> Preventing this leak is what's technologically impossible.

Is it? Put the key in a TPM module in a well guarded server in a well guarded datacenter. Have the prosecution send the encrypted blob to the server and then receive the messages in clear from the server.

That way, there is absolutely no way the private keys can be leaked.