Has anyone investigated the issues surrounding encryption and yaffs2?
I realize it may be impossible to solve, but I really don't want to
have a system that is NAND<->FTL<->dmcrypt<->ext3.

I understand that it would be very difficult to not leak information,
encrypting the oob seems impratical (excepting of course the ecc, and
block state). Let me know if anyone has given this any thought.