offline mode implemented with decryption key cache