Re: cryptsetup - 2FA feature request

Ondrej Kozina <[email protected]> Mon, 20 Sep 2021 15:43:12 +0200
Newsgroups gmane.linux.kernel.device-mapper.dm-crypt
Message-ID <[email protected]>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