openssl: WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be better.

elasticdog / transcrypt

transparently encrypt files within a git repository

MIT License

1.46k stars 102 forks source link

openssl: WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be better. #169

Closed njfamirm closed 1 year ago

njfamirm commented 1 year ago

hi when I'm update openssl to latest

λ openssl version
LibreSSL 3.3.6

λ transcrypt --version
transcrypt 2.2.3

and when I'm use transcrypt, have this warning in cli

*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.

how can fix this?

https://www.phind.com/search?cache=2644031a-8c01-4f24-8ba8-60bdc30e9aba

njfamirm commented 1 year ago

please help me!

jmurty commented 1 year ago

Hi @njfamirm the warning message is from OpenSSL, you can ignore those messages because transcrypt will still work fine. It just isn't using the strongest encryption algorithm it could.

This is a known issue. Removing those warnings requires a new encryption approach to use the PBKDF2 algorithm, which we are working on, but slowly. See related issues #55, #59, #134 and a few pull requests where we are working on it.