управлять обычными dm-crypt и зашифрованными томами LUKS (manage plain dm-crypt and LUKS encrypted volumes)
NOTES ON LOOPBACK DEVICE USE
Cryptsetup is usually used directly on a block device (disk
partition or LVM volume). However, if the device argument is a
file, cryptsetup tries to allocate a loopback device and map it
into this file. This mode requires Linux kernel 2.6.25 or more
recent which supports the loop autoclear flag (loop device is
cleared on the last close automatically). Of course, you can
always map a file to a loop-device manually. See the cryptsetup
FAQ for an example.
When device mapping is active, you can see the loop backing file
in the status command output. Also see losetup(8).