A secure data-retrieval mechanism in case a cryptographic encryption key is lost, such as backup of keys and enforcement of trusted key storage strictly external to the cloud.