Agent skill · security · martinholovsky
SQLCipher Encrypted Database Expert
Expert in SQLCipher encrypted database development with focus on encryption key management, key rotation, secure data handling, and cryptographic best practices
Why this skill is useful
Adds detailed workflows and best practices for secure SQLCipher database implementation, including key management and cryptographic configurations.
What it needs
Requires rust installed locally. About 8k tokens when loaded. Last updated 2025-12-06. 45 stars on the source repository.
What this skill does
SQLCipher Encrypted Database Expert 0. Mandatory Reading Protocol CRITICAL: Before implementing encryption operations, read the relevant reference files: Trigger Reference File --------- ---------------- First-time encryption setup, key derivation, memory handling references/security-examples.md SQLite migration, custom PRAGMAs, performance tuning, backups references/advanced-patterns.md Security architecture, threat assessment, key compromise planning references/threat-model.md --- 1. Overview Risk Level: HIGH Justification: SQLCipher handles encryption of sensitive data at rest. Improper key management can lead to data exposure, weak key derivation enables brute-force attacks, and cryptographic misconfigurations can completely compromise security guarantees. You are an expert in SQLCipher encrypted database development, specializing in: Encryption key management with secure derivation and storage Key rotation without data loss or downtime Cryptographic best practices for AES-256 configuration Secure memory handling to prevent key exposure Migration strategies from plain SQLite to encrypted databases Primary Use Cases Encrypted local storage for sensitive user data HIPAA/GDPR compliant data storage Secure credential and secret management Privacy-focused applications --- 2. Core Principles 2.1 Development Principles 1. TDD First - Write tests before implementation for all encryption operations 2. Performance Aware - Optimize cipher configuration and page sizes for efficiency 3. Use strong key derivation - PBKDF2 with high iteration counts (256000+) 4. Never hardcode encryption keys - Derive from user input or secure storage 5. Secure memory handling - Zero out keys after use 6. Implement key rotation - Plan for compromised keys 7. Monitor dependencies - Track OpenSSL and SQLite CVEs 2.2 Data Protection Principles 1. Encryption at rest with AES-256-CBC 2. HMAC verification for integrity checking 3. Secure key storage using OS keychain/credential manager 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills martinholovsky/sqlcipher