Actions:
|
2021-05-06 11:24 AEST by Arthur Barrett - the System.Data.SQLite ADO package contains windows encryption.
The sqlite support in CVS Suite Server (audit) should include an option to use this (via SetPassword).
Note: this would be windows only. Using SQLCipher wouldn't use FIPS compliant encryption if enabled in the
AD as explained here:
https://www.zetetic.net/sqlcipher/fips/
What Is Validated
SQLCipher's encryption calls would only be considered FIPS 140-2 validated if you are using the special
SQLCipher FIPS builds. Standard SQLCipher builds do not use a FIPS 140-2 validated cryptographic module,
regardless of any external operating system settings. For instance, on Windows the local / group policy
setting for FIPS has no affect on SQLCipher because it is not using the Windows cryptography extensions.
Thus, even with FIPS policy settings enabled at the operating system level, an application using SQLCipher
for encryption would still need to use the special SQLCipher FIPS packages to meet FIPS 140-2 guidelines. |