Ciphertext — same encrypted records, two decryption models

Traditional encryption locked

All-or-nothing: reveals every record, or none.

Functional encryption locked

No functional key yet — records stay opaque.