resilar

I found something interesting: [CEVFS - SQLite3 Compression Encryption VFS](https://github.com/ryanhomer/sqlite3-compression-encryption-vfs/). The encryption seems to lack authentication (MACs), and combining compression with encryption is generally a [bad](https://en.wikipedia.org/wiki/CRIME) [idea](https://en.wikipedia.org/wiki/BREACH). Nonetheless, the approach...

Great work! I'm still busy with other less interesting things. I'd seriously consider a "dumb" authenticated encryption for non-database files. Journal and WAL writes are (almost?) always appended to the...

>0. Preliminary note >... Nevertheless, I think it is important to make a fair, unbiased comparison as far as this is possible for a developer of a separate SQLite encryption...

Yes, there are plans to continue development of sqleet. The problem is that SQLite after version 3.32 dropped codec encryption support that sqleet uses, so most of the project needs...

>I really hope the new VFS implementation can move forward in the near future, even if it is in rough and breaking form. If this can be posted as a...

> I have also been wondering if this library has been reviewed for security. Should I ask this in a new issue? The current cryptosystem of sqleet is a minor...

I'm afraid the VFS-extension rewrite will be delayed for a few weeks. ETA: February **UPDATE ~2 years later**: Well, didn't happen lol.

Direct link to the latest amalgamation `.zip`/`.tar.gz` package of sqleet? No, I don't think GitHub supports that. I agree that this could be an useful feature and easy to implement...

Yeah, the lack of direct links is easy to overcome with shell scripting. Given git and a few extra commands, it is doable to fetch & build the latest release's...

[sqleet](https://github.com/resilar/sqleet) encryption extension works out-of-the-box with sql.js due to its standalone design (i.e., no OpenSSL dependencies or other crap). Simply compile sql.js after replacing`c/sqlite3.c` and `c/sqlite3.h` with `sqleet.c` and `sqleet.h`...