diff --git a/ydb/core/protos/blockstore_config.proto b/ydb/core/protos/blockstore_config.proto
index d29f4ba161c9..f66aff78d7f6 100644
--- a/ydb/core/protos/blockstore_config.proto
+++ b/ydb/core/protos/blockstore_config.proto
@@ -19,9 +19,16 @@ enum EPartitionType {
     NonReplicated = 1; // directly mapped network partitions
 }
 
+message TEncryptedDataKey
+{
+    optional string KekId = 1;
+    optional bytes Ciphertext = 2;
+};
+
 message TEncryptionDesc {
     optional uint32 Mode = 1;
     optional bytes KeyHash = 2;
+    optional TEncryptedDataKey EncryptedDataKey = 3;
 }
 
 message TVolumeConfig {