Are you still planning on uploading this to debian? If not, I would like to do so. If so, then I have several patches I'd like to give you...
I have integrated cryptsetup into debian so that devices are setup just prior to mount via a crypttab. Furthermore, I've prepared integration with mkinitrd so that the root filesystem can be encrypted. Finally, I have a few scripts which allow using a simple XOR secret sharing scheme to allow booting via a half-key from usb stick, floppy disk, or cd. -- Wesley W. Terpstra