Cross domain key management

An apparatus for key management, comprising:

• one or more memories storing processor-executable code;
• and
• one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the apparatus to:
• receive, via a server and from a multi-party computation (MPC) coordinator, a first request to access a key share associated with an MPC node;
• transmit, via a first cross domain communication path and to an offline key storage system, a second request for the key share associated with the MPC node;
• verify, at the offline key storage system, a digital signature include with the second request;
• transmit, to the server via a second cross domain communication path after verifying the digital signature, a response that includes the key share that is encrypted using an encryption key associated with the MPC node;
• and
• transmit, to the MPC coordinator, a communication including the encrypted key share.

A non-transitory computer-readable medium storing code for key management, the code comprising instructions executable by one or more processors to:

• receive, via a server and from a multi-party computation (MPC) coordinator, a first request to access a key share associated with an MPC node;
• transmit, via a first cross domain communication path and to an offline key storage system, a second request for the key share associated with the MPC node;
• verify, at the offline key storage system, a digital signature include with the second request;
• transmit, to the server via a second cross domain communication path after verifying the digital signature, a response that includes the key share that is encrypted using an encryption key associated with the MPC node;
• and
• transmit, to the MPC coordinator, a communication including the encrypted key share.