SQLite encryption in java using Hibernate

Question

To access dynamically created sqlite databases, this works perfectly. Now I want to secure the sqlite files. After some research I found out the way to go is (AES) encryption. Can anyone explain to me if this is possible using hibernate? And If so, how? If this doesn't work, is there any other solution for securing the data in the files?

"Secure" is a rather vague term. Anybody who can read your database file probably also can read the key from your application. What exactly do you want to protect against? — CL.
– CL., Commented Nov 13, 2012 at 14:37
For example the SQLite file is on a USB stick, but I only want a user knowing the encryption key to be able to read the file. Is there some sort of general encryption supported by SQLite reading applications? — Thizzer
– Thizzer, Commented Nov 15, 2012 at 9:29
Eg. In case of loss of the USB stick the file should be nothing to worry about (I understand encrypting the USB stick would be a solution but this is just an example any location should be secure) — Thizzer
– Thizzer, Commented Nov 15, 2012 at 9:30
So the user must enter the key every time your app is run? Or is the key stored in the app or on the computer? — CL.
– CL., Commented Nov 15, 2012 at 10:21
Why are you trying to solve this at Hibernate level? Encrypt the USB stick using one of many available methods and deal with authentication when the drive is mounted. — mindas
– mindas, Commented Dec 20, 2012 at 20:50

theglauber · Accepted Answer · 2012-12-20 21:11:14Z

6

+200

You know about SQLite's Encryption Extension, right?

answered Dec 20, 2012 at 21:11

theglauber

30k7 gold badges31 silver badges47 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Thizzer Over a year ago

No I did not, weird I didn't find any information about it while researching encrypting sqlite

Jubin Patel Over a year ago

@theglauber if your are talking about SEE. its require a license means have to spend money for encryption

Thizzer Over a year ago

License fees aren't a problem, the URL in this answer finally explained how the encryption of an SQLite database is possible.

theglauber Over a year ago

Cool; i was afraid i was stating something obvious; i'm glad it helped.

Jubin Patel · Accepted Answer · 2012-12-26 12:51:04Z

You can use the built-in encryption of the sqlite (System.Data.SQLite). See more details at http://sqlite.phxsoftware.com/forums/t/130.aspx

You can also Use SQLCipher, it's an opensource extension for SQLite that provides transparent 256-bit AES encryption of database files. http://sqlcipher.net

and as you need hibernate

you can use FluentNHibernate, you can use following configuration code:

private ISessionFactory createSessionFactory()
{
    return Fluently.Configure()
            .Database(SQLiteConfiguration.Standard.UsingFileWithPassword(filename, password))
            .Mappings(m => m.FluentMappings.AddFromAssemblyOf<DBManager>())
            .ExposeConfiguration(this.buildSchema)
            .BuildSessionFactory();    
}

private void buildSchema(Configuration config)
{
        if (filename_not_exists == true)
        {
            new SchemaExport(config).Create(false, true);
        }
}

Method UsingFileWithPassword(filename, password) encrypts a database file and sets password. It runs only if the new database file is created. The old one not encrypted fails when is opened with this method.

EDIT :

more options for you

SEE - The official implementation.
wxSQLite - A wxWidgets style c++ wrapper that also implements SQLite's encryption.
SQLCipher - Uses openSSL's libcrypto to implement.
SQLiteCrypt - Custom implementation, modified API.
botansqlite3 - botansqlite3 is an encryption codec for SQLite3 that can use any algorithms in Botan for encryption.

The SEE and SQLiteCrypt require the purchase of a license.

FluentNHibernate is not available for Java. +1 for the list of options

Collectives™ on Stack Overflow

SQLite encryption in java using Hibernate

2 Answers 2

4 Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

4 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related