Cranix:
If you are using qvm-usb to attach the key, try using qvm-block instead
to only attach the partition. Then, inside the AppVM, do your cryptsetup
against /dev/xvdi. Qvm-usb should work too, but maybe there's a bug.
Qvm-block is preferable anyways.