crypt-error

osmc@osmc-ss:~$ sudo cryptsetup --debug luksOpen /dev/sda2 encrypt-data
# cryptsetup 2.1.0 processing "cryptsetup --debug luksOpen /dev/sda2 encrypt-data"
# Running command open.
# Locking memory.
# Installing SIGINT/SIGTERM handler.
# Unblocking interruption on signal.
# Allocating context for crypt device /dev/sda2.
# Trying to open and read device /dev/sda2 with direct-io.
# Initialising device-mapper backend library.
# Trying to load any crypt type from device /dev/sda2.
# Crypto backend (OpenSSL 1.1.1d  10 Sep 2019) initialized in cryptsetup library version 2.1.0.
# Detected kernel Linux 3.14.29-160-osmc aarch64.
# Loading LUKS2 header (repair disabled).
# Opening lock resource file /run/cryptsetup/L_8:2
# Acquiring read lock for device /dev/sda2.
# Verifying read lock handle for device /dev/sda2.
# Device /dev/sda2 READ lock taken.
# Trying to read primary LUKS2 header at offset 0x0.
# Opening locked device /dev/sda2
# Veryfing locked device handle (bdev)
# LUKS2 header version 2 of size 16384 bytes, checksum sha256.
# Checksum:743234ab18d6847d7b7b2972297dcd890e86edb7ee5d8367cf0616c1da0d241e (on-disk)
# Checksum:743234ab18d6847d7b7b2972297dcd890e86edb7ee5d8367cf0616c1da0d241e (in-memory)
# Trying to read secondary LUKS2 header at offset 0x4000.
# Opening locked device /dev/sda2
# Veryfing locked device handle (bdev)
# LUKS2 header version 2 of size 16384 bytes, checksum sha256.
# Checksum:f1422171c3949e00778c2abae8da5fad96550d952921db759f8b04b815463625 (on-disk)
# Checksum:f1422171c3949e00778c2abae8da5fad96550d952921db759f8b04b815463625 (in-memory)
# Device size 1120219955200, offset 16777216.
# Device /dev/sda2 READ lock released.
# Not enough physical memory detected, PBKDF max memory decreased from 1048576kB to 882060kB.
# PBKDF argon2i, hash sha256, time_ms 2000 (iterations 0), max_memory_kb 882060, parallel_threads 4.
# Activating volume encrypt-data using token -1.
# Interactive passphrase entry requested.
Enter passphrase for /dev/sda2:
# Activating volume encrypt-data [keyslot -1] using passphrase.
# dm version   [ opencount flush ]   [16384] (*1)
# dm versions   [ opencount flush ]   [16384] (*1)
# Detected dm-ioctl version 4.27.0.
# Detected dm-crypt version 1.13.0.
# Device-mapper backend running with UDEV support enabled.
# dm status encrypt-data  [ opencount noflush ]   [16384] (*1)
# Keyslot 0 priority 1 != 2 (required), skipped.
# Trying to open LUKS2 keyslot 0.
# Reading keyslot area [0x8000].
# Userspace crypto wrapper cannot use aes-xts-plain64 (-95).
# Keyslot 0 (luks2) open failed with -95.
# Releasing crypt device /dev/sda2 context.
# Releasing device-mapper backend.
# Unlocking memory.
Command failed with code -1 (wrong or missing parameters).