Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am wondering: what is the most common, or most used, block cipher mode used that goes with CTS (CypherText Stealing)?

Is it or ?

share|improve this question
What is CTS? CipherText Stealing? – poncho Mar 8 '13 at 19:43
Yes. I guess this is really a matter of opinion. – h221baker Mar 8 '13 at 20:10
You should not use ECB at all (it is insecure), so I hope it is not "usual". – Paŭlo Ebermann Mar 8 '13 at 20:24
What is the ebc tag? I sense a typo from e-sushi. – Artjom B. Jul 14 '14 at 8:35
up vote 2 down vote accepted

There is a NIST definition of CTS (CipherText Stealing) mode in the addendum to NISTSP800-38A.

The title of that addendum answers the question:

"Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode".

The paper is also useful to understand that there are many different ways to do ciphertext stealing.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.