anchor.diff:          local uuid_r
           local k_user
           local challenge
  -        local k_blob
  -        local aes_blob_decrypted
  -        local checksum_correct
  -        local checksum
  -        local uuid_luks
  -        local user_record
  -
  -        uuid_luks="$(cryptsetup luksUUID ${device} | take 36 | tr -d '-')"
  -
  -        ${optionalString (!yubikey.multiUser) ''
  -        user_record="$(cat ${yubikey.storage.mountPoint}${yubikey.storage.path})"
  -        uuid_r="$(echo -n $user_record | take 32)"
  -        ''}
  +        local opened
  +
  +        sleep 1
  +
  +        uuid_r="$(cat ${yubikey.storage.mountPoint}${yubikey.storage.path})"
   
           for try in $(seq 3); do
  -
  -            ${optionalString yubikey.multiUser ''
  -            local user_id
  -            echo -n "Enter user id: "
  -            read -s user_id
  -            echo
  -            ''}
   
               ${optionalString yubikey.twoFactor ''
               echo -n "Enter two-factor passphrase: "
  
positive.code:     ${optionalString (luks.yubikeySupport && (yubikey != null)) ''
  
      rbtohex() {
          od -An -vtx1 | tr -d ' \n'
      }
  
      hextorb() {
          tr '[:lower:]' '[:upper:]' | sed -e 's|\([0-9A-F]\{2\}\)|\\\\\\x\1|gI' | xargs printf
      }
  
      take() {
          local c="$1"
          shift
          head -c $c "$@"
      }
  
      drop() {
          local c="$1"
          shift
          if [ -e "$1" ]; then
              cat "$1" | ( dd of=/dev/null bs="$c" count=1 2>/dev/null ; dd 2>/dev/null )
          else
              ( dd of=/dev/null bs="$c" count=1 2>/dev/null ; dd 2>/dev/null )
          fi
      }
  
      open_yubikey() {
  
negative.code:             echo
              ''}
  
              challenge="$(echo -n $k_user$uuid_r | openssl-wrap dgst -binary -sha512 | rbtohex)"
  
              k_luks="$(ykchalresp -${toString yubikey.slot} -x $challenge 2>/dev/null)"
  
              echo -n "$k_luks" | hextorb | cryptsetup luksOpen ${device} ${name} ${optionalString allowDiscards "--allow-discards"} --key-file=-
  
              if [ $? == "0" ]; then
                  opened=true
                  break
              else
                  opened=false
                  echo "Authentication failed!"
              fi
          done
  
          if [ "$opened" == false ]; then
              umount ${yubikey.storage.mountPoint}
              echo "Maximum authentication errors reached"
              exit 1
          fi
  
          update_failed=false
  
  