private static KeyStore getAndroidKeyStore() throws GeneralSecurityException {
    try {
      KeyStore keyStore = KeyStore.getInstance("AndroidKeyStore");
      keyStore.load(/* param= */ null);
      return keyStore;
    } catch (IOException ex) {
      throw new GeneralSecurityException(ex);
    }
  }
Returns an {@link Aead} backed by a key in Android Keystore specified by {@code uri}.

<p>Since Android Keystore is somewhat unreliable, a self-test is done against the key. This
will incur a small performance penalty.
java_src/src/main/java/com/google/crypto/tink/integration/android/AndroidKeystoreKmsClient.java