xts-aes · shipping · also AES-XTS

XTS-AES

XTS-AES is a tweakable AES encryption mode for storage data units that provides confidentiality without authenticating the data or its source.

Related Observatory article: XTS-AES on hesela.com

XTS preserves data length rather than appending an authentication tag. Decryption success is not a tamper-detection result. [1] This record uses the 2010 final SP 800-38E; the NIST publication record listed Revision 1 as an initial public draft on 15 October 2026, not a replacement final standard. [2]

Relations

related

dm-crypt, luks, authenticated-encryption, checksum

Limitations

• XTS-AES alone does not establish that stored content is authentic or current. [1]

Citations

1. NIST SP 800-38E (2010): XTS-AES confidentiality and authentication boundary, section 3 (accessed 2026-10-15)
2. NIST SP 800-38E publication record and revision planning note (accessed 2026-10-15)
3. Hesela: Encryption is not authentication (accessed 2026-10-15)

JSON: /data/terms/xts-aes.json