Prometheus

Developed by kegomimu & contributors

An encrypted, next-generation filesystem that aims to protect from cryptoanalysis as well as 5$ wrench attacks.

Not licensed AGPLv3 yet as the project is still ongoing. Once the project reaches a stable base, we'll change the license.

Overview

• Features
  • Research papers
• Roadmap and ETA
  • Roadmap
• Footnotes

Features

First off: Veracrypt is not a filesystem

Prometheus is unlike other filesystems based on publicy available research documents and tries to implement the measurements suggested in those.

• PQ-secure Encryption¹
• Invisible plausible deniability²
• Cascade Encryption
• Lightweight kernel module (few hundred LOC) for increased performance
• Supports multiple volumes as well as decoy volumes
• Supports multiple users with a shared folder
• Proper ACL implementation
• File Consistency (fail-safe I/O operations)
• Error Correction
• Concurrency for non-sensitive Operations
• Encrypted Ressource Caching

Research papers

These papers are actively being used to maximize security.

All papers were retrieved on the 12th February, 2026

• Extension Framework for File Systems in User space
• The missing guide to the security of filesystems and file APIs
• TOCTTOU Vulnerabilities in UNIX-Style File Systems: An Anatomical Study
• Modeling and Preventing TOCTTOU Vulnerabilities in Unix-Style File Systems
• File Hijacking Vulnerability: The Elephant in the Room
• Operation Systems: File Systems
• A Study of Linux File System Evolution
• Understanding Security Vulnerabilities in File Systems
• File Systems as Processes
• Plausibly deniable encryption with large language models
• Artifice: A Deniable Steganographic File System
• INVISILINE: Invisible Plausibly-Deniable Storage
• Enabling Plausible Deniability in Flash-based Storage through Data Permutation
• Threat Models for Analyzing Plausible Deniability of Deniable File Systems
• Data corruption in plausibly deniable storage: challenges and potential solutions
• Apple File System Reference
• Technical White Paper for Copy Anti-tampering
• LUKS2 On-Disk Format Specification
• What users should know about Full Disk Encryption based on LUKS
• Filesystem Security
• Modernizing File System through In-Storage Indexing
• Persistence: File Systems and RAID
• I know What You Sync: Covert and Side Channel Attacks on File Systems via syncfs

Roadmap and ETA

A working build integrating all features initially planned is estimated to be released 2031.

Roadmap

Footnotes