Proposal Details

Currently, AES CTR has an asm implementation for multi-blocks, which allows fast operation, but AES-XTS is processed as a single block, which does not perform well.

So I propose a multi-block XTS implementation.

Comment From: FiloSottile

golang.org/x/crypto/xts is frozen per #65250.