Recommendation for Block Cipher Modes of Operation:  the XTS-AES Mode for Confidentiality on Storage Devices

Dworkin, Morris

doi:https://doi.org/10.6028/NIST.SP.800-38E

SP 800-38E

Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices

Date Published: January 2010

Planning Note (3/7/2023): NIST is currently reviewing this publication. See the Crypto Publication Review Project for more details.

Author(s)

Morris Dworkin (NIST)

Abstract

This publication approves the XTS-AES mode of the AES algorithm by reference to IEEE Std 1619-2007, subject to one additional requirement, as an option for protecting the confidentiality of data on storage devices. The mode does not provide authentication of the data or its source.

Keywords

Block cipher; ciphertext stealing; computer security; confidentiality; cryptography; encryption; information security mode of operation; tweakable block cipher.

Control Families

System and Communications Protection

Documentation

Publication:
SP 800-38E (DOI)
Local Download

Supplemental Material:
None available

Document History:
01/18/10: SP 800-38E (Final)

Topics

Security and Privacy
authentication; cryptography