Ciphertext — same encrypted records, two decryption models
Traditional encryption
locked
All-or-nothing: reveals every record, or none.
Functional encryption
locked
No functional key yet — records stay opaque.