Is there a correct way to test whether a user-provided SQLCipher password is valid on Android? -


i'm using sqlcipher android , trying determine correct way test whether user-provided password valid.

my first inclination try , open database given password, using sqlcipher implementation of sqliteopenhelper.getreadabledatabase(password), , catch sqliteexception pops out.

this work, problem because android api wraps underlying c calls, lot of work - specifically, when open database using android api, opens database, runs native c-level sqlite3_key method (with provided password), tries set locale on database, whether or not provided password correct.

at point, android library tries set locale, , underlying database throws "encrypted or not database" sqliteexception, caught , rethrown; before is, unrelated error written logs, saying locale cannot set , database being closed (with included stack trace). because written android library, cannot suppress it, leaving ugly error in logs unrelated original problem, passed in wrong password.

because android library not expose c-level calls, can't use method described in sqlcipher api documentation regarding testing key, because don't have access directly open database.

i lean towards using sqlitedatabasehook, best can tell, precludes use of sqliteopenhelper, not appear provide way set hook.

does else know better way test whether input passphrase decrypts sqlcipher database through sqlcipher android api? expect call method , check exception being thrown - don't want operation try , perform extraneous processing (like set locale) on database , write insuppressible error logs.

sqlcipher android not know password have provided invalid following sqlite3_key call, database key isn't used until sql command issued against database following sqlite3_key, such setlocale(...) method reference above. problem is, providing invalid key may 1 of possible other scenarios problem @ point first sql statement executed. corrupt data file, failed hmac check, or opening non database file result in same error message. detailed description of please review thread. best catch exception when attempting open database , handle accordingly within client application.


Comments

Post a Comment

Popular posts from this blog

jquery - How can I dynamically add a browser tab? -

since using iframes house external pages are, accounts "not preferred method" , disallowed sites (flickr, one), want dynamically generate browser tabs. e.g., when user submits form, want dynamically generate tab on browser in response submitted. e.g., might want add new tab url like: http://www.bigsurgarrapata.com/contact how in jquery? you want form target attribute action attribute. http://www.w3schools.com/tags/att_form_target.asp browsers have ultimate control on result of target attribute open new tab value of _blank. <form action="contact_submit.php" target="_blank" method="post">
Read more

node.js - Getting the socket id,user id pair of a logged in user(s) -

i have web application done using node js , in it,i have authentication system requires users log in before can access pages. have 2 pages,the homepage , updates page. from read docs,a new socket id issued when user opens tab in browser. me being admin,i know socket id of logged in user , more so,the socket id,logged in user id pair logged in users. what method can use socket id,logged in user id pair make sure broadcast realtime info users online?.
Read more

keyboard - C++ GetAsyncKeyState alternative -

i using windows.h library's getasynckeystate function define key pushed on keyboard . here program returns int value of pushed key example. #include <iostream> #include <windows.h> using namespace std; int main (){ char i; for(i=8;i<190;i++){ if(getasynckeystate(i)== -32767){ cout<<int (i)<<endl; } } return 0; } but trying make opengl simple game , function appeared slow . there function not need cycle 180 times , if statement . thanks you're trying make opengl game, you're going use glfw. if that's case can away using glfwgetkey() such: if (glfwgetkey(glfw_key_up) == glfw_press) {...} if (glfwgetkey(glfw_key_down) == glfw_press) {...} that method nicely explained in tutorial 6 opengl-tutorial.org . should start first tutorial of beginners tutorials , later intermediate tutorials . if you're going make win32 window can listen wm_keydown or wm_keyup messages , virtua
Read more