Definition:
- Platform-independent full-drive encryption
- Create a mapping between a encrypted device and a virtual device name that the user space software can use
- Encrypt data before it is written onto the disk
- cryptsetup command is used as the front-end to LUKS and dm-crypt