A method for secure out-of-band symmetric encryption key delivery, comprising: receiving, at a first trusted node in a network, a request from a first one of a pair of user devices to deliver symmetric encryption keys to the pair of user devices, the request to be interpreted by the first trusted node as an instruction to generate the symmetric encryption keys in response to receiving the request, deliver one of the symmetric encryption keys to a second one of the pair of user devices in response to receiving the request, confirm delivery of the one of the symmetric encryption keys to the second one of the pair of user devices, and after confirming such delivery in response to receiving the request, deliver another one of the symmetric encryption keys to the first one of the pair of user devices; generating, at the first trusted node, a first one and a second one of the symmetric encryption keys, in response to receiving the request, wherein neither the first one nor the second one of the pair of user devices has one of the symmetric encryption keys as a result of the generating prior to the deliveries; delivering, from the first trusted node via the trusted nodes in the network, the second one of the symmetric encryption keys to the second one of the pair of user devices in response to receiving the request; receiving, at the first trusted node, from one of the trusted nodes in the network, confirmation of the delivery of the second one of the symmetric encryption keys to the second one of the pair of user devices that was in response to the first trusted node receiving the request; and delivering, from the first trusted node in the network, the first one of the symmetric encryption keys to the first one of the pair of user devices, responsive to the confirmation of the delivery of the second one of the symmetric encryption keys to the second one of the pair of user devices that was in response to the first trusted node receiving the request. receiving, at a first trusted node in a network, a request from a first one of a pair of user devices to deliver symmetric encryption keys to the pair of user devices, the request to be interpreted by the first trusted node as an instruction to generate the symmetric encryption keys in response to receiving the request, deliver one of the symmetric encryption keys to a second one of the pair of user devices in response to receiving the request, confirm delivery of the one of the symmetric encryption keys to the second one of the pair of user devices, and after confirming such delivery in response to receiving the request, deliver another one of the symmetric encryption keys to the first one of the pair of user devices; generating, at the first trusted node, a first one and a second one of the symmetric encryption keys, in response to receiving the request, wherein neither the first one nor the second one of the pair of user devices has one of the symmetric encryption keys as a result of the generating prior to the deliveries; delivering, from the first trusted node via the trusted nodes in the network, the second one of the symmetric encryption keys to the second one of the pair of user devices in response to receiving the request; receiving, at the first trusted node, from one of the trusted nodes in the network, confirmation of the delivery of the second one of the symmetric encryption keys to the second one of the pair of user devices that was in response to the first trusted node receiving the request; and delivering, from the first trusted node in the network, the first one of the symmetric encryption keys to the first one of the pair of user devices, responsive to the confirmation of the delivery of the second one of the symmetric encryption keys to the second one of the pair of user devices that was in response to the first trusted node receiving the request.