What encryption modes does it use?
Specifically, does it use xts? If so does it have to? https://sockpuppet.org/blog/2014/04/30/you-dont-want-xts/