The XTS/XEX modes would be a proper way to implement this. They use the same concept of xoring an address based tweak into the message. Two subtle but importan

The XTS/XEX modes would be a proper way to implement this. They use the same concept of xoring an address based tweak into the message. Two subtle but important features of these modes are: 1. the tweak is xored both before and after the permutation 2. the tweak is derived from a secret and the address in a secure way (I don't know if AMD chose such a secure mode, or used some insecure homebrew tweaking scheme)