Protecting SQLite/ SQLitening Database

[Fredrick Ughimi]

Hello,

How can one protect an SQLite/SQLitening database? Is it possible to prevent it from being opened by third party applications.

Best regards,

[cj]

It can be encrypted, but not cheap and I don't know anyone doing it with SQLitening.
I know there is another library out there and I'll do a google search.
https://www.zetetic.net/sqlcipher/     $499 for C/C++


I'm only interested in encryption over the internet using something like OpenVPN.
Even open VPN has a restricted license agreement and needs to be purchased.

https://www.sqlite.org/see/doc/trunk/www/readme.wiki   $2000
https://www.hwaci.com/sw/sqlite/see.html
It is mentioned that if someone can see your code in memory they can see unencrypted.

You would probably need to create your own headers unless somebody has it working.

If only need to be encrypted on local machines might consider BitLocker and leave it to the users
to prevent anyone analyzing your code and anything running.

SQLitening's encryption is not good enough for a commerical application.
I believe it is AES EBC which uses same key without IV to scramble each encryption.

I tried to get http://www.tcpcrypt.org/  to work without success.

I've been looking at trying to encrypt the application for a long time and a consultant told
me to do it with a VPN like big corporations.
If using the internet, Windows has VPN built-in which I need to study.

There may also be dedicated VPN routers that do this, but I'm not an encryption expert.

Since you did not mention the internet encypting a folder might be the easiest, but once
a user is allowed access the data is not encrypted using Bitlocker.

[cj]

I read that xojo has encryption for SQLite built-in.
This example also shows how easy it would be to get the key.
http://docs.xojo.com/index.php/SQLiteDatabase.Decrypt

Encrypting a database doesn't make sense to me if anybody can see the keys.

[Fredrick Ughimi]

Hello CJ,

>>If only need to be encrypted on local machines might consider BitLocker and leave it to the users to prevent anyone analyzing your code and anything running.

Looking at BitLocker. Thanks.

[cj]

I was reading XOJO docs and XOJO supports encrypting SQLite, but doesn't create DLL's.

[Fredrick Ughimi]

CJ,

>>I was reading XOJO docs and XOJO supports encrypting SQLite, but doesn't create DLL's.

Great! I understand Xojo is free use, but one needa a licence to compile to exe file.