dd_rescue-1.99.12 works with openssl-3.0 by using EVP_Cipher_Init() to set the IV. This works against openssl-1.1 as well. However, performance of -3.0 is much worse, so I keep building against -1.1. Will submit package to Factory later today.