How to recover WiFi passwords from ''iPad''? I suppose WiFi passwords are encrypted and stored in file "keychain.plist". How to decrypt them?
Did you try UFED Physical Analyzer.
As I recall, we do recover WiFi passwords, although I am not sure they are indeed encrypted as you said
UFED Physical Analyzer recovers only list of used WiFi networks (from file ''com.apple.wifi.plist'') without passwords.
In "keychain.plist" file stored WiFi passwords are not in plain text, so should be encrypted.
Tis is part of "keychain.plist" file with intresting me WiFi network
<dict>
<key>acct</key>
<string>Beta-telecom</string>
<key>agrp</key>
<string>apple</string>
<key>pdmn</key>
<string>dk</string>
<key>svce</key>
<string>AirPort</string>
<key>v_Data</key>
<data>
AAAAAAgAAAD7KWe************************
****************VkpE+miq2J0OQKe7WQ==
</data>
<key>v_PersistentRef</key>
<data>
Z2*********Bs
</data>
</dict>