And another award to ghidra, for confirming that it was actually AES-128-ECB inside the JNI function, despite the Java code calling it by the old name "Rijndael"
Shout out to Frida, the dynamic instrumentation tool kit, for making it possible to transfer Kobo books to my reMarkable tablet. https://frida.re/