(I had posted this question on stackoverflow and been asked to move it to crypto.)
I have a question related to encrypting data in the database, at the application level.
The application will encrypt the data (e.g. using AES) when persisting it to the database and decrypt the data once they have been retrieved from the database.
Is there any good technic to renew the encryption key?
If for example a company has a policy to renew the encryption key every two years we would end up in a position where we have to decrypt the overall database with the old key, and reencrypt it with the new one every two years.
Is there any technic to avoid such an issue?
I had the following answers: https://stackoverflow.com/questions/37172931/application-level-encryption-and-key-renewal
I mentionned AES because it is an industry standard. Would Paillier be fit for the industry?