On 3/3/2020 3:09 PM, Van Leeuwen, Pascal wrote: > What is wrong with software fallback for the 192 bit keys in your driver? More code to maintain. AES-XTS-192 should be: -either rejected (since there's a standard in place) or -at most made optional (allowing for implementations to *optionally* support more key sizes), meaning crypto fuzz testing shouldn't fail. Suggestions on how to do this? Thanks, Horia