Instead of relying on secrets that can be leaked, you should be using asymmetric cryptography.