@sinza hmmm interesting to know! I wonder what the lowest possible footprint is, `cryptsetup benchmark` might give some clues for low-memory methods. Key derivation function might also be something that has negative impacts on unlocking memory footprint