suspend-keygen is a program that will generate a RSA key which can be used by the s2disk to encrypt the image written to disk. The program does not take any options, but will ask to give the size of the key in bits and to supply a passphrase. You will have to enter this passphrase on resume to decrypt the image.

To start using encryption, you will have to point the "RSA key file" option in uswsusp.conf(5) to the file suspend-keygen generated.