The Android Keystore V2 scheme is currently being revised to use AES256 encryption which is not usable in SUN's JDK unless you update some policy files which you are not allowed to if you live in certain countries.
Does this mean that a key-provisioning protocol that uses AES256 would have to confine this functionality rather than relying on the availability of a public API? Where can I read about the current restrictions wrt the UG government? Anders http://android-keystore-v2.webpki.org
