#include <db.h>

int
DB->set_encrypt(DB *db, const char *passwd, u_int32_t flags);

Description

Set the password used by the DB_ENV and DB methods to perform encryption and decryption.

The flags value must be set to 0 or the following value:

DB_ENCRYPT_AES

Use the Rijndael/AES (also known as the Advanced Encryption Standard and Federal Information Processing Standard (FIPS) 197) algorithm for encryption or decryption.

Because databases opened within Berkeley DB environments use the password specified to the environment, it is an error to attempt to set a password in a database created within an environment.

The DB->set_encrypt interface may not be called after the DB->open interface is called.

The DB->set_encrypt method returns a non-zero error value on failure and 0 on success.

Errors

The DB->set_encrypt method may fail and return a non-zero error for the following conditions:

EINVAL

An invalid flag value or parameter was specified.

Called after DB->open was called.

EOPNOTSUPP

Cryptography is not available in this Berkeley DB release.

The DB->set_encrypt method may fail and return a non-zero error for errors specified for other Berkeley DB and C library or system functions. If a catastrophic error has occurred, the DB->set_encrypt method may fail and return DB_RUNRECOVERY, in which case all subsequent Berkeley DB calls will fail in the same way.

Class

See Also