Signal database password on Android

[undeath]

Usually the hash output is used as a key for the encryption. Having the hash in the file would mean the AES key is in the file which they are very likely not doing. Hence you have to use the pbkdf2 result as AES key and decrypt the data (at least in parts) and verify it's what you expect.