This recent question had me the idea to ask: is there a "misuse-resistant ephemeral key exchange"?
At first sight, this seemed self-contradictary - ephemeral implies there's a random part, while misuse-resistant often implies determinism. But when went through the definitions, this may be workable.
I may be mistaken but this is generally the purpose of an ephemeral key exchange.
An ephemeral key exchange is one in which keying material is generated such that compromise of master key would not lead to disclosure of past exchanges.
So there's 3 questions that can be considered:
Had there been a formal definition of a "misuse-resistant ephemeral key exchange?
Had there been a proposed instance of one?
Would the interface of a misuse-resistant ephemeral key exchange fit with a regular key exchange?