Opps, here is the missing link: http://wiki.gentoo.org/wiki/DM-Crypt
(I don't think it is a good idea to store the keyFile somewhere plain, [2] tells that there is support for crypt-gnupg, but it doesn't show any help how to setup it. [2]: http://wiki.gentoo.org/wiki/Dracut