cryptsetup supports using AEAD modes for encryption, primarily using AEGIS-128 as algorithm. Some background information https://arxiv.org/abs/1807.00309 https

cryptsetup supports using AEAD modes for encryption, primarily using AEGIS-128 as algorithm. Some background information https://arxiv.org/abs/1807.00309 https://arxiv.org/abs/1807.00309 There is also old presentation, which explicitly refers to protecting against "returned disk" scenario: https://archive.fosdem.org/2018/schedule/event/cryptsetup/attachments/slides/2506/export/events/attachments/cryptsetup/slides/2506/fosdem18_cryptsetup_aead.pdf https://archive.fosdem.org/2018/schedule/event/cryptsetup/at...