There's also this https://blog.cryptographyengineering.com/2016/11/24/android-...