It’s the most widely deployed storage encryption mode in the world, yet it is often misunderstood. Developers sometimes treat it like a stream cipher or misuse it as a replacement for HTTPS.
# Create a 1GB test file dd if=/dev/zero of=disk.img bs=1M count=1024 losetup -f disk.img Format with LUKS2, XTS-AES-128 cryptsetup luksFormat --type luks2 --cipher aes-xts-plain64 --key-size 256 /dev/loop0
Check the active cipher:
When you encrypt the hard drive on your new laptop with BitLocker, secure an external SSD with VeraCrypt, or enable encryption on an Android device, you are almost certainly using XTS-AES-128 .
It’s the most widely deployed storage encryption mode in the world, yet it is often misunderstood. Developers sometimes treat it like a stream cipher or misuse it as a replacement for HTTPS.
# Create a 1GB test file dd if=/dev/zero of=disk.img bs=1M count=1024 losetup -f disk.img Format with LUKS2, XTS-AES-128 cryptsetup luksFormat --type luks2 --cipher aes-xts-plain64 --key-size 256 /dev/loop0
Check the active cipher:
When you encrypt the hard drive on your new laptop with BitLocker, secure an external SSD with VeraCrypt, or enable encryption on an Android device, you are almost certainly using XTS-AES-128 .
.jpg)
.jpg)