| Name | Type | Description | Notes |
|---|---|---|---|
| plaintext | byte[] | The Base64-encoded raw symmetric data key payload. Expose only securely during active application setups. | |
| ciphertext | byte[] | The identical symmetric data key, returned safely wrapped/encrypted using the designated root parent KMS key. |