anchor.diff:              new_k_luks="$(echo | pbkdf2-sha512 ${toString yubikey.keyLength} $new_iterations $new_response | rbtohex)"
           fi
   
  -        mkdir -p ${yubikey.ramfsMountPoint}
  -        # A ramfs is used here to ensure that the file used to update
  -        # the key slot with cryptsetup will never get swapped out.
  -        # Warning: Do NOT replace with tmpfs!
  -        mount -t ramfs none ${yubikey.ramfsMountPoint}
  -
  -        echo -n "$new_k_luks" | hextorb > ${yubikey.ramfsMountPoint}/new_key
  -        echo -n "$k_luks" | hextorb | ${cschange} --key-file=- ${yubikey.ramfsMountPoint}/new_key
  +        echo -n "$new_k_luks" | hextorb > /crypt-ramfs/new_key
  +        echo -n "$k_luks" | hextorb | ${cschange} --key-file=- /crypt-ramfs/new_key
   
           if [ $? == 0 ]; then
  -            echo -ne "$new_salt\n$new_iterations" > ${yubikey.storage.mountPoint}${yubikey.storage.path}
  +            echo -ne "$new_salt\n$new_iterations" > /crypt-storage${yubikey.storage.path}
           else
               echo "Warning: Could not update LUKS key, current challenge persists!"
           fi
   
  -        rm -f ${yubikey.ramfsMountPoint}/new_key
  -        umount ${yubikey.ramfsMountPoint}
  -        rm -rf ${yubikey.ramfsMountPoint}
  -
  -        umount ${yubikey.storage.mountPoint}
  +        rm -f /crypt-ramfs/new_key
  +        umount /crypt-storage
       }
   
       open_yubikey() {
  
positive.code:         local new_response
          local new_k_luks
  
          mkdir -p ${yubikey.storage.mountPoint}
          mount -t ${yubikey.storage.fsType} ${toString yubikey.storage.device} ${yubikey.storage.mountPoint}
  
          salt="$(cat ${yubikey.storage.mountPoint}${yubikey.storage.path} | sed -n 1p | tr -d '\n')"
          iterations="$(cat ${yubikey.storage.mountPoint}${yubikey.storage.path} | sed -n 2p | tr -d '\n')"
          challenge="$(echo -n $salt | openssl-wrap dgst -binary -sha512 | rbtohex)"
          response="$(ykchalresp -${toString yubikey.slot} -x $challenge 2>/dev/null)"
  
  
negative.code:               };
              });
            };
          };
        }));
      };
  
      boot.initrd.luks.yubikeySupport = mkOption {
  