Although the Android Keystore provider was introduced in API level 18 (Android 4.3), the Keystore itself has been available since API 1, restricted to use by VPN and WiFi systems.

The default implementation for KeyStore, the system in Android designed to store users credentials and cryptographic keys, is broken, researchers say. The default implementation for KeyStore, the ...