SecureGeoPackage
Encrypt tables and columns inside a GeoPackage, grant access by public key with roles, and open what you are allowed to read. The file stays a valid GeoPackage.
SecureGeoPackage implements the egpkg_encryption GeoPackage extension.
Seal whole layers or single columns of any GeoPackage; the unsealed
layers stay readable for everyone in any GIS. Access is granted to
public identities (keys, never passwords) with roles: reader,
contributor, writer, admin. A signed public header shows who may do
what under pseudonyms; names live encrypted. Rows of encrypted-column
tables carry the author's and the validator's signature, so a
contributor's rows stay pending until a writer validates them.
Identities live in the QGIS Authentication Manager or the platform key
store and move between machines with a one-time code.
Dependencies: none beyond QGIS; all cryptography is pure Python and
bundled. Optional: the "cryptography" package as an accelerator when
present; on macOS the system "security" tool and on Linux "secret-tool"
(libsecret) for the OS key store, otherwise the QGIS Authentication
Manager is used.
A private production by Captain Ahab & Cosmo, GPL-3.0-or-later (full
attribution in the bundled LICENSE).