I'm not very familiar with infosec. How is the author able to obtain this information? Are there 2 identical files, one source and another encrypted? >They must be encrypted with AES-128-CBC using key=”)1Zorxo^fAhGlh$#” and IV="aoAkfwk+#1.6G{dE”. Only system.ext4 must be converted to sparse image before the encryption.