> How can a key, residing on a usb flash drive, > to be added to the encryption of / ? > > So the system needs both manual input of pass phrase > as well as presence of usb flash drive to > come up after getting rebooted. You can do this with dm-crypt and an encrypted key file stored on a USB.