diff --git a/lib/luks2/luks2.h b/lib/luks2/luks2.h
index 742d22a74..96146569c 100644
--- a/lib/luks2/luks2.h
+++ b/lib/luks2/luks2.h
@@ -228,6 +228,24 @@ int LUKS2_keyslot_swap(struct crypt_device *cd,
 	int keyslot,
 	int keyslot2);
 
+/*
+ * Segments
+ */
+
+bool LUKS2_segment_set_size(struct luks2_hdr *hdr,
+	int segment,
+	const uint64_t *segment_size_bytes);
+
+bool LUKS2_segment_is_hw_opal(struct luks2_hdr *hdr, int segment);
+bool LUKS2_segment_is_hw_opal_crypt(struct luks2_hdr *hdr, int segment);
+bool LUKS2_segment_is_hw_opal_only(struct luks2_hdr *hdr, int segment);
+
+int LUKS2_get_opal_segment_number(struct luks2_hdr *hdr, int segment,
+				  uint32_t *ret_opal_segment_number);
+int LUKS2_get_opal_key_size(struct luks2_hdr *hdr, int segment);
+
+bool LUKS2_segments_dynamic_size(struct luks2_hdr *hdr);
+
 /*
  * Generic LUKS2 token
  */
@@ -472,12 +490,6 @@ int LUKS2_reencrypt_digest_verify(struct crypt_device *cd,
 	struct luks2_hdr *hdr,
 	struct volume_key *vks);
 
-int LUKS2_reencrypt_max_hotzone_size(struct crypt_device *cd,
-	struct luks2_hdr *hdr,
-	const struct reenc_protection *rp,
-	int reencrypt_keyslot,
-	uint64_t *r_length);
-
-void LUKS2_reencrypt_protection_erase(struct reenc_protection *rp);
+unsigned LUKS2_reencrypt_vks_count(struct luks2_hdr *hdr);
 
 #endif
diff --git a/lib/luks2/luks2_internal.h b/lib/luks2/luks2_internal.h
index aaaabef46..8c758dda4 100644
--- a/lib/luks2/luks2_internal.h
+++ b/lib/luks2/luks2_internal.h
@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: GPL-2.0-or-later
 /*
- * LUKS - Linux Unified Key Setup v2
+ * LUKS - Linux Unified Key Setup v2 (with JSON internals)
  *
  * Copyright (C) 2015-2024 Red Hat, Inc. All rights reserved.
  * Copyright (C) 2015-2024 Milan Broz
@@ -89,7 +89,7 @@ json_object *LUKS2_array_remove(json_object *array, const char *num);
  */
 
 /**
- * LUKS2 keyslots handlers (EXPERIMENTAL)
+ * LUKS2 keyslots handlers
  */
 typedef int (*keyslot_alloc_func)(struct crypt_device *cd, int keyslot,
 				  size_t volume_key_len,
@@ -152,7 +152,7 @@ struct reenc_protection {
 };
 
 /**
- * LUKS2 digest handlers (EXPERIMENTAL)
+ * LUKS2 digest handlers
  */
 typedef int (*digest_verify_func)(struct crypt_device *cd, int digest,
 				  const char *volume_key, size_t volume_key_len);
@@ -337,10 +337,6 @@ uint64_t LUKS2_segment_size(struct luks2_hdr *hdr,
 	int segment,
 	unsigned blockwise);
 
-bool LUKS2_segment_set_size(struct luks2_hdr *hdr,
-	int segment,
-	const uint64_t *segment_size_bytes);
-
 uint64_t LUKS2_opal_segment_size(struct luks2_hdr *hdr,
 	int segment,
 	unsigned blockwise);
@@ -349,14 +345,6 @@ int LUKS2_segment_is_type(struct luks2_hdr *hdr,
 	int segment,
 	const char *type);
 
-bool LUKS2_segment_is_hw_opal(struct luks2_hdr *hdr, int segment);
-bool LUKS2_segment_is_hw_opal_crypt(struct luks2_hdr *hdr, int segment);
-bool LUKS2_segment_is_hw_opal_only(struct luks2_hdr *hdr, int segment);
-
-int LUKS2_get_opal_segment_number(struct luks2_hdr *hdr, int segment,
-				  uint32_t *ret_opal_segment_number);
-int LUKS2_get_opal_key_size(struct luks2_hdr *hdr, int segment);
-
 int LUKS2_segment_by_type(struct luks2_hdr *hdr,
 	const char *type);
 
@@ -365,15 +353,20 @@ int LUKS2_last_segment_by_type(struct luks2_hdr *hdr,
 
 int LUKS2_get_default_segment(struct luks2_hdr *hdr);
 
-bool LUKS2_segments_dynamic_size(struct luks2_hdr *hdr);
-
 int LUKS2_reencrypt_digest_new(struct luks2_hdr *hdr);
 int LUKS2_reencrypt_digest_old(struct luks2_hdr *hdr);
 int LUKS2_reencrypt_segment_new(struct luks2_hdr *hdr);
 int LUKS2_reencrypt_segment_old(struct luks2_hdr *hdr);
-unsigned LUKS2_reencrypt_vks_count(struct luks2_hdr *hdr);
 int LUKS2_reencrypt_data_offset(struct luks2_hdr *hdr, bool blockwise);
 
+int LUKS2_reencrypt_max_hotzone_size(struct crypt_device *cd,
+	struct luks2_hdr *hdr,
+	const struct reenc_protection *rp,
+	int reencrypt_keyslot,
+	uint64_t *r_length);
+
+void LUKS2_reencrypt_protection_erase(struct reenc_protection *rp);
+
 /*
  * Generic LUKS2 digest
  */
diff --git a/lib/setup.c b/lib/setup.c
index 5b14a7c5a..ac6765b2a 100644
--- a/lib/setup.c
+++ b/lib/setup.c
@@ -18,7 +18,6 @@
 #include "libcryptsetup.h"
 #include "luks1/luks.h"
 #include "luks2/luks2.h"
-#include "luks2/luks2_internal.h"
 #include "loopaes/loopaes.h"
 #include "verity/verity.h"
 #include "tcrypt/tcrypt.h"