Database Encryption

[isontheline]

Database Encryption Engines

• https://github.com/sqlcipher/sqlcipher
  • https://www.zetetic.net/sqlcipher/ios-tutorial/
  • https://github.com/sqlcipher/sqlcipher/issues/371#issuecomment-1969414151 ⚠️ LGPL
• https://github.com/resilar/sqleet

mashREPL Helpers

• webssh database encryption [status, enable, disable] => disable requires Touch ID / Face ID
• webssh database encryption key [show, rotate] => requires Touch ID / Face ID

Encryption Activation Timeline

• Step 1 : Not enabled at all. Need to launch webssh database encryption enable
• Step 2 : Database backups will require to enable encryption firstly
• Step 3 : Enabled by default (can be disabled?)

[isontheline]

Need to launch database backup every day (when WebSSH is launched) / week / month

• Keep 7 days
• Keep 4 weeks
• Keep 12 months

Or any other scheme?

[lukensmall]

I don’t know why the ecc key got wiped out, but I still have the rsa key and it’s in my server. Something happened to how it’s processed.