±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36096
New Yesterday: 7 Visitors: 120

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Encrypted SQLite databases

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

PaulSanderson
Senior Member
 

Encrypted SQLite databases

Post Posted: Apr 17, 18 17:26

I am doing some research into SQLite encryption and I am looking for examples of SQLite databases or rather applications that are encrypted at an SQLite level, i.e. the SQLite.dll/library provides the encryption at a page level, rather than something like WhatsApp which encrypt the DB at a file level.

If anyone has any examples of these then please let me know.

Thanks
_________________
Paul Sanderson
SQLite Forensics Book
www.amazon.com/SQLite-...entries*=0

Forensic Toolkit for SQLite
sandersonforensics.com...for-SQLite 
 
  

mcman
Senior Member
 

Re: Encrypted SQLite databases

Post Posted: Apr 17, 18 17:46

Let me dig something up Paul, I wrote a few slides on it a year back or so. Some apps would encrypt the entire db, others would just encrypt specific columns within the db. It would also vary between OSs (Android version of the same app would be different than the iOS version).

I wanna say: Wickr, Signal, BBM, Tango (encoded, not encyrpted), KakaoTalk, etc. were a few but I can't recall off the top of my head which version did what. I'll see what I can find.

Jamie  
 
  

PaulSanderson
Senior Member
 

Re: Encrypted SQLite databases

Post Posted: Apr 18, 18 15:11

Thanks Jamie

I have looked at Wickr and it confirms my thoughts.

Cheers
_________________
Paul Sanderson
SQLite Forensics Book
www.amazon.com/SQLite-...entries*=0

Forensic Toolkit for SQLite
sandersonforensics.com...for-SQLite 
 
  

mcman
Senior Member
 

Re: Encrypted SQLite databases

Post Posted: Apr 18, 18 18:01

Yeah I want to say the Android version of Wickr is a fully encrypted db and uses SQLCipher but the iOS version is an unencrypted db with encrypted BLOB data inside...again been a while so I haven't looked at the newer versions of the apps myself.

Let me know if you need anything else.

Jamie  
 

Page 1 of 1