Comment # 3 on bug 1000507 from Michal Suchanek

I guess the problem is this:

 lib/modules/4.7.5-1-default  
 lib/modules/4.7.5-1-default/kernel  
-lib/modules/4.7.5-1-default/kernel/arch  
-lib/modules/4.7.5-1-default/kernel/arch/x86  
-lib/modules/4.7.5-1-default/kernel/arch/x86/crypto  
-lib/modules/4.7.5-1-default/kernel/arch/x86/crypto/aesni-intel.ko  
-lib/modules/4.7.5-1-default/kernel/arch/x86/crypto/aes-x86_64.ko  
-lib/modules/4.7.5-1-default/kernel/arch/x86/crypto/crc32c-intel.ko  
-lib/modules/4.7.5-1-default/kernel/arch/x86/crypto/crc32-pclmul.ko  
-lib/modules/4.7.5-1-default/kernel/arch/x86/crypto/crct10dif-pclmul.ko  
-lib/modules/4.7.5-1-default/kernel/arch/x86/crypto/ghash-clmulni-intel.ko  
-lib/modules/4.7.5-1-default/kernel/arch/x86/crypto/glue_helper.ko  
 lib/modules/4.7.5-1-default/kernel/crypto  
-lib/modules/4.7.5-1-default/kernel/crypto/ablk_helper.ko  
-lib/modules/4.7.5-1-default/kernel/crypto/ansi_cprng.ko  
+lib/modules/4.7.5-1-default/kernel/crypto/af_alg.ko  
+lib/modules/4.7.5-1-default/kernel/crypto/algif_skcipher.ko  
 lib/modules/4.7.5-1-default/kernel/crypto/arc4.ko  
 lib/modules/4.7.5-1-default/kernel/crypto/ccm.ko  
-lib/modules/4.7.5-1-default/kernel/crypto/cryptd.ko  
 lib/modules/4.7.5-1-default/kernel/crypto/ctr.ko  
 lib/modules/4.7.5-1-default/kernel/crypto/drbg.ko  
 lib/modules/4.7.5-1-default/kernel/crypto/gf128mul.ko  
-lib/modules/4.7.5-1-default/kernel/crypto/jitterentropy_rng.ko  
-lib/modules/4.7.5-1-default/kernel/crypto/lrw.ko  
-lib/modules/4.7.5-1-default/kernel/crypto/xor.ko  
+lib/modules/4.7.5-1-default/kernel/crypto/xts.ko  


It's fine to have Intel-accelerated crypto available on Intel CPUs that support
it but it's not fine to not have the fallback modules so you can decrypt your
disk on CPUs that are missing the acceleration.