If you calculate the circuit is leaking half a bit per...

If you calculate the circuit is leaking half a bit per transaction and you change the key every ten transactions, you know the attacker can't get enough information to find the key.