Recommendation for Block Cipher Modes of Operation:  the XTS-AES Mode for Confidentiality on Storage Devices

Dworkin, Morris

doi:https://doi.org/10.6028/NIST.SP.800-38E

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

NIST SP 800-38E

Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices

Documentation Topics

Date Published: January 2010

Planning Note (03/07/2023): NIST is currently reviewing this publication. See the Crypto Publication Review Project for more details.

Author(s)

Morris Dworkin (NIST)

Abstract

This publication approves the XTS-AES mode of the AES algorithm by reference to IEEE Std 1619-2007, subject to one additional requirement, as an option for protecting the confidentiality of data on storage devices. The mode does not provide authentication of the data or its source.

Keywords

Block cipher; ciphertext stealing; computer security; confidentiality; cryptography; encryption; information security mode of operation; tweakable block cipher.

Control Families

System and Communications Protection

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-38E
Download URL

Supplemental Material:
None available

Document History:
01/18/10: SP 800-38E (Final)

Topics

Security and Privacy

authentication, cryptography