A new algorithm was added: AES (Rijndael) in "multi-key" mode. Each disk sector encrypted with its own key, derived from one master key.
A user-level decryption utility was added and can be used for testing bf-cbc encryption mode.
NOTE: this version will compile only with recent 4-STABLE kernels since the blowfish interface in the kernel was changed in late March.