Authenticated Encryption with external Data Integrity Fields

Hello,

I’m trying to add authenticated encryption to my setup, but I’m having trouble to configure some of the parameters. I know that `cryptsetup` with --integrity only supports some of the options that `integritysetup` does, so I’m wondering if I could instead create the integrity layer myself and tell `cryptsetup` to pass down its integrity tags (like it does with the --integrity option).

If that isn’t currently possible, are there any plans to add that feature in the future? It could also be used to take advantage of physical hardware with T10/DIF support. Alternatively, are there any future plans to support using a separate device for the integrity tags like `integritysetup` can with --data-device?

Thanks,
Alex Lieflander