Many interesting comments in this thread -- thanks, everyone! But a related question: how to handle long-term usage? I mean, I had some scripts which were ess

Many interesting comments in this thread -- thanks, everyone! But a related question: how to handle long-term usage? I mean, I had some scripts which were essentially using "openssl enc -bf -salt" and this has worked fine for more than a decade. But at some point (I think when OpenSSL went from 1.1.0 to 1.1.1), OpenSSL started generating a warning about "deprecated key derivation" and suggesting "using -iter or -pbkdf2". Now, I can obviously update the scripts, but then the need to start storing metadata arises: this file was encrypted with this method, but this one with the other method. I am confident that such issues arise with any long-running process. How to cope with the issue?