Linux安装编译SQLCipher，对sqlite数据库加密、解密、修改、去掉密码操作
本文主要是自己在实际用的过程记录，如发现理解错误，欢迎指正。
1https://github.com/sqlcipher/sqlcipher 下载源代码
2 # ./configure --enable-tempstore=yes CFLAGS="-DSQLITE_HAS_CODEC"
3 # make
make: tclsh: Command not found
make: *** [fts5.c] Error 127
make: *** Waiting for unfinished jobs....
#./configure --enable-tempstore=yes CFLAGS="-DSQLITE_HAS_CODEC" --disable-tcl
# make -j 16
cat parse.h /home/work/guoli/sqlcipher-master/src/vdbe.c | tclsh /home/work/guoli/sqlcipher-master/tool/mkopcodeh.tcl >opcodes.h
/bin/sh: tclsh: command not found
make: *** [opcodes.h] Error 127
--------------------------------------------------------------------------------
4 安装tcl
http://www.tcl.tk/software/tcltk/
# tar -xvzf tcl8.6.8-src.tar.gz
#cd tcl8.6.8/unix
#./configure --prefix=/user/local/tcl
# make
#sudo make install
# sudo ln -s /user/local/tcl/bin/tclsh8.6 /bin/tclsh
--------------------------------------------------------------------------------
重复步骤2
报错：
sqlite3.c:16702:3: error: unknown type name ‘sqlite3_mutex’
5 怀疑需要安装 sqlite
http://124.205.69.135/files/11450000061AF698/www.sqlite.org/2017/sqlite-autoconf-3210000.tar.gz
#tar -xvxf sqlite-autoconf-3210000.tar.gz
#cd sqlite-autoconf-3210000/
#./configure
#make
#sudo make install
--------------------------------------------------------------------------------
重复步骤2
编译通过
-------------------------------- 测试 --------------------------------------
加密已有的数据库(参考http://blog.csdn.net/sskicgah/article/details/37502433)
1.先用sqlite打开db文件
sqlite3 test.db
2.把数据导成sql格式
sqlite> .output test.sql
sqlite> .dump
sqlite> .exit
3.加密 //加密的过程是生成了一个新的有密码的数据库
./sqlcipher test2.db #创建一个新的db文件
sqlite> PRAGMA key = 'test'; #设置密码
sqlite> .read test.sql #导入数据
sqlite> .exit #退出
把加密过的文件放在Windows 下用navicat premium 直接查看，加密成功。
但是用sqlcipher.exe输入设置的密码，确不能打开
经检查：sqlcipher.exe 是2.1版本的。加密用的是基于3.20.1版本，不同的版本生成的db文件可能不兼容
4. 解密
#./sqlcipher test2.db
sqlite> PRAGMA KEY='test';//需先输密码解密再进行其他操作
sqlite> .schema
CREATE TABLE xxxx ... ...
# ./sqlcipher test2.db
sqlite> .schema
Error: file is not a database
（还以为把密码设置成空，就能把密码抹去，原来不是这么一回事）
#./sqlcipher test2.db
sqlite> PRAGMA key = 'test';//去掉密码的过程是生成了一个新的没有密码的数据库
sqlite> ATTACH DATABASE 'text.db' AS plaintext KEY '';
sqlite> SELECT sqlcipher_export('plaintext');
sqlite> DETACH DATABASE plaintext;
sqlite> .exit
#./sqlcipher text.db //查看新库
sqlite> .schema
CREATE TABLE xxxx
5 修改密码
# ./sqlcipher test2.db
sqlite> PRAGMA KEY='test';
sqlite> PRAGMA rekey = 'newkey';
sqlite> .exit
借鉴了很多网友的帖子，多谢~
--------------------------------------------------------------------------------
其他报错：
./.libs/libsqlcipher.so: undefined reference to `HMAC_CTX_new'
./.libs/libsqlcipher.so: undefined reference to `HMAC_CTX_free'
collect2: error: ld returned 1 exit status
make: *** [sqlcipher] Error 1
交叉编译sqlcipher
https://www.cnblogs.com/bbqzsl/p/7736060.html
--------------------------------------------------------------------------------
SQLCipher主要API
(
https://www.zetetic.net/sqlcipher/sqlcipher-api/)
PRAGMA key
Example 1: Passphrase with Key Derivation
sqlite> PRAGMAkey = 'passphrase';
Example 2: Raw Key Data (Without KeyDerivation)
sqlite> PRAGMA key = "x'2DD29CA851E7B56E4697B0E1F08507293D761A05CE4D1B628663F411A8086D99'";
PRAGMA cipher
sqlite> PRAGMA key = 'blue valentines';
sqlite> PRAGMA cipher = 'aes-256-cfb';
PRAGMA kdf_iter
sqlite> PRAGMA key = 'blue valentines';
sqlite> PRAGMA kdf_iter = '10000';
PRAGMA cipher_default_kdf_iter
./sqlcipher sqlcipher2.0.db
sqlite> PRAGMA cipher_default_kdf_iter = 4000;
sqlite> PRAGMA key = 's3cr37';
PRAGMA cipher_page_size
sqlite> PRAGMA KEY = 'testkey';
sqlite> PRAGMA cipher_page_size = 4096;
PRAGMA cipher_default_page_size
$ ./sqlcipher foo.db
sqlite> PRAGMA key = 'foo';
sqlite> PRAGMA cipher_page_size = 4096;
sqlite> CREATE TABLE t1(a,b);
sqlite> INSERT INTO t1(a,b) values('one for the money', 'two for the show');
sqlite> .q
$ ./sqlcipher bar.db
sqlite> PRAGMA cipher_default_page_size = 4096;
sqlite> PRAGMA key = 'bar';
sqlite> ATTACH DATABASE 'foo.db' as foo KEY 'foo';
sqlite> SELECT count(*) FROM foo.t1;
PRAGMA rekey
sqlite> PRAGMA key = 'old passphrase';
sqlite> PRAGMA rekey = 'new passphrase';
PRAGMA cipher_use_hmac
sqlite> PRAGMA key = 'blue valentines';
sqlite> PRAGMA cipher_use_hmac = OFF;
PRAGMA cipher_default_use_hmac
./sqlcipher sqlcipher2.0.db
sqlite> PRAGMA key = 's3cr37'; -- opens using default setting, with HMAC on
sqlite> PRAGMA cipher_default_use_hmac = OFF;
sqlite> ATTACH DATABASE '1.1.x.db' AS remote key 's3cr37'; -- next open operation, the default for HMAC is off, and this database
ATTACH
Example 1: Attach an Encrypted Database to aPlaintext Database
$ ./sqlcipher plaintext.db
sqlite> ATTACH DATABASE 'encrypted.db' AS encrypted KEY 'testkey';
Example 2: Attach an Encrypted Database usinga Hex Key
$ ./sqlcipher plaintext.db
sqlite> ATTACH DATABASE 'test2.db' AS db2 KEY "x'10483C6EB40B6C31A448C22A66DED3B5E5E8D5119CAC8327B655C8B5C4836481'";
Example 3: Attach an Plaintext Database to anEncrypted Database
$ ./sqlcipher encrypted.db
sqlite> ATTACH DATABASE 'plaintext.db' AS plaintext KEY ''; -- empty key will disable encryption
sqlcipher_export()
Example 1: Encrypt a Plaintext Database
$ ./sqlcipher plaintext.db
sqlite> ATTACH DATABASE 'encrypted.db' AS encrypted KEY 'testkey';
sqlite> SELECT sqlcipher_export('encrypted');
sqlite> DETACH DATABASE encrypted;
Example 2: Decrypt a SQLCipher database to aPlaintext Database
$ ./sqlcipher encrypted.db
sqlite> PRAGMA key = 'testkey';
sqlite> ATTACH DATABASE 'plaintext.db' AS plaintext KEY ''; -- empty key will disable encryption
sqlite> SELECT sqlcipher_export('plaintext');
sqlite> DETACH DATABASE plaintext;
Example 3: Convert from a 1.1.x to 2.0Database with HMAC
$ ./sqlcipher 1.1.x.db
sqlite> PRAGMA key = 'testkey';
sqlite> PRAGMA cipher_use_hmac = OFF; -- disable HMAC on main database
sqlite> ATTACH DATABASE '2.0.db' AS newdb; -- new database will use default HMAC setting, ON, with same key as the main database
sqlite> SELECT sqlcipher_export('newdb');
sqlite> DETACH DATABASE newdb;
Example 4: Changing Cipher Settings
$ ./sqlcipher encrypted.db
sqlite> PRAGMA key = 'testkey';
sqlite> ATTACH DATABASE 'newdb.db' AS newdb KEY 'newkey';
sqlite> PRAGMA newdb.cipher_page_size = 4096;
sqlite> PRAGMA newdb.cipher = 'aes-256-cfb';
sqlite> PRAGMA newdb.kdf_iter = 10000;
sqlite> SELECT sqlcipher_export('newdb');
sqlite> DETACH DATABASE newdb;
PRAGMA cipher_migrate
> ./sqlcipher 2xdatabase.db
> PRAGMA key = 'YourKeyGoesHere';
> PRAGMA cipher_migrate;
PRAGMA cipher_profile
$ ./sqlcipher example.db
sqlite> PRAGMA cipher_profile='sqlcipher.log';
sqlite> CREATE TABLE t1(a,b);
sqlite> INSERT INTO t1(a,b) VALUES('one for the money', 'two for the show');
sqlite> PRAGMA cipher_profile=off;
PRAGMA cipher_add_random
PRAGMA cipher_add_random = "x'deadbaad'";
PRAGMA cipher_provider
PRAGMA cipher_provider_version
PRAGMA cipher_version
$ ./sqlcipher example.db
sqlite> PRAGMA cipher_version;
3.3.1
sqlite3_key() and sqlite3_key_v2()
/*
** Specify the key for an encrypted database. This routine should be
** called right after sqlite3_open().
**
** The code to implement this API is not available in the public release
** of SQLite.
*/
int sqlite3_key(
sqlite3 *db, /* Database to be rekeyed */
const void *pKey, int nKey /* The key, and the length of the key in bytes */
);
int sqlite3_key_v2(
sqlite3 *db, /* Database to be rekeyed */
const char *zDbName, /* Name of the database */
const void *pKey, int nKey /* The key */
);
sqlite3_rekey() sqlite3_rekey_v2()
/*
** Change the key on an open database. If the current database is not
** encrypted, this routine will encrypt it. If pNew==0 or nNew==0, the
** database is decrypted.
**
** The code to implement this API is not available in the public releasejavascript:noop()
** of SQLite.
*/
int sqlite3_rekey(
sqlite3 *db, /* Database to be rekeyed */
const void *pKey, int nKey /* The new key, and the length of the key in bytes */
);
int sqlite3_rekey_v2(
sqlite3 *db, /* Database to be rekeyed */
const char *zDbName, /* Name of the database */
const void *pKey, int nKey /* The new key */
);