diff --git a/api/layer/encryption/encryption.go b/api/layer/encryption/encryption.go
index 1b71b730f..abbd5b2d4 100644
--- a/api/layer/encryption/encryption.go
+++ b/api/layer/encryption/encryption.go
@@ -71,7 +71,7 @@ func NewParams(key []byte) (*Params, error) {
 	}
 	var p Params
 	p.customerKey = make([]byte, aes256KeySize)
-	copy(p.customerKey, key)
+	p.customerKey = bytes.Clone(key)
 	return &p, nil
 }