Excellent post Danil. I have a small doubt in this,
You can use the KeyStore, but it is available only from Android API 18. And another problem is ROOT again, using ROOT access hacker can retrieve everything.
I have heard, it is not possible to get the private keys from Keystore even in rooted device.