Comment by orlp

Block-level full disk encryption? AES-CTR would require a per-write nonce.

Encrypting UUIDs in a database?

ISO 9564-1 PIN encryption?