The passwords are not hashed; they are just encrypted. The MAC field is just a HMAC protecting the _encrypted_ data; what you want is the iv and passwd fields. The static AES-128-CBC key (presumably what “PS_STATIC” is referring to, I haven't seen a ...