Announcement of Proposal to Update NIST SP 800-38E, Using the XTS-AES Mode for Confidentiality on Storage Devices | NIST

NIST Proposes Updating Quantum Computing Standard for Storage Device Encryption

The National Institute of Standards and Technology (NIST) has announced plans to update its Special Publication (SP) 800-38E, which outlines the XTS-AES encryption standard for storage devices. The update will address editorial suggestions from the public and mention a security vulnerability when AES subkeys are improperly generated.

Key Points:
– NIST received public comments on SP 800-38E
– Update will mention security vulnerability of identical AES subkeys
– No public comment period for the update
– Comments on the decision proposal must be submitted by March 10, 2023

The XTS-AES mode remains appropriate for encrypting storage devices where authentication tags are not feasible, providing better security properties than other modes. NIST decided against revising SP 800-38E to approve the updated IEEE Std. 1619-2018 standard, as existing implementations already conform to the current standard.

Source: https://www.nist.gov/news-events/news/2023/02/announcement-proposal-update-nist-sp-800-38e-using-xts-aes-mode

Keywords: NIST, SP 800-38E, XTS-AES

Relevance to Rolling Plan