keys are completely independent of the bitcoin protocol and are generated and managed by your wallet of choice without reference to the blockchain or access to the Internet.

Technically you can use a laptop without internet access to sign a transactions then broadcast it via an RCP call to a public Bitcoin node from another device without the private key on the laptop having ever seen the internet.