Comments on XTS-AES
Moses D. Liskov, Kazuhiko Minematsu · 2008
This is a comment in response to the request for comment on XTS-AES, as specified in IEEE Std. 1619-2007 [7]. Overall, we believe that the XTS AES algorithm, closely based on Rogaway’s XEX mode [5] plus ciphertext stealing, is a good choice for the purpose of block-oriented data storage