Understanding the Origins of Weak Cryptographic Algorithms Used for Signing Android Apps