Re: [sqlite] to encrypt sqlite db

Etienne wrote: > - Original message - > From: Paolo Bolzoni <paolo.bolzoni.br...@gmail.com> > To: General Discussion of SQLite Database <sqlite-users@sqlite.org> > Subject: Re: [sqlite] to encrypt sqlite db > Date: Sun, 1 Sep 2013 18:24:13 +0200 >> On Sun

Re: [sqlite] to encrypt sqlite db

Ulrich Telle wrote: > Am 31.08.2013 22:01, schrieb Etienne: On Sat, 31 Aug 2013 17:17:23 +0200 Etienne wrote: > > On the other hand removing patterns definitely cannot hurt. > > Precisely. > > The very first

Re: [sqlite] to encrypt sqlite db

Ulrich Telle wrote: > Am 02.09.2013 06:11, schrieb Etienne: >> wxSQLite3 does implement AES in ECB mode > > Wrong. CBC mode is used. Inside one page. If we ignored the actual block size, and viewed the entire database as a stream to be encrypted by a cipher with a block size identical with the

Re: [sqlite] to encrypt sqlite db

Am 02.09.2013 06:11, schrieb Etienne: wxSQLite3 does implement AES in ECB mode Wrong. CBC mode is used. Regards, Ulrich ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users

Re: [sqlite] to encrypt sqlite db

On Sun, Sep 1, 2013, at 19:59, Ulrich Telle wrote: > Am 01.09.2013 18:40, schrieb Etienne: > > wxSQLite is free, while SEE is definitively not. > > The original poster searched for a free encryption extension, of which > there exist several: System.Data.SQLite (RC4), wxSQLite3 (AES-128 or >

Re: [sqlite] to encrypt sqlite db

Am 01.09.2013 18:40, schrieb Etienne: wxSQLite is free, while SEE is definitively not. The original poster searched for a free encryption extension, of which there exist several: System.Data.SQLite (RC4), wxSQLite3 (AES-128 or AES-256), SQLCipher (AES-256 with nonce) to name a few.

Re: [sqlite] to encrypt sqlite db

lo Bolzoni <paolo.bolzoni.br...@gmail.com> To: General Discussion of SQLite Database <sqlite-users@sqlite.org> Subject: Re: [sqlite] to encrypt sqlite db Date: Sun, 1 Sep 2013 18:24:13 +0200 Another weird sentence in the mailing list of probably most used DB that is really free. On Sun,

Re: [sqlite] to encrypt sqlite db

Another weird sentence in the mailing list of probably most used DB that is really free. On Sun, Sep 1, 2013 at 6:10 PM, Etienne wrote: > On Sun, Sep 1, 2013, at 17:50, Clemens Ladisch wrote: >> Ulrich Telle wrote: >> > Am 31.08.2013 22:01, schrieb Etienne: >> >> I

Re: [sqlite] to encrypt sqlite db

On Sun, Sep 1, 2013, at 17:50, Clemens Ladisch wrote: > Ulrich Telle wrote: > > Am 31.08.2013 22:01, schrieb Etienne: > >> I simply wanted to warn the OP that wxSQLite, while free, does NOT use > >> salts: > > > > Well, that's not completely true. The encryption extension coming with > > wxSQLite3

Re: [sqlite] to encrypt sqlite db

Ulrich Telle wrote: > Am 31.08.2013 22:01, schrieb Etienne: >> I simply wanted to warn the OP that wxSQLite, while free, does NOT use >> salts: > > Well, that's not completely true. The encryption extension coming with > wxSQLite3 uses a different IV (initial vector) for each database page. > True

Re: [sqlite] to encrypt sqlite db

On 31/8/2013 9:52 PM, dd wrote: Thank you for your quick response. I am looking for freeware. If freeware not available, I have to implement encryption support for sqlite on winrt. What is the procedure to implement encryption support on winrt? Thanks, dd Many others have replied with the

Re: [sqlite] to encrypt sqlite db

Am 31.08.2013 22:01, schrieb Etienne: On Sat, 31 Aug 2013 17:17:23 +0200 Etienne wrote: > > On the other hand removing patterns definitely cannot hurt. > > Precisely. > > The very first bytes of SQLite files are, AFAIK, well known. That's what salt

Re: [sqlite] to encrypt sqlite db

the encryption would not be very useful. [quoted message from Paolo Bolzoni] Date: Sat, 31 Aug 2013 14:40:19 +0200 From: Paolo Bolzoni <paolo.bolzoni.br...@gmail.com> Subject: Re: [sqlite] to encrypt sqlite db Message-ID:   <cao4loozq1wr_ovnbh4wtfqupbjyd+pxr1rhpthcxv9nc8n8...@mail.gm

Re: [sqlite] to encrypt sqlite db

Wait, can you clarify what you mean by SEE here, and also which library you mean for BW? Thanks 2013/8/31 Etienne > > Those first few bytes are just as well known after they have been run > > through zlib or libbz2 or whatever compression library you are using. >

Re: [sqlite] to encrypt sqlite db

> > On Sat, 31 Aug 2013 17:17:23 +0200 > > Etienne wrote: > > > > > > On the other hand removing patterns definitely cannot hurt. > > > > > > Precisely. > > > > > > The very first bytes of SQLite files are, AFAIK, well known. > > > > That's what salt is for,

Re: [sqlite] to encrypt sqlite db

On Sat, Aug 31, 2013 at 1:10 PM, James K. Lowden wrote: > On Sat, 31 Aug 2013 17:17:23 +0200 > Etienne wrote: > > > > On the other hand removing patterns definitely cannot hurt. > > > > Precisely. > > > > The very first bytes of SQLite files

Re: [sqlite] to encrypt sqlite db

On Sat, 31 Aug 2013 17:17:23 +0200 Etienne wrote: > > On the other hand removing patterns definitely cannot hurt. > > Precisely. > > The very first bytes of SQLite files are, AFAIK, well known. That's what salt is for, no? --jkl

Re: [sqlite] to encrypt sqlite db

> Those first few bytes are just as well known after they have been run > through zlib or libbz2 or whatever compression library you are using.  Your > encryption algorithm, whatever it is, needs to be resistant to a > known-plaintext attack. LZ is a sequential algorithm, while BW works with

Re: [sqlite] to encrypt sqlite db

On Sat, Aug 31, 2013 at 11:17 AM, Etienne wrote: > > The very first bytes of SQLite files are, AFAIK, well known. > Those first few bytes are just as well known after they have been run through zlib or libbz2 or whatever compression library you are using. Your

Re: [sqlite] to encrypt sqlite db

> That last sentence is quite weird, a good encryption system should > give a random-like sequence even with very low-entropy input. > > On the other hand removing patterns definitely cannot hurt. Precisely. The very first bytes of SQLite files are, AFAIK, well known. While "encryption-only"

Re: [sqlite] to encrypt sqlite db

That last sentence is quite weird, a good encryption system should give a random-like sequence even with very low-entropy input. On the other hand removing patterns definitely cannot hurt. On Sat, Aug 31, 2013 at 4:38 PM, Etienne wrote: >> Thank you for your quick

Re: [sqlite] to encrypt sqlite db

> Thank you for your quick response. > > I am looking for freeware. If freeware not available, I have to implement > encryption support for sqlite on winrt. > > What is the procedure to implement encryption support on winrt? > > Thanks, > dd

Re: [sqlite] to encrypt sqlite db

SQLCipher is free. But it's not compatible with WinRT. I'm pretty sure that right now there is nothing that meets both of your requirements. -- E On Aug 31, 2013, at 8:52 AM, dd wrote: > Thank you for your quick response. > > I am looking for freeware. If freeware

Re: [sqlite] to encrypt sqlite db

Thank you for your quick response. I am looking for freeware. If freeware not available, I have to implement encryption support for sqlite on winrt. What is the procedure to implement encryption support on winrt? Thanks, dd On Sat, Aug 31, 2013 at 6:34 PM, Stephan Beal

Re: [sqlite] to encrypt sqlite db

On Sat, Aug 31, 2013 at 2:59 PM, Mohit Sindhwani wrote: > Adding on to Paolo's answer, see this: http://www.hwaci.com/sw/** > sqlite/prosupport.html > See SEE and CEROD on that page. > @devs: minor typo on that page: "The SQLite

Re: [sqlite] to encrypt sqlite db

On 31/8/2013 8:40 PM, Paolo Bolzoni wrote: There is a non-free version of sqlite that encrypt the db. If it is that you want then you have to contact them directly. Otherwise just use sqlite on a EncFs mounted disk? Adding on to Paolo's answer, see this:

Re: [sqlite] to encrypt sqlite db

There is a non-free version of sqlite that encrypt the db. If it is that you want then you have to contact them directly. Otherwise just use sqlite on a EncFs mounted disk? On Sat, Aug 31, 2013 at 2:25 PM, dd wrote: > Hi All, > > I have to encrypt sqlite database on