Secure offline caching and provisioning of secrets

A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for securely caching and provisioning secrets for use in an offline process, the operations comprising:

• accessing, at an endpoint computing resource storing a secret, a first cryptographic key, wherein the first cryptographic key is generated dynamically based on receiving the secret;
• encrypting the secret using the first cryptographic key to produce an encrypted secret;
• receiving, from at least one auxiliary device, a second cryptographic key, the second cryptographic key being dynamically generated by the auxiliary device or accessed from a storage of the auxiliary device;
• encrypting, at the endpoint computing resource, the encrypted secret with the second cryptographic key to produce an encrypted block;
• storing the encrypted block;
• sending, using a short-range wireless communication and without using a network connection, the encrypted block to the at least one auxiliary device for decryption;
• receiving, from the at least one auxiliary device and without using a network connection, a decrypted version of the encrypted block, the decrypted version including the encrypted secret;
• and
• decrypting the encrypted secret with a cryptographic key corresponding to the first cryptographic key, the decrypted secret allowing the endpoint computing device to perform an action.