Witness-Authenticated Key Exchange