If I create a geli volume without specifying a -K newkeyfile as in the handbook example that dds /dev/random to a 64 byte file, would a reasonable passphrase result in geli init creating a reasonable key for the AES or Blowfish encryption implementation?