older openssl versions do not support -nosalt (but also do not
complain about it). So we pre-generate key/iv for all the existing
textual keys (equalling the file size) on a new openssl and
use those.