Sur wikipédia (cf http://en.wikipedia.org/wiki/CrossCrypt ), ils disent que loop-aes est vulnérable aux attaques watermark :
The format of CrossCrypt container is fully compatible with the old, and unfortunately insecure, version of the Linux loop-AES device format. This unfortunately prevents implementation of random IVs (initialization vectors), and other features that cryptologists and several institutions (e.g., NIST) recommend for modern cryptographic (…)