ -3240,7 +3240,7 @@ msgstr "weryfikacja urządzenia"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<urządzenie_danych> <nazwa> <urządzenie_haszy> [<główny_hasz>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:562
+#: src/veritysetup.c:489 src/integritysetup.c:565
 msgid "show active device status"
 msgstr "pokazanie stanu aktywnego urządzenia"
 
@@ -3248,7 +3248,7 @@ msgstr "pokazanie stanu aktywnego urządzenia"
 msgid "<hash_device>"
 msgstr "<urządzenie_haszy>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:563
+#: src/veritysetup.c:490 src/integritysetup.c:566
 msgid "show on-disk information"
 msgstr "wyświetlenie informacji z dysku"
 
@@ -3312,20 +3312,20 @@ msgstr " (wbudowane znaczniki hw)"
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Ustawianie flagi recalculate nie jest obsługiwane, zamiast tego można rozważyć użycie --wipe."
 
-#: src/integritysetup.c:382 src/integritysetup.c:546
+#: src/integritysetup.c:382 src/integritysetup.c:549
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Urządzenie %s nie jest prawidłowym urządzeniem INTEGRITY."
 
-#: src/integritysetup.c:559 src/integritysetup.c:563
+#: src/integritysetup.c:562 src/integritysetup.c:566
 msgid "<integrity_device>"
 msgstr "<urządzenie_integralności>"
 
-#: src/integritysetup.c:560
+#: src/integritysetup.c:563
 msgid "<integrity_device> <name>"
 msgstr "<urządzenie_integralności> <nazwa>"
 
-#: src/integritysetup.c:583
+#: src/integritysetup.c:586
 #, c-format
 msgid ""
 "\n"
@@ -3336,7 +3336,7 @@ msgstr ""
 "<nazwa> to urządzenie do utworzenia pod %s\n"
 "<urządzenie_integralności> to urządzenie zawierające dane ze znacznikami integralności\n"
 
-#: src/integritysetup.c:588
+#: src/integritysetup.c:591
 #, c-format
 msgid ""
 "\n"
@@ -3349,51 +3349,55 @@ msgstr ""
 "\tAlgorytm sumy kontrolnej: %s\n"
 "\tMaksymalny rozmiar pliku klucza: %dkB\n"
 
-#: src/integritysetup.c:645
+#: src/integritysetup.c:648
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Błędny rozmiar --%s. Maksimum w bajtach to %u."
 
-#: src/integritysetup.c:748
+#: src/integritysetup.c:751
 msgid "Both key file and key size options must be specified."
 msgstr "Muszą być podane obie opcje: pliku klucza i rozmiaru klucza."
 
-#: src/integritysetup.c:752
+#: src/integritysetup.c:755
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Muszą być podane obie opcje: pliku klucza integralności i rozmiaru klucza."
 
-#: src/integritysetup.c:755
+#: src/integritysetup.c:758
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Algorytm integralności kroniki musi być podany, jeśli używany jest klucz integralności kroniki."
 
-#: src/integritysetup.c:759
+#: src/integritysetup.c:762
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Muszą być podane obie opcje: pliku szyfrowania kroniki i rozmiaru klucza."
 
-#: src/integritysetup.c:762
+#: src/integritysetup.c:765
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Algorytm szyfrowania kroniki musi być podany, jeśli używany jest klucz szyfrowania kroniki."
 
-#: src/integritysetup.c:766
+#: src/integritysetup.c:769
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Opcje trybu odtwarzania i bitmapy wykluczają się wzajemnie."
 
-#: src/integritysetup.c:773
+#: src/integritysetup.c:776
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Opcji kroniki nie można używać w trybie bitmapy."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:781
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Opcje bitmapy mogą być używane tylko w trybie bitmapy."
 
-#: src/integritysetup.c:784
+#: src/integritysetup.c:787
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Tryb wbudowany nie może być łączony z opcjami kroniki ani bitmapy."
 
-#: src/integritysetup.c:788
+#: src/integritysetup.c:791
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Tryb wbudowany nie może być łączony z osobnym urządzeniem danych."
 
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "Porzucenia dla kluczy mogą być włączone tylko z algorytmami klucza, takimi jak HMAC."
+
 #: src/utils_tools.c:105
 msgid ""
 "\n"
@@ -3745,7 +3749,7 @@ msgstr "Urządzenie nie jest w trybie odszyfrowywania LUKS2. Konflikt opcji --de
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Urządzenie jest w trybie ponownego szyfrowania z użyciem odporności przesunięcia danych. Nie można użyć żądanej opcji --resilience."
 
-#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Nie można określić rozmiaru klucza wolumenu dla LUKS bez kluczy, proszę użyć opcji --new-key-size."
 
@@ -3779,7 +3783,7 @@ msgstr ""
 "Żądany --sector-size %<PRIu32> jest niezgodny z superblokiem %s\n"
 "(rozmiar bloku: %<PRIu32> B), wykrytym na urządzeniu %s."
 
-#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Szyfrowanie bez odłączonego nagłówka (--header) jest niemożliwe bez ograniczenia rozmiaru urządzenia danych (--reduce-device-size)."
 
@@ -3847,42 +3851,43 @@ msgstr "Inicjowanie ponownego szyfrowania nie powiodło się. Kopia zapasowa nag
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Odszyfrowanie LUKS2 jest obsługiwane tylko z urządzeniem z odłączonym nagłówkiem (z offsetem danych ustawionym na 0)."
 
-#: src/utils_reencrypt.c:1490
-msgid "No token could unlock the device."
-msgstr "Żaden token nie może odblokować urządzenia."
-
-#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
 msgid "Not enough free keyslots for reencryption."
 msgstr "Za mało wolnych kluczy do ponownego szyfrowania."
 
-#: src/utils_reencrypt.c:1562
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "Żaden token nie może odblokować urządzenia."
+
+#: src/utils_reencrypt.c:1588
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Pliku klucza lub opisu klucza pęku kluczy można użyć tylko z --key-slot albo przy dokładnie jednym aktywnym kluczu."
 
-#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Hasło dla klucza %d: "
 
-#: src/utils_reencrypt.c:1879
+#: src/utils_reencrypt.c:1905
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Zmiana szyfru do szyfrowania danych na %s.\n"
 
-#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Można użyć --force-no-keyslots, aby ponownie zaszyfrować urządzenie z aktywnymi kluczami przekazując bezpośrednio klucze wolumenu."
 
-#: src/utils_reencrypt.c:1996
+#: src/utils_reencrypt.c:2022
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Opcja --new-volume-key-file musi być sparowana z --new-key-size"
 
-#: src/utils_reencrypt.c:2038
+#: src/utils_reencrypt.c:2064
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Nie zmieniono parametrów segmentu danych. Ponowne szyfrowanie przerwane."
 
-#: src/utils_reencrypt.c:2075
+#: src/utils_reencrypt.c:2101
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3890,7 +3895,7 @@ msgstr ""
 "Zwiększanie rozmiaru sektora szyfrowania na urządzeniu offline nie jest obsługiwane.\n"
 "Należy najpierw uaktywnić urządzenie lub użyć opcji --force-offline-reencrypt (niebezpieczna!)."
 
-#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3899,58 +3904,58 @@ msgstr ""
 "\n"
 "Ponowne szyfrowanie przerwane."
 
-#: src/utils_reencrypt.c:2122
+#: src/utils_reencrypt.c:2148
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Wznawianie ponownego szyfrowania LUKS w wymuszonym trybie offline.\n"
 
-#: src/utils_reencrypt.c:2145
+#: src/utils_reencrypt.c:2171
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Urządzenie %s zawiera uszkodzone metadane LUKS. Przerwano operację."
 
-#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Urządzenie %s jest już urządzeniem LUKS. Przerwano operację."
 
-#: src/utils_reencrypt.c:2189
+#: src/utils_reencrypt.c:2215
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Urządzenie %s jest już w trybie ponownego szyfrowania LUKS. Przerwano operację."
 
-#: src/utils_reencrypt.c:2272
+#: src/utils_reencrypt.c:2298
 msgid "LUKS2 decryption requires --header option."
 msgstr "Odszyfrowanie LUKS2 wymaga opcji --header."
 
-#: src/utils_reencrypt.c:2320
+#: src/utils_reencrypt.c:2346
 msgid "Command requires device as argument."
 msgstr "Polecenie wymaga urządzenia jako argumentu."
 
-#: src/utils_reencrypt.c:2333
+#: src/utils_reencrypt.c:2359
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Konflikt wersji. Urządzenie %s jest urządzeniem LUKS1."
 
-#: src/utils_reencrypt.c:2339
+#: src/utils_reencrypt.c:2365
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Konflikt wersji. Urządzenie %s jest w trybie ponownego szyfrowania LUKS1."
 
-#: src/utils_reencrypt.c:2345
+#: src/utils_reencrypt.c:2371
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Konflikt wersji. Urządzenie %s jest urządzeniem LUKS2."
 
-#: src/utils_reencrypt.c:2351
+#: src/utils_reencrypt.c:2377
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Konflikt wersji. Urządzenie %s jest w trybie ponownego szyfrowania LUKS2."
 
-#: src/utils_reencrypt.c:2357
+#: src/utils_reencrypt.c:2383
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Ponowne szyfrowanie LUKS2 jest już zainicjowane. Przerywanie operacji."
 
-#: src/utils_reencrypt.c:2364
+#: src/utils_reencrypt.c:2390
 msgid "Device reencryption not in progress."
 msgstr "Ponowne szyfrowanie urządzenia nie jest w toku."
 

From d7aacefaa3f90ad218fd5aab64508b705ef48bcf Mon Sep 17 00:00:00 2001
From: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>
Date: Fri, 4 Sep 2026 18:57:03 +0200
Subject: [PATCH 211/244] po: update ro.po (from translationproject.org)

---
 po/ro.po | 658 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 332 insertions(+), 326 deletions(-)

diff --git a/po/ro.po b/po/ro.po
index 5bd85f158..0dc8a21c0 100644
--- a/po/ro.po
+++ b/po/ro.po
@@ -20,14 +20,15 @@
 # Actualizare a traducerii pentru versiunea 2.8.5-rc0, făcută de R-GC, mar-2026.
 # Actualizare a traducerii pentru versiunea 2.8.7-rc1, făcută de R-GC, iun-2026.
 # Actualizare a traducerii pentru versiunea 2.8.7-rc2, făcută de R-GC, iul-2026.
+# Actualizare a traducerii pentru versiunea 2.8.8-rc0, făcută de R-GC, sep-2026.
 # Actualizare a traducerii pentru versiunea Y, făcută de X, Y(luna-anul).
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
+"Project-Id-Version: cryptsetup 2.8.8-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-07-09 10:46+0200\n"
-"PO-Revision-Date: 2026-07-11 17:10+0200\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-02 17:36+0200\n"
 "Last-Translator: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>\n"
 "Language-Team: Romanian <translation-team-ro@lists.sourceforge.net>\n"
 "Language: ro\n"
@@ -38,78 +39,78 @@ msgstr ""
 "X-Bugs: Report translation errors to the Language-Team address.\n"
 "X-Generator: Poedit 3.8\n"
 
-#: lib/libdevmapper.c:419
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "Nu se poate inițializa «device-mapper», rulând ca utilizator non-root."
 
-#: lib/libdevmapper.c:422
+#: lib/libdevmapper.c:425
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "Nu se poate inițializa «device-mapper». Este încărcat modulul nucleului, «dm_mod»?"
 
-#: lib/libdevmapper.c:1125
+#: lib/libdevmapper.c:1129
 msgid "Requested deferred flag is not supported."
 msgstr "Fanionul de întârziere solicitat nu este acceptat."
 
-#: lib/libdevmapper.c:1194
+#: lib/libdevmapper.c:1198
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "DM-UUID pentru dispozitivul %s a fost trunchiat."
 
-#: lib/libdevmapper.c:1598
+#: lib/libdevmapper.c:1602
 msgid "Unknown dm target type."
 msgstr "Tip de țintă dm necunoscut."
 
-#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
-#: lib/libdevmapper.c:1853
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "Opțiunile de performanță dm-crypt solicitate nu sunt acceptate."
 
-#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "Opțiunile de gestionare a corupției datelor dm-verity solicitate nu sunt acceptate."
 
-#: lib/libdevmapper.c:1752
+#: lib/libdevmapper.c:1756
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "Opțiunea de tasklets dm-verity solicitată nu este acceptată."
 
-#: lib/libdevmapper.c:1764
+#: lib/libdevmapper.c:1768
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "Opțiunile FEC dm-verity solicitate nu sunt acceptate."
 
-#: lib/libdevmapper.c:1770
+#: lib/libdevmapper.c:1774
 msgid "Requested data integrity options are not supported."
 msgstr "Opțiunile de integritate a datelor solicitate nu sunt acceptate."
 
-#: lib/libdevmapper.c:1774
+#: lib/libdevmapper.c:1778
 msgid "Requested sector_size option is not supported."
 msgstr "Opțiunea sector_size solicitată nu este acceptată."
 
-#: lib/libdevmapper.c:1779
+#: lib/libdevmapper.c:1783
 msgid "The device size is not multiple of the requested sector size."
 msgstr "Dimensiunea dispozitivului nu este un multiplu al dimensiunii solicitate a sectorului."
 
-#: lib/libdevmapper.c:1783
+#: lib/libdevmapper.c:1787
 msgid "Requested integrity_key_size option is not supported."
 msgstr "Opțiunea integrity_key_size solicitată nu este acceptată."
 
-#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Recalcularea automată a etichetelor de integritate solicitată nu este acceptată."
 
-#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2799
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Discard/TRIM is not supported."
 msgstr "Înlăturarea/Decuparea(TRIM) nu este acceptată."
 
-#: lib/libdevmapper.c:1808
+#: lib/libdevmapper.c:1812
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "Modul de hartă de biți dm-integrity solicitat nu este acceptat."
 
-#: lib/libdevmapper.c:1814
+#: lib/libdevmapper.c:1818
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr "Modul inline dm-integrity solicitat nu este acceptat."
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2877
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "Nu s-a putut interoga segmentul dm-%s."
@@ -160,7 +161,7 @@ msgstr "Nu s-a putut inițializa utilitarul de criptare al generatorului de nume
 msgid "Cannot initialize crypto backend."
 msgstr "Nu s-a putut inițializa utilitarul de criptare ."
 
-#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Algoritmul sumei de control %s nu este acceptat."
@@ -174,7 +175,7 @@ msgstr "Eroare de procesare a cheii (folosind suma de control %s)."
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Nu se poate determina tipul de dispozitiv. Activare a dispozitivului incompatibilă?"
 
-#: lib/setup.c:398 lib/setup.c:4177
+#: lib/setup.c:398 lib/setup.c:4193
 msgid "This operation is supported only for LUKS device."
 msgstr "Această operație este acceptată doar pentru dispozitive LUKS."
 
@@ -196,7 +197,7 @@ msgstr "Slotul de cheie %d este nu este valid, selectați între 0 și %d."
 msgid "Key slot %d is full, please select another one."
 msgstr "Slotul pentru chei %d este ocupat, selectați altul."
 
-#: lib/setup.c:534 lib/setup.c:3878
+#: lib/setup.c:534 lib/setup.c:3888
 msgid "Device size is not aligned to device logical block size."
 msgstr "Dimensiunea dispozitivului nu este aliniată la dimensiunea blocului logic al dispozitivului."
 
@@ -205,7 +206,7 @@ msgstr "Dimensiunea dispozitivului nu este aliniată la dimensiunea blocului log
 msgid "Header detected but device %s is too small."
 msgstr "Antet detectat, dar dispozitivul %s este prea mic."
 
-#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
 #: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Această operație nu este suportată pentru acest tip de dispozitiv."
@@ -218,553 +219,553 @@ msgstr "Operație ilegală cu recriptare în curs."
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nu s-au putut reîncărca metadatele LUKS2 în memorie."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
 #: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
 #: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
 #: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
-#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Dispozitivul %s nu este un dispozitiv LUKS valid."
 
-#: lib/setup.c:899 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Versiunea %d de LUKS nu este acceptată."
 
-#: lib/setup.c:1273
+#: lib/setup.c:1279
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Nu a fost detectat niciun model cunoscut de specificație de cifrare pentru dispozitivul activ %s."
 
-#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
-#: lib/setup.c:3786 lib/setup.c:5850
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
 #, c-format
 msgid "Device %s is not active."
 msgstr "Dispozitivul %s nu este activ."
 
-#: lib/setup.c:1535
+#: lib/setup.c:1545
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Dispozitivul subiacent pentru dispozitivul criptat %s a dispărut."
 
-#: lib/setup.c:1617
+#: lib/setup.c:1627
 msgid "Invalid plain crypt parameters."
 msgstr "Parametrii de criptare simplă sunt incorecți."
 
-#: lib/setup.c:1622 lib/setup.c:2672
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Invalid key size."
 msgstr "Dimensiunea cheii este nevalidă."
 
-#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID-ul nu este acceptat pentru acest tip de criptare."
 
-#: lib/setup.c:1632 lib/setup.c:2682
+#: lib/setup.c:1642 lib/setup.c:2692
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Dispozitivul cu metadate detașate nu este acceptat pentru acest tip de criptare."
 
-#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
 #: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Dimensiunea sectorului de criptare nu este acceptată."
 
-#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
 msgid "Device size is not aligned to requested sector size."
 msgstr "Dimensiunea dispozitivului nu este aliniată la dimensiunea sectorului solicitată."
 
-#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
 msgid "Can't format LUKS without device."
 msgstr "Formatarea LUKS fără dispozitiv nu este posibilă."
 
-#: lib/setup.c:1707 lib/setup.c:1959
+#: lib/setup.c:1717 lib/setup.c:1969
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Dispozitivul %s divizat în zone nu poate fi utilizat pentru antetul LUKS."
 
-#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Alinierea datelor solicitată nu este compatibilă cu poziția datelor."
 
-#: lib/setup.c:1754 lib/setup.c:1984
+#: lib/setup.c:1764 lib/setup.c:1994
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "AVERTISMENT: Dispozitivul DAX poate corupe datele, deoarece nu garantează actualizări atomice ale sectoarelor.\n"
 
-#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
-#: lib/setup.c:2567 lib/setup.c:2899
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Nu se poate șterge antetul pe dispozitivul %s."
 
-#: lib/setup.c:1805 lib/setup.c:2164
+#: lib/setup.c:1815 lib/setup.c:2174
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Dispozitivul %s este prea mic pentru activare, nu a mai rămas spațiu pentru date.\n"
 
-#: lib/setup.c:1846
+#: lib/setup.c:1856
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Cheia de volum este prea mică pentru criptare cu extensii de integritate."
 
-#: lib/setup.c:1850
+#: lib/setup.c:1860
 msgid "Integrity key size is too small."
 msgstr "Dimensiunea cheii de integritate este prea mică."
 
-#: lib/setup.c:1859
+#: lib/setup.c:1869
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Cifrul %s-%s (dimensiunea cheii %zd biți) nu este disponibil."
 
-#: lib/setup.c:1900
+#: lib/setup.c:1910
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "AVERTISMENT: Activarea dispozitivului va eșua, dm-crypt nu are suport pentru dimensiunea sectorului de criptare solicitată.\n"
 
-#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
 #: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Dispozitivul %s este prea mic."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Nu se poate formata dispozitivul %s, este în uz."
 
-#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Nu se poate formata dispozitivul %s; permisiune refuzată."
 
-#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Nu se poate formata integritatea pentru dispozitivul %s."
 
-#: lib/setup.c:2151 lib/setup.c:2629
+#: lib/setup.c:2161 lib/setup.c:2639
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Nu se poate formata dispozitivul %s."
 
-#: lib/setup.c:2194
+#: lib/setup.c:2204
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Nu se pot obține parametrii de aliniere OPAL."
 
-#: lib/setup.c:2206
+#: lib/setup.c:2216
 msgid "Bogus OPAL logical block size."
 msgstr "Dimensiune falsă a blocului logic OPAL."
 
-#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Dimensiunea falsă a blocului logic OPAL diferă de dimensiunea blocului dispozitivului."
 
-#: lib/setup.c:2217
+#: lib/setup.c:2227
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Intervalul(offset) de date solicitat nu este compatibil cu dimensiunea blocului OPAL."
 
-#: lib/setup.c:2224
+#: lib/setup.c:2234
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Alinierea datelor solicitată nu este compatibilă cu alinierea OPAL."
 
-#: lib/setup.c:2244
+#: lib/setup.c:2254
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Intervalul datelor nu îndeplinește cerințele de aliniere OPAL."
 
-#: lib/setup.c:2257
+#: lib/setup.c:2267
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Alinierea datelor solicitată nu satisface cerințele de aliniere a intervalului de blocare."
 
-#: lib/setup.c:2471
+#: lib/setup.c:2481
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Compensarea dimensiunii dispozitivului cu %<PRIu64> sectoare pentru a-l alinia cu gradul de finețe al alinierii OPAL."
 
-#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Nu s-a putut obține blocarea OPAL pe dispozitivul %s."
 
-#: lib/setup.c:2541
+#: lib/setup.c:2551
 msgid "Incorrect OPAL Admin key."
 msgstr "Cheie de administrare OPAL incorectă."
 
-#: lib/setup.c:2543
+#: lib/setup.c:2553
 msgid "Cannot setup OPAL segment."
 msgstr "Nu se poate configura segmentul OPAL."
 
-#: lib/setup.c:2625
+#: lib/setup.c:2635
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Nu se poate formata dispozitivul %s, dispozitivul OPAL pare a fi complet protejat la scriere acum."
 
-#: lib/setup.c:2627
+#: lib/setup.c:2637
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Aceasta este probabil o eroare în firmware. Efectuați reinițierea PSID OPAL și reconectați-vă pentru recuperare."
 
-#: lib/setup.c:2647
+#: lib/setup.c:2657
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Reinițierea intervalului de blocare %d pe dispozitivul %s a eșuat."
 
-#: lib/setup.c:2667
+#: lib/setup.c:2677
 msgid "Can't format LOOPAES without device."
 msgstr "Nu se poate formata LOOPAES fără dispozitiv."
 
-#: lib/setup.c:2712
+#: lib/setup.c:2722
 msgid "Can't format VERITY without device."
 msgstr "Nu se poate formata VERITY fără dispozitiv."
 
-#: lib/setup.c:2723 lib/verity/verity.c:88
+#: lib/setup.c:2733 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Tip de sumă de control VERITY neacceptat %d."
 
-#: lib/setup.c:2729 lib/verity/verity.c:96
+#: lib/setup.c:2739 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Dimensiunea blocului VERITY nu este acceptată."
 
-#: lib/setup.c:2734 lib/verity/verity.c:61
+#: lib/setup.c:2744 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Decalajul sumei de control VERITY nu este acceptat."
 
-#: lib/setup.c:2739
+#: lib/setup.c:2749
 msgid "Unsupported VERITY FEC offset."
 msgstr "Decalajul FEC VERITY nu este acceptat."
 
-#: lib/setup.c:2763
+#: lib/setup.c:2773
 msgid "Data area overlaps with hash area."
 msgstr "Zona de date se suprapune cu zona de sume de control."
 
-#: lib/setup.c:2788
+#: lib/setup.c:2798
 msgid "Hash area overlaps with FEC area."
 msgstr "Zona sumelor de control se suprapune cu zona FEC."
 
-#: lib/setup.c:2795
+#: lib/setup.c:2805
 msgid "Data area overlaps with FEC area."
 msgstr "Zona de date se suprapune cu zona FEC."
 
-#: lib/setup.c:2887
+#: lib/setup.c:2897
 msgid "Integrity key size mismatch."
 msgstr "Dimensiunea cheii de integritate nu coincide."
 
-#: lib/setup.c:2938
+#: lib/setup.c:2948
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "AVERTISMENT: Dimensiunea solicitată a etichetei %d octeți diferă de dimensiunea %s de ieșire (%d octeți).\n"
 
-#: lib/setup.c:3051 lib/setup.c:3153
+#: lib/setup.c:3061 lib/setup.c:3163
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "A fost solicitat un tip de dispozitiv %s necunoscut sau neacceptat."
 
-#: lib/setup.c:3067
+#: lib/setup.c:3077
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Dispozitivul %s nu furnizează câmpuri de date de integritate în linie „inline”."
 
-#: lib/setup.c:3073
+#: lib/setup.c:3083
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Dimensiunea etichetei în linie %<PRIu32> [ cteți] este mai mare decât %<PRIu32> furnizată de dispozitivul %s."
 
-#: lib/setup.c:3088
+#: lib/setup.c:3098
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Sectorul trebuie să fie la fel ca sectorul hardware al dispozitivului (%zu octeți)."
 
-#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Parametri neacceptați pentru dispozitivul %s."
 
-#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
 #: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Parametrii nepotriviți în dispozitivul %s."
 
-#: lib/setup.c:3650
+#: lib/setup.c:3660
 msgid "Crypt devices mismatch."
 msgstr "Dispozitivele de criptare nu se potrivesc."
 
-#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
 #: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Nu s-a putut reîncărca dispozitivul %s."
 
-#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
 #: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Nu s-a putut suspenda dispozitivul %s."
 
-#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
 #: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
 #: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Nu s-a putut reîncărca dispozitivul %s."
 
-#: lib/setup.c:3720
+#: lib/setup.c:3730
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Eroare fatală la reîncărcarea dispozitivului %s (în partea superioară a dispozitivului %s)."
 
-#: lib/setup.c:3723 lib/setup.c:3725
+#: lib/setup.c:3733 lib/setup.c:3735
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Nu s-a putut comuta dispozitivul %s la dm-error."
 
-#: lib/setup.c:3768
+#: lib/setup.c:3778
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Nu se poate redimensiona dispozitivul LUKS2 cu o dimensiune statică."
 
-#: lib/setup.c:3773
+#: lib/setup.c:3783
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Redimensionarea dispozitivului LUKS2 cu protecție de integritate nu este acceptată."
 
-#: lib/setup.c:3819
+#: lib/setup.c:3829
 msgid "Cannot resize loop device."
 msgstr "Nu se poate redimensiona dispozitivul de buclă."
 
-#: lib/setup.c:3863
+#: lib/setup.c:3873
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "AVERTISMENT: Dimensiunea maximă a fost deja stabilită sau nucleul nu acceptă redimensionarea.\n"
 
-#: lib/setup.c:3929
+#: lib/setup.c:3939
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Redimensionarea nu a reușit, nucleul nu acceptă redimensionarea."
 
-#: lib/setup.c:3961
+#: lib/setup.c:3971
 msgid "Do you really want to change UUID of device?"
 msgstr "Chiar doriți să schimbați UUID-ul dispozitivului?"
 
-#: lib/setup.c:4053
+#: lib/setup.c:4061 lib/setup.c:4069
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Fișierul de copie de rezervă pentru antet nu conține un antet LUKS compatibil."
 
-#: lib/setup.c:4160
+#: lib/setup.c:4176
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Volumul %s nu este activ."
 
-#: lib/setup.c:4215
+#: lib/setup.c:4231
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Volumul %s este deja suspendat."
 
-#: lib/setup.c:4241
+#: lib/setup.c:4257
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Suspendarea nu este acceptată pentru dispozitivul %s."
 
-#: lib/setup.c:4243 lib/setup.c:4251
+#: lib/setup.c:4259 lib/setup.c:4267
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Eroare la suspendarea dispozitivului %s."
 
-#: lib/setup.c:4266
+#: lib/setup.c:4282
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Dispozitivul %s a fost suspendat, dar dispozitivul hardware OPAL nu poate fi blocat."
 
-#: lib/setup.c:4297 lib/setup.c:4491
+#: lib/setup.c:4313 lib/setup.c:4507
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Reluarea activității nu este acceptată pentru dispozitivul %s."
 
-#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Eroare la reluarea activității dispozitivului %s."
 
-#: lib/setup.c:4335
+#: lib/setup.c:4351
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Nu s-a putut dezlega cheia de volum de la inelul de chei specificat de utilizator."
 
-#: lib/setup.c:4457 lib/setup.c:5637
+#: lib/setup.c:4473 lib/setup.c:5653
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Nu s-a putut leg cheia de volum la inelul de chei specificat de utilizator."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2722
+#: lib/setup.c:4572 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Volumul %s nu este suspendat."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
 #: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
-#: src/utils_reencrypt.c:1969
+#: src/utils_reencrypt.c:1995
 msgid "Volume key does not match the volume."
 msgstr "Cheia de volum nu se potrivește cu volumul."
 
-#: lib/setup.c:4821
+#: lib/setup.c:4837
 msgid "Failed to swap new key slot."
 msgstr "Nu s-a putut efectua interschimbarea cu noul slot pentru cheie."
 
-#: lib/setup.c:4919
+#: lib/setup.c:4935
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Slotul de cheie %d nu este valid."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
 #: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Slotul de cheie %d nu este activ."
 
-#: lib/setup.c:4944
+#: lib/setup.c:4960
 msgid "Device header overlaps with data area."
 msgstr "Antetul dispozitivului se suprapune cu zona de date."
 
-#: lib/setup.c:5165
+#: lib/setup.c:5181
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Recriptare în curs. Nu se poate activa dispozitivul."
 
-#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
 #: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Nu s-a putut obține blocarea pentru recriptare."
 
-#: lib/setup.c:5189
+#: lib/setup.c:5205
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Recuperarea recriptării LUKS2 utilizând cheia (cheile) de volum a eșuat."
 
-#: lib/setup.c:5325
+#: lib/setup.c:5341
 #, c-format
 msgid "Device %s already exists."
 msgstr "Dispozitivul %s există deja."
 
-#: lib/setup.c:5332
+#: lib/setup.c:5348
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Nu se poate folosi dispozitivul %s, numele este nevalid sau este încă în uz."
 
-#: lib/setup.c:5344
+#: lib/setup.c:5360
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Cheile de recriptare a volumului nu se potrivesc cu volumul."
 
-#: lib/setup.c:5361
+#: lib/setup.c:5377
 msgid "Incorrect volume key specified for plain device."
 msgstr "Este specificată o cheie de volum incorectă pentru un dispozitiv cu criptare normală."
 
-#: lib/setup.c:5387 lib/setup.c:5448
+#: lib/setup.c:5403 lib/setup.c:5464
 msgid "Device type is not properly initialized."
 msgstr "Tipul de dispozitiv nu este inițializat corect."
 
-#: lib/setup.c:5486
+#: lib/setup.c:5502
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Inelul de chei pentru nucleu nu este acceptat de nucleu actual."
 
-#: lib/setup.c:5490
+#: lib/setup.c:5506
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Lipsește inelul de chei pentru nucleu: este necesar pentru transmiterea semnăturii către nucleu."
 
-#: lib/setup.c:5545
+#: lib/setup.c:5561
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Nu se poate utiliza cheia inelului de chei %s."
 
-#: lib/setup.c:5758
+#: lib/setup.c:5774
 msgid "Incorrect root hash specified for verity device."
 msgstr "Sumă de control rădăcină incorectă specificată pentru dispozitivul verity."
 
-#: lib/setup.c:5799 lib/setup.c:5824
+#: lib/setup.c:5815 lib/setup.c:5840
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL nu acceptă dezactivarea amânată."
 
-#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Dispozitivul %s este încă în uz."
 
-#: lib/setup.c:5832
+#: lib/setup.c:5848
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Nu s-a putut anula eliminarea întârziată din dispozitivul %s."
 
-#: lib/setup.c:5854
+#: lib/setup.c:5870
 #, c-format
 msgid "Invalid device %s."
 msgstr "Dispozitiv nevalid %s."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6017
 msgid "Volume key buffer too small."
 msgstr "Memoria tampon a cheii de volum este prea mică."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6028
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul LUKS2."
 
-#: lib/setup.c:6021
+#: lib/setup.c:6037
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul LUKS1."
 
-#: lib/setup.c:6035
+#: lib/setup.c:6051
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nu se poate recupera tasta de volum pentru dispozitivul normal."
 
-#: lib/setup.c:6043
+#: lib/setup.c:6059
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Nu se poate recupera suma de control rădăcină pentru dispozitivul verity."
 
-#: lib/setup.c:6052
+#: lib/setup.c:6068
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul BITLK."
 
-#: lib/setup.c:6057
+#: lib/setup.c:6073
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nu se poate recupera cheia de volum pentru dispozitivul FVAULT2."
 
-#: lib/setup.c:6059
+#: lib/setup.c:6075
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Această operație nu este acceptată pentru dispozitivul criptat %s."
 
-#: lib/setup.c:6244 lib/setup.c:6255
+#: lib/setup.c:6260 lib/setup.c:6271
 msgid "Dump operation is not supported for this device type."
 msgstr "Operația de descărcare nu este acceptată pentru acest tip de dispozitiv."
 
-#: lib/setup.c:6635
+#: lib/setup.c:6651
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Decalajul datelor nu este multiplu de %u octeți."
 
-#: lib/setup.c:6943
+#: lib/setup.c:6959
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Nu se poate converti dispozitivul %s care este încă în uz."
 
-#: lib/setup.c:7251 lib/setup.c:7406
+#: lib/setup.c:7267 lib/setup.c:7422
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Nu s-a putut atribui slotul %u ca nouă cheie de volum."
 
-#: lib/setup.c:7275
+#: lib/setup.c:7291
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Nu s-au putut inițializa parametrii impliciți pentru slotul de cheie LUKS2."
 
-#: lib/setup.c:7281
+#: lib/setup.c:7297
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Nu s-a putut aloca slotul de cheie %d pentru a digera."
 
-#: lib/setup.c:7523
+#: lib/setup.c:7539
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nu se poate adăuga slotul pentru cheie, toate sloturile sunt dezactivate și nu este furnizată nicio cheie pentru volum."
 
-#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Nu s-a putut încărca cheia în inelul de chei al nucleului."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7823
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Nu s-a putut găsi inelul de chei descris de „%s”."
 
-#: lib/setup.c:7872
+#: lib/setup.c:7888
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Nu s-a putut obține blocarea de serializare a accesului la memoria-hardwarw globală."
 
@@ -806,7 +807,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Nu se poate citi cantitatea de date solicitată."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Dispozitivul %s nu există sau accesul a fost refuzat."
@@ -922,16 +923,16 @@ msgstr "Firele paralele de execuție PBKDF solicitate nu pot fi zero."
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "Doar PBKDF2 este acceptat în modul FIPS."
 
-#: lib/utils_benchmark.c:171
+#: lib/utils_benchmark.c:175
 msgid "PBKDF benchmark disabled but iterations not set."
 msgstr "Testarea PBKDF este dezactivată, dar numărul de iterații nu este definit."
 
-#: lib/utils_benchmark.c:190
+#: lib/utils_benchmark.c:194
 #, c-format
 msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr "Opțiuni PBKDF2 incompatibile (folosind algoritmul de sumă de control %s)."
 
-#: lib/utils_benchmark.c:210
+#: lib/utils_benchmark.c:214
 msgid "Not compatible PBKDF options."
 msgstr "Opțiuni PBKDF2 incompatibile."
 
@@ -980,9 +981,9 @@ msgstr "Dimensiunea cheii în modul XTS trebuie să fie de 256 sau 512 biți."
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Specificațiile de cifrare ar trebui să fie în formatul [cifrarea]-[mod]-[iv]."
 
-#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
-#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "Nu se poate scrie în dispozitivul %s, permisiune refuzată."
@@ -1000,13 +1001,13 @@ msgstr "Nu s-a putut accesa dispozitivul pentru stocarea temporară a cheilor."
 msgid "IO error while encrypting keyslot."
 msgstr "Eroare de In/Ieș în timpul criptării slotului de cheie."
 
-#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
@@ -1021,61 +1022,61 @@ msgstr "Eroare de In/Ieș la decriptarea slotului de cheie."
 msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr "Dispozitivul %s este prea mic. (LUKS1 necesită cel puțin %<PRIu64> octeți.)"
 
-#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
-#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
-#: lib/luks1/keymanage.c:181
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
 #, c-format
 msgid "LUKS keyslot %u is invalid."
 msgstr "Slotul de cheie LUKS %u nu este valid."
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "Fișierul de copie de rezervă pentru antetul solicitat %s există deja."
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "Nu se poate crea fișierul de copie de rezervă al antetului %s."
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "Nu se poate scrie fișierul de copie de rezervă al antetului %s."
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
 msgid "Backup file does not contain valid LUKS header."
 msgstr "Fișierul de copie de rezervă nu conține antet LUKS valid."
 
-#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1450
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "Nu se poate deschide fișierul de copie de rezervă al antetului %s."
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "Nu se poate citi fișierul de copie de rezervă al antetului %s."
 
-#: lib/luks1/keymanage.c:326
+#: lib/luks1/keymanage.c:331
 msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr "Poziția datelor sau dimensiunea cheii diferă între dispozitiv și copia de rezervă, restaurarea a eșuat."
 
-#: lib/luks1/keymanage.c:334
+#: lib/luks1/keymanage.c:339
 #, c-format
 msgid "Device %s %s%s"
 msgstr "Dispozitiv %s %s%s"
 
-#: lib/luks1/keymanage.c:335
+#: lib/luks1/keymanage.c:340
 msgid "does not contain LUKS header. Replacing header can destroy data on that device."
 msgstr "nu conține antetul LUKS. Înlocuirea antetului poate distruge datele de pe acest dispozitiv."
 
-#: lib/luks1/keymanage.c:336
+#: lib/luks1/keymanage.c:341
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "conține deja antetul LUKS. Înlocuirea antetului va distruge sloturile de chei existente."
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1083,130 +1084,130 @@ msgstr ""
 "\n"
 "AVERTISMENT: antetul dispozitivului real are un UUID diferit de cel al copiei de rezervă!"
 
-#: lib/luks1/keymanage.c:385
+#: lib/luks1/keymanage.c:390
 msgid "Non standard key size, manual repair required."
 msgstr "Dimensiunea cheii nu este standard, este necesară repararea manuală."
 
-#: lib/luks1/keymanage.c:395
+#: lib/luks1/keymanage.c:400
 msgid "Non standard keyslots alignment, manual repair required."
 msgstr "Alinierea sloturilor pentru chei nu este standard , este necesară repararea manuală."
 
-#: lib/luks1/keymanage.c:404
+#: lib/luks1/keymanage.c:409
 #, c-format
 msgid "Cipher mode repaired (%s -> %s)."
 msgstr "Modul de cifrare reparat (%s -> %s)."
 
-#: lib/luks1/keymanage.c:415
+#: lib/luks1/keymanage.c:420
 #, c-format
 msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Cifrul sumei de control(hash) reparat la minuscule (%s)."
 
-#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:756
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Suma de control(hash) LUKS solicitată %s nu este acceptată."
 
-#: lib/luks1/keymanage.c:431
+#: lib/luks1/keymanage.c:436
 msgid "Repairing keyslots."
 msgstr "Se repară sloturile pentru chei."
 
-#: lib/luks1/keymanage.c:450
+#: lib/luks1/keymanage.c:455
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr "Slotul de cheie %i: poziție reparată (%u -> %u)."
 
-#: lib/luks1/keymanage.c:458
+#: lib/luks1/keymanage.c:463
 #, c-format
 msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr "Slotul de cheie %i: benzi reparate (%u -> %u)."
 
-#: lib/luks1/keymanage.c:467
+#: lib/luks1/keymanage.c:472
 #, c-format
 msgid "Keyslot %i: bogus partition signature."
 msgstr "Slotul de cheie %i: semnătură falsă a partiției."
 
-#: lib/luks1/keymanage.c:472
+#: lib/luks1/keymanage.c:477
 #, c-format
 msgid "Keyslot %i: salt wiped."
 msgstr "Slotul de cheie %i: «salt» șters."
 
-#: lib/luks1/keymanage.c:489
+#: lib/luks1/keymanage.c:494
 msgid "Writing LUKS header to disk."
 msgstr "Se scrie antetul LUKS pe disc."
 
-#: lib/luks1/keymanage.c:494
+#: lib/luks1/keymanage.c:499
 msgid "Repair failed."
 msgstr "Repararea a eșuat."
 
-#: lib/luks1/keymanage.c:549
+#: lib/luks1/keymanage.c:554
 #, c-format
 msgid "LUKS cipher mode %s is invalid."
 msgstr "Modul de cifrare LUKS %s este nevalid."
 
-#: lib/luks1/keymanage.c:554
+#: lib/luks1/keymanage.c:559
 #, c-format
 msgid "LUKS hash %s is invalid."
 msgstr "Suma de control(hash) LUKS %s nu este validă."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Nu s-a detectat nicio problemă cunoscută pentru antetul LUKS."
 
-#: lib/luks1/keymanage.c:689
+#: lib/luks1/keymanage.c:690
 #, c-format
 msgid "Error during update of LUKS header on device %s."
 msgstr "Eroare în timpul actualizării antetului LUKS pe dispozitivul %s."
 
-#: lib/luks1/keymanage.c:697
+#: lib/luks1/keymanage.c:698
 #, c-format
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Eroare la recitirea antetului LUKS după actualizare pe dispozitivul %s."
 
-#: lib/luks1/keymanage.c:750
+#: lib/luks1/keymanage.c:751
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Decalajul datelor pentru antetul LUKS trebuie să fie 0 sau mai mare decât dimensiunea antetului."
 
-#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
-#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Formatul UUID LUKS furnizat este greșit."
 
-#: lib/luks1/keymanage.c:783
+#: lib/luks1/keymanage.c:784
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Nu se poate crea antetul LUKS: citirea datelor «salt» aleatoare a eșuat."
 
-#: lib/luks1/keymanage.c:811
+#: lib/luks1/keymanage.c:812
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Nu se poate crea antetul LUKS: calcularea sumei de control a antetului a eșuat (folosind suma de control(hash) %s)."
 
-#: lib/luks1/keymanage.c:856
+#: lib/luks1/keymanage.c:857
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Slot de cheie %d activ, curățați mai întâi."
 
-#: lib/luks1/keymanage.c:862
+#: lib/luks1/keymanage.c:863
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Materialul de la slotul de cheie %d nu are suficiente benzi. Antetul a fost manipulat?"
 
-#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Depășire a valorii de iterație a PBKDF2."
 
-#: lib/luks1/keymanage.c:1022
+#: lib/luks1/keymanage.c:1023
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Nu se poate deschide slotul de cheie (folosind suma de control(hash) %s)."
 
-#: lib/luks1/keymanage.c:1118
+#: lib/luks1/keymanage.c:1119
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Slotul de cheie %d nu este valid, selectați slotul de cheie între 0 și %d."
 
-#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Nu se poate șterge dispozitivul %s."
@@ -1384,33 +1385,33 @@ msgstr "Această operație nu este acceptată."
 msgid "Unexpected key data size."
 msgstr "Dimensiune neașteptată a datelor cheii."
 
-#: lib/bitlk/bitlk.c:1442
+#: lib/bitlk/bitlk.c:1448
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Acest dispozitiv BITLK este într-o stare neacceptată și nu poate fi activat."
 
-#: lib/bitlk/bitlk.c:1447
+#: lib/bitlk/bitlk.c:1453
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Dispozitivele BITLK de tip „%s” nu pot fi activate."
 
-#: lib/bitlk/bitlk.c:1486
+#: lib/bitlk/bitlk.c:1492
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "AVERTISMENT: dimensiunea volumului BitLocker %<PRIu64> nu se potrivește cu dimensiunea dispozitivului subiacent %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1613
+#: lib/bitlk/bitlk.c:1634
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Nu se poate activa dispozitivul, modulul nucleului «dm-crypt» nu are suport pentru BITLK IV."
 
-#: lib/bitlk/bitlk.c:1617
+#: lib/bitlk/bitlk.c:1638
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Dispozitivul nu poate fi activat, modulul nucleului «dm-crypt» nu are suport pentru difuzorul BITLK Elephant."
 
-#: lib/bitlk/bitlk.c:1621
+#: lib/bitlk/bitlk.c:1642
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Dispozitivul nu poate fi activat, nucleul dm-crypt nu are suport pentru dimensiune mare a sectorului."
 
-#: lib/bitlk/bitlk.c:1625
+#: lib/bitlk/bitlk.c:1646
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Dispozitivul nu se poate activa, modulul nucleului, «dm-zero», lipsește."
 
@@ -1567,24 +1568,24 @@ msgstr "Nu s-a putut determina dimensiunea pentru dispozitivul %s."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Metadate incompatibile cu modulul nucleului «dm-integrity» (versiunea %u) detectate pe %s."
 
-#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Nucleul nu acceptă asocierea dm-integrity."
 
-#: lib/integrity/integrity.c:314
+#: lib/integrity/integrity.c:315
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Nucleul nu acceptă alinierea metadatelor fixe dm-integrity."
 
-#: lib/integrity/integrity.c:323
+#: lib/integrity/integrity.c:324
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Nucleul refuză să activeze opțiunea de recalculare nesigură (consultați opțiunile de activare vechi pentru a le înlocui)."
 
-#: lib/integrity/integrity.c:329
+#: lib/integrity/integrity.c:330
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Nucleul nu acceptă modul în linie „inline” dm-integrity."
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1510
+#: lib/luks2/luks2_json_metadata.c:1502
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "Nu s-a putut obține blocarea la scriere pe dispozitivul %s."
@@ -1606,22 +1607,22 @@ msgstr ""
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "AVERTISMENT: zona sloturilor de chei (%<PRIu64> octeți) este foarte mică, numărul de sloturi de chei LUKS2 disponibil este foarte limitat.\n"
 
-#: lib/luks2/luks2_json_format.c:418
+#: lib/luks2/luks2_json_format.c:427
 msgid "Requested data offset is too small."
 msgstr "Decalajul de date solicitat este prea mic."
 
-#: lib/luks2/luks2_json_format.c:459
+#: lib/luks2/luks2_json_format.c:468
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "AVERTISMENT: dimensiunea metadatelor LUKS2 s-a schimbat la %<PRIu64> octeți.\n"
 
-#: lib/luks2/luks2_json_format.c:463
+#: lib/luks2/luks2_json_format.c:472
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "AVERTISMENT: dimensiunea zonei sloturilor de chei LUKS2 s-a schimbat la %<PRIu64> octeți.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Nu s-a putut obține blocarea pentru citire pe dispozitivul %s."
@@ -1630,33 +1631,33 @@ msgstr "Nu s-a putut obține blocarea pentru citire pe dispozitivul %s."
 msgid "Label is too long."
 msgstr "Eticheta este prea lungă."
 
-#: lib/luks2/luks2_json_metadata.c:1435
+#: lib/luks2/luks2_json_metadata.c:1427
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "Cerințe LUKS2 interzise detectate în copia de rezervă %s."
 
-#: lib/luks2/luks2_json_metadata.c:1474
+#: lib/luks2/luks2_json_metadata.c:1466
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "Decalajul datelor diferă între dispozitiv și copia de rezervă, restaurare eșuată."
 
-#: lib/luks2/luks2_json_metadata.c:1480
+#: lib/luks2/luks2_json_metadata.c:1472
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "Antetul binar cu dimensiunea zonelor sloturilor pentru chei diferă între dispozitiv și copia de rezervă, restaurare eșuată."
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1479
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "Dispozitiv %s %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "nu conține antetul LUKS2. Înlocuirea antetului poate distruge datele de pe acest dispozitiv."
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1481
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "conține deja antetul LUKS2. Înlocuirea antetului va distruge sloturile de chei existente."
 
-#: lib/luks2/luks2_json_metadata.c:1491
+#: lib/luks2/luks2_json_metadata.c:1483
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1666,7 +1667,7 @@ msgstr ""
 "AVERTISMENT: cerințe necunoscute LUKS2 detectate în antetul dispozitivului real!\n"
 "Înlocuirea antetului cu copia de rezervă poate deteriora datele de pe acest dispozitiv!"
 
-#: lib/luks2/luks2_json_metadata.c:1493
+#: lib/luks2/luks2_json_metadata.c:1485
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1676,84 +1677,84 @@ msgstr ""
 "AVERTISMENT: Recriptare „offline” nefinalizată detectată pe dispozitiv!\n"
 "Înlocuirea antetului cu copia de rezervă poate deteriora datele."
 
-#: lib/luks2/luks2_json_metadata.c:1591
+#: lib/luks2/luks2_json_metadata.c:1583
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "S-a ignorat fanionul necunoscut %s."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Lipsește cheia pentru segmentul dm-crypt %u"
 
-#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Nu s-a putut definii segmentul dm-crypt."
 
-#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Nu s-a putut definii segmentul dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Nu s-a detectat niciun model de specificație de cifrare cunoscut în antetul LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:2709
+#: lib/luks2/luks2_json_metadata.c:2701
 msgid "OPAL device must have static device size."
 msgstr "Dispozitivul OPAL trebuie să aibă dimensiunea dispozitivului statică."
 
-#: lib/luks2/luks2_json_metadata.c:2729
+#: lib/luks2/luks2_json_metadata.c:2721
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Dispozitivul OPAL criptat cu integritate trebuie să fie mai mic decât intervalul de blocare."
 
-#: lib/luks2/luks2_json_metadata.c:2734
+#: lib/luks2/luks2_json_metadata.c:2726
 msgid "OPAL device must have same size as locking range."
 msgstr "Dispozitivul OPAL trebuie să aibă aceeași dimensiune ca și intervalul de blocare."
 
-#: lib/luks2/luks2_json_metadata.c:2754
+#: lib/luks2/luks2_json_metadata.c:2746
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Dispozitivul OPAL %s este deja deblocat.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2793
+#: lib/luks2/luks2_json_metadata.c:2785
 msgid "Unsupported device integrity configuration."
 msgstr "Configurație de integritate a dispozitivului neacceptată."
 
-#: lib/luks2/luks2_json_metadata.c:2809
+#: lib/luks2/luks2_json_metadata.c:2801
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Dispozitiv dm-integrity subiacent cu sectoare de date neașteptate furnizate."
 
-#: lib/luks2/luks2_json_metadata.c:2911
+#: lib/luks2/luks2_json_metadata.c:2903
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Recriptare în curs. Nu se poate dezactiva dispozitivul."
 
-#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Nu s-a putut înlocui dispozitivul suspendat %s cu ținta dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Dispozitivul %s a fost dezactivat, dar dispozitivul hardware OPAL nu poate fi blocat."
 
-#: lib/luks2/luks2_json_metadata.c:3045
+#: lib/luks2/luks2_json_metadata.c:3037
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Au fost detectate cerințe LUKS2 neîndeplinite."
 
-#: lib/luks2/luks2_json_metadata.c:3053
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Operație incompatibilă cu dispozitivul marcat pentru recriptare învechită. Se abandonează."
 
-#: lib/luks2/luks2_json_metadata.c:3055
+#: lib/luks2/luks2_json_metadata.c:3047
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Operație incompatibilă cu dispozitivul marcat pentru recriptare LUKS2. Se abandonează."
 
-#: lib/luks2/luks2_json_metadata.c:3057
+#: lib/luks2/luks2_json_metadata.c:3049
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Operație incompatibilă cu dispozitivul care utilizează OPAL. Se abandonează."
 
-#: lib/luks2/luks2_json_metadata.c:3059
+#: lib/luks2/luks2_json_metadata.c:3051
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Operație incompatibilă cu dispozitivul care utilizează etichete HW în linie. Se abandonează."
 
@@ -1820,60 +1821,60 @@ msgstr "Nu se poate utiliza specificația de cifrare %s-%s pentru slotul de chei
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Nu se poate muta zona slotului pentru chei. Spațiu insuficient."
 
-#: lib/luks2/luks2_luks1_convert.c:619
+#: lib/luks2/luks2_luks1_convert.c:627
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Nu se poate converti în format LUKS2 - metadate nevalide."
 
-#: lib/luks2/luks2_luks1_convert.c:636
+#: lib/luks2/luks2_luks1_convert.c:644
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Nu se poate muta zona slotului pentru chei. Zona sloturilor pentru chei LUKS2 este prea mică."
 
-#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
 msgid "Unable to move keyslot area."
 msgstr "Nu se poate muta zona slotului pentru chei."
 
-#: lib/luks2/luks2_luks1_convert.c:757
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Nu se poate converti în format LUKS1 - dimensiunea implicită a sectorului de criptare al segmentului nu este de 512 octeți."
 
-#: lib/luks2/luks2_luks1_convert.c:765
+#: lib/luks2/luks2_luks1_convert.c:773
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Nu se poate converti în formatul LUKS1 - calcularea sumelor de control ale slotului de cheie nu este compatibilă cu LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:779
+#: lib/luks2/luks2_luks1_convert.c:787
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Nu se poate converti în formatul LUKS1 - dispozitivul folosește cifrul de cheie încapsulat %s."
 
-#: lib/luks2/luks2_luks1_convert.c:784
+#: lib/luks2/luks2_luks1_convert.c:792
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Nu se poate converti în formatul LUKS1 - dispozitivul utilizează mai multe segmente."
 
-#: lib/luks2/luks2_luks1_convert.c:792
+#: lib/luks2/luks2_luks1_convert.c:800
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Nu se poate converti în formatul LUKS1 - antetul LUKS2 conține %u jetoane(tokens)."
 
-#: lib/luks2/luks2_luks1_convert.c:798
+#: lib/luks2/luks2_luks1_convert.c:806
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Nu se poate converti în formatul LUKS1 - nu există sloturi de chei active."
 
-#: lib/luks2/luks2_luks1_convert.c:810
+#: lib/luks2/luks2_luks1_convert.c:818
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Nu se poate converti în formatul LUKS1 - slotul de cheie %u este într-o stare nevalidă."
 
-#: lib/luks2/luks2_luks1_convert.c:815
+#: lib/luks2/luks2_luks1_convert.c:823
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Nu se poate converti în formatul LUKS1 - slotul de cheie %u nu este legat."
 
-#: lib/luks2/luks2_luks1_convert.c:820
+#: lib/luks2/luks2_luks1_convert.c:828
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Nu se poate converti în formatul LUKS1 - slotul %u (peste sloturile maxime) este încă activ."
 
-#: lib/luks2/luks2_luks1_convert.c:825
+#: lib/luks2/luks2_luks1_convert.c:833
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Nu se poate converti în formatul LUKS1 - slotul de cheie %u nu este compatibil cu LUKS1."
@@ -2158,7 +2159,7 @@ msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encry
 msgstr "Parametrii de criptare a slotului de chei nu sunt compatibili cu criptarea slotului de chei LUKS2."
 
 #: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
-#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Nu s-a detectat niciun model de specificație de cifrare cunoscut."
@@ -2186,7 +2187,7 @@ msgid "WARNING: The --keyfile-size option is being ignored, the read size is the
 msgstr "AVERTISMENT: Opțiunea „--keyfile-size” este ignorată, dimensiunea de citire este aceeași cu dimensiunea cheii de criptare.\n"
 
 #: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
-#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Scanarea «blkid» a eșuat pentru %s."
@@ -2266,7 +2267,7 @@ msgstr "Dispozitivul %s nu este un dispozitiv FVAULT2 valid."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nu se poate determina dimensiunea cheii de volum pentru FVAULT2; utilizați opțiunea „--key-size” pentru a o furniza."
 
-#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Dispozitivul %s este încă activ și programat pentru eliminare temporizată.\n"
@@ -2453,7 +2454,7 @@ msgid "LUKS file container %s is too small for activation, there is no remaining
 msgstr "Containerul de fișiere LUKS %s este prea mic pentru activare, nu mai rămâne spațiu pentru date."
 
 #: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
-#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nu se poate determina dimensiunea cheii de volum pentru LUKS fără sloturi de chei; folosiți opțiunea „--key-size” pentru a furniza aceste date."
 
@@ -2748,7 +2749,7 @@ msgstr "Opțiunea „--volume-key-keyring” nu poate fi combinată cu opțiunea
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Ambele opțiuni „--volume-key-file” trebuie să fie asociate cu opțiunile „--key-size” respective."
 
-#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Opțiunile „--cancel-deferred” și „--deferred” nu pot fi utilizate în același timp."
 
@@ -2816,21 +2817,21 @@ msgstr "Acțiunea necesită un slot de cheie specific. Utilizați parametrul „
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<dispozitiv> [--type <tip>] [<nume>]"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
 msgid "open device as <name>"
 msgstr "deschide dispozitivul ca <nume>"
 
 #: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
-#: src/integritysetup.c:562 src/integritysetup.c:564
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
 msgid "<name>"
 msgstr "<nume>"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
 msgid "close device (remove mapping)"
 msgstr "închide dispozitivul (elimină asocierea)"
 
-#: src/cryptsetup.c:3484 src/integritysetup.c:564
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
 msgid "resize active device"
 msgstr "redimensionează dispozitivul activ"
 
@@ -2958,7 +2959,7 @@ msgstr "<add|remove|import|export> <dispozitiv>"
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipulează jetoanele LUKS2"
 
-#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3066,7 +3067,7 @@ msgstr ""
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Dimensiunea implicită a cheii cu modul XTS (două chei interne) va fi dublată.\n"
 
-#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: necesită %s ca argumente"
@@ -3117,31 +3118,31 @@ msgstr "Argumentul opțiuni „--priority” poate fi doar «ignore/normal/prefe
 msgid "Invalid maximal tries specification."
 msgstr "Specificare nevalidă pentru numărul maxim de încercări."
 
-#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
 msgid "Show this help message"
 msgstr "Afișează acest mesaj de ajutor"
 
-#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
 msgid "Display brief usage"
 msgstr "Afișează modul de utilizare pe scurt"
 
-#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
 msgid "Print package version"
 msgstr "Afișează versiunea pachetului"
 
-#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
 msgid "Help options:"
 msgstr "Opțiuni de ajutor:"
 
-#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[OPȚIUNE...] <acțiune> <parametri_acțiune>"
 
-#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
 msgid "Argument <action> missing."
 msgstr "Argumentul <acțiune> lipsește."
 
-#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
 msgid "Unknown action."
 msgstr "Acțiune necunoscută."
 
@@ -3246,7 +3247,7 @@ msgstr "Comanda necesită ca argument opțiunea <suma-de-control(hash)_rădăcin
 msgid "<data_device> <hash_device>"
 msgstr "<dispozitiv_date> <dispozitiv_sumă-de-control(hash)>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:559
+#: src/veritysetup.c:485 src/integritysetup.c:562
 msgid "format device"
 msgstr "formatează dispozitivul"
 
@@ -3262,7 +3263,7 @@ msgstr "verifică dispozitivul"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<dispozitiv_date> <nume> <dispozitiv_sumă-de-control(hash)> [<sumă-de-control(hash)_rădăcină>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:562
+#: src/veritysetup.c:489 src/integritysetup.c:565
 msgid "show active device status"
 msgstr "afișează starea dispozitivului activ"
 
@@ -3270,7 +3271,7 @@ msgstr "afișează starea dispozitivului activ"
 msgid "<hash_device>"
 msgstr "<dispozitiv_sumă-de-control(hash)>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:563
+#: src/veritysetup.c:490 src/integritysetup.c:566
 msgid "show on-disk information"
 msgstr "afișează informațiile de pe disc"
 
@@ -3335,20 +3336,20 @@ msgstr " (etichete hw în linie „inline”)"
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Utilizarea fanionului pentru recalculare(...-recalculate) nu este acceptată, luați în considerare utilizarea opțiunii „--wipe” în schimb."
 
-#: src/integritysetup.c:382 src/integritysetup.c:546
+#: src/integritysetup.c:382 src/integritysetup.c:549
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Dispozitivul %s nu este un dispozitiv INTEGRITY valid."
 
-#: src/integritysetup.c:559 src/integritysetup.c:563
+#: src/integritysetup.c:562 src/integritysetup.c:566
 msgid "<integrity_device>"
 msgstr "<dispozitiv_integritate>"
 
-#: src/integritysetup.c:560
+#: src/integritysetup.c:563
 msgid "<integrity_device> <name>"
 msgstr "<dispozitiv_integritate> <nume>"
 
-#: src/integritysetup.c:583
+#: src/integritysetup.c:586
 #, c-format
 msgid ""
 "\n"
@@ -3359,7 +3360,7 @@ msgstr ""
 "<nume> este dispozitivul de creat sub %s\n"
 "<dispozitiv_integritate> este dispozitivul care conține date cu etichete de integritate\n"
 
-#: src/integritysetup.c:588
+#: src/integritysetup.c:591
 #, c-format
 msgid ""
 "\n"
@@ -3372,51 +3373,55 @@ msgstr ""
 "\tAlgoritmul sumei de control: %s\n"
 "\tDimensiunea maximă a fișierului cheie: %dko\n"
 
-#: src/integritysetup.c:645
+#: src/integritysetup.c:648
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Dimensiune nevalidă --%s. Maximul este de %u octeți."
 
-#: src/integritysetup.c:748
+#: src/integritysetup.c:751
 msgid "Both key file and key size options must be specified."
 msgstr "Trebuie specificată atât opțiunea pentru fișierul cheie, cât și opțiunea pentru dimensiunea cheii."
 
-#: src/integritysetup.c:752
+#: src/integritysetup.c:755
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Trebuie specificată atât opțiunea pentru fișierul cheii de integritate a jurnalului, cât și opțiunea pentru dimensiunea cheii."
 
-#: src/integritysetup.c:755
+#: src/integritysetup.c:758
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Algoritmul de integritate a jurnalului trebuie să fie specificat dacă este utilizată cheia de integritate a jurnalului."
 
-#: src/integritysetup.c:759
+#: src/integritysetup.c:762
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Trebuie specificată atât opțiunea pentru fișierul cheii de criptare a jurnalului, cât și opțiunea pentru dimensiunea cheii."
 
-#: src/integritysetup.c:762
+#: src/integritysetup.c:765
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Algoritmul de criptare a jurnalului trebuie să fie specificat dacă este utilizată cheia de criptare a jurnalului."
 
-#: src/integritysetup.c:766
+#: src/integritysetup.c:769
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Opțiunile de recuperare și modul de hartă de biți(bitmap) se exclud reciproc."
 
-#: src/integritysetup.c:773
+#: src/integritysetup.c:776
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Opțiunile jurnalului nu pot fi utilizate în modul de hartă de biți(bitmap)."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:781
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Opțiunile de hartă de biți(bitmap) pot fi utilizate numai în modul de hartă de biți(bitmap)."
 
-#: src/integritysetup.c:784
+#: src/integritysetup.c:787
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Modul în linie nu poate fi combinat cu opțiunile de jurnal sau de hartă de biți."
 
-#: src/integritysetup.c:788
+#: src/integritysetup.c:791
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Modul în linie nu poate fi combinat cu un dispozitiv de date separat."
 
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "Eliminarea cu cheie poate fi activată numai cu algoritmi de chei precum HMAC."
+
 #: src/utils_tools.c:105
 msgid ""
 "\n"
@@ -3776,7 +3781,7 @@ msgstr "Dispozitivul nu este în decriptare LUKS2. Opțiune în conflict „--de
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Dispozitivul este în recriptare folosind adaptabilitatea la transferul de date. Opțiunea „--resilience” solicitată nu poate fi aplicată."
 
-#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Nu se poate determina dimensiunea cheii de volum pentru LUKS fără sloturi de chei; folosiți opțiunea „--new-key-size” pentru a furniza aceste date."
 
@@ -3810,7 +3815,7 @@ msgstr ""
 "Solicitarea făcută cu opțiunea „--sector-size %<PRIu32>” este incompatibilă cu superblocul %s\n"
 "(dimensiunea blocului: %<PRIu32> octeți) detectat pe dispozitivul %s."
 
-#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Criptarea fără antet detașat (--header) nu este posibilă fără reducerea dimensiunii dispozitivului de date (--reduce-device-size)."
 
@@ -3878,42 +3883,43 @@ msgstr "Inițializarea recriptării a eșuat. Copia de rezervă a antetului este
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Decriptarea LUKS2 este acceptată numai cu dispozitivul antet detașat (cu decalajul de date fixat la 0)."
 
-#: src/utils_reencrypt.c:1490
-msgid "No token could unlock the device."
-msgstr "Niciun jeton(token) nu a putut debloca dispozitivul."
-
-#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
 msgid "Not enough free keyslots for reencryption."
 msgstr "Nu sunt suficiente sloturi de chei libere pentru recriptare."
 
-#: src/utils_reencrypt.c:1562
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "Niciun jeton(token) nu a putut debloca dispozitivul."
+
+#: src/utils_reencrypt.c:1588
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Fișierul de chei sau descrierea cheii inelului de chei pot fi utilizate numai cu opțiunea „--key-slot” sau cu exact un slot de cheie activ."
 
-#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Introduceți fraza de acces pentru slotul de cheie %d: "
 
-#: src/utils_reencrypt.c:1879
+#: src/utils_reencrypt.c:1905
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Se comută cifrul de criptare a datelor la %s.\n"
 
-#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Utilizați „--force-no-keyslots” pentru a re-cripta dispozitivul cu sloturi de chei active prin pasarea directă a cheilor de volum."
 
-#: src/utils_reencrypt.c:1996
+#: src/utils_reencrypt.c:2022
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Opțiunea „--new-volume-key-file” trebuie să fie combinată cu opțiunea „--new-key-size”"
 
-#: src/utils_reencrypt.c:2038
+#: src/utils_reencrypt.c:2064
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Nu s-au modificat parametrii de segment de date. Recriptarea a fost abandonată."
 
-#: src/utils_reencrypt.c:2075
+#: src/utils_reencrypt.c:2101
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3921,7 +3927,7 @@ msgstr ""
 "Creșterea dimensiunii sectorului de criptare pe dispozitivul offline nu este acceptată.\n"
 "Activați mai întâi dispozitivul sau utilizați opțiunea „--force-offline-reencrypt” (periculos!)."
 
-#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3930,58 +3936,58 @@ msgstr ""
 "\n"
 "Recriptarea a fost întreruptă."
 
-#: src/utils_reencrypt.c:2122
+#: src/utils_reencrypt.c:2148
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Reluarea recriptării LUKS în modul offline forțat.\n"
 
-#: src/utils_reencrypt.c:2145
+#: src/utils_reencrypt.c:2171
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Dispozitivul %s conține metadate LUKS deteriorate. Se abandonează operația."
 
-#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Dispozitivul %s este deja un dispozitiv LUKS. Se abandonează operația."
 
-#: src/utils_reencrypt.c:2189
+#: src/utils_reencrypt.c:2215
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Dispozitivul %s este deja în recriptare LUKS. Se abandonează operația."
 
-#: src/utils_reencrypt.c:2272
+#: src/utils_reencrypt.c:2298
 msgid "LUKS2 decryption requires --header option."
 msgstr "Decriptarea LUKS2 necesită opțiunea „--header”."
 
-#: src/utils_reencrypt.c:2320
+#: src/utils_reencrypt.c:2346
 msgid "Command requires device as argument."
 msgstr "Comanda necesită un dispozitiv ca argument."
 
-#: src/utils_reencrypt.c:2333
+#: src/utils_reencrypt.c:2359
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Versiuni în conflict. Dispozitivul %s este LUKS1."
 
-#: src/utils_reencrypt.c:2339
+#: src/utils_reencrypt.c:2365
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Versiuni în conflict. Dispozitivul %s este în recriptare LUKS1."
 
-#: src/utils_reencrypt.c:2345
+#: src/utils_reencrypt.c:2371
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Versiuni în conflict. Dispozitivul %s este LUKS2."
 
-#: src/utils_reencrypt.c:2351
+#: src/utils_reencrypt.c:2377
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Versiuni în conflict. Dispozitivul %s este în recriptare LUKS2."
 
-#: src/utils_reencrypt.c:2357
+#: src/utils_reencrypt.c:2383
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Recriptarea LUKS2 a fost deja inițializată. Se abandonează operația."
 
-#: src/utils_reencrypt.c:2364
+#: src/utils_reencrypt.c:2390
 msgid "Device reencryption not in progress."
 msgstr "Recriptarea dispozitivului nu este în curs de desfășurare."
 

From d0b42b6468cd5146854075bddec3a29930942125 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mari=C3=A1n=20Haburaj?= <hajkomajko5@gmail.com>
Date: Fri, 4 Sep 2026 18:57:03 +0200
Subject: [PATCH 212/244] po: update sk.po (from translationproject.org)

---
 po/sk.po | 658 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 332 insertions(+), 326 deletions(-)

diff --git a/po/sk.po b/po/sk.po
index 131021fa4..5057d3cc9 100644
--- a/po/sk.po
+++ b/po/sk.po
@@ -13,13 +13,14 @@
 # plain - plain
 # reencryption - prešifrovanie / opätovné šifrovanie
 # volume key - kľúč zväzku
+# discard - zahadzovanie/TRIM
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
+"Project-Id-Version: cryptsetup 2.8.8-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-07-09 10:46+0200\n"
-"PO-Revision-Date: 2026-07-13 10:51+0200\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-03 11:45+0200\n"
 "Last-Translator: Marián Haburaj <hajkomajko5@gmail.com>\n"
 "Language-Team: Slovak <sk-i18n@lists.linux.sk>\n"
 "Language: sk\n"
@@ -29,78 +30,78 @@ msgstr ""
 "X-Bugs: Report translation errors to the Language-Team address.\n"
 "X-Generator: Poedit 3.9\n"
 
-#: lib/libdevmapper.c:419
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "Neviem inicializovať device-mapper, nie som spustený administrátorom."
 
-#: lib/libdevmapper.c:422
+#: lib/libdevmapper.c:425
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "Neviem inicializovať device-mapper. Je modul jadra dm_mod načítaný?"
 
-#: lib/libdevmapper.c:1125
+#: lib/libdevmapper.c:1129
 msgid "Requested deferred flag is not supported."
 msgstr "Požadovaný príznak odloženia nie je podporovaný."
 
-#: lib/libdevmapper.c:1194
+#: lib/libdevmapper.c:1198
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "DM-UUID pre zariadenie %s bolo skrátené."
 
-#: lib/libdevmapper.c:1598
+#: lib/libdevmapper.c:1602
 msgid "Unknown dm target type."
 msgstr "Neznámy typ cieľa dm."
 
-#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
-#: lib/libdevmapper.c:1853
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "Požadované výkonnostné možnosti dm-crypt nie sú podporované."
 
-#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "Požadované možnosti narábania s poškodenými údajmi dm-verity nie sú podporované."
 
-#: lib/libdevmapper.c:1752
+#: lib/libdevmapper.c:1756
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "Požadované možnosti taskletu dm-verity nie sú podporované."
 
-#: lib/libdevmapper.c:1764
+#: lib/libdevmapper.c:1768
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "Požadované možnosti FEC dm-verity nie sú podporované."
 
-#: lib/libdevmapper.c:1770
+#: lib/libdevmapper.c:1774
 msgid "Requested data integrity options are not supported."
 msgstr "Požadované možnosti integrity údajov nie sú podporované."
 
-#: lib/libdevmapper.c:1774
+#: lib/libdevmapper.c:1778
 msgid "Requested sector_size option is not supported."
 msgstr "Požadovaná možnosť sector_size nie je podporovaná."
 
-#: lib/libdevmapper.c:1779
+#: lib/libdevmapper.c:1783
 msgid "The device size is not multiple of the requested sector size."
 msgstr "Veľkosť zariadenia nie je násobkom požadovanej veľkosti sektoru."
 
-#: lib/libdevmapper.c:1783
+#: lib/libdevmapper.c:1787
 msgid "Requested integrity_key_size option is not supported."
 msgstr "Požadovaná možnosť integrity_key_size nie je podporovaná."
 
-#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Požadované automatické prepočítanie príznakov integrity nie je podporované."
 
-#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2799
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Discard/TRIM is not supported."
 msgstr "Zahadzovanie/TRIM nie je podporované."
 
-#: lib/libdevmapper.c:1808
+#: lib/libdevmapper.c:1812
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "Požadovaný dm-integrity režim bitmapy nie je podporovaný."
 
-#: lib/libdevmapper.c:1814
+#: lib/libdevmapper.c:1818
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr "Požadovaný dm-integrity režim inline nie je podporovaný."
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2877
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "Zlyhalo hľadanie segmentu dm-%s."
@@ -151,7 +152,7 @@ msgstr "Neviem inicializovať implementáciu šifr generátora náhodných čís
 msgid "Cannot initialize crypto backend."
 msgstr "Neviem inicializovať implementáciu šifrovania."
 
-#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Hashovací algoritmus %s nie je podporovaný."
@@ -165,7 +166,7 @@ msgstr "Chyba pri spracovaní kľúča (používa sa hash %s)."
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Neviem určiť typ zariadenia. Nekompatibilná aktivácia zariadenia?"
 
-#: lib/setup.c:398 lib/setup.c:4177
+#: lib/setup.c:398 lib/setup.c:4193
 msgid "This operation is supported only for LUKS device."
 msgstr "Táto operácie je podporované len pre LUKS zariadenie."
 
@@ -187,7 +188,7 @@ msgstr "Miesto pre kľúč %d je neplatné, prosím vyberte číslo medzi 0 a %d
 msgid "Key slot %d is full, please select another one."
 msgstr "Miesto pre kľúč %d je obsadené, prosím vyberte iné."
 
-#: lib/setup.c:534 lib/setup.c:3878
+#: lib/setup.c:534 lib/setup.c:3888
 msgid "Device size is not aligned to device logical block size."
 msgstr "Veľkosť zariadenia nie je zarovnaná na veľkosť logického bloku zariadenia."
 
@@ -196,7 +197,7 @@ msgstr "Veľkosť zariadenia nie je zarovnaná na veľkosť logického bloku zar
 msgid "Header detected but device %s is too small."
 msgstr "Hlavička bola nájdená, ale zariadenie %s je veľmi malé."
 
-#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
 #: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Táto operácie nie je podporovaná pre tento typ zariadenia."
@@ -209,553 +210,553 @@ msgstr "Zakázaná operácie počas prešifrovania."
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Nahradenie pôvodných LUKS2 metadát v pamäti zlyhalo."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
 #: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
 #: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
 #: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
-#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Zariadenie %s nie je platné LUKS zariadenie."
 
-#: lib/setup.c:899 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Nepodporovaná LUKS verzia %d."
 
-#: lib/setup.c:1273
+#: lib/setup.c:1279
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Žiadna známa špecifikácia šifry nebola nájdená pre aktívne zariadenie %s."
 
-#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
-#: lib/setup.c:3786 lib/setup.c:5850
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
 #, c-format
 msgid "Device %s is not active."
 msgstr "Zariadenie %s nie je aktívne."
 
-#: lib/setup.c:1535
+#: lib/setup.c:1545
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Zariadenie nižšej úrovne pre šifrované zariadenie %s zmizlo."
 
-#: lib/setup.c:1617
+#: lib/setup.c:1627
 msgid "Invalid plain crypt parameters."
 msgstr "Neplatné parametre plain šifrovania."
 
-#: lib/setup.c:1622 lib/setup.c:2672
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Invalid key size."
 msgstr "Neplatná veľkosť kľúča."
 
-#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
 msgid "UUID is not supported for this crypt type."
 msgstr "UUID nie je podporované pre tento typ šifrovania."
 
-#: lib/setup.c:1632 lib/setup.c:2682
+#: lib/setup.c:1642 lib/setup.c:2692
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Zariadenie s oddelenými metadátami nie je podporované pre tento typ šifrovania."
 
-#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
 #: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Nepodporovaná veľkosť šifrovaného sektoru."
 
-#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
 msgid "Device size is not aligned to requested sector size."
 msgstr "Veľkosť zariadenia nie je zarovnaná k vyžadovanej veľkosti sektoru."
 
-#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
 msgid "Can't format LUKS without device."
 msgstr "Nie je možné formátovať LUKS bez zariadenia."
 
-#: lib/setup.c:1707 lib/setup.c:1959
+#: lib/setup.c:1717 lib/setup.c:1969
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Zónové zariadenie %s nemôže byť použité pre LUKS hlavičku."
 
-#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Požadované zarovnanie údajov nie je kompatibilné s odsadením údajov."
 
-#: lib/setup.c:1754 lib/setup.c:1984
+#: lib/setup.c:1764 lib/setup.c:1994
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "VAROVANIE: DAX zariadenie môže poškodiť údaje, pretože nezaručuje atomické aktualizácie sektorov.\n"
 
-#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
-#: lib/setup.c:2567 lib/setup.c:2899
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Hlavička na zariadení %s nejde vymazať."
 
-#: lib/setup.c:1805 lib/setup.c:2164
+#: lib/setup.c:1815 lib/setup.c:2174
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Zariadenie %s je príliš malé pre aktiváciu, nie je tam žiadne zvyšné miesto pre údaje.\n"
 
-#: lib/setup.c:1846
+#: lib/setup.c:1856
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Kľúč zväzku je príliš malý na šifrovanie s rozšíreniami pre integritu."
 
-#: lib/setup.c:1850
+#: lib/setup.c:1860
 msgid "Integrity key size is too small."
 msgstr "Veľkosť kľúča integrity je príliš malá."
 
-#: lib/setup.c:1859
+#: lib/setup.c:1869
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Šifra %s-%s (veľkosť kľúča %zd bitov) nie je dostupná."
 
-#: lib/setup.c:1900
+#: lib/setup.c:1910
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "VAROVANIE: Aktivácia zariadenia zlyhá, dm-crypt nepodporuje vyžadovanú veľkosť šifrovaného sektoru.\n"
 
-#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
 #: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Zariadenie %s je príliš malé."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Nedá sa naformátovať používané zariadenie %s."
 
-#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Prístup odmietnutý, nedá sa naformátovať zariadenie %s."
 
-#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Pre zariadenie %s sa nedá formátovať integrita."
 
-#: lib/setup.c:2151 lib/setup.c:2629
+#: lib/setup.c:2161 lib/setup.c:2639
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Nedá sa formátovať zariadenie %s."
 
-#: lib/setup.c:2194
+#: lib/setup.c:2204
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Nedajú sa získať parametre zarovnania OPAL."
 
-#: lib/setup.c:2206
+#: lib/setup.c:2216
 msgid "Bogus OPAL logical block size."
 msgstr "Neplatná veľkosť logického bloku OPAL."
 
-#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Neplatná veľkosť logického bloku OPAL sa líši od veľkosti bloku zariadenia."
 
-#: lib/setup.c:2217
+#: lib/setup.c:2227
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Požadované odsadenie údajov nie je kompatibilné s veľkosťou bloku OPAL."
 
-#: lib/setup.c:2224
+#: lib/setup.c:2234
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Požadované zarovnanie údajov nie je kompatibilné so zarovnaním OPAL."
 
-#: lib/setup.c:2244
+#: lib/setup.c:2254
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Odsadenie údajov nespĺňa požiadavky zarovnania OPAL."
 
-#: lib/setup.c:2257
+#: lib/setup.c:2267
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Požadované zarovnanie údajov nespĺňa požiadavky na zarovnanie uzamykateľnej oblasti."
 
-#: lib/setup.c:2471
+#: lib/setup.c:2481
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Kompenzovanie veľkosti zariadenia o %<PRIu64> sektorov na jeho zarovnanie s granualitou zarovnania OPAL."
 
-#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Zlyhalo získanie zámku OPAL na zariadení %s."
 
-#: lib/setup.c:2541
+#: lib/setup.c:2551
 msgid "Incorrect OPAL Admin key."
 msgstr "Nesprávny kľúč správcu OPAL."
 
-#: lib/setup.c:2543
+#: lib/setup.c:2553
 msgid "Cannot setup OPAL segment."
 msgstr "Nedá sa nastaviť segment OPAL."
 
-#: lib/setup.c:2625
+#: lib/setup.c:2635
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Nedá sa formátovať zariadenie %s, zariadenie OPAL sa teraz zdá byť úplne chránené voči zápisu."
 
-#: lib/setup.c:2627
+#: lib/setup.c:2637
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Toto je možno chyba vo firmvéri. Spustite resetovanie OPAL PSID a znova sa pripojte pre obnovu."
 
-#: lib/setup.c:2647
+#: lib/setup.c:2657
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Reset uzamykateľnej oblasti %d na zariadení %s zlyhal."
 
-#: lib/setup.c:2667
+#: lib/setup.c:2677
 msgid "Can't format LOOPAES without device."
 msgstr "Nie je možné formátovať LOOPAES bez zariadenia."
 
-#: lib/setup.c:2712
+#: lib/setup.c:2722
 msgid "Can't format VERITY without device."
 msgstr "Nie je možné formátovať VERITY bez zariadenia."
 
-#: lib/setup.c:2723 lib/verity/verity.c:88
+#: lib/setup.c:2733 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Nepodporovaný typ hashu VERITY %d."
 
-#: lib/setup.c:2729 lib/verity/verity.c:96
+#: lib/setup.c:2739 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Nepodporovaná veľkosť bloku VERITY."
 
-#: lib/setup.c:2734 lib/verity/verity.c:61
+#: lib/setup.c:2744 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Nepodporované odsadenie hashu VERITY."
 
-#: lib/setup.c:2739
+#: lib/setup.c:2749
 msgid "Unsupported VERITY FEC offset."
 msgstr "Nepodporované odsadenie VERITY FEC."
 
-#: lib/setup.c:2763
+#: lib/setup.c:2773
 msgid "Data area overlaps with hash area."
 msgstr "Oblasť údajov presahuje do oblasti hashu."
 
-#: lib/setup.c:2788
+#: lib/setup.c:2798
 msgid "Hash area overlaps with FEC area."
 msgstr "Oblasť hashu presahuje do oblasti FEC."
 
-#: lib/setup.c:2795
+#: lib/setup.c:2805
 msgid "Data area overlaps with FEC area."
 msgstr "Oblasť údajov presahuje do oblasti FEC."
 
-#: lib/setup.c:2887
+#: lib/setup.c:2897
 msgid "Integrity key size mismatch."
 msgstr "Nesúlad vo veľkosti kľúča integrity."
 
-#: lib/setup.c:2938
+#: lib/setup.c:2948
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "VAROVANIE: Požadovaná veľkosť príznaku %d bajtov sa líši od %s veľkosti výstupu (%d bajtov).\n"
 
-#: lib/setup.c:3051 lib/setup.c:3153
+#: lib/setup.c:3061 lib/setup.c:3163
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Vyžadovaný neznámy alebo nepodporovaný typ šifrovaného zariadenia %s."
 
-#: lib/setup.c:3067
+#: lib/setup.c:3077
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Zariadenie %s neposkytuje dátové polia pre inline integritu."
 
-#: lib/setup.c:3073
+#: lib/setup.c:3083
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Veľkosť príznaku inline %<PRIu32> [bajtov] je väčšia ako %<PRIu32> poskytnutá zariadením %s."
 
-#: lib/setup.c:3088
+#: lib/setup.c:3098
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Sektor musí byť rovnaký ako hardvérový sektor zariadenia (%zu bajtov)."
 
-#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Nepodporované parametre na zariadení %s."
 
-#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
 #: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Neodpovedajúce parametre na zariadení %s."
 
-#: lib/setup.c:3650
+#: lib/setup.c:3660
 msgid "Crypt devices mismatch."
 msgstr "Nesúlad v šifrovaných zariadeniach."
 
-#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
 #: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Nepodarilo sa znovu načítať zariadenie %s."
 
-#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
 #: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Zlyhalo pozastavenie zariadenia %s."
 
-#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
 #: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
 #: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Zlyhalo prebudenie zariadenia %s."
 
-#: lib/setup.c:3720
+#: lib/setup.c:3730
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Fatálna chyba počas opätovného načítavania zariadenia %s (nad zariadením %s)."
 
-#: lib/setup.c:3723 lib/setup.c:3725
+#: lib/setup.c:3733 lib/setup.c:3735
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Zlyhalo prepnutie zariadenia %s na dm-error."
 
-#: lib/setup.c:3768
+#: lib/setup.c:3778
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Nedá sa zmeniť veľkosť LUKS2 zariadenia so statickou veľkosťou."
 
-#: lib/setup.c:3773
+#: lib/setup.c:3783
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Zmena veľkosti zariadenia s ochranou integrity nie je podporovaná."
 
-#: lib/setup.c:3819
+#: lib/setup.c:3829
 msgid "Cannot resize loop device."
 msgstr "Nie je možné zmeniť veľkosť loop zariadenia."
 
-#: lib/setup.c:3863
+#: lib/setup.c:3873
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "VAROVANIE: Maximálna veľkosť je už dosiahnutá alebo jadro nepodporuje zmenu veľkosti.\n"
 
-#: lib/setup.c:3929
+#: lib/setup.c:3939
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Zmena veľkosti zlyhala, jadro toto nepodporuje."
 
-#: lib/setup.c:3961
+#: lib/setup.c:3971
 msgid "Do you really want to change UUID of device?"
 msgstr "Naozaj chcete zmeniť UUID zariadenia?"
 
-#: lib/setup.c:4053
+#: lib/setup.c:4061 lib/setup.c:4069
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Záložný súbor s hlavičkou neobsahuje kompatibilnú LUKS hlavičku."
 
-#: lib/setup.c:4160
+#: lib/setup.c:4176
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Zväzok %s nie je aktívny."
 
-#: lib/setup.c:4215
+#: lib/setup.c:4231
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Zväzok %s už je pozastavený."
 
-#: lib/setup.c:4241
+#: lib/setup.c:4257
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Pozastavenie nie je podporované pre zariadenie %s."
 
-#: lib/setup.c:4243 lib/setup.c:4251
+#: lib/setup.c:4259 lib/setup.c:4267
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Chyba počas pozastavovania zariadenia %s."
 
-#: lib/setup.c:4266
+#: lib/setup.c:4282
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Zariadenie %s bolo pozastavené, ale hardvérové zariadenie OPAL nemôže byť uzamknuté."
 
-#: lib/setup.c:4297 lib/setup.c:4491
+#: lib/setup.c:4313 lib/setup.c:4507
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Prebudenie nie je podporované pre zariadenie %s."
 
-#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Chyba počas prebúdzania zariadenia %s."
 
-#: lib/setup.c:4335
+#: lib/setup.c:4351
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Zlyhalo odpojenie kľúča zväzku od používateľom zadaného zväzku kľúčov."
 
-#: lib/setup.c:4457 lib/setup.c:5637
+#: lib/setup.c:4473 lib/setup.c:5653
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Zlyhalo pripojenie kľúča zväzku do používateľom zadaného zväzku kľúčov."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2722
+#: lib/setup.c:4572 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Zväzok %s nie je pozastavený."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
 #: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
-#: src/utils_reencrypt.c:1969
+#: src/utils_reencrypt.c:1995
 msgid "Volume key does not match the volume."
 msgstr "Kľúč zväzku nezodpovedá zväzku."
 
-#: lib/setup.c:4821
+#: lib/setup.c:4837
 msgid "Failed to swap new key slot."
 msgstr "Zlyhala výmena nového miesta pre kľúč."
 
-#: lib/setup.c:4919
+#: lib/setup.c:4935
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Miesto pre kľúč %d je neplatné."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
 #: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Miesto pre kľúč %d nie je aktívne."
 
-#: lib/setup.c:4944
+#: lib/setup.c:4960
 msgid "Device header overlaps with data area."
 msgstr "Hlavička zariadenia zasahuje do oblasti údajov."
 
-#: lib/setup.c:5165
+#: lib/setup.c:5181
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Prebieha prešifrovanie. Nie je možné aktivovať zariadenie."
 
-#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
 #: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Zlyhalo získanie zámku pre prešifrovanie."
 
-#: lib/setup.c:5189
+#: lib/setup.c:5205
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Obnova prešifrovaním LUKS2 s použitím kľúču(ov) zväzku zlyhala."
 
-#: lib/setup.c:5325
+#: lib/setup.c:5341
 #, c-format
 msgid "Device %s already exists."
 msgstr "Zariadenie %s už existuje."
 
-#: lib/setup.c:5332
+#: lib/setup.c:5348
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Nie je možné použiť zariadenie %s, názov je neplatný alebo sa stále používa."
 
-#: lib/setup.c:5344
+#: lib/setup.c:5360
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Kľúče zväzku na prešifrovanie sa líšia od zväzku."
 
-#: lib/setup.c:5361
+#: lib/setup.c:5377
 msgid "Incorrect volume key specified for plain device."
 msgstr "Zadaný nesprávny kľúč zväzku pre plain zariadenie."
 
-#: lib/setup.c:5387 lib/setup.c:5448
+#: lib/setup.c:5403 lib/setup.c:5464
 msgid "Device type is not properly initialized."
 msgstr "Typ zariadenia nie je riadne inicializovaný."
 
-#: lib/setup.c:5486
+#: lib/setup.c:5502
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Zväzok kľúčov jadra nie je jadrom podporovaný."
 
-#: lib/setup.c:5490
+#: lib/setup.c:5506
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Zväzok kľúčov jadra chýba: vyžadované pre odovzdanie podpisu jadru."
 
-#: lib/setup.c:5545
+#: lib/setup.c:5561
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Nedá sa použiť kľúč %s zo zväzku kľúčov."
 
-#: lib/setup.c:5758
+#: lib/setup.c:5774
 msgid "Incorrect root hash specified for verity device."
 msgstr "Nesprávny koreňový hash zadaný pre verity zariadenie."
 
-#: lib/setup.c:5799 lib/setup.c:5824
+#: lib/setup.c:5815 lib/setup.c:5840
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL nepodporuje odloženú deaktiváciu."
 
-#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Zariadenie %s sa stále používa."
 
-#: lib/setup.c:5832
+#: lib/setup.c:5848
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Nedá sa zrušiť odložené odstránenie zo zariadenia %s."
 
-#: lib/setup.c:5854
+#: lib/setup.c:5870
 #, c-format
 msgid "Invalid device %s."
 msgstr "Neplatné zariadenie %s."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6017
 msgid "Volume key buffer too small."
 msgstr "Vyhradená pamäť pre kľúč zväzku je príliš malá."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6028
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Nedá sa získať kľúč zväzku pre LUKS2 zariadenie."
 
-#: lib/setup.c:6021
+#: lib/setup.c:6037
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Nedá sa získať kľúč zväzku pre LUKS1 zariadenie."
 
-#: lib/setup.c:6035
+#: lib/setup.c:6051
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Nedá sa získať kľúč zväzku pre plain zariadenie."
 
-#: lib/setup.c:6043
+#: lib/setup.c:6059
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Nedá sa získať koreňový hash pre verity zariadenie."
 
-#: lib/setup.c:6052
+#: lib/setup.c:6068
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Nedá sa získať kľúč zväzku pre BITLK zariadenie."
 
-#: lib/setup.c:6057
+#: lib/setup.c:6073
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Nedá sa získať kľúč zväzku pre FVAULT2 zariadenie."
 
-#: lib/setup.c:6059
+#: lib/setup.c:6075
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Táto operácia nie je podporovaná pre %s šifrované zariadenie."
 
-#: lib/setup.c:6244 lib/setup.c:6255
+#: lib/setup.c:6260 lib/setup.c:6271
 msgid "Dump operation is not supported for this device type."
 msgstr "Operácia výpisu nie je podporovaná pre tento typ zariadenia."
 
-#: lib/setup.c:6635
+#: lib/setup.c:6651
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Odsadenie údajov nie je násobkom %u bajtov."
 
-#: lib/setup.c:6943
+#: lib/setup.c:6959
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Nedá sa konvertovať zariadenie %s, ktoré sa stále používa."
 
-#: lib/setup.c:7251 lib/setup.c:7406
+#: lib/setup.c:7267 lib/setup.c:7422
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Za nový kľúč zväzku sa nepodarilo priradiť miesto s kľúčom %u."
 
-#: lib/setup.c:7275
+#: lib/setup.c:7291
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Zlyhala inicializácia predvolených parametrov LUKS2 miesta na kľúč."
 
-#: lib/setup.c:7281
+#: lib/setup.c:7297
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Zlyhalo priradenie miesta pre kľúč %d k otlačku (digest)."
 
-#: lib/setup.c:7523
+#: lib/setup.c:7539
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Nedá sa pridať miesto pre kľúč, všetky miesta sú vypnuté a nie je poskytnutý žiaden kľúč zväzku."
 
-#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Zlyhalo načítanie kľúča zo zväzku kľúčov jadra."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7823
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Nedá sa nájsť zväzok kľúčov opísaný podľa \"%s\"."
 
-#: lib/setup.c:7872
+#: lib/setup.c:7888
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Zlyhalo získanie zámku pre tvrdý prístup ku globálnej pamäti."
 
@@ -797,7 +798,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Nedá sa prečítať požadované množstvo údajov."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Zariadenie %s neexistuje alebo bol prístup odmietnutý."
@@ -913,16 +914,16 @@ msgstr "Požadovaný počet paralelných vlákien PBKDF nemôže byť nula."
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "Iba PBKDF2 je podporavané v režime FIPS."
 
-#: lib/utils_benchmark.c:171
+#: lib/utils_benchmark.c:175
 msgid "PBKDF benchmark disabled but iterations not set."
 msgstr "Porovnanie výkonov PBKDF je vypnuté, ale iterácie nie sú nastavené."
 
-#: lib/utils_benchmark.c:190
+#: lib/utils_benchmark.c:194
 #, c-format
 msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr "Nekompatibilná možnosť PBKDF2 (používa sa hash algoritmus %s)."
 
-#: lib/utils_benchmark.c:210
+#: lib/utils_benchmark.c:214
 msgid "Not compatible PBKDF options."
 msgstr "Nekompatibilná možnosť PBKDF."
 
@@ -971,9 +972,9 @@ msgstr "Veľkosť kľúča v režime XTS musí byť 256 alebo 512 bitov."
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Špecifikácia šifry musí byť vo formáte [šifra]-[režim]-[iv]."
 
-#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
-#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "Nemožno zapisovať na zariadenie %s, prístup odmietnutý."
@@ -991,13 +992,13 @@ msgstr "Zlyhal prístup k dočasnému zariadeniu s úložiskom kľúča."
 msgid "IO error while encrypting keyslot."
 msgstr "Chyba vstupu/výstupu počas šifrovania miesta pre kľúč."
 
-#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
@@ -1012,61 +1013,61 @@ msgstr "Chyba vstupu/výstupu počas dešifrovania miesta pre kľúč."
 msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr "Zariadenie %s je príliš malé. (LUKS1 požaduje aspoň %<PRIu64> bajtov.)"
 
-#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
-#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
-#: lib/luks1/keymanage.c:181
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
 #, c-format
 msgid "LUKS keyslot %u is invalid."
 msgstr "LUKS miesto pre kľúč %u je neplatné."
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "Požadovaný súbor so zálohou hlavičky %s už existuje."
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "Nedá sa vytvoriť súbor so zálohou hlavičky %s."
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "Nedá sa zapísať súbor so zálohou hlavičky %s."
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
 msgid "Backup file does not contain valid LUKS header."
 msgstr "Súbor so zálohou neobsahuje platnú LUKS hlavičku."
 
-#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1450
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "Nedá sa otvoriť súbor so zálohou hlavičky %s."
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "Nedá sa čítať súbor so zálohou hlavičky %s."
 
-#: lib/luks1/keymanage.c:326
+#: lib/luks1/keymanage.c:331
 msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr "Odsadenie údajov alebo veľkosť kľúča sa líši na zariadení a v zálohe, obnova zlyhala."
 
-#: lib/luks1/keymanage.c:334
+#: lib/luks1/keymanage.c:339
 #, c-format
 msgid "Device %s %s%s"
 msgstr "Zariadenie %s %s%s"
 
-#: lib/luks1/keymanage.c:335
+#: lib/luks1/keymanage.c:340
 msgid "does not contain LUKS header. Replacing header can destroy data on that device."
 msgstr "neobsahuje LUKS hlavičku. Nahradenie hlavičky môže zničiť údaje na tomto zariadení."
 
-#: lib/luks1/keymanage.c:336
+#: lib/luks1/keymanage.c:341
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "už obsahuje LUKS hlavičku. Nahradenie hlavičky zničí existujúce miesta s kľúčmi."
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1074,130 +1075,130 @@ msgstr ""
 "\n"
 "VAROVANIE: hlavička skutočného zariadenia má iné UUID ako záloha!"
 
-#: lib/luks1/keymanage.c:385
+#: lib/luks1/keymanage.c:390
 msgid "Non standard key size, manual repair required."
 msgstr "Neštandardná veľkosť kľúča, manuálna oprava je vyžadovaná."
 
-#: lib/luks1/keymanage.c:395
+#: lib/luks1/keymanage.c:400
 msgid "Non standard keyslots alignment, manual repair required."
 msgstr "Neštandardné odsadenie miest pre kľúče, manuálna oprava je vyžadovaná."
 
-#: lib/luks1/keymanage.c:404
+#: lib/luks1/keymanage.c:409
 #, c-format
 msgid "Cipher mode repaired (%s -> %s)."
 msgstr "Režim šifry opravený (%s -> %s)."
 
-#: lib/luks1/keymanage.c:415
+#: lib/luks1/keymanage.c:420
 #, c-format
 msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Hash šifry opravený na malé písmená (%s)."
 
-#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:756
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Požadovaný LUKS hash %s nie je podporovaný."
 
-#: lib/luks1/keymanage.c:431
+#: lib/luks1/keymanage.c:436
 msgid "Repairing keyslots."
 msgstr "Opravujú sa miesta s kľúčmi."
 
-#: lib/luks1/keymanage.c:450
+#: lib/luks1/keymanage.c:455
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr "Miesto pre kľúč %i: odsadenie opravené (%u -> %u)."
 
-#: lib/luks1/keymanage.c:458
+#: lib/luks1/keymanage.c:463
 #, c-format
 msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr "Miesto pre kľúč %i: počet prúžkov AF opravený (%u -> %u)."
 
-#: lib/luks1/keymanage.c:467
+#: lib/luks1/keymanage.c:472
 #, c-format
 msgid "Keyslot %i: bogus partition signature."
 msgstr "Miesto pre kľúč %i: chybný podpis oddielu."
 
-#: lib/luks1/keymanage.c:472
+#: lib/luks1/keymanage.c:477
 #, c-format
 msgid "Keyslot %i: salt wiped."
 msgstr "Miesto pre kľúč %i: soľ vymazaná."
 
-#: lib/luks1/keymanage.c:489
+#: lib/luks1/keymanage.c:494
 msgid "Writing LUKS header to disk."
 msgstr "Zapisovanie hlavičky LUKS na disk."
 
-#: lib/luks1/keymanage.c:494
+#: lib/luks1/keymanage.c:499
 msgid "Repair failed."
 msgstr "Oprava zlyhala."
 
-#: lib/luks1/keymanage.c:549
+#: lib/luks1/keymanage.c:554
 #, c-format
 msgid "LUKS cipher mode %s is invalid."
 msgstr "LUKS šifrovací režim %s je neplatný."
 
-#: lib/luks1/keymanage.c:554
+#: lib/luks1/keymanage.c:559
 #, c-format
 msgid "LUKS hash %s is invalid."
 msgstr "LUKS hash %s je neplatný."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Žiadne známe problémy neboli zistené pre hlavičku LUKS."
 
-#: lib/luks1/keymanage.c:689
+#: lib/luks1/keymanage.c:690
 #, c-format
 msgid "Error during update of LUKS header on device %s."
 msgstr "Chyba počas aktualizácie hlavičky LUKS na zariadení %s."
 
-#: lib/luks1/keymanage.c:697
+#: lib/luks1/keymanage.c:698
 #, c-format
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Chyba pri opätovnom čítaní hlavičky LUKS po aktualizácií na zariadení %s."
 
-#: lib/luks1/keymanage.c:750
+#: lib/luks1/keymanage.c:751
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Odsadenie údajov pre LUKS hlavičku musí byť 0 alebo číslo väčšie ako veľkosť hlavičky."
 
-#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
-#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Poskytnutý nesprávny formát LUKS UUID."
 
-#: lib/luks1/keymanage.c:783
+#: lib/luks1/keymanage.c:784
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Nedá sa vytvoriť hlavička LUKS: zlyhalo čítanie náhodnej soli."
 
-#: lib/luks1/keymanage.c:811
+#: lib/luks1/keymanage.c:812
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Nedá sa vytvoriť hlavička LUKS: zlyhal otlačok (digest) hlavičky (používa sa hash %s)."
 
-#: lib/luks1/keymanage.c:856
+#: lib/luks1/keymanage.c:857
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Miesto pre kľúč %d aktívne, najprv ho vymažte."
 
-#: lib/luks1/keymanage.c:862
+#: lib/luks1/keymanage.c:863
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Miesto pre kľúč %d obsahuje príliš málo prúžkov. Manipulácia s hlavičkou?"
 
-#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "PBKDF2 hodnota iterácií pretečená."
 
-#: lib/luks1/keymanage.c:1022
+#: lib/luks1/keymanage.c:1023
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Nedá sa otvoriť miesto pre kľúč (používa sa hash %s)."
 
-#: lib/luks1/keymanage.c:1118
+#: lib/luks1/keymanage.c:1119
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Miesto pre kľúč %d je neplatné, prosím vyberte miesto pre kľúč medzi 0 a %d."
 
-#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Nedá sa vymazať zariadenie %s."
@@ -1375,33 +1376,33 @@ msgstr "Táto operácia nie je podporovaná."
 msgid "Unexpected key data size."
 msgstr "Neočakávaná veľkosť údajov o kľúči."
 
-#: lib/bitlk/bitlk.c:1442
+#: lib/bitlk/bitlk.c:1448
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Toto zariadenie BITLK je v nepodporovanom stave a nemôže byť aktivované."
 
-#: lib/bitlk/bitlk.c:1447
+#: lib/bitlk/bitlk.c:1453
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Zariadenie BITLK s typom \"%s\" nemôže byť aktivované."
 
-#: lib/bitlk/bitlk.c:1486
+#: lib/bitlk/bitlk.c:1492
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "VAROVANIE: Veľkosť zväzku BitLocker %<PRIu64> sa nezhoduje s veľkosťou prislúchajúceho zariadenia %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1613
+#: lib/bitlk/bitlk.c:1634
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Nedá sa aktivovať zariadenie, jadru dm-crypt chýba podpora pre BITLK IV."
 
-#: lib/bitlk/bitlk.c:1617
+#: lib/bitlk/bitlk.c:1638
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Nedá sa aktivovať zariadenie, jadru dm-crypt chýba podpora pre difuzér BITLK Elephant."
 
-#: lib/bitlk/bitlk.c:1621
+#: lib/bitlk/bitlk.c:1642
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Nedá sa aktivovať zariadenie, jadru dm-crypt chýba podpora pre veľké veľkosti sektorov."
 
-#: lib/bitlk/bitlk.c:1625
+#: lib/bitlk/bitlk.c:1646
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Nedá sa aktivovať zariadenie, modul jadra dm-zero chýba."
 
@@ -1558,24 +1559,24 @@ msgstr "Zlyhalo určenie veľkosti zariadenia %s."
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Nekompatibilné metadáta (verzia %u) jadra dm-integrity zachytené na %s."
 
-#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Jadro nepodporuje mapovanie dm-integrity."
 
-#: lib/integrity/integrity.c:314
+#: lib/integrity/integrity.c:315
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Jadro nepodporuje pevné zarovnanie metadát dm-integrity."
 
-#: lib/integrity/integrity.c:323
+#: lib/integrity/integrity.c:324
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Jadro odmieta aktivovať nezabezpečenú možnosť prepočtu (na prepnutie pozri zastaralé možnosti aktivácie)."
 
-#: lib/integrity/integrity.c:329
+#: lib/integrity/integrity.c:330
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Jadro nepodporuje dm-integrity režim inline."
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1510
+#: lib/luks2/luks2_json_metadata.c:1502
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "Zlyhalo získanie zámky zápisu na zariadenie %s."
@@ -1597,22 +1598,22 @@ msgstr ""
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "VAROVANIE: oblasť pre kľúče (%<PRIu64> bajtov) je príliš malá, dostupné množstvo miest pre kľúče LUKS2 je veľmi limitované.\n"
 
-#: lib/luks2/luks2_json_format.c:418
+#: lib/luks2/luks2_json_format.c:427
 msgid "Requested data offset is too small."
 msgstr "Požadovaná pozícia údajov je príliš malá."
 
-#: lib/luks2/luks2_json_format.c:459
+#: lib/luks2/luks2_json_format.c:468
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "VAROVANIE: veľkosť LUKS2 metadát sa zmenila na %<PRIu64> bajtov.\n"
 
-#: lib/luks2/luks2_json_format.c:463
+#: lib/luks2/luks2_json_format.c:472
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "VAROVANIE: veľkosť LUKS2 oblasti pre kľúče sa zmenila na %<PRIu64> bajtov.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Zlyhalo získanie zámku čítania na zariadení %s."
@@ -1621,33 +1622,33 @@ msgstr "Zlyhalo získanie zámku čítania na zariadení %s."
 msgid "Label is too long."
 msgstr "Menovka je príliš dlhá."
 
-#: lib/luks2/luks2_json_metadata.c:1435
+#: lib/luks2/luks2_json_metadata.c:1427
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "Zistené zakázané požiadavky LUKS2 v zálohe %s."
 
-#: lib/luks2/luks2_json_metadata.c:1474
+#: lib/luks2/luks2_json_metadata.c:1466
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "Pozícia údajov sa líši na zariadení a v zálohe, obnova zlyhala."
 
-#: lib/luks2/luks2_json_metadata.c:1480
+#: lib/luks2/luks2_json_metadata.c:1472
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "Binárna hlavička s oblasťou pre kľúče sa líši na zariadení a v zálohe, obnova zlyhala."
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1479
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "Zariadenie %s %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "neobsahuje hlavičku LUKS2. Výmena hlavičky môže zničiť údaje na tomto zariadení."
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1481
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "už obsahuje hlavičku LUKS2. Výmena hlavičky zničí existujúcu oblasť s kľúčmi."
 
-#: lib/luks2/luks2_json_metadata.c:1491
+#: lib/luks2/luks2_json_metadata.c:1483
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1657,7 +1658,7 @@ msgstr ""
 "VAROVANIE: neznáme požiadavky LUKS2 zistené na hlavičke skutočného zariadenia!\n"
 "Výmena hlavičky za záložnú môže poškodiť údaje na tomto zariadení!"
 
-#: lib/luks2/luks2_json_metadata.c:1493
+#: lib/luks2/luks2_json_metadata.c:1485
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1667,84 +1668,84 @@ msgstr ""
 "VAROVANIE: Nedokončené offline prešifrovanie zaznamenané na zariadení!\n"
 "Výmena hlavičky za záložnú môže poškodiť údaje na tomto zariadení."
 
-#: lib/luks2/luks2_json_metadata.c:1591
+#: lib/luks2/luks2_json_metadata.c:1583
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "Ignorovaný neznámy príznak %s."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Chýbajúci kľúč pre dm-crypt segment %u"
 
-#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Zlyhalo nastavenie dm-crypt segmentu."
 
-#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Zlyhalo nastavenie dm-linear segmentu."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Nebol nájdený žiaden známy vzor špecifikácie šifry v hlavičke LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:2709
+#: lib/luks2/luks2_json_metadata.c:2701
 msgid "OPAL device must have static device size."
 msgstr "Zariadenie OPAL musí mať statickú veľkosť zariadenia."
 
-#: lib/luks2/luks2_json_metadata.c:2729
+#: lib/luks2/luks2_json_metadata.c:2721
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Šifrované zariadenie OPAL s integritou musí byť menšie ako uzamykateľná oblasť."
 
-#: lib/luks2/luks2_json_metadata.c:2734
+#: lib/luks2/luks2_json_metadata.c:2726
 msgid "OPAL device must have same size as locking range."
 msgstr "Zariadenie OPAL musí mať rovnakú veľkosť ako uzamykateľná oblasť."
 
-#: lib/luks2/luks2_json_metadata.c:2754
+#: lib/luks2/luks2_json_metadata.c:2746
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Zariadenie OPAL je %s už odomknuté.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2793
+#: lib/luks2/luks2_json_metadata.c:2785
 msgid "Unsupported device integrity configuration."
 msgstr "Nepodporovaná konfigurácia integrity zariadenia."
 
-#: lib/luks2/luks2_json_metadata.c:2809
+#: lib/luks2/luks2_json_metadata.c:2801
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Prislúchajúce zariadenie dm-integrity neočakávane poskytlo sektory s údajmi."
 
-#: lib/luks2/luks2_json_metadata.c:2911
+#: lib/luks2/luks2_json_metadata.c:2903
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Prebieha opätovné šifrovanie. Nedá sa deaktivovať zariadenie."
 
-#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Zlyhala výmena pozastaveného zariadenia %s za cieľ dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Zariadenie %s bolo deaktivované, ale hardvérové zariadenie OPAL nemôže byť uzamknuté."
 
-#: lib/luks2/luks2_json_metadata.c:3045
+#: lib/luks2/luks2_json_metadata.c:3037
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Zistené nesplnené požiadavky LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:3053
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Operácia je nekompatibilná so zariadením, ktoré je označené pre zastaralé prešifrovanie. Operácia sa ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3055
+#: lib/luks2/luks2_json_metadata.c:3047
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Operácia je nekompatibilná so zariadením, ktoré je označené pre LUKS2 prešifrovanie. Operácia sa ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3057
+#: lib/luks2/luks2_json_metadata.c:3049
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Operácia je nekompatibilná so zariadením, ktoré používa OPAL. Operácia sa ruší."
 
-#: lib/luks2/luks2_json_metadata.c:3059
+#: lib/luks2/luks2_json_metadata.c:3051
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Operácia je nekompatibilná so zariadením, ktoré používa hardvérové inline príznaky. Operácia sa ruší."
 
@@ -1811,60 +1812,60 @@ msgstr "Nedá sa použiť špecifikácia šifry %s-%s pre LUKS2 miesto s kľúč
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Nedá sa presunúť oblasť s kľúčmi. Nie je dostatok miesta."
 
-#: lib/luks2/luks2_luks1_convert.c:619
+#: lib/luks2/luks2_luks1_convert.c:627
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Nedá sa zmeniť formát na LUKS2 - neplatné metadáta."
 
-#: lib/luks2/luks2_luks1_convert.c:636
+#: lib/luks2/luks2_luks1_convert.c:644
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Nedá sa presunúť oblasť s kľúčmi. LUKS2 oblasť s kľúčmi je príliš malá."
 
-#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
 msgid "Unable to move keyslot area."
 msgstr "Nedá sa presunúť oblasť s kľúčmi."
 
-#: lib/luks2/luks2_luks1_convert.c:757
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Nedá sa zmeniť formát na LUKS1 - predvolená veľkosť sektora šifrovania segmentov nie je 512 bajtov."
 
-#: lib/luks2/luks2_luks1_convert.c:765
+#: lib/luks2/luks2_luks1_convert.c:773
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Nedá sa zmeniť formát na LUKS1 - otlačok (digest) miesta pre kľúč nie je kompatibilný s LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:779
+#: lib/luks2/luks2_luks1_convert.c:787
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Nedá sa zmeniť formát na LUKS1 - zariadenie používa šifru so zabaleným kľúčom %s."
 
-#: lib/luks2/luks2_luks1_convert.c:784
+#: lib/luks2/luks2_luks1_convert.c:792
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Nedá sa zmeniť formát na LUKS1 - zariadenie používa viac segmentov."
 
-#: lib/luks2/luks2_luks1_convert.c:792
+#: lib/luks2/luks2_luks1_convert.c:800
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Nedá sa zmeniť formát na LUKS1 - hlavička LUKS2 obsahuje %u token(y)."
 
-#: lib/luks2/luks2_luks1_convert.c:798
+#: lib/luks2/luks2_luks1_convert.c:806
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Nedá sa zmeniť formát na LUKS1 - nie sú žiadne aktívne miesta s kľúčmi."
 
-#: lib/luks2/luks2_luks1_convert.c:810
+#: lib/luks2/luks2_luks1_convert.c:818
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Nedá sa zmeniť formát na LUKS1 - miesto pre kľúč %u je v neplatnom stave."
 
-#: lib/luks2/luks2_luks1_convert.c:815
+#: lib/luks2/luks2_luks1_convert.c:823
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Nedá sa zmeniť formát na LUKS1 - miesto pre kľúč %u je neviazané."
 
-#: lib/luks2/luks2_luks1_convert.c:820
+#: lib/luks2/luks2_luks1_convert.c:828
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Nedá sa zmeniť formát na LUKS1 - miesto %u (nad max. množstvom miest) je stále aktívne."
 
-#: lib/luks2/luks2_luks1_convert.c:825
+#: lib/luks2/luks2_luks1_convert.c:833
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Nedá sa zmeniť formát na LUKS1 - miesto pre kľúč %u nie je kompatibilné s LUKS1."
@@ -2149,7 +2150,7 @@ msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encry
 msgstr "Parametre šifrovania miesta pre kľúč nie sú kompatibilné so šifrovaním miesta pre kľúč LUKS2."
 
 #: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
-#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Nebol nájdený žiaden známy vzor špecifikácie šifry."
@@ -2177,7 +2178,7 @@ msgid "WARNING: The --keyfile-size option is being ignored, the read size is the
 msgstr "VAROVANIE: Možnosť --keyfile-size je ignorovaná, veľkosť čítania je rovnaká ako veľkosť kľúča šifrovania.\n"
 
 #: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
-#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Skenovanie blkid zlyhalo pre %s."
@@ -2257,7 +2258,7 @@ msgstr "Zariadenie %s nie je platné FVAULT2 zariadenie."
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Nedá sa určiť veľkosť kľúča zväzku pre FVAULT2, prosím použite možnosť --key-size."
 
-#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Zariadenie %s je stále aktívne a naplánované pre odložené odstránenie.\n"
@@ -2446,7 +2447,7 @@ msgid "LUKS file container %s is too small for activation, there is no remaining
 msgstr "Kontajnerový súbor LUKS %s je príliš malý na aktiváciu, nie je tam žiadne zvyšné miesto pre údaje."
 
 #: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
-#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Nedá sa zistiť veľkosť kľúču zväzku pre LUKS bez miest pre kľúče, prosím použite voľbu --key-size."
 
@@ -2741,7 +2742,7 @@ msgstr "Možnosť --volume-key-keyring nemôže byť kombinovaná s --hash alebo
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Obe možnosti --volume-key-file musia byť zadané spolu s príslušnými možnosťami --key-size."
 
-#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Možnosti --cancal-deferred a --deferred nemôžu byť použité naraz."
 
@@ -2809,21 +2810,21 @@ msgstr "Akcia vyžaduje špecifický token. Použite --key-slot parameter."
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<zariadenie> [--type <typ>] [<názov>]"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
 msgid "open device as <name>"
 msgstr "otvorí zariadenie ako <názov>"
 
 #: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
-#: src/integritysetup.c:562 src/integritysetup.c:564
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
 msgid "<name>"
 msgstr "<názov>"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
 msgid "close device (remove mapping)"
 msgstr "zatvorí zariadenie (odstráni mapovanie)"
 
-#: src/cryptsetup.c:3484 src/integritysetup.c:564
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
 msgid "resize active device"
 msgstr "zmení veľkosť aktívneho zariadenia"
 
@@ -2951,7 +2952,7 @@ msgstr "<add|remove|import|export> <zariadenie>"
 msgid "Manipulate LUKS2 tokens"
 msgstr "Manipuluje s tokenmi LUKS2"
 
-#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3052,7 +3053,7 @@ msgstr ""
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: Predvolená veľkosť kľúča s režimom XTS (dva interné kľúče) bude zdvojnásobená.\n"
 
-#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: požaduje %s ako argumenty"
@@ -3103,31 +3104,31 @@ msgstr "Možnosť --priority môže byť len ignore/normal/prefer."
 msgid "Invalid maximal tries specification."
 msgstr "Zadaný neplatný maximálny počet pokusov."
 
-#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
 msgid "Show this help message"
 msgstr "Zobrazí túto pomocnú správu"
 
-#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
 msgid "Display brief usage"
 msgstr "Zobrazí stručný návod na použitie"
 
-#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
 msgid "Print package version"
 msgstr "Vypíše verziu balíka"
 
-#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
 msgid "Help options:"
 msgstr "Možnosti pomoci:"
 
-#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[MOŽNOSŤ...] <akcia> <špecifikácia akcie>"
 
-#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
 msgid "Argument <action> missing."
 msgstr "Chýba argument <akcia>."
 
-#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
 msgid "Unknown action."
 msgstr "Neznáma akcia."
 
@@ -3232,7 +3233,7 @@ msgstr "Príkaz vyžaduje <koreňový_hash> alebo možnosť --root-hash-file ako
 msgid "<data_device> <hash_device>"
 msgstr "<zariadenie_s_údajmi> <hash_zariadenie>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:559
+#: src/veritysetup.c:485 src/integritysetup.c:562
 msgid "format device"
 msgstr "formátuje zariadenie"
 
@@ -3248,7 +3249,7 @@ msgstr "overí zariadenie"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<zariadenie_s_údajmi> <názov> <hash_zariadenie> [<koreňový_hash>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:562
+#: src/veritysetup.c:489 src/integritysetup.c:565
 msgid "show active device status"
 msgstr "zobrazí stav aktívneho zariadenia"
 
@@ -3256,7 +3257,7 @@ msgstr "zobrazí stav aktívneho zariadenia"
 msgid "<hash_device>"
 msgstr "<hash_zariadenie>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:563
+#: src/veritysetup.c:490 src/integritysetup.c:566
 msgid "show on-disk information"
 msgstr "zobrazí informácie na disku"
 
@@ -3320,20 +3321,20 @@ msgstr " (hardvérové inline príznaky)"
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Nastavenie príznaku prepočítania nie je podporované, môžete zvážiť použitie --wipe namiesto toho."
 
-#: src/integritysetup.c:382 src/integritysetup.c:546
+#: src/integritysetup.c:382 src/integritysetup.c:549
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Zariadenie %s nie je platné INTEGRITY zariadenie."
 
-#: src/integritysetup.c:559 src/integritysetup.c:563
+#: src/integritysetup.c:562 src/integritysetup.c:566
 msgid "<integrity_device>"
 msgstr "<zariadenie_integrity>"
 
-#: src/integritysetup.c:560
+#: src/integritysetup.c:563
 msgid "<integrity_device> <name>"
 msgstr "<zariadenie_integrity> <názov>"
 
-#: src/integritysetup.c:583
+#: src/integritysetup.c:586
 #, c-format
 msgid ""
 "\n"
@@ -3344,7 +3345,7 @@ msgstr ""
 "<názov> je zariadenie na vytvorenie pod %s\n"
 "<zariadenie_integrity> je zariadenie obsahujúce údaje s príznakmi integrity\n"
 
-#: src/integritysetup.c:588
+#: src/integritysetup.c:591
 #, c-format
 msgid ""
 "\n"
@@ -3357,51 +3358,55 @@ msgstr ""
 "\tAlgoritmus kontrolného súčtu: %s\n"
 "\tMaximálna veľkosť súboru s kľúčom: %d kB\n"
 
-#: src/integritysetup.c:645
+#: src/integritysetup.c:648
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Neplatná veľkosť --%s. Maximum je %u bajtov."
 
-#: src/integritysetup.c:748
+#: src/integritysetup.c:751
 msgid "Both key file and key size options must be specified."
 msgstr "Obe možnosti musia byť zadané, súbor s kľúčom aj veľkosť kľúča."
 
-#: src/integritysetup.c:752
+#: src/integritysetup.c:755
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Obe možnosti musia byť zadané, súbor s kľúčom pre integritu denníka aj veľkosť kľúča."
 
-#: src/integritysetup.c:755
+#: src/integritysetup.c:758
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Algoritmus integrity denníka musí byť zadaný, keď sa používa kľúč pre integritu denníka."
 
-#: src/integritysetup.c:759
+#: src/integritysetup.c:762
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Obe možnosti musia byť zadané, súbor s kľúčom na šifrovanie denníka aj veľkosť kľúča."
 
-#: src/integritysetup.c:762
+#: src/integritysetup.c:765
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Algoritmus šifrovania denníka musí byť zadaný, keď sa používa kľúč na šifrovanie denníka."
 
-#: src/integritysetup.c:766
+#: src/integritysetup.c:769
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Možnosti režimu obnovenia a bitmapy sa vzájomne vylučujú."
 
-#: src/integritysetup.c:773
+#: src/integritysetup.c:776
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Možnosti denníka nemôžu byť použité v bitmapovom režime."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:781
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Možnosti bitmapy môžu byť použité len v bitmapovom režime."
 
-#: src/integritysetup.c:784
+#: src/integritysetup.c:787
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Režim inline nemôže byť kombinovaný s možnosťami režimu denníka alebo bitmapy."
 
-#: src/integritysetup.c:788
+#: src/integritysetup.c:791
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Režim inline nemôže byť kombinovaný s oddeleným zariadením s údajmi."
 
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "Zahadzovanie/TRIM s kľúčmi môže byť aktivované len v prípade algoritmov s kľúčom integrity, ako napr. HMAC."
+
 #: src/utils_tools.c:105
 msgid ""
 "\n"
@@ -3752,7 +3757,7 @@ msgstr "Zariadenie nie je v stave dešifrovania LUKS2. Konfliktná možnosť --d
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Zariadenie je v stave prešifrovania s odolnosťou posunu dát. Požadovaná možnosť --resilience nemôže byť aplikovaná."
 
-#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Nedá sa zistiť veľkosť kľúču zväzku pre LUKS bez miest pre kľúče, prosím použite možnosť --new-key-size."
 
@@ -3786,7 +3791,7 @@ msgstr ""
 "Požadovaná --sector-size %<PRIu32> nie je kompatibilná so superblokom %s\n"
 "(veľkosť bloku: %<PRIu32> bajtov) rozpoznaným na zariadení %s."
 
-#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Šifrovanie bez oddelenej hlavičky (--header) nie je možné bez zmenšenia veľkosti zariadenia s údajmi (--reduce-device-size)."
 
@@ -3854,42 +3859,43 @@ msgstr "Inicializácia prešifrovania zlyhala. Záložná hlavička je dostupná
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Dešifrovanie LUKS2 je podporované iba s oddelenou hlavičkou (s odsadením údajov nastaveným na 0)."
 
-#: src/utils_reencrypt.c:1490
-msgid "No token could unlock the device."
-msgstr "Žiaden token nemôže odomknúť zariadenie."
-
-#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
 msgid "Not enough free keyslots for reencryption."
 msgstr "Nie je dostatok voľných miest pre kľúč na prešifrovanie."
 
-#: src/utils_reencrypt.c:1562
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "Žiaden token nemôže odomknúť zariadenie."
+
+#: src/utils_reencrypt.c:1588
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Súbor s kľúčom alebo kľúč zo zväzku kľúčov môže byť použitý iba s --key-slot alebo s práve jedným aktívnym miestom pre kľúč."
 
-#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Zadajte heslo miesta pre kľúč %d: "
 
-#: src/utils_reencrypt.c:1879
+#: src/utils_reencrypt.c:1905
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Mení sa algoritmus šifrovanie údajov na %s.\n"
 
-#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Použite --force-no-keyslots na prešifrovanie zariadenia s aktívnymi miestami pre kľúč priamo odovzdaním kľúčov zväzku."
 
-#: src/utils_reencrypt.c:1996
+#: src/utils_reencrypt.c:2022
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Možnosť --new-volume-key-file musí byť použitá spolu s --new-key-size"
 
-#: src/utils_reencrypt.c:2038
+#: src/utils_reencrypt.c:2064
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Žiaden parameter údajových segmentov nezmenený. Prešifrovanie sa ruší."
 
-#: src/utils_reencrypt.c:2075
+#: src/utils_reencrypt.c:2101
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3897,7 +3903,7 @@ msgstr ""
 "Zväčšenie veľkosti šifrovaného sektora na offline zariadení nie je podporované.\n"
 "Aktivujte najprv zariadenie alebo použite možnosť --force-offline-reencrypt (nebezpečné!)."
 
-#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3906,58 +3912,58 @@ msgstr ""
 "\n"
 "Prešifrovanie prerušené."
 
-#: src/utils_reencrypt.c:2122
+#: src/utils_reencrypt.c:2148
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Obnovovanie LUKS prešifrovania vo vynútenom režime offline.\n"
 
-#: src/utils_reencrypt.c:2145
+#: src/utils_reencrypt.c:2171
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Zariadenie %s obsahuje chybné LUKS metadáta. Operácia sa ruší."
 
-#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Zariadenie %s už je LUKS zariadenie. Operácia sa ruší."
 
-#: src/utils_reencrypt.c:2189
+#: src/utils_reencrypt.c:2215
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Zariadenie %s je už v stave prešifrovania LUKS. Operácia sa ruší."
 
-#: src/utils_reencrypt.c:2272
+#: src/utils_reencrypt.c:2298
 msgid "LUKS2 decryption requires --header option."
 msgstr "LUKS2 dešifrovanie požaduje možnosť --header."
 
-#: src/utils_reencrypt.c:2320
+#: src/utils_reencrypt.c:2346
 msgid "Command requires device as argument."
 msgstr "Príkaz vyžaduje zariadenie ako argument."
 
-#: src/utils_reencrypt.c:2333
+#: src/utils_reencrypt.c:2359
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Konfliktné verzie. Zariadenie %s je LUKS1."
 
-#: src/utils_reencrypt.c:2339
+#: src/utils_reencrypt.c:2365
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Konfliktné verzie. Zariadenie %s je v stave prešifrovania LUKS1."
 
-#: src/utils_reencrypt.c:2345
+#: src/utils_reencrypt.c:2371
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Konfliktné verzie. Zariadenie %s je LUKS2."
 
-#: src/utils_reencrypt.c:2351
+#: src/utils_reencrypt.c:2377
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Konfliktné verzie. Zariadenie %s je v stave prešifrovania LUKS2."
 
-#: src/utils_reencrypt.c:2357
+#: src/utils_reencrypt.c:2383
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "LUKS2 prešifrovanie je už inicializované. Operácia sa ruší."
 
-#: src/utils_reencrypt.c:2364
+#: src/utils_reencrypt.c:2390
 msgid "Device reencryption not in progress."
 msgstr "Opätovné šifrovanie zariadenia neprebieha."
 

From 92d8a532de99b4b7ef5552c872f664a7a20801f5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=9C=D0=B8=D1=80=D0=BE=D1=81=D0=BB=D0=B0=D0=B2=20=D0=9D?=
 =?UTF-8?q?=D0=B8=D0=BA=D0=BE=D0=BB=D0=B8=D1=9B?=
 <miroslavnikolic@rocketmail.com>
Date: Fri, 4 Sep 2026 18:57:03 +0200
Subject: [PATCH 213/244] po: update sr.po (from translationproject.org)

---
 po/sr.po | 1309 +++++++++++++++++++++++++++---------------------------
 1 file changed, 658 insertions(+), 651 deletions(-)

diff --git a/po/sr.po b/po/sr.po
index db01161a0..46c218276 100644
--- a/po/sr.po
+++ b/po/sr.po
@@ -1,13 +1,14 @@
 # Serbian translation for cryptsetup.
 # Copyright © 2014 Free Software Foundation, Inc.
 # This file is distributed under the same license as the cryptsetup package.
-# Мирослав Николић <miroslavnikolic@rocketmail.com>, 2014–2026.
+# Мирослав Николић <miroslavnikolic@rocketmail.com>, 2014-2026.
+#
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup-2.8.5-rc0\n"
+"Project-Id-Version: cryptsetup-2.8.8-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-03-30 14:18+0200\n"
-"PO-Revision-Date: 2026-04-04 12:24+0200\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-04 17:33+0200\n"
 "Last-Translator: Мирослав Николић <miroslavnikolic@rocketmail.com>\n"
 "Language-Team: Serbian <(nothing)>\n"
 "Language: sr\n"
@@ -15,81 +16,80 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
-"X-Generator: Virtaal 0.7.1\n"
 "X-Bugs: Report translation errors to the Language-Team address.\n"
 
-#: lib/libdevmapper.c:419
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "Не могу да покренем мапер уређаја, радим као обичан корисник."
 
-#: lib/libdevmapper.c:422
+#: lib/libdevmapper.c:425
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "Не могу да покренем мапер уређаја. Да ли је модул кернела „dm_mod“ учитан?"
 
-#: lib/libdevmapper.c:1125
+#: lib/libdevmapper.c:1129
 msgid "Requested deferred flag is not supported."
 msgstr "Затражена одложена заставица није подржана."
 
-#: lib/libdevmapper.c:1194
+#: lib/libdevmapper.c:1198
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "ДМ-УЈИБ за уређај „%s“ је скраћен."
 
-#: lib/libdevmapper.c:1598
+#: lib/libdevmapper.c:1602
 msgid "Unknown dm target type."
 msgstr "Непозната врста „dm“ мете."
 
-#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
-#: lib/libdevmapper.c:1853
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "Затражене опције перформанси дм-шифровања нису подржане."
 
-#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "Затражене опције рада оштећених података дм-веритија нису подржане."
 
-#: lib/libdevmapper.c:1752
+#: lib/libdevmapper.c:1756
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "Затражене „dm-verity“ опција без задатка није подржана."
 
-#: lib/libdevmapper.c:1764
+#: lib/libdevmapper.c:1768
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "Затражене „dm-verity FEC“ опције нису подржане."
 
-#: lib/libdevmapper.c:1770
+#: lib/libdevmapper.c:1774
 msgid "Requested data integrity options are not supported."
 msgstr "Затражене опције целовитости података нису подржане."
 
-#: lib/libdevmapper.c:1774
+#: lib/libdevmapper.c:1778
 msgid "Requested sector_size option is not supported."
 msgstr "Затражене опције величине одељка нису подржане."
 
-#: lib/libdevmapper.c:1779
+#: lib/libdevmapper.c:1783
 msgid "The device size is not multiple of the requested sector size."
 msgstr "Величина уређаја није умножитељ затражене величине одељка."
 
-#: lib/libdevmapper.c:1783
+#: lib/libdevmapper.c:1787
 msgid "Requested integrity_key_size option is not supported."
 msgstr "Затражена опција „integrity_key_size“ није подржана."
 
-#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Затражене опције самосталног прерачунавања ознака целовитости нису подржане."
 
-#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2781
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Discard/TRIM is not supported."
 msgstr "Одбацивање/ОДСЕЦАЊЕ није подржано."
 
-#: lib/libdevmapper.c:1808
+#: lib/libdevmapper.c:1812
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "Затражени режим битмапе „dm-integrity“ није подржан."
 
-#: lib/libdevmapper.c:1814
+#: lib/libdevmapper.c:1818
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr "Затражени режим унутарње „dm-integrity“ није подржан."
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2877
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "Нисам успео да пропитам „dm-%s“ подеок."
@@ -123,672 +123,672 @@ msgstr "Затражен је непознат квалитет „RNG“-а."
 msgid "Error reading from RNG."
 msgstr "Грешка читања из „RNG“-а."
 
-#: lib/setup.c:248
+#: lib/setup.c:251
 msgid "OPAL support is disabled in libcryptsetup."
 msgstr "OPAL подршка је искључена у „libcryptsetup“."
 
-#: lib/setup.c:250
+#: lib/setup.c:253
 #, c-format
 msgid "Device %s or kernel does not support OPAL encryption."
 msgstr "Уређај „%s“ или кернел не подржавају OPAL шифровање."
 
-#: lib/setup.c:266
+#: lib/setup.c:269
 msgid "Cannot initialize crypto RNG backend."
 msgstr "Не могу да покренем „RNG“ позадинца криптографије."
 
-#: lib/setup.c:272
+#: lib/setup.c:275
 msgid "Cannot initialize crypto backend."
 msgstr "Не могу да покренем позадинца криптографије."
 
-#: lib/setup.c:305 lib/setup.c:2766 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Хеш алгоритам „%s“ није подржан."
 
-#: lib/setup.c:308 lib/loopaes/loopaes.c:78
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
 #, c-format
 msgid "Key processing error (using hash %s)."
 msgstr "Грешка обраде кључа (користим хеш %s)."
 
-#: lib/setup.c:389 lib/setup.c:426
+#: lib/setup.c:392 lib/setup.c:429
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Не могу да одредим врсту уређаја. Несагласно покретање уређаја?"
 
-#: lib/setup.c:395 lib/setup.c:4160
+#: lib/setup.c:398 lib/setup.c:4193
 msgid "This operation is supported only for LUKS device."
 msgstr "Ова радња је подржана само за ЛУКС уређај."
 
-#: lib/setup.c:432
+#: lib/setup.c:435
 msgid "This operation is supported only for LUKS2 device."
 msgstr "Ова радња је подржана само за ЛУКС2 уређај."
 
-#: lib/setup.c:489 lib/luks2/luks2_reencrypt.c:3101
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
 msgid "All key slots full."
 msgstr "Сви утори кључева су пуни."
 
-#: lib/setup.c:500
+#: lib/setup.c:503
 #, c-format
 msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr "Утор кључа %d није исправан, изаберите између 0 и %d."
 
-#: lib/setup.c:506
+#: lib/setup.c:509
 #, c-format
 msgid "Key slot %d is full, please select another one."
 msgstr "Утор кључа %d је пун, изаберите неки други."
 
-#: lib/setup.c:531 lib/setup.c:3875
+#: lib/setup.c:534 lib/setup.c:3888
 msgid "Device size is not aligned to device logical block size."
 msgstr "Величина уређаја није поравната на величину логичког блока уређаја."
 
-#: lib/setup.c:628
+#: lib/setup.c:631
 #, c-format
 msgid "Header detected but device %s is too small."
 msgstr "Заглавље је откривено али уређај „%s“ је премали."
 
-#: lib/setup.c:669 lib/setup.c:3760 lib/setup.c:5238
-#: lib/luks2/luks2_reencrypt.c:3948 lib/luks2/luks2_reencrypt.c:4437
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Ова радња није подржана за ову врсту уређаја."
 
-#: lib/setup.c:674
+#: lib/setup.c:677
 msgid "Illegal operation with reencryption in-progress."
 msgstr "Неисправна радња са поновним шифровањем је у току."
 
-#: lib/setup.c:806
+#: lib/setup.c:809
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Нисам успео да повратим ЛУКС2 метаподатке у меморију."
 
-#: lib/setup.c:893 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
 #: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
 #: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
-#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2953
-#: src/cryptsetup.c:3021 src/utils_reencrypt.c:2281
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Уређај „%s“ није исправан ЛУКС уређај."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Неподржано ЛУКС издање %d."
 
-#: lib/setup.c:1270
+#: lib/setup.c:1279
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Није откривен познат образац одреднице шифрера за активан уређај „%s“."
 
-#: lib/setup.c:1515 lib/setup.c:3507 lib/setup.c:3599 lib/setup.c:3611
-#: lib/setup.c:3783 lib/setup.c:5816
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
 #, c-format
 msgid "Device %s is not active."
 msgstr "Уређај „%s“ није радан."
 
-#: lib/setup.c:1532
+#: lib/setup.c:1545
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Основни уређај за криптографски уређај „%s“ је нестао."
 
-#: lib/setup.c:1614
+#: lib/setup.c:1627
 msgid "Invalid plain crypt parameters."
 msgstr "Неисправни параметри обичне криптографије."
 
-#: lib/setup.c:1619 lib/setup.c:2669
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Invalid key size."
 msgstr "Неисправна величина кључа."
 
-#: lib/setup.c:1624 lib/setup.c:2674 lib/setup.c:2879
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
 msgid "UUID is not supported for this crypt type."
 msgstr "УЈИБ није подржан за ову врсту криптографије."
 
-#: lib/setup.c:1629 lib/setup.c:2679
+#: lib/setup.c:1642 lib/setup.c:2692
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Откачени уређај метаподатака није подржан за ову врсту криптографије."
 
-#: lib/setup.c:1639 lib/setup.c:1887 lib/luks2/luks2_reencrypt.c:3034
-#: src/cryptsetup.c:1492 src/cryptsetup.c:3760
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Неподржана величина одељка шифровања."
 
-#: lib/setup.c:1647 lib/setup.c:1916 lib/setup.c:3869
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
 msgid "Device size is not aligned to requested sector size."
 msgstr "Величина уређаја није поравната на затражену величину одељка."
 
-#: lib/setup.c:1699 lib/setup.c:1951 lib/setup.c:2328
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
 msgid "Can't format LUKS without device."
 msgstr "Не могу да обликујем ЛУКС без уређаја."
 
-#: lib/setup.c:1704 lib/setup.c:1956
+#: lib/setup.c:1717 lib/setup.c:1969
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Зониран уређај „%s“ се не може користити за LUKS заглавље."
 
-#: lib/setup.c:1711 lib/setup.c:1963 lib/setup.c:2334
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Затражено поравнање података није сагласно са померајем података."
 
-#: lib/setup.c:1751 lib/setup.c:1981
+#: lib/setup.c:1764 lib/setup.c:1994
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "УПОЗОРЕЊЕ: DAX уређај може да оштети податке јер не гарантује атомска ажурирања сектора.\n"
 
-#: lib/setup.c:1789 lib/setup.c:2088 lib/setup.c:2109 lib/setup.c:2517
-#: lib/setup.c:2564 lib/setup.c:2896
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Не могу да обришем заглавље на уређају „%s“."
 
-#: lib/setup.c:1802 lib/setup.c:2161
+#: lib/setup.c:1815 lib/setup.c:2174
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Уређај „%s“ је премали за активирање, није преостао простор за податке.\n"
 
-#: lib/setup.c:1843
+#: lib/setup.c:1856
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Кључ волумена је премали за шифровање са проширењима целовитости."
 
-#: lib/setup.c:1847
+#: lib/setup.c:1860
 msgid "Integrity key size is too small."
 msgstr "Величина кључа целовитости је премала."
 
-#: lib/setup.c:1856
+#: lib/setup.c:1869
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Шифрер %s-%s (величина кључа %zd бита) није доступан."
 
-#: lib/setup.c:1897
+#: lib/setup.c:1910
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "УПОЗОРЕЊЕ: Покретање уређаја неће успети, „dm-crypt“-у недостаје подршка за затражену величину одељка шифровања.\n"
 
-#: lib/setup.c:2091 lib/setup.c:2458 lib/setup.c:2520 lib/utils_device.c:906
-#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3073
-#: lib/luks2/luks2_reencrypt.c:4497
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Уређај „%s“ је премали."
 
-#: lib/setup.c:2102 lib/setup.c:2141 lib/setup.c:2557 lib/setup.c:2615
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Не могу да обликујем уређај „%s“ у употреби."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Не могу да обликујем уређај „%s“, овлашћење је одбијено."
 
-#: lib/setup.c:2129 lib/setup.c:2587 lib/setup.c:2969
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Не могу да обликујем целовитост за уређај „%s“."
 
-#: lib/setup.c:2148 lib/setup.c:2626
+#: lib/setup.c:2161 lib/setup.c:2639
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Не могу да обликујем уређај „%s“."
 
-#: lib/setup.c:2191
+#: lib/setup.c:2204
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Не могу да добавим параметре OPAL поравнања."
 
-#: lib/setup.c:2203
+#: lib/setup.c:2216
 msgid "Bogus OPAL logical block size."
 msgstr "Привидна величина OPAL логичког блока."
 
-#: lib/setup.c:2208 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Привидна величина OPAL логичког блока се разликује величине блока уређаја."
 
-#: lib/setup.c:2214
+#: lib/setup.c:2227
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Затражен померај података није сагласан са OPAL величином блока."
 
-#: lib/setup.c:2221
+#: lib/setup.c:2234
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Затражено поравнање података није сагласно са OPAL поравнањем."
 
-#: lib/setup.c:2241
+#: lib/setup.c:2254
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Померај података не задовољава захтеве OPAL поравнања."
 
-#: lib/setup.c:2254
+#: lib/setup.c:2267
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Затражено поравнање података не задовољава захтеве поравнања опсега закључавања."
 
-#: lib/setup.c:2468
+#: lib/setup.c:2481
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Ндокнађујем величину уређаја за %<PRIu64> сектора да га поравнам са ситношћу OPAL поравнања."
 
-#: lib/setup.c:2528 lib/setup.c:4243 lib/setup.c:4432 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2724 lib/luks2/luks2_json_metadata.c:2992
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Нисам успео да остварим OPAL закључавање на уређају „%s“."
 
-#: lib/setup.c:2538
+#: lib/setup.c:2551
 msgid "Incorrect OPAL Admin key."
 msgstr "Нетачан кључ OPAL админа."
 
-#: lib/setup.c:2540
+#: lib/setup.c:2553
 msgid "Cannot setup OPAL segment."
 msgstr "Не могу да поставим OPAL подеок."
 
-#: lib/setup.c:2622
+#: lib/setup.c:2635
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Не могу да обликујем уређај „%s“, OPAL уређај изгледа да је сада потпуно заштићен од писања."
 
-#: lib/setup.c:2624
+#: lib/setup.c:2637
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Ово је можда грешка у фирмверу. Покрените OPAL PSID ресет и поново се повежите за опоравак."
 
-#: lib/setup.c:2644
+#: lib/setup.c:2657
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Поновно постављање опсега закључавања %d на уређају „%s“ није успело."
 
-#: lib/setup.c:2664
+#: lib/setup.c:2677
 msgid "Can't format LOOPAES without device."
 msgstr "Не могу да обликујем „LOOPAES“ без уређаја."
 
-#: lib/setup.c:2709
+#: lib/setup.c:2722
 msgid "Can't format VERITY without device."
 msgstr "Не могу да обликујем „VERITY“ без уређаја."
 
-#: lib/setup.c:2720 lib/verity/verity.c:88
+#: lib/setup.c:2733 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Неподржана врста „VERITY“ хеша %d."
 
-#: lib/setup.c:2726 lib/verity/verity.c:96
+#: lib/setup.c:2739 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Неподржана величина блока „VERITY“."
 
-#: lib/setup.c:2731 lib/verity/verity.c:61
+#: lib/setup.c:2744 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Неподржан померај хеша „VERITY“."
 
-#: lib/setup.c:2736
+#: lib/setup.c:2749
 msgid "Unsupported VERITY FEC offset."
 msgstr "Неподржан „VERITY FEC“ померај."
 
-#: lib/setup.c:2760
+#: lib/setup.c:2773
 msgid "Data area overlaps with hash area."
 msgstr "Област података се преклапа са облашћу хеша."
 
-#: lib/setup.c:2785
+#: lib/setup.c:2798
 msgid "Hash area overlaps with FEC area."
 msgstr "Област хеша се преклапа са „FEC“ облашћу."
 
-#: lib/setup.c:2792
+#: lib/setup.c:2805
 msgid "Data area overlaps with FEC area."
 msgstr "Област података се преклапа са „FEC“ облашћу."
 
-#: lib/setup.c:2884
+#: lib/setup.c:2897
 msgid "Integrity key size mismatch."
 msgstr "Величина кључа целовитости није одговарајућа."
 
-#: lib/setup.c:2935
+#: lib/setup.c:2948
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "УПОЗОРЕЊЕ: Затражена величина ознаке %d бајта се разликује од излаза величине „%s“ (%d бајта).\n"
 
-#: lib/setup.c:3048 lib/setup.c:3150
+#: lib/setup.c:3061 lib/setup.c:3163
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Затражена је непозната или неподржана врста уређаја „%s“."
 
-#: lib/setup.c:3064
+#: lib/setup.c:3077
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "Уређај „%s“ не обезбеђује унутарња поља података целовитости."
 
-#: lib/setup.c:3070
+#: lib/setup.c:3083
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Унутарња величина ознаке %<PRIu32> [бајта] је већа од %<PRIu32> коју доставља уређај „%s“."
 
-#: lib/setup.c:3085
+#: lib/setup.c:3098
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Сектор мора бити исти као сектор хардвера уређаја (%zu бајта)."
 
-#: lib/setup.c:3515 lib/setup.c:3604 lib/setup.c:3617
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Неподржани параметри на уређају „%s“."
 
-#: lib/setup.c:3521 lib/setup.c:3624 lib/luks2/luks2_reencrypt.c:2928
-#: lib/luks2/luks2_reencrypt.c:3197 lib/luks2/luks2_reencrypt.c:3594
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Неодговарајући параметри на уређају „%s“."
 
-#: lib/setup.c:3647
+#: lib/setup.c:3660
 msgid "Crypt devices mismatch."
 msgstr "Криптографски уређаји се не поклапају."
 
-#: lib/setup.c:3679 lib/setup.c:3684 lib/luks2/luks2_reencrypt.c:2412
-#: lib/luks2/luks2_reencrypt.c:2944 lib/luks2/luks2_reencrypt.c:4236
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Нисам успео поново да учитам уређај „%s“."
 
-#: lib/setup.c:3690 lib/setup.c:3696 lib/luks2/luks2_reencrypt.c:2382
-#: lib/luks2/luks2_reencrypt.c:2389 lib/luks2/luks2_reencrypt.c:2958
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Нисам успео да обуставим уређај „%s“."
 
-#: lib/setup.c:3702 lib/luks2/luks2_reencrypt.c:2396
-#: lib/luks2/luks2_reencrypt.c:2979 lib/luks2/luks2_reencrypt.c:4149
-#: lib/luks2/luks2_reencrypt.c:4240
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Нисам успео да наставим са уређајем „%s“."
 
-#: lib/setup.c:3717
+#: lib/setup.c:3730
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Кобна грешка приликом поновног учитавања уређаја „%s“ (на врху уређаја „%s“)."
 
-#: lib/setup.c:3720 lib/setup.c:3722
+#: lib/setup.c:3733 lib/setup.c:3735
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Нисам успео да променим уређај „%s“ на дм-грешку."
 
-#: lib/setup.c:3765
+#: lib/setup.c:3778
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Не могу да променим величину LUKS2 уређаја са статичком величином."
 
-#: lib/setup.c:3770
+#: lib/setup.c:3783
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Промена величине LUKS2 уређаја са заштитом целовитости није подржана."
 
-#: lib/setup.c:3816
+#: lib/setup.c:3829
 msgid "Cannot resize loop device."
 msgstr "Не могу да променим величину уређаја петље."
 
-#: lib/setup.c:3860
+#: lib/setup.c:3873
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr ""
 "УПОЗОРЕЊЕ: Највећа величина је већ постављена или кернел не подржава промену величине.\n"
 "\n"
 
-#: lib/setup.c:3926
+#: lib/setup.c:3939
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Промена величине није успела, кернел је не подржава."
 
-#: lib/setup.c:3958
+#: lib/setup.c:3971
 msgid "Do you really want to change UUID of device?"
 msgstr "Да ли стварно желите да измените УЈИБ уређаја?"
 
-#: lib/setup.c:4050
+#: lib/setup.c:4061 lib/setup.c:4069
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Датотека резерве заглавља не садржи сагласно ЛУКС заглавље."
 
-#: lib/setup.c:4143
+#: lib/setup.c:4176
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Волумен „%s“ није радан."
 
-#: lib/setup.c:4198
+#: lib/setup.c:4231
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Волумен „%s“ је већ обустављен."
 
-#: lib/setup.c:4224
+#: lib/setup.c:4257
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Обустављање није подржано за уређај „%s“."
 
-#: lib/setup.c:4226 lib/setup.c:4234
+#: lib/setup.c:4259 lib/setup.c:4267
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Грешка за време обустављања уређаја „%s“."
 
-#: lib/setup.c:4249
+#: lib/setup.c:4282
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Уређај „%s“ је обустављен али хардверски OPAL уређај се не може закључати."
 
-#: lib/setup.c:4280 lib/setup.c:4457
+#: lib/setup.c:4313 lib/setup.c:4507
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Настављање није подржано за уређај „%s“."
 
-#: lib/setup.c:4282 lib/setup.c:4447 lib/setup.c:4459
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Грешка за време настављања уређаја „%s“."
 
-#: lib/setup.c:4301
+#: lib/setup.c:4351
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Нисам успео да развежем кључ волумена од привеска кључева које је навео корисник."
 
-#: lib/setup.c:4423 lib/setup.c:5603
+#: lib/setup.c:4473 lib/setup.c:5653
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Нисам успео да свежем кључ волумена у привезак кључева који је корисник одредио."
 
-#: lib/setup.c:4522 src/cryptsetup.c:2721
+#: lib/setup.c:4572 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Волумен „%s“ није обустављен."
 
-#: lib/setup.c:4633 lib/setup.c:7276 lib/setup.c:7298 lib/setup.c:7352
-#: src/cryptsetup.c:1856 src/cryptsetup.c:2260 src/cryptsetup.c:2278
-#: src/utils_reencrypt.c:305 src/utils_reencrypt.c:1966
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1995
 msgid "Volume key does not match the volume."
 msgstr "Кључ волумена не одговара волумену."
 
-#: lib/setup.c:4787
+#: lib/setup.c:4837
 msgid "Failed to swap new key slot."
 msgstr "Нисам успео да разменим нови утор кључа."
 
-#: lib/setup.c:4885
+#: lib/setup.c:4935
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Утор кључа „%d“ није исправан."
 
-#: lib/setup.c:4891 src/cryptsetup.c:1977 src/cryptsetup.c:2437
-#: src/cryptsetup.c:3121 src/cryptsetup.c:3181
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Утор кључа „%d“ није радан."
 
-#: lib/setup.c:4910
+#: lib/setup.c:4960
 msgid "Device header overlaps with data area."
 msgstr "Заглавље уређаја се преклапа са облашћу података."
 
-#: lib/setup.c:5131
+#: lib/setup.c:5181
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Поновно шифровање је у току. Не могу да активирам уређај."
 
-#: lib/setup.c:5133 lib/luks2/luks2_json_metadata.c:2888
-#: lib/luks2/luks2_reencrypt.c:3725
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
+#: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Нисам успео да добавим закључавање поновног шифровања."
 
-#: lib/setup.c:5155
+#: lib/setup.c:5205
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Опоравак LUKS2 поновног шифровања коришћењем кључ(ев)а није успело."
 
-#: lib/setup.c:5291
+#: lib/setup.c:5341
 #, c-format
 msgid "Device %s already exists."
 msgstr "Већ постоји уређај „%s“."
 
-#: lib/setup.c:5298
+#: lib/setup.c:5348
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Не могу да користим уређај „%s“, назив није исправан или је још у употреби."
 
-#: lib/setup.c:5310
+#: lib/setup.c:5360
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Кључ волумена поновног шифровања не одговара волумену."
 
-#: lib/setup.c:5327
+#: lib/setup.c:5377
 msgid "Incorrect volume key specified for plain device."
 msgstr "Наведен је неисправан кључ волумена за обичан уређај."
 
-#: lib/setup.c:5353 lib/setup.c:5414
+#: lib/setup.c:5403 lib/setup.c:5464
 msgid "Device type is not properly initialized."
 msgstr "Врста уређаја није исправно покренута."
 
-#: lib/setup.c:5452
+#: lib/setup.c:5502
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "Привезак кључева кернела није подржан кернелом."
 
-#: lib/setup.c:5456
+#: lib/setup.c:5506
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Привезак кључева кернела недостаје: потребан је за прослеђивање потписа кернелу."
 
-#: lib/setup.c:5511
+#: lib/setup.c:5561
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Не могу да користим кључ привеска „%s“."
 
-#: lib/setup.c:5724
+#: lib/setup.c:5774
 msgid "Incorrect root hash specified for verity device."
 msgstr "Наведен је неисправан хеш корена за уређај тачности."
 
-#: lib/setup.c:5765 lib/setup.c:5790
+#: lib/setup.c:5815 lib/setup.c:5840
 msgid "OPAL does not support deferred deactivation."
 msgstr "OPAL не подржава опцију одложену деактивацију."
 
-#: lib/setup.c:5780 lib/setup.c:5811 lib/luks2/luks2_json_metadata.c:2953
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Уређај „%s“ је још увеку употреби."
 
-#: lib/setup.c:5798
+#: lib/setup.c:5848
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Не могу да откажем различно уклањање из уређаја „%s“."
 
-#: lib/setup.c:5820
+#: lib/setup.c:5870
 #, c-format
 msgid "Invalid device %s."
 msgstr "Неисправан уређај „%s“."
 
-#: lib/setup.c:5967
+#: lib/setup.c:6017
 msgid "Volume key buffer too small."
 msgstr "Међумеморија кључа волумена је премала."
 
-#: lib/setup.c:5978
+#: lib/setup.c:6028
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Не могу да довучем кључ волумена за ЛУКС2 уређај."
 
-#: lib/setup.c:5987
+#: lib/setup.c:6037
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Не могу да довучем кључ волумена за ЛУКС1 уређај."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6051
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Не могу да довучем кључ волумена за обичан уређај."
 
-#: lib/setup.c:6009
+#: lib/setup.c:6059
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Не могу да довучем хеш корена за уређај тачности."
 
-#: lib/setup.c:6018
+#: lib/setup.c:6068
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Не могу да довучем кључ волумена за BITLK уређај."
 
-#: lib/setup.c:6023
+#: lib/setup.c:6073
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Не могу да довучем кључ волумена за FVAULT2 уређај."
 
-#: lib/setup.c:6025
+#: lib/setup.c:6075
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Ова радња није подржана за криптографски уређај „%s“."
 
-#: lib/setup.c:6210 lib/setup.c:6221
+#: lib/setup.c:6260 lib/setup.c:6271
 msgid "Dump operation is not supported for this device type."
 msgstr "Радња исписа није подржана за ову врсту уређаја."
 
-#: lib/setup.c:6601
+#: lib/setup.c:6651
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Померај података није умножак %u бајта."
 
-#: lib/setup.c:6909
+#: lib/setup.c:6959
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Не могу да преобратим уређај „%s“ који је још увек у употреби."
 
-#: lib/setup.c:7217 lib/setup.c:7361
+#: lib/setup.c:7267 lib/setup.c:7422
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Нисам успео да доделим утор кључа „%u“ као нови кључ волумена."
 
-#: lib/setup.c:7241
+#: lib/setup.c:7291
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Нисам успео да покренем основне параметре ЛУКС2 утора кључа."
 
-#: lib/setup.c:7247
+#: lib/setup.c:7297
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Нисам успео да доделим утор кључа „%d“ за преглед."
 
-#: lib/setup.c:7478
+#: lib/setup.c:7539
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Не могу да додам утор кључа, сви утори су искључени а није обезбеђен ниједан кључ волумена."
 
-#: lib/setup.c:7551 lib/verity/verity.c:333
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Нисам успео да учитам кључ у привеску кључева кернела."
 
-#: lib/setup.c:7742
+#: lib/setup.c:7823
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Не могу да нађем привезак описан са „%s“."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7888
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Нисам успео да остварим опште закључавање серијализације приступа чврстој меморији."
 
-#: lib/utils.c:204 lib/tcrypt/tcrypt.c:490
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
 msgid "Failed to open key file."
 msgstr "Нисам успео да отворим датотеку кључа."
 
-#: lib/utils.c:212
+#: lib/utils.c:213
 msgid "Cannot read keyfile from a terminal."
 msgstr "Не могу да прочитам датотеку кључа из терминала."
 
-#: lib/utils.c:228
+#: lib/utils.c:229
 msgid "Failed to stat key file."
 msgstr "Нисам успео да добавим податке датотеке кључа."
 
-#: lib/utils.c:236 lib/utils.c:257
+#: lib/utils.c:237 lib/utils.c:258
 msgid "Cannot seek to requested keyfile offset."
 msgstr "Не могу да премотам на затражени померај датотеке кључа."
 
-#: lib/utils.c:251 lib/utils.c:266 src/utils_password.c:219
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
 #: src/utils_password.c:231
 msgid "Out of memory while reading passphrase."
 msgstr "Нестало је меморије приликом читања пропусне речи."
 
-#: lib/utils.c:286
+#: lib/utils.c:287
 msgid "Error reading passphrase."
 msgstr "Грешка читања пропусне речи."
 
-#: lib/utils.c:303
+#: lib/utils.c:304
 msgid "Nothing to read on input."
 msgstr "Нема ничега за читање на улазу."
 
-#: lib/utils.c:310
+#: lib/utils.c:311
 msgid "Maximum keyfile size exceeded."
 msgstr "Премашена је највећа величина датотеке кључа."
 
-#: lib/utils.c:315
+#: lib/utils.c:316
 msgid "Cannot read requested amount of data."
 msgstr "Не могу да прочитам затражену количину података."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2254
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Уређај „%s“ не постоји или је приступ одбијен."
@@ -904,16 +904,16 @@ msgstr "Затражене „PBKDF“ паралелне нити не могу
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "Само „PBKDF2“ је подржано у „FIPS“ режиму."
 
-#: lib/utils_benchmark.c:171
+#: lib/utils_benchmark.c:175
 msgid "PBKDF benchmark disabled but iterations not set."
 msgstr "„PBKDF“ оцењивање је искључено али понављања нису постављена."
 
-#: lib/utils_benchmark.c:190
+#: lib/utils_benchmark.c:194
 #, c-format
 msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr "Нису сагласне „PBKDF2“ опције (користим хеш алгоритам %s)."
 
-#: lib/utils_benchmark.c:210
+#: lib/utils_benchmark.c:214
 msgid "Not compatible PBKDF options."
 msgstr "Несагласне „PBKDF“ опције."
 
@@ -962,9 +962,9 @@ msgstr "Величина кључа у „XTS“ режиму мора да бу
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Спецификација шифрера треба бити у запису „[шифрер]-[режим]-[ив]“."
 
-#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1150
-#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "Не могу да пишем на уређај „%s“, овлашћење је одбијено."
@@ -977,24 +977,24 @@ msgstr "Нисам успео да отворим привремени уређ
 msgid "Failed to access temporary keystore device."
 msgstr "Нисам успео да приступм привременом уређају смештаја кључа."
 
-#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:49
-#: lib/luks2/luks2_keyslot_luks2.c:67 lib/luks2/luks2_keyslot_reenc.c:184
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
 msgid "IO error while encrypting keyslot."
 msgstr "Грешка УИ приликом шифровања утора кључа."
 
-#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:668
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
 msgstr "Не могу да отворим уређај „%s“."
 
-#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:128
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
 msgid "IO error while decrypting keyslot."
 msgstr "Грешка УИ приликом дешифровања утора кључа."
 
@@ -1003,61 +1003,61 @@ msgstr "Грешка УИ приликом дешифровања утора к
 msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr "Уређај „%s“ је премали. (ЛУКС1 захтева барем %<PRIu64> бајта.)"
 
-#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
-#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
-#: lib/luks1/keymanage.c:181
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
 #, c-format
 msgid "LUKS keyslot %u is invalid."
 msgstr "ЛУКС утор кључа „%u“ није исправан."
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "Затражена датотека резерве заглавља „%s“ већ постоји."
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "Не могу да направим резервну датотеку заглавља „%s“."
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "Не могу да запишем резервну датотеку заглавља „%s“."
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
 msgid "Backup file does not contain valid LUKS header."
 msgstr "Датотека резерве не садржи исправно ЛУКС заглавље."
 
-#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1450
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "Не могу да отворим резервну датотеку заглавља „%s“."
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "Не могу да прочитам резервну датотеку заглавља „%s“."
 
-#: lib/luks1/keymanage.c:326
+#: lib/luks1/keymanage.c:331
 msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr "Померај датума или величина кључа се разликују на уређају и резерви, враћање није успело."
 
-#: lib/luks1/keymanage.c:334
+#: lib/luks1/keymanage.c:339
 #, c-format
 msgid "Device %s %s%s"
 msgstr "Уређај %s %s%s"
 
-#: lib/luks1/keymanage.c:335
+#: lib/luks1/keymanage.c:340
 msgid "does not contain LUKS header. Replacing header can destroy data on that device."
 msgstr "не садржи ЛУКС заглавље. Замена заглавља може да уништи податке на том уређају."
 
-#: lib/luks1/keymanage.c:336
+#: lib/luks1/keymanage.c:341
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "већ садржи ЛУКС заглавље. Замена заглавља ће уништити постојеће уторе кључева."
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1065,130 +1065,130 @@ msgstr ""
 "\n"
 "УПОЗОРЕЊЕ: право заглавље уређаја има другачији УЈИБ од резерве!"
 
-#: lib/luks1/keymanage.c:385
+#: lib/luks1/keymanage.c:390
 msgid "Non standard key size, manual repair required."
 msgstr "Неуобичајена величина кључа, потребна је ручна поправка."
 
-#: lib/luks1/keymanage.c:395
+#: lib/luks1/keymanage.c:400
 msgid "Non standard keyslots alignment, manual repair required."
 msgstr "Неуобичајено поравнање утора кључева, потребна је ручна поправка."
 
-#: lib/luks1/keymanage.c:404
+#: lib/luks1/keymanage.c:409
 #, c-format
 msgid "Cipher mode repaired (%s -> %s)."
 msgstr "Режим шифрера је оправљен (%s → %s)."
 
-#: lib/luks1/keymanage.c:415
+#: lib/luks1/keymanage.c:420
 #, c-format
 msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Хеш шифрера је преправљен на мала слова (%s)."
 
-#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:777
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Затражени ЛУКС хеш „%s“ није подржан."
 
-#: lib/luks1/keymanage.c:431
+#: lib/luks1/keymanage.c:436
 msgid "Repairing keyslots."
 msgstr "Поправљам уторе кључева."
 
-#: lib/luks1/keymanage.c:450
+#: lib/luks1/keymanage.c:455
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr "Утор кључа %i: померај је оправљен (%u —> %u)."
 
-#: lib/luks1/keymanage.c:458
+#: lib/luks1/keymanage.c:463
 #, c-format
 msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr "Утор кључа %i: траке су оправљене (%u —> %u)."
 
-#: lib/luks1/keymanage.c:467
+#: lib/luks1/keymanage.c:472
 #, c-format
 msgid "Keyslot %i: bogus partition signature."
 msgstr "Утор кључа %i: лажан потпис партиције."
 
-#: lib/luks1/keymanage.c:472
+#: lib/luks1/keymanage.c:477
 #, c-format
 msgid "Keyslot %i: salt wiped."
 msgstr "Утор кључа %i: присолак је обрисан."
 
-#: lib/luks1/keymanage.c:489
+#: lib/luks1/keymanage.c:494
 msgid "Writing LUKS header to disk."
 msgstr "Записујем ЛУКС заглавље на диск."
 
-#: lib/luks1/keymanage.c:494
+#: lib/luks1/keymanage.c:499
 msgid "Repair failed."
 msgstr "Поправка није успела."
 
-#: lib/luks1/keymanage.c:549
+#: lib/luks1/keymanage.c:554
 #, c-format
 msgid "LUKS cipher mode %s is invalid."
 msgstr "Режим ЛУКС шифрера „%s“ није исправан."
 
-#: lib/luks1/keymanage.c:554
+#: lib/luks1/keymanage.c:559
 #, c-format
 msgid "LUKS hash %s is invalid."
 msgstr "ЛУКС хеш „%s“ није исправан."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "Нису откривени познати проблеми за ЛУКС заглавље."
 
-#: lib/luks1/keymanage.c:689
+#: lib/luks1/keymanage.c:690
 #, c-format
 msgid "Error during update of LUKS header on device %s."
 msgstr "Грешка приликом освежавања ЛУКС заглавља на уређају „%s“."
 
-#: lib/luks1/keymanage.c:697
+#: lib/luks1/keymanage.c:698
 #, c-format
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Грешка поновног читања ЛУКС заглавља након освежења на уређају „%s“."
 
-#: lib/luks1/keymanage.c:771
+#: lib/luks1/keymanage.c:751
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Померај података за ЛУКС заглавље мора бити или 0 или већи од величине заглавља."
 
-#: lib/luks1/keymanage.c:782 lib/luks1/keymanage.c:853
-#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
-#: src/utils_reencrypt.c:701
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
+#: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Достављен је погрешан запис ЛУКС УЈИБ-а."
 
-#: lib/luks1/keymanage.c:804
+#: lib/luks1/keymanage.c:784
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Не могу да направим ЛУКС заглавље: није успело читање насумичног присолка."
 
-#: lib/luks1/keymanage.c:832
+#: lib/luks1/keymanage.c:812
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Не могу да направим ЛУКС заглавље: није успео преглед заглавља (користим хеш „%s“)."
 
-#: lib/luks1/keymanage.c:877
+#: lib/luks1/keymanage.c:857
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Утор кључа „%d“ је радан, прво прочистите."
 
-#: lib/luks1/keymanage.c:883
+#: lib/luks1/keymanage.c:863
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Материјал утора кључа „%d“ обухвата премало трака. Да управљам заглављем?"
 
-#: lib/luks1/keymanage.c:921 lib/luks2/luks2_keyslot_luks2.c:260
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Прекорачење вредности ПБКДФ2 понављања."
 
-#: lib/luks1/keymanage.c:1040
+#: lib/luks1/keymanage.c:1023
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Не могу да отворим утор кључа (користим хеш %s)."
 
-#: lib/luks1/keymanage.c:1136
+#: lib/luks1/keymanage.c:1119
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Утор кључа %d није исправан, изаберите га између 0 и %d."
 
-#: lib/luks1/keymanage.c:1154 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Не могу да обришем уређај „%s“."
@@ -1209,56 +1209,48 @@ msgstr "Откривена је несагласна датотека кључа
 msgid "Kernel does not support loop-AES compatible mapping."
 msgstr "Језгро не подржава мапирање сагласно са „AES“ петљом."
 
-#: lib/tcrypt/tcrypt.c:497
+#: lib/tcrypt/tcrypt.c:495
 #, c-format
 msgid "Error reading keyfile %s."
 msgstr "Грешка читања датотеке кључа „%s“."
 
-#: lib/tcrypt/tcrypt.c:547
+#: lib/tcrypt/tcrypt.c:549
 #, c-format
 msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr "Премашена је највећа дужина „TCRYPT“ пропусне речи (%zu)."
 
-#: lib/tcrypt/tcrypt.c:589
+#: lib/tcrypt/tcrypt.c:591
 #, c-format
 msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr "„PBKDF2“ алгоритам хеша „%s“ није доступан, прескачем."
 
-#: lib/tcrypt/tcrypt.c:608 src/cryptsetup.c:1240
-msgid "Required kernel crypto interface not available."
-msgstr "Није доступно затражено сучеље криптографије језгра."
-
-#: lib/tcrypt/tcrypt.c:610 src/cryptsetup.c:1242
-msgid "Ensure you have algif_skcipher kernel module loaded."
-msgstr "Уверите се да је учитан модул кернела „algif_skcipher“."
-
-#: lib/tcrypt/tcrypt.c:752
+#: lib/tcrypt/tcrypt.c:743
 #, c-format
 msgid "Activation is not supported for %d sector size."
 msgstr "Покретање није подржано за величину %d области."
 
-#: lib/tcrypt/tcrypt.c:758
+#: lib/tcrypt/tcrypt.c:749
 msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr "Језгро не подржава покретање за овај стари „TCRYPT“ режим."
 
-#: lib/tcrypt/tcrypt.c:813
+#: lib/tcrypt/tcrypt.c:804
 #, c-format
 msgid "Activating TCRYPT system encryption for partition %s."
 msgstr "Покрећем „TCRYPT“ систем шифровања за партицију „%s“."
 
-#: lib/tcrypt/tcrypt.c:828
+#: lib/tcrypt/tcrypt.c:819
 msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
 msgstr "Не могу да одредим померај TCRYPT системске партиције, активираћу читаву шифровану област."
 
-#: lib/tcrypt/tcrypt.c:837
+#: lib/tcrypt/tcrypt.c:828
 msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
 msgstr "Не могу да одредим померај TCRYPT системске партиције, активирам уређај као системску партицију."
 
-#: lib/tcrypt/tcrypt.c:917
+#: lib/tcrypt/tcrypt.c:908
 msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr "Кернел не подржава мапирање сагласно са „TCRYPT“-ом."
 
-#: lib/tcrypt/tcrypt.c:1146
+#: lib/tcrypt/tcrypt.c:1137
 msgid "This function is not supported without TCRYPT header load."
 msgstr "Ова функција није подржана без учитавања „TCRYPT“ заглавља."
 
@@ -1374,33 +1366,33 @@ msgstr "Радња није подржана."
 msgid "Unexpected key data size."
 msgstr "Неочекивана величина података кључа."
 
-#: lib/bitlk/bitlk.c:1442
+#: lib/bitlk/bitlk.c:1448
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Овај „BITLK“ уређај је у неподржаном стању и не може бити активиран."
 
-#: lib/bitlk/bitlk.c:1447
+#: lib/bitlk/bitlk.c:1453
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "„BITLK“ уређај са врстом „%s“ се не може активирати."
 
-#: lib/bitlk/bitlk.c:1486
+#: lib/bitlk/bitlk.c:1492
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "УПОЗОРЕЊЕ: Величина волумена закључавача бита %<PRIu64> не одговара величини садржаног уређаја %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1613
+#: lib/bitlk/bitlk.c:1634
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Не могу да активирам уређај, „dm-crypt“-у кернела недостаје подршка за „BITLK IV“."
 
-#: lib/bitlk/bitlk.c:1617
+#: lib/bitlk/bitlk.c:1638
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Не могу да активирам уређај, „dm-crypt“-у кернела недостаје подршка за „BITLK Elephant“ дифузера."
 
-#: lib/bitlk/bitlk.c:1621
+#: lib/bitlk/bitlk.c:1642
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Не могу да активирам уређај, „dm-crypt“-у кернела недостаје подршка за велику величину сектора."
 
-#: lib/bitlk/bitlk.c:1625
+#: lib/bitlk/bitlk.c:1646
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Не могу да активирам уређај, недостаје „dm-zero“ модул кернела."
 
@@ -1557,24 +1549,24 @@ msgstr "Нисам успео да одредим величину за уређ
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Недоследни „dm-integrity“ метаподаци кернела (издање %u) су откривени на „%s“."
 
-#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "Кернел не подржава мапирање дм-целовитости."
 
-#: lib/integrity/integrity.c:314
+#: lib/integrity/integrity.c:315
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "Кернел не подржава поравнање фиксних метаподатака дм-целовитости."
 
-#: lib/integrity/integrity.c:323
+#: lib/integrity/integrity.c:324
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Кернел одбија да покрене небезбедну опцију поновног израчунавања (видите старе опције покретања да избегнете ово)."
 
-#: lib/integrity/integrity.c:329
+#: lib/integrity/integrity.c:330
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "Кернел не подржава унутарњи режим дм-целовитости."
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1510
+#: lib/luks2/luks2_json_metadata.c:1502
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "Нисам успео да остварим закључавање писања на уређају „%s“."
@@ -1596,23 +1588,22 @@ msgstr ""
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "УПОЗОРЕЊЕ: област утора кључа (%<PRIu64> бајта) је врло мала, доступан број ЛУКС2 утора кључа врло ограничен.\n"
 
-#: lib/luks2/luks2_json_format.c:418
+#: lib/luks2/luks2_json_format.c:427
 msgid "Requested data offset is too small."
 msgstr "Затражени померај података је премали."
 
-#: lib/luks2/luks2_json_format.c:459
+#: lib/luks2/luks2_json_format.c:468
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "УПОЗОРЕЊЕ: Величина ЛУКС2 метаподатака је промењена на %<PRIu64> бајта.\n"
 
-#: lib/luks2/luks2_json_format.c:463
+#: lib/luks2/luks2_json_format.c:472
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "УПОЗОРЕЊЕ: Величина области ЛУКС2 утора кључева је промењена на %<PRIu64> бајта.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:81
-#: lib/luks2/luks2_keyslot_luks2.c:105
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Нисам успео да остварим закључавање читања на уређају „%s“."
@@ -1621,33 +1612,33 @@ msgstr "Нисам успео да остварим закључавање чи
 msgid "Label is too long."
 msgstr "Натпис је предуг."
 
-#: lib/luks2/luks2_json_metadata.c:1435
+#: lib/luks2/luks2_json_metadata.c:1427
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "Забрањени ЛУКС2 захтеви су откривени у резерви „%s“."
 
-#: lib/luks2/luks2_json_metadata.c:1474
+#: lib/luks2/luks2_json_metadata.c:1466
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "Померај података се разликује на уређају и резерви, враћање није успело."
 
-#: lib/luks2/luks2_json_metadata.c:1480
+#: lib/luks2/luks2_json_metadata.c:1472
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "Бинарно заглавље са областима утора кључа се разликује на уређају и резерви, враћање није успело."
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1479
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "Уређај %s %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "не садржи ЛУКС2 заглавље. Замена заглавља може да уништи податке на том уређају."
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1481
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "већ садржи „LUKS2“ заглавље. Замена заглавља ће уништити постојеће уторе кључева."
 
-#: lib/luks2/luks2_json_metadata.c:1491
+#: lib/luks2/luks2_json_metadata.c:1483
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1657,7 +1648,7 @@ msgstr ""
 "УПОЗОРЕЊЕ: непознати ЛУКС2 захтеви су откривени у стварном заглављу уређаја!\n"
 "Замена заглавља резервом може оштетити податке на том уређају!"
 
-#: lib/luks2/luks2_json_metadata.c:1493
+#: lib/luks2/luks2_json_metadata.c:1485
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1667,84 +1658,84 @@ msgstr ""
 "УПОЗОРЕЊЕ: Недовршено ван мрежно поновно шифровање је откривено на уређају!\n"
 "Замена заглавља резервом може оштетити податке."
 
-#: lib/luks2/luks2_json_metadata.c:1591
+#: lib/luks2/luks2_json_metadata.c:1583
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "Занемарена непозната заставица „%s“."
 
-#: lib/luks2/luks2_json_metadata.c:2545 lib/luks2/luks2_reencrypt.c:2109
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Недостаје кључ за „dm-crypt“ подеок %u"
 
-#: lib/luks2/luks2_json_metadata.c:2557 lib/luks2/luks2_reencrypt.c:2122
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Нисам успео да подесим „dm-crypt“ подеок."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2128
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Нисам успео да подесим „dm-linear“ подеок."
 
-#: lib/luks2/luks2_json_metadata.c:2683 src/utils_reencrypt.c:578
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Није откривен познат образац одреднице шифрера у LUKS2 заглављу."
 
-#: lib/luks2/luks2_json_metadata.c:2691
+#: lib/luks2/luks2_json_metadata.c:2701
 msgid "OPAL device must have static device size."
 msgstr "OPAL уређај мора имати статичку величину уређаја."
 
-#: lib/luks2/luks2_json_metadata.c:2711
+#: lib/luks2/luks2_json_metadata.c:2721
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Шифровани OPAL уређај са целовитошћу мора бити мањи од опсега закључавања."
 
-#: lib/luks2/luks2_json_metadata.c:2716
+#: lib/luks2/luks2_json_metadata.c:2726
 msgid "OPAL device must have same size as locking range."
 msgstr "OPAl уређај мора имати исту величину као опсег закључавања."
 
-#: lib/luks2/luks2_json_metadata.c:2736
+#: lib/luks2/luks2_json_metadata.c:2746
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "OPAL уређај je „%s“ već otkqučan.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2775
+#: lib/luks2/luks2_json_metadata.c:2785
 msgid "Unsupported device integrity configuration."
 msgstr "Неподржано подешавање целовитости уређаја."
 
-#: lib/luks2/luks2_json_metadata.c:2791
+#: lib/luks2/luks2_json_metadata.c:2801
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Основни „dm-integrity“ уређај са неочекивано достављеним секторима података."
 
-#: lib/luks2/luks2_json_metadata.c:2886
+#: lib/luks2/luks2_json_metadata.c:2903
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Поновно шифровање је у току. Не могу да деактивирам уређај."
 
-#: lib/luks2/luks2_json_metadata.c:2897 lib/luks2/luks2_reencrypt.c:4286
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Нисам успео да заменим обустављени уређај „%s“ са метом „dm-error“."
 
-#: lib/luks2/luks2_json_metadata.c:2976 lib/luks2/luks2_json_metadata.c:2998
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Уређај „%s“ је искључен али хардверски OPAL уређај се не може закључати."
 
-#: lib/luks2/luks2_json_metadata.c:3020
+#: lib/luks2/luks2_json_metadata.c:3037
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Неоствариви ЛУКС2 захтеви су откривени."
 
-#: lib/luks2/luks2_json_metadata.c:3028
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Радња је несагласна са уређајем означеним за старо поновно шифровање. Прекидам."
 
-#: lib/luks2/luks2_json_metadata.c:3030
+#: lib/luks2/luks2_json_metadata.c:3047
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Радња је несагласна са уређајем означеним за ЛУКС2 поновно шифровање. Прекидам."
 
-#: lib/luks2/luks2_json_metadata.c:3032
+#: lib/luks2/luks2_json_metadata.c:3049
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Радња је несагласна са уређајем који користи OPAL. Прекидам."
 
-#: lib/luks2/luks2_json_metadata.c:3034
+#: lib/luks2/luks2_json_metadata.c:3051
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Радња је несагласна са уређајем који користи унутарње HW ознаке. Прекидам."
 
@@ -1756,22 +1747,22 @@ msgstr "Нема довољно доступне меморије за отва
 msgid "Keyslot open failed."
 msgstr "Отварање утора кључа није успело."
 
-#: lib/luks2/luks2_keyslot_luks2.c:42 lib/luks2/luks2_keyslot_luks2.c:99
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
 #, c-format
-msgid "Cannot use %s-%s cipher for keyslot encryption."
-msgstr "Не могу користити шифрер „%s-%s“ за шифровање утора кључа."
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "Не могу користити шифрер „%s“ за шифровање утора кључа."
 
-#: lib/luks2/luks2_keyslot_luks2.c:262
+#: lib/luks2/luks2_keyslot_luks2.c:219
 msgid "Not enough memory for keyslot key derivation."
 msgstr "Нема довољно меморије за изведбу кључа утора кључа."
 
-#: lib/luks2/luks2_keyslot_luks2.c:276 lib/luks2/luks2_keyslot_luks2.c:405
-#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2733
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
 #, c-format
 msgid "Hash algorithm %s is not available."
 msgstr "Алгоритам хеша „%s“ није доступан."
 
-#: lib/luks2/luks2_keyslot_luks2.c:522
+#: lib/luks2/luks2_keyslot_luks2.c:475
 msgid "No space for new keyslot."
 msgstr "Нема простора за нови утор кључа."
 
@@ -1788,335 +1779,335 @@ msgstr "Не могу да освежим врсту гипкости. Нова
 msgid "Failed to refresh reencryption verification digest."
 msgstr "Нисам успео да освежим упит потврђивања поновног шифровања."
 
-#: lib/luks2/luks2_luks1_convert.c:532
+#: lib/luks2/luks2_luks1_convert.c:498
 #, c-format
 msgid "Cannot check status of device with uuid: %s."
 msgstr "Не могу да проверим стање уређаја са ујиб-ом: %s."
 
-#: lib/luks2/luks2_luks1_convert.c:558
+#: lib/luks2/luks2_luks1_convert.c:524
 msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr "Не могу да претворим заглавље са „LUKSMETA“ додатним метаподацима."
 
-#: lib/luks2/luks2_luks1_convert.c:590 lib/luks2/luks2_reencrypt.c:3893
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2."
 msgstr "Не могу да користим спецификацију шифрера „%s-%s“ за ЛУКС2."
 
-#: lib/luks2/luks2_luks1_convert.c:599
+#: lib/luks2/luks2_luks1_convert.c:565
 #, c-format
 msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
 msgstr "Не могу да користим спецификацију шифрера „%s-%s“ за LUKS2 утор кључа."
 
-#: lib/luks2/luks2_luks1_convert.c:614
+#: lib/luks2/luks2_luks1_convert.c:580
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Не могу да преместим област утора кључа. Нема довољно простора."
 
-#: lib/luks2/luks2_luks1_convert.c:653
+#: lib/luks2/luks2_luks1_convert.c:627
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Не могу да претворим у ЛУКС2 запис – неисправни метаподаци."
 
-#: lib/luks2/luks2_luks1_convert.c:670
+#: lib/luks2/luks2_luks1_convert.c:644
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Не могу да преместим област утора кључа. Област ЛУКС2 утора кључа је премала."
 
-#: lib/luks2/luks2_luks1_convert.c:676 lib/luks2/luks2_luks1_convert.c:1006
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
 msgid "Unable to move keyslot area."
 msgstr "Не могу да преместим област утора кључа."
 
-#: lib/luks2/luks2_luks1_convert.c:791
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Не могу да претворим у ЛУКС1 запис – основна величина подеока 512 bytes."
 
-#: lib/luks2/luks2_luks1_convert.c:799
+#: lib/luks2/luks2_luks1_convert.c:773
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Не могу да претворим у ЛУКС1 запис – прегледи утора кључа нису ЛУКС1 сагласни."
 
-#: lib/luks2/luks2_luks1_convert.c:813
+#: lib/luks2/luks2_luks1_convert.c:787
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Не могу да претворим у ЛУКС1 запис – уређај користи умотаног шифрера кључа „%s“."
 
-#: lib/luks2/luks2_luks1_convert.c:818
+#: lib/luks2/luks2_luks1_convert.c:792
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Не могу да претворим у ЛУКС2 запис – уређај користи више подеока."
 
-#: lib/luks2/luks2_luks1_convert.c:826
+#: lib/luks2/luks2_luks1_convert.c:800
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Не могу да претворим у ЛУКС1 запис – ЛУКС2 заглавље садржи %u скупину(е)."
 
-#: lib/luks2/luks2_luks1_convert.c:832
+#: lib/luks2/luks2_luks1_convert.c:806
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Не могу да претворим у ЛУКС2 запис – нема више активних утора кључа."
 
-#: lib/luks2/luks2_luks1_convert.c:844
+#: lib/luks2/luks2_luks1_convert.c:818
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Не могу да претворим у ЛУКС1 запис – утор кључа %u је у неисправном стању."
 
-#: lib/luks2/luks2_luks1_convert.c:849
+#: lib/luks2/luks2_luks1_convert.c:823
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Не могу да претворим у ЛУКС1 запис – утор кључа %u је несвезан."
 
-#: lib/luks2/luks2_luks1_convert.c:854
+#: lib/luks2/luks2_luks1_convert.c:828
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Не могу да претворим у ЛУКС1 запис – утор %u (преко максимума утора) је још активан."
 
-#: lib/luks2/luks2_luks1_convert.c:859
+#: lib/luks2/luks2_luks1_convert.c:833
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "Не могу да претворим у ЛУКС1 запис – утор кључа %u није ЛУКС1 сагласан."
 
-#: lib/luks2/luks2_reencrypt.c:1198
+#: lib/luks2/luks2_reencrypt.c:1199
 #, c-format
 msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Величина вруће зоне мора бити умножак прорачунатог поравнања зоне (%zu бајта)."
 
-#: lib/luks2/luks2_reencrypt.c:1203
+#: lib/luks2/luks2_reencrypt.c:1204
 #, c-format
 msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr "Величина уређаја мора бити производ прорачунатог поравнања зоне (%zu бајта)."
 
-#: lib/luks2/luks2_reencrypt.c:1410 lib/luks2/luks2_reencrypt.c:1596
-#: lib/luks2/luks2_reencrypt.c:1679 lib/luks2/luks2_reencrypt.c:1721
-#: lib/luks2/luks2_reencrypt.c:4080
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
 msgid "Failed to initialize old segment storage wrapper."
 msgstr "Нисам успео да покренем старог увијача смештаја подеока."
 
-#: lib/luks2/luks2_reencrypt.c:1424 lib/luks2/luks2_reencrypt.c:1574
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
 msgid "Failed to initialize new segment storage wrapper."
 msgstr "Нисам успео да покренем новог увијача смештаја подеока."
 
-#: lib/luks2/luks2_reencrypt.c:1550 lib/luks2/luks2_reencrypt.c:4092
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
 msgid "Failed to initialize hotzone protection."
 msgstr "Нисам успео да покренем заштиту вруће зоне."
 
-#: lib/luks2/luks2_reencrypt.c:1623
+#: lib/luks2/luks2_reencrypt.c:1624
 msgid "Failed to read checksums for current hotzone."
 msgstr "Нисам успео да прочитам суму провере за текућу врућу зону."
 
-#: lib/luks2/luks2_reencrypt.c:1630 lib/luks2/luks2_reencrypt.c:4107
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
 #, c-format
 msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr "Нисам успео да прочитам област вруће зоне са почетком на %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:1649
+#: lib/luks2/luks2_reencrypt.c:1650
 #, c-format
 msgid "Failed to decrypt sector %zu."
 msgstr "Нисам успео да дешифрујем област %zu."
 
-#: lib/luks2/luks2_reencrypt.c:1655
+#: lib/luks2/luks2_reencrypt.c:1656
 #, c-format
 msgid "Failed to recover sector %zu."
 msgstr "Нисам успео да опоравим област %zu."
 
-#: lib/luks2/luks2_reencrypt.c:2208
+#: lib/luks2/luks2_reencrypt.c:2209
 #, c-format
 msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
 msgstr "Величине изворног и циљног уређаја не одговарају. Извор %<PRIu64>, мета: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2310
+#: lib/luks2/luks2_reencrypt.c:2311
 #, c-format
 msgid "Failed to activate hotzone device %s."
 msgstr "Нисам успео да активирам уређај вруће зоне „%s“."
 
-#: lib/luks2/luks2_reencrypt.c:2322
+#: lib/luks2/luks2_reencrypt.c:2323
 #, c-format
 msgid "Failed to allocate hotzone device %s."
 msgstr "Нисам успео да доделим уређај вруће зоне „%s“."
 
-#: lib/luks2/luks2_reencrypt.c:2339
+#: lib/luks2/luks2_reencrypt.c:2340
 #, c-format
 msgid "Failed to activate overlay device %s with actual origin table."
 msgstr "Нисам успео да активирам уређај преклапања „%s“ са стварном табелом порекла."
 
-#: lib/luks2/luks2_reencrypt.c:2346
+#: lib/luks2/luks2_reencrypt.c:2347
 #, c-format
 msgid "Failed to load new mapping for device %s."
 msgstr "Нисам успео да учитам ново мапирање за уређај „%s“."
 
-#: lib/luks2/luks2_reencrypt.c:2418
+#: lib/luks2/luks2_reencrypt.c:2419
 msgid "Failed to refresh reencryption devices stack."
 msgstr "Нисам успео да освежим спремник уређаја поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:2615
+#: lib/luks2/luks2_reencrypt.c:2616
 msgid "Failed to set new keyslots area size."
 msgstr "Нисам успео да подесим нову величину области утора кључа."
 
-#: lib/luks2/luks2_reencrypt.c:2751
+#: lib/luks2/luks2_reencrypt.c:2752
 #, c-format
 msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Вредност помака података није поравната на величину одељка шифровања (%<PRIu32> бајта)."
 
-#: lib/luks2/luks2_reencrypt.c:2788 src/utils_reencrypt.c:162
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
 #, c-format
 msgid "Unsupported resilience mode %s"
 msgstr "Неподржан режим гипкости „%s“"
 
-#: lib/luks2/luks2_reencrypt.c:2824
+#: lib/luks2/luks2_reencrypt.c:2825
 msgid "Moved segment size can not be greater than data shift value."
 msgstr "Величина премештеног подеока не може бити већа од вредности помака података."
 
-#: lib/luks2/luks2_reencrypt.c:2866
+#: lib/luks2/luks2_reencrypt.c:2867
 msgid "Invalid reencryption resilience parameters."
 msgstr "Неисправни параметри гипкости поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:2888
+#: lib/luks2/luks2_reencrypt.c:2889
 #, c-format
 msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
 msgstr "Премештени подеок је превелик. Захтевана величина је %<PRIu64>, доступан простор за: %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:2977
+#: lib/luks2/luks2_reencrypt.c:2978
 msgid "Failed to clear table."
 msgstr "Нисам успео да очистим табелу."
 
-#: lib/luks2/luks2_reencrypt.c:3063
+#: lib/luks2/luks2_reencrypt.c:3064
 #, c-format
 msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
 msgstr "Помак података (%<PRIu64> одељка) је мањи од будућег помераја података (%<PRIu64> одељка)."
 
-#: lib/luks2/luks2_reencrypt.c:3078 lib/luks2/luks2_reencrypt.c:3085
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
 msgid "Reduced data size is larger than real device size."
 msgstr "Величина умањених података је већа од стварне величине уређаја."
 
-#: lib/luks2/luks2_reencrypt.c:3095
+#: lib/luks2/luks2_reencrypt.c:3096
 #, c-format
 msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
 msgstr "Уређај података није поравнат на величину одељка шифровања (%<PRIu32> бајта)."
 
-#: lib/luks2/luks2_reencrypt.c:3125 lib/luks2/luks2_reencrypt.c:3643
-#: lib/luks2/luks2_reencrypt.c:3664
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
 #, c-format
 msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr "Нисам успео да отворим „%s“ у искључивом режиму (већ мапиран или прикачен)."
 
-#: lib/luks2/luks2_reencrypt.c:3332
+#: lib/luks2/luks2_reencrypt.c:3333
 msgid "Device not marked for LUKS2 reencryption."
 msgstr "Уређај није означен за ЛУКС2 поновно шифровање."
 
-#: lib/luks2/luks2_reencrypt.c:3349 lib/luks2/luks2_reencrypt.c:4403
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
 msgid "Failed to load LUKS2 reencryption context."
 msgstr "Нисам успео да учитам контекст ЛУКС2 поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:3444 lib/luks2/luks2_reencrypt.c:3784
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
 msgid "Device is not in reencryption."
 msgstr "Уређај није у поновном шифровању."
 
-#: lib/luks2/luks2_reencrypt.c:3451 lib/luks2/luks2_reencrypt.c:3791
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
 msgid "Reencryption process is already running."
 msgstr "Процес поновног шифровања је већ покренут."
 
-#: lib/luks2/luks2_reencrypt.c:3453 lib/luks2/luks2_reencrypt.c:3793
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
 msgid "Failed to acquire reencryption lock."
 msgstr "Нисам успео да остварим закључавање поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:3471
+#: lib/luks2/luks2_reencrypt.c:3472
 msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr "Не могу да наставим са поновним шифровањем. Прво покрените опоравак поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:3607
+#: lib/luks2/luks2_reencrypt.c:3608
 msgid "Active device size and requested reencryption size don't match."
 msgstr "Активна величина уређаја и величина затраженог поновног шифровања не одговарају."
 
-#: lib/luks2/luks2_reencrypt.c:3621
+#: lib/luks2/luks2_reencrypt.c:3622
 msgid "Illegal device size requested in reencryption parameters."
 msgstr "Неисправна величина уређаја је затражена у параметрима поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:3723
+#: lib/luks2/luks2_reencrypt.c:3724
 msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr "Поновно шифровање је у току. Не могу да обавим опоравак."
 
-#: lib/luks2/luks2_reencrypt.c:3744
+#: lib/luks2/luks2_reencrypt.c:3745
 msgid "LUKS2 reencryption recovery failed."
 msgstr "Опоравак ЛУКС2 поновног шифровања није успело."
 
-#: lib/luks2/luks2_reencrypt.c:3877 lib/luks2/luks2_reencrypt.c:4356
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
 msgid "Failed to initialize reencryption device stack."
 msgstr "Нисам успео да покренем поновно шифровање спремника уређаја."
 
-#: lib/luks2/luks2_reencrypt.c:3910
+#: lib/luks2/luks2_reencrypt.c:3911
 msgid "LUKS2 reencryption already initialized in metadata."
 msgstr "ЛУКС2 поновно шифровање је већ покренуто у метаподацима."
 
-#: lib/luks2/luks2_reencrypt.c:3918
+#: lib/luks2/luks2_reencrypt.c:3919
 msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr "Нисам успео да покренем ЛУКС2 поновно шифровање у метаподацима."
 
-#: lib/luks2/luks2_reencrypt.c:3971 lib/luks2/luks2_reencrypt.c:4003
-#: lib/luks2/luks2_reencrypt.c:4033
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
 msgid "Reencryption is not supported for DAX (persistent memory) devices."
 msgstr "Поновно шифровање није подржано за DAX (сталне меморије) уређаје."
 
-#: lib/luks2/luks2_reencrypt.c:4062
+#: lib/luks2/luks2_reencrypt.c:4063
 msgid "Failed to set device segments for next reencryption hotzone."
 msgstr "Нисам успео да поставим подеоке уређаја за следећу врућу зону поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:4115
+#: lib/luks2/luks2_reencrypt.c:4116
 msgid "Failed to write reencryption resilience metadata."
 msgstr "Нисам успео да запишем метаподатаке гипкости поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:4122
+#: lib/luks2/luks2_reencrypt.c:4123
 msgid "Decryption failed."
 msgstr "Дешифровање није успело."
 
-#: lib/luks2/luks2_reencrypt.c:4127
+#: lib/luks2/luks2_reencrypt.c:4128
 #, c-format
 msgid "Failed to write hotzone area starting at %<PRIu64>."
 msgstr "Нисам успео да запишем област вруће зоне са почетком на %<PRIu64>."
 
-#: lib/luks2/luks2_reencrypt.c:4132
+#: lib/luks2/luks2_reencrypt.c:4133
 msgid "Failed to sync data."
 msgstr "Нисам успео да усагласим податке."
 
-#: lib/luks2/luks2_reencrypt.c:4140
+#: lib/luks2/luks2_reencrypt.c:4141
 msgid "Failed to update metadata after current reencryption hotzone completed."
 msgstr "Нисам успео да освежим метаподатке након тренутно завршеног поновног шифровања вруће зоне."
 
-#: lib/luks2/luks2_reencrypt.c:4229
+#: lib/luks2/luks2_reencrypt.c:4230
 msgid "Failed to write LUKS2 metadata."
 msgstr "Нисам успео да запишем ЛУКС2 метаподатке."
 
-#: lib/luks2/luks2_reencrypt.c:4252
+#: lib/luks2/luks2_reencrypt.c:4253
 msgid "Failed to wipe unused data device area."
 msgstr "Нисам успео да обришем област уређаја података."
 
-#: lib/luks2/luks2_reencrypt.c:4258
+#: lib/luks2/luks2_reencrypt.c:4259
 #, c-format
 msgid "Failed to remove unused (unbound) keyslot %d."
 msgstr "Нисам успео да уклоним некоришћени (несвезани) утор кључа %d."
 
-#: lib/luks2/luks2_reencrypt.c:4268
+#: lib/luks2/luks2_reencrypt.c:4269
 msgid "Failed to remove reencryption keyslot."
 msgstr "Нисам успео да уклоним утор кључа поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:4278
+#: lib/luks2/luks2_reencrypt.c:4279
 #, c-format
 msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
 msgstr "Кобна грешка приликом поновног шифровања комада који почиње на %<PRIu64>, %<PRIu64> подеока дуг."
 
-#: lib/luks2/luks2_reencrypt.c:4282
+#: lib/luks2/luks2_reencrypt.c:4283
 msgid "Online reencryption failed."
 msgstr "Поновно шифровање на мрежи није успело."
 
-#: lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_reencrypt.c:4288
 msgid "Do not resume the device unless replaced with error target manually."
 msgstr "Не наставља са уређајем осим ако није ручно замењен метом грешке."
 
-#: lib/luks2/luks2_reencrypt.c:4339
+#: lib/luks2/luks2_reencrypt.c:4340
 msgid "Cannot proceed with reencryption. Unexpected reencryption status."
 msgstr "Не могу да наставим са поновним шифровањем. Неочекивано стање поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:4345
+#: lib/luks2/luks2_reencrypt.c:4346
 msgid "Missing or invalid reencrypt context."
 msgstr "Недостаје или неисправан контекст поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt.c:4379 lib/luks2/luks2_reencrypt.c:4416
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
 msgid "Failed to update reencryption context."
 msgstr "Нисам успео да освежим контекст поновног шифровања."
 
-#: lib/luks2/luks2_reencrypt_digest.c:401
+#: lib/luks2/luks2_reencrypt_digest.c:402
 msgid "Reencryption metadata is invalid."
 msgstr "Метаподаци поновног шифровања нису исправни."
 
@@ -2148,8 +2139,8 @@ msgstr "Параметри шифровања утора кључа се мог
 msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
 msgstr "Параметри шифровања утора кључа нису сагласни са шифровањем LUKS2 утора кључа."
 
-#: src/cryptsetup.c:150 src/cryptsetup.c:1178 src/cryptsetup.c:1545
-#: src/utils_reencrypt.c:1887 src/utils_reencrypt_luks1.c:502
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Није откривен познат образац одреднице шифрера."
@@ -2177,7 +2168,7 @@ msgid "WARNING: The --keyfile-size option is being ignored, the read size is the
 msgstr "УПОЗОРЕЊЕ: Опција „--keyfile-size“ је занемарена, величина читања је иста као величина кључа шифровања.\n"
 
 #: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
-#: src/integritysetup.c:188 src/utils_reencrypt.c:2138
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Скенирање ид-а блока није успело за „%s“."
@@ -2189,9 +2180,9 @@ msgstr "Открих потпис(е) уређаја на „%s“. Даље н
 
 #: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
 #: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
-#: src/cryptsetup.c:2495 src/cryptsetup.c:2924 src/integritysetup.c:178
-#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:457
-#: src/utils_reencrypt.c:925
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
 msgid "Operation aborted.\n"
 msgstr "Радња је обустављена.\n"
 
@@ -2199,36 +2190,36 @@ msgstr "Радња је обустављена.\n"
 msgid "Option --key-file is required."
 msgstr "Захтевана је опција „--key-file“."
 
-#: src/cryptsetup.c:377
+#: src/cryptsetup.c:378
 msgid "Enter VeraCrypt PIM: "
 msgstr "Унесите „VeraCrypt PIM“: "
 
-#: src/cryptsetup.c:386
+#: src/cryptsetup.c:387
 msgid "Invalid PIM value: parse error."
 msgstr "Неисправна „PIM“ вредност: грешка обраде."
 
-#: src/cryptsetup.c:389
+#: src/cryptsetup.c:390
 msgid "Invalid PIM value: 0."
 msgstr "Неисправна „PIM“ вредност: 0."
 
-#: src/cryptsetup.c:392
+#: src/cryptsetup.c:393
 msgid "Invalid PIM value: outside of range."
 msgstr "Неисправна „PIM“ вредност: изван опсега."
 
-#: src/cryptsetup.c:415
+#: src/cryptsetup.c:416
 msgid "No device header detected with this passphrase."
 msgstr "Није откривено заглавље уређаја са овом пропусном речи."
 
-#: src/cryptsetup.c:492 src/cryptsetup.c:677
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
 #, c-format
 msgid "Device %s is not a valid BITLK device."
 msgstr "Уређај „%s“ није исправан „BITLK“ уређај."
 
-#: src/cryptsetup.c:500
+#: src/cryptsetup.c:501
 msgid "Cannot determine volume key size for BITLK, please use --key-size option."
 msgstr "Не могу да одредим величину кључа за „BITLK“, користите „--key-size“ опцију."
 
-#: src/cryptsetup.c:546
+#: src/cryptsetup.c:547
 msgid ""
 "Header dump with volume key is sensitive information\n"
 "which allows access to encrypted partition without passphrase.\n"
@@ -2238,7 +2229,7 @@ msgstr ""
 "који омогућава приступ шифрованој партицији без лозинке.\n"
 "Овај избачај треба увек бити смештен шифрован на безбедном месту."
 
-#: src/cryptsetup.c:613 src/cryptsetup.c:699 src/cryptsetup.c:2520
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
 msgid ""
 "The header dump with volume key is sensitive information\n"
 "that allows access to encrypted partition without a passphrase.\n"
@@ -2248,83 +2239,87 @@ msgstr ""
 "који омогућава приступ шифрованој партицији без лозинке.\n"
 "Овај избачај треба бити смештен шифрован на безбедном месту."
 
-#: src/cryptsetup.c:754 src/cryptsetup.c:786
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
 #, c-format
 msgid "Device %s is not a valid FVAULT2 device."
 msgstr "Уређај „%s“ није исправан FVAULT2 уређај."
 
-#: src/cryptsetup.c:794
+#: src/cryptsetup.c:795
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Не могу да одредим величину кључа волумена за FVAULT2, користите „--key-size“ опцију."
 
-#: src/cryptsetup.c:848 src/veritysetup.c:317 src/integritysetup.c:416
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Уређај „%s“ је још увек активан и заказан за одложено уклањање.\n"
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:1808 src/cryptsetup.c:2082
-#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2729
-#: src/cryptsetup.c:3262
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
 #, c-format
 msgid "Failed to set external tokens path %s."
 msgstr "Нисам успео да поставим спољну путању скупина „%s“."
 
-#: src/cryptsetup.c:890
+#: src/cryptsetup.c:891
 msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
 msgstr "Сразмеравање активног уређаја захтева кључ волумена у привеску кључева али је постављена „--disable-keyring“ опција."
 
-#: src/cryptsetup.c:1057
+#: src/cryptsetup.c:1058
 msgid "Benchmark interrupted."
 msgstr "Оцењивање је прекинуто."
 
-#: src/cryptsetup.c:1078
+#: src/cryptsetup.c:1079
 #, c-format
 msgid "PBKDF2-%-9s     N/A\n"
 msgstr "„PBKDF2-%-9s“     Н/Д\n"
 
-#: src/cryptsetup.c:1080
+#: src/cryptsetup.c:1081
 #, c-format
 msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr "„PBKDF2-%-9s“ %7u понављања у секунди за %zu-битни кључ\n"
 
-#: src/cryptsetup.c:1094
+#: src/cryptsetup.c:1095
 #, c-format
 msgid "%-10s N/A\n"
 msgstr "%-10s Н/Д\n"
 
-#: src/cryptsetup.c:1096
+#: src/cryptsetup.c:1097
 #, c-format
 msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
 msgstr "%-10s %4u понављања, %5u меморије, %1u паралелних нити (процесора) за %zu-битни кључ (захтева се %u ms време)\n"
 
-#: src/cryptsetup.c:1120
+#: src/cryptsetup.c:1121
 msgid "Result of benchmark is not reliable."
 msgstr "Резултат оцењивања није поуздан."
 
-#: src/cryptsetup.c:1170
+#: src/cryptsetup.c:1172
 msgid "# Tests are approximate using memory only (no storage IO).\n"
 msgstr "# Пробе су приближне користећи само меморију (без УИ смештаја).\n"
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1195
+#: src/cryptsetup.c:1197
 #, c-format
 msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#%*s  Алгоритам |     Кључ |      Шифровање |      Дешифровање\n"
 
-#: src/cryptsetup.c:1203
+#: src/cryptsetup.c:1205
 #, c-format
 msgid "Cipher %s (with %i bits key) is not available."
 msgstr "Шифрер „%s“ (са %i битним кључем) није доступан."
 
 #. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
-#: src/cryptsetup.c:1222
+#: src/cryptsetup.c:1226
 msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr "#     Алгоритам |      Кључ |       Шифровање |      Дешифровање\n"
 
-#: src/cryptsetup.c:1233
+#: src/cryptsetup.c:1239
 msgid "N/A"
 msgstr "Недоступно"
 
+#: src/cryptsetup.c:1242
+msgid "# Cipher speed test is not available.\n"
+msgstr "# Проба брзине шифрера није доступна.\n"
+
 #: src/cryptsetup.c:1258
 msgid ""
 "Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
@@ -2353,7 +2348,7 @@ msgstr "Унесите пропусну реч за опоравак понов
 msgid "Really try to repair LUKS device header?"
 msgstr "Стварно да покушам да поправим заглавље ЛУКС уређаја?"
 
-#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:244
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
 msgid ""
 "\n"
 "Wipe interrupted."
@@ -2361,7 +2356,7 @@ msgstr ""
 "\n"
 "Брисање је прекинуто."
 
-#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:289
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
 msgid ""
 "Wiping device to initialize integrity checksum.\n"
 "You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
@@ -2403,9 +2398,9 @@ msgstr "Датотека заглавља не постоји, да ли жел
 msgid "Cannot create header file %s."
 msgstr "Не могу да направим датотеку заглавља „%s“."
 
-#: src/cryptsetup.c:1555 src/integritysetup.c:126 src/integritysetup.c:141
-#: src/integritysetup.c:150 src/integritysetup.c:328 src/integritysetup.c:336
-#: src/integritysetup.c:346
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
 msgid "No known integrity specification pattern detected."
 msgstr "Није откривен познат образац одреднице целовитости."
 
@@ -2418,7 +2413,7 @@ msgstr "Не могу да користим наведену величину к
 msgid "Cannot use %s as on-disk header."
 msgstr "Не могу да користим „%s“ као заглавље на-диску."
 
-#: src/cryptsetup.c:1604 src/integritysetup.c:172
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
 #, c-format
 msgid "This will overwrite data on %s irrevocably."
 msgstr "Ово ће неповратно да препише податке на „%s“."
@@ -2441,12 +2436,12 @@ msgstr "Смањени померај података је допуштен с
 msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
 msgstr "Садржалац ЛУКС датотеке „%s“ је премали за активирање, није преостао простор за податке."
 
-#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:277
-#: src/utils_reencrypt.c:369 src/utils_reencrypt.c:1907
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Не могу да одредим величину кључа за ЛУКС без утора кључа, користите „--key-size“ опцију."
 
-#: src/cryptsetup.c:1854 src/utils_reencrypt.c:303
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
 msgid "Device requires two volume keys."
 msgstr "Уређај захтева два кључа волумена."
 
@@ -2479,8 +2474,8 @@ msgstr "Радња је прекинута, утор кључа НИЈЕ обр
 msgid "Enter passphrase to be deleted: "
 msgstr "Унесите пропусну реч за брисање: "
 
-#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3086
-#: src/cryptsetup.c:3253
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
 #, c-format
 msgid "Device %s is not a valid LUKS2 device."
 msgstr "Уређај „%s“ није исправан ЛУКС2 уређај."
@@ -2537,52 +2532,52 @@ msgstr ""
 "Избачај заглавља са кључем волумена је осетљив податак\n"
 "Овај избачај треба увек бити смештен шифрован на безбедном месту."
 
-#: src/cryptsetup.c:2676 src/cryptsetup.c:2712
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
 #, c-format
 msgid "%s is not active %s device name."
 msgstr "„%s“ није назив активног „%s“ уређаја."
 
-#: src/cryptsetup.c:2707
+#: src/cryptsetup.c:2708
 #, c-format
 msgid "%s is not active LUKS device name or header is missing."
 msgstr "„%s“ није назив активног ЛУКС уређаја или недостаје заглавље."
 
-#: src/cryptsetup.c:2784 src/cryptsetup.c:2803
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
 msgid "Option --header-backup-file is required."
 msgstr "Захтевана је опција „--header-backup-file“."
 
-#: src/cryptsetup.c:2834
+#: src/cryptsetup.c:2835
 #, c-format
 msgid "%s is not cryptsetup managed device."
 msgstr "„%s“ није уређај управљан криптоподешавањем."
 
-#: src/cryptsetup.c:2845
+#: src/cryptsetup.c:2846
 #, c-format
 msgid "Refresh is not supported for device type %s"
 msgstr "Освежавање није подржано за врсту уређаја „%s“"
 
-#: src/cryptsetup.c:2895
+#: src/cryptsetup.c:2896
 #, c-format
 msgid "Unrecognized metadata device type %s."
 msgstr "Непозната врста уређаја метаподатака „%s“."
 
-#: src/cryptsetup.c:2897
+#: src/cryptsetup.c:2898
 msgid "Command requires device and mapped name as arguments."
 msgstr "Наредба захтева уређај и мапирани назив као аргумент."
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL PSID: "
 msgstr "Унесите OPAL ПСИД: "
 
-#: src/cryptsetup.c:2915
+#: src/cryptsetup.c:2916
 msgid "Enter OPAL Admin password: "
 msgstr "Унесите лозинку OPAL админа: "
 
-#: src/cryptsetup.c:2923
+#: src/cryptsetup.c:2924
 msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
 msgstr "УПОЗОРЕЊЕ: ЧИТАВ диск биће враћен на фабричка подешавања и сви подаци биће изгубљени! Да наставим?"
 
-#: src/cryptsetup.c:2966
+#: src/cryptsetup.c:2967
 #, c-format
 msgid ""
 "This operation will erase all keyslots on device %s.\n"
@@ -2591,363 +2586,363 @@ msgstr ""
 "Ова радња ће обрисати све уторе кључева на уређају „%s“.\n"
 "Уређај ће постати неупотребљив након ове радње."
 
-#: src/cryptsetup.c:2973
+#: src/cryptsetup.c:2974
 msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr "Радња је прекинута, утори кључева НИСУ обрисани.\n"
 
-#: src/cryptsetup.c:3012
+#: src/cryptsetup.c:3013
 msgid "Invalid LUKS type, only luks1 and luks2 are supported."
 msgstr "Неисправна ЛУКС врста, само „luks1“ и „luks2“ су подржане."
 
-#: src/cryptsetup.c:3028
+#: src/cryptsetup.c:3029
 #, c-format
 msgid "Device is already %s type."
 msgstr "Уређај је већ „%s“ врсте."
 
-#: src/cryptsetup.c:3035
+#: src/cryptsetup.c:3036
 #, c-format
 msgid "This operation will convert %s to %s format.\n"
 msgstr "Ова радња ће претворити „%s“ у „%s“ запис.\n"
 
-#: src/cryptsetup.c:3038
+#: src/cryptsetup.c:3039
 msgid "Operation aborted, device was NOT converted.\n"
 msgstr "Радња је прекинута, уређај НИЈЕ претворен.\n"
 
-#: src/cryptsetup.c:3078
+#: src/cryptsetup.c:3079
 msgid "Option --priority, --label or --subsystem is missing."
 msgstr "Недостаје опција „--priority“, „--label“ или „--subsystem“."
 
-#: src/cryptsetup.c:3112 src/cryptsetup.c:3152 src/cryptsetup.c:3172
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
 #, c-format
 msgid "Token %d is invalid."
 msgstr "Скупина „%d“ није исправна."
 
-#: src/cryptsetup.c:3115 src/cryptsetup.c:3175
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
 #, c-format
 msgid "Token %d in use."
 msgstr "Скупина „%d“ је у употреби."
 
-#: src/cryptsetup.c:3127
+#: src/cryptsetup.c:3128
 #, c-format
 msgid "Failed to add luks2-keyring token %d."
 msgstr "Нисам успео да додам „luks2-keyring“ скупину „%d“."
 
-#: src/cryptsetup.c:3138 src/cryptsetup.c:3201
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
 #, c-format
 msgid "Failed to assign token %d to keyslot %d."
 msgstr "Нисам успео да доделим скупину „%d“ утору кључа %d."
 
-#: src/cryptsetup.c:3155
+#: src/cryptsetup.c:3156
 #, c-format
 msgid "Token %d is not in use."
 msgstr "Скупина „%d“ није у употреби."
 
-#: src/cryptsetup.c:3192
+#: src/cryptsetup.c:3193
 msgid "Failed to import token from file."
 msgstr "Нисам успео да увезем скупину из датотеке."
 
-#: src/cryptsetup.c:3217
+#: src/cryptsetup.c:3218
 #, c-format
 msgid "Failed to get token %d for export."
 msgstr "Нисам успео да добавим скупину „%d“ за извоз."
 
-#: src/cryptsetup.c:3230
+#: src/cryptsetup.c:3231
 #, c-format
 msgid "Token %d is not assigned to keyslot %d."
 msgstr "Скупина „%d“ није додељена утору кључа %d."
 
-#: src/cryptsetup.c:3232 src/cryptsetup.c:3239
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
 #, c-format
 msgid "Failed to unassign token %d from keyslot %d."
 msgstr "Нисам успео да поништим доделу скупине „%d“ из утора кључа %d."
 
-#: src/cryptsetup.c:3298
+#: src/cryptsetup.c:3299
 msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
 msgstr "Опција „--tcrypt-hidden“, „--tcrypt-system“ или „--tcrypt-backup“ је подржана само за ТКРИПТ уређај."
 
-#: src/cryptsetup.c:3301
+#: src/cryptsetup.c:3302
 msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
 msgstr "Опција „--veracrypt“ или „--disable-veracrypt“ је подржана само за ТКРИПТ врсту уређаја."
 
-#: src/cryptsetup.c:3304
+#: src/cryptsetup.c:3305
 msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
 msgstr "Опција „--veracrypt-pim“ је подржана само за „VeraCrypt“ сагласне уређаје."
 
-#: src/cryptsetup.c:3308
+#: src/cryptsetup.c:3309
 msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
 msgstr "Опција „--veracrypt-query-pim“ је подржана само за „VeraCrypt“ сагласне уређаје."
 
-#: src/cryptsetup.c:3310
+#: src/cryptsetup.c:3311
 msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
 msgstr "Опције „--veracrypt-pim“ и „--veracrypt-query-pim“ се узајамно искључују."
 
-#: src/cryptsetup.c:3319
+#: src/cryptsetup.c:3320
 msgid "Option --persistent is not allowed with --test-passphrase."
 msgstr "Опција „--persistent“ није допуштена са опцијом „--test-passphrase“."
 
-#: src/cryptsetup.c:3322
+#: src/cryptsetup.c:3323
 msgid "Options --refresh and --test-passphrase are mutually exclusive."
 msgstr "Опције „--refresh“ и „--test-passphrase“ се узајамно искључују."
 
-#: src/cryptsetup.c:3325
+#: src/cryptsetup.c:3326
 msgid "Option --shared is allowed only for open of plain device."
 msgstr "Опција „--shared“ је допуштена само за отварање обичног уређаја."
 
-#: src/cryptsetup.c:3328
+#: src/cryptsetup.c:3329
 msgid "Option --skip is supported only for open of plain and loopaes devices."
 msgstr "Опција „--skip“ је подржана само за отварање обичних и упетљаних уређаја."
 
-#: src/cryptsetup.c:3331
+#: src/cryptsetup.c:3332
 msgid "Option --offset with open action is only supported for plain and loopaes devices."
 msgstr "Опција „--offset“ са отвореном радњом је подржана само за обичне и упетљане уређаје."
 
-#: src/cryptsetup.c:3334
+#: src/cryptsetup.c:3335
 msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
 msgstr "Опција „--tcrypt-hidden“ не може бити обједињена са „--allow-discards“."
 
-#: src/cryptsetup.c:3338
+#: src/cryptsetup.c:3339
 msgid "Sector size option with open action is supported only for plain devices."
 msgstr "Опција величине одељка са отвореном радњом је подржана само за обичне уређаје."
 
-#: src/cryptsetup.c:3342
+#: src/cryptsetup.c:3343
 msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
 msgstr "Опција великих IV одељака је подржана само за отварање обичних уређаја са величином одељка већом од 512 бајта."
 
-#: src/cryptsetup.c:3347
+#: src/cryptsetup.c:3348
 msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
 msgstr "Опција „--test-passphrase“ је допуштена само за отварање LUKS, TCRYPT, BITLK и FVAULT2 уређаја."
 
-#: src/cryptsetup.c:3350 src/cryptsetup.c:3380
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
 msgid "Options --device-size and --size cannot be combined."
 msgstr "Опције „--device-size“ и „--size“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3353
+#: src/cryptsetup.c:3354
 msgid "Option --unbound is allowed only for open of luks device."
 msgstr "Опција „--unbound“ је допуштена само за отварање лукс уређаја."
 
-#: src/cryptsetup.c:3356
+#: src/cryptsetup.c:3357
 msgid "Option --unbound cannot be used without --test-passphrase."
 msgstr "Опција „--unbound“ се не може користити без „--test-passphrase“."
 
-#: src/cryptsetup.c:3360
+#: src/cryptsetup.c:3361
 msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
 msgstr "Опција „--volume-key-keyring“ не може бити обједињена са „--hash“ или „--volume-key-file“."
 
-#: src/cryptsetup.c:3363
+#: src/cryptsetup.c:3364
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Обе „--volume-key-file“ опције се морају упарити са одговарајућим „--key-size“ опцијама."
 
-#: src/cryptsetup.c:3372 src/veritysetup.c:673 src/integritysetup.c:787
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Опције „--cancel-deferred“ и „--deferred“ се не могу користити у исто време."
 
-#: src/cryptsetup.c:3388
+#: src/cryptsetup.c:3389
 msgid "Option --active-name can be set only for LUKS2 device."
 msgstr "Опција „--active-name“ се може поставити само за ЛУКС2 уређај."
 
-#: src/cryptsetup.c:3391
+#: src/cryptsetup.c:3392
 msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
 msgstr "Опције „--active-name“ и „--force-offline-reencrypt“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3394
+#: src/cryptsetup.c:3395
 msgid "Options --new-volume-key-file and --keep-key cannot be combined."
 msgstr "Опције „--new-volume-key-file“ и „--keep-key“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3397
+#: src/cryptsetup.c:3398
 msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
 msgstr "Опције „--new-volume-key-keyring“ и „--keep-key“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3405 src/cryptsetup.c:3435
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
 msgid "Keyslot specification is required."
 msgstr "Одредба утора кључа је потребна."
 
-#: src/cryptsetup.c:3413
+#: src/cryptsetup.c:3414
 msgid "Options --align-payload and --offset cannot be combined."
 msgstr "Опције „--align-payload“ и „--offset“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3416
+#: src/cryptsetup.c:3417
 msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
 msgstr "Опција „--integrity-no-wipe“ се може користити само за радњу форматирања са проширењем целовитости."
 
-#: src/cryptsetup.c:3419
+#: src/cryptsetup.c:3420
 msgid "Only one of --use-[u]random options is allowed."
 msgstr "Дозвољена је само једна опција „--use-[u]random“."
 
-#: src/cryptsetup.c:3427
+#: src/cryptsetup.c:3428
 msgid "Key size is required with --unbound option."
 msgstr "Величина кључа је потребна са опцијом „--unbound“."
 
-#: src/cryptsetup.c:3447
+#: src/cryptsetup.c:3448
 msgid "Invalid token action."
 msgstr "Неисправна радња скупине."
 
-#: src/cryptsetup.c:3450
+#: src/cryptsetup.c:3451
 msgid "--key-description parameter is mandatory for token add action."
 msgstr "„--key-description“ параметар је обавезан за радњу додавања скупине."
 
-#: src/cryptsetup.c:3454 src/cryptsetup.c:3467
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
 msgid "Action requires specific token. Use --token-id parameter."
 msgstr "Радња захтева нарочиту скупину. Користите параметар „--token-id“."
 
-#: src/cryptsetup.c:3458
+#: src/cryptsetup.c:3459
 msgid "Option --unbound is valid only with token add action."
 msgstr "Опција „--unbound“ је исправна само са радњом додавања скупине."
 
-#: src/cryptsetup.c:3460
+#: src/cryptsetup.c:3461
 msgid "Options --key-slot and --unbound cannot be combined."
 msgstr "Опције „--key-slot“ и „--unbound“ се не могу комбиновати."
 
-#: src/cryptsetup.c:3465
+#: src/cryptsetup.c:3466
 msgid "Action requires specific keyslot. Use --key-slot parameter."
 msgstr "Радња захтева нарочити утор кључа. Користите параметар „--key-slot“."
 
-#: src/cryptsetup.c:3481
+#: src/cryptsetup.c:3482
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<уређај> [--type <врста>] [<назив>]"
 
-#: src/cryptsetup.c:3481 src/veritysetup.c:487 src/integritysetup.c:554
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
 msgid "open device as <name>"
 msgstr "отвара уређај као <назив>"
 
-#: src/cryptsetup.c:3482 src/cryptsetup.c:3483 src/cryptsetup.c:3484
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:555
-#: src/integritysetup.c:556 src/integritysetup.c:558
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
 msgid "<name>"
 msgstr "<назив>"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:488 src/integritysetup.c:555
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
 msgid "close device (remove mapping)"
 msgstr "затвара уређај (уклања мапирање)"
 
-#: src/cryptsetup.c:3483 src/integritysetup.c:558
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
 msgid "resize active device"
 msgstr "мења величину радног уређаја"
 
-#: src/cryptsetup.c:3484
+#: src/cryptsetup.c:3485
 msgid "show device status"
 msgstr "показује стање уређаја"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3486
 msgid "[--cipher <cipher>]"
 msgstr "[--cipher <шифрер>]"
 
-#: src/cryptsetup.c:3485
+#: src/cryptsetup.c:3486
 msgid "benchmark cipher"
 msgstr "шифрер оцењивања"
 
-#: src/cryptsetup.c:3486 src/cryptsetup.c:3487 src/cryptsetup.c:3488
-#: src/cryptsetup.c:3489 src/cryptsetup.c:3490 src/cryptsetup.c:3497
-#: src/cryptsetup.c:3498 src/cryptsetup.c:3499 src/cryptsetup.c:3500
-#: src/cryptsetup.c:3501 src/cryptsetup.c:3502 src/cryptsetup.c:3503
-#: src/cryptsetup.c:3504 src/cryptsetup.c:3505 src/cryptsetup.c:3506
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
 msgid "<device>"
 msgstr "<уређај>"
 
-#: src/cryptsetup.c:3486
+#: src/cryptsetup.c:3487
 msgid "try to repair on-disk metadata"
 msgstr "покушава да поправи метаподатке на-диску"
 
-#: src/cryptsetup.c:3487
+#: src/cryptsetup.c:3488
 msgid "reencrypt LUKS2 device"
 msgstr "поново шифрујем ЛУКС2 уређај"
 
-#: src/cryptsetup.c:3488
+#: src/cryptsetup.c:3489
 msgid "erase all keyslots (remove encryption key)"
 msgstr "брише све уторе кључева (уклања кључ шифровања)"
 
-#: src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490
 msgid "convert LUKS from/to LUKS2 format"
 msgstr "претвара ЛУКС из/у ЛУКС2 запис"
 
-#: src/cryptsetup.c:3490
+#: src/cryptsetup.c:3491
 msgid "set permanent configuration options for LUKS2"
 msgstr "поставља трајне опције подешавања за ЛУКС2"
 
-#: src/cryptsetup.c:3491 src/cryptsetup.c:3492
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
 msgid "<device> [<new key file>]"
 msgstr "<уређај> [<нова датотека кључа>]"
 
-#: src/cryptsetup.c:3491
+#: src/cryptsetup.c:3492
 msgid "formats a LUKS device"
 msgstr "форматира ЛУКС уређај"
 
-#: src/cryptsetup.c:3492
+#: src/cryptsetup.c:3493
 msgid "add key to LUKS device"
 msgstr "додаје кључ у ЛУКС уређај"
 
-#: src/cryptsetup.c:3493 src/cryptsetup.c:3494 src/cryptsetup.c:3495
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
 msgid "<device> [<key file>]"
 msgstr "<уређај> [<датотека кључа>]"
 
-#: src/cryptsetup.c:3493
+#: src/cryptsetup.c:3494
 msgid "removes supplied key or key file from LUKS device"
 msgstr "уклања достављени кључ или датотеку кључа из ЛУКС уређаја"
 
-#: src/cryptsetup.c:3494
+#: src/cryptsetup.c:3495
 msgid "changes supplied key or key file of LUKS device"
 msgstr "мења достављени кључ или датотеку кључа ЛУКС уређаја"
 
-#: src/cryptsetup.c:3495
+#: src/cryptsetup.c:3496
 msgid "converts a key to new pbkdf parameters"
 msgstr "претвара кључ у нове „pbkdf“ параметре"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497
 msgid "<device> <key slot>"
 msgstr "<уређај> <утор кључа>"
 
-#: src/cryptsetup.c:3496
+#: src/cryptsetup.c:3497
 msgid "wipes key with number <key slot> from LUKS device"
 msgstr "брише кључ са бројем <утор кључа> са ЛУКС уређаја"
 
-#: src/cryptsetup.c:3497
+#: src/cryptsetup.c:3498
 msgid "print UUID of LUKS device"
 msgstr "исписује УЈИБ ЛУКС уређаја"
 
-#: src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499
 msgid "tests <device> for LUKS partition header"
 msgstr "испробава <уређај> за заглављем ЛУКС партиције"
 
-#: src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500
 msgid "dump LUKS partition information"
 msgstr "исписује податке ЛУКС партиције"
 
-#: src/cryptsetup.c:3500
+#: src/cryptsetup.c:3501
 msgid "dump TCRYPT device information"
 msgstr "исписује податке ТКРИПТ уређаја"
 
-#: src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502
 msgid "dump BITLK device information"
 msgstr "исписује податке „BITLK“ уређаја"
 
-#: src/cryptsetup.c:3502
+#: src/cryptsetup.c:3503
 msgid "dump FVAULT2 device information"
 msgstr "исписује податке „FVAULT2“ уређаја"
 
-#: src/cryptsetup.c:3503
+#: src/cryptsetup.c:3504
 msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
 msgstr "Обуставља ЛУКС уређај и брише кључ (сви УИ су замрзнути)"
 
-#: src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505
 msgid "Resume suspended LUKS device"
 msgstr "Наставља са обустављеним ЛУКС уређајем"
 
-#: src/cryptsetup.c:3505
+#: src/cryptsetup.c:3506
 msgid "Backup LUKS device header and keyslots"
 msgstr "Прави резерву заглавља „LUKS“ уређаја и утора кључева"
 
-#: src/cryptsetup.c:3506
+#: src/cryptsetup.c:3507
 msgid "Restore LUKS device header and keyslots"
 msgstr "Враћа заглавље „LUKS“ уређаја и уторе кључева"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3508
 msgid "<add|remove|import|export> <device>"
 msgstr "<додај|уклони|увези|извези> <уређај>"
 
-#: src/cryptsetup.c:3507
+#: src/cryptsetup.c:3508
 msgid "Manipulate LUKS2 tokens"
 msgstr "Управља ЛУКС2 скупинама"
 
-#: src/cryptsetup.c:3526 src/veritysetup.c:505 src/integritysetup.c:573
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -2955,7 +2950,7 @@ msgstr ""
 "\n"
 "<радња> је једна од следећих:\n"
 
-#: src/cryptsetup.c:3532
+#: src/cryptsetup.c:3533
 msgid ""
 "\n"
 "You can also use old <action> syntax aliases:\n"
@@ -2967,7 +2962,7 @@ msgstr ""
 "\tотвори: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
 "\tзатвори: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
 
-#: src/cryptsetup.c:3536
+#: src/cryptsetup.c:3537
 #, c-format
 msgid ""
 "\n"
@@ -2982,7 +2977,7 @@ msgstr ""
 "<утор кључа> је број ЛУКС утора кључа за мењање\n"
 "<датотека кључа> изборна датотека кључа за нови кључ за радњу „luksAddKey“\n"
 
-#: src/cryptsetup.c:3543
+#: src/cryptsetup.c:3544
 #, c-format
 msgid ""
 "\n"
@@ -2991,7 +2986,7 @@ msgstr ""
 "\n"
 "Основни уграђени запис метаподатака је „%s“ (за „luksFormat“ радњу).\n"
 
-#: src/cryptsetup.c:3548
+#: src/cryptsetup.c:3549
 msgid ""
 "\n"
 "LUKS2 external token plugin support is enabled.\n"
@@ -2999,12 +2994,12 @@ msgstr ""
 "\n"
 "Подршка прикључка спољне скупине за LUKS2 је укључена.\n"
 
-#: src/cryptsetup.c:3549
+#: src/cryptsetup.c:3550
 #, c-format
 msgid "LUKS2 external token plugin path: %s.\n"
 msgstr "Путања прикључка спољне скупине за „LUKS2“: %s.\n"
 
-#: src/cryptsetup.c:3551
+#: src/cryptsetup.c:3552
 msgid ""
 "\n"
 "LUKS2 external token plugin support is disabled.\n"
@@ -3012,7 +3007,7 @@ msgstr ""
 "\n"
 "Подршка прикључка спољне скупине за LUKS2 је искључена.\n"
 
-#: src/cryptsetup.c:3555
+#: src/cryptsetup.c:3556
 #, c-format
 msgid ""
 "\n"
@@ -3029,7 +3024,7 @@ msgstr ""
 "Основни „PBKDF“ за ЛУКС2: %s\n"
 "\tВреме понављања: %d, Захтевана меморија: %dkB, Паралелне нити: %d\n"
 
-#: src/cryptsetup.c:3566
+#: src/cryptsetup.c:3567
 #, c-format
 msgid ""
 "\n"
@@ -3044,122 +3039,126 @@ msgstr ""
 "\tобично: %s, Кључ: %d бита, Хеширање лозинке: %s\n"
 "\tЛУКС: %s, Кључ: %d бита, Хеширање ЛУКС заглавља: %s, РНГ: %s\n"
 
-#: src/cryptsetup.c:3575
+#: src/cryptsetup.c:3576
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tЛУКС: Основна величина кључа са „XTS“ режимом (два унутрашња кључа) биће удвостручена.\n"
 
-#: src/cryptsetup.c:3593 src/veritysetup.c:647 src/integritysetup.c:733
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: захтева „%s“ као аргумент"
 
-#: src/cryptsetup.c:3633 src/utils_reencrypt_luks1.c:1143
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
 msgid "Key slot is invalid."
 msgstr "Утор кључа није исправан."
 
-#: src/cryptsetup.c:3661
+#: src/cryptsetup.c:3662
 msgid "Device size must be multiple of 512 bytes sector."
 msgstr "Величина уређаја мора бити умножак одељка од 512 бајта."
 
-#: src/cryptsetup.c:3666
+#: src/cryptsetup.c:3667
 msgid "Invalid max reencryption hotzone size specification."
 msgstr "Неисправна одредба највеће величине вруће зоне поновног шифровања."
 
-#: src/cryptsetup.c:3680 src/cryptsetup.c:3697 src/cryptsetup.c:3709
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
 msgid "Key size must be a multiple of 8 bits"
 msgstr "Величина кључа мора бити умножак од 8 бита"
 
-#: src/cryptsetup.c:3687
+#: src/cryptsetup.c:3688
 msgid "At most 2 key size specifications can be supplied."
 msgstr "Могу се доставити одредбе величине највише 2 кључа."
 
-#: src/cryptsetup.c:3716 src/cryptsetup.c:3727
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
 #, c-format
 msgid "At most %d volume key specifications can be supplied."
 msgstr "Највише %d одредбе кључа волумена се могу доставити."
 
-#: src/cryptsetup.c:3739
+#: src/cryptsetup.c:3740
 #, c-format
 msgid "At most %d keyring link specifications can be supplied."
 msgstr "Највише %d одредбе везе привеска кључева се могу доставити."
 
-#: src/cryptsetup.c:3748
+#: src/cryptsetup.c:3749
 msgid "Maximum device reduce size is 1 GiB."
 msgstr "Највећа величина смањења уређаја је 1 GiB."
 
-#: src/cryptsetup.c:3751
+#: src/cryptsetup.c:3752
 msgid "Reduce size must be multiple of 512 bytes sector."
 msgstr "Величина смањивања мора бити умножак одељка од 512 бајта."
 
-#: src/cryptsetup.c:3768
+#: src/cryptsetup.c:3769
 msgid "Option --priority can be only ignore/normal/prefer."
 msgstr "Опција „--priority“ може бити само „ignore/normal/prefer“."
 
-#: src/cryptsetup.c:3787 src/veritysetup.c:568 src/integritysetup.c:653
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "Неисправна одредба највећег броја покушаја."
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
 msgid "Show this help message"
 msgstr "Приказује ову поруку помоћи"
 
-#: src/cryptsetup.c:3788 src/veritysetup.c:569 src/integritysetup.c:654
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
 msgid "Display brief usage"
 msgstr "Прикажите кратку поруку о коришћењу"
 
-#: src/cryptsetup.c:3789 src/veritysetup.c:570 src/integritysetup.c:655
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
 msgid "Print package version"
 msgstr "Исписује издање пакета"
 
-#: src/cryptsetup.c:3800 src/veritysetup.c:581 src/integritysetup.c:666
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
 msgid "Help options:"
 msgstr "Опције помоћи:"
 
-#: src/cryptsetup.c:3823 src/veritysetup.c:602 src/integritysetup.c:686
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[ОПЦИЈА...] <радња> <посебност-радње>"
 
-#: src/cryptsetup.c:3832 src/veritysetup.c:611 src/integritysetup.c:697
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
 msgid "Argument <action> missing."
 msgstr "Недостаје аргумент <радња>."
 
-#: src/cryptsetup.c:3911 src/veritysetup.c:642 src/integritysetup.c:728
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
 msgid "Unknown action."
 msgstr "Непозната радња."
 
-#: src/cryptsetup.c:3929
+#: src/cryptsetup.c:3935
 msgid "Option --key-file takes precedence over specified key file argument."
 msgstr "Опција „--key-file“ има првенство над наведеним аргументом датотеке кључа."
 
-#: src/cryptsetup.c:3935
+#: src/cryptsetup.c:3941
 msgid "Only one --key-file argument is allowed."
 msgstr "Дозвољен је само један аргумент „--key-file“."
 
-#: src/cryptsetup.c:3940
+#: src/cryptsetup.c:3946
 msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
 msgstr "Функција произилажења кључа заснованог на пропусној речи (PBKDF) може бити само „pbkdf2“ или „argon2i/argon2id“."
 
-#: src/cryptsetup.c:3945
+#: src/cryptsetup.c:3951
 msgid "PBKDF forced iterations cannot be combined with iteration time option."
 msgstr "„PBKDF“ присиљена понављања се не могу комбиновати са опцијом времена понављања."
 
-#: src/cryptsetup.c:3950
+#: src/cryptsetup.c:3956
 msgid "Cannot link volume key to a keyring when keyring is disabled."
 msgstr "Не могу да свежем кључ волумена на привезак кључева када је привезак искључен."
 
-#: src/cryptsetup.c:3955
+#: src/cryptsetup.c:3961
 msgid "Cannot use keyring key description when keyring is disabled."
 msgstr "Не могу да користим опис кључа привеска када је привезак искључен."
 
-#: src/cryptsetup.c:3960
+#: src/cryptsetup.c:3966
 msgid "Inline integrity must be used together with --integrity option."
 msgstr "Унутарња целовитост се мора користити заједно са опцијом „--integrity“."
 
-#: src/cryptsetup.c:3971
+#: src/cryptsetup.c:3977
 msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
 msgstr "Опције „--keyslot-cipher“ и „--keyslot-key-size“ се морају користити заједно."
 
-#: src/cryptsetup.c:3979
+#: src/cryptsetup.c:3985
 msgid "No action taken. Invoked with --test-args option.\n"
 msgstr "Није предузета никаква радња. Призвана опцијом „--test-args“.\n"
 
-#: src/cryptsetup.c:3992
+#: src/cryptsetup.c:3998
 msgid "Cannot disable metadata locking."
 msgstr "Не могу да искључим закључавање метаподатака."
 
@@ -3224,7 +3223,7 @@ msgstr "Наредба захтева „<root_hash>“ или „--root-hash-fi
 msgid "<data_device> <hash_device>"
 msgstr "<уређај_података> <уређај_хеша>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:553
+#: src/veritysetup.c:485 src/integritysetup.c:562
 msgid "format device"
 msgstr "форматира уређај"
 
@@ -3240,7 +3239,7 @@ msgstr "проверава уређај"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<уређај_података> <назив> <уређај_хеша> [<хеш_корена>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:556
+#: src/veritysetup.c:489 src/integritysetup.c:565
 msgid "show active device status"
 msgstr "показује стање радног уређаја"
 
@@ -3248,7 +3247,7 @@ msgstr "показује стање радног уређаја"
 msgid "<hash_device>"
 msgstr "<уређај_хеша>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:557
+#: src/veritysetup.c:490 src/integritysetup.c:566
 msgid "show on-disk information"
 msgstr "приказује податке на-диску"
 
@@ -3290,7 +3289,7 @@ msgstr "Опције „--panic-on-corruption“ и „--restart-on-corruption
 msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
 msgstr "Опција „--error-as-corruption“ мора да се користи са „--panic-on-corruption“ или „--restart-on-corruption“."
 
-#: src/integritysetup.c:168
+#: src/integritysetup.c:169
 #, c-format
 msgid ""
 "This will overwrite data on %s and %s irrevocably.\n"
@@ -3299,33 +3298,33 @@ msgstr ""
 "Ово ће неповратно преписати податке на „%s“ и „%s“.\n"
 "Да задржите уређај података користите опцију „--no-wipe“ (а затим активирајте са „--integrity-recalculate“)."
 
-#: src/integritysetup.c:213
+#: src/integritysetup.c:215
 #, c-format
 msgid "Formatted with tag size %u%s, internal integrity %s.\n"
 msgstr "Форматирано ознаком величине %u%s, унутрашња целовитост „%s“.\n"
 
-#: src/integritysetup.c:214
+#: src/integritysetup.c:216
 msgid " (inline hw tags)"
 msgstr " (унутарње hw ознаке)"
 
-#: src/integritysetup.c:303
+#: src/integritysetup.c:305
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Постављање заставице поновног рачунањ није подржано, можете узети у обзир коришћење опције „--wipe“."
 
-#: src/integritysetup.c:380 src/integritysetup.c:540
+#: src/integritysetup.c:382 src/integritysetup.c:549
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Уређај „%s“ није исправан „INTEGRITY“ уређај."
 
-#: src/integritysetup.c:553 src/integritysetup.c:557
+#: src/integritysetup.c:562 src/integritysetup.c:566
 msgid "<integrity_device>"
 msgstr "<уређај_целовитости>"
 
-#: src/integritysetup.c:554
+#: src/integritysetup.c:563
 msgid "<integrity_device> <name>"
 msgstr "<уређај_целовитости> <назив>"
 
-#: src/integritysetup.c:577
+#: src/integritysetup.c:586
 #, c-format
 msgid ""
 "\n"
@@ -3336,7 +3335,7 @@ msgstr ""
 "<назив> јесте уређај за стварање под „%s“\n"
 "<уређај_целовитости> јесте уређај који садржи податке са ознакама целовитости\n"
 
-#: src/integritysetup.c:582
+#: src/integritysetup.c:591
 #, c-format
 msgid ""
 "\n"
@@ -3349,51 +3348,55 @@ msgstr ""
 "\tАлгоритам провере суме: %s\n"
 "        Највећа величина датотеке кључа: %dkB\n"
 
-#: src/integritysetup.c:639
+#: src/integritysetup.c:648
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Неисправна величина „--%s“. Највећа је %u бајта."
 
-#: src/integritysetup.c:742
+#: src/integritysetup.c:751
 msgid "Both key file and key size options must be specified."
 msgstr "Мора бити наведена и опција датотеке кључа и опција величине кључа."
 
-#: src/integritysetup.c:746
+#: src/integritysetup.c:755
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Мора бити наведена и опција датотеке кључа целовитости журнала и опција величине кључа."
 
-#: src/integritysetup.c:749
+#: src/integritysetup.c:758
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Алгоритам целовитости журнала мора бити наведен ако се користи кључ целовитости журнала."
 
-#: src/integritysetup.c:753
+#: src/integritysetup.c:762
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Мора бити наведена и опција датотеке кључа шифровања журнала и опција величине кључа."
 
-#: src/integritysetup.c:756
+#: src/integritysetup.c:765
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Алгоритам шифровања журнала мора бити наведен ако се користи кључ шифровања журнала."
 
-#: src/integritysetup.c:760
+#: src/integritysetup.c:769
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Опције режима опоравка и битмапе се узајамно искључују."
 
-#: src/integritysetup.c:767
+#: src/integritysetup.c:776
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Опције журнала се не могу користити у режиму битмапе."
 
-#: src/integritysetup.c:772
+#: src/integritysetup.c:781
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Опције битмапе се могу користити само у режиму битмапе."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:787
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Унутарњи режим се не може комбиновати са опцијама „journal“ или „bitmap“."
 
-#: src/integritysetup.c:782
+#: src/integritysetup.c:791
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Унутарњи режим се не може комбиновати са одвојеним уређајем података."
 
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "Тастерска одбацивања се могу укључити само са тастерским алгоритмима као што је HMAC."
+
 #: src/utils_tools.c:105
 msgid ""
 "\n"
@@ -3744,32 +3747,32 @@ msgstr "Уређај није у ЛУКС2 шифровању. Сукобљав
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Уређај је у поновном шифровању користећи гипкост помака података. Захтевана опција „--resilience“ се не може применити."
 
-#: src/utils_reencrypt.c:282 src/utils_reencrypt.c:1924
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Не могу да одредим величину кључа за ЛУКС без утора кључа, користите опцију „--new-key-size“."
 
-#: src/utils_reencrypt.c:436
+#: src/utils_reencrypt.c:438
 msgid "Device requires reencryption recovery. Run repair first."
 msgstr "Уређај захтева опоравак поновног шифровања. Прво покрените поправку."
 
-#: src/utils_reencrypt.c:450
+#: src/utils_reencrypt.c:452
 #, c-format
 msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
 msgstr "Уређај „%s“ је већ у ЛУКС2 поновном шифровању. Да ли желите да наставите са претходно започетом радњом?"
 
-#: src/utils_reencrypt.c:561
+#: src/utils_reencrypt.c:563
 msgid "Legacy LUKS2 reencryption is no longer supported."
 msgstr "Старо ЛУКС2 поновно шифровања више није подржано."
 
-#: src/utils_reencrypt.c:566
+#: src/utils_reencrypt.c:568
 msgid "Can not reencrypt LUKS2 device configured to use OPAL."
 msgstr "Не могу поново да шифрујем LUKS2 уређај подешен да користи OPAL."
 
-#: src/utils_reencrypt.c:572
+#: src/utils_reencrypt.c:574
 msgid "Reencryption of device with integrity profile is not supported."
 msgstr "Поновно шифровање уређаја са профилом целовитости није подржано."
 
-#: src/utils_reencrypt.c:609
+#: src/utils_reencrypt.c:611
 #, c-format
 msgid ""
 "Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
@@ -3778,110 +3781,111 @@ msgstr ""
 "Захтевано „--sector-size“ %<PRIu32> је несагласно са „%s“ суперблоком\n"
 "(величина блока: %<PRIu32> бајта) је откривено на уређају „%s“."
 
-#: src/utils_reencrypt.c:678 src/utils_reencrypt.c:2204
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Шифровање без откаченог заглавља (--header) није могуће без смањења величине уређаја података (--reduce-device-size)."
 
-#: src/utils_reencrypt.c:687
+#: src/utils_reencrypt.c:689
 msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
 msgstr "Затражени померај података мора бити мањи или једнак половини параметра „--reduce-device-size“."
 
-#: src/utils_reencrypt.c:697
+#: src/utils_reencrypt.c:699
 #, c-format
 msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
 msgstr "Подешавам „--reduce-device-size“ вредност на двоструко од „--offset“ %<PRIu64> (подеока).\n"
 
-#: src/utils_reencrypt.c:727
+#: src/utils_reencrypt.c:729
 #, c-format
 msgid "Temporary header file %s already exists. Aborting."
 msgstr "Привремена датотека заглавља „%s“ већ постоји. Прекидам."
 
-#: src/utils_reencrypt.c:729 src/utils_reencrypt.c:736
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
 #, c-format
 msgid "Cannot create temporary header file %s."
 msgstr "Не могу да направим привремену датотеку заглавља „%s“."
 
-#: src/utils_reencrypt.c:761
+#: src/utils_reencrypt.c:763
 msgid "LUKS2 metadata size is larger than data shift value."
 msgstr "Величина ЛУКС2 метаподатака је већа од вредности помака података."
 
-#: src/utils_reencrypt.c:800
+#: src/utils_reencrypt.c:802
 #, c-format
 msgid "Failed to place new header at head of device %s."
 msgstr "Нисам успео да ставим ново заглавље на главу уређаја „%s“."
 
-#: src/utils_reencrypt.c:813
+#: src/utils_reencrypt.c:815
 #, c-format
 msgid "%s/%s is now active and ready for online encryption.\n"
 msgstr "„%s/%s“ је сада активно и спремно за шифровање на мрежи.\n"
 
-#: src/utils_reencrypt.c:850
+#: src/utils_reencrypt.c:852
 #, c-format
 msgid "Active device %s is not LUKS2."
 msgstr "Радни уређај „%s“ није ЛУКС2."
 
-#: src/utils_reencrypt.c:878
+#: src/utils_reencrypt.c:880
 msgid "Restoring original LUKS2 header."
 msgstr "Враћам изворно ЛУКС2 заглавље."
 
-#: src/utils_reencrypt.c:886
+#: src/utils_reencrypt.c:888
 msgid "Original LUKS2 header restore failed."
 msgstr "Враћање изворног ЛУКС2 заглавља није успело."
 
-#: src/utils_reencrypt.c:918
+#: src/utils_reencrypt.c:920
 #, c-format
 msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
 msgstr "Датотека заглавља „%s“ не постоји. Да ли желите да покренете LUKS2 дешифровање уређаја „%s“ и да извезете LUKS2 заглавље у датотеку „%s“?"
 
-#: src/utils_reencrypt.c:961
+#: src/utils_reencrypt.c:963
 msgid "Failed to add read/write permissions to exported header file."
 msgstr "Нисам успео да додам дозволе за читање/писање у извезену датотеку заглавља."
 
-#: src/utils_reencrypt.c:1015
+#: src/utils_reencrypt.c:1017
 #, c-format
 msgid "Reencryption initialization failed. Header backup is available in %s."
 msgstr "Покретање поновног шифровања није успело. Резерва заглавља је доступна у „%s“."
 
-#: src/utils_reencrypt.c:1043
+#: src/utils_reencrypt.c:1045
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "ЛУКС2 дешифровање је подржано само са откаченим уређајем заглавља (са померајем података постављеним на 0)."
 
-#: src/utils_reencrypt.c:1487
-msgid "No token could unlock the device."
-msgstr "Ниједна скупина не може да откључа уређај."
-
-#: src/utils_reencrypt.c:1519 src/utils_reencrypt.c:1528
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
 msgid "Not enough free keyslots for reencryption."
 msgstr "Нема довољно слободних утора кључева за поновно шифровање."
 
-#: src/utils_reencrypt.c:1559
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "Ниједна скупина не може да откључа уређај."
+
+#: src/utils_reencrypt.c:1588
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Датотека кључа или опис кључа привеска се може користити само са „--key-slot“ или са тачно једним активним утором кључа."
 
-#: src/utils_reencrypt.c:1566 src/utils_reencrypt.c:1579
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Унесите пропусну реч за утор кључа %d: "
 
-#: src/utils_reencrypt.c:1876
+#: src/utils_reencrypt.c:1905
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Пребацујем шифрера података на „%s“.\n"
 
-#: src/utils_reencrypt.c:1977 src/utils_reencrypt.c:1998
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Користите „--force-no-keyslots“ да поново шифрујете уређај са активним уторима кључа проследивши директно кључеве волумена."
 
-#: src/utils_reencrypt.c:1993
+#: src/utils_reencrypt.c:2022
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Опција „--new-volume-key-file“ мора бити упарена са „--new-key-size“"
 
-#: src/utils_reencrypt.c:2035
+#: src/utils_reencrypt.c:2064
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Никакви параметри подеока података нису измењени. Поновно шифровање је прекинуто."
 
-#: src/utils_reencrypt.c:2072
+#: src/utils_reencrypt.c:2101
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3889,7 +3893,7 @@ msgstr ""
 "Повећање величине одељка шифровања на не прикљученом уређају није подржано.\n"
 "Прво покрените уређај или користите опцију „--force-offline-reencrypt“ (опасно, вруће!!)."
 
-#: src/utils_reencrypt.c:2114 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3898,58 +3902,58 @@ msgstr ""
 "\n"
 "Поновно шифровање је прекинуто."
 
-#: src/utils_reencrypt.c:2119
+#: src/utils_reencrypt.c:2148
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Настављам са ЛУКС2 поновним шифровањем у насилном ванмрежном режиму.\n"
 
-#: src/utils_reencrypt.c:2142
+#: src/utils_reencrypt.c:2171
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "Уређај „%s“ садржи оштећене ЛУКС2 метаподатке. Прекидам радњу."
 
-#: src/utils_reencrypt.c:2158 src/utils_reencrypt.c:2180
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Уређај „%s“ већ јесте ЛУКС уређај. Прекидам радњу."
 
-#: src/utils_reencrypt.c:2186
+#: src/utils_reencrypt.c:2215
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Уређај „%s“ је већ у ЛУКС2 поновном шифровању. Прекидам радњу."
 
-#: src/utils_reencrypt.c:2269
+#: src/utils_reencrypt.c:2298
 msgid "LUKS2 decryption requires --header option."
 msgstr "ЛУКС2 дешифровање захтева опцију „--header“."
 
-#: src/utils_reencrypt.c:2317
+#: src/utils_reencrypt.c:2346
 msgid "Command requires device as argument."
 msgstr "Наредба захтева уређај као аргумент."
 
-#: src/utils_reencrypt.c:2330
+#: src/utils_reencrypt.c:2359
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Сукобљавајућа издања. Уређај „%s“ је ЛУКС1."
 
-#: src/utils_reencrypt.c:2336
+#: src/utils_reencrypt.c:2365
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Сукобљавајућа издања. Уређај „%s“ је у ЛУКС1 поновном шифровању."
 
-#: src/utils_reencrypt.c:2342
+#: src/utils_reencrypt.c:2371
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Сукобљавајућа издања. Уређај „%s“ је ЛУКС2."
 
-#: src/utils_reencrypt.c:2348
+#: src/utils_reencrypt.c:2377
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Сукобљавајућа издања. Уређај „%s“ је у ЛУКС2 поновном шифровању."
 
-#: src/utils_reencrypt.c:2354
+#: src/utils_reencrypt.c:2383
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "ЛУКС2 поновно шифровање је већ покренуто. Прекидам радњу."
 
-#: src/utils_reencrypt.c:2361
+#: src/utils_reencrypt.c:2390
 msgid "Device reencryption not in progress."
 msgstr "Поновно шифровање уређаја није у току."
 
@@ -4347,6 +4351,12 @@ msgstr "Метода потврђивања идентитета јавног к
 msgid "Public key authentication error: "
 msgstr "Грешка потврђивања идентитета јавног кључа: "
 
+#~ msgid "Required kernel crypto interface not available."
+#~ msgstr "Није доступно затражено сучеље криптографије језгра."
+
+#~ msgid "Ensure you have algif_skcipher kernel module loaded."
+#~ msgstr "Уверите се да је учитан модул кернела „algif_skcipher“."
+
 #, c-format
 #~ msgid "Failed to read or validate BITLK FVE metadata copy #%d from %s."
 #~ msgstr "Нисам успео да прочитам или да потврдим умножак #%d „BITLK FVE“ метаподатака из „%s“."
@@ -4953,9 +4963,6 @@ msgstr "Грешка потврђивања идентитета јавног к
 #~ msgid "Options --journal-size, --interleave-sectors, --sector-size, --tag-size and --no-wipe can be used only for format action."
 #~ msgstr "Опције „--journal-size“, „--interleave-sectors“, „--sector-size“, „--tag-size“ и „--no-wipe“ се могу користити само за радњу форматирања."
 
-#~ msgid "Invalid journal size specification."
-#~ msgstr "Неисправна одредба величине журнала."
-
 #~ msgid "Reencryption block size"
 #~ msgstr "Величина блока поновног шифровања"
 

From 1f698bb65791f4512d0a69243bf22b59a6514b3f Mon Sep 17 00:00:00 2001
From: Yuri Chornoivan <yurchor@ukr.net>
Date: Fri, 4 Sep 2026 18:57:03 +0200
Subject: [PATCH 214/244] po: update uk.po (from translationproject.org)

---
 po/uk.po | 659 ++++++++++++++++++++++++++++---------------------------
 1 file changed, 332 insertions(+), 327 deletions(-)

diff --git a/po/uk.po b/po/uk.po
index 7f7f8845f..a33e1217b 100644
--- a/po/uk.po
+++ b/po/uk.po
@@ -5,10 +5,10 @@
 # Yuri Chornoivan <yurchor@ukr.net>, 2012-2023, 2024, 2025, 2026.
 msgid ""
 msgstr ""
-"Project-Id-Version: cryptsetup 2.8.7-rc2\n"
+"Project-Id-Version: cryptsetup 2.8.8-rc0\n"
 "Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
-"POT-Creation-Date: 2026-07-09 10:46+0200\n"
-"PO-Revision-Date: 2026-07-11 17:13+0300\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-02 18:11+0300\n"
 "Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
 "Language-Team: Ukrainian <trans-uk@lists.fedoraproject.org>\n"
 "Language: uk\n"
@@ -17,80 +17,80 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Bugs: Report translation errors to the Language-Team address.\n"
 "Plural-Forms: nplurals=1; plural=0;\n"
-"X-Generator: Lokalize 23.04.3\n"
+"X-Generator: Lokalize 25.12.1\n"
 
-#: lib/libdevmapper.c:419
+#: lib/libdevmapper.c:422
 msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr "Не можна ініціалізувати device-mapper, якщо програму запущено не від імені адміністратора (root)."
 
-#: lib/libdevmapper.c:422
+#: lib/libdevmapper.c:425
 msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr "Не вдалося ініціалізувати device-mapper. Чи завантажено модуль ядра dm_mod?"
 
-#: lib/libdevmapper.c:1125
+#: lib/libdevmapper.c:1129
 msgid "Requested deferred flag is not supported."
 msgstr "Підтримки бажаного прапорця відкладення, %s, не передбачено."
 
-#: lib/libdevmapper.c:1194
+#: lib/libdevmapper.c:1198
 #, c-format
 msgid "DM-UUID for device %s was truncated."
 msgstr "DM-UUID для пристрою %s було обрізано."
 
-#: lib/libdevmapper.c:1598
+#: lib/libdevmapper.c:1602
 msgid "Unknown dm target type."
 msgstr "Невідомий тип призначення dm."
 
-#: lib/libdevmapper.c:1725 lib/libdevmapper.c:1731 lib/libdevmapper.c:1850
-#: lib/libdevmapper.c:1853
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
 msgid "Requested dm-crypt performance options are not supported."
 msgstr "Підтримки вказаних параметрів швидкодії dm-crypt не передбачено."
 
-#: lib/libdevmapper.c:1740 lib/libdevmapper.c:1746 lib/libdevmapper.c:1758
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
 msgid "Requested dm-verity data corruption handling options are not supported."
 msgstr "Підтримки вказаних параметрів обробки пошкоджених даних за допомогою dm-verity не передбачено."
 
-#: lib/libdevmapper.c:1752
+#: lib/libdevmapper.c:1756
 msgid "Requested dm-verity tasklets option is not supported."
 msgstr "Підтримки вказаного параметра завдань dm-verity не передбачено."
 
-#: lib/libdevmapper.c:1764
+#: lib/libdevmapper.c:1768
 msgid "Requested dm-verity FEC options are not supported."
 msgstr "Підтримки вказаних параметрів FEC за допомогою dm-verity не передбачено."
 
-#: lib/libdevmapper.c:1770
+#: lib/libdevmapper.c:1774
 msgid "Requested data integrity options are not supported."
 msgstr "Підтримки вказаних параметрів цілісності даних не передбачено."
 
-#: lib/libdevmapper.c:1774
+#: lib/libdevmapper.c:1778
 msgid "Requested sector_size option is not supported."
 msgstr "Підтримки вказаного параметра sector_size не передбачено."
 
-#: lib/libdevmapper.c:1779
+#: lib/libdevmapper.c:1783
 msgid "The device size is not multiple of the requested sector size."
 msgstr "Розмір пристрою не є кратним до розміру сектора у запиті."
 
-#: lib/libdevmapper.c:1783
+#: lib/libdevmapper.c:1787
 msgid "Requested integrity_key_size option is not supported."
 msgstr "Підтримки вказаного параметра integrity_key_size не передбачено."
 
-#: lib/libdevmapper.c:1790 lib/libdevmapper.c:1796
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
 msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr "Підтримки потрібного вам автоматичного повторного обчислення міток цілісності не передбачено."
 
-#: lib/libdevmapper.c:1802 lib/libdevmapper.c:1856 lib/libdevmapper.c:1859
-#: lib/luks2/luks2_json_metadata.c:2799
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
 msgid "Discard/TRIM is not supported."
 msgstr "Підтримки відкидання або обрізання не передбачено."
 
-#: lib/libdevmapper.c:1808
+#: lib/libdevmapper.c:1812
 msgid "Requested dm-integrity bitmap mode is not supported."
 msgstr "Підтримки вказаного режиму бітової карти цілісності dm не передбачено."
 
-#: lib/libdevmapper.c:1814
+#: lib/libdevmapper.c:1818
 msgid "Requested dm-integrity inline mode is not supported."
 msgstr "Підтримки вбудованого режиму dm-integrity не передбачено."
 
-#: lib/libdevmapper.c:2870
+#: lib/libdevmapper.c:2877
 #, c-format
 msgid "Failed to query dm-%s segment."
 msgstr "Не вдалося опитати сегмент dm-%s."
@@ -141,7 +141,7 @@ msgstr "Не вдалося ініціалізувати допоміжну пр
 msgid "Cannot initialize crypto backend."
 msgstr "Не вдалося ініціалізувати допоміжну програму шифрування."
 
-#: lib/setup.c:308 lib/setup.c:2769 lib/verity/verity.c:109
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
 #, c-format
 msgid "Hash algorithm %s not supported."
 msgstr "Підтримки алгоритму хешування %s не передбачено."
@@ -155,7 +155,7 @@ msgstr "Помилка під час обробки ключа (на основ
 msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr "Не вдалося визначити тип пристрою. Несумісна дія з активації пристрою?"
 
-#: lib/setup.c:398 lib/setup.c:4177
+#: lib/setup.c:398 lib/setup.c:4193
 msgid "This operation is supported only for LUKS device."
 msgstr "Підтримку цієї дії передбачено лише для пристроїв LUKS."
 
@@ -177,7 +177,7 @@ msgstr "Слот ключа %d є некоректним, будь ласка, 
 msgid "Key slot %d is full, please select another one."
 msgstr "Слот ключа %d заповнено, будь ласка, виберіть інший."
 
-#: lib/setup.c:534 lib/setup.c:3878
+#: lib/setup.c:534 lib/setup.c:3888
 msgid "Device size is not aligned to device logical block size."
 msgstr "Розмір пристрою не вирівняно за розміром логічного блоку пристрою."
 
@@ -186,7 +186,7 @@ msgstr "Розмір пристрою не вирівняно за розмір
 msgid "Header detected but device %s is too small."
 msgstr "Виявлено заголовок, але об’єм пристрою %s є надто малим."
 
-#: lib/setup.c:672 lib/setup.c:3763 lib/setup.c:5272
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
 #: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
 msgid "This operation is not supported for this device type."
 msgstr "Підтримки цієї дії для цього типу пристроїв не передбачено."
@@ -199,553 +199,553 @@ msgstr "Виконуємо заборонену дію із повторного
 msgid "Failed to rollback LUKS2 metadata in memory."
 msgstr "Не вдалося відкотити метадані LUKS2 у пам'яті."
 
-#: lib/setup.c:896 lib/luks1/keymanage.c:236 lib/luks1/keymanage.c:514
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
 #: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
 #: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
 #: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
-#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2284
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
 #: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
 #, c-format
 msgid "Device %s is not a valid LUKS device."
 msgstr "Пристрій %s не є коректним пристроєм LUKS."
 
-#: lib/setup.c:899 lib/luks1/keymanage.c:517
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
 #, c-format
 msgid "Unsupported LUKS version %d."
 msgstr "Непідтримувана версія LUKS, %d."
 
-#: lib/setup.c:1273
+#: lib/setup.c:1279
 #, c-format
 msgid "No known cipher specification pattern detected for active device %s."
 msgstr "Не виявлено жодного відомого зразка специфікації шифрування для активного пристрою %s."
 
-#: lib/setup.c:1518 lib/setup.c:3510 lib/setup.c:3602 lib/setup.c:3614
-#: lib/setup.c:3786 lib/setup.c:5850
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
 #, c-format
 msgid "Device %s is not active."
 msgstr "Пристрій %s є неактивним."
 
-#: lib/setup.c:1535
+#: lib/setup.c:1545
 #, c-format
 msgid "Underlying device for crypt device %s disappeared."
 msgstr "Зник основний пристрій для пристрою для шифрування %s."
 
-#: lib/setup.c:1617
+#: lib/setup.c:1627
 msgid "Invalid plain crypt parameters."
 msgstr "Некоректні параметри звичайного шифрування."
 
-#: lib/setup.c:1622 lib/setup.c:2672
+#: lib/setup.c:1632 lib/setup.c:2682
 msgid "Invalid key size."
 msgstr "Некоректний розмір ключа."
 
-#: lib/setup.c:1627 lib/setup.c:2677 lib/setup.c:2882
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
 msgid "UUID is not supported for this crypt type."
 msgstr "Підтримки UUID для цього типу шифрування не передбачено."
 
-#: lib/setup.c:1632 lib/setup.c:2682
+#: lib/setup.c:1642 lib/setup.c:2692
 msgid "Detached metadata device is not supported for this crypt type."
 msgstr "Підтримки пристрою від'єднаних метаданих для цього типу шифрування не передбачено."
 
-#: lib/setup.c:1642 lib/setup.c:1890 lib/luks2/luks2_reencrypt.c:3035
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
 #: src/cryptsetup.c:1492 src/cryptsetup.c:3761
 msgid "Unsupported encryption sector size."
 msgstr "Непідтримуваний розмір сектора шифрування."
 
-#: lib/setup.c:1650 lib/setup.c:1919 lib/setup.c:3872
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
 msgid "Device size is not aligned to requested sector size."
 msgstr "Розмір пристрою не вирівняно за вказаним розміром сектора."
 
-#: lib/setup.c:1702 lib/setup.c:1954 lib/setup.c:2331
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
 msgid "Can't format LUKS without device."
 msgstr "Форматування LUKS без пристрою неможливе."
 
-#: lib/setup.c:1707 lib/setup.c:1959
+#: lib/setup.c:1717 lib/setup.c:1969
 #, c-format
 msgid "Zoned device %s cannot be used for LUKS header."
 msgstr "Зонований пристрій %s не можна використовувати для заголовка LUKS."
 
-#: lib/setup.c:1714 lib/setup.c:1966 lib/setup.c:2337
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
 msgid "Requested data alignment is not compatible with data offset."
 msgstr "Потрібне вам вирівнювання даних є несумісним із відступом у даних."
 
-#: lib/setup.c:1754 lib/setup.c:1984
+#: lib/setup.c:1764 lib/setup.c:1994
 msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
 msgstr "УВАГА: пристрій DAX може пошкодити дані, оскільки для нього не гарантовано атомарні оновлення секторів.\n"
 
-#: lib/setup.c:1792 lib/setup.c:2091 lib/setup.c:2112 lib/setup.c:2520
-#: lib/setup.c:2567 lib/setup.c:2899
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
 #, c-format
 msgid "Cannot wipe header on device %s."
 msgstr "Не можна витирати заголовок на пристрої %s."
 
-#: lib/setup.c:1805 lib/setup.c:2164
+#: lib/setup.c:1815 lib/setup.c:2174
 #, c-format
 msgid "Device %s is too small for activation, there is no remaining space for data.\n"
 msgstr "Пристрій %s є надто малим для активації, на ньому не лишиться місця для даних.\n"
 
-#: lib/setup.c:1846
+#: lib/setup.c:1856
 msgid "Volume key is too small for encryption with integrity extensions."
 msgstr "Ключ тому є надто малим для шифрування із розширеннями цілісності."
 
-#: lib/setup.c:1850
+#: lib/setup.c:1860
 msgid "Integrity key size is too small."
 msgstr "Розмір ключа цілісності є надто малим."
 
-#: lib/setup.c:1859
+#: lib/setup.c:1869
 #, c-format
 msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr "Шифрування  %s-%s (розмір ключа — %zd бітів) є недоступним."
 
-#: lib/setup.c:1900
+#: lib/setup.c:1910
 msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
 msgstr "Увага: спроба активувати пристрій завершиться невдало, у dm-crypt не передбачено підтримки для вказаного розміру сектора шифрування.\n"
 
-#: lib/setup.c:2094 lib/setup.c:2461 lib/setup.c:2523 lib/utils_device.c:906
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
 #: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
 #: lib/luks2/luks2_reencrypt.c:4498
 #, c-format
 msgid "Device %s is too small."
 msgstr "Об’єм пристрою %s є надто малим."
 
-#: lib/setup.c:2105 lib/setup.c:2144 lib/setup.c:2560 lib/setup.c:2618
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
 #, c-format
 msgid "Cannot format device %s in use."
 msgstr "Не можна форматувати пристрій %s, який перебуває у користуванні."
 
-#: lib/setup.c:2108 lib/setup.c:2147 lib/setup.c:2563 lib/setup.c:2621
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
 #, c-format
 msgid "Cannot format device %s, permission denied."
 msgstr "Не можна форматувати пристрій %s, недостатні права доступу."
 
-#: lib/setup.c:2132 lib/setup.c:2590 lib/setup.c:2972
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
 #, c-format
 msgid "Cannot format integrity for device %s."
 msgstr "Не вдалося форматувати цілісність для пристрою %s."
 
-#: lib/setup.c:2151 lib/setup.c:2629
+#: lib/setup.c:2161 lib/setup.c:2639
 #, c-format
 msgid "Cannot format device %s."
 msgstr "Не вдалося форматувати пристрій %s."
 
-#: lib/setup.c:2194
+#: lib/setup.c:2204
 msgid "Cannot get OPAL alignment parameters."
 msgstr "Не вдалося отримати параметри вирівнювання OPAL."
 
-#: lib/setup.c:2206
+#: lib/setup.c:2216
 msgid "Bogus OPAL logical block size."
 msgstr "Фіктивний розмір логічного блоку OPAL."
 
-#: lib/setup.c:2211 lib/luks2/hw_opal/hw_opal.c:305
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
 msgid "Bogus OPAL logical block size differs from device block size."
 msgstr "Фіктивний розмір логічного блоку OPAL відрізняється від розміру блоку пристрою."
 
-#: lib/setup.c:2217
+#: lib/setup.c:2227
 msgid "Requested data offset is not compatible with OPAL block size."
 msgstr "Потрібний вам відступ даних є несумісним із розміром блоку OPAL."
 
-#: lib/setup.c:2224
+#: lib/setup.c:2234
 msgid "Requested data alignment is not compatible with OPAL alignment."
 msgstr "Потрібне вам вирівнювання даних є несумісним із вирівнюванням OPAL."
 
-#: lib/setup.c:2244
+#: lib/setup.c:2254
 msgid "Data offset does not satisfy OPAL alignment requirements."
 msgstr "Відступ даних не відповідає вимогам вирівнювання OPAL."
 
-#: lib/setup.c:2257
+#: lib/setup.c:2267
 msgid "Requested data alignment does not satisfy locking range alignment requirements."
 msgstr "Потрібне вам вирівнювання даних не відповідає вимогам щодо вирівнювання заблокованого діапазону."
 
-#: lib/setup.c:2471
+#: lib/setup.c:2481
 #, c-format
 msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
 msgstr "Компенсуємо розмір пристрою на %<PRIu64> секторів для вирівнювання його за рівнем розбиття вирівнювання OPAL."
 
-#: lib/setup.c:2531 lib/setup.c:4260 lib/setup.c:4466 lib/utils_wipe.c:356
-#: lib/luks2/luks2_json_metadata.c:2742 lib/luks2/luks2_json_metadata.c:3017
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
 #, c-format
 msgid "Failed to acquire OPAL lock on device %s."
 msgstr "Не вдалося отримати блокування OPAL на пристрої %s."
 
-#: lib/setup.c:2541
+#: lib/setup.c:2551
 msgid "Incorrect OPAL Admin key."
 msgstr "Неправильний адміністративний ключ OPAL."
 
-#: lib/setup.c:2543
+#: lib/setup.c:2553
 msgid "Cannot setup OPAL segment."
 msgstr "Не вдалося налаштувати сегмент OPAL."
 
-#: lib/setup.c:2625
+#: lib/setup.c:2635
 #, c-format
 msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
 msgstr "Не вдалося форматувати пристрій %s, здається, пристрій OPAL тепер повністю захищено від запису."
 
-#: lib/setup.c:2627
+#: lib/setup.c:2637
 msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
 msgstr "Можливо, це вада у мікропрограмі. Виконайте скидання PSID OPAL і повторно з'єднайте пристрій для відновлення."
 
-#: lib/setup.c:2647
+#: lib/setup.c:2657
 #, c-format
 msgid "Locking range %d reset on device %s failed."
 msgstr "Помилка під час спроби скидання діапазону блокування %d на пристрої %s."
 
-#: lib/setup.c:2667
+#: lib/setup.c:2677
 msgid "Can't format LOOPAES without device."
 msgstr "Не можна форматувати LOOPAES без пристрою."
 
-#: lib/setup.c:2712
+#: lib/setup.c:2722
 msgid "Can't format VERITY without device."
 msgstr "Форматування VERITY без пристрою неможливе."
 
-#: lib/setup.c:2723 lib/verity/verity.c:88
+#: lib/setup.c:2733 lib/verity/verity.c:88
 #, c-format
 msgid "Unsupported VERITY hash type %d."
 msgstr "Непідтримуваний тип хешування VERITY, %d."
 
-#: lib/setup.c:2729 lib/verity/verity.c:96
+#: lib/setup.c:2739 lib/verity/verity.c:96
 msgid "Unsupported VERITY block size."
 msgstr "Непідтримуваний розмір блоку VERITY."
 
-#: lib/setup.c:2734 lib/verity/verity.c:61
+#: lib/setup.c:2744 lib/verity/verity.c:61
 msgid "Unsupported VERITY hash offset."
 msgstr "Непідтримуваний відступ хешу VERITY."
 
-#: lib/setup.c:2739
+#: lib/setup.c:2749
 msgid "Unsupported VERITY FEC offset."
 msgstr "Непідтримуваний зсув FEC VERITY."
 
-#: lib/setup.c:2763
+#: lib/setup.c:2773
 msgid "Data area overlaps with hash area."
 msgstr "Область даних перекривається із областю хешу."
 
-#: lib/setup.c:2788
+#: lib/setup.c:2798
 msgid "Hash area overlaps with FEC area."
 msgstr "Область хешування перекриваються з областю FEC."
 
-#: lib/setup.c:2795
+#: lib/setup.c:2805
 msgid "Data area overlaps with FEC area."
 msgstr "Область даних перекривається із областю FEC."
 
-#: lib/setup.c:2887
+#: lib/setup.c:2897
 msgid "Integrity key size mismatch."
 msgstr "Невідповідність розмірів ключів цілісності."
 
-#: lib/setup.c:2938
+#: lib/setup.c:2948
 #, c-format
 msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
 msgstr "Увага: бажаний розмір мітки у %d байтів відрізняється від розміру у результаті %s (%d байтів).\n"
 
-#: lib/setup.c:3051 lib/setup.c:3153
+#: lib/setup.c:3061 lib/setup.c:3163
 #, c-format
 msgid "Unknown or unsupported device type %s requested."
 msgstr "Надіслано запит щодо невідомого або непідтримуваного типу пристрою %s."
 
-#: lib/setup.c:3067
+#: lib/setup.c:3077
 #, c-format
 msgid "Device %s does not provide inline integrity data fields."
 msgstr "На пристрої %s не надається вбудованих полів даних цілісності."
 
-#: lib/setup.c:3073
+#: lib/setup.c:3083
 #, c-format
 msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
 msgstr "Розмір вбудованої мітки %<PRIu32> [байтів] перевищує %<PRIu32>, який надано пристроєм %s."
 
-#: lib/setup.c:3088
+#: lib/setup.c:3098
 #, c-format
 msgid "Sector must be the same as device hardware sector (%zu bytes)."
 msgstr "Сектор має збігатися із апаратним сектором пристрою (%zu байтів)."
 
-#: lib/setup.c:3518 lib/setup.c:3607 lib/setup.c:3620
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
 #, c-format
 msgid "Unsupported parameters on device %s."
 msgstr "Непідтримувані параметри на пристрої %s."
 
-#: lib/setup.c:3524 lib/setup.c:3627 lib/luks2/luks2_reencrypt.c:2929
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
 #: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
 #, c-format
 msgid "Mismatching parameters on device %s."
 msgstr "Невідповідність параметрів на пристрої %s."
 
-#: lib/setup.c:3650
+#: lib/setup.c:3660
 msgid "Crypt devices mismatch."
 msgstr "Невідповідність пристроїв шифрування."
 
-#: lib/setup.c:3682 lib/setup.c:3687 lib/luks2/luks2_reencrypt.c:2413
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
 #: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
 #, c-format
 msgid "Failed to reload device %s."
 msgstr "Не вдалося перезавантажити пристрій %s."
 
-#: lib/setup.c:3693 lib/setup.c:3699 lib/luks2/luks2_reencrypt.c:2383
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
 #: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
 #, c-format
 msgid "Failed to suspend device %s."
 msgstr "Не вдалося приспати пристрій %s."
 
-#: lib/setup.c:3705 lib/luks2/luks2_reencrypt.c:2397
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
 #: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
 #: lib/luks2/luks2_reencrypt.c:4241
 #, c-format
 msgid "Failed to resume device %s."
 msgstr "Не вдалося відновити роботу пристрою %s."
 
-#: lib/setup.c:3720
+#: lib/setup.c:3730
 #, c-format
 msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr "Критична помилка під час перезавантаження пристрої %s (над пристроєм %s)."
 
-#: lib/setup.c:3723 lib/setup.c:3725
+#: lib/setup.c:3733 lib/setup.c:3735
 #, c-format
 msgid "Failed to switch device %s to dm-error."
 msgstr "Не вдалося перемкнути пристрій %s у режим dm-error."
 
-#: lib/setup.c:3768
+#: lib/setup.c:3778
 msgid "Can not resize LUKS2 device with static size."
 msgstr "Неможливо змінити розмір пристрою LUKS2 зі статичним розміром."
 
-#: lib/setup.c:3773
+#: lib/setup.c:3783
 msgid "Resize of LUKS2 device with integrity protection is not supported."
 msgstr "Підтримки зміни розмірів пристрою LUKS2 із захистом цілісності не передбачено."
 
-#: lib/setup.c:3819
+#: lib/setup.c:3829
 msgid "Cannot resize loop device."
 msgstr "Неможливо змінити розмір петльового пристрою."
 
-#: lib/setup.c:3863
+#: lib/setup.c:3873
 msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
 msgstr "УВАГА: уже вказано максимальний розмір або у ядрі не передбачено можливості зміни розміру.\n"
 
-#: lib/setup.c:3929
+#: lib/setup.c:3939
 msgid "Resize failed, the kernel doesn't support it."
 msgstr "Не вдалося змінити розмір, у ядрі не передбачено підтримки такої дії."
 
-#: lib/setup.c:3961
+#: lib/setup.c:3971
 msgid "Do you really want to change UUID of device?"
 msgstr "Ви справді хочете змінити UUID пристрою?"
 
-#: lib/setup.c:4053
+#: lib/setup.c:4061 lib/setup.c:4069
 msgid "Header backup file does not contain compatible LUKS header."
 msgstr "Файл резервної копії заголовка не містить сумісного із LUKS заголовка."
 
-#: lib/setup.c:4160
+#: lib/setup.c:4176
 #, c-format
 msgid "Volume %s is not active."
 msgstr "Том %s не є активним."
 
-#: lib/setup.c:4215
+#: lib/setup.c:4231
 #, c-format
 msgid "Volume %s is already suspended."
 msgstr "Том %s вже приспано."
 
-#: lib/setup.c:4241
+#: lib/setup.c:4257
 #, c-format
 msgid "Suspend is not supported for device %s."
 msgstr "Підтримки присипляння для пристрою %s не передбачено."
 
-#: lib/setup.c:4243 lib/setup.c:4251
+#: lib/setup.c:4259 lib/setup.c:4267
 #, c-format
 msgid "Error during suspending device %s."
 msgstr "Помилка під час спроби приспати пристрій %s."
 
-#: lib/setup.c:4266
+#: lib/setup.c:4282
 #, c-format
 msgid "Device %s was suspended but hardware OPAL device cannot be locked."
 msgstr "Роботу пристрою %s було призупинено, але апаратний пристрій OPAL не може бути заблоковано."
 
-#: lib/setup.c:4297 lib/setup.c:4491
+#: lib/setup.c:4313 lib/setup.c:4507
 #, c-format
 msgid "Resume is not supported for device %s."
 msgstr "Підтримки дії з пробудження для пристрою %s не передбачено."
 
-#: lib/setup.c:4299 lib/setup.c:4481 lib/setup.c:4493
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
 #, c-format
 msgid "Error during resuming device %s."
 msgstr "Помилка під час спроби пробудити пристрій %s."
 
-#: lib/setup.c:4335
+#: lib/setup.c:4351
 msgid "Failed to unlink volume key from user specified keyring."
 msgstr "Не вдалося скасувати прив'язку ключа тому до вказаного користувачем сховища ключів."
 
-#: lib/setup.c:4457 lib/setup.c:5637
+#: lib/setup.c:4473 lib/setup.c:5653
 msgid "Failed to link volume key in user defined keyring."
 msgstr "Не вдалося пов'язати ключ тому із визначеним користувачем сховищем ключів."
 
-#: lib/setup.c:4556 src/cryptsetup.c:2722
+#: lib/setup.c:4572 src/cryptsetup.c:2722
 #, c-format
 msgid "Volume %s is not suspended."
 msgstr "Том %s не приспано."
 
-#: lib/setup.c:4667 lib/setup.c:7310 lib/setup.c:7332 src/cryptsetup.c:1856
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
 #: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
-#: src/utils_reencrypt.c:1969
+#: src/utils_reencrypt.c:1995
 msgid "Volume key does not match the volume."
 msgstr "Ключ тому не відповідає тому."
 
-#: lib/setup.c:4821
+#: lib/setup.c:4837
 msgid "Failed to swap new key slot."
 msgstr "Не вдалося зарезервувати новий слот ключа."
 
-#: lib/setup.c:4919
+#: lib/setup.c:4935
 #, c-format
 msgid "Key slot %d is invalid."
 msgstr "Слот ключа %d є некоректним."
 
-#: lib/setup.c:4925 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
 #: src/cryptsetup.c:3122 src/cryptsetup.c:3182
 #, c-format
 msgid "Keyslot %d is not active."
 msgstr "Слот ключа %d не є активним."
 
-#: lib/setup.c:4944
+#: lib/setup.c:4960
 msgid "Device header overlaps with data area."
 msgstr "Заголовок пристрою перекривається із областю даних."
 
-#: lib/setup.c:5165
+#: lib/setup.c:5181
 msgid "Reencryption in-progress. Cannot activate device."
 msgstr "Виконуємо повторне шифрування. Не можна активувати пристрій."
 
-#: lib/setup.c:5167 lib/luks2/luks2_json_metadata.c:2913
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
 #: lib/luks2/luks2_reencrypt.c:3726
 msgid "Failed to get reencryption lock."
 msgstr "Не вдалося отримати стан блокування для повторного шифрування."
 
-#: lib/setup.c:5189
+#: lib/setup.c:5205
 msgid "LUKS2 reencryption recovery using volume key(s) failed."
 msgstr "Не вдалося виконати відновлення даних повторного шифрування LUKS2 з використанням ключів тому."
 
-#: lib/setup.c:5325
+#: lib/setup.c:5341
 #, c-format
 msgid "Device %s already exists."
 msgstr "Пристрій %s вже існує."
 
-#: lib/setup.c:5332
+#: lib/setup.c:5348
 #, c-format
 msgid "Cannot use device %s, name is invalid or still in use."
 msgstr "Неможливо скористатися пристроєм %s, некоректна назва або пристрій усе ще використовується."
 
-#: lib/setup.c:5344
+#: lib/setup.c:5360
 msgid "Reencryption volume keys do not match the volume."
 msgstr "Ключі повторного шифрування тому не відповідають тому."
 
-#: lib/setup.c:5361
+#: lib/setup.c:5377
 msgid "Incorrect volume key specified for plain device."
 msgstr "Для пристрою зі звичайним шифруванням вказано помилковий ключ тому."
 
-#: lib/setup.c:5387 lib/setup.c:5448
+#: lib/setup.c:5403 lib/setup.c:5464
 msgid "Device type is not properly initialized."
 msgstr "Тип пристрою не ініціалізовано належним чином."
 
-#: lib/setup.c:5486
+#: lib/setup.c:5502
 msgid "Kernel keyring is not supported by the kernel."
 msgstr "У ядрі не передбачено підтримки сховища ключів ядра."
 
-#: lib/setup.c:5490
+#: lib/setup.c:5506
 msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr "Немає сховища ключів ядра: це сховище потрібне для передавання підпису ядру."
 
-#: lib/setup.c:5545
+#: lib/setup.c:5561
 #, c-format
 msgid "Cannot use keyring key %s."
 msgstr "Не можна використовувати ключ сховища ключів %s."
 
-#: lib/setup.c:5758
+#: lib/setup.c:5774
 msgid "Incorrect root hash specified for verity device."
 msgstr "Для пристрою перевірки вказано помилковий кореневий хеш."
 
-#: lib/setup.c:5799 lib/setup.c:5824
+#: lib/setup.c:5815 lib/setup.c:5840
 msgid "OPAL does not support deferred deactivation."
 msgstr "В OPAL не передбачено підтримки відкладеної деактивації."
 
-#: lib/setup.c:5814 lib/setup.c:5845 lib/luks2/luks2_json_metadata.c:2978
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
 #: src/utils_reencrypt.c:89
 #, c-format
 msgid "Device %s is still in use."
 msgstr "Пристрій %s все ще використовується."
 
-#: lib/setup.c:5832
+#: lib/setup.c:5848
 #, c-format
 msgid "Could not cancel deferred remove from device %s."
 msgstr "Не вдалося скасувати відкладене вилучення з пристрою %s."
 
-#: lib/setup.c:5854
+#: lib/setup.c:5870
 #, c-format
 msgid "Invalid device %s."
 msgstr "Некоректний пристрій %s."
 
-#: lib/setup.c:6001
+#: lib/setup.c:6017
 msgid "Volume key buffer too small."
 msgstr "Буфер ключів тому є занадто малим."
 
-#: lib/setup.c:6012
+#: lib/setup.c:6028
 msgid "Cannot retrieve volume key for LUKS2 device."
 msgstr "Неможливо отримати ключ тому для пристрою із шифруванням LUKS2."
 
-#: lib/setup.c:6021
+#: lib/setup.c:6037
 msgid "Cannot retrieve volume key for LUKS1 device."
 msgstr "Неможливо отримати ключ тому для пристрою із шифруванням LUKS1."
 
-#: lib/setup.c:6035
+#: lib/setup.c:6051
 msgid "Cannot retrieve volume key for plain device."
 msgstr "Неможливо отримати ключ тому для пристрою зі звичайним шифруванням."
 
-#: lib/setup.c:6043
+#: lib/setup.c:6059
 msgid "Cannot retrieve root hash for verity device."
 msgstr "Не вдалося отримати кореневий хеш для пристрою VERITY."
 
-#: lib/setup.c:6052
+#: lib/setup.c:6068
 msgid "Cannot retrieve volume key for BITLK device."
 msgstr "Неможливо отримати ключ тому для пристрою BITLK."
 
-#: lib/setup.c:6057
+#: lib/setup.c:6073
 msgid "Cannot retrieve volume key for FVAULT2 device."
 msgstr "Неможливо отримати ключ тому для пристрою FVAULT2."
 
-#: lib/setup.c:6059
+#: lib/setup.c:6075
 #, c-format
 msgid "This operation is not supported for %s crypt device."
 msgstr "Підтримки цієї дії для шифрованого пристрою %s не передбачено."
 
-#: lib/setup.c:6244 lib/setup.c:6255
+#: lib/setup.c:6260 lib/setup.c:6271
 msgid "Dump operation is not supported for this device type."
 msgstr "Підтримки дії зі створення дампу для цього типу пристроїв не передбачено."
 
-#: lib/setup.c:6635
+#: lib/setup.c:6651
 #, c-format
 msgid "Data offset is not multiple of %u bytes."
 msgstr "Зсув у даних не є кратним до %u байтів."
 
-#: lib/setup.c:6943
+#: lib/setup.c:6959
 #, c-format
 msgid "Cannot convert device %s which is still in use."
 msgstr "Не можна перетворити пристрій %s, який перебуває у користуванні."
 
-#: lib/setup.c:7251 lib/setup.c:7406
+#: lib/setup.c:7267 lib/setup.c:7422
 #, c-format
 msgid "Failed to assign keyslot %u as the new volume key."
 msgstr "Не вдалося прив'язати слот ключа %u як новий ключ тому."
 
-#: lib/setup.c:7275
+#: lib/setup.c:7291
 msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr "Не вдалося ініціалізувати типові параметри слоту ключів LUKS2."
 
-#: lib/setup.c:7281
+#: lib/setup.c:7297
 #, c-format
 msgid "Failed to assign keyslot %d to digest."
 msgstr "Не вдалося прив'язати слот ключа %d до контрольної суми."
 
-#: lib/setup.c:7523
+#: lib/setup.c:7539
 msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr "Не вдалося додати слот ключа, всі слоти вимкнено і не вказано ключа тому."
 
-#: lib/setup.c:7611 lib/setup.c:7626 lib/verity/verity.c:333
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
 msgid "Failed to load key in kernel keyring."
 msgstr "Не вдалося завантажити ключ до сховища ключів ядра."
 
-#: lib/setup.c:7807
+#: lib/setup.c:7823
 #, c-format
 msgid "Could not find keyring described by \"%s\"."
 msgstr "Не вдалося знайти сховище ключів, яке описано «%s»."
 
-#: lib/setup.c:7872
+#: lib/setup.c:7888
 msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr "Не вдалося створити загальне блокування серіалізації доступу до пам'яті."
 
@@ -787,7 +787,7 @@ msgid "Cannot read requested amount of data."
 msgstr "Не вдалося прочитати бажаний об’єм даних."
 
 #: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
-#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2257
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
 #, c-format
 msgid "Device %s does not exist or access denied."
 msgstr "Пристрою %s не існує або доступ до цього пристрою заборонено."
@@ -903,16 +903,16 @@ msgstr "Вказана кількість паралельних потоків
 msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr "У режимі FIPS передбачено підтримку лише PBKDF2."
 
-#: lib/utils_benchmark.c:171
+#: lib/utils_benchmark.c:175
 msgid "PBKDF benchmark disabled but iterations not set."
 msgstr "Тестування PBKDF вимкнено, але кількість ітерацій не встановлено."
 
-#: lib/utils_benchmark.c:190
+#: lib/utils_benchmark.c:194
 #, c-format
 msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr "Несумісні параметри PBKDF2 (з використанням алгоритму хешування %s)."
 
-#: lib/utils_benchmark.c:210
+#: lib/utils_benchmark.c:214
 msgid "Not compatible PBKDF options."
 msgstr "Несумісні параметри PBKDF."
 
@@ -961,9 +961,9 @@ msgstr "Розмір ключа у режимі XTS має бути рівним
 msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr "Специфікацію шифрування слід вказувати так: [алгоритм]-[режим]-[iv]."
 
-#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:353
-#: lib/luks1/keymanage.c:664 lib/luks1/keymanage.c:1132
-#: lib/luks2/luks2_json_metadata.c:1518 lib/luks2/luks2_keyslot.c:711
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
 #, c-format
 msgid "Cannot write to device %s, permission denied."
 msgstr "Не вдалося виконати запис на пристрій %s, недостатні права доступу."
@@ -981,13 +981,13 @@ msgstr "Не вдалося отримати доступ до пристрою
 msgid "IO error while encrypting keyslot."
 msgstr "Помилка введення-виведення під час шифрування слоту ключів."
 
-#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:356
-#: lib/luks1/keymanage.c:617 lib/luks1/keymanage.c:667 lib/tcrypt/tcrypt.c:659
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
 #: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
 #: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
 #: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
 #: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
-#: lib/luks2/luks2_json_metadata.c:1521 src/utils_reencrypt_luks1.c:108
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
 #: src/utils_reencrypt_luks1.c:120
 #, c-format
 msgid "Cannot open device %s."
@@ -1002,61 +1002,61 @@ msgstr "Помилка введення-виведення під час роз
 msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr "Обсяг пристрою %s є надто малим. (LUKS1 потрібно принаймні %<PRIu64> байтів.)"
 
-#: lib/luks1/keymanage.c:138 lib/luks1/keymanage.c:146
-#: lib/luks1/keymanage.c:158 lib/luks1/keymanage.c:169
-#: lib/luks1/keymanage.c:181
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
 #, c-format
 msgid "LUKS keyslot %u is invalid."
 msgstr "Слот ключа LUKS %u є некоректним."
 
-#: lib/luks1/keymanage.c:254 lib/luks2/luks2_json_metadata.c:1382
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
 #, c-format
 msgid "Requested header backup file %s already exists."
 msgstr "Потрібний вам файл резервної копії заголовка, %s, вже існує."
 
-#: lib/luks1/keymanage.c:256 lib/luks2/luks2_json_metadata.c:1384
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
 #, c-format
 msgid "Cannot create header backup file %s."
 msgstr "Не вдалося створити файл резервної копії заголовка, %s."
 
-#: lib/luks1/keymanage.c:263 lib/luks2/luks2_json_metadata.c:1391
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
 #, c-format
 msgid "Cannot write header backup file %s."
 msgstr "Не вдалося записати файл резервної копії заголовка, %s."
 
-#: lib/luks1/keymanage.c:295 lib/luks2/luks2_json_metadata.c:1428
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
 msgid "Backup file does not contain valid LUKS header."
 msgstr "Файл резервної копії не містить коректного заголовка LUKS."
 
-#: lib/luks1/keymanage.c:308 lib/luks1/keymanage.c:580
-#: lib/luks2/luks2_json_metadata.c:1450
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
 #, c-format
 msgid "Cannot open header backup file %s."
 msgstr "Не вдалося відкрити файл резервної копії заголовка, %s."
 
-#: lib/luks1/keymanage.c:316 lib/luks2/luks2_json_metadata.c:1458
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
 #, c-format
 msgid "Cannot read header backup file %s."
 msgstr "Не вдалося прочитати дані з файла резервної копії заголовка, %s."
 
-#: lib/luks1/keymanage.c:326
+#: lib/luks1/keymanage.c:331
 msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr "Відступ у даних або розмір ключа на пристрої і у резервній копії є різними. Відновлення неможливе."
 
-#: lib/luks1/keymanage.c:334
+#: lib/luks1/keymanage.c:339
 #, c-format
 msgid "Device %s %s%s"
 msgstr "Пристрій %s %s%s"
 
-#: lib/luks1/keymanage.c:335
+#: lib/luks1/keymanage.c:340
 msgid "does not contain LUKS header. Replacing header can destroy data on that device."
 msgstr "не містить заголовка LUKS. Заміна заголовка може зруйнувати дані, що зберігаються на пристрої."
 
-#: lib/luks1/keymanage.c:336
+#: lib/luks1/keymanage.c:341
 msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
 msgstr "вже містить заголовок LUKS. Заміна заголовка призведе до руйнування вже створених слотів ключів."
 
-#: lib/luks1/keymanage.c:337 lib/luks2/luks2_json_metadata.c:1490
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
 msgid ""
 "\n"
 "WARNING: real device header has different UUID than backup!"
@@ -1064,130 +1064,130 @@ msgstr ""
 "\n"
 "ПОПЕРЕДЖЕННЯ: заголовок, що зберігається на пристрої, має інший UUID, ніж заголовок у резервній копії!"
 
-#: lib/luks1/keymanage.c:385
+#: lib/luks1/keymanage.c:390
 msgid "Non standard key size, manual repair required."
 msgstr "Нестандартний розмір ключа, слід виправити дані вручну."
 
-#: lib/luks1/keymanage.c:395
+#: lib/luks1/keymanage.c:400
 msgid "Non standard keyslots alignment, manual repair required."
 msgstr "Нестандартне вирівнювання слотів ключів, слід виправити дані вручну."
 
-#: lib/luks1/keymanage.c:404
+#: lib/luks1/keymanage.c:409
 #, c-format
 msgid "Cipher mode repaired (%s -> %s)."
 msgstr "Виправлений режим шифрування (%s -> %s)."
 
-#: lib/luks1/keymanage.c:415
+#: lib/luks1/keymanage.c:420
 #, c-format
 msgid "Cipher hash repaired to lowercase (%s)."
 msgstr "Виправлений хеш шифрування малими літерами (%s)."
 
-#: lib/luks1/keymanage.c:417 lib/luks1/keymanage.c:523
-#: lib/luks1/keymanage.c:756
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
 #, c-format
 msgid "Requested LUKS hash %s is not supported."
 msgstr "Підтримки бажаного хешування LUKS, %s, не передбачено."
 
-#: lib/luks1/keymanage.c:431
+#: lib/luks1/keymanage.c:436
 msgid "Repairing keyslots."
 msgstr "Виправлення слотів ключів."
 
-#: lib/luks1/keymanage.c:450
+#: lib/luks1/keymanage.c:455
 #, c-format
 msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr "Слот ключа %i: виправлено відступ (%u -> %u)."
 
-#: lib/luks1/keymanage.c:458
+#: lib/luks1/keymanage.c:463
 #, c-format
 msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr "Слот ключа %i: виправлено смужки (%u -> %u)."
 
-#: lib/luks1/keymanage.c:467
+#: lib/luks1/keymanage.c:472
 #, c-format
 msgid "Keyslot %i: bogus partition signature."
 msgstr "Слот ключа %i: зайвий підпис розділу."
 
-#: lib/luks1/keymanage.c:472
+#: lib/luks1/keymanage.c:477
 #, c-format
 msgid "Keyslot %i: salt wiped."
 msgstr "Слот ключа %i: дані ініціалізації (сіль) витерто."
 
-#: lib/luks1/keymanage.c:489
+#: lib/luks1/keymanage.c:494
 msgid "Writing LUKS header to disk."
 msgstr "Запис заголовка LUKS на диск."
 
-#: lib/luks1/keymanage.c:494
+#: lib/luks1/keymanage.c:499
 msgid "Repair failed."
 msgstr "Спроба виправлення зазнала невдачі."
 
-#: lib/luks1/keymanage.c:549
+#: lib/luks1/keymanage.c:554
 #, c-format
 msgid "LUKS cipher mode %s is invalid."
 msgstr "Режим шифрування LUKS %s є некоректним."
 
-#: lib/luks1/keymanage.c:554
+#: lib/luks1/keymanage.c:559
 #, c-format
 msgid "LUKS hash %s is invalid."
 msgstr "Хеш-сума LUKS %s є некоректною."
 
-#: lib/luks1/keymanage.c:561 src/cryptsetup.c:1367
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
 msgid "No known problems detected for LUKS header."
 msgstr "У заголовку LUKS не виявлено жодних проблем."
 
-#: lib/luks1/keymanage.c:689
+#: lib/luks1/keymanage.c:690
 #, c-format
 msgid "Error during update of LUKS header on device %s."
 msgstr "Помилка під час оновлення заголовка LUKS на пристрої %s."
 
-#: lib/luks1/keymanage.c:697
+#: lib/luks1/keymanage.c:698
 #, c-format
 msgid "Error re-reading LUKS header after update on device %s."
 msgstr "Помилка під час спроби повторного читання заголовка LUKS після оновлення на пристрої %s."
 
-#: lib/luks1/keymanage.c:750
+#: lib/luks1/keymanage.c:751
 msgid "Data offset for LUKS header must be either 0 or higher than header size."
 msgstr "Відступ даних для заголовка LUKS має бути або рівним нулеві, або перевищувати розмір заголовка."
 
-#: lib/luks1/keymanage.c:761 lib/luks1/keymanage.c:832
-#: lib/luks2/luks2_json_format.c:231 lib/luks2/luks2_json_metadata.c:1261
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
 #: src/utils_reencrypt.c:703
 msgid "Wrong LUKS UUID format provided."
 msgstr "Вказано UUID LUKS у помилковому форматі."
 
-#: lib/luks1/keymanage.c:783
+#: lib/luks1/keymanage.c:784
 msgid "Cannot create LUKS header: reading random salt failed."
 msgstr "Не вдалося створити заголовок LUKS: помилка читання випадкових даних для ініціалізації."
 
-#: lib/luks1/keymanage.c:811
+#: lib/luks1/keymanage.c:812
 #, c-format
 msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr "Не вдалося створити заголовок LUKS: помилка під час обчислення контрольної суми заголовка (з використанням хешу %s)."
 
-#: lib/luks1/keymanage.c:856
+#: lib/luks1/keymanage.c:857
 #, c-format
 msgid "Key slot %d active, purge first."
 msgstr "Слот ключа %d є активним. Його слід спочатку спорожнити."
 
-#: lib/luks1/keymanage.c:862
+#: lib/luks1/keymanage.c:863
 #, c-format
 msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr "Ентропія даних слота ключа %d є надто низькою. Маніпуляції з заголовком?"
 
-#: lib/luks1/keymanage.c:900 lib/luks2/luks2_keyslot_luks2.c:217
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
 msgid "PBKDF2 iteration value overflow."
 msgstr "Переповнення значення ітерації PBKDF2."
 
-#: lib/luks1/keymanage.c:1022
+#: lib/luks1/keymanage.c:1023
 #, c-format
 msgid "Cannot open keyslot (using hash %s)."
 msgstr "Не вдалося відкрити слот ключа (за допомогою хешу %s)."
 
-#: lib/luks1/keymanage.c:1118
+#: lib/luks1/keymanage.c:1119
 #, c-format
 msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr "Слот ключа %d є некоректним, будь ласка, виберіть слот ключа з номером від 0 до %d."
 
-#: lib/luks1/keymanage.c:1136 lib/luks2/luks2_keyslot.c:715
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
 #, c-format
 msgid "Cannot wipe device %s."
 msgstr "Не вдалося витерти пристрій %s."
@@ -1365,33 +1365,33 @@ msgstr "Підтримки цієї дії не передбачено."
 msgid "Unexpected key data size."
 msgstr "Неочікуваний розмір даних ключа."
 
-#: lib/bitlk/bitlk.c:1442
+#: lib/bitlk/bitlk.c:1448
 msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr "Цей пристрій BITLK перебуває у непідтримуваному стані — його неможливо активувати."
 
-#: lib/bitlk/bitlk.c:1447
+#: lib/bitlk/bitlk.c:1453
 #, c-format
 msgid "BITLK devices with type '%s' cannot be activated."
 msgstr "Пристрої BITLK типу «%s» неможливо активувати."
 
-#: lib/bitlk/bitlk.c:1486
+#: lib/bitlk/bitlk.c:1492
 #, c-format
 msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
 msgstr "УВАГА: розмір тому BitLocker %<PRIu64> не відповідає розміру базового пристрою %<PRIu64>"
 
-#: lib/bitlk/bitlk.c:1613
+#: lib/bitlk/bitlk.c:1634
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr "Не вдалося активувати пристрій — у dm-crypt ядра немає підтримки BITLK IV."
 
-#: lib/bitlk/bitlk.c:1617
+#: lib/bitlk/bitlk.c:1638
 msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
 msgstr "Не вдалося активувати пристрій — у dm-crypt ядра немає підтримки дифузера Elephant BITLK."
 
-#: lib/bitlk/bitlk.c:1621
+#: lib/bitlk/bitlk.c:1642
 msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
 msgstr "Не вдалося активувати пристрій — у dm-crypt ядра немає підтримки великого розміру секторів."
 
-#: lib/bitlk/bitlk.c:1625
+#: lib/bitlk/bitlk.c:1646
 msgid "Cannot activate device, kernel dm-zero module is missing."
 msgstr "Не вдалося активувати пристрій — немає модуля ядра dm-zero."
 
@@ -1548,24 +1548,24 @@ msgstr "Не вдалося визначити розмір для пристр
 msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
 msgstr "Виявлено несумісні метадані dm-integrity ядра (версія %u) у %s."
 
-#: lib/integrity/integrity.c:308 lib/integrity/integrity.c:492
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
 msgid "Kernel does not support dm-integrity mapping."
 msgstr "У ядрі не передбачено підтримки прив'язки dm-integrity."
 
-#: lib/integrity/integrity.c:314
+#: lib/integrity/integrity.c:315
 msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr "У ядрі не передбачено підтримки вирівнювання фіксованих метаданих dm-integrity."
 
-#: lib/integrity/integrity.c:323
+#: lib/integrity/integrity.c:324
 msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
 msgstr "Ядром відмовлено у активації небезпечного параметра повторного обчислення (див. застарілі параметри активації, щоб скористатися обчисленням попри це)."
 
-#: lib/integrity/integrity.c:329
+#: lib/integrity/integrity.c:330
 msgid "Kernel does not support dm-integrity inline mode."
 msgstr "У ядрі не передбачено підтримки вбудованого режиму dm-integrity."
 
 #: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
-#: lib/luks2/luks2_json_metadata.c:1510
+#: lib/luks2/luks2_json_metadata.c:1502
 #, c-format
 msgid "Failed to acquire write lock on device %s."
 msgstr "Не вдалося отримати блокування запису на пристрої %s."
@@ -1587,22 +1587,22 @@ msgstr ""
 msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
 msgstr "Увага: область слоту ключів є надто малою (%<PRIu64> байтів), доступна кількість слотів ключів LUKS2 буде дуже обмеженою.\n"
 
-#: lib/luks2/luks2_json_format.c:418
+#: lib/luks2/luks2_json_format.c:427
 msgid "Requested data offset is too small."
 msgstr "Вказаний відступ у даних є надто малим."
 
-#: lib/luks2/luks2_json_format.c:459
+#: lib/luks2/luks2_json_format.c:468
 #, c-format
 msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr "Увага: розмір метаданих LUKS2 змінено до %<PRIu64> байтів.\n"
 
-#: lib/luks2/luks2_json_format.c:463
+#: lib/luks2/luks2_json_format.c:472
 #, c-format
 msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr "Увага: розмір області слотів ключів LUKS2 змінено до %<PRIu64> байтів.\n"
 
 #: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
-#: lib/luks2/luks2_json_metadata.c:1417 lib/luks2/luks2_keyslot_luks2.c:71
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
 #, c-format
 msgid "Failed to acquire read lock on device %s."
 msgstr "Не вдалося отримати блокування читання на пристрої %s."
@@ -1611,33 +1611,33 @@ msgstr "Не вдалося отримати блокування читання
 msgid "Label is too long."
 msgstr "Мітка є надто довгою."
 
-#: lib/luks2/luks2_json_metadata.c:1435
+#: lib/luks2/luks2_json_metadata.c:1427
 #, c-format
 msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr "У резервній копії %s виявлено заборонені вимоги щодо LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:1474
+#: lib/luks2/luks2_json_metadata.c:1466
 msgid "Data offset differ on device and backup, restore failed."
 msgstr "Зсуви даних на пристрої і на резервній копії різняться, не вдалося відновити."
 
-#: lib/luks2/luks2_json_metadata.c:1480
+#: lib/luks2/luks2_json_metadata.c:1472
 msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
 msgstr "Двійкові заголовки із розмірами областей слотів ключів на пристрої і у резервній копії різняться, не вдалося відновити копію."
 
-#: lib/luks2/luks2_json_metadata.c:1487
+#: lib/luks2/luks2_json_metadata.c:1479
 #, c-format
 msgid "Device %s %s%s%s%s"
 msgstr "Пристрій %s %s%s%s%s"
 
-#: lib/luks2/luks2_json_metadata.c:1488
+#: lib/luks2/luks2_json_metadata.c:1480
 msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
 msgstr "не містить заголовка LUKS2. Заміна заголовка може зруйнувати дані, що зберігаються на пристрої."
 
-#: lib/luks2/luks2_json_metadata.c:1489
+#: lib/luks2/luks2_json_metadata.c:1481
 msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
 msgstr "вже містить заголовок LUKS2. Заміна заголовка призведе до руйнування вже створених слотів ключів."
 
-#: lib/luks2/luks2_json_metadata.c:1491
+#: lib/luks2/luks2_json_metadata.c:1483
 msgid ""
 "\n"
 "WARNING: unknown LUKS2 requirements detected in real device header!\n"
@@ -1647,7 +1647,7 @@ msgstr ""
 "ПОПЕРЕДЖЕННЯ: виявлено невідомі вимоги LUKS2 у справжньому заголовку пристрою!\n"
 "Заміна заголовка резервною копією може пошкодити дані на пристрої!"
 
-#: lib/luks2/luks2_json_metadata.c:1493
+#: lib/luks2/luks2_json_metadata.c:1485
 msgid ""
 "\n"
 "WARNING: Unfinished offline reencryption detected on the device!\n"
@@ -1657,84 +1657,84 @@ msgstr ""
 "ПОПЕРЕДЖЕННЯ: на пристрої виявлено дані незавершеного повторного шифрування!\n"
 "Заміна заголовка заголовком із резервної копії може пошкодити дані."
 
-#: lib/luks2/luks2_json_metadata.c:1591
+#: lib/luks2/luks2_json_metadata.c:1583
 #, c-format
 msgid "Ignored unknown flag %s."
 msgstr "Проігноровано невідомий прапорець %s."
 
-#: lib/luks2/luks2_json_metadata.c:2563 lib/luks2/luks2_reencrypt.c:2110
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
 #, c-format
 msgid "Missing key for dm-crypt segment %u"
 msgstr "Не вистачає ключа для сегмента dm-crypt %u"
 
-#: lib/luks2/luks2_json_metadata.c:2575 lib/luks2/luks2_reencrypt.c:2123
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
 msgid "Failed to set dm-crypt segment."
 msgstr "Не вдалося встановити сегмент dm-crypt."
 
-#: lib/luks2/luks2_json_metadata.c:2581 lib/luks2/luks2_reencrypt.c:2129
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
 msgid "Failed to set dm-linear segment."
 msgstr "Не вдалося встановити сегмент dm-linear."
 
-#: lib/luks2/luks2_json_metadata.c:2701 src/utils_reencrypt.c:580
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
 msgid "No known cipher specification pattern detected in LUKS2 header."
 msgstr "Не виявлено жодного відомого зразка специфікації шифрування у заголовку LUKS."
 
-#: lib/luks2/luks2_json_metadata.c:2709
+#: lib/luks2/luks2_json_metadata.c:2701
 msgid "OPAL device must have static device size."
 msgstr "Пристій OPAL повинен мати статичний розмір пристрою."
 
-#: lib/luks2/luks2_json_metadata.c:2729
+#: lib/luks2/luks2_json_metadata.c:2721
 msgid "Encrypted OPAL device with integrity must be smaller than locking range."
 msgstr "Зашифрований пристрій OPAL із механізмами цілісності має бути меншим за діапазон блокування."
 
-#: lib/luks2/luks2_json_metadata.c:2734
+#: lib/luks2/luks2_json_metadata.c:2726
 msgid "OPAL device must have same size as locking range."
 msgstr "Пристрій OPAL повинен мати той самий розмір, що і діапазон блокування."
 
-#: lib/luks2/luks2_json_metadata.c:2754
+#: lib/luks2/luks2_json_metadata.c:2746
 #, c-format
 msgid "OPAL device is %s already unlocked.\n"
 msgstr "Пристрій OPAL %s вже розблоковано.\n"
 
-#: lib/luks2/luks2_json_metadata.c:2793
+#: lib/luks2/luks2_json_metadata.c:2785
 msgid "Unsupported device integrity configuration."
 msgstr "Непідтримувані налаштування цілісності даних на пристрої."
 
-#: lib/luks2/luks2_json_metadata.c:2809
+#: lib/luks2/luks2_json_metadata.c:2801
 msgid "Underlying dm-integrity device with unexpected provided data sectors."
 msgstr "Базовий пристрій dm-integrity із неочікуваними наданими секторами даних."
 
-#: lib/luks2/luks2_json_metadata.c:2911
+#: lib/luks2/luks2_json_metadata.c:2903
 msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr "Виконуємо повторне шифрування. Не можна деактивувати пристрій."
 
-#: lib/luks2/luks2_json_metadata.c:2922 lib/luks2/luks2_reencrypt.c:4287
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
 #, c-format
 msgid "Failed to replace suspended device %s with dm-error target."
 msgstr "Не вдалося замінити пристрій %s, роботу якого призупинено, ціллю dm-error."
 
-#: lib/luks2/luks2_json_metadata.c:3001 lib/luks2/luks2_json_metadata.c:3023
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
 #, c-format
 msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
 msgstr "Пристрій %s було деактивовано, але апаратний пристрій OPAL не може бути заблоковано."
 
-#: lib/luks2/luks2_json_metadata.c:3045
+#: lib/luks2/luks2_json_metadata.c:3037
 msgid "Unmet LUKS2 requirements detected."
 msgstr "Виявлено невідповідність вимог LUKS2."
 
-#: lib/luks2/luks2_json_metadata.c:3053
+#: lib/luks2/luks2_json_metadata.c:3045
 msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr "Дія є несумісною із пристроєм, який позначено для перешифрування застарілого варіанта. Перериваємо дію."
 
-#: lib/luks2/luks2_json_metadata.c:3055
+#: lib/luks2/luks2_json_metadata.c:3047
 msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr "Дія є несумісною із пристроєм, який позначено для перешифрування LUKS2. Перериваємо дію."
 
-#: lib/luks2/luks2_json_metadata.c:3057
+#: lib/luks2/luks2_json_metadata.c:3049
 msgid "Operation incompatible with device using OPAL. Aborting."
 msgstr "Дія є несумісною із пристроєм з використанням OPAL. Перериваємо дію."
 
-#: lib/luks2/luks2_json_metadata.c:3059
+#: lib/luks2/luks2_json_metadata.c:3051
 msgid "Operation incompatible with device using inline HW tags. Aborting."
 msgstr "Дія є несумісною із пристроєм з використанням вбудованих апаратних міток. Перериваємо дію."
 
@@ -1801,60 +1801,60 @@ msgstr "Не вдалося використати специфікацію ши
 msgid "Unable to move keyslot area. Not enough space."
 msgstr "Не вдалося пересунути область слотів ключів. Недостатньо місця."
 
-#: lib/luks2/luks2_luks1_convert.c:619
+#: lib/luks2/luks2_luks1_convert.c:627
 msgid "Cannot convert to LUKS2 format - invalid metadata."
 msgstr "Не вдалося перетворити до формату LUKS2 - некоректні метадані."
 
-#: lib/luks2/luks2_luks1_convert.c:636
+#: lib/luks2/luks2_luks1_convert.c:644
 msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr "Не вдалося пересунути область слотів ключів. Область слотів ключів LUKS2 є надто малою."
 
-#: lib/luks2/luks2_luks1_convert.c:642 lib/luks2/luks2_luks1_convert.c:972
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
 msgid "Unable to move keyslot area."
 msgstr "Не вдалося пересунути область слотів ключів."
 
-#: lib/luks2/luks2_luks1_convert.c:757
+#: lib/luks2/luks2_luks1_convert.c:765
 msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
 msgstr "Не вдалося перетворити на формат LUKS1 — типовий розмір сектору шифрування сегмента не дорівнює 512 байтам."
 
-#: lib/luks2/luks2_luks1_convert.c:765
+#: lib/luks2/luks2_luks1_convert.c:773
 msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr "Не вдалося перетворити до формату LUKS1 — контрольні суми слотів ключів не сумісні з LUKS1."
 
-#: lib/luks2/luks2_luks1_convert.c:779
+#: lib/luks2/luks2_luks1_convert.c:787
 #, c-format
 msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr "Не вдалося перетворити до формату LUKS1 — на пристрої використовується загорнуте шифрування ключів %s."
 
-#: lib/luks2/luks2_luks1_convert.c:784
+#: lib/luks2/luks2_luks1_convert.c:792
 msgid "Cannot convert to LUKS1 format - device uses more segments."
 msgstr "Не вдалося перетворити до формату LUKS1 — на пристрої використовується більше сегментів."
 
-#: lib/luks2/luks2_luks1_convert.c:792
+#: lib/luks2/luks2_luks1_convert.c:800
 #, c-format
 msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr "Не вдалося перетворити до формату LUKS1 - заголовок LUKS2 містить %u жетонів."
 
-#: lib/luks2/luks2_luks1_convert.c:798
+#: lib/luks2/luks2_luks1_convert.c:806
 msgid "Cannot convert to LUKS1 format - there are no active keyslots."
 msgstr "Не вдалося перетворити до формату LUKS1 — немає активних слотів ключів."
 
-#: lib/luks2/luks2_luks1_convert.c:810
+#: lib/luks2/luks2_luks1_convert.c:818
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr "Не вдалося перетворити до формату LUKS1 - слот ключа %u перебуває у некоректному стані."
 
-#: lib/luks2/luks2_luks1_convert.c:815
+#: lib/luks2/luks2_luks1_convert.c:823
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
 msgstr "Не вдалося перетворити до формату LUKS1 - слот ключів %u є неприв'язаним."
 
-#: lib/luks2/luks2_luks1_convert.c:820
+#: lib/luks2/luks2_luks1_convert.c:828
 #, c-format
 msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
 msgstr "Не вдалося перетворити до формату LUKS1 — слот %u (перевищує максимальну кількість слотів) усе ще є активним."
 
-#: lib/luks2/luks2_luks1_convert.c:825
+#: lib/luks2/luks2_luks1_convert.c:833
 #, c-format
 msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr "не вдалося перетворити до формату LUKS1 — слот ключів %u є несумісним з LUKS1."
@@ -2139,7 +2139,7 @@ msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encry
 msgstr "Параметри шифрування слоту ключів є несумісними із шифруванням слотів ключів LUKS2."
 
 #: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
-#: src/utils_reencrypt.c:1890 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
 #: src/utils_reencrypt_luks1.c:565
 msgid "No known cipher specification pattern detected."
 msgstr "Не виявлено жодного відомого зразка специфікації шифрування."
@@ -2167,7 +2167,7 @@ msgid "WARNING: The --keyfile-size option is being ignored, the read size is the
 msgstr "Попередження: параметр --keyfile-size проігноровано, розмір прочитаних даних збігається із розміром ключа шифрування.\n"
 
 #: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
-#: src/integritysetup.c:189 src/utils_reencrypt.c:2141
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
 #, c-format
 msgid "Blkid scan failed for %s."
 msgstr "Помилка сканування Blkid для %s."
@@ -2249,7 +2249,7 @@ msgstr "Пристрій %s не є коректним пристроєм FVAULT
 msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
 msgstr "Неможливо визначити розмір ключа тому для FVAULT2. Будь ласка, скористайтеся параметром --key-size."
 
-#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:422
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
 #, c-format
 msgid "Device %s is still active and scheduled for deferred removal.\n"
 msgstr "Пристрій %s усе ще є активним, його заплановано для відкладеного вилучення.\n"
@@ -2438,7 +2438,7 @@ msgid "LUKS file container %s is too small for activation, there is no remaining
 msgstr "Контейнер файлів LUKS %s є надто малим для активації, на ньому не лишиться місця для даних."
 
 #: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
-#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1910
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
 msgstr "Неможливо визначити розмір ключа тому для LUKS без слотів ключів. Будь ласка, скористайтеся параметром --key-size."
 
@@ -2733,7 +2733,7 @@ msgstr "Параметр --volume-key-keyring не можна поєднуват
 msgid "Both --volume-key-file options must be paired with respective --key-size options."
 msgstr "Обидва параметри --volume-key-file має бути поєднано із відповідними параметрами --key-size."
 
-#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:793
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
 msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
 msgstr "Не можна одночасно використовувати параметр --cancel-deferred і --deferred."
 
@@ -2801,21 +2801,21 @@ msgstr "Дія потребує зазначення слоту ключа. Ск
 msgid "<device> [--type <type>] [<name>]"
 msgstr "<пристрій> [--type <тип>] [<назва>]"
 
-#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:560
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
 msgid "open device as <name>"
 msgstr "відкрити пристрій як <назва>"
 
 #: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
-#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:561
-#: src/integritysetup.c:562 src/integritysetup.c:564
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
 msgid "<name>"
 msgstr "<назва>"
 
-#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:561
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
 msgid "close device (remove mapping)"
 msgstr "закрити пристрій (вилучити призначення)"
 
-#: src/cryptsetup.c:3484 src/integritysetup.c:564
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
 msgid "resize active device"
 msgstr "змінити розмір активного пристрою"
 
@@ -2943,7 +2943,7 @@ msgstr "<add|remove|import|export> <пристрій>"
 msgid "Manipulate LUKS2 tokens"
 msgstr "Керування жетонами LUKS2"
 
-#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:579
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
 msgid ""
 "\n"
 "<action> is one of:\n"
@@ -3045,7 +3045,7 @@ msgstr ""
 msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
 msgstr "\tLUKS: типовий розмір ключа у режимі XTS (два вбудованих ключа) буде подвоєно.\n"
 
-#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:739
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
 #, c-format
 msgid "%s: requires %s as arguments"
 msgstr "%s: слід вказати у параметрах %s"
@@ -3096,31 +3096,31 @@ msgstr "Значенням для параметра --priority може бут
 msgid "Invalid maximal tries specification."
 msgstr "Некоректна специфікація максимальної кількості спроб."
 
-#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:659
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
 msgid "Show this help message"
 msgstr "Показати цю довідку"
 
-#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:660
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
 msgid "Display brief usage"
 msgstr "Показати короткі настанови щодо користування"
 
-#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:661
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
 msgid "Print package version"
 msgstr "Вивести дані щодо версії пакунка"
 
-#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:672
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
 msgid "Help options:"
 msgstr "Пункти довідки:"
 
-#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:692
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
 msgid "[OPTION...] <action> <action-specific>"
 msgstr "[ПАРАМЕТР...] <дія> <параметри_дії>"
 
-#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:703
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
 msgid "Argument <action> missing."
 msgstr "Не вказано аргумент <дія>."
 
-#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:734
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
 msgid "Unknown action."
 msgstr "Невідома дія."
 
@@ -3225,7 +3225,7 @@ msgstr "Для виконання команди потрібен <корене
 msgid "<data_device> <hash_device>"
 msgstr "<пристрій_даних> <пристрій_хешу>"
 
-#: src/veritysetup.c:485 src/integritysetup.c:559
+#: src/veritysetup.c:485 src/integritysetup.c:562
 msgid "format device"
 msgstr "форматувати пристрій"
 
@@ -3241,7 +3241,7 @@ msgstr "перевірити пристрій"
 msgid "<data_device> <name> <hash_device> [<root_hash>]"
 msgstr "<пристрій_даних> <назва> <пристрій_хешу> [<кореневий_хеш>]"
 
-#: src/veritysetup.c:489 src/integritysetup.c:562
+#: src/veritysetup.c:489 src/integritysetup.c:565
 msgid "show active device status"
 msgstr "показати стан активного пристрою"
 
@@ -3249,7 +3249,7 @@ msgstr "показати стан активного пристрою"
 msgid "<hash_device>"
 msgstr "<пристрій_хешу>"
 
-#: src/veritysetup.c:490 src/integritysetup.c:563
+#: src/veritysetup.c:490 src/integritysetup.c:566
 msgid "show on-disk information"
 msgstr "показати вбудовані дані"
 
@@ -3313,20 +3313,20 @@ msgstr " (вбудовані апаратні мітки)"
 msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
 msgstr "Підтримки встановлення прапорця повторного обчислення не передбачено. Вам варто розглянути можливість використання --wipe."
 
-#: src/integritysetup.c:382 src/integritysetup.c:546
+#: src/integritysetup.c:382 src/integritysetup.c:549
 #, c-format
 msgid "Device %s is not a valid INTEGRITY device."
 msgstr "Пристрій %s не є коректним пристроєм INTEGRITY."
 
-#: src/integritysetup.c:559 src/integritysetup.c:563
+#: src/integritysetup.c:562 src/integritysetup.c:566
 msgid "<integrity_device>"
 msgstr "<пристрій_цілісності>"
 
-#: src/integritysetup.c:560
+#: src/integritysetup.c:563
 msgid "<integrity_device> <name>"
 msgstr "<пристрій_цілісності> <назва>"
 
-#: src/integritysetup.c:583
+#: src/integritysetup.c:586
 #, c-format
 msgid ""
 "\n"
@@ -3337,7 +3337,7 @@ msgstr ""
 "<назва> є пристроєм, який слід створити у %s\n"
 "<пристрій_цілісності> є пристроєм, на якому зберігаються дані із мітками цілісності\n"
 
-#: src/integritysetup.c:588
+#: src/integritysetup.c:591
 #, c-format
 msgid ""
 "\n"
@@ -3350,51 +3350,55 @@ msgstr ""
 "\tАлгоритм обчислення контрольної суми: %s\n"
 "\tМаксимальний розмір файла ключа: %d кБ\n"
 
-#: src/integritysetup.c:645
+#: src/integritysetup.c:648
 #, c-format
 msgid "Invalid --%s size. Maximum is %u bytes."
 msgstr "Некоректний розмір --%s. Максимальний розмір дорівнює %u байтів."
 
-#: src/integritysetup.c:748
+#: src/integritysetup.c:751
 msgid "Both key file and key size options must be specified."
 msgstr "Не можна одночасно вказувати параметри файла ключа і розміру ключа."
 
-#: src/integritysetup.c:752
+#: src/integritysetup.c:755
 msgid "Both journal integrity key file and key size options must be specified."
 msgstr "Не можна одночасно вказувати параметри файла ключа цілісності журналу і розміру ключа."
 
-#: src/integritysetup.c:755
+#: src/integritysetup.c:758
 msgid "Journal integrity algorithm must be specified if journal integrity key is used."
 msgstr "Якщо використано ключ цілісності журналу, має бути вказано алгоритм забезпечення цілісності журналу."
 
-#: src/integritysetup.c:759
+#: src/integritysetup.c:762
 msgid "Both journal encryption key file and key size options must be specified."
 msgstr "Не можна одночасно вказувати параметри файла ключа шифрування журналу і розміру ключа."
 
-#: src/integritysetup.c:762
+#: src/integritysetup.c:765
 msgid "Journal encryption algorithm must be specified if journal encryption key is used."
 msgstr "Якщо використано ключ шифрування журналу, має бути вказано алгоритм забезпечення шифрування журналу."
 
-#: src/integritysetup.c:766
+#: src/integritysetup.c:769
 msgid "Recovery and bitmap mode options are mutually exclusive."
 msgstr "Не можна поєднувати параметри відновлення і бітової карти."
 
-#: src/integritysetup.c:773
+#: src/integritysetup.c:776
 msgid "Journal options cannot be used in bitmap mode."
 msgstr "Параметри журналу у режимі бітової карти використовувати не можна."
 
-#: src/integritysetup.c:778
+#: src/integritysetup.c:781
 msgid "Bitmap options can be used only in bitmap mode."
 msgstr "Параметри бітової карти можна використовувати лише у режимі бітового карти."
 
-#: src/integritysetup.c:784
+#: src/integritysetup.c:787
 msgid "Inline mode cannot be combined with journal or bitmap options."
 msgstr "Вбудований режим не може бути поєднано із параметрами журналу або бітової карти."
 
-#: src/integritysetup.c:788
+#: src/integritysetup.c:791
 msgid "Inline mode cannot be combined with separate data device."
 msgstr "Вбудований режим не можна поєднувати із окремим пристроєм даних."
 
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "Відкидання за ключами можна вмикати лише з алгоритмами з ключами, подібними HMAC."
+
 #: src/utils_tools.c:105
 msgid ""
 "\n"
@@ -3745,7 +3749,7 @@ msgstr "Пристрій не у розшифруванні LUKS2. Конфлі
 msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
 msgstr "Пристрій перебуває у повторному шифруванні з використанням стійкості зсуву даних. Вказаний параметр --resilience не може бути застосовано."
 
-#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1927
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
 msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
 msgstr "Неможливо визначити розмір ключа тому для LUKS без слотів ключів. Будь ласка, скористайтеся параметром --new-key-size."
 
@@ -3779,7 +3783,7 @@ msgstr ""
 "Вказаний --sector-size %<PRIu32> є несумісним із суперблоком %s\n"
 "(розмір блоку: %<PRIu32> байтів), який виявлено на пристрої %s."
 
-#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2207
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
 msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
 msgstr "Шифрування без від'єднаного заголовка (--header) є неможливим без зменшення розміру пристрою зберігання даних (--reduce-device-size)."
 
@@ -3847,42 +3851,43 @@ msgstr "Не вдалося ініціалізувати повторне шиф
 msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
 msgstr "Підтримку розшифровування LUKS2 передбачено лише для пристроїв із від'єднаним заголовком (із встановленим нульовим відступом даних)."
 
-#: src/utils_reencrypt.c:1490
-msgid "No token could unlock the device."
-msgstr "Жоден жетон не змін розблокувати пристрій."
-
-#: src/utils_reencrypt.c:1522 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
 msgid "Not enough free keyslots for reencryption."
 msgstr "Недостатньо вільних слотів ключів для повторного шифрування."
 
-#: src/utils_reencrypt.c:1562
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "Жоден жетон не змін розблокувати пристрій."
+
+#: src/utils_reencrypt.c:1588
 msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
 msgstr "Файлом ключа або описом ключа у сховищі ключів можна користуватися лише з --key-slot, або якщо активним є лише один слот ключа."
 
-#: src/utils_reencrypt.c:1569 src/utils_reencrypt.c:1582
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
 #: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
 #, c-format
 msgid "Enter passphrase for key slot %d: "
 msgstr "Вкажіть пароль для слоту ключа %d: "
 
-#: src/utils_reencrypt.c:1879
+#: src/utils_reencrypt.c:1905
 #, c-format
 msgid "Switching data encryption cipher to %s.\n"
 msgstr "Перемикаємося на шифрування даних %s.\n"
 
-#: src/utils_reencrypt.c:1980 src/utils_reencrypt.c:2001
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
 msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
 msgstr "Скористайтеся --force-no-keyslots, щоб повторно зашифрувати пристрій із активними слотами ключів, передавши ключі тому безпосередньо."
 
-#: src/utils_reencrypt.c:1996
+#: src/utils_reencrypt.c:2022
 msgid "Option --new-volume-key-file must be paired with --new-key-size"
 msgstr "Параметр --new-volume-key-file має бути поєднано з --new-key-size"
 
-#: src/utils_reencrypt.c:2038
+#: src/utils_reencrypt.c:2064
 msgid "No data segment parameters changed. Reencryption aborted."
 msgstr "Не змінено параметри сегмента даних. Повторне шифрування перервано."
 
-#: src/utils_reencrypt.c:2075
+#: src/utils_reencrypt.c:2101
 msgid ""
 "Encryption sector size increase on offline device is not supported.\n"
 "Activate the device first or use --force-offline-reencrypt option (dangerous!)."
@@ -3890,7 +3895,7 @@ msgstr ""
 "Підтримки збільшення розміру сектора шифрування на вимкненому пристрої не передбачено.\n"
 "Спочатку активуйте пристрій або скористайтеся параметром --force-offline-reencrypt (небезпечно!)."
 
-#: src/utils_reencrypt.c:2117 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
 #: src/utils_reencrypt_luks1.c:759
 msgid ""
 "\n"
@@ -3899,58 +3904,58 @@ msgstr ""
 "\n"
 "Повторне шифрування перервано."
 
-#: src/utils_reencrypt.c:2122
+#: src/utils_reencrypt.c:2148
 msgid "Resuming LUKS reencryption in forced offline mode.\n"
 msgstr "Відновлюємо повторне шифрування LUKS у примусовому вимкненому режимі.\n"
 
-#: src/utils_reencrypt.c:2145
+#: src/utils_reencrypt.c:2171
 #, c-format
 msgid "Device %s contains broken LUKS metadata. Aborting operation."
 msgstr "На пристрої %s містяться пошкоджені метадані LUKS. Перериваємо дію."
 
-#: src/utils_reencrypt.c:2161 src/utils_reencrypt.c:2183
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
 #, c-format
 msgid "Device %s is already LUKS device. Aborting operation."
 msgstr "Пристрій %s вже є пристроєм LUKS. Перериваємо дію."
 
-#: src/utils_reencrypt.c:2189
+#: src/utils_reencrypt.c:2215
 #, c-format
 msgid "Device %s is already in LUKS reencryption. Aborting operation."
 msgstr "Пристрій %s вже перебуває у стані повторного шифрування LUKS. Перериваємо дію."
 
-#: src/utils_reencrypt.c:2272
+#: src/utils_reencrypt.c:2298
 msgid "LUKS2 decryption requires --header option."
 msgstr "Для розшифровування LUKS2 потрібен параметр --header."
 
-#: src/utils_reencrypt.c:2320
+#: src/utils_reencrypt.c:2346
 msgid "Command requires device as argument."
 msgstr "Комарні слід передати аргумент пристрою."
 
-#: src/utils_reencrypt.c:2333
+#: src/utils_reencrypt.c:2359
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS1."
 msgstr "Конфлікт версій. Пристрій %s є пристроєм LUKS1."
 
-#: src/utils_reencrypt.c:2339
+#: src/utils_reencrypt.c:2365
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
 msgstr "Конфлікт версій. Пристрій %s перебуває у стані повторного шифрування LUKS1."
 
-#: src/utils_reencrypt.c:2345
+#: src/utils_reencrypt.c:2371
 #, c-format
 msgid "Conflicting versions. Device %s is LUKS2."
 msgstr "Конфлікт версій. Пристрій %s є пристроєм LUKS2."
 
-#: src/utils_reencrypt.c:2351
+#: src/utils_reencrypt.c:2377
 #, c-format
 msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
 msgstr "Конфлікт версій. Пристрій %s перебуває у стані повторного шифрування LUKS2."
 
-#: src/utils_reencrypt.c:2357
+#: src/utils_reencrypt.c:2383
 msgid "LUKS2 reencryption already initialized. Aborting operation."
 msgstr "Вже ініційовано повторне шифрування LUKS2. Перериваємо виконання дії."
 
-#: src/utils_reencrypt.c:2364
+#: src/utils_reencrypt.c:2390
 msgid "Device reencryption not in progress."
 msgstr "Повторне шифрування пристрою не виконується."
 

From 807a6fa45304f1103421c0f059c64a237ae8b698 Mon Sep 17 00:00:00 2001
From: Alang Hsu <alang.hsu@gmail.com>
Date: Mon, 7 Sep 2026 08:06:08 +0200
Subject: [PATCH 215/244] po: add zh_TW.po (from translationproject.org)

---
 po/LINGUAS  |    1 +
 po/zh_TW.po | 4350 +++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 4351 insertions(+)
 create mode 100644 po/zh_TW.po

diff --git a/po/LINGUAS b/po/LINGUAS
index 519bd42de..baf9c3f42 100644
--- a/po/LINGUAS
+++ b/po/LINGUAS
@@ -20,3 +20,4 @@ sv
 uk
 vi
 zh_CN
+zh_TW
diff --git a/po/zh_TW.po b/po/zh_TW.po
new file mode 100644
index 000000000..42d3c83c8
--- /dev/null
+++ b/po/zh_TW.po
@@ -0,0 +1,4350 @@
+# Traditional Chinese Messages for cryptsetup
+# Copyright (C) 2026 Free Software Foundation, Inc.
+# This file is distributed under the same license as the cryptsetup package.
+# Alang Hsu <alang.hsu@gmail.com>, 2026.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: cryptsetup 2.8.8-rc0\n"
+"Report-Msgid-Bugs-To: cryptsetup@lists.linux.dev\n"
+"POT-Creation-Date: 2026-09-02 13:18+0200\n"
+"PO-Revision-Date: 2026-09-05 08:20+0800\n"
+"Last-Translator: Alang Hsu <alang.hsu@gmail.com>\n"
+"Language-Team: Chinese (traditional) <zh-l10n@lists.slat.org>\n"
+"Language: zh_TW\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Bugs: Report translation errors to the Language-Team address.\n"
+
+#: lib/libdevmapper.c:422
+msgid "Cannot initialize device-mapper, running as non-root user."
+msgstr "無法初始化 device-mapper，目前是以非 root 使用者身分執行。"
+
+#: lib/libdevmapper.c:425
+msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
+msgstr "無法初始化 device-mapper。核心模組 dm_mod 有載入嗎？"
+
+#: lib/libdevmapper.c:1129
+msgid "Requested deferred flag is not supported."
+msgstr "要求的 deferred 旗標不受支援。"
+
+#: lib/libdevmapper.c:1198
+#, c-format
+msgid "DM-UUID for device %s was truncated."
+msgstr "裝置 %s 的 DM-UUID 遭到截斷。"
+
+#: lib/libdevmapper.c:1602
+msgid "Unknown dm target type."
+msgstr "未知的 dm target 類型。"
+
+#: lib/libdevmapper.c:1729 lib/libdevmapper.c:1735 lib/libdevmapper.c:1854
+#: lib/libdevmapper.c:1857
+msgid "Requested dm-crypt performance options are not supported."
+msgstr "要求的 dm-crypt 效能選項不受支援。"
+
+#: lib/libdevmapper.c:1744 lib/libdevmapper.c:1750 lib/libdevmapper.c:1762
+msgid "Requested dm-verity data corruption handling options are not supported."
+msgstr "要求的 dm-verity 資料毀損處理選項不受支援。"
+
+#: lib/libdevmapper.c:1756
+msgid "Requested dm-verity tasklets option is not supported."
+msgstr "要求的 dm-verity tasklets 選項不受支援。"
+
+#: lib/libdevmapper.c:1768
+msgid "Requested dm-verity FEC options are not supported."
+msgstr "要求的 dm-verity FEC 選項不受支援。"
+
+#: lib/libdevmapper.c:1774
+msgid "Requested data integrity options are not supported."
+msgstr "要求的資料完整性選項不受支援。"
+
+#: lib/libdevmapper.c:1778
+msgid "Requested sector_size option is not supported."
+msgstr "要求的 sector_size 選項不受支援。"
+
+#: lib/libdevmapper.c:1783
+msgid "The device size is not multiple of the requested sector size."
+msgstr "裝置大小不是所要求磁區大小的倍數。"
+
+#: lib/libdevmapper.c:1787
+msgid "Requested integrity_key_size option is not supported."
+msgstr "要求的 integrity_key_size 選項不受支援。"
+
+#: lib/libdevmapper.c:1794 lib/libdevmapper.c:1800
+msgid "Requested automatic recalculation of integrity tags is not supported."
+msgstr "要求的完整性標籤自動重新計算不受支援。"
+
+#: lib/libdevmapper.c:1806 lib/libdevmapper.c:1860 lib/libdevmapper.c:1863
+#: lib/luks2/luks2_json_metadata.c:2791
+msgid "Discard/TRIM is not supported."
+msgstr "不支援 Discard/TRIM。"
+
+#: lib/libdevmapper.c:1812
+msgid "Requested dm-integrity bitmap mode is not supported."
+msgstr "要求的 dm-integrity 點陣圖模式不受支援。"
+
+#: lib/libdevmapper.c:1818
+msgid "Requested dm-integrity inline mode is not supported."
+msgstr "要求的 dm-integrity inline 模式不受支援。"
+
+#: lib/libdevmapper.c:2877
+#, c-format
+msgid "Failed to query dm-%s segment."
+msgstr "無法查詢 dm-%s 區段。"
+
+#: lib/random.c:60
+msgid ""
+"System is out of entropy while generating volume key.\n"
+"Please move mouse or type some text in another window to gather some random events.\n"
+msgstr ""
+"產生卷金鑰時系統熵不足。\n"
+"請移動滑鼠或在其他視窗輸入一些文字，以收集隨機事件。\n"
+
+#: lib/random.c:64
+#, c-format
+msgid "Generating key (%d%% done).\n"
+msgstr "正在產生金鑰（已完成 %d%%）。\n"
+
+#: lib/random.c:150
+msgid "Running in FIPS mode."
+msgstr "正在以 FIPS 模式執行。"
+
+#: lib/random.c:156
+msgid "Fatal error during RNG initialisation."
+msgstr "RNG 初始化期間發生嚴重錯誤。"
+
+#: lib/random.c:194
+msgid "Unknown RNG quality requested."
+msgstr "要求的 RNG 品質不明。"
+
+#: lib/random.c:199
+msgid "Error reading from RNG."
+msgstr "從 RNG 讀取時發生錯誤。"
+
+#: lib/setup.c:251
+msgid "OPAL support is disabled in libcryptsetup."
+msgstr "libcryptsetup 已停用 OPAL 支援。"
+
+#: lib/setup.c:253
+#, c-format
+msgid "Device %s or kernel does not support OPAL encryption."
+msgstr "裝置 %s 或核心不支援 OPAL 加密。"
+
+#: lib/setup.c:269
+msgid "Cannot initialize crypto RNG backend."
+msgstr "無法初始化加密 RNG 後端。"
+
+#: lib/setup.c:275
+msgid "Cannot initialize crypto backend."
+msgstr "無法初始化加密後端。"
+
+#: lib/setup.c:308 lib/setup.c:2779 lib/verity/verity.c:109
+#, c-format
+msgid "Hash algorithm %s not supported."
+msgstr "不支援雜湊演算法 %s。"
+
+#: lib/setup.c:311 lib/loopaes/loopaes.c:78
+#, c-format
+msgid "Key processing error (using hash %s)."
+msgstr "金鑰處理錯誤（使用雜湊 %s）。"
+
+#: lib/setup.c:392 lib/setup.c:429
+msgid "Cannot determine device type. Incompatible activation of device?"
+msgstr "無法判定裝置類型。裝置啟動不相容？"
+
+#: lib/setup.c:398 lib/setup.c:4193
+msgid "This operation is supported only for LUKS device."
+msgstr "此操作僅支援 LUKS 裝置。"
+
+#: lib/setup.c:435
+msgid "This operation is supported only for LUKS2 device."
+msgstr "此操作僅支援 LUKS2 裝置。"
+
+#: lib/setup.c:492 lib/luks2/luks2_reencrypt.c:3102
+msgid "All key slots full."
+msgstr "所有金鑰槽都已滿。"
+
+#: lib/setup.c:503
+#, c-format
+msgid "Key slot %d is invalid, please select between 0 and %d."
+msgstr "金鑰槽 %d 無效，請在 0 到 %d 之間選取。"
+
+#: lib/setup.c:509
+#, c-format
+msgid "Key slot %d is full, please select another one."
+msgstr "金鑰槽 %d 已滿，請選取其他金鑰槽。"
+
+#: lib/setup.c:534 lib/setup.c:3888
+msgid "Device size is not aligned to device logical block size."
+msgstr "裝置大小未對齊裝置邏輯區塊大小。"
+
+#: lib/setup.c:631
+#, c-format
+msgid "Header detected but device %s is too small."
+msgstr "偵測到標頭，但裝置 %s 太小。"
+
+#: lib/setup.c:672 lib/setup.c:3773 lib/setup.c:5288
+#: lib/luks2/luks2_reencrypt.c:3949 lib/luks2/luks2_reencrypt.c:4438
+msgid "This operation is not supported for this device type."
+msgstr "此操作不支援此裝置類型。"
+
+#: lib/setup.c:677
+msgid "Illegal operation with reencryption in-progress."
+msgstr "重新加密進行中，此操作不合法。"
+
+#: lib/setup.c:809
+msgid "Failed to rollback LUKS2 metadata in memory."
+msgstr "無法在記憶體中復原 LUKS2 中繼資料。"
+
+#: lib/setup.c:896 lib/luks1/keymanage.c:241 lib/luks1/keymanage.c:519
+#: lib/luks2/luks2_json_metadata.c:1365 src/cryptsetup.c:1780
+#: src/cryptsetup.c:1964 src/cryptsetup.c:2019 src/cryptsetup.c:2217
+#: src/cryptsetup.c:2362 src/cryptsetup.c:2640 src/cryptsetup.c:2954
+#: src/cryptsetup.c:3022 src/utils_reencrypt.c:2310
+#: src/utils_reencrypt_luks1.c:1137 tokens/ssh/cryptsetup-ssh.c:72
+#, c-format
+msgid "Device %s is not a valid LUKS device."
+msgstr "裝置 %s 不是有效的 LUKS 裝置。"
+
+#: lib/setup.c:899 lib/luks1/keymanage.c:522
+#, c-format
+msgid "Unsupported LUKS version %d."
+msgstr "不支援的 LUKS 版本 %d。"
+
+#: lib/setup.c:1279
+#, c-format
+msgid "No known cipher specification pattern detected for active device %s."
+msgstr "在啟用中的裝置 %s 上偵測不到已知的加密演算法規格模式。"
+
+#: lib/setup.c:1528 lib/setup.c:3520 lib/setup.c:3612 lib/setup.c:3624
+#: lib/setup.c:3796 lib/setup.c:5866
+#, c-format
+msgid "Device %s is not active."
+msgstr "裝置 %s 未啟用。"
+
+#: lib/setup.c:1545
+#, c-format
+msgid "Underlying device for crypt device %s disappeared."
+msgstr "加密裝置 %s 的底層裝置已消失。"
+
+#: lib/setup.c:1627
+msgid "Invalid plain crypt parameters."
+msgstr "無效的一般加密參數。"
+
+#: lib/setup.c:1632 lib/setup.c:2682
+msgid "Invalid key size."
+msgstr "無效的金鑰大小。"
+
+#: lib/setup.c:1637 lib/setup.c:2687 lib/setup.c:2892
+msgid "UUID is not supported for this crypt type."
+msgstr "此加密類型不支援 UUID。"
+
+#: lib/setup.c:1642 lib/setup.c:2692
+msgid "Detached metadata device is not supported for this crypt type."
+msgstr "此加密類型不支援分離式中繼資料裝置。"
+
+#: lib/setup.c:1652 lib/setup.c:1900 lib/luks2/luks2_reencrypt.c:3035
+#: src/cryptsetup.c:1492 src/cryptsetup.c:3761
+msgid "Unsupported encryption sector size."
+msgstr "不支援的加密磁區大小。"
+
+#: lib/setup.c:1660 lib/setup.c:1929 lib/setup.c:3882
+msgid "Device size is not aligned to requested sector size."
+msgstr "裝置大小未對齊要求的磁區大小。"
+
+#: lib/setup.c:1712 lib/setup.c:1964 lib/setup.c:2341
+msgid "Can't format LUKS without device."
+msgstr "沒有裝置就無法格式化 LUKS。"
+
+#: lib/setup.c:1717 lib/setup.c:1969
+#, c-format
+msgid "Zoned device %s cannot be used for LUKS header."
+msgstr "分區型裝置 %s 不能用於 LUKS 標頭。"
+
+#: lib/setup.c:1724 lib/setup.c:1976 lib/setup.c:2347
+msgid "Requested data alignment is not compatible with data offset."
+msgstr "要求的資料對齊與資料偏移量不相容。"
+
+#: lib/setup.c:1764 lib/setup.c:1994
+msgid "WARNING: DAX device can corrupt data as it does not guarantee atomic sector updates.\n"
+msgstr "警告：DAX 裝置可能毀損資料，因為它不保證磁區更新具原子性。\n"
+
+#: lib/setup.c:1802 lib/setup.c:2101 lib/setup.c:2122 lib/setup.c:2530
+#: lib/setup.c:2577 lib/setup.c:2909
+#, c-format
+msgid "Cannot wipe header on device %s."
+msgstr "無法清除裝置 %s 上的標頭。"
+
+#: lib/setup.c:1815 lib/setup.c:2174
+#, c-format
+msgid "Device %s is too small for activation, there is no remaining space for data.\n"
+msgstr "裝置 %s 太小，無法啟動，已無剩餘空間存放資料。\n"
+
+#: lib/setup.c:1856
+msgid "Volume key is too small for encryption with integrity extensions."
+msgstr "卷金鑰太小，無法搭配完整性延伸進行加密。"
+
+#: lib/setup.c:1860
+msgid "Integrity key size is too small."
+msgstr "完整性金鑰大小太小。"
+
+#: lib/setup.c:1869
+#, c-format
+msgid "Cipher %s-%s (key size %zd bits) is not available."
+msgstr "加密演算法 %s-%s（金鑰大小 %zd 位元）無法使用。"
+
+#: lib/setup.c:1910
+msgid "WARNING: The device activation will fail, dm-crypt is missing support for requested encryption sector size.\n"
+msgstr "警告：裝置啟動將失敗，dm-crypt 缺少對所要求加密磁區大小的支援。\n"
+
+#: lib/setup.c:2104 lib/setup.c:2471 lib/setup.c:2533 lib/utils_device.c:906
+#: lib/luks1/keyencryption.c:245 lib/luks2/luks2_reencrypt.c:3074
+#: lib/luks2/luks2_reencrypt.c:4498
+#, c-format
+msgid "Device %s is too small."
+msgstr "裝置 %s 太小。"
+
+#: lib/setup.c:2115 lib/setup.c:2154 lib/setup.c:2570 lib/setup.c:2628
+#, c-format
+msgid "Cannot format device %s in use."
+msgstr "無法格式化使用中的裝置 %s。"
+
+#: lib/setup.c:2118 lib/setup.c:2157 lib/setup.c:2573 lib/setup.c:2631
+#, c-format
+msgid "Cannot format device %s, permission denied."
+msgstr "無法格式化裝置 %s，權限不足。"
+
+#: lib/setup.c:2142 lib/setup.c:2600 lib/setup.c:2982
+#, c-format
+msgid "Cannot format integrity for device %s."
+msgstr "無法格式化裝置 %s 的完整性。"
+
+#: lib/setup.c:2161 lib/setup.c:2639
+#, c-format
+msgid "Cannot format device %s."
+msgstr "無法格式化裝置 %s。"
+
+#: lib/setup.c:2204
+msgid "Cannot get OPAL alignment parameters."
+msgstr "無法取得 OPAL 對齊參數。"
+
+#: lib/setup.c:2216
+msgid "Bogus OPAL logical block size."
+msgstr "OPAL 邏輯區塊大小無效。"
+
+#: lib/setup.c:2221 lib/luks2/hw_opal/hw_opal.c:305
+msgid "Bogus OPAL logical block size differs from device block size."
+msgstr "OPAL 邏輯區塊大小與裝置區塊大小不符。"
+
+#: lib/setup.c:2227
+msgid "Requested data offset is not compatible with OPAL block size."
+msgstr "要求的資料偏移量與 OPAL 區塊大小不相容。"
+
+#: lib/setup.c:2234
+msgid "Requested data alignment is not compatible with OPAL alignment."
+msgstr "要求的資料對齊與 OPAL 對齊不相容。"
+
+#: lib/setup.c:2254
+msgid "Data offset does not satisfy OPAL alignment requirements."
+msgstr "資料偏移量不符合 OPAL 對齊需求。"
+
+#: lib/setup.c:2267
+msgid "Requested data alignment does not satisfy locking range alignment requirements."
+msgstr "要求的資料對齊不符合鎖定範圍的對齊需求。"
+
+#: lib/setup.c:2481
+#, c-format
+msgid "Compensating device size by %<PRIu64> sectors to align it with OPAL alignment granularity."
+msgstr "將裝置大小補償 %<PRIu64> 個磁區，以配合 OPAL 對齊粒度。"
+
+#: lib/setup.c:2541 lib/setup.c:4276 lib/setup.c:4482 lib/utils_wipe.c:356
+#: lib/luks2/luks2_json_metadata.c:2734 lib/luks2/luks2_json_metadata.c:3009
+#, c-format
+msgid "Failed to acquire OPAL lock on device %s."
+msgstr "無法在裝置 %s 上取得 OPAL 鎖定。"
+
+#: lib/setup.c:2551
+msgid "Incorrect OPAL Admin key."
+msgstr "OPAL 管理金鑰不正確。"
+
+#: lib/setup.c:2553
+msgid "Cannot setup OPAL segment."
+msgstr "無法設定 OPAL 區段。"
+
+#: lib/setup.c:2635
+#, c-format
+msgid "Cannot format device %s, OPAL device seems to be fully write-protected now."
+msgstr "無法格式化裝置 %s，OPAL 裝置目前似乎已完全寫入保護。"
+
+#: lib/setup.c:2637
+msgid "This is perhaps a bug in firmware. Run OPAL PSID reset and reconnect for recovery."
+msgstr "這可能是韌體中的錯誤。請執行 OPAL PSID 重設並重新連線以復原。"
+
+#: lib/setup.c:2657
+#, c-format
+msgid "Locking range %d reset on device %s failed."
+msgstr "重設裝置 %2$s 上的鎖定範圍 %1$d 失敗。"
+
+#: lib/setup.c:2677
+msgid "Can't format LOOPAES without device."
+msgstr "沒有裝置就無法格式化 LOOPAES。"
+
+#: lib/setup.c:2722
+msgid "Can't format VERITY without device."
+msgstr "沒有裝置就無法格式化 VERITY。"
+
+#: lib/setup.c:2733 lib/verity/verity.c:88
+#, c-format
+msgid "Unsupported VERITY hash type %d."
+msgstr "不支援的 VERITY 雜湊類型 %d。"
+
+#: lib/setup.c:2739 lib/verity/verity.c:96
+msgid "Unsupported VERITY block size."
+msgstr "不支援的 VERITY 區塊大小。"
+
+#: lib/setup.c:2744 lib/verity/verity.c:61
+msgid "Unsupported VERITY hash offset."
+msgstr "不支援的 VERITY 雜湊偏移量。"
+
+#: lib/setup.c:2749
+msgid "Unsupported VERITY FEC offset."
+msgstr "不支援的 VERITY FEC 偏移量。"
+
+#: lib/setup.c:2773
+msgid "Data area overlaps with hash area."
+msgstr "資料區域與雜湊區域重疊。"
+
+#: lib/setup.c:2798
+msgid "Hash area overlaps with FEC area."
+msgstr "雜湊區域與 FEC 區域重疊。"
+
+#: lib/setup.c:2805
+msgid "Data area overlaps with FEC area."
+msgstr "資料區域與 FEC 區域重疊。"
+
+#: lib/setup.c:2897
+msgid "Integrity key size mismatch."
+msgstr "完整性金鑰大小不符。"
+
+#: lib/setup.c:2948
+#, c-format
+msgid "WARNING: Requested tag size %d bytes differs from %s size output (%d bytes).\n"
+msgstr "警告：要求的標籤大小 %d 位元組不同於 %s 的大小輸出（%d 位元組）。\n"
+
+#: lib/setup.c:3061 lib/setup.c:3163
+#, c-format
+msgid "Unknown or unsupported device type %s requested."
+msgstr "要求不明或不支援的裝置類型 %s。"
+
+#: lib/setup.c:3077
+#, c-format
+msgid "Device %s does not provide inline integrity data fields."
+msgstr "裝置 %s 未提供內嵌完整性資料欄位。"
+
+#: lib/setup.c:3083
+#, c-format
+msgid "Inline tag size %<PRIu32> [bytes] is larger than %<PRIu32> provided by device %s."
+msgstr "內嵌標籤大小 %1$<PRIu32> [位元組] 大於裝置 %3$s 提供的 %2$<PRIu32>。"
+
+#: lib/setup.c:3098
+#, c-format
+msgid "Sector must be the same as device hardware sector (%zu bytes)."
+msgstr "磁區必須與裝置硬體磁區相同（%zu 位元組）。"
+
+#: lib/setup.c:3528 lib/setup.c:3617 lib/setup.c:3630
+#, c-format
+msgid "Unsupported parameters on device %s."
+msgstr "裝置 %s 上的參數不受支援。"
+
+#: lib/setup.c:3534 lib/setup.c:3637 lib/luks2/luks2_reencrypt.c:2929
+#: lib/luks2/luks2_reencrypt.c:3198 lib/luks2/luks2_reencrypt.c:3595
+#, c-format
+msgid "Mismatching parameters on device %s."
+msgstr "裝置 %s 上的參數不符。"
+
+#: lib/setup.c:3660
+msgid "Crypt devices mismatch."
+msgstr "加密裝置不符。"
+
+#: lib/setup.c:3692 lib/setup.c:3697 lib/luks2/luks2_reencrypt.c:2413
+#: lib/luks2/luks2_reencrypt.c:2945 lib/luks2/luks2_reencrypt.c:4237
+#, c-format
+msgid "Failed to reload device %s."
+msgstr "無法重新載入裝置 %s。"
+
+#: lib/setup.c:3703 lib/setup.c:3709 lib/luks2/luks2_reencrypt.c:2383
+#: lib/luks2/luks2_reencrypt.c:2390 lib/luks2/luks2_reencrypt.c:2959
+#, c-format
+msgid "Failed to suspend device %s."
+msgstr "無法暫停裝置 %s。"
+
+#: lib/setup.c:3715 lib/luks2/luks2_reencrypt.c:2397
+#: lib/luks2/luks2_reencrypt.c:2980 lib/luks2/luks2_reencrypt.c:4150
+#: lib/luks2/luks2_reencrypt.c:4241
+#, c-format
+msgid "Failed to resume device %s."
+msgstr "無法恢復裝置 %s。"
+
+#: lib/setup.c:3730
+#, c-format
+msgid "Fatal error while reloading device %s (on top of device %s)."
+msgstr "重新載入裝置 %s（疊於裝置 %s 之上）時發生嚴重錯誤。"
+
+#: lib/setup.c:3733 lib/setup.c:3735
+#, c-format
+msgid "Failed to switch device %s to dm-error."
+msgstr "無法將裝置 %s 切換為 dm-error。"
+
+#: lib/setup.c:3778
+msgid "Can not resize LUKS2 device with static size."
+msgstr "無法調整靜態大小的 LUKS2 裝置。"
+
+#: lib/setup.c:3783
+msgid "Resize of LUKS2 device with integrity protection is not supported."
+msgstr "不支援調整具完整性保護之 LUKS2 裝置的大小。"
+
+#: lib/setup.c:3829
+msgid "Cannot resize loop device."
+msgstr "無法調整迴圈裝置的大小。"
+
+#: lib/setup.c:3873
+msgid "WARNING: Maximum size already set or kernel doesn't support resize.\n"
+msgstr "警告：已設定最大大小，或核心不支援調整大小。\n"
+
+#: lib/setup.c:3939
+msgid "Resize failed, the kernel doesn't support it."
+msgstr "調整大小失敗，核心不支援此操作。"
+
+#: lib/setup.c:3971
+msgid "Do you really want to change UUID of device?"
+msgstr "確定要變更裝置的 UUID 嗎？"
+
+#: lib/setup.c:4061 lib/setup.c:4069
+msgid "Header backup file does not contain compatible LUKS header."
+msgstr "標頭備份檔不含相容的 LUKS 標頭。"
+
+#: lib/setup.c:4176
+#, c-format
+msgid "Volume %s is not active."
+msgstr "卷 %s 未啟用。"
+
+#: lib/setup.c:4231
+#, c-format
+msgid "Volume %s is already suspended."
+msgstr "卷 %s 已暫停。"
+
+#: lib/setup.c:4257
+#, c-format
+msgid "Suspend is not supported for device %s."
+msgstr "不支援暫停裝置 %s。"
+
+#: lib/setup.c:4259 lib/setup.c:4267
+#, c-format
+msgid "Error during suspending device %s."
+msgstr "暫停裝置 %s 時發生錯誤。"
+
+#: lib/setup.c:4282
+#, c-format
+msgid "Device %s was suspended but hardware OPAL device cannot be locked."
+msgstr "裝置 %s 已暫停，但無法鎖定硬體 OPAL 裝置。"
+
+#: lib/setup.c:4313 lib/setup.c:4507
+#, c-format
+msgid "Resume is not supported for device %s."
+msgstr "不支援恢復裝置 %s。"
+
+#: lib/setup.c:4315 lib/setup.c:4497 lib/setup.c:4509
+#, c-format
+msgid "Error during resuming device %s."
+msgstr "恢復裝置 %s 時發生錯誤。"
+
+#: lib/setup.c:4351
+msgid "Failed to unlink volume key from user specified keyring."
+msgstr "無法從使用者指定的鑰匙圈解除連結卷金鑰。"
+
+#: lib/setup.c:4473 lib/setup.c:5653
+msgid "Failed to link volume key in user defined keyring."
+msgstr "無法在使用者定義的鑰匙圈中連結卷金鑰。"
+
+#: lib/setup.c:4572 src/cryptsetup.c:2722
+#, c-format
+msgid "Volume %s is not suspended."
+msgstr "卷 %s 未暫停。"
+
+#: lib/setup.c:4683 lib/setup.c:7326 lib/setup.c:7348 src/cryptsetup.c:1856
+#: src/cryptsetup.c:2260 src/cryptsetup.c:2278 src/utils_reencrypt.c:306
+#: src/utils_reencrypt.c:1995
+msgid "Volume key does not match the volume."
+msgstr "卷金鑰與卷不符。"
+
+#: lib/setup.c:4837
+msgid "Failed to swap new key slot."
+msgstr "無法置換新的金鑰槽。"
+
+#: lib/setup.c:4935
+#, c-format
+msgid "Key slot %d is invalid."
+msgstr "金鑰槽 %d 無效。"
+
+#: lib/setup.c:4941 src/cryptsetup.c:1977 src/cryptsetup.c:2437
+#: src/cryptsetup.c:3122 src/cryptsetup.c:3182
+#, c-format
+msgid "Keyslot %d is not active."
+msgstr "金鑰槽 %d 未啟用。"
+
+#: lib/setup.c:4960
+msgid "Device header overlaps with data area."
+msgstr "裝置標頭與資料區域重疊。"
+
+#: lib/setup.c:5181
+msgid "Reencryption in-progress. Cannot activate device."
+msgstr "重新加密進行中。無法啟動裝置。"
+
+#: lib/setup.c:5183 lib/luks2/luks2_json_metadata.c:2905
+#: lib/luks2/luks2_reencrypt.c:3726
+msgid "Failed to get reencryption lock."
+msgstr "無法取得重新加密鎖定。"
+
+#: lib/setup.c:5205
+msgid "LUKS2 reencryption recovery using volume key(s) failed."
+msgstr "使用卷金鑰進行 LUKS2 重新加密復原失敗。"
+
+#: lib/setup.c:5341
+#, c-format
+msgid "Device %s already exists."
+msgstr "裝置 %s 已存在。"
+
+#: lib/setup.c:5348
+#, c-format
+msgid "Cannot use device %s, name is invalid or still in use."
+msgstr "無法使用裝置 %s，名稱無效或仍在使用中。"
+
+#: lib/setup.c:5360
+msgid "Reencryption volume keys do not match the volume."
+msgstr "重新加密卷金鑰與卷不符。"
+
+#: lib/setup.c:5377
+msgid "Incorrect volume key specified for plain device."
+msgstr "為一般裝置指定的卷金鑰不正確。"
+
+#: lib/setup.c:5403 lib/setup.c:5464
+msgid "Device type is not properly initialized."
+msgstr "裝置類型未正確初始化。"
+
+#: lib/setup.c:5502
+msgid "Kernel keyring is not supported by the kernel."
+msgstr "核心不支援核心鑰匙圈。"
+
+#: lib/setup.c:5506
+msgid "Kernel keyring missing: required for passing signature to kernel."
+msgstr "缺少核心鑰匙圈：傳遞簽章給核心時需要。"
+
+#: lib/setup.c:5561
+#, c-format
+msgid "Cannot use keyring key %s."
+msgstr "無法使用鑰匙圈金鑰 %s。"
+
+#: lib/setup.c:5774
+msgid "Incorrect root hash specified for verity device."
+msgstr "為 verity 裝置指定的根雜湊不正確。"
+
+#: lib/setup.c:5815 lib/setup.c:5840
+msgid "OPAL does not support deferred deactivation."
+msgstr "OPAL 不支援延遲停用。"
+
+#: lib/setup.c:5830 lib/setup.c:5861 lib/luks2/luks2_json_metadata.c:2970
+#: src/utils_reencrypt.c:89
+#, c-format
+msgid "Device %s is still in use."
+msgstr "裝置 %s 仍在使用中。"
+
+#: lib/setup.c:5848
+#, c-format
+msgid "Could not cancel deferred remove from device %s."
+msgstr "無法取消裝置 %s 的延遲移除。"
+
+#: lib/setup.c:5870
+#, c-format
+msgid "Invalid device %s."
+msgstr "無效的裝置 %s。"
+
+#: lib/setup.c:6017
+msgid "Volume key buffer too small."
+msgstr "卷金鑰緩衝區太小。"
+
+#: lib/setup.c:6028
+msgid "Cannot retrieve volume key for LUKS2 device."
+msgstr "無法擷取 LUKS2 裝置的卷金鑰。"
+
+#: lib/setup.c:6037
+msgid "Cannot retrieve volume key for LUKS1 device."
+msgstr "無法擷取 LUKS1 裝置的卷金鑰。"
+
+#: lib/setup.c:6051
+msgid "Cannot retrieve volume key for plain device."
+msgstr "無法擷取一般裝置的卷金鑰。"
+
+#: lib/setup.c:6059
+msgid "Cannot retrieve root hash for verity device."
+msgstr "無法擷取 verity 裝置的根雜湊。"
+
+#: lib/setup.c:6068
+msgid "Cannot retrieve volume key for BITLK device."
+msgstr "無法擷取 BITLK 裝置的卷金鑰。"
+
+#: lib/setup.c:6073
+msgid "Cannot retrieve volume key for FVAULT2 device."
+msgstr "無法擷取 FVAULT2 裝置的卷金鑰。"
+
+#: lib/setup.c:6075
+#, c-format
+msgid "This operation is not supported for %s crypt device."
+msgstr "此操作不支援 %s 加密裝置。"
+
+#: lib/setup.c:6260 lib/setup.c:6271
+msgid "Dump operation is not supported for this device type."
+msgstr "此裝置類型不支援傾印操作。"
+
+#: lib/setup.c:6651
+#, c-format
+msgid "Data offset is not multiple of %u bytes."
+msgstr "資料偏移量不是 %u 位元組的倍數。"
+
+#: lib/setup.c:6959
+#, c-format
+msgid "Cannot convert device %s which is still in use."
+msgstr "無法轉換仍在使用中的裝置 %s。"
+
+#: lib/setup.c:7267 lib/setup.c:7422
+#, c-format
+msgid "Failed to assign keyslot %u as the new volume key."
+msgstr "無法指定金鑰槽 %u 作為新的卷金鑰。"
+
+#: lib/setup.c:7291
+msgid "Failed to initialize default LUKS2 keyslot parameters."
+msgstr "無法初始化預設的 LUKS2 金鑰槽參數。"
+
+#: lib/setup.c:7297
+#, c-format
+msgid "Failed to assign keyslot %d to digest."
+msgstr "無法將金鑰槽 %d 指定給摘要。"
+
+#: lib/setup.c:7539
+msgid "Cannot add key slot, all slots disabled and no volume key provided."
+msgstr "無法新增金鑰槽，所有金鑰槽皆已停用且未提供卷金鑰。"
+
+#: lib/setup.c:7627 lib/setup.c:7642 lib/verity/verity.c:333
+msgid "Failed to load key in kernel keyring."
+msgstr "無法在核心鑰匙圈中載入金鑰。"
+
+#: lib/setup.c:7823
+#, c-format
+msgid "Could not find keyring described by \"%s\"."
+msgstr "找不到由「%s」描述的鑰匙圈。"
+
+#: lib/setup.c:7888
+msgid "Failed to acquire global memory-hard access serialization lock."
+msgstr "無法取得全域記憶體密集存取序列化鎖定。"
+
+#: lib/utils.c:205 lib/tcrypt/tcrypt.c:488
+msgid "Failed to open key file."
+msgstr "無法開啟金鑰檔。"
+
+#: lib/utils.c:213
+msgid "Cannot read keyfile from a terminal."
+msgstr "無法從終端機讀取金鑰檔。"
+
+#: lib/utils.c:229
+msgid "Failed to stat key file."
+msgstr "無法取得金鑰檔狀態。"
+
+#: lib/utils.c:237 lib/utils.c:258
+msgid "Cannot seek to requested keyfile offset."
+msgstr "無法移至要求的金鑰檔偏移量。"
+
+#: lib/utils.c:252 lib/utils.c:267 src/utils_password.c:219
+#: src/utils_password.c:231
+msgid "Out of memory while reading passphrase."
+msgstr "讀取通行密碼時記憶體不足。"
+
+#: lib/utils.c:287
+msgid "Error reading passphrase."
+msgstr "讀取通行密碼時發生錯誤。"
+
+#: lib/utils.c:304
+msgid "Nothing to read on input."
+msgstr "輸入中沒有可讀取的內容。"
+
+#: lib/utils.c:311
+msgid "Maximum keyfile size exceeded."
+msgstr "超過金鑰檔大小上限。"
+
+#: lib/utils.c:316
+msgid "Cannot read requested amount of data."
+msgstr "無法讀取要求的資料量。"
+
+#: lib/utils_device.c:207 lib/utils_storage_wrappers.c:99
+#: lib/luks1/keyencryption.c:79 src/utils_reencrypt.c:2283
+#, c-format
+msgid "Device %s does not exist or access denied."
+msgstr "裝置 %s 不存在或存取遭拒。"
+
+#: lib/utils_device.c:217
+#, c-format
+msgid "Device %s is not compatible."
+msgstr "裝置 %s 不相容。"
+
+#: lib/utils_device.c:546
+#, c-format
+msgid "Ignoring bogus optimal-io size for data device (%u bytes)."
+msgstr "忽略資料裝置（%u 位元組）的無效 optimal-io 大小。"
+
+#: lib/utils_device.c:711
+#, c-format
+msgid "Cannot grow %s to %<PRIu64> bytes (%s)."
+msgstr "無法將 %s 擴大到 %<PRIu64> 位元組（%s）。"
+
+#: lib/utils_device.c:717
+#, c-format
+msgid "Device %s is too small. Need at least %<PRIu64> bytes."
+msgstr "裝置 %s 太小。至少需要 %<PRIu64> 位元組。"
+
+#: lib/utils_device.c:798
+#, c-format
+msgid "Cannot use device %s which is in use (already mapped or mounted)."
+msgstr "無法使用使用中的裝置 %s（已對映或已掛載）。"
+
+#: lib/utils_device.c:802
+#, c-format
+msgid "Cannot use device %s, permission denied."
+msgstr "無法使用裝置 %s，權限不足。"
+
+#: lib/utils_device.c:805
+#, c-format
+msgid "Cannot get info about device %s."
+msgstr "無法取得裝置 %s 的相關資訊。"
+
+#: lib/utils_device.c:828
+msgid "Cannot use a loopback device, running as non-root user."
+msgstr "無法使用迴圈裝置，目前是以非 root 使用者身分執行。"
+
+#: lib/utils_device.c:839
+msgid "Attaching loopback device failed (loop device with autoclear flag is required)."
+msgstr "附加迴圈裝置失敗（需要具 autoclear 旗標的迴圈裝置）。"
+
+#: lib/utils_device.c:887
+#, c-format
+msgid "Requested offset is beyond real size of device %s."
+msgstr "要求的偏移量超出裝置 %s 的實際大小。"
+
+#: lib/utils_device.c:895
+#, c-format
+msgid "Device %s has zero size."
+msgstr "裝置 %s 大小為零。"
+
+#: lib/utils_pbkdf.c:105
+msgid "Requested PBKDF target time cannot be zero."
+msgstr "要求的 PBKDF 目標時間不能為零。"
+
+#: lib/utils_pbkdf.c:111
+#, c-format
+msgid "Unknown PBKDF type %s."
+msgstr "未知的 PBKDF 類型 %s。"
+
+#: lib/utils_pbkdf.c:116
+#, c-format
+msgid "Requested hash %s is not supported."
+msgstr "要求的雜湊 %s 不受支援。"
+
+#: lib/utils_pbkdf.c:127
+msgid "Requested PBKDF type is not supported for LUKS1."
+msgstr "LUKS1 不支援要求的 PBKDF 類型。"
+
+#: lib/utils_pbkdf.c:133
+msgid "PBKDF max memory or parallel threads must not be set with pbkdf2."
+msgstr "PBKDF 最大記憶體或平行執行緒不得與 pbkdf2 一起設定。"
+
+#: lib/utils_pbkdf.c:138 lib/utils_pbkdf.c:148
+#, c-format
+msgid "Forced iteration count is too low for %s (minimum is %u)."
+msgstr "對 %s 強制的疊代次數太低（最小值為 %u）。"
+
+#: lib/utils_pbkdf.c:153
+#, c-format
+msgid "Forced memory cost is too low for %s (minimum is %u kilobytes)."
+msgstr "對 %s 強制的記憶體成本太低（最小值為 %u KB）。"
+
+#: lib/utils_pbkdf.c:160
+#, c-format
+msgid "Requested maximum PBKDF memory cost is too high (maximum is %d kilobytes)."
+msgstr "要求的 PBKDF 最大記憶體成本太高（最大值為 %d KB）。"
+
+#: lib/utils_pbkdf.c:165
+msgid "Requested maximum PBKDF memory cost is too high (limited by the integer maximal size)."
+msgstr "要求的 PBKDF 最大記憶體成本太高（受限於整數最大值）。"
+
+#: lib/utils_pbkdf.c:169
+msgid "Requested maximum PBKDF memory cannot be zero."
+msgstr "要求的 PBKDF 最大記憶體不能為零。"
+
+#: lib/utils_pbkdf.c:173
+#, c-format
+msgid "Requested maximum PBKDF parallel cost is too high (maximum is %d)."
+msgstr "要求的 PBKDF 最大平行成本太高（最大值為 %d）。"
+
+#: lib/utils_pbkdf.c:178
+msgid "Requested PBKDF parallel threads cannot be zero."
+msgstr "要求的 PBKDF 平行執行緒不能為零。"
+
+#: lib/utils_pbkdf.c:198
+msgid "Only PBKDF2 is supported in FIPS mode."
+msgstr "FIPS 模式下僅支援 PBKDF2。"
+
+#: lib/utils_benchmark.c:175
+msgid "PBKDF benchmark disabled but iterations not set."
+msgstr "PBKDF 基準測試已停用但未設定疊代次數。"
+
+#: lib/utils_benchmark.c:194
+#, c-format
+msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
+msgstr "不相容的 PBKDF2 選項（使用雜湊演算法 %s）。"
+
+#: lib/utils_benchmark.c:214
+msgid "Not compatible PBKDF options."
+msgstr "不相容的 PBKDF 選項。"
+
+#: lib/utils_device_locking.c:88
+#, c-format
+msgid "Locking aborted. The locking path %s/%s is unusable (not a directory or missing)."
+msgstr "鎖定中止。鎖定路徑 %s/%s 無法使用（不是目錄或不存在）。"
+
+#: lib/utils_device_locking.c:105
+#, c-format
+msgid "Locking aborted. The locking path %s/%s is unusable (%s is not a directory)."
+msgstr "鎖定中止。鎖定路徑 %s/%s 無法使用（%s 不是目錄）。"
+
+#: lib/utils_wipe.c:143 lib/utils_wipe.c:218 src/utils_reencrypt_luks1.c:700
+#: src/utils_reencrypt_luks1.c:793
+msgid "Cannot seek to device offset."
+msgstr "無法移至裝置偏移量。"
+
+#: lib/utils_wipe.c:240
+#, c-format
+msgid "Device wipe error, offset %<PRIu64>."
+msgstr "裝置清除錯誤，偏移量 %<PRIu64>。"
+
+#: lib/utils_wipe.c:332
+msgid "Incorrect OPAL PSID."
+msgstr "OPAL PSID 不正確。"
+
+#: lib/utils_wipe.c:334
+msgid "Cannot erase OPAL device."
+msgstr "無法抹除 OPAL 裝置。"
+
+#: lib/luks1/keyencryption.c:27
+#, c-format
+msgid ""
+"Failed to setup dm-crypt key mapping for device %s.\n"
+"Check that kernel supports %s cipher (check syslog for more info)."
+msgstr ""
+"無法為裝置 %s 設定 dm-crypt 金鑰對映。\n"
+"請確認核心支援 %s 加密演算法（詳情請查看 syslog）。"
+
+#: lib/luks1/keyencryption.c:32
+msgid "Key size in XTS mode must be 256 or 512 bits."
+msgstr "XTS 模式的金鑰大小必須為 256 或 512 位元。"
+
+#: lib/luks1/keyencryption.c:34
+msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
+msgstr "加密演算法規格應為 [cipher]-[mode]-[iv] 格式。"
+
+#: lib/luks1/keyencryption.c:85 lib/luks1/keymanage.c:358
+#: lib/luks1/keymanage.c:665 lib/luks1/keymanage.c:1133
+#: lib/luks2/luks2_json_metadata.c:1510 lib/luks2/luks2_keyslot.c:711
+#, c-format
+msgid "Cannot write to device %s, permission denied."
+msgstr "無法寫入裝置 %s，權限不足。"
+
+#: lib/luks1/keyencryption.c:108
+msgid "Failed to open temporary keystore device."
+msgstr "無法開啟暫時金鑰儲存裝置。"
+
+#: lib/luks1/keyencryption.c:115
+msgid "Failed to access temporary keystore device."
+msgstr "無法存取暫時金鑰儲存裝置。"
+
+#: lib/luks1/keyencryption.c:189 lib/luks2/luks2_keyslot_luks2.c:47
+#: lib/luks2/luks2_keyslot_reenc.c:184
+msgid "IO error while encrypting keyslot."
+msgstr "加密金鑰槽時發生 IO 錯誤。"
+
+#: lib/luks1/keyencryption.c:236 lib/luks1/keymanage.c:361
+#: lib/luks1/keymanage.c:619 lib/luks1/keymanage.c:668 lib/tcrypt/tcrypt.c:659
+#: lib/fvault2/fvault2.c:872 lib/verity/verity.c:67 lib/verity/verity.c:183
+#: lib/verity/verity_hash.c:312 lib/verity/verity_hash.c:321
+#: lib/verity/verity_hash.c:350 lib/verity/verity_fec.c:247
+#: lib/verity/verity_fec.c:259 lib/verity/verity_fec.c:264
+#: lib/luks2/luks2_json_metadata.c:1513 src/utils_reencrypt_luks1.c:108
+#: src/utils_reencrypt_luks1.c:120
+#, c-format
+msgid "Cannot open device %s."
+msgstr "無法開啟裝置 %s。"
+
+#: lib/luks1/keyencryption.c:247 lib/luks2/luks2_keyslot_luks2.c:85
+msgid "IO error while decrypting keyslot."
+msgstr "解密金鑰槽時發生 IO 錯誤。"
+
+#: lib/luks1/keymanage.c:117
+#, c-format
+msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
+msgstr "裝置 %s 太小。（LUKS1 至少需要 %<PRIu64> 位元組。）"
+
+#: lib/luks1/keymanage.c:143 lib/luks1/keymanage.c:151
+#: lib/luks1/keymanage.c:163 lib/luks1/keymanage.c:174
+#: lib/luks1/keymanage.c:186
+#, c-format
+msgid "LUKS keyslot %u is invalid."
+msgstr "LUKS 金鑰槽 %u 無效。"
+
+#: lib/luks1/keymanage.c:259 lib/luks2/luks2_json_metadata.c:1382
+#, c-format
+msgid "Requested header backup file %s already exists."
+msgstr "要求的標頭備份檔 %s 已存在。"
+
+#: lib/luks1/keymanage.c:261 lib/luks2/luks2_json_metadata.c:1384
+#, c-format
+msgid "Cannot create header backup file %s."
+msgstr "無法建立標頭備份檔 %s。"
+
+#: lib/luks1/keymanage.c:268 lib/luks2/luks2_json_metadata.c:1391
+#, c-format
+msgid "Cannot write header backup file %s."
+msgstr "無法寫入標頭備份檔 %s。"
+
+#: lib/luks1/keymanage.c:300 lib/luks2/luks2_json_metadata.c:1420
+msgid "Backup file does not contain valid LUKS header."
+msgstr "備份檔不含有效的 LUKS 標頭。"
+
+#: lib/luks1/keymanage.c:313 lib/luks1/keymanage.c:585
+#: lib/luks2/luks2_json_metadata.c:1442
+#, c-format
+msgid "Cannot open header backup file %s."
+msgstr "無法開啟標頭備份檔 %s。"
+
+#: lib/luks1/keymanage.c:321 lib/luks2/luks2_json_metadata.c:1450
+#, c-format
+msgid "Cannot read header backup file %s."
+msgstr "無法讀取標頭備份檔 %s。"
+
+#: lib/luks1/keymanage.c:331
+msgid "Data offset or key size differs on device and backup, restore failed."
+msgstr "裝置與備份的資料偏移量或金鑰大小不同，恢復失敗。"
+
+#: lib/luks1/keymanage.c:339
+#, c-format
+msgid "Device %s %s%s"
+msgstr "裝置 %s %s%s"
+
+#: lib/luks1/keymanage.c:340
+msgid "does not contain LUKS header. Replacing header can destroy data on that device."
+msgstr "不含 LUKS 標頭。取代標頭可能毀損該裝置上的資料。"
+
+#: lib/luks1/keymanage.c:341
+msgid "already contains LUKS header. Replacing header will destroy existing keyslots."
+msgstr "已含有 LUKS 標頭。取代標頭將毀損既有的金鑰槽。"
+
+#: lib/luks1/keymanage.c:342 lib/luks2/luks2_json_metadata.c:1482
+msgid ""
+"\n"
+"WARNING: real device header has different UUID than backup!"
+msgstr ""
+"\n"
+"警告：實際裝置標頭的 UUID 與備份不同！"
+
+#: lib/luks1/keymanage.c:390
+msgid "Non standard key size, manual repair required."
+msgstr "非標準金鑰大小，需要手動修復。"
+
+#: lib/luks1/keymanage.c:400
+msgid "Non standard keyslots alignment, manual repair required."
+msgstr "非標準金鑰槽對齊，需要手動修復。"
+
+#: lib/luks1/keymanage.c:409
+#, c-format
+msgid "Cipher mode repaired (%s -> %s)."
+msgstr "加密模式已修復（%s -> %s）。"
+
+#: lib/luks1/keymanage.c:420
+#, c-format
+msgid "Cipher hash repaired to lowercase (%s)."
+msgstr "加密雜湊已修復為小寫（%s）。"
+
+#: lib/luks1/keymanage.c:422 lib/luks1/keymanage.c:528
+#: lib/luks1/keymanage.c:757
+#, c-format
+msgid "Requested LUKS hash %s is not supported."
+msgstr "要求的 LUKS 雜湊 %s 不受支援。"
+
+#: lib/luks1/keymanage.c:436
+msgid "Repairing keyslots."
+msgstr "正在修復金鑰槽。"
+
+#: lib/luks1/keymanage.c:455
+#, c-format
+msgid "Keyslot %i: offset repaired (%u -> %u)."
+msgstr "金鑰槽 %i：偏移量已修復（%u -> %u）。"
+
+#: lib/luks1/keymanage.c:463
+#, c-format
+msgid "Keyslot %i: stripes repaired (%u -> %u)."
+msgstr "金鑰槽 %i：條紋數已修復（%u -> %u）。"
+
+#: lib/luks1/keymanage.c:472
+#, c-format
+msgid "Keyslot %i: bogus partition signature."
+msgstr "金鑰槽 %i：無效的分割區簽章。"
+
+#: lib/luks1/keymanage.c:477
+#, c-format
+msgid "Keyslot %i: salt wiped."
+msgstr "金鑰槽 %i：鹽值已清除。"
+
+#: lib/luks1/keymanage.c:494
+msgid "Writing LUKS header to disk."
+msgstr "正在將 LUKS 標頭寫入磁碟。"
+
+#: lib/luks1/keymanage.c:499
+msgid "Repair failed."
+msgstr "修復失敗。"
+
+#: lib/luks1/keymanage.c:554
+#, c-format
+msgid "LUKS cipher mode %s is invalid."
+msgstr "LUKS 加密模式 %s 無效。"
+
+#: lib/luks1/keymanage.c:559
+#, c-format
+msgid "LUKS hash %s is invalid."
+msgstr "LUKS 雜湊 %s 無效。"
+
+#: lib/luks1/keymanage.c:566 src/cryptsetup.c:1367
+msgid "No known problems detected for LUKS header."
+msgstr "LUKS 標頭未偵測到已知問題。"
+
+#: lib/luks1/keymanage.c:690
+#, c-format
+msgid "Error during update of LUKS header on device %s."
+msgstr "更新裝置 %s 上的 LUKS 標頭時發生錯誤。"
+
+#: lib/luks1/keymanage.c:698
+#, c-format
+msgid "Error re-reading LUKS header after update on device %s."
+msgstr "更新後重新讀取裝置 %s 上的 LUKS 標頭時發生錯誤。"
+
+#: lib/luks1/keymanage.c:751
+msgid "Data offset for LUKS header must be either 0 or higher than header size."
+msgstr "LUKS 標頭的資料偏移量必須為 0 或高於標頭大小。"
+
+#: lib/luks1/keymanage.c:762 lib/luks1/keymanage.c:833
+#: lib/luks2/luks2_json_format.c:240 lib/luks2/luks2_json_metadata.c:1261
+#: src/utils_reencrypt.c:703
+msgid "Wrong LUKS UUID format provided."
+msgstr "提供的 LUKS UUID 格式錯誤。"
+
+#: lib/luks1/keymanage.c:784
+msgid "Cannot create LUKS header: reading random salt failed."
+msgstr "無法建立 LUKS 標頭：讀取隨機鹽值失敗。"
+
+#: lib/luks1/keymanage.c:812
+#, c-format
+msgid "Cannot create LUKS header: header digest failed (using hash %s)."
+msgstr "無法建立 LUKS 標頭：標頭摘要失敗（使用雜湊 %s）。"
+
+#: lib/luks1/keymanage.c:857
+#, c-format
+msgid "Key slot %d active, purge first."
+msgstr "金鑰槽 %d 啟用中，請先清除。"
+
+#: lib/luks1/keymanage.c:863
+#, c-format
+msgid "Key slot %d material includes too few stripes. Header manipulation?"
+msgstr "金鑰槽 %d 的材料包含太少條紋。是否遭竄改標頭？"
+
+#: lib/luks1/keymanage.c:901 lib/luks2/luks2_keyslot_luks2.c:217
+msgid "PBKDF2 iteration value overflow."
+msgstr "PBKDF2 疊代值溢位。"
+
+#: lib/luks1/keymanage.c:1023
+#, c-format
+msgid "Cannot open keyslot (using hash %s)."
+msgstr "無法開啟金鑰槽（使用雜湊 %s）。"
+
+#: lib/luks1/keymanage.c:1119
+#, c-format
+msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
+msgstr "金鑰槽 %d 無效，請在 0 到 %d 之間選取金鑰槽。"
+
+#: lib/luks1/keymanage.c:1137 lib/luks2/luks2_keyslot.c:715
+#, c-format
+msgid "Cannot wipe device %s."
+msgstr "無法清除裝置 %s。"
+
+#: lib/loopaes/loopaes.c:140
+msgid "Detected not yet supported GPG encrypted keyfile."
+msgstr "偵測到尚不支援的 GPG 加密金鑰檔。"
+
+#: lib/loopaes/loopaes.c:141
+msgid "Please use gpg --decrypt <KEYFILE> | cryptsetup --keyfile=- ...\n"
+msgstr "請使用 gpg --decrypt <KEYFILE> | cryptsetup --keyfile=- ...\n"
+
+#: lib/loopaes/loopaes.c:162 lib/loopaes/loopaes.c:182
+msgid "Incompatible loop-AES keyfile detected."
+msgstr "偵測到不相容的 loop-AES 金鑰檔。"
+
+#: lib/loopaes/loopaes.c:238
+msgid "Kernel does not support loop-AES compatible mapping."
+msgstr "核心不支援 loop-AES 相容對映。"
+
+#: lib/tcrypt/tcrypt.c:495
+#, c-format
+msgid "Error reading keyfile %s."
+msgstr "讀取金鑰檔 %s 時發生錯誤。"
+
+#: lib/tcrypt/tcrypt.c:549
+#, c-format
+msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
+msgstr "超過 TCRYPT 通行密碼長度上限（%zu）。"
+
+#: lib/tcrypt/tcrypt.c:591
+#, c-format
+msgid "PBKDF2 hash algorithm %s not available, skipping."
+msgstr "PBKDF2 雜湊演算法 %s 不可用，略過。"
+
+#: lib/tcrypt/tcrypt.c:743
+#, c-format
+msgid "Activation is not supported for %d sector size."
+msgstr "不支援 %d 磁區大小的啟動。"
+
+#: lib/tcrypt/tcrypt.c:749
+msgid "Kernel does not support activation for this TCRYPT legacy mode."
+msgstr "核心不支援此 TCRYPT 舊版模式的啟動。"
+
+#: lib/tcrypt/tcrypt.c:804
+#, c-format
+msgid "Activating TCRYPT system encryption for partition %s."
+msgstr "正在啟動分割區 %s 的 TCRYPT 系統加密。"
+
+#: lib/tcrypt/tcrypt.c:819
+msgid "Cannot determine TCRYPT system partition offset, activating whole encrypted area."
+msgstr "無法判定 TCRYPT 系統分割區偏移量，改為啟動整個加密區域。"
+
+#: lib/tcrypt/tcrypt.c:828
+msgid "Cannot determine TCRYPT system partition offset, activating device as a system partition."
+msgstr "無法判定 TCRYPT 系統分割區偏移量，將裝置作為系統分割區啟動。"
+
+#: lib/tcrypt/tcrypt.c:908
+msgid "Kernel does not support TCRYPT compatible mapping."
+msgstr "核心不支援 TCRYPT 相容對映。"
+
+#: lib/tcrypt/tcrypt.c:1137
+msgid "This function is not supported without TCRYPT header load."
+msgstr "未載入 TCRYPT 標頭時不支援此功能。"
+
+#: lib/bitlk/bitlk.c:293
+#, c-format
+msgid "Unexpected metadata entry type '%u' found when parsing supported Volume Master Key."
+msgstr "剖析支援的卷主金鑰時發現意外的中繼資料項目類型 '%u'。"
+
+#: lib/bitlk/bitlk.c:351
+msgid "Invalid string found when parsing Volume Master Key."
+msgstr "剖析卷主金鑰時發現無效的字串。"
+
+#: lib/bitlk/bitlk.c:355
+#, c-format
+msgid "Unexpected string ('%s') found when parsing supported Volume Master Key."
+msgstr "剖析支援的卷主金鑰時發現意外的字串（'%s'）。"
+
+#: lib/bitlk/bitlk.c:375
+#, c-format
+msgid "Unexpected metadata entry value '%u' found when parsing supported Volume Master Key."
+msgstr "剖析支援的卷主金鑰時發現意外的中繼資料項目值 '%u'。"
+
+#: lib/bitlk/bitlk.c:528
+msgid "BITLK version 1 is currently not supported."
+msgstr "目前不支援 BITLK 第 1 版。"
+
+#: lib/bitlk/bitlk.c:534
+msgid "Invalid or unknown boot signature for BITLK device."
+msgstr "BITLK 裝置的開機簽章無效或不明。"
+
+#: lib/bitlk/bitlk.c:546
+#, c-format
+msgid "Unsupported sector size %<PRIu16>."
+msgstr "不支援的磁區大小 %<PRIu16>。"
+
+#: lib/bitlk/bitlk.c:554
+#, c-format
+msgid "Failed to read BITLK header from %s."
+msgstr "無法從 %s 讀取 BITLK 標頭。"
+
+#: lib/bitlk/bitlk.c:603
+#, c-format
+msgid "Failed to read and validate BITLK FVE metadata from %s."
+msgstr "無法從 %s 讀取並驗證 BITLK FVE 中繼資料。"
+
+#: lib/bitlk/bitlk.c:610
+#, c-format
+msgid "Failed to validate the location of BITLK FVE metadata from %s."
+msgstr "無法驗證來自 %s 的 BITLK FVE 中繼資料位置。"
+
+#: lib/bitlk/bitlk.c:621
+#, c-format
+msgid "BITLK FVE metadata changed between reads from %s."
+msgstr "來自 %s 的 BITLK FVE 中繼資料在讀取之間發生變更。"
+
+#: lib/bitlk/bitlk.c:628
+#, c-format
+msgid "Failed to hash BITLK FVE metadata read from %s."
+msgstr "無法對從 %s 讀取的 BITLK FVE 中繼資料計算雜湊。"
+
+#: lib/bitlk/bitlk.c:644
+#, c-format
+msgid "Failed to parse BITLK FVE validation metadata from %s."
+msgstr "無法剖析來自 %s 的 BITLK FVE 驗證中繼資料。"
+
+#: lib/bitlk/bitlk.c:695
+msgid "Unknown or unsupported encryption type."
+msgstr "不明或不支援的加密類型。"
+
+#: lib/bitlk/bitlk.c:733
+#, c-format
+msgid "Failed to check BITLK metadata entries previously read from %s."
+msgstr "無法檢查先前從 %s 讀取的 BITLK 中繼資料項目。"
+
+#: lib/bitlk/bitlk.c:853
+msgid "Failed to convert BITLK volume description"
+msgstr "無法轉換 BITLK 卷描述"
+
+#: lib/bitlk/bitlk.c:1018
+#, c-format
+msgid "Unexpected metadata entry type '%u' found when parsing external key."
+msgstr "剖析外部金鑰時發現意外的中繼資料項目類型 '%u'。"
+
+#: lib/bitlk/bitlk.c:1041
+#, c-format
+msgid "BEK file GUID '%s' does not match GUID of the volume."
+msgstr "BEK 檔 GUID '%s' 與卷的 GUID 不符。"
+
+#: lib/bitlk/bitlk.c:1045
+#, c-format
+msgid "Unexpected metadata entry value '%u' found when parsing external key."
+msgstr "剖析外部金鑰時發現意外的中繼資料項目值 '%u'。"
+
+#: lib/bitlk/bitlk.c:1084
+#, c-format
+msgid "Unsupported BEK metadata version %<PRIu32>"
+msgstr "不支援的 BEK 中繼資料版本 %<PRIu32>"
+
+#: lib/bitlk/bitlk.c:1089
+#, c-format
+msgid "Unexpected BEK metadata size %<PRIu32> does not match BEK file length"
+msgstr "意外的 BEK 中繼資料大小 %<PRIu32> 與 BEK 檔長度不符"
+
+#: lib/bitlk/bitlk.c:1115
+msgid "Unexpected metadata entry found when parsing startup key."
+msgstr "剖析啟動金鑰時發現意外的中繼資料項目。"
+
+#: lib/bitlk/bitlk.c:1218
+msgid "This operation is not supported."
+msgstr "不支援此操作。"
+
+#: lib/bitlk/bitlk.c:1226
+msgid "Unexpected key data size."
+msgstr "意外的金鑰資料大小。"
+
+#: lib/bitlk/bitlk.c:1448
+msgid "This BITLK device is in an unsupported state and cannot be activated."
+msgstr "此 BITLK 裝置處於不支援的狀態，無法啟動。"
+
+#: lib/bitlk/bitlk.c:1453
+#, c-format
+msgid "BITLK devices with type '%s' cannot be activated."
+msgstr "類型為 '%s' 的 BITLK 裝置無法啟動。"
+
+#: lib/bitlk/bitlk.c:1492
+#, c-format
+msgid "WARNING: BitLocker volume size %<PRIu64> does not match the underlying device size %<PRIu64>"
+msgstr "警告：BitLocker 卷大小 %<PRIu64> 與底層裝置大小 %<PRIu64> 不符"
+
+#: lib/bitlk/bitlk.c:1634
+msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
+msgstr "無法啟動裝置，核心 dm-crypt 缺少對 BITLK IV 的支援。"
+
+#: lib/bitlk/bitlk.c:1638
+msgid "Cannot activate device, kernel dm-crypt is missing support for BITLK Elephant diffuser."
+msgstr "無法啟動裝置，核心 dm-crypt 缺少對 BITLK Elephant diffuser 的支援。"
+
+#: lib/bitlk/bitlk.c:1642
+msgid "Cannot activate device, kernel dm-crypt is missing support for large sector size."
+msgstr "無法啟動裝置，核心 dm-crypt 缺少對大型磁區大小的支援。"
+
+#: lib/bitlk/bitlk.c:1646
+msgid "Cannot activate device, kernel dm-zero module is missing."
+msgstr "無法啟動裝置，缺少核心 dm-zero 模組。"
+
+#: lib/fvault2/fvault2.c:532
+#, c-format
+msgid "Could not read %u bytes of volume header."
+msgstr "無法讀取 %u 位元組的卷標頭。"
+
+#: lib/fvault2/fvault2.c:544
+#, c-format
+msgid "Unsupported FVAULT2 version %<PRIu16>."
+msgstr "不支援的 FVAULT2 版本 %<PRIu16>。"
+
+#: lib/verity/verity.c:55 lib/verity/verity.c:169
+#, c-format
+msgid "Verity device %s does not use on-disk header."
+msgstr "verity 裝置 %s 未使用磁碟上標頭。"
+
+#: lib/verity/verity.c:83
+#, c-format
+msgid "Unsupported VERITY version %d."
+msgstr "不支援的 VERITY 版本 %d。"
+
+#: lib/verity/verity.c:118
+msgid "VERITY header corrupted."
+msgstr "VERITY 標頭已毀損。"
+
+#: lib/verity/verity.c:163
+#, c-format
+msgid "Wrong VERITY UUID format provided on device %s."
+msgstr "裝置 %s 上提供的 VERITY UUID 格式錯誤。"
+
+#: lib/verity/verity.c:207
+#, c-format
+msgid "Error during update of verity header on device %s."
+msgstr "更新裝置 %s 上的 verity 標頭時發生錯誤。"
+
+#: lib/verity/verity.c:261
+msgid "Root hash signature verification is not supported."
+msgstr "不支援根雜湊簽章驗證。"
+
+#: lib/verity/verity.c:266
+msgid "Root hash signature required."
+msgstr "需要根雜湊簽章。"
+
+#: lib/verity/verity.c:282
+msgid "Errors cannot be repaired with FEC device."
+msgstr "無法使用 FEC 裝置修復錯誤。"
+
+#: lib/verity/verity.c:284
+#, c-format
+msgid "Found %u repairable errors with FEC device."
+msgstr "使用 FEC 裝置發現 %u 個可修復的錯誤。"
+
+#: lib/verity/verity.c:368
+msgid "Kernel does not support dm-verity mapping."
+msgstr "核心不支援 dm-verity 對映。"
+
+#: lib/verity/verity.c:372
+msgid "Kernel does not support dm-verity signature option."
+msgstr "核心不支援 dm-verity 簽章選項。"
+
+#: lib/verity/verity.c:383
+msgid "Verity device detected corruption after activation."
+msgstr "verity 裝置啟動後偵測到毀損。"
+
+#: lib/verity/verity_hash.c:53
+#, c-format
+msgid "Spare area is not zeroed at position %<PRIu64>."
+msgstr "位置 %<PRIu64> 的備用區域未歸零。"
+
+#: lib/verity/verity_hash.c:154 lib/verity/verity_hash.c:287
+#: lib/verity/verity_hash.c:298
+msgid "Device offset overflow."
+msgstr "裝置偏移量溢位。"
+
+#: lib/verity/verity_hash.c:205
+#, c-format
+msgid "Verification failed at position %<PRIu64>."
+msgstr "位置 %<PRIu64> 的驗證失敗。"
+
+#: lib/verity/verity_hash.c:294
+msgid "Hash area overflow."
+msgstr "雜湊區域溢位。"
+
+#: lib/verity/verity_hash.c:381
+msgid "Verification of data area failed."
+msgstr "資料區域驗證失敗。"
+
+#: lib/verity/verity_hash.c:386
+msgid "Verification of root hash failed."
+msgstr "根雜湊驗證失敗。"
+
+#: lib/verity/verity_hash.c:392
+msgid "Input/output error while creating hash area."
+msgstr "建立雜湊區域時發生輸入/輸出錯誤。"
+
+#: lib/verity/verity_hash.c:394
+msgid "Creation of hash area failed."
+msgstr "建立雜湊區域失敗。"
+
+#: lib/verity/verity_hash.c:429
+#, c-format
+msgid "WARNING: Kernel cannot activate device if data block size exceeds page size (%u)."
+msgstr "警告：若資料區塊大小超過頁面大小（%u），核心將無法啟動裝置。"
+
+#: lib/verity/verity_fec.c:118
+msgid "Failed to allocate RS context."
+msgstr "無法配置 RS 內容。"
+
+#: lib/verity/verity_fec.c:136
+msgid "Failed to allocate buffer."
+msgstr "無法配置緩衝區。"
+
+#: lib/verity/verity_fec.c:146
+#, c-format
+msgid "Failed to read RS block %<PRIu64> byte %d."
+msgstr "無法讀取 RS 區塊 %<PRIu64> 的第 %d 個位元組。"
+
+#: lib/verity/verity_fec.c:159
+#, c-format
+msgid "Failed to read parity for RS block %<PRIu64>."
+msgstr "無法讀取 RS 區塊 %<PRIu64> 的奇偶校驗。"
+
+#: lib/verity/verity_fec.c:167
+#, c-format
+msgid "Failed to repair parity for block %<PRIu64>."
+msgstr "無法修復區塊 %<PRIu64> 的奇偶校驗。"
+
+#: lib/verity/verity_fec.c:179
+#, c-format
+msgid "Failed to write parity for RS block %<PRIu64>."
+msgstr "無法寫入 RS 區塊 %<PRIu64> 的奇偶校驗。"
+
+#: lib/verity/verity_fec.c:195
+msgid "Block sizes must match for FEC."
+msgstr "FEC 的區塊大小必須相符。"
+
+#: lib/verity/verity_fec.c:201
+msgid "Invalid number of parity bytes."
+msgstr "奇偶校驗位元組數無效。"
+
+#: lib/verity/verity_fec.c:235
+msgid "Invalid FEC segment length."
+msgstr "無效的 FEC 區段長度。"
+
+#: lib/verity/verity_fec.c:303
+#, c-format
+msgid "Failed to determine size for device %s."
+msgstr "無法判定裝置 %s 的大小。"
+
+#: lib/integrity/integrity.c:50
+#, c-format
+msgid "Incompatible kernel dm-integrity metadata (version %u) detected on %s."
+msgstr "在 %2$s 上偵測到不相容的核心 dm-integrity 中繼資料（版本 %1$u）。"
+
+#: lib/integrity/integrity.c:309 lib/integrity/integrity.c:493
+msgid "Kernel does not support dm-integrity mapping."
+msgstr "核心不支援 dm-integrity 對映。"
+
+#: lib/integrity/integrity.c:315
+msgid "Kernel does not support dm-integrity fixed metadata alignment."
+msgstr "核心不支援 dm-integrity 固定中繼資料對齊。"
+
+#: lib/integrity/integrity.c:324
+msgid "Kernel refuses to activate insecure recalculate option (see legacy activation options to override)."
+msgstr "核心拒絕啟用不安全的 recalculate 選項（請參閱舊版啟動選項以覆寫）。"
+
+#: lib/integrity/integrity.c:330
+msgid "Kernel does not support dm-integrity inline mode."
+msgstr "核心不支援 dm-integrity inline 模式。"
+
+#: lib/luks2/luks2_disk_metadata.c:382 lib/luks2/luks2_json_metadata.c:1184
+#: lib/luks2/luks2_json_metadata.c:1502
+#, c-format
+msgid "Failed to acquire write lock on device %s."
+msgstr "無法在裝置 %s 上取得寫入鎖定。"
+
+#: lib/luks2/luks2_disk_metadata.c:391
+msgid "Detected attempt for concurrent LUKS2 metadata update. Aborting operation."
+msgstr "偵測到並行 LUKS2 中繼資料更新嘗試。中止操作。"
+
+#: lib/luks2/luks2_disk_metadata.c:726 lib/luks2/luks2_disk_metadata.c:747
+msgid ""
+"Device contains ambiguous signatures, cannot auto-recover LUKS2.\n"
+"Please run \"cryptsetup repair\" for recovery."
+msgstr ""
+"裝置包含模稜兩可的簽章，無法自動復原 LUKS2。\n"
+"請執行「cryptsetup repair」進行復原。"
+
+#: lib/luks2/luks2_json_format.c:219
+#, c-format
+msgid "WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 keyslot count is very limited.\n"
+msgstr "警告：金鑰槽區域（%<PRIu64> 位元組）非常小，可用的 LUKS2 金鑰槽數量非常有限。\n"
+
+#: lib/luks2/luks2_json_format.c:427
+msgid "Requested data offset is too small."
+msgstr "要求的資料偏移量太小。"
+
+#: lib/luks2/luks2_json_format.c:468
+#, c-format
+msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
+msgstr "警告：LUKS2 中繼資料大小已變更為 %<PRIu64> 位元組。\n"
+
+#: lib/luks2/luks2_json_format.c:472
+#, c-format
+msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
+msgstr "警告：LUKS2 金鑰槽區域大小已變更為 %<PRIu64> 位元組。\n"
+
+#: lib/luks2/luks2_json_metadata.c:1171 lib/luks2/luks2_json_metadata.c:1357
+#: lib/luks2/luks2_json_metadata.c:1412 lib/luks2/luks2_keyslot_luks2.c:71
+#, c-format
+msgid "Failed to acquire read lock on device %s."
+msgstr "無法在裝置 %s 上取得讀取鎖定。"
+
+#: lib/luks2/luks2_json_metadata.c:1277
+msgid "Label is too long."
+msgstr "標籤太長。"
+
+#: lib/luks2/luks2_json_metadata.c:1427
+#, c-format
+msgid "Forbidden LUKS2 requirements detected in backup %s."
+msgstr "在備份 %s 中偵測到禁止的 LUKS2 需求。"
+
+#: lib/luks2/luks2_json_metadata.c:1466
+msgid "Data offset differ on device and backup, restore failed."
+msgstr "裝置與備份的資料偏移量不同，恢復失敗。"
+
+#: lib/luks2/luks2_json_metadata.c:1472
+msgid "Binary header with keyslot areas size differ on device and backup, restore failed."
+msgstr "裝置與備份的含金鑰槽區域二進位標頭大小不同，恢復失敗。"
+
+#: lib/luks2/luks2_json_metadata.c:1479
+#, c-format
+msgid "Device %s %s%s%s%s"
+msgstr "裝置 %s %s%s%s%s"
+
+#: lib/luks2/luks2_json_metadata.c:1480
+msgid "does not contain LUKS2 header. Replacing header can destroy data on that device."
+msgstr "不含 LUKS2 標頭。取代標頭可能毀損該裝置上的資料。"
+
+#: lib/luks2/luks2_json_metadata.c:1481
+msgid "already contains LUKS2 header. Replacing header will destroy existing keyslots."
+msgstr "已含有 LUKS2 標頭。取代標頭將毀損既有的金鑰槽。"
+
+#: lib/luks2/luks2_json_metadata.c:1483
+msgid ""
+"\n"
+"WARNING: unknown LUKS2 requirements detected in real device header!\n"
+"Replacing header with backup may corrupt the data on that device!"
+msgstr ""
+"\n"
+"警告：在實際裝置標頭中偵測到未知的 LUKS2 需求！\n"
+"以備份取代標頭可能毀損該裝置上的資料！"
+
+#: lib/luks2/luks2_json_metadata.c:1485
+msgid ""
+"\n"
+"WARNING: Unfinished offline reencryption detected on the device!\n"
+"Replacing header with backup may corrupt data."
+msgstr ""
+"\n"
+"警告：在裝置上偵測到未完成的離線重新加密！\n"
+"以備份取代標頭可能毀損資料。"
+
+#: lib/luks2/luks2_json_metadata.c:1583
+#, c-format
+msgid "Ignored unknown flag %s."
+msgstr "已忽略未知的旗標 %s。"
+
+#: lib/luks2/luks2_json_metadata.c:2555 lib/luks2/luks2_reencrypt.c:2110
+#, c-format
+msgid "Missing key for dm-crypt segment %u"
+msgstr "缺少 dm-crypt 區段 %u 的金鑰"
+
+#: lib/luks2/luks2_json_metadata.c:2567 lib/luks2/luks2_reencrypt.c:2123
+msgid "Failed to set dm-crypt segment."
+msgstr "無法設定 dm-crypt 區段。"
+
+#: lib/luks2/luks2_json_metadata.c:2573 lib/luks2/luks2_reencrypt.c:2129
+msgid "Failed to set dm-linear segment."
+msgstr "無法設定 dm-linear 區段。"
+
+#: lib/luks2/luks2_json_metadata.c:2693 src/utils_reencrypt.c:580
+msgid "No known cipher specification pattern detected in LUKS2 header."
+msgstr "LUKS2 標頭中偵測不到已知的加密演算法規格模式。"
+
+#: lib/luks2/luks2_json_metadata.c:2701
+msgid "OPAL device must have static device size."
+msgstr "OPAL 裝置必須具有靜態裝置大小。"
+
+#: lib/luks2/luks2_json_metadata.c:2721
+msgid "Encrypted OPAL device with integrity must be smaller than locking range."
+msgstr "具完整性的加密 OPAL 裝置必須小於鎖定範圍。"
+
+#: lib/luks2/luks2_json_metadata.c:2726
+msgid "OPAL device must have same size as locking range."
+msgstr "OPAL 裝置必須與鎖定範圍大小相同。"
+
+#: lib/luks2/luks2_json_metadata.c:2746
+#, c-format
+msgid "OPAL device is %s already unlocked.\n"
+msgstr "OPAL 裝置 %s 已解鎖。\n"
+
+#: lib/luks2/luks2_json_metadata.c:2785
+msgid "Unsupported device integrity configuration."
+msgstr "不支援的裝置完整性組態。"
+
+#: lib/luks2/luks2_json_metadata.c:2801
+msgid "Underlying dm-integrity device with unexpected provided data sectors."
+msgstr "底層 dm-integrity 裝置提供了意外的資料磁區。"
+
+#: lib/luks2/luks2_json_metadata.c:2903
+msgid "Reencryption in-progress. Cannot deactivate device."
+msgstr "重新加密進行中。無法停用裝置。"
+
+#: lib/luks2/luks2_json_metadata.c:2914 lib/luks2/luks2_reencrypt.c:4287
+#, c-format
+msgid "Failed to replace suspended device %s with dm-error target."
+msgstr "無法以 dm-error target 取代已暫停的裝置 %s。"
+
+#: lib/luks2/luks2_json_metadata.c:2993 lib/luks2/luks2_json_metadata.c:3015
+#, c-format
+msgid "Device %s was deactivated but hardware OPAL device cannot be locked."
+msgstr "裝置 %s 已停用，但無法鎖定硬體 OPAL 裝置。"
+
+#: lib/luks2/luks2_json_metadata.c:3037
+msgid "Unmet LUKS2 requirements detected."
+msgstr "偵測到未滿足的 LUKS2 需求。"
+
+#: lib/luks2/luks2_json_metadata.c:3045
+msgid "Operation incompatible with device marked for legacy reencryption. Aborting."
+msgstr "操作與標記為舊版重新加密的裝置不相容。中止。"
+
+#: lib/luks2/luks2_json_metadata.c:3047
+msgid "Operation incompatible with device marked for LUKS2 reencryption. Aborting."
+msgstr "操作與標記為 LUKS2 重新加密的裝置不相容。中止。"
+
+#: lib/luks2/luks2_json_metadata.c:3049
+msgid "Operation incompatible with device using OPAL. Aborting."
+msgstr "操作與使用 OPAL 的裝置不相容。中止。"
+
+#: lib/luks2/luks2_json_metadata.c:3051
+msgid "Operation incompatible with device using inline HW tags. Aborting."
+msgstr "操作與使用內嵌硬體標籤的裝置不相容。中止。"
+
+#: lib/luks2/luks2_keyslot.c:543 lib/luks2/luks2_keyslot.c:601
+msgid "Not enough available memory to open a keyslot."
+msgstr "可用記憶體不足，無法開啟金鑰槽。"
+
+#: lib/luks2/luks2_keyslot.c:545 lib/luks2/luks2_keyslot.c:603
+msgid "Keyslot open failed."
+msgstr "金鑰槽開啟失敗。"
+
+#: lib/luks2/luks2_keyslot_luks2.c:40 lib/luks2/luks2_keyslot_luks2.c:77
+#, c-format
+msgid "Cannot use %s cipher for keyslot encryption."
+msgstr "無法使用 %s 加密演算法進行金鑰槽加密。"
+
+#: lib/luks2/luks2_keyslot_luks2.c:219
+msgid "Not enough memory for keyslot key derivation."
+msgstr "記憶體不足，無法進行金鑰槽金鑰衍生。"
+
+#: lib/luks2/luks2_keyslot_luks2.c:233 lib/luks2/luks2_keyslot_luks2.c:358
+#: lib/luks2/luks2_keyslot_reenc.c:434 lib/luks2/luks2_reencrypt.c:2734
+#, c-format
+msgid "Hash algorithm %s is not available."
+msgstr "雜湊演算法 %s 不可用。"
+
+#: lib/luks2/luks2_keyslot_luks2.c:475
+msgid "No space for new keyslot."
+msgstr "沒有空間容納新的金鑰槽。"
+
+#: lib/luks2/luks2_keyslot_reenc.c:583
+msgid "Invalid reencryption resilience mode change requested."
+msgstr "要求的重新加密韌性模式變更無效。"
+
+#: lib/luks2/luks2_keyslot_reenc.c:704
+#, c-format
+msgid "Can not update resilience type. New type only provides %<PRIu64> bytes, required space is: %<PRIu64> bytes."
+msgstr "無法更新韌性類型。新類型僅提供 %<PRIu64> 位元組，所需空間為：%<PRIu64> 位元組。"
+
+#: lib/luks2/luks2_keyslot_reenc.c:714
+msgid "Failed to refresh reencryption verification digest."
+msgstr "無法重新整理重新加密驗證摘要。"
+
+#: lib/luks2/luks2_luks1_convert.c:498
+#, c-format
+msgid "Cannot check status of device with uuid: %s."
+msgstr "無法檢查 uuid 為 %s 之裝置的狀態。"
+
+#: lib/luks2/luks2_luks1_convert.c:524
+msgid "Unable to convert header with LUKSMETA additional metadata."
+msgstr "無法轉換帶有 LUKSMETA 附加中繼資料的標頭。"
+
+#: lib/luks2/luks2_luks1_convert.c:556 lib/luks2/luks2_reencrypt.c:3894
+#, c-format
+msgid "Unable to use cipher specification %s-%s for LUKS2."
+msgstr "無法將加密演算法規格 %s-%s 用於 LUKS2。"
+
+#: lib/luks2/luks2_luks1_convert.c:565
+#, c-format
+msgid "Unable to use cipher specification %s-%s for LUKS2 keyslot."
+msgstr "無法將加密演算法規格 %s-%s 用於 LUKS2 金鑰槽。"
+
+#: lib/luks2/luks2_luks1_convert.c:580
+msgid "Unable to move keyslot area. Not enough space."
+msgstr "無法移動金鑰槽區域。空間不足。"
+
+#: lib/luks2/luks2_luks1_convert.c:627
+msgid "Cannot convert to LUKS2 format - invalid metadata."
+msgstr "無法轉換為 LUKS2 格式 - 中繼資料無效。"
+
+#: lib/luks2/luks2_luks1_convert.c:644
+msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
+msgstr "無法移動金鑰槽區域。LUKS2 金鑰槽區域太小。"
+
+#: lib/luks2/luks2_luks1_convert.c:650 lib/luks2/luks2_luks1_convert.c:980
+msgid "Unable to move keyslot area."
+msgstr "無法移動金鑰槽區域。"
+
+#: lib/luks2/luks2_luks1_convert.c:765
+msgid "Cannot convert to LUKS1 format - default segment encryption sector size is not 512 bytes."
+msgstr "無法轉換為 LUKS1 格式 - 預設區段加密磁區大小不是 512 位元組。"
+
+#: lib/luks2/luks2_luks1_convert.c:773
+msgid "Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
+msgstr "無法轉換為 LUKS1 格式 - 金鑰槽摘要與 LUKS1 不相容。"
+
+#: lib/luks2/luks2_luks1_convert.c:787
+#, c-format
+msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
+msgstr "無法轉換為 LUKS1 格式 - 裝置使用包覆式金鑰加密演算法 %s。"
+
+#: lib/luks2/luks2_luks1_convert.c:792
+msgid "Cannot convert to LUKS1 format - device uses more segments."
+msgstr "無法轉換為 LUKS1 格式 - 裝置使用更多區段。"
+
+#: lib/luks2/luks2_luks1_convert.c:800
+#, c-format
+msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
+msgstr "無法轉換為 LUKS1 格式 - LUKS2 標頭包含 %u 個 token。"
+
+#: lib/luks2/luks2_luks1_convert.c:806
+msgid "Cannot convert to LUKS1 format - there are no active keyslots."
+msgstr "無法轉換為 LUKS1 格式 - 沒有啟用的金鑰槽。"
+
+#: lib/luks2/luks2_luks1_convert.c:818
+#, c-format
+msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
+msgstr "無法轉換為 LUKS1 格式 - 金鑰槽 %u 處於無效狀態。"
+
+#: lib/luks2/luks2_luks1_convert.c:823
+#, c-format
+msgid "Cannot convert to LUKS1 format - keyslot %u is unbound."
+msgstr "無法轉換為 LUKS1 格式 - 金鑰槽 %u 未綁定。"
+
+#: lib/luks2/luks2_luks1_convert.c:828
+#, c-format
+msgid "Cannot convert to LUKS1 format - slot %u (over maximum slots) is still active."
+msgstr "無法轉換為 LUKS1 格式 - 金鑰槽 %u（超過最大金鑰槽數）仍啟用中。"
+
+#: lib/luks2/luks2_luks1_convert.c:833
+#, c-format
+msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
+msgstr "無法轉換為 LUKS1 格式 - 金鑰槽 %u 與 LUKS1 不相容。"
+
+#: lib/luks2/luks2_reencrypt.c:1199
+#, c-format
+msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
+msgstr "熱區大小必須為計算所得區域對齊（%zu 位元組）的倍數。"
+
+#: lib/luks2/luks2_reencrypt.c:1204
+#, c-format
+msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
+msgstr "裝置大小必須為計算所得區域對齊（%zu 位元組）的倍數。"
+
+#: lib/luks2/luks2_reencrypt.c:1411 lib/luks2/luks2_reencrypt.c:1597
+#: lib/luks2/luks2_reencrypt.c:1680 lib/luks2/luks2_reencrypt.c:1722
+#: lib/luks2/luks2_reencrypt.c:4081
+msgid "Failed to initialize old segment storage wrapper."
+msgstr "無法初始化舊區段儲存包裝器。"
+
+#: lib/luks2/luks2_reencrypt.c:1425 lib/luks2/luks2_reencrypt.c:1575
+msgid "Failed to initialize new segment storage wrapper."
+msgstr "無法初始化新區段儲存包裝器。"
+
+#: lib/luks2/luks2_reencrypt.c:1551 lib/luks2/luks2_reencrypt.c:4093
+msgid "Failed to initialize hotzone protection."
+msgstr "無法初始化熱區保護。"
+
+#: lib/luks2/luks2_reencrypt.c:1624
+msgid "Failed to read checksums for current hotzone."
+msgstr "無法讀取目前熱區的檢查碼。"
+
+#: lib/luks2/luks2_reencrypt.c:1631 lib/luks2/luks2_reencrypt.c:4108
+#, c-format
+msgid "Failed to read hotzone area starting at %<PRIu64>."
+msgstr "無法讀取從 %<PRIu64> 開始的熱區區域。"
+
+#: lib/luks2/luks2_reencrypt.c:1650
+#, c-format
+msgid "Failed to decrypt sector %zu."
+msgstr "無法解密磁區 %zu。"
+
+#: lib/luks2/luks2_reencrypt.c:1656
+#, c-format
+msgid "Failed to recover sector %zu."
+msgstr "無法復原磁區 %zu。"
+
+#: lib/luks2/luks2_reencrypt.c:2209
+#, c-format
+msgid "Source and target device sizes don't match. Source %<PRIu64>, target: %<PRIu64>."
+msgstr "來源與目標裝置大小不符。來源 %<PRIu64>，目標 %<PRIu64>。"
+
+#: lib/luks2/luks2_reencrypt.c:2311
+#, c-format
+msgid "Failed to activate hotzone device %s."
+msgstr "無法啟動熱區裝置 %s。"
+
+#: lib/luks2/luks2_reencrypt.c:2323
+#, c-format
+msgid "Failed to allocate hotzone device %s."
+msgstr "無法配置熱區裝置 %s。"
+
+#: lib/luks2/luks2_reencrypt.c:2340
+#, c-format
+msgid "Failed to activate overlay device %s with actual origin table."
+msgstr "無法以實際來源資料表啟動覆疊裝置 %s。"
+
+#: lib/luks2/luks2_reencrypt.c:2347
+#, c-format
+msgid "Failed to load new mapping for device %s."
+msgstr "無法為裝置 %s 載入新的對映。"
+
+#: lib/luks2/luks2_reencrypt.c:2419
+msgid "Failed to refresh reencryption devices stack."
+msgstr "無法重新整理重新加密裝置堆疊。"
+
+#: lib/luks2/luks2_reencrypt.c:2616
+msgid "Failed to set new keyslots area size."
+msgstr "無法設定新的金鑰槽區域大小。"
+
+#: lib/luks2/luks2_reencrypt.c:2752
+#, c-format
+msgid "Data shift value is not aligned to encryption sector size (%<PRIu32> bytes)."
+msgstr "資料位移值未對齊加密磁區大小（%<PRIu32> 位元組）。"
+
+#: lib/luks2/luks2_reencrypt.c:2789 src/utils_reencrypt.c:162
+#, c-format
+msgid "Unsupported resilience mode %s"
+msgstr "不支援的韌性模式 %s"
+
+#: lib/luks2/luks2_reencrypt.c:2825
+msgid "Moved segment size can not be greater than data shift value."
+msgstr "移動的區段大小不能大於資料位移值。"
+
+#: lib/luks2/luks2_reencrypt.c:2867
+msgid "Invalid reencryption resilience parameters."
+msgstr "無效的重新加密韌性參數。"
+
+#: lib/luks2/luks2_reencrypt.c:2889
+#, c-format
+msgid "Moved segment too large. Requested size %<PRIu64>, available space for: %<PRIu64>."
+msgstr "移動的區段過大。要求的大小為 %<PRIu64>，可用空間為：%<PRIu64>。"
+
+#: lib/luks2/luks2_reencrypt.c:2978
+msgid "Failed to clear table."
+msgstr "無法清除資料表。"
+
+#: lib/luks2/luks2_reencrypt.c:3064
+#, c-format
+msgid "Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> sectors)."
+msgstr "資料位移（%<PRIu64> 個磁區）小於未來的資料偏移量（%<PRIu64> 個磁區）。"
+
+#: lib/luks2/luks2_reencrypt.c:3079 lib/luks2/luks2_reencrypt.c:3086
+msgid "Reduced data size is larger than real device size."
+msgstr "縮減後的資料大小大於實際裝置大小。"
+
+#: lib/luks2/luks2_reencrypt.c:3096
+#, c-format
+msgid "Data device is not aligned to encryption sector size (%<PRIu32> bytes)."
+msgstr "資料裝置未對齊加密磁區大小（%<PRIu32> 位元組）。"
+
+#: lib/luks2/luks2_reencrypt.c:3126 lib/luks2/luks2_reencrypt.c:3644
+#: lib/luks2/luks2_reencrypt.c:3665
+#, c-format
+msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
+msgstr "無法以獨佔模式開啟 %s（已對映或已掛載）。"
+
+#: lib/luks2/luks2_reencrypt.c:3333
+msgid "Device not marked for LUKS2 reencryption."
+msgstr "裝置未標記為 LUKS2 重新加密。"
+
+#: lib/luks2/luks2_reencrypt.c:3350 lib/luks2/luks2_reencrypt.c:4404
+msgid "Failed to load LUKS2 reencryption context."
+msgstr "無法載入 LUKS2 重新加密內容。"
+
+#: lib/luks2/luks2_reencrypt.c:3445 lib/luks2/luks2_reencrypt.c:3785
+msgid "Device is not in reencryption."
+msgstr "裝置不在重新加密狀態。"
+
+#: lib/luks2/luks2_reencrypt.c:3452 lib/luks2/luks2_reencrypt.c:3792
+msgid "Reencryption process is already running."
+msgstr "重新加密程序已在執行中。"
+
+#: lib/luks2/luks2_reencrypt.c:3454 lib/luks2/luks2_reencrypt.c:3794
+msgid "Failed to acquire reencryption lock."
+msgstr "無法取得重新加密鎖定。"
+
+#: lib/luks2/luks2_reencrypt.c:3472
+msgid "Cannot proceed with reencryption. Run reencryption recovery first."
+msgstr "無法繼續重新加密。請先執行重新加密復原。"
+
+#: lib/luks2/luks2_reencrypt.c:3608
+msgid "Active device size and requested reencryption size don't match."
+msgstr "啟用中裝置的大小與要求的重新加密大小不符。"
+
+#: lib/luks2/luks2_reencrypt.c:3622
+msgid "Illegal device size requested in reencryption parameters."
+msgstr "重新加密參數中要求的裝置大小不合法。"
+
+#: lib/luks2/luks2_reencrypt.c:3724
+msgid "Reencryption in-progress. Cannot perform recovery."
+msgstr "重新加密進行中。無法執行復原。"
+
+#: lib/luks2/luks2_reencrypt.c:3745
+msgid "LUKS2 reencryption recovery failed."
+msgstr "LUKS2 重新加密復原失敗。"
+
+#: lib/luks2/luks2_reencrypt.c:3878 lib/luks2/luks2_reencrypt.c:4357
+msgid "Failed to initialize reencryption device stack."
+msgstr "無法初始化重新加密裝置堆疊。"
+
+#: lib/luks2/luks2_reencrypt.c:3911
+msgid "LUKS2 reencryption already initialized in metadata."
+msgstr "LUKS2 重新加密已在中繼資料中初始化。"
+
+#: lib/luks2/luks2_reencrypt.c:3919
+msgid "Failed to initialize LUKS2 reencryption in metadata."
+msgstr "無法在中繼資料中初始化 LUKS2 重新加密。"
+
+#: lib/luks2/luks2_reencrypt.c:3972 lib/luks2/luks2_reencrypt.c:4004
+#: lib/luks2/luks2_reencrypt.c:4034
+msgid "Reencryption is not supported for DAX (persistent memory) devices."
+msgstr "不支援對 DAX（持續性記憶體）裝置重新加密。"
+
+#: lib/luks2/luks2_reencrypt.c:4063
+msgid "Failed to set device segments for next reencryption hotzone."
+msgstr "無法為下一個重新加密熱區設定裝置區段。"
+
+#: lib/luks2/luks2_reencrypt.c:4116
+msgid "Failed to write reencryption resilience metadata."
+msgstr "無法寫入重新加密韌性中繼資料。"
+
+#: lib/luks2/luks2_reencrypt.c:4123
+msgid "Decryption failed."
+msgstr "解密失敗。"
+
+#: lib/luks2/luks2_reencrypt.c:4128
+#, c-format
+msgid "Failed to write hotzone area starting at %<PRIu64>."
+msgstr "無法寫入從 %<PRIu64> 開始的熱區區域。"
+
+#: lib/luks2/luks2_reencrypt.c:4133
+msgid "Failed to sync data."
+msgstr "無法同步資料。"
+
+#: lib/luks2/luks2_reencrypt.c:4141
+msgid "Failed to update metadata after current reencryption hotzone completed."
+msgstr "目前的重新加密熱區完成後，無法更新中繼資料。"
+
+#: lib/luks2/luks2_reencrypt.c:4230
+msgid "Failed to write LUKS2 metadata."
+msgstr "無法寫入 LUKS2 中繼資料。"
+
+#: lib/luks2/luks2_reencrypt.c:4253
+msgid "Failed to wipe unused data device area."
+msgstr "無法清除未使用的資料裝置區域。"
+
+#: lib/luks2/luks2_reencrypt.c:4259
+#, c-format
+msgid "Failed to remove unused (unbound) keyslot %d."
+msgstr "無法移除未使用（未綁定）的金鑰槽 %d。"
+
+#: lib/luks2/luks2_reencrypt.c:4269
+msgid "Failed to remove reencryption keyslot."
+msgstr "無法移除重新加密金鑰槽。"
+
+#: lib/luks2/luks2_reencrypt.c:4279
+#, c-format
+msgid "Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> sectors long."
+msgstr "重新加密從 %<PRIu64> 開始、長度為 %<PRIu64> 個磁區的區塊時發生嚴重錯誤。"
+
+#: lib/luks2/luks2_reencrypt.c:4283
+msgid "Online reencryption failed."
+msgstr "線上重新加密失敗。"
+
+#: lib/luks2/luks2_reencrypt.c:4288
+msgid "Do not resume the device unless replaced with error target manually."
+msgstr "除非已手動以 error target 取代，否則不要恢復該裝置。"
+
+#: lib/luks2/luks2_reencrypt.c:4340
+msgid "Cannot proceed with reencryption. Unexpected reencryption status."
+msgstr "無法繼續重新加密。意外的重新加密狀態。"
+
+#: lib/luks2/luks2_reencrypt.c:4346
+msgid "Missing or invalid reencrypt context."
+msgstr "缺少或無效的重新加密內容。"
+
+#: lib/luks2/luks2_reencrypt.c:4380 lib/luks2/luks2_reencrypt.c:4417
+msgid "Failed to update reencryption context."
+msgstr "無法更新重新加密內容。"
+
+#: lib/luks2/luks2_reencrypt_digest.c:402
+msgid "Reencryption metadata is invalid."
+msgstr "重新加密中繼資料無效。"
+
+#: lib/luks2/hw_opal/hw_opal.c:335
+#, c-format
+msgid "OPAL range %d offset %<PRIu64> does not match expected values %<PRIu64>."
+msgstr "OPAL 範圍 %d 的偏移量 %<PRIu64> 與預期值 %<PRIu64> 不符。"
+
+#: lib/luks2/hw_opal/hw_opal.c:342
+#, c-format
+msgid "OPAL range %d length %<PRIu64> does not match device length %<PRIu64>."
+msgstr "OPAL 範圍 %d 的長度 %<PRIu64> 與裝置長度 %<PRIu64> 不符。"
+
+#: lib/luks2/hw_opal/hw_opal.c:348
+#, c-format
+msgid "OPAL range %d locking is disabled."
+msgstr "OPAL 範圍 %d 的鎖定已停用。"
+
+#: lib/luks2/hw_opal/hw_opal.c:358 lib/luks2/hw_opal/hw_opal.c:365
+#, c-format
+msgid "Unexpected OPAL range %d lock state."
+msgstr "意外的 OPAL 範圍 %d 鎖定狀態。"
+
+#: src/cryptsetup.c:87
+msgid "Keyslot encryption parameters can be set only for LUKS2 device."
+msgstr "金鑰槽加密參數僅能為 LUKS2 裝置設定。"
+
+#: src/cryptsetup.c:93
+msgid "Keyslot encryption parameters are not compatible with LUKS2 keyslot encryption."
+msgstr "金鑰槽加密參數與 LUKS2 金鑰槽加密不相容。"
+
+#: src/cryptsetup.c:150 src/cryptsetup.c:1180 src/cryptsetup.c:1545
+#: src/utils_reencrypt.c:1916 src/utils_reencrypt_luks1.c:502
+#: src/utils_reencrypt_luks1.c:565
+msgid "No known cipher specification pattern detected."
+msgstr "偵測不到已知的加密演算法規格模式。"
+
+#: src/cryptsetup.c:160
+#, c-format
+msgid "WARNING: Using default options for cipher (%s-%s, key size %u bits) that could be incompatible with older versions."
+msgstr "警告：使用可能與舊版不相容的預設選項（加密演算法 %s-%s，金鑰大小 %u 位元）。"
+
+#: src/cryptsetup.c:165
+#, c-format
+msgid "WARNING: Using default options for hash (%s) that could be incompatible with older versions."
+msgstr "警告：使用可能與舊版不相容的預設選項（雜湊 %s）。"
+
+#: src/cryptsetup.c:169
+msgid "For plain mode, always use options --cipher, --key-size and if no keyfile or keyring is used, then also --hash."
+msgstr "一般模式請務必使用 --cipher、--key-size 選項，若未使用金鑰檔或鑰匙圈，則還需使用 --hash。"
+
+#: src/cryptsetup.c:175
+msgid "WARNING: The --hash parameter is being ignored in plain mode with keyfile specified.\n"
+msgstr "警告：指定金鑰檔時，一般模式中的 --hash 參數將被忽略。\n"
+
+#: src/cryptsetup.c:189
+msgid "WARNING: The --keyfile-size option is being ignored, the read size is the same as the encryption key size.\n"
+msgstr "警告：--keyfile-size 選項將被忽略，讀取大小與加密金鑰大小相同。\n"
+
+#: src/cryptsetup.c:226 src/cryptsetup.c:1375 src/cryptsetup.c:1598
+#: src/integritysetup.c:189 src/utils_reencrypt.c:2167
+#, c-format
+msgid "Blkid scan failed for %s."
+msgstr "對 %s 的 blkid 掃描失敗。"
+
+#: src/cryptsetup.c:232
+#, c-format
+msgid "Detected device signature(s) on %s. Proceeding further may damage existing data."
+msgstr "在 %s 上偵測到裝置簽章。繼續進行可能損壞既有資料。"
+
+#: src/cryptsetup.c:238 src/cryptsetup.c:1261 src/cryptsetup.c:1309
+#: src/cryptsetup.c:1382 src/cryptsetup.c:1522 src/cryptsetup.c:1610
+#: src/cryptsetup.c:2495 src/cryptsetup.c:2925 src/integritysetup.c:179
+#: src/utils_reencrypt.c:111 src/utils_reencrypt.c:459
+#: src/utils_reencrypt.c:927
+msgid "Operation aborted.\n"
+msgstr "操作已中止。\n"
+
+#: src/cryptsetup.c:323
+msgid "Option --key-file is required."
+msgstr "必須指定 --key-file 選項。"
+
+#: src/cryptsetup.c:378
+msgid "Enter VeraCrypt PIM: "
+msgstr "輸入 VeraCrypt PIM： "
+
+#: src/cryptsetup.c:387
+msgid "Invalid PIM value: parse error."
+msgstr "無效的 PIM 值：剖析錯誤。"
+
+#: src/cryptsetup.c:390
+msgid "Invalid PIM value: 0."
+msgstr "無效的 PIM 值：0。"
+
+#: src/cryptsetup.c:393
+msgid "Invalid PIM value: outside of range."
+msgstr "無效的 PIM 值：超出範圍。"
+
+#: src/cryptsetup.c:416
+msgid "No device header detected with this passphrase."
+msgstr "使用此通行密碼未偵測到裝置標頭。"
+
+#: src/cryptsetup.c:493 src/cryptsetup.c:678
+#, c-format
+msgid "Device %s is not a valid BITLK device."
+msgstr "裝置 %s 不是有效的 BITLK 裝置。"
+
+#: src/cryptsetup.c:501
+msgid "Cannot determine volume key size for BITLK, please use --key-size option."
+msgstr "無法判定 BITLK 的卷金鑰大小，請使用 --key-size 選項。"
+
+#: src/cryptsetup.c:547
+msgid ""
+"Header dump with volume key is sensitive information\n"
+"which allows access to encrypted partition without passphrase.\n"
+"This dump should be always stored encrypted on safe place."
+msgstr ""
+"含卷金鑰的標頭傾印是敏感資訊，\n"
+"可讓人在沒有通行密碼的情況下存取加密分割區。\n"
+"此傾印應始終加密存放於安全的地方。"
+
+#: src/cryptsetup.c:614 src/cryptsetup.c:700 src/cryptsetup.c:2520
+msgid ""
+"The header dump with volume key is sensitive information\n"
+"that allows access to encrypted partition without a passphrase.\n"
+"This dump should be stored encrypted in a safe place."
+msgstr ""
+"含卷金鑰的標頭傾印是敏感資訊，\n"
+"可讓人在沒有通行密碼的情況下存取加密分割區。\n"
+"此傾印應加密存放於安全的地方。"
+
+#: src/cryptsetup.c:755 src/cryptsetup.c:787
+#, c-format
+msgid "Device %s is not a valid FVAULT2 device."
+msgstr "裝置 %s 不是有效的 FVAULT2 裝置。"
+
+#: src/cryptsetup.c:795
+msgid "Cannot determine volume key size for FVAULT2, please use --key-size option."
+msgstr "無法判定 FVAULT2 的卷金鑰大小，請使用 --key-size 選項。"
+
+#: src/cryptsetup.c:849 src/veritysetup.c:317 src/integritysetup.c:424
+#, c-format
+msgid "Device %s is still active and scheduled for deferred removal.\n"
+msgstr "裝置 %s 仍啟用中，且已排定延遲移除。\n"
+
+#: src/cryptsetup.c:882 src/cryptsetup.c:1808 src/cryptsetup.c:2082
+#: src/cryptsetup.c:2229 src/cryptsetup.c:2648 src/cryptsetup.c:2730
+#: src/cryptsetup.c:3263
+#, c-format
+msgid "Failed to set external tokens path %s."
+msgstr "無法設定外部 token 路徑 %s。"
+
+#: src/cryptsetup.c:891
+msgid "Resize of active device requires volume key in keyring but --disable-keyring option is set."
+msgstr "調整啟用中裝置的大小需要鑰匙圈中有卷金鑰，但已設定 --disable-keyring 選項。"
+
+#: src/cryptsetup.c:1058
+msgid "Benchmark interrupted."
+msgstr "基準測試中斷。"
+
+#: src/cryptsetup.c:1079
+#, c-format
+msgid "PBKDF2-%-9s     N/A\n"
+msgstr "PBKDF2-%-9s     N/A\n"
+
+#: src/cryptsetup.c:1081
+#, c-format
+msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
+msgstr "PBKDF2-%-9s 每秒 %7u 次疊代（%zu 位元金鑰）\n"
+
+#: src/cryptsetup.c:1095
+#, c-format
+msgid "%-10s N/A\n"
+msgstr "%-10s N/A\n"
+
+#: src/cryptsetup.c:1097
+#, c-format
+msgid "%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit key (requested %u ms time)\n"
+msgstr "%-10s 疊代 %4u 次，記憶體 %5u，平行執行緒（CPU）%1u 個，%zu 位元金鑰（要求時間 %u ms）\n"
+
+#: src/cryptsetup.c:1121
+msgid "Result of benchmark is not reliable."
+msgstr "基準測試結果不可靠。"
+
+#: src/cryptsetup.c:1172
+msgid "# Tests are approximate using memory only (no storage IO).\n"
+msgstr "# 測試僅使用記憶體約略估算（無儲存 IO）。\n"
+
+#. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
+#: src/cryptsetup.c:1197
+#, c-format
+msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
+msgstr "#%*s 演算法 |       金鑰 |      加密 |      解密\n"
+
+#: src/cryptsetup.c:1205
+#, c-format
+msgid "Cipher %s (with %i bits key) is not available."
+msgstr "加密演算法 %s（%i 位元金鑰）不可用。"
+
+#. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
+#: src/cryptsetup.c:1226
+msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
+msgstr "#     演算法 |       金鑰 |      加密 |      解密\n"
+
+#: src/cryptsetup.c:1239
+msgid "N/A"
+msgstr "N/A"
+
+#: src/cryptsetup.c:1242
+msgid "# Cipher speed test is not available.\n"
+msgstr "# 加密演算法速度測試不可用。\n"
+
+#: src/cryptsetup.c:1258
+msgid ""
+"Unprotected LUKS2 reencryption metadata detected. Please verify the reencryption operation is desirable (see luksDump output)\n"
+"and continue (upgrade metadata) only if you acknowledge the operation as genuine."
+msgstr ""
+"偵測到未受保護的 LUKS2 重新加密中繼資料。請確認此重新加密操作確實為您所需（參閱 luksDump 輸出），\n"
+"且僅在您認定該操作為真實時才繼續（升級中繼資料）。"
+
+#: src/cryptsetup.c:1264
+msgid "Enter passphrase to protect and upgrade reencryption metadata: "
+msgstr "輸入通行密碼以保護並升級重新加密中繼資料： "
+
+#: src/cryptsetup.c:1308
+msgid "Really proceed with LUKS2 reencryption recovery?"
+msgstr "真的要繼續進行 LUKS2 重新加密復原嗎？"
+
+#: src/cryptsetup.c:1317
+msgid "Enter passphrase to verify reencryption metadata digest: "
+msgstr "輸入通行密碼以驗證重新加密中繼資料摘要： "
+
+#: src/cryptsetup.c:1319
+msgid "Enter passphrase for reencryption recovery: "
+msgstr "輸入重新加密復原的通行密碼： "
+
+#: src/cryptsetup.c:1381
+msgid "Really try to repair LUKS device header?"
+msgstr "真的要嘗試修復 LUKS 裝置標頭嗎？"
+
+#: src/cryptsetup.c:1409 src/integritysetup.c:76 src/integritysetup.c:246
+msgid ""
+"\n"
+"Wipe interrupted."
+msgstr ""
+"\n"
+"清除中斷。"
+
+#: src/cryptsetup.c:1414 src/integritysetup.c:81 src/integritysetup.c:291
+msgid ""
+"Wiping device to initialize integrity checksum.\n"
+"You can interrupt this by pressing CTRL+c (rest of not wiped device will contain invalid checksum).\n"
+msgstr ""
+"正在清除裝置以初始化完整性檢查碼。\n"
+"您可以按 CTRL+c 中斷（未清除的裝置其餘部分將包含無效的檢查碼）。\n"
+
+#: src/cryptsetup.c:1436 src/integritysetup.c:103
+#, c-format
+msgid "Cannot deactivate temporary device %s."
+msgstr "無法停用暫時裝置 %s。"
+
+#: src/cryptsetup.c:1484
+msgid "OPAL hw-only encryption does not support --cipher and --key-size, options ignored."
+msgstr "OPAL 純硬體加密不支援 --cipher 與 --key-size，這些選項將被忽略。"
+
+#: src/cryptsetup.c:1497
+msgid "Integrity option can be used only for LUKS2 format."
+msgstr "integrity 選項僅能用於 LUKS2 格式。"
+
+#: src/cryptsetup.c:1502 src/cryptsetup.c:1582
+msgid "Unsupported LUKS2 metadata size options."
+msgstr "不支援的 LUKS2 中繼資料大小選項。"
+
+#: src/cryptsetup.c:1507
+msgid "OPAL is supported only for LUKS2 format."
+msgstr "OPAL 僅支援 LUKS2 格式。"
+
+#: src/cryptsetup.c:1512
+msgid "Inline hw tags are supported only for LUKS2 format."
+msgstr "內嵌硬體標籤僅支援 LUKS2 格式。"
+
+#: src/cryptsetup.c:1521
+msgid "Header file does not exist, do you want to create it?"
+msgstr "標頭檔不存在，要建立它嗎？"
+
+#: src/cryptsetup.c:1529
+#, c-format
+msgid "Cannot create header file %s."
+msgstr "無法建立標頭檔 %s。"
+
+#: src/cryptsetup.c:1555 src/integritysetup.c:127 src/integritysetup.c:142
+#: src/integritysetup.c:151 src/integritysetup.c:330 src/integritysetup.c:338
+#: src/integritysetup.c:348
+msgid "No known integrity specification pattern detected."
+msgstr "偵測不到已知的 integrity 規格模式。"
+
+#: src/cryptsetup.c:1557
+msgid "Cannot use specified integrity key size."
+msgstr "無法使用指定的 integrity 金鑰大小。"
+
+#: src/cryptsetup.c:1575
+#, c-format
+msgid "Cannot use %s as on-disk header."
+msgstr "無法將 %s 用作磁碟上標頭。"
+
+#: src/cryptsetup.c:1604 src/integritysetup.c:173
+#, c-format
+msgid "This will overwrite data on %s irrevocably."
+msgstr "這將不可回復地覆寫 %s 上的資料。"
+
+#: src/cryptsetup.c:1641
+msgid "OPAL Admin password cannot be empty."
+msgstr "OPAL 管理密碼不能為空。"
+
+#: src/cryptsetup.c:1655 src/cryptsetup.c:2099 src/cryptsetup.c:2242
+#: src/cryptsetup.c:2377 src/cryptsetup.c:2443 src/utils_reencrypt_luks1.c:428
+msgid "Failed to set pbkdf parameters."
+msgstr "無法設定 pbkdf 參數。"
+
+#: src/cryptsetup.c:1786
+msgid "Reduced data offset is allowed only for detached LUKS header."
+msgstr "縮減的資料偏移量僅允許用於分離式 LUKS 標頭。"
+
+#: src/cryptsetup.c:1793
+#, c-format
+msgid "LUKS file container %s is too small for activation, there is no remaining space for data."
+msgstr "LUKS 檔案容器 %s 太小，無法啟動，已無剩餘空間存放資料。"
+
+#: src/cryptsetup.c:1835 src/cryptsetup.c:2248 src/utils_reencrypt.c:278
+#: src/utils_reencrypt.c:371 src/utils_reencrypt.c:1936
+msgid "Cannot determine volume key size for LUKS without keyslots, please use --key-size option."
+msgstr "無法判定無金鑰槽 LUKS 的卷金鑰大小，請使用 --key-size 選項。"
+
+#: src/cryptsetup.c:1854 src/utils_reencrypt.c:304
+msgid "Device requires two volume keys."
+msgstr "裝置需要兩個卷金鑰。"
+
+#: src/cryptsetup.c:1889
+msgid "Some specified activation parameters were ignored with OPAL hw-only encryption."
+msgstr "使用 OPAL 純硬體加密時，已忽略部分指定的啟動參數。"
+
+#: src/cryptsetup.c:1894
+msgid "Device activated but cannot make flags persistent."
+msgstr "裝置已啟動，但無法使旗標持久化。"
+
+#: src/cryptsetup.c:1974 src/cryptsetup.c:2042
+#, c-format
+msgid "Keyslot %d is selected for deletion."
+msgstr "已選定金鑰槽 %d 進行刪除。"
+
+#: src/cryptsetup.c:1986 src/cryptsetup.c:2046
+msgid "This is the last keyslot. Device will become unusable after purging this key."
+msgstr "這是最後一個金鑰槽。清除此金鑰後裝置將無法使用。"
+
+#: src/cryptsetup.c:1987
+msgid "Enter any remaining passphrase: "
+msgstr "輸入任何剩餘的通行密碼： "
+
+#: src/cryptsetup.c:1988 src/cryptsetup.c:2048
+msgid "Operation aborted, the keyslot was NOT wiped.\n"
+msgstr "操作已中止，金鑰槽並未清除。\n"
+
+#: src/cryptsetup.c:2024
+msgid "Enter passphrase to be deleted: "
+msgstr "輸入要刪除的通行密碼： "
+
+#: src/cryptsetup.c:2074 src/cryptsetup.c:2426 src/cryptsetup.c:3087
+#: src/cryptsetup.c:3254
+#, c-format
+msgid "Device %s is not a valid LUKS2 device."
+msgstr "裝置 %s 不是有效的 LUKS2 裝置。"
+
+#: src/cryptsetup.c:2113 src/cryptsetup.c:2312
+msgid "Enter new passphrase for key slot: "
+msgstr "輸入金鑰槽的新通行密碼： "
+
+#: src/cryptsetup.c:2147 src/utils_luks.c:342
+#, c-format
+msgid "Enter token PIN: "
+msgstr "輸入 token PIN： "
+
+#: src/cryptsetup.c:2149 src/utils_luks.c:344
+#, c-format
+msgid "Enter token %d PIN: "
+msgstr "輸入 token %d 的 PIN： "
+
+#: src/cryptsetup.c:2208
+msgid "WARNING: The --key-slot parameter is used for new keyslot number.\n"
+msgstr "警告：--key-slot 參數用於指定新金鑰槽編號。\n"
+
+#: src/cryptsetup.c:2285 src/utils_reencrypt_luks1.c:1094
+#, c-format
+msgid "Enter any existing passphrase: "
+msgstr "輸入任何既有的通行密碼： "
+
+#: src/cryptsetup.c:2381
+msgid "Enter passphrase to be changed: "
+msgstr "輸入要變更的通行密碼： "
+
+#: src/cryptsetup.c:2397 src/utils_reencrypt_luks1.c:1080
+msgid "Enter new passphrase: "
+msgstr "輸入新通行密碼： "
+
+#: src/cryptsetup.c:2447
+msgid "Enter passphrase for keyslot to be converted: "
+msgstr "輸入要轉換之金鑰槽的通行密碼： "
+
+#: src/cryptsetup.c:2471
+msgid "Only one device argument for isLuks operation is supported."
+msgstr "isLuks 操作僅支援一個裝置引數。"
+
+#: src/cryptsetup.c:2576
+#, c-format
+msgid "Keyslot %d does not contain unbound key."
+msgstr "金鑰槽 %d 不包含未綁定金鑰。"
+
+#: src/cryptsetup.c:2581
+msgid ""
+"The header dump with unbound key is sensitive information.\n"
+"This dump should be stored encrypted in a safe place."
+msgstr ""
+"含未綁定金鑰的標頭傾印是敏感資訊。\n"
+"此傾印應加密存放於安全的地方。"
+
+#: src/cryptsetup.c:2676 src/cryptsetup.c:2713
+#, c-format
+msgid "%s is not active %s device name."
+msgstr "%s 不是啟用中的 %s 裝置名稱。"
+
+#: src/cryptsetup.c:2708
+#, c-format
+msgid "%s is not active LUKS device name or header is missing."
+msgstr "%s 不是啟用中的 LUKS 裝置名稱，或標頭缺失。"
+
+#: src/cryptsetup.c:2785 src/cryptsetup.c:2804
+msgid "Option --header-backup-file is required."
+msgstr "必須指定 --header-backup-file 選項。"
+
+#: src/cryptsetup.c:2835
+#, c-format
+msgid "%s is not cryptsetup managed device."
+msgstr "%s 不是 cryptsetup 管理的裝置。"
+
+#: src/cryptsetup.c:2846
+#, c-format
+msgid "Refresh is not supported for device type %s"
+msgstr "不支援對裝置類型 %s 重新整理"
+
+#: src/cryptsetup.c:2896
+#, c-format
+msgid "Unrecognized metadata device type %s."
+msgstr "無法辨識的中繼資料裝置類型 %s。"
+
+#: src/cryptsetup.c:2898
+msgid "Command requires device and mapped name as arguments."
+msgstr "命令需要裝置與對映名稱作為引數。"
+
+#: src/cryptsetup.c:2916
+msgid "Enter OPAL PSID: "
+msgstr "輸入 OPAL PSID： "
+
+#: src/cryptsetup.c:2916
+msgid "Enter OPAL Admin password: "
+msgstr "輸入 OPAL 管理密碼： "
+
+#: src/cryptsetup.c:2924
+msgid "WARNING: WHOLE disk will be factory reset and all data will be lost! Continue?"
+msgstr "警告：整顆磁碟將回復原廠設定，所有資料都會遺失！繼續嗎？"
+
+#: src/cryptsetup.c:2967
+#, c-format
+msgid ""
+"This operation will erase all keyslots on device %s.\n"
+"Device will become unusable after this operation."
+msgstr ""
+"此操作將抹除裝置 %s 上的所有金鑰槽。\n"
+"執行此操作後裝置將無法使用。"
+
+#: src/cryptsetup.c:2974
+msgid "Operation aborted, keyslots were NOT wiped.\n"
+msgstr "操作已中止，金鑰槽並未清除。\n"
+
+#: src/cryptsetup.c:3013
+msgid "Invalid LUKS type, only luks1 and luks2 are supported."
+msgstr "無效的 LUKS 類型，僅支援 luks1 與 luks2。"
+
+#: src/cryptsetup.c:3029
+#, c-format
+msgid "Device is already %s type."
+msgstr "裝置已經是 %s 類型。"
+
+#: src/cryptsetup.c:3036
+#, c-format
+msgid "This operation will convert %s to %s format.\n"
+msgstr "此操作將把 %s 轉換為 %s 格式。\n"
+
+#: src/cryptsetup.c:3039
+msgid "Operation aborted, device was NOT converted.\n"
+msgstr "操作已中止，裝置並未轉換。\n"
+
+#: src/cryptsetup.c:3079
+msgid "Option --priority, --label or --subsystem is missing."
+msgstr "缺少 --priority、--label 或 --subsystem 選項。"
+
+#: src/cryptsetup.c:3113 src/cryptsetup.c:3153 src/cryptsetup.c:3173
+#, c-format
+msgid "Token %d is invalid."
+msgstr "token %d 無效。"
+
+#: src/cryptsetup.c:3116 src/cryptsetup.c:3176
+#, c-format
+msgid "Token %d in use."
+msgstr "token %d 使用中。"
+
+#: src/cryptsetup.c:3128
+#, c-format
+msgid "Failed to add luks2-keyring token %d."
+msgstr "無法新增 luks2-keyring token %d。"
+
+#: src/cryptsetup.c:3139 src/cryptsetup.c:3202
+#, c-format
+msgid "Failed to assign token %d to keyslot %d."
+msgstr "無法將 token %d 指定給金鑰槽 %d。"
+
+#: src/cryptsetup.c:3156
+#, c-format
+msgid "Token %d is not in use."
+msgstr "token %d 未在使用中。"
+
+#: src/cryptsetup.c:3193
+msgid "Failed to import token from file."
+msgstr "無法從檔案匯入 token。"
+
+#: src/cryptsetup.c:3218
+#, c-format
+msgid "Failed to get token %d for export."
+msgstr "無法取得要匯出的 token %d。"
+
+#: src/cryptsetup.c:3231
+#, c-format
+msgid "Token %d is not assigned to keyslot %d."
+msgstr "token %d 未指定給金鑰槽 %d。"
+
+#: src/cryptsetup.c:3233 src/cryptsetup.c:3240
+#, c-format
+msgid "Failed to unassign token %d from keyslot %d."
+msgstr "無法取消 token %d 對金鑰槽 %d 的指定。"
+
+#: src/cryptsetup.c:3299
+msgid "Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only for TCRYPT device."
+msgstr "--tcrypt-hidden、--tcrypt-system 或 --tcrypt-backup 選項僅支援 TCRYPT 裝置。"
+
+#: src/cryptsetup.c:3302
+msgid "Option --veracrypt or --disable-veracrypt is supported only for TCRYPT device type."
+msgstr "--veracrypt 或 --disable-veracrypt 選項僅支援 TCRYPT 裝置類型。"
+
+#: src/cryptsetup.c:3305
+msgid "Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
+msgstr "--veracrypt-pim 選項僅支援與 VeraCrypt 相容的裝置。"
+
+#: src/cryptsetup.c:3309
+msgid "Option --veracrypt-query-pim is supported only for VeraCrypt compatible devices."
+msgstr "--veracrypt-query-pim 選項僅支援與 VeraCrypt 相容的裝置。"
+
+#: src/cryptsetup.c:3311
+msgid "The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
+msgstr "--veracrypt-pim 與 --veracrypt-query-pim 選項互斥。"
+
+#: src/cryptsetup.c:3320
+msgid "Option --persistent is not allowed with --test-passphrase."
+msgstr "--persistent 選項不得與 --test-passphrase 一起使用。"
+
+#: src/cryptsetup.c:3323
+msgid "Options --refresh and --test-passphrase are mutually exclusive."
+msgstr "--refresh 與 --test-passphrase 選項互斥。"
+
+#: src/cryptsetup.c:3326
+msgid "Option --shared is allowed only for open of plain device."
+msgstr "--shared 選項僅允許用於開啟一般裝置。"
+
+#: src/cryptsetup.c:3329
+msgid "Option --skip is supported only for open of plain and loopaes devices."
+msgstr "--skip 選項僅支援開啟一般與 loopaes 裝置。"
+
+#: src/cryptsetup.c:3332
+msgid "Option --offset with open action is only supported for plain and loopaes devices."
+msgstr "--offset 選項搭配 open 動作僅支援一般與 loopaes 裝置。"
+
+#: src/cryptsetup.c:3335
+msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
+msgstr "--tcrypt-hidden 選項不得與 --allow-discards 合併使用。"
+
+#: src/cryptsetup.c:3339
+msgid "Sector size option with open action is supported only for plain devices."
+msgstr "搭配 open 動作的磁區大小選項僅支援一般裝置。"
+
+#: src/cryptsetup.c:3343
+msgid "Large IV sectors option is supported only for opening plain type device with sector size larger than 512 bytes."
+msgstr "大型 IV 磁區選項僅支援開啟磁區大小大於 512 位元組的一般類型裝置。"
+
+#: src/cryptsetup.c:3348
+msgid "Option --test-passphrase is allowed only for open of LUKS, TCRYPT, BITLK and FVAULT2 devices."
+msgstr "--test-passphrase 選項僅允許用於開啟 LUKS、TCRYPT、BITLK 與 FVAULT2 裝置。"
+
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3381
+msgid "Options --device-size and --size cannot be combined."
+msgstr "--device-size 與 --size 選項不得合併使用。"
+
+#: src/cryptsetup.c:3354
+msgid "Option --unbound is allowed only for open of luks device."
+msgstr "--unbound 選項僅允許用於開啟 LUKS 裝置。"
+
+#: src/cryptsetup.c:3357
+msgid "Option --unbound cannot be used without --test-passphrase."
+msgstr "未搭配 --test-passphrase 時不得使用 --unbound 選項。"
+
+#: src/cryptsetup.c:3361
+msgid "Option --volume-key-keyring cannot be combined with --hash or --volume-key-file."
+msgstr "--volume-key-keyring 選項不得與 --hash 或 --volume-key-file 合併使用。"
+
+#: src/cryptsetup.c:3364
+msgid "Both --volume-key-file options must be paired with respective --key-size options."
+msgstr "兩個 --volume-key-file 選項都必須搭配各自的 --key-size 選項。"
+
+#: src/cryptsetup.c:3373 src/veritysetup.c:673 src/integritysetup.c:800
+msgid "Options --cancel-deferred and --deferred cannot be used at the same time."
+msgstr "--cancel-deferred 與 --deferred 選項不能同時使用。"
+
+#: src/cryptsetup.c:3389
+msgid "Option --active-name can be set only for LUKS2 device."
+msgstr "--active-name 選項僅能為 LUKS2 裝置設定。"
+
+#: src/cryptsetup.c:3392
+msgid "Options --active-name and --force-offline-reencrypt cannot be combined."
+msgstr "--active-name 與 --force-offline-reencrypt 選項不得合併使用。"
+
+#: src/cryptsetup.c:3395
+msgid "Options --new-volume-key-file and --keep-key cannot be combined."
+msgstr "--new-volume-key-file 與 --keep-key 選項不得合併使用。"
+
+#: src/cryptsetup.c:3398
+msgid "Options --new-volume-key-keyring and --keep-key cannot be combined."
+msgstr "--new-volume-key-keyring 與 --keep-key 選項不得合併使用。"
+
+#: src/cryptsetup.c:3406 src/cryptsetup.c:3436
+msgid "Keyslot specification is required."
+msgstr "必須指定金鑰槽。"
+
+#: src/cryptsetup.c:3414
+msgid "Options --align-payload and --offset cannot be combined."
+msgstr "--align-payload 與 --offset 選項不得合併使用。"
+
+#: src/cryptsetup.c:3417
+msgid "Option --integrity-no-wipe can be used only for format action with integrity extension."
+msgstr "--integrity-no-wipe 選項僅能用於帶 integrity 延伸的 format 動作。"
+
+#: src/cryptsetup.c:3420
+msgid "Only one of --use-[u]random options is allowed."
+msgstr "僅允許 --use-[u]random 選項中的一個。"
+
+#: src/cryptsetup.c:3428
+msgid "Key size is required with --unbound option."
+msgstr "使用 --unbound 選項時必須指定金鑰大小。"
+
+#: src/cryptsetup.c:3448
+msgid "Invalid token action."
+msgstr "無效的 token 動作。"
+
+#: src/cryptsetup.c:3451
+msgid "--key-description parameter is mandatory for token add action."
+msgstr "--key-description 參數對 token add 動作是必填的。"
+
+#: src/cryptsetup.c:3455 src/cryptsetup.c:3468
+msgid "Action requires specific token. Use --token-id parameter."
+msgstr "此動作需要特定的 token。請使用 --token-id 參數。"
+
+#: src/cryptsetup.c:3459
+msgid "Option --unbound is valid only with token add action."
+msgstr "--unbound 選項僅在 token add 動作時有效。"
+
+#: src/cryptsetup.c:3461
+msgid "Options --key-slot and --unbound cannot be combined."
+msgstr "--key-slot 與 --unbound 選項不得合併使用。"
+
+#: src/cryptsetup.c:3466
+msgid "Action requires specific keyslot. Use --key-slot parameter."
+msgstr "此動作需要特定的金鑰槽。請使用 --key-slot 參數。"
+
+#: src/cryptsetup.c:3482
+msgid "<device> [--type <type>] [<name>]"
+msgstr "<device> [--type <type>] [<name>]"
+
+#: src/cryptsetup.c:3482 src/veritysetup.c:487 src/integritysetup.c:563
+msgid "open device as <name>"
+msgstr "以 <name> 開啟裝置"
+
+#: src/cryptsetup.c:3483 src/cryptsetup.c:3484 src/cryptsetup.c:3485
+#: src/veritysetup.c:488 src/veritysetup.c:489 src/integritysetup.c:564
+#: src/integritysetup.c:565 src/integritysetup.c:567
+msgid "<name>"
+msgstr "<name>"
+
+#: src/cryptsetup.c:3483 src/veritysetup.c:488 src/integritysetup.c:564
+msgid "close device (remove mapping)"
+msgstr "關閉裝置（移除對映）"
+
+#: src/cryptsetup.c:3484 src/integritysetup.c:567
+msgid "resize active device"
+msgstr "調整啟用中裝置的大小"
+
+#: src/cryptsetup.c:3485
+msgid "show device status"
+msgstr "顯示裝置狀態"
+
+#: src/cryptsetup.c:3486
+msgid "[--cipher <cipher>]"
+msgstr "[--cipher <cipher>]"
+
+#: src/cryptsetup.c:3486
+msgid "benchmark cipher"
+msgstr "基準測試加密演算法"
+
+#: src/cryptsetup.c:3487 src/cryptsetup.c:3488 src/cryptsetup.c:3489
+#: src/cryptsetup.c:3490 src/cryptsetup.c:3491 src/cryptsetup.c:3498
+#: src/cryptsetup.c:3499 src/cryptsetup.c:3500 src/cryptsetup.c:3501
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3503 src/cryptsetup.c:3504
+#: src/cryptsetup.c:3505 src/cryptsetup.c:3506 src/cryptsetup.c:3507
+msgid "<device>"
+msgstr "<device>"
+
+#: src/cryptsetup.c:3487
+msgid "try to repair on-disk metadata"
+msgstr "嘗試修復磁碟上中繼資料"
+
+#: src/cryptsetup.c:3488
+msgid "reencrypt LUKS2 device"
+msgstr "重新加密 LUKS2 裝置"
+
+#: src/cryptsetup.c:3489
+msgid "erase all keyslots (remove encryption key)"
+msgstr "抹除所有金鑰槽（移除加密金鑰）"
+
+#: src/cryptsetup.c:3490
+msgid "convert LUKS from/to LUKS2 format"
+msgstr "在 LUKS 與 LUKS2 格式間轉換"
+
+#: src/cryptsetup.c:3491
+msgid "set permanent configuration options for LUKS2"
+msgstr "設定 LUKS2 的永久組態選項"
+
+#: src/cryptsetup.c:3492 src/cryptsetup.c:3493
+msgid "<device> [<new key file>]"
+msgstr "<device> [<new key file>]"
+
+#: src/cryptsetup.c:3492
+msgid "formats a LUKS device"
+msgstr "格式化 LUKS 裝置"
+
+#: src/cryptsetup.c:3493
+msgid "add key to LUKS device"
+msgstr "新增金鑰至 LUKS 裝置"
+
+#: src/cryptsetup.c:3494 src/cryptsetup.c:3495 src/cryptsetup.c:3496
+msgid "<device> [<key file>]"
+msgstr "<device> [<key file>]"
+
+#: src/cryptsetup.c:3494
+msgid "removes supplied key or key file from LUKS device"
+msgstr "從 LUKS 裝置移除指定的金鑰或金鑰檔"
+
+#: src/cryptsetup.c:3495
+msgid "changes supplied key or key file of LUKS device"
+msgstr "變更 LUKS 裝置指定的金鑰或金鑰檔"
+
+#: src/cryptsetup.c:3496
+msgid "converts a key to new pbkdf parameters"
+msgstr "將金鑰轉換為新的 pbkdf 參數"
+
+#: src/cryptsetup.c:3497
+msgid "<device> <key slot>"
+msgstr "<device> <key slot>"
+
+#: src/cryptsetup.c:3497
+msgid "wipes key with number <key slot> from LUKS device"
+msgstr "從 LUKS 裝置清除編號為 <key slot> 的金鑰"
+
+#: src/cryptsetup.c:3498
+msgid "print UUID of LUKS device"
+msgstr "列印 LUKS 裝置的 UUID"
+
+#: src/cryptsetup.c:3499
+msgid "tests <device> for LUKS partition header"
+msgstr "測試 <device> 是否為 LUKS 分割區標頭"
+
+#: src/cryptsetup.c:3500
+msgid "dump LUKS partition information"
+msgstr "傾印 LUKS 分割區資訊"
+
+#: src/cryptsetup.c:3501
+msgid "dump TCRYPT device information"
+msgstr "傾印 TCRYPT 裝置資訊"
+
+#: src/cryptsetup.c:3502
+msgid "dump BITLK device information"
+msgstr "傾印 BITLK 裝置資訊"
+
+#: src/cryptsetup.c:3503
+msgid "dump FVAULT2 device information"
+msgstr "傾印 FVAULT2 裝置資訊"
+
+#: src/cryptsetup.c:3504
+msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
+msgstr "暫停 LUKS 裝置並清除金鑰（所有 IO 皆凍結）"
+
+#: src/cryptsetup.c:3505
+msgid "Resume suspended LUKS device"
+msgstr "恢復已暫停的 LUKS 裝置"
+
+#: src/cryptsetup.c:3506
+msgid "Backup LUKS device header and keyslots"
+msgstr "備份 LUKS 裝置標頭與金鑰槽"
+
+#: src/cryptsetup.c:3507
+msgid "Restore LUKS device header and keyslots"
+msgstr "還原 LUKS 裝置標頭與金鑰槽"
+
+#: src/cryptsetup.c:3508
+msgid "<add|remove|import|export> <device>"
+msgstr "<add|remove|import|export> <device>"
+
+#: src/cryptsetup.c:3508
+msgid "Manipulate LUKS2 tokens"
+msgstr "操作 LUKS2 token"
+
+#: src/cryptsetup.c:3527 src/veritysetup.c:505 src/integritysetup.c:582
+msgid ""
+"\n"
+"<action> is one of:\n"
+msgstr ""
+"\n"
+"<action> 是下列其中一個：\n"
+
+#: src/cryptsetup.c:3533
+msgid ""
+"\n"
+"You can also use old <action> syntax aliases:\n"
+"\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen, fvault2Open\n"
+"\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, bitlkClose, fvault2Close\n"
+msgstr ""
+"\n"
+"您也可以使用舊的 <action> 語法別名：\n"
+"\topen: create (plainOpen)、luksOpen、loopaesOpen、tcryptOpen、bitlkOpen、fvault2Open\n"
+"\tclose: remove (plainClose)、luksClose、loopaesClose、tcryptClose、bitlkClose、fvault2Close\n"
+
+#: src/cryptsetup.c:3537
+#, c-format
+msgid ""
+"\n"
+"<name> is the device to create under %s\n"
+"<device> is the encrypted device\n"
+"<key slot> is the LUKS key slot number to modify\n"
+"<key file> optional key file for the new key for luksAddKey action\n"
+msgstr ""
+"\n"
+"<name> 是要在 %s 下建立的裝置\n"
+"<device> 是加密裝置\n"
+"<key slot> 是要修改的 LUKS 金鑰槽編號\n"
+"<key file> 是 luksAddKey 動作中，新金鑰的選用金鑰檔\n"
+
+#: src/cryptsetup.c:3544
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in metadata format is %s (for luksFormat action).\n"
+msgstr ""
+"\n"
+"編譯內建的預設中繼資料格式為 %s（用於 luksFormat 動作）。\n"
+
+#: src/cryptsetup.c:3549
+msgid ""
+"\n"
+"LUKS2 external token plugin support is enabled.\n"
+msgstr ""
+"\n"
+"已啟用 LUKS2 外部 token 外掛程式支援。\n"
+
+#: src/cryptsetup.c:3550
+#, c-format
+msgid "LUKS2 external token plugin path: %s.\n"
+msgstr "LUKS2 外部 token 外掛程式路徑：%s。\n"
+
+#: src/cryptsetup.c:3552
+msgid ""
+"\n"
+"LUKS2 external token plugin support is disabled.\n"
+msgstr ""
+"\n"
+"已停用 LUKS2 外部 token 外掛程式支援。\n"
+
+#: src/cryptsetup.c:3556
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in key and passphrase parameters:\n"
+"\tMaximum keyfile size: %dkB, Maximum interactive passphrase length %d (characters)\n"
+"Default PBKDF for LUKS1: %s, iteration time: %d (ms)\n"
+"Default PBKDF for LUKS2: %s\n"
+"\tIteration time: %d, Memory required: %dkB, Parallel threads: %d\n"
+msgstr ""
+"\n"
+"編譯內建的預設金鑰與通行密碼參數：\n"
+"\t金鑰檔大小上限：%dkB，互動式通行密碼長度上限 %d（字元）\n"
+"LUKS1 的預設 PBKDF：%s，疊代時間：%d（毫秒）\n"
+"LUKS2 的預設 PBKDF：%s\n"
+"\t疊代時間：%d，所需記憶體：%dkB，平行執行緒：%d\n"
+
+#: src/cryptsetup.c:3567
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in device cipher parameters:\n"
+"\tloop-AES: %s, Key %d bits\n"
+"\tplain: %s, Key: %d bits, Password hashing: %s\n"
+"\tLUKS: %s, Key: %d bits, LUKS header hashing: %s, RNG: %s\n"
+msgstr ""
+"\n"
+"編譯內建的預設裝置加密參數：\n"
+"\tloop-AES：%s，金鑰 %d 位元\n"
+"\tplain：%s，金鑰：%d 位元，密碼雜湊：%s\n"
+"\tLUKS：%s，金鑰：%d 位元，LUKS 標頭雜湊：%s，RNG：%s\n"
+
+#: src/cryptsetup.c:3576
+msgid "\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
+msgstr "\tLUKS：使用 XTS 模式（兩個內部金鑰）的預設金鑰大小將加倍。\n"
+
+#: src/cryptsetup.c:3594 src/veritysetup.c:647 src/integritysetup.c:742
+#, c-format
+msgid "%s: requires %s as arguments"
+msgstr "%s：需要 %s 作為引數"
+
+#: src/cryptsetup.c:3634 src/utils_reencrypt_luks1.c:1143
+msgid "Key slot is invalid."
+msgstr "金鑰槽無效。"
+
+#: src/cryptsetup.c:3662
+msgid "Device size must be multiple of 512 bytes sector."
+msgstr "裝置大小必須為 512 位元組磁區的倍數。"
+
+#: src/cryptsetup.c:3667
+msgid "Invalid max reencryption hotzone size specification."
+msgstr "無效的最大重新加密熱區大小規格。"
+
+#: src/cryptsetup.c:3681 src/cryptsetup.c:3698 src/cryptsetup.c:3710
+msgid "Key size must be a multiple of 8 bits"
+msgstr "金鑰大小必須為 8 位元的倍數"
+
+#: src/cryptsetup.c:3688
+msgid "At most 2 key size specifications can be supplied."
+msgstr "最多可提供 2 個金鑰大小規格。"
+
+#: src/cryptsetup.c:3717 src/cryptsetup.c:3728
+#, c-format
+msgid "At most %d volume key specifications can be supplied."
+msgstr "最多可提供 %d 個卷金鑰規格。"
+
+#: src/cryptsetup.c:3740
+#, c-format
+msgid "At most %d keyring link specifications can be supplied."
+msgstr "最多可提供 %d 個鑰匙圈連結規格。"
+
+#: src/cryptsetup.c:3749
+msgid "Maximum device reduce size is 1 GiB."
+msgstr "裝置縮減大小上限為 1 GiB。"
+
+#: src/cryptsetup.c:3752
+msgid "Reduce size must be multiple of 512 bytes sector."
+msgstr "縮減大小必須為 512 位元組磁區的倍數。"
+
+#: src/cryptsetup.c:3769
+msgid "Option --priority can be only ignore/normal/prefer."
+msgstr "--priority 選項只能是 ignore/normal/prefer。"
+
+#: src/cryptsetup.c:3774
+msgid "Invalid maximal tries specification."
+msgstr "無效的最大嘗試次數規格。"
+
+#: src/cryptsetup.c:3793 src/veritysetup.c:568 src/integritysetup.c:662
+msgid "Show this help message"
+msgstr "顯示此說明訊息"
+
+#: src/cryptsetup.c:3794 src/veritysetup.c:569 src/integritysetup.c:663
+msgid "Display brief usage"
+msgstr "顯示簡短用法"
+
+#: src/cryptsetup.c:3795 src/veritysetup.c:570 src/integritysetup.c:664
+msgid "Print package version"
+msgstr "列印套件版本"
+
+#: src/cryptsetup.c:3806 src/veritysetup.c:581 src/integritysetup.c:675
+msgid "Help options:"
+msgstr "說明選項："
+
+#: src/cryptsetup.c:3829 src/veritysetup.c:602 src/integritysetup.c:695
+msgid "[OPTION...] <action> <action-specific>"
+msgstr "[OPTION...] <action> <action-specific>"
+
+#: src/cryptsetup.c:3838 src/veritysetup.c:611 src/integritysetup.c:706
+msgid "Argument <action> missing."
+msgstr "缺少 <action> 引數。"
+
+#: src/cryptsetup.c:3917 src/veritysetup.c:642 src/integritysetup.c:737
+msgid "Unknown action."
+msgstr "未知的動作。"
+
+#: src/cryptsetup.c:3935
+msgid "Option --key-file takes precedence over specified key file argument."
+msgstr "--key-file 選項優先於指定的金鑰檔引數。"
+
+#: src/cryptsetup.c:3941
+msgid "Only one --key-file argument is allowed."
+msgstr "僅允許一個 --key-file 引數。"
+
+#: src/cryptsetup.c:3946
+msgid "Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/argon2id."
+msgstr "密碼式金鑰衍生函式（PBKDF）只能是 pbkdf2 或 argon2i/argon2id。"
+
+#: src/cryptsetup.c:3951
+msgid "PBKDF forced iterations cannot be combined with iteration time option."
+msgstr "PBKDF 強制疊代次數不能與疊代時間選項合併使用。"
+
+#: src/cryptsetup.c:3956
+msgid "Cannot link volume key to a keyring when keyring is disabled."
+msgstr "停用鑰匙圈時無法將卷金鑰連結至鑰匙圈。"
+
+#: src/cryptsetup.c:3961
+msgid "Cannot use keyring key description when keyring is disabled."
+msgstr "停用鑰匙圈時無法使用鑰匙圈金鑰描述。"
+
+#: src/cryptsetup.c:3966
+msgid "Inline integrity must be used together with --integrity option."
+msgstr "inline integrity 必須與 --integrity 選項一起使用。"
+
+#: src/cryptsetup.c:3977
+msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
+msgstr "--keyslot-cipher 與 --keyslot-key-size 選項必須一起使用。"
+
+#: src/cryptsetup.c:3985
+msgid "No action taken. Invoked with --test-args option.\n"
+msgstr "未採取任何動作。已以 --test-args 選項呼叫。\n"
+
+#: src/cryptsetup.c:3998
+msgid "Cannot disable metadata locking."
+msgstr "無法停用中繼資料鎖定。"
+
+#: src/veritysetup.c:41
+msgid "Invalid salt string specified."
+msgstr "指定的鹽值字串無效。"
+
+#: src/veritysetup.c:74
+#, c-format
+msgid "Cannot create hash image %s for writing."
+msgstr "無法建立要寫入的雜湊映像 %s。"
+
+#: src/veritysetup.c:84
+#, c-format
+msgid "Cannot create FEC image %s for writing."
+msgstr "無法建立要寫入的 FEC 映像 %s。"
+
+#: src/veritysetup.c:123
+#, c-format
+msgid "Cannot create root hash file %s for writing."
+msgstr "無法建立要寫入的根雜湊檔 %s。"
+
+#: src/veritysetup.c:130
+#, c-format
+msgid "Cannot write to root hash file %s."
+msgstr "無法寫入根雜湊檔 %s。"
+
+#: src/veritysetup.c:189 src/veritysetup.c:472
+#, c-format
+msgid "Device %s is not a valid VERITY device."
+msgstr "裝置 %s 不是有效的 VERITY 裝置。"
+
+#: src/veritysetup.c:206 src/veritysetup.c:223
+#, c-format
+msgid "Cannot read root hash file %s."
+msgstr "無法讀取根雜湊檔 %s。"
+
+#: src/veritysetup.c:211
+#, c-format
+msgid "Invalid root hash file %s."
+msgstr "無效的根雜湊檔 %s。"
+
+#: src/veritysetup.c:232
+msgid "Invalid root hash string specified."
+msgstr "指定的根雜湊字串無效。"
+
+#: src/veritysetup.c:240
+#, c-format
+msgid "Invalid signature file %s."
+msgstr "無效的簽章檔 %s。"
+
+#: src/veritysetup.c:247
+#, c-format
+msgid "Cannot read signature file %s."
+msgstr "無法讀取簽章檔 %s。"
+
+#: src/veritysetup.c:270 src/veritysetup.c:287
+msgid "Command requires <root_hash> or --root-hash-file option as argument."
+msgstr "命令需要 <root_hash> 或 --root-hash-file 選項作為引數。"
+
+#: src/veritysetup.c:485
+msgid "<data_device> <hash_device>"
+msgstr "<data_device> <hash_device>"
+
+#: src/veritysetup.c:485 src/integritysetup.c:562
+msgid "format device"
+msgstr "格式化裝置"
+
+#: src/veritysetup.c:486
+msgid "<data_device> <hash_device> [<root_hash>]"
+msgstr "<data_device> <hash_device> [<root_hash>]"
+
+#: src/veritysetup.c:486
+msgid "verify device"
+msgstr "驗證裝置"
+
+#: src/veritysetup.c:487
+msgid "<data_device> <name> <hash_device> [<root_hash>]"
+msgstr "<data_device> <name> <hash_device> [<root_hash>]"
+
+#: src/veritysetup.c:489 src/integritysetup.c:565
+msgid "show active device status"
+msgstr "顯示啟用中裝置的狀態"
+
+#: src/veritysetup.c:490
+msgid "<hash_device>"
+msgstr "<hash_device>"
+
+#: src/veritysetup.c:490 src/integritysetup.c:566
+msgid "show on-disk information"
+msgstr "顯示磁碟上資訊"
+
+#: src/veritysetup.c:509
+#, c-format
+msgid ""
+"\n"
+"<name> is the device to create under %s\n"
+"<data_device> is the data device\n"
+"<hash_device> is the device containing verification data\n"
+"<root_hash> hash of the root node on <hash_device>\n"
+msgstr ""
+"\n"
+"<name> 是要在 %s 下建立的裝置\n"
+"<data_device> 是資料裝置\n"
+"<hash_device> 是包含驗證資料的裝置\n"
+"<root_hash> 是 <hash_device> 上根節點的雜湊\n"
+
+#: src/veritysetup.c:516
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in dm-verity parameters:\n"
+"\tHash: %s, Data block (bytes): %u, Hash block (bytes): %u, Salt size: %u, Hash format: %u\n"
+msgstr ""
+"\n"
+"編譯內建的預設 dm-verity 參數：\n"
+"\t雜湊：%s，資料區塊（位元組）：%u，雜湊區塊（位元組）：%u，鹽值大小：%u，雜湊格式：%u\n"
+
+#: src/veritysetup.c:657
+msgid "Option --ignore-corruption and --restart-on-corruption cannot be used together."
+msgstr "--ignore-corruption 與 --restart-on-corruption 選項不能一起使用。"
+
+#: src/veritysetup.c:662
+msgid "Option --panic-on-corruption and --restart-on-corruption cannot be used together."
+msgstr "--panic-on-corruption 與 --restart-on-corruption 選項不能一起使用。"
+
+#: src/veritysetup.c:668
+msgid "Option --error-as-corruption must be used with --panic-on-corruption or --restart-on-corruption."
+msgstr "--error-as-corruption 選項必須與 --panic-on-corruption 或 --restart-on-corruption 一起使用。"
+
+#: src/integritysetup.c:169
+#, c-format
+msgid ""
+"This will overwrite data on %s and %s irrevocably.\n"
+"To preserve data device use --no-wipe option (and then activate with --integrity-recalculate)."
+msgstr ""
+"這將不可回復地覆寫 %s 與 %s 上的資料。\n"
+"若要保留資料裝置，請使用 --no-wipe 選項（然後以 --integrity-recalculate 啟動）。"
+
+#: src/integritysetup.c:215
+#, c-format
+msgid "Formatted with tag size %u%s, internal integrity %s.\n"
+msgstr "已以標籤大小 %u%s、內部完整性 %s 格式化。\n"
+
+#: src/integritysetup.c:216
+msgid " (inline hw tags)"
+msgstr "（內嵌硬體標籤）"
+
+#: src/integritysetup.c:305
+msgid "Setting recalculate flag is not supported, you may consider using --wipe instead."
+msgstr "不支援設定 recalculate 旗標，您可以考慮改用 --wipe。"
+
+#: src/integritysetup.c:382 src/integritysetup.c:549
+#, c-format
+msgid "Device %s is not a valid INTEGRITY device."
+msgstr "裝置 %s 不是有效的 INTEGRITY 裝置。"
+
+#: src/integritysetup.c:562 src/integritysetup.c:566
+msgid "<integrity_device>"
+msgstr "<integrity_device>"
+
+#: src/integritysetup.c:563
+msgid "<integrity_device> <name>"
+msgstr "<integrity_device> <name>"
+
+#: src/integritysetup.c:586
+#, c-format
+msgid ""
+"\n"
+"<name> is the device to create under %s\n"
+"<integrity_device> is the device containing data with integrity tags\n"
+msgstr ""
+"\n"
+"<name> 是要在 %s 下建立的裝置\n"
+"<integrity_device> 是包含帶完整性標籤資料的裝置\n"
+
+#: src/integritysetup.c:591
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in dm-integrity parameters:\n"
+"\tChecksum algorithm: %s\n"
+"\tMaximum keyfile size: %dkB\n"
+msgstr ""
+"\n"
+"編譯內建的預設 dm-integrity 參數：\n"
+"\t檢查碼演算法：%s\n"
+"\t金鑰檔大小上限：%dkB\n"
+
+#: src/integritysetup.c:648
+#, c-format
+msgid "Invalid --%s size. Maximum is %u bytes."
+msgstr "無效的 --%s 大小。最大值為 %u 位元組。"
+
+#: src/integritysetup.c:751
+msgid "Both key file and key size options must be specified."
+msgstr "金鑰檔與金鑰大小選項都必須指定。"
+
+#: src/integritysetup.c:755
+msgid "Both journal integrity key file and key size options must be specified."
+msgstr "日誌完整性金鑰檔與金鑰大小選項都必須指定。"
+
+#: src/integritysetup.c:758
+msgid "Journal integrity algorithm must be specified if journal integrity key is used."
+msgstr "使用日誌完整性金鑰時，必須指定日誌完整性演算法。"
+
+#: src/integritysetup.c:762
+msgid "Both journal encryption key file and key size options must be specified."
+msgstr "日誌加密金鑰檔與金鑰大小選項都必須指定。"
+
+#: src/integritysetup.c:765
+msgid "Journal encryption algorithm must be specified if journal encryption key is used."
+msgstr "使用日誌加密金鑰時，必須指定日誌加密演算法。"
+
+#: src/integritysetup.c:769
+msgid "Recovery and bitmap mode options are mutually exclusive."
+msgstr "Recovery 與 bitmap 模式選項互斥。"
+
+#: src/integritysetup.c:776
+msgid "Journal options cannot be used in bitmap mode."
+msgstr "日誌選項不能在 bitmap 模式中使用。"
+
+#: src/integritysetup.c:781
+msgid "Bitmap options can be used only in bitmap mode."
+msgstr "bitmap 選項只能在 bitmap 模式中使用。"
+
+#: src/integritysetup.c:787
+msgid "Inline mode cannot be combined with journal or bitmap options."
+msgstr "inline 模式不能與日誌或 bitmap 選項合併使用。"
+
+#: src/integritysetup.c:791
+msgid "Inline mode cannot be combined with separate data device."
+msgstr "inline 模式不能與分離式資料裝置合併使用。"
+
+#: src/integritysetup.c:795
+msgid "Keyed discards can be enabled only with keyed algorithms like HMAC."
+msgstr "僅能在使用 HMAC 等具金鑰演算法時啟用帶金鑰的 discard。"
+
+#: src/utils_tools.c:105
+msgid ""
+"\n"
+"WARNING!\n"
+"========\n"
+msgstr ""
+"\n"
+"警告！\n"
+"========\n"
+
+#. TRANSLATORS: User must type "YES" (in capital letters), do not translate this word.
+#: src/utils_tools.c:107
+#, c-format
+msgid ""
+"%s\n"
+"\n"
+"Are you sure? (Type 'yes' in capital letters): "
+msgstr ""
+"%s\n"
+"\n"
+"確定嗎？（請以大寫輸入 'yes'）： "
+
+#: src/utils_tools.c:113
+msgid "Error reading response from terminal."
+msgstr "從終端機讀取回應時發生錯誤。"
+
+#: src/utils_tools.c:145
+msgid "Command successful."
+msgstr "命令執行成功。"
+
+#: src/utils_tools.c:153
+msgid "wrong or missing parameters"
+msgstr "參數錯誤或缺少參數"
+
+#: src/utils_tools.c:155
+msgid "no permission or bad passphrase"
+msgstr "權限不足或通行密碼錯誤"
+
+#: src/utils_tools.c:157
+msgid "out of memory"
+msgstr "記憶體不足"
+
+#: src/utils_tools.c:159
+msgid "wrong device or file specified"
+msgstr "指定的裝置或檔案錯誤"
+
+#: src/utils_tools.c:161
+msgid "device already exists or device is busy"
+msgstr "裝置已存在或裝置忙碌中"
+
+#: src/utils_tools.c:163
+msgid "unknown error"
+msgstr "未知的錯誤"
+
+#: src/utils_tools.c:165
+#, c-format
+msgid "Command failed with code %i (%s)."
+msgstr "命令失敗，代碼 %i（%s）。"
+
+#: src/utils_tools.c:243
+#, c-format
+msgid "Key slot %i created."
+msgstr "已建立金鑰槽 %i。"
+
+#: src/utils_tools.c:245
+#, c-format
+msgid "Key slot %i unlocked."
+msgstr "金鑰槽 %i 已解鎖。"
+
+#: src/utils_tools.c:247
+#, c-format
+msgid "Key slot %i removed."
+msgstr "金鑰槽 %i 已移除。"
+
+#: src/utils_tools.c:256
+#, c-format
+msgid "Token %i created."
+msgstr "已建立 token %i。"
+
+#: src/utils_tools.c:258
+#, c-format
+msgid "Token %i removed."
+msgstr "token %i 已移除。"
+
+#: src/utils_tools.c:268
+msgid "No token could be unlocked with this PIN."
+msgstr "使用此 PIN 無法解鎖任何 token。"
+
+#: src/utils_tools.c:270
+#, c-format
+msgid "Token %i requires PIN."
+msgstr "token %i 需要 PIN。"
+
+#: src/utils_tools.c:272
+#, c-format
+msgid "Token (type %s) requires PIN."
+msgstr "token（類型 %s）需要 PIN。"
+
+#: src/utils_tools.c:275
+#, c-format
+msgid "Token %i cannot unlock assigned keyslot(s) (wrong keyslot passphrase)."
+msgstr "token %i 無法解鎖指定的金鑰槽（金鑰槽通行密碼錯誤）。"
+
+#: src/utils_tools.c:277
+#, c-format
+msgid "Token (type %s) cannot unlock assigned keyslot(s) (wrong keyslot passphrase)."
+msgstr "token（類型 %s）無法解鎖指定的金鑰槽（金鑰槽通行密碼錯誤）。"
+
+#: src/utils_tools.c:280
+#, c-format
+msgid "Token %i requires additional missing resource."
+msgstr "token %i 需要額外的缺失資源。"
+
+#: src/utils_tools.c:282
+#, c-format
+msgid "Token (type %s) requires additional missing resource."
+msgstr "token（類型 %s）需要額外的缺失資源。"
+
+#: src/utils_tools.c:285
+#, c-format
+msgid "No usable token (type %s) is available."
+msgstr "沒有可用的 token（類型 %s）。"
+
+#: src/utils_tools.c:287
+msgid "No usable token is available."
+msgstr "沒有可用的 token。"
+
+#: src/utils_tools.c:380
+#, c-format
+msgid "Cannot read keyfile %s."
+msgstr "無法讀取金鑰檔 %s。"
+
+#: src/utils_tools.c:385
+#, c-format
+msgid "Cannot read %d bytes from keyfile %s."
+msgstr "無法從金鑰檔 %2$s 讀取 %1$d 位元組。"
+
+#: src/utils_tools.c:410
+#, c-format
+msgid "Cannot open keyfile %s for write."
+msgstr "無法開啟金鑰檔 %s 進行寫入。"
+
+#: src/utils_tools.c:417
+#, c-format
+msgid "Cannot write to keyfile %s."
+msgstr "無法寫入金鑰檔 %s。"
+
+#: src/utils_tools.c:468
+msgid "Name is too long."
+msgstr "名稱太長。"
+
+#: src/utils_tools.c:471
+msgid "Name must not contain '/' character."
+msgstr "名稱不得包含 '/' 字元。"
+
+#: src/utils_progress.c:61
+#, c-format
+msgid "%02<PRIu64>m%02<PRIu64>s"
+msgstr "%02<PRIu64>分%02<PRIu64>秒"
+
+#: src/utils_progress.c:63
+#, c-format
+msgid "%02<PRIu64>h%02<PRIu64>m%02<PRIu64>s"
+msgstr "%02<PRIu64>時%02<PRIu64>分%02<PRIu64>秒"
+
+#: src/utils_progress.c:65
+#, c-format
+msgid "%02<PRIu64> days"
+msgstr "%02<PRIu64> 天"
+
+#: src/utils_progress.c:92 src/utils_progress.c:125
+#, c-format
+msgid "%4<PRIu64> %s written"
+msgstr "已寫入 %4<PRIu64> %s"
+
+#: src/utils_progress.c:96 src/utils_progress.c:129
+#, c-format
+msgid "speed %5.1f %s/s"
+msgstr "速度 %5.1f %s/秒"
+
+#. TRANSLATORS: 'time', 'written' and 'speed' string are supposed
+#. to get translated as well. 'eol' is always new-line or empty.
+#. See above.
+#.
+#: src/utils_progress.c:105
+#, c-format
+msgid "Progress: %5.1f%%, ETA %s, %s, %s%s"
+msgstr "進度：%5.1f%%，剩餘時間 %s，%s，%s%s"
+
+#. TRANSLATORS: 'time', 'written' and 'speed' string are supposed
+#. to get translated as well. See above
+#.
+#: src/utils_progress.c:137
+#, c-format
+msgid "Finished, time %s, %s, %s\n"
+msgstr "已完成，時間 %s，%s，%s\n"
+
+#: src/utils_password.c:28 src/utils_password.c:59
+#, c-format
+msgid "Cannot check password quality: %s"
+msgstr "無法檢查密碼品質：%s"
+
+#: src/utils_password.c:36
+#, c-format
+msgid ""
+"Password quality check failed:\n"
+" %s"
+msgstr ""
+"密碼品質檢查失敗：\n"
+" %s"
+
+#: src/utils_password.c:66
+#, c-format
+msgid "Password quality check failed: Bad passphrase (%s)"
+msgstr "密碼品質檢查失敗：通行密碼不佳（%s）"
+
+#: src/utils_password.c:197
+msgid "Read stopped at maximal interactive input length, passphrase can be trimmed."
+msgstr "讀取在互動式輸入長度上限處停止，通行密碼可能被截斷。"
+
+#: src/utils_password.c:224 src/utils_password.c:238
+msgid "Error reading passphrase from terminal."
+msgstr "從終端機讀取通行密碼時發生錯誤。"
+
+#: src/utils_password.c:236
+msgid "Verify passphrase: "
+msgstr "確認通行密碼： "
+
+#: src/utils_password.c:243
+msgid "Passphrases do not match."
+msgstr "通行密碼不一致。"
+
+#: src/utils_password.c:281
+msgid "Cannot use offset with terminal input."
+msgstr "終端機輸入不能使用偏移量。"
+
+#: src/utils_password.c:285
+#, c-format
+msgid "Enter passphrase: "
+msgstr "輸入通行密碼： "
+
+#: src/utils_password.c:288
+#, c-format
+msgid "Enter passphrase for %s: "
+msgstr "輸入 %s 的通行密碼： "
+
+#: src/utils_password.c:322
+msgid "No key available with this passphrase."
+msgstr "此通行密碼沒有可用的金鑰。"
+
+#: src/utils_password.c:324
+msgid "No usable keyslot is available."
+msgstr "沒有可用的金鑰槽。"
+
+#: src/utils_luks.c:55
+msgid "Can't do passphrase verification on non-tty inputs."
+msgstr "無法對非 tty 輸入進行通行密碼驗證。"
+
+#: src/utils_luks.c:179
+#, c-format
+msgid "Failed to open file %s in read-only mode."
+msgstr "無法以唯讀模式開啟檔案 %s。"
+
+#: src/utils_luks.c:193
+msgid "Provide valid LUKS2 token JSON:\n"
+msgstr "請提供有效的 LUKS2 token JSON：\n"
+
+#: src/utils_luks.c:200
+msgid "Failed to read JSON file."
+msgstr "無法讀取 JSON 檔。"
+
+#: src/utils_luks.c:205
+msgid ""
+"\n"
+"Read interrupted."
+msgstr ""
+"\n"
+"讀取中斷。"
+
+#: src/utils_luks.c:246
+#, c-format
+msgid "Failed to open file %s in write mode."
+msgstr "無法以寫入模式開啟檔案 %s。"
+
+#: src/utils_luks.c:255
+msgid ""
+"\n"
+"Write interrupted."
+msgstr ""
+"\n"
+"寫入中斷。"
+
+#: src/utils_luks.c:259
+msgid "Failed to write JSON file."
+msgstr "無法寫入 JSON 檔。"
+
+#: src/utils_reencrypt.c:93
+#, c-format
+msgid "Auto-detected active dm device '%s' for data device %s.\n"
+msgstr "已為資料裝置 %s 自動偵測到啟用中的 dm 裝置 '%s'。\n"
+
+#: src/utils_reencrypt.c:97
+#, c-format
+msgid "Failed to auto-detect device %s holders."
+msgstr "無法自動偵測裝置 %s 的持有者。"
+
+#: src/utils_reencrypt.c:103
+#, c-format
+msgid "Device %s is not a block device.\n"
+msgstr "裝置 %s 不是區塊裝置。\n"
+
+#: src/utils_reencrypt.c:105
+#, c-format
+msgid ""
+"Unable to decide if device %s is activated or not.\n"
+"Are you sure you want to proceed with reencryption in offline mode?\n"
+"It may lead to data corruption if the device is actually activated.\n"
+"To run reencryption in online mode, use --active-name parameter instead.\n"
+msgstr ""
+"無法判定裝置 %s 是否已啟動。\n"
+"確定要以離線模式繼續重新加密嗎？\n"
+"若裝置實際上已啟動，可能導致資料毀損。\n"
+"若要線上執行重新加密，請改用 --active-name 參數。\n"
+
+#: src/utils_reencrypt.c:114 src/utils_reencrypt.c:247
+#, c-format
+msgid ""
+"Device %s is not a block device. Can not auto-detect if it is active or not.\n"
+"Use --force-offline-reencrypt to bypass the check and run in offline mode (dangerous!)."
+msgstr ""
+"裝置 %s 不是區塊裝置。無法自動偵測其是否啟用。\n"
+"請使用 --force-offline-reencrypt 略過檢查並以離線模式執行（危險！）。"
+
+#: src/utils_reencrypt.c:151 src/utils_reencrypt.c:194
+#: src/utils_reencrypt.c:204
+msgid "Requested --resilience option cannot be applied to current reencryption operation."
+msgstr "要求的 --resilience 選項無法套用至目前的重新加密操作。"
+
+#: src/utils_reencrypt.c:176
+msgid "Device is not in LUKS2 encryption. Conflicting option --encrypt."
+msgstr "裝置不在 LUKS2 加密狀態。與 --encrypt 選項衝突。"
+
+#: src/utils_reencrypt.c:181
+msgid "Device is not in LUKS2 decryption. Conflicting option --decrypt."
+msgstr "裝置不在 LUKS2 解密狀態。與 --decrypt 選項衝突。"
+
+#: src/utils_reencrypt.c:188
+msgid "Device is in reencryption using datashift resilience. Requested --resilience option cannot be applied."
+msgstr "裝置正在使用 datashift 韌性進行重新加密。要求的 --resilience 選項無法套用。"
+
+#: src/utils_reencrypt.c:283 src/utils_reencrypt.c:1953
+msgid "Cannot determine volume key size for LUKS without keyslots, please use --new-key-size option."
+msgstr "無法判定無金鑰槽 LUKS 的卷金鑰大小，請使用 --new-key-size 選項。"
+
+#: src/utils_reencrypt.c:438
+msgid "Device requires reencryption recovery. Run repair first."
+msgstr "裝置需要重新加密復原。請先執行 repair。"
+
+#: src/utils_reencrypt.c:452
+#, c-format
+msgid "Device %s is already in LUKS2 reencryption. Do you wish to resume previously initialised operation?"
+msgstr "裝置 %s 已在 LUKS2 重新加密狀態。要恢復先前初始化的操作嗎？"
+
+#: src/utils_reencrypt.c:563
+msgid "Legacy LUKS2 reencryption is no longer supported."
+msgstr "不再支援舊版 LUKS2 重新加密。"
+
+#: src/utils_reencrypt.c:568
+msgid "Can not reencrypt LUKS2 device configured to use OPAL."
+msgstr "無法對設定為使用 OPAL 的 LUKS2 裝置重新加密。"
+
+#: src/utils_reencrypt.c:574
+msgid "Reencryption of device with integrity profile is not supported."
+msgstr "不支援對具 integrity profile 的裝置重新加密。"
+
+#: src/utils_reencrypt.c:611
+#, c-format
+msgid ""
+"Requested --sector-size %<PRIu32> is incompatible with %s superblock\n"
+"(block size: %<PRIu32> bytes) detected on device %s."
+msgstr ""
+"要求的 --sector-size %1$<PRIu32> 與在裝置 %4$s 上偵測到的 %2$s 超級區塊不相容\n"
+"（區塊大小：%3$<PRIu32> 位元組）。"
+
+#: src/utils_reencrypt.c:680 src/utils_reencrypt.c:2233
+msgid "Encryption without detached header (--header) is not possible without data device size reduction (--reduce-device-size)."
+msgstr "未縮減資料裝置大小（--reduce-device-size）時，無法在沒有分離式標頭（--header）的情況下加密。"
+
+#: src/utils_reencrypt.c:689
+msgid "Requested data offset must be less than or equal to half of --reduce-device-size parameter."
+msgstr "要求的資料偏移量必須小於或等於 --reduce-device-size 參數的一半。"
+
+#: src/utils_reencrypt.c:699
+#, c-format
+msgid "Adjusting --reduce-device-size value to twice the --offset %<PRIu64> (sectors).\n"
+msgstr "正在將 --reduce-device-size 值調整為 --offset %<PRIu64>（磁區）的兩倍。\n"
+
+#: src/utils_reencrypt.c:729
+#, c-format
+msgid "Temporary header file %s already exists. Aborting."
+msgstr "暫時標頭檔 %s 已存在。中止。"
+
+#: src/utils_reencrypt.c:731 src/utils_reencrypt.c:738
+#, c-format
+msgid "Cannot create temporary header file %s."
+msgstr "無法建立暫時標頭檔 %s。"
+
+#: src/utils_reencrypt.c:763
+msgid "LUKS2 metadata size is larger than data shift value."
+msgstr "LUKS2 中繼資料大小大於資料位移值。"
+
+#: src/utils_reencrypt.c:802
+#, c-format
+msgid "Failed to place new header at head of device %s."
+msgstr "無法將新標頭置於裝置 %s 的開頭。"
+
+#: src/utils_reencrypt.c:815
+#, c-format
+msgid "%s/%s is now active and ready for online encryption.\n"
+msgstr "%s/%s 現已啟用並可進行線上加密。\n"
+
+#: src/utils_reencrypt.c:852
+#, c-format
+msgid "Active device %s is not LUKS2."
+msgstr "啟用中的裝置 %s 不是 LUKS2。"
+
+#: src/utils_reencrypt.c:880
+msgid "Restoring original LUKS2 header."
+msgstr "正在還原原始 LUKS2 標頭。"
+
+#: src/utils_reencrypt.c:888
+msgid "Original LUKS2 header restore failed."
+msgstr "原始 LUKS2 標頭還原失敗。"
+
+#: src/utils_reencrypt.c:920
+#, c-format
+msgid "Header file %s does not exist. Do you want to initialize LUKS2 decryption of device %s and export LUKS2 header to file %s?"
+msgstr "標頭檔 %s 不存在。要初始化裝置 %s 的 LUKS2 解密，並將 LUKS2 標頭匯出至檔案 %s 嗎？"
+
+#: src/utils_reencrypt.c:963
+msgid "Failed to add read/write permissions to exported header file."
+msgstr "無法為匯出的標頭檔新增讀寫權限。"
+
+#: src/utils_reencrypt.c:1017
+#, c-format
+msgid "Reencryption initialization failed. Header backup is available in %s."
+msgstr "重新加密初始化失敗。標頭備份可在 %s 取得。"
+
+#: src/utils_reencrypt.c:1045
+msgid "LUKS2 decryption is supported with detached header device only (with data offset set to 0)."
+msgstr "LUKS2 解密僅支援搭配分離式標頭裝置（資料偏移量設為 0）。"
+
+#: src/utils_reencrypt.c:1506 src/utils_reencrypt.c:1531
+#: src/utils_reencrypt.c:1548 src/utils_reencrypt.c:1557
+msgid "Not enough free keyslots for reencryption."
+msgstr "可用金鑰槽不足，無法進行重新加密。"
+
+#: src/utils_reencrypt.c:1513
+msgid "No token could unlock the device."
+msgstr "沒有 token 能解鎖裝置。"
+
+#: src/utils_reencrypt.c:1588
+msgid "Key file or keyring key description can be used only with --key-slot or with exactly one key slot active."
+msgstr "金鑰檔或鑰匙圈金鑰描述僅能搭配 --key-slot 使用，或僅在剛好一個金鑰槽啟用時使用。"
+
+#: src/utils_reencrypt.c:1595 src/utils_reencrypt.c:1608
+#: src/utils_reencrypt_luks1.c:1092 src/utils_reencrypt_luks1.c:1103
+#, c-format
+msgid "Enter passphrase for key slot %d: "
+msgstr "輸入金鑰槽 %d 的通行密碼： "
+
+#: src/utils_reencrypt.c:1905
+#, c-format
+msgid "Switching data encryption cipher to %s.\n"
+msgstr "正在將資料加密演算法切換為 %s。\n"
+
+#: src/utils_reencrypt.c:2006 src/utils_reencrypt.c:2027
+msgid "Use --force-no-keyslots to reencrypt device with active keyslots by passing volume keys directly."
+msgstr "若要對有啟用金鑰槽的裝置重新加密，請使用 --force-no-keyslots 直接傳入卷金鑰。"
+
+#: src/utils_reencrypt.c:2022
+msgid "Option --new-volume-key-file must be paired with --new-key-size"
+msgstr "--new-volume-key-file 選項必須搭配 --new-key-size"
+
+#: src/utils_reencrypt.c:2064
+msgid "No data segment parameters changed. Reencryption aborted."
+msgstr "資料區段參數未變更。重新加密已中止。"
+
+#: src/utils_reencrypt.c:2101
+msgid ""
+"Encryption sector size increase on offline device is not supported.\n"
+"Activate the device first or use --force-offline-reencrypt option (dangerous!)."
+msgstr ""
+"不支援在離線裝置上增加加密磁區大小。\n"
+"請先啟動裝置，或使用 --force-offline-reencrypt 選項（危險！）。"
+
+#: src/utils_reencrypt.c:2143 src/utils_reencrypt_luks1.c:688
+#: src/utils_reencrypt_luks1.c:759
+msgid ""
+"\n"
+"Reencryption interrupted."
+msgstr ""
+"\n"
+"重新加密中斷。"
+
+#: src/utils_reencrypt.c:2148
+msgid "Resuming LUKS reencryption in forced offline mode.\n"
+msgstr "正在以強制離線模式恢復 LUKS 重新加密。\n"
+
+#: src/utils_reencrypt.c:2171
+#, c-format
+msgid "Device %s contains broken LUKS metadata. Aborting operation."
+msgstr "裝置 %s 包含損壞的 LUKS 中繼資料。中止操作。"
+
+#: src/utils_reencrypt.c:2187 src/utils_reencrypt.c:2209
+#, c-format
+msgid "Device %s is already LUKS device. Aborting operation."
+msgstr "裝置 %s 已是 LUKS 裝置。中止操作。"
+
+#: src/utils_reencrypt.c:2215
+#, c-format
+msgid "Device %s is already in LUKS reencryption. Aborting operation."
+msgstr "裝置 %s 已在 LUKS 重新加密狀態。中止操作。"
+
+#: src/utils_reencrypt.c:2298
+msgid "LUKS2 decryption requires --header option."
+msgstr "LUKS2 解密需要 --header 選項。"
+
+#: src/utils_reencrypt.c:2346
+msgid "Command requires device as argument."
+msgstr "命令需要裝置作為引數。"
+
+#: src/utils_reencrypt.c:2359
+#, c-format
+msgid "Conflicting versions. Device %s is LUKS1."
+msgstr "版本衝突。裝置 %s 是 LUKS1。"
+
+#: src/utils_reencrypt.c:2365
+#, c-format
+msgid "Conflicting versions. Device %s is in LUKS1 reencryption."
+msgstr "版本衝突。裝置 %s 處於 LUKS1 重新加密狀態。"
+
+#: src/utils_reencrypt.c:2371
+#, c-format
+msgid "Conflicting versions. Device %s is LUKS2."
+msgstr "版本衝突。裝置 %s 是 LUKS2。"
+
+#: src/utils_reencrypt.c:2377
+#, c-format
+msgid "Conflicting versions. Device %s is in LUKS2 reencryption."
+msgstr "版本衝突。裝置 %s 處於 LUKS2 重新加密狀態。"
+
+#: src/utils_reencrypt.c:2383
+msgid "LUKS2 reencryption already initialized. Aborting operation."
+msgstr "LUKS2 重新加密已初始化。中止操作。"
+
+#: src/utils_reencrypt.c:2390
+msgid "Device reencryption not in progress."
+msgstr "裝置重新加密未在進行中。"
+
+#: src/utils_reencrypt_luks1.c:116 src/utils_blockdev.c:285
+#, c-format
+msgid "Cannot exclusively open %s, device in use."
+msgstr "無法獨佔開啟 %s，裝置使用中。"
+
+#: src/utils_reencrypt_luks1.c:130 src/utils_reencrypt_luks1.c:883
+msgid "Allocation of aligned memory failed."
+msgstr "對齊記憶體配置失敗。"
+
+#: src/utils_reencrypt_luks1.c:137
+#, c-format
+msgid "Cannot read device %s."
+msgstr "無法讀取裝置 %s。"
+
+#: src/utils_reencrypt_luks1.c:148
+#, c-format
+msgid "Marking LUKS1 device %s unusable."
+msgstr "正在將 LUKS1 裝置 %s 標記為無法使用。"
+
+#: src/utils_reencrypt_luks1.c:164
+#, c-format
+msgid "Cannot write device %s."
+msgstr "無法寫入裝置 %s。"
+
+#: src/utils_reencrypt_luks1.c:213
+msgid "Cannot write reencryption log file."
+msgstr "無法寫入重新加密記錄檔。"
+
+#: src/utils_reencrypt_luks1.c:268
+msgid "Cannot read reencryption log file."
+msgstr "無法讀取重新加密記錄檔。"
+
+#: src/utils_reencrypt_luks1.c:279
+msgid "Wrong log format."
+msgstr "記錄格式錯誤。"
+
+#: src/utils_reencrypt_luks1.c:307
+#, c-format
+msgid "Log file %s exists, resuming reencryption.\n"
+msgstr "記錄檔 %s 存在，正在恢復重新加密。\n"
+
+#: src/utils_reencrypt_luks1.c:354
+msgid "Activating temporary device using old LUKS header."
+msgstr "正在使用舊 LUKS 標頭啟動暫時裝置。"
+
+#: src/utils_reencrypt_luks1.c:364
+msgid "Activating temporary device using new LUKS header."
+msgstr "正在使用新 LUKS 標頭啟動暫時裝置。"
+
+#: src/utils_reencrypt_luks1.c:374
+msgid "Activation of temporary devices failed."
+msgstr "暫時裝置啟動失敗。"
+
+#: src/utils_reencrypt_luks1.c:434
+msgid "Failed to set data offset."
+msgstr "無法設定資料偏移量。"
+
+#: src/utils_reencrypt_luks1.c:440
+msgid "Failed to set metadata size."
+msgstr "無法設定中繼資料大小。"
+
+#: src/utils_reencrypt_luks1.c:448
+#, c-format
+msgid "New LUKS header for device %s created."
+msgstr "已建立裝置 %s 的新 LUKS 標頭。"
+
+#: src/utils_reencrypt_luks1.c:485
+#, c-format
+msgid "%s header backup of device %s created."
+msgstr "已建立裝置 %s 的 %s 標頭備份。"
+
+#: src/utils_reencrypt_luks1.c:541
+msgid "Creation of LUKS backup headers failed."
+msgstr "建立 LUKS 備份標頭失敗。"
+
+#: src/utils_reencrypt_luks1.c:670
+#, c-format
+msgid "Cannot restore %s header on device %s."
+msgstr "無法在裝置 %s 上還原 %s 標頭。"
+
+#: src/utils_reencrypt_luks1.c:672
+#, c-format
+msgid "%s header on device %s restored."
+msgstr "裝置 %s 上的 %s 標頭已還原。"
+
+#: src/utils_reencrypt_luks1.c:855 src/utils_reencrypt_luks1.c:861
+msgid "Cannot open temporary LUKS device."
+msgstr "無法開啟暫時 LUKS 裝置。"
+
+#: src/utils_reencrypt_luks1.c:866 src/utils_reencrypt_luks1.c:871
+msgid "Cannot get device size."
+msgstr "無法取得裝置大小。"
+
+#: src/utils_reencrypt_luks1.c:913
+msgid "IO error during reencryption."
+msgstr "重新加密期間發生 IO 錯誤。"
+
+#: src/utils_reencrypt_luks1.c:943
+msgid "Provided UUID is invalid."
+msgstr "提供的 UUID 無效。"
+
+#: src/utils_reencrypt_luks1.c:1045
+msgid "Key file can be used only with --key-slot or with exactly one key slot active."
+msgstr "金鑰檔僅能搭配 --key-slot 使用，或僅在剛好一個金鑰槽啟用時使用。"
+
+#: src/utils_reencrypt_luks1.c:1169
+msgid "Cannot open reencryption log file."
+msgstr "無法開啟重新加密記錄檔。"
+
+#: src/utils_reencrypt_luks1.c:1175
+msgid "No decryption in progress, provided UUID can be used only to resume suspended decryption process."
+msgstr "沒有進行中的解密，提供的 UUID 僅能用於恢復已暫停的解密程序。"
+
+#: src/utils_reencrypt_luks1.c:1231
+#, c-format
+msgid "Reencryption will change: %s%s%s%s%s%s."
+msgstr "重新加密將變更：%s%s%s%s%s%s。"
+
+#: src/utils_reencrypt_luks1.c:1232
+msgid "volume key"
+msgstr "卷金鑰"
+
+#: src/utils_reencrypt_luks1.c:1234
+msgid "set hash to "
+msgstr "將雜湊設定為 "
+
+#: src/utils_reencrypt_luks1.c:1235
+msgid ", set cipher to "
+msgstr "，將加密演算法設定為 "
+
+#: src/utils_blockdev.c:179
+#, c-format
+msgid "WARNING: Device %s already contains a '%s' partition signature.\n"
+msgstr "警告：裝置 %s 已包含 '%s' 分割區簽章。\n"
+
+#: src/utils_blockdev.c:187
+#, c-format
+msgid "WARNING: Device %s already contains a '%s' superblock signature.\n"
+msgstr "警告：裝置 %s 已包含 '%s' 超級區塊簽章。\n"
+
+#: src/utils_blockdev.c:209 src/utils_blockdev.c:292 src/utils_blockdev.c:344
+msgid "Failed to initialize device signature probes."
+msgstr "無法初始化裝置簽章探查。"
+
+#: src/utils_blockdev.c:272
+#, c-format
+msgid "Failed to stat device %s."
+msgstr "無法取得裝置 %s 的狀態。"
+
+#: src/utils_blockdev.c:287
+#, c-format
+msgid "Failed to open file %s in read/write mode."
+msgstr "無法以讀寫模式開啟檔案 %s。"
+
+#: src/utils_blockdev.c:307
+#, c-format
+msgid "Existing '%s' partition signature on device %s will be wiped."
+msgstr "裝置 %s 上既有的 '%s' 分割區簽章將被清除。"
+
+#: src/utils_blockdev.c:310
+#, c-format
+msgid "Existing '%s' superblock signature on device %s will be wiped."
+msgstr "裝置 %s 上既有的 '%s' 超級區塊簽章將被清除。"
+
+#: src/utils_blockdev.c:313
+msgid "Failed to wipe device signature."
+msgstr "無法清除裝置簽章。"
+
+#: src/utils_blockdev.c:320
+#, c-format
+msgid "Failed to probe device %s for a signature."
+msgstr "無法探查裝置 %s 的簽章。"
+
+#: src/utils_args.c:52
+#, c-format
+msgid "Invalid size specification in parameter --%s."
+msgstr "參數 --%s 中的大小規格無效。"
+
+#: src/utils_args.c:112
+#, c-format
+msgid "Option --%s is not allowed with %s action."
+msgstr "--%s 選項不允許用於 %s 動作。"
+
+#: src/utils_key_description.c:66
+msgid "Type specification in --link-vk-to-keyring keyring specification is ignored."
+msgstr "--link-vk-to-keyring 鑰匙圈規格中的類型規格將被忽略。"
+
+#: src/utils_key_description.c:131
+msgid "Key types have to be the same for both volume keys."
+msgstr "兩個卷金鑰的金鑰類型必須相同。"
+
+#: src/utils_key_description.c:136
+msgid "Both volume keys have to be linked to the same keyring."
+msgstr "兩個卷金鑰都必須連結至同一個鑰匙圈。"
+
+#: src/utils_key_description.c:146
+msgid "You need to supply more key names."
+msgstr "您需要提供更多金鑰名稱。"
+
+#: src/utils_key_description.c:150
+msgid "Invalid --link-vk-to-keyring value."
+msgstr "無效的 --link-vk-to-keyring 值。"
+
+#: src/utils_keyslot_check.c:114
+#, c-format
+msgid "Keyslot %d binary data could be corrupted.\n"
+msgstr "金鑰槽 %d 的二進位資料可能已毀損。\n"
+
+#: src/utils_keyslot_check.c:124
+#, c-format
+msgid "  Suspected offset: 0x%<PRIx64>\n"
+msgstr "  疑似偏移量：0x%<PRIx64>\n"
+
+#: src/utils_keyslot_check.c:127
+msgid "  Subsequent suspected offsets are suppressed.\n"
+msgstr "  後續的疑似偏移量已隱藏。\n"
+
+#: src/utils_keyslot_check.c:178 src/utils_keyslot_check.c:183
+#, c-format
+msgid "Keyslot %d cannot be read from the device."
+msgstr "無法從裝置讀取金鑰槽 %d。"
+
+#: src/utils_keyslot_check.c:194
+#, c-format
+msgid "You can use hexdump -v -C -n 128 -s <offset_0xXXXX> \"%s\" to inspect the data.\n"
+msgstr "您可以使用 hexdump -v -C -n 128 -s <offset_0xXXXX> \"%s\" 檢查資料。\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:110
+msgid "Failed to write ssh token json."
+msgstr "無法寫入 ssh token json。"
+
+#: tokens/ssh/cryptsetup-ssh.c:128
+msgid ""
+"Experimental cryptsetup plugin for unlocking LUKS2 devices with token connected to an SSH server\vThis plugin currently allows only adding a token to an existing key slot.\n"
+"\n"
+"Specified SSH server must contain a key file on the specified path with a passphrase for an existing key slot on the device.\n"
+"Provided credentials will be used by cryptsetup to get the password when opening the device using the token.\n"
+"\n"
+"Note: The information provided when adding the token (SSH server address, user and paths) will be stored in the LUKS2 header in plaintext."
+msgstr ""
+"用於以連線至 SSH 伺服器的 token 解鎖 LUKS2 裝置的實驗性 cryptsetup 外掛程式\\v此外掛程式目前僅允許在既有金鑰槽上新增 token。\n"
+"\n"
+"指定的 SSH 伺服器必須在指定路徑包含一個金鑰檔，其通行密碼對應裝置上既有的金鑰槽。\n"
+"提供的憑證將由 cryptsetup 在透過 token 開啟裝置時用來取得密碼。\n"
+"\n"
+"注意：新增 token 時提供的資訊（SSH 伺服器位址、使用者與路徑）將以明文儲存在 LUKS2 標頭中。"
+
+#: tokens/ssh/cryptsetup-ssh.c:138
+msgid "<action> <device>"
+msgstr "<action> <device>"
+
+#: tokens/ssh/cryptsetup-ssh.c:141
+msgid "Options for the 'add' action:"
+msgstr "'add' 動作的選項："
+
+#: tokens/ssh/cryptsetup-ssh.c:142
+msgid "IP address/URL of the remote server for this token"
+msgstr "此 token 遠端伺服器的 IP 位址/URL"
+
+#: tokens/ssh/cryptsetup-ssh.c:143
+msgid "Username used for the remote server"
+msgstr "遠端伺服器使用的使用者名稱"
+
+#: tokens/ssh/cryptsetup-ssh.c:144
+msgid "Path to the key file on the remote server"
+msgstr "遠端伺服器上金鑰檔的路徑"
+
+#: tokens/ssh/cryptsetup-ssh.c:145
+msgid "Path to the SSH key for connecting to the remote server"
+msgstr "連線至遠端伺服器所用 SSH 金鑰的路徑"
+
+#: tokens/ssh/cryptsetup-ssh.c:147
+msgid "Path to directory containinig libcryptsetup external tokens"
+msgstr "包含 libcryptsetup 外部 token 的目錄路徑"
+
+#: tokens/ssh/cryptsetup-ssh.c:148
+msgid "Keyslot to assign the token to. If not specified, token will be assigned to the first keyslot matching provided passphrase."
+msgstr "要指派 token 的金鑰槽。若未指定，token 將指派給符合所提供通行密碼的第一個金鑰槽。"
+
+#: tokens/ssh/cryptsetup-ssh.c:150
+msgid "Generic options:"
+msgstr "一般選項："
+
+#: tokens/ssh/cryptsetup-ssh.c:151
+msgid "Shows more detailed error messages"
+msgstr "顯示更詳細的錯誤訊息"
+
+#: tokens/ssh/cryptsetup-ssh.c:152
+msgid "Show debug messages"
+msgstr "顯示偵錯訊息"
+
+#: tokens/ssh/cryptsetup-ssh.c:153
+msgid "Show debug messages including JSON metadata"
+msgstr "顯示含 JSON 中繼資料的偵錯訊息"
+
+#: tokens/ssh/cryptsetup-ssh.c:268
+msgid "Failed to open and import private key:\n"
+msgstr "無法開啟並匯入私密金鑰：\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:272
+msgid "Failed to import private key (password protected?).\n"
+msgstr "無法匯入私密金鑰（受密碼保護？）。\n"
+
+#. TRANSLATORS: SSH credentials prompt, e.g. "user@server's password: "
+#: tokens/ssh/cryptsetup-ssh.c:274
+#, c-format
+msgid "%s@%s's password: "
+msgstr "%s@%s 的密碼： "
+
+#: tokens/ssh/cryptsetup-ssh.c:363
+#, c-format
+msgid "Failed to parse arguments.\n"
+msgstr "無法剖析引數。\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:374
+#, c-format
+msgid "An action must be specified\n"
+msgstr "必須指定動作\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:380
+#, c-format
+msgid "Device must be specified for '%s' action.\n"
+msgstr "'%s' 動作必須指定裝置。\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:385
+#, c-format
+msgid "SSH server must be specified for '%s' action.\n"
+msgstr "'%s' 動作必須指定 SSH 伺服器。\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:390
+#, c-format
+msgid "SSH user must be specified for '%s' action.\n"
+msgstr "'%s' 動作必須指定 SSH 使用者。\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:395
+#, c-format
+msgid "SSH path must be specified for '%s' action.\n"
+msgstr "'%s' 動作必須指定 SSH 路徑。\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:400
+#, c-format
+msgid "SSH key path must be specified for '%s' action.\n"
+msgstr "'%s' 動作必須指定 SSH 金鑰路徑。\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:407
+#, c-format
+msgid "Failed open %s using provided credentials.\n"
+msgstr "使用提供的憑證開啟 %s 失敗。\n"
+
+#: tokens/ssh/cryptsetup-ssh.c:424
+#, c-format
+msgid "Only 'add' action is currently supported by this plugin.\n"
+msgstr "此外掛程式目前僅支援 'add' 動作。\n"
+
+#: tokens/ssh/ssh-utils.c:33
+msgid "Cannot create sftp session: "
+msgstr "無法建立 sftp 工作階段： "
+
+#: tokens/ssh/ssh-utils.c:40
+msgid "Cannot init sftp session: "
+msgstr "無法初始化 sftp 工作階段： "
+
+#: tokens/ssh/ssh-utils.c:46
+msgid "Cannot open sftp session: "
+msgstr "無法開啟 sftp 工作階段： "
+
+#: tokens/ssh/ssh-utils.c:53
+msgid "Cannot stat sftp file: "
+msgstr "無法取得 sftp 檔案狀態： "
+
+#: tokens/ssh/ssh-utils.c:61
+msgid "Not enough memory.\n"
+msgstr "記憶體不足。\n"
+
+#: tokens/ssh/ssh-utils.c:68
+msgid "Cannot read remote key: "
+msgstr "無法讀取遠端金鑰： "
+
+#: tokens/ssh/ssh-utils.c:109
+msgid "Connection failed: "
+msgstr "連線失敗： "
+
+#: tokens/ssh/ssh-utils.c:119
+msgid "Server not known: "
+msgstr "不明的伺服器： "
+
+#: tokens/ssh/ssh-utils.c:147
+msgid "Public key auth method not allowed on host.\n"
+msgstr "主機不允許公開金鑰驗證方法。\n"
+
+#: tokens/ssh/ssh-utils.c:158
+msgid "Public key authentication error: "
+msgstr "公開金鑰驗證錯誤： "

From 23d82f2e371d1b74990573578a553228f15b8a22 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Fri, 4 Sep 2026 16:59:03 +0200
Subject: [PATCH 216/244] Add release notes for 2.8.8.

---
 docs/v2.8.8-ReleaseNotes | 69 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 docs/v2.8.8-ReleaseNotes

diff --git a/docs/v2.8.8-ReleaseNotes b/docs/v2.8.8-ReleaseNotes
new file mode 100644
index 000000000..52d7a6500
--- /dev/null
+++ b/docs/v2.8.8-ReleaseNotes
@@ -0,0 +1,69 @@
+Cryptsetup 2.8.8 Release Notes
+==============================
+Stable bug-fix release with minor extensions.
+
+All users of cryptsetup must upgrade to this version.
+
+Changes since version 2.8.7
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* integritysetup: add support for keyed discards.
+
+  An integrity device in standalone mode, with a keyed integrity algorithm like HMAC and
+  enabled discards (TRIM), could be vulnerable to wiping part of the device using a discard pattern.
+
+  This issue can be worked around by using a keyed discards filler.
+  Once set, it is set permanently for the integrity device and cannot be reverted.
+
+  Integritysetup now supports a new --allow-discards-keyed option.
+  Once used, it will upgrade the superblock and activate keyed discards.
+  After the upgrade, keyed discards are always used, even with the old --allow-discards option.
+
+  Keyed discard is available since Linux kernel 7.3.
+
+  The kernel issue was reported (and fixed) by Shukai Ni and Jo Van Bulck, DistriNet, KU Leuven.
+
+  Note: Integritysetup was intended to be used with non-cryptographic integrity protection only.
+  If you need cryptographic protection, use LUKS2 and AEAD (discards are not supported).
+
+* Avoid time-of-check/time-of-use (TOCTOU) issue in LUKS header restore.
+
+  The LUKS header restore function validates the provided header file and then reopens the same
+  file path to restore the LUKS header. In a specifically crafted environment, a symlink flip could
+  occur between validating and restoring the header, resulting in a different file being used for
+  the LUKS header restore (potentially leaking the file content).
+  The libcryptsetup now opens the device only once. The issue affects both LUKS1 and LUKS2.
+
+  The issue was reported by Vivek Parikh, BreachX Zero Day Labs.
+
+  Note: LUKS header backup/restore is a system administrative task (similar to filesystem
+  backup/restore) that must run in a secure environment. Such a backup is usually a multi-step
+  process, and it is up to the caller to ensure security of that environment.
+
+* BITLK: harden metadata validation.
+
+  If a crafted BITLK (BitLocker-compatible) image is opened, the allocated buffer size for the key
+  can be incorrect. This can happen if the encryption is changed from AES-CBC-128 to a mode with
+  an Elephant diffuser, without recalculating the stored key.
+
+  Also, the data offset can be intentionally wrong, which could lead to an infinite loop when
+  parsing metadata.
+
+  Note that creating such an incorrect image requires knowledge of the disk password, as MAC
+  protects the metadata, and this MAC is checked by cryptsetup.
+
+  These issues were reported by Aisle Research.
+
+* Fix possible integer overflow in LUKS metadata parsing.
+
+  On systems with a 32-bit integer size, the anti-forensic (AF) data size calculation could
+  overflow, causing an application crash.
+
+  The issue was reported by Aisle Research.
+
+* cryptsetup: fix local memory corruption bug in reencrypt init.
+
+  If a device intended for reencryption contains more than 16 active LUKS2 keyslots or tokens,
+  the reencryption initialization could corrupt internal memory, leading to an application crash.
+
+  The issue was reported by Aisle Research.

From ff3f1723e0e65003e35b82094642b0f0a3583ddb Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 7 Sep 2026 08:22:27 +0200
Subject: [PATCH 217/244] Version 2.8.8.

---
 README.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 22c930a1e..ef359649e 100644
--- a/README.md
+++ b/README.md
@@ -39,11 +39,11 @@ Download
 Release notes and tarballs are available at
 [kernel.org](https://cdn.kernel.org/pub/linux/utils/cryptsetup/).
 
-**The latest stable cryptsetup release version is 2.8.7**
-  * [cryptsetup-2.8.7.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7.tar.xz)
-  * Signature [cryptsetup-2.8.7.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.7.tar.sign)
+**The latest stable cryptsetup release version is 2.8.8**
+  * [cryptsetup-2.8.8.tar.xz](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.8.tar.xz)
+  * Signature [cryptsetup-2.8.8.tar.sign](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/cryptsetup-2.8.8.tar.sign)
     _(You need to decompress file first to check signature.)_
-  * [Cryptsetup 2.8.7 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.7-ReleaseNotes).
+  * [Cryptsetup 2.8.8 Release Notes](https://cdn.kernel.org/pub/linux/utils/cryptsetup/v2.8/v2.8.8-ReleaseNotes).
 
 [Previous versions](https://cdn.kernel.org/pub/linux/utils/cryptsetup)
 

From dd99f3e2197a2ed9eb812db77d9ab1731789a803 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 9 Sep 2026 16:48:06 +0200
Subject: [PATCH 218/244] tests: add missing cleanup for some images.

---
 tests/api-test.c            | 1 +
 tests/luks2-validation-test | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/tests/api-test.c b/tests/api-test.c
index fa30d9b19..1ead4c5ce 100644
--- a/tests/api-test.c
+++ b/tests/api-test.c
@@ -196,6 +196,7 @@ static void _cleanup(void)
 
 	_system("rm -f " IMAGE_EMPTY, 0);
 	_system("rm -f " IMAGE1, 0);
+	_system("rm -rf tcrypt-images", 0);
 
 	if (test_loop_file)
 		remove(test_loop_file);
diff --git a/tests/luks2-validation-test b/tests/luks2-validation-test
index 47e631fe9..bb7d5c4a0 100755
--- a/tests/luks2-validation-test
+++ b/tests/luks2-validation-test
@@ -27,7 +27,7 @@ FAILS=0
 
 remove_mapping()
 {
-	rm -rf $IMG $TST_IMGS >/dev/null 2>&1
+	rm -rf $ORIG_IMG $IMG $TST_IMGS >/dev/null 2>&1
 }
 
 fail()

From 42ef0ab97b66d08b0760d54c35dcc0b55184c752 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 22 Jul 2026 16:00:08 +0200
Subject: [PATCH 219/244] tests: unify test images decompression/unpacking in
 api tests.

Adds dedicated helpers and also check if archive/image
decompression was succesfull. If not fail the api test in setup phase.

Also do not fork shell for trivial stat calls.
---
 tests/api-test-2.c | 15 +++++++----
 tests/api-test.c   | 24 +++++++++++------
 tests/api_test.h   |  6 +++++
 tests/test_utils.c | 64 ++++++++++++++++++++++++++++++++++++++++++++++
 4 files changed, 96 insertions(+), 13 deletions(-)

diff --git a/tests/api-test-2.c b/tests/api-test-2.c
index a93c828eb..6bf9a41ad 100644
--- a/tests/api-test-2.c
+++ b/tests/api-test-2.c
@@ -353,7 +353,8 @@ static int _setup(void)
 	if (t_set_readahead(DEVICE_ERROR, 0))
 		printf("cannot set read ahead on device %s\n", DEVICE_ERROR);
 
-	_system(" [ ! -e " IMAGE1 " ] && xz -dk " IMAGE1 ".xz", 1);
+	if (decompress_missing_xz_image(IMAGE1))
+		return 1;
 	fd = loop_attach(&DEVICE_1, IMAGE1, 0, 0, &ro);
 	close(fd);
 
@@ -367,20 +368,24 @@ static int _setup(void)
 
 	_system("dd if=/dev/zero of=" EMPTY_HEADER " bs=4K count=1 2>/dev/null", 1);
 
-	_system(" [ ! -e " NO_REQS_LUKS2_HEADER " ] && tar xJf " REQS_LUKS2_HEADER ".tar.xz", 1);
+	if (untar_xz_archive_if_file_missing(REQS_LUKS2_HEADER /* .tar.xz */, NO_REQS_LUKS2_HEADER))
+		return 1;
 	fd = loop_attach(&DEVICE_4, NO_REQS_LUKS2_HEADER, 0, 0, &ro);
 	close(fd);
 
-	_system(" [ ! -e " REQS_LUKS2_HEADER " ] && tar xJf " REQS_LUKS2_HEADER ".tar.xz", 1);
+	if (untar_xz_archive_if_file_missing(REQS_LUKS2_HEADER /* .tar.xz */, REQS_LUKS2_HEADER))
+		return 1;
 	fd = loop_attach(&DEVICE_5, REQS_LUKS2_HEADER, 0, 0, &ro);
 	close(fd);
 
-	_system(" [ ! -e " IMAGE_PV_LUKS2_SEC " ] && xz -dk " IMAGE_PV_LUKS2_SEC ".xz", 1);
+	if (decompress_missing_xz_image(IMAGE_PV_LUKS2_SEC))
+		return 1;
 	_system(" [ ! -e " IMAGE_PV_LUKS2_SEC ".bcp ] && cp " IMAGE_PV_LUKS2_SEC " " IMAGE_PV_LUKS2_SEC ".bcp", 1);
 	fd = loop_attach(&DEVICE_6, IMAGE_PV_LUKS2_SEC, 0, 0, &ro);
 	close(fd);
 
-	_system(" [ ! -d " CONV_DIR " ] && tar xJf " CONV_DIR ".tar.xz 2>/dev/null", 1);
+	if (untar_xz_archive_if_dir_missing(CONV_DIR /* .tar.xz */, CONV_DIR))
+		return 1;
 
 	if (_system("modprobe dm-crypt >/dev/null 2>&1", 1))
 		return 1;
diff --git a/tests/api-test.c b/tests/api-test.c
index 1ead4c5ce..eece721b9 100644
--- a/tests/api-test.c
+++ b/tests/api-test.c
@@ -262,7 +262,8 @@ static int _setup(void)
 	_system("dmsetup create " DEVICE_EMPTY_name " --table \"0 10000 zero\"", 1);
 	_system("dmsetup create " DEVICE_ERROR_name " --table \"0 10000 error\"", 1);
 
-	_system(" [ ! -e " IMAGE1 " ] && xz -dk " IMAGE1 ".xz", 1);
+	if (decompress_missing_xz_image(IMAGE1))
+		return 1;
 	fd = loop_attach(&DEVICE_1, IMAGE1, 0, 0, &ro);
 	close(fd);
 
@@ -271,22 +272,29 @@ static int _setup(void)
 	close(fd);
 
 	/* Keymaterial offset is less than 8 sectors */
-	_system(" [ ! -e " EVL_HEADER_1 " ] && xz -dk " EVL_HEADER_1 ".xz", 1);
+	if (decompress_missing_xz_image(EVL_HEADER_1))
+		return 1;
 	/* keymaterial offset aims into payload area */
-	_system(" [ ! -e " EVL_HEADER_2 " ] && xz -dk " EVL_HEADER_2 ".xz", 1);
+	if (decompress_missing_xz_image(EVL_HEADER_2))
+		return 1;
 	/* keymaterial offset is valid, number of stripes causes payload area to be overwritten */
-	_system(" [ ! -e " EVL_HEADER_3 " ] && xz -dk " EVL_HEADER_3 ".xz", 1);
+	if (decompress_missing_xz_image(EVL_HEADER_3))
+		return 1;
 	/* luks device header for data and header on same device. payloadOffset is greater than
 	 * device size (crypt_load() test) */
-	_system(" [ ! -e " EVL_HEADER_4 " ] && xz -dk " EVL_HEADER_4 ".xz", 1);
+	if (decompress_missing_xz_image(EVL_HEADER_4))
+		return 1;
 	 /* two keyslots with same offset (overlapping keyslots) */
-	_system(" [ ! -e " EVL_HEADER_5 " ] && xz -dk " EVL_HEADER_5 ".xz", 1);
+	if (decompress_missing_xz_image(EVL_HEADER_5))
+		return 1;
 	/* valid header: payloadOffset=4096, key_size=32,
 	 * volume_key = bb21158c733229347bd4e681891e213d94c685be6a5b84818afe7a78a6de7a1a */
-	_system(" [ ! -e " VALID_HEADER " ] && xz -dk " VALID_HEADER ".xz", 1);
+	if (decompress_missing_xz_image(VALID_HEADER))
+		return 1;
 
 	/* Prepare tcrypt images */
-	_system("tar xJf tcrypt-images.tar.xz 2>/dev/null", 1);
+	if (untar_xz_archive_if_dir_missing( "tcrypt-images" /* .tar.xz */, "tcrypt-images"))
+		return 1;
 
 	_system("modprobe dm-crypt >/dev/null 2>&1", 0);
 	_system("modprobe dm-verity >/dev/null 2>&1", 0);
diff --git a/tests/api_test.h b/tests/api_test.h
index 5533e0b31..7980b0109 100644
--- a/tests/api_test.h
+++ b/tests/api_test.h
@@ -156,4 +156,10 @@ int dmdevice_error_io(const char *dm_name,
 	uint64_t length,
 	error_io_info ei);
 
+int decompress_missing_xz_image(const char *image);
+
+int untar_xz_archive_if_file_missing(const char *archive, const char *file);
+
+int untar_xz_archive_if_dir_missing(const char *archive, const char *dir);
+
 #endif
diff --git a/tests/test_utils.c b/tests/test_utils.c
index d026ddf27..5794c6934 100644
--- a/tests/test_utils.c
+++ b/tests/test_utils.c
@@ -981,3 +981,67 @@ int t_device_size_by_devno(dev_t devno, uint64_t *retval)
 	*retval *= 512;
 	return 0;
 }
+
+int decompress_missing_xz_image(const char *image)
+{
+	int r;
+	struct stat st;
+	char xz_image_path[PATH_MAX], cmd[PATH_MAX];
+
+	if (stat(image, &st) == 0 && S_ISREG(st.st_mode))
+		return 0;
+
+	r = snprintf(xz_image_path, sizeof(xz_image_path), "%s.xz", image);
+	if (r < 0 || (size_t)r >= sizeof(xz_image_path))
+		return 1;
+
+	if ((stat(xz_image_path, &st) != 0) || !S_ISREG(st.st_mode)) {
+		printf("Cannot stat %s or is not a file.\n", xz_image_path);
+		return 1;
+	}
+
+	r = snprintf(cmd, sizeof(cmd), "xz -cd %s > %s", xz_image_path, image);
+	if (r < 0 || (size_t)r >= sizeof(cmd))
+		return 1;
+
+	return _system(cmd, 1);
+}
+
+static int untar_xz_archive_if_missing(const char *archive, const char *dir_entry, bool is_file)
+{
+	int r;
+	struct stat st;
+	char archive_path[PATH_MAX], cmd[PATH_MAX];
+
+	if (stat(dir_entry, &st) == 0) {
+		if (is_file && S_ISREG(st.st_mode))
+			return 0;
+		if (!is_file && S_ISDIR(st.st_mode))
+			return 0;
+	}
+
+	r = snprintf(archive_path, sizeof(archive_path), "%s.tar.xz", archive);
+	if (r < 0 || (size_t)r >= sizeof(archive_path))
+		return 1;
+
+	if ((stat(archive_path, &st) != 0) || !S_ISREG(st.st_mode)) {
+		printf("Cannot stat %s or is not a file.\n", archive_path);
+		return 1;
+	}
+
+	r = snprintf(cmd, sizeof(cmd), "tar xJf %s", archive_path);
+	if (r < 0 || (size_t)r >= sizeof(cmd))
+		return 1;
+
+	return _system(cmd, 1);
+}
+
+int untar_xz_archive_if_file_missing(const char *archive, const char *file)
+{
+	return untar_xz_archive_if_missing(archive, file, /* is_file= */ true);
+}
+
+int untar_xz_archive_if_dir_missing(const char *archive, const char *dir)
+{
+	return untar_xz_archive_if_missing(archive, dir, /* is_file= */ false);
+}

From 964506f0d3947ce8ceb57bb95811ce5ce7f729ed Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 19 Sep 2026 10:52:21 +0200
Subject: [PATCH 220/244] tests: Do not use crypto-check for benchmark test

Just try benchmark with mandatory AES-XTS cipher ans skip the test
if not available. Also move test to userspace part.
---
 tests/compat-test | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/tests/compat-test b/tests/compat-test
index 5719bd38c..023d31ef1 100755
--- a/tests/compat-test
+++ b/tests/compat-test
@@ -320,12 +320,8 @@ echo "[10] uuid"
 echo $PWD1 | $CRYPTSETUP -q luksFormat --type luks1 $FAST_PBKDF_OPT --uuid $TEST_UUID $IMG || fail
 $CRYPTSETUP -q luksUUID $IMG | grep -q $TEST_UUID || fail
 
-[ $(id -u) != 0 ] && skip "WARNING: You must be root to run this test, test skipped."
-[ -z "$LOOPDEV" ] && skip "WARNING: Cannot find free loop device, test skipped."
-[ ! -x "$DIFFER" ] && skip "Cannot find $DIFFER, test skipped."
-[ ! -x "$CRYPTOCHECK" ] && skip "Cannot find $CRYPTOCHECK, test skipped."
-
-$CRYPTOCHECK cipher-kernel aes xts 256
+# AES-XTS is mandatory, this checks if userspace kernel crypto works
+$CRYPTSETUP benchmark -c aes-xts --key-size 256 >/dev/null 2>&1
 if [ $? -eq 0 ] ; then
 	echo "[11] benchmark"
 	$CRYPTSETUP benchmark -c aes-xts --key-size 128 >/dev/null 2>&1 && fail
@@ -335,6 +331,11 @@ if [ $? -eq 0 ] ; then
 	$CRYPTSETUP benchmark -c capi:xts\(aes\)-plain64 >/dev/null || fail
 fi
 
+[ $(id -u) != 0 ] && skip "WARNING: You must be root to run this test, test skipped."
+[ -z "$LOOPDEV" ] && skip "WARNING: Cannot find free loop device, test skipped."
+[ ! -x "$DIFFER" ] && skip "Cannot find $DIFFER, test skipped."
+[ ! -x "$CRYPTOCHECK" ] && skip "Cannot find $CRYPTOCHECK, test skipped."
+
 # LUKS root-tests
 prepare	"[1] open - compat image - acceptance check" new
 echo $PWD0 | $CRYPTSETUP luksOpen $LOOPDEV $DEV_NAME || fail

From a36071ae7c63a3fb142d9842e03f70174c518e6e Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 19 Sep 2026 10:56:50 +0200
Subject: [PATCH 221/244] tests: Remove cipher kernel option from cipher-check

With the planned removal of AF_ALG interface this is becoming
unreliable, just do not use it.
---
 tests/crypto-check.c | 26 +++-----------------------
 1 file changed, 3 insertions(+), 23 deletions(-)

diff --git a/tests/crypto-check.c b/tests/crypto-check.c
index e3022f281..7f87faaa7 100644
--- a/tests/crypto-check.c
+++ b/tests/crypto-check.c
@@ -31,17 +31,6 @@ static int check_cipher(const char *alg, const char *mode, unsigned long key_bit
 	return EXIT_SUCCESS;
 }
 
-static int check_cipher_kernel(const char *alg, const char *mode, unsigned long key_bits)
-{
-	if (key_bits % 8)
-		return EXIT_FAILURE;
-
-	if (crypt_cipher_check_kernel(alg, mode, NULL, key_bits / 8))
-		return EXIT_FAILURE;
-
-	return EXIT_SUCCESS;
-}
-
 static int check_hash(const char *hash)
 {
 	struct crypt_hash *h;
@@ -106,12 +95,6 @@ static int check_cipher(const char *alg, const char *mode, unsigned long key_bit
 	return EXIT_FAILURE;
 }
 
-static int check_cipher_kernel(const char *alg, const char *mode, unsigned long key_bits)
-{
-	/* Expect AF_ALG not available */
-	return  EXIT_FAILURE;
-}
-
 static int check_hash(const char *hash)
 {
 	if (!strcmp(hash, "sha512") || !strcmp(hash, "sha256") || !strcmp(hash, "sha1"))
@@ -128,7 +111,7 @@ static int check_pbkdf(const char *pbkdf)
 
 static void __attribute__((noreturn)) exit_help(bool destroy_backend)
 {
-	printf("Use: crypto_check version | fips_mode | fips_mode_kernel | hash <alg> | cipher[-kernel] <alg> <mode> [key_bits] | pbkdf <alg>\n");
+	printf("Use: crypto_check version | fips_mode | fips_mode_kernel | hash <alg> | cipher <alg> <mode> [key_bits] | pbkdf <alg>\n");
 	if (destroy_backend)
 		crypt_backend_destroy();
 	exit(EXIT_FAILURE);
@@ -161,7 +144,7 @@ int main(int argc, char *argv[])
 		if (argc != 3)
 			exit_help(true);
 		r = check_hash(argv[2]);
-	} else if (!strcmp(argv[1], "cipher") || !strcmp(argv[1], "cipher-kernel")) {
+	} else if (!strcmp(argv[1], "cipher")) {
 		unsigned long ul = 256;
 		char *ptr;
 		if (argc < 4 || argc > 5)
@@ -171,10 +154,7 @@ int main(int argc, char *argv[])
 			if (*ptr)
 				exit_help(true);
 		}
-		if (strcmp(argv[1], "cipher-kernel"))
-			r = check_cipher(argv[2], argv[3], ul);
-		else
-			r = check_cipher_kernel(argv[2], argv[3], ul);
+		r = check_cipher(argv[2], argv[3], ul);
 	} else if (!strcmp(argv[1], "pbkdf")) {
 		if (argc != 3)
 			exit_help(true);

From 8df56f515527f5846e436a5b433f86fb1e801204 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sat, 19 Sep 2026 11:04:24 +0200
Subject: [PATCH 222/244] tests: Remove AF_ALG cipher vectors tests

With planned AF_ALG removal these tests are unreliable, remove them.
---
 tests/crypto-vectors.c | 54 ------------------------------------------
 1 file changed, 54 deletions(-)

diff --git a/tests/crypto-vectors.c b/tests/crypto-vectors.c
index 77f54b37e..0aa1dd3d8 100644
--- a/tests/crypto-vectors.c
+++ b/tests/crypto-vectors.c
@@ -1607,57 +1607,6 @@ static int memcmp_test(void)
 	return EXIT_SUCCESS;
 }
 
-#if ENABLE_AF_ALG
-struct capi_test_vector {
-	const char *name;
-	const char *mode;
-	const char *integrity;
-	size_t key_length;
-	bool fips;
-};
-
-static struct capi_test_vector capi_test_vectors[] = {
-	{ "aes", "xts", NULL, 64, true },
-	{ "aes", "xts-plain64", NULL, 32, true },
-	{ "aes", "xts-plain64", NULL, 64, true },
-	{ "aes", "xts-plain64", "none", 64, true },
-	{ "aes", "gcm-random", "aead", 16, true },
-	{ "aes", "gcm-random", "aead", 32, true },
-	{ "aes", "ccm-random", "aead", 19, false },
-	{ "aes", "ccm-random", "aead", 35, false },
-	{ "chacha20", "random", "poly1305", 32, false },
-	{ "aegis128", "random", "aead", 16, false },
-};
-#endif
-
-static int kernel_capi_check_test(void)
-{
-#if ENABLE_AF_ALG
-	unsigned int i;
-	int r;
-
-	for (i = 0; i < ARRAY_SIZE(capi_test_vectors); i++) {
-		printf("CAPI %s/%s/%s/%zu ", capi_test_vectors[i].name,
-			capi_test_vectors[i].mode,
-			capi_test_vectors[i].integrity ?: "NULL",
-			capi_test_vectors[i].key_length);
-
-		r = crypt_cipher_check_kernel(capi_test_vectors[i].name,
-			capi_test_vectors[i].mode,
-			capi_test_vectors[i].integrity,
-			capi_test_vectors[i].key_length);
-		if (!r)
-			printf("[OK]\n");
-		else if (r == -ENOENT || r == -ENOTSUP ||
-			(crypt_fips_mode_kernel() && !capi_test_vectors[i].fips))
-			printf("[N/A]\n");
-		else
-			return EXIT_FAILURE;
-	}
-#endif
-	return EXIT_SUCCESS;
-}
-
 static void __attribute__((noreturn)) exit_test(const char *msg, int r)
 {
 	if (msg)
@@ -1706,9 +1655,6 @@ int main(__attribute__ ((unused)) int argc, __attribute__ ((unused))char *argv[]
 	if (utf8_16_test())
 		exit_test("UTF8/16 test failed.", EXIT_FAILURE);
 
-	if (kernel_capi_check_test())
-		exit_test("Kernel CAPI test failed.", EXIT_FAILURE);
-
 	if (default_alg_test()) {
 		if (crypt_fips_mode())
 			printf("\nDefault compiled-in algorithms test ignored (FIPS mode on).\n");

From 3a43658590dfe8bcd55f6c16312be0f5114b780f Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sun, 20 Sep 2026 21:46:42 +0200
Subject: [PATCH 223/244] Replace crypt_cipher_check_kernel with
 crypt_cipher_aead_known

With deprecation of AF_ALG, we cannot rely on AEAD check through it.

Just add simple check for known AEAD patterns (used only in LUKS2).
Activation still can fail later, but that can happen aldo if kernel
config changes.
---
 lib/crypto_backend/cipher_generic.c | 98 +++++++++++++++++++++++++++++
 lib/crypto_backend/crypto_backend.h |  1 +
 lib/setup.c                         | 10 +--
 3 files changed, 101 insertions(+), 8 deletions(-)

diff --git a/lib/crypto_backend/cipher_generic.c b/lib/crypto_backend/cipher_generic.c
index d20e011b4..1be97db7f 100644
--- a/lib/crypto_backend/cipher_generic.c
+++ b/lib/crypto_backend/cipher_generic.c
@@ -12,6 +12,10 @@
 #include <fcntl.h>
 #include "crypto_backend.h"
 
+#ifndef ARRAY_SIZE
+# define ARRAY_SIZE(arr) (sizeof(arr) / sizeof((arr)[0]))
+#endif
+
 struct cipher_alg {
 	const char *name;
 	const char *mode;
@@ -43,6 +47,50 @@ static const struct cipher_alg cipher_algs[] = {
 	{ NULL,          NULL,  0, false }
 };
 
+struct cipher_aead_alg {
+	const char *name;
+	const char *mode;
+	const char *integrity;
+	size_t key_bytes;
+};
+
+static const struct cipher_aead_alg cipher_aead_algs[] = {
+	{ "aes",      "gcm", "aead", 16 },
+	{ "aes",      "gcm", "aead", 24 },
+	{ "aes",      "gcm", "aead", 32 },
+	{ "aes",      "ccm", "aead", 16 + 3 }, // CCM used as RFC 4309, 3 bytes for fixed salt
+	{ "aes",      "ccm", "aead", 24 + 3 },
+	{ "aes",      "ccm", "aead", 32 + 3 },
+	{ "serpent",  "gcm", "aead", 16 },
+	{ "serpent",  "gcm", "aead", 24 },
+	{ "serpent",  "gcm", "aead", 32 },
+	{ "serpent",  "ccm", "aead", 16 + 3 },
+	{ "serpent",  "ccm", "aead", 24 + 3 },
+	{ "serpent",  "ccm", "aead", 32 + 3 },
+	{ "twofish",  "gcm", "aead", 16 },
+	{ "twofish",  "gcm", "aead", 24 },
+	{ "twofish",  "gcm", "aead", 32 },
+	{ "twofish",  "ccm", "aead", 16 + 3 },
+	{ "twofish",  "ccm", "aead", 24 + 3 },
+	{ "twofish",  "ccm", "aead", 32 + 3 },
+	{ "aria",     "gcm", "aead", 16 },
+	{ "aria",     "gcm", "aead", 24 },
+	{ "aria",     "gcm", "aead", 32 },
+	{ "aria",     "ccm", "aead", 16 + 3 },
+	{ "aria",     "ccm", "aead", 24 + 3 },
+	{ "aria",     "ccm", "aead", 32 + 3 },
+	{ "camellia", "gcm", "aead", 16 },
+	{ "camellia", "gcm", "aead", 24 },
+	{ "camellia", "gcm", "aead", 32 },
+	{ "camellia", "ccm", "aead", 16 + 3 },
+	{ "camellia", "ccm", "aead", 24 + 3 },
+	{ "camellia", "ccm", "aead", 32 + 3 },
+	{ "sm4",      "gcm", "aead", 16 },
+	{ "sm4",      "ccm", "aead", 16 + 3 },
+	{ "aegis128", NULL,  "aead", 16 },
+	{ "chacha20", NULL,  "poly1305", 32 }, // Used as RFC 7539
+};
+
 static const struct cipher_alg *_get_alg(const char *name, const char *mode)
 {
 	int i = 0;
@@ -57,6 +105,56 @@ static const struct cipher_alg *_get_alg(const char *name, const char *mode)
 	return NULL;
 }
 
+static bool aead_iv_known(const char *iv)
+{
+	if (!iv)
+		return false;
+
+	if (!strcasecmp(iv, "random"))
+		return true;
+
+	/* These are not secure for AEAD, but sometimes used */
+	if (!strcasecmp(iv, "plain64") || !strcasecmp(iv, "plain64be"))
+		return true;
+
+	return false;
+}
+
+bool crypt_cipher_aead_known(const char *name, const char *mode, const char *integrity, size_t key_bytes)
+{
+	size_t i, mode_len;
+
+	if (!name || !mode || !integrity)
+		return false;
+
+	for (i = 0; i < ARRAY_SIZE(cipher_aead_algs); i++) {
+		if (strcasecmp(name, cipher_aead_algs[i].name))
+			continue;
+
+		if (strcasecmp(integrity, cipher_aead_algs[i].integrity))
+			continue;
+
+		/* Compare only mode for ciphers that use a mode */
+		if (cipher_aead_algs[i].mode) {
+			mode_len = strlen(cipher_aead_algs[i].mode);
+			if (strncasecmp(mode, cipher_aead_algs[i].mode, mode_len))
+				continue;
+			if (mode[mode_len] != '-')
+				continue;
+			if (!aead_iv_known(&mode[mode_len + 1]))
+				continue;
+		} else if (!aead_iv_known(mode)) /* no mode, only IV */
+				continue;
+
+		if (key_bytes != cipher_aead_algs[i].key_bytes)
+			continue;
+
+		return true;
+	}
+
+	return false;
+}
+
 int crypt_cipher_ivsize(const char *name, const char *mode)
 {
 	const struct cipher_alg *ca = _get_alg(name, mode);
diff --git a/lib/crypto_backend/crypto_backend.h b/lib/crypto_backend/crypto_backend.h
index 5e25bb09c..4ceb270fb 100644
--- a/lib/crypto_backend/crypto_backend.h
+++ b/lib/crypto_backend/crypto_backend.h
@@ -108,6 +108,7 @@ int crypt_cipher_decrypt(struct crypt_cipher *ctx,
 			 const char *in, char *out, size_t length,
 			 const char *iv, size_t iv_length);
 bool crypt_cipher_kernel_only(struct crypt_cipher *ctx);
+bool crypt_cipher_aead_known(const char *name, const char *mode, const char *integrity, size_t key_bytes);
 
 /* Benchmark of kernel cipher performance */
 int crypt_cipher_perf_kernel(const char *name, const char *mode, char *buffer, size_t buffer_size,
diff --git a/lib/setup.c b/lib/setup.c
index 425cfd4d7..fe7fbb964 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -1897,16 +1897,10 @@ static int LUKS2_check_encryption_params(struct crypt_device *cd,
 			log_err(cd, _("Integrity key size is too small."));
 			return -EINVAL;
 		}
-	}
 
-	/* FIXME: allow this later also for normal ciphers (check AF_ALG availability. */
-	if (integrity && integrity_key_size == 0) {
-		r = crypt_cipher_check_kernel(cipher, cipher_mode, integrity, volume_key_size);
-		if (r < 0 && r != -ENOTSUP) {
-			log_err(cd, _("Cipher %s-%s (key size %zd bits) is not available."),
+		if (integrity && integrity_key_size == 0 && !crypt_cipher_aead_known(cipher, cipher_mode, integrity, volume_key_size))
+			log_err(cd, _("Cipher %s-%s (key size %zd bits) is not recognized as a known authenticated cipher, activation could fail."),
 				cipher, cipher_mode, volume_key_size * 8);
-			return r;
-		}
 	}
 
 	if ((!integrity || integrity_key_size) && !crypt_cipher_wrapped_key(cipher, cipher_mode) &&

From 4030da727e8323297b4ed1172138494d4926f905 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Sun, 20 Sep 2026 21:51:09 +0200
Subject: [PATCH 224/244] Remove crypt_cipher_check_kernel

---
 lib/crypto_backend/crypto_backend.h       |  4 --
 lib/crypto_backend/crypto_cipher_kernel.c | 76 -----------------------
 2 files changed, 80 deletions(-)

diff --git a/lib/crypto_backend/crypto_backend.h b/lib/crypto_backend/crypto_backend.h
index 4ceb270fb..f1776e6b7 100644
--- a/lib/crypto_backend/crypto_backend.h
+++ b/lib/crypto_backend/crypto_backend.h
@@ -115,10 +115,6 @@ int crypt_cipher_perf_kernel(const char *name, const char *mode, char *buffer, s
 			     const char *key, size_t key_size, const char *iv, size_t iv_size,
 			     double *encryption_mbs, double *decryption_mbs);
 
-/* Check availability of a cipher (in kernel only) */
-int crypt_cipher_check_kernel(const char *name, const char *mode,
-			      const char *integrity, size_t key_length);
-
 /* Storage encryption wrappers */
 int crypt_storage_init(struct crypt_storage **ctx, size_t sector_size,
 		       const char *cipher, const char *cipher_mode,
diff --git a/lib/crypto_backend/crypto_cipher_kernel.c b/lib/crypto_backend/crypto_cipher_kernel.c
index fed4ae86d..fabfc86a2 100644
--- a/lib/crypto_backend/crypto_cipher_kernel.c
+++ b/lib/crypto_backend/crypto_cipher_kernel.c
@@ -221,77 +221,6 @@ void crypt_cipher_destroy_kernel(struct crypt_cipher_kernel *ctx)
 	ctx->opfd = -1;
 }
 
-int crypt_cipher_check_kernel(const char *name, const char *mode,
-			      const char *integrity, size_t key_length)
-{
-	struct crypt_cipher_kernel c;
-	char mode_name[64], tmp_salg_name[180], *cipher_iv = NULL, *key;
-	const char *salg_type, *real_mode;
-	bool aead;
-	int r;
-	struct sockaddr_alg sa = {
-		.salg_family = AF_ALG,
-	};
-
-	aead = integrity && strcmp(integrity, "none");
-	real_mode = NULL;
-
-	/* Remove IV if present */
-	if (mode) {
-		strncpy(mode_name, mode, sizeof(mode_name));
-		mode_name[sizeof(mode_name) - 1] = 0;
-		cipher_iv = strchr(mode_name, '-');
-		if (cipher_iv) {
-			*cipher_iv = '\0';
-			real_mode = mode_name;
-		}
-	}
-
-	salg_type = aead ? "aead" : "skcipher";
-	r = snprintf((char *)sa.salg_type, sizeof(sa.salg_type), "%s", salg_type);
-	if (r < 0 || (size_t)r >= sizeof(sa.salg_type))
-		return -EINVAL;
-
-	memset(tmp_salg_name, 0, sizeof(tmp_salg_name));
-
-	/* FIXME: this is duplicating a part of devmapper backend */
-	if (aead) {
-		/* In AEAD, mode parameter can be just IV like "random" */
-		if (!strcmp(integrity, "poly1305"))
-			r = snprintf(tmp_salg_name, sizeof(tmp_salg_name), "rfc7539(%s,%s)", name, integrity);
-		else if (!real_mode)
-			r = snprintf(tmp_salg_name, sizeof(tmp_salg_name), "%s", name);
-		else if (!strcmp(real_mode, "ccm"))
-			r = snprintf(tmp_salg_name, sizeof(tmp_salg_name), "rfc4309(%s(%s))", real_mode, name);
-		else
-			r = snprintf(tmp_salg_name, sizeof(tmp_salg_name), "%s(%s)", real_mode, name);
-	} else {
-		if (!mode)
-			r = snprintf(tmp_salg_name, sizeof(tmp_salg_name), "%s", name);
-		else
-			r = snprintf(tmp_salg_name, sizeof(tmp_salg_name), "%s(%s)", real_mode ?: mode_name, name);
-	}
-
-	if (r < 0 || (size_t)r >= sizeof(tmp_salg_name))
-		return -EINVAL;
-
-	memcpy(sa.salg_name, tmp_salg_name, sizeof(sa.salg_name));
-
-	key = malloc(key_length);
-	if (!key)
-		return -ENOMEM;
-
-	/* We cannot use RNG yet, any key works here, tweak the first part if it is split key (XTS). */
-	memset(key, 0xab, key_length);
-	*key = 0xef;
-
-	r = _crypt_cipher_init(&c, key, key_length, 0, &sa);
-	crypt_cipher_destroy_kernel(&c);
-	free(key);
-
-	return r;
-}
-
 int crypt_bitlk_decrypt_key_kernel(const void *key, size_t key_length,
 				   const char *in, char *out, size_t length,
 				   const char *iv, size_t iv_length,
@@ -361,11 +290,6 @@ int crypt_cipher_decrypt_kernel(struct crypt_cipher_kernel *ctx,
 {
 	return -EINVAL;
 }
-int crypt_cipher_check_kernel(const char *name, const char *mode,
-			      const char *integrity, size_t key_length)
-{
-	return -ENOTSUP;
-}
 int crypt_bitlk_decrypt_key_kernel(const void *key, size_t key_length,
 				   const char *in, char *out, size_t length,
 				   const char *iv, size_t iv_length,

From 6d0775a799219ea85572dbee04a97cf61cca9b3f Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 26 Aug 2026 17:59:04 +0200
Subject: [PATCH 225/244] Initialize dm backend only once.

The libcryptsetup may initialize and free libdm
context repeatadly provided the application works with
at most one crypt device context at a time. This is not optimal
and it should be enough to initialize it only once
and have it freed during libcryptsetup destructor.
---
 lib/libdevmapper.c | 16 +++++++++-------
 lib/setup.c        | 10 +++-------
 lib/utils_dm.h     |  4 ++--
 3 files changed, 14 insertions(+), 16 deletions(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index 03c9e5f0e..e63377e84 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -39,7 +39,7 @@ static int _quiet_log = 0;
 static uint64_t _dm_flags = 0;
 
 static struct crypt_device *_context = NULL;
-static int _dm_use_count = 0;
+static bool dm_backend_initialized = false;
 
 /* Check if we have DM flag to instruct kernel to force wipe buffers */
 #if !HAVE_DECL_DM_TASK_SECURE_DATA
@@ -394,22 +394,24 @@ int dm_flags(struct crypt_device *cd, dm_target_type target, uint64_t *flags)
 }
 
 /* This doesn't run any kernel checks, just set up userspace libdevmapper */
-void dm_backend_init(struct crypt_device *cd)
+void dm_backend_init(void)
 {
-	if (!_dm_use_count++) {
-		log_dbg(cd, "Initialising device-mapper backend library.");
+	if (!dm_backend_initialized) {
+		log_dbg(NULL, "Initialising device-mapper backend library.");
 		dm_log_init(set_dm_error);
 		dm_log_init_verbose(10);
+		dm_backend_initialized = true;
 	}
 }
 
-void dm_backend_exit(struct crypt_device *cd)
+void dm_backend_exit(void)
 {
-	if (_dm_use_count && (!--_dm_use_count)) {
-		log_dbg(cd, "Releasing device-mapper backend.");
+	if (dm_backend_initialized) {
+		log_dbg(NULL, "Releasing device-mapper backend.");
 		dm_log_init_verbose(0);
 		dm_log_init(NULL);
 		dm_lib_release();
+		dm_backend_initialized = false;
 	}
 }
 
diff --git a/lib/setup.c b/lib/setup.c
index fe7fbb964..0316ef9f4 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -611,7 +611,7 @@ int crypt_init(struct crypt_device **cd, const char *device)
 		return r;
 	}
 
-	dm_backend_init(NULL);
+	dm_backend_init();
 
 	h->rng_type = crypt_random_default_key_rng();
 
@@ -4170,7 +4170,6 @@ void crypt_free(struct crypt_device *cd)
 
 	log_dbg(cd, "Releasing crypt device %s context.", mdata_device_path(cd) ?: "empty");
 
-	dm_backend_exit(cd);
 	crypt_free_volume_key(cd->volume_key);
 
 	if (cd->keyring_description) {
@@ -6214,14 +6213,10 @@ crypt_status_info crypt_status(struct crypt_device *cd, const char *name)
 	if (!name)
 		return CRYPT_INVALID;
 
-	if (!cd)
-		dm_backend_init(cd);
+	dm_backend_init();
 
 	r = dm_status_device(cd, name);
 
-	if (!cd)
-		dm_backend_exit(cd);
-
 	if (r < 0 && r != -ENODEV)
 		return CRYPT_INVALID;
 
@@ -8015,4 +8010,5 @@ static void __attribute__((destructor)) libcryptsetup_exit(void)
 
 	crypt_backend_destroy();
 	crypt_random_exit();
+	dm_backend_exit();
 }
diff --git a/lib/utils_dm.h b/lib/utils_dm.h
index 3e9a812c7..1381faa37 100644
--- a/lib/utils_dm.h
+++ b/lib/utils_dm.h
@@ -176,8 +176,8 @@ static inline bool single_segment(const struct crypt_dm_active_device *dmd)
 	return dmd && !dmd->segment.next;
 }
 
-void dm_backend_init(struct crypt_device *cd);
-void dm_backend_exit(struct crypt_device *cd);
+void dm_backend_init(void);
+void dm_backend_exit(void);
 
 int dm_targets_allocate(struct dm_target *first, unsigned count);
 void dm_targets_free(struct crypt_device *cd, struct crypt_dm_active_device *dmd);

From b6c6e8387b5b37fbb94d3e49c97140fef3b5b512 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Wed, 9 Sep 2026 17:15:39 +0200
Subject: [PATCH 226/244] Remove debug message for device-mapper backend
 release.

The backend is now initialized at most once and eventually
freed in libcryptsetup destructor.
---
 lib/libdevmapper.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index e63377e84..5e6703822 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -407,7 +407,6 @@ void dm_backend_init(void)
 void dm_backend_exit(void)
 {
 	if (dm_backend_initialized) {
-		log_dbg(NULL, "Releasing device-mapper backend.");
 		dm_log_init_verbose(0);
 		dm_log_init(NULL);
 		dm_lib_release();

From 37c861d0969dd1402e76253fa87c5200fe06d9c8 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 3 Sep 2026 13:55:06 +0200
Subject: [PATCH 227/244] Add crypt context to dm_cancel_deferred_removal

---
 lib/libdevmapper.c | 2 +-
 lib/setup.c        | 2 +-
 lib/utils_dm.h     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index 5e6703822..438ccb57e 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -3216,7 +3216,7 @@ int dm_resume_and_reinstate_key(struct crypt_device *cd, const char *name,
 	return r;
 }
 
-int dm_cancel_deferred_removal(const char *name)
+int dm_cancel_deferred_removal(struct crypt_device *cd __attribute__((unused)), const char *name)
 {
 	return _dm_message(name, "@cancel_deferred_remove") ? 0 : -ENOTSUP;
 }
diff --git a/lib/setup.c b/lib/setup.c
index 0316ef9f4..cfa600471 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -5885,7 +5885,7 @@ int crypt_deactivate_by_name(struct crypt_device *cd, const char *name, uint32_t
 			}
 
 			if (flags & CRYPT_DEACTIVATE_DEFERRED_CANCEL) {
-				r = dm_cancel_deferred_removal(name);
+				r = dm_cancel_deferred_removal(cd, name);
 				if (r < 0)
 					log_err(cd, _("Could not cancel deferred remove from device %s."), name);
 				break;
diff --git a/lib/utils_dm.h b/lib/utils_dm.h
index 1381faa37..ab9420e33 100644
--- a/lib/utils_dm.h
+++ b/lib/utils_dm.h
@@ -222,7 +222,7 @@ int dm_resume_and_reinstate_key(struct crypt_device *cd, const char *name,
 				const struct volume_key *vk);
 int dm_error_device(struct crypt_device *cd, const char *name);
 int dm_clear_device(struct crypt_device *cd, const char *name);
-int dm_cancel_deferred_removal(const char *name);
+int dm_cancel_deferred_removal(struct crypt_device *cd, const char *name);
 
 const char *dm_get_dir(void);
 int dm_get_iname(const char *name, char **iname, bool with_path);

From a252704c3fc80facbe5b1fa0453c614cb36d4efd Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 3 Sep 2026 13:30:02 +0200
Subject: [PATCH 228/244] libdevmapper: use dm_init_context and dm_exit_context
 consistently.

Use it in every libdevmapper function available to libcryptsetup,
if the function enter the actual device-mapper library.
This patch makes the use consistent because otherwise, some calls
like dm_cancel_deferred_removal, works only because the dm context
is initialized earlier.
---
 lib/libdevmapper.c | 25 ++++++++++++++++++++-----
 1 file changed, 20 insertions(+), 5 deletions(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index 438ccb57e..03d9ed661 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -442,23 +442,29 @@ char *dm_device_path(const char *prefix, int major, int minor)
 	const char *name;
 	char path[PATH_MAX];
 
-	if (!(dmt = dm_task_create(DM_DEVICE_STATUS)))
+	if (dm_init_context(NULL, DM_UNKNOWN))
 		return NULL;
+
+	if (!(dmt = dm_task_create(DM_DEVICE_STATUS)))
+		goto err;
 	if (!dm_task_set_minor(dmt, minor) ||
 	    !dm_task_set_major(dmt, major) ||
 	    !dm_task_no_flush(dmt) ||
 	    !dm_task_run(dmt) ||
 	    !(name = dm_task_get_name(dmt))) {
 		dm_task_destroy(dmt);
-		return NULL;
+		goto err;
 	}
 
 	if (snprintf(path, sizeof(path), "%s%s", prefix ?: "", name) < 0)
 		path[0] = '\0';
 
 	dm_task_destroy(dmt);
-
+	dm_exit_context();
 	return strdup(path);
+err:
+	dm_exit_context();
+	return NULL;
 }
 
 char *dm_device_name(const char *path)
@@ -3216,9 +3222,18 @@ int dm_resume_and_reinstate_key(struct crypt_device *cd, const char *name,
 	return r;
 }
 
-int dm_cancel_deferred_removal(struct crypt_device *cd __attribute__((unused)), const char *name)
+int dm_cancel_deferred_removal(struct crypt_device *cd, const char *name)
 {
-	return _dm_message(name, "@cancel_deferred_remove") ? 0 : -ENOTSUP;
+	int r;
+
+	if (dm_init_context(cd, DM_UNKNOWN))
+		return -ENOTSUP;
+
+	r = _dm_message(name, "@cancel_deferred_remove") ? 0 : -ENOTSUP;
+
+	dm_exit_context();
+
+	return r;
 }
 
 const char *dm_get_dir(void)

From 43497234b74c07af75dbd6be2589f7cf98bf7ba2 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 3 Sep 2026 13:34:17 +0200
Subject: [PATCH 229/244] libdevmapper: move the dm_backend_init in
 dm_init_context call.

We do not have to initialize dm backend unless we enter the
device-mapper library. Remove it from crypt_init call that does
not need device-mapper unconditionally.
---
 lib/libdevmapper.c | 3 ++-
 lib/setup.c        | 4 ----
 lib/utils_dm.h     | 1 -
 3 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index 03d9ed661..de4802958 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -394,7 +394,7 @@ int dm_flags(struct crypt_device *cd, dm_target_type target, uint64_t *flags)
 }
 
 /* This doesn't run any kernel checks, just set up userspace libdevmapper */
-void dm_backend_init(void)
+static void dm_backend_init(void)
 {
 	if (!dm_backend_initialized) {
 		log_dbg(NULL, "Initialising device-mapper backend library.");
@@ -417,6 +417,7 @@ void dm_backend_exit(void)
 /* libdevmapper is not context friendly, switch context on every DM call. */
 static int dm_init_context(struct crypt_device *cd, dm_target_type target)
 {
+	dm_backend_init();
 	_context = cd;
 	if (!_dm_check_versions(cd, target)) {
 		if (getuid() || geteuid())
diff --git a/lib/setup.c b/lib/setup.c
index cfa600471..9e9f3fc63 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -611,8 +611,6 @@ int crypt_init(struct crypt_device **cd, const char *device)
 		return r;
 	}
 
-	dm_backend_init();
-
 	h->rng_type = crypt_random_default_key_rng();
 
 	*cd = h;
@@ -6213,8 +6211,6 @@ crypt_status_info crypt_status(struct crypt_device *cd, const char *name)
 	if (!name)
 		return CRYPT_INVALID;
 
-	dm_backend_init();
-
 	r = dm_status_device(cd, name);
 
 	if (r < 0 && r != -ENODEV)
diff --git a/lib/utils_dm.h b/lib/utils_dm.h
index ab9420e33..eee31a780 100644
--- a/lib/utils_dm.h
+++ b/lib/utils_dm.h
@@ -176,7 +176,6 @@ static inline bool single_segment(const struct crypt_dm_active_device *dmd)
 	return dmd && !dmd->segment.next;
 }
 
-void dm_backend_init(void);
 void dm_backend_exit(void);
 
 int dm_targets_allocate(struct dm_target *first, unsigned count);

From ca4cc7a44e5794d8ad412f6d4f8463a81fe16d4a Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 3 Sep 2026 13:47:20 +0200
Subject: [PATCH 230/244] libdevmapper: remove dm_exit_context as redundant.

There's no need to reset internal _context variable when
it gets overwritten every time on dm_context_init.
---
 lib/libdevmapper.c | 52 +++++-----------------------------------------
 1 file changed, 5 insertions(+), 47 deletions(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index de4802958..b2da33155 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -431,10 +431,6 @@ static int dm_init_context(struct crypt_device *cd, dm_target_type target)
 	}
 	return 0;
 }
-static void dm_exit_context(void)
-{
-	_context = NULL;
-}
 
 /* Return path to DM device */
 char *dm_device_path(const char *prefix, int major, int minor)
@@ -447,25 +443,21 @@ char *dm_device_path(const char *prefix, int major, int minor)
 		return NULL;
 
 	if (!(dmt = dm_task_create(DM_DEVICE_STATUS)))
-		goto err;
+		return NULL;
 	if (!dm_task_set_minor(dmt, minor) ||
 	    !dm_task_set_major(dmt, major) ||
 	    !dm_task_no_flush(dmt) ||
 	    !dm_task_run(dmt) ||
 	    !(name = dm_task_get_name(dmt))) {
 		dm_task_destroy(dmt);
-		goto err;
+		return NULL;
 	}
 
 	if (snprintf(path, sizeof(path), "%s%s", prefix ?: "", name) < 0)
 		path[0] = '\0';
 
 	dm_task_destroy(dmt);
-	dm_exit_context();
 	return strdup(path);
-err:
-	dm_exit_context();
-	return NULL;
 }
 
 char *dm_device_name(const char *path)
@@ -1093,8 +1085,6 @@ int dm_error_device(struct crypt_device *cd, const char *name)
 
 	dm_targets_free(cd, &dmd);
 
-	dm_exit_context();
-
 	return r;
 }
 
@@ -1113,8 +1103,6 @@ int dm_clear_device(struct crypt_device *cd, const char *name)
 	else
 		r = -EINVAL;
 
-	dm_exit_context();
-
 	return r;
 }
 
@@ -1135,7 +1123,6 @@ int dm_remove_device(struct crypt_device *cd, const char *name, uint32_t flags)
 
 	if (deferred && !dm_flags(cd, DM_UNKNOWN, &dmt_flags) && !(dmt_flags & DM_DEFERRED_SUPPORTED)) {
 		log_err(cd, _("Requested deferred flag is not supported."));
-		dm_exit_context();
 		return -ENOTSUP;
 	}
 
@@ -1161,7 +1148,6 @@ int dm_remove_device(struct crypt_device *cd, const char *name, uint32_t flags)
 	} while (r == -EINVAL && retries);
 
 	dm_task_update_nodes();
-	dm_exit_context();
 
 	return r;
 }
@@ -1835,7 +1821,6 @@ int dm_create_device(struct crypt_device *cd, const char *name,
 	    crypt_is_cipher_null(dmd->segment.u.crypt.cipher))
 		log_dbg(cd, "Activated dm-crypt device with cipher_null. Device is not encrypted.");
 
-	dm_exit_context();
 	return r;
 }
 
@@ -1874,7 +1859,6 @@ int dm_reload_device(struct crypt_device *cd, const char *name,
 	if (!r && resume)
 		r = _dm_resume_device(name, dmflags | act2dmflags(dmd->flags));
 
-	dm_exit_context();
 	return r;
 }
 
@@ -1950,7 +1934,6 @@ int dm_status_device(struct crypt_device *cd, const char *name)
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 	r = dm_status_dmi(name, &dmi, NULL, NULL);
-	dm_exit_context();
 
 	if (r < 0)
 		return r;
@@ -1966,7 +1949,6 @@ int dm_status_suspended(struct crypt_device *cd, const char *name)
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 	r = dm_status_dmi(name, &dmi, NULL, NULL);
-	dm_exit_context();
 
 	if (r < 0 && r != -EEXIST)
 		return r;
@@ -2000,7 +1982,6 @@ int dm_status_verity_ok(struct crypt_device *cd, const char *name)
 	if (dm_init_context(cd, DM_VERITY))
 		return -ENOTSUP;
 	r = _dm_status_verity_ok(cd, name);
-	dm_exit_context();
 	return r;
 }
 
@@ -2015,7 +1996,6 @@ int dm_status_verity_repaired(struct crypt_device *cd, const char *name, uint64_
 		return -ENOTSUP;
 
 	r = dm_status_dmi(name, &dmi, DM_VERITY_TARGET, &status_line);
-	dm_exit_context();
 	if (r < 0 || !status_line || !*status_line) {
 		free(status_line);
 		return r;
@@ -2050,14 +2030,12 @@ int dm_status_integrity_failures(struct crypt_device *cd, const char *name, uint
 	r = dm_status_dmi(name, &dmi, DM_INTEGRITY_TARGET, &status_line);
 	if (r < 0 || !status_line) {
 		free(status_line);
-		dm_exit_context();
 		return r;
 	}
 
 	log_dbg(cd, "Integrity volume %s failure status is %s.", name, status_line ?: "");
 	*count = strtoull(status_line, NULL, 10);
 	free(status_line);
-	dm_exit_context();
 
 	return 0;
 }
@@ -2965,8 +2943,6 @@ static int _dm_query_device(struct crypt_device *cd, const char *name,
 int dm_query_device(struct crypt_device *cd, const char *name,
 		    uint64_t get_flags, struct crypt_dm_active_device *dmd)
 {
-	int r;
-
 	if (!dmd)
 		return -EINVAL;
 
@@ -2975,10 +2951,7 @@ int dm_query_device(struct crypt_device *cd, const char *name,
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 
-	r = _dm_query_device(cd, name, get_flags, dmd);
-
-	dm_exit_context();
-	return r;
+	return _dm_query_device(cd, name, get_flags, dmd);
 }
 
 static int _process_deps(struct crypt_device *cd, const char *prefix, struct dm_deps *deps,
@@ -3085,7 +3058,6 @@ int dm_device_deps(struct crypt_device *cd, const char *name, const char *prefix
 	if (dmt)
 		dm_task_destroy(dmt);
 
-	dm_exit_context();
 	return r;
 }
 
@@ -3145,22 +3117,15 @@ int dm_suspend_device(struct crypt_device *cd, const char *name, uint64_t dmflag
 
 	r = 0;
 out:
-	dm_exit_context();
 	return r;
 }
 
 int dm_resume_device(struct crypt_device *cd, const char *name, uint64_t dmflags)
 {
-	int r;
-
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 
-	r = _dm_resume_device(name, dmflags);
-
-	dm_exit_context();
-
-	return r;
+	return _dm_resume_device(name, dmflags);
 }
 
 int dm_resume_and_reinstate_key(struct crypt_device *cd, const char *name,
@@ -3219,22 +3184,15 @@ int dm_resume_and_reinstate_key(struct crypt_device *cd, const char *name,
 out:
 	crypt_safe_free(msg);
 	crypt_safe_free(key);
-	dm_exit_context();
 	return r;
 }
 
 int dm_cancel_deferred_removal(struct crypt_device *cd, const char *name)
 {
-	int r;
-
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 
-	r = _dm_message(name, "@cancel_deferred_remove") ? 0 : -ENOTSUP;
-
-	dm_exit_context();
-
-	return r;
+	return _dm_message(name, "@cancel_deferred_remove") ? 0 : -ENOTSUP;
 }
 
 const char *dm_get_dir(void)

From 23194dd596b0c08a2e315dd95b004cb1e4bc8dc9 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 2 Oct 2026 12:08:21 +0200
Subject: [PATCH 231/244] Revert "libdevmapper: remove dm_exit_context as
 redundant."

This reverts commit ca4cc7a44e5794d8ad412f6d4f8463a81fe16d4a.

If the application uses libdm on its own (not only via libcryptsetup)
we have to unset global _context otherwise any libdm logging initiated
not from libcryptsetup would risk to access invalid pointer stored
in _context.
---
 lib/libdevmapper.c | 52 +++++++++++++++++++++++++++++++++++++++++-----
 1 file changed, 47 insertions(+), 5 deletions(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index b2da33155..de4802958 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -431,6 +431,10 @@ static int dm_init_context(struct crypt_device *cd, dm_target_type target)
 	}
 	return 0;
 }
+static void dm_exit_context(void)
+{
+	_context = NULL;
+}
 
 /* Return path to DM device */
 char *dm_device_path(const char *prefix, int major, int minor)
@@ -443,21 +447,25 @@ char *dm_device_path(const char *prefix, int major, int minor)
 		return NULL;
 
 	if (!(dmt = dm_task_create(DM_DEVICE_STATUS)))
-		return NULL;
+		goto err;
 	if (!dm_task_set_minor(dmt, minor) ||
 	    !dm_task_set_major(dmt, major) ||
 	    !dm_task_no_flush(dmt) ||
 	    !dm_task_run(dmt) ||
 	    !(name = dm_task_get_name(dmt))) {
 		dm_task_destroy(dmt);
-		return NULL;
+		goto err;
 	}
 
 	if (snprintf(path, sizeof(path), "%s%s", prefix ?: "", name) < 0)
 		path[0] = '\0';
 
 	dm_task_destroy(dmt);
+	dm_exit_context();
 	return strdup(path);
+err:
+	dm_exit_context();
+	return NULL;
 }
 
 char *dm_device_name(const char *path)
@@ -1085,6 +1093,8 @@ int dm_error_device(struct crypt_device *cd, const char *name)
 
 	dm_targets_free(cd, &dmd);
 
+	dm_exit_context();
+
 	return r;
 }
 
@@ -1103,6 +1113,8 @@ int dm_clear_device(struct crypt_device *cd, const char *name)
 	else
 		r = -EINVAL;
 
+	dm_exit_context();
+
 	return r;
 }
 
@@ -1123,6 +1135,7 @@ int dm_remove_device(struct crypt_device *cd, const char *name, uint32_t flags)
 
 	if (deferred && !dm_flags(cd, DM_UNKNOWN, &dmt_flags) && !(dmt_flags & DM_DEFERRED_SUPPORTED)) {
 		log_err(cd, _("Requested deferred flag is not supported."));
+		dm_exit_context();
 		return -ENOTSUP;
 	}
 
@@ -1148,6 +1161,7 @@ int dm_remove_device(struct crypt_device *cd, const char *name, uint32_t flags)
 	} while (r == -EINVAL && retries);
 
 	dm_task_update_nodes();
+	dm_exit_context();
 
 	return r;
 }
@@ -1821,6 +1835,7 @@ int dm_create_device(struct crypt_device *cd, const char *name,
 	    crypt_is_cipher_null(dmd->segment.u.crypt.cipher))
 		log_dbg(cd, "Activated dm-crypt device with cipher_null. Device is not encrypted.");
 
+	dm_exit_context();
 	return r;
 }
 
@@ -1859,6 +1874,7 @@ int dm_reload_device(struct crypt_device *cd, const char *name,
 	if (!r && resume)
 		r = _dm_resume_device(name, dmflags | act2dmflags(dmd->flags));
 
+	dm_exit_context();
 	return r;
 }
 
@@ -1934,6 +1950,7 @@ int dm_status_device(struct crypt_device *cd, const char *name)
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 	r = dm_status_dmi(name, &dmi, NULL, NULL);
+	dm_exit_context();
 
 	if (r < 0)
 		return r;
@@ -1949,6 +1966,7 @@ int dm_status_suspended(struct crypt_device *cd, const char *name)
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 	r = dm_status_dmi(name, &dmi, NULL, NULL);
+	dm_exit_context();
 
 	if (r < 0 && r != -EEXIST)
 		return r;
@@ -1982,6 +2000,7 @@ int dm_status_verity_ok(struct crypt_device *cd, const char *name)
 	if (dm_init_context(cd, DM_VERITY))
 		return -ENOTSUP;
 	r = _dm_status_verity_ok(cd, name);
+	dm_exit_context();
 	return r;
 }
 
@@ -1996,6 +2015,7 @@ int dm_status_verity_repaired(struct crypt_device *cd, const char *name, uint64_
 		return -ENOTSUP;
 
 	r = dm_status_dmi(name, &dmi, DM_VERITY_TARGET, &status_line);
+	dm_exit_context();
 	if (r < 0 || !status_line || !*status_line) {
 		free(status_line);
 		return r;
@@ -2030,12 +2050,14 @@ int dm_status_integrity_failures(struct crypt_device *cd, const char *name, uint
 	r = dm_status_dmi(name, &dmi, DM_INTEGRITY_TARGET, &status_line);
 	if (r < 0 || !status_line) {
 		free(status_line);
+		dm_exit_context();
 		return r;
 	}
 
 	log_dbg(cd, "Integrity volume %s failure status is %s.", name, status_line ?: "");
 	*count = strtoull(status_line, NULL, 10);
 	free(status_line);
+	dm_exit_context();
 
 	return 0;
 }
@@ -2943,6 +2965,8 @@ static int _dm_query_device(struct crypt_device *cd, const char *name,
 int dm_query_device(struct crypt_device *cd, const char *name,
 		    uint64_t get_flags, struct crypt_dm_active_device *dmd)
 {
+	int r;
+
 	if (!dmd)
 		return -EINVAL;
 
@@ -2951,7 +2975,10 @@ int dm_query_device(struct crypt_device *cd, const char *name,
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 
-	return _dm_query_device(cd, name, get_flags, dmd);
+	r = _dm_query_device(cd, name, get_flags, dmd);
+
+	dm_exit_context();
+	return r;
 }
 
 static int _process_deps(struct crypt_device *cd, const char *prefix, struct dm_deps *deps,
@@ -3058,6 +3085,7 @@ int dm_device_deps(struct crypt_device *cd, const char *name, const char *prefix
 	if (dmt)
 		dm_task_destroy(dmt);
 
+	dm_exit_context();
 	return r;
 }
 
@@ -3117,15 +3145,22 @@ int dm_suspend_device(struct crypt_device *cd, const char *name, uint64_t dmflag
 
 	r = 0;
 out:
+	dm_exit_context();
 	return r;
 }
 
 int dm_resume_device(struct crypt_device *cd, const char *name, uint64_t dmflags)
 {
+	int r;
+
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 
-	return _dm_resume_device(name, dmflags);
+	r = _dm_resume_device(name, dmflags);
+
+	dm_exit_context();
+
+	return r;
 }
 
 int dm_resume_and_reinstate_key(struct crypt_device *cd, const char *name,
@@ -3184,15 +3219,22 @@ int dm_resume_and_reinstate_key(struct crypt_device *cd, const char *name,
 out:
 	crypt_safe_free(msg);
 	crypt_safe_free(key);
+	dm_exit_context();
 	return r;
 }
 
 int dm_cancel_deferred_removal(struct crypt_device *cd, const char *name)
 {
+	int r;
+
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 
-	return _dm_message(name, "@cancel_deferred_remove") ? 0 : -ENOTSUP;
+	r = _dm_message(name, "@cancel_deferred_remove") ? 0 : -ENOTSUP;
+
+	dm_exit_context();
+
+	return r;
 }
 
 const char *dm_get_dir(void)

From 85f32cb8e93468963b09e5e06bf1353896db2607 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Fri, 2 Oct 2026 13:23:29 +0200
Subject: [PATCH 232/244] Do not set libdm custom log callback if already set.

device-mapper does not support context. Recent changes in libdm
caused that repeated call in dm_log_init issued warnings.

With current patch libcryptsetup will not set log callback via
dm_log_init if the function was already rerouted by different
caller outside libcryptsetup.

If the libdm was initialized by libcryptsetup we will reset the
log callback on every enter in device mapper backend.
---
 lib/libdevmapper.c | 28 ++++++++++++++++++++++------
 1 file changed, 22 insertions(+), 6 deletions(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index de4802958..c2c247357 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -40,6 +40,7 @@ static uint64_t _dm_flags = 0;
 
 static struct crypt_device *_context = NULL;
 static bool dm_backend_initialized = false;
+static bool dm_backend_initialized_by_crypt = false;
 
 /* Check if we have DM flag to instruct kernel to force wipe buffers */
 #if !HAVE_DECL_DM_TASK_SECURE_DATA
@@ -393,24 +394,39 @@ int dm_flags(struct crypt_device *cd, dm_target_type target, uint64_t *flags)
 	return -ENODEV;
 }
 
+static void dm_backend_set_log_callback(void)
+{
+	dm_log_init(set_dm_error);
+	dm_log_init_verbose(10);
+}
+
 /* This doesn't run any kernel checks, just set up userspace libdevmapper */
 static void dm_backend_init(void)
 {
 	if (!dm_backend_initialized) {
-		log_dbg(NULL, "Initialising device-mapper backend library.");
-		dm_log_init(set_dm_error);
-		dm_log_init_verbose(10);
+		/* If someone initialized libdm log callback already, do not touch it. */
+		if (dm_log_is_non_default())
+			log_dbg(NULL, "device-mapper backend library already initialized.");
+		else {
+			log_dbg(NULL, "Initialising device-mapper backend library.");
+			dm_backend_set_log_callback();
+			dm_backend_initialized_by_crypt = true;
+		}
+
 		dm_backend_initialized = true;
-	}
+	} else if (dm_backend_initialized_by_crypt)
+		/* If we initialized libdm, reset log functions on every call. */
+		dm_backend_set_log_callback();
 }
 
 void dm_backend_exit(void)
 {
-	if (dm_backend_initialized) {
+	/* Release dm backend only if it was initialized by libcryptsetup */
+	if (dm_backend_initialized_by_crypt) {
 		dm_log_init_verbose(0);
 		dm_log_init(NULL);
 		dm_lib_release();
-		dm_backend_initialized = false;
+		dm_backend_initialized_by_crypt = false;
 	}
 }
 

From 78123bf91cea4d0840db2397733843bb0abd3bea Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 1 Oct 2026 14:25:40 +0200
Subject: [PATCH 233/244] Add crypt_get_hw_opal_enabled API.

It allows application to detect if the OPAL2
device was properly enabled for OPAL2 locking.
Most notably the device was initialized and Admin
PIN was already set.
---
 lib/libcryptsetup.h         | 12 ++++++++++++
 lib/libcryptsetup.sym       |  1 +
 lib/luks2/hw_opal/hw_opal.c | 22 ++++++++++++++++++++++
 3 files changed, 35 insertions(+)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index 365434cab..e9cb918b7 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -2014,6 +2014,18 @@ typedef enum {
  */
 crypt_status_hw_encryption_info crypt_status_hw_encryption(struct crypt_device *cd);
 
+/**
+ * Get info about OPAL2 device state.
+ *
+ * @param cd crypt device handle
+ *
+ * @return Zero for valid OPAL2 device with locking disabled, 1 for
+ * 	   OPAL2 device with locking enabled and initialized (Admin PIN was selected).
+ * 	   Negative errno otherwise. Most notably if the device is not OPAL2 or kernel
+ * 	   does not support sed-opal interface.
+ */
+int crypt_get_hw_opal_enabled(struct crypt_device *cd);
+
 /**
  * Dump text-formatted information about crypt or verity device to log output.
  *
diff --git a/lib/libcryptsetup.sym b/lib/libcryptsetup.sym
index 51f0bfef7..ebbca8781 100644
--- a/lib/libcryptsetup.sym
+++ b/lib/libcryptsetup.sym
@@ -202,4 +202,5 @@ CRYPTSETUP_2.9 {
 		crypt_get_hw_opal_sum_enabled;
 		crypt_status_hw_encryption;
 		crypt_get_type_defaults;
+		crypt_get_hw_opal_enabled;
 } CRYPTSETUP_2.8;
diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index 0d14e909d..86b7a767e 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -1675,6 +1675,24 @@ crypt_status_hw_encryption_info crypt_status_hw_encryption(struct crypt_device *
 	return r > 0 ? CRYPT_HW_OPAL_SUM : CRYPT_HW_OPAL;
 }
 
+int crypt_get_hw_opal_enabled(struct crypt_device *cd)
+{
+	int fd, r;
+
+	if (!cd)
+		return -EINVAL;
+
+	fd = device_open(cd, crypt_data_device(cd), O_RDONLY);
+	if (fd < 0)
+		return -EIO;
+
+	/* If OPAL2 locking is not supported, return immediately */
+	r = opal_query_status_fd(cd, fd, OPAL_FL_SUPPORTED | OPAL_FL_LOCKING_SUPPORTED);
+	if (r <= 0)
+		return r;
+
+	return opal_query_status_fd(cd, fd, OPAL_FL_LOCKING_ENABLED);
+}
 #else
 #pragma GCC diagnostic ignored "-Wunused-parameter"
 
@@ -1764,4 +1782,8 @@ crypt_status_hw_encryption_info crypt_status_hw_encryption(struct crypt_device *
 	return CRYPT_HW_INVALID;
 }
 
+int crypt_get_hw_opal_enabled(struct crypt_device *cd)
+{
+	return -ENOTSUP;
+}
 #endif

From 73dbf339840a9b0fbf0b7890eddd217190f94ab2 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Mon, 28 Sep 2026 19:53:15 +0200
Subject: [PATCH 234/244] opal: Print error for cryptsetup erase with wrong
 password

Erase command failed quietly if wrong admin password was provided.
The command can also fail for other reasons (authority locked
out after several wrong attempts and similar fails).

Add proper return code to library and message to cryptsetup.
---
 lib/luks2/hw_opal/hw_opal.c | 13 +++++++++++--
 src/cryptsetup.c            |  4 ++++
 2 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index 86b7a767e..ad74fef4e 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -1418,7 +1418,11 @@ int opal_reset_segment(struct crypt_device *cd,
 
 	if (segment_in_sum) {
 		r = opal_ioctl(cd, fd, IOC_OPAL_ERASE_LR, user_session);
-		if (r != OPAL_STATUS_SUCCESS) {
+		if (r == OPAL_STATUS_NOT_AUTHORIZED) {
+			log_dbg(cd, "Failed to erase SUM OPAL locking range for device '%s', incorrect password?",
+				crypt_get_device_name(cd));
+			r = -EPERM;
+		} else if (r != OPAL_STATUS_SUCCESS) {
 			log_dbg(cd, "Failed to erase SUM OPAL locking range %u on device '%s': %s",
 				segment_number, crypt_get_device_name(cd), opal_status_to_string(r));
 			r = -EINVAL;
@@ -1431,7 +1435,12 @@ int opal_reset_segment(struct crypt_device *cd,
 	r = opal_ioctl(cd, fd, IOC_OPAL_SECURE_ERASE_LR, user_session);
 	if (r < 0)
 		goto out;
-	if (r != OPAL_STATUS_SUCCESS) {
+	else if (r == OPAL_STATUS_NOT_AUTHORIZED) {
+		log_dbg(cd, "Failed to reset (secure erase) OPAL locking range for device '%s', incorrect password?",
+			crypt_get_device_name(cd));
+		r = -EPERM;
+		goto out;
+	} else if (r != OPAL_STATUS_SUCCESS) {
 		log_dbg(cd, "Failed to reset (secure erase) OPAL locking range %u on device '%s': %s",
 			segment_number, crypt_get_device_name(cd), opal_status_to_string(r));
 		r = -EINVAL;
diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index 94d6dce9d..ced9f8ebd 100644
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -2944,6 +2944,10 @@ static int opal_erase(struct crypt_device *cd, bool factory_reset) {
 
 	r = crypt_wipe_hw_opal(cd, factory_reset ? CRYPT_NO_SEGMENT : CRYPT_LUKS2_SEGMENT,
 			       password, password_size, 0);
+	if (r == -EPERM && !factory_reset)
+		log_err(_("Invalid OPAL Admin password provided."));
+	else if (r < 0)
+		log_err(_("OPAL erase failed."));
 
 	crypt_safe_free(password);
 	return r;

From be6f1acc34c65ad140dad3fc833e8dfd0d83b484 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Mon, 12 Oct 2026 11:42:06 +0200
Subject: [PATCH 235/244] libdevmapper: add missing dm_backend_init in
 dm_flags.

Otherwise libdm spams stderr with warnings previously
suppressed by libcryptsetup custom log function.

Fixes: #1005.
---
 lib/libdevmapper.c | 47 +++++++++++++++++++++++++++++++++-------------
 1 file changed, 34 insertions(+), 13 deletions(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index c2c247357..815e8ba79 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -299,6 +299,12 @@ static int _dm_check_versions(struct crypt_device *cd, dm_target_type target_typ
 	unsigned dm_maj, dm_min, dm_patch;
 	int r = 0;
 
+	/*
+	 * Backend must be initialized by the caller; if not, it's an internal
+	 * libcryptsetup error that regresses by spamming stderr with libdm warnings.
+	 */
+	assert(dm_backend_initialized);
+
 	if ((target_type == DM_CRYPT     && _dm_crypt_checked) ||
 	    (target_type == DM_VERITY    && _dm_verity_checked) ||
 	    (target_type == DM_INTEGRITY && _dm_integrity_checked) ||
@@ -375,7 +381,7 @@ static int _dm_check_versions(struct crypt_device *cd, dm_target_type target_typ
 	return r;
 }
 
-int dm_flags(struct crypt_device *cd, dm_target_type target, uint64_t *flags)
+static int _do_dm_flags(struct crypt_device *cd, dm_target_type target, uint64_t *flags)
 {
 	_dm_check_versions(cd, target);
 	*flags = _dm_flags;
@@ -452,6 +458,21 @@ static void dm_exit_context(void)
 	_context = NULL;
 }
 
+int dm_flags(struct crypt_device *cd, dm_target_type target, uint64_t *flags)
+{
+	int r;
+
+	/* We have to route dm log via set_dm_error, otherwise dm_check_versions spams stderr */
+	dm_backend_init();
+	_context = cd;
+
+	r = _do_dm_flags(cd, target, flags);
+
+	dm_exit_context();
+
+	return r;
+}
+
 /* Return path to DM device */
 char *dm_device_path(const char *prefix, int major, int minor)
 {
@@ -1149,7 +1170,7 @@ int dm_remove_device(struct crypt_device *cd, const char *name, uint32_t flags)
 	if (dm_init_context(cd, DM_UNKNOWN))
 		return -ENOTSUP;
 
-	if (deferred && !dm_flags(cd, DM_UNKNOWN, &dmt_flags) && !(dmt_flags & DM_DEFERRED_SUPPORTED)) {
+	if (deferred && !_do_dm_flags(cd, DM_UNKNOWN, &dmt_flags) && !(dmt_flags & DM_DEFERRED_SUPPORTED)) {
 		log_err(cd, _("Requested deferred flag is not supported."));
 		dm_exit_context();
 		return -ENOTSUP;
@@ -1737,7 +1758,7 @@ int dm_create_device(struct crypt_device *cd, const char *name,
 	if (!r || r == -EEXIST)
 		goto out;
 
-	if (dm_flags(cd, dmd->segment.type, &dmt_flags))
+	if (_do_dm_flags(cd, dmd->segment.type, &dmt_flags))
 		goto out;
 
 	if ((dmd->segment.type == DM_CRYPT || dmd->segment.type == DM_LINEAR || dmd->segment.type == DM_ZERO) &&
@@ -1867,23 +1888,23 @@ int dm_reload_device(struct crypt_device *cd, const char *name,
 	if (dm_init_context(cd, dmd->segment.type))
 		return -ENOTSUP;
 
-	if (dm_flags(cd, DM_INTEGRITY, &dmt_flags) || !(dmt_flags & DM_INTEGRITY_RECALC_SUPPORTED))
+	if (_do_dm_flags(cd, DM_INTEGRITY, &dmt_flags) || !(dmt_flags & DM_INTEGRITY_RECALC_SUPPORTED))
 		dmd->flags &= ~CRYPT_ACTIVATE_RECALCULATE;
 
 	r = _dm_reload_device(cd, name, dmd);
 
 	if (r == -EINVAL && (dmd->segment.type == DM_CRYPT || dmd->segment.type == DM_LINEAR)) {
 		if ((dmd->flags & (CRYPT_ACTIVATE_SAME_CPU_CRYPT|CRYPT_ACTIVATE_SUBMIT_FROM_CRYPT_CPUS)) &&
-		    !dm_flags(cd, DM_CRYPT, &dmt_flags) && !(dmt_flags & (DM_SAME_CPU_CRYPT_SUPPORTED | DM_SUBMIT_FROM_CRYPT_CPUS_SUPPORTED)))
+		    !_do_dm_flags(cd, DM_CRYPT, &dmt_flags) && !(dmt_flags & (DM_SAME_CPU_CRYPT_SUPPORTED | DM_SUBMIT_FROM_CRYPT_CPUS_SUPPORTED)))
 			log_err(cd, _("Requested dm-crypt performance options are not supported."));
 		if ((dmd->flags & (CRYPT_ACTIVATE_NO_READ_WORKQUEUE | CRYPT_ACTIVATE_NO_WRITE_WORKQUEUE)) &&
-		    !dm_flags(cd, DM_CRYPT, &dmt_flags) && !(dmt_flags & DM_CRYPT_NO_WORKQUEUE_SUPPORTED))
+		    !_do_dm_flags(cd, DM_CRYPT, &dmt_flags) && !(dmt_flags & DM_CRYPT_NO_WORKQUEUE_SUPPORTED))
 			log_err(cd, _("Requested dm-crypt performance options are not supported."));
 		if ((dmd->flags & CRYPT_ACTIVATE_ALLOW_DISCARDS) &&
-		    !dm_flags(cd, DM_CRYPT, &dmt_flags) && !(dmt_flags & DM_DISCARDS_SUPPORTED))
+		    !_do_dm_flags(cd, DM_CRYPT, &dmt_flags) && !(dmt_flags & DM_DISCARDS_SUPPORTED))
 			log_err(cd, _("Discard/TRIM is not supported."));
 		if ((dmd->flags & CRYPT_ACTIVATE_ALLOW_DISCARDS) &&
-		    !dm_flags(cd, DM_INTEGRITY, &dmt_flags) && !(dmt_flags & DM_INTEGRITY_DISCARDS_SUPPORTED))
+		    !_do_dm_flags(cd, DM_INTEGRITY, &dmt_flags) && !(dmt_flags & DM_INTEGRITY_DISCARDS_SUPPORTED))
 			log_err(cd, _("Discard/TRIM is not supported."));
 	}
 
@@ -3140,7 +3161,7 @@ int dm_suspend_device(struct crypt_device *cd, const char *name, uint64_t dmflag
 		return r;
 
 	if (dmflags & DM_SUSPEND_WIPE_KEY) {
-		if (dm_flags(cd, DM_CRYPT, &dmt_flags))
+		if (_do_dm_flags(cd, DM_CRYPT, &dmt_flags))
 			goto out;
 
 		if (!(dmt_flags & DM_KEY_WIPE_SUPPORTED))
@@ -3187,7 +3208,7 @@ int dm_resume_and_reinstate_key(struct crypt_device *cd, const char *name,
 	char *msg = NULL, *key = NULL;
 	int r = -ENOTSUP;
 
-	if (dm_init_context(cd, DM_CRYPT) || dm_flags(cd, DM_CRYPT, &dmt_flags))
+	if (dm_init_context(cd, DM_CRYPT) || _do_dm_flags(cd, DM_CRYPT, &dmt_flags))
 		return -ENOTSUP;
 
 	if (!(dmt_flags & DM_KEY_WIPE_SUPPORTED))
@@ -3505,12 +3526,12 @@ int dm_integrity_target_set(struct crypt_device *cd,
 	tgt->u.integrity.journal_crypt_key = journal_crypt_key;
 	tgt->u.integrity.journal_integrity_key = journal_mac_key;
 
-	if (!dm_flags(cd, DM_INTEGRITY, &dmi_flags) &&
+	if (!_do_dm_flags(cd, DM_INTEGRITY, &dmi_flags) &&
 	    (dmi_flags & DM_INTEGRITY_FIX_PADDING_SUPPORTED) &&
 	    !(crypt_get_compatibility(cd) & CRYPT_COMPAT_LEGACY_INTEGRITY_PADDING))
 		tgt->u.integrity.fix_padding = true;
 
-	if (!dm_flags(cd, DM_INTEGRITY, &dmi_flags) &&
+	if (!_do_dm_flags(cd, DM_INTEGRITY, &dmi_flags) &&
 	    (dmi_flags & DM_INTEGRITY_FIX_HMAC_SUPPORTED) &&
 	    !(crypt_get_compatibility(cd) & CRYPT_COMPAT_LEGACY_INTEGRITY_HMAC))
 		tgt->u.integrity.fix_hmac = true;
@@ -3519,7 +3540,7 @@ int dm_integrity_target_set(struct crypt_device *cd,
 	if (crypt_get_compatibility(cd) & CRYPT_COMPAT_LEGACY_INTEGRITY_RECALC)
 		tgt->u.integrity.legacy_recalc = true;
 
-	if (vk && !dm_flags(cd, DM_INTEGRITY, &dmi_flags) &&
+	if (vk && !_do_dm_flags(cd, DM_INTEGRITY, &dmi_flags) &&
 	    (dmi_flags & DM_INTEGRITY_DISCARD_KEYED_SUPPORTED) &&
 	    !(crypt_get_compatibility(cd) & CRYPT_COMPAT_LEGACY_INTEGRITY_DISCARD))
 		tgt->u.integrity.discard_keyed = true;

From ca0df4b71cb115421aff90996b1261f80cce6e46 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Mon, 12 Oct 2026 12:01:02 +0200
Subject: [PATCH 236/244] libdevmapper: require root privileges in
 dm_integrity_target_set.

We have to get access to dm-integrity target feature flags. This
cannot be done without root access. It would have failed without root
later anyway.
---
 lib/libdevmapper.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/lib/libdevmapper.c b/lib/libdevmapper.c
index 815e8ba79..9357967d7 100644
--- a/lib/libdevmapper.c
+++ b/lib/libdevmapper.c
@@ -3509,7 +3509,8 @@ int dm_integrity_target_set(struct crypt_device *cd,
 	if (!data_device)
 		return -EINVAL;
 
-	_dm_check_versions(cd, DM_INTEGRITY);
+	if (dm_init_context(cd, DM_INTEGRITY))
+		return -ENOTSUP;
 
 	tgt->type = DM_INTEGRITY;
 	tgt->direction = TARGET_SET;
@@ -3556,6 +3557,8 @@ int dm_integrity_target_set(struct crypt_device *cd,
 		tgt->u.integrity.integrity = ip->integrity;
 	}
 
+	dm_exit_context();
+
 	return 0;
 }
 

From 44291e0c5c51c2eda4008112d4b09813589b5302 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 7 Apr 2026 14:04:56 +0200
Subject: [PATCH 237/244] Refactor internal segment_in_sum function.

---
 lib/luks2/hw_opal/hw_opal.c | 27 +++++++++++++++++----------
 1 file changed, 17 insertions(+), 10 deletions(-)

diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index ad74fef4e..3e6467161 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -694,25 +694,32 @@ static int opal_sum_setup(struct crypt_device *cd, int fd, const void *admin_key
 	return r > 0 ? -EINVAL : r;
 }
 
+static uint8_t opal_segment_in_sum(uint32_t segment_number, const struct opal_sum_ranges *sranges)
+{
+	int i;
+
+	assert(sranges);
+
+	for (i = 0; i < sranges->num_lrs ; i++) {
+		if (sranges->lr[i] == segment_number)
+			return 1;
+	}
+
+	return 0;
+}
+
 static int opal_get_sum_status_anybody(struct crypt_device *cd, int fd, uint32_t segment_number,
 				       uint8_t *r_policy, uint8_t *r_segment_in_sum)
 {
-	int i, r;
+	int r;
 	struct opal_sum_ranges sum_ranges = {};
 
 	r = opal_get_sum_ranges_anybody(cd, fd, &sum_ranges);
 	if (r < 0)
 		return r;
 
-	if (r_segment_in_sum) {
-		*r_segment_in_sum = 0;
-		for (i = 0; i < sum_ranges.num_lrs ; i++) {
-			if (sum_ranges.lr[i] == segment_number) {
-				*r_segment_in_sum = 1;
-				break;
-			}
-		}
-	}
+	if (r_segment_in_sum)
+		*r_segment_in_sum = opal_segment_in_sum(segment_number, &sum_ranges);
 
 	if (r_policy)
 		*r_policy = sum_ranges.range_policy;

From 7de67b311fdb2f0313d53c80253869e4c530557a Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 7 Apr 2026 14:11:24 +0200
Subject: [PATCH 238/244] Make crypt key argument optional in
 LUKS2_split_crypt_and_opal_keys

---
 lib/luks2/luks2_json_metadata.c | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/lib/luks2/luks2_json_metadata.c b/lib/luks2/luks2_json_metadata.c
index c532576d8..a1a63d35a 100644
--- a/lib/luks2/luks2_json_metadata.c
+++ b/lib/luks2/luks2_json_metadata.c
@@ -3155,7 +3155,6 @@ int LUKS2_split_crypt_and_opal_keys(struct crypt_device *cd __attribute__((unuse
 	struct volume_key *opal_key, *crypt_key;
 
 	assert(vk);
-	assert(ret_crypt_key);
 	assert(ret_opal_key);
 
 	jobj_segment = LUKS2_get_segment_jobj(hdr, CRYPT_DEFAULT_SEGMENT);
@@ -3175,7 +3174,8 @@ int LUKS2_split_crypt_and_opal_keys(struct crypt_device *cd __attribute__((unuse
 
 	/* OPAL SEGMENT only */
 	if (crypt_volume_key_length(vk) == opal_user_key_size) {
-		*ret_crypt_key = NULL;
+		if (ret_crypt_key)
+			*ret_crypt_key = NULL;
 		*ret_opal_key = NULL;
 		return 0;
 	}
@@ -3184,15 +3184,17 @@ int LUKS2_split_crypt_and_opal_keys(struct crypt_device *cd __attribute__((unuse
 	if (!opal_key)
 		return -ENOMEM;
 
-	crypt_key = crypt_alloc_volume_key(crypt_volume_key_length(vk) - opal_user_key_size,
-					   crypt_volume_key_get_key(vk) + opal_user_key_size);
-	if (!crypt_key) {
-		crypt_free_volume_key(opal_key);
-		return -ENOMEM;
+	if (ret_crypt_key) {
+		crypt_key = crypt_alloc_volume_key(crypt_volume_key_length(vk) - opal_user_key_size,
+						   crypt_volume_key_get_key(vk) + opal_user_key_size);
+		if (!crypt_key) {
+			crypt_free_volume_key(opal_key);
+			return -ENOMEM;
+		}
+		*ret_crypt_key = crypt_key;
 	}
 
 	*ret_opal_key = opal_key;
-	*ret_crypt_key = crypt_key;
 
 	return 0;
 }

From 79797653a4476ed9eca1986c1324c2ee82e4d2ee Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Thu, 1 Oct 2026 14:45:13 +0200
Subject: [PATCH 239/244] Add crypt_hw_opal_locking_ranges_max API.

To get max count of OPAL2 locking ranges supported
by sed-opal kernel interface.
---
 lib/libcryptsetup.h         | 10 ++++++++++
 lib/libcryptsetup.sym       |  1 +
 lib/luks2/hw_opal/hw_opal.c | 10 ++++++++++
 3 files changed, 21 insertions(+)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index e9cb918b7..b60f15cb9 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -3332,6 +3332,16 @@ int crypt_set_keyring_to_link(struct crypt_device* cd,
 	const char* key_type_desc,
 	const char* keyring_to_link_vk);
 
+/**
+ * Get number of OPAL locking ranges supported by the device.
+ *
+ * @param cd OPAL device handle
+ *
+ * @return OPAL locking ranges count or negative errno on error.
+ *
+ */
+int crypt_hw_opal_locking_ranges_max(struct crypt_device *cd);
+
 /** @} */
 
 #ifdef __cplusplus
diff --git a/lib/libcryptsetup.sym b/lib/libcryptsetup.sym
index ebbca8781..df78b2611 100644
--- a/lib/libcryptsetup.sym
+++ b/lib/libcryptsetup.sym
@@ -203,4 +203,5 @@ CRYPTSETUP_2.9 {
 		crypt_status_hw_encryption;
 		crypt_get_type_defaults;
 		crypt_get_hw_opal_enabled;
+		crypt_hw_opal_locking_ranges_max;
 } CRYPTSETUP_2.8;
diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index 3e6467161..9548daa28 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -1709,6 +1709,11 @@ int crypt_get_hw_opal_enabled(struct crypt_device *cd)
 
 	return opal_query_status_fd(cd, fd, OPAL_FL_LOCKING_ENABLED);
 }
+
+int crypt_hw_opal_locking_ranges_max(struct crypt_device *cd __attribute__((unused)))
+{
+	return OPAL_MAX_LRS;
+}
 #else
 #pragma GCC diagnostic ignored "-Wunused-parameter"
 
@@ -1802,4 +1807,9 @@ int crypt_get_hw_opal_enabled(struct crypt_device *cd)
 {
 	return -ENOTSUP;
 }
+
+int crypt_hw_opal_locking_ranges_max(struct crypt_device *cd)
+{
+	return -ENOTSUP;
+}
 #endif

From c2854fc97909b1541dea99b3c81ec8f0c084c394 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 7 Apr 2026 14:54:02 +0200
Subject: [PATCH 240/244] Add crypt_get_hw_opal_locking_ranges API.

The function returns offset, length, locking state, lock mode,
SUM state and RangePolicy flag for each locking object defined
on the block device. It requires Admin1 authority (in TCG OPAL2
terminology) to access locking objects description on the target
device.
---
 lib/libcryptsetup.h         |  57 ++++++++++++
 lib/libcryptsetup.sym       |   1 +
 lib/luks2/hw_opal/hw_opal.c | 167 +++++++++++++++++++++++++++++++++++-
 lib/luks2/hw_opal/hw_opal.h |   8 ++
 lib/setup.c                 |  13 +++
 5 files changed, 243 insertions(+), 3 deletions(-)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index b60f15cb9..58627153a 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -3342,6 +3342,63 @@ int crypt_set_keyring_to_link(struct crypt_device* cd,
  */
 int crypt_hw_opal_locking_ranges_max(struct crypt_device *cd);
 
+/**
+ * State of OPAL locking range
+ */
+typedef enum {
+	CRYPT_HW_OPAL_RW = 0, /* unlocked for R/W */
+	CRYPT_HW_OPAL_RO,     /* unlocked only for read */
+	CRYPT_HW_OPAL_LOCKED, /* locked for all I/O */
+} crypt_hw_opal_lock_state;
+
+/**
+ * OPAL feature state
+ */
+typedef enum {
+	CRYPT_HW_OPAL_FEATURE_DISABLED = 0, /* a feature is disabled */
+	CRYPT_HW_OPAL_FEATURE_ENABLED,      /* a feature is enabled */
+	CRYPT_HW_OPAL_FEATURE_UNDEFINED,    /* a feature state is undefined (missing kernel API) */
+} crypt_hw_opal_feature_state;
+
+/**
+ * OPAL locking range description
+ */
+struct crypt_hw_opal_range {
+	uint8_t id; /* locking range id */
+	unsigned int read_locking_enabled; /* read locking is enabled */
+	unsigned int write_locking_enabled; /* write locking is enabled */
+	crypt_hw_opal_lock_state lock_state;
+	crypt_hw_opal_feature_state sum; /* Locking range SUM support */
+	crypt_hw_opal_feature_state range_policy; /* Range Policy */
+	uint64_t offset; /* locking range offset in bytes (absolute offset on the whole block device) */
+	uint64_t length; /* locking range length in bytes */
+};
+
+/**
+ * Get information about OPAL locking ranges.
+ *
+ * The function provides status information about OPAL locking ranges
+ * that can be retrieved using the Admin1 authority PIN.
+ *
+ * @param cd OPAL device handle
+ * @param opal_pin passphrase used to authenticate OPAL Admin1 authority
+ * @param opal_pin_size size of @e opal_pin (binary data)
+ * @param opal_ranges return buffer for OPAL locking ranges descriptions
+ * @param opal_ranges_count size of @e opal_ranges array
+ *
+ * @note if @e opal_ranges_count, and therefore the @e opal_ranges array, is too small to contain all OPAL
+ * 	 locking range descriptions retrieved from the OPAL device, the function returns -ENOSPC.
+ * 	 Use @ref crypt_hw_opal_locking_ranges_max to get max number of supported OPAL locking ranges by the OPAL device.
+ *
+ * @return the number of locking ranges returned in the @e opal_ranges array on success, -EPERM if provided
+ * 	   OPAL Admin PIN (passphrase) was incorrect, or other negative errno value otherwise.
+ */
+int crypt_get_hw_opal_locking_ranges(struct crypt_device *cd,
+				     const char *opal_pin,
+				     size_t opal_pin_size,
+				     struct crypt_hw_opal_range *opal_ranges,
+				     size_t opal_ranges_count);
+
 /** @} */
 
 #ifdef __cplusplus
diff --git a/lib/libcryptsetup.sym b/lib/libcryptsetup.sym
index df78b2611..3144752eb 100644
--- a/lib/libcryptsetup.sym
+++ b/lib/libcryptsetup.sym
@@ -204,4 +204,5 @@ CRYPTSETUP_2.9 {
 		crypt_get_type_defaults;
 		crypt_get_hw_opal_enabled;
 		crypt_hw_opal_locking_ranges_max;
+		crypt_get_hw_opal_locking_ranges;
 } CRYPTSETUP_2.8;
diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index 9548daa28..e63be0172 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -694,7 +694,7 @@ static int opal_sum_setup(struct crypt_device *cd, int fd, const void *admin_key
 	return r > 0 ? -EINVAL : r;
 }
 
-static uint8_t opal_segment_in_sum(uint32_t segment_number, const struct opal_sum_ranges *sranges)
+static crypt_hw_opal_feature_state opal_segment_in_sum(uint32_t segment_number, const struct opal_sum_ranges *sranges)
 {
 	int i;
 
@@ -702,10 +702,10 @@ static uint8_t opal_segment_in_sum(uint32_t segment_number, const struct opal_su
 
 	for (i = 0; i < sranges->num_lrs ; i++) {
 		if (sranges->lr[i] == segment_number)
-			return 1;
+			return CRYPT_HW_OPAL_FEATURE_ENABLED;
 	}
 
-	return 0;
+	return CRYPT_HW_OPAL_FEATURE_DISABLED;
 }
 
 static int opal_get_sum_status_anybody(struct crypt_device *cd, int fd, uint32_t segment_number,
@@ -1714,6 +1714,156 @@ int crypt_hw_opal_locking_ranges_max(struct crypt_device *cd __attribute__((unus
 {
 	return OPAL_MAX_LRS;
 }
+
+static crypt_hw_opal_lock_state opal_lock_state_translate(unsigned int sed_opal_lock_state)
+{
+	switch(sed_opal_lock_state) {
+	case OPAL_RW:
+		return CRYPT_HW_OPAL_RW;
+	case OPAL_RO:
+		return CRYPT_HW_OPAL_RO;
+	case OPAL_LK:
+	default: /* fall-through */
+		return CRYPT_HW_OPAL_LOCKED;
+	}
+}
+
+/* returns 1 on success, 0 if LR is not active, negative errno on fatal error */
+static int opal_get_range(struct crypt_device *cd,
+		  int fd,
+		  uint32_t opal_block_size,
+		  bool sum_undefined,
+		  struct opal_lr_status *lrs,
+		  const struct opal_sum_ranges *sum_ranges,
+		  struct crypt_hw_opal_range *ret_opal_range)
+{
+	int r;
+	crypt_hw_opal_feature_state sum, range_policy;
+
+	assert(lrs);
+	assert(sum_ranges);
+	assert(ret_opal_range);
+
+	r = opal_ioctl(cd, fd, IOC_OPAL_GET_LR_STATUS, lrs);
+	if (r < 0)
+		return r;
+	if (r == OPAL_STATUS_NOT_AUTHORIZED)
+		return -EPERM;
+	if (r != OPAL_STATUS_SUCCESS)
+		return 0;
+
+	/* FIXME: fine tune condition when do not report LR back to the caller */
+	if (!lrs->range_start && !lrs->range_length && !lrs->RLE && !lrs->WLE)
+		return 0;
+
+	if (sum_undefined)
+		sum = CRYPT_HW_OPAL_FEATURE_UNDEFINED;
+	else
+		sum = opal_segment_in_sum(lrs->session.opal_key.lr, sum_ranges);
+
+	/*
+	 * Do not confuse callers by range policy set to enabled when LR is not in
+	 * properly configured for SUM.
+	 */
+	if (sum != CRYPT_HW_OPAL_FEATURE_ENABLED)
+		range_policy = sum;
+	else if (sum_ranges->range_policy)
+		range_policy = CRYPT_HW_OPAL_FEATURE_ENABLED;
+	else
+		range_policy = CRYPT_HW_OPAL_FEATURE_DISABLED;
+
+	*ret_opal_range = (struct crypt_hw_opal_range) {
+			.id = lrs->session.opal_key.lr,
+			.offset = lrs->range_start * opal_block_size,
+			.length = lrs->range_length * opal_block_size,
+			.read_locking_enabled = lrs->RLE,
+			.write_locking_enabled = lrs->WLE,
+			.lock_state = opal_lock_state_translate(lrs->l_state),
+			.sum = sum,
+			.range_policy = range_policy,
+	};
+
+	return 1;
+}
+
+int opal_get_ranges_params(struct crypt_device *cd,
+			 struct device *dev,
+			 uint32_t opal_user_id,
+			 const void *opal_key,
+			 size_t opal_key_size,
+			 struct crypt_hw_opal_range *opal_ranges,
+			 size_t opal_ranges_count)
+{
+	int fd, r;
+	uint32_t opal_block_size;
+	uint8_t lr = 0;
+	struct opal_lr_status *lrs;
+	struct opal_sum_ranges sum_ranges = {};
+	struct crypt_hw_opal_range tmp = {};
+	size_t stored_ranges = 0;
+	bool sum_undefined = false;
+
+	assert(opal_ranges);
+	assert(opal_ranges_count > 0);
+
+	if (opal_key_size > OPAL_KEY_MAX)
+		return -EINVAL;
+
+	fd = device_open(cd, dev, O_RDONLY);
+	if (fd < 0)
+		return -EIO;
+
+	r = opal_geometry_fd(cd, fd, NULL, &opal_block_size, NULL, NULL);
+	if (r != OPAL_STATUS_SUCCESS)
+		return -EINVAL;
+
+	/* check if kernel recognizes the device as SUM capable */
+	r = opal_query_status_fd(cd, fd, OPAL_FL_SUM_SUPPORTED);
+	if (r < 0)
+		return r;
+
+	/* Check locking ranges SUM state only if the device advertises SUM support */
+	if (r) {
+		r = opal_get_sum_ranges_anybody(cd, fd, &sum_ranges);
+		sum_undefined = (r < 0);
+	}
+
+	lrs = crypt_safe_alloc(sizeof(*lrs));
+	if (!lrs)
+		return -ENOMEM;
+
+	*lrs = (struct opal_lr_status) {
+		.session = {
+			.who = opal_user_id,
+			.opal_key = {
+				.key_len = opal_key_size,
+			}
+		}
+	};
+	crypt_safe_memcpy(lrs->session.opal_key.key, opal_key, opal_key_size);
+
+	for (lr = 0; lr < OPAL_MAX_LRS; lr++) {
+		lrs->session.opal_key.lr = lr;
+
+		r = opal_get_range(cd, fd, opal_block_size, sum_undefined, lrs, &sum_ranges, &tmp);
+		if (r == 1) {
+			if (stored_ranges < opal_ranges_count)
+				opal_ranges[stored_ranges++] = tmp;
+			else
+				r = -ENOSPC;
+		}
+		if (r < 0)
+			goto out;
+	}
+
+	r = stored_ranges;
+out:
+	crypt_safe_free(lrs);
+	if (r < 0)
+		memset(opal_ranges, 0, opal_ranges_count * sizeof(*opal_ranges));
+
+	return r;
+}
 #else
 #pragma GCC diagnostic ignored "-Wunused-parameter"
 
@@ -1812,4 +1962,15 @@ int crypt_hw_opal_locking_ranges_max(struct crypt_device *cd)
 {
 	return -ENOTSUP;
 }
+
+int opal_get_ranges_params(struct crypt_device *cd,
+			 struct device *dev,
+			 uint32_t opal_user_id,
+			 const void *opal_key,
+			 size_t opal_key_size,
+			 struct crypt_hw_opal_range *opal_ranges,
+			 size_t opal_ranges_count)
+{
+	return -ENOTSUP;
+}
 #endif
diff --git a/lib/luks2/hw_opal/hw_opal.h b/lib/luks2/hw_opal/hw_opal.h
index 0ab254d51..a7932289c 100644
--- a/lib/luks2/hw_opal/hw_opal.h
+++ b/lib/luks2/hw_opal/hw_opal.h
@@ -59,4 +59,12 @@ int opal_exclusive_lock(struct crypt_device *cd,
 			struct crypt_lock_handle **opal_lock);
 void opal_exclusive_unlock(struct crypt_device *cd, struct crypt_lock_handle *opal_lock);
 
+int opal_get_ranges_params(struct crypt_device *cd,
+			 struct device *dev,
+			 uint32_t opal_user_id,
+			 const void *opal_key,
+			 size_t opal_key_size,
+			 struct crypt_hw_opal_range *opal_ranges,
+			 size_t opal_ranges_count);
+
 #endif
diff --git a/lib/setup.c b/lib/setup.c
index 9e9f3fc63..435740fc2 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -6306,6 +6306,19 @@ int crypt_dump_json(struct crypt_device *cd, const char **json, uint32_t flags)
 	return -EINVAL;
 }
 
+int crypt_get_hw_opal_locking_ranges(struct crypt_device *cd,
+				const char *opal_pin,
+				size_t opal_pin_size,
+				struct crypt_hw_opal_range *opal_ranges,
+				size_t opal_ranges_count)
+{
+	if (!cd || !crypt_data_device(cd) || !opal_ranges || !opal_ranges_count)
+		return -EINVAL;
+
+	return opal_get_ranges_params(cd, crypt_data_device(cd), 0 /* OPAL_ADMIN1 */,
+				 opal_pin, opal_pin_size, opal_ranges, opal_ranges_count);
+}
+
 /* internal only */
 const char *crypt_get_cipher_spec(struct crypt_device *cd)
 {

From df0780cc55ee6540c5d6ef1fe343cc2e9001901a Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Mon, 13 Apr 2026 13:52:46 +0200
Subject: [PATCH 241/244] Add
 crypt_get_hw_opal_locking_ranges_by_keyslot_context API.

Unlike crypt_get_hw_opal_locking_ranges, the function requires
LUKS2 device handle and it uses User authority key (PIN) encrypted
in LUKS2 keyslot for reading locking range attributes from the
OPAL2 device. The keyslot context argument provides
method for unlocking LUKS2 keyslot or device volume key.
---
 lib/libcryptsetup.h         | 26 ++++++++++++++
 lib/libcryptsetup.sym       |  1 +
 lib/luks2/hw_opal/hw_opal.c | 71 +++++++++++++++++++++++++++++++++++++
 lib/luks2/hw_opal/hw_opal.h |  8 +++++
 lib/setup.c                 | 42 ++++++++++++++++++++++
 5 files changed, 148 insertions(+)

diff --git a/lib/libcryptsetup.h b/lib/libcryptsetup.h
index 58627153a..28d374fa4 100644
--- a/lib/libcryptsetup.h
+++ b/lib/libcryptsetup.h
@@ -3374,6 +3374,32 @@ struct crypt_hw_opal_range {
 	uint64_t length; /* locking range length in bytes */
 };
 
+/**
+ * Get information about OPAL locking ranges used in LUKS2.
+ *
+ * The function provides status information about OPAL locking ranges
+ * that can be retrieved using the User authority PIN generated and stored
+ * in LUKS2 metadata.
+ *
+ * @param cd LUKS2 device handle
+ * @param keyslot requested keyslot or CRYPT_ANY_SLOT
+ * @param kc keyslot context providing a volume key or passphrase to @e keyslot.
+ * @param opal_ranges return buffer for OPAL locking ranges state descriptions
+ * @param opal_ranges_count number of elements in the @e opal_ranges array
+ *
+ * @note if @e opal_ranges_count, and therefore the @e opal_ranges array, is too small to contain all OPAL
+ * 	 locking range descriptions retrieved from the OPAL device, the function returns -ENOSPC.
+ *
+ * @return the number of locking ranges returned in the @e opal_ranges array on success, -EPERM if stored
+ * 	   OPAL key was wrong for OPAL User authority associated with the HW segment, or other negative errno
+ * 	   value otherwise.
+ */
+int crypt_get_hw_opal_locking_ranges_by_keyslot_context(struct crypt_device *cd,
+				int keyslot,
+				struct crypt_keyslot_context *kc,
+				struct crypt_hw_opal_range *opal_ranges,
+				size_t opal_ranges_count);
+
 /**
  * Get information about OPAL locking ranges.
  *
diff --git a/lib/libcryptsetup.sym b/lib/libcryptsetup.sym
index 3144752eb..f5acefa9a 100644
--- a/lib/libcryptsetup.sym
+++ b/lib/libcryptsetup.sym
@@ -205,4 +205,5 @@ CRYPTSETUP_2.9 {
 		crypt_get_hw_opal_enabled;
 		crypt_hw_opal_locking_ranges_max;
 		crypt_get_hw_opal_locking_ranges;
+		crypt_get_hw_opal_locking_ranges_by_keyslot_context;
 } CRYPTSETUP_2.8;
diff --git a/lib/luks2/hw_opal/hw_opal.c b/lib/luks2/hw_opal/hw_opal.c
index e63be0172..a03c68d54 100644
--- a/lib/luks2/hw_opal/hw_opal.c
+++ b/lib/luks2/hw_opal/hw_opal.c
@@ -1786,6 +1786,66 @@ static int opal_get_range(struct crypt_device *cd,
 	return 1;
 }
 
+int opal_get_single_range_params(struct crypt_device *cd,
+			 struct device *dev,
+			 uint32_t opal_user_id,
+			 uint8_t opal_locking_range_id,
+			 const void *opal_key,
+			 size_t opal_key_size,
+			 struct crypt_hw_opal_range *ret_opal_range)
+{
+	int fd, r;
+	uint32_t opal_block_size;
+	struct opal_lr_status *lrs;
+	struct opal_sum_ranges sum_ranges = {};
+	bool sum_undefined = false;
+
+	assert(ret_opal_range);
+
+	if (opal_key_size > OPAL_KEY_MAX)
+		return -EINVAL;
+
+	fd = device_open(cd, dev, O_RDONLY);
+	if (fd < 0)
+		return -EIO;
+
+	r = opal_geometry_fd(cd, fd, NULL, &opal_block_size, NULL, NULL);
+	if (r != OPAL_STATUS_SUCCESS)
+		return -EINVAL;
+
+	/* check if kernel recognizes the device as SUM capable */
+	r = opal_query_status_fd(cd, fd, OPAL_FL_SUM_SUPPORTED);
+	if (r < 0)
+		return r;
+
+	/* Check locking ranges SUM state only if the device advertises SUM support */
+	if (r) {
+		r = opal_get_sum_ranges_anybody(cd, fd, &sum_ranges);
+		sum_undefined = (r < 0);
+	}
+
+	lrs = crypt_safe_alloc(sizeof(*lrs));
+	if (!lrs)
+		return -ENOMEM;
+
+	*lrs = (struct opal_lr_status) {
+		.session = {
+			.who = opal_user_id,
+			.opal_key = {
+				.lr = opal_locking_range_id,
+				.key_len = opal_key_size,
+			}
+		}
+	};
+	crypt_safe_memcpy(lrs->session.opal_key.key, opal_key, opal_key_size);
+
+	r = opal_get_range(cd, fd, opal_block_size, sum_undefined, lrs, &sum_ranges, ret_opal_range);
+
+	crypt_safe_free(lrs);
+
+	return r;
+}
+
 int opal_get_ranges_params(struct crypt_device *cd,
 			 struct device *dev,
 			 uint32_t opal_user_id,
@@ -1963,6 +2023,17 @@ int crypt_hw_opal_locking_ranges_max(struct crypt_device *cd)
 	return -ENOTSUP;
 }
 
+int opal_get_single_range_params(struct crypt_device *cd,
+			 struct device *dev,
+			 uint32_t opal_user_id,
+			 uint8_t opal_locking_range_id,
+			 const void *opal_key,
+			 size_t opal_key_size,
+			 struct crypt_hw_opal_range *ret_opal_range)
+{
+	return -ENOTSUP;
+}
+
 int opal_get_ranges_params(struct crypt_device *cd,
 			 struct device *dev,
 			 uint32_t opal_user_id,
diff --git a/lib/luks2/hw_opal/hw_opal.h b/lib/luks2/hw_opal/hw_opal.h
index a7932289c..16e4a4b40 100644
--- a/lib/luks2/hw_opal/hw_opal.h
+++ b/lib/luks2/hw_opal/hw_opal.h
@@ -59,6 +59,14 @@ int opal_exclusive_lock(struct crypt_device *cd,
 			struct crypt_lock_handle **opal_lock);
 void opal_exclusive_unlock(struct crypt_device *cd, struct crypt_lock_handle *opal_lock);
 
+int opal_get_single_range_params(struct crypt_device *cd,
+			 struct device *dev,
+			 uint32_t opal_user_id,
+			 uint8_t opal_locking_range_id,
+			 const void *opal_key,
+			 size_t opal_key_size,
+			 struct crypt_hw_opal_range *ret_opal_range);
+
 int opal_get_ranges_params(struct crypt_device *cd,
 			 struct device *dev,
 			 uint32_t opal_user_id,
diff --git a/lib/setup.c b/lib/setup.c
index 435740fc2..2374656c4 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -6319,6 +6319,48 @@ int crypt_get_hw_opal_locking_ranges(struct crypt_device *cd,
 				 opal_pin, opal_pin_size, opal_ranges, opal_ranges_count);
 }
 
+int crypt_get_hw_opal_locking_ranges_by_keyslot_context(struct crypt_device *cd,
+				int keyslot,
+				struct crypt_keyslot_context *kc,
+				struct crypt_hw_opal_range *opal_ranges,
+				size_t opal_ranges_count)
+{
+	int r;
+	uint32_t opal_segment_number;
+	struct volume_key *p_opal_key, *vk = NULL, *opal_key = NULL;
+
+	if (!cd || !kc || !kc->get_luks2_volume_key || !opal_ranges || !opal_ranges_count)
+		return -EINVAL;
+
+	r = onlyLUKS2(cd);
+	if (r < 0)
+		return r;
+
+	r = LUKS2_get_opal_segment_number(&cd->u.luks2.hdr, CRYPT_DEFAULT_SEGMENT, &opal_segment_number);
+	if (r < 0)
+		return -EINVAL;
+
+	r = kc->get_luks2_volume_key(cd, kc, keyslot, &vk);
+	if (r < 0)
+		return r;
+
+	r = LUKS2_split_crypt_and_opal_keys(cd, &cd->u.luks2.hdr, vk, NULL, &opal_key);
+	if (r < 0)
+		goto out;
+
+	p_opal_key = opal_key ?: vk;
+
+	r = opal_get_single_range_params(cd, crypt_data_device(cd), opal_segment_number + 1,
+				 opal_segment_number,
+				 crypt_volume_key_get_key(p_opal_key),
+				 crypt_volume_key_length(p_opal_key), opal_ranges);
+out:
+	crypt_free_volume_key(vk);
+	crypt_free_volume_key(opal_key);
+
+	return r;
+}
+
 /* internal only */
 const char *crypt_get_cipher_spec(struct crypt_device *cd)
 {

From 39c47c20263e46abdb2fd6b44c9227c5975d52b0 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Mon, 13 Apr 2026 14:36:32 +0200
Subject: [PATCH 242/244] Add --dump-hw-opal parameter to luksDump action.

The luksDump action with --dump-hw-opal parameter
prints additional information about SED OPAL2 locking
range associated with LUKS2 device formated with
support for SED OPAL2 segment.
---
 man/common_options.adoc        |   7 ++
 man/cryptsetup-luksDump.8.adoc |   6 +-
 man/cryptsetup.8.adoc          |   1 +
 src/cryptsetup.c               | 183 +++++++++++++++++++++++++++++++++
 src/cryptsetup_arg_list.h      |   2 +
 src/cryptsetup_args.h          |   1 +
 src/utils_arg_names.h          |   1 +
 7 files changed, 200 insertions(+), 1 deletion(-)

diff --git a/man/common_options.adoc b/man/common_options.adoc
index 0b00cb6e9..5135a1c8b 100644
--- a/man/common_options.adoc
+++ b/man/common_options.adoc
@@ -175,6 +175,13 @@ ifdef::ACTION_LUKSDUMP[]
 For _luksDump_ (LUKS2 only), this option prints the content of the LUKS2 header JSON metadata area.
 endif::[]
 
+ifdef::ACTION_LUKSDUMP[]
+*--dump-hw-opal*::
+For _luksDump_, print additional information about the SED OPAL2 hardware locking range associated with a LUKS2 device formatted with hardware OPAL2 (Self Encrypting Drive) support.
+The device must be unlocked to query the drive, so a passphrase, a LUKS2 token or the volume key has to be supplied.
+See also the *opaldump* action in *cryptsetup-opaldump*(8) for dumping OPAL information of the whole device (without attachment to LUKS2 metadata).
+endif::[]
+
 ifdef::ACTION_LUKSDUMP,ACTION_TCRYPTDUMP,ACTION_BITLKDUMP[]
 *--dump-volume-key*::
 --dump-master-key (OBSOLETE alias)::
diff --git a/man/cryptsetup-luksDump.8.adoc b/man/cryptsetup-luksDump.8.adoc
index 1e149c25a..f7620707d 100644
--- a/man/cryptsetup-luksDump.8.adoc
+++ b/man/cryptsetup-luksDump.8.adoc
@@ -33,7 +33,11 @@ To dump LUKS2 JSON metadata (without basic header information like UUID), use th
 
 If --dump-volume-key is used with --key-file and the argument to --key-file is '-', no validation question will be asked and no warning given.
 
-*<options>* can be [--dump-volume-key, --dump-json-metadata, --key-file, --keyfile-offset, --keyfile-size, --header, --disable-locks, --volume-key-file, --type, --unbound, --key-slot, --timeout, --external-tokens-path].
+For a LUKS2 device formatted with hardware OPAL2 (Self Encrypting Drive) support, the --dump-hw-opal option prints additional information about the SED OPAL2 locking range associated with the device.
+The printed information includes the OPAL keysize, the OPAL subsystem type and a table of the OPAL locking range(s) owned by the LUKS2 device (see *cryptsetup-opaldump*(8) for a description of the table columns).
+To dump all the OPAL information of a device, independent of LUKS2 metadata, use the *opaldump* action instead.
+
+*<options>* can be [--dump-volume-key, --dump-json-metadata, --dump-hw-opal, --key-file, --keyfile-offset, --keyfile-size, --header, --disable-locks, --volume-key-file, --volume-key-keyring, --type, --unbound, --key-slot, --token-id, --token-type, --token-only, --timeout, --external-tokens-path].
 
 include::man/common_options.adoc[]
 include::man/common_footer.adoc[]
diff --git a/man/cryptsetup.8.adoc b/man/cryptsetup.8.adoc
index 7fc0c0563..2d97edc47 100644
--- a/man/cryptsetup.8.adoc
+++ b/man/cryptsetup.8.adoc
@@ -193,6 +193,7 @@ See *cryptsetup-isLuks*(8).
 *luksDump <device>*
 
 Dump the header information of a LUKS device.
+For a LUKS2 device with hardware OPAL2 (Self Encrypting Drive) support, the --dump-hw-opal option additionally dumps the associated OPAL2 locking range information.
 See *cryptsetup-luksDump*(8).
 
 === HEADER BACKUP
diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index ced9f8ebd..a50349510 100644
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -2643,6 +2643,187 @@ static int luksDump_with_unbound_key(struct crypt_device *cd)
 	return r;
 }
 
+static const char *opal_lock_mode_to_string(crypt_hw_opal_lock_state lock)
+{
+	switch (lock) {
+	case CRYPT_HW_OPAL_RW:
+		return N_("read-write");
+	case CRYPT_HW_OPAL_RO:
+		return N_("read-only");
+	case CRYPT_HW_OPAL_LOCKED:
+	default:
+		return N_("locked");
+	}
+}
+
+static const char *opal_locking_to_string(unsigned opal_locking)
+{
+	return opal_locking ? N_("enabled") : N_("disabled");
+}
+
+static const char *opal_feature_state_to_string(crypt_hw_opal_feature_state feature)
+{
+	switch (feature) {
+	case CRYPT_HW_OPAL_FEATURE_DISABLED: return N_("disabled");
+	case CRYPT_HW_OPAL_FEATURE_ENABLED: return N_("enabled");
+	case CRYPT_HW_OPAL_FEATURE_UNDEFINED:
+	/* fall through */
+	default: return N_("unknown");
+	}
+}
+
+static void print_opal_table_header(void)
+{
+	log_std(_("OPAL Locking Ranges:\n"));
+	/*
+	 * 'ID' column width:            3 characters
+	 * 'Offset' column width:       20 characters
+	 * 'Length' column width:       20 characters
+	 * 'ReadLocking' column width:  11 characters
+	 * 'WriteLocking' column width: 12 characters
+	 * 'Mode' column width:         10 characters
+	 * 'SUM'  column width:          8 characters
+	 * 'RangePolicy' column width:  11 characters
+	 *
+	 *  Each column is separated by additional single space character from its neighbour.
+	 *
+	 *  Note: 'SUM' stands for 'Single User Mode'.
+	 */
+	log_std(N_("ID  Offset (bytes)       Length (bytes)       ReadLocking WriteLocking Mode       SUM      RangePolicy\n"));
+}
+
+static void print_opal_table_line(const struct crypt_hw_opal_range *resp)
+{
+	assert(resp);
+
+	log_std("%-3d %-20" PRIu64 " %-20" PRIu64 " %-11s %-12s %-10s %-8s %-11s\n",
+		resp->id,
+		resp->offset,
+		resp->length,
+		opal_locking_to_string(resp->read_locking_enabled),
+		opal_locking_to_string(resp->write_locking_enabled),
+		opal_lock_mode_to_string(resp->lock_state),
+		opal_feature_state_to_string(resp->sum),
+		opal_feature_state_to_string(resp->range_policy));
+}
+
+static const char *crypt_hw_status_to_string(crypt_status_hw_encryption_info ci)
+{
+	switch (ci) {
+	case CRYPT_HW_OTHER:	return "Other (not OPAL2)";
+	case CRYPT_HW_OPAL:	return "OPAL2";
+	case CRYPT_HW_OPAL_SUM:	return "OPAL2 with Single User Mode";
+	default:		return "N/A";
+	}
+}
+
+static int luksDump_with_opal(struct crypt_device *cd)
+{
+	crypt_status_hw_encryption_info ci;
+	int hw_enc, keysize, r, tries;
+	struct crypt_hw_opal_range response;
+	struct crypt_keyslot_context *kc1 = NULL, *dummy = NULL;
+
+	hw_enc = crypt_get_hw_encryption_type(cd);
+	if (hw_enc < 0)
+		return hw_enc;
+
+	/* This will filter out also LUKS1 devices */
+	if (hw_enc == CRYPT_SW_ONLY) {
+		log_err(_("Device %s is not configured for OPAL2 encryption"),
+			crypt_get_device_name(cd));
+		return -EINVAL;
+	}
+
+	ci = crypt_status_hw_encryption(cd);
+	if (ci == CRYPT_HW_INVALID) {
+		log_err(_("Device %s or kernel does not support OPAL2 encryption."),
+			crypt_get_device_name(cd));
+		r = -EINVAL;
+		goto out;
+	}
+
+	keysize = crypt_get_volume_key_size(cd);
+	if (keysize <= 0)
+		return -EINVAL;
+
+	if (ARG_SET(OPT_VOLUME_KEY_FILE_ID) || ARG_SET(OPT_VOLUME_KEY_KEYRING_ID)) {
+		r = luks_init_keyslot_contexts_by_volume_keys(cd, vk_files[0], NULL,
+							      keysize, 0,
+							      vks_in_keyring[0],
+							      NULL,
+							      &kc1, &dummy);
+		if (r < 0)
+			goto out;
+	} else {
+		r = luks_try_token_unlock(cd, ARG_INT32(OPT_KEY_SLOT_ID),
+					  ARG_INT32(OPT_TOKEN_ID_ID), NULL,
+					  ARG_STR(OPT_TOKEN_TYPE_ID), 0,
+					  set_tries_tty(false), true,
+					  ARG_SET(OPT_TOKEN_ONLY_ID) || ARG_SET(OPT_TOKEN_ID_ID) || ARG_SET(OPT_TOKEN_TYPE_ID),
+					  &kc1);
+		if (quit || (r < 0 && ARG_SET(OPT_TOKEN_ONLY_ID)))
+			goto out;
+
+		if (r < 0) {
+			tries = set_tries_tty(true);
+			do {
+				crypt_keyslot_context_free(kc1);
+				kc1 = NULL;
+				r = luks_init_keyslot_context(cd, NULL, verify_passphrase(0),
+							      false, &kc1);
+				if (r < 0)
+					goto out;
+
+				r = crypt_activate_by_keyslot_context(cd, NULL, ARG_INT32(OPT_KEY_SLOT_ID),
+								      kc1, CRYPT_ANY_SLOT, NULL, 0);
+
+				tools_keyslot_msg(r, UNLOCKED);
+				tools_passphrase_msg(r);
+				check_signal(&r);
+			} while ((r == -EPERM || r == -ERANGE) && (--tries > 0));
+		}
+	}
+
+	if (r < 0)
+		goto out;
+
+	r = crypt_get_hw_opal_locking_ranges_by_keyslot_context(cd, ARG_INT32(OPT_KEY_SLOT_ID),
+								kc1, &response, 1);
+	if (!r) {
+		log_std(_("No LUKS2 segment with OPAL2 configured on device %s.\n"),
+			crypt_get_device_name(cd));
+		r = -ENOENT;
+	} else if (r == -EPERM) {
+		log_err(_("The key stored in LUKS2 metadata does not unlock OPAL2 segment."));
+	} else if (r < 0 || r > 1)
+		log_err(_("Failed to query device %s for OPAL2 segments."), crypt_get_device_name(cd));
+
+	if (r < 0)
+		goto out;
+
+	log_std("LUKS header information for %s\n", crypt_get_device_name(cd));
+	if (hw_enc == CRYPT_SW_AND_OPAL_HW) {
+		log_std("Cipher name:   \t%s (over HW OPAL)\n", crypt_get_cipher(cd));
+		log_std("Cipher mode:   \t%s (over HW OPAL)\n", crypt_get_cipher_mode(cd));
+		log_std("keysize:\t%d [bits]\n", (keysize - crypt_get_hw_encryption_key_size(cd)) * 8);
+	}
+	log_std("OPAL keysize:\t%d [bits]\n", crypt_get_hw_encryption_key_size(cd) * 8);
+	log_std("Payload offset:\t%d\n", (int)crypt_get_data_offset(cd));
+	log_std("UUID:          \t%s\n", crypt_get_uuid(cd));
+	log_std("OPAL subsystem:\t%s\n", crypt_hw_status_to_string(ci));
+
+	print_opal_table_header();
+	print_opal_table_line(&response);
+
+	r = 0;
+out:
+	crypt_keyslot_context_free(kc1);
+	crypt_keyslot_context_free(dummy);
+
+	return r;
+}
+
 static int action_luksDump(void)
 {
 	struct crypt_device *cd = NULL;
@@ -2670,6 +2851,8 @@ static int action_luksDump(void)
 		r = luksDump_with_volume_key(cd);
 	else if (ARG_SET(OPT_UNBOUND_ID))
 		r = luksDump_with_unbound_key(cd);
+	else if (ARG_SET(OPT_DUMP_HW_OPAL_ID))
+		r = luksDump_with_opal(cd);
 	else if (ARG_SET(OPT_DUMP_JSON_ID))
 		r = crypt_dump_json(cd, NULL, 0);
 	else
diff --git a/src/cryptsetup_arg_list.h b/src/cryptsetup_arg_list.h
index 1f470c2d4..7dd9d95fe 100644
--- a/src/cryptsetup_arg_list.h
+++ b/src/cryptsetup_arg_list.h
@@ -42,6 +42,8 @@ ARG(OPT_DISABLE_SUM, '\0', POPT_ARG_NONE, N_("Disable OPAL2 SUM (Single User Mod
 
 ARG(OPT_DISABLE_VERACRYPT, '\0', POPT_ARG_NONE, N_("Do not scan for VeraCrypt compatible device"), NULL, CRYPT_ARG_BOOL, {}, OPT_DISABLE_VERACRYPT_ACTIONS)
 
+ARG(OPT_DUMP_HW_OPAL, '\0', POPT_ARG_NONE, N_("Dump info about HW OPAL device"), NULL, CRYPT_ARG_BOOL, {}, OPT_DUMP_HW_OPAL_ACTIONS)
+
 ARG(OPT_DUMP_JSON, '\0', POPT_ARG_NONE, N_("Dump info in JSON format (LUKS2 only)"), NULL, CRYPT_ARG_BOOL, {}, {})
 
 ARG(OPT_DUMP_VOLUME_KEY, '\0', POPT_ARG_NONE, N_("Dump volume key instead of keyslots info"), NULL, CRYPT_ARG_BOOL, {}, {})
diff --git a/src/cryptsetup_args.h b/src/cryptsetup_args.h
index 696cbd148..71170303e 100644
--- a/src/cryptsetup_args.h
+++ b/src/cryptsetup_args.h
@@ -45,6 +45,7 @@
 #define OPT_ALLOW_DISCARDS_ACTIONS		{ OPEN_ACTION }
 #define OPT_DEFERRED_ACTIONS			{ CLOSE_ACTION }
 #define OPT_DEVICE_SIZE_ACTIONS			{ OPEN_ACTION, RESIZE_ACTION, REENCRYPT_ACTION }
+#define OPT_DUMP_HW_OPAL_ACTIONS		{ LUKSDUMP_ACTION }
 #define OPT_DISABLE_BLKID_ACTIONS		{ FORMAT_ACTION, REENCRYPT_ACTION }
 #define OPT_DISABLE_SUM_ACTIONS			{ FORMAT_ACTION }
 #define OPT_DISABLE_VERACRYPT_ACTIONS		{ OPEN_ACTION, TCRYPTDUMP_ACTION }
diff --git a/src/utils_arg_names.h b/src/utils_arg_names.h
index 677bd9da2..796e5a08b 100644
--- a/src/utils_arg_names.h
+++ b/src/utils_arg_names.h
@@ -35,6 +35,7 @@
 #define OPT_DISABLE_LOCKS		"disable-locks"
 #define OPT_DISABLE_SUM			"disable-sum"
 #define OPT_DISABLE_VERACRYPT		"disable-veracrypt"
+#define OPT_DUMP_HW_OPAL		"dump-hw-opal"
 #define OPT_DUMP_JSON			"dump-json-metadata"
 #define OPT_DUMP_MASTER_KEY		"dump-master-key"
 #define OPT_DUMP_VOLUME_KEY		"dump-volume-key"

From 4cad810faff3769f7d126914885becc463106869 Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 7 Apr 2026 14:57:17 +0200
Subject: [PATCH 243/244] Add opaldump support in cryptsetup.

Adds new action opaldump for printing OPAL device
specific informations. It can be used on any
device even device without LUKS2 metadata.
---
 man/Makemodule.am              |  2 +
 man/common_options.adoc        |  6 +--
 man/cryptsetup-opaldump.8.adoc | 59 +++++++++++++++++++++++++
 man/cryptsetup.8.adoc          |  9 ++++
 man/meson.build                |  4 ++
 src/cryptsetup.c               | 81 ++++++++++++++++++++++++++++++++++
 src/cryptsetup_args.h          |  1 +
 7 files changed, 159 insertions(+), 3 deletions(-)
 create mode 100644 man/cryptsetup-opaldump.8.adoc

diff --git a/man/Makemodule.am b/man/Makemodule.am
index 03beb7a09..bf55a596b 100644
--- a/man/Makemodule.am
+++ b/man/Makemodule.am
@@ -30,6 +30,7 @@ ADOCFILES = $(ADOCFILES_COMMON) \
 	man/cryptsetup-tcryptDump.8.adoc \
 	man/cryptsetup-bitlkDump.8.adoc \
 	man/cryptsetup-fvault2Dump.8.adoc \
+	man/cryptsetup-opaldump.8.adoc \
 	man/cryptsetup-repair.8.adoc \
 	man/cryptsetup-benchmark.8.adoc \
 	man/cryptsetup-ssh.8.adoc \
@@ -66,6 +67,7 @@ CRYPTSETUP_MANPAGES = \
 	man/cryptsetup-tcryptDump.8 \
 	man/cryptsetup-bitlkDump.8 \
 	man/cryptsetup-fvault2Dump.8 \
+	man/cryptsetup-opaldump.8 \
 	man/cryptsetup-repair.8 \
 	man/cryptsetup-benchmark.8
 
diff --git a/man/common_options.adoc b/man/common_options.adoc
index 5135a1c8b..ecc721967 100644
--- a/man/common_options.adoc
+++ b/man/common_options.adoc
@@ -144,7 +144,7 @@ Do not load the volume key in the kernel keyring; store it directly in the dm-cr
 This option is supported only for the LUKS2 type.
 endif::[]
 
-ifndef::ACTION_BENCHMARK,ACTION_BITLKDUMP,ACTION_TCRYPTDUMP[]
+ifndef::ACTION_BENCHMARK,ACTION_BITLKDUMP,ACTION_TCRYPTDUMP,ACTION_OPALDUMP[]
 *--disable-locks*::
 Disable lock protection for metadata on disk.
 This option is valid only for LUKS2 and is ignored for other formats.
@@ -262,7 +262,7 @@ Use _cryptsetup --help_ to show the defaults.
 endif::[]
 endif::[]
 
-ifndef::ACTION_BENCHMARK,ACTION_BITLKDUMP[]
+ifndef::ACTION_BENCHMARK,ACTION_BITLKDUMP,ACTION_OPALDUMP[]
 *--header* _<device or file storing the LUKS header>_::
 ifndef::ACTION_OPEN,ACTION_ERASE[]
 Use a detached (separated) metadata device or file where the LUKS header is stored.
@@ -1042,7 +1042,7 @@ Do not activate the device, just verify the passphrase.
 The device mapping name is not mandatory if this option is used.
 endif::[]
 
-ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_LUKSREMOVEKEY,ACTION_LUKSKILLSLOT,ACTION_LUKSDUMP,ACTION_REENCRYPT,ACTION_REPAIR,ACTION_LUKSRESUME,ACTION_RESIZE,ACTION_TCRYPTDUMP,ACTION_BITLKDUMP[]
+ifdef::ACTION_OPEN,ACTION_LUKSFORMAT,ACTION_LUKSADDKEY,ACTION_LUKSCHANGEKEY,ACTION_LUKSCONVERTKEY,ACTION_LUKSREMOVEKEY,ACTION_LUKSKILLSLOT,ACTION_LUKSDUMP,ACTION_OPALDUMP,ACTION_REENCRYPT,ACTION_REPAIR,ACTION_LUKSRESUME,ACTION_RESIZE,ACTION_TCRYPTDUMP,ACTION_BITLKDUMP[]
 *--timeout*, *-t* _seconds_::
 The number of seconds to wait before a timeout on passphrase input via terminal.
 It is relevant every time a passphrase is asked.
diff --git a/man/cryptsetup-opaldump.8.adoc b/man/cryptsetup-opaldump.8.adoc
new file mode 100644
index 000000000..f350cef60
--- /dev/null
+++ b/man/cryptsetup-opaldump.8.adoc
@@ -0,0 +1,59 @@
+= cryptsetup-opaldump(8)
+:doctype: manpage
+:manmanual: Maintenance Commands
+:mansource: cryptsetup {release-version}
+:man-linkstyle: pass:[blue R < >]
+:COMMON_OPTIONS:
+:ACTION_OPALDUMP:
+
+== Name
+
+cryptsetup-opaldump - dump the OPAL information of a SED (Self Encrypting Drive) device
+
+== SYNOPSIS
+
+*cryptsetup _opaldump_ [<options>] <device>*
+
+== DESCRIPTION
+
+Dump the hardware encryption information of a SED (Self Encrypting Drive) device that provides an *OPAL* interface.
+
+Unlike *luksDump*, this action does not require the device to contain LUKS2 metadata; it queries the drive itself and can be used on any OPAL-capable device.
+
+The command first prints the OPAL subsystem status of the device (for example, whether the drive supports OPAL2, or OPAL2 with Single User Mode (SUM)).
+
+If the drive is OPAL-enabled, an OPAL Admin password is requested (interactively or with a timeout controlled by --timeout) and used to query the drive.
+On success, a table of the configured OPAL locking ranges is printed, with the following columns:
+
+*ID*::
+The locking range identifier.
+
+*Offset (bytes)*::
+The start of the locking range on the device, in bytes. Any partition table present on the device is ignored.
+
+*Length (bytes)*::
+The size of the locking range, in bytes.
+
+*ReadLocking*::
+Whether read locking is enabled for the range (enabled/disabled).
+
+*WriteLocking*::
+Whether write locking is enabled for the range (enabled/disabled).
+
+*Mode*::
+The current lock state of the range (read-write, read-only or locked).
+
+*SUM*::
+Whether the range is managed in Single User Mode (enabled/disabled, or unknown if the drive does not report it).
+
+*RangePolicy*::
+The range policy reported by the drive (enabled/disabled, or unknown).
+
+OPAL support requires at least kernel v6.4.
+
+Note that the OPAL Admin password protects the hardware encryption configuration of the whole drive; handle it with the same care as a volume key.
+
+*<options>* can be [--timeout].
+
+include::man/common_options.adoc[]
+include::man/common_footer.adoc[]
diff --git a/man/cryptsetup.8.adoc b/man/cryptsetup.8.adoc
index 2d97edc47..3045f41b2 100644
--- a/man/cryptsetup.8.adoc
+++ b/man/cryptsetup.8.adoc
@@ -383,6 +383,15 @@ PSID must be entered without dashes, spaces or underscores.
 
 *WARNING*: A factory reset will cause ALL data on the device to be lost, regardless of the partition it is run on, if any, and regardless of any LUKS2 header backup.
 
+=== DUMP
+*opaldump <device>*
+
+Dump the OPAL information (subsystem status and configured locking ranges) of a device that provides an *OPAL* interface.
+The device does not need to contain LUKS2 metadata; an OPAL Admin password is requested to query the drive.
+See *cryptsetup-opaldump*(8).
+
+To dump the OPAL locking range associated with an existing LUKS2 device instead, use *luksDump* with the --dump-hw-opal option.
+
 == MISCELLANEOUS ACTIONS
 
 === REPAIR
diff --git a/man/meson.build b/man/meson.build
index 74df0b317..1a49dc547 100644
--- a/man/meson.build
+++ b/man/meson.build
@@ -128,6 +128,10 @@ cryptsetup_manpages = [
         'cryptsetup-fvault2Dump.8.adoc',
         [],
     ],
+    [
+        'cryptsetup-opaldump.8.adoc',
+        [],
+    ],
     [
         'cryptsetup-repair.8.adoc',
         [],
diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index a50349510..ac5012f43 100644
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -3014,6 +3014,86 @@ static int action_luksRestore(void)
 	return r;
 }
 
+static int action_opaldump(void)
+{
+	int r, response_count;
+	crypt_status_hw_encryption_info ci;
+	struct crypt_hw_opal_range *response = NULL;
+	char *admin_pin = NULL;
+	size_t count, i = 0, admin_pin_size = 0;
+	struct crypt_device *cd = NULL;
+
+	if ((r = crypt_init(&cd, action_argv[0])))
+		return r;
+
+	ci = crypt_status_hw_encryption(cd);
+	if (ci == CRYPT_HW_INVALID) {
+		log_err(_("Device %s or kernel does not support OPAL2 encryption."),
+			crypt_get_device_name(cd));
+		r = -EINVAL;
+		goto out;
+	}
+
+	if (ci == CRYPT_HW_OTHER) {
+		log_err(_("Unsupported HW OPAL profile on device %s."),
+			crypt_get_device_name(cd));
+		r = -EINVAL;
+		goto out;
+	}
+
+	r = crypt_get_hw_opal_enabled(cd);
+	if (r <= 0) {
+		log_err(_("Device %s was not configured for OPAL2 encryption."),
+			crypt_get_device_name(cd));
+		r = -EINVAL;
+		goto out;
+	}
+
+	r = crypt_hw_opal_locking_ranges_max(cd);
+	if (r < 0)
+		goto out;
+	response_count = r;
+
+	response = malloc(sizeof(*response) * response_count);
+	if (!response) {
+		r = -ENOMEM;
+		goto out;
+	}
+
+	r = tools_get_key(_("Enter OPAL Admin password: "), &admin_pin, &admin_pin_size,
+			  0, 0, NULL, ARG_UINT32(OPT_TIMEOUT_ID), 0, 0, cd);
+	if (r < 0)
+		goto out;
+
+	r = crypt_get_hw_opal_locking_ranges(cd, admin_pin, admin_pin_size, response, response_count);
+	if (!r) {
+		log_std(_("No OPAL2 segment configured on device %s.\n"), action_argv[0]);
+		r = -ENOENT;
+	} else if (r == -EPERM) {
+		log_err(_("Invalid OPAL Admin password provided."));
+	} else if (r < 0)
+		log_err(_("Failed to query device %s for OPAL2 segments."), action_argv[0]);
+
+	if (r < 0)
+		goto out;
+
+	count = (size_t)r;
+
+	log_std("OPAL information for %s\n", crypt_get_device_name(cd));
+	log_std("OPAL subsystem: %s\n", crypt_hw_status_to_string(ci));
+
+	print_opal_table_header();
+	while (i < count)
+		print_opal_table_line(response + i++);
+
+	r = 0;
+out:
+	crypt_safe_free(admin_pin);
+	crypt_free(cd);
+	free(response);
+	return r;
+}
+
 static const char *_get_device_type(void)
 {
 	const char *type, *name = NULL;
@@ -3703,6 +3783,7 @@ static struct action_type {
 	{ UUID_ACTION,		action_luksUUID,	NULL,			1, N_("<device>"), N_("print UUID of LUKS device") },
 	{ ISLUKS_ACTION,	action_isLuks,		NULL,			1, N_("<device>"), N_("tests <device> for LUKS partition header") },
 	{ LUKSDUMP_ACTION,	action_luksDump,	verify_luksDump,	1, N_("<device>"), N_("dump LUKS partition information") },
+	{ OPALDUMP_ACTION,	action_opaldump,	NULL,			1, N_("<device>"), N_("dump OPAL2 device information") },
 	{ TCRYPTDUMP_ACTION,	action_tcryptDump,	verify_tcryptdump,	1, N_("<device>"), N_("dump TCRYPT device information") },
 	{ BITLKDUMP_ACTION,	action_bitlkDump,	NULL,			1, N_("<device>"), N_("dump BITLK device information") },
 	{ FVAULT2DUMP_ACTION,	action_fvault2Dump,	NULL,			1, N_("<device>"), N_("dump FVAULT2 device information") },
diff --git a/src/cryptsetup_args.h b/src/cryptsetup_args.h
index 71170303e..2417bbb32 100644
--- a/src/cryptsetup_args.h
+++ b/src/cryptsetup_args.h
@@ -29,6 +29,7 @@
 #define KILLKEY_ACTION		"luksKillSlot"
 #define LUKSDUMP_ACTION		"luksDump"
 #define OPEN_ACTION		"open"
+#define OPALDUMP_ACTION		"opaldump"
 #define REENCRYPT_ACTION	"reencrypt"
 #define REMOVEKEY_ACTION	"luksRemoveKey"
 #define REPAIR_ACTION		"repair"

From 102e91cb0fee849bb86fb1ec4d6ea218e45563cd Mon Sep 17 00:00:00 2001
From: Ondrej Kozina <okozina@redhat.com>
Date: Tue, 22 Sep 2026 11:25:59 +0200
Subject: [PATCH 244/244] tests: add opaldump and luksDump --dump-hw-opal tests

Add compat-test-opal coverage for the new OPAL dump features:
the standalone opaldump action and the luksDump --dump-hw-opal
option, for both --hw-opal and --hw-opal-only formatted devices.
Also covers the error paths: wrong OPAL Admin password, non-OPAL
device, wrong passphrase and a SW-only LUKS2 device.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 tests/compat-test-opal | 63 +++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 62 insertions(+), 1 deletion(-)

diff --git a/tests/compat-test-opal b/tests/compat-test-opal
index cfe274914..67e168ff1 100755
--- a/tests/compat-test-opal
+++ b/tests/compat-test-opal
@@ -38,6 +38,9 @@ TOKEN_FILE0=test-token-file0
 TOKEN_FILE1=test-token-file1
 KEY_FILE0=test-key-file0
 KEY_FILE1=test-key-file1
+OPALDUMP_OUT=opaldump_out
+LUKSDUMP_OUT=luksdump_out
+IMG_OPALDUMP=test_image_opaldump
 
 FAST_PBKDF_OPT="--pbkdf pbkdf2 --pbkdf-force-iterations 1000"
 
@@ -50,7 +53,8 @@ remove_mapping()
 	[ -b /dev/mapper/"$DEV_NAME"_dif ] && dmsetup remove --retry "$DEV_NAME"_dif
 	rm -f $KEY1 $KEY2 $KEY5 $KEYE $HEADER_IMG $VK_FILE \
 	$HEADER_LUKS2_INV missing-file $TOKEN_FILE0 $TOKEN_FILE1 test_image_* \
-	$KEY_FILE0 $KEY_FILE1 $KEY_PWD1 $NO_HEADER_IMG >/dev/null 2>&1
+	$KEY_FILE0 $KEY_FILE1 $KEY_PWD1 $NO_HEADER_IMG \
+	$OPALDUMP_OUT $LUKSDUMP_OUT $IMG_OPALDUMP >/dev/null 2>&1
 
 	# unlink all test keys
 	if [ -n "$TEST_KEYRING" ]; then
@@ -459,6 +463,31 @@ test_device_detached_header() #hdr, #opal_mode, #format_params, #--integrity-no-
 	rm -f $1
 }
 
+# $1 opal format flag (--hw-opal | --hw-opal-only)
+# Requires an OPAL LUKS2 device formatted with $OPAL2_ADMIN_PIN already present.
+opaldump_check() #opal_mode
+{
+	echo $OPAL2_ADMIN_PIN | $CRYPTSETUP opaldump $OPAL2_DEV > $OPALDUMP_OUT 2>/dev/null || fail "opaldump failed ($1)."
+	grep -q "OPAL subsystem:" $OPALDUMP_OUT || fail "opaldump: missing OPAL subsystem info ($1)."
+	grep -q "OPAL Locking Ranges:" $OPALDUMP_OUT || fail "opaldump: missing OPAL locking ranges table ($1)."
+	rm -f $OPALDUMP_OUT
+}
+
+# $1 opal format flag (--hw-opal | --hw-opal-only)
+# Requires an OPAL LUKS2 device unlockable with $PWD1 already present.
+luksdump_opal_check() #opal_mode
+{
+	echo $PWD1 | $CRYPTSETUP luksDump --dump-hw-opal $OPAL2_DEV > $LUKSDUMP_OUT 2>/dev/null || fail "luksDump --dump-hw-opal failed ($1)."
+	grep -q "OPAL keysize:" $LUKSDUMP_OUT || fail "luksDump --dump-hw-opal: missing OPAL keysize ($1)."
+	grep -q "OPAL subsystem:" $LUKSDUMP_OUT || fail "luksDump --dump-hw-opal: missing OPAL subsystem ($1)."
+	grep -q "OPAL Locking Ranges:" $LUKSDUMP_OUT || fail "luksDump --dump-hw-opal: missing OPAL locking ranges table ($1)."
+	# Only dm-crypt over OPAL prints the software cipher info tagged as "(over HW OPAL)".
+	if [ "$1" = "--hw-opal" ]; then
+		grep -q "(over HW OPAL)" $LUKSDUMP_OUT || fail "luksDump --dump-hw-opal: missing '(over HW OPAL)' cipher info."
+	fi
+	rm -f $LUKSDUMP_OUT
+}
+
 run_token_tests() {
 	$CRYPTSETUP token add $OPAL2_DEV --key-description $TEST_TOKEN0 --token-id 3 || fail
 	$CRYPTSETUP luksDump $OPAL2_DEV | grep -q -e "3: luks2-keyring" || fail
@@ -1394,8 +1423,40 @@ prepare "[47] OPAL2 + auth encryption test (detached header)" wipe
 test_device_detached_header $HEADER_IMG --hw-opal "-c aes-gcm-random --integrity aead" --integrity-no-wipe
 test_device_detached_header $HEADER_IMG --hw-opal "-s 280 -c aes-ccm-random --integrity aead" --integrity-no-wipe
 
+prepare "[48] opaldump action" wipe
+echo -e "$PWD1\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 --hw-opal-only $OPAL2_DEV || fail
+opaldump_check --hw-opal-only
+
+echo -e "$PWD1\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 --hw-opal $OPAL2_DEV || fail
+opaldump_check --hw-opal
+# A wrong OPAL Admin password must be rejected. Executed exactly ONCE on purpose:
+# every failed OPAL authenticate counts against the drive's Admin TryLimit.
+echo "$PWDW" | $CRYPTSETUP opaldump $OPAL2_DEV > $OPALDUMP_OUT 2>&1 && fail "opaldump accepted a wrong OPAL Admin password."
+grep -q "Invalid OPAL Admin password provided." $OPALDUMP_OUT || fail "opaldump did not report invalid OPAL Admin password."
+rm -f $OPALDUMP_OUT
+# opaldump on a device without OPAL support must be rejected (no drive authenticate).
+dd if=/dev/zero of=$IMG_OPALDUMP bs=1M count=16 >/dev/null 2>&1 || fail
+$CRYPTSETUP opaldump $IMG_OPALDUMP >/dev/null 2>&1 && fail "opaldump accepted a non-OPAL device."
+rm -f $IMG_OPALDUMP
+
+prepare "[49] luksDump --dump-hw-opal" wipe
+echo -e "$PWD1\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 --hw-opal-only $OPAL2_DEV || fail
+luksdump_opal_check --hw-opal-only
+
+echo -e "$PWD1\n$OPAL2_ADMIN_PIN" | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 --hw-opal $OPAL2_DEV || fail
+luksdump_opal_check --hw-opal
+# A wrong passphrase must fail (safe: fails at LUKS unlock, never touches the OPAL SP).
+echo "$PWDW" | $CRYPTSETUP luksDump --dump-hw-opal $OPAL2_DEV >/dev/null 2>&1 && fail "luksDump --dump-hw-opal accepted a wrong passphrase."
+
+prepare "[50] luksDump --dump-hw-opal rejects SW-only LUKS2 device" wipe
+echo $PWD1 | $CRYPTSETUP -q luksFormat $FAST_PBKDF_OPT --type luks2 $OPAL2_DEV || fail
+echo $PWD1 | $CRYPTSETUP luksDump --dump-hw-opal $OPAL2_DEV 2>&1 | grep -q "not configured for OPAL2 encryption" || fail "luksDump --dump-hw-opal did not reject a SW-only LUKS2 device."
+
 # FIXME: Add partition based tests
 
 remove_mapping
 reset_device_psid_nofail
+
+echo $OPAL2_ADMIN_PIN | $CRYPTSETUP opaldump $OPAL2_DEV >/dev/null 2>&1 && fail "opaldump passed on device after PSID reset"
+
 exit 0