One simple change will be support for detached LUKS header in some next version of cryptsetup. So you can have header on separate (USB or so) device or in file. The unlocked drive then does not contain any visible metadata then. Milan _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt