Current script returns:

*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.

Why not using openssl defaults? Ending up with:

decrypted_keyfile=$(echo "$encrypted_keyfile" | openssl enc -base64 -d -salt -k "$openssl_passphrase")