CODEWITHSUNDEEP
databasesqlitewindows-runtimewindows-store
Martin Zikmund
Martin Zikmund

Reputation: 39082

WinRT SQLite Encryption

I'm building a Windows Store application that uses SQLite for data storage. I have found out, that the database is easily accessible through User's local folder (actually all apps have all data publicly exposed). Is there a way to at least weakly protect the database from access?

Upvotes: 5

Views: 1246

Answers (2)

Firanto
Firanto

Reputation: 609

I also looking for the same solution and found sqlite-crypt at http://sqlite-crypt.com/download.htm

I don't know whether this one good enough or not. There is a trial version that limit passphrase to 6 characters and store it as plain text in the header. It won't be suitable if you want complete data protection. But for testing, maybe it's worth a try. I don't have a chance to test it yet since I still working on the server side of my project. I'll update it when I've test it in the future.

EDIT: Ok. I've test the trial version and it's worked well with modificated version of SqliteWinRT wrapper on codeplex. Note that the trial is limited to 5-6 characters of passphrase and this phasephrase is stored in plain text, plus it's in x86 compiled binary, which means it won't work for actual product which need ARM support. You have to purchase the binary to get the production-ready binaries.

Upvotes: 0

Hermit Dave
Hermit Dave

Reputation: 3046

you need to look at ProtectedData class

http://msdn.microsoft.com/en-us/library/windows/apps/windows.security.cryptography.dataprotection.dataprotectionprovider.aspx

It exposes easy to use Protect / Unprotect methods that can be used to encrypt / decrypt that at app level. Encrypt data before writing to db and unencrypt before consuming

Upvotes: 3

Related Questions