How to Solve: Warning: Deprecated Key Derivation Used. Using -Iter or -Pbkdf2 Would Be Better

I am using OpenSSL version 1.1.1b (26 Feb 2019) to encrypt/decrypt files.

Everything is working fine but I am getting a Warning I do not understand.

openssl enc -d -aes-256-cbc -a -pass pass:$pwd -in $file

*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.

Can anyone explain to me what is it about and how to solve it?

2 Answers

The file was probably encrypted by LibreSSL (using Mac?) and you are decrypting it with OpenSSL (Linux).

You don't face this problem if you encrypt and decrypt using LibreSSL for both.

1

The warning is happening due to improvements since version 1.1.0 of OpenSSL, (and was already explained a few months before in this answer)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Sarah Jenkins

Sarah Jenkins

Senior Technology Editor & AI Specialist

Sarah Jenkins is a veteran tech journalist with over 12 years of experience covering artificial intelligence, mobile innovations, and digital ethics. Her insights have appeared in leading technology publications worldwide.

Share this article
Twitter Facebook Pinterest