Hmm. A Linux kernel module that implements a virtual block device backed by a stream cipher might be useful. You could seek the keystream.