Look into secure multi-party computation and "mental poker". I believe a version of this is solved today, but don't know the trust assumptions off the top of my head.