Table of Contents

1 Overview
  1.1 Scope
  1.2 Purpose
  1.3 Related work
2 Normative references
3 Definitions, acronyms, and abbreviations
  3.1 Definitions
  3.2 Acronyms and abbreviations
4 Special terms
  4.1 Numerical values
  4.2 Letter symbols
  4.3 Special definitions
5 XTS-AES transform
  5.1 Data units and tweaks
  5.2 Multiplication by a primitive element a
  5.3 XTS-AES encryption procedure
  5.4 XTS-AES decryption procedure
6 Using XTS-AES-128 and XTS-AES-256 for encryption of storage
7 Exporting and archiving XTS-AES-128 and XTS-AES-256 keys
  7.1 Key backup structure
  7.2 XML format
  7.3 Encryption of key backup material
Annex A (informative) Bibliography
Annex B (informative) Test vectors
Annex C (informative) Pseudocode for XTS-AES-128 and XTS-AES-256
        encryption
      C.1 Encryption of a data unit with a size that is a
          multiple of 16 bytes
      C.2 Encryption of a data unit with a size that is not a
          multiple of 16 bytes
Annex D (informative) Rationale and design choices
      D.1 Purpose
      D.2 Transparent encryption
      D.3 Wide vs. narrow block tweakable encryption
      D.4 XEX construction
      D.5 Sector-size that is not a multiple of 128 bits
      D.6 Miscellaneous

Abstract

Describes elements of an architecture for cryptographic protection of data on block-oriented storage devices, describing the methods, algorithms, and modes of data protection to be used.

General Product Information

Published
Document Type	Standard
Status	Current
Publisher	Institute of Electrical & Electronics Engineers
Pages
ISBN