nc10, root on luks, modules=dep and missing cipher

Trying to boot debian buster on a Samsung nc10 with crypted root? Getting

Check that kernel supports aes-xts-plain64 cipher

when you switch initramfs to modules=dep?

Adding ecb to /etc/initramfs-tools/modules and running update-initramfs -k all -u worked for me.