Xts-aes-128 ●

: Both are currently considered "unbreakable" by any known practical means. The security of 128-bit encryption is often more than enough for protecting laptops, mobile devices, and standard corporate data. AI responses may include mistakes. Learn more

This is faster than XTS-AES-256 by ~30% and far faster than any authenticated mode (which requires additional hashing). xts-aes-128

| Use case | Recommendation | |----------|----------------| | Full-disk encryption (laptops, external drives) | ✅ Yes – standard | | Encrypted SSDs (OPAL, eDrive) | ✅ Yes – mandatory | | Virtual machine disk images | ✅ Yes – if no snapshot-based attacks | | Cloud block storage (EBS, Persistent Disk) | ⚠️ Caution – if you deduplicate across tenants, consider AES-256 | | Database inline encryption | ❌ No – use AEAD or format-preserving encryption | | Network transport (TLS, WireGuard) | ❌ No – use ChaCha20-Poly1305 or AES-GCM | : Both are currently considered "unbreakable" by any

When you encrypt the hard drive on your new laptop with BitLocker, secure an external SSD with VeraCrypt, or enable encryption on an Android device, you are almost certainly using . Learn more This is faster than XTS-AES-256 by