you don't actually need to do a force erase no more, just do the unlock command and it should be unbricked
I got bricked by 2.3b so the password is different now. Probably easier to just erase and then reflash than it is to figure out all the details this time. I'm pretty sure they're using CBC encrypt this time so you can't just generate an xor pad.