sys-fs/cryptsetup is slotted, so the dependency should be on sys-fs/cryptsetup:=.
As far as I can tell, it only uses the binary at runtime, but needs it in DEPEND for configure.