Periodically change the keys used to encrypt columns. Create a new key using create encryption key, then use alter table...modify to encrypt the column with the new key
In the following example, assume that the “creditcard” column is already encrypted. The alter table command decrypts and reencrypts the credit card value for every row of customer using cc_key_new.
create encryption key cc_key_new for AES alter table customer modify creditcard encrypt with cc_key_new