Thanks. It IS in the initramfs... but god alone know whether it was just "by accident" pulled in via some other module dependency... Anyway... you seem to be right, cause when I comment out the echo aes in cryptroot... it is not added.
So everything's done here now =) Cheers, Chris.
smime.p7s
Description: S/MIME cryptographic signature