Recommendation for Block Cipher Modes of Operation:  the XTS-AES Mode for Confidentiality on Storage Devices

Dworkin, Morris

doi:https://doi.org/10.6028/NIST.SP.800-38E

NIST SP 800-38E

Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices

Documentation Topics

Date Published: January 2010

Planning Note (09/03/2026):

An initial public draft of SP 800-38Er1 (Revision 1) is now available for comment through October 16, 2026.

Author(s)

Morris Dworkin (NIST)

Abstract

This publication approves the XTS-AES mode of the AES algorithm by reference to IEEE Std 1619-2007, subject to one additional requirement, as an option for protecting the confidentiality of data on storage devices. The mode does not provide authentication of the data or its source.

Keywords

Block cipher; ciphertext stealing; computer security; confidentiality; cryptography; encryption; information security mode of operation; tweakable block cipher.

Control Families

System and Communications Protection

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-38E
Download URL

Supplemental Material:
None available

Publication Parts:
SP 800-38A
SP 800-38A
SP 800-38B
SP 800-38C
SP 800-38D
SP 800-38F
SP 800-38G

Document History:
01/18/10: SP 800-38E (Final)

Topics

Security and Privacy

authentication, cryptography