I was under the delusion that the dialog between the card and the reader was encrypted.