,,LUKS  ! ,L9UX ,UNIFI$ ,KEY ,SETUP  IS
! ON-4K /&>D T MADE 4K 5CRYP;N BOR+ ON
PURPOSE3 SPECIFI$ BY ,CLEM5S ,FRUHWIR? 9
#BJJD & IMPLE;T$ "? CRYPTSETUP S9CE
@9#BJJE1 X DEF9ES A H1D] =MAT ON TOP ( !
K]NEL'S DM-CRYPT DEVICE-MAPP] T>GET S
ANY TOOL T SP1KS ,,LUKS C UNLOCK ANY
,,LUKS VOLUME  NO V5DOR LOCK1 NO GUESS+
AT LAY\TS4
,,LUKS#A VS ,,LUKS#B
,,LUKS#A /ORES A FIX$ B9>Y H1D]3 SALT "6
MA/]-KEY *ECKSUM "6 EI<T KEYSLOTS1 EA*
PROTECT+ ! MA/] KEY ) ,,PBKDF#B  : IS :Y
A VOLUME C H A LAPTOP PASSPHRASE1 A
RECOV]Y PASSPHRASE1 & A KEYFILE ALL AT
ONCE4 ,,LUKS#B "<CRYPTSETUP #B4J1
,DECEMB] #BJAG"> REPLAC$ ! B9>Y H1D] )
,,JSON METADATA1 SWAPP$ ,,PBKDF#B =
MEMORY-H>D ,>GON#B1 RAIS$ KEYSLOTS TO
#CB1 & ADD$ AU!NTICAT$ ONL9E RE-5CRYP;N
& DETA*$ H1D]S4 CRYPTSETUP LUKS,=MAT
WRITES X2 LUKS,OP5 MAPS ! PLA9TEXT
DEVICE Z _/DEV_/MAPP]_/@<"N@>2
SY/EMD-CRYPT5ROLL ADDS ,,TPM#B &
,,FIDO#B-TOK5 UNLOCK+ = ! NO-PASSPHRASE
BOOT4
,": X SITS 9 ! H&BOOK
,,LUKS IS ! 5CRYP;N HALF ( *APT] #BA'S
/ORAGE /ORY3 "PI;N  LUKS,=MAT  LUKS,OP5 
FILESY/EM 9SIDE ! MAPP]  CRYPTTAB "6
9ITRAMFS HOOKS S ! 9IT PROMPTS AT BOOT 
& ,,GRUB'S LUKS_/LUKS#B MODULES C EV5
R1D AN 5CRYPT$ _/BOOT4 ,! SECUR;Y *APT]
TR1TS X Z ! BASEL9E3 A LAPTOP )\T
FULL-4K 5CRYP;N FAILS ! *ECKLI/ 2F ANY?+
ELSE IS EXAM9$4
,SEE AL
- ,4KS & ,/ORAGE  "PI;N+ "? CRYPTTAB -
,L9UX ,SECUR;Y  ! 5CRYP;N BASEL9E -
,9SIDE A ,L9UX ,SY/EM  DEVICE-MAPP]'S
PLACE 9 ! /ACK - ,L9UX  ,,GRUB  NFTABLES