Has anyone seen a stream cipher being used for FDE So I am a newbie to this. Has anyone experimented implementing a stream cipher for full disk encryption?

EDIT

With the caveats that come with using a stream cipher over a block cipher of course! I am thinking in the context of mobile storage. I keep reading about these block ciphers but never stream ciphers.
The problem with full-disk encryption is that you don't want to "waste" space on authentication tags (because it would result in odd sector sizes or in a large latency / overhead on-disk).

So we can't have tags, but also don't want to completely give up on the nice features authentication offers, especially the fact that you can detect manipulation. With stream ciphers this is about impossible, because an attacker can change data at bit-level granularity and eg surgically implement a virus on the drive if he knows a file that gets automatically executed at system launch.

Now block-ciphers could make this much harder if you used modes which effectively turn whole disk sectors into blocks which where one bit-flip would destroy (i.e. randomize) the entire plaintext. Unfortunately these modes have computational overhead and thus aren't used.

What we actually do is encrypt each block individually with a specific "tweak"-value for this block which gains us these three properties that we wouldn't have with stream ciphers:


If you change a bit in the ciphertext, 128 bits of plaintext get changed
No matter how much you know about the underlying plaintext, changing bits in the ciphertext will result in different, unpredictable gibberish plaintext each time
You don't have to worry about IV/Nonce management which would be a major headache, because you'd have to change the IV for each sector update and storing the IV has the same problems as with tags, generating it from the sector index has the problem of IV re-use which usually leaks a lot of plaintext-information and incorporating a usage counter has the overhead of having to try different values or storing a counter which is back at the first problem