> I know
> that some databases have encrypted stored procedures.  Does sqlite
> have something similar?

SQLite doesn't have any kind of stored procedures.

> if someone
> was ambitious enough, they could just attach a debugger to my process
> and see the plain strings.

If someone was ambitious enough they could attach a debugger to your
application, extract key used to decrypt the database and obtain all
the sensitive information you have. So if you really want to protect
your database against those who is able to attach a debugger you
shouldn't use SQLite.


Pavel


On Mon, Aug 29, 2011 at 1:19 PM, Jonathon <[email protected]> wrote:
> Hello,
>
> I am using a sqlite database to store/retrieve sensitive information.
> I am currently encrypting the database to secure the actual data, but
> I am still concerned about my actual sql statements.  The sql
> statements themselves are left in plaintext in memory so if someone
> was ambitious enough, they could just attach a debugger to my process
> and see the plain strings.
>
> Does sqlite provide any functionality to protect against this?  I know
> that some databases have encrypted stored procedures.  Does sqlite
> have something similar?
>
> J
> _______________________________________________
> sqlite-users mailing list
> [email protected]
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>
_______________________________________________
sqlite-users mailing list
[email protected]
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to