title: Are SqlCipher open cursors a security concern?
body: <p>I'm using SqlCipher with content providers. Right now, when I want to lock the app I just clear out the cached password. However, the app can continue to work with any open cursors. This means that re-opening the app grants access to the sensitive data. I fix this issue on the surface by redirecting to a login screen if the app doesn't have passwords. </p>
  
  <p>However, I'm concerned if there are any security issues with these open cursors or if I should just continue to block UI access and not worry? SqlCipher's docs say that it reads/writes encrypted pages on the fly, as opposed to decrypting the entire DB, this makes me think that open cursors are still secure. </p>
  
  <p>The main concern here is that someone loses their phone and then a knowledgeable individual can use these open cursors to extract sensitive data.</p>