Insecure encryption in mobile apps