One surprising tricky part of encrypting "live input" protocols (like typing send over a shell) is that just encrypting them is not enough. You can use timing

One surprising tricky part of encrypting "live input" protocols (like typing send over a shell) is that just encrypting them is not enough. You can use timing of packages send to e.g. extract passwords. (hence why SSH clients normally take additional precautions)