When are the encryption keys for each partition dynamically created?

When are the encryption keys for each partition dynamically created?

A.
When updating a profile.

B.
During the first reboot after installation when the dots appear on the screen.

C.
At shutdown.

D.
At boot.

Explanation: