Apparently I'm fighting windmills here, but encryption does not work on compromised devices. It will be sabotaged and rendered ineffective. Google for DROPOUTJEEP, what makes you think you can keep the encryption code safe from manipulation?