don't forget ecryptfs, which is what drives android storage encryption most of the time.