Private input private output.

If the customer has an input channel to the smart card that, should it actually reach the smart card, can be presumed private, the customer can turn an untrusted public output channel into an untrusted private output channel by giving the smart card a one-time pad to encrypt its output. (While methods using one-time pads may seem a bit far-fetched, in Section 4 below, we discuss a practical example.)