Re: [sqlite] Encryption

2016-11-15 Thread Richard Andersen
Monday, November 14, 2016, 4:23:49 PM, you wrote: Thanks a million Ulrich for all the useful information, I think I got what I need now to make things work the way I want! :) Richard > Richard, >> Well what I've done is to create an encrypted database with >> SQLite2009 and then use that in my

Re: [sqlite] Encryption

2016-11-15 Thread Chris Locke
Ulrich- a fantastically detailed post. On Mon, Nov 14, 2016 at 3:23 PM, Ulrich Telle wrote: > Richard, > > > Well what I've done is to create an encrypted database with > > SQLite2009 and then use that in my C# project. I just add the password to > > the connection string

Re: [sqlite] Encryption

2016-11-14 Thread Ulrich Telle
> > On Nov 14, 2016, at 7:23 AM, Ulrich Telle wrote: > > > > The RSA encryption offered by System.Data.SQLite should not be used, > > if security is a concern for you. You should prefer an AES encryption > > scheme. > > I’m surprised anything encrypts databases with RSA, as that algorithm > is

Re: [sqlite] Encryption

2016-11-14 Thread Jens Alfke
> On Nov 14, 2016, at 7:23 AM, Ulrich Telle wrote: > > The RSA encryption offered by System.Data.SQLite should not be used, if > security is a concern for you. You should prefer an AES encryption scheme. I’m surprised anything encrypts databases with RSA, as that

Re: [sqlite] Encryption

2016-11-14 Thread Ulrich Telle
Richard, > Well what I've done is to create an encrypted database with > SQLite2009 and then use that in my C# project. I just add the password to > the connection string in my app and then it works right away. According to the information on the SQLite2009 website

Re: [sqlite] Encryption

2016-11-14 Thread Richard Andersen
Sunday, November 13, 2016, 2:16:40 PM, you wrote: Thanks. Well what I've done is to create an encrypted database with SQLite2009 and then use that in my C# project. I just add the password to the connection string in my app and then it works right away. As far as I understand (I'm new to all

Re: [sqlite] Encryption

2016-11-14 Thread Taosoft
Friday, November 11, 2016, 9:00:36 PM, you wrote: Ok, thanks! > Encryption in system.data.sqlite is legacy encryption, only used within > itself, and not with other applications. > On Fri, Nov 11, 2016 at 6:24 PM, Richard Andersen wrote: >> >> >> I'm using the ADO.NET version

Re: [sqlite] Encryption

2016-11-12 Thread Chris Locke
Encryption in system.data.sqlite is legacy encryption, only used within itself, and not with other applications. On Fri, Nov 11, 2016 at 6:24 PM, Richard Andersen wrote: > > > I'm using the ADO.NET version (System.Data.SQlite). > > I've created an RSA encrypted database using

Re: [sqlite] Encryption of SQLite database using jquery

2014-09-23 Thread Richard Hipp
On Mon, Sep 22, 2014 at 3:00 PM, Prava Kafle wrote: > Hi, > > I have been looking for a product that can encrypt Sqlite database using > JavaScript and came across Sqlite Encryption extension. > Can I use this with my application that uses jquery mobile and > sqlitedatabase?

Re: [sqlite] Encryption

2013-12-05 Thread Raheel Gupta
Yes, I did test SQLCipher and it slows down a bit. Now, I would like to go with SEE if its available for the latest version. SQLCipher is available for 3.8.0.2 while 3.8.1 is out. On Thu, Dec 5, 2013 at 9:34 PM, Simon Slavin wrote: > > On 5 Dec 2013, at 3:02pm, Raheel

Re: [sqlite] Encryption

2013-12-05 Thread Simon Slavin
On 5 Dec 2013, at 3:02pm, Raheel Gupta wrote: > The only problem is that I dont have access to SEE by Dr. Richard. So how > should I test it ? Why should you test it ? Have you tested the solutions you do have access to and found that they make your app too slow to use ?

Re: [sqlite] Encryption

2013-12-05 Thread Raheel Gupta
Hi, The only problem is that I dont have access to SEE by Dr. Richard. So how should I test it ? Does he give test licenses ? Also I am assuming it will always be supported by the latest version of SQLite right ? On Thu, Dec 5, 2013 at 7:09 PM, Simon Slavin wrote: > > On

Re: [sqlite] Encryption

2013-12-05 Thread Simon Slavin
On 5 Dec 2013, at 9:15am, Raheel Gupta wrote: > Yes, I agree. But it should not make the inserts and read too slow as well. The key word here is 'too'. If there's only 5% difference in speed between the two systems then it doesn't matter which one you use. So you have

Re: [sqlite] Encryption

2013-12-05 Thread Raheel Gupta
Yes, I agree. But it should not make the inserts and read too slow as well. I just want to support 256 Bit AES. On Thu, Dec 5, 2013 at 1:50 PM, Klaas V wrote: > When you'use the word 'perfornance' you might be interested not jonly in > speed, but in strength of

Re: [sqlite] Encryption

2013-12-05 Thread Klaas V
When you'use the word 'perfornance' you might be interested not jonly in speed, but in strength of protection, privacy of the employees, your company as a whole and above all your clients. One of the goals of encryption is to avoid e.g. the government(s and the spies they hired to peek into

Re: [sqlite] Encryption

2013-12-04 Thread Raheel Gupta
>> The answer may depend on what storage system you were using 7200 RPM Sata Drives >> whether you have small or big databases, Big which may even reach TBs of data. >> and whether you have just one user at a time or many users at once. Multi user. I do use WAL mode. On Wed, Dec 4, 2013 at

Re: [sqlite] Encryption

2013-12-04 Thread Simon Slavin
On 4 Dec 2013, at 10:45am, Raheel Gupta wrote: > I wanted to know which is the best in performance ? There would probably not be a simple definite answer that applied to all setups. The answer may depend on what storage system you were using, whether you have small or

Re: [sqlite] Encryption using System.Data.SQLite.dll

2012-08-20 Thread Bishwa Shrestha
On 08/20/2012 11:08 AM, Bishwa Shrestha wrote: Hi, I am creating an sqlite3 interface to an existing data model. For that purpose sqlite3 tables are dynamically loaded. I'm using /sqlite3_column_count/ and /sqlite3_column_table_name/ to load data into relevant tables only. Now, I am having

Re: [sqlite] Encryption using System.Data.SQLite.dll

2012-08-20 Thread Bishwa Shrestha
Hi, I am creating an sqlite3 interface to an existing data model. For that purpose sqlite3 tables are dynamically loaded. I'm using /sqlite3_column_count/ and /sqlite3_column_table_name/ to load data into relevant tables only. Now, I am having problems with queries such as: SELECT

Re: [sqlite] Encryption using System.Data.SQLite.dll

2012-08-17 Thread Richard Hipp
; > John G. > > > -Original Message- > > From: sqlite-users-boun...@sqlite.org [mailto:sqlite-users- > > boun...@sqlite.org] On Behalf Of Richard Hipp > > Sent: Friday, August 17, 2012 12:09 PM > > To: General Discussion of SQLite Database > > Subjec

Re: [sqlite] Encryption using System.Data.SQLite.dll

2012-08-17 Thread John Grasmeder
e- > From: sqlite-users-boun...@sqlite.org [mailto:sqlite-users- > boun...@sqlite.org] On Behalf Of Richard Hipp > Sent: Friday, August 17, 2012 12:09 PM > To: General Discussion of SQLite Database > Subject: Re: [sqlite] Encryption using System.Data.SQLite.dll > > On Fri

Re: [sqlite] Encryption using System.Data.SQLite.dll

2012-08-17 Thread Carlos Milon Silva
[mailto:sqlite-users- boun...@sqlite.org] On Behalf Of Carlos Milon Silva Sent: Thursday, August 16, 2012 06:01 PM To: General Discussion of SQLite Database Subject: Re: [sqlite] Encryption using System.Data.SQLite.dll if you really need to use System.Data.SQLite.dll, from Adobe Air, then you need

Re: [sqlite] Encryption using System.Data.SQLite.dll

2012-08-17 Thread John Grasmeder
-users-boun...@sqlite.org [mailto:sqlite-users- > boun...@sqlite.org] On Behalf Of Carlos Milon Silva > Sent: Thursday, August 16, 2012 06:01 PM > To: General Discussion of SQLite Database > Subject: Re: [sqlite] Encryption using System.Data.SQLite.dll > > if you really need to us

Re: [sqlite] Encryption using System.Data.SQLite.dll

2012-08-16 Thread Carlos Milon Silva
if you really need to use System.Data.SQLite.dll, from Adobe Air, then you need to follow something like to: http://blogs.adobe.com/globalization/invoking-icu-from-adobe-air-applications-part-2-using-flash-builder-4-6/ and call System.Data.SQLite.dll as an external native extension Carlos. Em

Re: [sqlite] Encryption using System.Data.SQLite.dll

2012-08-16 Thread Joe Mistachkin
John Grasmeder wrote: > > How do I go about changing the encryption method/methods that are used > in the SQLite.SQLiteConnection class? Do I need to implement my own > version of SQLiteConnection and override some methods or is there some > other code I have not found as of date? > The

Re: [sqlite] Encryption

2010-07-25 Thread Mark Schonewille
Hi Simon, Yes, I thought of that and was hoping I woudn't have to do it this way. Thanks. -- Best regards, Mark Schonewille Economy-x-Talk Consulting and Software Engineering Homepage: http://economy-x-talk.com Twitter: http://twitter.com/xtalkprogrammer KvK: 50277553 Download the Installer

Re: [sqlite] Encryption

2010-07-25 Thread Simon Slavin
On 25 Jul 2010, at 10:00am, Mark Schonewille wrote: > Thanks for your reply. Unfortunately, if I let Revolution encrypt the > entire database file, I have to save a decrypted file to disk before I > can access it with SQLite. I was hoping there were a trick to let > SQLite do the

Re: [sqlite] Encryption

2010-07-25 Thread Mark Schonewille
Thanks for your reply. Unfortunately, if I let Revolution encrypt the entire database file, I have to save a decrypted file to disk before I can access it with SQLite. I was hoping there were a trick to let SQLite do the encryption without having to recompile the add-on mentioned in me

Re: [sqlite] Encryption

2010-07-24 Thread Timothy A. Sawyer
I would think that you can take any third party encryption routine and use it to encrypt the entire database. I would be remiss if I didn't ask how you would store and retrieve the encryption key, what algorithm you plan to use... All rhetorical questions of course. --Original

Re: [sqlite] Encryption of sqlite DB

2010-05-04 Thread Igor Tandetnik
Timothy A. Sawyer wrote: > The easiest way to encrypt a specific row is to put the data through > some > sort of one way hash function before you write the data to the table. > However since this is symmetric, anyone with the key can decrypt the > data > easily. A

Re: [sqlite] Encryption of sqlite DB

2010-05-04 Thread Timothy A. Sawyer
This really depends on what you are trying to protect. Passwords are the common data pieces that would be protected in this manner. The easiest way to encrypt a specific row is to put the data through some sort of one way hash function before you write the data to the table. However since this is

Re: [sqlite] Encryption of sqlite DB

2010-05-04 Thread Swithun Crowe
Hello KR> What’s the simplest way to encrypt only certain rows in an sqlite DB? KR> If there is no way to do this (for storing passwords etc), I would KR> like to know the best way to encrypt the whole sqlite DB. (Prefer only KR> encrypting some rows, but if this introduces complexity, I’m

Re: [sqlite] Encryption of sqlite DB

2010-05-04 Thread P Kishor
On Tue, May 4, 2010 at 11:19 AM, Kavita Raghunathan wrote: > Hi, > What’s the simplest way to encrypt only certain rows in an sqlite DB? If > there is no way to do this (for storing passwords etc), You certainly mean some or all columns in all the rows, don't

Re: [sqlite] Encryption of sqlite DB

2010-05-04 Thread Stephan Wehner
On Tue, May 4, 2010 at 9:19 AM, Kavita Raghunathan wrote: > Hi, > What’s the simplest way to encrypt only certain rows in an sqlite DB? If > there is no way to do this (for storing passwords etc), I would like to know > the best way to encrypt the whole sqlite

Re: [sqlite] encryption

2010-04-12 Thread g...@greschenz.de
you can try    http://greschenz.dyndns.org/downloads/sqlite_crypt.zip bye, gg   Simon Slavin hat am 12. April 2010 um 12:56 geschrieben: > > On 12 Apr 2010, at 5:59am, Steve Bywaters wrote: > > > I am currently using a proprietary ISAM database for an application. > >

Re: [sqlite] encryption

2010-04-12 Thread Simon Slavin
On 12 Apr 2010, at 5:59am, Steve Bywaters wrote: > I am currently using a proprietary ISAM database for an application. > These files are .TPS/Topspeed format files, for Clarion, which have built-in > encryption via a 'password'. > > Since sensitive setup and sales data is contained in these,

Re: [sqlite] Encryption and decryption functionality ?

2009-02-04 Thread D. Richard Hipp
On Feb 4, 2009, at 2:08 PM, Lothar Behrens wrote: > Hi, > > I have got any information that sqlite supports encryption and > decryption. > > Does it ? > > If these are extensions, where to get ? > > http://www.hwaci.com/sw/sqlite/see.html D. Richard Hipp d...@hwaci.com

Re: [sqlite] Encryption?

2008-02-26 Thread Günter Greschenz
hi, yes i know, my changed my webserver to lighttpd but i had no time to finish the complete the installation because i'm on a business trip right now :-( but its still working if you know the right urls :-) please try http://greschenz.dyndns.org/index.php for the

Re: [sqlite] Encryption?

2007-12-20 Thread Günter Greschenz
*) for crypting/compression you can have a look at http://www.greschenz.de (look/search for "sqlite" of course :-) i've written 2 (very small) sqlite-functions to support this... if my server is down again, please inform me :-) *) yes, i always use *.sdb (for SqliteDB, what else :-) Jason

RE: [sqlite] Encryption?

2007-12-19 Thread James Steward
On Wed, 2007-12-19 at 16:10 -0800, James Dennett wrote: > > -Original Message- > > From: Jason Tudor [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, December 19, 2007 4:06 PM > > To: sqlite-users@sqlite.org > > Subject: [sqlite] Encryption? > > > > Is there any encryption functionality

RE: [sqlite] Encryption?

2007-12-19 Thread James Dennett
> -Original Message- > From: Jason Tudor [mailto:[EMAIL PROTECTED] > Sent: Wednesday, December 19, 2007 4:06 PM > To: sqlite-users@sqlite.org > Subject: [sqlite] Encryption? > > Is there any encryption functionality built into SQLite? Not in the public domain version. > Also, can I use

Re: [sqlite] Encryption

2006-05-11 Thread Preston & Chrystie
typo... sorry for the confusion, i'll be more careful in the future.. On 5/11/06, Edwin Hernán Barrios Núñez <[EMAIL PROTECTED]> wrote: Hi , When i can download that sqlite version you take about, with encryption extension. I saw in your message that you use version 3.4.5 but on sqlte.org the

Re: [sqlite] Encryption

2006-05-11 Thread drh
"=?ISO-8859-1?Q?Edwin_Hern=E1n_Barrios_N=FA=F1ez?=" <[EMAIL PROTECTED]> wrote: > Hi , > > When i can download that sqlite version you take about, with > encryption extension. > I saw in your message that you use version 3.4.5 but on sqlte.org the > last one is 3.3.5. > > What is the diference

Re: [sqlite] Encryption

2006-05-11 Thread Edwin Hernán Barrios Núñez
Hi , When i can download that sqlite version you take about, with encryption extension. I saw in your message that you use version 3.4.5 but on sqlte.org the last one is 3.3.5. What is the diference ? , where i can download encryption ( that it's a need funcionality for sqlite ) Thanks !!!

Re: [sqlite] Encryption

2006-05-11 Thread Ralph Wetzel
[EMAIL PROTECTED] schrieb: Dennis Cote <[EMAIL PROTECTED]> wrote: [EMAIL PROTECTED] wrote: I'm having trouble compiling the 3.4.5 version with encryption extensions.. Question answered by private email. Version 3.4.5... I wonder if this is a typo or the mythical

Re: [sqlite] Encryption

2006-05-10 Thread drh
Dennis Cote <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] wrote: > > > >> I'm having trouble compiling the 3.4.5 version with encryption > >> extensions.. > > Question answered by private email. > > > > > Version 3.4.5... > > I wonder if this is a typo or the mythical "Cinnamon". Editing in

Re: [sqlite] Encryption

2006-05-10 Thread Dennis Cote
[EMAIL PROTECTED] wrote: I'm having trouble compiling the 3.4.5 version with encryption extensions.. Question answered by private email. Version 3.4.5... I wonder if this is a typo or the mythical "Cinnamon". Editing in the wiki and questions being answered by private email makes it

Re: [sqlite] Encryption

2006-05-10 Thread drh
"Preston & Chrystie" <[EMAIL PROTECTED]> wrote: > I'm having trouble compiling the 3.4.5 version with encryption > extensions.. I have done it a hundred times before, but i just > switched to a new computer and don't know what stupid mistake i am > making... > > (NOTE: *.c is everything in the

RE: [sqlite] Encryption and fixed header values (was Re: [sqlite] Why can i open a textfile?)

2005-08-29 Thread Mrs. Brisby
On Fri, 2005-08-26 at 12:53 -0400, Griggs, Donald wrote: > Regarding Mrs. Brisby's ending comment: >"A better defense: use a different key each time. Encrypt the session key > separately." > > I may way off in asking this, but: > Since we're talking about the encyption of data at rest, and

Re: [sqlite] Encryption and fixed header values (was Re: [sqlite]Why can i open a textfile?)

2005-08-29 Thread Mrs. Brisby
On Fri, 2005-08-26 at 16:21 +0200, F.W.A. van Leeuwen wrote: > > > > The usual defense against this attack is to mix some random information > > into the beginning of the plaintext. > > > > A better defense: use a different key each time. Encrypt the session key > > separately. > > > > And /or

RE: [sqlite] Encryption and fixed header values (was Re: [sqlite] Why can i open a textfile?)

2005-08-26 Thread Griggs, Donald
Regarding Mrs. Brisby's ending comment: "A better defense: use a different key each time. Encrypt the session key separately." I may way off in asking this, but: Since we're talking about the encyption of data at rest, and aren't in a client-server situation, how could sqlite make session

Re: [sqlite] Encryption and fixed header values (was Re: [sqlite]Why can i open a textfile?)

2005-08-26 Thread F.W.A. van Leeuwen
> > The usual defense against this attack is to mix some random information > into the beginning of the plaintext. > > A better defense: use a different key each time. Encrypt the session key > separately. > And /or start encrypting after the fixed header. Best regards, Frank.

Re: [sqlite] Encryption and fixed header values (was Re: [sqlite] Why can i open a textfile?)

2005-08-25 Thread Mrs. Brisby
On Wed, 2005-08-24 at 22:55 -0400, D. Richard Hipp wrote: > Weaknesses in RC4 have been found where > the first few numbers coming out of the PRNG leak information about the > key. If an attacker can guess the first few bytes of plaintext, and > hence guess the first few numbers from the PRNG,

Re: [sqlite] Encryption and fixed header values (was Re: [sqlite] Why can i open a textfile?)

2005-08-24 Thread D. Richard Hipp
On Wed, 2005-08-24 at 22:32 -0400, Mrs. Brisby wrote: > > There are several attacks that can be used to derive the original key > > state, but they all require huge samples of data to analyze. > > No they don't. That's the problem. They only need a large number of > _uses_ of the key, not large

Re: [sqlite] Encryption and fixed header values (was Re: [sqlite] Why can i open a textfile?)

2005-08-24 Thread Mrs. Brisby
On Mon, 2005-08-22 at 16:39 -0500, Dennis Jenkins wrote: > RC4 is basically an XOR against a huge one-time pad. No it's not. The only thing like a one-time pad is a one-time pad. What makes an OTP secure isn't the protocol, but where the bits come from. If they come from ANYWHERE but a truly

Re: [sqlite] Encryption and fixed header values (was Re: [sqlite] Why can i open a textfile?)

2005-08-22 Thread D. Richard Hipp
On Mon, 2005-08-22 at 17:19 -0400, Mike Shaver wrote: > On 8/22/05, Edwin Knoppert <[EMAIL PROTECTED]> wrote: > > Hmm, but every known file format has an header. > > Sqlite has a string, not really a header as it seems. > > Maybe for v4 to implement a real header (if not yet) > > A header doesn't

Re: [sqlite] Encryption and fixed header values (was Re: [sqlite] Why can i open a textfile?)

2005-08-22 Thread Dennis Jenkins
Mike Shaver wrote: On 8/22/05, Edwin Knoppert <[EMAIL PROTECTED]> wrote: Hmm, but every known file format has an header. Sqlite has a string, not really a header as it seems. Maybe for v4 to implement a real header (if not yet) A header doesn't need to be encrypted. (A bit for testing if

Re: [sqlite] Encryption extension for SQLite

2004-12-24 Thread D. Richard Hipp
LWL wrote: > I am by no means an expert cryptographer (in fact, I am just learning > cryptography) so there may be security flaws in the design of the > encryption layer. Please help me learn by giving me constructive > criticism and suggestions to improve the code. > A quick glance suggests that

Re: [sqlite] Encryption?

2004-09-23 Thread Will Leshner
Bryan Ashby wrote: I have searched around and cannot find a definite answer -- We are working on a project that _requires_ a small, embedded and encrypted database. SQLite fits all of our needs except for the encryption part .. which I'm not totally sure about. I notice that in sqlite3.h there is

RE: [sqlite] Encryption?

2004-09-22 Thread Bob Dankert
http://www.hwaci.com/sw/sqlite/prosupport.html#crypto I would also recommend going through the mailing list archives as I know there have been a couple conversations per this topic in the last few weeks. Bob -Original Message- From: Bryan Ashby [mailto:[EMAIL PROTECTED] Sent:

Re: [sqlite] Encryption in 2.8.13

2004-04-08 Thread Peter
Ulrik Petersen wrote: I see that in 2.8.13, there are stubs for an encryption layer, but the encryption itself seems not to have been made publicly available. Any chance of this becoming public in the next release? Form what I understand of the description on the SQlite site, encryption is

Re: [sqlite] Encryption in 2.8.13

2004-04-08 Thread D. Richard Hipp
Ulrik Petersen wrote: I see that in 2.8.13, there are stubs for an encryption layer, but the encryption itself seems not to have been made publicly available. Any chance of this becoming public in the next release? If not, is there any chance that the stubs could be documented so that one can