Storing it on a security coprocessor is no good when the entity you want to protect against has most of the world's chipmakers wrapped around their fingers(in the case of US citizens). Software based solutions at least have a chance of being verified.
it is considered secure only by Google. Android has DOS style security: an app which has access to storage has access to all your files.
> Storing it on a security coprocessor is no good when the entity you want to protect against has most of the world's chipmakers wrapped around their fingers(in the case of US citizens). Software based solutions at least have a change of being verified.
> it is considered secure only by Google. Android has DOS style security: an app which has access to storage has access to all your files.
That's true for most full-disk or file-based encryption systems, including VeraCrypt mentioned by GP - as soon as you unlock the given storage, any application that has read access to your storage has access to all your files.