Recommendation for Block Cipher Modes of Operation:  the XTS-AES Mode for Confidentiality on Storage Devices

Dworkin, Morris

doi:https://doi.org/10.6028/NIST.SP.800-38E

SP 800-38E

Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices

Date Published: January 2010

Planning Note (8/6/2021): This publication is under review, with public comments accepted through October 1, 2021. See the full announcement and Crypto Publication Review Project for more details.

Author(s)

Morris Dworkin (NIST)

Abstract

This publication approves the XTS-AES mode of the AES algorithm by reference to IEEE Std 1619-2007, subject to one additional requirement, as an option for protecting the confidentiality of data on storage devices. The mode does not provide authentication of the data or its source.

Keywords

Block cipher; ciphertext stealing; computer security; confidentiality; cryptography; encryption; information security mode of operation; tweakable block cipher.

Control Families

System and Communications Protection

Documentation

Publication:
SP 800-38E (DOI)
Local Download

Supplemental Material:
None available

Document History:
01/18/10: SP 800-38E (Final)

Topics

Security and Privacy
authentication; cryptography

Information Technology Laboratory

Computer Security Resource Center