Browser-based XTS-AES demo — NIST SP 800-38E and IEEE 1619, XEX with ciphertext stealing over a 16-sector volume. Flip a bit and it decrypts to different plaintext with no error; add AES-GCM and modification and relocation die on the tag while a rolled-back sector still authenticates. AEAD is not freshness.
cryptography aes-gcm disk-encryption authenticated-encryption tweakable-block-cipher crypto-lab ciphertext-stealing storage-security ieee-1619 xts-aes rollback-attack
-
Updated
Oct 17, 2026 - TypeScript