How can a key, residing on a usb flash drive, to be added to the encryption of / ?
So the system needs both manual input of pass phrase as well as presence of usb flash drive to come up after getting rebooted.
You can do this with dm-crypt and an encrypted key file stored on a USB.