Later I discovered that the same salt value is also shared among all the vendors: SanDisk, Sony and Lexar
Eww…
This analysis shows again that it is difficult to roll a custom cryptographic algorithm