We need to validate that the contents of a database are original and have not been tampered with. Given that the internal structure of the H2 database is known (open source), it would be a simple matter to twiddle bits in that file.
One approach would be to generate a digital signature of the database file, but it looks like that file can change even if the actual contents do not (due to internal dynamic H2 structures). This is also a pretty expensive operation. Another approach might be to encrypt the entire database, but other posts suggest that this carries a rather serious performance penalty (2-3X). Any other suggestions? Thanks in advance! -- You received this message because you are subscribed to the Google Groups "H2 Database" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/h2-database?hl=en.
