====== LUKS-Verschlüsselung ======

Mapping erzeugen (Passwort erforderlich):

  cryptsetup luksOpen /dev/xvdc backup2

Mapping mounten:

  mount /dev/mapper/backup2 /backup2

Mapping überprüfen:

  cryptsetup -v status backup2

luks-Header ausgeben:

  cryptsetup luksDump /dev/xvdc

Mapping beenden:

  cryptsetup luksClose backup2

Passwort ändern:

  cryptsetup luksAddKey /dev/xvdc
  cryptsetup luksRemoveKey /dev/xvdc

https://www.cyberciti.biz/security/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/