A dedicated processor is responsible for the encryption and decryption process. As such, the risk of exposure of private key carried by a smart card is low.