After several searches, what worked is:
- Check the key signatures: cat .ecryptfs/Private.sig
- Try to remember the password, and
ecryptfs-unwrap-passphrase .ecryptfs/wrapped-passphrase
- With the result, do
echo $UNWRAPPED |ecryptfs-add-passphrase --fnek -
If the result of ecryptfs-add matches the Private.sig, mount the disk with the magic command:
mount -i -t ecryptfs -o ecryptfs_sig=$FIRST_ID,ecryptfs_fnek_sig=$SECOND_ID,ecryptfs_cipher=aes,ecryptfs_key_bytes=16 .Private/ $DEST