Hi Wei, XTS-AES was approved by NIST in January 2010 [1]. The mode is special because it is tuned for storage devices, using fixed length “data units” of up to 2^20 bytes. I know I'm not the only fellow who has found a need for encrypting in block sizes tuned for disk sectors or memory page sizes.
On the down side, XTS is a confidentiality only mode, so a way to pair both XTS with a HMAC or CMAC (without the need for a second pass over the data) would be greatly appreciated ;) I suspect the single pass can be achieved with a ChannelSwitch, but I need to verify it is the case. Is there any chance XTS will make its way into 5.6.1? Jeff [1] http://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf -- You received this message because you are subscribed to the "Crypto++ Users" Google Group. To unsubscribe, send an email to [email protected]. More information about Crypto++ and this group is available at http://www.cryptopp.com.
