> Bitlocker, FileFault, TrueCrypt, VeraCrypt basically operate on one disk block at at time and this means they cannot hide data patterns well.
This is wrong, but you claimed it. In the context of this thread (matching files on an encrypted disk with known unencrypted files), that's a known-plaintext attack.
Maybe you weren't aware you were making this claim, but you did.
1. I didn't claim XTS-mode AES is vulnerable to known-plaintext attacks.
2. I don't believe the investigators claim to have pulled off a known-plaintext attack. What is your source for this?