tree a42c6e51668e99272ff6709d05fea958eb5ec9ce
parent 380162c34c7a43818968b718a151717350ae7bef
author Aorimn <aorimn@gmail.com> 1465507378 +0200
committer Jaeden Amero <jaeden.amero@arm.com> 1528887807 +0100

Implement AES-XTS mode

XTS mode is fully known as "xor-encrypt-xor with ciphertext-stealing".
This is the generalization of the XEX mode.
This implementation is limited to an 8-bits (1 byte) boundary, which
doesn't seem to be what was thought considering some test vectors [1].

This commit comes with tests, extracted from [1], and benchmarks.
Although, benchmarks aren't really nice here, as they work with a buffer
of a multiple of 16 bytes, which isn't a challenge for XTS compared to
XEX.

[1] http://csrc.nist.gov/groups/STM/cavp/documents/aes/XTSTestVectors.zip