thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

XEX-based Tweaked-codebook mode with ciphertext Stealing (XTS)

Block cipher mode designed for disk and storage encryption, using a sector-based tweak.

Definition

XTS (IEEE 1619, NIST SP 800-38E) encrypts storage sectors so identical data in different locations produces different ciphertext, without expanding data size. It does not provide authentication. BitLocker, FileVault 2, VeraCrypt, and many self-encrypting drives use XTS-AES.

Example

Windows BitLocker uses XTS-AES-128 by default on fixed drives in current versions.

Exam tip

XTS is the standard mode for full disk encryption, not for network traffic.

Related terms