Monday, May 8, 2017

Re: sqlite3 database encrytion for Django.

On Saturday 06 May 2017 11:56:28 Tim Chase wrote:

> On 2017-05-05 11:51, agajeshwar@atompower.com wrote:

> > I want to encrypt my sqlite3 database such that it cannot be

> > accessed without a key. I came across "sqlcipher" tool which

> > provides encryption for sqlite3 database, but I couldn't find

> > enough support to make it work from django.

> >

> > It would be very helpful if someone can share thoughts on how to

> > encrypt sqlite3 database and be able to access the encrypted

> > version through django.

>

> While there are other ideas presented in other replies to your email,

> would it suffice to have an encrypted partition and put your database

> on that partition? I configure my FreeBSD servers to be ZFS-on-GELI so

> in the event the power goes out or the machine is rebooted, the

> contents are unavailable until I enter the password on the console.

 

Unfortunately, that doesn't prevent theft at runtime, which is the primary case for encrypting "documents". I used to do something like this with svn passwords, using a file-backed mdconfig store and geli.

--

Melvyn Sopacua

No comments:

Post a Comment