Comment # 3 on bug 917427 from Andrei Borzenkov

Well, it's not exactly straightforward. It is not a problem to add cryptodisk
and luks, but they need actual crypto modules and they could be arbitrary. So
basically either we limit ourselves to default (AES+SHA1) or effectively need
to include everything. grub-install will limit itself to actual modules. Could
you show "grub2-probe -t abstraction /boot"?

@Michael - what do you think? Should we push all gcry_* stuff into default EFI
image?