On Post-compromise Security
Analysis of key-exchange protocols and their use for building secure channels