Ideally we would stop specifying this algo manually to start using the latest one for new installations. See: - https://github.com/coreos/butane/issues/198 - https://github.com/coreos/butane/commit/2ee1017a063f22062f87b4380be287134ff02bb8 - https://man7.org/linux/man-pages/man8/cryptsetup-luksFormat.8.html - https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/security_hardening/switching-rhel-to-fips-mode_security-hardening - https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/security_hardening/switching-rhel-to-fips-mode