Android Question SQL Cipher and password in code

[raphipps2002]

Just been playing with SQL cipher and having a DB_Password in my Global variables.

My question is how how secure is the cipher and how easy is it for someone to look at my code and identify that password if it is simply in a variable.

Is there a way to disguise the DB_pwd so look at code does not defeat the object of the cipher

 

[JTmartins]

The way I've done is create a table wich I use as the application registry. (two fields "Key" and "Value"

In that table I store several values that have to do with app operation, and also an encription key (call it password if you prefer).

The key itself is encripted and in binary, so if you look at the DB you will find a huge string with 0 & 1 wich if you try to translate would have no meaning.

During runtime I decript the key and then using the key I decript whatever I need.

It may not be perfect, but at least if someone peeks DB or code would have some more guessing work to do.

 

[Erel]

Make sure that the password is stored in a process global variable. Then when you obfuscate your code the password will also be obfuscated.