On the leakage-resilient key exchange

Typically, secure channels are constructed from an authenticated key exchange (AKE) protocol,which authenticates the communicating parties based on long-term public keys and establishes secretsession keys. In this paper we address the partial leakage of long-term secret keys of key exchangeprotocol participants due to various side-channel attacks. Security models for two-party authenticatedkey exchange protocols have developed over time to provide security even when the adversary learnscertain secret values. This paper combines and extends the advances of security modelling for AKEprotocols addressing more granular partial leakage of long-term secrets of protocol participants.