文档-sqlite数据库加密的两种方法.docVIP

sqlite数据库加密的两种方法 iphone?2010-12-13 11:12:00?38?评论0??字号：大中小?阅 一个是采用SQLCipher Need to store sensitive information in your app??SQLCipher?extends SQLite enabling transparent encryption and decryption of data using AES. Its?source?is available on Github. SQLite is pluggable. Developers can create extensions and chain them into SQLite’s engine. Using this mechanism, SQLCipher embeds itself low enough in the stack to be transparent. As a developer, you simply issue queries as you normally would and all of the crypto is handled transparently. SQLCipher’s author, Stephen Lombardo of?Zetetic, has also released?Cryptographically Secure File I/O?a library that supports random access file IO on encrypted files. 另外一个 Strong Encryption for?Cocoa?/?Cocoa?Touch AES?is a strong encryption standard that has mostly replaced the aging?DESstandard. AES is widely used and fairly secure encryption mechanism but I am not an expert at cryptography by any stretch of the imagination; I’m trusting experts for that opinion . AES supports three different key sizes, 128, 192, and 256 the larger the key, the more secure the encryption and the more processing power it takes to?encrypt?or decrypt . Apple uses AES-128 and AES-256 in several places in Mac OS X, including for Disk Image encryption.? There are several public-domain implementations of AES. I chose a?public domain implementation of AES by Philip J. Erdelsky?to use as the basis some Objective-C categories that make encrypting and decrypting files and data using AES-256 easy. The first category is on?NSFileManager, and allows you to?encrypt?a file in the filesystem. It takes a file at a particular pathname, encrypts it using a passphrase, and then writes the encrypted contents to a new specified file location. This version has relatively low memory overhead, as it streams the data in chunks both for reading and writing, so only the chunk currently being encrypted is in memory. The category adds two methods to?NSFileManager, one for encryp