There is a great question/answer here on the topic: How to read NSCR1000 data files?The missing link I can't quite figure out is how to use the information in the windows.plist to decrypt the data in the data.data file?  I assume the NSWindowID field (as outlined by cimarron in the answer to the previously mentioned question) allows us to look up a corresponding NSWindowID in the windows.plist file, and that structure also has an NSDataKey property that seems to hold a key (in base64 maybe?).  I also know from the previous answer that we're dealing with 128-bit AES encryption, and that several records are present in the data.data file and the data must be extracted into it's own file for decryption, but no matter how I try to use the key I can't get decryption to work.How does one use all this information to decrypt?
Reading data.data/NSCR1000 files in macOs
decryption;osx