• Welcome, Guest. Please login.
 
August 14, 2020, 08:20:30 pm

News:

Welcome to the SQLitening support forums!


Protecting SQLite/ SQLitening Database

Started by Fredrick Ughimi, June 26, 2017, 11:21:41 pm

Previous topic - Next topic

Fredrick Ughimi

Hello,

How can one protect an SQLite/SQLitening database? Is it possible to prevent it from being opened by third party applications.

Best regards,
Fredrick O. Ughimi<br /><br />fughimi@gmail.com<br />- Freedom lies in being bold -- Robert Frost, Poet

cj

June 26, 2017, 11:51:22 pm #1 Last Edit: June 27, 2017, 12:20:14 am by cj
It can be encrypted, but not cheap and I don't know anyone doing it with SQLitening.
I know there is another library out there and I'll do a google search.
https://www.zetetic.net/sqlcipher/     $499 for C/C++


I'm only interested in encryption over the internet using something like OpenVPN.
Even open VPN has a restricted license agreement and needs to be purchased.

https://www.sqlite.org/see/doc/trunk/www/readme.wiki   $2000
https://www.hwaci.com/sw/sqlite/see.html
It is mentioned that if someone can see your code in memory they can see unencrypted.

You would probably need to create your own headers unless somebody has it working.

If only need to be encrypted on local machines might consider BitLocker and leave it to the users
to prevent anyone analyzing your code and anything running.

SQLitening's encryption is not good enough for a commerical application.
I believe it is AES EBC which uses same key without IV to scramble each encryption.

I tried to get http://www.tcpcrypt.org/  to work without success.

I've been looking at trying to encrypt the application for a long time and a consultant told
me to do it with a VPN like big corporations.
If using the internet, Windows has VPN built-in which I need to study.

There may also be dedicated VPN routers that do this, but I'm not an encryption expert.

Since you did not mention the internet encypting a folder might be the easiest, but once
a user is allowed access the data is not encrypted using Bitlocker.



cj

I read that xojo has encryption for SQLite built-in.
This example also shows how easy it would be to get the key.
http://docs.xojo.com/index.php/SQLiteDatabase.Decrypt

Encrypting a database doesn't make sense to me if anybody can see the keys.






Fredrick Ughimi

Hello CJ,

>>If only need to be encrypted on local machines might consider BitLocker and leave it to the users to prevent anyone analyzing your code and anything running.

Looking at BitLocker. Thanks.
Fredrick O. Ughimi<br /><br />fughimi@gmail.com<br />- Freedom lies in being bold -- Robert Frost, Poet

cj

I was reading XOJO docs and XOJO supports encrypting SQLite, but doesn't create DLL's.

Fredrick Ughimi

CJ,

>>I was reading XOJO docs and XOJO supports encrypting SQLite, but doesn't create DLL's.

Great! I understand Xojo is free use, but one needa a licence to compile to exe file.
Fredrick O. Ughimi<br /><br />fughimi@gmail.com<br />- Freedom lies in being bold -- Robert Frost, Poet