{
  "slug": "xts-aes",
  "term": "XTS-AES",
  "aliases": [
    "AES-XTS"
  ],
  "definition": "XTS-AES is a tweakable AES encryption mode for storage data units that provides confidentiality without authenticating the data or its source.",
  "note": "XTS preserves data length rather than appending an authentication tag. Decryption success is not a tamper-detection result. [nist-xts] This record uses the 2010 final SP 800-38E; the NIST publication record listed Revision 1 as an initial public draft on 15 October 2026, not a replacement final standard. [nist-status]",
  "status": "shipping",
  "advantages": [],
  "limitations": [
    {
      "text": "XTS-AES alone does not establish that stored content is authentic or current.",
      "citationIds": [
        "nist-xts"
      ]
    }
  ],
  "related": [
    "dm-crypt",
    "luks",
    "authenticated-encryption",
    "checksum"
  ],
  "supersedes": [],
  "supersededBy": [],
  "firstSeen": null,
  "lastSeen": null,
  "citations": [
    {
      "id": "nist-xts",
      "title": "NIST SP 800-38E (2010): XTS-AES confidentiality and authentication boundary, section 3",
      "url": "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf",
      "accessed": "2026-10-15"
    },
    {
      "id": "nist-status",
      "title": "NIST SP 800-38E publication record and revision planning note",
      "url": "https://csrc.nist.gov/pubs/sp/800/38/e/final",
      "accessed": "2026-10-15"
    },
    {
      "id": "hesela-encryption",
      "title": "Hesela: Encryption is not authentication",
      "url": "https://hesela.com/analyses/checksums-identity-and-lost-writes/#encryption-boundaries",
      "accessed": "2026-10-15"
    }
  ],
  "updated": "2026-10-15"
}