Question

I am building a Cocoa application that will store customer data. I’m currently using Core Data with SQLite store. Unfortunately, I have not found a way to secure the database.

Even on some other Mac CRM applications on the market, you can browse to the Library/Application Support and open their databases with any SQLite Manager, like the Firefox SQLite Manager extension. The applications have password protection, but it seems to be useless if you can just go into the database and make changes.

So:
1) Is there a way to secure the SQLite store for a Core Data application, while retaining search, aggregations, etc?
2) If not, is the lack of this ability an indication that it is deemed unnecessary to secure it because of the OS authentication?
3) Are there alternative open source databases for Mac that might be appropriate?

Thanks!
Byron

Answer 1

There are third-party encryption extensions for SQLite:

• http://www.hwaci.com/sw/sqlite/see.html
• http://sqlcipher.net/