Set of tools needed to setup and maintain encrypted partitions under unix systems (initially linux). Especially helpfull when doing root device encryption. Features xml configuration, multiple users, usb "tokens" (usb mass storage) and key hierarchy.
Admin decides which users on token are allowed to log in.
Creating new user on token.
After kernel boot, cryptoboot waits for token insertion.
When more than one user on token have granted access...
Passphrase entry window.
Adding and encrypting new device.