writeErrorResponse(ctx, w, toAPIError(ctx, err), r.URL)
			return
		}
	}

	// If src == dst and either
	// - the object is encrypted using SSE-C and two different SSE-C keys are present
	// - the object is encrypted using SSE-S3 and the SSE-S3 header is present
	// - the object storage class is not changing
	// then execute a key rotation.
	if cpSrcDstSame && (sseCopyC && sseC) && !chStorageClass {

		cHeader.Add(xhttp.MinIOSourceReplicationRequest, "true")
		if !isSSEC {
			crc := getCRCMeta(objInfo, partInfo.Number, nil) // No SSE-C keys here.
			for k, v := range crc {
				cHeader.Add(k, v)
			}
		}
		popts := minio.PutObjectPartOptions{
			SSE:          opts.ServerSideEncryption,
			CustomHeader: cHeader,
		}

		if isSSEC {
			objectSize += partInfo.Size