derivepassphrase.git

@@ -7,8 +7,8 @@ msgid ""

 msgstr ""

 "Project-Id-Version: derivepassphrase 0.5a1.dev1\n"

 "Report-Msgid-Bugs-To: software@the13thletter.info\n"

-"POT-Creation-Date: 2025-02-11 15:30+0000\n"

-"PO-Revision-Date: 2025-02-11 15:30+0000\n"

+"POT-Creation-Date: 2025-02-11 22:20+0000\n"

+"PO-Revision-Date: 2025-02-11 22:20+0000\n"

 "Last-Translator: AUTHOR <someone@example.com>\n"

 "Language: en\n"

 "Language-Team: English\n"

@@ -17,1151 +17,1165 @@ msgstr ""

 "Content-Transfer-Encoding: 8bit\n"

 "Plural-Forms: nplurals=2; plural=(n != 1);\n"

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories.  The system stores entries in different "buckets" of a hash table.  Here, we report on a single item (path and value) we discovered after decrypting the whole bucket.  (We ensure the path and value are printable as-is.)

+#. TRANSLATORS: This is a short label that will be prepended to a warning message, e.g., "Deprecation warning: A subcommand will be required in v1.0."

 #. 

-#. Message-ID: DebugMsgTemplate.BUCKET_ITEM_FOUND

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Found bucket item: {path} -> {value}"

+#. Message-ID: Label.DEPRECATION_WARNING_LABEL

+msgctxt "Label :: Diagnostics :: Marker"

+msgid "Deprecation warning"

 msgstr ""

-#. TRANSLATORS: "AES256-CBC" and "PKCS#7" are, in essence, names of formats, and should not be translated.  "IV" means "initialization vector", and is specifically a cryptographic term, as are "plaintext" and "ciphertext".

+#. TRANSLATORS: This is a short label that will be prepended to a warning message, e.g., "Warning: An empty service name is not supported by vault(1)."

 #. 

-#. Message-ID: DebugMsgTemplate.DECRYPT_BUCKET_ITEM_INFO

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Decrypt bucket item contents:\n"

-"\n"

-"Encryption key (master key): {enc_key}\n"

-"Encryption cipher: AES256-CBC with PKCS#7 padding\n"

-"Encryption IV: {iv}\n"

-"Encrypted ciphertext: {ciphertext}\n"

-"Plaintext: {plaintext}"

+#. Message-ID: Label.WARNING_LABEL

+msgctxt "Label :: Diagnostics :: Marker"

+msgid "Warning"

 msgstr ""

-#. TRANSLATORS: Message-ID: DebugMsgTemplate.DECRYPT_BUCKET_ITEM_KEY_INFO

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Decrypt bucket item:\n"

-"\n"

-"Plaintext: {plaintext}\n"

-"Encryption key (master key): {enc_key}\n"

-"Signing key (master key): {sign_key}"

+#. TRANSLATORS: This is one of two values of the settings_type metavar used in the CANNOT_UPDATE_SETTINGS_NO_SETTINGS entry.  It is only used there.  The full sentence then reads: "Cannot update the global settings without any given settings."

+#. 

+#. Message-ID: Label.CANNOT_UPDATE_SETTINGS_METAVAR_SETTINGS_TYPE_GLOBAL

+msgctxt "Label :: Error message :: Metavar"

+msgid "global settings"

 msgstr ""

-#. TRANSLATORS: The MAC stands for "message authentication code", which guarantees the authenticity of the message to anyone who holds the corresponding key, similar to a digital signature.  The acronym "MAC" is assumed to be well-known to the English target audience, or at least discoverable by them; they *are* asking for debug output, after all.  Please use your judgement as to whether to translate this term or not, expanded or not.

+#. TRANSLATORS: This is one of two values of the settings_type metavar used in the CANNOT_UPDATE_SETTINGS_NO_SETTINGS entry.  It is only used there.  The full sentence then reads: "Cannot update the service-specific settings without any given settings."

 #. 

-#. Message-ID: DebugMsgTemplate.DECRYPT_BUCKET_ITEM_MAC_INFO

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Decrypt bucket item contents:\n"

-"\n"

-"MAC key: {sign_key}\n"

-"Authenticated content: {ciphertext}\n"

-"Claimed MAC value: {claimed_mac}\n"

-"Computed MAC value: {actual_mac}"

+#. Message-ID: Label.CANNOT_UPDATE_SETTINGS_METAVAR_SETTINGS_TYPE_SERVICE

+msgctxt "Label :: Error message :: Metavar"

+msgid "service-specific settings"

 msgstr ""

-#. TRANSLATORS: "AES256-CBC" and "PKCS#7" are, in essence, names of formats, and should not be translated.  "IV" means "initialization vector", and is specifically a cryptographic term, as are "plaintext" and "ciphertext".

-#. 

-#. Message-ID: DebugMsgTemplate.DECRYPT_BUCKET_ITEM_SESSION_KEYS_INFO

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Decrypt bucket item session keys:\n"

-"\n"

-"Encryption key (master key): {enc_key}\n"

-"Encryption cipher: AES256-CBC with PKCS#7 padding\n"

-"Encryption IV: {iv}\n"

-"Encrypted ciphertext: {ciphertext}\n"

-"Plaintext: {plaintext}\n"

-"Parsed plaintext: {code}"

+#. TRANSLATORS: Message-ID: Label.CONFIGURATION_EPILOG

+msgctxt "Label :: Help text :: Explanation"

+msgid "Use $VISUAL or $EDITOR to configure the spawned editor."

 msgstr ""

-#. TRANSLATORS: The MAC stands for "message authentication code", which guarantees the authenticity of the message to anyone who holds the corresponding key, similar to a digital signature.  The acronym "MAC" is assumed to be well-known to the English target audience, or at least discoverable by them; they *are* asking for debug output, after all.  Please use your judgement as to whether to translate this term or not, expanded or not.

-#. 

-#. Message-ID: DebugMsgTemplate.DECRYPT_BUCKET_ITEM_SESSION_KEYS_MAC_INFO

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Decrypt bucket item session keys:\n"

-"\n"

-"MAC key (master key): {sign_key}\n"

-"Authenticated content: {ciphertext}\n"

-"Claimed MAC value: {claimed_mac}\n"

-"Computed MAC value: {actual_mac}"

+#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_02

+msgctxt "Label :: Help text :: Explanation"

+msgid "The currently implemented subcommands are \"vault\" (for the scheme used by vault) and \"export\" (for exporting foreign configuration data).  See the respective `--help` output for instructions.  If no subcommand is given, we default to \"vault\"."

 msgstr ""

-#. TRANSLATORS: Message-ID: DebugMsgTemplate.DERIVED_MASTER_KEYS_KEYS

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Derived master keys' keys:\n"

-"\n"

-"Encryption key: {enc_key}\n"

-"Signing key: {sign_key}\n"

-"Password: {pw_bytes}\n"

-"Function call: pbkdf2(algorithm={algorithm!r}, length={length!r}, salt={salt!r}, iterations={iterations!r})"

+#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_03

+msgctxt "Label :: Help text :: Explanation"

+msgid "Deprecation notice: Defaulting to \"vault\" is deprecated.  Starting in v1.0, the subcommand must be specified explicitly."

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories, while "assembling" the items stored in the configuration according to the item's "path".  Each "directory" in the path contains a list of children it claims to contain, and this list must be matched against the actual discovered items.  Now, at the end, we actually confirm the claim.  (We would have already thrown an error here otherwise.)

-#. 

-#. Message-ID: DebugMsgTemplate.DIRECTORY_CONTENTS_CHECK_OK

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Directory contents check OK: {path} -> {contents}"

+#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_EPILOG_01

+msgctxt "Label :: Help text :: Explanation"

+msgid "Configuration is stored in a directory according to the `DERIVEPASSPHRASE_PATH` variable, which defaults to `~/.derivepassphrase` on UNIX-like systems and `C:\\Users\\<user>\\AppData\\Roaming\\Derivepassphrase` on Windows."

 msgstr ""

-#. TRANSLATORS: The MAC stands for "message authentication code", which guarantees the authenticity of the message to anyone who holds the corresponding key, similar to a digital signature.  The acronym "MAC" is assumed to be well-known to the English target audience, or at least discoverable by them; they *are* asking for debug output, after all.  Please use your judgement as to whether to translate this term or not, expanded or not.

-#. 

-#. Message-ID: DebugMsgTemplate.MASTER_KEYS_DATA_MAC_INFO

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Master keys data:\n"

-"\n"

-"MAC key: {sign_key}\n"

-"Authenticated content: {ciphertext}\n"

-"Claimed MAC value: {claimed_mac}\n"

-"Computed MAC value: {actual_mac}"

+#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_EXPORT_02

+msgctxt "Label :: Help text :: Explanation"

+msgid "The only available subcommand is \"vault\", which implements the vault-native configuration scheme.  If no subcommand is given, we default to \"vault\"."

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories, while "assembling" the items stored in the configuration according to the item's "path".  Each "directory" in the path contains a list of children it claims to contain, and this list must be matched against the actual discovered items.  When emitting this message, we merely indicate that we saved the "claimed" list for this directory for later.

+#. TRANSLATORS: The metavar is Label.EXPORT_VAULT_METAVAR_PATH.

 #. 

-#. Message-ID: DebugMsgTemplate.POSTPONING_DIRECTORY_CONTENTS_CHECK

+#. Message-ID: Label.DERIVEPASSPHRASE_EXPORT_VAULT_02

 #, python-brace-format

-msgctxt "Debug message"

-msgid "Postponing directory contents check: {path} -> {contents}"

+msgctxt "Label :: Help text :: Explanation"

+msgid "Depending on the configuration format, {path_metavar} may either be a file or a directory.  We support the vault \"v0.2\", \"v0.3\" and \"storeroom\" formats."

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories, while "assembling" the items stored in the configuration according to the item's "path".  We confirm that we set the entry at the given path to the given value.

+#. TRANSLATORS: The metavar is Label.EXPORT_VAULT_METAVAR_PATH.

 #. 

-#. Message-ID: DebugMsgTemplate.SETTING_CONFIG_STRUCTURE_CONTENTS

+#. Message-ID: Label.DERIVEPASSPHRASE_EXPORT_VAULT_03

 #, python-brace-format

-msgctxt "Debug message"

-msgid "Setting contents: {path} -> {value}"

+msgctxt "Label :: Help text :: Explanation"

+msgid "If {path_metavar} is explicitly given as `VAULT_PATH`, then use the `VAULT_PATH` environment variable to determine the correct path.  (Use `./VAULT_PATH` or similar to indicate a file/directory actually named `VAULT_PATH`.)"

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories, while "assembling" the items stored in the configuration according to the item's "path".  We confirm that we set up a currently empty directory at the given path.

+#. TRANSLATORS: The metavar is Label.VAULT_METAVAR_SERVICE.

 #. 

-#. Message-ID: DebugMsgTemplate.SETTING_CONFIG_STRUCTURE_CONTENTS_EMPTY_DIRECTORY

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_02

 #, python-brace-format

-msgctxt "Debug message"

-msgid "Setting contents (empty directory): {path}"

+msgctxt "Label :: Help text :: Explanation"

+msgid "If operating on global settings, or importing/exporting settings, then {service_metavar} must be omitted.  Otherwise it is required."

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "native"-type configuration directories.  It is preceded by the info message VAULT_NATIVE_PARSING_IV_PAYLOAD_MAC; see the commentary there concerning the terms and thoughts on translating them.

-#. 

-#. Message-ID: DebugMsgTemplate.VAULT_NATIVE_CHECKING_MAC_DETAILS

-#, python-brace-format

-msgctxt "Debug message"

-msgid "MAC details:\n"

-"\n"

-"MAC input: {mac_input}\n"

-"Expected MAC: {mac}"

+#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_VAULT_EPILOG_01

+msgctxt "Label :: Help text :: Explanation"

+msgid "WARNING: There is NO WAY to retrieve the generated passphrases if the master passphrase, the SSH key, or the exact passphrase settings are lost, short of trying out all possible combinations.  You are STRONGLY advised to keep independent backups of the settings and the SSH key, if any."

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "native"-type configuration directories: in v0.2, the non-standard and deprecated "EVP_bytestokey" function from OpenSSL must be reimplemented from scratch.  The terms "salt" and "IV" (initialization vector) are cryptographic terms.

-#. 

-#. Message-ID: DebugMsgTemplate.VAULT_NATIVE_EVP_BYTESTOKEY_INIT

-#, python-brace-format

-msgctxt "Debug message"

-msgid "evp_bytestokey_md5 (initialization):\n"

-"\n"

-"Input: {data}\n"

-"Salt: {salt}\n"

-"Key size: {key_size}\n"

-"IV size: {iv_size}\n"

-"Buffer length: {buffer_length}\n"

-"Buffer: {buffer}"

+#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_VAULT_EPILOG_02

+msgctxt "Label :: Help text :: Explanation"

+msgid "The configuration is NOT encrypted, and you are STRONGLY discouraged from using a stored passphrase."

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "native"-type configuration directories: in v0.2, the non-standard and deprecated "EVP_bytestokey" function from OpenSSL must be reimplemented from scratch.  The terms "salt" and "IV" (initialization vector) are cryptographic terms.This function reports on the final results.

+#. TRANSLATORS: This instruction text is shown above the user's old stored notes for this service, if any, if the recommended "modern" editor interface is used.  The next line is the cut marking defined in Label.DERIVEPASSPHRASE_VAULT_NOTES_MARKER.

 #. 

-#. Message-ID: DebugMsgTemplate.VAULT_NATIVE_EVP_BYTESTOKEY_RESULT

-#, python-brace-format

-msgctxt "Debug message"

-msgid "evp_bytestokey_md5 (result):\n"

-"\n"

-"Encryption key: {enc_key}\n"

-"IV: {iv}"

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_NOTES_INSTRUCTION_TEXT

+msgctxt "Label :: Help text :: Explanation"

+msgid "# Enter notes below the line with the cut mark (ASCII scissors and\n"

+"# dashes).  Lines above the cut mark (such as this one) will be ignored.\n"

+"#\n"

+"# If you wish to clear the notes, leave everything beyond the cut mark\n"

+"# blank.  However, if you leave the *entire* file blank, also removing\n"

+"# the cut mark, then the edit is aborted, and the old notes contents are\n"

+"# retained.\n"

+"#"

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "native"-type configuration directories: in v0.2, the non-standard and deprecated "EVP_bytestokey" function from OpenSSL must be reimplemented from scratch.  The terms "salt" and "IV" (initialization vector) are cryptographic terms.This function reports on the updated buffer length and contents after executing one round of hashing.

+#. TRANSLATORS: This instruction text is shown if the vault(1)-compatible "legacy" editor interface is used and no previous notes exist.  The interface does not support commentary in the notes, so we fill this with obvious placeholder text instead.  (Please replace this with what *your* language/culture would obviously recognize as placeholder text.)

 #. 

-#. Message-ID: DebugMsgTemplate.VAULT_NATIVE_EVP_BYTESTOKEY_ROUND

-#, python-brace-format

-msgctxt "Debug message"

-msgid "evp_bytestokey_md5 (round update):\n"

-"\n"

-"Buffer length: {buffer_length}\n"

-"Buffer: {buffer}"

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_NOTES_LEGACY_INSTRUCTION_TEXT

+msgctxt "Label :: Help text :: Explanation"

+msgid "Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua."

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "native"-type configuration directories.  "padding" and "plaintext" are cryptographic terms.

+#. TRANSLATORS: The metavar is Label.PASSPHRASE_GENERATION_METAVAR_NUMBER.

 #. 

-#. Message-ID: DebugMsgTemplate.VAULT_NATIVE_PADDED_PLAINTEXT

+#. Message-ID: Label.PASSPHRASE_GENERATION_EPILOG

 #, python-brace-format

-msgctxt "Debug message"

-msgid "Padded plaintext: {contents}"

+msgctxt "Label :: Help text :: Explanation"

+msgid "Use {metavar}=0 to exclude a character type from the output."

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "native"-type configuration directories.  It is preceded by the info message VAULT_NATIVE_PARSING_IV_PAYLOAD_MAC; see the commentary there concerning the terms and thoughts on translating them.

+#. TRANSLATORS: The metavar is Label.STORAGE_MANAGEMENT_METAVAR_PATH.

 #. 

-#. Message-ID: DebugMsgTemplate.VAULT_NATIVE_PARSE_BUFFER

+#. Message-ID: Label.STORAGE_MANAGEMENT_EPILOG

 #, python-brace-format

-msgctxt "Debug message"

-msgid "Buffer: {contents}\n"

-"\n"

-"IV: {iv}\n"

-"Payload: {payload}\n"

-"MAC: {mac}"

+msgctxt "Label :: Help text :: Explanation"

+msgid "Using \"-\" as {metavar} for standard input/standard output is supported."

 msgstr ""

-#. TRANSLATORS: Message-ID: DebugMsgTemplate.VAULT_NATIVE_PBKDF2_CALL

+#. TRANSLATORS: We use this format string to indicate, at the beginning of a command's help text, that this command is deprecated.

+#. 

+#. Message-ID: Label.DEPRECATED_COMMAND_LABEL

 #, python-brace-format

-msgctxt "Debug message"

-msgid "Master key derivation:\n"

-"\n"

-"PBKDF2 call: PBKDF2-HMAC(password={password!r}, salt={salt!r}, iterations={iterations!r}, key_size={key_size!r}, algorithm={algorithm!r})\n"

-"Result (binary): {raw_result}\n"

-"Result (hex key): {result_key!r}"

+msgctxt "Label :: Help text :: Marker"

+msgid "(Deprecated) {text}"

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "native"-type configuration directories.  "plaintext" is a cryptographic term.

+#. TRANSLATORS: The marker for separating the text from Label.DERIVEPASSPHRASE_VAULT_NOTES_INSTRUCTION_TEXT from the user's input (below the marker).  The first line starting with this label marks the separation point.

 #. 

-#. Message-ID: DebugMsgTemplate.VAULT_NATIVE_PLAINTEXT

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Plaintext: {contents}"

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_NOTES_MARKER

+msgctxt "Label :: Help text :: Marker"

+msgid "# - - - - - >8 - - - - - >8 - - - - - >8 - - - - - >8 - - - - -"

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "native"-type configuration directories.  It is preceded by the info message VAULT_NATIVE_PARSING_IV_PAYLOAD_MAC and the debug message PARSING_NATIVE_PARSE_BUFFER; see the commentary there concerning the terms and thoughts on translating them.

+#. TRANSLATORS: This text is used as {metavar} in Label.EXPORT_VAULT_FORMAT_HELP_TEXT, yielding e.g. "Try the following storage format FMT."

 #. 

-#. Message-ID: DebugMsgTemplate.VAULT_NATIVE_V02_PAYLOAD_MAC_POSTPROCESSING

-#, python-brace-format

-msgctxt "Debug message"

-msgid "Postprocessing buffer (v0.2):\n"

-"\n"

-"Payload: {payload} (decoded from base64)\n"

-"MAC: {mac} (decoded from hex)"

+#. Message-ID: Label.EXPORT_VAULT_FORMAT_METAVAR_FMT

+msgctxt "Label :: Help text :: Metavar :: export vault"

+msgid "FMT"

 msgstr ""

-#. TRANSLATORS: "loaded keys" being keys loaded into the agent.

+#. TRANSLATORS: This text is used as {metavar} in Label.EXPORT_VAULT_KEY_HELP_TEXT, yielding e.g. "Use K as the storage master key."

 #. 

-#. Message-ID: ErrMsgTemplate.AGENT_REFUSED_LIST_KEYS

-msgctxt "Error message"

-msgid "The SSH agent failed to or refused to supply a list of loaded keys."

+#. Message-ID: Label.EXPORT_VAULT_KEY_METAVAR_K

+msgctxt "Label :: Help text :: Metavar :: export vault"

+msgid "K"

 msgstr ""

-#. TRANSLATORS: The message to be signed is the vault UUID, but there's no space to explain that here, so ideally the error message does not go into detail.

+#. TRANSLATORS: Used as "path_metavar" in Label.DERIVEPASSPHRASE_EXPORT_VAULT_02 and others, yielding e.g. "Depending on the configuration format, PATH may either be a file or a directory."

 #. 

-#. Message-ID: ErrMsgTemplate.AGENT_REFUSED_SIGNATURE

-msgctxt "Error message"

-msgid "The SSH agent failed to or refused to issue a signature with the selected key, necessary for deriving a service passphrase."

+#. Message-ID: Label.EXPORT_VAULT_METAVAR_PATH

+msgctxt "Label :: Help text :: Metavar :: export vault"

+msgid "PATH"

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: This metavar is used in Label.PASSPHRASE_GENERATION_EPILOG, Label.DERIVEPASSPHRASE_VAULT_LENGTH_HELP_TEXT and others, yielding e.g. "Ensure a passphrase length of NUMBER characters.".

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_CONNECT_TO_AGENT

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot connect to the SSH agent: {error!s}: {filename!r}."

+#. Message-ID: Label.PASSPHRASE_GENERATION_METAVAR_NUMBER

+msgctxt "Label :: Help text :: Metavar :: vault"

+msgid "NUMBER"

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: This metavar is used in Label.STORAGE_MANAGEMENT_EPILOG, Label.DERIVEPASSPHRASE_VAULT_IMPORT_HELP_TEXT and others, yielding e.g. "Ensure a passphrase length of NUMBER characters.".

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_CONNECT_TO_AGENT

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot connect to the SSH agent: {error!s}."

+#. Message-ID: Label.STORAGE_MANAGEMENT_METAVAR_PATH

+msgctxt "Label :: Help text :: Metavar :: vault"

+msgid "PATH"

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: This metavar is used as "service_metavar" in multiple help texts, such as Label.DERIVEPASSPHRASE_VAULT_CONFIG_HELP_TEXT, Label.DERIVEPASSPHRASE_VAULT_02, ErrMsgTemplate.SERVICE_REQUIRED, etc.  Sample texts are "Deriving a passphrase requires a SERVICE.", "save the given settings for SERVICE, or global" and "If operating on global settings, or importing/exporting settings, then SERVICE must be omitted."

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_DECODEIMPORT_VAULT_SETTINGS

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot import vault settings: cannot decode JSON: {error!s}."

+#. Message-ID: Label.VAULT_METAVAR_SERVICE

+msgctxt "Label :: Help text :: Metavar :: vault"

+msgid "SERVICE"

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

-#. 

-#. Message-ID: ErrMsgTemplate.CANNOT_EXPORT_VAULT_SETTINGS

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot export vault settings: {error!s}: {filename!r}."

+#. TRANSLATORS: Message-ID: Label.DEBUG_OPTION_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Also emit debug information.  Implies --verbose."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: This is the first paragraph of the command help text, but it also appears (in truncated form, if necessary) as one-line help text for this command.  The translation should thus be as meaningful as possible even if truncated.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_EXPORT_VAULT_SETTINGS

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot export vault settings: {error!s}."

+#. Message-ID: Label.DERIVEPASSPHRASE_01

+msgctxt "Label :: Help text :: One-line description"

+msgid "Derive a strong passphrase, deterministically, from a master secret."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: This is the first paragraph of the command help text, but it also appears (in truncated form, if necessary) as one-line help text for this command.  The translation should thus be as meaningful as possible even if truncated.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_IMPORT_VAULT_SETTINGS

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot import vault settings: {error!s}: {filename!r}."

+#. Message-ID: Label.DERIVEPASSPHRASE_EXPORT_01

+msgctxt "Label :: Help text :: One-line description"

+msgid "Export a foreign configuration to standard output."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: This is the first paragraph of the command help text, but it also appears (in truncated form, if necessary) as one-line help text for this command.  The translation should thus be as meaningful as possible even if truncated.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_IMPORT_VAULT_SETTINGS

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot import vault settings: {error!s}."

+#. Message-ID: Label.DERIVEPASSPHRASE_EXPORT_VAULT_01

+msgctxt "Label :: Help text :: One-line description"

+msgid "Export a vault-native configuration to standard output."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: This is the first paragraph of the command help text, but it also appears (in truncated form, if necessary) as one-line help text for this command.  The translation should thus be as meaningful as possible even if truncated.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_LOAD_USER_CONFIG

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot load user config: {error!s}: {filename!r}."

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_01

+msgctxt "Label :: Help text :: One-line description"

+msgid "Derive a passphrase using the vault derivation scheme."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: The metavar is Label.VAULT_METAVAR_SERVICE.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_LOAD_USER_CONFIG

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_CONFIG_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "Cannot load user config: {error!s}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Save the given settings for {service_metavar}, or global."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: The metavar is Label.PASSPHRASE_GENERATION_METAVAR_NUMBER.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_LOAD_VAULT_SETTINGS

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_DASH_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "Cannot load vault settings: {error!s}: {filename!r}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Ensure at least {metavar} \"-\" or \"_\" characters."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

-#. 

-#. Message-ID: ErrMsgTemplate.CANNOT_LOAD_VAULT_SETTINGS

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot load vault settings: {error!s}."

+#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_VAULT_DELETE_ALL_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Delete all settings."

 msgstr ""

-#. TRANSLATORS: Unlike the "Cannot load {path!r} as a {fmt!s} vault configuration." message, *this* error message is emitted when we have tried loading the path in each of our supported formats, and failed.  The user will thus see the above "Cannot load ..." warning message potentially multiple times, and this error message at the very bottom.

-#. 

-#. Message-ID: ErrMsgTemplate.CANNOT_PARSE_AS_VAULT_CONFIG

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot parse {path!r} as a valid vault-native configuration file/directory."

+#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_VAULT_DELETE_GLOBALS_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Delete the global settings."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: The metavar is Label.VAULT_METAVAR_SERVICE.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_PARSE_AS_VAULT_CONFIG_OSERROR

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_DELETE_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "Cannot parse {path!r} as a valid vault-native configuration file/directory: {error!s}: {filename!r}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Delete the settings for {service_metavar}."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: The corresponding option is displayed as "--modern-editor-interface / --vault-legacy-editor-interface", so you may want to hint that the default (legacy) is the second of those options.  Though the vault(1) legacy editor interface clearly has deficiencies and (in my opinion) should only be used for compatibility purposes, the one-line help text should try not to sound too judgmental, if possible.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_PARSE_AS_VAULT_CONFIG_OSERROR

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot parse {path!r} as a valid vault-native configuration file/directory: {error!s}."

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_EDITOR_INTERFACE_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Edit notes using the modern editor interface or the vault-like legacy one (default)."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: The corresponding option is displayed as "--export-as=json|sh", so json refers to the JSON format (default) and sh refers to the POSIX sh format.  Please ensure that it is clear what the "json" and "sh" refer to in your translation... even if you cannot use texutal correspondence like the English text does.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_STORE_VAULT_SETTINGS

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot store vault settings: {error!s}: {filename!r}."

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_EXPORT_AS_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "When exporting, export as JSON (default) or as POSIX sh."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: The metavar is Label.STORAGE_MANAGEMENT_METAVAR_PATH.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_STORE_VAULT_SETTINGS

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_EXPORT_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "Cannot store vault settings: {error!s}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Export all saved settings to {metavar}."

 msgstr ""

-#. TRANSLATORS: This error message is used whenever we cannot make any sense of a response from the SSH agent because the response is ill-formed (truncated, improperly encoded, etc.) or otherwise violates the communications protocol.  Well-formed responses that adhere to the protocol, even if they indicate that the requested operation failed, are handled with a different error message.

+#. TRANSLATORS: The metavar is Label.STORAGE_MANAGEMENT_METAVAR_PATH.

 #. 

-#. Message-ID: ErrMsgTemplate.CANNOT_UNDERSTAND_AGENT

-msgctxt "Error message"

-msgid "Cannot understand the SSH agent's response because it violates the communication protocol."

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_IMPORT_HELP_TEXT

+#, python-brace-format

+msgctxt "Label :: Help text :: One-line description"

+msgid "Import saved settings from {metavar}."

 msgstr ""

-#. TRANSLATORS: The settings_type metavar contains translations for either "global settings" or "service-specific settings"; see the CANNOT_UPDATE_SETTINGS_METAVAR_SETTINGS_TYPE_GLOBAL and CANNOT_UPDATE_SETTINGS_METAVAR_SETTINGS_TYPE_SERVICE entries.  The first sentence will thus read either "Cannot update the global settings without any given settings." or "Cannot update the service-specific settings without any given settings.".  You may update this entry, and the two metavar entries, in any way you see fit that achieves the desired translations of the first sentence.

-#. 

-#. Message-ID: ErrMsgTemplate.CANNOT_UPDATE_SETTINGS_NO_SETTINGS

-#, python-brace-format

-msgctxt "Error message"

-msgid "Cannot update the {settings_type!s} without any given settings.  You must specify at least one of --lower, ..., --symbol, --notes, or --phrase or --key."

+#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_VAULT_KEY_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Select a suitable SSH key from the SSH agent."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: The metavar is Label.PASSPHRASE_GENERATION_METAVAR_NUMBER.

 #. 

-#. Message-ID: ErrMsgTemplate.INVALID_USER_CONFIG

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_LENGTH_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "The user configuration file is invalid.  {error!s}: {filename!r}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Ensure a passphrase length of {metavar} characters."

 msgstr ""

-#. TRANSLATORS: "error" is supplied by the operating system (errno/strerror).

+#. TRANSLATORS: The metavar is Label.PASSPHRASE_GENERATION_METAVAR_NUMBER.

 #. 

-#. Message-ID: ErrMsgTemplate.INVALID_USER_CONFIG

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_LOWER_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "The user configuration file is invalid.  {error!s}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Ensure at least {metavar} lowercase characters."

 msgstr ""

-#. TRANSLATORS: This error message is a reaction to a validator function saying *that* the configuration is not valid, but not *how* it is not valid.  The configuration file is principally parsable, however.

+#. TRANSLATORS: The metavar is Label.VAULT_METAVAR_SERVICE.

 #. 

-#. Message-ID: ErrMsgTemplate.INVALID_VAULT_CONFIG

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_NOTES_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "Invalid vault config: {config!r}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "With --config and {service_metavar}, spawn an editor to edit notes."

 msgstr ""

-#. TRANSLATORS: Message-ID: ErrMsgTemplate.MISSING_MODULE

+#. TRANSLATORS: The metavar is Label.PASSPHRASE_GENERATION_METAVAR_NUMBER.

+#. 

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_NUMBER_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "Cannot load the required Python module {module!r}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Ensure at least {metavar} digits."

 msgstr ""

-#. TRANSLATORS: Message-ID: ErrMsgTemplate.NO_AF_UNIX

-msgctxt "Error message"

-msgid "Cannot connect to an SSH agent because this Python version does not support UNIX domain sockets."

+#. TRANSLATORS: The corresponding option is displayed as "--overwrite-existing / --merge-existing", so you may want to hint that the default (merge) is the second of those options.

+#. 

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_OVERWRITE_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Overwrite or merge (default) the existing configuration."

 msgstr ""

-#. TRANSLATORS: Message-ID: ErrMsgTemplate.NO_KEY_OR_PHRASE

-msgctxt "Error message"

-msgid "No passphrase or key was given in the configuration.  In this case, the --phrase or --key argument is required."

+#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_VAULT_PHRASE_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Prompt for a master passphrase."

 msgstr ""

-#. TRANSLATORS: Message-ID: ErrMsgTemplate.NO_SSH_AGENT_FOUND

-msgctxt "Error message"

-msgid "Cannot find any running SSH agent because SSH_AUTH_SOCK is not set."

+#. TRANSLATORS: The corresponding option is displayed as "--print-notes-before / --print-notes-after", so you may want to hint that the default (after) is the second of those options.

+#. 

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_PRINT_NOTES_BEFORE_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Print the service notes (if any) before or after (default) the existing configuration."

 msgstr ""

-#. TRANSLATORS: Message-ID: ErrMsgTemplate.NO_SUITABLE_SSH_KEYS

+#. TRANSLATORS: The metavar is Label.PASSPHRASE_GENERATION_METAVAR_NUMBER.

+#. 

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_REPEAT_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "The SSH agent contains no keys suitable for {PROG_NAME!s}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Forbid any run of {metavar} identical characters."

 msgstr ""

-#. TRANSLATORS: The params are long-form command-line option names.  Typical example: "--key is mutually exclusive with --phrase."

+#. TRANSLATORS: The metavar is Label.PASSPHRASE_GENERATION_METAVAR_NUMBER.

 #. 

-#. Message-ID: ErrMsgTemplate.PARAMS_MUTUALLY_EXCLUSIVE

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_SPACE_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "{param1!s} is mutually exclusive with {param2!s}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Ensure at least {metavar} spaces."

 msgstr ""

-#. TRANSLATORS: The param is a long-form command-line option name, the metavar is Label.VAULT_METAVAR_SERVICE.

+#. TRANSLATORS: The metavar is Label.PASSPHRASE_GENERATION_METAVAR_NUMBER.

 #. 

-#. Message-ID: ErrMsgTemplate.PARAMS_NEEDS_SERVICE

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_SYMBOL_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "{param!s} requires a {service_metavar!s}."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Ensure at least {metavar} symbol characters."

 msgstr ""

-#. TRANSLATORS: The param is a long-form command-line option name, the metavar is Label.VAULT_METAVAR_SERVICE.

+#. TRANSLATORS: The corresponding option is displayed as "--unset=phrase|key|...|symbol", so the "given setting" is referring to "phrase", "key", "lower", ..., or "symbol", respectively.  "with --config" here means that the user must also specify "--config" for this option to have any effect.

 #. 

-#. Message-ID: ErrMsgTemplate.PARAMS_NEEDS_SERVICE_OR_CONFIG

-#, python-brace-format

-msgctxt "Error message"

-msgid "{param!s} requires a {service_metavar!s} or --config."

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_UNSET_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "With --config, also unsets the given setting.  May be specified multiple times."

 msgstr ""

-#. TRANSLATORS: The param is a long-form command-line option name, the metavar is Label.VAULT_METAVAR_SERVICE.

+#. TRANSLATORS: The metavar is Label.PASSPHRASE_GENERATION_METAVAR_NUMBER.

 #. 

-#. Message-ID: ErrMsgTemplate.PARAMS_NO_SERVICE

+#. Message-ID: Label.DERIVEPASSPHRASE_VAULT_UPPER_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "{param!s} does not take a {service_metavar!s} argument."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Ensure at least {metavar} uppercase characters."

 msgstr ""

-#. TRANSLATORS: The metavar is Label.VAULT_METAVAR_SERVICE.

+#. TRANSLATORS: See EXPORT_VAULT_FORMAT_HELP_TEXT.  The format names/labels "v0.3", "v0.2" and "storeroom" should not be translated.

 #. 

-#. Message-ID: ErrMsgTemplate.SERVICE_REQUIRED

-#, python-brace-format

-msgctxt "Error message"

-msgid "Deriving a passphrase requires a {service_metavar!s}."

+#. Message-ID: Label.EXPORT_VAULT_FORMAT_DEFAULTS_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Default: v0.3, v0.2, storeroom."

 msgstr ""

-#. TRANSLATORS: The rephrasing "Attempted to unset and set the same setting (--unset={setting!s} --{setting!s}=...) at the same time."may or may not be more suitable as a basis for translation instead.

+#. TRANSLATORS: The defaults_hint is Label.EXPORT_VAULT_FORMAT_DEFAULTS_HELP_TEXT, the metavar is Label.EXPORT_VAULT_FORMAT_METAVAR_FMT.

 #. 

-#. Message-ID: ErrMsgTemplate.SET_AND_UNSET_SAME_SETTING

+#. Message-ID: Label.EXPORT_VAULT_FORMAT_HELP_TEXT

 #, python-brace-format

-msgctxt "Error message"

-msgid "Attempted to unset and set --{setting!s} at the same time."

+msgctxt "Label :: Help text :: One-line description"

+msgid "Try the following storage format {metavar}.  If specified multiple times, the formats will be tried in order.  {defaults_hint}"

 msgstr ""

-#. TRANSLATORS: Message-ID: ErrMsgTemplate.SSH_KEY_NOT_LOADED

-msgctxt "Error message"

-msgid "The requested SSH key is not loaded into the agent."

+#. TRANSLATORS: See EXPORT_VAULT_KEY_HELP_TEXT.

+#. 

+#. Message-ID: Label.EXPORT_VAULT_KEY_DEFAULTS_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Default: check the VAULT_KEY, LOGNAME, USER, or USERNAME environment variables."

 msgstr ""

-#. TRANSLATORS: The user requested to edit the notes for a service, but aborted the request mid-editing.

+#. TRANSLATORS: The defaults_hint is Label.EXPORT_VAULT_KEY_DEFAULTS_HELP_TEXT, the metavar is Label.EXPORT_VAULT_KEY_METAVAR_K.

 #. 

-#. Message-ID: ErrMsgTemplate.USER_ABORTED_EDIT

-msgctxt "Error message"

-msgid "Not saving any new notes: the user aborted the request."

+#. Message-ID: Label.EXPORT_VAULT_KEY_HELP_TEXT

+#, python-brace-format

+msgctxt "Label :: Help text :: One-line description"

+msgid "Use {metavar} as the storage master key.  {defaults_hint}"

 msgstr ""

-#. TRANSLATORS: The user was prompted for a master passphrase, but aborted the request.

-#. 

-#. Message-ID: ErrMsgTemplate.USER_ABORTED_PASSPHRASE

-msgctxt "Error message"

-msgid "No passphrase was given; the user aborted the request."

+#. TRANSLATORS: Message-ID: Label.HELP_OPTION_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Show this help text, then exit."

 msgstr ""

-#. TRANSLATORS: The user was prompted to select a master SSH key, but aborted the request.

-#. 

-#. Message-ID: ErrMsgTemplate.USER_ABORTED_SSH_KEY_SELECTION

-msgctxt "Error message"

-msgid "No SSH key was selected; the user aborted the request."

+#. TRANSLATORS: Message-ID: Label.QUIET_OPTION_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Suppress even warnings; emit only errors."

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories.  The system stores entries in different "buckets" of a hash table.  After the respective items in the buckets have been decrypted, we then have a list of item paths plus contents to populate.  This must be done in a certain order (we don't yet have an existing directory tree to rely on, but rather must build it on-the-fly), hence the term "assembling".

-#. 

-#. Message-ID: InfoMsgTemplate.ASSEMBLING_CONFIG_STRUCTURE

-msgctxt "Info message"

-msgid "Assembling config structure"

+#. TRANSLATORS: Message-ID: Label.VERBOSE_OPTION_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Emit extra/progress information to standard error."

 msgstr ""

-#. TRANSLATORS: "fmt" is a string such as "v0.2" or "storeroom", indicating the format which we tried to load the vault configuration as.

-#. 

-#. Message-ID: InfoMsgTemplate.CANNOT_LOAD_AS_VAULT_CONFIG

-#, python-brace-format

-msgctxt "Info message"

-msgid "Cannot load {path!r} as a {fmt!s} vault configuration."

+#. TRANSLATORS: Message-ID: Label.VERSION_OPTION_HELP_TEXT

+msgctxt "Label :: Help text :: One-line description"

+msgid "Show applicable version information, then exit."

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories.  Having "assembled" the configuration items according to their claimed paths and contents, we then check if the assembled structure is internally consistent.

-#. 

-#. Message-ID: InfoMsgTemplate.CHECKING_CONFIG_STRUCTURE_CONSISTENCY

-msgctxt "Info message"

-msgid "Checking config structure consistency"

+#. TRANSLATORS: Message-ID: Label.COMMANDS_LABEL

+msgctxt "Label :: Help text :: Option group name"

+msgid "Commands"

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories.  The system stores entries in different "buckets" of a hash table.  We parse the directory bucket by bucket.  All buckets are numbered in hexadecimal, and typically there are 32 buckets, so 2-digit hex numbers.

-#. 

-#. Message-ID: InfoMsgTemplate.DECRYPTING_BUCKET

-#, python-brace-format

-msgctxt "Info message"

-msgid "Decrypting bucket {bucket_number}"

+#. TRANSLATORS: Message-ID: Label.COMPATIBILITY_OPTION_LABEL

+msgctxt "Label :: Help text :: Option group name"

+msgid "Compatibility and extension options"

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories.  `.keys` is a filename, from which data about the master keys for this configuration are loaded.

-#. 

-#. Message-ID: InfoMsgTemplate.PARSING_MASTER_KEYS_DATA

-msgctxt "Info message"

-msgid "Parsing master keys data from .keys"

+#. TRANSLATORS: Message-ID: Label.CONFIGURATION_LABEL

+msgctxt "Label :: Help text :: Option group name"

+msgid "Configuration"

 msgstr ""

-#. TRANSLATORS: This message immediately follows an error message about a missing library that needs to be installed.  The Python Package Index (PyPI) supports declaring sets of optional dependencies as "extras", so users installing from PyPI can request reinstallation with a named "extra" being enabled.  This would then let the installer take care of the missing libraries automatically, hence this suggestion to PyPI users.

-#. 

-#. Message-ID: InfoMsgTemplate.PIP_INSTALL_EXTRA

-#, python-brace-format

-msgctxt "Info message"

-msgid "For users installing from PyPI, see the {extra_name!r} extra."

+#. TRANSLATORS: Message-ID: Label.LOGGING_LABEL

+msgctxt "Label :: Help text :: Option group name"

+msgid "Logging"

 msgstr ""

-#. TRANSLATORS: This info message immediately follows the "Using deprecated v0.1-style ..." deprecation warning.

-#. 

-#. Message-ID: InfoMsgTemplate.SUCCESSFULLY_MIGRATED

+#. TRANSLATORS: Message-ID: Label.OPTIONS_LABEL

+msgctxt "Label :: Help text :: Option group name"

+msgid "Options"

+msgstr ""

+

+#. TRANSLATORS: Message-ID: Label.OTHER_OPTIONS_LABEL

+msgctxt "Label :: Help text :: Option group name"

+msgid "Other options"

+msgstr ""

+

+#. TRANSLATORS: Message-ID: Label.PASSPHRASE_GENERATION_LABEL

+msgctxt "Label :: Help text :: Option group name"

+msgid "Passphrase generation"

+msgstr ""

+

+#. TRANSLATORS: Message-ID: Label.STORAGE_MANAGEMENT_LABEL

+msgctxt "Label :: Help text :: Option group name"

+msgid "Storage management"

+msgstr ""

+

+#. TRANSLATORS: Message-ID: Label.VERSION_INFO_TEXT

 #, python-brace-format

-msgctxt "Info message"

-msgid "Successfully migrated to {path!r}."

+msgctxt "Label :: Info Message"

+msgid "{PROG_NAME} {VERSION}"

 msgstr ""

-#. TRANSLATORS: Message-ID: InfoMsgTemplate.VAULT_NATIVE_CHECKING_MAC

-msgctxt "Info message"

-msgid "Checking MAC"

+#. TRANSLATORS: There is no support for "yes" or "no" in other languages than English, so it is advised that your translation makes it clear that only the strings "y", "yes", "n" or "no" are supported, even if the prompt becomes a bit longer.

+#. 

+#. Message-ID: Label.CONFIRM_THIS_CHOICE_PROMPT_TEXT

+msgctxt "Label :: Interactive prompt"

+msgid "Confirm this choice?  (y/N)"

 msgstr ""

-#. TRANSLATORS: Message-ID: InfoMsgTemplate.VAULT_NATIVE_DECRYPTING_CONTENTS

-msgctxt "Info message"

-msgid "Decrypting contents"

+#. TRANSLATORS: This label is the heading of the list of suitable SSH keys.

+#. 

+#. Message-ID: Label.SUITABLE_SSH_KEYS_LABEL

+msgctxt "Label :: Interactive prompt"

+msgid "Suitable SSH keys:"

 msgstr ""

-#. TRANSLATORS: Message-ID: InfoMsgTemplate.VAULT_NATIVE_DERIVING_KEYS

-msgctxt "Info message"

-msgid "Deriving an encryption and signing key"

+#. TRANSLATORS: Message-ID: Label.YOUR_SELECTION_PROMPT_TEXT

+#, python-brace-format

+msgctxt "Label :: Interactive prompt"

+msgid "Your selection?  (1-{n}, leave empty to abort)"

 msgstr ""

-#. TRANSLATORS: This message is emitted by the vault configuration exporter for "native"-type configuration directories.  "IV" means "initialization vector", and "MAC" means "message authentication code".  They are specifically cryptographic terms, as is "payload".  The acronyms "IV" and "MAC" are assumed to be well-known to the English target audience, or at least discoverable by them; they *are* asking for debug output, after all.  Please use your judgement as to whether to translate these terms or not, expanded or not.

+#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories.  The system stores entries in different "buckets" of a hash table.  Here, we report on a single item (path and value) we discovered after decrypting the whole bucket.  (We ensure the path and value are printable as-is.)

 #. 

-#. Message-ID: InfoMsgTemplate.VAULT_NATIVE_PARSING_IV_PAYLOAD_MAC

-msgctxt "Info message"

-msgid "Parsing IV, payload and MAC from the file contents"

+#. Message-ID: DebugMsgTemplate.BUCKET_ITEM_FOUND

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Found bucket item: {path} -> {value}"

 msgstr ""

-#. TRANSLATORS: This is a short label that will be prepended to a warning message, e.g., "Deprecation warning: A subcommand will be required in v1.0."

+#. TRANSLATORS: "AES256-CBC" and "PKCS#7" are, in essence, names of formats, and should not be translated.  "IV" means "initialization vector", and is specifically a cryptographic term, as are "plaintext" and "ciphertext".

 #. 

-#. Message-ID: Label.DEPRECATION_WARNING_LABEL

-msgctxt "Label :: Diagnostics :: Marker"

-msgid "Deprecation warning"

+#. Message-ID: DebugMsgTemplate.DECRYPT_BUCKET_ITEM_INFO

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Decrypt bucket item contents:\n"

+"\n"

+"Encryption key (master key): {enc_key}\n"

+"Encryption cipher: AES256-CBC with PKCS#7 padding\n"

+"Encryption IV: {iv}\n"

+"Encrypted ciphertext: {ciphertext}\n"

+"Plaintext: {plaintext}"

 msgstr ""

-#. TRANSLATORS: This is a short label that will be prepended to a warning message, e.g., "Warning: An empty service name is not supported by vault(1)."

+#. TRANSLATORS: Message-ID: DebugMsgTemplate.DECRYPT_BUCKET_ITEM_KEY_INFO

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Decrypt bucket item:\n"

+"\n"

+"Plaintext: {plaintext}\n"

+"Encryption key (master key): {enc_key}\n"

+"Signing key (master key): {sign_key}"

+msgstr ""

+

+#. TRANSLATORS: The MAC stands for "message authentication code", which guarantees the authenticity of the message to anyone who holds the corresponding key, similar to a digital signature.  The acronym "MAC" is assumed to be well-known to the English target audience, or at least discoverable by them; they *are* asking for debug output, after all.  Please use your judgement as to whether to translate this term or not, expanded or not.

 #. 

-#. Message-ID: Label.WARNING_LABEL

-msgctxt "Label :: Diagnostics :: Marker"

-msgid "Warning"

+#. Message-ID: DebugMsgTemplate.DECRYPT_BUCKET_ITEM_MAC_INFO

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Decrypt bucket item contents:\n"

+"\n"

+"MAC key: {sign_key}\n"

+"Authenticated content: {ciphertext}\n"

+"Claimed MAC value: {claimed_mac}\n"

+"Computed MAC value: {actual_mac}"

 msgstr ""

-#. TRANSLATORS: This is one of two values of the settings_type metavar used in the CANNOT_UPDATE_SETTINGS_NO_SETTINGS entry.  It is only used there.  The full sentence then reads: "Cannot update the global settings without any given settings."

+#. TRANSLATORS: "AES256-CBC" and "PKCS#7" are, in essence, names of formats, and should not be translated.  "IV" means "initialization vector", and is specifically a cryptographic term, as are "plaintext" and "ciphertext".

 #. 

-#. Message-ID: Label.CANNOT_UPDATE_SETTINGS_METAVAR_SETTINGS_TYPE_GLOBAL

-msgctxt "Label :: Error message :: Metavar"

-msgid "global settings"

+#. Message-ID: DebugMsgTemplate.DECRYPT_BUCKET_ITEM_SESSION_KEYS_INFO

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Decrypt bucket item session keys:\n"

+"\n"

+"Encryption key (master key): {enc_key}\n"

+"Encryption cipher: AES256-CBC with PKCS#7 padding\n"

+"Encryption IV: {iv}\n"

+"Encrypted ciphertext: {ciphertext}\n"

+"Plaintext: {plaintext}\n"

+"Parsed plaintext: {code}"

 msgstr ""

-#. TRANSLATORS: This is one of two values of the settings_type metavar used in the CANNOT_UPDATE_SETTINGS_NO_SETTINGS entry.  It is only used there.  The full sentence then reads: "Cannot update the service-specific settings without any given settings."

+#. TRANSLATORS: The MAC stands for "message authentication code", which guarantees the authenticity of the message to anyone who holds the corresponding key, similar to a digital signature.  The acronym "MAC" is assumed to be well-known to the English target audience, or at least discoverable by them; they *are* asking for debug output, after all.  Please use your judgement as to whether to translate this term or not, expanded or not.

 #. 

-#. Message-ID: Label.CANNOT_UPDATE_SETTINGS_METAVAR_SETTINGS_TYPE_SERVICE

-msgctxt "Label :: Error message :: Metavar"

-msgid "service-specific settings"

+#. Message-ID: DebugMsgTemplate.DECRYPT_BUCKET_ITEM_SESSION_KEYS_MAC_INFO

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Decrypt bucket item session keys:\n"

+"\n"

+"MAC key (master key): {sign_key}\n"

+"Authenticated content: {ciphertext}\n"

+"Claimed MAC value: {claimed_mac}\n"

+"Computed MAC value: {actual_mac}"

 msgstr ""

-#. TRANSLATORS: Message-ID: Label.CONFIGURATION_EPILOG

-msgctxt "Label :: Help text :: Explanation"

-msgid "Use $VISUAL or $EDITOR to configure the spawned editor."

+#. TRANSLATORS: Message-ID: DebugMsgTemplate.DERIVED_MASTER_KEYS_KEYS

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Derived master keys' keys:\n"

+"\n"

+"Encryption key: {enc_key}\n"

+"Signing key: {sign_key}\n"

+"Password: {pw_bytes}\n"

+"Function call: pbkdf2(algorithm={algorithm!r}, length={length!r}, salt={salt!r}, iterations={iterations!r})"

 msgstr ""

-#. TRANSLATORS: This is the first paragraph of the command help text, but it also appears (in truncated form, if necessary) as one-line help text for this command.  The translation should thus be as meaningful as possible even if truncated.

+#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories, while "assembling" the items stored in the configuration according to the item's "path".  Each "directory" in the path contains a list of children it claims to contain, and this list must be matched against the actual discovered items.  Now, at the end, we actually confirm the claim.  (We would have already thrown an error here otherwise.)

 #. 

-#. Message-ID: Label.DERIVEPASSPHRASE_01

-msgctxt "Label :: Help text :: Explanation"

-msgid "Derive a strong passphrase, deterministically, from a master secret."

+#. Message-ID: DebugMsgTemplate.DIRECTORY_CONTENTS_CHECK_OK

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Directory contents check OK: {path} -> {contents}"

 msgstr ""

-#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_02

-msgctxt "Label :: Help text :: Explanation"

-msgid "The currently implemented subcommands are \"vault\" (for the scheme used by vault) and \"export\" (for exporting foreign configuration data).  See the respective `--help` output for instructions.  If no subcommand is given, we default to \"vault\"."

+#. TRANSLATORS: The MAC stands for "message authentication code", which guarantees the authenticity of the message to anyone who holds the corresponding key, similar to a digital signature.  The acronym "MAC" is assumed to be well-known to the English target audience, or at least discoverable by them; they *are* asking for debug output, after all.  Please use your judgement as to whether to translate this term or not, expanded or not.

+#. 

+#. Message-ID: DebugMsgTemplate.MASTER_KEYS_DATA_MAC_INFO

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Master keys data:\n"

+"\n"

+"MAC key: {sign_key}\n"

+"Authenticated content: {ciphertext}\n"

+"Claimed MAC value: {claimed_mac}\n"

+"Computed MAC value: {actual_mac}"

 msgstr ""

-#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_03

-msgctxt "Label :: Help text :: Explanation"

-msgid "Deprecation notice: Defaulting to \"vault\" is deprecated.  Starting in v1.0, the subcommand must be specified explicitly."

+#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories, while "assembling" the items stored in the configuration according to the item's "path".  Each "directory" in the path contains a list of children it claims to contain, and this list must be matched against the actual discovered items.  When emitting this message, we merely indicate that we saved the "claimed" list for this directory for later.

+#. 

+#. Message-ID: DebugMsgTemplate.POSTPONING_DIRECTORY_CONTENTS_CHECK

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Postponing directory contents check: {path} -> {contents}"

 msgstr ""

-#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_EPILOG_01

-msgctxt "Label :: Help text :: Explanation"

-msgid "Configuration is stored in a directory according to the `DERIVEPASSPHRASE_PATH` variable, which defaults to `~/.derivepassphrase` on UNIX-like systems and `C:\\Users\\<user>\\AppData\\Roaming\\Derivepassphrase` on Windows."

+#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories, while "assembling" the items stored in the configuration according to the item's "path".  We confirm that we set the entry at the given path to the given value.

+#. 

+#. Message-ID: DebugMsgTemplate.SETTING_CONFIG_STRUCTURE_CONTENTS

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Setting contents: {path} -> {value}"

 msgstr ""

-#. TRANSLATORS: This is the first paragraph of the command help text, but it also appears (in truncated form, if necessary) as one-line help text for this command.  The translation should thus be as meaningful as possible even if truncated.

+#. TRANSLATORS: This message is emitted by the vault configuration exporter for "storeroom"-type configuration directories, while "assembling" the items stored in the configuration according to the item's "path".  We confirm that we set up a currently empty directory at the given path.

 #. 

-#. Message-ID: Label.DERIVEPASSPHRASE_EXPORT_01

-msgctxt "Label :: Help text :: Explanation"

-msgid "Export a foreign configuration to standard output."

+#. Message-ID: DebugMsgTemplate.SETTING_CONFIG_STRUCTURE_CONTENTS_EMPTY_DIRECTORY

+#, python-brace-format

+msgctxt "Debug message"

+msgid "Setting contents (empty directory): {path}"

 msgstr ""

-#. TRANSLATORS: Message-ID: Label.DERIVEPASSPHRASE_EXPORT_02

-msgctxt "Label :: Help text :: Explanation"

-msgid "The only available subcommand is \"vault\", which implements the vault-native configuration scheme.  If no subcommand is given, we default to \"vault\"."

+#. TRANSLATORS: This message is emitted by the vault configuration exporter for "native"-type configuration directories.  It is preceded by the info message VAULT_NATIVE_PARSING_IV_PAYLOAD_MAC; see the commentary there concerning the terms and thoughts on translating them.

+#. 

+#. Message-ID: DebugMsgTemplate.VAULT_NATIVE_CHECKING_MAC_DETAILS

+#, python-brace-format

+msgctxt "Debug message"

+msgid "MAC details:\n"

+"\n"

+"MAC input: {mac_input}\n"

+"Expected MAC: {mac}"

 msgstr ""

-#. TRANSLATORS: This is the first paragraph of the command help text, but it also appears (in truncated form, if necessary) as one-line help text for this command.  The translation should thus be as meaningful as possible even if truncated.