Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Encryption extension #55

Closed
ncruces opened this issue Jan 27, 2024 · 1 comment · Fixed by #77
Closed

Encryption extension #55

ncruces opened this issue Jan 27, 2024 · 1 comment · Fixed by #77
Labels
enhancement New feature or request

Comments

@ncruces
Copy link
Owner

ncruces commented Jan 27, 2024

Implementing:
https://github.com/resilar/sqleet
https://github.com/utelle/SQLite3MultipleCiphers

@ncruces ncruces added enhancement New feature or request help wanted Extra attention is needed labels Jan 27, 2024
@ncruces
Copy link
Owner Author

ncruces commented Apr 14, 2024

Removal of SQLITE_HAS_CODEC has made this much harder than it had been.

Users that need vetted encryption should purchase the SQLite Encryption Extension. You'll have to build/embed SQLite yourself, but that shouldn't be hard.

I welcome any patches that wrap the additional SEE APIs, or sponsoring of a SEE license for me to do it myself.

Meanwhile, I'll probably work on a simpler approach that implements a VFS that uses Adiantum to do encryption at rest. This is strictly less secure than the above approach, for reasons stated in this article. Still, it's good enough for full disk, and filesystem, encryption on Linux/Android, so it should be good enough for many purposes.

@ncruces ncruces removed the help wanted Extra attention is needed label Apr 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant