 the extra &quot;graphical&quot; characters in the 0x80-0x9F range).</p>

</li>
</ol>

<p>OpenSSL versions older than 1.1.0 do variant 2 only, and that is the reason why OpenSSL still does this, to be able to read files produced with older versions.</p>

<p>It should be noted that this approach isn&#39;t entirely fault free.</p>

<p>A pass phrase encoded in ISO-8859-2 could very well have a sequence such as 0xC3 0xAF (which is the two characters &quot;LATIN CAPITAL LETTER A WITH BREVE&quot; and &quot;LATIN 