Consider doing this the same way hard disks are encrypted because it's the same problem: when a user changes their disk encryption password, the entire disk is not re-encrypted. The trick is that the disk encryption software creates its own master key for encrypting the disk, and it never changes. The user doesn't know the master key; instead, the user encrypts the master key with their own password. To change the user's password, all that needs re-encryption is the master key.
Craig. On Jul 22, 11:59 am, gnugu <[email protected]> wrote: > Hi Mark, > > > Why? Encrypt the columns you need encrypted. > > Say you have a database with 100 notes. You use a password as a base > for encryption key. You decide to change your password. Type in the > old one and the new one. Now I have to spawn a thread that will open a > transaction and decrypt and re-encrypt records one by one. > Somehow I don't like that. May be I'm wrong and it will not be a > problem. > > On Jul 22, 11:55 am, Mark Murphy <[email protected]> wrote: > > > gnugu wrote: > > > Because I can't get XML string out of DOM Document I can't use the > > > Document as my storage for notes which leaves me with creating all > > > these objects as I read the XML. > > > Correct. Don't do that for large data sets. > > > > It would be ideal for me to use MySQL to store the notes but then I > > > would want to encrypt the table as a whole rather then individual > > > records. > > > Why? Encrypt the columns you need encrypted. > > > -- > > Mark Murphy (a Commons > > Guy)http://commonsware.com|http://twitter.com/commonsguy > > > Warescription: Three Android Books, Plus Updates, $35/Year --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Android Developers" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/android-developers?hl=en -~----------~----~----~----~------~----~------~--~---
