Partitioning the SDD with Full Disk LUKS Encryption

[nuclearsandwich]

The 512GB SSD is split into

/boot    256M    FAT32    EFI System Partition
/root    200G    EXT4     Encrypted System Root
/home    212G    EXT4     Encrypted System Home

Encryption is done with dm-crypt and LUKS so I can use multiple keys and rotate them occasionally without re-encrypting the entire drive. I pretty much followed the Archlinux wiki articles on dm-crypt

I use a swap file rather than a swap partition since I only use it for system hibernate and not for actual swap. Since the surface is UEFI natively GPT was the obvious choice for partition format so cgdisk was the tool of choice here.