In short, open the source, change Security.addProvider(something);
to Security.insertProviderAt(something, 1);
Android 5.0 (and 5.0.1) has a problem with SpongyCastle (https://code.google.com/p/android/issues/detail?id=68562)
Crema Android App also has this problem, but it can be avoided by following instruction on the Spongy Castle home.
I already fixed mine, but can't share it due to legal issue. Instead, I share DIY fix instruction.