Integrating the MKV Block Cipher into the ZFS File System
DOI:
https://doi.org/10.54654/isj.v2i28.6405Keywords:
TrueNAS, ZFS, MKV block cipher, stored data, quantum cryptanalysisTóm tắt
In the context of ever-growing digital data in both scale and value, the need to ensure data confidentiality and integrity has become essential for modern storage systems. Among advanced storage solutions, TrueNAS, built on ZFS, stands out for its data integrity verification and encryption capabilities. Based on an analysis of ZFS characteristics, this article evaluates the feasibility of integrating MKV, a Vietnamese post-quantum-resistant block cipher, to enhance data security. Experimental results show that the proposed MKV encryption mechanism achieves a write bandwidth of 390 MB/s, compared with 608 MB/s for AES encryption and 774 MB/s for the non-encrypted configuration, while maintaining low CPU utilization. Although the proposed mechanism introduces performance overhead, the results demonstrate its feasibility for applications requiring enhanced data confidentiality with an acceptable trade-off between security and storage performance.
Downloads
References
J. Bonwick, B. Moore, “The Zettabyte File System”, Sun Microsystems, White Paper, 2007.
Y. Zhang, A. Rajimwale, A. C. Arpaci-Dusseau, R. H. Arpaci-Dusseau, “End-to-End Data Integrity for File Systems: A ZFS Case Study”, Proceedings of the 8th USENIX Conf. on File and Storage Technologies (FAST ’10), pp. 29-42, 2010.
A. Kadav, A. Rajimwale, Reliability Analysis of ZFS, University of Wisconsin–Madison, 2007.
A. Li, “Zettabyte File System Autopsy: Digital Crime Scene Investigation for Zettabyte File System”, 2009.
Bộ Khoa học và Công nghệ, Tiêu chuẩn quốc gia TCVN 14263:2024 về Công nghệ thông tin - Kỹ thuật an toàn - Thuật toán mã khối MKV, 2024.
Ban Cơ yếu Chính phủ, “Thuật toán mã khối MKV”, Access time: 15/8/2025, https://bcy.gov.vn/tieu-chuan-quy-chuan-ky-thuat-mat-ma/thuat-toan-ma-khoi-mkv-928832.
V.V. Bazanov, N.S. Ivanov, D.A. Subbotin, “Research the Possibility of Using Russian Cryptographic Algorithm in the ZFS File System”, 2020 International Multi-Conference on Industrial Engineering and Modern Technologies (FarEastCon), 2020.
B. C. Nguyen, V. L. Nguyen, T. A. Nguyen, S. N. Tran, D. L. Tran, D. L. Hoang, “MKV: a new block cipher for the post-quantum cryptography transition”, МАТЕМАТИЧЕСКИЕ ВОПРОСЫ КРИПТОГРАФИИ, vol. 16, no. 2, pp. 113-138, 2025.
V. L. Nguyen, D. L. Hoang, Q. D. Le, “The quantum circuit construction for S-boxes without ancilla qubits: A more detail analysis”, Journal of Science and Technology on Information Security, vol. 1, no. 21, pp. 75-88, 2024. DOI: 10.54654/isj.v1i21.1031.
GitHub, “OpenZFS Project”, Access time: 15/8/2025, https://github.com/openzfs/zfs.
GitHub, “TrueNAS Project”, Access time: 15/8/2025, https://github.com/truenas.
V. K. Tran, V. K. Phan, V. V. Vu, “Impact of Cipher-Core Selection on XTS-based Secure Network-Attached Storage Systems: A Comparison Study of MKV and AES”, Journal of Science and Technology on Information Security, vol. 1, no. 27, pp. 20–34, 2026. DOI: 10.54654/isj.v1i27.4042.
Downloads
Published
How to Cite
Issue
Section
License
Open Access Policy
The Journal of Science and Technology on Information Security provides open access to its published articles to broaden opportunities for high-quality research findings to be available and widely disseminated free of charge, contributing to the greater exchange of knowledge.
Open access statement: CTUJoS permits everyone to read, download, copy, distribute, print, search, or link to the full texts of the published articles without registration, price barriers, or asking for permission from the Journal or the author.
Proposed Policy for Journals That Offer Delayed Open Access
Authors who publish with this journal agree to the following terms:
1. Authors retain copyright and grant the journal right of first publication, with the work [SPECIFY PERIOD OF TIME] after publication simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
2. Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
3. Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).










