Rust

AES XTS Mode

See more Encryption Examples

Demonstrates the AES-XTS mode of operation.

Note: This example requires Chilkat v9.5.0.91 or greater.

Rust

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Here we have a sample from CAVS validatition data:

// COUNT = 301
// DataUnitLen = 200
// Key = 
// 394c97881abd989d29c703e48a72b397
// a7acf51b59649eeea9b33274d8541df4
// i = 4b15c684a152d485fe9937d39b168c29
// PT = 2f3b9dcfbae729583b1d1ffdd16bb6fe2757329435662a78f0
// CT = f3473802e38a3ffef4d4fb8e6aa266ebde553a64528a06463e

// Note: The above sample requires an AES-XTS implementation that fully supports ciphertext-stealing
// because the data to be encrypted is not an even multiple of the AES block size (i.e. not a multiple of 16 bytes).
// Chilkat fully supports AES-XTS with ciphertext stealing.
// (i.e. Chilkat implements XEX-based tweaked-codebook mode with ciphertext stealing (XTS))

let key = "394c97881abd989d29c703e48a72b397".to_string();
let tweak_key = "a7acf51b59649eeea9b33274d8541df4".to_string();
let data_unit = "4b15c684a152d485fe9937d39b168c29".to_string();

let bd = chilkat::BinData::new();
let _ = bd.append_encoded("2f3b9dcfbae729583b1d1ffdd16bb6fe2757329435662a78f0", "hex");

let crypt = chilkat::Crypt2::new();

crypt.set_crypt_algorithm("aes");
crypt.set_cipher_mode("xts");
crypt.set_key_length(128);

crypt.set_encoded_key(&key, "hex");
crypt.xts_set_encoded_tweak_key(&tweak_key, "hex");
crypt.xts_set_encoded_tweak_value(&data_unit, "hex");

// In-place encrypt the contents of bd.
let _ = crypt.encrypt_bd(&bd).is_ok();

println!("CT = {}", bd.get_encoded("hexlower").unwrap_or_default());

// Decrypt to revert back to the unencrypted content:
let _ = crypt.decrypt_bd(&bd).is_ok();

println!("PT = {}", bd.get_encoded("hexlower").unwrap_or_default());

// Output:
// CT = f3473802e38a3ffef4d4fb8e6aa266ebde553a64528a06463e
// PT = 2f3b9dcfbae729583b1d1ffdd16bb6fe2757329435662a78f0