AutoHotkey Community

Hey everybody,

I am considering developing some AHK application that uses SQLite (the EXE, not DLL).

I was wondering if anyone has experience with protecting the database file with encryption.

I thought this would be built in in SQLite, but as far as I could understand, it requires purchasing an expensive license for the SQLite Eencryption Extension (SEE).

My second alternative, is to use my own encryption - either using a command line tool to do the job, or the AHK TEA library - but before I do it, I would love to hear if someone has a better suggestion.

Thanks in advance.

_________________
Sector-Seven - Freeware tools built with AutoHotkey

Why not garble the data and keep the database "unprotected"

_________________
AHK FAQ
TF : Text files & strings lib, TF Forum

I would like to use a sufficiently strong encryption, as I am building a password holder.
but yeah, one option I have is use the AHK TEA library (which is working on text only) and encrypt data prior to putting it in the db.

I just feel it is a little more prone to data corruption.

_________________
Sector-Seven - Freeware tools built with AutoHotkey

RC4? http://www.autohotkey.com/forum/viewtopic.php?t=6804 (don't know anything about it)

_________________
AHK FAQ
TF : Text files & strings lib, TF Forum

Thanks Hugo,
RC4 seems (at first glance) to also not handle binary data.
Laszlo is referring people back to TEA threads.

Maybe I will just use some command line TEA encryptor - I found one somewhere, guessing it will deal with binary data.

_________________
Sector-Seven - Freeware tools built with AutoHotkey

Icarus,

HugoV pointed me to this thread, from this thread.

Have you made any headway with encrypting a SQLite DB?

Please reply to advise.

Thanks.

-t

_________________
When replying, please feel free to address me as Tod. My AHK.net site...

Read this pdf from the root.labs guys

http://root.org/talks/WhenCryptoAttacks_Yahoo2009.pdf

Very good info!

_________________
paradigm.shift:=(•_•)┌П┐RTFM||^.*∞

TodWulff,

I decided to implement my SQLite encryption using a third party encryption tool that I am using regularly.

So, if you are planning on distributing your AHK script to many people, my solution is probably not a good one for you.

If you do want to examine it, take a look at AxCrypt.

Its a small install that lets you encrypt files from Windows Explorer, and it supports command line arguments, so you can encrypt/decrypt files from within AHK.

This is the only reliable solution I could trust.

_________________
Sector-Seven - Freeware tools built with AutoHotkey

I appreciate you taking the time to reply.

I'll check it out. I'll also advise if I figure out a way to do what I am wanting.

This has promise. Temp01 was kind enuf to point me to it.

Take care. Happy Holidays!

-t