Hi,

the EncryptionKey class contains a field kvno. I have no idea why we
should have such a field, and why and for what it is used ?

The KVNO is described as :

"
      A tag associated with encrypted data identifies which key was used
      for encryption when a long-lived key associated with a principal
      changes over time.  It is used during the transition to a new key
      so that the party decrypting a message can tell whether the data
      was encrypted with the old or the new key.
"

We have a field name KVNO in the EncryptedData class already...

Reply via email to