When moving from ASA 8.0.3 to 12.0.1, I'm also moving from simple to strong encryption. That works fine for the database files (i.e. .db and .log) simply by unloading into a database created with DBINIT -ea -ek.

However, as I'm using SQL Remote and have a bunch of old v8 offline logs, I have to encrypt these old logs, too. And that's where I'm totally stuck:

1. Trying to use CREATE ENCRYPTED FILE with v12 doesn't work: It tells me (with error -895) that the log has been created with a different software version and cannot be used with v12. - Alright, that's the pre-v10 old file format problem, I guess.
2. Trying to use CREATE ENCRYPTED FILE with v8 doesn't work, either: It tells me that the file is already encrypted (which is partly true - it's obfuscated, aka simple encryption). And
3. So I tried to decrypt the log files beforehand with CREATE DECRYPTED FILE with v8. But that doesn't seem to work, either, as there's no syntax to specify that only simple encryption is used.

So how can I change the old v8 logs from simple to strong encryption?

(Sidenote: That does not feel like simple encryption at all...)