Changing the key

Periodically change the keys used to encrypt columns. Create a new key using create encryption key, then use alter table...modify to encrypt the column with the new key

In the following example, assume that the “creditcard” column is already encrypted. The alter table command decrypts and reencrypts the credit card value for every row of customer using cc_key_new.

create encryption key cc_key_new for AES

alter table customer modify creditcard encrypt with       cc_key_new