Question

I'm on a team creating an application used in a medical setting. We are looking to store local data encrypted using AES based on passwords that are stored in an SQLite database (hashed and salted). There doesn't seem to be very much information out there on doing this. Am I missing a trick?

Edit:

As I seem to be getting down voted here's some of what I know already.

I'm assuming that I'll need to use PBKDF2 key derivation (seen on SO here). Then I'll need to do something along the lines of this answer. My issue is that all of this is C code which doesn't utilise any of the OOP niceties of C++. I'm hoping that I'm missing some nice C++ wrapper for OpenSSL or some other 3rd party library that I can use to write clean, readable and OO code to solve the problem.

P.S. I'm not being paid for this application as it's a software engineering project at Uni and the recipient of the software is a charity.

Was it helpful?

Solution

Your question now seems to focus on a object oriented cryptographic library for C++. For that question I can recommend Botan. It does seem to focus on modern computing algorithms and includes PBKDF2.

Note that I cannot vouch for the security of this library, I haven't used or evaluated it personally.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top