ciphermon DDI module that intercepts calls to Android crypto methods and blocks the calling application if both input and output have valid file signatures. Copy this folder in the $DDI_ROOT/examples folder and use like the other included examples.