On Wed, Jan 13, 2010 at 11:07:50AM -0800, Mark Spiegel scratched on the wall: > > > Jay A. Kreibich wrote: > > On Tue, Jan 12, 2010 at 02:53:55PM -0500, Ray Gold scratched on the wall: > >> > >> My name is Ray Gold with Berliner, Corcoran & Rowe, LLP in Washington, DC. > >> > >> I am writing to ask if the core SQLite library (not the proprietary > >> SQLite Extensions) has any encryption/decryption capabilities. > > > > No. > > > > However, the SQLite Encryption Extension is maintained by the same > > people that maintain the core library. It is "proprietary" only in > > the sense that it is commercial, licensed software. > > > > The core library does provide hooks to the OS layer and the > > file-system layer. It is possible to write your own encryption > > layer if the extension did not meet your needs.
> I would avoid using the OS layer. I was under the impression that is how SEE works. Hooking the SQLite Virtual File System interface seems like a very straight forward method. All you really need to do is splice your code between the VFS that the SQLite engine sees and the native VFS layer that comes with the distribution, adding a bit of extra code to xRead() and xWrite() to munge the data. I've never tried it but the documentation makes it look like something you could do without modification to the core source and with very little code other than the actual encrypt/decrypt routines, plus the interfaces required to configure them. No actual file system code, nor any OS specific code. In theory. 8-) http://sqlite.org/c3ref/vfs.html http://sqlite.org/c3ref/io_methods.html > the license for the encryption > extension is relatively inexpensive and maintained for you. As I > understand it, once purchased, it is good indefinitely. Further, if it > doesn't meet your encryption needs (unlikely) you could extend the > encryption extension easier than adding encryption at the file system level. Yes. I would definitely encourage people to look at the supported product before going off and writing their own. The value, cost, and license terms are exceptionally good. It is the right choice for most commercial situations. -j -- Jay A. Kreibich < J A Y @ K R E I B I.C H > "Our opponent is an alien starship packed with atomic bombs. We have a protractor." "I'll go home and see if I can scrounge up a ruler and a piece of string." --from Anathem by Neal Stephenson _______________________________________________ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
