Install Arch Linux on encrypted partitions:
/boot: encrypted/boot/efi: un-encrypted/: encrypted- swap: encrypted (random key at each reboot)
Read everything carefully before attempt. Check the links to help you match your configuration.
I went for a rather 'vanilla' setting without using LVM, but some people might prefer it.