anchor.diff:          fi
   
           local k_yubi
  -        k_yubi="$(echo -n $aes_blob_decrypted | hextorb | take 20 | rbtohex)"
  +        k_yubi="$(echo -n $aes_blob_decrypted | take 40)"
   
           local k_luks
  -        k_luks="$(echo -n $aes_blob_decrypted | hextorb | drop 20 | take 64 | rbtohex)"
  +        k_luks="$(echo -n $aes_blob_decrypted | drop 40 | take 128)"
   
           echo -n "$k_luks" | hextorb | cryptsetup luksOpen ${device} ${name} ${optionalString allowDiscards "--allow-discards"} --key-file=-
   
  
positive.code: 
              k_blob="$(ykchalresp -${toString yubikey.slot} -x $challenge 2>/dev/null)"
  
              aes_blob_decrypted="$(drop 16 ${yubikey.storage.mountPoint}${yubikey.storage.path} | openssl-wrap enc -d -aes-256-ctr -K $k_blob -iv $uuid_r | rbtohex)"
  
              checksum="$(echo -n $aes_blob_decrypted | hextorb | drop 84 | rbtohex)"
              if [ "$(echo -n $aes_blob_decrypted | hextorb | take 84 | openssl-wrap dgst -binary -sha512 | rbtohex)" == "$checksum" ]; then
                   checksum_correct=1
                   break
  
negative.code:             local new_k_blob
              new_k_blob="$(echo -n $new_challenge | hextorb | openssl-wrap dgst -binary -sha1 -mac HMAC -macopt hexkey:$k_yubi | rbtohex)"
  
              echo -n "$new_uuid_r" > ${yubikey.storage.mountPoint}${yubikey.storage.path}
              echo -n "$k_yubi$k_luks$checksum" | hextorb | openssl-wrap enc -e -aes-256-ctr -K "$new_k_blob" -iv "$new_uuid_r" | rbtohex >> ${yubikey.storage.mountPoint}${yubikey.storage.path}
          else
              echo "Warning: Could not obtain new UUID, current challenge persists!"
          fi
  