The key is still the same. AES/GCM - BouncingCastle
References: https://www.bouncycastle.org/specifications.html
java -jar wadec.jar <key> <database.db.cryptedXX> [output]
if output is omitted the decrypted database generated will have the same name of the input without the suffix.
The research and the development was made by me, but the credit must go to SPI (Setor de Perícias de Informática) of Rio de Janeiro Police Forensics because we are always investing in research and development.
Documentation for TLDR friends !-D
Enjoy, Marcelo