Systems and methods for minimizing impact of breach of encryption and signing keys in multi-cloud environments

A method for generating keys, comprising:

• generating, by a computer program executed by a first cloud environment, a first key encryption key and storing the first key encryption key in a first cloud environment key management service;
• generating, by the computer program, a first data encryption key using the first cloud environment key management service;
• generating, by the computer program, a second data encryption key for a second cloud environment using the first cloud environment key management service;
• encrypting, by the computer program, the first data encryption key with the first key encryption key and the second data encryption key with the first key encryption key;
• storing, by the computer program, the first data encryption key encrypted with the first key encryption key and the second data encryption key encrypted with the first key encryption key in a database of the first cloud environment;
• generating, by the computer program, a second key encryption key and storing the second key encryption key in a second cloud environment key management service;
• encrypting, by the computer program, the first data encryption key with the second key encryption key and the second data encryption key with the second key encryption key;
• and
• storing, by the computer program, the first data encryption key encrypted with the second key encryption key and the second data encryption key encrypted with the second key encryption key in the database of the second cloud environment.