- IEEE 1619 (specifying the XTS encryption mode, commonly used for disk encryption); and
- IEEE 1619.1 (specifying GCM, CCM, CBC-HMAC, and XTS-HMAC encryption modes, typically for tape) .
Currently the IEEE Security in Storage Working Group (SISWG) is investigating the possibility of submitting the IEEE 1619 XTS mode to NIST for consideration as an Approved Mode of Operation for FIPS 140-2 certification. One of the questions asked on the SISWG e-mail reflector was whether there is widespread industry support for these newly approved modes.
From doing some web searching, I've come up with the following list of companies who are claiming compliance to these newly approved standards.
IEEE 1619 (XTS-AES) Support
- True Crypt - Version 5.0 now supports XTS for software disk encryption
- (Update from 2016: TrueCrypt is no longer maintained and has been accumulating security issues so this is no longer recommended. Please see this list of alternatives instead).
- FreeOTFE - Free On-The-Fly-Encryption
- dmcrypt - Encryption for the Linux 2.6 kernel
- Hifn: "Hifn’s full line of Applied Services Processors as well as its board-level security acceleration products currently support, and are compliant with, the encryption algorithms specified in the IEEE 1619 standards"
- Helion Technology: AES-XTS cores
- Elliptic Semiconductor:
- IP Cores: XTS-AES IEEE P1619 Core Families XTS2 and XTS3
- Hightech Global Design & Distribution: Combined AES-GCM-XTS/XEX-CCM IP Core
- JetStream Media Technologies: High Speed XTS/XEX-AES Core
- SafeNet, Inc.: SafeXcel IP AES/GCM/XTS Accelerators
- IBM, HP, Quantum, Tandberg's LTO-4 Tape Drive uses IEEE 1619.1 GCM-AES
- IBM's TS1120 Enterprise Tape Drive uses GCM
- Sun's T10000 Enterprise Tape Drive uses 1619.1 CCM
- Many core vendors (basically same list as for 1619)
If you know of implementations that expect IEEE 1619 or 1619.1 compliance, please post a comment with the vendor and product name, with a link to the appropriate webpage.
Please note that also SafeNet has a family of AES cores, including a range of AES-XTS cores.
ReplyDelete