Skip to content

SQLite3 Multiple Ciphers 2.4.0 (based on SQLite 3.53.4)

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Jul 20:33
· 10 commits to main since this release
v2.4.0
This tag was signed with the committer’s verified signature.
utelle Ulrich Telle
GPG key ID: 5CDE3A2F37D1A951
Verified
Learn about vigilant mode.
57d4e95
This commit was signed with the committer’s verified signature.
utelle Ulrich Telle
GPG key ID: 0B721BF7BBC62016
Verified
Learn about vigilant mode.

Changes since previous release

  • Based on SQLite version 3.53.4
  • Regenerated build files (with some additional options enabled)
  • Modified rekey operation to support rekeying in WAL mode
    Up to now the rekey operation generated a new key salt, but in WAL mode that would have led to corrupted databases, and was therefore not supported. Rekeying in WAL mode is now supported at the price of keeping the previous key salt. However, this is usually only a minor security degradation.
  • Added extension for value-level encryption (VLE)
    SQL functions sqlite3mc_vle_key, sqlite3mc_vle_encrypt, and sqlite3mc_vle_decrypt were implemented to allow to set up an encryption key for encrypting resp decrypting individual column values.

Important

📌 The amalgamation source package including configure is still experimental. 📌
Currently, only POSIX compliant systems are supported. Support files for building on Windows are included, but will only be adapted if the need arises.
Please report any issue you may experience using the GitHub issue tracker.
❗ Please share your experiences with this source package. TIA. ❗

Notes
This release contains the following precompiled binaries:

  • SQLite3 binaries for Windows (SQLite3 shell and DLLs) with resp. without enabled ICU support in variants for 32-bit and 64-bit Windows. The SQLite3 shell applications support the SQLite Archive feature,
  • Source code amalgamation (amalgamation) - a single C source file and a single C header file,
  • Source code amalgamation (autoconf) - a single C source file and a single C header file - including a configure script for POSIX compliant systems,
  • Precompiled SQLite Android library (see SQLite Android Bindings),
  • Precompiled bundle of sqlite3.wasm and its JavaScript APIs, ready for use in web applications (see SQLite3 WebAssembly).

Verification

Release artifacts were built by GitHub Actions and are published with GitHub Artifact Attestations for provenance verification.

The SHA256SUMS file containing the checksums of the release artifacts is additionally signed using Sigstore Cosign.

To verify the integrity and authenticity of the checksum file, install Cosign and run:

cosign verify-blob \
  --certificate sqlite3mc-2.4.0-SHA256SUMS.pem \
  --signature sqlite3mc-2.4.0-SHA256SUMS.sig \
  --certificate-identity-regexp '^https://github.com/utelle/SQLite3MultipleCiphers/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  sqlite3mc-2.4.0-SHA256SUMS
Assets 13
Loading