Here's the CTS for Android 7.0 https://source.android.com/compatibility/7.0/android-7.0-cdd#9_11_keys_and_credentials https://source.android.com/compatibility/7

Here's the CTS for Android 7.0 https://source.android.com/compatibility/7.0/android-7.0-cdd#9_11_keys_and_credentials https://source.android.com/compatibility/7.0/android-7.0-cdd... "When the device implementation supports a secure lock screen it MUST back up the keystore implementation with secure hardware and meet following requirements: MUST have hardware backed implementations of RSA, AES, ECDSA and HMAC cryptographic algorithms and MD5, SHA1, SHA-2 Family hash functions to properly support the Android Keystore system's supported algorithms. MUST perform the lock screen authentication in the secure hardware and only when successful allow the authentication-bound keys to be used. The upstream Android Open Source Project provides the Gatekeeper Hardware Abstraction Layer (HAL) that can be used to satisfy this requirement. "