X-Git-Url: http://review.tizen.org/git/?a=blobdiff_plain;f=po%2Fcryptsetup.pot;h=571c909e7516b0770597c5fa92328529efbb2f9c;hb=322b430a2589cdc7985e98a14ec12322b91c9d5e;hp=29494e12c3232ed9190a3bc10dc2e07997ebabab;hpb=ad21d48762fa70838d4ab4fbe8fe2a2e8a4dcef1;p=platform%2Fupstream%2Fcryptsetup.git

diff --git a/po/cryptsetup.pot b/po/cryptsetup.pot
index 29494e1..571c909 100644
--- a/po/cryptsetup.pot
+++ b/po/cryptsetup.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: PACKAGE VERSION\n"
+"Project-Id-Version: cryptsetup 2.3.3\n"
 "Report-Msgid-Bugs-To: dm-crypt@saout.de\n"
-"POT-Creation-Date: 2015-03-19 09:55+0100\n"
+"POT-Creation-Date: 2020-05-28 11:32+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -16,1745 +16,3900 @@ msgstr ""
 "Content-Type: text/plain; charset=CHARSET\n"
 "Content-Transfer-Encoding: 8bit\n"
 
-#: lib/libdevmapper.c:252
-msgid "Cannot initialize device-mapper, running as non-root user.\n"
+#: lib/libdevmapper.c:399
+msgid "Cannot initialize device-mapper, running as non-root user."
 msgstr ""
 
-#: lib/libdevmapper.c:255
-msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?\n"
+#: lib/libdevmapper.c:402
+msgid "Cannot initialize device-mapper. Is dm_mod kernel module loaded?"
 msgstr ""
 
-#: lib/libdevmapper.c:550
+#: lib/libdevmapper.c:1131
+msgid "Requested deferred flag is not supported."
+msgstr ""
+
+#: lib/libdevmapper.c:1198
 #, c-format
-msgid "DM-UUID for device %s was truncated.\n"
+msgid "DM-UUID for device %s was truncated."
+msgstr ""
+
+#: lib/libdevmapper.c:1520
+msgid "Unknown dm target type."
+msgstr ""
+
+#: lib/libdevmapper.c:1623 lib/libdevmapper.c:1679
+msgid "Requested dm-crypt performance options are not supported."
+msgstr ""
+
+#: lib/libdevmapper.c:1630
+msgid "Requested dm-verity data corruption handling options are not supported."
+msgstr ""
+
+#: lib/libdevmapper.c:1634
+msgid "Requested dm-verity FEC options are not supported."
+msgstr ""
+
+#: lib/libdevmapper.c:1638
+msgid "Requested data integrity options are not supported."
+msgstr ""
+
+#: lib/libdevmapper.c:1640
+msgid "Requested sector_size option is not supported."
+msgstr ""
+
+#: lib/libdevmapper.c:1645
+msgid "Requested automatic recalculation of integrity tags is not supported."
 msgstr ""
 
-#: lib/libdevmapper.c:698
-msgid "Requested dmcrypt performance options are not supported.\n"
+#: lib/libdevmapper.c:1649 lib/libdevmapper.c:1682 lib/libdevmapper.c:1685
+#: lib/luks2/luks2_json_metadata.c:2160
+msgid "Discard/TRIM is not supported."
 msgstr ""
 
-#: lib/random.c:76
+#: lib/libdevmapper.c:1653
+msgid "Requested dm-integrity bitmap mode is not supported."
+msgstr ""
+
+#: lib/libdevmapper.c:2607
+#, c-format
+msgid "Failed to query dm-%s segment."
+msgstr ""
+
+#: lib/random.c:75
 msgid ""
 "System is out of entropy while generating volume key.\n"
 "Please move mouse or type some text in another window to gather some random "
 "events.\n"
 msgstr ""
 
-#: lib/random.c:80
+#: lib/random.c:79
 #, c-format
 msgid "Generating key (%d%% done).\n"
 msgstr ""
 
-#: lib/random.c:169
-msgid "Fatal error during RNG initialisation.\n"
+#: lib/random.c:165
+msgid "Running in FIPS mode."
 msgstr ""
 
-#: lib/random.c:206
-msgid "Unknown RNG quality requested.\n"
+#: lib/random.c:171
+msgid "Fatal error during RNG initialisation."
 msgstr ""
 
-#: lib/random.c:211
-#, c-format
-msgid "Error %d reading from RNG: %s\n"
+#: lib/random.c:208
+msgid "Unknown RNG quality requested."
+msgstr ""
+
+#: lib/random.c:213
+msgid "Error reading from RNG."
 msgstr ""
 
-#: lib/setup.c:200
-msgid "Cannot initialize crypto RNG backend.\n"
+#: lib/setup.c:229
+msgid "Cannot initialize crypto RNG backend."
 msgstr ""
 
-#: lib/setup.c:206
-msgid "Cannot initialize crypto backend.\n"
+#: lib/setup.c:235
+msgid "Cannot initialize crypto backend."
 msgstr ""
 
-#: lib/setup.c:236 lib/setup.c:1192 lib/verity/verity.c:123
+#: lib/setup.c:266 lib/setup.c:2046 lib/verity/verity.c:119
 #, c-format
-msgid "Hash algorithm %s not supported.\n"
+msgid "Hash algorithm %s not supported."
 msgstr ""
 
-#: lib/setup.c:239 lib/loopaes/loopaes.c:90
+#: lib/setup.c:269 lib/loopaes/loopaes.c:90
 #, c-format
-msgid "Key processing error (using hash %s).\n"
+msgid "Key processing error (using hash %s)."
 msgstr ""
 
-#: lib/setup.c:284
-msgid "Cannot determine device type. Incompatible activation of device?\n"
+#: lib/setup.c:335 lib/setup.c:362
+msgid "Cannot determine device type. Incompatible activation of device?"
 msgstr ""
 
-#: lib/setup.c:288 lib/setup.c:1537
-msgid "This operation is supported only for LUKS device.\n"
+#: lib/setup.c:341 lib/setup.c:3050
+msgid "This operation is supported only for LUKS device."
 msgstr ""
 
-#: lib/setup.c:320
-msgid "All key slots full.\n"
+#: lib/setup.c:368
+msgid "This operation is supported only for LUKS2 device."
 msgstr ""
 
-#: lib/setup.c:327
-#, c-format
-msgid "Key slot %d is invalid, please select between 0 and %d.\n"
+#: lib/setup.c:423 lib/luks2/luks2_reencrypt.c:2345
+msgid "All key slots full."
 msgstr ""
 
-#: lib/setup.c:333
+#: lib/setup.c:434
 #, c-format
-msgid "Key slot %d is full, please select another one.\n"
+msgid "Key slot %d is invalid, please select between 0 and %d."
 msgstr ""
 
-#: lib/setup.c:472
+#: lib/setup.c:440
 #, c-format
-msgid "Enter passphrase for %s: "
+msgid "Key slot %d is full, please select another one."
+msgstr ""
+
+#: lib/setup.c:525 lib/setup.c:2824
+msgid "Device size is not aligned to device logical block size."
 msgstr ""
 
-#: lib/setup.c:653
+#: lib/setup.c:624
 #, c-format
-msgid "Header detected but device %s is too small.\n"
+msgid "Header detected but device %s is too small."
 msgstr ""
 
-#: lib/setup.c:669 lib/setup.c:1420
-msgid "This operation is not supported for this device type.\n"
+#: lib/setup.c:661
+msgid "This operation is not supported for this device type."
 msgstr ""
 
-#: lib/setup.c:908 lib/setup.c:1381 lib/setup.c:2264
+#: lib/setup.c:666
+msgid "Illegal operation with reencryption in-progress."
+msgstr ""
+
+#: lib/setup.c:832 lib/luks1/keymanage.c:475
 #, c-format
-msgid "Device %s is not active.\n"
+msgid "Unsupported LUKS version %d."
+msgstr ""
+
+#: lib/setup.c:849 lib/setup.c:1539 lib/setup.c:1959
+msgid "Detached metadata device is not supported for this crypt type."
 msgstr ""
 
-#: lib/setup.c:925
+#: lib/setup.c:1427 lib/setup.c:2544 lib/setup.c:2616 lib/setup.c:2628
+#: lib/setup.c:2777 lib/setup.c:4512
 #, c-format
-msgid "Underlying device for crypt device %s disappeared.\n"
+msgid "Device %s is not active."
 msgstr ""
 
-#: lib/setup.c:994
-msgid "Invalid plain crypt parameters.\n"
+#: lib/setup.c:1444
+#, c-format
+msgid "Underlying device for crypt device %s disappeared."
 msgstr ""
 
-#: lib/setup.c:999 lib/setup.c:1119
-msgid "Invalid key size.\n"
+#: lib/setup.c:1524
+msgid "Invalid plain crypt parameters."
 msgstr ""
 
-#: lib/setup.c:1004 lib/setup.c:1124
-msgid "UUID is not supported for this crypt type.\n"
+#: lib/setup.c:1529 lib/setup.c:1949 src/integritysetup.c:74
+msgid "Invalid key size."
 msgstr ""
 
-#: lib/setup.c:1046
-msgid "Can't format LUKS without device.\n"
+#: lib/setup.c:1534 lib/setup.c:1954 lib/setup.c:2157
+msgid "UUID is not supported for this crypt type."
 msgstr ""
 
-#: lib/setup.c:1089
-#, c-format
-msgid "Cannot format device %s which is still in use.\n"
+#: lib/setup.c:1549 lib/setup.c:1739 lib/luks2/luks2_reencrypt.c:2308
+#: src/cryptsetup.c:1226 src/cryptsetup.c:3923
+msgid "Unsupported encryption sector size."
 msgstr ""
 
-#: lib/setup.c:1092
-#, c-format
-msgid "Cannot format device %s, permission denied.\n"
+#: lib/setup.c:1557 lib/setup.c:1864 lib/setup.c:2818
+msgid "Device size is not aligned to requested sector size."
 msgstr ""
 
-#: lib/setup.c:1096
-#, c-format
-msgid "Cannot wipe header on device %s.\n"
+#: lib/setup.c:1608 lib/setup.c:1727
+msgid "Can't format LUKS without device."
 msgstr ""
 
-#: lib/setup.c:1114
-msgid "Can't format LOOPAES without device.\n"
+#: lib/setup.c:1614 lib/setup.c:1733
+msgid "Requested data alignment is not compatible with data offset."
 msgstr ""
 
-#: lib/setup.c:1152
-msgid "Can't format VERITY without device.\n"
+#: lib/setup.c:1682 lib/setup.c:1851
+msgid "WARNING: Data offset is outside of currently available data device.\n"
 msgstr ""
 
-#: lib/setup.c:1160 lib/verity/verity.c:106
+#: lib/setup.c:1692 lib/setup.c:1879 lib/setup.c:1900 lib/setup.c:2169
 #, c-format
-msgid "Unsupported VERITY hash type %d.\n"
+msgid "Cannot wipe header on device %s."
 msgstr ""
 
-#: lib/setup.c:1166 lib/verity/verity.c:114
-msgid "Unsupported VERITY block size.\n"
+#: lib/setup.c:1744
+msgid ""
+"WARNING: The device activation will fail, dm-crypt is missing support for "
+"requested encryption sector size.\n"
 msgstr ""
 
-#: lib/setup.c:1171 lib/verity/verity.c:76
-msgid "Unsupported VERITY hash offset.\n"
+#: lib/setup.c:1766
+msgid "Volume key is too small for encryption with integrity extensions."
 msgstr ""
 
-#: lib/setup.c:1285
+#: lib/setup.c:1821
 #, c-format
-msgid "Unknown crypt device type %s requested.\n"
+msgid "Cipher %s-%s (key size %zd bits) is not available."
 msgstr ""
 
-#: lib/setup.c:1435
-msgid "Do you really want to change UUID of device?"
+#: lib/setup.c:1854
+#, c-format
+msgid "WARNING: LUKS2 metadata size changed to %<PRIu64> bytes.\n"
 msgstr ""
 
-#: lib/setup.c:1545
+#: lib/setup.c:1858
 #, c-format
-msgid "Volume %s is not active.\n"
+msgid "WARNING: LUKS2 keyslots area size changed to %<PRIu64> bytes.\n"
 msgstr ""
 
-#: lib/setup.c:1556
+#: lib/setup.c:1882 lib/utils_device.c:828 lib/luks1/keyencryption.c:255
+#: lib/luks2/luks2_reencrypt.c:2356 lib/luks2/luks2_reencrypt.c:3367
 #, c-format
-msgid "Volume %s is already suspended.\n"
+msgid "Device %s is too small."
 msgstr ""
 
-#: lib/setup.c:1563
+#: lib/setup.c:1893 lib/setup.c:1919
 #, c-format
-msgid "Suspend is not supported for device %s.\n"
+msgid "Cannot format device %s in use."
 msgstr ""
 
-#: lib/setup.c:1565
+#: lib/setup.c:1896 lib/setup.c:1922
 #, c-format
-msgid "Error during suspending device %s.\n"
+msgid "Cannot format device %s, permission denied."
 msgstr ""
 
-#: lib/setup.c:1591 lib/setup.c:1638
+#: lib/setup.c:1908 lib/setup.c:2229
 #, c-format
-msgid "Volume %s is not suspended.\n"
+msgid "Cannot format integrity for device %s."
 msgstr ""
 
-#: lib/setup.c:1605
+#: lib/setup.c:1926
 #, c-format
-msgid "Resume is not supported for device %s.\n"
+msgid "Cannot format device %s."
 msgstr ""
 
-#: lib/setup.c:1607 lib/setup.c:1659
-#, c-format
-msgid "Error during resuming device %s.\n"
+#: lib/setup.c:1944
+msgid "Can't format LOOPAES without device."
 msgstr ""
 
-#: lib/setup.c:1645 lib/setup.c:2080 lib/setup.c:2094 src/cryptsetup.c:186
-#: src/cryptsetup.c:248 src/cryptsetup.c:732 src/cryptsetup.c:1151
-msgid "Enter passphrase: "
+#: lib/setup.c:1989
+msgid "Can't format VERITY without device."
 msgstr ""
 
-#: lib/setup.c:1707 lib/setup.c:1843
-msgid "Cannot add key slot, all slots disabled and no volume key provided.\n"
+#: lib/setup.c:2000 lib/verity/verity.c:102
+#, c-format
+msgid "Unsupported VERITY hash type %d."
 msgstr ""
 
-#: lib/setup.c:1716 lib/setup.c:1849 lib/setup.c:1853
-msgid "Enter any passphrase: "
+#: lib/setup.c:2006 lib/verity/verity.c:110
+msgid "Unsupported VERITY block size."
 msgstr ""
 
-#: lib/setup.c:1733 lib/setup.c:1866 lib/setup.c:1870 lib/setup.c:1932
-#: src/cryptsetup.c:988 src/cryptsetup.c:1017
-msgid "Enter new passphrase for key slot: "
+#: lib/setup.c:2011 lib/verity/verity.c:74
+msgid "Unsupported VERITY hash offset."
 msgstr ""
 
-#: lib/setup.c:1798
-#, c-format
-msgid "Key slot %d changed.\n"
+#: lib/setup.c:2016
+msgid "Unsupported VERITY FEC offset."
 msgstr ""
 
-#: lib/setup.c:1801
-#, c-format
-msgid "Replaced with key slot %d.\n"
+#: lib/setup.c:2040
+msgid "Data area overlaps with hash area."
 msgstr ""
 
-#: lib/setup.c:1806
-msgid "Failed to swap new key slot.\n"
+#: lib/setup.c:2065
+msgid "Hash area overlaps with FEC area."
 msgstr ""
 
-#: lib/setup.c:1923 lib/setup.c:2184 lib/setup.c:2197 lib/setup.c:2339
-msgid "Volume key does not match the volume.\n"
+#: lib/setup.c:2072
+msgid "Data area overlaps with FEC area."
 msgstr ""
 
-#: lib/setup.c:1961
+#: lib/setup.c:2208
 #, c-format
-msgid "Key slot %d is invalid.\n"
+msgid ""
+"WARNING: Requested tag size %d bytes differs from %s size output (%d "
+"bytes).\n"
 msgstr ""
 
-#: lib/setup.c:1966
+#: lib/setup.c:2286
 #, c-format
-msgid "Key slot %d is not used.\n"
+msgid "Unknown crypt device type %s requested."
 msgstr ""
 
-#: lib/setup.c:1996 lib/setup.c:2068 lib/setup.c:2160
+#: lib/setup.c:2550 lib/setup.c:2622 lib/setup.c:2635
 #, c-format
-msgid "Device %s already exists.\n"
+msgid "Unsupported parameters on device %s."
 msgstr ""
 
-#: lib/setup.c:2171
-msgid "Incorrect volume key specified for plain device.\n"
+#: lib/setup.c:2556 lib/setup.c:2641 lib/luks2/luks2_reencrypt.c:2408
+#: lib/luks2/luks2_reencrypt.c:2737
+#, c-format
+msgid "Mismatching parameters on device %s."
 msgstr ""
 
-#: lib/setup.c:2204
-msgid "Incorrect root hash specified for verity device.\n"
+#: lib/setup.c:2661
+msgid "Crypt devices mismatch."
 msgstr ""
 
-#: lib/setup.c:2227
-msgid "Device type is not properly initialised.\n"
+#: lib/setup.c:2698 lib/setup.c:2703 lib/luks2/luks2_reencrypt.c:2054
+#: lib/luks2/luks2_reencrypt.c:3145
+#, c-format
+msgid "Failed to reload device %s."
 msgstr ""
 
-#: lib/setup.c:2259
+#: lib/setup.c:2708 lib/setup.c:2713 lib/luks2/luks2_reencrypt.c:2025
+#: lib/luks2/luks2_reencrypt.c:2032
 #, c-format
-msgid "Device %s is still in use.\n"
+msgid "Failed to suspend device %s."
 msgstr ""
 
-#: lib/setup.c:2268
+#: lib/setup.c:2718 lib/luks2/luks2_reencrypt.c:2039
+#: lib/luks2/luks2_reencrypt.c:3080 lib/luks2/luks2_reencrypt.c:3149
 #, c-format
-msgid "Invalid device %s.\n"
+msgid "Failed to resume device %s."
 msgstr ""
 
-#: lib/setup.c:2289
-msgid "Function not available in FIPS mode.\n"
+#: lib/setup.c:2732
+#, c-format
+msgid "Fatal error while reloading device %s (on top of device %s)."
 msgstr ""
 
-#: lib/setup.c:2295
-msgid "Volume key buffer too small.\n"
+#: lib/setup.c:2735 lib/setup.c:2737
+#, c-format
+msgid "Failed to switch device %s to dm-error."
 msgstr ""
 
-#: lib/setup.c:2303
-msgid "Cannot retrieve volume key for plain device.\n"
+#: lib/setup.c:2809
+msgid "Cannot resize loop device."
 msgstr ""
 
-#: lib/setup.c:2310
-#, c-format
-msgid "This operation is not supported for %s crypt device.\n"
+#: lib/setup.c:2882
+msgid "Do you really want to change UUID of device?"
 msgstr ""
 
-#: lib/setup.c:2506
-msgid "Dump operation is not supported for this device type.\n"
+#: lib/setup.c:2958
+msgid "Header backup file does not contain compatible LUKS header."
 msgstr ""
 
-#: lib/utils.c:244
-msgid "Cannot get process priority.\n"
+#: lib/setup.c:3058
+#, c-format
+msgid "Volume %s is not active."
 msgstr ""
 
-#: lib/utils.c:258
-msgid "Cannot unlock memory.\n"
+#: lib/setup.c:3069
+#, c-format
+msgid "Volume %s is already suspended."
 msgstr ""
 
-#: lib/utils_crypt.c:241 lib/utils_crypt.c:254 lib/utils_crypt.c:401
-#: lib/utils_crypt.c:416
-msgid "Out of memory while reading passphrase.\n"
+#: lib/setup.c:3082
+#, c-format
+msgid "Suspend is not supported for device %s."
 msgstr ""
 
-#: lib/utils_crypt.c:246 lib/utils_crypt.c:261
-msgid "Error reading passphrase from terminal.\n"
+#: lib/setup.c:3084
+#, c-format
+msgid "Error during suspending device %s."
 msgstr ""
 
-#: lib/utils_crypt.c:259
-msgid "Verify passphrase: "
+#: lib/setup.c:3117 lib/setup.c:3184 lib/setup.c:3267
+#, c-format
+msgid "Volume %s is not suspended."
 msgstr ""
 
-#: lib/utils_crypt.c:266
-msgid "Passphrases do not match.\n"
+#: lib/setup.c:3146
+#, c-format
+msgid "Resume is not supported for device %s."
 msgstr ""
 
-#: lib/utils_crypt.c:350
-msgid "Cannot use offset with terminal input.\n"
+#: lib/setup.c:3148 lib/setup.c:3216 lib/setup.c:3297
+#, c-format
+msgid "Error during resuming device %s."
 msgstr ""
 
-#: lib/utils_crypt.c:369 lib/tcrypt/tcrypt.c:467
-msgid "Failed to open key file.\n"
+#: lib/setup.c:3282 lib/setup.c:3648 lib/setup.c:4309 lib/setup.c:4322
+#: lib/setup.c:4330 lib/setup.c:4343 lib/setup.c:4693 lib/setup.c:5839
+msgid "Volume key does not match the volume."
 msgstr ""
 
-#: lib/utils_crypt.c:378
-msgid "Failed to stat key file.\n"
+#: lib/setup.c:3343 lib/setup.c:3531
+msgid "Cannot add key slot, all slots disabled and no volume key provided."
 msgstr ""
 
-#: lib/utils_crypt.c:386 lib/utils_crypt.c:407
-msgid "Cannot seek to requested keyfile offset.\n"
+#: lib/setup.c:3483
+msgid "Failed to swap new key slot."
 msgstr ""
 
-#: lib/utils_crypt.c:424
-msgid "Error reading passphrase.\n"
+#: lib/setup.c:3669
+#, c-format
+msgid "Key slot %d is invalid."
 msgstr ""
 
-#: lib/utils_crypt.c:442
-msgid "Maximum keyfile size exceeded.\n"
+#: lib/setup.c:3675 src/cryptsetup.c:1572 src/cryptsetup.c:1917
+#, c-format
+msgid "Keyslot %d is not active."
 msgstr ""
 
-#: lib/utils_crypt.c:447
-msgid "Cannot read requested amount of data.\n"
+#: lib/setup.c:3694
+msgid "Device header overlaps with data area."
 msgstr ""
 
-#: lib/utils_device.c:136 lib/luks1/keyencryption.c:90
-#, c-format
-msgid "Device %s doesn't exist or access denied.\n"
+#: lib/setup.c:3981
+msgid "Reencryption in-progress. Cannot activate device."
 msgstr ""
 
-#: lib/utils_device.c:430
-msgid "Cannot use a loopback device, running as non-root user.\n"
+#: lib/setup.c:3983 lib/luks2/luks2_json_metadata.c:2243
+#: lib/luks2/luks2_reencrypt.c:2836
+msgid "Failed to get reencryption lock."
 msgstr ""
 
-#: lib/utils_device.c:433
-msgid "Cannot find a free loopback device.\n"
+#: lib/setup.c:3996 lib/luks2/luks2_reencrypt.c:2855
+msgid "LUKS2 reencryption recovery failed."
 msgstr ""
 
-#: lib/utils_device.c:440
-msgid ""
-"Attaching loopback device failed (loop device with autoclear flag is "
-"required).\n"
+#: lib/setup.c:4127 lib/setup.c:4379
+msgid "Device type is not properly initialized."
 msgstr ""
 
-#: lib/utils_device.c:484
+#: lib/setup.c:4171
 #, c-format
-msgid "Cannot use device %s which is in use (already mapped or mounted).\n"
+msgid "Cannot use device %s, name is invalid or still in use."
 msgstr ""
 
-#: lib/utils_device.c:488
+#: lib/setup.c:4174
 #, c-format
-msgid "Cannot get info about device %s.\n"
+msgid "Device %s already exists."
 msgstr ""
 
-#: lib/utils_device.c:494
-#, c-format
-msgid "Requested offset is beyond real size of device %s.\n"
+#: lib/setup.c:4296
+msgid "Incorrect volume key specified for plain device."
 msgstr ""
 
-#: lib/utils_device.c:502
-#, c-format
-msgid "Device %s has zero size.\n"
+#: lib/setup.c:4405
+msgid "Incorrect root hash specified for verity device."
 msgstr ""
 
-#: lib/utils_device.c:513
-#, c-format
-msgid "Device %s is too small.\n"
+#: lib/setup.c:4412
+msgid "Root hash signature required."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:37
-#, c-format
-msgid ""
-"Failed to setup dm-crypt key mapping for device %s.\n"
-"Check that kernel supports %s cipher (check syslog for more info).\n"
+#: lib/setup.c:4421
+msgid "Kernel keyring missing: required for passing signature to kernel."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:42
-msgid "Key size in XTS mode must be 256 or 512 bits.\n"
+#: lib/setup.c:4438 lib/setup.c:5915
+msgid "Failed to load key in kernel keyring."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:96 lib/luks1/keymanage.c:296
-#: lib/luks1/keymanage.c:572 lib/luks1/keymanage.c:1017
+#: lib/setup.c:4491 lib/setup.c:4507 lib/luks2/luks2_json_metadata.c:2296
+#: src/cryptsetup.c:2664
 #, c-format
-msgid "Cannot write to device %s, permission denied.\n"
+msgid "Device %s is still in use."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:111
-msgid "Failed to open temporary keystore device.\n"
+#: lib/setup.c:4516
+#, c-format
+msgid "Invalid device %s."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:118
-msgid "Failed to access temporary keystore device.\n"
+#: lib/setup.c:4632
+msgid "Volume key buffer too small."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:191
-msgid "IO error while encrypting keyslot.\n"
+#: lib/setup.c:4640
+msgid "Cannot retrieve volume key for plain device."
 msgstr ""
 
-#: lib/luks1/keyencryption.c:256
-msgid "IO error while decrypting keyslot.\n"
+#: lib/setup.c:4657
+msgid "Cannot retrieve root hash for verity device."
 msgstr ""
 
-#: lib/luks1/keymanage.c:90
+#: lib/setup.c:4659
 #, c-format
-msgid "Device %s is too small. (LUKS requires at least %<PRIu64> bytes.)\n"
+msgid "This operation is not supported for %s crypt device."
 msgstr ""
 
-#: lib/luks1/keymanage.c:180 lib/luks1/keymanage.c:418
-#: src/cryptsetup_reencrypt.c:1110
-#, c-format
-msgid "Device %s is not a valid LUKS device.\n"
+#: lib/setup.c:4865
+msgid "Dump operation is not supported for this device type."
 msgstr ""
 
-#: lib/luks1/keymanage.c:198
+#: lib/setup.c:5190
 #, c-format
-msgid "Requested header backup file %s already exists.\n"
+msgid "Data offset is not multiple of %u bytes."
 msgstr ""
 
-#: lib/luks1/keymanage.c:200
+#: lib/setup.c:5475
 #, c-format
-msgid "Cannot create header backup file %s.\n"
+msgid "Cannot convert device %s which is still in use."
 msgstr ""
 
-#: lib/luks1/keymanage.c:205
+#: lib/setup.c:5772
 #, c-format
-msgid "Cannot write header backup file %s.\n"
+msgid "Failed to assign keyslot %u as the new volume key."
 msgstr ""
 
-#: lib/luks1/keymanage.c:239
-msgid "Backup file doesn't contain valid LUKS header.\n"
+#: lib/setup.c:5845
+msgid "Failed to initialize default LUKS2 keyslot parameters."
 msgstr ""
 
-#: lib/luks1/keymanage.c:252 lib/luks1/keymanage.c:496
+#: lib/setup.c:5851
 #, c-format
-msgid "Cannot open header backup file %s.\n"
+msgid "Failed to assign keyslot %d to digest."
+msgstr ""
+
+#: lib/setup.c:5982
+msgid "Kernel keyring is not supported by the kernel."
 msgstr ""
 
-#: lib/luks1/keymanage.c:258
+#: lib/setup.c:5992 lib/luks2/luks2_reencrypt.c:2952
 #, c-format
-msgid "Cannot read header backup file %s.\n"
+msgid "Failed to read passphrase from keyring (error %d)."
 msgstr ""
 
-#: lib/luks1/keymanage.c:269
-msgid "Data offset or key size differs on device and backup, restore failed.\n"
+#: lib/setup.c:6016
+msgid "Failed to acquire global memory-hard access serialization lock."
 msgstr ""
 
-#: lib/luks1/keymanage.c:277
-#, c-format
-msgid "Device %s %s%s"
+#: lib/utils.c:80
+msgid "Cannot get process priority."
 msgstr ""
 
-#: lib/luks1/keymanage.c:278
-msgid ""
-"does not contain LUKS header. Replacing header can destroy data on that "
-"device."
+#: lib/utils.c:94
+msgid "Cannot unlock memory."
 msgstr ""
 
-#: lib/luks1/keymanage.c:279
-msgid ""
-"already contains LUKS header. Replacing header will destroy existing "
-"keyslots."
+#: lib/utils.c:168 lib/tcrypt/tcrypt.c:497
+msgid "Failed to open key file."
 msgstr ""
 
-#: lib/luks1/keymanage.c:280
-msgid ""
-"\n"
-"WARNING: real device header has different UUID than backup!"
+#: lib/utils.c:173
+msgid "Cannot read keyfile from a terminal."
 msgstr ""
 
-#: lib/luks1/keymanage.c:299 lib/luks1/keymanage.c:535
-#: lib/luks1/keymanage.c:575 lib/tcrypt/tcrypt.c:624 lib/verity/verity.c:82
-#: lib/verity/verity.c:179 lib/verity/verity_hash.c:292
-#: lib/verity/verity_hash.c:303 lib/verity/verity_hash.c:323
-#, c-format
-msgid "Cannot open device %s.\n"
+#: lib/utils.c:190
+msgid "Failed to stat key file."
 msgstr ""
 
-#: lib/luks1/keymanage.c:329
-msgid "Non standard key size, manual repair required.\n"
+#: lib/utils.c:198 lib/utils.c:219
+msgid "Cannot seek to requested keyfile offset."
 msgstr ""
 
-#: lib/luks1/keymanage.c:334
-msgid "Non standard keyslots alignment, manual repair required.\n"
+#: lib/utils.c:213 lib/utils.c:228 src/utils_password.c:188
+#: src/utils_password.c:201
+msgid "Out of memory while reading passphrase."
 msgstr ""
 
-#: lib/luks1/keymanage.c:340
-msgid "Repairing keyslots.\n"
+#: lib/utils.c:248
+msgid "Error reading passphrase."
 msgstr ""
 
-#: lib/luks1/keymanage.c:351
-msgid "Repair failed."
+#: lib/utils.c:265
+msgid "Nothing to read on input."
 msgstr ""
 
-#: lib/luks1/keymanage.c:363
-#, c-format
-msgid "Keyslot %i: offset repaired (%u -> %u).\n"
+#: lib/utils.c:272
+msgid "Maximum keyfile size exceeded."
 msgstr ""
 
-#: lib/luks1/keymanage.c:371
-#, c-format
-msgid "Keyslot %i: stripes repaired (%u -> %u).\n"
+#: lib/utils.c:277
+msgid "Cannot read requested amount of data."
 msgstr ""
 
-#: lib/luks1/keymanage.c:380
+#: lib/utils_device.c:187 lib/utils_storage_wrappers.c:110
+#: lib/luks1/keyencryption.c:91
 #, c-format
-msgid "Keyslot %i: bogus partition signature.\n"
+msgid "Device %s does not exist or access denied."
 msgstr ""
 
-#: lib/luks1/keymanage.c:385
+#: lib/utils_device.c:197
 #, c-format
-msgid "Keyslot %i: salt wiped.\n"
+msgid "Device %s is not compatible."
 msgstr ""
 
-#: lib/luks1/keymanage.c:396
-msgid "Writing LUKS header to disk.\n"
+#: lib/utils_device.c:642
+#, c-format
+msgid "Device %s is too small. Need at least %<PRIu64> bytes."
 msgstr ""
 
-#: lib/luks1/keymanage.c:421
+#: lib/utils_device.c:723
 #, c-format
-msgid "Unsupported LUKS version %d.\n"
+msgid "Cannot use device %s which is in use (already mapped or mounted)."
 msgstr ""
 
-#: lib/luks1/keymanage.c:427 lib/luks1/keymanage.c:661
+#: lib/utils_device.c:727
 #, c-format
-msgid "Requested LUKS hash %s is not supported.\n"
+msgid "Cannot use device %s, permission denied."
 msgstr ""
 
-#: lib/luks1/keymanage.c:442
+#: lib/utils_device.c:730
 #, c-format
-msgid "LUKS keyslot %u is invalid.\n"
+msgid "Cannot get info about device %s."
 msgstr ""
 
-#: lib/luks1/keymanage.c:456 src/cryptsetup.c:668
-msgid "No known problems detected for LUKS header.\n"
+#: lib/utils_device.c:753
+msgid "Cannot use a loopback device, running as non-root user."
 msgstr ""
 
-#: lib/luks1/keymanage.c:596
-#, c-format
-msgid "Error during update of LUKS header on device %s.\n"
+#: lib/utils_device.c:763
+msgid ""
+"Attaching loopback device failed (loop device with autoclear flag is "
+"required)."
 msgstr ""
 
-#: lib/luks1/keymanage.c:603
+#: lib/utils_device.c:809
 #, c-format
-msgid "Error re-reading LUKS header after update on device %s.\n"
+msgid "Requested offset is beyond real size of device %s."
 msgstr ""
 
-#: lib/luks1/keymanage.c:654
+#: lib/utils_device.c:817
 #, c-format
-msgid ""
-"Data offset for detached LUKS header must be either 0 or higher than header "
-"size (%d sectors).\n"
+msgid "Device %s has zero size."
 msgstr ""
 
-#: lib/luks1/keymanage.c:666 lib/luks1/keymanage.c:757
-msgid "Wrong LUKS UUID format provided.\n"
+#: lib/utils_pbkdf.c:100
+msgid "Requested PBKDF target time cannot be zero."
 msgstr ""
 
-#: lib/luks1/keymanage.c:695
-msgid "Cannot create LUKS header: reading random salt failed.\n"
-msgstr ""
-
-#: lib/luks1/keymanage.c:702 lib/luks1/keymanage.c:798
+#: lib/utils_pbkdf.c:106
 #, c-format
-msgid "Not compatible PBKDF2 options (using hash algorithm %s).\n"
+msgid "Unknown PBKDF type %s."
 msgstr ""
 
-#: lib/luks1/keymanage.c:717
+#: lib/utils_pbkdf.c:111
 #, c-format
-msgid "Cannot create LUKS header: header digest failed (using hash %s).\n"
+msgid "Requested hash %s is not supported."
 msgstr ""
 
-#: lib/luks1/keymanage.c:782
-#, c-format
-msgid "Key slot %d active, purge first.\n"
+#: lib/utils_pbkdf.c:122
+msgid "Requested PBKDF type is not supported for LUKS1."
 msgstr ""
 
-#: lib/luks1/keymanage.c:788
-#, c-format
-msgid "Key slot %d material includes too few stripes. Header manipulation?\n"
+#: lib/utils_pbkdf.c:128
+msgid "PBKDF max memory or parallel threads must not be set with pbkdf2."
 msgstr ""
 
-#: lib/luks1/keymanage.c:950
+#: lib/utils_pbkdf.c:133 lib/utils_pbkdf.c:143
 #, c-format
-msgid "Key slot %d unlocked.\n"
+msgid "Forced iteration count is too low for %s (minimum is %u)."
 msgstr ""
 
-#: lib/luks1/keymanage.c:985 src/cryptsetup.c:858
-#: src/cryptsetup_reencrypt.c:999 src/cryptsetup_reencrypt.c:1036
-msgid "No key available with this passphrase.\n"
-msgstr ""
-
-#: lib/luks1/keymanage.c:1003
+#: lib/utils_pbkdf.c:148
 #, c-format
-msgid "Key slot %d is invalid, please select keyslot between 0 and %d.\n"
+msgid "Forced memory cost is too low for %s (minimum is %u kilobytes)."
 msgstr ""
 
-#: lib/luks1/keymanage.c:1021
+#: lib/utils_pbkdf.c:155
 #, c-format
-msgid "Cannot wipe device %s.\n"
+msgid ""
+"Requested maximum PBKDF memory cost is too high (maximum is %d kilobytes)."
 msgstr ""
 
-#: lib/loopaes/loopaes.c:146
-msgid "Detected not yet supported GPG encrypted keyfile.\n"
+#: lib/utils_pbkdf.c:160
+msgid "Requested maximum PBKDF memory cannot be zero."
 msgstr ""
 
-#: lib/loopaes/loopaes.c:147
-msgid "Please use gpg --decrypt <KEYFILE> | cryptsetup --keyfile=- ...\n"
+#: lib/utils_pbkdf.c:164
+msgid "Requested PBKDF parallel threads cannot be zero."
 msgstr ""
 
-#: lib/loopaes/loopaes.c:168 lib/loopaes/loopaes.c:188
-msgid "Incompatible loop-AES keyfile detected.\n"
+#: lib/utils_pbkdf.c:184
+msgid "Only PBKDF2 is supported in FIPS mode."
 msgstr ""
 
-#: lib/loopaes/loopaes.c:244
-msgid "Kernel doesn't support loop-AES compatible mapping.\n"
+#: lib/utils_benchmark.c:172
+msgid "PBKDF benchmark disabled but iterations not set."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:475
+#: lib/utils_benchmark.c:191
 #, c-format
-msgid "Error reading keyfile %s.\n"
+msgid "Not compatible PBKDF2 options (using hash algorithm %s)."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:513
-#, c-format
-msgid "Maximum TCRYPT passphrase length (%d) exceeded.\n"
+#: lib/utils_benchmark.c:211
+msgid "Not compatible PBKDF options."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:543
+#: lib/utils_device_locking.c:102
 #, c-format
-msgid "PBKDF2 hash algorithm %s not available, skipping.\n"
-msgstr ""
-
-#: lib/tcrypt/tcrypt.c:561 src/cryptsetup.c:621
-msgid "Required kernel crypto interface not available.\n"
+msgid ""
+"Locking aborted. The locking path %s/%s is unusable (not a directory or "
+"missing)."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:563 src/cryptsetup.c:623
-msgid "Ensure you have algif_skcipher kernel module loaded.\n"
+#: lib/utils_device_locking.c:109
+#, c-format
+msgid "WARNING: Locking directory %s/%s is missing!\n"
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:707
+#: lib/utils_device_locking.c:119
 #, c-format
-msgid "Activation is not supported for %d sector size.\n"
+msgid ""
+"Locking aborted. The locking path %s/%s is unusable (%s is not a directory)."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:713
-msgid "Kernel doesn't support activation for this TCRYPT legacy mode.\n"
+#: lib/utils_wipe.c:184 src/cryptsetup_reencrypt.c:941
+#: src/cryptsetup_reencrypt.c:1025
+msgid "Cannot seek to device offset."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:744
+#: lib/utils_wipe.c:208
 #, c-format
-msgid "Activating TCRYPT system encryption for partition %s.\n"
+msgid "Device wipe error, offset %<PRIu64>."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:806
-msgid "Kernel doesn't support TCRYPT compatible mapping.\n"
+#: lib/luks1/keyencryption.c:39
+#, c-format
+msgid ""
+"Failed to setup dm-crypt key mapping for device %s.\n"
+"Check that kernel supports %s cipher (check syslog for more info)."
 msgstr ""
 
-#: lib/tcrypt/tcrypt.c:1020
-msgid "This function is not supported without TCRYPT header load."
+#: lib/luks1/keyencryption.c:44
+msgid "Key size in XTS mode must be 256 or 512 bits."
 msgstr ""
 
-#: lib/verity/verity.c:70 lib/verity/verity.c:172
-#, c-format
-msgid "Verity device %s doesn't use on-disk header.\n"
+#: lib/luks1/keyencryption.c:46
+msgid "Cipher specification should be in [cipher]-[mode]-[iv] format."
 msgstr ""
 
-#: lib/verity/verity.c:94
+#: lib/luks1/keyencryption.c:97 lib/luks1/keymanage.c:344
+#: lib/luks1/keymanage.c:635 lib/luks1/keymanage.c:1080
+#: lib/luks2/luks2_json_metadata.c:1252 lib/luks2/luks2_keyslot.c:734
 #, c-format
-msgid "Device %s is not a valid VERITY device.\n"
+msgid "Cannot write to device %s, permission denied."
 msgstr ""
 
-#: lib/verity/verity.c:101
-#, c-format
-msgid "Unsupported VERITY version %d.\n"
+#: lib/luks1/keyencryption.c:120
+msgid "Failed to open temporary keystore device."
 msgstr ""
 
-#: lib/verity/verity.c:131
-msgid "VERITY header corrupted.\n"
+#: lib/luks1/keyencryption.c:127
+msgid "Failed to access temporary keystore device."
 msgstr ""
 
-#: lib/verity/verity.c:166
-#, c-format
-msgid "Wrong VERITY UUID format provided on device %s.\n"
+#: lib/luks1/keyencryption.c:200 lib/luks2/luks2_keyslot_luks2.c:60
+#: lib/luks2/luks2_keyslot_luks2.c:78 lib/luks2/luks2_keyslot_reenc.c:134
+msgid "IO error while encrypting keyslot."
 msgstr ""
 
-#: lib/verity/verity.c:196
+#: lib/luks1/keyencryption.c:246 lib/luks1/keymanage.c:347
+#: lib/luks1/keymanage.c:588 lib/luks1/keymanage.c:638 lib/tcrypt/tcrypt.c:670
+#: lib/verity/verity.c:80 lib/verity/verity.c:178 lib/verity/verity_hash.c:311
+#: lib/verity/verity_hash.c:322 lib/verity/verity_hash.c:342
+#: lib/verity/verity_fec.c:241 lib/verity/verity_fec.c:253
+#: lib/verity/verity_fec.c:258 lib/luks2/luks2_json_metadata.c:1255
+#: src/cryptsetup_reencrypt.c:200 src/cryptsetup_reencrypt.c:212
 #, c-format
-msgid "Error during update of verity header on device %s.\n"
+msgid "Cannot open device %s."
 msgstr ""
 
-#: lib/verity/verity.c:276
-msgid "Kernel doesn't support dm-verity mapping.\n"
+#: lib/luks1/keyencryption.c:257 lib/luks2/luks2_keyslot_luks2.c:137
+msgid "IO error while decrypting keyslot."
 msgstr ""
 
-#: lib/verity/verity.c:287
-msgid "Verity device detected corruption after activation.\n"
+#: lib/luks1/keymanage.c:110
+#, c-format
+msgid "Device %s is too small. (LUKS1 requires at least %<PRIu64> bytes.)"
 msgstr ""
 
-#: lib/verity/verity_hash.c:59
+#: lib/luks1/keymanage.c:131 lib/luks1/keymanage.c:139
+#: lib/luks1/keymanage.c:151 lib/luks1/keymanage.c:162
+#: lib/luks1/keymanage.c:174
 #, c-format
-msgid "Spare area is not zeroed at position %<PRIu64>.\n"
+msgid "LUKS keyslot %u is invalid."
 msgstr ""
 
-#: lib/verity/verity_hash.c:121 lib/verity/verity_hash.c:249
-#: lib/verity/verity_hash.c:277 lib/verity/verity_hash.c:284
-msgid "Device offset overflow.\n"
+#: lib/luks1/keymanage.c:228 lib/luks1/keymanage.c:472
+#: lib/luks2/luks2_json_metadata.c:1083 src/cryptsetup.c:1433
+#: src/cryptsetup.c:1559 src/cryptsetup.c:1616 src/cryptsetup.c:1672
+#: src/cryptsetup.c:1739 src/cryptsetup.c:1842 src/cryptsetup.c:1906
+#: src/cryptsetup.c:2136 src/cryptsetup.c:2331 src/cryptsetup.c:2391
+#: src/cryptsetup.c:2457 src/cryptsetup.c:2621 src/cryptsetup.c:3271
+#: src/cryptsetup.c:3280 src/cryptsetup_reencrypt.c:1388
+#, c-format
+msgid "Device %s is not a valid LUKS device."
 msgstr ""
 
-#: lib/verity/verity_hash.c:161
+#: lib/luks1/keymanage.c:246 lib/luks2/luks2_json_metadata.c:1100
 #, c-format
-msgid "Verification failed at position %<PRIu64>.\n"
+msgid "Requested header backup file %s already exists."
 msgstr ""
 
-#: lib/verity/verity_hash.c:235
-msgid "Invalid size parameters for verity device.\n"
+#: lib/luks1/keymanage.c:248 lib/luks2/luks2_json_metadata.c:1102
+#, c-format
+msgid "Cannot create header backup file %s."
 msgstr ""
 
-#: lib/verity/verity_hash.c:266
-msgid "Too many tree levels for verity volume.\n"
+#: lib/luks1/keymanage.c:255 lib/luks2/luks2_json_metadata.c:1109
+#, c-format
+msgid "Cannot write header backup file %s."
 msgstr ""
 
-#: lib/verity/verity_hash.c:354
-msgid "Verification of data area failed.\n"
+#: lib/luks1/keymanage.c:286 lib/luks2/luks2_json_metadata.c:1161
+msgid "Backup file does not contain valid LUKS header."
 msgstr ""
 
-#: lib/verity/verity_hash.c:359
-msgid "Verification of root hash failed.\n"
+#: lib/luks1/keymanage.c:299 lib/luks1/keymanage.c:549
+#: lib/luks2/luks2_json_metadata.c:1182
+#, c-format
+msgid "Cannot open header backup file %s."
 msgstr ""
 
-#: lib/verity/verity_hash.c:365
-msgid "Input/output error while creating hash area.\n"
+#: lib/luks1/keymanage.c:307 lib/luks2/luks2_json_metadata.c:1190
+#, c-format
+msgid "Cannot read header backup file %s."
 msgstr ""
 
-#: lib/verity/verity_hash.c:367
-msgid "Creation of hash area failed.\n"
+#: lib/luks1/keymanage.c:317
+msgid "Data offset or key size differs on device and backup, restore failed."
 msgstr ""
 
-#: lib/verity/verity_hash.c:414
+#: lib/luks1/keymanage.c:325
 #, c-format
-msgid ""
-"WARNING: Kernel cannot activate device if data block size exceeds page size "
-"(%u).\n"
-msgstr ""
-
-#: src/cryptsetup.c:91
-msgid "Can't do passphrase verification on non-tty inputs.\n"
+msgid "Device %s %s%s"
 msgstr ""
 
-#: src/cryptsetup.c:133 src/cryptsetup.c:564 src/cryptsetup.c:711
-#: src/cryptsetup_reencrypt.c:502 src/cryptsetup_reencrypt.c:556
-msgid "No known cipher specification pattern detected.\n"
+#: lib/luks1/keymanage.c:326
+msgid ""
+"does not contain LUKS header. Replacing header can destroy data on that "
+"device."
 msgstr ""
 
-#: src/cryptsetup.c:144
+#: lib/luks1/keymanage.c:327
 msgid ""
-"WARNING: The --hash parameter is being ignored in plain mode with keyfile "
-"specified.\n"
+"already contains LUKS header. Replacing header will destroy existing "
+"keyslots."
 msgstr ""
 
-#: src/cryptsetup.c:152
+#: lib/luks1/keymanage.c:328 lib/luks2/luks2_json_metadata.c:1224
 msgid ""
-"WARNING: The --keyfile-size option is being ignored, the read size is the "
-"same as the encryption key size.\n"
+"\n"
+"WARNING: real device header has different UUID than backup!"
 msgstr ""
 
-#: src/cryptsetup.c:218
-msgid "Option --key-file is required.\n"
+#: lib/luks1/keymanage.c:375
+msgid "Non standard key size, manual repair required."
 msgstr ""
 
-#: src/cryptsetup.c:267
-msgid "No device header detected with this passphrase.\n"
+#: lib/luks1/keymanage.c:380
+msgid "Non standard keyslots alignment, manual repair required."
 msgstr ""
 
-#: src/cryptsetup.c:327 src/cryptsetup.c:1140
-msgid ""
-"Header dump with volume key is sensitive information\n"
-"which allows access to encrypted partition without passphrase.\n"
-"This dump should be always stored encrypted on safe place."
+#: lib/luks1/keymanage.c:390
+msgid "Repairing keyslots."
 msgstr ""
 
-#: src/cryptsetup.c:517
-msgid "Result of benchmark is not reliable.\n"
+#: lib/luks1/keymanage.c:409
+#, c-format
+msgid "Keyslot %i: offset repaired (%u -> %u)."
 msgstr ""
 
-#: src/cryptsetup.c:558
-msgid "# Tests are approximate using memory only (no storage IO).\n"
+#: lib/luks1/keymanage.c:417
+#, c-format
+msgid "Keyslot %i: stripes repaired (%u -> %u)."
 msgstr ""
 
-#: src/cryptsetup.c:583 src/cryptsetup.c:605
-msgid "#  Algorithm | Key |  Encryption |  Decryption\n"
+#: lib/luks1/keymanage.c:426
+#, c-format
+msgid "Keyslot %i: bogus partition signature."
 msgstr ""
 
-#: src/cryptsetup.c:587
+#: lib/luks1/keymanage.c:431
 #, c-format
-msgid "Cipher %s is not available.\n"
+msgid "Keyslot %i: salt wiped."
 msgstr ""
 
-#: src/cryptsetup.c:614
-msgid "N/A"
+#: lib/luks1/keymanage.c:448
+msgid "Writing LUKS header to disk."
 msgstr ""
 
-#: src/cryptsetup.c:639
-#, c-format
-msgid "Cannot read keyfile %s.\n"
+#: lib/luks1/keymanage.c:453
+msgid "Repair failed."
 msgstr ""
 
-#: src/cryptsetup.c:643
+#: lib/luks1/keymanage.c:481 lib/luks1/keymanage.c:750
 #, c-format
-msgid "Cannot read %d bytes from keyfile %s.\n"
+msgid "Requested LUKS hash %s is not supported."
 msgstr ""
 
-#: src/cryptsetup.c:672
-msgid "Really try to repair LUKS device header?"
+#: lib/luks1/keymanage.c:509 src/cryptsetup.c:1133
+msgid "No known problems detected for LUKS header."
 msgstr ""
 
-#: src/cryptsetup.c:697
+#: lib/luks1/keymanage.c:660
 #, c-format
-msgid "This will overwrite data on %s irrevocably."
+msgid "Error during update of LUKS header on device %s."
 msgstr ""
 
-#: src/cryptsetup.c:699
-msgid "memory allocation error in action_luksFormat"
+#: lib/luks1/keymanage.c:668
+#, c-format
+msgid "Error re-reading LUKS header after update on device %s."
 msgstr ""
 
-#: src/cryptsetup.c:717
-#, c-format
-msgid "Cannot use %s as on-disk header.\n"
+#: lib/luks1/keymanage.c:744
+msgid ""
+"Data offset for LUKS header must be either 0 or higher than header size."
+msgstr ""
+
+#: lib/luks1/keymanage.c:755 lib/luks1/keymanage.c:825
+#: lib/luks2/luks2_json_format.c:283 lib/luks2/luks2_json_metadata.c:1001
+#: src/cryptsetup.c:2784
+msgid "Wrong LUKS UUID format provided."
 msgstr ""
 
-#: src/cryptsetup.c:784
-msgid "Reduced data offset is allowed only for detached LUKS header.\n"
+#: lib/luks1/keymanage.c:778
+msgid "Cannot create LUKS header: reading random salt failed."
 msgstr ""
 
-#: src/cryptsetup.c:881 src/cryptsetup.c:937
+#: lib/luks1/keymanage.c:804
 #, c-format
-msgid "Key slot %d selected for deletion.\n"
+msgid "Cannot create LUKS header: header digest failed (using hash %s)."
 msgstr ""
 
-#: src/cryptsetup.c:884
+#: lib/luks1/keymanage.c:848
 #, c-format
-msgid "Key %d not active. Can't wipe.\n"
+msgid "Key slot %d active, purge first."
 msgstr ""
 
-#: src/cryptsetup.c:892 src/cryptsetup.c:940
-msgid ""
-"This is the last keyslot. Device will become unusable after purging this key."
+#: lib/luks1/keymanage.c:854
+#, c-format
+msgid "Key slot %d material includes too few stripes. Header manipulation?"
 msgstr ""
 
-#: src/cryptsetup.c:893
-msgid "Enter any remaining passphrase: "
+#: lib/luks1/keymanage.c:990
+#, c-format
+msgid "Cannot open keyslot (using hash %s)."
 msgstr ""
 
-#: src/cryptsetup.c:921
-msgid "Enter passphrase to be deleted: "
+#: lib/luks1/keymanage.c:1066
+#, c-format
+msgid "Key slot %d is invalid, please select keyslot between 0 and %d."
 msgstr ""
 
-#: src/cryptsetup.c:1003 src/cryptsetup_reencrypt.c:1074
+#: lib/luks1/keymanage.c:1084 lib/luks2/luks2_keyslot.c:738
 #, c-format
-msgid "Enter any existing passphrase: "
+msgid "Cannot wipe device %s."
 msgstr ""
 
-#: src/cryptsetup.c:1052
-msgid "Enter passphrase to be changed: "
+#: lib/loopaes/loopaes.c:146
+msgid "Detected not yet supported GPG encrypted keyfile."
 msgstr ""
 
-#: src/cryptsetup.c:1066 src/cryptsetup_reencrypt.c:1059
-msgid "Enter new passphrase: "
+#: lib/loopaes/loopaes.c:147
+msgid "Please use gpg --decrypt <KEYFILE> | cryptsetup --keyfile=- ...\n"
 msgstr ""
 
-#: src/cryptsetup.c:1090
-msgid "Only one device argument for isLuks operation is supported.\n"
+#: lib/loopaes/loopaes.c:168 lib/loopaes/loopaes.c:188
+msgid "Incompatible loop-AES keyfile detected."
 msgstr ""
 
-#: src/cryptsetup.c:1246 src/cryptsetup.c:1267
-msgid "Option --header-backup-file is required.\n"
+#: lib/loopaes/loopaes.c:245
+msgid "Kernel does not support loop-AES compatible mapping."
 msgstr ""
 
-#: src/cryptsetup.c:1304
+#: lib/tcrypt/tcrypt.c:504
 #, c-format
-msgid "Unrecognized metadata device type %s.\n"
+msgid "Error reading keyfile %s."
 msgstr ""
 
-#: src/cryptsetup.c:1307
-msgid "Command requires device and mapped name as arguments.\n"
+#: lib/tcrypt/tcrypt.c:554
+#, c-format
+msgid "Maximum TCRYPT passphrase length (%zu) exceeded."
 msgstr ""
 
-#: src/cryptsetup.c:1326
+#: lib/tcrypt/tcrypt.c:595
 #, c-format
-msgid ""
-"This operation will erase all keyslots on device %s.\n"
-"Device will become unusable after this operation."
+msgid "PBKDF2 hash algorithm %s not available, skipping."
 msgstr ""
 
-#: src/cryptsetup.c:1360
-msgid "<device> [--type <type>] [<name>]"
+#: lib/tcrypt/tcrypt.c:611 src/cryptsetup.c:1010
+msgid "Required kernel crypto interface not available."
 msgstr ""
 
-#: src/cryptsetup.c:1360
-msgid "open device as mapping <name>"
+#: lib/tcrypt/tcrypt.c:613 src/cryptsetup.c:1012
+msgid "Ensure you have algif_skcipher kernel module loaded."
 msgstr ""
 
-#: src/cryptsetup.c:1361 src/cryptsetup.c:1362 src/cryptsetup.c:1363
-#: src/cryptsetup.c:1364 src/veritysetup.c:311 src/veritysetup.c:312
-msgid "<name>"
+#: lib/tcrypt/tcrypt.c:753
+#, c-format
+msgid "Activation is not supported for %d sector size."
 msgstr ""
 
-#: src/cryptsetup.c:1361
-msgid "close device (remove mapping)"
+#: lib/tcrypt/tcrypt.c:759
+msgid "Kernel does not support activation for this TCRYPT legacy mode."
 msgstr ""
 
-#: src/cryptsetup.c:1362
-msgid "resize active device"
+#: lib/tcrypt/tcrypt.c:793
+#, c-format
+msgid "Activating TCRYPT system encryption for partition %s."
 msgstr ""
 
-#: src/cryptsetup.c:1363
-msgid "show device status"
+#: lib/tcrypt/tcrypt.c:871
+msgid "Kernel does not support TCRYPT compatible mapping."
 msgstr ""
 
-#: src/cryptsetup.c:1364
-msgid "benchmark cipher"
+#: lib/tcrypt/tcrypt.c:1093
+msgid "This function is not supported without TCRYPT header load."
 msgstr ""
 
-#: src/cryptsetup.c:1365 src/cryptsetup.c:1366 src/cryptsetup.c:1372
-#: src/cryptsetup.c:1373 src/cryptsetup.c:1374 src/cryptsetup.c:1375
-#: src/cryptsetup.c:1376 src/cryptsetup.c:1377 src/cryptsetup.c:1378
-#: src/cryptsetup.c:1379
-msgid "<device>"
+#: lib/bitlk/bitlk.c:333
+#, c-format
+msgid ""
+"Unexpected metadata entry type '%u' found when parsing supported Volume "
+"Master Key."
 msgstr ""
 
-#: src/cryptsetup.c:1365
-msgid "try to repair on-disk metadata"
+#: lib/bitlk/bitlk.c:380
+msgid "Invalid string found when parsing Volume Master Key."
 msgstr ""
 
-#: src/cryptsetup.c:1366
-msgid "erase all keyslots (remove encryption key)"
+#: lib/bitlk/bitlk.c:385
+#, c-format
+msgid ""
+"Unexpected string ('%s') found when parsing supported Volume Master Key."
 msgstr ""
 
-#: src/cryptsetup.c:1367 src/cryptsetup.c:1368
-msgid "<device> [<new key file>]"
+#: lib/bitlk/bitlk.c:399
+#, c-format
+msgid ""
+"Unexpected metadata entry value '%u' found when parsing supported Volume "
+"Master Key."
 msgstr ""
 
-#: src/cryptsetup.c:1367
-msgid "formats a LUKS device"
+#: lib/bitlk/bitlk.c:479
+#, c-format
+msgid "Failed to read BITLK signature from %s."
 msgstr ""
 
-#: src/cryptsetup.c:1368
-msgid "add key to LUKS device"
+#: lib/bitlk/bitlk.c:485
+msgid "BITLK version 1 is currently not supported."
 msgstr ""
 
-#: src/cryptsetup.c:1369 src/cryptsetup.c:1370
-msgid "<device> [<key file>]"
+#: lib/bitlk/bitlk.c:491
+msgid "Invalid or unknown boot signature for BITLK device."
 msgstr ""
 
-#: src/cryptsetup.c:1369
-msgid "removes supplied key or key file from LUKS device"
+#: lib/bitlk/bitlk.c:503
+msgid "Invalid or unknown signature for BITLK device."
 msgstr ""
 
-#: src/cryptsetup.c:1370
-msgid "changes supplied key or key file of LUKS device"
+#: lib/bitlk/bitlk.c:510
+#, c-format
+msgid "Unsupported sector size %<PRIu16>."
 msgstr ""
 
-#: src/cryptsetup.c:1371
-msgid "<device> <key slot>"
+#: lib/bitlk/bitlk.c:518
+#, c-format
+msgid "Failed to read BITLK header from %s."
 msgstr ""
 
-#: src/cryptsetup.c:1371
-msgid "wipes key with number <key slot> from LUKS device"
+#: lib/bitlk/bitlk.c:543
+#, c-format
+msgid "Failed to read BITLK FVE metadata from %s."
 msgstr ""
 
-#: src/cryptsetup.c:1372
-msgid "print UUID of LUKS device"
+#: lib/bitlk/bitlk.c:594
+msgid "Unknown or unsupported encryption type."
 msgstr ""
 
-#: src/cryptsetup.c:1373
-msgid "tests <device> for LUKS partition header"
+#: lib/bitlk/bitlk.c:627
+#, c-format
+msgid "Failed to read BITLK metadata entries from %s."
 msgstr ""
 
-#: src/cryptsetup.c:1374
-msgid "dump LUKS partition information"
+#: lib/bitlk/bitlk.c:921
+msgid "This operation is not supported."
 msgstr ""
 
-#: src/cryptsetup.c:1375
-msgid "dump TCRYPT device information"
+#: lib/bitlk/bitlk.c:929
+msgid "Wrong key size."
 msgstr ""
 
-#: src/cryptsetup.c:1376
-msgid "Suspend LUKS device and wipe key (all IOs are frozen)."
+#: lib/bitlk/bitlk.c:981
+msgid "This BITLK device is in an unsupported state and cannot be activated."
 msgstr ""
 
-#: src/cryptsetup.c:1377
-msgid "Resume suspended LUKS device."
+#: lib/bitlk/bitlk.c:987
+#, c-format
+msgid "BITLK devices with type '%s' cannot be activated."
 msgstr ""
 
-#: src/cryptsetup.c:1378
-msgid "Backup LUKS device header and keyslots"
+#: lib/bitlk/bitlk.c:1069
+msgid "Activation of partially decrypted BITLK device is not supported."
 msgstr ""
 
-#: src/cryptsetup.c:1379
-msgid "Restore LUKS device header and keyslots"
+#: lib/bitlk/bitlk.c:1205
+msgid ""
+"Cannot activate device, kernel dm-crypt is missing support for BITLK IV."
 msgstr ""
 
-#: src/cryptsetup.c:1396 src/veritysetup.c:328
+#: lib/bitlk/bitlk.c:1209
 msgid ""
-"\n"
-"<action> is one of:\n"
+"Cannot activate device, kernel dm-crypt is missing support for BITLK "
+"Elephant diffuser."
 msgstr ""
 
-#: src/cryptsetup.c:1402
-msgid ""
-"\n"
-"You can also use old <action> syntax aliases:\n"
-"\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen\n"
-"\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose\n"
+#: lib/verity/verity.c:68 lib/verity/verity.c:171
+#, c-format
+msgid "Verity device %s does not use on-disk header."
 msgstr ""
 
-#: src/cryptsetup.c:1406
+#: lib/verity/verity.c:90
 #, c-format
-msgid ""
-"\n"
-"<name> is the device to create under %s\n"
-"<device> is the encrypted device\n"
-"<key slot> is the LUKS key slot number to modify\n"
-"<key file> optional key file for the new key for luksAddKey action\n"
+msgid "Device %s is not a valid VERITY device."
 msgstr ""
 
-#: src/cryptsetup.c:1413
+#: lib/verity/verity.c:97
 #, c-format
-msgid ""
-"\n"
-"Default compiled-in key and passphrase parameters:\n"
-"\tMaximum keyfile size: %dkB, Maximum interactive passphrase length %d "
-"(characters)\n"
-"Default PBKDF2 iteration time for LUKS: %d (ms)\n"
+msgid "Unsupported VERITY version %d."
+msgstr ""
+
+#: lib/verity/verity.c:128
+msgid "VERITY header corrupted."
 msgstr ""
 
-#: src/cryptsetup.c:1420
+#: lib/verity/verity.c:165
 #, c-format
-msgid ""
-"\n"
-"Default compiled-in device cipher parameters:\n"
-"\tloop-AES: %s, Key %d bits\n"
-"\tplain: %s, Key: %d bits, Password hashing: %s\n"
-"\tLUKS1: %s, Key: %d bits, LUKS header hashing: %s, RNG: %s\n"
+msgid "Wrong VERITY UUID format provided on device %s."
 msgstr ""
 
-#: src/cryptsetup.c:1437 src/veritysetup.c:460
+#: lib/verity/verity.c:198
 #, c-format
-msgid "%s: requires %s as arguments"
+msgid "Error during update of verity header on device %s."
 msgstr ""
 
-#: src/cryptsetup.c:1470 src/veritysetup.c:368 src/cryptsetup_reencrypt.c:1253
-msgid "Show this help message"
+#: lib/verity/verity.c:256
+msgid "Root hash signature verification is not supported."
 msgstr ""
 
-#: src/cryptsetup.c:1471 src/veritysetup.c:369 src/cryptsetup_reencrypt.c:1254
-msgid "Display brief usage"
+#: lib/verity/verity.c:267
+msgid "Errors cannot be repaired with FEC device."
 msgstr ""
 
-#: src/cryptsetup.c:1475 src/veritysetup.c:373 src/cryptsetup_reencrypt.c:1258
-msgid "Help options:"
+#: lib/verity/verity.c:269
+#, c-format
+msgid "Found %u repairable errors with FEC device."
 msgstr ""
 
-#: src/cryptsetup.c:1476 src/veritysetup.c:374 src/cryptsetup_reencrypt.c:1259
-msgid "Print package version"
+#: lib/verity/verity.c:308
+msgid "Kernel does not support dm-verity mapping."
 msgstr ""
 
-#: src/cryptsetup.c:1477 src/veritysetup.c:375 src/cryptsetup_reencrypt.c:1260
-msgid "Shows more detailed error messages"
+#: lib/verity/verity.c:312
+msgid "Kernel does not support dm-verity signature option."
 msgstr ""
 
-#: src/cryptsetup.c:1478 src/veritysetup.c:376 src/cryptsetup_reencrypt.c:1261
-msgid "Show debug messages"
+#: lib/verity/verity.c:323
+msgid "Verity device detected corruption after activation."
 msgstr ""
 
-#: src/cryptsetup.c:1479 src/cryptsetup_reencrypt.c:1263
-msgid "The cipher used to encrypt the disk (see /proc/crypto)"
+#: lib/verity/verity_hash.c:59
+#, c-format
+msgid "Spare area is not zeroed at position %<PRIu64>."
 msgstr ""
 
-#: src/cryptsetup.c:1480 src/cryptsetup_reencrypt.c:1265
-msgid "The hash used to create the encryption key from the passphrase"
+#: lib/verity/verity_hash.c:163 lib/verity/verity_hash.c:290
+#: lib/verity/verity_hash.c:303
+msgid "Device offset overflow."
 msgstr ""
 
-#: src/cryptsetup.c:1481
-msgid "Verifies the passphrase by asking for it twice"
+#: lib/verity/verity_hash.c:203
+#, c-format
+msgid "Verification failed at position %<PRIu64>."
 msgstr ""
 
-#: src/cryptsetup.c:1482 src/cryptsetup_reencrypt.c:1267
-msgid "Read the key from a file."
+#: lib/verity/verity_hash.c:276
+msgid "Invalid size parameters for verity device."
 msgstr ""
 
-#: src/cryptsetup.c:1483
-msgid "Read the volume (master) key from file."
+#: lib/verity/verity_hash.c:296
+msgid "Hash area overflow."
 msgstr ""
 
-#: src/cryptsetup.c:1484
-msgid "Dump volume (master) key instead of keyslots info."
+#: lib/verity/verity_hash.c:373
+msgid "Verification of data area failed."
 msgstr ""
 
-#: src/cryptsetup.c:1485 src/cryptsetup_reencrypt.c:1264
-msgid "The size of the encryption key"
+#: lib/verity/verity_hash.c:378
+msgid "Verification of root hash failed."
 msgstr ""
 
-#: src/cryptsetup.c:1485 src/cryptsetup_reencrypt.c:1264
-msgid "BITS"
+#: lib/verity/verity_hash.c:384
+msgid "Input/output error while creating hash area."
 msgstr ""
 
-#: src/cryptsetup.c:1486 src/cryptsetup_reencrypt.c:1278
-msgid "Limits the read from keyfile"
+#: lib/verity/verity_hash.c:386
+msgid "Creation of hash area failed."
 msgstr ""
 
-#: src/cryptsetup.c:1486 src/cryptsetup.c:1487 src/cryptsetup.c:1488
-#: src/cryptsetup.c:1489 src/veritysetup.c:379 src/veritysetup.c:380
-#: src/veritysetup.c:382 src/cryptsetup_reencrypt.c:1277
-#: src/cryptsetup_reencrypt.c:1278 src/cryptsetup_reencrypt.c:1279
-#: src/cryptsetup_reencrypt.c:1280
-msgid "bytes"
+#: lib/verity/verity_hash.c:433
+#, c-format
+msgid ""
+"WARNING: Kernel cannot activate device if data block size exceeds page size "
+"(%u)."
 msgstr ""
 
-#: src/cryptsetup.c:1487 src/cryptsetup_reencrypt.c:1277
-msgid "Number of bytes to skip in keyfile"
+#: lib/verity/verity_fec.c:131
+msgid "Failed to allocate RS context."
 msgstr ""
 
-#: src/cryptsetup.c:1488
-msgid "Limits the read from newly added keyfile"
+#: lib/verity/verity_fec.c:146
+msgid "Failed to allocate buffer."
 msgstr ""
 
-#: src/cryptsetup.c:1489
-msgid "Number of bytes to skip in newly added keyfile"
+#: lib/verity/verity_fec.c:156
+#, c-format
+msgid "Failed to read RS block %<PRIu64> byte %d."
 msgstr ""
 
-#: src/cryptsetup.c:1490
-msgid "Slot number for new key (default is first free)"
+#: lib/verity/verity_fec.c:169
+#, c-format
+msgid "Failed to read parity for RS block %<PRIu64>."
 msgstr ""
 
-#: src/cryptsetup.c:1491
-msgid "The size of the device"
+#: lib/verity/verity_fec.c:177
+#, c-format
+msgid "Failed to repair parity for block %<PRIu64>."
 msgstr ""
 
-#: src/cryptsetup.c:1491 src/cryptsetup.c:1492 src/cryptsetup.c:1493
-#: src/cryptsetup.c:1499
-msgid "SECTORS"
+#: lib/verity/verity_fec.c:188
+#, c-format
+msgid "Failed to write parity for RS block %<PRIu64>."
 msgstr ""
 
-#: src/cryptsetup.c:1492
-msgid "The start offset in the backend device"
+#: lib/verity/verity_fec.c:223
+msgid "Block sizes must match for FEC."
 msgstr ""
 
-#: src/cryptsetup.c:1493
-msgid "How many sectors of the encrypted data to skip at the beginning"
+#: lib/verity/verity_fec.c:229
+msgid "Invalid number of parity bytes."
 msgstr ""
 
-#: src/cryptsetup.c:1494
-msgid "Create a readonly mapping"
+#: lib/verity/verity_fec.c:265
+#, c-format
+msgid "Failed to determine size for device %s."
 msgstr ""
 
-#: src/cryptsetup.c:1495 src/cryptsetup_reencrypt.c:1268
-msgid "PBKDF2 iteration time for LUKS (in ms)"
+#: lib/integrity/integrity.c:271 lib/integrity/integrity.c:343
+msgid "Kernel does not support dm-integrity mapping."
 msgstr ""
 
-#: src/cryptsetup.c:1495 src/cryptsetup_reencrypt.c:1268
-msgid "msecs"
+#: lib/integrity/integrity.c:277
+msgid "Kernel does not support dm-integrity fixed metadata alignment."
 msgstr ""
 
-#: src/cryptsetup.c:1496 src/cryptsetup_reencrypt.c:1269
-msgid "Do not ask for confirmation"
+#: lib/luks2/luks2_disk_metadata.c:383 lib/luks2/luks2_json_metadata.c:959
+#: lib/luks2/luks2_json_metadata.c:1244
+#, c-format
+msgid "Failed to acquire write lock on device %s."
 msgstr ""
 
-#: src/cryptsetup.c:1497
-msgid "Timeout for interactive passphrase prompt (in seconds)"
+#: lib/luks2/luks2_disk_metadata.c:392
+msgid ""
+"Detected attempt for concurrent LUKS2 metadata update. Aborting operation."
 msgstr ""
 
-#: src/cryptsetup.c:1497
-msgid "secs"
+#: lib/luks2/luks2_disk_metadata.c:691 lib/luks2/luks2_disk_metadata.c:712
+msgid ""
+"Device contains ambiguous signatures, cannot auto-recover LUKS2.\n"
+"Please run \"cryptsetup repair\" for recovery."
 msgstr ""
 
-#: src/cryptsetup.c:1498 src/cryptsetup_reencrypt.c:1270
-msgid "How often the input of the passphrase can be retried"
+#: lib/luks2/luks2_json_format.c:227
+msgid "Requested data offset is too small."
 msgstr ""
 
-#: src/cryptsetup.c:1499
-msgid "Align payload at <n> sector boundaries - for luksFormat"
+#: lib/luks2/luks2_json_format.c:271
+#, c-format
+msgid ""
+"WARNING: keyslots area (%<PRIu64> bytes) is very small, available LUKS2 "
+"keyslot count is very limited.\n"
 msgstr ""
 
-#: src/cryptsetup.c:1500
-msgid "File with LUKS header and keyslots backup."
+#: lib/luks2/luks2_json_metadata.c:946 lib/luks2/luks2_json_metadata.c:1074
+#: lib/luks2/luks2_json_metadata.c:1150 lib/luks2/luks2_keyslot_luks2.c:92
+#: lib/luks2/luks2_keyslot_luks2.c:114
+#, c-format
+msgid "Failed to acquire read lock on device %s."
 msgstr ""
 
-#: src/cryptsetup.c:1501 src/cryptsetup_reencrypt.c:1271
-msgid "Use /dev/random for generating volume key."
+#: lib/luks2/luks2_json_metadata.c:1167
+#, c-format
+msgid "Forbidden LUKS2 requirements detected in backup %s."
 msgstr ""
 
-#: src/cryptsetup.c:1502 src/cryptsetup_reencrypt.c:1272
-msgid "Use /dev/urandom for generating volume key."
+#: lib/luks2/luks2_json_metadata.c:1208
+msgid "Data offset differ on device and backup, restore failed."
 msgstr ""
 
-#: src/cryptsetup.c:1503
-msgid "Share device with another non-overlapping crypt segment."
+#: lib/luks2/luks2_json_metadata.c:1214
+msgid ""
+"Binary header with keyslot areas size differ on device and backup, restore "
+"failed."
 msgstr ""
 
-#: src/cryptsetup.c:1504 src/veritysetup.c:385
-msgid "UUID for device to use."
+#: lib/luks2/luks2_json_metadata.c:1221
+#, c-format
+msgid "Device %s %s%s%s%s"
 msgstr ""
 
-#: src/cryptsetup.c:1505
-msgid "Allow discards (aka TRIM) requests for device."
+#: lib/luks2/luks2_json_metadata.c:1222
+msgid ""
+"does not contain LUKS2 header. Replacing header can destroy data on that "
+"device."
 msgstr ""
 
-#: src/cryptsetup.c:1506
-msgid "Device or file with separated LUKS header."
+#: lib/luks2/luks2_json_metadata.c:1223
+msgid ""
+"already contains LUKS2 header. Replacing header will destroy existing "
+"keyslots."
 msgstr ""
 
-#: src/cryptsetup.c:1507
-msgid "Do not activate device, just check passphrase."
+#: lib/luks2/luks2_json_metadata.c:1225
+msgid ""
+"\n"
+"WARNING: unknown LUKS2 requirements detected in real device header!\n"
+"Replacing header with backup may corrupt the data on that device!"
 msgstr ""
 
-#: src/cryptsetup.c:1508
-msgid "Use hidden header (hidden TCRYPT device)."
+#: lib/luks2/luks2_json_metadata.c:1227
+msgid ""
+"\n"
+"WARNING: Unfinished offline reencryption detected on the device!\n"
+"Replacing header with backup may corrupt data."
 msgstr ""
 
-#: src/cryptsetup.c:1509
-msgid "Device is system TCRYPT drive (with bootloader)."
+#: lib/luks2/luks2_json_metadata.c:1323
+#, c-format
+msgid "Ignored unknown flag %s."
 msgstr ""
 
-#: src/cryptsetup.c:1510
-msgid "Use backup (secondary) TCRYPT header."
+#: lib/luks2/luks2_json_metadata.c:2010 lib/luks2/luks2_reencrypt.c:1746
+#, c-format
+msgid "Missing key for dm-crypt segment %u"
 msgstr ""
 
-#: src/cryptsetup.c:1511
-msgid "Scan also for VeraCrypt compatible device."
+#: lib/luks2/luks2_json_metadata.c:2022 lib/luks2/luks2_reencrypt.c:1764
+msgid "Failed to set dm-crypt segment."
 msgstr ""
 
-#: src/cryptsetup.c:1512
-msgid "Type of device metadata: luks, plain, loopaes, tcrypt."
+#: lib/luks2/luks2_json_metadata.c:2028 lib/luks2/luks2_reencrypt.c:1770
+msgid "Failed to set dm-linear segment."
 msgstr ""
 
-#: src/cryptsetup.c:1513
-msgid "Disable password quality check (if enabled)."
+#: lib/luks2/luks2_json_metadata.c:2155
+msgid "Unsupported device integrity configuration."
 msgstr ""
 
-#: src/cryptsetup.c:1514
-msgid "Use dm-crypt same_cpu_crypt performance compatibility option."
+#: lib/luks2/luks2_json_metadata.c:2241
+msgid "Reencryption in-progress. Cannot deactivate device."
 msgstr ""
 
-#: src/cryptsetup.c:1515
-msgid "Use dm-crypt submit_from_crypt_cpus performance compatibility option."
+#: lib/luks2/luks2_json_metadata.c:2252 lib/luks2/luks2_reencrypt.c:3190
+#, c-format
+msgid "Failed to replace suspended device %s with dm-error target."
 msgstr ""
 
-#: src/cryptsetup.c:1531 src/veritysetup.c:402
-msgid "[OPTION...] <action> <action-specific>"
+#: lib/luks2/luks2_json_metadata.c:2332
+msgid "Failed to read LUKS2 requirements."
 msgstr ""
 
-#: src/cryptsetup.c:1572
-msgid "Running in FIPS mode.\n"
+#: lib/luks2/luks2_json_metadata.c:2339
+msgid "Unmet LUKS2 requirements detected."
 msgstr ""
 
-#: src/cryptsetup.c:1581 src/veritysetup.c:439
-msgid "Argument <action> missing."
+#: lib/luks2/luks2_json_metadata.c:2347
+msgid ""
+"Operation incompatible with device marked for legacy reencryption. Aborting."
 msgstr ""
 
-#: src/cryptsetup.c:1634 src/veritysetup.c:445
-msgid "Unknown action."
+#: lib/luks2/luks2_json_metadata.c:2349
+msgid ""
+"Operation incompatible with device marked for LUKS2 reencryption. Aborting."
 msgstr ""
 
-#: src/cryptsetup.c:1644
-msgid "Option --shared is allowed only for open of plain device.\n"
+#: lib/luks2/luks2_keyslot.c:547 lib/luks2/luks2_keyslot.c:584
+msgid "Not enough available memory to open a keyslot."
 msgstr ""
 
-#: src/cryptsetup.c:1649
-msgid "Option --allow-discards is allowed only for open operation.\n"
+#: lib/luks2/luks2_keyslot.c:549 lib/luks2/luks2_keyslot.c:586
+msgid "Keyslot open failed."
 msgstr ""
 
-#: src/cryptsetup.c:1657
-msgid ""
-"Option --key-size is allowed only for luksFormat, open and benchmark.\n"
-"To limit read from keyfile use --keyfile-size=(bytes)."
+#: lib/luks2/luks2_keyslot_luks2.c:53 lib/luks2/luks2_keyslot_luks2.c:108
+#, c-format
+msgid "Cannot use %s-%s cipher for keyslot encryption."
 msgstr ""
 
-#: src/cryptsetup.c:1664
-msgid ""
-"Option --test-passphrase is allowed only for open of LUKS and TCRYPT "
-"devices.\n"
+#: lib/luks2/luks2_keyslot_luks2.c:480
+msgid "No space for new keyslot."
 msgstr ""
 
-#: src/cryptsetup.c:1669 src/cryptsetup_reencrypt.c:1341
-msgid "Key size must be a multiple of 8 bits"
+#: lib/luks2/luks2_luks1_convert.c:482
+#, c-format
+msgid "Cannot check status of device with uuid: %s."
 msgstr ""
 
-#: src/cryptsetup.c:1676 src/cryptsetup_reencrypt.c:1346
-msgid "Key slot is invalid."
+#: lib/luks2/luks2_luks1_convert.c:508
+msgid "Unable to convert header with LUKSMETA additional metadata."
 msgstr ""
 
-#: src/cryptsetup.c:1683
-msgid "Option --key-file takes precedence over specified key file argument.\n"
+#: lib/luks2/luks2_luks1_convert.c:548
+msgid "Unable to move keyslot area. Not enough space."
 msgstr ""
 
-#: src/cryptsetup.c:1691 src/veritysetup.c:467 src/cryptsetup_reencrypt.c:1330
-msgid "Negative number for option not permitted."
+#: lib/luks2/luks2_luks1_convert.c:599
+msgid "Unable to move keyslot area. LUKS2 keyslots area too small."
 msgstr ""
 
-#: src/cryptsetup.c:1695 src/cryptsetup_reencrypt.c:1324
-#: src/cryptsetup_reencrypt.c:1350
-msgid "Only one of --use-[u]random options is allowed."
+#: lib/luks2/luks2_luks1_convert.c:605 lib/luks2/luks2_luks1_convert.c:887
+msgid "Unable to move keyslot area."
 msgstr ""
 
-#: src/cryptsetup.c:1699
-msgid "Option --use-[u]random is allowed only for luksFormat."
+#: lib/luks2/luks2_luks1_convert.c:697
+msgid ""
+"Cannot convert to LUKS1 format - default segment encryption sector size is "
+"not 512 bytes."
 msgstr ""
 
-#: src/cryptsetup.c:1703
-msgid "Option --uuid is allowed only for luksFormat and luksUUID."
+#: lib/luks2/luks2_luks1_convert.c:705
+msgid ""
+"Cannot convert to LUKS1 format - key slot digests are not LUKS1 compatible."
 msgstr ""
 
-#: src/cryptsetup.c:1707
-msgid "Option --align-payload is allowed only for luksFormat."
+#: lib/luks2/luks2_luks1_convert.c:717
+#, c-format
+msgid "Cannot convert to LUKS1 format - device uses wrapped key cipher %s."
 msgstr ""
 
-#: src/cryptsetup.c:1713
-msgid ""
-"Option --skip is supported only for open of plain and loopaes devices.\n"
+#: lib/luks2/luks2_luks1_convert.c:725
+#, c-format
+msgid "Cannot convert to LUKS1 format - LUKS2 header contains %u token(s)."
 msgstr ""
 
-#: src/cryptsetup.c:1719
-msgid ""
-"Option --offset is supported only for open of plain and loopaes devices.\n"
+#: lib/luks2/luks2_luks1_convert.c:739
+#, c-format
+msgid "Cannot convert to LUKS1 format - keyslot %u is in invalid state."
 msgstr ""
 
-#: src/cryptsetup.c:1725
+#: lib/luks2/luks2_luks1_convert.c:744
+#, c-format
 msgid ""
-"Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only "
-"for TCRYPT device.\n"
+"Cannot convert to LUKS1 format - slot %u (over maximum slots) is still "
+"active."
 msgstr ""
 
-#: src/cryptsetup.c:1730
-msgid "Option --tcrypt-hidden cannot be combined with --allow-discards.\n"
+#: lib/luks2/luks2_luks1_convert.c:749
+#, c-format
+msgid "Cannot convert to LUKS1 format - keyslot %u is not LUKS1 compatible."
 msgstr ""
 
-#: src/cryptsetup.c:1735
-msgid "Option --veracrypt is supported only for TCRYPT device type.\n"
+#: lib/luks2/luks2_reencrypt.c:892
+#, c-format
+msgid "Hotzone size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr ""
 
-#: src/veritysetup.c:58
-msgid "Invalid salt string specified.\n"
+#: lib/luks2/luks2_reencrypt.c:897
+#, c-format
+msgid "Device size must be multiple of calculated zone alignment (%zu bytes)."
 msgstr ""
 
-#: src/veritysetup.c:88
+#: lib/luks2/luks2_reencrypt.c:941
 #, c-format
-msgid "Cannot create hash image %s for writing.\n"
+msgid "Unsupported resilience mode %s"
 msgstr ""
 
-#: src/veritysetup.c:148
-msgid "Invalid root hash string specified.\n"
+#: lib/luks2/luks2_reencrypt.c:1158 lib/luks2/luks2_reencrypt.c:1313
+#: lib/luks2/luks2_reencrypt.c:1396 lib/luks2/luks2_reencrypt.c:1430
+#: lib/luks2/luks2_reencrypt.c:3030
+msgid "Failed to initialize old segment storage wrapper."
 msgstr ""
 
-#: src/veritysetup.c:308
-msgid "<data_device> <hash_device>"
+#: lib/luks2/luks2_reencrypt.c:1172 lib/luks2/luks2_reencrypt.c:1291
+msgid "Failed to initialize new segment storage wrapper."
 msgstr ""
 
-#: src/veritysetup.c:308
-msgid "format device"
+#: lib/luks2/luks2_reencrypt.c:1340
+msgid "Failed to read checksums for current hotzone."
 msgstr ""
 
-#: src/veritysetup.c:309
-msgid "<data_device> <hash_device> <root_hash>"
+#: lib/luks2/luks2_reencrypt.c:1347 lib/luks2/luks2_reencrypt.c:3038
+#, c-format
+msgid "Failed to read hotzone area starting at %<PRIu64>."
 msgstr ""
 
-#: src/veritysetup.c:309
-msgid "verify device"
+#: lib/luks2/luks2_reencrypt.c:1366
+#, c-format
+msgid "Failed to decrypt sector %zu."
 msgstr ""
 
-#: src/veritysetup.c:310
-msgid "<name> <data_device> <hash_device> <root_hash>"
+#: lib/luks2/luks2_reencrypt.c:1372
+#, c-format
+msgid "Failed to recover sector %zu."
 msgstr ""
 
-#: src/veritysetup.c:310
-msgid "create active device"
+#: lib/luks2/luks2_reencrypt.c:1867
+#, c-format
+msgid ""
+"Source and target device sizes don't match. Source %<PRIu64>, target: "
+"%<PRIu64>."
 msgstr ""
 
-#: src/veritysetup.c:311
-msgid "remove (deactivate) device"
+#: lib/luks2/luks2_reencrypt.c:1965
+#, c-format
+msgid "Failed to activate hotzone device %s."
 msgstr ""
 
-#: src/veritysetup.c:312
-msgid "show active device status"
+#: lib/luks2/luks2_reencrypt.c:1982
+#, c-format
+msgid "Failed to activate overlay device %s with actual origin table."
 msgstr ""
 
-#: src/veritysetup.c:313
-msgid "<hash_device>"
+#: lib/luks2/luks2_reencrypt.c:1989
+#, c-format
+msgid "Failed to load new mapping for device %s."
 msgstr ""
 
-#: src/veritysetup.c:313
-msgid "show on-disk information"
+#: lib/luks2/luks2_reencrypt.c:2060
+msgid "Failed to refresh reencryption devices stack."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:2216
+msgid "Failed to set new keyslots area size."
 msgstr ""
 
-#: src/veritysetup.c:332
+#: lib/luks2/luks2_reencrypt.c:2318
 #, c-format
 msgid ""
-"\n"
-"<name> is the device to create under %s\n"
-"<data_device> is the data device\n"
-"<hash_device> is the device containing verification data\n"
-"<root_hash> hash of the root node on <hash_device>\n"
+"Data shift is not aligned to requested encryption sector size (%<PRIu32> "
+"bytes)."
 msgstr ""
 
-#: src/veritysetup.c:339
+#: lib/luks2/luks2_reencrypt.c:2339
 #, c-format
 msgid ""
-"\n"
-"Default compiled-in dm-verity parameters:\n"
-"\tHash: %s, Data block (bytes): %u, Hash block (bytes): %u, Salt size: %u, "
-"Hash format: %u\n"
+"Data device is not aligned to requested encryption sector size (%<PRIu32> "
+"bytes)."
 msgstr ""
 
-#: src/veritysetup.c:377
-msgid "Do not use verity superblock"
+#: lib/luks2/luks2_reencrypt.c:2360
+#, c-format
+msgid ""
+"Data shift (%<PRIu64> sectors) is less than future data offset (%<PRIu64> "
+"sectors)."
 msgstr ""
 
-#: src/veritysetup.c:378
-msgid "Format type (1 - normal, 0 - original Chrome OS)"
+#: lib/luks2/luks2_reencrypt.c:2366 lib/luks2/luks2_reencrypt.c:2779
+#: lib/luks2/luks2_reencrypt.c:2800
+#, c-format
+msgid "Failed to open %s in exclusive mode (already mapped or mounted)."
 msgstr ""
 
-#: src/veritysetup.c:378
-msgid "number"
+#: lib/luks2/luks2_reencrypt.c:2534
+msgid "Device not marked for LUKS2 reencryption."
 msgstr ""
 
-#: src/veritysetup.c:379
-msgid "Block size on the data device"
+#: lib/luks2/luks2_reencrypt.c:2540 lib/luks2/luks2_reencrypt.c:3295
+msgid "Failed to load LUKS2 reencryption context."
 msgstr ""
 
-#: src/veritysetup.c:380
-msgid "Block size on the hash device"
+#: lib/luks2/luks2_reencrypt.c:2619
+msgid "Failed to get reencryption state."
 msgstr ""
 
-#: src/veritysetup.c:381
-msgid "The number of blocks in the data file"
+#: lib/luks2/luks2_reencrypt.c:2623
+msgid "Device is not in reencryption."
 msgstr ""
 
-#: src/veritysetup.c:381
-msgid "blocks"
+#: lib/luks2/luks2_reencrypt.c:2630
+msgid "Reencryption process is already running."
 msgstr ""
 
-#: src/veritysetup.c:382
-msgid "Starting offset on the hash device"
+#: lib/luks2/luks2_reencrypt.c:2632
+msgid "Failed to acquire reencryption lock."
 msgstr ""
 
-#: src/veritysetup.c:383
-msgid "Hash algorithm"
+#: lib/luks2/luks2_reencrypt.c:2650
+msgid "Cannot proceed with reencryption. Run reencryption recovery first."
 msgstr ""
 
-#: src/veritysetup.c:383
-msgid "string"
+#: lib/luks2/luks2_reencrypt.c:2750
+msgid "Active device size and requested reencryption size don't match."
 msgstr ""
 
-#: src/veritysetup.c:384
-msgid "Salt"
+#: lib/luks2/luks2_reencrypt.c:2764
+msgid "Illegal device size requested in reencryption parameters."
 msgstr ""
 
-#: src/veritysetup.c:384
-msgid "hex string"
+#: lib/luks2/luks2_reencrypt.c:2834
+msgid "Reencryption in-progress. Cannot perform recovery."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:147
-#, c-format
-msgid "Cannot exclusively open %s, device in use.\n"
+#: lib/luks2/luks2_reencrypt.c:2906
+msgid "LUKS2 reencryption already initialized in metadata."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:151
-#, c-format
-msgid "Cannot open device %s\n"
+#: lib/luks2/luks2_reencrypt.c:2913
+msgid "Failed to initialize LUKS2 reencryption in metadata."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:161 src/cryptsetup_reencrypt.c:893
-msgid "Allocation of aligned memory failed.\n"
+#: lib/luks2/luks2_reencrypt.c:3004
+msgid "Failed to set device segments for next reencryption hotzone."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:168
-#, c-format
-msgid "Cannot read device %s.\n"
+#: lib/luks2/luks2_reencrypt.c:3046
+msgid "Failed to write reencryption resilience metadata."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:179
-#, c-format
-msgid "Marking LUKS device %s unusable.\n"
+#: lib/luks2/luks2_reencrypt.c:3053
+msgid "Decryption failed."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:184
+#: lib/luks2/luks2_reencrypt.c:3058
 #, c-format
-msgid "Marking LUKS device %s usable.\n"
+msgid "Failed to write hotzone area starting at %<PRIu64>."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:3063
+msgid "Failed to sync data."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:3071
+msgid "Failed to update metadata after current reencryption hotzone completed."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:3138
+msgid "Failed to write LUKS2 metadata."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:3161
+msgid "Failed to wipe backup segment data."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:3174
+msgid "Failed to disable reencryption requirement flag."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:200
+#: lib/luks2/luks2_reencrypt.c:3182
 #, c-format
-msgid "Cannot write device %s.\n"
+msgid ""
+"Fatal error while reencrypting chunk starting at %<PRIu64>, %<PRIu64> "
+"sectors long."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:3191
+msgid "Do not resume the device unless replaced with error target manually."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:3240
+msgid "Cannot proceed with reencryption. Unexpected reencryption status."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:3246
+msgid "Missing or invalid reencrypt context."
+msgstr ""
+
+#: lib/luks2/luks2_reencrypt.c:3253
+msgid "Failed to initialize reencryption device stack."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:281
-msgid "Cannot write reencryption log file.\n"
+#: lib/luks2/luks2_reencrypt.c:3272 lib/luks2/luks2_reencrypt.c:3308
+msgid "Failed to update reencryption context."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:337
-msgid "Cannot read reencryption log file.\n"
+#: lib/luks2/luks2_token.c:262
+msgid "No free token slot."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:374
+#: lib/luks2/luks2_token.c:269
 #, c-format
-msgid "Log file %s exists, resuming reencryption.\n"
+msgid "Failed to create builtin token %s."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:403
-msgid "Activating temporary device using old LUKS header.\n"
+#: src/cryptsetup.c:164
+msgid "Can't do passphrase verification on non-tty inputs."
+msgstr ""
+
+#: src/cryptsetup.c:221
+msgid "Keyslot encryption parameters can be set only for LUKS2 device."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:414
-msgid "Activating temporary device using new LUKS header.\n"
+#: src/cryptsetup.c:251 src/cryptsetup.c:959 src/cryptsetup.c:1269
+#: src/cryptsetup.c:3145 src/cryptsetup_reencrypt.c:723
+#: src/cryptsetup_reencrypt.c:793
+msgid "No known cipher specification pattern detected."
+msgstr ""
+
+#: src/cryptsetup.c:259
+msgid ""
+"WARNING: The --hash parameter is being ignored in plain mode with keyfile "
+"specified.\n"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:424
-msgid "Activation of temporary devices failed.\n"
+#: src/cryptsetup.c:267
+msgid ""
+"WARNING: The --keyfile-size option is being ignored, the read size is the "
+"same as the encryption key size.\n"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:450
+#: src/cryptsetup.c:307
 #, c-format
-msgid "New LUKS header for device %s created.\n"
+msgid ""
+"Detected device signature(s) on %s. Proceeding further may damage existing "
+"data."
+msgstr ""
+
+#: src/cryptsetup.c:313 src/cryptsetup.c:1090 src/cryptsetup.c:1142
+#: src/cryptsetup.c:1246 src/cryptsetup.c:1319 src/cryptsetup.c:1974
+#: src/cryptsetup.c:2682 src/cryptsetup.c:2805 src/integritysetup.c:233
+msgid "Operation aborted.\n"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:458
+#: src/cryptsetup.c:381
+msgid "Option --key-file is required."
+msgstr ""
+
+#: src/cryptsetup.c:434
+msgid "Enter VeraCrypt PIM: "
+msgstr ""
+
+#: src/cryptsetup.c:443
+msgid "Invalid PIM value: parse error."
+msgstr ""
+
+#: src/cryptsetup.c:446
+msgid "Invalid PIM value: 0."
+msgstr ""
+
+#: src/cryptsetup.c:449
+msgid "Invalid PIM value: outside of range."
+msgstr ""
+
+#: src/cryptsetup.c:472
+msgid "No device header detected with this passphrase."
+msgstr ""
+
+#: src/cryptsetup.c:541
 #, c-format
-msgid "Activated keyslot %i.\n"
+msgid "Device %s is not a valid BITLK device."
+msgstr ""
+
+#: src/cryptsetup.c:576
+msgid ""
+"Header dump with volume key is sensitive information\n"
+"which allows access to encrypted partition without passphrase.\n"
+"This dump should be always stored encrypted on safe place."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:484
+#: src/cryptsetup.c:673
 #, c-format
-msgid "LUKS header backup of device %s created.\n"
+msgid "Device %s is still active and scheduled for deferred removal.\n"
+msgstr ""
+
+#: src/cryptsetup.c:701
+msgid ""
+"Resize of active device requires volume key in keyring but --disable-keyring "
+"option is set."
+msgstr ""
+
+#: src/cryptsetup.c:838
+msgid "Benchmark interrupted."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:532
-msgid "Creation of LUKS backup headers failed.\n"
+#: src/cryptsetup.c:859
+#, c-format
+msgid "PBKDF2-%-9s     N/A\n"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:634
+#: src/cryptsetup.c:861
 #, c-format
-msgid "Cannot restore LUKS header on device %s.\n"
+msgid "PBKDF2-%-9s %7u iterations per second for %zu-bit key\n"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:636
+#: src/cryptsetup.c:875
 #, c-format
-msgid "LUKS header on device %s restored.\n"
+msgid "%-10s N/A\n"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:669
+#: src/cryptsetup.c:877
 #, c-format
 msgid ""
-"Progress: %5.1f%%, ETA %02llu:%02llu, %4llu MiB written, speed %5.1f MiB/s%s"
+"%-10s %4u iterations, %5u memory, %1u parallel threads (CPUs) for %zu-bit "
+"key (requested %u ms time)\n"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:708 src/cryptsetup_reencrypt.c:784
-#: src/cryptsetup_reencrypt.c:826
-msgid "Cannot seek to device offset.\n"
+#: src/cryptsetup.c:901
+msgid "Result of benchmark is not reliable."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:865 src/cryptsetup_reencrypt.c:871
-msgid "Cannot open temporary LUKS header file.\n"
+#: src/cryptsetup.c:951
+msgid "# Tests are approximate using memory only (no storage IO).\n"
+msgstr ""
+
+#. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
+#: src/cryptsetup.c:971
+#, c-format
+msgid "#%*s Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:876 src/cryptsetup_reencrypt.c:881
-msgid "Cannot get device size.\n"
+#: src/cryptsetup.c:975
+#, c-format
+msgid "Cipher %s (with %i bits key) is not available."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:919
-msgid "Interrupted by a signal.\n"
+#. TRANSLATORS: The string is header of a table and must be exactly (right side) aligned.
+#: src/cryptsetup.c:994
+msgid "#     Algorithm |       Key |      Encryption |      Decryption\n"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:921
-msgid "IO error during reencryption.\n"
+#: src/cryptsetup.c:1003
+msgid "N/A"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1028
+#: src/cryptsetup.c:1083
 msgid ""
-"Key file can be used only with --key-slot or with exactly one key slot "
-"active.\n"
+"Seems device does not require reencryption recovery.\n"
+"Do you want to proceed anyway?"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1072 src/cryptsetup_reencrypt.c:1087
-#, c-format
-msgid "Enter passphrase for key slot %u: "
+#: src/cryptsetup.c:1089
+msgid "Really proceed with LUKS2 reencryption recovery?"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1136
-msgid "Cannot open reencryption log file.\n"
+#: src/cryptsetup.c:1098
+msgid "Enter passphrase for reencryption recovery: "
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1262
-msgid "Reencryption block size"
+#: src/cryptsetup.c:1141
+msgid "Really try to repair LUKS device header?"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1262
-msgid "MiB"
+#: src/cryptsetup.c:1160 src/integritysetup.c:146
+msgid ""
+"Wiping device to initialize integrity checksum.\n"
+"You can interrupt this by pressing CTRL+c (rest of not wiped device will "
+"contain invalid checksum).\n"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1266
-msgid "Do not change key, no data area reencryption."
+#: src/cryptsetup.c:1182 src/integritysetup.c:168
+#, c-format
+msgid "Cannot deactivate temporary device %s."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1273
-msgid "Use direct-io when accessing devices."
+#: src/cryptsetup.c:1231
+msgid "Integrity option can be used only for LUKS2 format."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1274
-msgid "Use fsync after each block."
+#: src/cryptsetup.c:1236 src/cryptsetup.c:1296
+msgid "Unsupported LUKS2 metadata size options."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1275
-msgid "Update log file after every block."
+#: src/cryptsetup.c:1253
+#, c-format
+msgid "Cannot create header file %s."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1276
-msgid "Use only this slot (others will be disabled)."
+#: src/cryptsetup.c:1276 src/integritysetup.c:195 src/integritysetup.c:204
+#: src/integritysetup.c:213 src/integritysetup.c:284 src/integritysetup.c:293
+#: src/integritysetup.c:303
+msgid "No known integrity specification pattern detected."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1279
-msgid "Reduce data device size (move data offset). DANGEROUS!"
+#: src/cryptsetup.c:1289
+#, c-format
+msgid "Cannot use %s as on-disk header."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1280
-msgid "Use only specified device size (ignore rest of device). DANGEROUS!"
+#: src/cryptsetup.c:1313 src/integritysetup.c:227
+#, c-format
+msgid "This will overwrite data on %s irrevocably."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1281
-msgid "Create new header on not encrypted device."
+#: src/cryptsetup.c:1354 src/cryptsetup.c:1688 src/cryptsetup.c:1755
+#: src/cryptsetup.c:1857 src/cryptsetup.c:1923 src/cryptsetup_reencrypt.c:553
+msgid "Failed to set pbkdf parameters."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1282
-msgid "Permanently decrypt device (remove encryption)."
+#: src/cryptsetup.c:1439
+msgid "Reduced data offset is allowed only for detached LUKS header."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1298
-msgid "[OPTION...] <device>"
+#: src/cryptsetup.c:1450 src/cryptsetup.c:1761
+msgid ""
+"Cannot determine volume key size for LUKS without keyslots, please use --key-"
+"size option."
+msgstr ""
+
+#: src/cryptsetup.c:1488
+msgid "Device activated but cannot make flags persistent."
+msgstr ""
+
+#: src/cryptsetup.c:1569 src/cryptsetup.c:1639
+#, c-format
+msgid "Keyslot %d is selected for deletion."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1312
+#: src/cryptsetup.c:1581 src/cryptsetup.c:1642
 msgid ""
-"WARNING: this is experimental code, it can completely break your data.\n"
+"This is the last keyslot. Device will become unusable after purging this key."
+msgstr ""
+
+#: src/cryptsetup.c:1582
+msgid "Enter any remaining passphrase: "
+msgstr ""
+
+#: src/cryptsetup.c:1583 src/cryptsetup.c:1644
+msgid "Operation aborted, the keyslot was NOT wiped.\n"
+msgstr ""
+
+#: src/cryptsetup.c:1621
+msgid "Enter passphrase to be deleted: "
+msgstr ""
+
+#: src/cryptsetup.c:1702 src/cryptsetup.c:1776 src/cryptsetup.c:1810
+msgid "Enter new passphrase for key slot: "
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1313
+#: src/cryptsetup.c:1793 src/cryptsetup_reencrypt.c:1343
 #, c-format
-msgid "Reencryption will change: volume key%s%s%s%s.\n"
+msgid "Enter any existing passphrase: "
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1314
-msgid ", set hash to "
+#: src/cryptsetup.c:1861
+msgid "Enter passphrase to be changed: "
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1315
-msgid ", set cipher to "
+#: src/cryptsetup.c:1877 src/cryptsetup_reencrypt.c:1329
+msgid "Enter new passphrase: "
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1320
-msgid "Argument required."
+#: src/cryptsetup.c:1927
+msgid "Enter passphrase for keyslot to be converted: "
+msgstr ""
+
+#: src/cryptsetup.c:1951
+msgid "Only one device argument for isLuks operation is supported."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1336
+#: src/cryptsetup.c:2001
 msgid ""
-"Only values between 1 MiB and 64 MiB allowed for reencryption block size."
+"The header dump with volume key is sensitive information\n"
+"that allows access to encrypted partition without a passphrase.\n"
+"This dump should be stored encrypted in a safe place."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1355 src/cryptsetup_reencrypt.c:1360
-msgid "Invalid device size specification."
+#: src/cryptsetup.c:2066
+#, c-format
+msgid "Keyslot %d does not contain unbound key."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1363
-msgid "Maximum device reduce size is 64 MiB."
+#: src/cryptsetup.c:2072
+msgid ""
+"The header dump with unbound key is sensitive information.\n"
+"This dump should be stored encrypted in a safe place."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1366
-msgid "Reduce size must be multiple of 512 bytes sector."
+#: src/cryptsetup.c:2207 src/cryptsetup.c:2228
+msgid "Option --header-backup-file is required."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1370
-msgid "Option --new must be used together with --reduce-device-size."
+#: src/cryptsetup.c:2258
+#, c-format
+msgid "%s is not cryptsetup managed device."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1374
-msgid "Option --keep-key can be used only with --hash or --iter-time."
+#: src/cryptsetup.c:2269
+#, c-format
+msgid "Refresh is not supported for device type %s"
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1378
-msgid "Option --new cannot be used together with --decrypt."
+#: src/cryptsetup.c:2311
+#, c-format
+msgid "Unrecognized metadata device type %s."
 msgstr ""
 
-#: src/cryptsetup_reencrypt.c:1382
-msgid "Option --decrypt is incompatible with specified parameters."
+#: src/cryptsetup.c:2314
+msgid "Command requires device and mapped name as arguments."
 msgstr ""
 
-#: src/utils_tools.c:151
-msgid "Error reading response from terminal.\n"
+#: src/cryptsetup.c:2336
+#, c-format
+msgid ""
+"This operation will erase all keyslots on device %s.\n"
+"Device will become unusable after this operation."
 msgstr ""
 
-#: src/utils_tools.c:173
-msgid "Command successful.\n"
+#: src/cryptsetup.c:2343
+msgid "Operation aborted, keyslots were NOT wiped.\n"
 msgstr ""
 
-#: src/utils_tools.c:191
+#: src/cryptsetup.c:2380
+msgid "Invalid LUKS type, only luks1 and luks2 are supported."
+msgstr ""
+
+#: src/cryptsetup.c:2398
 #, c-format
-msgid "Command failed with code %i"
+msgid "Device is already %s type."
 msgstr ""
 
-#: src/utils_password.c:42
+#: src/cryptsetup.c:2403
 #, c-format
-msgid "Cannot check password quality: %s\n"
+msgid "This operation will convert %s to %s format.\n"
+msgstr ""
+
+#: src/cryptsetup.c:2409
+msgid "Operation aborted, device was NOT converted.\n"
 msgstr ""
 
-#: src/utils_password.c:50
+#: src/cryptsetup.c:2449
+msgid "Option --priority, --label or --subsystem is missing."
+msgstr ""
+
+#: src/cryptsetup.c:2483 src/cryptsetup.c:2516 src/cryptsetup.c:2539
 #, c-format
-msgid ""
-"Password quality check failed:\n"
-" %s\n"
+msgid "Token %d is invalid."
+msgstr ""
+
+#: src/cryptsetup.c:2486 src/cryptsetup.c:2542
+#, c-format
+msgid "Token %d in use."
+msgstr ""
+
+#: src/cryptsetup.c:2493
+#, c-format
+msgid "Failed to add luks2-keyring token %d."
+msgstr ""
+
+#: src/cryptsetup.c:2502 src/cryptsetup.c:2564
+#, c-format
+msgid "Failed to assign token %d to keyslot %d."
+msgstr ""
+
+#: src/cryptsetup.c:2519
+#, c-format
+msgid "Token %d is not in use."
+msgstr ""
+
+#: src/cryptsetup.c:2554
+msgid "Failed to import token from file."
+msgstr ""
+
+#: src/cryptsetup.c:2579
+#, c-format
+msgid "Failed to get token %d for export."
+msgstr ""
+
+#: src/cryptsetup.c:2594
+msgid "--key-description parameter is mandatory for token add action."
+msgstr ""
+
+#: src/cryptsetup.c:2600 src/cryptsetup.c:2608
+msgid "Action requires specific token. Use --token-id parameter."
+msgstr ""
+
+#: src/cryptsetup.c:2613
+#, c-format
+msgid "Invalid token operation %s."
+msgstr ""
+
+#: src/cryptsetup.c:2668
+#, c-format
+msgid "Auto-detected active dm device '%s' for data device %s.\n"
+msgstr ""
+
+#: src/cryptsetup.c:2672
+#, c-format
+msgid "Device %s is not a block device.\n"
+msgstr ""
+
+#: src/cryptsetup.c:2674
+#, c-format
+msgid "Failed to auto-detect device %s holders."
+msgstr ""
+
+#: src/cryptsetup.c:2676
+#, c-format
+msgid ""
+"Unable to decide if device %s is activated or not.\n"
+"Are you sure you want to proceed with reencryption in offline mode?\n"
+"It may lead to data corruption if the device is actually activated.\n"
+"To run reencryption in online mode, use --active-name parameter instead.\n"
+msgstr ""
+
+#: src/cryptsetup.c:2756
+msgid "Invalid LUKS device type."
+msgstr ""
+
+#: src/cryptsetup.c:2761
+msgid ""
+"Encryption without detached header (--header) is not possible without data "
+"device size reduction (--reduce-device-size)."
+msgstr ""
+
+#: src/cryptsetup.c:2766
+msgid ""
+"Requested data offset must be less than or equal to half of --reduce-device-"
+"size parameter."
+msgstr ""
+
+#: src/cryptsetup.c:2775
+#, c-format
+msgid ""
+"Adjusting --reduce-device-size value to twice the --offset %<PRIu64> "
+"(sectors).\n"
+msgstr ""
+
+#: src/cryptsetup.c:2779
+msgid "Encryption is supported only for LUKS2 format."
+msgstr ""
+
+#: src/cryptsetup.c:2801
+#, c-format
+msgid ""
+"Detected LUKS device on %s. Do you want to encrypt that LUKS device again?"
+msgstr ""
+
+#: src/cryptsetup.c:2816
+#, c-format
+msgid "Temporary header file %s already exists. Aborting."
+msgstr ""
+
+#: src/cryptsetup.c:2818 src/cryptsetup.c:2825
+#, c-format
+msgid "Cannot create temporary header file %s."
+msgstr ""
+
+#: src/cryptsetup.c:2889
+#, c-format
+msgid "%s/%s is now active and ready for online encryption.\n"
+msgstr ""
+
+#: src/cryptsetup.c:3053 src/cryptsetup.c:3059
+msgid "Not enough free keyslots for reencryption."
+msgstr ""
+
+#: src/cryptsetup.c:3079 src/cryptsetup_reencrypt.c:1294
+msgid ""
+"Key file can be used only with --key-slot or with exactly one key slot "
+"active."
+msgstr ""
+
+#: src/cryptsetup.c:3088 src/cryptsetup_reencrypt.c:1341
+#: src/cryptsetup_reencrypt.c:1352
+#, c-format
+msgid "Enter passphrase for key slot %d: "
+msgstr ""
+
+#: src/cryptsetup.c:3096
+#, c-format
+msgid "Enter passphrase for key slot %u: "
+msgstr ""
+
+#: src/cryptsetup.c:3263
+msgid "Command requires device as argument."
+msgstr ""
+
+#: src/cryptsetup.c:3285
+msgid ""
+"Only LUKS2 format is currently supported. Please use cryptsetup-reencrypt "
+"tool for LUKS1."
+msgstr ""
+
+#: src/cryptsetup.c:3297
+msgid ""
+"Legacy offline reencryption already in-progress. Use cryptsetup-reencrypt "
+"utility."
+msgstr ""
+
+#: src/cryptsetup.c:3307 src/cryptsetup_reencrypt.c:178
+msgid "Reencryption of device with integrity profile is not supported."
+msgstr ""
+
+#: src/cryptsetup.c:3315
+msgid "LUKS2 reencryption already initialized. Aborting operation."
+msgstr ""
+
+#: src/cryptsetup.c:3319
+msgid "LUKS2 device is not in reencryption."
+msgstr ""
+
+#: src/cryptsetup.c:3346
+msgid "<device> [--type <type>] [<name>]"
+msgstr ""
+
+#: src/cryptsetup.c:3346 src/veritysetup.c:394 src/integritysetup.c:480
+msgid "open device as <name>"
+msgstr ""
+
+#: src/cryptsetup.c:3347 src/cryptsetup.c:3348 src/cryptsetup.c:3349
+#: src/veritysetup.c:395 src/veritysetup.c:396 src/integritysetup.c:481
+#: src/integritysetup.c:482
+msgid "<name>"
+msgstr ""
+
+#: src/cryptsetup.c:3347 src/veritysetup.c:395 src/integritysetup.c:481
+msgid "close device (remove mapping)"
+msgstr ""
+
+#: src/cryptsetup.c:3348
+msgid "resize active device"
+msgstr ""
+
+#: src/cryptsetup.c:3349
+msgid "show device status"
+msgstr ""
+
+#: src/cryptsetup.c:3350
+msgid "[--cipher <cipher>]"
+msgstr ""
+
+#: src/cryptsetup.c:3350
+msgid "benchmark cipher"
+msgstr ""
+
+#: src/cryptsetup.c:3351 src/cryptsetup.c:3352 src/cryptsetup.c:3353
+#: src/cryptsetup.c:3354 src/cryptsetup.c:3355 src/cryptsetup.c:3362
+#: src/cryptsetup.c:3363 src/cryptsetup.c:3364 src/cryptsetup.c:3365
+#: src/cryptsetup.c:3366 src/cryptsetup.c:3367 src/cryptsetup.c:3368
+#: src/cryptsetup.c:3369 src/cryptsetup.c:3370
+msgid "<device>"
+msgstr ""
+
+#: src/cryptsetup.c:3351
+msgid "try to repair on-disk metadata"
+msgstr ""
+
+#: src/cryptsetup.c:3352
+msgid "reencrypt LUKS2 device"
+msgstr ""
+
+#: src/cryptsetup.c:3353
+msgid "erase all keyslots (remove encryption key)"
+msgstr ""
+
+#: src/cryptsetup.c:3354
+msgid "convert LUKS from/to LUKS2 format"
+msgstr ""
+
+#: src/cryptsetup.c:3355
+msgid "set permanent configuration options for LUKS2"
+msgstr ""
+
+#: src/cryptsetup.c:3356 src/cryptsetup.c:3357
+msgid "<device> [<new key file>]"
+msgstr ""
+
+#: src/cryptsetup.c:3356
+msgid "formats a LUKS device"
+msgstr ""
+
+#: src/cryptsetup.c:3357
+msgid "add key to LUKS device"
+msgstr ""
+
+#: src/cryptsetup.c:3358 src/cryptsetup.c:3359 src/cryptsetup.c:3360
+msgid "<device> [<key file>]"
+msgstr ""
+
+#: src/cryptsetup.c:3358
+msgid "removes supplied key or key file from LUKS device"
+msgstr ""
+
+#: src/cryptsetup.c:3359
+msgid "changes supplied key or key file of LUKS device"
+msgstr ""
+
+#: src/cryptsetup.c:3360
+msgid "converts a key to new pbkdf parameters"
+msgstr ""
+
+#: src/cryptsetup.c:3361
+msgid "<device> <key slot>"
+msgstr ""
+
+#: src/cryptsetup.c:3361
+msgid "wipes key with number <key slot> from LUKS device"
+msgstr ""
+
+#: src/cryptsetup.c:3362
+msgid "print UUID of LUKS device"
+msgstr ""
+
+#: src/cryptsetup.c:3363
+msgid "tests <device> for LUKS partition header"
+msgstr ""
+
+#: src/cryptsetup.c:3364
+msgid "dump LUKS partition information"
+msgstr ""
+
+#: src/cryptsetup.c:3365
+msgid "dump TCRYPT device information"
+msgstr ""
+
+#: src/cryptsetup.c:3366
+msgid "dump BITLK device information"
+msgstr ""
+
+#: src/cryptsetup.c:3367
+msgid "Suspend LUKS device and wipe key (all IOs are frozen)"
+msgstr ""
+
+#: src/cryptsetup.c:3368
+msgid "Resume suspended LUKS device"
+msgstr ""
+
+#: src/cryptsetup.c:3369
+msgid "Backup LUKS device header and keyslots"
+msgstr ""
+
+#: src/cryptsetup.c:3370
+msgid "Restore LUKS device header and keyslots"
+msgstr ""
+
+#: src/cryptsetup.c:3371
+msgid "<add|remove|import|export> <device>"
+msgstr ""
+
+#: src/cryptsetup.c:3371
+msgid "Manipulate LUKS2 tokens"
+msgstr ""
+
+#: src/cryptsetup.c:3389 src/veritysetup.c:412 src/integritysetup.c:498
+msgid ""
+"\n"
+"<action> is one of:\n"
+msgstr ""
+
+#: src/cryptsetup.c:3395
+msgid ""
+"\n"
+"You can also use old <action> syntax aliases:\n"
+"\topen: create (plainOpen), luksOpen, loopaesOpen, tcryptOpen, bitlkOpen\n"
+"\tclose: remove (plainClose), luksClose, loopaesClose, tcryptClose, "
+"bitlkClose\n"
+msgstr ""
+
+#: src/cryptsetup.c:3399
+#, c-format
+msgid ""
+"\n"
+"<name> is the device to create under %s\n"
+"<device> is the encrypted device\n"
+"<key slot> is the LUKS key slot number to modify\n"
+"<key file> optional key file for the new key for luksAddKey action\n"
+msgstr ""
+
+#: src/cryptsetup.c:3406
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in metadata format is %s (for luksFormat action).\n"
+msgstr ""
+
+#: src/cryptsetup.c:3411
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in key and passphrase parameters:\n"
+"\tMaximum keyfile size: %dkB, Maximum interactive passphrase length %d "
+"(characters)\n"
+"Default PBKDF for LUKS1: %s, iteration time: %d (ms)\n"
+"Default PBKDF for LUKS2: %s\n"
+"\tIteration time: %d, Memory required: %dkB, Parallel threads: %d\n"
+msgstr ""
+
+#: src/cryptsetup.c:3422
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in device cipher parameters:\n"
+"\tloop-AES: %s, Key %d bits\n"
+"\tplain: %s, Key: %d bits, Password hashing: %s\n"
+"\tLUKS: %s, Key: %d bits, LUKS header hashing: %s, RNG: %s\n"
+msgstr ""
+
+#: src/cryptsetup.c:3431
+msgid ""
+"\tLUKS: Default keysize with XTS mode (two internal keys) will be doubled.\n"
+msgstr ""
+
+#: src/cryptsetup.c:3447 src/veritysetup.c:569 src/integritysetup.c:642
+#, c-format
+msgid "%s: requires %s as arguments"
+msgstr ""
+
+#: src/cryptsetup.c:3480 src/veritysetup.c:457 src/integritysetup.c:536
+#: src/cryptsetup_reencrypt.c:1607
+msgid "Show this help message"
+msgstr ""
+
+#: src/cryptsetup.c:3481 src/veritysetup.c:458 src/integritysetup.c:537
+#: src/cryptsetup_reencrypt.c:1608
+msgid "Display brief usage"
+msgstr ""
+
+#: src/cryptsetup.c:3482 src/veritysetup.c:459 src/integritysetup.c:538
+#: src/cryptsetup_reencrypt.c:1609
+msgid "Print package version"
+msgstr ""
+
+#: src/cryptsetup.c:3486 src/veritysetup.c:463 src/integritysetup.c:542
+#: src/cryptsetup_reencrypt.c:1613
+msgid "Help options:"
+msgstr ""
+
+#: src/cryptsetup.c:3487 src/veritysetup.c:464 src/integritysetup.c:543
+#: src/cryptsetup_reencrypt.c:1614
+msgid "Shows more detailed error messages"
+msgstr ""
+
+#: src/cryptsetup.c:3488 src/veritysetup.c:465 src/integritysetup.c:544
+#: src/cryptsetup_reencrypt.c:1615
+msgid "Show debug messages"
+msgstr ""
+
+#: src/cryptsetup.c:3489
+msgid "Show debug messages including JSON metadata"
+msgstr ""
+
+#: src/cryptsetup.c:3490 src/cryptsetup_reencrypt.c:1617
+msgid "The cipher used to encrypt the disk (see /proc/crypto)"
+msgstr ""
+
+#: src/cryptsetup.c:3491 src/cryptsetup_reencrypt.c:1619
+msgid "The hash used to create the encryption key from the passphrase"
+msgstr ""
+
+#: src/cryptsetup.c:3492
+msgid "Verifies the passphrase by asking for it twice"
+msgstr ""
+
+#: src/cryptsetup.c:3493 src/cryptsetup_reencrypt.c:1621
+msgid "Read the key from a file"
+msgstr ""
+
+#: src/cryptsetup.c:3494
+msgid "Read the volume (master) key from file."
+msgstr ""
+
+#: src/cryptsetup.c:3495
+msgid "Dump volume (master) key instead of keyslots info"
+msgstr ""
+
+#: src/cryptsetup.c:3496 src/cryptsetup_reencrypt.c:1618
+msgid "The size of the encryption key"
+msgstr ""
+
+#: src/cryptsetup.c:3496 src/cryptsetup.c:3557 src/integritysetup.c:562
+#: src/integritysetup.c:566 src/integritysetup.c:570
+#: src/cryptsetup_reencrypt.c:1618
+msgid "BITS"
+msgstr ""
+
+#: src/cryptsetup.c:3497 src/cryptsetup_reencrypt.c:1634
+msgid "Limits the read from keyfile"
+msgstr ""
+
+#: src/cryptsetup.c:3497 src/cryptsetup.c:3498 src/cryptsetup.c:3499
+#: src/cryptsetup.c:3500 src/cryptsetup.c:3503 src/cryptsetup.c:3554
+#: src/cryptsetup.c:3555 src/cryptsetup.c:3563 src/cryptsetup.c:3564
+#: src/veritysetup.c:468 src/veritysetup.c:469 src/veritysetup.c:470
+#: src/veritysetup.c:473 src/veritysetup.c:474 src/integritysetup.c:551
+#: src/integritysetup.c:557 src/integritysetup.c:558
+#: src/cryptsetup_reencrypt.c:1633 src/cryptsetup_reencrypt.c:1634
+#: src/cryptsetup_reencrypt.c:1635 src/cryptsetup_reencrypt.c:1636
+msgid "bytes"
+msgstr ""
+
+#: src/cryptsetup.c:3498 src/cryptsetup_reencrypt.c:1633
+msgid "Number of bytes to skip in keyfile"
+msgstr ""
+
+#: src/cryptsetup.c:3499
+msgid "Limits the read from newly added keyfile"
+msgstr ""
+
+#: src/cryptsetup.c:3500
+msgid "Number of bytes to skip in newly added keyfile"
+msgstr ""
+
+#: src/cryptsetup.c:3501
+msgid "Slot number for new key (default is first free)"
+msgstr ""
+
+#: src/cryptsetup.c:3502
+msgid "The size of the device"
+msgstr ""
+
+#: src/cryptsetup.c:3502 src/cryptsetup.c:3504 src/cryptsetup.c:3505
+#: src/cryptsetup.c:3511 src/integritysetup.c:552 src/integritysetup.c:559
+msgid "SECTORS"
+msgstr ""
+
+#: src/cryptsetup.c:3503 src/cryptsetup_reencrypt.c:1636
+msgid "Use only specified device size (ignore rest of device). DANGEROUS!"
+msgstr ""
+
+#: src/cryptsetup.c:3504
+msgid "The start offset in the backend device"
+msgstr ""
+
+#: src/cryptsetup.c:3505
+msgid "How many sectors of the encrypted data to skip at the beginning"
+msgstr ""
+
+#: src/cryptsetup.c:3506
+msgid "Create a readonly mapping"
+msgstr ""
+
+#: src/cryptsetup.c:3507 src/integritysetup.c:545
+#: src/cryptsetup_reencrypt.c:1624
+msgid "Do not ask for confirmation"
+msgstr ""
+
+#: src/cryptsetup.c:3508
+msgid "Timeout for interactive passphrase prompt (in seconds)"
+msgstr ""
+
+#: src/cryptsetup.c:3508 src/cryptsetup.c:3509 src/integritysetup.c:546
+#: src/cryptsetup_reencrypt.c:1625
+msgid "secs"
+msgstr ""
+
+#: src/cryptsetup.c:3509 src/integritysetup.c:546
+#: src/cryptsetup_reencrypt.c:1625
+msgid "Progress line update (in seconds)"
+msgstr ""
+
+#: src/cryptsetup.c:3510 src/cryptsetup_reencrypt.c:1626
+msgid "How often the input of the passphrase can be retried"
+msgstr ""
+
+#: src/cryptsetup.c:3511
+msgid "Align payload at <n> sector boundaries - for luksFormat"
+msgstr ""
+
+#: src/cryptsetup.c:3512
+msgid "File with LUKS header and keyslots backup"
+msgstr ""
+
+#: src/cryptsetup.c:3513 src/cryptsetup_reencrypt.c:1627
+msgid "Use /dev/random for generating volume key"
+msgstr ""
+
+#: src/cryptsetup.c:3514 src/cryptsetup_reencrypt.c:1628
+msgid "Use /dev/urandom for generating volume key"
+msgstr ""
+
+#: src/cryptsetup.c:3515
+msgid "Share device with another non-overlapping crypt segment"
+msgstr ""
+
+#: src/cryptsetup.c:3516 src/veritysetup.c:477
+msgid "UUID for device to use"
+msgstr ""
+
+#: src/cryptsetup.c:3517 src/integritysetup.c:579
+msgid "Allow discards (aka TRIM) requests for device"
+msgstr ""
+
+#: src/cryptsetup.c:3518 src/cryptsetup_reencrypt.c:1645
+msgid "Device or file with separated LUKS header"
+msgstr ""
+
+#: src/cryptsetup.c:3519
+msgid "Do not activate device, just check passphrase"
+msgstr ""
+
+#: src/cryptsetup.c:3520
+msgid "Use hidden header (hidden TCRYPT device)"
+msgstr ""
+
+#: src/cryptsetup.c:3521
+msgid "Device is system TCRYPT drive (with bootloader)"
+msgstr ""
+
+#: src/cryptsetup.c:3522
+msgid "Use backup (secondary) TCRYPT header"
+msgstr ""
+
+#: src/cryptsetup.c:3523
+msgid "Scan also for VeraCrypt compatible device"
+msgstr ""
+
+#: src/cryptsetup.c:3524
+msgid "Personal Iteration Multiplier for VeraCrypt compatible device"
+msgstr ""
+
+#: src/cryptsetup.c:3525
+msgid "Query Personal Iteration Multiplier for VeraCrypt compatible device"
+msgstr ""
+
+#: src/cryptsetup.c:3526
+msgid ""
+"Type of device metadata: luks, luks1, luks2, plain, loopaes, tcrypt, bitlk"
+msgstr ""
+
+#: src/cryptsetup.c:3527
+msgid "Disable password quality check (if enabled)"
+msgstr ""
+
+#: src/cryptsetup.c:3528
+msgid "Use dm-crypt same_cpu_crypt performance compatibility option"
+msgstr ""
+
+#: src/cryptsetup.c:3529
+msgid "Use dm-crypt submit_from_crypt_cpus performance compatibility option"
+msgstr ""
+
+#: src/cryptsetup.c:3530
+msgid "Device removal is deferred until the last user closes it"
+msgstr ""
+
+#: src/cryptsetup.c:3531
+msgid "Use global lock to serialize memory hard PBKDF (OOM workaround)"
+msgstr ""
+
+#: src/cryptsetup.c:3532
+msgid "PBKDF iteration time for LUKS (in ms)"
+msgstr ""
+
+#: src/cryptsetup.c:3532 src/cryptsetup_reencrypt.c:1623
+msgid "msecs"
+msgstr ""
+
+#: src/cryptsetup.c:3533 src/cryptsetup_reencrypt.c:1641
+msgid "PBKDF algorithm (for LUKS2): argon2i, argon2id, pbkdf2"
+msgstr ""
+
+#: src/cryptsetup.c:3534 src/cryptsetup_reencrypt.c:1642
+msgid "PBKDF memory cost limit"
+msgstr ""
+
+#: src/cryptsetup.c:3534 src/cryptsetup_reencrypt.c:1642
+msgid "kilobytes"
+msgstr ""
+
+#: src/cryptsetup.c:3535 src/cryptsetup_reencrypt.c:1643
+msgid "PBKDF parallel cost"
+msgstr ""
+
+#: src/cryptsetup.c:3535 src/cryptsetup_reencrypt.c:1643
+msgid "threads"
+msgstr ""
+
+#: src/cryptsetup.c:3536 src/cryptsetup_reencrypt.c:1644
+msgid "PBKDF iterations cost (forced, disables benchmark)"
+msgstr ""
+
+#: src/cryptsetup.c:3537
+msgid "Keyslot priority: ignore, normal, prefer"
+msgstr ""
+
+#: src/cryptsetup.c:3538
+msgid "Disable locking of on-disk metadata"
+msgstr ""
+
+#: src/cryptsetup.c:3539
+msgid "Disable loading volume keys via kernel keyring"
+msgstr ""
+
+#: src/cryptsetup.c:3540
+msgid "Data integrity algorithm (LUKS2 only)"
+msgstr ""
+
+#: src/cryptsetup.c:3541 src/integritysetup.c:573
+msgid "Disable journal for integrity device"
+msgstr ""
+
+#: src/cryptsetup.c:3542 src/integritysetup.c:547
+msgid "Do not wipe device after format"
+msgstr ""
+
+#: src/cryptsetup.c:3543 src/integritysetup.c:577
+msgid "Use inefficient legacy padding (old kernels)"
+msgstr ""
+
+#: src/cryptsetup.c:3544
+msgid "Do not ask for passphrase if activation by token fails"
+msgstr ""
+
+#: src/cryptsetup.c:3545
+msgid "Token number (default: any)"
+msgstr ""
+
+#: src/cryptsetup.c:3546
+msgid "Key description"
+msgstr ""
+
+#: src/cryptsetup.c:3547
+msgid "Encryption sector size (default: 512 bytes)"
+msgstr ""
+
+#: src/cryptsetup.c:3548
+msgid "Use IV counted in sector size (not in 512 bytes)"
+msgstr ""
+
+#: src/cryptsetup.c:3549
+msgid "Set activation flags persistent for device"
+msgstr ""
+
+#: src/cryptsetup.c:3550
+msgid "Set label for the LUKS2 device"
+msgstr ""
+
+#: src/cryptsetup.c:3551
+msgid "Set subsystem label for the LUKS2 device"
+msgstr ""
+
+#: src/cryptsetup.c:3552
+msgid "Create or dump unbound (no assigned data segment) LUKS2 keyslot"
+msgstr ""
+
+#: src/cryptsetup.c:3553
+msgid "Read or write the json from or to a file"
+msgstr ""
+
+#: src/cryptsetup.c:3554
+msgid "LUKS2 header metadata area size"
+msgstr ""
+
+#: src/cryptsetup.c:3555
+msgid "LUKS2 header keyslots area size"
+msgstr ""
+
+#: src/cryptsetup.c:3556
+msgid "Refresh (reactivate) device with new parameters"
+msgstr ""
+
+#: src/cryptsetup.c:3557
+msgid "LUKS2 keyslot: The size of the encryption key"
+msgstr ""
+
+#: src/cryptsetup.c:3558
+msgid "LUKS2 keyslot: The cipher used for keyslot encryption"
+msgstr ""
+
+#: src/cryptsetup.c:3559
+msgid "Encrypt LUKS2 device (in-place encryption)."
+msgstr ""
+
+#: src/cryptsetup.c:3560
+msgid "Decrypt LUKS2 device (remove encryption)."
+msgstr ""
+
+#: src/cryptsetup.c:3561
+msgid "Initialize LUKS2 reencryption in metadata only."
+msgstr ""
+
+#: src/cryptsetup.c:3562
+msgid "Resume initialized LUKS2 reencryption only."
+msgstr ""
+
+#: src/cryptsetup.c:3563 src/cryptsetup_reencrypt.c:1635
+msgid "Reduce data device size (move data offset). DANGEROUS!"
+msgstr ""
+
+#: src/cryptsetup.c:3564
+msgid "Maximal reencryption hotzone size."
+msgstr ""
+
+#: src/cryptsetup.c:3565
+msgid "Reencryption hotzone resilience type (checksum,journal,none)"
+msgstr ""
+
+#: src/cryptsetup.c:3566
+msgid "Reencryption hotzone checksums hash"
+msgstr ""
+
+#: src/cryptsetup.c:3567
+msgid "Override device autodetection of dm device to be reencrypted"
+msgstr ""
+
+#: src/cryptsetup.c:3583 src/veritysetup.c:499 src/integritysetup.c:595
+msgid "[OPTION...] <action> <action-specific>"
+msgstr ""
+
+#: src/cryptsetup.c:3634 src/veritysetup.c:533 src/integritysetup.c:606
+msgid "Argument <action> missing."
+msgstr ""
+
+#: src/cryptsetup.c:3703 src/veritysetup.c:564 src/integritysetup.c:637
+msgid "Unknown action."
+msgstr ""
+
+#: src/cryptsetup.c:3713
+msgid "Options --refresh and --test-passphrase are mutually exclusive."
+msgstr ""
+
+#: src/cryptsetup.c:3718
+msgid "Option --deferred is allowed only for close command."
+msgstr ""
+
+#: src/cryptsetup.c:3723
+msgid "Option --shared is allowed only for open of plain device."
+msgstr ""
+
+#: src/cryptsetup.c:3728 src/integritysetup.c:654
+msgid "Option --allow-discards is allowed only for open operation."
+msgstr ""
+
+#: src/cryptsetup.c:3733
+msgid "Option --persistent is allowed only for open operation."
+msgstr ""
+
+#: src/cryptsetup.c:3738
+msgid ""
+"Option --serialize-memory-hard-pbkdf is allowed only for open operation."
+msgstr ""
+
+#: src/cryptsetup.c:3743
+msgid "Option --persistent is not allowed with --test-passphrase."
+msgstr ""
+
+#: src/cryptsetup.c:3753
+msgid ""
+"Option --key-size is allowed only for luksFormat, luksAddKey,\n"
+"open and benchmark actions. To limit read from keyfile use --keyfile-"
+"size=(bytes)."
+msgstr ""
+
+#: src/cryptsetup.c:3759
+msgid "Option --integrity is allowed only for luksFormat (LUKS2)."
+msgstr ""
+
+#: src/cryptsetup.c:3764
+msgid ""
+"Option --integrity-no-wipe can be used only for format action with integrity "
+"extension."
+msgstr ""
+
+#: src/cryptsetup.c:3770
+msgid ""
+"Options --label and --subsystem are allowed only for luksFormat and config "
+"LUKS2 operations."
+msgstr ""
+
+#: src/cryptsetup.c:3776
+msgid ""
+"Option --test-passphrase is allowed only for open of LUKS, TCRYPT and BITLK "
+"devices."
+msgstr ""
+
+#: src/cryptsetup.c:3781 src/cryptsetup_reencrypt.c:1708
+msgid "Key size must be a multiple of 8 bits"
+msgstr ""
+
+#: src/cryptsetup.c:3787 src/cryptsetup_reencrypt.c:1394
+#: src/cryptsetup_reencrypt.c:1713
+msgid "Key slot is invalid."
+msgstr ""
+
+#: src/cryptsetup.c:3794
+msgid "Option --key-file takes precedence over specified key file argument."
+msgstr ""
+
+#: src/cryptsetup.c:3801 src/veritysetup.c:576 src/integritysetup.c:663
+#: src/cryptsetup_reencrypt.c:1687
+msgid "Negative number for option not permitted."
+msgstr ""
+
+#: src/cryptsetup.c:3805
+msgid "Only one --key-file argument is allowed."
+msgstr ""
+
+#: src/cryptsetup.c:3809 src/cryptsetup_reencrypt.c:1679
+#: src/cryptsetup_reencrypt.c:1717
+msgid "Only one of --use-[u]random options is allowed."
+msgstr ""
+
+#: src/cryptsetup.c:3813
+msgid "Option --use-[u]random is allowed only for luksFormat."
+msgstr ""
+
+#: src/cryptsetup.c:3817
+msgid "Option --uuid is allowed only for luksFormat and luksUUID."
+msgstr ""
+
+#: src/cryptsetup.c:3821
+msgid "Option --align-payload is allowed only for luksFormat."
+msgstr ""
+
+#: src/cryptsetup.c:3825
+msgid ""
+"Options --luks2-metadata-size and --opt-luks2-keyslots-size are allowed only "
+"for luksFormat with LUKS2."
+msgstr ""
+
+#: src/cryptsetup.c:3830
+msgid "Invalid LUKS2 metadata size specification."
+msgstr ""
+
+#: src/cryptsetup.c:3834
+msgid "Invalid LUKS2 keyslots size specification."
+msgstr ""
+
+#: src/cryptsetup.c:3838
+msgid "Options --align-payload and --offset cannot be combined."
+msgstr ""
+
+#: src/cryptsetup.c:3844
+msgid "Option --skip is supported only for open of plain and loopaes devices."
+msgstr ""
+
+#: src/cryptsetup.c:3851
+msgid ""
+"Option --offset is supported only for open of plain and loopaes devices, "
+"luksFormat and device reencryption."
+msgstr ""
+
+#: src/cryptsetup.c:3857
+msgid ""
+"Option --tcrypt-hidden, --tcrypt-system or --tcrypt-backup is supported only "
+"for TCRYPT device."
+msgstr ""
+
+#: src/cryptsetup.c:3862
+msgid "Option --tcrypt-hidden cannot be combined with --allow-discards."
+msgstr ""
+
+#: src/cryptsetup.c:3867
+msgid "Option --veracrypt is supported only for TCRYPT device type."
+msgstr ""
+
+#: src/cryptsetup.c:3873
+msgid "Invalid argument for parameter --veracrypt-pim supplied."
+msgstr ""
+
+#: src/cryptsetup.c:3877
+msgid ""
+"Option --veracrypt-pim is supported only for VeraCrypt compatible devices."
+msgstr ""
+
+#: src/cryptsetup.c:3885
+msgid ""
+"Option --veracrypt-query-pim is supported only for VeraCrypt compatible "
+"devices."
+msgstr ""
+
+#: src/cryptsetup.c:3889
+msgid ""
+"The options --veracrypt-pim and --veracrypt-query-pim are mutually exclusive."
+msgstr ""
+
+#: src/cryptsetup.c:3896
+msgid "Option --priority can be only ignore/normal/prefer."
+msgstr ""
+
+#: src/cryptsetup.c:3901 src/cryptsetup.c:3939
+msgid "Keyslot specification is required."
+msgstr ""
+
+#: src/cryptsetup.c:3906 src/cryptsetup_reencrypt.c:1693
+msgid ""
+"Password-based key derivation function (PBKDF) can be only pbkdf2 or argon2i/"
+"argon2id."
+msgstr ""
+
+#: src/cryptsetup.c:3911 src/cryptsetup_reencrypt.c:1698
+msgid "PBKDF forced iterations cannot be combined with iteration time option."
+msgstr ""
+
+#: src/cryptsetup.c:3917
+msgid "Sector size option is not supported for this command."
+msgstr ""
+
+#: src/cryptsetup.c:3929
+msgid ""
+"Large IV sectors option is supported only for opening plain type device with "
+"sector size larger than 512 bytes."
+msgstr ""
+
+#: src/cryptsetup.c:3934
+msgid "Key size is required with --unbound option."
+msgstr ""
+
+#: src/cryptsetup.c:3944
+msgid "Option --unbound may be used only with luksAddKey and luksDump actions."
+msgstr ""
+
+#: src/cryptsetup.c:3949
+msgid "Option --refresh may be used only with open action."
+msgstr ""
+
+#: src/cryptsetup.c:3960
+msgid "Cannot disable metadata locking."
+msgstr ""
+
+#: src/cryptsetup.c:3970
+msgid "Invalid max reencryption hotzone size specification."
+msgstr ""
+
+#: src/cryptsetup.c:3978 src/cryptsetup_reencrypt.c:1722
+#: src/cryptsetup_reencrypt.c:1727
+msgid "Invalid device size specification."
+msgstr ""
+
+#: src/cryptsetup.c:3981
+msgid "Maximum device reduce size is 1 GiB."
+msgstr ""
+
+#: src/cryptsetup.c:3984 src/cryptsetup_reencrypt.c:1733
+msgid "Reduce size must be multiple of 512 bytes sector."
+msgstr ""
+
+#: src/cryptsetup.c:3989
+msgid "Invalid data size specification."
+msgstr ""
+
+#: src/cryptsetup.c:3994
+msgid "Reduce size overflow."
+msgstr ""
+
+#: src/cryptsetup.c:3998
+msgid "LUKS2 decryption requires option --header."
+msgstr ""
+
+#: src/cryptsetup.c:4002
+msgid "Device size must be multiple of 512 bytes sector."
+msgstr ""
+
+#: src/cryptsetup.c:4006
+msgid "Options --reduce-device-size and --data-size cannot be combined."
+msgstr ""
+
+#: src/cryptsetup.c:4010
+msgid "Options --device-size and --size cannot be combined."
+msgstr ""
+
+#: src/cryptsetup.c:4014
+msgid "Options --keyslot-cipher and --keyslot-key-size must be used together."
+msgstr ""
+
+#: src/veritysetup.c:66
+msgid "Invalid salt string specified."
+msgstr ""
+
+#: src/veritysetup.c:97
+#, c-format
+msgid "Cannot create hash image %s for writing."
+msgstr ""
+
+#: src/veritysetup.c:107
+#, c-format
+msgid "Cannot create FEC image %s for writing."
+msgstr ""
+
+#: src/veritysetup.c:179
+msgid "Invalid root hash string specified."
+msgstr ""
+
+#: src/veritysetup.c:187
+#, c-format
+msgid "Invalid signature file %s."
+msgstr ""
+
+#: src/veritysetup.c:194
+#, c-format
+msgid "Cannot read signature file %s."
+msgstr ""
+
+#: src/veritysetup.c:392
+msgid "<data_device> <hash_device>"
+msgstr ""
+
+#: src/veritysetup.c:392 src/integritysetup.c:479
+msgid "format device"
+msgstr ""
+
+#: src/veritysetup.c:393
+msgid "<data_device> <hash_device> <root_hash>"
+msgstr ""
+
+#: src/veritysetup.c:393
+msgid "verify device"
+msgstr ""
+
+#: src/veritysetup.c:394
+msgid "<data_device> <name> <hash_device> <root_hash>"
+msgstr ""
+
+#: src/veritysetup.c:396 src/integritysetup.c:482
+msgid "show active device status"
+msgstr ""
+
+#: src/veritysetup.c:397
+msgid "<hash_device>"
+msgstr ""
+
+#: src/veritysetup.c:397 src/integritysetup.c:483
+msgid "show on-disk information"
+msgstr ""
+
+#: src/veritysetup.c:416
+#, c-format
+msgid ""
+"\n"
+"<name> is the device to create under %s\n"
+"<data_device> is the data device\n"
+"<hash_device> is the device containing verification data\n"
+"<root_hash> hash of the root node on <hash_device>\n"
+msgstr ""
+
+#: src/veritysetup.c:423
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in dm-verity parameters:\n"
+"\tHash: %s, Data block (bytes): %u, Hash block (bytes): %u, Salt size: %u, "
+"Hash format: %u\n"
+msgstr ""
+
+#: src/veritysetup.c:466
+msgid "Do not use verity superblock"
+msgstr ""
+
+#: src/veritysetup.c:467
+msgid "Format type (1 - normal, 0 - original Chrome OS)"
+msgstr ""
+
+#: src/veritysetup.c:467
+msgid "number"
+msgstr ""
+
+#: src/veritysetup.c:468
+msgid "Block size on the data device"
+msgstr ""
+
+#: src/veritysetup.c:469
+msgid "Block size on the hash device"
+msgstr ""
+
+#: src/veritysetup.c:470
+msgid "FEC parity bytes"
+msgstr ""
+
+#: src/veritysetup.c:471
+msgid "The number of blocks in the data file"
+msgstr ""
+
+#: src/veritysetup.c:471
+msgid "blocks"
+msgstr ""
+
+#: src/veritysetup.c:472
+msgid "Path to device with error correction data"
+msgstr ""
+
+#: src/veritysetup.c:472 src/integritysetup.c:549
+msgid "path"
+msgstr ""
+
+#: src/veritysetup.c:473
+msgid "Starting offset on the hash device"
+msgstr ""
+
+#: src/veritysetup.c:474
+msgid "Starting offset on the FEC device"
+msgstr ""
+
+#: src/veritysetup.c:475
+msgid "Hash algorithm"
+msgstr ""
+
+#: src/veritysetup.c:475
+msgid "string"
+msgstr ""
+
+#: src/veritysetup.c:476
+msgid "Salt"
+msgstr ""
+
+#: src/veritysetup.c:476
+msgid "hex string"
+msgstr ""
+
+#: src/veritysetup.c:478
+msgid "Path to root hash signature file"
+msgstr ""
+
+#: src/veritysetup.c:479
+msgid "Restart kernel if corruption is detected"
+msgstr ""
+
+#: src/veritysetup.c:480
+msgid "Ignore corruption, log it only"
+msgstr ""
+
+#: src/veritysetup.c:481
+msgid "Do not verify zeroed blocks"
+msgstr ""
+
+#: src/veritysetup.c:482
+msgid "Verify data block only the first time it is read"
+msgstr ""
+
+#: src/veritysetup.c:582
+msgid ""
+"Option --ignore-corruption, --restart-on-corruption or --ignore-zero-blocks "
+"is allowed only for open operation."
+msgstr ""
+
+#: src/veritysetup.c:587
+msgid "Option --root-hash-signature can be used only for open operation."
+msgstr ""
+
+#: src/veritysetup.c:592
+msgid ""
+"Option --ignore-corruption and --restart-on-corruption cannot be used "
+"together."
+msgstr ""
+
+#: src/integritysetup.c:84 src/utils_password.c:305
+#, c-format
+msgid "Cannot read keyfile %s."
+msgstr ""
+
+#: src/integritysetup.c:88 src/utils_password.c:310
+#, c-format
+msgid "Cannot read %d bytes from keyfile %s."
+msgstr ""
+
+#: src/integritysetup.c:254
+#, c-format
+msgid "Formatted with tag size %u, internal integrity %s.\n"
+msgstr ""
+
+#: src/integritysetup.c:479 src/integritysetup.c:483
+msgid "<integrity_device>"
+msgstr ""
+
+#: src/integritysetup.c:480
+msgid "<integrity_device> <name>"
+msgstr ""
+
+#: src/integritysetup.c:502
+#, c-format
+msgid ""
+"\n"
+"<name> is the device to create under %s\n"
+"<integrity_device> is the device containing data with integrity tags\n"
+msgstr ""
+
+#: src/integritysetup.c:507
+#, c-format
+msgid ""
+"\n"
+"Default compiled-in dm-integrity parameters:\n"
+"\tChecksum algorithm: %s\n"
+msgstr ""
+
+#: src/integritysetup.c:549
+msgid "Path to data device (if separated)"
+msgstr ""
+
+#: src/integritysetup.c:551
+msgid "Journal size"
+msgstr ""
+
+#: src/integritysetup.c:552
+msgid "Interleave sectors"
+msgstr ""
+
+#: src/integritysetup.c:553
+msgid "Journal watermark"
+msgstr ""
+
+#: src/integritysetup.c:553
+msgid "percent"
+msgstr ""
+
+#: src/integritysetup.c:554
+msgid "Journal commit time"
+msgstr ""
+
+#: src/integritysetup.c:554 src/integritysetup.c:556
+msgid "ms"
+msgstr ""
+
+#: src/integritysetup.c:555
+msgid "Number of 512-byte sectors per bit (bitmap mode)."
+msgstr ""
+
+#: src/integritysetup.c:556
+msgid "Bitmap mode flush time"
+msgstr ""
+
+#: src/integritysetup.c:557
+msgid "Tag size (per-sector)"
+msgstr ""
+
+#: src/integritysetup.c:558
+msgid "Sector size"
+msgstr ""
+
+#: src/integritysetup.c:559
+msgid "Buffers size"
+msgstr ""
+
+#: src/integritysetup.c:561
+msgid "Data integrity algorithm"
+msgstr ""
+
+#: src/integritysetup.c:562
+msgid "The size of the data integrity key"
+msgstr ""
+
+#: src/integritysetup.c:563
+msgid "Read the integrity key from a file"
+msgstr ""
+
+#: src/integritysetup.c:565
+msgid "Journal integrity algorithm"
+msgstr ""
+
+#: src/integritysetup.c:566
+msgid "The size of the journal integrity key"
+msgstr ""
+
+#: src/integritysetup.c:567
+msgid "Read the journal integrity key from a file"
+msgstr ""
+
+#: src/integritysetup.c:569
+msgid "Journal encryption algorithm"
+msgstr ""
+
+#: src/integritysetup.c:570
+msgid "The size of the journal encryption key"
+msgstr ""
+
+#: src/integritysetup.c:571
+msgid "Read the journal encryption key from a file"
+msgstr ""
+
+#: src/integritysetup.c:574
+msgid "Recovery mode (no journal, no tag checking)"
+msgstr ""
+
+#: src/integritysetup.c:575
+msgid "Use bitmap to track changes and disable journal for integrity device"
+msgstr ""
+
+#: src/integritysetup.c:576
+msgid "Recalculate initial tags automatically."
+msgstr ""
+
+#: src/integritysetup.c:649
+msgid "Option --integrity-recalculate can be used only for open action."
+msgstr ""
+
+#: src/integritysetup.c:669
+msgid ""
+"Options --journal-size, --interleave-sectors, --sector-size, --tag-size and "
+"--no-wipe can be used only for format action."
+msgstr ""
+
+#: src/integritysetup.c:675
+msgid "Invalid journal size specification."
+msgstr ""
+
+#: src/integritysetup.c:680
+msgid "Both key file and key size options must be specified."
+msgstr ""
+
+#: src/integritysetup.c:683
+msgid "Integrity algorithm must be specified if integrity key is used."
+msgstr ""
+
+#: src/integritysetup.c:688
+msgid "Both journal integrity key file and key size options must be specified."
+msgstr ""
+
+#: src/integritysetup.c:691
+msgid ""
+"Journal integrity algorithm must be specified if journal integrity key is "
+"used."
+msgstr ""
+
+#: src/integritysetup.c:696
+msgid ""
+"Both journal encryption key file and key size options must be specified."
+msgstr ""
+
+#: src/integritysetup.c:699
+msgid ""
+"Journal encryption algorithm must be specified if journal encryption key is "
+"used."
+msgstr ""
+
+#: src/integritysetup.c:703
+msgid "Recovery and bitmap mode options are mutually exclusive."
+msgstr ""
+
+#: src/integritysetup.c:707
+msgid "Journal options cannot be used in bitmap mode."
+msgstr ""
+
+#: src/integritysetup.c:711
+msgid "Bitmap options can be used only in bitmap mode."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:172
+msgid "Reencryption already in-progress."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:208
+#, c-format
+msgid "Cannot exclusively open %s, device in use."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:222 src/cryptsetup_reencrypt.c:1135
+msgid "Allocation of aligned memory failed."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:229
+#, c-format
+msgid "Cannot read device %s."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:240
+#, c-format
+msgid "Marking LUKS1 device %s unusable."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:244
+#, c-format
+msgid "Setting LUKS2 offline reencrypt flag on device %s."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:261
+#, c-format
+msgid "Cannot write device %s."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:309
+msgid "Cannot write reencryption log file."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:365
+msgid "Cannot read reencryption log file."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:403
+#, c-format
+msgid "Log file %s exists, resuming reencryption.\n"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:452
+msgid "Activating temporary device using old LUKS header."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:462
+msgid "Activating temporary device using new LUKS header."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:472
+msgid "Activation of temporary devices failed."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:559
+msgid "Failed to set data offset."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:565
+msgid "Failed to set metadata size."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:573
+#, c-format
+msgid "New LUKS header for device %s created."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:633
+#, c-format
+msgid ""
+"This version of cryptsetup-reencrypt can't handle new internal token type %s."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:655
+msgid "Failed to read activation flags from backup header."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:659
+msgid "Failed to write activation flags to new header."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:663 src/cryptsetup_reencrypt.c:667
+msgid "Failed to read requirements from backup header."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:705
+#, c-format
+msgid "%s header backup of device %s created."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:768
+msgid "Creation of LUKS backup headers failed."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:901
+#, c-format
+msgid "Cannot restore %s header on device %s."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:903
+#, c-format
+msgid "%s header on device %s restored."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1107 src/cryptsetup_reencrypt.c:1113
+msgid "Cannot open temporary LUKS device."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1118 src/cryptsetup_reencrypt.c:1123
+msgid "Cannot get device size."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1158
+msgid "IO error during reencryption."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1189
+msgid "Provided UUID is invalid."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1423
+msgid "Cannot open reencryption log file."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1429
+msgid ""
+"No decryption in progress, provided UUID can be used only to resume "
+"suspended decryption process."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1504
+#, c-format
+msgid "Changed pbkdf parameters in keyslot %i."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1616
+msgid "Reencryption block size"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1616
+msgid "MiB"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1620
+msgid "Do not change key, no data area reencryption"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1622
+msgid "Read new volume (master) key from file"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1623
+msgid "PBKDF2 iteration time for LUKS (in ms)"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1629
+msgid "Use direct-io when accessing devices"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1630
+msgid "Use fsync after each block"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1631
+msgid "Update log file after every block"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1632
+msgid "Use only this slot (others will be disabled)"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1637
+msgid "Create new header on not encrypted device"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1638
+msgid "Permanently decrypt device (remove encryption)"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1639
+msgid "The UUID used to resume decryption"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1640
+msgid "Type of LUKS metadata: luks1, luks2"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1659
+msgid "[OPTION...] <device>"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1667
+#, c-format
+msgid "Reencryption will change: %s%s%s%s%s%s."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1668
+msgid "volume key"
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1670
+msgid "set hash to "
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1671
+msgid ", set cipher to "
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1675
+msgid "Argument required."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1703
+msgid ""
+"Only values between 1 MiB and 64 MiB allowed for reencryption block size."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1730
+msgid "Maximum device reduce size is 64 MiB."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1737
+msgid ""
+"Option --new must be used together with --reduce-device-size or --header."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1741
+msgid ""
+"Option --keep-key can be used only with --hash, --iter-time or --pbkdf-force-"
+"iterations."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1745
+msgid "Option --new cannot be used together with --decrypt."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1749
+msgid "Option --decrypt is incompatible with specified parameters."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1753
+msgid "Option --uuid is allowed only together with --decrypt."
+msgstr ""
+
+#: src/cryptsetup_reencrypt.c:1757
+msgid "Invalid luks type. Use one of these: 'luks', 'luks1' or 'luks2'."
+msgstr ""
+
+#: src/utils_tools.c:151
+msgid "Error reading response from terminal."
+msgstr ""
+
+#: src/utils_tools.c:186
+msgid "Command successful.\n"
+msgstr ""
+
+#: src/utils_tools.c:194
+msgid "wrong or missing parameters"
+msgstr ""
+
+#: src/utils_tools.c:196
+msgid "no permission or bad passphrase"
+msgstr ""
+
+#: src/utils_tools.c:198
+msgid "out of memory"
+msgstr ""
+
+#: src/utils_tools.c:200
+msgid "wrong device or file specified"
+msgstr ""
+
+#: src/utils_tools.c:202
+msgid "device already exists or device is busy"
+msgstr ""
+
+#: src/utils_tools.c:204
+msgid "unknown error"
+msgstr ""
+
+#: src/utils_tools.c:206
+#, c-format
+msgid "Command failed with code %i (%s).\n"
+msgstr ""
+
+#: src/utils_tools.c:283
+#, c-format
+msgid "Key slot %i created."
+msgstr ""
+
+#: src/utils_tools.c:285
+#, c-format
+msgid "Key slot %i unlocked."
+msgstr ""
+
+#: src/utils_tools.c:287
+#, c-format
+msgid "Key slot %i removed."
+msgstr ""
+
+#: src/utils_tools.c:296
+#, c-format
+msgid "Token %i created."
+msgstr ""
+
+#: src/utils_tools.c:298
+#, c-format
+msgid "Token %i removed."
+msgstr ""
+
+#: src/utils_tools.c:464
+msgid ""
+"\n"
+"Wipe interrupted."
+msgstr ""
+
+#: src/utils_tools.c:475
+#, c-format
+msgid "WARNING: Device %s already contains a '%s' partition signature.\n"
+msgstr ""
+
+#: src/utils_tools.c:483
+#, c-format
+msgid "WARNING: Device %s already contains a '%s' superblock signature.\n"
+msgstr ""
+
+#: src/utils_tools.c:504 src/utils_tools.c:568
+msgid "Failed to initialize device signature probes."
+msgstr ""
+
+#: src/utils_tools.c:548
+#, c-format
+msgid "Failed to stat device %s."
+msgstr ""
+
+#: src/utils_tools.c:561
+#, c-format
+msgid "Device %s is in use. Can not proceed with format operation."
+msgstr ""
+
+#: src/utils_tools.c:563
+#, c-format
+msgid "Failed to open file %s in read/write mode."
+msgstr ""
+
+#: src/utils_tools.c:577
+#, c-format
+msgid ""
+"Existing '%s' partition signature (offset: %<PRIi64> bytes) on device %s "
+"will be wiped."
+msgstr ""
+
+#: src/utils_tools.c:580
+#, c-format
+msgid ""
+"Existing '%s' superblock signature (offset: %<PRIi64> bytes) on device %s "
+"will be wiped."
+msgstr ""
+
+#: src/utils_tools.c:583
+msgid "Failed to wipe device signature."
+msgstr ""
+
+#: src/utils_tools.c:590
+#, c-format
+msgid "Failed to probe device %s for a signature."
+msgstr ""
+
+#: src/utils_tools.c:629
+msgid ""
+"\n"
+"Reencryption interrupted."
+msgstr ""
+
+#: src/utils_password.c:43 src/utils_password.c:75
+#, c-format
+msgid "Cannot check password quality: %s"
+msgstr ""
+
+#: src/utils_password.c:51
+#, c-format
+msgid ""
+"Password quality check failed:\n"
+" %s"
+msgstr ""
+
+#: src/utils_password.c:83
+#, c-format
+msgid "Password quality check failed: Bad passphrase (%s)"
+msgstr ""
+
+#: src/utils_password.c:193 src/utils_password.c:208
+msgid "Error reading passphrase from terminal."
+msgstr ""
+
+#: src/utils_password.c:206
+msgid "Verify passphrase: "
+msgstr ""
+
+#: src/utils_password.c:213
+msgid "Passphrases do not match."
+msgstr ""
+
+#: src/utils_password.c:250
+msgid "Cannot use offset with terminal input."
+msgstr ""
+
+#: src/utils_password.c:253
+#, c-format
+msgid "Enter passphrase: "
+msgstr ""
+
+#: src/utils_password.c:256
+#, c-format
+msgid "Enter passphrase for %s: "
+msgstr ""
+
+#: src/utils_password.c:287
+msgid "No key available with this passphrase."
+msgstr ""
+
+#: src/utils_password.c:289
+msgid "No usable keyslot is available."
+msgstr ""
+
+#: src/utils_password.c:328
+#, c-format
+msgid "Cannot open keyfile %s for write."
+msgstr ""
+
+#: src/utils_password.c:335
+#, c-format
+msgid "Cannot write to keyfile %s."
+msgstr ""
+
+#: src/utils_luks2.c:47
+#, c-format
+msgid "Failed to open file %s in read-only mode."
+msgstr ""
+
+#: src/utils_luks2.c:60
+msgid "Provide valid LUKS2 token JSON:\n"
+msgstr ""
+
+#: src/utils_luks2.c:67
+msgid "Failed to read JSON file."
+msgstr ""
+
+#: src/utils_luks2.c:72
+msgid ""
+"\n"
+"Read interrupted."
+msgstr ""
+
+#: src/utils_luks2.c:113
+#, c-format
+msgid "Failed to open file %s in write mode."
+msgstr ""
+
+#: src/utils_luks2.c:122
+msgid ""
+"\n"
+"Write interrupted."
+msgstr ""
+
+#: src/utils_luks2.c:126
+msgid "Failed to write JSON file."
 msgstr ""