xcb

应用于 disk encryption, usb data encryption

IEEE 1619.2 Risk

https://eprint.iacr.org/2024/1527

https://eprint.iacr.org/2024/1554

XCB tweakable 3 plaintext recovery attacks