mkisofs -J -R -o cd3.img photo-album/
aespipe -e AES128 -T < cd3.img > cd3enc.img
cdrecord -v dev=0,0,0 -eject cd3enc.img

I could not mount it with 'mount', but I've been able to do this:

	losetup -e aes -k 128 -P sha256 /dev/loop0 /dev/cdrom
mount -o ro -t iso9660 /dev/loop0 /cryptcd

Do /etc/fstab přidáme

/dev/cdrom /cryptcd iso9660 noauto,owner,kudzu,ro,loop=/dev/loop0,encryption=aes,keybits=128,phash=sha256 0 0