Comment 29 for bug 276384

I see now how it goes. The only way to cut out of the chicken and egg problem is an external secret at some point, by means of this scheme (http://wejn.org/how-to-make-passwordless-cryptsetup.html) or similar.