Samsung shipped '100m' Android phones with flawed encryption