java - Secure database storage in Android

Question

I'm implementing the in-app-billing system for my app and (as the documentation advices) I'd like to add some encryption system to the database.

I've tested SQLCipher, I liked it but since it need to override all the classes at android.database.sqlite.* your app loses the connection to that part of the SDK, losing possible important future updates and depending on the developer (or yourself since is opensource).

Other solution I've considered is to add a extra column in the sensible tables storing there a value (unique for each device), and then ignore the data that don't contain that key. But this method is clearly more weak.

How can I improve the security without using SQLCipher? Thanks

Answer 1

如果您的sensible表包含合理的列和一些不合理的列，并且如果您不在where子句中使用合理的列，则您可以轻松地加密/解密写入/读取操作中的敏感字段，而不会产生显着的性能成本.

如果您需要在只有几条记录的表中的 where 子句中使用合理的列，您可以读取所有记录，解密并选择。

如果以上都不适用，那么我没有其他建议了SQLCipher。