For the enterprise, having more than a third of its Android devices wide open to broken encryption— and even more potentially exploitable with rollbacks— makes Google's platform unacceptable ...

The default implementation for KeyStore, the system in Android designed to store users credentials and cryptographic keys, is broken, researchers say.

Not just Google that can mess around Beniamini's research highlights several other previously overlooked disk-encryption weaknesses in Qualcomm-based Android devices.

Android has required that smartphones support storage encryption since Android 6 in 2015, but low-end devices have remained exempt because the demand would significantly impact performance.