Node.js: Crypto Gets a Major Overhaul
Node's crypto module saw its biggest coordinated push in recent memory—new MAC APIs, provider-based cipher and hash discovery, spec-aligned WebCrypto errors, and faster brand checks—while a separate cluster of PRs chased down test flakiness across platforms.
Duration: PT3M
Episode overview
This episode is a short developer briefing from Node.js.
It explains recent repository work in plain language.
- Show: Node.js
- Published: 2026-08-26T13:05:37Z
- Audio duration: PT3M
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good day. It's August 26th, and here's your Node dot js briefing.
The clear story today is crypto. Filip Skokan and collaborators landed a wave of changes that reshape how Node discovers and validates cryptographic primitives. Commits from Skokan now enumerate ciphers and hashes directly from active OpenSSL providers instead of hand-maintained lists—unlocking algorithms like SM4…
The second theme is test reliability. Several PRs target flaky and racy tests directly: PR 65562 marks platform-specific failures—like runner coverage on Windows and AIX, and WASI tests on macOS—as known-flaky based on CI reliability data. PR 65554 fixes a race in fast-utf8-stream tests where reads happened before…
A few individual fixes are worth flagging: PR 65544 stops child_process from silently dropping stdio and arguments when Array prototype is polluted, PR 65559 resolves a pipeline deadlock when the final entry is a function, and PR 65547 fixes a Docker VirtioFS permission error in recursive file copy.
Expect crypto API surface and error semantics to shift further as documentation and benchmarks land for the new MAC API. Test suite stability should also improve as flaky markers and shared helpers…
That…
Nearby episodes from Node.js
- Hardening Native Boundaries and Cutting File System Overhead
- Performance Tuning Across the Stack
- Weekly Recap - Performance Tuning Across the Core
- The File System Gets a Performance Overhaul
- Crypto Cleanup and Feature Flags Grow Up
- Hardening Pass Across Permissions, SQLite, and Crash Fixes
- Performance Tuning and FFI Hardening
- String Encoding Gets a Speed Overhaul, Plus a Cleanup Push