Frequently Asked Question
This is a known issue that the "AES-GCM" encryption is not supported on Android KitKat (API level 19) without Google Play Services, the AES-GCM does not work because KitKat uses Bouncy Castle 1.48, which doesn't support updates. If Google Play Services is present, AES-GCM should work well. If you want to support all Android versions without depending on Google Play Services, please use CHACHA20-POLY1305, AES-EAX, or AES-CTR-HMAC-AEAD.
This issue has been discussed on the GITHUB forum below:
https://github.com/google/tink/issues/396
https://github.com/google/tink/blob/master/docs/KNOWN-ISSUES.md#android
The Solution is to change Cipherlab new devices with later new Android version 6 or above.