Changing the Column Encryption Key

Periodically change the keys used to encrypt columns and databases.

Create a new key using create encryption key, then use alter table...modify to encrypt the column with the new key.

In the following example, assume that the “creditcard” column is already encrypted. The alter table command decrypts and reencrypts the credit card value for every row of customer using cc_key_new.

create encryption key cc_key_new for AES

alter table customer modify creditcard encrypt with
       cc_key_new