decoder
It's a usable version now, with some open enhancement issues. The suggested name was changed from "decode_passwords" to "decoder".
Any future version should be backward-compatible with this one, only a few new/additional options for the 'decode_export' applet are expected (and more applets -> look into the planned enhancements).
The shell script files are only left-over to show the principles. You should prefer a binary file compiled from the C sources in the 'src' subdirectory - this is much faster than any shell script.
This version uses the AES and MD5 implementations from Nettle (https://www.lysator.liu.se/~nisse/nettle/, version 3.3), but you may build a version using OpenSSL's crypto library, as long as you don't want to get a (full) statically linked binary.