Unfortunately, Pure customer encryption is not supported as of now.

As of now only the the combination of a Snowflake-maintained key and a customer-managed key is supported which is trisecret.

If the customer-managed key in the composite master key hierarchy is revoked, your data can no longer be decrypted by Snowflake.