on page 11 of the security white paper, there is a diagram illustrating the key hierarchy.

i believe that 'Hardware Key' refers to the UID. if this is the case, then learning the UID + user passcode gives you the root keys, from which you can decrypt the remaining key hierarchy until you reach the decrypted files.