Hi,
the EncryptionKey class contains a field kvno. I have no idea why we
should have such a field, and why and for what it is used ?
The KVNO is described as :
"
A tag associated with encrypted data identifies which key was used
for encryption when a long-lived key associated with a principal
changes over time. It is used during the transition to a new key
so that the party decrypting a message can tell whether the data
was encrypted with the old or the new key.
"
We have a field name KVNO in the EncryptedData class already...