// Generate a random DEK
$dek = base64_encode(random_bytes(32));
DEK=your_generated_dek_here
$masterKey = env('APP_KEY'); // Use your Laravel app's encryption key as the master key
use Illuminate\Support\Facades\Crypt;
$data = 'sensitive_data'; // Replace with your actual sensitive data
$encryptedData = Crypt::encryptString($data, $dek);
// Store $encryptedData and $encryptedDek in your database
$encryptedData = 'your_stored_encrypted_data';
$encryptedDek = 'your_stored_encrypted_dek';
// Decrypt the DEK using the master key
$dek = Crypt::decryptString($encryptedDek, $masterKey);
// Use the DEK to decrypt the data
$decryptedData = Crypt::decryptString($encryptedData, $dek);
// Now $decryptedData contains your original sensitive data