Skip to content

Constant time raw key - #596

Open
Sc00bz wants to merge 1 commit into
sqlcipher:prereleasefrom
Sc00bz:patch
Open

Sc00bz wants to merge 1 commit into
sqlcipher:prereleasefrom
Sc00bz:patch

Conversation

@Sc00bz

@Sc00bz Sc00bz commented May 25, 2026

Copy link
Copy Markdown
Contributor

Changes proposed in this pull request:

Doing the following in constant time:

  • Check if password is in raw key format (i.e. x'hex')
  • Decode the key

Checks if password is in raw key format (x'hex') and decodes the key. Doing both in constant time.
@sjlombardo

sjlombardo commented Sep 21, 2026 •

Copy link
Copy Markdown
Member

Hello @Sc00bz - Thank you for the suggestion on this issue. We had a large number of changes in-flight for SQLCipher 5 when this was submitted, and did not merge it because of the conflicts. Instead, we worked in a slightly altered implementation of this improvement on the beta branch, if you'd like to take a look.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants