Automated Key Management

• Adding/removing/changing keys is unsafe unless you know which slot has which key

• My patch adds a –key-slot option for luksFormat and luksAddKey, and I keep track of slot locations

• Clemens Fruhwirth <clemens@endorphin.org> added the patch to standard cryptsetup

• Change password: add a new key and remove the old one