Re: [sqlite] to encrypt sqlite db

2013-09-02 Thread Clemens Ladisch
Ulrich Telle wrote: Am 02.09.2013 06:11, schrieb Etienne: wxSQLite3 does implement AES in ECB mode Wrong. CBC mode is used. Inside one page. If we ignored the actual block size, and viewed the entire database as a stream to be encrypted by a cipher with a block size identical with the page

Re: [sqlite] to encrypt sqlite db

2013-09-02 Thread Yuriy Kaminskiy
Ulrich Telle wrote: Am 31.08.2013 22:01, schrieb Etienne: On Sat, 31 Aug 2013 17:17:23 +0200 Etienne etienne.sql...@mailnull.com wrote: On the other hand removing patterns definitely cannot hurt. Precisely. The very first bytes of SQLite files are, AFAIK, well known.

Re: [sqlite] to encrypt sqlite db

2013-09-02 Thread Yuriy Kaminskiy
Etienne wrote: - Original message - From: Paolo Bolzoni paolo.bolzoni.br...@gmail.com To: General Discussion of SQLite Database sqlite-users@sqlite.org Subject: Re: [sqlite] to encrypt sqlite db Date: Sun, 1 Sep 2013 18:24:13 +0200 On Sun, Sep 1, 2013 at 6:10 PM, Etienne etienne.sql

Re: [sqlite] to encrypt sqlite db

2013-09-01 Thread Ulrich Telle
Am 31.08.2013 22:01, schrieb Etienne: On Sat, 31 Aug 2013 17:17:23 +0200 Etienne etienne.sql...@mailnull.com wrote: On the other hand removing patterns definitely cannot hurt. Precisely. The very first bytes of SQLite files are, AFAIK, well known. That's what salt is for,

Re: [sqlite] to encrypt sqlite db

2013-09-01 Thread Mohit Sindhwani
On 31/8/2013 9:52 PM, dd wrote: Thank you for your quick response. I am looking for freeware. If freeware not available, I have to implement encryption support for sqlite on winrt. What is the procedure to implement encryption support on winrt? Thanks, dd Many others have replied with the

Re: [sqlite] to encrypt sqlite db

2013-09-01 Thread Clemens Ladisch
Ulrich Telle wrote: Am 31.08.2013 22:01, schrieb Etienne: I simply wanted to warn the OP that wxSQLite, while free, does NOT use salts: Well, that's not completely true. The encryption extension coming with wxSQLite3 uses a different IV (initial vector) for each database page. True is that

Re: [sqlite] to encrypt sqlite db

2013-09-01 Thread Etienne
On Sun, Sep 1, 2013, at 17:50, Clemens Ladisch wrote: Ulrich Telle wrote: Am 31.08.2013 22:01, schrieb Etienne: I simply wanted to warn the OP that wxSQLite, while free, does NOT use salts: Well, that's not completely true. The encryption extension coming with wxSQLite3 uses a

Re: [sqlite] to encrypt sqlite db

2013-09-01 Thread Paolo Bolzoni
Another weird sentence in the mailing list of probably most used DB that is really free. On Sun, Sep 1, 2013 at 6:10 PM, Etienne etienne.sql...@mailnull.com wrote: On Sun, Sep 1, 2013, at 17:50, Clemens Ladisch wrote: Ulrich Telle wrote: Am 31.08.2013 22:01, schrieb Etienne: I simply wanted

Re: [sqlite] to encrypt sqlite db

2013-09-01 Thread Etienne
paolo.bolzoni.br...@gmail.com To: General Discussion of SQLite Database sqlite-users@sqlite.org Subject: Re: [sqlite] to encrypt sqlite db Date: Sun, 1 Sep 2013 18:24:13 +0200 Another weird sentence in the mailing list of probably most used DB that is really free. On Sun, Sep 1, 2013 at 6:10 PM, Etienne

Re: [sqlite] to encrypt sqlite db

2013-09-01 Thread Ulrich Telle
Am 01.09.2013 18:40, schrieb Etienne: wxSQLite is free, while SEE is definitively not. The original poster searched for a free encryption extension, of which there exist several: System.Data.SQLite (RC4), wxSQLite3 (AES-128 or AES-256), SQLCipher (AES-256 with nonce) to name a few.

Re: [sqlite] to encrypt sqlite db

2013-09-01 Thread Etienne
On Sun, Sep 1, 2013, at 19:59, Ulrich Telle wrote: Am 01.09.2013 18:40, schrieb Etienne: wxSQLite is free, while SEE is definitively not. The original poster searched for a free encryption extension, of which there exist several: System.Data.SQLite (RC4), wxSQLite3 (AES-128 or AES-256),

Re: [sqlite] to encrypt sqlite db

2013-09-01 Thread Ulrich Telle
Am 02.09.2013 06:11, schrieb Etienne: wxSQLite3 does implement AES in ECB mode Wrong. CBC mode is used. Regards, Ulrich ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users

[sqlite] to encrypt sqlite db

2013-08-31 Thread dd
Hi All, I have to encrypt sqlite database on winrt. What are all the necessary steps to do to encrypt sqlite database? Thanks in advance. Regards, dd ___ sqlite-users mailing list sqlite-users@sqlite.org

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Paolo Bolzoni
There is a non-free version of sqlite that encrypt the db. If it is that you want then you have to contact them directly. Otherwise just use sqlite on a EncFs mounted disk? On Sat, Aug 31, 2013 at 2:25 PM, dd durga.d...@gmail.com wrote: Hi All, I have to encrypt sqlite database on winrt

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Mohit Sindhwani
On 31/8/2013 8:40 PM, Paolo Bolzoni wrote: There is a non-free version of sqlite that encrypt the db. If it is that you want then you have to contact them directly. Otherwise just use sqlite on a EncFs mounted disk? Adding on to Paolo's answer, see this: http://www.hwaci.com/sw/sqlite

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Stephan Beal
On Sat, Aug 31, 2013 at 2:59 PM, Mohit Sindhwani m...@onghu.com wrote: Adding on to Paolo's answer, see this: http://www.hwaci.com/sw/** sqlite/prosupport.html http://www.hwaci.com/sw/sqlite/prosupport.html See SEE and CEROD on that page. @devs: minor typo on that page: The SQLite software

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread dd
Thank you for your quick response. I am looking for freeware. If freeware not available, I have to implement encryption support for sqlite on winrt. What is the procedure to implement encryption support on winrt? Thanks, dd On Sat, Aug 31, 2013 at 6:34 PM, Stephan Beal sgb...@googlemail.com

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Eric Sink
SQLCipher is free. But it's not compatible with WinRT. I'm pretty sure that right now there is nothing that meets both of your requirements. -- E On Aug 31, 2013, at 8:52 AM, dd durga.d...@gmail.com wrote: Thank you for your quick response. I am looking for freeware. If freeware not

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Etienne
Thank you for your quick response. I am looking for freeware. If freeware not available, I have to implement encryption support for sqlite on winrt. What is the procedure to implement encryption support on winrt? Thanks, dd http://wxcode.sourceforge.net/components/wxsqlite3 might help

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Paolo Bolzoni
That last sentence is quite weird, a good encryption system should give a random-like sequence even with very low-entropy input. On the other hand removing patterns definitely cannot hurt. On Sat, Aug 31, 2013 at 4:38 PM, Etienne etienne.sql...@mailnull.com wrote: Thank you for your quick

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Etienne
That last sentence is quite weird, a good encryption system should give a random-like sequence even with very low-entropy input. On the other hand removing patterns definitely cannot hurt. Precisely. The very first bytes of SQLite files are, AFAIK, well known. While encryption-only

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Richard Hipp
On Sat, Aug 31, 2013 at 11:17 AM, Etienne etienne.sql...@mailnull.comwrote: The very first bytes of SQLite files are, AFAIK, well known. Those first few bytes are just as well known after they have been run through zlib or libbz2 or whatever compression library you are using. Your encryption

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Etienne
Those first few bytes are just as well known after they have been run through zlib or libbz2 or whatever compression library you are using.  Your encryption algorithm, whatever it is, needs to be resistant to a known-plaintext attack. LZ is a sequential algorithm, while BW works with large

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread James K. Lowden
On Sat, 31 Aug 2013 17:17:23 +0200 Etienne etienne.sql...@mailnull.com wrote: On the other hand removing patterns definitely cannot hurt. Precisely. The very first bytes of SQLite files are, AFAIK, well known. That's what salt is for, no? --jkl

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Richard Hipp
On Sat, Aug 31, 2013 at 1:10 PM, James K. Lowden jklow...@schemamania.orgwrote: On Sat, 31 Aug 2013 17:17:23 +0200 Etienne etienne.sql...@mailnull.com wrote: On the other hand removing patterns definitely cannot hurt. Precisely. The very first bytes of SQLite files are, AFAIK, well

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Etienne
On Sat, 31 Aug 2013 17:17:23 +0200 Etienne etienne.sql...@mailnull.com wrote: On the other hand removing patterns definitely cannot hurt. Precisely. The very first bytes of SQLite files are, AFAIK, well known. That's what salt is for, no? nonce, IV, salt -

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread Mikael
Wait, can you clarify what you mean by SEE here, and also which library you mean for BW? Thanks 2013/8/31 Etienne etienne.sql...@mailnull.com Those first few bytes are just as well known after they have been run through zlib or libbz2 or whatever compression library you are using. Your

Re: [sqlite] to encrypt sqlite db

2013-08-31 Thread j . merrill
not be very useful. [quoted message from Paolo Bolzoni] Date: Sat, 31 Aug 2013 14:40:19 +0200 From: Paolo Bolzoni paolo.bolzoni.br...@gmail.com Subject: Re: [sqlite] to encrypt sqlite db Message-ID:   cao4loozq1wr_ovnbh4wtfqupbjyd+pxr1rhpthcxv9nc8n8...@mail.gmail.com There is a non-free version