openssl: WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be better.

Question

openssl: WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be better.

njfamirm opened this issue a year ago · 2 comments

hi
when I'm update openssl to latest

λ openssl version
LibreSSL 3.3.6

λ transcrypt --version
transcrypt 2.2.3

and when I'm use transcrypt, have this warning in cli

*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.

how can fix this?

https://www.phind.com/search?cache=2644031a-8c01-4f24-8ba8-60bdc30e9aba

Answer 1 · 2023-07-15T10:44:13.000Z

please help me!

Answer 2 · 2023-07-16T01:01:40.000Z

Hi @njfamirm the warning message is from OpenSSL, you can ignore those messages because transcrypt will still work fine. It just isn't using the strongest encryption algorithm it could.

This is a known issue. Removing those warnings requires a new encryption approach to use the PBKDF2 algorithm, which we are working on, but slowly. See related issues #55, #59, #134 and a few pull requests where we are working on it.