On 07/27/2010 05:45 PM, Mario 'BitKoenig' Holbe wrote: >>> Forgot about 1TB limit, it is different XTS only problem. > > I'm not intending to mention that I have any deeper understanding of the > Rogaway 2004 paper, but as far as I understand it, this limit holds at > least for all XOR-Encryption(XE)-based tweakable block ciphers. I tried to not mix that XTS/XEX 1TB problem with plain IV explanation, so it should read "1TB data limit is different problem not related to plain/plain64 IV limit" (I changed subject to mention IV only - but forgot to mention it.) Sorry for confusion:-) Milan _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt