tag:github.com,2008:https://github.com/sqlcipher/sqlcipher/releases 2026-09-15T14:36:24Z tag:github.com,2008:Repository/38617/v5.0.0-beta 2026-09-15T16:18:07Z <p><strong>WARNING</strong>: This should only be used for beta testing at this time, not in production. It includes major functional, API, and behavioral changes that are <strong>NOT COMPATIBLE</strong> with SQLCipher 4 and earlier by default.</p> <p>SQLCipher 5.0.0-beta details: <a href="https://www.zetetic.net/blog/2026/09/15/sqlcipher-5.0.0-beta/" rel="nofollow">https://www.zetetic.net/blog/2026/09/15/sqlcipher-5.0.0-beta/</a></p> <p>Summary:</p> <ul> <li>Changes architecture to use VFS shims</li> <li>Uses AEAD Encryption with AES-256-GCM</li> <li>Increases KDF iteration increase to 512K</li> <li>Increase default page size to 8192 bytes</li> <li>Adds encryption and decryption support to PRAGMA rekey</li> <li><strong>BREAKING CHANGES</strong> - see CHANGELOG.md and release announcement</li> </ul> sjlombardo tag:github.com,2008:Repository/38617/v4.19.0 2026-09-08T14:31:26Z <ul> <li>Reports an error if a database is opened with an invalid <code>hexkey</code> URI parameter</li> <li>Includes the provider error code in KDF error messages</li> <li>Fixes escaping of migration file names</li> <li>Fixes escaping of database aliases in <code>sqlcipher_export()</code></li> <li>Avoids returning NULL rows from <code>cipher_settings</code> if allocation fails</li> <li>Adjusts behavior for permanent error states</li> <li>Avoids leaking a partially initialized context if an initialization error occurs</li> <li>Fixes error reporting for failed rekey operations</li> <li>Improves consistency of internal memory utilization tracking</li> </ul> <p>This maintenance release addresses two low-risk security issues in the core library related to <code>sqlcipher_export</code> and the <code>hexkey</code> URI parameters respectively. While the practical risks are low, we recommend that applications upgrade to incorporate the fix and the other improvements in this release. For additional details and release notes please consult <a href="https://www.zetetic.net/blog/2026/09/08/sqlcipher-4.19.0-release/" rel="nofollow">release announcement</a>.</p> sjlombardo tag:github.com,2008:Repository/38617/v4.18.0 2026-08-18T15:09:43Z <ul> <li>Updates the upstream SQLite baseline to the latest patch release <a href="https://sqlite.org/releaselog/3_53_4.html" rel="nofollow">3.53.4</a></li> <li>Avoids allocating memory on Windows during log writes which could cause a crash on Windows under non-default log settings with <code>PRAGMA cipher_memory_security = ON</code></li> <li>Fixes "relocation truncated to fit" error for optimized GCC builds</li> <li>Adds comments clarifying intent of <code>crypto_openssl.c</code></li> <li>Other miscellaneous fixes and general improvements</li> </ul> <p>For additional details and release notes please consult the <a href="https://www.zetetic.net/blog/2026/08/18/sqlcipher-4.18.0-release/" rel="nofollow">4.18.0 release announcement</a>.</p> sjlombardo tag:github.com,2008:Repository/38617/v4.17.0 2026-07-08T14:22:06Z <ul> <li>Update baseline to SQLite 3.53.3</li> <li>Normalize error behavior for incorrect keys when first operation attempts to modfiy the schema</li> <li>Improve error detection, propagation, and fix fortuna reinitialization in LibTomCrypt provider</li> <li>Improve thread safety for debug memory counters and xoshiro state</li> <li>Add optional <code>SQLCIPHER_OMIT_MALLOC</code> macro to improve testability with Address Sanitizer</li> <li>Numerous miscellaneous fixes and general improvements</li> </ul> <p>For additional details and release notes please consult the <a href="https://www.zetetic.net/blog/2026/07/08/sqlcipher-4.17.0-release/" rel="nofollow">4.17.0 release announcement</a>.</p> sjlombardo tag:github.com,2008:Repository/38617/v4.16.0 2026-05-12T13:48:10Z <ul> <li>Updates the upstream SQLite baseline to the latest patch release <a href="https://sqlite.org/releaselog/3_53_1.html" rel="nofollow">3.53.1</a></li> <li>Fixes an allocation issue that could cause an increase in mlock warning messages (most frequently on Android)</li> <li>Removes redundant logging of <code>mlock</code> and <code>VirtualLock</code> failures at WARN level</li> </ul> <p>For additional details and release notes please consult the <a href="https://www.zetetic.net/blog/2026/05/12/sqlcipher-4.16.0-release/" rel="nofollow">4.16.0 release announcement</a>.</p> sjlombardo tag:github.com,2008:Repository/38617/v4.15.0 2026-04-28T13:51:53Z <ul> <li>Update baseline to SQLite 3.53.0</li> <li>Sanitize source database name passed to <code>sqlcipher_export</code> (reported by<br> Dima Petschke from Deutsche Telekom Security GmbH)</li> <li>Improve error handling in <code>sqlcipher_extra_init</code></li> <li>Remove const from pzErrMesg in <code>sqlcipher_export_init</code> (issue <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4097509199" data-permission-text="Title is private" data-url="https://github.com/sqlcipher/sqlcipher/issues/590" data-hovercard-type="issue" data-hovercard-url="/sqlcipher/sqlcipher/issues/590/hovercard" href="https://github.com/sqlcipher/sqlcipher/issues/590">#590</a>)</li> <li>Minor code cleanups</li> </ul> <p>This release includes a fix for a defensive mode bypass in <code>sqlcipher_export</code>. While the practical risk of the bypass is low, we recommend that applications upgrade to incorporate the fix and the other improvements in this release. For additional details and release notes please consult <a href="https://www.zetetic.net/blog/2026/04/28/sqlcipher-4.15.0-release/" rel="nofollow">release announcement</a>.</p> sjlombardo tag:github.com,2008:Repository/38617/v4.14.0 2026-03-17T13:45:19Z <ul> <li>Updates the upstream SQLite baseline to <a href="https://sqlite.org/releaselog/3_51_3.html" rel="nofollow">3.51.3</a>, which fixes a critical <a href="https://sqlite.org/wal.html#walresetbug" rel="nofollow">WAL-reset database corruption bug</a>. <strong>Applications running SQLCipher in WAL mode are strongly advised to upgrade.</strong></li> <li>Reintroduces LibTomCrypt cryptographic provider support based on community feedback</li> <li>Updates the LibTomCrypt provider with improved logging and error handling</li> </ul> sjlombardo tag:github.com,2008:Repository/38617/v4.13.0 2026-01-20T17:44:36Z <ul> <li>Updates baseline to SQLite 3.51.2</li> <li>Corrects encoding for <code>sqlcipher_export()</code> function registration</li> </ul> sjlombardo tag:github.com,2008:Repository/38617/v4.12.0 2025-12-08T15:28:10Z <ul> <li>Updates baseline to SQLite 3.51.1</li> <li>Adds <code>PRAGMA cipher_status</code> so applications can verify a database handle is using encryption</li> <li>Improves guards against key/rekey/attach misuse</li> <li>Adds criteria for <code>PRAGMA cipher_migrate</code> tests</li> <li>Fixes check for <code>__has_feature</code> macro to separate it from use</li> <li>Fixes CHANGELOG.md markdown formatting, typos, and inline code snippets</li> <li>Fixes conditional in SQLCipher pragma handling</li> <li>Removes deprecated providers for LibTomCrypt and NSS</li> <li>Removes unnecessary shutdown and URI config changes in core tests</li> <li>Ensures all test suite database handles are closed before delete</li> </ul> sjlombardo tag:github.com,2008:Repository/38617/v4.11.0 2025-10-08T14:10:34Z <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sqlcipher/sqlcipher/compare/v4.10.0...v4.11.0"><tt>v4.10.0...v4.11.0</tt></a></p> sjlombardo