"Several operating systems include arc4random, an API originating in OpenBSD
providing access to a random number generator originally based on RC4. In
OpenBSD 5.5, released in May 2014, arc4random was modified to use
ChaCha20.[11][12] As of January 2015, implementation of arc4random in
NetBSD[13][14] also uses ChaCha20, however, implementation of arc4random in
FreeBSD,[15] Linux's libbsd,[16] and Mac OS X[17] are still based on RC4." 
Sourced: https://en.wikipedia.org/wiki/RC4

If you point out to your lawyers that SQLite is not doing anything that
Apple's OS X is doing, you may get some traction as well.

-----Original Message-----
From: sqlite-users-boun...@mailinglists.sqlite.org
[mailto:sqlite-users-bounces at mailinglists.sqlite.org] On Behalf Of Richard
Hipp
Sent: Tuesday, August 11, 2015 10:11 AM
To: General Discussion of SQLite Database
Subject: Re: [sqlite] Lawyers, encryption, and RC4

No.

The RC4 encryption algorithm consists of three subcomponents:

(1) Key management logic
(2) The pseudo-random number generator (PRNG)
(3) The encoder/decoder

SQLite only implements (2).  It omits (1) and (3).  And hence, the RC4
kernel inside of SQLite cannot be used for encryption.

--
D. Richard Hipp
drh at sqlite.org
_______________________________________________
sqlite-users mailing list
sqlite-users at mailinglists.sqlite.org
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to