We’re pleased to announce the immediate availability of SQLCipher 4.14.0. This release includes an important SQLite update, restoration of the LibTomCrypt cryptographic provider, and significant improvements for Android.
SQLCipher Commercial and Enterprise packages also include some important enhancements:
In response to community feedback, we have reversed the decision to remove the LibTomCrypt cryptographic provider that occurred in SQLCipher 4.12.0. LibTomCrypt is now included again with improved error handling and more detailed logging. It is also included as the default cryptographic module for one of our Community Edition packages, and may be used for others in the future.
SQLCipher for Android has undergone some major changes for this release:
As noted above, the Community Edition of sqlcipher-android is now built with an updated LibTomCrypt 1.18.2. LibTomCrypt has already been used in long-term community builds by third parties for years. This change delivers some tangible benefits to the project:
Commercial and Enterprise Android packages all continue to use OpenSSL (non-FIPS) or the SQLCipher Cryptographic Module (FIPS), unchanged.
SQLCipher 4.14.0 is the last release that will include SQLCipher for Windows UWP packages for Commercial and Enterprise licensees.
For context, the SQLCipher for Windows UWP package is a specialized package that uses a WinRT sandbox. In the early days of the Microsoft Store, applications had to strictly adhere to the WinRT sandboxed API, so a special build of SQLCipher was required. However, that is no longer the case. The Microsoft Store relaxed requirements to accept standard Win32 and .NET applications in 2021, around the same time they officially deprecated UWP in favor of newer technologies like WinUI 3.
Given the deprecated state of UWP and WinRT, SQLite has signaled that WinRT API support will be completely removed in the next upstream release. This makes continued maintenance of a UWP-specific SQLCipher package impractical.
Since applications no longer need to use UWP or WinRT packaging to publish to the Store, it is possible for applications using SQLCipher to move to the official SQLCipher for Windows .NET package. All Commercial and Enterprise licensees with an active subscription for SQLCipher for Windows UWP will automatically receive a transfer license which can be used as a drop-in replacement. Code changes shouldn’t be required for applications that are not using UWP-specific APIs. Licensees will be contacted separately with transfer license details prior to the next SQLCipher release.
The table below summarizes the cryptographic providers used across SQLCipher packages and platforms:
| Edition | Platform | Cryptographic Provider |
|---|---|---|
| Community (non-FIPS) | Android | based on LibTomCrypt 1.18.2 |
| Community (non-FIPS) | Apple | Common Crypto (version varies by OS) |
| Commercial & Enterprise (non-FIPS) | Apple | Common Crypto (version varies by OS) |
| Commercial & Enterprise (non-FIPS) | Other Platforms | OpenSSL 3.5.5 LTS |
| Enterprise FIPS | All Platforms | SQLCipher Cryptographic Module Based on OpenSSL 3.5.5 LTS |
SQLCipher 4.14.0 is available for download now. We recommend testing your applications thoroughly with the new version before deploying to production.
Commercial and Enterprise - On-demand access to new releases of SQLCipher packages are available to all licensees with an active CipherCare support subscription from the Customer Downloads fulfillment site. Subscribers will also receive a separate email notification regarding the update and can contact us at any time for private support directly from the SQLCipher development team. Commercial and Enterprise edition upgrades require a new license code from the SQLCipher fulfillment site for each version. Don’t forget to change the license code in your application(s) when you upgrade.
Community Edition - SQLCipher Community Edition source code is available on GitHub, via AAR packaging for Android, and Swift Package Manager for Apple platforms.
For feedback and questions, please visit our Community Forum or private support channels. Thank you for using SQLCipher!