use upstream dm-crypt.c