*
     * @param newEncryptionKey the new encryption key
     * @param newDecryptionKey the new decryption key
     * @throws GeneralSecurityException if key rotation fails
     */
    public void rotateKeys(byte[] newEncryptionKey, byte[] newDecryptionKey) throws GeneralSecurityException {
        if (closed) {
            throw new IllegalStateException("Cannot rotate keys on closed context");
        }

        byte[] newDecKey = new byte[16];
        new SecureRandom().nextBytes(newEncKey);
        new SecureRandom().nextBytes(newDecKey);

        // Use same key for enc/dec in test for simplicity
        context.rotateKeys(newEncKey, newEncKey);

        // Then - Can encrypt with new keys
        byte[] plaintext2 = "After rotation".getBytes();
        byte[] encrypted2 = context.encryptMessage(plaintext2, 2L);