New requirements for XTS encryption mode (IEEE 1619 standard)
Milan Broz <[email protected]> Thu, 27 Feb 2025 22:19:29 +0100
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <[email protected]> |
Hi, Many disk encryption systems currently utilize AES-XTS encryption, which is the default for LUKS and plain mode in cryptsetup. A recent draft of the IEEE AES-XTS standard proposed new requirements for XTS implementation, notably the mandatory use of key scopes. Unfortunately, this draft is behind a paywall; even with a paid subscription, IEEE requires additional fees to download it. These changes will significantly impact LUKS (and likely many other open-source software projects that utilize XTS mode). In light of this, we prepared an independent summarization paper explaining the issues associated with XTS mode. Our paper is now available under a CC-BY license on Arxiv: *XTS Mode Revisited: High Hopes for Key Scopes?* https://arxiv.org/abs/2502.18631 I welcome any comments, additional information, or suggestions. The source of the paper is available on my GitHub: https://github.com/mbroz/xts-paper, where you can create issues to share your thoughts. Thanks, Milan [1] P1619/D12, Oct 2024 - IEEE Draft Standard for Cryptographic Protection of Data on Block-Oriented Storage Devices https://ieeexplore.ieee.org/document/10720727
OpenPGP_0xD9B0577BD93E98FC.asc
(application/pgp-keys, 4.6 KB)
-----BEGIN PGP PUBLIC KEY BLOCK----- xsFNBE94p38BEADZRET8y1gVxlfDk44/XwBbFjC7eM6EanyCuivUPMmPwYDo9qRe y0JdOGhWhAZeutGGxsKliozmeTL25Z6wWICu2oeY+ZfbgJQYHFeQ01NVwoYy57hh ytZw/6IMLFRcIaWSHd7oNdneQg6mVJcGdA/BOX68uo3RKSHj6Q8GoQ54F/NpCotz VcP1ORpVJ5ptyG0x6OZm5Esn61pKE979wcHsz7EzcDYl+3MS63gZm+O3D1u80bUM mBUlxyEiC5jo5ksTFheA8m/5CAPQtxzYvgezYlLLS3nkxaq2ERK5DhvMv0NktXSu tfWQsOI5WLjG7UWStwAnO2W+CVZLcnZV0K6OKDaFbCj4ovg5HV0FyQZknN2O5Qbx esNlNWkMOJAnnX6c/zowO7jq8GCpa3oJl3xxmwFbCZtH4z3fEVw0wAFc2JlnufR4 dhaax9fhNoUJ4OSVTi9zqstxhEyywkazakEvAYwOlC5+1FKoc9UIvApAGvgcTJGT Op7MuHptHGwWvGZEaJqcsqoy7rsYPxtDQ7bJuJJblzGIUxWAl8qsUsF8M4ISxBkf fcUYiR0wh1luUhXFo2rRTKT+Ic/nJDE66Ee4Ecn9+BPlNODhlEG1vk62rhiYSnyz y5MAUhUlstDxuEjYK+NGd2aYH0VANZalqlUZFTEdOdA6NYROxkYZVsVtXQARAQAB zSBNaWxhbiBCcm96IDxnbWF6eWxhbmRAZ21haWwuY29tPsLBfgQTAQIAKAUCT3in fwIbAwUJEswDAAYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQ2bBXe9k+mPxp bg//ZWDcQVNAKOWCviNnNvT315WbDrjsJ6FApF83hB52qQO9tvjb5ZY54794uwof idOqi0XFoLkoLyiJkkvc3Q9SnM89hyhzrxnh2ym4rUr4cL6F9e99uC656er4telM bg9OSPR2iNuqsAzyMhOGMEnnm97YQ2QWOnvbC8QgoQB5VvF3nZMgqTPTxctlUfc7 t4BlGcIBLG0oINUNDf441KAXgMP05kVK0CDQd02CTPok2Qshbg6aw56eSSUTB4aq ZM8St1ySJ2ccMDRC9mCqcNFtuuPyAAJAJFmEvlxahd0BA0mwV3ce38JBbTqs5k0X 2JVljHObgnfp3WDtuY8Lj0u8KvN0CAYJhRuhY40fARh8EPfkNvIx/740ueexsUBW 3N1/lCeABaOKtu11kVUxvDxaFRQc2I5vl/sZMunSjJQQiwrWNbrwZgidwkHzvizm LjdgHgCJeEC+tu1qifTCOllufvXagjYmrH4hm/Qz6+91lLksrHooxp3nAcN78d5/ E4reamx0+DleOJ2yD1UeP2wUDdB23OQU3ipVDYwIuIvDWiZSIVwXyDLhuc64ti4t ScUGfucEKMER1eLTJ+zILHZ9R4K7C2BhEGSAyxkeeX/Z8pLNOJ1RdU+B+ZFNXuIH LJbgrAiOOqr07WPbvRT1LvO/w/4m31D9Kalc4Jyqn9+pjtnCwZUEEwEIAD8CGwMG CwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAFiEEKikYJD/eRmSNBob52bBXe9k+mPwF AmGlFGYFCST4b+cACgkQ2bBXe9k+mPw+TQ/+N/KZGHeTcsnENhrvGAIxeezndhn3 on7QgwTjF84dV8SMe4C6LCx78wmdEmkWD1Rfza/1/bK3iVazJMHdSCzXQkAdaywY YSs8GBc7ZjmL3QhvS0awVST4LWmKjv9OPdws18EOxX5BHODlQboQbOGMBbvpJoYd DZ4HD+I2mmiM4h8P60Pby4gItvKdVnlU8zo7QbfEIrE4nUtlZGfv4gIKgfc89lD5 BNVFwQD1OIhLBglVxlkc/fSFC7EzYz+Ct6fGaXWeqL8u1+hDd5WIW6Zl2C82d0V7 LTxKI0r6qZEkLI1JLEeVQRNBp2mOAfGZTNzYNqO73MW06EDrDpG1Rp/ufa6QSoIk WnURbk/tg8fNFa8FgXHGqYflTn5Zff+BVb/kgUNcEjzlB5ddU1laXTBSrUIAOfxx 5XVaq3BLLFiW/f7XsPaasUw5+kR1f6X8ygrKYoi1ZCOugRfNNnKcm6CwQUr3A7ix 2zgR66QviFwme5oJAq4DJWTKpcBVgYwLvGZXObUCT4BPXnkAEK32UXC4LsfPD7cY VYoQNTrDDaKmGqYDMzE7my1DGAgrI6x2Xp88Obk3I4oNER8/YpTCZb1W4cFVS5pp n+Kf0d+0GGqptUcnC6b5FGVM0s9jQsk3GafZzOqKERoaQ0FplHR9Sc/U+hPf/yiI SOsbeP/z9eWX4iLOwU0ET3infwEQAN6EdXyfw9xr56CJ1asnQ1PSxpzEGlUsEHvn 4wcufyC8KN6VGUlR3WinlaGvOICzvYOiS06E6PqKDEgbbApBh2//6Ihk1OynS0y4 hYepJi+pstdXoiud6NQSNQlcFjCfI8WzAT3rensVLmwc3HgRW5qqt5Vc+EWdg9cy lZ48QdPyo3WyOd2pyL+yqNZPjMGijE8zvzurwZiO9aBkJCjulqXMs1YyyIqfTxKQ 1GCUQq4SoIQXjD8HvgJ7T/TpuDf9wFheonGqxiJpxb02LMEdkPgugKIgG6iOFplz rsySyoiJsGa0mJ0n0O6rXQxl1mK/zdfgvm4CPDujbgINnIxRxPescCVYcmjM8kTl GYJuKp4GgbwbwkCISs4retaAXiP3a2f3eSaJc5SnWWa3JqH5ogkEWvuezjNxW5fM pBWszdQEsgnsdlK37V+aB5oWnnkZRlWk1YhGwL1ODz+EZzSsGlkIr7BYakK3xRYb xVfQkUr7EeqruXohSOnPAowePYAXCigCfWvIJMlrPLIOD2GOy9eV3UZ/JDn/7YPf FAjNb0gVdpqBCQNH/fP2ePC0FzW+3YL1UbR+qMAEbKbFepycg75LbC08jFuQVvau DQta4EAvBkF460PoskCzcMuREntjMxipB6IMSoOD74tcGYfUp6/kcgdEaqyK8214 couO/u8HABEBAAHCwWUEGAECAA8FAk94p38CGwwFCRLMAwAACgkQ2bBXe9k+mPzI RA//bAf0Ng8dJ+IgydRtdT9X2xYKyukkA3HlrOImOoA4Thrv/HVe7U28AkiQt2Dx OmNZYIV0BqvL+dWAD1HYCdQgsgVWVLprsFfqOYHnAWKsdqyNZHtPC9J6drnwv0vc ER0dtDJjMDP4MJMTa4JNjNJYb29WfbImviDRtIcVujYFoZK2ZBa1Ec7yPfk4CsyE +Y3Qh9Gy8Z08NrrxIn+MVATBbocKs7j1JAvkFk+o1grGnw3NTXnB8gEygAKHHyUg zr5Nyn5qJ28EZr7Vc1FP2lUiKv0JBcHT/9vVXJ1Grd+VF2cwYftMWRKR66lTaUS2 BX0ta6IQQSj8nSRsoKapRniCfTm1D4I16j9bOoEfFdVsMkcrYFtfhq97qgR8gZtV CJkrX2CARZ+a1J+NP/erASd6M1A3n3aMF3xBFfFsotzPplmhzExCYwuOCWIBfPer UQh1MughvG/oT8ZapR6x/EVE+K90J10XpPi8VMi/3QRC5DpCin3Kc14WAE4uEbyU WLKb3PmfmZaS6qFaJNtf2TyZodT0ACguv9Xs4el0j8FRaCqLvEZS4rKLNxb8EY3Z 4LC61QfyAbg5P114muVZ4ro8dzhZ0zwkZLGeEsYPsQpLo6XPT/32PP8aHn/KKX+K M7ouCEhVeWszR20BMK6sxTBR+4aNqSKCdgr42jrtvzRmJp7CwXwEGAEIACYCGwwW IQQqKRgkP95GZI0GhvnZsFd72T6Y/AUCYaUUlwUJJPhwGAAKCRDZsFd72T6Y/ATz D/4mVfl0TjobPzLCne54EHhYBE5JrfGFYW9kYN1YKQEHvXJ+msPY5NwpwdHnDQXa Msrd97d7xjWruogsJUX2k3V4ParSMnLbgkEnsGNmDJOQEvDJm16Br4x9Wf4q61bK Es/jexxTyiJQMvA/2kcEtQh5vbGj0IhqHkf804XIlWJ3ERv1PSerFfFx/ThD50EE eMP1dW2CPUpPrLhnEhTe6TETLErJTpmuNvQN2xG2eyJLfVkyZ1GPV3y+WakJ4y3k ZfNuNzk37h0rYdurqY2SENnrHHGTGKUINPzDpR77hbhbujBS/4GQzcx/IwHAazXf +gASrHnGE5wSJyh9kzjXNJAuuaAIa0kgTS7nU7jx3Hv2AQrFAgBDMICU8m3aTEIf TZEuvFsULV8VOp3qEFO5BCRhhbHO/8l4kF7lbyVJCv17NOF+o9JdX/+ii6DUPXqf 9iJ+fegdAXL72ir+4HQ7dU64IL5QfhqU/ohUS74QgXuZABEURH0X5liatWx6Hf7p a6f1SxgGmZTgU4LAs7n1heUji22ZJldm+ccthfwFN6EFGZ3ArxTE1qQQvoDv6N5G QsshgmkHUHuI0vxVCakdbLlcDTM3DiTj/yzEMLoxPwoe1yzN+VSAqPaqoYoeDryx 1AFswuXTUoqS/q0hh71gXX1w4W3sySJerKe/9ayX0vKj7A== =VXKq -----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEKikYJD/eRmSNBob52bBXe9k+mPwFAmfA1uEACgkQ2bBXe9k+ mPwmRg//cCMvcuGnUWbi50L0CE+vT+AK+qaaxic+H6fK8uMDjeWCDIa8qpt9dXZE HkiXMCRAQh5IsCF3JdXVxN/OY3NwgUmFw1uNAO9hmNZ62rcelUA50eDl/8XgJfCN TJ6Rq1QG4wDrHcMqaq2fuofoUXK3j26ITmI6dzUZW0P1DHpzaiw9LpdCRjmnLuOC Sa7UCa+EpaoHMZ3l9ihZYTsdg0sOnInFMTey+4OeY6vqfdtXmDjpreinMAu5jYpT XgTR01JSLematpjtd7S7kDWUsjUTiobFqk9yNEOkUNi39Yii8R19ZLVbOKxGEJlP GrrpWzBKqfDzIAVrXKBPUOAnLAf3Jd02XXgRCgzwTZ7gLYVUrUV1nerfznZ2ctLd YTKNCXWVi7isqzxHz+XM8nbtP5jOvXRODzgVBvMg0HeQtWp3H6b/XXqj21AznIB5 tU5EKl/HdJhLuqctRsPZmkhh9RWXvrh53m83pcbzoCORf7tYI60zKANqXlkqfomM c9MwnoTo5aFSVDrJrvXAtYaCmvyBgWNqSwAGBAws0hWZ8aQmkT5ISeGrGP3C/ofl 11eZuqmAFoLfouLftJssilNlmLqpnDB2Zh2Fnn2W84AxDkzifYtr7B0VFglJumPS HMBVX3MZSFHPaGiLZRc/JpzhRlngTEPMgcRgFwBKDiG4qy6OydY= =wrpt -----END PGP SIGNATURE-----