Goal: 

• Implement Insights rules and fixes for cryptsetup-related issues
• candidates for the rules are:
  • fix for CVE-2021-4122 can cause trouble if cryptsetup is upgraded during encryption (potential boot failure, if block device with root FS is being re-encrypted during reboot)
  • FIPS-enabled system contains encrypted devices with non-FIPS cryptographic algorithms/parameters - PBKDF/Argon bug (suggest recreating the keyslot)
  • warn about weak cryptographic algorithms/parameters and recommend re-encryption or recreating keyslot with stronger parameters
  • warn about misformatted cipher specification see upstream issue