logo       

Re: [sqlite] How secure is encrypted sqlite database: msg#00810

sqlite-users

Subject: Re: [sqlite] How secure is encrypted sqlite database

Ram G wrote:
> Hi
> I have modified (credit goes to System.Data.SQLite) SQlite library to
> encrypt the database. File is encrypted and data insert/update/retrieval
> works fine.
>
> The question I have is, how secure is the encrypted database. Please correct
> me if I am wrong, SQLite reads the file and stores some of the data pages in
> memory. In the case of an encrypted database, the data cached in memory
> pages is encrypted or clear text?
>

As others have indicated, your question implies that the potential
hacker has direct access to the machine and enough understanding of
computer operations to be able to read in process memory.

As far as protecting data in such a scenario, I believe the technical
phrase is "you are royally screwed". By definition, it is impossible,
unless the data is unreadable to ANY consumer, including your own
application.


John
_______________________________________________
sqlite-users mailing list
sqlite-users@xxxxxxxxxx
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users

<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | Mail Home | sitemap | FAQ | advertise